Systems | Development | Analytics | API | Testing

March 2024

Understanding eBPF in Sevice Mesh with Ahmed

Why have we not created a service mesh in the kernel before? Some people have been semi-jokingly stating that kube-proxy is the original service mesh. However, it is not enough. So what's next? Since eBPF code can be inserted at runtime into an existing Linux kernel similar to a Linux kernel module, but unlike a kernel module, it can be done in a secure and portable manner. This allows for eBPF implementation to continue to evolve with the service mesh community.

Kubernetes Operators vs HELM: Package Management Comparison

While Kubernetes has become the standard platform for container orchestration, managing complex application lifecycles can still be a challenge. That's where Kubernetes Operators and Helm Charts come in. This guide dives into both of these tools to explain what they do, how they're different, and their ideal use cases. Whether you're new to Kubernetes or seeking clarity – this article is here to help!

Enabling Secure Data Exchange with Decentralized APIs

Stop me if you’ve heard this one before, but there’s a lot of data out there — and the amount is only growing. Estimates typically show persistent data growth roughly at a 20% annual compounded rate. Capturing, storing, analyzing, and actioning data is at the core of digital applications, and it’s critical for both the day-to-day operations and detecting trends, for reporting, forecasting, and planning purposes.

Best Practices for Enterprise Data Migration: A Comprehensive Guide

Enterprise data migration is a complex and critical process that involves moving large amounts of data from one system or platform to another. Whether it is due to a system upgrade, consolidation, or merger, enterprises must carefully plan and execute data migrations to ensure a seamless transition without any data loss or disruption to business operations.

The 10 Best APIs for Start-ups in 2024

If your startup is planning to build an app, you’re going to need an Application Programming Interface, better known as an “API.” The role of an API is to give your app a set of directions so it can get all the information it needs to interact with your business. APIs are extremely valuable, but they can also be difficult to navigate. Here’s a look at the 10 best APIs for start-ups that will ensure your business has the fundamental technology needed to be successful in 2023.

Introducing the Choreo CLI

We're happy to announce the release of a new command-line interface (CLI) tool for our development platform! With this, we aim to bring Choreo to your terminal. This reduces context switching, helps you focus, and enables you to script and create your workflows more easily. You can install Choreo CLI today on Linux, MacOS, and Windows. Simply run our installation script for your particular OS.

Secure Internal Microservice Authentication: A Comprehensive Guide

Internal microservice authentication is a critical component of software development. It ensures that only authorized users and services can access sensitive information and perform actions within a system. With the rise of microservices architecture and the increasing complexity of modern software ecosystems, implementing effective authentication mechanisms for internal microservices has become more important than ever.

Securing Access: A Guide to Implementing API Keys in AWS API Gateway

Implementing an API gateway API key is key to securing your APIs. In this guide, you’ll learn to generate and apply these keys, ensuring your AWS API gateway effectively authenticates and processes authorized client requests. We’ll dive into setup procedures, management tips, and security best practices to help you maintain robust access control. Get ready to fortify your services’ entry points.

How to Secure REST APIs: API Keys Vs OAuth

REST, a.k.a. Representational State Transfer, is an architectural style commonly used in software development. Applications built via REST-style development tend to be excellent examples of distributed hypermedia applications. However, they don’t often have excellent innate security options. That’s where API keys and OAuth tokens come in. In this article, we’ll cover how to secure REST APIs with either API keys or OAuth.

Introducing the World's First OSS Production-Grade Gateway API Operator

Today’s the day you’ve all been waiting for: Kong Gateway Operator OSS is here. You can read the code and see what a production-grade Kubernetes operator looks like. Authored by multiple Gateway API contributors, Kong Gateway Operator is the de-facto reference for Gateway API implementers on Kubernetes. Kong Gateway Operator (KGO) 1.2 brings six new features plus a brand new Helm chart that allows you to deploy KGO using tools that you already know and love.

Enhancing APIOps with decK for Kong Ingress Controller Users

The latest release of decK's APIOps features with the Kong Ingress Controller advances API management and automation in Kubernetes environments. This blog post delves into how this integration streamlines operations, ensuring a more feature-rich API lifecycle management.

Mastering API Gateway Auth: Proven Methods for Secure Connectivity

Securing your API gateway is critical to protect your services from unauthorized access and ensure safe data transmission. In this article, we’ll explore the essentials of API gateway auth, discuss the major authentication methods, and offer guidance for implementing and overcoming challenges in API gateway authentication—providing you with the knowledge to keep your digital assets secure.

How to Create an Application Migration Strategy

Creating an effective application migration strategy is crucial for organizations seeking to migrate their applications to a new environment, such as a cloud platform or a different on-premises infrastructure. A well-planned migration strategy ensures a smooth transition, minimizes downtime, and mitigates potential risks and challenges. Here’s what you need to do in order to create an application migration strategy.

Unpacking Distributed Applications: What Are They? And How Do They Work?

Distributed architectures have become an integral part of modern digital landscape. With the proliferation of cloud computing, big data, and highly available systems, traditional monolithic architectures have given way to more distributed, scalable, and resilient designs. In this blog, we look at what makes an application distributed and how distributed applications work to bring about high availability, scalability, and resilience.

Choreo's Managed Authentication for Single-Page Web Applications

Authentication and authorization play crucial roles in modern application development. Over the years, the way we implement these security measures has evolved, with protocols like OAuth2/OpenID Connect now being widely used. While web applications can manually implement these protocols, it requires a certain level of expertise. Moreover, when it comes to single-page applications (SPAs), additional measures are necessary to securely manage security tokens on the application side.

Decoding the Roles: API Gateway vs Load Balancer

Are you looking to streamline your network traffic but puzzled over whether an API gateway or a load balancer fits your needs? An API gateway centralizes and manages access to your APIs, while a load balancer efficiently distributes incoming traffic across multiple servers. This guide will directly compare api gateway vs load balancer, delineating their strengths to inform your network strategy.

Managing the Lifecycle of Gateways in Kubernetes Using Gateway API

Managing your Gateways on Kubernetes has historically been a very manual process, usually involving the use of Helm for operations like upgrades. At Kong we've been working on the Kong Gateway Operator (KGO) to revolutionize the experience of operating Gateways in production. Say goodbye to the cumbersome, manual processes of managing Gateways. Our operator transforms the configuration and lifecycle management experience, automating the tedious and complex operations that used to bog you down.

API Management Tools: Harnessing Efficiency and Innovation in 2024

Selecting the right API manager is critical for effective API lifecycle management. These tools, known as API managers, not only streamline the entire process from design to deployment but also bolster security and performance. This guide cuts through the noise to help you understand the essentials of API management and introduces you to the top tools excelling in the field in 2024, to equip you with the knowledge to choose the optimal solution for your business.

Getting Started with Choreo for the WSO2 Code Challenge! | Community Call 4

Welcome to the exclusive community call focused on getting started with Choreo, especially for participants of the WSO2 Code Challenge. If you're looking to participate in the challenge and are seeking tips to leverage Choreo to increase your draw entries, this call is for you!

7 Key Features of WSO2 Identity Server 7.0 Every Application and API Developer Should Know

As the open source leader in IAM, we’re excited to release WSO2 Identity Server 7.0. If you’ve been involved in the IAM space for some time, you might remember that WSO2 Identity Server 5.0 released in 2014, which was a revolutionary product at that time. It brought an innovative experience for identity domain experts to model and implement their access management requirements.

API Generation: A Better Way of Snowflake Data Extraction for Data Products

Organizations are constantly seeking more efficient ways to extract, transform, and load (ETL) data into their data warehouses. Snowflake, is one of the leaders in cloud data warehousing, has traditionally recommended ETL/ELT processes for data ingestion and extraction. However, for organizations building internal data products, there is a new kid on the block: API generation. Here’s the key things to know from this article.

Lessons Learned From Scaling An Open Source | Angie Byron

Drupal—an open source CMS—turned 20 years old recently, and has grown from a small student hobby project to an enterprise-grade digital experience platform running ~3% of the Internet. This talk will explore the many lessons learned (most of them the hard way ;)) in navigating an international open source developer community through various scalability challenges. Angie is Director of Community at Aiven, Core Maintainer and Product Manager for Drupal, O’Reilly Author, Mom.

The Benefits of Data Warehousing and Business Intelligence

Making sense of the ever-growing mountains of data is a challenge that organizations of all sizes face today. This article explores the powerful synergy between data warehousing and business intelligence, demonstrating how they work hand-in-hand to transform raw data into actionable insights. We’ll also delve into the role of APIs in facilitating real-time data integration and automation. Here are the key things to know about data warehousing and business intelligence: Table of Contents.

EP7: Platformless: Revolutionizing Enterprise Software Engineering

Join us for a new episode where Sanjiva and Asanka, the visionary authors of the platformless manifesto, explore the groundbreaking concept of platformless in enterprise software engineering. They unveil the inception and collaborative effort behind platformless, guiding viewers through its core principles and four essential technology pillars: API-first, cloud native middleware, platform engineering, and developer experience. Whether you're considering building from scratch or investing in a platformless solution, this discussion offers invaluable insights into the unique benefits it brings to architects.

6 Best API Documentation Tools | API Documentation Tool Compared

Terence Bennett - March 11, 2024 Creating API documentation from scratch can be a complex and time-consuming task, forcing many organizations to rely on the best API documentation tools. These tools help simplify and automate the documentation process, enabling users to format and display information in a way that is clear and easily comprehensible – even for non-technical users.

Scaling Smart: Introducing Choreo's Scale-to-Zero for Optimal Resource Utilization

While the cloud facilitates quicker and easier completion of tasks, it’s important to use resources efficiently. Careless usage can lead to high costs over time. Choreo’s new scale-to-zero feature allows you to minimize costs by scaling down application resource usage to almost zero when not in active use. This capability is a significant step forward towards apps being more resource-conscious and cost-effective.

Understanding API Codes: A Comprehensive Guide to Efficient REST API Integration

If you’re tackling REST APIs, decoding API codes is essential. Think of HTTP status codes as the vital signs for API requests. Our guide strips away the complexities, offering a clear explanation of each code from ‘200 OK’ to ‘500 Internal Server Error’, and how to use them efficiently. Whether you’re a developer or a system architect, you’ll learn to interpret these codes swiftly and apply best practices for worry-free API communications.

Sending Traffic Across Namespaces with Gateway API

In this blog post, we’ll demonstrate how easy it is to use Gateway API HTTPRoutes to route traffic to workloads deployed in different namespaces in a single Kubernetes cluster — a process that’s easier than ever. Previously, we only had Ingress API to define ingress routing rules. It served us well, but it also had its flaws and limitations that we had to overcome, sometimes in a hacky way.

How to Document Your REST API Like a Pro

REST API is an application programming interface that continues to grow in popularity due to its flexibility and scalability. In this detailed guide, we will outline how to document your REST API like a pro, guiding you through the process clearly and concisely to make things as easy as possible. From the basics, what you need to include, and all the way to the tips and tricks, we will provide everything you need to know to create perfect documentation.

Hybrid Infrastructure Load Balancing with Kong Gateway and Kong Mesh

Kong’s Wanny Morellato and Deepak Mohandas recently joined Justin and Autumn on the ShipIt podcast to talk hybrid infrastructure with Kong Gateway and Kong Mesh. They unravel the complexities of hybrid infrastructure at scale, discussing the processes, strategies, and philosophies that drive continuous delivery, infrastructure as code, and more.

API Platform Engineering Maturity Model

APIs have become fundamental to the digital economy, enabling integration and communication between different systems and services. A mature API platform is not just a technical achievement but a strategic asset that can drive innovation, efficiency, and growth. However, reaching this level of maturity requires a clear understanding of the stages involved and a commitment to evolving practices and strategies that best suit the organization's unique needs and goals.

WSO2 Optimizes Developer Experience with Launch of WSO2 Identity Server 7.0

WSO2 Identity Server 7.0 expands developer productivity with a new authentication API, visual editor with side-by-side graphical and code views, and one-click templates and authentication methods; adds comprehensive B2B CIAM and financial-grade API security.

The Future of Snowflake Data Product APIs: How ETL Creates Bottlenecks and API Generation Accelerates Adoption of Data Products

Snowflake has created an ecosystem where data is not just an asset but the backbone of innovation and operational efficiency. With regard to Snowflake, DreamFactory Software offers a robust platform for developing internal or private APIs that serve as crucial conduits for these data products. Our integration with Snowflake through dedicated connectors is transforming the way businesses access, analyze, and utilize their data.

API First Development | Why API-First Development Matters

Jeremy H - March 4, 2024 API-first development prioritizes designing and building application programming interfaces (APIs) before any other components of the application. This approach ensures that APIs, which allow different software systems to communicate, are central to the development process.

Introducing Identity Server 7.0 - The Most Powerful and Developer-Friendly Release Yet

WSO2 Identity Server is the leading open source IAM solution. It is a powerful, modern access management solution for your on-premises or cloud environment that provides secure access for your consumers (B2C), enterprise customers (B2B), workforce (B2E), or APIs. WSO2 Identity Server manages more than 1 billion identities worldwide, and its extensibility allows it to support the most complex IAM requirements.

Going Platformless To Transform Enterprise Software Engineering | Web Summit 2024, Qatar

Discover how going platformless could change the landscape of enterprise software engineering. By discarding traditional platform dependencies, businesses can achieve unparalleled innovation and flexibility within their software development processes. Listen to WSO2 CEO and Founder Sanjiva Weerawarana's talk at Web Summit Qatar 2024.

Manage API Access More Seamlessly

The Kong Konnect team recently launched the Portal Management API, which allows users to manage their Developer Portals with one API. That means you can easily manage your portal settings, appearance, application registrations, and registration settings easier than before. In this blog, I’ll walk you through two scenarios that we expect the portal management API can help streamline.