The latest news and announcements about Kong, our products, and our ecosystem, as well as voices from across our community.
If you're new to the world of software architecture, terms like "SOA" might sound like alphabet soup at first. But fear not, we're here to break it down for you in simple terms. SOA stands for Service-Oriented Architecture, a design approach that structures applications as a collection of loosely…
[](/blog/learning-center/soa-in-web-services)Microservices work by splitting applications into task-specific services that connect, but can be programmed, maintained and upgraded independently. In this way, when you need to change the functionality of an application, you can do so by deploying a new microservice or updating only the…
[](/blog/learning-center/using-microservices-with-api-gateway)
We understand that our customers need to deploy Kong in a variety of environments and with different deployment mode needs. That is why two years ago, in Kong 1.1, we introduced DB-less mode, the ability to run Kong without the need of connecting to a database. We then demonstrated the Hybrid mode…
[](/blog/engineering/new-storage-engine-for-kong-hybrid-and-db-less-deployments)
Today, we’re excited to announce the release of Kong Gateway 2.8 , which further simplifies API management and improves security for all services across any infrastructure. This announcement demonstrates Kong’s continued commitment to our customers and community by providing a next-generation…
[](/blog/product-releases/kong-gateway-2-8)
In applications built on a system of microservices , developers should always be on the lookout for opportunities to eliminate unnecessary use of resources, such as database queries, network hops or service requests. API gateway cache (or response caching) is an excellent place to start. For many…
[](/blog/engineering/api-gateway-cache)
Today, Kong Ingress Controller (KIC) 2.2 is now generally available. KIC 2.2 marks a major milestone in the development of the Kong Ingress Controller, as it is the first release containing a marquee feature, Gateway API. This represents a major milestone for Kong as we continue to keep up to date…
[](/blog/product-releases/kong-ingress-controller-2-2)
API security starts with authentication and authorization, then data security and availability. In this post, I will review security considerations for an API gateway and how the capabilities of the Kong Gateway address them. First, let's review different aspects of API security in detail. A…
[](/blog/enterprise/how-api-gateway-secures-apis)
It's commonly accepted now that APIs and microservices are the future of how software will be built. The introduction of application programming interfaces (APIs) first enabled development teams to expose services to the internet and provide value to their customers and partners. For many…
[](/blog/product-releases/kong-enterprise-2-7-now-generally-available)
Starting with the 2.7 release, using Cassandra as a configuration datastore for the Kong Gateway will be considered deprecated. Cassandra features will remain in Kong through 3.3, and its use will not be prohibited. However, some newly introduced functionality may not be optimized for performance…
[](/blog/product-releases/cassandra-support-deprecated)
Like many developers and operations professionals, you may have had complicated experiences with security and certificates (encryption of the connection and authentication). Maybe so much so that you try to avoid working on them whenever possible. If you're looking for a simpler way, Kong may be…
[](/blog/engineering/mutual-tls-api-gateway)
In this episode of Kongcast , I spoke with Grant McKeen and Jonathan White from IntegrationWorks about how open banking and BIAN (Banking Industry Architecture Network) work with Kong Gateway to create simplicity from complexity in the banking and financial services industry. Check out the…
[](/blog/enterprise/open-banking-bian)
In our last blog , we discussed the connectivity solution – Enterprise Service Bus (ESB) which was a preferred method for connecting monolithic applications. In this blog, we will discuss the role of an API gateway in today's modern distributed world. We'll also compare ESBs with API gateways and…
[](/blog/enterprise/api-infrastructure-esb-versus-api-gateway-part-2)
Let's boldly go where no one has gone before. Get ready, Star Trek fans! Jean-Luc Picard will be representing our microservice . Once we have Jean-Luc in our ship (microservice in production), what happens on day 2? We still need to add authorization, load balancing, rate limiting, etc. With an API…
[](/blog/enterprise/apache-kafka-api-gateway)
Today, we are welcoming another noteworthy advancement of the Kong Gateway - the general availability of version 2.7! Both Kong Gateway and Kong Gateway OSS version 2.7 downloads are available on your favorite distribution channels. This release of the Kong Gateway includes a number of important…
[](/blog/product-releases/kong-gateway-2-7)
After you've built your microservices -backed application, it's time to deploy and connect them. Luckily, there are many cloud providers to choose from, and you can even mix and match. Many organizations, like Australia Post , are taking the mix-and-match approach, embracing a multi-cloud…
[](/blog/engineering/multi-cloud-api-gateway)Secure your AI infrastructure with prompt guards, PII sanitization, and centralized governance. Control LLM costs with token-based rate limiting and semantic routing across providers.