Salt Security

The Salt Security Kong deployment is used to capture a mirror of application traffic and send it to the Salt Security Service for analysis. This plugin has low CPU and memory consumption and adds no latency to the application since it doesn’t sit in line with the production traffic. The plugin needs to see unencrypted traffic (after SSL termination) to enable the Salt Security service to perform analysis.

You can install the Salt Security plugin for Kong Gateway via Luarocks.

Prerequisites

Obtain the plugin .rock file from your Salt Security distributor.

Install

You can install the Salt Security plugin via LuaRocks. A Lua plugin is distributed in .rock format, which is a self-contained package that can be installed locally or from a remote server.

1. Install the Salt Security plugin:

   luarocks install kong-plugin-salt-agent-0.1.0-1.all.rock
   

2. Update your loaded plugins list in Kong Gateway.

   In your kong.conf, append salt-agent to the plugins field. Make sure the field isn’t commented out.

   plugins = bundled,salt-agent
   

3. Restart Kong Gateway:

   kong restart