Systems | Development | Analytics | API | Testing

November 2021

Testing APIs is Every Bit Important as Testing the UI

What I see too often though is folks running multiple UI tests in an attempt to validate specific output values or logic. A much easier way to accomplish this task is to run specific API tests on the business logic of the software. Why should we do this? It’s much faster and easier to write these tests. We can have our developers supporting this process and not just Selenium or automation experts. 'Work smarter, not harder' is a theory we should all be familiar with.

A Complete Guide to CORS (Cross-Origin Resource Sharing) for REST APIs

Many current web applications rely on near-frictionless and simultaneous access to numerous API providers' Web APIs. However, the web's default is to prohibit such "loose" behaviour, much like a firewall that blocks access to untrusted parties in the name of security. That default, thankfully, can be safely altered. Before doing so, however, it is necessary for both Web application developers and API providers to understand the concepts of Cross-Origin Resource Sharing (CORS).

Metrics and Logs Are Out, Distributed Tracing Is In

In this episode of Kongcast, I spoke with Chinmay Gaikwad, the tech evangelist at Epsagon, about distributed tracing and observability for microservices architectures. Check out the transcript and video from our conversation below, and be sure to subscribe to get email alerts for the latest new episodes.

The Top 5 Mulesoft Alternatives

Mulesoft is an all-inclusive data and application integration platform owned by Salesforce. It offers many types of functionality, including Extract, Transform, Load (ETL), API management, and Integration Platform as a Service (IPaaS). Mulesoft may offer a broad range of capabilities, but it has a challenging learning curve, a high price point, and may be far more than what your organization needs for data transformation.

How to consume RESTful APIs in Low-code

APIs are created so that users can use them as a bridge to connect to applications and services. There are thousands of APIs available for consumption, and each API is unique. But it’s really easy to consume APIs to extend the capabilities of your Linx apps, even complex ones that require OAuth 2.0 tokens. Let us show you how with a real-life example.

Integrating Applications Through an API-First Approach

As the enterprise IT landscape becomes larger and more complex, many organizations are finding it difficult to manage all of their systems and services. According to a study by the access management company Okta, businesses use an average of 73 different enterprise software applications — and 1 in 10 businesses use more than 200 apps. On-premise business APIs can help connect these applications, but they come with several noteworthy drawbacks.

How to Generate a Redshift API

In the business world today, data is becoming increasingly more important with each passing year. If your company is not taking the time to learn how to store, analyze and scale data properly now, it could prove detrimental to the business in the long run. However, just as bad data practices can hold your company back, good data practices can propel the company forward. APIs are one tool that any business can use to begin better utilizing their data today.

Kuma 1.4 and Kong Mesh 1.5 Released With RBAC, Windows Support, 2x Performance and 25+ New Features

We are happy to announce a new major release of Kuma, and a new major release of Kong Mesh built on Kuma! Kuma 1.4 ships with 25+ new features and countless improvements, particularly when it comes to performance. As previously announced at Kong Summit 2021, Kong Mesh ships we enterprise capabilities for large scale service mesh deployments, like RBAC, and native support for Windows VMs.

Generating Dynamic Signatures for API Authentication With Insomnia

Earlier this year, we hosted our inaugural Kong Summit Hackathon. This virtual competition engaged our open source community and offered recognition and prizes for hacks in various categories. The community delivered with ingenious plugins, hacks and documentation. In this blog post, we highlight our Insomnia plugin winner, Scott Harwell. Scott works with many hyperscalar cloud infrastructure vendors.

Faster Microservice-to-Microservice encrypted communication with Kong Mesh and Intel

Service Mesh is an infrastructure layer that has become a common architectural pattern for intra-service transparent communication. By combining Kubernetes a container orchestration framework, you can form a powerful platform for your microservices cluster, addressing the typical technical requirements that occur in highly distributed environments. A service mesh is implemented through a sidecar configuration, or proxy instance, for each service instance.

Metrics and Logs Are Out, Distributed Tracing Is In With Chinmay Gaikwad | Kongcast Episode 5

In this Kongcast Episode, Chinmay Gaikwad, tech evangelist at Epsagon, explains why metrics and logs aren’t sufficient for companies with a microservices architecture. Instead, Chinmay recommends leveraging distributed tracing for optimal observability.

5 Benefits of an API Management Platform

With each passing year, companies are becoming increasingly more dependent on APIs. Essentially, any organization looking to take advantage of the latest cloud technologies is dependent on APIs. Therefore, understanding how APIs work and how to best manage APIs is crucial. However, tackling APIs alone can be quite challenging for many companies.

The Evolution of APIs: From RPC to SOAP and XML (Part 2)

In our last blog post, we discussed the evolution of APIs from early computing to the PC era. In this post, we’ll discuss the evolution of APIs in the early internet age. Along the way, we’ll touch upon associated core technologies such as eXtensible Markup Language (XML) and discuss the introduction of web services and its common components: SOAP and WSDL.

Kong and Okta Deliver Best-in-Class Identity for API Management

As organizations look to accelerate their digital transformation initiatives, a couple of key trends are prevalent. First, there is a movement from monolithic to smaller cloud native microservices. Second, there is more pressure to innovate, resulting in an explosion of APIs and connections to secure. To help organizations address these trends, Kong is joining forces with Okta to deliver the best-in-class identity for API management.

Moesif API Analytics is SOC 2 Compliant

Moesif is pleased to announce that it has successfully completed its SOC 2 Certification. The Moesif API Analytics Platform has now been independently verified to comply with the highest standards of security. Through completion of this comprehensive level of certification, Moesif has demonstrated that it can reliably and securely maintain the confidentiality, availability and integrity of enterprises’ critical data assets.

REST API With Python

According to Stack Overflow Developers’ Survey 2019, Python is the second “most loved” language with 73 percent of the developers choosing it above other languages prevailing in the market. Python is a highly versatile language that supports a wide variety of use cases across several languages. It is a language well-known for its ease of use, portability, and ability to handle large data sets.

Adding user tracking to your Node.js RESTful API with Moesif

Join Matt as he shows users how to add user tracking to your Node.js RESTful API with Moesif. In this tutorial, we will cover how to: Tracking users' server-side interaction greatly increases the value of API monitoring and analytics. With Moesif, begin tracking your API calls by user in a matter of minutes.

A Cloud Native + Infrastructure as Code Love Story

We love abstractions. We want to make things easier for developers, teams and end users. In doing that, sometimes we build things a little bit too complex for those who don’t already understand the pain points for which the abstraction layers were built. Kubernetes is an example of this; it solves a very real, very painful problem, but it is notoriously difficult to wrap your head around.

Mid Atlantic Meetup | May 2021 - What can APIs and Microservices tell us about organizations?

Architects are tasked with seeing that organizations meet their objectives with speed and quality, for a reasonable cost. This simple mission is anything but simple. Security, analytics, and everything in-between present themselves as forces to be acknowledged and considered. Building APIs and Microservices present new puzzles to be solved for architects. Or do they? In this session, we attempt to detect patterns that present themselves in organizations, which have their root in human elements. Yet reliably manifest in technology.

Understanding the Basics of Envoy Configuration - Denver Meshy Mesh Meetup

Envoy is a key part of a number of service meshes currently on the market, including Istio and the Kuma CNCF Sandbox project. As such, it is often helpful to better understand how Envoy is configured to operate as a data plane in a service mesh. In this session, you’ll learn about the basics of Envoy configuration, like listeners, filters, clusters, and endpoints.

The Evolution of APIs: From RPC to SOAP and XML (Part 1)

To work and live in today’s digital world, we are unquestionably dependent on interconnected applications. These applications might be massive and highly complex, but they’re also constructed from reusable building blocks, which we call an Application Programming Interface—the API. API adoption is on the rise across all industries. However, APIs aren’t new. They came about from the natural evolution of writing computer software.

WSO2 Recognized in Two New Gartner Reports for Full Life Cycle API Management

I’m proud to share that WSO2 has been recognized in two new Gartner reports for full life cycle API management. We are sincerely grateful to our many satisfied customers for providing their feedback on how WSO2 has been instrumental in driving their digital transformation initiatives. We appreciate the time they took out of their busy schedules to help us out. Now, on to the details.

Deploying a Multi-Cloud API Gateway on AWS and GCP

After you’ve built your microservices-backed application, it’s time to deploy and connect them. Luckily, there are many cloud providers to choose from, and you can even mix and match. Many organizations, like Australia Post, are taking the mix-and-match approach, embracing a multi-cloud architecture. The microservices that make up a system no longer have to stay on a single cloud.

Play with the Speedscale - no registration required

For the first time, Kubernetes engineering teams interested in learning more about Speedscale will be able to play with the framework without registering, at play.speedscale.com. Engineers can see firsthand how you: While users won’t be able to actively watch replays run, there are a variety of pre-created traffic snapshots, reports and configs to browse. Engineers will be able to experience the ease with which snapshots are generated for fast, scalable test automation.

A Concise Introduction to REST APIs

A REST API — or representational state transfer application programming interface — is a data interface that allows for the creation and consumption of resources. It’s not just for GET requests, but also for other HTTP verbs such as PUT, POST, and DELETE. REST APIs can also handle CRUD (Create, Read, and Update, and Delete) operations. In this way, a REST API is a software bridge between two levels of abstraction in a system.

App Development: 3 Ways to Add an API to Your App

Applications that use a REST API architecture are designed to be loosely coupled and transfer information quickly. While this architecture focuses on transferring data between clients/servers, it can also apply when interacting with other systems and users. In the world of app development, the need for better, faster, and easier-to-understand APIs is growing, and REST APIs are dominating the legacy modernization conversation.

5 Ways API-Led Connectivity Is Changing Business

With more data and systems at their fingertips than ever before, organizations need a concrete strategy for how to connect them with their own enterprise IT. This has led to the rise of API-led connectivity, which offers a dramatic shake-up to the way that companies access and integrate these technologies and services. In this article, we’ll explore five industries in which API-led connectivity has changed the business landscape as we know it.

Hiding SOAP Legacy Applications Using the Mullet Pattern

In this episode of Kongcast, I had the pleasure of speaking with Aaron Weikle, the founder and CEO at MS3, about supporting legacy-based applications as companies add the next generation of microservices. Check out the transcript and video from our conversation below, and be sure to subscribe to get email alerts for the latest new episodes.

Vanity Metrics for APIs vs Tracking Business Value From API Transactions

As an API product manager, you want your API to have a great developer experience. This means that developers can get up and running quickly, they get consistent behavior from your API, it’s easy for them to troubleshoot any errors they encounter, and your API makes it easy for them to address their business needs. Tracking your APIs is an important part of understanding how well they perform, which leads most organizations to build out their own internal API tracking systems.

Hiding SOAP Legacy Applications Using the Mullet Pattern With Aaron Weikle | Kongcast Episode 4

Organizations don’t move as fast as technology. That’s why in this Kongcast episode, Aaron Weikle, Founder & CEO at MS3, explains how to continue supporting your organization’s legacy-based services as they continue to add the next generation of services. If you're planning on migrating legacy applications to microservices this episode if for you!

How to Generate a Snowflake API

Customer demand is in a constant state of fluctuation. Companies must keep pace or risk losing their position in a crowded market. Digital transformation is the driver to helping companies remain agile to meet their customers’ needs. The Snowflake data warehouse provides massive storage capabilities to facilitate combining figures from disparate systems. These figures help inform decision-making and provide valuable insight into driving business strategies.

Demo: Zero Trust Security with Service Mesh

As the number of microservices increases and deployed across private and public networks, security is critical. Leveraging a Service Mesh guarantees the security of applications and services without burdening developers to build security, freeing them to focus on business logic and allowing organizations to meet and prove their compliance and security requirements. TIMECODES #ZeroTrust #ServiceMesh #mtls #OPA #KongMesh #KongSummit

Best Developer Tools: 5 APIs That Make Life Easier for Developers

Looking to understand more about what the best developer tools on the market? Here, we’ll have a look at 5 essential APIs that will make life easier for any developer. APIs are critical to enabling applications to communicate with each other. For example, they let your email app talk to your bank’s website, and they let the different programs on your computer work together seamlessly.

How to Customize Your Kong Developer Portal

A developer portal is a storefront to your APIs (the products) that internal and external developers are trying to consume. The Kong Developer Portal provides a single source of truth for all developers to locate, access and consume services. With intuitive content management for documentation, streamlined developer onboarding and role-based access controls (RBAC), Kong’s Developer Portal provides a comprehensive solution for creating a unified developer experience.

A Guide to Load Testing Node.js APIs with Artillery

Artillery is an open-source command-line tool purpose-built for load testing and smoke testing web applications. It is written in JavaScript and it supports testing HTTP, Socket.io, and WebSockets APIs. This article will get you started with load testing your Node.js APIs using Artillery. You’ll be able to detect and fix critical performance issues before you deploy code to production.

Hiding SOAP in the Back With the Mullet Pattern With Aaron Weikle | Kongcast Episode 4

Organizations don’t move as fast as technology. That’s why in this Kongcast episode, Aaron Weikle, Founder & CEO at MS3, explains how to continue supporting your organization’s legacy-based services as they continue to add the next generation of services. More about MS3's Kong SOAP plugins:

Protecting Australian Consumer Data Rights (CDR) with Kong Gateway

This post highlights how you could use Kong Gateway to implement a solution for the Australian Consumer Data Standards (CDS), which is part of the Consumer Data Right legislation introduced by the Australian Government in November 2017. As detailed on the Australian ACCC website: CDR will give consumers greater access to and control over their data and will improve consumers’ ability to compare and switch between products and services.

Squid game: how we load-tested Ably's Control API

We recently announced Ably's Control API, a REST API that enables you to manage Ably's configuration programmatically. You can now use the Control API to configure anything previously only configurable via the Ably dashboard. The Ably platform is designed around four pillars of dependability: Performance, Integrity, Reliability, and Availability.

5 Reasons Why Your Business Needs APIs

Once you find a platform that makes it easy for you to execute an effective API strategy, it becomes obvious why your business needs a standardized, secure and documented APIs. If you’ve had negative experiences with APIs that can take a long time to build or don’t offer the functionality you want, it’s time to take a pause and learn more about how you can benefit when you have an advanced API management platform working for you.

Application Observability With Kuma Service Mesh

The more services you have running across different clouds and Kubernetes clusters, the harder it is to ensure that you have a central place to collect service mesh observability metrics. That’s one of the reasons we created Kuma, an open-source control plane for service mesh. This tutorial will show you how to set up and leverage the Traffic Metrics and Traffic Trace policies that Kuma provides out of the box.

2021 Cloud Connectivity Innovator Award Winners: Big Success, Great Advice

Many organizations have been able to accomplish impressive things using Kong products, including Kong Konnect, Kong Enterprise, Kong Gateway, Kuma and Insomnia. We recently honored four of these enterprises in the inaugural Cloud Connectivity Innovator Awards program during Kong Summit 2021.

Sponsored Post

The HTTP/2 Landscape in 2021

When the internet first came into existence in 1983, its communication channels didn't exist, and it was just operational enough to be used for research purposes. In 1989, Tim Berners-Lee had the idea to develop a system for the internet using TCP/IP protocols. That public project at CERN introduced HTTP, HTML, World Wide Web (WWW), and a client-server as communication mechanisms. In this post, you'll learn how HTTP protocol works and how new versions brought it to where we are now, with the widely used HTTP/2 in 2021.

Supercharge Kubernetes Ingress with Kong

When services are exposed outside a Kubernetes cluster, you need to take care of authentication, observability, auditing, encryption and integrations with other third-party vendors, amongst other things. In this demo, @Viktor Gamov introduces Kong Ingress Controller and how you can use it in your applications that run in a Kong Mesh-enabled Kubernetes cluster.

What's Holding Us Back From True Hybrid and Multi-Cloud Applications?

There are good reasons for spreading workloads and applications across multiple clouds. Options include using a combination of public and on-premises cloud platforms, a strategy known as hybrid cloud—or using more than one public cloud provider, a strategy known as multi-cloud. What are those benefits? And what are some of the best strategies for achieving them? Let’s explore that.

How to Test HTTP/2 APIs

Slowly but surely, HTTP/2 is becoming the favored protocol for transporting data files between clients and servers. While HTTP/1 used to be the only way of loading web applications, it’s now lagging behind, especially on the UX front. Since 2015, HTTP/2 APIs have taken the lead with lightning-fast server responses. In particular, they’re responsible for state changes and server responses without the need for browser reloads.

What is a MySQL REST API?

Databases are an important part of application development. They let you store data in a way that is easy to manage and manipulate. MySQL has been the standard for this for decades. The one drawback is that databases only store data. If you want to do something with that data, a MySQL REST API makes it possible. Here is what you need to know to use MySQL REST APIs in your projects.

6 Best API Frameworks for Python Developers

APIs are a quick and easy way to create applications that can connect to other services. APIs provide an interface for developers, allowing them to leverage their programming skills in one language (Python) and use it with any service they want. Python is a popular choice for APIs because of the high level of abstraction available and its extensive library support.

How to Execute a Great API Strategy

Knowing how to execute an API strategy for your organization offers numerous benefits. As today’s business and technology worlds move to cloud-based environments, APIs play an essential role in creating a successful cloud-based infrastructure. Some companies, such as Stripe and Twilio, use great APIs to stand out from their competitors and generate higher revenues. You don’t necessarily need a lot of technical experience to execute an API strategy that delivers quality outcomes.

Top 10 Microservices Benefits

Many companies have embarked on microservices software projects in an effort to make modernize their suite of technology systems and reap the benefits that can come from deploying such an architecture. In the microservices model, applications are divided into a series of interconnected services based on operational capabilities. Each service supports a distinct set of functionality, effectively acting as a mini-application with its own operational logic, adapters, and even database schema.

Solve These Common Kubernetes Challenges Early

Changing the technology an organization works with is a bit like taking up a new sport. Your initial excitement leads you to buy the most expensive equipment you can find, leaving you soon to realize that your new tools have created a steep learning curve. Transitioning out of monolithic applications to microservices is quite similar.