The JSON Web Token (JWT) is an open standard that allows information to be transferred securely between different parties. The token is digitally signed by using a private key (HMAC) or a public/private key (RSA) by building a JSON Web Signature (JWS). It guarantees that the JWT hasn’t been…
[](/blog/engineering/craft-and-sign-custom-jwt)
In today's rapidly evolving technological landscape, software teams have found themselves at the heart of business strategy. Their decisions on which technologies to invest in have become crucial, directly impacting a company's agility and ability to differentiate itself in the market. As a result,…
[](/blog/enterprise/why-your-engineers-want-to-migrate-to-kubernetes)
Two of the main tenets of Zero Trust are encryption between services and managing the connections each service is allowed to use. Achieving this generally falls to running a service mesh in a Kubernetes cluster. Refactoring applications to run properly in Kubernetes takes time and considerable…
[](/blog/engineering/zero-trust-on-vms-with-universal-mesh)
As organizations build more APIs, manual processes and frequent handoffs in the API development workflow can lead to a slower time to market, higher development costs, and poor-quality APIs. They can also result in APIs being poorly documented, causing poor API adoption and lower revenues. APIOps…
[](/blog/engineering/automating-api-delivery-with-apiops-and-kong)
The concept of insurance predates the printing press and the steam engine. So it's likely no surprise that the industry — as obviously adaptable as it is — often faces challenges related to the modernization of legacy systems. In the age of AI and APIs (application programming interfaces) ,…
[](/blog/enterprise/api-management-insurance)
In the age of surgical robots, smart refrigerators, self-driving vehicles, and unmanned aerial vehicles, connectivity undoubtedly is a foundational block for our modern world. As we move further into the 2020s, this connectivity has expanded to encompass emerging technologies like 5G networks ,…
[](/blog/enterprise/5-architectural-patterns-for-securing-connectivity-at-scale)
The cloud native paradigm for application development has evolved significantly since its inception. Today, it encompasses microservices architecture, containerized services, automation, orchestration, distributed management, and emerging technologies like serverless computing and edge computing.…
[](/blog/engineering/6-strategy-elements-for-building-cloud-native-applications)
We're introducing several new Kong AI Gateway capabilities in Kong Gateway 3.7 and Kong Gateway Enterprise 3.7, including enterprise-only and OSS improvements. Read on for a full rundown of the new AI-focused features. With the new Kong Gateway 3.7 release , we're promoting Kong AI Gateway to GA…
[](/blog/product-releases/ai-gateway-goes-ga)
We're thrilled to announce the general availability of Kong Gateway 3.7 and Kong Gateway Enterprise 3.7. Along with enhancements and new features for both OSS and enterprise users, this version comes with the general availability of our edge AI Gateway. This release offers a brand new context…
[](/blog/product-releases/kong-gateway-3-7)
We're pleased to announce the general availability of Kong Insomnia 9.2. This release further expands on the features recently announced in Insomnia 9.0 , with support for automatically generated fake values powered by the Faker.js library. With the new Faker support, we are further augmenting the…
[](/blog/product-releases/announcing-insomnia-9-2)
The service mesh architecture pattern has become a de facto standard for microservices-based projects. In fact, from the mesh standpoint, not just microservices but all components of an application should be under its control, including databases, event processing services, etc. It's critical to…
[](/blog/engineering/service-mesh-reference-architecture-openshift-istio-kong)
You can use the new comprehensive search bar in Kong Konnect to quickly retrieve the information you need across Konnect entities so you can focus on taking action. Operating through a platform search API , the new search bar’s query syntax offers advanced and precise search capabilities and is…
[](/blog/product-releases/konnect-revamped-search)
"The whole is more than the sum of its parts." Aristotle is credited with this quote, and it's true in the world of data. Legacy systems typically approached their role in a limited manner. Each system was intended to be used by a certain user set and handle well-defined processes and associated…
[](/blog/engineering/api-gateway-federation)
Let’s pose a hypothetical scenario. You're the API product owner at the Paris, Texas Regional Airport. You're in charge of two main APIs: Flights API and Scheduling API. Flights API is primarily used by local research institutions that are interested in read-only access to information about…
[](/blog/engineering/managing-application-auth)
Most APIs today are accessed over the ubiquitous HTTP protocol and the framework to create these APIs is known as REpresentational State Transfer (REST). These APIs are known as RESTful APIs . However, if you've been working in API development over the last several years, then you have likely heard…
[](/blog/learning-center/what-is-grpc)Secure your AI infrastructure with prompt guards, PII sanitization, and centralized governance. Control LLM costs with token-based rate limiting and semantic routing across providers.