Talk tech with tips and tutorials from builders at Kong and the Kong Community.
Red Hat OpenShift is the industry's leading enterprise Kubernetes platform that runs ubiquitously across on-prem, and the cloud. With Red Hat OpenShift Service on AWS (ROSA) , a managed Red Hat OpenShift platform that runs natively on AWS, it is even easier to get kick-started on an…
[](/blog/engineering/apisecops-tutorial)
Developers will remember times when they were trying to figure out why something they were working on wasn’t behaving as expected. Hours of frustration, too much (or perhaps never enough) caffeine consumed, and sotto voce curses uttered. And then — as if by fate — the issue is narrowed down to a…
[](/blog/engineering/debugging-kong-requests)
In this post, we'll talk about what API SecOps is, including the fundamentals of it and the personas involved. Then, we'll discuss how API, microservice, and policy lifecycles integrate to produce a secure service in production, and why collaboration and API-First Design are essential for APISecOps…
[](/blog/engineering/apisecops)
A critical and challenging requirement for many organizations is meeting audit and compliance obligations. The goal of compliance is to secure business processes, sensitive data, and monitor for unauthorized activities or breaches. AWS CloudTrail Lake now enables customers to record user…
[](/blog/engineering/aws-cloudtrail-lake-isv-launch-partner)
Viktor Gamov also contributed to this post. In recent decades it's become common for communication between backend services to employ HTTP APIs with JSON payloads. Many HTTP APIs adhere (or at least aspire) to REST Principles, though many fall into a category we'll call "REST-like". Some…
[](/blog/engineering/building-grpc-apis-with-rust)
Kong’s open-source API Gateway is a highly successful project with over 33k stars on GitHub and 293 contributors. Kong provides a powerful platform that can be extended using hundreds of plugins provided by Kong, ecosystem partners, and the community. Kong’s Enterprise subscription provides an…
[](/blog/engineering/how-and-why-to-migrate-from-kong-open-source-to-kong-enterprise-api-gateway)
Kuma is configurable through policies. These enable users to configure their service mesh with retries, timeouts, observability, and more. Policies contain three main pieces of information: Which proxies are being configured What traffic for these proxies this configuration applies to (i.e:…
[](/blog/engineering/flexible-policy-match-in-kuma-2-0)
IBM recently announced the deprecation of its Cloud API Gateway, a service used to create and manage APIs by placing a gateway in front of existing IBM Cloud endpoints. With this move, IBM Cloud Functions and IBM Cloud Foundry are no longer able to use Cloud API Gateway service for rate limiting,…
[](/blog/engineering/ibm-cloud-api-gateway-migration)
What is SAML? Security Assertion Markup Language (SAML) is an XML-based open standard that allows organizations to set up single sign-on (SSO) across multiple websites and applications. SAML 2.0 is the latest standard, and was ratified in March 2005, replacing SAML 1.1. We’ll refer to SAML as…
[](/blog/engineering/configure-saml-2-0-single-sign-on-with-kong-enterprise)
As an application developer, have you ever had to troubleshoot an issue that only happens in production? Bugs can occur when your application gets released into the wild, and they can be extremely difficult to debug when you cannot reproduce without production data. In this blog, I am going to show…
[](/blog/engineering/debugging-applications-in-production-with-service-mesh)
In the Dev Portal world, offering users the ability to use their own domain is a milestone on our way to fully customized Dev Portals. Since Konnect-hosted portals are fronted by a Kong gateway, we looked to use our own plugins to achieve this feature. The ACME plugin is an open-source Kong plugin…
[](/blog/engineering/secure-self-service-custom-domains-for-dev-portals)Observability is a critical part of Kong's API Gateway . In this post, we'll describe two options to monitor Kong Gateway using Prometheus. Prometheus is an open source system monitor toolkit built at SoundCloud that is now widely adopted. StatsD was originally a simple daemon developed by Etsy to…
[](/blog/engineering/how-to-use-prometheus-to-monitor-kong-gateway)As a Solutions Engineer here at Kong, one question that frequently comes across my desk is “how can I transform a Kong logging plugin message into a format that my insert-observability-stack-here understands, (e.g., ELK, Loki, Splunk, etc.)?” In this blog, I’m going to show you how to easily…
[](/blog/engineering/transforming-kong-logs-for-ingestion-into-your-observability-stack)
A common use case that is frequently requested is how to dynamically route requests based on authentication attributes. An example of this technique is routing requests to relevant upstream services based on claims contained in a JWT token. Admins would like all their clients to go to the same URI…
[](/blog/engineering/dynamic-routing-jwt-tokens-claim-with-kong-konnect)
As infrastructure becomes more and more distributed, building better observability around it is becoming crucial. With the emergence of microservices architecture, teams want to gain better visibility with proper observability built into the architecture. In this blog post, we’ll explain how we…
[](/blog/engineering/end-to-end-observability-in-konnect)