We are happy to announce a new major release of Kuma, and a new major release of Kong Mesh built on Kuma! Kuma 1.2 ships with 20 new features and countless improvements. We strongly suggest to upgrade, in order to take advantage of the latest and greatest when it comes to service mesh. For…
[](/blog/product-releases/kuma-1-2-kong-mesh-1-3)
In this first section, I'll provide a quick overview of the business case and the tools you can use to create a Kubernetes ingress API gateway. If you're already familiar, you could skip ahead to the tutorial section or watch the video at the bottom of this article. Digital transformation has led…
[](/blog/engineering/kubernetes-ingress-api-gateway)
Kong Dev Portal comes out of the box with a RESTful API -based catalog and YAML-based template functionality. In this tutorial, I'll show you how to get to the next level of API documentation using Kong Dev Portal with GraphQL. That way, you'll be able to give your API developers an interactive…
[](/blog/engineering/kong-developer-portal-graphql)
In our third Kong and Okta tutorial, we'll go through the introspection flow implementation. This series will show you how to implement service authentication and authorization for Kong Konnect and Okta using the OpenID Connect ( OIDC ) plugin. Parts 1, 2 and 4 cover: [iframe loading="lazy"…
[](/blog/engineering/introspection-flow-konnect-okta)
Razorpay is a payments processor that's required to comply with PCI guidelines . This article will explain how we developed a custom Lua plugin to simplify PCI compliance with Kong Gateway . The Payment Card Industry Data Security Standard (PCI-DSS) is a set of requirements to ensure that all…
[](/blog/enterprise/pci-compliance-kong-gateway)
The demand for digital transformation has accelerated, with 62% of technology leaders sharing that they fear they are at risk of being displaced by competitors who innovate more quickly. Enterprises are increasingly transitioning from monolithic to microservices architecture, with the goal to…
[](/blog/enterprise/security-plan-microservices-applications)
Multi-cloud infrastructure is changing the way companies approach their software architecture. What started solely as gateway traffic management has evolved into full lifecycle API management . I recently sat down with Reza Shafii, Kong's VP of product, for a blog series where we explore how full…
[](/blog/enterprise/containerization-cloud-native-reza-shafii)
One of the most common questions I get asked is around the relationship between Kong Gateway and Kuma or Kong Mesh . The linking between these two sets of products is a huge part of the unique “magic” Kong brings to the connectivity space. In this blog post and the video below, we’re going…
[](/blog/engineering/kuma-service-mesh-gateway-mode)
Operating APIs and microservices at scale relies on the right processes and company culture. APIOps is the name for this overall approach. If done right, organizations can accelerate digital business with APIOps. It combines modern automation tooling with best practice engineering principles to…
[](/blog/enterprise/accelerate-digital-business-with-apiops-part-1)
Want to learn more about the nuts and bolts of APIOps? Download our eBook, Unlocking the Full Potential of your APIs with APIOps , and learn about the stages of APIOps, get an understanding of the technical assets required, and explore the tooling needed to transform API development and management.…
[](/blog/engineering/automating-developer-pipeline-apiops)
President Biden issued an " Executive Order on Improving the Nation's Cybersecurity " (Executive Order 14028) as of May 12, 2021. The order includes numerous actions and mandates to confront the dangers of cyber attacks that are increasing in frequency and sophistication. Cybersecurity has real and…
[](/blog/enterprise/executive-order-14028-cybersecurity-mandate-zero-trust-architecture)
🎂 Make a wish and blow out the candles…we're celebrating Kong's sixth anniversary! 👏👏👏 In 2015, Mashape open sourced Kong Gateway , launching the next generation of API management. In our last anniversary post, I took a look back at our history . For this 6th anniversary post, I'll focus on how…
[](/blog/news/kong-gateway-oss-turns-six)
One of the most powerful capabilities provided by Kong Konnect API Cloud Platform is the support for Hybrid deployments. In other words, it implements distributed API Gateway Clusters with multiple instances running on several environments at the same time. Moreover, Kong Enterprise provides a new…
[](/blog/enterprise/konnect-enterprise-elastic-container-service-anywhere)
In our second Kong and Okta tutorial, we'll go through the authorization code flow applied to user authentication processes. This series will show you how to implement service authentication and authorization for Kong Konnect and Okta using the OpenID Connect ( OIDC ) plugin. Parts 1, 3 and 4…
[](/blog/engineering/konnect-okta-authorization-code-flow)
If you've not heard of decK (our declarative configuration and drift detection tool for Kong Gateway ) before, now's a great time to get hands-on with it as we've just shipped decK v1.7.0 with a whole host of new goodies. Oh, and it's all open source as usual. v1.7.0 adds lots of Konnect -related…
[](/blog/product-releases/deck-1-7-0-released)Secure your AI infrastructure with prompt guards, PII sanitization, and centralized governance. Control LLM costs with token-based rate limiting and semantic routing across providers.