Kong has released Gateway 3.10, bringing WebAssembly-based plugins to production status and expanding the language choices for Kong plugin developers.
Wasm Plugins GA
Previously in tech preview, Proxy-Wasm-based plugins are now GA. Plugins compile to WebAssembly from Rust (proxy-wasm-rust-sdk), Go (proxy-wasm-go-sdk), or AssemblyScript, and run in a sandboxed V8 or Wasmtime engine with guaranteed isolation and predictable resource usage.
Performance Benchmarks
Wasm plugins show a 15-20% overhead compared to built-in Lua plugins but eliminate the attack surface of shared Lua VM state. Most real-world plugins (rate limiting, auth transforms, logging) are I/O-bound, so the practical impact on latency is negligible.
Plugin Marketplace
Kong Hub now categorizes community Wasm plugins separately, with signed artifacts and SBOMs for each release. Kong Enterprise customers can run private Wasm plugin repositories.
