Redirect: Redirect requests and keep the incoming path - Policy

Redirect requests and keep the incoming path

Redirect requests to a new host and keep the path and query string of the incoming request.

Prerequisites

An existing AI Model, AI Agent, or AI MCP Server to attach the policy to.

Environment variables

REDIRECT_URL: The URL that callers are redirected to.

Set up the policy

kongctl

policy.yaml

Copied!

ai_gateway_policies:
  - ref: redirect-keep-incoming-path
    ai_gateway: !lookup {id: !env AI_GATEWAY_ID}
    name: redirect-keep-incoming-path
    display_name: Redirect requests and keep the incoming path
    type: redirect
    enabled: true
    config:
      location: !env REDIRECT_URL
      keep_incoming_path: true
      status_code: 308
    global: false

Make sure to replace the following placeholders with your own values:

AI_GATEWAY_ID: The id of your AI Gateway.

curl -X POST https://{region}.api.konghq.com/v1/ai-gateways/{AIGatewayId}/policies \
    --header "accept: application/json" \
    --header "Content-Type: application/json" \
    --header "Authorization: Bearer $KONNECT_TOKEN" \
    --data '
    {
      "name": "redirect-keep-incoming-path",
      "display_name": "Redirect requests and keep the incoming path",
      "type": "redirect",
      "enabled": true,
      "config": {
        "location": "'$REDIRECT_URL'",
        "keep_incoming_path": true,
        "status_code": 308
      },
      "global": false
    }
    '

Copied!

Make sure to replace the following placeholders with your own values:

region: Geographic region where your Kong Konnect is hosted and operates.
KONNECT_TOKEN: Your Personal Access Token (PAT) associated with your Konnect account.
AIGatewayId: The id of the AI Gateway.

See the Konnect AI Gateway API reference to learn about region-specific URLs and personal access tokens.

kongctl

policy.yaml

Copied!

ai_gateway_policies:
  - ref: redirect-keep-incoming-path
    ai_gateway: !lookup {id: !env AI_GATEWAY_ID}
    name: redirect-keep-incoming-path
    display_name: Redirect requests and keep the incoming path
    type: redirect
    enabled: true
    config:
      location: !env REDIRECT_URL
      keep_incoming_path: true
      status_code: 308
    global: false

Make sure to replace the following placeholders with your own values:

AI_GATEWAY_ID: The id of your AI Gateway.

curl -X POST https://{region}.api.konghq.com/v1/ai-gateways/{AIGatewayId}/policies \
    --header "accept: application/json" \
    --header "Content-Type: application/json" \
    --header "Authorization: Bearer $KONNECT_TOKEN" \
    --data '
    {
      "name": "redirect-keep-incoming-path",
      "display_name": "Redirect requests and keep the incoming path",
      "type": "redirect",
      "enabled": true,
      "config": {
        "location": "'$REDIRECT_URL'",
        "keep_incoming_path": true,
        "status_code": 308
      },
      "global": false
    }
    '

Copied!

Make sure to replace the following placeholders with your own values:

region: Geographic region where your Kong Konnect is hosted and operates.
KONNECT_TOKEN: Your Personal Access Token (PAT) associated with your Konnect account.
AIGatewayId: The id of the AI Gateway.

See the Konnect AI Gateway API reference to learn about region-specific URLs and personal access tokens.

kongctl

policy.yaml

Copied!

ai_gateway_policies:
  - ref: redirect-keep-incoming-path
    ai_gateway: !lookup {id: !env AI_GATEWAY_ID}
    name: redirect-keep-incoming-path
    display_name: Redirect requests and keep the incoming path
    type: redirect
    enabled: true
    config:
      location: !env REDIRECT_URL
      keep_incoming_path: true
      status_code: 308
    global: false

Make sure to replace the following placeholders with your own values:

AI_GATEWAY_ID: The id of your AI Gateway.

curl -X POST https://{region}.api.konghq.com/v1/ai-gateways/{AIGatewayId}/policies \
    --header "accept: application/json" \
    --header "Content-Type: application/json" \
    --header "Authorization: Bearer $KONNECT_TOKEN" \
    --data '
    {
      "name": "redirect-keep-incoming-path",
      "display_name": "Redirect requests and keep the incoming path",
      "type": "redirect",
      "enabled": true,
      "config": {
        "location": "'$REDIRECT_URL'",
        "keep_incoming_path": true,
        "status_code": 308
      },
      "global": false
    }
    '

Copied!

Make sure to replace the following placeholders with your own values:

region: Geographic region where your Kong Konnect is hosted and operates.
KONNECT_TOKEN: Your Personal Access Token (PAT) associated with your Konnect account.
AIGatewayId: The id of the AI Gateway.

See the Konnect AI Gateway API reference to learn about region-specific URLs and personal access tokens.

kongctl

policy.yaml

Copied!

ai_gateway_policies:
  - ref: redirect-keep-incoming-path
    ai_gateway: !lookup {id: !env AI_GATEWAY_ID}
    name: redirect-keep-incoming-path
    display_name: Redirect requests and keep the incoming path
    type: redirect
    enabled: true
    config:
      location: !env REDIRECT_URL
      keep_incoming_path: true
      status_code: 308
    global: false

Make sure to replace the following placeholders with your own values:

AI_GATEWAY_ID: The id of your AI Gateway.

curl -X POST https://{region}.api.konghq.com/v1/ai-gateways/{AIGatewayId}/policies \
    --header "accept: application/json" \
    --header "Content-Type: application/json" \
    --header "Authorization: Bearer $KONNECT_TOKEN" \
    --data '
    {
      "name": "redirect-keep-incoming-path",
      "display_name": "Redirect requests and keep the incoming path",
      "type": "redirect",
      "enabled": true,
      "config": {
        "location": "'$REDIRECT_URL'",
        "keep_incoming_path": true,
        "status_code": 308
      },
      "global": false
    }
    '

Copied!

Make sure to replace the following placeholders with your own values:

region: Geographic region where your Kong Konnect is hosted and operates.
KONNECT_TOKEN: Your Personal Access Token (PAT) associated with your Konnect account.
AIGatewayId: The id of the AI Gateway.

See the Konnect AI Gateway API reference to learn about region-specific URLs and personal access tokens.

kongctl

policy.yaml

Copied!

ai_gateway_policies:
  - ref: redirect-keep-incoming-path
    ai_gateway: !lookup {id: !env AI_GATEWAY_ID}
    name: redirect-keep-incoming-path
    display_name: Redirect requests and keep the incoming path
    type: redirect
    enabled: true
    config:
      location: !env REDIRECT_URL
      keep_incoming_path: true
      status_code: 308
    global: false

Make sure to replace the following placeholders with your own values:

AI_GATEWAY_ID: The id of your AI Gateway.

curl -X POST https://{region}.api.konghq.com/v1/ai-gateways/{AIGatewayId}/policies \
    --header "accept: application/json" \
    --header "Content-Type: application/json" \
    --header "Authorization: Bearer $KONNECT_TOKEN" \
    --data '
    {
      "name": "redirect-keep-incoming-path",
      "display_name": "Redirect requests and keep the incoming path",
      "type": "redirect",
      "enabled": true,
      "config": {
        "location": "'$REDIRECT_URL'",
        "keep_incoming_path": true,
        "status_code": 308
      },
      "global": false
    }
    '

Copied!

Make sure to replace the following placeholders with your own values:

region: Geographic region where your Kong Konnect is hosted and operates.
KONNECT_TOKEN: Your Personal Access Token (PAT) associated with your Konnect account.
AIGatewayId: The id of the AI Gateway.

See the Konnect AI Gateway API reference to learn about region-specific URLs and personal access tokens.

kongctl

policy.yaml

Copied!

ai_gateway_policies:
  - ref: redirect-keep-incoming-path
    ai_gateway: !lookup {id: !env AI_GATEWAY_ID}
    name: redirect-keep-incoming-path
    display_name: Redirect requests and keep the incoming path
    type: redirect
    enabled: true
    config:
      location: !env REDIRECT_URL
      keep_incoming_path: true
      status_code: 308
    global: true

Make sure to replace the following placeholders with your own values:

AI_GATEWAY_ID: The id of your AI Gateway.

curl -X POST https://{region}.api.konghq.com/v1/ai-gateways/{AIGatewayId}/policies \
    --header "accept: application/json" \
    --header "Content-Type: application/json" \
    --header "Authorization: Bearer $KONNECT_TOKEN" \
    --data '
    {
      "name": "redirect-keep-incoming-path",
      "display_name": "Redirect requests and keep the incoming path",
      "type": "redirect",
      "enabled": true,
      "config": {
        "location": "'$REDIRECT_URL'",
        "keep_incoming_path": true,
        "status_code": 308
      },
      "global": true
    }
    '

Copied!

Make sure to replace the following placeholders with your own values:

region: Geographic region where your Kong Konnect is hosted and operates.
KONNECT_TOKEN: Your Personal Access Token (PAT) associated with your Konnect account.
AIGatewayId: The id of the AI Gateway.

See the Konnect AI Gateway API reference to learn about region-specific URLs and personal access tokens.

After creating the policy, add redirect-keep-incoming-path to the policies array of your AI Model. The tool examples update an existing AI Model with the policy attached: replace the entity configuration in the example with your own, as the update replaces the entire AI Model.

kongctl

model.yaml

Copied!

ai_gateway_models:
  - ref: my-gpt-4o
    ai_gateway: !lookup {id: !env AI_GATEWAY_ID}
    display_name: my-gpt-4o
    name: my-gpt-4o
    type: model
    capabilities:
    - generate
    formats:
    - type: openai
    targets:
    - name: gpt-4o
      provider: my-openai-account
      config:
        type: openai
    config:
      route:
        paths:
        - "/v1"
        model:
          body_param: model
          values:
          - my-gpt-4o
      logging:
        payloads: false
    policies:
    - !ref redirect-keep-incoming-path#name

After creating the policy, add redirect-keep-incoming-path to the policies array of your AI Model. The tool examples update an existing AI Model with the policy attached: replace the entity configuration in the example with your own, as the update replaces the entire AI Model.

curl -X PUT https://{region}.api.konghq.com/v1/ai-gateways/{AIGatewayId}/models/my-gpt-4o \
    --header "accept: application/json" \
    --header "Content-Type: application/json" \
    --header "Authorization: Bearer $KONNECT_TOKEN" \
    --data '
    {
      "display_name": "my-gpt-4o",
      "name": "my-gpt-4o",
      "type": "model",
      "capabilities": [
        "generate"
      ],
      "formats": [
        {
          "type": "openai"
        }
      ],
      "policies": [
        "redirect-keep-incoming-path"
      ],
      "targets": [
        {
          "name": "gpt-4o",
          "provider": "my-openai-account",
          "config": {
            "type": "openai"
          }
        }
      ],
      "config": {
        "route": {
          "paths": [
            "/v1"
          ],
          "model": {
            "body_param": "model",
            "values": [
              "my-gpt-4o"
            ]
          }
        },
        "logging": {
          "payloads": false
        }
      }
    }
    '

Copied!

After creating the policy, add redirect-keep-incoming-path to the policies array of your AI MCP Server. The tool examples update an existing AI MCP Server with the policy attached: replace the entity configuration in the example with your own, as the update replaces the entire AI MCP Server.

kongctl

mcp_server.yaml

Copied!

ai_gateway_mcp_servers:
  - ref: petstore-mcp
    ai_gateway: !lookup {id: !env AI_GATEWAY_ID}
    display_name: Petstore API
    name: petstore-mcp
    type: conversion-listener
    enabled: true
    access:
      acl_attribute_type: consumer
      acls:
        allow: []
      default_tool_acls:
        deny: []
    config:
      url: http://host.docker.internal:8080/api/v3
      route:
        paths:
        - "/petstore"
      logging:
        payloads: false
      server:
        timeout: 60000
    tools:
    - name: get-pets-by-status
      description: Find pets by status
      method: GET
      path: "/petstore/pet/findByStatus"
      parameters:
      - name: status
        in: query
        required: true
        schema:
          type: string
          enum:
          - available
          - pending
          - sold
        description: Status value to filter pets by
    - name: get-pet-by-id
      description: Get pet by ID
      method: GET
      path: "/petstore/pet/{petId}"
      parameters:
      - name: petId
        in: path
        required: true
        schema:
          type: integer
        description: ID of the pet to retrieve
    policies:
    - !ref redirect-keep-incoming-path#name

After creating the policy, add redirect-keep-incoming-path to the policies array of your AI MCP Server. The tool examples update an existing AI MCP Server with the policy attached: replace the entity configuration in the example with your own, as the update replaces the entire AI MCP Server.

curl -X PUT https://{region}.api.konghq.com/v1/ai-gateways/{AIGatewayId}/mcp-servers/petstore-mcp \
    --header "accept: application/json" \
    --header "Content-Type: application/json" \
    --header "Authorization: Bearer $KONNECT_TOKEN" \
    --data '
    {
      "display_name": "Petstore API",
      "name": "petstore-mcp",
      "type": "conversion-listener",
      "enabled": true,
      "policies": [
        "redirect-keep-incoming-path"
      ],
      "access": {
        "acl_attribute_type": "consumer",
        "acls": {
          "allow": []
        },
        "default_tool_acls": {
          "deny": []
        }
      },
      "config": {
        "url": "http://host.docker.internal:8080/api/v3",
        "route": {
          "paths": [
            "/petstore"
          ]
        },
        "logging": {
          "payloads": false
        },
        "server": {
          "timeout": 60000
        }
      },
      "tools": [
        {
          "name": "get-pets-by-status",
          "description": "Find pets by status",
          "method": "GET",
          "path": "/petstore/pet/findByStatus",
          "parameters": [
            {
              "name": "status",
              "in": "query",
              "required": true,
              "schema": {
                "type": "string",
                "enum": [
                  "available",
                  "pending",
                  "sold"
                ]
              },
              "description": "Status value to filter pets by"
            }
          ]
        },
        {
          "name": "get-pet-by-id",
          "description": "Get pet by ID",
          "method": "GET",
          "path": "/petstore/pet/{petId}",
          "parameters": [
            {
              "name": "petId",
              "in": "path",
              "required": true,
              "schema": {
                "type": "integer"
              },
              "description": "ID of the pet to retrieve"
            }
          ]
        }
      ]
    }
    '

Copied!

After creating the policy, add redirect-keep-incoming-path to the policies array of your AI Agent. The tool examples update an existing AI Agent with the policy attached: replace the entity configuration in the example with your own, as the update replaces the entire AI Agent.

kongctl

agent.yaml

Copied!

ai_gateway_agents:
  - ref: kongair-flight-booking-agent
    ai_gateway: !lookup {id: !env AI_GATEWAY_ID}
    display_name: KongAir Flight Booking Agent
    name: kongair-flight-booking-agent
    type: a2a
    access:
      acls:
        allow:
        - internal-teams
    config:
      url: https://booking-agent.internal.kongair.com
      route:
        paths:
        - "/kongair-flight-booking"
      logging:
        payloads: false
        max_payload_size: 1048576
    policies:
    - !ref redirect-keep-incoming-path#name

After creating the policy, add redirect-keep-incoming-path to the policies array of your AI Agent. The tool examples update an existing AI Agent with the policy attached: replace the entity configuration in the example with your own, as the update replaces the entire AI Agent.

curl -X PUT https://{region}.api.konghq.com/v1/ai-gateways/{AIGatewayId}/agents/kongair-flight-booking-agent \
    --header "accept: application/json" \
    --header "Content-Type: application/json" \
    --header "Authorization: Bearer $KONNECT_TOKEN" \
    --data '
    {
      "display_name": "KongAir Flight Booking Agent",
      "name": "kongair-flight-booking-agent",
      "type": "a2a",
      "access": {
        "acls": {
          "allow": [
            "internal-teams"
          ]
        }
      },
      "policies": [
        "redirect-keep-incoming-path"
      ],
      "config": {
        "url": "https://booking-agent.internal.kongair.com",
        "route": {
          "paths": [
            "/kongair-flight-booking"
          ]
        },
        "logging": {
          "payloads": false,
          "max_payload_size": 1048576
        }
      }
    }
    '

Copied!

After creating the policy, add redirect-keep-incoming-path to the policies array of your AI Consumer. The tool examples update an existing AI Consumer with the policy attached: replace the entity configuration in the example with your own, as the update replaces the entire AI Consumer.

kongctl

consumer.yaml

Copied!

ai_gateway_consumers:
  - ref: mobile-app-production
    ai_gateway: !lookup {id: !env AI_GATEWAY_ID}
    display_name: Mobile App - Production
    name: mobile-app-production
    type: api-key
    policies:
    - !ref redirect-keep-incoming-path#name

After creating the policy, add redirect-keep-incoming-path to the policies array of your AI Consumer. The tool examples update an existing AI Consumer with the policy attached: replace the entity configuration in the example with your own, as the update replaces the entire AI Consumer.

curl -X PUT https://{region}.api.konghq.com/v1/ai-gateways/{AIGatewayId}/consumers/mobile-app-production \
    --header "accept: application/json" \
    --header "Content-Type: application/json" \
    --header "Authorization: Bearer $KONNECT_TOKEN" \
    --data '
    {
      "display_name": "Mobile App - Production",
      "name": "mobile-app-production",
      "type": "api-key",
      "policies": [
        "redirect-keep-incoming-path"
      ]
    }
    '

Copied!

After creating the policy, add redirect-keep-incoming-path to the policies array of your AI Consumer Group. The tool examples update an existing AI Consumer Group with the policy attached: replace the entity configuration in the example with your own, as the update replaces the entire AI Consumer Group.

kongctl

consumer_group.yaml

Copied!

ai_gateway_consumer_groups:
  - ref: internal-teams
    ai_gateway: !lookup {id: !env AI_GATEWAY_ID}
    display_name: Internal Teams
    name: internal-teams
    policies:
    - !ref redirect-keep-incoming-path#name

After creating the policy, add redirect-keep-incoming-path to the policies array of your AI Consumer Group. The tool examples update an existing AI Consumer Group with the policy attached: replace the entity configuration in the example with your own, as the update replaces the entire AI Consumer Group.

curl -X PUT https://{region}.api.konghq.com/v1/ai-gateways/{AIGatewayId}/consumer-groups/internal-teams \
    --header "accept: application/json" \
    --header "Content-Type: application/json" \
    --header "Authorization: Bearer $KONNECT_TOKEN" \
    --data '
    {
      "display_name": "Internal Teams",
      "name": "internal-teams",
      "policies": [
        "redirect-keep-incoming-path"
      ]
    }
    '

Copied!

Redirect Policy

Redirect requests and keep the incoming path

Prerequisites

Environment variables

Set up the policy

Attach the policy

Help us make these docs great!

Still need help?