Developers will remember times when they were trying to figure out why something they were working on wasn’t behaving as expected. Hours of frustration, too much (or perhaps never enough) caffeine consumed, and sotto voce curses uttered. And then — as if by fate — the issue is narrowed down to a…
[](/blog/engineering/debugging-kong-requests)
In this post, we'll talk about what API SecOps is, including the fundamentals of it and the personas involved. Then, we'll discuss how API, microservice, and policy lifecycles integrate to produce a secure service in production, and why collaboration and API-First Design are essential for APISecOps…
[](/blog/engineering/apisecops)
A critical and challenging requirement for many organizations is meeting audit and compliance obligations. The goal of compliance is to secure business processes, sensitive data, and monitor for unauthorized activities or breaches. AWS CloudTrail Lake now enables customers to record user…
[](/blog/engineering/aws-cloudtrail-lake-isv-launch-partner)
In this post, Nathaniel Reynolds, Associate Director of Informatics Architecture & DevOps at Moderna Therapeutics, talks about service mesh, removing limitations with open source, and how AI helps developers do more. No one can predict the future, but here's a safe bet: in the next five to ten…
[](/blog/enterprise/service-mesh-success-with-moderna)
Viktor Gamov also contributed to this post. In recent decades it's become common for communication between backend services to employ HTTP APIs with JSON payloads. Many HTTP APIs adhere (or at least aspire) to REST Principles, though many fall into a category we'll call "REST-like". Some…
[](/blog/engineering/building-grpc-apis-with-rust)
Since our last Kong Konnect monthly update , we've been hard at work to deliver some more powerful features in Kong Konnect , including consumer groups, dynamic client registration using Curity and Auth0, plugin ordering, and streamlined Docker runtime instance creation. Read on to learn what's new…
[](/blog/product-releases/kong-konnect-supports-consumer-groups)
We’re excited to announce the release of Kong Mesh and Kuma 2.1! In this release, we’re shipping the full suite of new and improved policies announced (and started) in 2.0. Additionally, we’re launching some more great UX improvements in the UI and a host of smaller fixes. In order to take…
[](/blog/product-releases/kong-mesh-kuma-2-1)
The joy (and sometimes woe) of working in technology is that we're forever learning. The software stack is constantly changing, so innovators come to embrace a lifetime of learning. In this ever-evolving IT landscape, measurable skills have become the global currency for IT professionals. In this…
[](/blog/product-releases/kong-certification)
OAuth (short for Open Authorization) is a popular, standardized API protocol that provides a secure way for services to quickly share resources for a seamless user experience. Examples of OAuth in action include giving a greeting card service access to your photo library to make a custom holiday…
[](/blog/learning-center/what-is-oauth)Kong’s open-source API Gateway is a highly successful project with over 33k stars on GitHub and 293 contributors. Kong provides a powerful platform that can be extended using hundreds of plugins provided by Kong, ecosystem partners, and the community. Kong’s Enterprise subscription provides an…
[](/blog/engineering/how-and-why-to-migrate-from-kong-open-source-to-kong-enterprise-api-gateway)
Hayden Lam also contributed to this post. Today we’re thrilled to announce new features in Kong Konnect , including secrets management, support for Kong Gateway 3.1, Analytics updates, runtime group APIs, system accounts, and an intuitive overview page and service wizard. In this blog, we'll…
[](/blog/product-releases/konnect-updates-analytics-secrets-management)
2022 is coming to a close, and what better way to end the year than a list for list's sake? As we reflect on the year passing, here are the top five Kong moments of 2022 as decided by me (because all the people more important than me are already on vacation). Read on!…
[](/blog/news/2022-year-in-review)
Kuma is configurable through policies. These enable users to configure their service mesh with retries, timeouts, observability, and more. Policies contain three main pieces of information: Which proxies are being configured What traffic for these proxies this configuration applies to (i.e:…
[](/blog/engineering/flexible-policy-match-in-kuma-2-0)
We're excited to announce the general availability of Kong Insomnia 2022.7. This update brings several new capabilities into the fold with a focus on improving API quality and driving productivity. Read on to learn more about what's new in Kong Insomnia. Providing a streamlined, developer-friendly…
[](/blog/product-releases/kong-insomnia-2022-7)
IBM recently announced the deprecation of its Cloud API Gateway, a service used to create and manage APIs by placing a gateway in front of existing IBM Cloud endpoints. With this move, IBM Cloud Functions and IBM Cloud Foundry are no longer able to use Cloud API Gateway service for rate limiting,…
[](/blog/engineering/ibm-cloud-api-gateway-migration)Secure your AI infrastructure with prompt guards, PII sanitization, and centralized governance. Control LLM costs with token-based rate limiting and semantic routing across providers.