Talk tech with tips and tutorials from builders at Kong and the Kong Community.
A critical and challenging requirement for many organizations is meeting audit and compliance obligations. The goal of compliance is to secure business processes, sensitive data, and monitor for unauthorized activities or breaches. AWS CloudTrail Lake now enables customers to record user…
[](/blog/engineering/aws-cloudtrail-lake-isv-launch-partner)
Viktor Gamov also contributed to this post. In recent decades it's become common for communication between backend services to employ HTTP APIs with JSON payloads. Many HTTP APIs adhere (or at least aspire) to REST Principles, though many fall into a category we'll call "REST-like". Some…
[](/blog/engineering/building-grpc-apis-with-rust)
Kong’s open-source API Gateway is a highly successful project with over 33k stars on GitHub and 293 contributors. Kong provides a powerful platform that can be extended using hundreds of plugins provided by Kong, ecosystem partners, and the community. Kong’s Enterprise subscription provides an…
[](/blog/engineering/how-and-why-to-migrate-from-kong-open-source-to-kong-enterprise-api-gateway)
Kuma is configurable through policies. These enable users to configure their service mesh with retries, timeouts, observability, and more. Policies contain three main pieces of information: Which proxies are being configured What traffic for these proxies this configuration applies to (i.e:…
[](/blog/engineering/flexible-policy-match-in-kuma-2-0)
IBM recently announced the deprecation of its Cloud API Gateway, a service used to create and manage APIs by placing a gateway in front of existing IBM Cloud endpoints. With this move, IBM Cloud Functions and IBM Cloud Foundry are no longer able to use Cloud API Gateway service for rate limiting,…
[](/blog/engineering/ibm-cloud-api-gateway-migration)
What is SAML? Security Assertion Markup Language (SAML) is an XML-based open standard that allows organizations to set up single sign-on (SSO) across multiple websites and applications. SAML 2.0 is the latest standard, and was ratified in March 2005, replacing SAML 1.1. We’ll refer to SAML as…
[](/blog/engineering/configure-saml-2-0-single-sign-on-with-kong-enterprise)
As an application developer, have you ever had to troubleshoot an issue that only happens in production? Bugs can occur when your application gets released into the wild, and they can be extremely difficult to debug when you cannot reproduce without production data. In this blog, I am going to show…
[](/blog/engineering/debugging-applications-in-production-with-service-mesh)
In the Dev Portal world, offering users the ability to use their own domain is a milestone on our way to fully customized Dev Portals. Since Konnect-hosted portals are fronted by a Kong gateway, we looked to use our own plugins to achieve this feature. The ACME plugin is an open-source Kong plugin…
[](/blog/engineering/secure-self-service-custom-domains-for-dev-portals)Observability is a critical part of Kong's API Gateway . In this post, we'll describe two options to monitor Kong Gateway using Prometheus. Prometheus is an open source system monitor toolkit built at SoundCloud that is now widely adopted. StatsD was originally a simple daemon developed by Etsy to…
[](/blog/engineering/how-to-use-prometheus-to-monitor-kong-gateway)In order to accomplish this task, we’re going to be running Kong Gateway in Kubernetes and using two Kong plugins. If you don’t already have an instance of Kong running in a Kubernetes cluster, connect to your cluster and run the following the commands to get one in seconds. See how to install Kong…
[](/blog/engineering/transforming-kong-logs-for-ingestion-into-your-observability-stack)
A common use case that is frequently requested is how to dynamically route requests based on authentication attributes. An example of this technique is routing requests to relevant upstream services based on claims contained in a JWT token. Admins would like all their clients to go to the same URI…
[](/blog/engineering/dynamic-routing-jwt-tokens-claim-with-kong-konnect)
As infrastructure becomes more and more distributed, building better observability around it is becoming crucial. With the emergence of microservices architecture, teams want to gain better visibility with proper observability built into the architecture. In this blog post, we’ll explain how we…
[](/blog/engineering/end-to-end-observability-in-konnect)
Many of Kong’s features rely on timers, such as caching, DNS, and health checks. Kong also runs some async tasks using the timer, such as the rate-limiting plugin, which connects to the database using the timer to make the request finish quickly. As Kong’s user population grows, so does the…
[](/blog/engineering/scalable-timer-library)
When seemingly random test failures happen, it can be tempting to simply run again and move on. But, as the following example shows, it can be important to not overlook potential issues without investigating to determine the cause of the symptom. In the case of our story, by digging a little deeper…
[](/blog/engineering/troubleshooting-a-journey-into-the-core)
In today's cloud ecosystem the demands for high functioning and high performance observability, security and networking functionality for applications and their network traffic are as high as ever. Historically a great deal of this kind of functionality has been implemented in userspace, but the…
[](/blog/engineering/writing-an-ebpf-xdp-load-balancer-in-rust)Secure your AI infrastructure with prompt guards, PII sanitization, and centralized governance. Control LLM costs with token-based rate limiting and semantic routing across providers.