This tutorial shows you how easy it is to build a custom Lua plugin for Kong Gateway. My Kong Lua plugin example will automatically add a custom header to any response sent out, indicating the current plugin version. Kong API Gateway is built on OpenResty , which extends the NGINX proxy server to…
[](/blog/engineering/custom-lua-plugin-kong-gateway)
Many companies are leveraging DevOps, microservices , automation, self-service, cloud and CI/CD pipelines. These megatrends are changing how companies are building and running software. One thing that often slips through the cracks is security. With microservices, there's an increase in the number…
[](/blog/engineering/authorize-api-opa-kuma)
We are truly excited to release Kong Mesh 1.2 today and introduce three new security capabilities that make it the most secure enterprise service mesh available today. Kong Mesh is built on open source Kuma which Kong created in 2019 and has since donated it to the CNCF . Kuma is a universal…
[](/blog/product-releases/kong-mesh-1-2)
In this tutorial, I'm going to walk through adding OAuth2 authorization and authentication to your service with the Kong API Gateway OAuth2 plugin . First, I'll cover the fundamentals. If you're already familiar with how Kong Gateway and OAuth2 work, skip ahead to the tutorial . Interconnected.…
[](/blog/engineering/kong-gateway-oauth2)
TL;DR Insomnia Designer and Insomnia Core are now Insomnia. Insomnia Designer users will have to migrate to the new Insomnia application and Designer will no longer receive updates. When we originally built Insomnia Designer, we didn’t want to make large changes to Insomnia without understanding…
[](/blog/product-releases/insomnia-2021-1)
Kuma is an open source, CNCF service mesh that supports every environment, including Kubernetes and virtual machines. In this Kuma service mesh tutorial, I will show you how easy it is to get started. [iframe loading="lazy" width="890" height="560" src=""…
[](/blog/engineering/getting-started-kuma-service-mesh)
This article was written by Jeremy Justus and Ross Sbriscia, senior software engineers from UnitedHealth Group/Optum. This blog post is part three of a three-part series on how they've scaled their API management with Kong Gateway , the world's most popular open source API gateway. (Here's part
[](/blog/enterprise/scale-open-source-api-gateway)
The concept of zero-trust security is relatively simple. In essence, no entity or system should have trust by default. You should assume that any system you are talking to is not trustworthy until you establish otherwise. Within Kong Konnect , one mechanism to apply zero-trust is the OpenID Connect…
[](/blog/engineering/openid-connect-api-gateway)
It is a truth universally acknowledged that the culture change side of any technology transformation program is the hardest and slowest part to get right. If you cannot efficiently operationalize a technology investment, that investment is wasted. This is no different in the world of APIs and…
[](/blog/enterprise/what-is-apiops)
We are happy to announce a new release of Kuma – v1.0.8 – that ships with new health checking features and several improvements! We highly suggest to upgrade to this new version. For a complete list of features and updates, take a look at the full changelog . Join us on our community channels…
[](/blog/product-releases/kuma-1-0-8-released)
This article was written by Jeremy Justus and Ross Sbriscia, senior software engineers from UnitedHealth Group/Optum. This blog post is part two of a three-part series on how we've scaled our API management with Kong Gateway , the world's most popular open source API gateway. (Here’s part one…
[](/blog/enterprise/open-source-api-gateway-large-enterprise)
As you build and maintain more applications, your authentication strategy becomes increasingly important. It may also be top of mind for your boss since technology leaders cited "improve application security" as one of their top priorities in this year's Digital Innovation Benchmark . The Kong…
[](/blog/engineering/jwt-kong-gateway)
Today, we have really exciting news to share with you all. The Enterprise version of our Kong Gateway is now generally available, and it's like nothing we've ever released before. One standout component of version 2.3 is that it now has a "free" operating mode so that anyone can start off using the…
[](/blog/product-releases/kong-gateway-enterprise-2-3-now-generally-available)We are happy to announce a new release of Kuma – v1.0.7 – that ships with new features, performance improvements and fixes! We highly suggest to upgrade to this new version. For a complete list of features and updates, take a look at the full changelog . Join us on our community channels to…
[](/blog/product-releases/kuma-1-0-7-released)
Imagine you're going through immigration at the airport. The immigration officer says, "I don't need your passport because I trust that you are who you claim to be." Wait, what? That would never happen, right? That's because trust is exploitable. Sooner or later, somebody will try to lie about who…
[](/blog/engineering/zero-trust-service-mesh-security)