I once heard someone say, "What the cloud migration strategies lack at the moment is a methodology to Lift-and-Shift connections to the cloud." Let's digest that.
In today's landscape, maintaining a competitive edge and delivering a high-quality customer experience is becoming synonymous with migrating to the cloud. As of 2022, 57% of organizations are migrating more workloads to the cloud.
A typical decision in the cloud migration strategy is to containerize existing workloads when possible and adopt Kubernetes as the platform of choice. However, to fully reap the benefits of the cloud requires more than just lifting-and-shifting monolithic workloads to Kubernetes. It requires a migration and modernization strategy that can work at scale by simultaneously supporting legacy workloads, modernization efforts to re-architect to microservices, and greenfield development.
The unintended consequence of many cloud migrations is the overhead of managing the connectivity of application states that become distributed across on-prem and the cloud (i.e., the hybrid cloud paradigm).
Here we want to introduce the Crawl/Walk/Run Cloud Migration Strategy, which uses Kong Konnect and Kong Mesh as the underlying technologies. It will support any cloud migration transformation strategy to Kubernetes or ECS at scale.
The purpose is to offer a powerful networking solution that is both sustainable and flexible.
The migration strategy provides a solid platform to support any tech decision related to modernization and move-to-cloud strategy — Kubernetes, ECS, and EC2.
It prescribes how to build a network foundation layer that can support any cloud migration strategy (lift-and-shift, green development, re-architect to microservices), even simultaneously if needed.
This is an approach that allows businesses and the engineering teams to work cohesively to reach the cloud.
So who is this strategy for? It's for product leaders and for engineering leaders that want to reach the cloud.
From a technical perspective, the objective is to create a cross-platform logical network topology that allows VM-based applications and cloud-based applications to easily communicate.
Kong Mesh natively supports creating a distributed mesh network that spans on-prem monolith services and microservices in Kubernetes.
Kong Konnect natively supports multi-platform deployments and Kong Mesh to offer north-south security from anywhere including being a part of the mesh network.
An example of the joint solution of Kong Mesh and Kong Konnect is represented with the diagram below:
Kong Mesh
Kong Konnect
Once the networking foundation is in place, the same traffic management features offered by all service mesh technologies still apply to the mesh network being managed by Kong Mesh.
As a result, the same L4 and L7 traffic routing capabilities can now be used to retire monolithic APIs one at a time and redirect traffic to new microservices.
But, it's important to note, the routing decision is not made by the gateway; it's made by Kong Mesh. In other words, the migration process is abstracted, from the gateway perspective, by the mesh. Gateway is responsible for enforcing mesh-wide north/south security-related policies.
Introducing technologies into an organization is extremely daunting. We often bite off more than we can chew. So we developed a three-phased approach that allows organizations to incrementally build out the network foundation.
The objective of the Crawl phase is to control the exposure of the entire application regardless of where the application will be deployed. There should be no major changes to the monolith or to the functionality that an API consumer experiences.
Check out A Crawl/Walk/Run Strategy – Part 1: Crawl on YouTube for more details.
In the Walk phase, it's all about setting up the mesh network foundations, teams building out new microservices in the cloud, and preparing for the cutover. These activities (building the mesh and building out microservices) can happen in parallel. At the end of the day, the expectation for an API consumer is that there will be no major changes to the monolithic application's functionality.
Check out A Crawl/Walk/Run Strategy – Part 2: Walk on YouTube for more details.
In the final phase, with the network foundation in place, consisting of both Gateway and Mesh, it’s time to migrate components of the monolith. Using the new platform, expose the new microservice by defining routing policies and pair down the behavior of the monolith. If the rollout is unsuccessful and these changes need to be rolled back, rollback strategies are much easier to handle because the traffic management is centralized to the mesh.
Check out A Crawl/Walk/Run Strategy – Part 3: Run on YouTube for more details.
Check out Marco Palladino, CTO, and Andrew Huffman, Director of Partner Engineering, stepping through the Cloud/Walk/Run strategy live at AWS re:invent 2022.
We've open sourced the tutorial: go ahead and download the GitHub Repository to run through the self-paced tutorial on your own.
Or, check out our three-part video series made to accompany the tutorial on YouTube.
On December 23, 2024, the security research team at CloudSEK completed a year-long investigation of the cloud-based API testing tool Postman. CloudSEK’s findings revealed that more than 30,000 publicly accessible Postman workspaces had been leakin
In this blog post, we'll talk about the significant challenge of managing and governing a growing number of APIs across multiple teams in an organization — and how Control Plane Groups are a clear solution to avoid the chaos of inconsistent policies
Meet Emily. She’s an API product manager at ACME, Inc., an ecommerce company that runs on dozens of APIs. One morning, her team lead asks a simple question: “Who’s our top API consumer, and which of your APIs are causing the most issues right now?”
The healthcare industry is buzzing about FHIR (Fast Healthcare Interoperability Resources). Pronounced “fire,” this widely adopted data standard has been revolutionizing how healthcare information is exchanged. But building a truly modern, secure, a
Behind every smooth user experience is a maze of APIs quietly handling requests, responses, and data flows. This makes APIs critical connectors that enable applications to communicate and share data seamlessly. When these vital conduits fail, the
As enterprises increasingly embed AI and Large Language Models (LLMs) into their digital experiences, enforcing robust AI guardrails becomes paramount to safeguard users, protect data, manage operational costs, and comply with regulatory and ethical
Organizations are going all-in on large language models (LLMs), with research finding 72% anticipate increased LLM spending in the coming year (and about 40% are already investing more than $250,000 USD per year). As enterprises rapidly adopt LLMs
