Today we’re launching the Kong Konnect Engineering Tech Blog, dedicated to exploring the technology challenges and solutions we’ve encountered. The objective? To offer valuable technical content that enables our readers to broaden their engineering expertise. Kong has been in the software industry…
[](/blog/engineering/meet-the-engineers-behind-konnect)
In the modern IT stack, API gateways act as the first line of defense against attacks on backend services by enforcing authentication/authorization policies and validating and transforming requests. When backend services are protected with a token-based approach, client applications must obtain an…
[](/blog/engineering/zero-trust-oauth-2-0-mtls-client-authentication)
After getting our Konnect Data Planes vertically and horizontally scaled, with VPA and HPA , it's time to explore the Kubernete Node Autoscaler options. In this post, we start with the Cluster Autoscaler mechanism. (Part 4 in this series is dedicated to Karpenter.) The Kubernetes Cluster Autoscaler…
[](/blog/engineering/dp-node-autoscaling-with-cluster-autoscaler-aws-eks-1-29)
Today I’m excited to announce that Kong has released six new open source AI plugins in Kong Gateway 3.6 that turn every Kong Gateway deployment into an AI Gateway . These new plugins are available today and are entirely free and open source for everyone. The six new plugins are AI Proxy, AI…
[](/blog/product-releases/announcing-kong-ai-gateway)
We're thrilled to announce the general availability of Kong Gateway 3.6. This version features a high-performance compression algorithm, efficient route matching, and improved observability. Plus, Kong AI Gateway , which you can learn more about here . Let’s dive into the enhancements and explore…
[](/blog/product-releases/kong-gateway-3-6)
We're thrilled to announce the general availability of Kong Gateway Enterprise 3.6. This version brings security, efficiency, and standards conformance to enterprise applications. Plus, Kong AI Gateway , which you can learn more about here . Let’s dive into the enhancements and explore the tangible…
[](/blog/enterprise/kong-gateway-enterprise-3-6)
In my previous post , we discussed how to take advantage of VPA to implement automatic vertical scaling for our Konnect Data Planes. In this post, we'll focus on HPA for horizontal Kubernetes Pods autoscaling. VPA docs recommend not using VPA along with HPA on CPU or memory metrics at this moment.…
[](/blog/engineering/pod-autoscaling-with-hpa-on-eks-1-29)
Kong Ingress Controller 3.1 provides brand-new capabilities for keeping your secrets secure. We’ve introduced new KongVault and KongLicense CRDs, and added a way to keep sensitive information in your cluster when using KIC in Konnect. Finally, there’s a quality-of-life improvement that allows you…
[](/blog/product-releases/kic-3-1)
With digital transformation shifting networks into the cloud — from remote workforces to online banking — cyberattacks are growing more prevalent and sophisticated. Legacy security models like VPNs and perimeter-based firewalls are proving inadequate in addressing modern threats because perimeters…
[](/blog/engineering/microsegmentation-and-zero-trust-security)
In this series of posts, we will look closely at how Kong Konnect Data Planes can take advantage of Autoscalers running on Amazon Elastic Kubernetes Services (EKS) 1.29 to support the throughput the demands API consumers impose on it at the lowest cost. The series comprises four parts: One of the…
[](/blog/engineering/data-plane-elasticity-eks-1-29-pod-autoscaling-with-vpa)
We want our engineering teams to move fast and be agile, yet many organizations confuse ownership of the infrastructure with ownership of the policies. The latter is what engineering teams want to rapidly iterate and develop their APIs. The former is the responsibility of the platform team. In this…
[](/blog/enterprise/balancing-autonomy-and-control)
As API adoption continues, early autonomy incentives often have led to shadow IT and infrastructure sprawl. To secure our growing API attack surface, technology leaders must implement organizational accountability through security oversight, platform observability, and role clarity. Establishing…
[](/blog/enterprise/culture-accountability-application-development)
The first release of Kong Mesh for 2024 (version 2.6) brings many new features that ease day 0 for new starters of service mesh reinforcing our goal of making a simple yet powerful product! In this blog, we'll break down these new features and provide tailored use cases to illustrate how Kong Mesh…
[](/blog/product-releases/kong-mesh-2-6)
As Kubernetes has become the de facto orchestration platform for deploying cloud native applications , networking and traffic management have emerged as pivotal challenges when managing access to services and infrastructure. The core Kubernetes Ingress resource addresses basic Layer 7 (L7) routing…
[](/blog/engineering/gateway-api-vs-ingress)
The acceleration of microservices and containerized workloads has revolutionized software delivery at scale. However, these distributed architectures also introduce significant complexity around networking, security, and observability. As development teams grappled with reliability and governance…
[](/blog/engineering/day-0-service-mesh-implementation)