# Getting Started with Kong Mesh and Open Policy Agent
OPA support to secure communication between these
# Engineering
Talk tech with tips and tutorials from builders at Kong and the Kong Community.
# Kong Gateway Tutorial: Running With a GUI in <15 Minutes
In this Kong Gateway tutorial, you'll learn how to: Keep in mind that these instructions are a starting point. You may need to change some of the steps to harden your environment when running in production. For more detailed information, visit our Kong Gateway documentation . One of the reasons…
# How to Create a Custom Lua Plugin for Kong Gateway
This tutorial shows you how easy it is to build a custom Lua plugin for Kong Gateway. My Kong Lua plugin example will automatically add a custom header to any response sent out, indicating the current plugin version. Kong API Gateway is built on OpenResty , which extends the NGINX proxy server to…
# Authorizing Microservice APIs With OPA and Kuma
Many companies are leveraging DevOps, microservices , automation, self-service, cloud and CI/CD pipelines. These megatrends are changing how companies are building and running software. One thing that often slips through the cracks is security. With microservices, there's an increase in the number…
# How OAuth2 Authorization Works: Kong API Gateway 4 Step Tutorial
In this tutorial, I'm going to walk through adding OAuth2 authorization and authentication to your service with the Kong API Gateway OAuth2 plugin . First, I'll cover the fundamentals. If you're already familiar with how Kong Gateway and OAuth2 work, skip ahead to the tutorial . Interconnected.…
# Getting Started With Kuma Service Mesh
Kuma is an open source, CNCF service mesh that supports every environment, including Kubernetes and virtual machines. In this Kuma service mesh tutorial, I will show you how easy it is to get started. Start by downloading Kuma to your preferred environment. For this tutorial, I used macOS as my…
# Getting Started With Kong’s OpenID Connect Plugin
The concept of zero-trust security is relatively simple. In essence, no entity or system should have trust by default. You should assume that any system you are talking to is not trustworthy until you establish otherwise. Within Kong Konnect , one mechanism to apply zero-trust is the OpenID Connect…
# How JWT Authentication Works for Microservices: API Gateway Tutorial
As you build and maintain more applications, your authentication strategy becomes increasingly important. It may also be top of mind for your boss since technology leaders cited "improve application security" as one of their top priorities in this year's Digital Innovation Benchmark . The Kong…
# Implementing Zero-Trust Service Mesh Security
Imagine you're going through immigration at the airport. The immigration officer says, "I don't need your passport because I trust that you are who you claim to be." Wait, what? That would never happen, right? That's because trust is exploitable. Sooner or later, somebody will try to lie about who…
# How to Design a Scalable Rate Limiting Algorithm with Kong API
Rate limiting protects your APIs from inadvertent or malicious overuse by limiting how often each user can call the API. Without rate limiting, each user may make a request as often as they like, leading to "spikes" of requests that starve other consumers. Once enabled, rate limiting can only…
# Building Kong Clusters in AWS with the Terraform API Gateway Module
We created the Terraform API gateway module to help you follow DevOps best practices while implementing Kong using infrastructure as code (IaC). Terraform is an open source tool that allows you to implement IaC using a declarative declaration definition. This Terraform module is the reference…
# 3 Solutions for Avoiding Plain-Text Passwords in Insomnia
When testing APIs, software engineers often repeat identical values across multiple requests, but who wants to waste time typing the same values every time? Insomnia 's environment variables solve this problem by allowing you to define a value once as an environment variable and reference that…
# How to Set Up Kong Gateway
You've decided to install Kong Gateway. Congrats! You're almost ready to accelerate your microservices journey with the world's most popular open source API gateway . This article and video will guide you through the short version of our tutorial. If you prefer, here are some more detailed…
# Implement a Canary Release with Kong for Kubernetes and Consul
From the Kong API Gateway perspective, using Consul as its Service Discovery infrastructure is one of the most well-known and common integration use cases. With this powerful combination more flexible and advanced routing policies can be implemented to address Canary Releases, A/B testings,…
# Tracing With Zipkin in Kong 2.1.0
There is a great number of logging plugins for Kong , which might be enough for your needs. However, they have certain limitations: Zipkin is a tracing server, specialized in gathering timing data. Used in conjunction with Kong's Zipkin plugin , it can address the points above: For a basic setup,…