Kong Event Gateway

A Kafka proxy for controlled, secure client access to your Kafka cluster—both internal and external.

Introducing Kong Event Gateway

Kong Event Gateway is a lightweight, fast, and flexible cloud-native event streaming proxy. It sits between Kafka clients and backend Kafka clusters.

With its extensible policy engine, you can adapt Kafka to your requirements-transforming, encrypting, and monitoring messages through a central proxy to add governance, enable multi-tenancy, and strengthen security.

Kong Event Gateway runs in front of any Kafka cluster and can be extended through policies.

Diagram of how Kong Gateway works

Install Event Gateway

You can configure Event Gateway using Konnect.

Before deploying Event Gateway, ensure that you have a Kafka cluster.

You can use the quickstart script to get a demo instance of Event Gateway running almost instantly.

This command requires a Konnect Access Token.

curl -Ls https://get.konghq.com/event-gateway | bash -s -- -k $KONNECT_TOKEN

Copied!

The script creates an Event Gateway control plane in Konnect and deploys a local data plane using Docker.

All licensing is handled automatically by Konnect.

Get started with Kong Event Gateway

Deploy Event Gateway in Konnect

Configure a control plane and launch a Kong Event Gateway data plane through Konnect in minutes

Set up Event Gateway in Konnect →

Try the Getting Started guide

Set up a data plane, configure backend cluster, create virtual cluster, set up a listener, and apply policies

Get started →

Understand core concepts

Learn about how Event Gateway works, including its architecture and key entities

Learn about Event Gateway →

Event Gateway policy hub

See all available virtual cluster and listener policies for Kong Event Gateway

See all policies →

Kong Event Gateway in the Konnect UI

Konnect lets you manage, connect to, and monitor the status of all Kong Event Gateway control planes (CPs) and data plane nodes (DPs) in one place.

Key features include:

Manage control planes and their configurations
Deploy and monitor data plane nodes
Find backend clusters, virtual clusters, listeners, and resources directly in a control plane’s sidebar
Create and manage policies through the Virtual Clusters and Listeners sections

$Virtual Clusters in the {{site.konnect_short_name}} UI$

Kong Event Gateway entities

Backend clusters

Physical Kafka clusters that are proxied by Event Gateway

Learn about backend clusters →

Virtual clusters

Core abstraction for client isolation when connecting to the same backend cluster

Learn about virtual clusters →

Listeners

Network interfaces for Kafka client connections

Learn about listeners →

Policies

Control how Kafka protocol traffic is modified between the client and the backend cluster

Learn about policies →

Tools to manage Kong Event Gateway

Konnect UI: Manage Event Gateway entities within Konnect control planes using a UI.
Control Plane API: Manage Event Gateway entities within Konnect control planes via an API.
Terraform: Manage infrastructure as code and automated deployments to streamline setup and configuration of Konnect and Kong Event Gateway.

Key references

Authentication

Flexible authentication for both virtual cluster client connections and backend cluster access

Authentication for backend clusters → Authentication for virtual clusters →

Hostname mapping

Map gateway servers to upstream Kafka brokers using port mapping or SNI routing

Understand hostname mapping →

Expressions language reference

Learn about the expressions language used in Kong Event Gateway for conditional fields

Expressions language reference →

API reference

Explore the reference documentation for all Kong Event Gateway APIs

Event Gateway API reference →

Data plane configuration reference

Explore the reference documentation for all Kong Event Gateway data plane configuration parameters

Data plane configuration reference →

Entities and resources

See all the entities that make up Kong Event Gateway and its ecosystem

See reference →

Frequently asked questions about Kong Event Gateway

How is Kong Event Gateway deployed?

The Kong Event Gateway data planes are self-managed and deployed by you, the user. The Kong Event Gateway control plane is part of the Kong Konnect platform.

Does Kong Event Gateway run on-prem?

No, Kong Event Gateway is only available through the Kong Konnect platform.

Can I proxy multiple Kafka clusters?

Yes, the gateway can proxy multiple backend clusters, though only one can currently be proxied in a single client connection.

Looking for HTTP over Kafka? Check out the Kong Gateway protocol mediation plugins.