The latest news and announcements about Kong, our products, and our ecosystem, as well as voices from across our community.
Managing gateway configurations at scale is harder than it looks. When a plugin needs to apply to most routes, but not all, teams could either duplicate configuration across routes and violate DRY (“Don’t Repeat Yourself”) principles, or write custom code to handle the exceptions. Neither scales…
[](/blog/product-releases/kong-gateway-3-14)
Imagine you have a single Service, order-api . You want to apply a strict rate limit to most traffic, but you want to bypass that limit—or apply a different one—if the request contains a specific X-App-Priority: High header. Previously, you had two choices, neither of them ideal: Kong Gateway 3.14…
[](/blog/engineering/conditional-policy-execution)
Modern applications don’t run as a single monolithic. They are composed of services — frontend APIs, backend microservices, third-party integrations — each in its own security perimeter, potentially across different identity domains. The credentials that open one door don’t necessarily open…
[](/blog/engineering/token-exchange-at-the-gateway)
Starting with 3.13 (which addressed Redis support) and completed in 3.14, Kong now presents a unified approach to cloud-native authentication across every component it connects to — databases, caches, and secrets managers alike. The strategic principle is straightforward : any component Kong…
[](/blog/engineering/cloud-native-authentication)
As of January 2026, Kong Gateway Enterprise 3.9 will enter its End Of Life (EOL) phase and will no longer be fully supported by Kong. Following this, Kong Gateway Enterprise 3.9 will enter a 12-month sunset support period, focused on helping customers upgrade to a current version of Kong Gateway…
[](/blog/product-releases/kong-gateway-enterprise-3-9-eol)
As API ecosystems grow more complex, maintaining visibility and security shouldn't be a hurdle. Kong Gateway 3.13 simplifies these challenges with expanded OpenTelemetry support and more flexible orchestration. These new capabilities not only make your APIs more observable but also make it easier…
[](/blog/product-releases/kong-gateway-3-13)
As of September 2025, Kong Gateway Enterprise 3.8 will enter its End Of Life (EOL) phase and will no longer be fully supported by Kong. Following this, Kong Gateway Enterprise 3.8 will enter a 12-month sunset support period, focused on helping customers upgrade to a current version of Kong Gateway…
[](/blog/product-releases/kong-gateway-enterprise-3-8-x-x-eol)
We’re excited to bring you Kong Gateway Enterprise 3.11 with compelling new features to make your APIs and event streams even more powerful, including: We’ll also touch on what’s new with Konnect networking and Active Tracing. There’s a lot to unpack, so keep on reading for the full story!…
[](/blog/product-releases/kong-gateway-enterprise-3-11)
I'm commonly asked by customers for advice on how they can build a good platform cross-charging model for their organization. And my gut reaction is nearly always "don't." We'll come back to why I think that later, but first let's look at what cross-charging means, why you might want it, and how it…
[](/blog/enterprise/platform-cross-charging-model)
Today, we're pleased to announce Kong Gateway 3.10, our next Long-Term Support (LTS) version. This LTS version will be supported until March 2028, up to three years from the release date. Please check our documentation here for more details on Kong’s support policy. Highlights of this release…
[](/blog/product-releases/kong-gateway-3-10)
Today we're excited to announce Kong Gateway 3.9! Since unveiling Kong Gateway 3.8 at API Summit 2024 just a few months ago, we’ve been busy making important updates and improvements to Kong Gateway. This release introduces new functionality around LLM support for AI governance and security and…
[](/blog/product-releases/kong-gateway-3-9)
APIs facilitate effortless communication and data exchange between applications and services. However, their inherent design, which codifies service capabilities within the API definition, makes them easily exploitable by malicious actors. API attacks in the US alone are projected to cost $506…
[](/blog/product-releases/content-inspection-injection-attack-protection)
In a previous blog post , we discussed the prevalence of bearer tokens (or access tokens) to restrict access to protected resources, the challenges the sheer nature of bearer tokens present, and available mitigations. To recap, presenting a bearer token is proof enough of an authorization grant to…
[](/blog/engineering/demonstrating-proof-of-possession-dpop-preventing-illegal-access-of-apis)
We're thrilled to announce the general availability of Kong Gateway 3.7 and Kong Gateway Enterprise 3.7. Along with enhancements and new features for both OSS and enterprise users, this version comes with the general availability of our edge AI Gateway. This release offers a brand new context…
[](/blog/product-releases/kong-gateway-3-7)
We're delighted to announce the release of Kong Gateway 3.4 for Kong Enterprise and Kong Konnect , featuring significant enhancements, such as secrets rotation support in secrets management, expanded plugin support in consumer groups, and more. The highlight of this update is the designation of…
[](/blog/product-releases/gateway-3-4-enterprise-and-konnect)
In the digital age, a top-notch API gateway must not only be reliable and secure but also bring robust governance and security features designed for enterprise needs. The new Kong Gateway 3.3 for Open Source comes with robust enhancements such as configurable queuing behavior, high-scale…
[](/blog/product-releases/kong-enterprise-3-3)