Day 0 Service Mesh: Simplifying Microservices Management

The acceleration of microservices and containerized workloads has revolutionized software delivery at scale. However, these distributed architectures also introduce significant complexity around networking, security, and observability. As development teams grappled with reliability and governance…
Kong Insomnia 8.0 Adds Scratch Pad, Enterprise SSO, AI-Generated Testing

After 12 months of hard work, we’re excited to announce the biggest release of Kong Insomnia that we have ever seen: Kong Insomnia 8.0, significantly rebuilt from the ground up and available today in GA. You can get started for free on insomnia.rest . Announced today at API Summit 2023, Kong…
Building Dynamic Aggregate APIs with GraphQL

Domain-driven designs are popular in organizations that have complex domain models and wish to organize engineering around them. REST-based architectures are a common choice for implementing the API entry point into these domains. REST-based solutions are straightforward for the API builder and for…
Best Practices for API Design Guidelines

Creating API design guidelines is a common practice for many enterprises. The goal? Ensuring that all teams involved in API development will adhere to them. However, this goal is often not achieved, as developers may not take the time to read, study, and apply these guidelines. To address this…
Multi-Tenancy and Kong: An Architectural Guide

Engineering organizations building modern API-driven systems have different priorities when it comes to their API management solution. These priorities will drive design decisions about the deployment of various components for API gateways. Some organizations are looking to optimize compute…
Configure SAML 2.0 Single Sign-on with Kong Enterprise

What is SAML? Security Assertion Markup Language (SAML) is an XML-based open standard that allows organizations to set up single sign-on (SSO) across multiple websites and applications. SAML 2.0 is the latest standard, and was ratified in March 2005, replacing SAML 1.1. We’ll refer to SAML as…
Web3 basics: What is decentralization?

Decentralization is a common term heard in systems architecture. But what that term means can vary from person to person — especially when Web3 enters the picture. In this post, we'll look at a couple different concepts of decentralization and how the Web3 version differs from Web2. For a primer on…
The Environmental Impact of Common Architecture Patterns

This is part of a 3-part series on APIs, sustainability, and climate change. Check out part 1 on managing a greener API lifecycle, and part 2 on ways to embed and innovate on top of third-party APIs to make greener products. In this final part, we will look at the environmental impact of common…
RESTful API Best Practices

In this article, were going to walk through a brief origin of RESTful APIs and then take a good look at what to consider when building your own APIs with RESTful design. RE presentational S tate T ransfer or REST is an architectural pattern designed by Roy Fielding, in a chapter of the dissertation…
Kong vs. Apigee: Flexible Is the New Strong

The API management space is changing - fast. In the past couple of years alone, we've seen huge changes in the deployment patterns that our customers are adopting. In the past, when the use cases were fairly simple, organizations would deploy an API gateway as a SaaS monolith in the cloud, sitting…
7 Modern Microservice Design Patterns

Microservices have an entirely new set of problems due to their distributed service-oriented architecture. As a result, microservice design patterns have surfaced. This post will consider the specific design patterns that can help us build reliable, secure and traceable microservices. Monitoring is…
Log4J, Log4Shell and Kong

If you've been online at all this week, chances are that you've heard about the Log4Shell zero-day ( CVE-2021-44228 ) in Log4J, a popular Java logging library. The vulnerability enables Remote Code Execution (RCE), which allows attackers to run arbitrary code on the target's machines. I know the…