Viktor Gamov and Rick Spurgeon co-authored this blog post. Kong Gateway provides dynamic plugin ordering allowing administrators to control plugin execution order. Dynamic plugin ordering was added in Kong Enterprise 3.0 and the full technical reference is available in the official…
[](/blog/engineering/kong-dynamic-plugin-ordering)
As more companies are undergoing digital transformation (resulting in a huge explosion of APIs and microservices), it's of paramount importance to get all the necessary data points and feedback to provide the best experience for both users and developers. Kong Gateway is a lightweight API gateway…
[](/blog/engineering/how-to-parse-and-forward-api-logs)
One of the most common use cases our customers are using Kong for is API rate limiting . There are a few common reasons for doing this: For all those and more, we’re able to easily add this functionality with Kong's rate limit advanced plugin . The plugin can be applied at different levels…
[](/blog/engineering/rate-limit-requests-per-consumer-groups)
Recently, I came across a request from one of our community users looking for a Kong plugin that could look up address details based on a few location search keywords. There are many libraries that support geocoding. I decided to pick up a Python Library as they are simple to use — and the…
[](/blog/engineering/building-plugins-for-kong-gateway-using-python)
In applications built on a system of microservices , developers should always be on the lookout for opportunities to eliminate unnecessary use of resources, such as database queries, network hops or service requests. API gateway cache (or response caching) is an excellent place to start. For many…
[](/blog/engineering/api-gateway-cache)
Insomnia is a fast and lightweight open source desktop application that doubles as a tool for API design and testing and as an API client for making HTTP requests. It has built-in support for REST Client , gRPC and GraphQL . All of that is just what you get out of the box. Many…
[](/blog/engineering/insomnia-plugins)
Ready to speed up your Kong Lua custom plugin development process? 1. Before diving into this post, make sure you're familiar with the basics of plugin development and have gone through the basics described in our Kong documentation . Now, let's dive in…here are the best practices for Kong custom…
[](/blog/engineering/lua-custom-plugin-best-practices)
This year, we hosted our inaugural Kong Summit Hackathon . This virtual competition engaged our open source community and offered recognition and prizes for hacks in various categories. The community delivered with ingenious plugins, hacks and documentation. This blog post highlights our Kong…
[](/blog/engineering/api-bandwidth-limit)
As part of the Kong Gateway 2.6 release, we shipped a brand new jq plugin for anyone with an enterprise license to use. It’s like we combined the request and response transformer plugins to form a single, more powerful plugin—supercharging the way we work with request and response bodies. If you're…
[](/blog/engineering/jq-plugin)
Event Hooks is a new Kong Enterprise feature launched in the Kong Gateway 2.5 Release . This feature sends you notifications when certain events happen on your Kong Gateway deployment. Kong Gateway listens for events, like routes, services, consumers, certificates, plugins, workspaces and RBAC…
[](/blog/engineering/event-hooks-plugins)
We recently sat down to discuss the language for the next Kong Gateway Plugin Development Kit (PDK). Given the number of JavaScript developers in the world and the variety of libraries and debugging tools available, there was only one logical choice. I'm excited to share that with the Kong Gateway…
[](/blog/engineering/kong-gateway-plugin-javascript)
The concept of zero-trust security is relatively simple. In essence, no entity or system should have trust by default. You should assume that any system you are talking to is not trustworthy until you establish otherwise. Within Kong Konnect , one mechanism to apply zero-trust is the OpenID Connect…
[](/blog/engineering/openid-connect-api-gateway)
Creating an API contract and corresponding Kong service are often just the first steps in the API development process. More often than not, the upstream services that are invoked provide a different contract to the one presented to the API consumer. This is especially the case in larger…
[](/blog/enterprise/transform-your-requests-responses-with-the-kong-reedelk-transformer-plugin)Secure your AI infrastructure with prompt guards, PII sanitization, and centralized governance. Control LLM costs with token-based rate limiting and semantic routing across providers.