Over the last ten years, Kongers have witnessed hundreds of companies adopting a full lifecycle API management platform and have been working with the people behind the scenes, the “API tribes.” We’ve also learned from the field that API tribes most often have to deal with heterogeneous platforms,…
[](/blog/enterprise/api-gateway-service-mesh-and-zero-trust)
Whether ordering groceries online, checking your bank balance, or tracking a delivery, APIs are behind the scenes making it all possible. They're the backbone of the digital experiences that drive our interconnected global economy. You may know that. But beyond the convenient (and sometimes…
[](/blog/enterprise/the-economic-impact-of-apis)
Imagine this: You're documenting an unreleased feature, and your documentation requires screenshots. However, you're working in an internal environment that includes features you don't want to reveal to the public. What do you do? We faced this exact situation during the API Summit release when we…
[](/blog/engineering/docs-as-code-screenshot-automation)
Modern software design relies heavily on distributed systems architecture, requiring all APIs to be robust and secure. GraphQL is no exception and is commonly served over HTTP, subjecting it to the same management concerns as any REST-based API. In fact, GraphQL’s dynamic client querying…
[](/blog/engineering/governing-graphql-apis-with-kong-gateway)
Everyone’s talking AI — or artificial intelligence. But much of that talk falls into one of two extremes: AI will fix everything or AI will ruin everything. But let’s set aside hyperbolic ideas of AI as a silver bullet for all humanity's potential woes (or darkest timeline visions of Skynet) and…
[](/blog/enterprise/ai-in-the-enterprise)
With Kong Insomnia 8.3 ( available today ) we’ve brought back 100% local storage with no cloud synchronization for your projects, while at the same time keeping the same workflow for users who want to collaborate in the cloud. To start using Local Vault, get started for free with Insomnia. This…
[](/blog/product-releases/insomnia-8-3)
We’re thrilled to announce the winners of the 3rd Annual Kong Hackathon, held in conjunction with API Summit 2023 ! This year's hackathon centered around API innovation using artificial intelligence, challenging participants to create AI-powered solutions revolving around APIs. Over the past month,…
[](/blog/engineering/2023-hackathon-winners)
At Kong, the security and reliability of our products have always been paramount. In light of the recent discovery of the Novel HTTP/2 ‘Rapid Reset’ DDoS attack ( CVE-2023-44487 ), we have taken steps to proactively address potential issues. Today we’re providing guidance on how our users can best…
[](/blog/product-releases/novel-http2-rapid-reset-ddos-vulnerability-update)
As businesses expand and gain visibility, it’s natural that their API attack surfaces become more exposed — increasing the risk of dangerous data breaches. Protecting cloud communications and securing data in transit should be your organization’s top priority. API authentication mechanisms help…
[](/blog/engineering/common-api-authentication-methods)This post is part of our Kong Champions series, where real Kong users walk you through technical challenges, use cases, and new technology they're using in their day-to-day. Sign up here to become a Kong Champion. As a Kong user, I've had the opportunity to dive deep into Kong's offerings. I've…
[](/blog/engineering/kong-saml-plugin-examples-and-uses)
In today’s modern digital environment, more organizations are relying on remote work than ever before. While this shift has given companies unprecedented flexibility when it comes to deploying their workforce, it has also presented challenges in keeping their devices, operations, and personnel…
[](/blog/engineering/ztna-vs-vpns)When it comes to digital identity, OpenID and OAuth are two peas in a pod, but they have their differences. OpenID connects you to relying parties using a single sign-on, while OAuth grants access tokens so you can give apps limited access. They both make authentication simple, seamless, and…
[](/blog/engineering/openid-vs-oauth-what-is-the-difference)The Kong Gateway CI was failing intermittently (about once every 100 runs) on the ARM64 platform with a strange error: “attempt to perform arithmetic on local 'i' (a function value)”. The variable i in the context is an integer but at runtime, it was sometimes a function value. This is caused by a…
[](/blog/engineering/troubleshooting-an-intermittent-failure-on-arm64)
Picture this: You're building the next generation of microservices architecture in your organization. The orchestration is in place, containers are humming, and you've chosen Kong Gateway (naturally) to manage the APIs, ensuring smooth communication. But then, you hit a snag. You need a custom…
[](/blog/engineering/proxy-wasm)
API Summit 2023 has just concluded, with awesome announcements including the launch of Kong Mesh in Konnect, and Dedicated Cloud Gateways. In addition to launching new capabilities, we also ensured that our existing products continue to grow and deliver value. With that in mind, I’m pleased to…
[](/blog/product-releases/kong-ingress-controller-2-12)