April 2024 Summaries

In a hypothetical scenario at the Paris, Texas Regional Airport, an API product owner manages two main APIs, Flights API and Scheduling API, each requiring distinct authentication strategies tailored to different user groups. Research institutions need read-only access to flight and gate information, whereas airline partners require both read and write access. By utilizing a single Auth0 DCR provider, the owner creates two authentication strategies: one with read-only scopes for Flights API v2 and another with read-and-write scopes for Scheduling API v2. These strategies are applied to their respective API Product versions through the POST v2/portals/{portalId}/product-versions endpoint, allowing for flexible authentication configurations across different portals. This approach, leveraging the concept of Portal Product Versions, enables the publication of API Product versions with suitable auth strategies, ensuring that research groups and airline partners receive appropriate access based on their needs. The initiative demonstrates how to maintain robust security while catering to diverse user requirements within the same platform.

gRPC is a modern, open-source framework for developing APIs, which has gained traction in the microservices world as an efficient alternative to REST. Developed by Google and based on Remote Procedure Calls (RPC), gRPC uses HTTP/2 for transport and Protocol Buffers for message serialization, offering faster and more efficient communication compared to traditional REST APIs. It supports a variety of service methods, including unary, server streaming, client streaming, and bidirectional streaming, making it highly versatile for different use cases. gRPC's advantages include broad language support, smaller message sizes, faster communication, and automatic code generation, which make it well-suited for high-performance systems and microservices architectures. However, it also presents challenges such as a steeper learning curve, limited browser support, and debugging complexity. Despite these drawbacks, gRPC's features like streaming support, strong typing, and modularity make it a compelling choice for many modern API development scenarios. As gRPC continues to evolve, with improvements in browser support and integration with service mesh technologies, its adoption is likely to increase in environments requiring efficient and robust communication.

Kong Mesh 2.7 introduces several enhancements aimed at improving usability, flexibility, and security for enterprise service mesh needs. Key updates include enhanced MeshMetric policy features with a more streamlined set of default metrics and shadow mode policies that allow users to preview proxy configurations before implementation. The Gateway API is now enabled by default, leveraging MeshHTTPRoute and MeshTCPRoute to facilitate seamless integration across multi-zone deployments. GUI improvements enhance readability and understanding of policy and route configurations. Additionally, the release emphasizes software supply chain management with the introduction of a Software Bill of Materials (SBOM), container and binary build provenance, and image signatures, along with plans for an SLSA audit. These updates collectively aim to optimize reliability, cost management, and compliance, making Kong Mesh 2.7 a comprehensive solution for modern enterprise needs.

Kong Insomnia 9.0 introduces numerous new features and enhancements, including over one hundred improvements in total, aimed at enhancing user experience and facilitating smoother migration from other platforms. Key updates include the addition of pre-request scripting, which allows users to write custom JavaScript scripts to control request lifecycles and is compatible with Postman scripts, and improved offline access, which allows for extended user sessions and better functionality without a constant internet connection. The release also features built-in API mocking capabilities for designing, debugging, testing, and mocking APIs, reducing the need for backend and frontend coordination. A new global search function enhances productivity by allowing users to find files across multiple projects and organizations easily. Enhanced collaboration tools include an in-app diff viewer for visualizing changes and automatic syncing of files in the dashboard. Looking forward, Insomnia plans to introduce more capabilities, such as post-request scripting, multiple tabs, and improved role-based access control (RBAC), as well as various other features based on user feedback, all while maintaining sustainable development and growth.

Kong has announced the general availability of its Kong Konnect Dedicated Cloud Gateways, a fully managed, multi-region API management solution designed to simplify and enhance the deployment of global API infrastructure. This service leverages Kong Gateway technology to provide scalable, resilient, and secure API management that can be deployed quickly across multiple regions. Cloud Gateways offers elastic scaling, private networking, and a choice between Autopilot and Custom modes for resource management, enabling businesses to tailor their API infrastructure to specific needs and demands. With support for AWS and plans to include Microsoft Azure and Google Cloud, the service allows users to choose where to run their infrastructure, optimizing data residency and compliance. The platform also integrates with Kong Konnect's other modules like Service Hub and API Observability, providing comprehensive governance and visibility. With features such as Smart Global DNS for optimal performance and automated upgrades, businesses can benefit from reduced costs, improved time to market, and enhanced site reliability engineering productivity.

In September 2023, Kong officially integrated Mesh Manager into its SaaS platform, Kong Konnect, providing a streamlined and centralized hub for managing Kong Mesh control planes. Originally stemming from the CNCF project Kuma, Kong Mesh faced three primary challenges during its integration: offering an easy abstraction for Konnect engineering teams, ensuring seamless multi-tenancy, and addressing zone connectivity. To achieve this, Kong introduced two services: Kong Mesh deployed as a global control plane in universal mode with PostgreSQL, and the mesh virtual control plane manager (vcp-manager), which serves as an API entry point for managing virtual global control planes and provisioning zones. This architecture not only reduces overhead but also enhances multi-tenancy by leveraging Row Level Security to restrict access. The integration involved adapting the zone-to-global control plane connectivity model to work with Kong Konnect’s authentication system, using System Account Access Tokens instead of JSON Web Tokens. This approach effectively reduced costs, enhanced operational efficiency, and provided a secure, multi-tenant solution while remaining compatible with existing platform services like authentication and authorization. The successful integration reflects the collaborative efforts of Kong’s engineering team, and users are encouraged to try Mesh Manager for free via Kong Konnect, with feedback for future enhancements being warmly invited.

Kong Engineering adopts a rigorous approach to Gateway performance benchmarking by integrating a dedicated bare metal cluster into their CI/CD process, which facilitates extensive performance testing across various release stages to prevent and address performance regressions. A case study involving a recent regression of approximately 10% in Requests Per Second (RPS) highlighted the challenges of maintaining performance amidst fundamental changes to the core proxy path, particularly the cache key algorithm used by Kong's Rust-based router. Although the refactoring aimed to improve efficiency by generating cache keys using only configured conditions, it inadvertently led to performance issues due to LuaJIT's trace aborts during JIT compilation. This was resolved by replacing closures with local functions, resulting in a reduction of performance regression to within the margin of error. The team plans to enhance LuaJIT debuggability to better monitor and address such issues early in the development process, ultimately ensuring a robust and efficient platform for customers.

Kubernetes is an open-source system designed for automating the deployment, scaling, and management of containerized applications, and it works in conjunction with API gateways to optimize microservices architecture. While Kubernetes orchestrates the microservices, API gateways serve as intermediaries between clients and services, providing functionalities such as authentication, rate limiting, load balancing, and comprehensive monitoring. By integrating Kubernetes with an API gateway, developers can streamline the management of microservices, ensure secure and efficient traffic routing, and centralize policy enforcement. The synergy between Kubernetes clusters and API gateways allows for enhanced security, performance optimization, and seamless service discovery, with API gateways acting as a crucial component for managing external access and advanced API operations. Additionally, tools like the Kong Ingress Controller can be used to integrate Kubernetes services with an API gateway, offering centralized management and the ability to expose microservices effectively.