Talk tech with tips and tutorials from builders at Kong and the Kong Community.
Like many developers and operations professionals, you may have had complicated experiences with security and certificates (encryption of the connection and authentication). Maybe so much so that you try to avoid working on them whenever possible. If you're looking for a simpler way, Kong may be…
[](/blog/engineering/mutual-tls-api-gateway)
Here's a story about a developer surviving in a world of APIs, Kubernetes and rapid application modernization. Meet Josh (a pseudonym). Josh is your typical developer. He's good at writing code in his native language, hates documentation and REALLY hates the "drag and drop" approach to developing…
[](/blog/engineering/rapid-application-modernization)
In this episode of Kongcast , I spoke with Jason Yee , director of advocacy at Gremlin , about the concept of chaos engineering, why even the best engineers can't control everything, and tools and tactics to help build app resiliency. Check out the transcript and video from our conversation below,…
[](/blog/engineering/gremlin-chaos-engineering)
Before exposing your company's APIs, your highest priority should be to assure the API security , governance and reliability of that architecture. To do so, you'll need to use an API gateway as a single secure entry point for API consumers rather than allowing direct access to APIs. Kong Gateway…
[](/blog/engineering/api-platform-security)
This year, we hosted our inaugural Kong Summit Hackathon . This virtual competition engaged our open source community and offered recognition and prizes for hacks in various categories. The community delivered with ingenious plugins, hacks and documentation. This blog post highlights our Kong…
[](/blog/engineering/api-bandwidth-limit)
If you've been online at all this week, chances are that you've heard about the Log4Shell zero-day ( CVE-2021-44228 ) in Log4J, a popular Java logging library. The vulnerability enables Remote Code Execution (RCE), which allows attackers to run arbitrary code on the target's machines. I know the…
[](/blog/engineering/log4j-log4shell)
As more companies invest in a cloud native infrastructure , they're choosing to prioritize their applications as microservices —architecting them into distinct servers. Each component is responsible for one (and only one) feature. For example, you might have Server A responsible for handling…
[](/blog/engineering/insomnia-rest)
As part of the Kong Gateway 2.6 release, we shipped a brand new jq plugin for anyone with an enterprise license to use. It’s like we combined the request and response transformer plugins to form a single, more powerful plugin—supercharging the way we work with request and response bodies. If you're…
[](/blog/engineering/jq-plugin)
At Kong, we run performance testing in CI in every commit or pull request that has a potential performance impact, as well as on each release. Thanks to the performance testing framework and its integration with Github Actions, we can easily get basic metrics like RPS and latency. Also, flame…
[](/blog/engineering/kong-gateway-performance)
The Neosec platform integrates with Kong Gateway Enterprise, an API Management Solution , to provide automated and continuous API discovery, API risk posture alerting and API protection through behavioral analytics and response automation. And it does all that while being out of band, using the…
[](/blog/engineering/neosec)
Earlier this year, we hosted our inaugural Kong Summit Hackathon . This virtual competition engaged our open source community and offered recognition and prizes for hacks in various categories. The community delivered with ingenious plugins, hacks and documentation. In this blog post, we highlight…
[](/blog/engineering/insomnia-dynamic-signatures)
We love abstractions. We want to make things easier for developers, teams and end users. In doing that, sometimes we build things a little bit too complex for those who don't already understand the pain points for which the abstraction layers were built. Kubernetes is an example of this; it solves…
[](/blog/engineering/kubernetes-ingress-pulumi)
After you've built your microservices -backed application, it's time to deploy and connect them. Luckily, there are many cloud providers to choose from, and you can even mix and match. Many organizations, like Australia Post , are taking the mix-and-match approach, embracing a multi-cloud…
[](/blog/engineering/multi-cloud-api-gateway)
A developer portal is a storefront to your APIs (the products) that internal and external developers are trying to consume. The Kong Developer Portal provides a single source of truth for all developers to locate, access and consume services. With intuitive content management for documentation,…
[](/blog/engineering/customize-kong-developer-portal)
Have you ever found yourself in a situation where all your service mesh services are running in Kubernetes, and now you need to expose them to the outside world securely and reliably? Ingress management is essential for your configuration and operations when exposing services outside of a cluster.…
[](/blog/engineering/istio-gateway)