The latest news and announcements about Kong, our products, and our ecosystem, as well as voices from across our community.
A microservice -based system can consist of dozens or even hundreds of individual services communicating with each other via APIs . While its possible for a client be that a web browser, application or IoT device to make requests to the relevant microservice directly, this approach has a number of…
[](/blog/learning-center/api-gateway-uses)Microservices architecture has become extremely popular for building scalable applications from small, independent services. However, the decentralized nature of microservices brings certain drawbacks that API gateways are purpose-built to address. This article explains the role and benefits of…
[](/blog/learning-center/why-microservices-need-api-gateway)If the connection from clients to your API gateway isn't encrypted, all messages you send and receive are out in the open for all to read. In looking for a way in, attackers will make use of all features of an API, even the undocumented ones; security by obscurity is not a realistic defense…
[](/blog/learning-center/building-a-secure-api-gateway)An API gateway provides routing, traffic control and security capabilities which would otherwise be the responsibility of API consumers and upstream APIs. Additionally, the Gateway becomes a rich source of operational metrics useful for analytics, usage statistics and alerting. However, by…
[](/blog/learning-center/secure-api-gateway)In this article, were going to walk through a brief origin of RESTful APIs and then take a good look at what to consider when building your own APIs with RESTful design. RE presentational S tate T ransfer or REST is an architectural pattern designed by Roy Fielding, in a chapter of the dissertation…
[](/blog/learning-center/restful-api-best-practices)One of the many benefits of a microservices architecture over the traditional monolith approach to application design is the ability to scale the individual microservices as required for performance and availability. In production scenarios requiring high availability, uptime is always limited by…
[](/blog/learning-center/api-gateways-for-high-availability-clusters)An API Gateway is becoming an essential part of modern application architecture. It acts as a reverse proxy that routes API requests to appropriate backend services. Along with routing, API Gateways provide capabilities like security, monitoring, rate limiting, and more for your APIs. A major…
[](/blog/learning-center/api-gateway-policies)While advances in technology drive innovation, an organizations DevOps strategy drives product delivery. As organizations modernize, automating delivery of services will be key to maintaining momentum and speed to market. Here is a high-level overview of the state of components that make up API…
[](/blog/learning-center/api-gateway-automation)If you're new to the world of software architecture, terms like "SOA" might sound like alphabet soup at first. But fear not, we're here to break it down for you in simple terms. SOA stands for Service-Oriented Architecture, a design approach that structures applications as a collection of loosely…
[](/blog/learning-center/soa-in-web-services)Microservices work by splitting applications into task-specific services that connect, but can be programmed, maintained and upgraded independently. In this way, when you need to change the functionality of an application, you can do so by deploying a new microservice or updating only the…
[](/blog/learning-center/using-microservices-with-api-gateway)
We understand that our customers need to deploy Kong in a variety of environments and with different deployment mode needs. That is why two years ago, in Kong 1.1, we introduced DB-less mode, the ability to run Kong without the need of connecting to a database. We then demonstrated the Hybrid mode…
[](/blog/engineering/new-storage-engine-for-kong-hybrid-and-db-less-deployments)
Today, we’re excited to announce the release of Kong Gateway 2.8 , which further simplifies API management and improves security for all services across any infrastructure. This announcement demonstrates Kong’s continued commitment to our customers and community by providing a next-generation…
[](/blog/product-releases/kong-gateway-2-8)
In applications built on a system of microservices , developers should always be on the lookout for opportunities to eliminate unnecessary use of resources, such as database queries, network hops or service requests. API gateway cache (or response caching) is an excellent place to start. For many…
[](/blog/engineering/api-gateway-cache)
Today, Kong Ingress Controller (KIC) 2.2 is now generally available. KIC 2.2 marks a major milestone in the development of the Kong Ingress Controller, as it is the first release containing a marquee feature, Gateway API. This represents a major milestone for Kong as we continue to keep up to date…
[](/blog/product-releases/kong-ingress-controller-2-2)
API security starts with authentication and authorization, then data security and availability. In this post, I will review security considerations for an API gateway and how the capabilities of the Kong Gateway address them. First, let's review different aspects of API security in detail. A…
[](/blog/enterprise/how-api-gateway-secures-apis)