November 2024 Summaries

Kong has announced its oversubscribed Series E financing, achieving a $2 billion valuation with $175 million raised in both primary and secondary funding, led by Tiger Global and new investor Balderton, along with participation from other prominent investors. This round marks a nearly 45% increase in valuation from the previous round, reflecting strong investor confidence in Kong's vision to dominate the API landscape. The funding will be used to enhance product innovation, expand API runtimes like AI Gateway, advance AI-infused applications, and support open-source projects, alongside global expansion efforts targeting markets such as Japan and India. Kong aims to become the universal broker of API traffic, creating a consolidated API inventory for customers, enabling a unified experience in API management, security, and observability, and positioning every company to become an API company. The transition to machine-based services via APIs, driven by the growth of cloud computing, digital devices, and generative AI, underscores the massive opportunity ahead, necessitating new networking infrastructure and fueling Kong's mission to support the AI era.

At the API Summit 2024, the Kong Premium Technology Partner Program was announced with Confluent as an initial participant, highlighting the convergence of data streaming and APIs. This partnership has advanced with Kong joining the Connect with Confluent technology partner program, facilitating the integration of Kong Konnect and Confluent Cloud to enhance Apache Kafka® data streaming with advanced API management. This integration uses an event gateway pattern to manage exposure and consumption control by implementing authentication, rate limiting, and real-time monitoring through Kong Gateway's platform-agnostic and scalable infrastructure. Confluent Cloud, built by the original creators of Kafka, offers a fully managed, cloud-native streaming platform that outperforms open-source Kafka with features like elastic scalability and enterprise-grade security. The integration of Kong Gateway with Confluent Cloud enables the transformation of REST requests into Kafka messages, providing standardized access while safeguarding the Kafka infrastructure. This collaboration empowers organizations to build resilient, scalable event streaming applications by consolidating robust policies and traffic management strategies.

Kong Gateway introduced Hybrid Mode in version 2.0, allowing efficient deployment of clusters across various cloud environments with centralized control via a Control Plane. As configurations grew to hundreds of thousands of entries, challenges arose, such as increased latency and memory usage due to the full configuration set being sent during updates. To address this, Incremental Configuration Sync was developed, which transmits only changed configuration parts, reducing network load and processing time. Benchmark tests demonstrated significant memory and CPU savings with this approach, leading to lower costs and improved performance. The feature is in a technical preview stage, with specific instructions for testing and known limitations expected to be resolved before its general availability. Users are encouraged to test the feature and provide feedback to help refine it for production use.

The Kong Gateway Operator 1.4 release introduces several new features aimed at simplifying the management and deployment of Kong Gateway through enhanced integration with Konnect and Kubernetes Custom Resource Definitions (CRDs). Users can now configure Kong Konnect using CRDs, attach DataPlane resources to Konnect with minimal setup, and manage custom plugins from an OCI registry using the KongPluginInstallation CRD. The update simplifies the previously complex process of integrating data planes with Konnect by using the new KonnectExtension resource, which allows users to define control plane details once and apply them across multiple data planes. Additionally, the release includes support for specifying a PodDisruptionBudget to maintain a minimum number of available pods. These enhancements aim to improve user experience, particularly for on-premises deployments, and invite feedback via the GitHub discussion forum for further improvements.

At the API Summit 2024, Writer, a generative AI platform for enterprises, showcased its integration with Kong Konnect to enhance API management for its new AI Studio, which offers enterprise-grade generative AI apps. Writer's challenge was to create a public Gate API that could handle security, rate limiting, and offer a no-code experience, among other requirements. By integrating with Kong Konnect, Writer successfully managed to simplify deployment, enhance security through plugins, and streamline API access management. Jack Viers, a Backend Developer at Writer, highlighted how Kong Konnect facilitated a unified API surface and troubleshooting, significantly reducing operational complexities and improving the overall efficiency of Writer's API infrastructure. The integration not only improved security and customization for Writer but also provided a flexible solution that allowed for easy management and deployment, contributing to the successful launch of AI Studio in 2024.

SEB, a leading Nordic corporate bank, has embraced an API-first approach spearheaded by Daniel Franzén, the Head of Open Banking, to modernize its operations and enhance customer experience. This shift was catalyzed by regulatory requirements from 2018 and dissatisfaction with their previous, cumbersome API platform, leading them to partner with Kong for API management. The transition to Kong has enabled SEB to reduce complexity, costs, and time to market while fostering a culture where APIs are integral to both technology and business strategy. As a result, SEB now boasts approximately 200 APIs across its products, which has facilitated new business opportunities and streamlined development processes. The bank's commitment to API governance and the use of multiple API protocols has not only improved internal efficiencies but also attracted new customers, aligning with SEB's vision for all products to be represented by APIs.

Effective API management is essential for optimizing digital experiences and application performance, as it encompasses several key pillars such as design, monitoring, documentation, security, and version control. By implementing comprehensive API management strategies, organizations can enhance developer adoption rates, improve the developer experience, and potentially increase revenue through API monetization. API design is critical for defining how software components interact, while ongoing monitoring ensures optimal performance and early detection of issues. Detailed documentation aids developers in navigating APIs, while robust security measures protect against unauthorized access and data breaches. Version control through semantic versioning and clear communication helps maintain backward compatibility and minimize disruptions. Additionally, optimizing API performance involves techniques like load testing, response time improvement, and minimizing dependencies. Prioritizing API management as an integral part of software development can reduce costs, improve integration efforts, and ensure long-term success in the marketplace.

APIs, or application programming interfaces, are integral to modern digital operations, facilitating seamless interactions between web pages, mobile apps, and even household devices. As their usage grows, so does the need for robust API security to protect against potential breaches that can cause significant financial and reputational damage, with the average cost per attack estimated at $6.1 million. APIs have become a primary target for cybercriminals, leading to the necessity of implementing comprehensive security measures, including authentication, encryption, rate limiting, input validation, and monitoring. Effective API security is essential for protecting sensitive information, ensuring compliance with regulatory requirements, and maintaining business continuity and competitive advantage. As API attacks become more sophisticated, strategies such as inventory management, continuous monitoring, and adopting advanced authentication techniques are crucial. Consistent application of security models across all APIs simplifies management and ensures proper protection. Organizations must secure APIs during development, employing practices such as access control, data integrity maintenance, and error response wrapping to mitigate risks and protect sensitive data, ultimately contributing to the secure and efficient operation of digital enterprises.