Systems | Development | Analytics | API | Testing

March 2023

Demystifying GraphQL - Tester's edition

It is high time we put out an edition of the GraphQL tutorial for our QA teams. There is a lot of material and more confusion on how to create GraphQL APIs on the internet. As if the idea of REST was easy for teams to understand – the definition of REST has always stopped just at the abbreviation, Representational State Transfer. Developers and Testers alike don’t really understand the concept. We know how to create REST APIs and how to test them and that works for us.

Kong Enterprise & Kong Konnect with Amazon VPC Lattice

At Kong, we’re always looking to expand the experience of running our products in the AWS cloud. As we steadily move into 2023, we want to continue this streak because we see firsthand the tremendous growth and success it provides our customers. Today, we’re excited to announce that the Kong API management platforms, Kong Enterprise and Kong Konnect, are validated integrations with Amazon VPC Lattice.

Role Based Access Control with Kong Enterprise

Role Based Access Control with Kong Enterprise Brought to you by @KongInc Senior Solutions Engineer Ahmed Koshok. In this video, Ahmed Koshok demonstrates how to empower teams for end-to-end delivery. With the increasing need for decentralization, it's essential to have a platform that enables you to manage your apps and services effectively. Kong Enterprise offers a Role-Based Access Control feature that ensures secure and reliable access to your apps and services.

What is API Test Automation? How to Test APIs?

Welcome to the world of API testing. If you’re reading this, you’re probably looking to learn the basics of testing APIs or wondering how and where to start. This article will help you understand more about APIs, what types of tests you need to perform, and how to execute them and what to validate as part of the testing process.

What's new in Kong Ingress Controller 2.9 - Gateway Discovery #kubernetes #ingress #kic

In this tutorial, we'll dive into the seamless integration of dynamic scaling and instance discovery with KIC 2.9! Today’s release allows running the Ingress Controller and the Kong Gateway data planes separately in different pods. This feature enables KIC to scale cost-effectively as it removes the overhead of running the KIC sidecar with every single Gateway instance. Besides memory savings, users should also see a significant decrease in CPU usage.

What's New in Kong Ingress Controller 2.9?

We’re happy to announce the release of Kong Ingress Controller (KIC) 2.9, in which we’ve taken significant steps towards solution extensibility, deployment flexibility, and lowering the cost of ownership. KIC now offers a number of features that we think you’ll be excited about: Here are the details about each of these features.

Revenue Generation from APIs with Kong, Stripe, and Moesif

Many API developers and companies struggle to find ways to easily set up systems to unlock revenue from their APIs. Some are simple but not customizable while others are complex and require massive engineering effort to actually get it all running. To make things easier, Moesif created the Billing Meters feature which allows for massive customization with a minimal amount of code and engineering effort.

Self-Hosted, On-Premises, or Cloud - Which Deployment Model Is Best?

Deciding where to run your enterprise workloads is one of the biggest business decisions you’ll make. That’s because your chosen deployment model influences how you access software and systems, scale your business, and safeguard sensitive data. There are three main deployment methods you need to know about: Self-hosted, on-premises, and cloud. All three models have pros and cons, so it’s important to do your research before investing in new infrastructure and/or services.

KuppingerCole Videocast: What's a Digital Double

The concept of the "digital double" isn’t new, but it’s gaining importance as more and more of our lives are lived in the digital world. Asanka Abeysinghe, WSO2's chief technology officer and the creator of this concept, was a guest on a recent KuppingerCole videocast hosted by Martin Kuppinger, founder and principal analyst at KuppingerCole. During the discussion, Asanka spoke about this unique concept, its benefits, and how it relates to customer identity and access management (CIAM).

How to Dive into API Behavior and Integrate Faster

If you don't understand how an API works, you can't get the best out of it. That's one problem. The other is that they keep increasing in number, but the quality of the documentation for each of them doesn't. Lack of clear, quality documentation leads to more difficulty for developers, and with more difficulty comes less chance they integrate the API. Which could also be your API. That's where API exploration tools like SwaggerHub Explore come in handy to make this all way simpler.

Multi-Tenant vs. Single-Tenant Systems: Which Is the Optimal Choice?

Digital transformation is accelerating rapidly, yet many businesses are still wondering how to proceed. For most, it will require a shift in thinking and operational activities. Succeeding in this transformation will require you to make critical choices surrounding more efficient workflows, data security, and profitability. One of the four pillars of digital transformation is IT uplift, which focuses on improving the IT infrastructure.

From Kinesis to Kafka

At the beginning of 2021, a brand new data team was assembled to build a real-time data platform for Kong’s SaaS platform, Konnect. Our mission is to provide top-notch real-time API analytics features for Konnect customers. V1 platform architecture The initial backend consisted of three main components: an ingestion service to handle incoming telemetry requests, an intermediate message queue, and a real-time OLAP data storage.

GraphQL Authorization at the API Gateway with Kong Konnect and OPA

In this blog we are going to learn about the technical challenges behind solving GraphQL authorization and how many organizations resolve it today. Then discuss how a Kong / OPA integration can help drive security standards in this space and bring some parity with REST API solutions. Last, we will end with a quick tutorial.

OpenTelemetry based Distributed Tracing for WSO2 API Manager

Tracing is one of the three pillars of observability. Tracing an API call in WSO2 API Manager is important to observe, identify possible bottlenecks in an API invocation path, and debug them. WSO2 API Manager facilitates tracing API invocation paths and publishing the traces based on the OpenTelemetry standard, using multiple tracers, namely: OpenTelemetry Protocol (OTLP), Jaeger, Zipkin, Log & Custom Tracer. This demo outlines important concepts of OpenTelemetry based distributed tracing in WSO2 API Manager, followed by a demonstration of publishing traces using the OTLP Tracer to Elastic APM, when invoking a sample API.

API policies export and import support for WSO2 API Manager

WSO2 APICTL allows users to perform API related tasks without any UI navigations. As an improvement, now WSO2 APICTL allows users to do common API Policy and Rate Limiting Policy related operations without any UI accesses and accelerates the CI/CD tasks related to the Policy Management. From this feature, it now allows to list, export, import and delete operations on both the common API Policies and Rate Limiting policies in multiple ways in accordance with the commands & their flags introduced.

OpenTelemetry based Distributed Tracing for WSO2 Micro Integrator

Tracing is one of the three pillars of observability. Tracing artifacts of WSO2 Micro Integrator is important to observe, identify possible bottlenecks in a message flow, and debug them. WSO2 Micro Integrator facilitates tracing message flows and publishing the traces based on the OpenTelemetry standard, using multiple tracers, namely: OpenTelemetry Protocol (OTLP), Jaeger, Zipkin, Log & Custom Tracer. This screencast outlines important concepts of OpenTelemetry based distributed tracing in WSO2 Micro Integrator, followed by a demonstration of publishing traces using the OTLP Tracer to New Relic APM, when invoking a simple API.

Implementing a Hybrid Kong Konnect Data Plane in Amazon ECS

Application Modernization projects often require their workloads to run on multiple platforms which requires a hybrid model. Kong Konnect is an API lifecycle management platform delivered as a service. The Control Plane, responsible for admin tasks, is hosted in the cloud by Kong. The Data Plane, totally based on Kong Gateway, can be deployed across multiple environments including VMs, Kubernetes, Docker, etc.

API linting based on custom rules

At present, API definitions are validated against the default OpenAPI schema upon import and when being edited in the publisher portal. In certain scenarios, such as the validation of fields like email or name, a custom validation approach may be required. This implementation allows administrators to enforce custom rules for API validation, helping to standardize and keep API definitions clean by validating against a specified set of custom rules inside WSO2 API Manager.

ELK Based On analytics with WSO2 Micro Integrator

Analytics is a main part of any deployment which enables the Monitoring of the availability, performance and usage of it’s components. WSO2 Micro Integrator has introduced operational analytics on top of ELK stack which is one of the leading analytics solution in the market. With this solution, a user can monitor the usage of each synapse component individually and identify issues, bottlenecks and improve the reliability and performance of the integration flow.

Introducing Kong Enterprise 2.8 Long Term Support

Kong is proud to announce our first-ever Long Term Support (LTS) version of Kong Enterprise. Kong Enterprise 2.8 LTS will be supported up to March 25, 2025. LTS is an industry term for a software release that is supported for a longer period of time than other releases. LTS versions are popular because once users are on an LTS version, they can rest assured that this version will continue to receive technical support and security updates during the LTS period.

Extending SmartBear's Modern Developer Focused Observability Capabilities

Today, we are very excited to announce the acquisition of Aspecto, an OpenTelemetry (OTel) pioneer whose capabilities will further extend SmartBear’s modern, developer-focused observability capabilities. Aspecto’s solution discovers modern microservice based architectures and visualizes all the real-time interactions between services and APIs through advanced distributed tracing capabilities.

What's New in Kong Gateway 3.2 and Kong Ingress Controller 2.9

Join us for our March User Call where we will show you all new features and updates in Kong Gateway 3.2 and Kong Ingress Controller 2.9. Tom Brightbill (Group Product Manager) will show you all new and exciting updates in Kong Gateway 3.2. In the new release, you will find new key functionality for everyone who operates Kong Enterprise in a hybrid environment, which further enhances its reliability.
Featured Post

It's time to consider the business impact of APIs

APIs need to be discussed in terms of business impact. For too long, the API (application programming interface) has been considered a pure technology topic. But with the need to digitise core business operations and deal with rising security threats, business and technology leaders must elevate API strategic discussions. Meanwhile, organisations need to end the hotchpotch of APIs that act as point solutions and adopt a modern integrated platform approach to APIs that will deliver business optimisation and improve the customer experience.

How to Choose the Right Visual Testing Methodology

Visual appearance is the first thing users notice when visiting a website or mobile app – before reading content or interacting with any elements. In fact, TopTal found that 94% of first impressions are design-related and judgements on a website’s credibility are 75% based on its overall aesthetics. So, even the slightest discrepancy could cost you sign-ups or conversions.

Developer Visibility: Where, When, and Why Now

As developer pressure mounts and calls for better software quality get louder, end-to-end visibility has become crucial. It’s time to provide visibility to software development teams everywhere. – SmartBear CEO Frank Roe There’s one inarguable result of the rapid acceleration of business demands, consumer expectations, and an endless, growing list of innovative technologies in the software industry – immense pressure felt by development teams across the globe.

Secure APIs Hosted in Amazon Gateway With Asgardeo

Amazon API Gateway is a service offered by AWS that enables users to create, publish, and maintain secure APIs on any scale. It supports both RESTful APIs and WebSocket APIs. However, It's crucial to secure these APIs before allowing applications to access them. The use of OAuth2 tokens and JWTs is the standard method of securing APIs.

VPCs: An Introduction to Secure Business Networking

You’ve heard of cloud computing and how businesses use it, but do you know about virtual public clouds? VPCs are designed to give users a private cloud experience on a public cloud. For many, this is the best of both worlds when it comes to cloud storage: you get the benefits of a private cloud with the resources available on the public cloud.

Building a Cloud Agnostic API Platform - Design and Best Practices

In this episode of our Tech Talk series, Siddharth Saikumar (Cloud Security Engineering, Vanguard) and Ragunath Sudalaimuthu (Lead Software Engineer, Lowe’s) will show us design and best practices for building a cloud agnostic API platform. Digital modernization accelerated the API ecosystem in every organization. A successful API strategy is paramount to an organization’s growth trajectory.

More AI Means More APIs

“Software is eating the world” and “APIs are eating software” have become familiar proclamations across the modern-day software industry. Given the resounding hype, interest, and substantial monetary investments happening in Artificial Intelligence (AI), a likely follow-on statement is, “AI is eating APIs, software, and everything else!”

API Testing Service: Is Outsourcing the Best Choice for API Testing?

API testing services are becoming increasingly important for businesses of all sizes. With the right API testing service, companies can ensure that their web applications and services are secure, reliable, and performant. But with so many software testing service providers out there, how do you choose the best API testing company? Choosing the best API testing service provider can be a challenging task.

Sponsored Post

Continuous Load Testing | A Developer's Guide

Continuous load testing is a powerful way of preparing for surges in traffic, without needing real users. Imagine you're a software engineer working on a website that's seen a recent surge in traffic. Despite initial testing indicating that the website should be capable of handling the increased load, the website crashes during peak hours. Load Testing is the process of simulating real-world usage of a website or application. The continuous version is when you integrate it into your development process as part of a CI/CD pipeline.

Moesif Platform and Feature Overview

Join us for this guided platform overview and learn how Moesif can help you gain insights into your API. Matt will take you on a comprehensive tour of the Moesif platform - an API analytics solution that empowers businesses with product insights and offers a suite of tools to enhance the developer experience, accelerate product decisions, and inform customer success teams.

Platform Analytics

You don’t need to be a data science expert to make use of platform analytics to gain better insights into your business. From Google Analytics to deep-dive data analytics for your APIs, big data is your friend when it comes to understanding your company. The right analytics platform can open up your data in a user-friendly way that empowers you to fuel better-informed business decisions based on your performance, customer data and analytics.

How Functional & Visual Testing Ensures Customer Satisfaction

E-commerce businesses lose 35% of their revenue due to poor user experience, according to Amazon Web Services, or about $1.4 trillion annually. On the other hand, UX Planet found that every dollar spent on improving UX/UI will return $10 to $100 – especially for software-as-a-service (SaaS) businesses with sticky business models. Let's examine why customer experience matters and how you can leverage functional and visual testing to eliminate errors.

An Introduction to Virtual Machines: A Technical Overview

Today’s businesses need flexible technologies that let them adapt to emerging trends as quickly as possible. Many have embraced digital transformation as an adaptive strategy that can improve everything from DevOps to security. Virtual machines can also play critical roles in digital transformation and in making your organization’s technology more nimble.

Data & Traffic Are Key to Kubernetes Preview Environments

Preview environments are temporary environments where developers can test code changes before deploying them to production, also called ephemeral environments, they’re temporary and should be discarded after testing changes. Carrying out tests using accurate data is a major challenge when creating and destroying environments. Put differently, you need realistic data and traffic in the preview environment to reflect the performance of code changes in production.

Moesif Awarded Best B2B Tech Product by Products That Count

Moesif has been named the Top B2B Tech Product in the 2023 Product Awards; Moesif won the Award as one of the Best Products for Product Managers. The Product Awards, presented by Products That Count in partnership with Mighty Capital and Capgemini, is the only awards show designed to celebrate the tools that help Product Managers build great products.

Self Host Your REST APIs with DreamFactory in Minutes

DreamFactory is a leading on-prem API generation and management platform built for data teams and backend developers to securely connect self-hosted and legacy systems and make them universally accessible. With DreamFactory, developers can connect nearly any database or data source with secure, compliant REST APIs in minutes instead of days.

Multi-Tenancy and Kong: An Architectural Guide

Engineering organizations building modern API-driven systems have different priorities when it comes to their API management solution. These priorities will drive design decisions about the deployment of various components for API gateways. Some organizations are looking to optimize compute resource utilization, helping to control costs or reduce operational toil.

6 Digital Transformation Trends for 2023

Digital transformation has been a buzzword for quite some time, but the COVID-19 pandemic has accelerated the need for organizations to adopt digital solutions. As we enter a new year, it’s worth taking a closer look at the top digital transformation trends that will shape business strategies in 2023. We’ll explore six key trends that will help organizations stay ahead of the curve and achieve digital transformation success.

How and Why to Migrate from Kong Open Source to Kong Konnect

Kong Konnect is a powerful SaaS-based API lifecycle management platform that provides a fast path for people looking to get started with Kong API Gateway. For existing users of Kong’s open-source gateway, it offers a way to rapidly take advantage of a scalable, highly-available architecture while upgrading to an Enterprise-class feature set and support options.