Talk tech with tips and tutorials from builders at Kong and the Kong Community.
As you build and maintain more applications, your authentication strategy becomes increasingly important. It may also be top of mind for your boss since technology leaders cited "improve application security" as one of their top priorities in this year's Digital Innovation Benchmark . The Kong…
[](/blog/engineering/jwt-kong-gateway)
Imagine you're going through immigration at the airport. The immigration officer says, "I don't need your passport because I trust that you are who you claim to be." Wait, what? That would never happen, right? That's because trust is exploitable. Sooner or later, somebody will try to lie about who…
[](/blog/engineering/zero-trust-service-mesh-security)
Rate limiting protects your APIs from inadvertent or malicious overuse by limiting how often each user can call the API. Without rate limiting, each user may make a request as often as they like, leading to "spikes" of requests that starve other consumers. Once enabled, rate limiting can only…
[](/blog/engineering/how-to-design-a-scalable-rate-limiting-algorithm)
We created the Terraform API gateway module to help you follow DevOps best practices while implementing Kong using infrastructure as code (IaC). Terraform is an open source tool that allows you to implement IaC using a declarative declaration definition. This Terraform module is the reference…
[](/blog/engineering/terraform-api-gateway-module)
When testing APIs, software engineers often repeat identical values across multiple requests, but who wants to waste time typing the same values every time? Insomnia 's environment variables solve this problem by allowing you to define a value once as an environment variable and reference that…
[](/blog/engineering/avoiding-plain-text-passwords-insomnia)
You've decided to install Kong Gateway. Congrats! You're almost ready to accelerate your microservices journey with the world's most popular open source API gateway . This article and video will guide you through the short version of our tutorial. If you prefer, here are some more detailed…
[](/blog/engineering/set-up-kong-gateway)
From the Kong API Gateway perspective, using Consul as its Service Discovery infrastructure is one of the most well-known and common integration use cases. With this powerful combination more flexible and advanced routing policies can be implemented to address Canary Releases, A/B testings,…
[](/blog/engineering/implement-a-canary-release-with-kong-for-kubernetes-and-consul)
There is a great number of logging plugins for Kong , which might be enough for your needs. However, they have certain limitations: Zipkin is a tracing server, specialized in gathering timing data. Used in conjunction with Kong's Zipkin plugin , it can address the points above: For a basic setup,…
[](/blog/engineering/tracing-with-zipkin-in-kong-2-1-0)
Having worked with many customers and prospects at Kong, one of the main requirements we often hear is how to handle dynamic routing based on the URL and headers. In this blog post, I will cover different use cases we come across for dynamic routing and how Kong can address them. The default…
[](/blog/engineering/how-to-dynamically-route-requests-with-kong-enterprise)
Kong Enterprise provides many out-of-the-box plugins to support various access control solutions like basic authentication , key authentication , JWT, LDAP, OAuth 2.0, OpenID Connect, among others. Most of the time, you should be able to find a plugin to suit your needs to protect your private or…
[](/blog/engineering/custom-authentication-and-authorization-framework-with-kong)
Once upon a time, we had these giant structures where thousands of people would congregate to share ideas, pamphlets filled to the margins with buzz words and cheap, branded t-shirts. Yep, tech conferences - oh what a relic of the past that I miss. It used to be part of my job to attend…
[](/blog/engineering/how-to-use-kong-gateway-with-k3s-for-iot-and-edge-computing-on-kubernetes)
Kong’s fast, lightweight and scalable API management solution helps improve developer productivity by automating the delivery of API management. One way Kong automates API management is through a continuous integration and continuous delivery (CI/CD) process by leveraging Kong's decK (declarative…
[](/blog/engineering/gitops-for-kong-managing-kong-declaratively-with-deck-and-github-actions)
In today’s enterprise computing landscape, multi-cloud organizations are quickly becoming the norm rather than the exception. By leveraging an API-first strategy with a microservice-based architecture, companies can achieve significant speed to market across multiple clouds. In order to achieve…
[](/blog/engineering/how-to-automate-deploying-an-api-gateway-and-services-to-a-multicloud-environment)
Kong Enterprise provides customers with the fastest, most scalable and flexible API management solution in the market. One of Kong's main advantages is the ability to quickly deploy and integrate with a customer's ecosystem of already-deployed solutions for identity management and monitoring. As…
[](/blog/engineering/centralized-kong-management-with-active-directory-ldap)
A year ago, Harry Bagdi wrote an amazingly helpful blog post on observability for microservices. And by comparing titles, it becomes obvious that my blog post draws inspiration from his work. To be honest, that statement on drawing inspiration from Harry extends well beyond this one blog post - but…
[](/blog/engineering/observability-for-your-kubernetes-microservices-using-kuma-and-prometheus)Secure your AI infrastructure with prompt guards, PII sanitization, and centralized governance. Control LLM costs with token-based rate limiting and semantic routing across providers.