Kong: passive health checks never bring a target back

Passive checks (the circuit breaker) mark a target unhealthy from real traffic, but nothing sends traffic to an unhealthy target - so nothing can ever mark it healthy again. Only an active check can recover one.

• Kong: a custom plugin's shared state is per worker, not per node
• Kong: CORS is a plugin, and letting the upstream also send the headers breaks it
• Kong: the default upstream timeouts are 60 seconds each
• Kong: DB-less mode has no Admin API writes, by design
• Kong: a consumer-scoped plugin only runs after an auth plugin identified the consumer
• Kong: strip_path decides what path the upstream actually receives

---

Run this yourself in the Online Java Compiler, spin up a live REST API in the API Sandbox, or practise with Java interview questions.

Published 2026-08-25

© Java Coding Hub · About · Contact · Privacy · Terms