Talk tech with tips and tutorials from builders at Kong and the Kong Community.
We looked at service design considerations in the first part of this blog series . In this next part, I'd like to share some best practices for API versioning - a topic that comes up quite often with every customer as it is one of the key concerns when implementing API gateways . There…
[](/blog/engineering/service-design-guidelines-api-versioning)
Containerization and orchestration are becoming increasingly popular. According to a recent survey conducted by Market Watch, the global container market will exceed $5 billion by 2026. In 2019, that number was under 1 billion. These statistics show that the world is moving more towards containers…
[](/blog/engineering/moving-app-vm-kubernetes)
The Kong Gateway Rate Limiting plugin is one of our most popular traffic control add-ons. You can configure the plugin with a policy for what constitutes "similar requests" (requests coming from the same IP address, for example), and you can set your limits (limit to 10 requests per minute, for…
[](/blog/engineering/kong-gateway-rate-limiting)
Using Kong's OpenID Connect (OIDC) plugin, Kong and Okta work together to solve three significant application development challenges: The OIDC plugin enables Kong, as the API gateway , to communicate with Okta via the OAuth/OIDC flows. That way, your app teams don't have to configure and diagnose…
[](/blog/engineering/kong-and-okta-client-credentials)
As organizations adopt a microservices architecture , API gateway usage has increased. Kong Gateway is one of the promising API gateways in the market. It has both OSS and enterprise support, releases multiple features and is easy to use. Kong Admin API helps administrators configure the system…
[](/blog/engineering/kong-configurations-terraform-gitops)
Change is the primary cause of service reliability issues for agile engineering teams. In this post, I’ll cover how you can limit the impact of a buggy change, making it past your quality gates with Kong Gateway and Spinnaker for canary deployment. ~Mark Russinovich, CTO of Azure, on Advancing safe…
[](/blog/engineering/kong-gateway-spinnaker)
Fastly's next-gen WAF (formerly Signal Sciences ) integrates with Kong Konnect to block malicious requests to your services. Kong Gateway provides a robust and secure enterprise API management platform to front web traffic. In partnership, Fastly focuses on Layer 7 application security for that…
[](/blog/engineering/kong-konnect-fastly)
This tutorial shows you how to create a custom Kong Gateway plugin with Go programming language. The sample plugin I created adds an extra layer for security between consumers and producers. The way it works is it identifies consumers through a consumer-key from a query string. Without this…
[](/blog/engineering/kong-gateway-go-plugin)
The more services you have running across different clouds and Kubernetes clusters, the harder it is to ensure that you have a central place to collect service mesh observability metrics. That's one of the reasons we created Kuma , an open source control plane for service mesh. In this tutorial,…
[](/blog/engineering/service-mesh-observability)
OPA support to secure communication between these calls [cta-banner
[](/blog/engineering/kong-service-mesh-and-opa-policy)
In this Kong Gateway tutorial, you'll learn how to: Keep in mind that these instructions are a starting point. You may need to change some of the steps to harden your environment when running in production. For more detailed information, visit our Kong Gateway documentation . One of the reasons…
[](/blog/engineering/kong-gateway-tutorial)
This tutorial shows you how easy it is to build a custom Lua plugin for Kong Gateway. My Kong Lua plugin example will automatically add a custom header to any response sent out, indicating the current plugin version. Kong API Gateway is built on OpenResty , which extends the NGINX proxy server to…
[](/blog/engineering/custom-lua-plugin-kong-gateway)
Many companies are leveraging DevOps, microservices , automation, self-service, cloud and CI/CD pipelines. These megatrends are changing how companies are building and running software. One thing that often slips through the cracks is security. With microservices, there's an increase in the number…
[](/blog/engineering/authorize-api-opa-kuma)
In this tutorial, I'm going to walk through adding OAuth2 authorization and authentication to your service with the Kong API Gateway OAuth2 plugin . First, I'll cover the fundamentals. If you're already familiar with how Kong Gateway and OAuth2 work, skip ahead to the tutorial . Interconnected.…
[](/blog/engineering/kong-gateway-oauth2)
Kuma is an open source, CNCF service mesh that supports every environment, including Kubernetes and virtual machines. In this Kuma service mesh tutorial, I will show you how easy it is to get started. [iframe loading="lazy" width="890" height="560" src=""…
[](/blog/engineering/getting-started-kuma-service-mesh)Secure your AI infrastructure with prompt guards, PII sanitization, and centralized governance. Control LLM costs with token-based rate limiting and semantic routing across providers.