Systems | Development | Analytics | API | Testing

Service Mesh

How to Achieve Zero-Trust Security With Service Mesh | Kong Summit 2020

Are you an enterprise architect who is currently facing the challenge to secure and observe service connectivity across every cloud and every cluster? Kong Mesh, built on top of CNCF’s Kuma and Envoy, is a universal service mesh tailored to the enterprise architect that must provide modern and secure connectivity to the applications that the teams are building.

Multi-Cluster & Multi-Cloud Service Meshes With CNCF's Kuma and Envoy

When we first created Kuma – which means “bear” in Japanese – we dreamed of creating a service mesh that could run across every cluster, every cloud and every application. These are all requirements that large organizations must implement to support their application teams across a wide variety of architectures and platforms: VMs, Kubernetes, AWS, GCP and so on.

Kong Demo: Protecting Microservices with Servicemesh

In this interactive demo, we will show how to encrypt and protect all services inside a service mesh using the Kuma Mutual TLS policy. We will then demonstrate how to control traffic permissions among each individual service using the TrafficPermission policy. In addition to security, Kuma provides traffic metrics using Prometheus and Grafana dashboards, as well as traffic tracing (APM) and traffic logging integrated into managed cloud logging and analytics services.

Kuma 0.6.0 Released With Hybrid Universal Support for Service Mesh and CNCF Donation

We are happy to announce the much-anticipated Kuma 0.6 release! This new release ships with major improvements, especially when it comes to supporting service meshes that can span across multiple clouds, multiple Kubernetes clusters and hybrid platforms (Kubernetes + VMs) in enterprise environments. Kuma has also been donated to the CNCF as a Sandbox project: the first Envoy-based service mesh to ever be donated to the foundation. Let’s unwrap these announcements.

Announcing API management for services that use Envoy

Among forward-looking software developers, Envoy has become ubiquitous as a high-performance pluggable proxy, providing improved networking and observability capability for increased services traffic. Built on the learnings of HAProxy and nginx, Envoy is now an official Cloud Native Computing Foundation project, and has many fans—including among users of our Apigee API management platform.