[Blog](/blog)Blog
  • [AI Gateway ](/blog/tag/ai-gateway)AI Gateway
  • [AI Security ](/blog/tag/ai-security)AI Security
  • [AIOps ](/blog/tag/aiops)AIOps
  • [API Security ](/blog/tag/api-security)API Security
  • [API Gateway ](/blog/tag/api-gateway)API Gateway
|
    • [API Management ](/blog/tag/api-management)API Management
    • [API Development ](/blog/tag/api-development)API Development
    • [API Design ](/blog/tag/api-design)API Design
    • [Automation ](/blog/tag/automation)Automation
    • [Service Mesh ](/blog/tag/service-mesh)Service Mesh
    • [Insomnia ](/blog/tag/insomnia)Insomnia
    • [Event Gateway ](/blog/tag/event-gateway)Event Gateway
    • [View All Blogs ](/blog/page/1)View All Blogs
We're Entering the Age of AI Connectivity [Read more](/blog/news/the-age-of-ai-connectivity)Read moreProducts & Agents:
    • [Kong AI Gateway](/products/kong-ai-gateway)Kong AI Gateway
    • [Kong API Gateway](/products/kong-gateway)Kong API Gateway
    • [Kong Event Gateway](/products/event-gateway)Kong Event Gateway
    • [Kong Metering & Billing](/products/kong-konnect/features/usage-based-metering-and-billing)Kong Metering & Billing
    • [Kong Insomnia](/products/kong-insomnia)Kong Insomnia
    • [Kong Konnect](/products/kong-konnect)Kong Konnect
  • [Documentation](https://developer.konghq.com)Documentation
  • [Book Demo](/contact-sales)Book Demo
  1. Home
  2. Blog
  3. Engineering
  4. So You’ve Decided to Transition to Microservices, What Now?
[Microservices](/blog/tag/microservices)Microservices
June 26, 2018
3 min read

# So You’ve Decided to Transition to Microservices, What Now?

Mike Bilodeau

*This is the second of two blogs examining considerations for transitioning to a microservices-based architecture. For more information, check out our e-book *[*Blowing Up the Monolith: Adopting a Microservices-Based Architecture*](https://konghq.com/ebooks/adopting-microservices)*Blowing Up the Monolith: Adopting a Microservices-Based Architecture**. In our previous blog, we outlined the *[*five questions we must consider before making the transition to a microservices architecture*](https://konghq.com/blog/moving-to-microservices-five-questions)*five questions we must consider before making the transition to a microservices architecture**. *

Now that we have a better understanding of the benefits and challenges of a transition to [microservices](https://konghq.com/microservices)microservices, we need to understand how we make the transition from a technical perspective. There are three primary strategies we can adopt to transition to microservices - the **Ice Cream Scoop**, the **Lego**, and the **Nuclear Option**. Before we evaluate the pros and cons of each of these, we need to identify our boundaries and test. This process will be the same for any strategy we choose, but it's important not to overlook as it will fundamentally shape our success as we dive into the transition.

To identify the boundaries of our monolith, we must first figure out what services need to be created or broken out from the monolithic codebase. To do this, we can envision what our architecture will look like in a completed microservice architecture. This means understanding how big or how small we want our services to be and how they will be communicating with each other. A good place to start is by examining the boundaries that are most negatively impacted by the monolith, for example, those that we deploy, change or scale more often than the others.

Testing transitioning to microservices is effectively a refactoring, and we need to take all the regular precautions we would before a "regular" refactoring. A best practice here is that before attempting any change, a solid and reliable suite of integration and regression tests are put into place for the monolith. Some of these tests will likely fail along the way, but having well-tested functionality will help to track down what is not working as expected. With our testing and boundary identification completed, let's look at our **three strategies for transitioning to microservices.**

  1. - **Ice Cream Scoop Strategy**
    This strategy implies a gradual transition from a monolithic application to a microservice architecture by "scooping out" different components within the monolith into separate services. Given the gradual nature of this strategy, there will be a period where monolith and microservices will exist simultaneously. The advantages of this are that our gradual migration reduces risk without impacting the uptime and end-user experience. This gradual transition, however, is also a drawback as the process will take longer to fully execute.
  2. - **Lego Strategy**
    This strategy entails only building new features as microservices, and it is ideal for organizations that want to maintain their existing monolith. Using the Lego strategy will not resolve issues with our existing monolithic codebase, but it will fix problems for future expansions of the product. This option calls for stacking the monolithic and microservices on top of each other in a hybrid architecture. The primary advantages here are speed and reduced effort due to not needing to do much work on the monolith. The primary disadvantages are that the monolith will continue having its original problems and new APIs will likely need to be created to support the microservice-oriented features. This strategy can help buy time refactoring, but it ultimately risks adding more tech debt.
  3. - **Nuclear Option Strategy**
    Our final option is rarely used. The Nuclear Option requires rewriting the entire monolithic application into microservices all at once. We may still support the old monolith with hotfixes and patches, but we would build every new feature in the new codebase. The main advantage is that this allows the organization to re-think how things are done and effectively rewrite the app from scratch. The disadvantage is that it requires rewriting the app from scratch, which could create unforeseen issues. The Nuclear Option may also inadvertently cause "second system syndrome" where end users will need to deal with a stalled monolith until the new architecture is ready for deployment.

While transitioning to microservices will always require substantial effort, choosing the correct strategy for your organization can substantially reduce friction during the process. No matter which strategy we choose to make the transition, it’s critical that we effectively communicate expectations and requirements to team members. With a clear strategy outlined and agreed upon, we are well on our way to blowing up our monolith and reaping the benefits of a microservices architecture.

- [Microservices](/blog/tag/microservices)Microservices- [API Design](/blog/tag/api-design)API Design

## More on this topic

_Videos_

## Communication Design Patterns for Microservices

_Videos_

## API and Microservices: DevOps to APIOps Designed to Connect

## See Kong in action

Accelerate deployments, reduce vulnerabilities, and gain real-time visibility. 

[Get a Demo](/contact-sales)Get a Demo
**Topics**
- [Microservices](/blog/tag/microservices)Microservices- [API Design](/blog/tag/api-design)API Design
Mike Bilodeau

Recommended posts

# Migrating Your Collections and Requests from Postman to Insomnia

[Engineering](/blog/tag)EngineeringApril 17, 2026

Local-first: your data stays with you: Insomnia stores everything on your machine by default. No forced cloud sync, no account needed just to send a request. This is helpful if privacy or working in a regulated environment is a priority for you Fre

Juhi Singh

# Beyond Static Routing: Modernizing API Logic with Conditional Policy Execution

[Engineering](/blog/tag)EngineeringApril 15, 2026

Imagine you have a single Service, order-api . You want to apply a strict rate limit to most traffic, but you want to bypass that limit—or apply a different one—if the request contains a specific X-App-Priority: High header. Previously, you had t

Hugo Guerrero

# 5 Best Practices for Securing AI Microservices at Scale in 2026

[Engineering](/blog/tag)EngineeringApril 2, 2026

The Stakes Keep Rising The security implications are severe. OWASP's 2025 Top 10 for LLM Applications ranks prompt injection as the number one critical vulnerability. Attackers manipulate LLM inputs to override instructions, extract sensitive data,

Kong

# Connecting Kong and Solace: Building Smarter Event-Driven APIs

[Engineering](/blog/tag)EngineeringMarch 20, 2026

Running Kong in front of your Solace Broker adds real benefits: Authentication & Access Control – protect your broker from unauthorized publishers. Validation & Transformation – enforce schemas, sanitize data, and map REST calls into event topics.

Hugo Guerrero

# 7 Modern Microservice Design Patterns

[Enterprise](/blog/tag)EnterpriseJanuary 7, 2022

Microservices have an entirely new set of problems due to their distributed service-oriented architecture. As a result, microservice design patterns have surfaced. This post will consider the specific design patterns that can help us build reliable,

Viktor Gamov

# Announcing Kong Studio: Design and Testing Built For Microservices

[Product Releases](/blog/tag)Product ReleasesOctober 2, 2019

Today we’re thrilled to announce a brand new product area for Kong – Kong Studio, an integrated design and test environment for Kong Enterprise customers. We are excited to make the leap in extending our service control platform to include pre-pro

Mike Bilodeau

# 10 Ways Microservices Create New Security Challenges

[Engineering](/blog/tag)EngineeringOctober 1, 2025

Why are Microservices Security Risks? Traditional security was simple. One perimeter. Few entry points. Clear boundaries. Microservices shattered this model. Now organizations manage hundreds of independent services. The average number of API calls

Mike Bilodeau

# Migrating Your Collections and Requests from Postman to Insomnia

[Engineering](/blog/tag)EngineeringApril 17, 2026

Local-first: your data stays with you: Insomnia stores everything on your machine by default. No forced cloud sync, no account needed just to send a request. This is helpful if privacy or working in a regulated environment is a priority for you Fre

Juhi Singh

# Beyond Static Routing: Modernizing API Logic with Conditional Policy Execution

[Engineering](/blog/tag)EngineeringApril 15, 2026

Imagine you have a single Service, order-api . You want to apply a strict rate limit to most traffic, but you want to bypass that limit—or apply a different one—if the request contains a specific X-App-Priority: High header. Previously, you had t

Hugo Guerrero

# 5 Best Practices for Securing AI Microservices at Scale in 2026

[Engineering](/blog/tag)EngineeringApril 2, 2026

The Stakes Keep Rising The security implications are severe. OWASP's 2025 Top 10 for LLM Applications ranks prompt injection as the number one critical vulnerability. Attackers manipulate LLM inputs to override instructions, extract sensitive data,

Kong

# Connecting Kong and Solace: Building Smarter Event-Driven APIs

[Engineering](/blog/tag)EngineeringMarch 20, 2026

Running Kong in front of your Solace Broker adds real benefits: Authentication & Access Control – protect your broker from unauthorized publishers. Validation & Transformation – enforce schemas, sanitize data, and map REST calls into event topics.

Hugo Guerrero

# 7 Modern Microservice Design Patterns

[Enterprise](/blog/tag)EnterpriseJanuary 7, 2022

Microservices have an entirely new set of problems due to their distributed service-oriented architecture. As a result, microservice design patterns have surfaced. This post will consider the specific design patterns that can help us build reliable,

Viktor Gamov

# Announcing Kong Studio: Design and Testing Built For Microservices

[Product Releases](/blog/tag)Product ReleasesOctober 2, 2019

Today we’re thrilled to announce a brand new product area for Kong – Kong Studio, an integrated design and test environment for Kong Enterprise customers. We are excited to make the leap in extending our service control platform to include pre-pro

Mike Bilodeau

# 10 Ways Microservices Create New Security Challenges

[Engineering](/blog/tag)EngineeringOctober 1, 2025

Why are Microservices Security Risks? Traditional security was simple. One perimeter. Few entry points. Clear boundaries. Microservices shattered this model. Now organizations manage hundreds of independent services. The average number of API calls

Mike Bilodeau

# Migrating Your Collections and Requests from Postman to Insomnia

[Engineering](/blog/tag)EngineeringApril 17, 2026

Local-first: your data stays with you: Insomnia stores everything on your machine by default. No forced cloud sync, no account needed just to send a request. This is helpful if privacy or working in a regulated environment is a priority for you Fre

Juhi Singh

# Beyond Static Routing: Modernizing API Logic with Conditional Policy Execution

[Engineering](/blog/tag)EngineeringApril 15, 2026

Imagine you have a single Service, order-api . You want to apply a strict rate limit to most traffic, but you want to bypass that limit—or apply a different one—if the request contains a specific X-App-Priority: High header. Previously, you had t

Hugo Guerrero

# 5 Best Practices for Securing AI Microservices at Scale in 2026

[Engineering](/blog/tag)EngineeringApril 2, 2026

The Stakes Keep Rising The security implications are severe. OWASP's 2025 Top 10 for LLM Applications ranks prompt injection as the number one critical vulnerability. Attackers manipulate LLM inputs to override instructions, extract sensitive data,

Kong

# Connecting Kong and Solace: Building Smarter Event-Driven APIs

[Engineering](/blog/tag)EngineeringMarch 20, 2026

Running Kong in front of your Solace Broker adds real benefits: Authentication & Access Control – protect your broker from unauthorized publishers. Validation & Transformation – enforce schemas, sanitize data, and map REST calls into event topics.

Hugo Guerrero

# 7 Modern Microservice Design Patterns

[Enterprise](/blog/tag)EnterpriseJanuary 7, 2022

Microservices have an entirely new set of problems due to their distributed service-oriented architecture. As a result, microservice design patterns have surfaced. This post will consider the specific design patterns that can help us build reliable,

Viktor Gamov

# Announcing Kong Studio: Design and Testing Built For Microservices

[Product Releases](/blog/tag)Product ReleasesOctober 2, 2019

Today we’re thrilled to announce a brand new product area for Kong – Kong Studio, an integrated design and test environment for Kong Enterprise customers. We are excited to make the leap in extending our service control platform to include pre-pro

Mike Bilodeau

# 10 Ways Microservices Create New Security Challenges

[Engineering](/blog/tag)EngineeringOctober 1, 2025

Why are Microservices Security Risks? Traditional security was simple. One perimeter. Few entry points. Clear boundaries. Microservices shattered this model. Now organizations manage hundreds of independent services. The average number of API calls

Mike Bilodeau

## Ready to see Kong in action?

Get a personalized walkthrough of Kong's platform tailored to your architecture, use cases, and scale requirements.

[Get a Demo](/contact-sales)Get a Demo

## step-0

Kong enables the connectivity layer for the agentic era – securely connecting, governing, and monetizing APIs and AI tokens across any model or cloud.

  • English
  • Japanese
  • Frenchcoming soon
  • Spanishcoming soon
  • Germancoming soon
Everything is 200 OK
© Kong Inc. 2026
Interaction mode