Talk tech with tips and tutorials from builders at Kong and the Kong Community.
Domain-driven designs are popular in organizations that have complex domain models and wish to organize engineering around them. REST-based architectures are a common choice for implementing the API entry point into these domains. REST-based solutions are straightforward for the API builder and for…
[](/blog/engineering/building-dynamic-aggregate-apis-with-graphql)
Few things are more frustrating than encountering a product with either no documentation or worse: documentation that leads you astray. When it comes to developing APIs, schemas typically define how requests and responses are formatted and guide how clients and services exchange data. Commonly,…
[](/blog/engineering/beta-api-specs)While JSON-based APIs are ubiquitous in the API-centric world of today, many industries adapted internet-based protocols for automated information exchange way before REST and JSON became popular. One attempt to establish a standardized protocol suite for automated data interchange within and…
[](/blog/engineering/soap-to-json-with-kong-gateway)
This post is part of a series on becoming a secure API-first company. For a deeper dive, check out the eBook Leading Digital Transformation: Best Practices for Becoming a Secure API-First Company . The growth of APIs isn't just rapid — it's a seismic shift. Industry insiders say they plan to…
[](/blog/engineering/consistent-controls-api-security)Building APIs is a craft. Your API product must be stable, accurate, well documented, performant, and meet the informational demands of your clients — no small task. In this series, we'll take a close look at GraphQL , a trending API technology that aims to help you deliver efficient and capable…
[](/blog/engineering/graphql-from-the-ground-up)The Open Web Application Security Project (OWASP for short) is a not-for-profit entity devoted to improving the security of software. Founded in 2001, OWASP is a global organization that supports thousands of volunteers globally to produce freely available articles, documentation, tutorials, and…
[](/blog/engineering/owasp-top-10-api-security-2023)
Today, APIs are based on modern communication patterns: REST, GraphQL, or gRPC. But two decades ago, the majority of Web Services were developed with SOAP/XML. In this blog, we’ll explain how Kong Konnect can manage SOAP/XML Web Services by creating custom plugins and by using ChatGPT. We’ll…
[](/blog/engineering/chatgpt-soap-xml-kong-plugin)
Kong will crash on the ARM64 platform (the machine with Mac M1/M2 chips or any ARM64 platform). The error message shows the crash is triggered by the SIGILL signal, which means there is an illegal instruction in the Kong binary code. And it turns out to be caused by an error in the LuaJIT…
[](/blog/engineering/sigill-kong-crash-on-arm64)In this Kong Konnect tutorial, you'll learn how to leverage the platform to manage your API ecosystem from a single easy-to-use interface. We’ll run through how to: [iframe loading="lazy" title="Kong Konnect: Get Started with Kong Gateway in 10 Minutes" width="1200" height="675" src=""…
[](/blog/engineering/getting-started-konnect)
The release of Kuma 2.3 brings experimental support for GAMMA (Gateway API for Mesh Management and Administration) resources. Kuma has long supported Gateway API with the built-in gateway for ingress traffic but with GAMMA support, users can specify how to route and modify in-mesh traffic using the…
[](/blog/engineering/gamma-and-kuma)Today, we're thrilled to announce that Kong Enterprise and Kong Konnect Data Planes are now validated to run on AWS Graviton3 processors and Amazon Linux 2023 OS. As an APN Advanced Tier Partner of AWS, we were delighted to have the opportunity to benchmark Kong Enterprise running on AL2023 and…
[](/blog/engineering/validated-aws-graviton3-al2023)By now, when we hear the words "service mesh" we typically know what to expect: service discovery, load balancing, traffic management and routing, security, observability, and resilience. So, why Kong Mesh? What does Kong Mesh offer that would be more difficult to obtain with other solutions? Why…
[](/blog/engineering/kong-mesh-2-2-0-red-hat-openshift)
API monetization is currently a trending topic for many organizations looking to beef up their revenue. Of course, monetizing APIs isn't the easiest of tasks and requires quite a few moving parts. When it comes to monetization, you're going to need an entire technology stack to handle the heavy…
[](/blog/engineering/creating-an-api-monetization-stack)
If you landed on this blog post, chances are that you care about keeping your API secure. It's an important topic to discuss: API exploits are on the rise, and you don't want unauthorized users accessing your data. A big part of that security is implementing API authentication and API…
[](/blog/engineering/api-authentication-vs-api-authorization)
In this guide, Viktor Gamov (Principle Developer Advocate at Kong) will dive into the power of Kong Konnect, the SaaS managed control plane for Kong Gateway designed for seamless API management. We'll explore how to use Kong Konnect to configure external services, enable application registration,…
[](/blog/engineering/kong-konnect-a-developers-guide)Secure your AI infrastructure with prompt guards, PII sanitization, and centralized governance. Control LLM costs with token-based rate limiting and semantic routing across providers.