Blog
  • AI Gateway
  • AI Security
  • AIOps
  • API Security
  • API Gateway
|
    • API Management
    • API Development
    • API Design
    • Automation
    • Service Mesh
    • Insomnia
    • View All Blogs
  1. Home
  2. Blog
  3. Product Releases
  4. Kong Mesh & Kuma 2.1 released with full suite of next-gen policies
Product Releases
February 1, 2023
4 min read

Kong Mesh & Kuma 2.1 released with full suite of next-gen policies

John Harris
Principal PM Kong Mesh & Kuma

We’re excited to announce the release of Kong Mesh and Kuma 2.1! In this release, we’re shipping the full suite of new and improved policies announced (and started) in 2.0. Additionally, we’re launching some more great UX improvements in the UI and a host of smaller fixes.

In order to take advantage of the latest and greatest in service mesh, we strongly suggest upgrading to Kong Mesh 2.1. Upgrading is simple through kumactl or Helm.

Notable features:

  • Completed implementation of all next-generation policies, adding:
    • MeshHTTPRoute
    • MeshCircuitBreaker
    • MeshFaultInjection
    • MeshHealthCheck
    • MeshOPA
    • MeshProxyPatch
    • MeshRateLimit
    • MeshRetry
    • MeshTimeout
  • Added support for header absence matching in traffic routes
  • Ability to filter admin API output
  • Added gateway view to the UI
  • Ability to filter by tags and types in the UI
  • Ability to configure ports in eBPF mode
  • Various other bug fixes and quality-of-life improvements across the product
For more details, reference the Kong Mesh Changelog.

Full Next-Generation Policy Suite

In our last major release (2.0) we released the first few policies featuring our new, more flexible, more powerful matching system. Matching is how users define which entities their policies apply to, and can get quite complex.

As a refresher, the new selectors use a targetRef system (inspired by GatewayAPI) to select which meshes, services, data plane proxies, etc. are targeted by specific policies. Multiple rules can be specified in the same policy (as supported today) or many different policies can be created targeting different subsets. With the new policy system in Mesh 2.1 the policies will be merged together in the correct precedence rules before calculating and pushing the configuration out to the Envoy dataplane.

If you want to read more about the reasoning behind switching and the design of this new policy matching system, check out the blog post Flexible Policy Match in Kuma 2.0 by our Mesh Engineering Manager Charly.

Below is an example of a new MeshHTTPRoute using targetRef selectors:

Figure 1 : Example of a next-gen MeshHTTPRoute policy

In this example, we can see that we’re applying the policy to our frontend service, and specifying that all the traffic flowing to our backend service at the /api path should be balanced between version 1.0 and 2.0 according to the weighting configuration in the policy.

While slightly more verbose than the previous TrafficRoute policy, this new selector scheme allows more flexible and granular control. Additionally, we’ll now take care of merging (according to the documented precedence rules) policies that target the same data plane proxies, rather than only choosing the most specific policy (as was the case pre v2.0).

In 2.0 we implemented 3 policies using this new matching system:

  • MeshTrafficPermission
  • MeshAccessLog
  • MeshTrafficTrace
In 2.1 we’re pleased to announce that we have completed transitioning all of the additional policies to the new system:
  • MeshHTTPRoute (partially replaces TrafficRoute)
  • MeshCircuitBreaker
  • MeshFaultInjection
  • MeshHealthCheck
  • MeshOPA
  • MeshProxyPatch (replaces ProxyTemplate)
  • MeshRateLimit
  • MeshRetry
  • MeshTimeout
Head over to the docs to check out how to use the new policies and selectors.

Continued UI & UX Improvements

In 2.1, we’re continuing our work streamlining the UX in our dashboard by simplifying the navigation options and adding various other look and feel tweaks.

[caption id="attachment_47545" align="aligncenter" width="1024"]Figure 2 : New, cleaner navigation menu Figure 2: New, cleaner navigation menu[/caption]

Having quick access to the visualization of the policies is critical for managing complex applications. In order to simplify that all of the Kong Mesh policies have been collapsed into a single Policies screen and are now accessible via a dropdown when navigating through them, as shown in Figure 2.

[caption id="attachment_47546" align="aligncenter" width="1024"]Figure 3 : Policies are now listed in a dropdown Figure 3: Policies are now listed in a dropdown[/caption]

Furthering the simplification of management, we’ve also added the ability to filter in the UI via a number of metadata fields (e.g., name, tag). These can be combined to provide very specific views of your data planes and services:

[caption id="attachment_47547" align="aligncenter" width="1024"]Figure 4 : New metadata filtering available in the UI and API Figure 4: New metadata filtering available in the UI and API[/caption]

Debugging Envoy configuration is essential when operating a mesh, so we’ve made it easy to see full XDS configuration for each data plane proxy in the UI, including a regex-enabled search capability to inspect config dump information without having to manually interact with the cluster.

[caption id="attachment_47548" align="aligncenter" width="1024"]Figure 5: Live search and debugging capabilities for Envoy data plane configuration Figure 5: Live search and debugging capabilities for Envoy data plane configuration[/caption]

We’re excited about how the UI is looking and many more UI improvements are coming in the next few releases, so stay tuned!

Get in touch with Kong to learn more about Kong Mesh and how to build an enterprise service mesh. You can also download Kong Mesh and get started for free.

Service MeshKuma

More on this topic

Webinars

Major New Release: Explore Kuma 1.2

Videos

Taming Envoy Metrics with Kuma and MeshMetric Policy

See Kong in action

Accelerate deployments, reduce vulnerabilities, and gain real-time visibility. 

Get a Demo
Topics
Service MeshKuma
Share on Social
John Harris
Principal PM Kong Mesh & Kuma

Recommended posts

Kong Mesh & Kuma 2.2 Released with Global Rate Limiting, OpenTelemetry, and More

Kong Logo
Product ReleasesApril 14, 2023

We’re excited to announce the release of Kong Mesh and Kuma 2.2. This new minor release adds some long-awaited enterprise features, more incremental improvements to our UI and policies, and many more minor features and bug fixes. In order to take

John Harris

Kong Mesh and Kuma 2.0 Released with eBPF Support, Next-Gen Policies

Kong Logo
Product ReleasesNovember 4, 2022

Today we’re excited to announce the release of Kong Mesh and Kuma 2.0. With this new major release, we’re announcing the first availability of our next-generation policies, in addition to new eBPF capabilities. 2.0 is also significant as we have

John Harris

Kong Mesh 1.9 and Kuma 1.8 Released with Gateway GA, New CNI

Kong Logo
Product ReleasesAugust 24, 2022

We are happy to announce the release of Kong Mesh 1.9 and Kuma 1.8! This release is packed with features and improvements such as observability for builtin Gateway, a complete rewrite of the CNI and projected service account tokens support. In order

Charly Molter

Kuma 1.7.0 and Kong Mesh 1.8.0 Released with Builtin Gateway

Kong Logo
Product ReleasesJune 15, 2022

We’re excited to announce the latest release for both Kuma and Kong Mesh. This cycle, we focused on simplifying enterprise-wide mesh deployments. We strongly suggest upgrading, in order to take advantage of the latest and greatest when it comes to s

Marco Palladino

Kuma 1.5.0 and Kong Mesh 1.6.0 Released

Kong Logo
Product ReleasesFebruary 24, 2022

We are happy to announce the first release for both Kong Mesh and Kuma in 2022, which is packed with features and improvements, including substantial performance improvements when running at scale. We strongly suggest to upgrade, in order to take ad

Marco Palladino

Kuma 1.4 and Kong Mesh 1.5 Released With RBAC, Windows Support, 2x Performance and 25+ New Features

Kong Logo
Product ReleasesNovember 23, 2021

We are happy to announce a new major release of Kuma, and a new major release of Kong Mesh built on Kuma! Kuma 1.4 ships with 25+ new features and countless improvements, particularly when it comes to performance. As previously announced at Kong Sum

Marco Palladino

Kuma 1.3 and Kong Mesh 1.4 Released With Service Map, CA Rotation, mTLS Permissive and 10+ features.

Kong Logo
Product ReleasesAugust 26, 2021

We are happy to announce a new major release of Kuma, and a new major release of Kong Mesh built on Kuma! Kuma 1.3 ships with 10+ new features and countless improvements. Kong Mesh ships we enterprise capabilities for large scale service mesh deploy

Marco Palladino

Ready to see Kong in action?

Get a personalized walkthrough of Kong's platform tailored to your architecture, use cases, and scale requirements.

Get a Demo
Powering the API world

Increase developer productivity, security, and performance at scale with the unified platform for API management, AI gateways, service mesh, and ingress controller.

Sign up for Kong newsletter

    • Platform
    • Kong Konnect
    • Kong Gateway
    • Kong AI Gateway
    • Kong Insomnia
    • Developer Portal
    • Gateway Manager
    • Cloud Gateway
    • Get a Demo
    • Explore More
    • Open Banking API Solutions
    • API Governance Solutions
    • Istio API Gateway Integration
    • Kubernetes API Management
    • API Gateway: Build vs Buy
    • Kong vs Postman
    • Kong vs MuleSoft
    • Kong vs Apigee
    • Documentation
    • Kong Konnect Docs
    • Kong Gateway Docs
    • Kong Mesh Docs
    • Kong AI Gateway
    • Kong Insomnia Docs
    • Kong Plugin Hub
    • Open Source
    • Kong Gateway
    • Kuma
    • Insomnia
    • Kong Community
    • Company
    • About Kong
    • Customers
    • Careers
    • Press
    • Events
    • Contact
    • Pricing
  • Terms
  • Privacy
  • Trust and Compliance
  • © Kong Inc. 2025