When speaking with platform teams who are responsible for setting up their organizations’ API platforms, we often hear: "We really want to offload the infra side of this. We don’t want our engineers spinning up their own locally hosted infrastructure or asking other infrastructure teams to do this.…
The AI Proxy Revolution has changed the way developers operate, helping save money and speed up development. This new approach improves how systems talk to each other and allows for quicker, more efficient data exchange. Modern software development is regularly burdened with challenges around costs…
This blog addresses the common challenges organizations face with fragmented API management in Kubernetes environments and presents Kong Konnect combined with the Kong Ingress Controller (KIC) as a comprehensive solution. We'll highlight the issues that arise when teams independently choose…
Many organizations struggle with managing API gateways across multiple cloud environments. In this blog post, we'll explore how Kong Mesh can solve these challenges and enable seamless cross-cloud connectivity. Many large companies operate API gateways in multiple regions or cloud service…
The focus of this blog is to provide step-by-step instructions for deploying and configuring Kong Mesh with Kong Konnect on an AWS ECS instance so that anyone will be able to get pre-production installation of Kong Mesh standing up on their own. Kong Konnect is an API lifecycle management platform…
Cloud native application development relies heavily on APIs. APIs have proven themselves as a scalable and efficient way to capture, deploy, and scale functionality. Consequently, APIs became a target for malicious actors to misuse. Therefore, building quality APIs with adequate security controls…
In this blog post, we will explore how organizations can leverage Kong and OpenTelemetry to establish and monitor Service Level Objectives (SLOs) and manage error budgets more effectively. By tracking performance metrics and error rates against predefined thresholds, teams can prioritize their work…
AWS offers its own out-of-the-box API gateways. For many AWS teams, AWS API Gateways are a natural place to start when beginning their API management and API gateway journeys. However, as API practices and programs begin to scale, many organizations begin to look beyond AWS due to major…
Clear, effective API documentation is a crucial and rapidly expanding component of software development. Solid documentation provides all the necessary information a developer needs to integrate with an API so that they can avoid spending hours troubleshooting and context switching. It reduces the…
The rise of AI and LLMs in our world is revolutionizing the applications we’re building and the customer experiences we’re delivering. This is one of the pivotal moments in our industry where we cross over an intersection in our technology evolution to enter a new journey with a paradigm shift.…
On January 2, 2025, Kong became aware that an unauthorized actor had been able to publish a Docker image containing a cryptominer to the Kong DockerHub registry that affected v. 3.4.0 of the open source Kong Ingress Controller (KIC). Our security team immediately revoked any public access to the…
As AI technologies continue to revolutionize industries, organizations must balance innovation with responsibility. Kong understands that embracing AI involves not just adopting new tools but also ensuring they're secure, compliant, and sustainable. During a recent visit to Singapore, Kong's…
Ensuring secure access to applications and APIs is critical. As organizations increasingly adopt microservices architectures and cloud native solutions, the need for robust, fine-grained access control mechanisms becomes paramount. This is where the combination of Open Policy Agent (OPA) and Kong…
Today we're excited to announce Kong Gateway 3.9! Since unveiling Kong Gateway 3.8 at API Summit 2024 just a few months ago, we’ve been busy making important updates and improvements to Kong Gateway. This release introduces new functionality around LLM support for AI governance and security and…
APIs facilitate effortless communication and data exchange between applications and services. However, their inherent design, which codifies service capabilities within the API definition, makes them easily exploitable by malicious actors. API attacks in the US alone are projected to cost $506…