Talk tech with tips and tutorials from builders at Kong and the Kong Community.
In his most recent blog post, Marco Palladino, our CTO and co-founder, went over the difference between API gateways and service mesh . I highly recommend reading his blog post to see how API management and service mesh are complementary patterns for different use cases, but to summarize in his…
[](/blog/engineering/exposing-kuma-service-mesh-using-kong-api-gateway)
A modern API gateway like Kong enables organizations to achieve some use cases much more easily than traditional gateways. The reason is older, traditional gateways try to provide as many features as possible into a heavyweight monolith, while modern solutions use a best-in-breed approach. These…
[](/blog/engineering/how-to-secure-apis-and-services-using-openid-connect)
Let's admit it - web services (SOAP) are here to stay for a few more years, and maybe for a long time in some places where there is no business incentive to rebuild them. However, with a decline in new SOAP web services and most applications moving to cloud native architectures, a common query…
[](/blog/engineering/supporting-legacy-web-services-with-kong)
Infrastructure as Code (IaC) is a powerful process - replacing manual, error prone and expensive operations with automated, consistent and quick provisioning of resources. In many cases, IaC is dependent on existing infrastructure, typically including a configuration management system. Chef, Puppet…
[](/blog/engineering/infrastructure-code-without-infrastructure)
A common requirement for API gateways is to rewrite the published URL to a different URL for the upstream service’s endpoint. For example, due to legacy reasons, your upstream endpoint may have a base URI like /api/oilers/. However, you want your publicly accessible API endpoint to now be named…
[](/blog/engineering/url-rewriting-in-kong)
Welcome to our second hands-on Kuma guide! The first one walked you through securing your application with mTLS using Kuma. Today, this guide will walk you through Kuma's new L4 traffic routing rules. These rules will allow you to easily implement blue/green and Kubernetes canary deployments. In…
[](/blog/engineering/canary-deployment-5-minutes-service-mesh)
At Kong, we leverage many tools to protect our services and customers. Terraform from HashiCorp allows us to automate the process with Infrastructure as Code (IaC). Another important tool is Amazon Web Services (AWS) GuardDuty , a continuous monitoring service for security threat detection in your…
[](/blog/engineering/configuring-aws-guardduty-lambda-slack-notifications)
With the 1.3 release , Kong is now able to natively manage and proxy gRPC services. In this blog post, we'll explain what gRPC is and how to manage your gRPC services with Kong. gRPC is a remote procedure call (RPC) framework initially developed by Google circa 2015 that has seen growing adoption…
[](/blog/engineering/manage-grpc-services-kong)
When a data breach occurs involving a cloud service, the impulsive reaction is to denounce using the cloud (at least for sensitive information). Since cloud security is not widely understood, it may be difficult to delineate it in the context of more general information security. Out of the box,…
[](/blog/engineering/s3-breach-prevention-best-practices-enterprise-cloud-security)
Calling all technical writers! Kong is applying to participate in this year’s Season of Docs and would love to work alongside you. The goal is to foster collaboration between open source projects and technical writers. Season of Docs is a unique program that pairs technical writers with our open…
[](/blog/engineering/kong-community-season-of-docs)
In the modern SaaS world, observability is key to running software reliability, managing risks and deriving business value out of the code that you're shipping. To measure how your service is performing, you record Service Level Indicators (SLIs) or metrics, and alert whenever performance,…
[](/blog/engineering/observability-kubernetes-kong)With Kong 1.0 users are now able to control TCP (Transport Control Protocol) traffic. Learn about how we added TCP support, and how you can try it out. TCP traffic powers email, file transfer, ssh, and many other common types of traffic that can't be handled by a layer 7 proxy. Our expansion to…
[](/blog/engineering/tcp-stream-support-kong)
API Fortress is a continuous testing platform for APIs. We've been a friend to Kong since the beginning. In this guest blog post, we explain how our company uses Kong to facilitate the process of virtualizing APIs. As more companies adopt microservice architectures and DevOps best practices, APIs…
[](/blog/engineering/api-fortress-mock)Kong is very easy to get up and running: start an instance, configure a service, configure a route pointing to the service, and off it goes routing requests, applying any plugins you enable along the way. But Kong can do a lot more than connecting clients to services via routes. In this talk from…
[](/blog/engineering/tour-kongs-routing-capabilities)In our last blog post in this series, we discussed our journey designing a metrics pipeline for Kong Cloud to ensure the reliability of our SaaS offering. We discussed how we re-architected our production data pipeline using OpenResty to send metrics to Prometheus and saw huge performance gains. We…
[](/blog/engineering/collecting-metrics-1m-rps)Secure your AI infrastructure with prompt guards, PII sanitization, and centralized governance. Control LLM costs with token-based rate limiting and semantic routing across providers.