January 2022 Summaries

Kubernetes is a widely adopted open-source platform originally developed by Google, designed to manage containerized applications at scale, offering automated deployment, scaling, and management of application containers. It began as an internal project called Borg and was later open-sourced in 2015, becoming the de facto standard for container orchestration due to its robust ecosystem and strong community support. Kubernetes enhances microservices architectures by allowing applications to be developed as independent, containerized services, increasing efficiency and flexibility in software development. It provides essential components such as a centralized manager, scheduler, API server, and a persistence layer, along with features like service discovery, load balancing, and storage orchestration. Kubernetes also supports a rich ecosystem of tools for monitoring, logging, and CI/CD, crucial for managing microservices deployments. Its integration with API gateways like Kong Gateway further enhances its utility in complex, distributed systems, making it a pivotal technology in modern software development strategies.

Kong Konnect is designed to support modern application architectures with its Hybrid Mode, facilitating the transformation of monolithic applications into microservices across multiple platforms. It achieves this by splitting its API gateway into two sublayers: the Control Plane (CP), responsible for administrative tasks, and the Data Plane (DP), which manages API exposure and adapts to dynamic environments. This approach supports hybrid deployments, allowing companies to run applications on multiple platforms simultaneously. The integration with AWS services, such as ElastiCache, Cognito, and OpenSearch, enhances the scalability and flexibility of Kong Konnect deployments. Automation of the Data Plane life cycle is crucial, with options like AWS CloudFormation and AWS Cloud Development Kit (CDK) offering Infrastructure as Code capabilities to streamline deployments. The CDK introduces a higher abstraction level, allowing developers to define reusable components using programming languages, which are then synthesized into CloudFormation templates for resource provisioning. This method provides a robust framework for managing dynamic and diverse API ecosystems, with additional tools like AWS Certificate Manager and AWS Secrets Manager enhancing security and license management.

In February 2021, Kong announced the general availability of Kong Konnect, a cloud-native service connectivity platform designed to enhance API and service traffic protection while leveraging cloud control plane efficiencies. Since its launch, Kong Konnect has introduced new features such as Okta integration for single sign-on (SSO) access with OpenID Connect, which simplifies user provisioning and role mapping. The platform also offers basic customization capabilities for developer portals, allowing organizations to align their API portals with their brand by using custom domains and modifying header information. Additionally, Kong Konnect provides tools for generating custom analytics reports, enabling API product managers to track key performance indicators and export data for deeper analysis. These features aim to streamline API management and enhance user experience, with a 30-day free trial available for new users.

The text provides a comprehensive guide on best practices for developing custom plugins for Kong using Lua, emphasizing the importance of standardizing processes and speeding up development. It highlights the use of tools like Pongo for testing and the Kong plugin template as a starting point, along with recommendations for managing plugin configurations, implementing custom logic with the Plugin Development Kit (PDK), and avoiding latency issues. It also stresses the need for thorough testing, including unit, integration, and performance testing, while following a test-driven approach. Logging and error handling are discussed, with advice on using appropriate log levels and protected execution for function calls. The guide covers data access strategies, particularly in different deployment modes, and suggests using Redis for data storage. It advises on various deployment strategies, such as creating custom images for Docker and Kubernetes, and addresses plugin versioning and continuous integration practices using Pongo. Additionally, the text underscores the importance of code documentation, providing installation instructions, usage examples, and a changelog to facilitate plugin distribution and usage.

American Airlines embarked on a journey to enhance the developer experience by building the Runway platform on Spotify’s Backstage, aiming to simplify Kubernetes app deployments. The initiative focused on reproducible patterns and open-source technologies, such as the Kuma service mesh, to facilitate easier application management, API security, and cross-region support. The Runway platform allows for straightforward app deployment with minimal configuration through automation and abstraction layers, reducing the need for extensive Kubernetes expertise. By integrating tools like Argo CD and Rancher, the platform enables quick app creation and deployment, fostering greater app portability and reduced reliance on cloud providers. Through these advancements, American Airlines seeks to maintain high engineering standards and contribute to open-source communities while improving internal processes and customer experiences.

In a recent episode of Kongcast, the focus was on PHP, Laravel, and PHP developer tools, featuring Freek Van der Herten, a backend developer at Spatie. The discussion included a demonstration of Freek's new PHP debugging tool, Ray. The host, who primarily works with Java, explored PHP through Freek's insights, providing a refreshing perspective on the language. While acknowledging the longstanding reputation of Java as a robust yet somewhat outdated language, Freek highlighted his preference for PHP, citing its appealing features and his extensive experience with it. The episode encouraged viewers to subscribe for updates on future content, emphasizing the evolving landscape of programming languages.

Kong simplifies the complex process of setting up and maintaining certificate-based security for API gateways, providing lightweight solutions for developers and operations professionals who often face challenges with encryption and authentication. One key feature of Kong is its ability to manage certificates efficiently through the use of mutual TLS (mTLS) in both standard and enterprise versions, allowing for secure client authentication and authorization in industries such as banking. Kong supports various use cases, including presenting certificates to clients and upstream services, as well as trusting upstream certificates, which ensures mutual trust and secure connections. It offers automation capabilities through APIs and integration with Let's Encrypt for certificate management, enabling seamless updates and configurations. By offering these functionalities, Kong enables users to achieve enhanced security and compliance with internal and governmental regulations, while maintaining ease of use and integration with existing systems.

DevOps integrates development and operations teams to enhance application performance through continuous improvement practices and tool utilization. It encompasses a cycle with stages such as planning, development, delivery, and operation, each supported by various tools tailored to specific needs. In the planning stage, project management tools like Jira and API planning tools such as Swagger facilitate efficient organization and collaboration. During development, version control systems like Git and testing tools such as Selenium and Appium ensure code integrity and functionality. The delivery phase leverages automation tools, including Jenkins and CircleCI, to streamline code deployment, while infrastructure management is facilitated through tools like Docker and Terraform. In the operation stage, Kubernetes orchestrates container-based applications, and monitoring tools like New Relic and Prometheus provide insight into application performance. The text illustrates these stages through an eCommerce store example, highlighting the practical application of DevOps tools to maintain a seamless customer experience. As DevOps culture remains constant, the diversity and number of tools continue to expand, offering new solutions for efficient workflow management.

Application programming interfaces (APIs) are becoming essential for automated data exchange, necessitating effective planning and implementation systems to scale as companies grow. Challenges in scaling arise from decentralized teams creating inconsistent APIs, which can lead to integration issues and developer frustration. To address this, companies should adopt design-first principles, establish a central API team and council to facilitate standards, and use tools like API linters and gateways to ensure consistency and ease of integration. Sharing and reusing API models across teams can enhance collaboration, while a well-configured API gateway can streamline monitoring, rate limiting, and authentication processes. As APIs continue to be the dominant form of data exchange, maintaining solid design and implementation practices is increasingly crucial, with emerging tools like schema decorators offering new ways to automate consistency and simplify development.

In a Kongcast episode, Grant McKeen and Jonathan White from IntegrationWorks discuss how open banking and the Banking Industry Architecture Network (BIAN) work with Kong Gateway to simplify complex banking and financial services. BIAN, a not-for-profit organization, creates a comprehensive set of services for the banking industry, providing freely available API specifications to enhance interoperability. Open banking, driven by regulations, allows third-party providers to access banks' services through standardized APIs, offering more functionality and solutions. Kong Gateway, known for its lightweight and developer-centric approach, complements BIAN by facilitating quick and efficient API management and integration, supporting a seamless DevOps pipeline. IntegrationWorks developed a CLI tool, Kobi, to integrate BIAN's API specifications directly into Kong Dev Portal, enabling banks to maintain interoperability and reduce rework by selectively updating interfaces. This collaboration aims to provide a cost-effective and reliable solution for banks to manage open banking interfaces and improve their financial services offerings.

Microservices, with their distributed service-oriented architecture, present unique challenges such as ensuring reliability, security, and traceability, which can be addressed through specific design patterns and tools like Kong Gateway and Kuma. Circuit breakers and health checks are crucial for maintaining service reliability by managing traffic and removing unhealthy instances, while service discovery within a service mesh simplifies communication across diverse networks. Monitoring microservices involves distributed tracing and centralized logging to track requests across multiple services, with tools like Zipkin and Datadog aiding in capturing and analyzing these traces. Security in microservices encompasses TLS for external communication and internal measures like micro-segmentation and mutual TLS (mTLS) to manage access and encrypt internal traffic. Kong Gateway serves as a centralized API gateway handling policies such as load balancing and rate limiting, while Kuma acts as a service-to-service mesh that facilitates secure internal communication and service discovery. These strategies collectively enhance the reliability, monitoring, and security of microservices.

Josh, a developer who prefers coding over documentation and complex networking technologies, discovered the open-source API platform Kong, which facilitated the modernization of legacy applications through its developer-centric approach. Intrigued by its capabilities, he introduced Kong's enterprise SaaS platform, Konnect, to his team, leading to a collaborative effort to modernize a slow, cumbersome Pig Latin translator application originally written in Ansible and Python. By leveraging Apache Camel and Spring Boot, Josh transitioned the application to a synchronous architecture, significantly boosting performance and enabling deployment on Kubernetes using Terraform. Konnect's API versioning allowed backward compatibility, ensuring seamless modernization while supporting legacy clients. This success led to the decommissioning of the legacy architecture in favor of a microservices-based approach, highlighting the effectiveness of Kong Konnect in multi-cloud environments.

An API gateway serves as a modern infrastructure component that facilitates communication between clients and services by acting as a single entry point, thus enhancing the management and orchestration of microservices. Unlike Enterprise Service Buses (ESBs), which can become complex and monolithic, API gateways offer a decentralized, focused approach to connectivity, allowing for better scalability, flexibility, and management of cross-cutting concerns like authentication and logging. They support a design-first API development approach, promoting API adoption through discoverability and documentation while enabling performance improvements by aggregating multiple backend API calls into single client interactions. As organizations transition from monolithic to microservice architectures, API gateways can coexist with ESBs to gradually decouple business logic and foster agility, adapting to cloud or hybrid environments. By focusing on API connectivity, enterprises can unlock new value, leveraging the gateway's capabilities to create a more customer-centric and agile technological landscape.