Harness WAAP

The Harness Web Application & API Protection (WAAP) by Traceable plugin lets Harness WAAP capture a copy of the API traffic, both request and response data, that is flowing through Kong Gateway. The plugin then forwards the data to a locally running Traceable module extension (TME).

Using this data, Harness WAAP is able to create a security posture profile of APIs hosted on Kong Gateway. Based on its findings, the Harness WAAP plugin can also block traffic coming from malicious actors and IPs into Kong Gateway.

Prerequisites

The Harness WAAP plugin requires a Traceable Platform Agent (TPA) to be deployed in your environment. For complete agent deployment instructions, visit the Traceable by Harness docs site.

Install

Once you have deployed a Traceable Platform Agent, you are ready to install the plugin using the LuaRocks package manager:

1. Install the Harness WAAP plugin:

   luarocks install kong-plugin-traceable

   Copied!

2. Update your loaded plugins list in Kong Gateway.

   In your kong.conf, append traceable to the plugins field. Make sure the field isn’t commented out.

   plugins = bundled,traceable

   Copied!

3. Restart Kong Gateway:

   kong restart

   Copied!