The latest news and announcements about Kong, our products, and our ecosystem, as well as voices from across our community.
Understanding and monitoring the performance and health of applications and systems is critical. This is where observability comes into play. Observability is about gaining a comprehensive understanding of a system's internal state by analyzing the data it generates within the context of real-time…
[](/blog/engineering/observability-and-advanced-analytics-dynatrace)
We're excited to announce the release of Kong Gateway 3.8 , a significant update that marks a major milestone in the evolution of our API management platform. This release is packed with enhancements designed to boost performance, fortify security, and provide greater flexibility and ease of use…
[](/blog/product-releases/kong-gateway-3-8)
At API Summit 2024 , Kong announced its new Premium Technology Partner Program, a move designed to enhance the Kong ecosystem by promoting high-quality, reliable integrations and plugins that deliver real business value to customers. The objective? More top-tier integrations and plugins for…
[](/blog/news/premium-technology-partner)
This post is part of a series on becoming a secure API-first company. For a deeper dive, check out the eBook Leading Digital Transformation: Best Practices for Becoming a Secure API-First Company. As APIs have become mission-critical , securing them against threats is crucial. APIs are an…
[](/blog/engineering/layered-security-for-managing-apis)
APIs serve as the foundation for how software systems and services communicate and exchange data. But unmanaged and unsecured APIs can open up massive vulnerabilities that lead to disastrous security breaches and data leaks without proper governance. With API-related attacks increasing — and set…
[](/blog/enterprise/reduce-api-security-risks-with-standardized-governance)
The Open Web Application Security Project (OWASP for short) is a not-for-profit entity devoted to improving the security of software. Founded in 2001, OWASP is a global organization that supports thousands of volunteers globally to produce freely available articles, documentation, tutorials, and…
[](/blog/engineering/owasp-top-10-api-security-2023)
In this post, we'll talk about what API SecOps is, including the fundamentals of it and the personas involved. Then, we'll discuss how API, microservice, and policy lifecycles integrate to produce a secure service in production, and why collaboration and API-First Design are essential for APISecOps…
[](/blog/engineering/apisecops)
As an application developer, have you ever had to troubleshoot an issue that only happens in production? Bugs can occur when your application gets released into the wild, and they can be extremely difficult to debug when you cannot reproduce without production data. In this blog, I am going to show…
[](/blog/engineering/debugging-applications-in-production-with-service-mesh)
As a Solutions Engineer here at Kong, one question that frequently comes across my desk is “how can I transform a Kong logging plugin message into a format that my insert-observability-stack-here understands, (e.g., ELK, Loki, Splunk, etc.)?” In this blog, I’m going to show you how to easily…
[](/blog/engineering/transforming-kong-logs-for-ingestion-into-your-observability-stack)
As infrastructure becomes more and more distributed, building better observability around it is becoming crucial. With the emergence of microservices architecture, teams want to gain better visibility with proper observability built into the architecture. In this blog post, we’ll explain how we…
[](/blog/engineering/end-to-end-observability-in-konnect)Monitoring the health of your production system involves keeping track of various data points in real time in order to derive insights from them. Day to day, monitoring can provide early indications of problems, giving the team time to investigate and fix before a system fails completely. If youre…
[](/blog/learning-center/monitoring-and-distributed-tracing-for-microservices)
In this episode of Kongcast , I spoke with Jason Yee , director of advocacy at Gremlin , about the concept of chaos engineering, why even the best engineers can't control everything, and tools and tactics to help build app resiliency. Check out the transcript and video from our conversation below,…
[](/blog/engineering/gremlin-chaos-engineering)
This blog was co-created by Ricardo Ferreira (Elastic) and Viktor Gamov (Kong). We love our microservices, but without a proper observability (O11y) strategy, they can quickly become cold, dark places cluttered with broken or unknown features. O11y is one of those technologies deemed created by…
[](/blog/enterprise/o11y)
At Kong, we run performance testing in CI in every commit or pull request that has a potential performance impact, as well as on each release. Thanks to the performance testing framework and its integration with Github Actions, we can easily get basic metrics like RPS and latency. Also, flame…
[](/blog/engineering/kong-gateway-performance)
Have you ever found yourself in a situation where all your service mesh services are running in Kubernetes, and now you need to expose them to the outside world securely and reliably? Ingress management is essential for your configuration and operations when exposing services outside of a cluster.…
[](/blog/engineering/istio-gateway)