API calls per month
Annual growth in API traffic
Reduction in deployment times
For decades, Rabobank has grown to become one of the largest banks in the Netherlands. And while today they pride themselves on being a corporation that serves private clients and agricultural finance, they’ve also been growing and adapting their API prowess as a user of Kong Gateway and Kong Konnect.
Rabobank's API growth
We sat down with members of the Rabobank team at API Summit 2024 to discuss how their API initiatives are improving efficiency, security, and scalability. If you belong to a team in the highly regulated finance industry and are looking at how an API-first approach can help you, be sure to catch the insights revealed below.
Establishing Kong as the API management backbone
“We’ve been running Kong Konnect for a year and a half, and I think we can say that it really has an established position in the bank as the API management platform,” said Frank van Valkenburg, Business Architect on the Integration team at Rabobank. “Kong has become a known name in Rabobank for its association with API management. And we’re a big company. We’ve learned that API management is really business critical.”
Frank said about 300 teams work on the Kong platform today, but overall, the teams are focused on Day-2 operations — maintaining stability, establishing monitoring, and attending to lifecycle management.
“I think we’re really good. And I think we’re also still growing,” he said.
Shweta Tiwari agrees. She’s a Solution Architect at Rabobank who said the API growth has been tremendous.
“We pulled the data, and it was two billion calls per month,” Shweta said. “On a yearly basis, we grew around 40% just on API traffic. And services around 20%. Services are new APIs being brought into the bank, so that’s quite nice. And with the introduction of Kong, it’s only risen."
Needless to say, Kong Konnect is being utilized heavily at Rabobank. Shweta said that growth is even more than they expected year over year.
Lightweight, federated architecture at scale
“With Kong Konnect, we chose a federated API gateway model,” Frank said. “But we took it one step further — isolated gateways for each team. So now we’re running these mini gateways all across Rabobank. And we could do that because of how lightweight Kong is.”
Being a lightweight solution is a differentiator for Kong, Frank said. Today, it’s become an enabler for Rabobank’s whole API management landscape, which they only have plans to expand in the future.
Because they’re a bank, the company has standards and governance across all its API management, but Kong Konnect is at the center of it, tying together all API extensions their providers use in an automated way.
“Our providers use their APIOps. They run some pipelines. They deploy APIs to Kong in their isolated gateways. That’s the approach we chose for Rabobank, and it’s been working quite well for us,” Frank said.
With the growth and move to Day-2 operations regarding API management at Rabobank, how do APIs now fit into their overall approach to IT?
“We want teams to operate as autonomously as possible,” Frank said. In that sense, they endeavor to offer everything engineers need as a service — which actually means as an API. “We make it self-service. It’s self-explanatory. It’s easy to use. The API platform is enabling that standardization.”
“Our API management platform is actually a service in itself. It is truly a platform. We take away the burden of managing the API platform for our teams. We still have central governance, but teams own their own services. That’s something we’re really proud of.”
Standardization, scalability, and efficiency? They’re all there in Rabobank’s current setup with Kong Konnect. But what about security?
Frank points out the excellent observability his teams now have around the platform with this architecture. There’s been tremendous growth when it comes to API usage, but thanks to the ownership around APIs Rabobank now commands, they’re able to see anything strange happening within that traffic.
“We could very easily identify whose API was being called because we have this good ownership,” Shweta recalled about a recent incident, “And we could reach out to the people calling it. It was someone testing something, but it came up as an anomaly in our traffic detection.
Frank and Shweta point to the fact that Kong Konnect overarching everything enables them to have a central overview of what happens on the entire platform. Without that, spotting incidents and reaching out to those responsible would have been hard to achieve.
“The vision that we had and the changes that have happened have been possible because there was a lot of trust between Rabobank and Kong. We are able to do the design we have today because of that flexibility and trust.”
Bringing an API architectural vision like Rabobank’s to life doesn’t happen overnight — or without help. At API Summit 2024, the Rabobank team took the time to answer questions about their relationship with Kong over the last few years.
“Whenever I think of Kong and Rabobank, we work together as a cohesive unit,” Frank said. “And I’ve been involved since the RFP phase when we were choosing Kong . . . The vision that we had and the changes that have happened have been possible because there was a lot of trust between Rabobank and Kong. We are able to do the design we have today because of that flexibility and trust.”
In Frank's mind, this hasn’t been a typical consumer/supplier relationship, but a partnership. And that works very well for his teams.
“Sometimes we are in sessions together where we don’t know who is from Kong and who’s from Rabobank anymore because we are filling in each other’s words and sentences,” Frank said.
Full speed ahead with Kong
As for what’s next, the Rabobank team expects even more expansion and usage of APIs across the org. The benefits of bringing more and more isolated gateways and self-service solutions to teams within the firm have been obvious, and they’d like to bring even more in.
“Before, pipeline runs used to take us thirty minutes to one hour. Now it’s fully containerized and goes really smoothly. From 30–60 minutes to… fast. Very fast,” Frank said.
Expansion with Kong for Rabobank means bringing it to other regions, gateways, and clouds the firm has operations in as well. Rabobank is on Microsoft Azure today but moving to AWS soon. The expansion there will make Kong the de facto API management platform within Rabobank.
“All the good stuff we initiated with this platform works so well that we’re broadening it to the entire integration landscape. It’s a trailblazer for everything we do in integration.”
More Customer Stories
"Kong provides that single point of entry... [so] it’s easier for Aviva to manage all the traffic that comes through safely and securely."
“Kong’s ability to be used in many different use cases, across multiple infrastructures, with a built-in lightweight design, allows us to achieve this while keeping costs as lean as possible.”
“Partnering with Kong has greatly accelerated our API business and strategy.”
"Kong provides flexible deployment and has a great user experience interface."
"Kong's end-to-end API management platform provides us with the ability to digitally transform our business."
"With Kong, we've taken a big leap forward in our ability to reduce operational overhead while efficiently scaling to support the increase in traffic requests from our rapidly growing customer base."
"Kong has allowed our healthcare platform to remain highly secure as we rapidly scale"