The latest news and announcements about Kong, our products, and our ecosystem, as well as voices from across our community.
Modern API architectures are no longer linear. A single request can traverse multiple layers of authentication, transformation, enrichment, and observability. As these flows grow more dynamic, the need for fine-grained control over when plugins execute becomes critical. For years, the standard…
[](/blog/engineering/conditional-policy-execution)
OAuth 2.0 Token Exchange fundamentally alters how services establish trust. And the API gateway is the ideal location to enforce this new model. Modern applications don’t run as a single monolithic. They are composed of services — frontend APIs, backend microservices, third-party integrations —…
[](/blog/engineering/token-exchange-at-the-gateway)
The shift from single-model AI features to multi-agent pipelines is no longer a future concern — it's running in production today. MCP has become the de facto protocol for tool-calling, agent-to-agent (A2A) communication patterns are proliferating, and enterprise teams are wiring together complex…
[](/blog/product-releases/kong-ai-gateway-3-14)
API gateways and service meshes often create confusion in microservices architectures. Rather than competing, they work together, much like a front door lock paired with room-by-room security. Organizations need both to achieve comprehensive protection, because each addresses a different layer of…
[](/blog/enterprise/the-difference-between-api-gateways-and-service-mesh)
The global financial services industry is undergoing a massive, API-driven revolution. With the global open banking market valued at $31.61 billion in 2024 and projected to grow to $135.17 billion by 2030, this shift is accelerating worldwide. This definitive guide explores the core APIs, the…
[](/blog/learning-center/guide-on-open-banking)
AI APIs don't get enough credit for how much weight they're actually carrying. These AI APIs aren't merely technical connectors. They're, in fact, cost drivers and potential revenue engines. And when something goes sideways, they're ground zero. In production, they behave nothing like the…
[](/blog/engineering/monetize-ai-apis)
Bringing APIs and events together has always been a challenge. REST APIs give developers a familiar interface, while event brokers like Solace Broker excel at fan-out, filtering, and scalable, reliable event delivery. The tricky part? Bridging these two worlds without building a lot of custom glue.…
[](/blog/engineering/smarter-event-driven-apis-kong-solace)
As enterprises race to deploy multicloud architectures and Agentic AI, they face a common bottleneck: "state." To govern AI token usage, manage agent-to-agent communication, or optimize performance via caching, API and AI gateways require a persistence layer to synchronize data. We’re excited to…
[](/blog/product-releases/multicloud-cloud-gateways-managed-redis-cache)
A persistent challenge arises as businesses adopt multicloud architectures and agentic AI: the need for state synchronization. API and AI gateways require a robust persistence layer to synchronize data, whether it's for governing AI token usage, facilitating agent-to-agent communication, or…
[](/blog/engineering/dedicated-cloud-gateways-managed-redis-multi-cloud)
In the burgeoning intelligence economy, AI tokens are a metered utility, but enterprise profitability now hinges on a critical distinction: output tokens can cost up to 10x more than inputs, creating a new, invisible risk for cost overruns, particularly with Agentic AI. Learn how Kong AI Gateway…
[](/blog/enterprise/ai-input-vs-output-cost-management)
TL:DR Imagine 47 million requests hitting your platform last month. Can you prove who made each one—and invoice with confidence? If that question tightens your stomach, you're not alone. Metered billing for APIs promises fair, transparent pricing that scales with customer success. But it only works…
[](/blog/enterprise/guide-to-metered-billing-for-apis)
There's a problem that almost every platform team running Kafka at scale eventually hits, and it usually starts with a reasonable ask: "Can you give our partners access to this event stream?" What follows is rarely simple. You start scoping VPC peering. Then someone asks about firewall rules. Then…
[](/blog/enterprise/kafka-external-access)
Kong Operator 2.1 is a significant update for our customers, opening up integration into the Kong ecosystem for our Kubernetes customers. With Kong Ingress Controller, when your Control Plane was hosted in Kong Konnect, and you were using Kubernetes Gateway API, your dataplane, routes, and services…
[](/blog/product-releases/kong-operator-2-1)
Modern AI applications are no longer just about sending prompts to an LLM and returning text. As soon as AI systems need to interact with real business data, internal APIs, or operational workflows, the problem becomes one of orchestration, security, and control. The challenge is to build secure AI…
[](/blog/engineering/secure-ai-agents-volcano-sdk-kong-mcp-proxy)
The messaging and data streaming industries are constantly evolving, with major shifts such as large vendor purchases. If your company relies heavily on a platform such as Apache Kafka and you recently discovered that your vendor was acquired by a competitor, you are most likely dealing with a…
[](/blog/enterprise/vendor-agnostic-abstraction-layer-kafka-acquisition)
Apache Kafka powers real-time data at companies processing substantial event volumes daily. The new KRaft architecture makes getting started easier than ever. The platform handles massive data flows for more than 80% of Fortune 100 companies ( Apache Kafka ), according to the Apache Software…
[](/blog/learning-center/apache-kafka)