Talk tech with tips and tutorials from builders at Kong and the Kong Community.
Today we’re launching the Kong Konnect Engineering Tech Blog, dedicated to exploring the technology challenges and solutions we’ve encountered. The objective? To offer valuable technical content that enables our readers to broaden their engineering expertise. Kong has been in the software industry…
[](/blog/engineering/meet-the-engineers-behind-konnect)
In the modern IT stack, API gateways act as the first line of defense against attacks on backend services by enforcing authentication/authorization policies and validating and transforming requests. When backend services are protected with a token-based approach, client applications must obtain an…
[](/blog/engineering/zero-trust-oauth-2-0-mtls-client-authentication)
After getting our Konnect Data Planes vertically and horizontally scaled, with VPA and HPA , it's time to explore the Kubernete Node Autoscaler options. In this post, we start with the Cluster Autoscaler mechanism. (Part 4 in this series is dedicated to Karpenter.) The Kubernetes Cluster Autoscaler…
[](/blog/engineering/dp-node-autoscaling-with-cluster-autoscaler-aws-eks-1-29)
In my previous post , we discussed how to take advantage of VPA to implement automatic vertical scaling for our Konnect Data Planes. In this post, we'll focus on HPA for horizontal Kubernetes Pods autoscaling. VPA docs recommend not using VPA along with HPA on CPU or memory metrics at this moment.…
[](/blog/engineering/pod-autoscaling-with-hpa-on-eks-1-29)
With digital transformation shifting networks into the cloud — from remote workforces to online banking — cyberattacks are growing more prevalent and sophisticated. Legacy security models like VPNs and perimeter-based firewalls are proving inadequate in addressing modern threats because perimeters…
[](/blog/engineering/microsegmentation-and-zero-trust-security)
In this series of posts, we will look closely at how Kong Konnect Data Planes can take advantage of Autoscalers running on Amazon Elastic Kubernetes Services (EKS) 1.29 to support the throughput the demands API consumers impose on it at the lowest cost. The series comprises four parts: One of the…
[](/blog/engineering/data-plane-elasticity-eks-1-29-pod-autoscaling-with-vpa)
As Kubernetes has become the de facto orchestration platform for deploying cloud native applications , networking and traffic management have emerged as pivotal challenges when managing access to services and infrastructure. The core Kubernetes Ingress resource addresses basic Layer 7 (L7) routing…
[](/blog/engineering/gateway-api-vs-ingress)
The acceleration of microservices and containerized workloads has revolutionized software delivery at scale. However, these distributed architectures also introduce significant complexity around networking, security, and observability. As development teams grappled with reliability and governance…
[](/blog/engineering/day-0-service-mesh-implementation)
In the ever-evolving landscape of modern applications and cloud native architectures, the need for efficient, scalable, and secure communication between services is paramount. Enter the service mesh — a versatile platform designed to address various challenges in securing, connecting, and observing…
[](/blog/engineering/7-signs-you-need-a-service-mesh)
With its flexible querying capabilities, GraphQL makes it easy to combine data from multiple sources into a single endpoint. GraphQL and API management go hand in hand to build next-generation API platforms. However, GraphQL's features can also introduce security risks if not properly…
[](/blog/engineering/graphql-security-vulnerabilities)
In this article, which is based on my talk at VueConf Toronto 2023, we'll explore how to harness the power of Vue.js and micro frontends to create scalable, modular architectures that prioritize the developer experience. We'll unveil practical strategies, best practices, and real-world use cases…
[](/blog/engineering/scalable-architectures-with-vue-micro-frontends)
Now you can find and purchase Kong Konnect through the Google Cloud Marketplace! Kong Konnect is the unified API platform that allows you to manage multiple gateways across service meshes, ingress, cloud, and Kubernetes providers no matter where they run — on-premises, hybrid, cloud, or…
[](/blog/engineering/konnect-google-cloud-marketplace)
We’re excited to announce a new addition to our Kong Konnect EKS Blueprint Family: the Kong Konnect Mesh EKS Blueprint Add-on to deploy your Mesh Zones. Deploy your zones securely on AWS with the new Mesh Manager offering in Kong Konnect. It gives you an opinionated install of Kong Mesh to quickly…
[](/blog/engineering/konnect-mesh-eks-blueprint-add-on)This post is part of a series on becoming a secure API-first company. For a deeper dive, check out the eBook Leading Digital Transformation: Best Practices for Becoming a Secure API-First Company. As APIs have become mission-critical , securing them against threats is crucial. APIs are an…
[](/blog/engineering/layered-security-for-managing-apis)
We're pleased to announce the launch of Standard Webhooks! Kong has been part of the Technical Committee of this standard with other great companies like Svix (the initiator of the project), Ngrok, Zapier, Twillio, Lob, Mux, and Supabase. This was a year-long effort of gathering feedback, use…
[](/blog/engineering/announcing-standard-webhooks)