Blog
  • AI Gateway
  • AI Security
  • AIOps
  • API Security
  • API Gateway
|
    • API Management
    • API Development
    • API Design
    • Automation
    • Service Mesh
    • Insomnia
    • View All Blogs
  1. Home
  2. Blog
  3. Product Releases
  4. Kong Mesh & Kuma 2.2 Released with Global Rate Limiting, OpenTelemetry, and More
Product Releases
April 14, 2023
4 min read

Kong Mesh & Kuma 2.2 Released with Global Rate Limiting, OpenTelemetry, and More

John Harris
Principal PM Kong Mesh & Kuma

We’re excited to announce the release of Kong Mesh and Kuma 2.2. This new minor release adds some long-awaited enterprise features, more incremental improvements to our UI and policies, and many more minor features and bug fixes.

In order to take advantage of the latest and greatest in service mesh, we strongly suggest upgrading to Kong Mesh 2.2. Upgrading is easy through kumactl or Helm.

Notable features:

Flexibility:

  • Added new policy for Global Rate limiting, using a dedicated rate limit service and external redis
  • OpenTelemetry support for tracing and access logging
  • Added the ability to define MeshProxyPatch policies using JSONPatch, allowing greater power and flexibility to customize underlying Envoy configuration
  • Multiple improvements and functionality added to the MeshHTTPRoute policy, including:
    • Cross-zone support
    • Request mirroring
    • Host header rewrites for the MeshGateway
    • Header matching
    • Support for retry predicates and priorities
  • Additional options for customizing the pods backing a MeshGatewayInstance deployment
  • Upgraded underlying Envoy version to 1.25
  • Various other bug fixes and quality-of-life improvements across the product
Scalability:
  • New MeshLoadBalancing policy, enabling more granular control of load balancing configuration between services
  • Official support for deploying a Universal mode global control plane (Postgres-backed) to a Kubernetes cluster for better availability and resilience characteristics
Security:
  • Ability to provide a public key for offline token signing and validation
  • Composable Open Policy Agent (OPA) policies, now allowing multiple OPA policies to be applied to the same services
  • Improved RBAC views in the UI
For more details, reference the Kong Mesh Changelog.

Global Rate Limiting

We’ve had the ability to configure local rate limiting in Kong Mesh for some time, through the use of the RateLimit policy. However, this was only able to affect limits to a single instance of the service as the limit was applied on the inbound listener. In 2.2, we’re introducing the capability to add a global rate limit to a service, allowing users to restrict the calls to the combined instances of a service.

This new capability adds a new global-rate-limiting service that is deployed to the environment (can be auto-installed with Helm on Kubernetes, or manually in Universal VM mode) with an added dependency on an external Redis installation.

[caption id="attachment_48017" align="aligncenter" width="1024"] Figure 1: Global Rate Limiting architecture[/caption]

Head over to the docs to read more about deploying and configuring this new Global Rate Limiting capability today.

OpenTelemetry Support

We’re really excited to announce that in 2.2 we’ve released the ability to use an OpenTelemetry collector as a target for both access logs and traces within Kong Mesh and Kuma. Huge shoutout to our community who contributed this functionality upstream!

Our support for OTEL means that in both the MeshAccessLog and MeshTrace policies, it’s now possible to specify an openTelemetry type backend:

Figure 2 : Logging to multiple backends, demonstrating the new openTelemetry backend

The OTEL collector is a great way to collect log, trace, and metrics data and translate and send that to any external observability vendor tooling.

Head over to the docs to check out how to use the new OpenTelemetry backend with both MeshAccessLog and MeshTrace policies.

Kubernetes Deployments with Postgres Storage

Kong Mesh and Kuma historically supported two different deployment modes, Kubernetes and Universal (VM / non-containerized). In the former, we use etcd at the persistence layer for configuration in the form of Kubernetes CRDs. In the latter, we utilize an external Postgres database to persist all of the policy and configuration objects. If Kong Mesh and Kuma were deployed in a cloud provider’s Kubernetes distro, this would likely mean that we were running with more limited HA capabilities as clusters can typically only span multiple availability zones within a region. If an entire region were to experience downtime, the global control plane would also be degraded.

In 2.2, we’re adding built-in support for a combination of the above modes that we’re calling ‘Universal on K8s’. It allows users to deploy Kong Mesh and Kuma into Kubernetes but pointing to an external Postgres datastore (rather than making use of CRDs), allowing them to span a single deployment across multiple regions, increasing resiliency.

This is a model of deployment we use internally here at Kong to power our Kong Konnect platform, and we’re formalizing support for it so it can be utilized by our users in the form of additional Helm chart options and supporting documentation.

[caption id="attachment_48018" align="aligncenter" width="1024"] Figure 3: ‘Universal on K8s’ mode, with Postgres storage[/caption]

New RBAC UI Views

As part of our ongoing improvements to our Kong Mesh UI, we’ve simplified our navigation sidebar (and will be making further changes in coming releases). We’ve also streamlined and enhanced our Role-Based Access Control section to make it easier for users to see the roles and role bindings that exist in the environment and which permissions each role has access to.

[caption id="attachment_48019" align="aligncenter" width="1024"] Figure 4: New UI RBAC view, streamlined with easier access to relevant information[/caption]

We’re excited about how the UI effort is looking, and many more UI improvements are coming in the next few releases, so stay tuned!

Get in touch with Kong to learn more about Kong Mesh and how to build an enterprise service mesh. You can also download Kong Mesh and get started for free.

Service MeshKumaRate Limiting

More on this topic

Webinars

Major New Release: Explore Kuma 1.2

Videos

Taming Envoy Metrics with Kuma and MeshMetric Policy

See Kong in action

Accelerate deployments, reduce vulnerabilities, and gain real-time visibility. 

Get a Demo
Topics
Service MeshKumaRate Limiting
Share on Social
John Harris
Principal PM Kong Mesh & Kuma

Recommended posts

Kong Mesh 2.13: Mesh Identity Support for Universal Mode & LTS

Product ReleasesJanuary 22, 2026

Kong Mesh 2.13 delivers full support for Mesh Identity for Kubernetes and Universal mode. Plus, it's been designated as a Long Term Support release, with support for a total of 2 years. But first, what's Kong Mesh for the uninitiated? Built on top

Justin Davies

Leveraging Mesh Global Rate Limit Policy in Kong Mesh 2.3

Product ReleasesJuly 25, 2023

In today’s interconnected and dynamic world of microservices, ensuring optimal traffic management and protection against malicious attacks are critical. Rate limiting , a popular mechanism for controlling request flow, gets more effortless with the

Marcin Skalski

Kong Mesh & Kuma 2.1 released with full suite of next-gen policies

Product ReleasesFebruary 1, 2023

We’re excited to announce the release of Kong Mesh and Kuma 2.1! In this release, we’re shipping the full suite of new and improved policies announced (and started) in 2.0. Additionally, we’re launching some more great UX improvements in the UI and a

John Harris

Kong Mesh and Kuma 2.0 Released with eBPF Support, Next-Gen Policies

Product ReleasesNovember 4, 2022

Today we’re excited to announce the release of Kong Mesh and Kuma 2.0. With this new major release, we’re announcing the first availability of our next-generation policies, in addition to new eBPF capabilities. 2.0 is also significant as we have

John Harris

Kong Mesh 1.9 and Kuma 1.8 Released with Gateway GA, New CNI

Product ReleasesAugust 24, 2022

We are happy to announce the release of Kong Mesh 1.9 and Kuma 1.8! This release is packed with features and improvements such as observability for builtin Gateway, a complete rewrite of the CNI and projected service account tokens support. In order

Charly Molter

Kuma 1.7.0 and Kong Mesh 1.8.0 Released with Builtin Gateway

Product ReleasesJune 15, 2022

We’re excited to announce the latest release for both Kuma and Kong Mesh. This cycle, we focused on simplifying enterprise-wide mesh deployments. We strongly suggest upgrading, in order to take advantage of the latest and greatest when it comes to s

Marco Palladino

Kuma 1.5.0 and Kong Mesh 1.6.0 Released

Product ReleasesFebruary 24, 2022

We are happy to announce the first release for both Kong Mesh and Kuma in 2022, which is packed with features and improvements, including substantial performance improvements when running at scale. We strongly suggest to upgrade, in order to take ad

Marco Palladino

Ready to see Kong in action?

Get a personalized walkthrough of Kong's platform tailored to your architecture, use cases, and scale requirements.

Get a Demo
Powering the API world

Increase developer productivity, security, and performance at scale with the unified platform for API management, AI gateways, service mesh, and ingress controller.

Sign up for Kong newsletter

    • Platform
    • Kong Konnect
    • Kong Gateway
    • Kong AI Gateway
    • Kong Insomnia
    • Developer Portal
    • Gateway Manager
    • Cloud Gateway
    • Get a Demo
    • Explore More
    • Open Banking API Solutions
    • API Governance Solutions
    • Istio API Gateway Integration
    • Kubernetes API Management
    • API Gateway: Build vs Buy
    • Kong vs Postman
    • Kong vs MuleSoft
    • Kong vs Apigee
    • Documentation
    • Kong Konnect Docs
    • Kong Gateway Docs
    • Kong Mesh Docs
    • Kong AI Gateway
    • Kong Insomnia Docs
    • Kong Plugin Hub
    • Open Source
    • Kong Gateway
    • Kuma
    • Insomnia
    • Kong Community
    • Company
    • About Kong
    • Customers
    • Careers
    • Press
    • Events
    • Contact
    • Pricing
  • Terms
  • Privacy
  • Trust and Compliance
  • © Kong Inc. 2026