At Kong, the security and reliability of our products have always been paramount. In light of the recent discovery of the Novel HTTP/2 ‘Rapid Reset’ DDoS attack ( CVE-2023-44487 ), we have taken steps to proactively address potential issues. Today we’re providing guidance on how our users can best…
[](/blog/product-releases/novel-http2-rapid-reset-ddos-vulnerability-update)
As businesses expand and gain visibility, it’s natural that their API attack surfaces become more exposed — increasing the risk of dangerous data breaches. Protecting cloud communications and securing data in transit should be your organization’s top priority. API authentication mechanisms help…
[](/blog/engineering/common-api-authentication-methods)
This post is part of our Kong Champions series, where real Kong users walk you through technical challenges, use cases, and new technology they're using in their day-to-day. Sign up here to become a Kong Champion. As a Kong user, I've had the opportunity to dive deep into Kong's offerings. I've…
[](/blog/engineering/kong-saml-plugin-examples-and-uses)
In today’s modern digital environment, more organizations are relying on remote work than ever before. While this shift has given companies unprecedented flexibility when it comes to deploying their workforce, it has also presented challenges in keeping their devices, operations, and personnel…
[](/blog/engineering/ztna-vs-vpns)
When it comes to digital identity, OpenID and OAuth are two peas in a pod, but they have their differences. OpenID connects you to relying parties using a single sign-on, while OAuth grants access tokens so you can give apps limited access. They both make authentication simple, seamless, and…
[](/blog/engineering/openid-vs-oauth-what-is-the-difference)The Kong Gateway CI was failing intermittently (about once every 100 runs) on the ARM64 platform with a strange error: “attempt to perform arithmetic on local 'i' (a function value)”. The variable i in the context is an integer but at runtime, it was sometimes a function value. This is caused by a…
[](/blog/engineering/troubleshooting-an-intermittent-failure-on-arm64)
Picture this: You're building the next generation of microservices architecture in your organization. The orchestration is in place, containers are humming, and you've chosen Kong Gateway (naturally) to manage the APIs, ensuring smooth communication. But then, you hit a snag. You need a custom…
[](/blog/engineering/proxy-wasm)
API Summit 2023 has just concluded, with awesome announcements including the launch of Kong Mesh in Konnect, and Dedicated Cloud Gateways. In addition to launching new capabilities, we also ensured that our existing products continue to grow and deliver value. With that in mind, I’m pleased to…
[](/blog/product-releases/kong-ingress-controller-2-12)
API Summit 2023 is a wrap! Over the two-day conference (our sixth-annual event), we packed in over 40 hours of content in 100 sessions touching on everything from ensuring reliable connectivity to generative AI. We heard from investors about the future of APIs, as well as stories from users and…
[](/blog/news/api-summit-2023-recap)
After 12 months of hard work, we’re excited to announce the biggest release of Kong Insomnia that we have ever seen: Kong Insomnia 8.0, significantly rebuilt from the ground up and available today in GA. You can get started for free on insomnia.rest . Announced today at API Summit 2023, Kong…
[](/blog/product-releases/insomnia-8-0)
Today at API Summit 2023 , we’re launching a revolutionary update to Kong Konnect SaaS that brings together many of the innovations we’ve been developing this last year. This latest version of Kong Konnect is dedicated to visionary and pragmatic developers and customers who are working hard to make…
[](/blog/product-releases/the-new-kong-konnect)
We’re excited to announce Kong's unified API lifecycle management platform. Kong Konnect, our cloud API platform, can now manage services from API gateway, Ingress, and service mesh with a hosted control plane that can be implemented across any cloud provider, Kubernetes distribution, or…
[](/blog/product-releases/mesh-in-konnect)
At Kong, we love APIs! They’re the foundation of modern architecture, and we believe they’re only going to expand in scope over time. We also support a number of different tools to manage APIs — from decK for declarative Kong Gateway configuration to Kong Insomnia for development and exploration of…
[](/blog/product-releases/kong-manager-open-source)
The growth of APIs continues to drive our digital economy, and API management underpins the success of every modern application and the businesses that depend on their success. Today, we are very excited to announce the release of an essential guide to building and managing next-generation API…
[](/blog/news/apollo-and-kong-blueprint)
GraphQL is a query language to enable applications to fetch data from servers. In fact, as it isn't tied to any specific database or storage engine, GraphQL can aggregate data from multiple sources to create a natural representation of your data. The representation is a graph. The following image…
[](/blog/engineering/restful-admin-apis-aws-appsync-graphql-services)Secure your AI infrastructure with prompt guards, PII sanitization, and centralized governance. Control LLM costs with token-based rate limiting and semantic routing across providers.