Geographic regions

Konnect allows you to host and operate your cloud instance in a geographic region that you specify. This is important for data privacy and regulatory compliance for you organization.

Geographic regions allow you to operate Konnect in the same region as your users and their infrastructure.

Certain objects, like Consumers and Gateway Services, inside your Konnect instance are geo-specific. This means that if you create one of these objects in an instance of Konnect that is deployed in a particular geo, that object won’t exist in a different geo.

Only authentication, billing, and usage is shared between Konnect geos.

The following objects are geo-specific:

• Gateway Services
• Routes
• Consumers
• API products
• Application registration
• Dev portals
• Metering & Billing end user data
• Service meshes and mesh zones
• Custom teams and roles

Control planes

Konnect Control Planes support the following geos:

• AU (Australia)
• EU (Europe)
• ME (Middle East)
• US (United States)
• IN (India)

• SG (Singapore)

  Note: A Konnect org admin must opt-in to the Singapore region by selecting the geo in the region picker and then opting in.

Dedicated Cloud Gateways

Konnect Dedicated Cloud Gateways support the following geos:

AWS

• North America:
  • Ohio (us-east-2)
  • Oregon (us-west-2)
  • N. Virginia (us-east-1)
  • N. California(us-west-1)
  • Montreal (ca-central-1)
• Europe:
  • Frankfurt (eu-central-1)
  • Ireland (eu-west-1)
  • London (eu-west-2)
  • Paris (eu-west-3)
  • Zurich (eu-central-2)
• Asia Pacific:
  • Tokyo (ap-northeast-1)
  • Singapore (ap-southeast-1)
  • Sydney (ap-southeast-2)
  • Mumbai (ap-south-1)
  • Hyderabad (ap-south-2)
  • Seoul (ap-northeast-2)
• Middle East, and Africa
  • United Arab Emirates (me-central-1)

Dedicated Cloud Gateways support the following AWS regions and Availability Zones (AZ) for AWS resource endpoints:

Azure

• North America:
  • Virginia (eastus2)
  • Washington (westus2)
• Europe:
  • Frankfurt (germanywestcentral)
  • UK South (uksouth)
  • Ireland (northeurope)
  • France (francecentral)
• Asia Pacific:
  • Australia East (australiaeast)

Google

• North America:
  • South Carolina (us-east1)
  • Iowa (us-central1)
  • Oregon (us-west1)
  • Montreal (northamerica-northeast1)
• Europe:
  • Belgium (europe-west1)
  • London (europe-west2)
  • Frankfurt (europe-west3)
• Asia Pacific:
  • Tokyo (asia-northeast1)
  • Singapore (asia-southeast1)
  • Mumbai (asia-south1)
  • Sydney (australia-southeast1)

Customer-Managed Encryption Keys (CMEK) region mapping

Konnect supports Customer-Managed Encryption Keys (CMEK), allowing you to use your own symmetric key stored in AWS Key Management Service (KMS) to encrypt a pre-determined set of sensitive data.

A CMEK must be replicated to all AWS regions that make up a Konnect region.

The following table describes which AWS regions map to each Konnect geo: