I use the solution in my company since we build our own products by using Spring Boot, Python and FastAPI. We mainly use the tool to monitor and provide security on top of those APIs.
Kong Gateway Enterprise
Kong | Kong Gateway EnterpriseLinux/Unix, Amazon Linux 2017.03.0 - 64-bit Amazon Machine Image (AMI)
External reviews
External reviews are not included in the AWS star rating for the product.
Extensibilité : Cela signifie que vous pouvez facilement ajouter des fonctionnalités comme la mise en cache ou la transformation des données.
La polyvalence de Kong Gateway
Offers good performance but needs to improve in the area of documentation
What is our primary use case?
What is most valuable?
The most valuable features of the solution are proxies and API monetization.
What needs improvement?
The tool needs to improve in areas like documentation and UI. The product needs to have good documentation and a good UI where we can see the other features. It was difficult for our company to understand the document when we needed to do some research and development work, which was some sort of a challenge we faced earlier. The tool should put efforts into the documentation, which can help the developer to develop products that the community is going to use in the future.
Additional features like offering good analytics performance and enhancing Kong Gateway Enterprise with GenAI capabilities can be helpful.
For how long have I used the solution?
I have been using Kong Gateway Enterprise since 2018. I do not remember the tool's version. My company operates as an implementor and service provider of the tool.
What do I think about the stability of the solution?
In terms of stability, the tool's team has made some good efforts, and my company is very happy with the product's approach.
I rate the stability an eight to nine out of ten.
What do I think about the scalability of the solution?
At the moment, we have ten people using the tool. Before COVID-19, we had a great team of around thirty members. Currently, we have a small team.
Scalability is part of the product. When we deploy the tool on any cloud, Docker supports the scaling process, both horizontally and vertically.
How are customer service and support?
Basically, my company uses the tool's open-source version. I don't think we connected with any of the technical team members of the tool. We will get in touch with the team only if we go with the licensing model.
Which solution did I use previously and why did I switch?
I have used Apigee, WSO2, and Microsoft's API gateway, along with some commercial tools like MuleSoft and Boomi. The tools were used as a part of the implementations done for our customers.
Considering that my company has experience with other products that are similar to Kong Gateway Enterprise, I can say that there is only a difference of a percentage or two between all the solutions, making it all the same for our organization.
How was the initial setup?
I am an enterprise architect who is involved in everything from design to deployment.
For the product's initial setup phase, my company has a DevOps team that implements the APIs. The DevOps teams take care of containerization and ensure that everything is connected, which is like a general life cycle in any project. All the different teams, like the development teams, DevOps teams, admin teams, and DB teams, don't see any issues in the tool because all of the implementations are taken care of by all the teams. My company did not work with the team from Kong Gateway Enterprise.
Our organization supports Docker and containerization, so our company can put in some stuff related to Kong Gateway Enterprise outside of Docker containers.
What's my experience with pricing, setup cost, and licensing?
My company chose the open-source model of the tool.
Which other solutions did I evaluate?
My company evaluated Kong Gateway Enterprise against WSO2, after which we started using it.
What other advice do I have?
The performance and speed of the gateways created with the tool are both good.
My company used one or two plugins that Kong made available for Kong Gateway Enterprise.
If I were to assess Kong Gateway Enterprise for its speed of innovation through its version updates, I would say that it is a good tool. Its features are the reason why we shortlisted it as an open-source API management solution.
I did not check if the design of the gateway infrastructure helps achieve high gateway uptime. We have our own product, where we are developing a lot of APIs, and we want to deploy them through a gateway that takes care of routing and security. That was the intention that could stop not going with commercial tools like the Apigee or Microsoft's API gateway. My company thought of choosing Kong Gateway Enterprise to containerize and deploy our products.
The ease of the tool's update process is good.
I did not work with Kong Gateway Enterprise's team when my company was in the transition phase. We referred to the documentation.
I recommend the tool to others.
I rate the tool a seven out of ten.
Offers OIDC, Rate Limiting, Lambda functions but lacks software upgrades
What is our primary use case?
Within Kong Gateway Enterprise, we utilize Kong Ingress and the Com API Gateway. It offers a wide range of plugins that we leverage, including OIDC, Rate Limiting, Lambda functions, and more. We also configure multiple deployments and utilize plugins like the OIDC Registration plugin for authentication and authorization. Additionally, we ensure schema validation for incoming requests and utilize security scanning. Kong Gateway provides a Request Transformer plugin that allows us to add or remove header values as needed.
How has it helped my organization?
What needs improvement?
Upgrading Kong Gateway Enterprise should be more sophisticated and innovative. The main issue is with the update process. Our DevOps and admin teams need to update multiple files, which is cumbersome. For instance, in cases where Palantir countries are involved, they have to update many files, which is not ideal. However, for other tasks like configuring the message routing and services and handling all the configurations, the process is acceptable.
The software version upgrade process should be improved. Additionally, the DevOps portal should be integrated more natively. There are a few other areas for improvement, such as implementing automatic load balancing. The status of the office team, whether it is up or down, should be checked at the API gateway level to facilitate load balancing.
For how long have I used the solution?
I have been using Kong Gateway Enterprise as a partner for three years.
What do I think about the scalability of the solution?
It is scalable. 5,000 people are using this solution. We need 10 administrators to manage this solution.
How are customer service and support?
When architects work, there should be some flexibility. We are currently receiving support from both the AWS and the Kong sites. You can raise the ticket immediately on the AWS site, and people will get involved quickly. However, Kong's support is not as good. They tend to have market delays, and tickets are not addressed promptly, which is a problem with Kong's support. I can give 75 points out of 100.
Which solution did I use previously and why did I switch?
There are multiple options in the market, such as Apigee. We opted for Kong because it's scalable to meet our needs and integrates well with our technical stack. Therefore, we recommend adopting it quickly.
How was the initial setup?
We had to develop the image for Kong Gateway Enterprise. In AWS, there's a concept of imaging, so we needed to focus on that. We must scan the image for security and ensure all necessary measures are in place. Therefore, we must first create the image and proceed with deployment and other related tasks.
What's my experience with pricing, setup cost, and licensing?
Pricing is fine.
What other advice do I have?
We use plugins for Kong Gateway for authorization and authentication. It supports connectivity with IDP providers to enable authentication and authorization. There are request plugins available to handle validation and inspect incoming requests. Most importantly, the OIDC plugin, consumer plugin, rate limiting plugin, schema validation plugin, and request validation plugin are some of the key plugins.
Version upgrades should be more sophisticated and innovative. Currently, the upgrade process lacks efficiency and could be improved. Previous versions required significant effort to update and should be made easier. The process needs to be streamlined, reducing the complexity and number of steps involved.
High gateway uptime is okay. It ensures high uptime for your gateways, although some latency may occur due to the added layer of processing. The benefits of using a gateway, such as enhanced security and control, outweigh the drawbacks. The gateway acts as an intermediary, preventing direct access to microservices by requiring traffic to pass through it. This setup enables features like authorization and authentication, including integration with IDPs. The gateway can handle these processes before forwarding requests to the microservices.
Overall, I rate the solution a seven out of ten.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Incroyable passerelle API
Offre des fonctionnalités étonnantes du plugin et nous pouvons également créer un plugin personnalisé en construisant du code Lua.
Offre des fonctionnalités de portail développeur pour que le développeur puisse intégrer des API pour les montrer au monde extérieur.
Bon support client.
Examen complet pour Kong API Gateway
Architecture de plugin étendue
Gestion complète des API
Fonctionnalités de sécurité robustes
Intégration de maillage de services
Communauté active et support
Courbe d'apprentissage abrupte pour les plugins personnalisés
Lacunes occasionnelles dans la documentation
Coût élevé de l'édition entreprise
Potentiel de défis de configuration
Problème : Gestion complexe et chronophage de plusieurs API.
Avantage : Simplifie et automatise la gestion des API, réduisant la charge de travail manuelle.
Sécurité
Problème : Assurer la sécurité des API contre les accès non autorisés et les menaces.
Avantage : Améliore la sécurité avec des fonctionnalités comme OAuth2, JWT, liste blanche d'IP et chiffrement des données.
Scalabilité
Problème : Gestion de volumes élevés de requêtes API sans problèmes de performance.
Avantage : Architecture haute performance assurant scalabilité et faible latence.
Extensibilité
Problème : Difficulté à personnaliser la fonctionnalité des API.
Avantage : Architecture de plugins étendue permettant des solutions sur mesure et une fonctionnalité améliorée.
Intégration de Service Mesh
Problème : Intégration complexe des API dans les environnements de microservices.
Avantage : Compatibilité transparente avec les architectures de service mesh et les plateformes d'orchestration de conteneurs.
Revue de Kong API Gateway
Produit décent au mieux : kong
1. Absence d'opération de stockage des informations d'identification client que nous obtenons dans Apigee et IBM Connect.
2. Portail développeur bien pire en comparaison avec les autres portails développeurs.
3. Les problèmes fréquents de synchronisation de Dataplane sont une grande préoccupation.
4. Le document devrait être plus détaillé et précis.
1. fournir un support de déploiement multi-environnements est une fonctionnalité indispensable pour toutes les passerelles API que Kong offre actuellement, par exemple le déploiement dans - cloud, VMs, docker, etc.
2. La transformation des requêtes et des réponses via Kong est un point à noter car cela semble si propre et facile à faire.
3. La connexion sécurisée entre les CRM, les plans de données et les plans de contrôle est également une bonne chose.
Produit qui est encore en phase de développement
1. le processus d'automatisation du déploiement des entités et du portail développeur est excellent dans Kong Konnect grâce à l'API d'administration/gestion.
2. C'est beaucoup plus facile à utiliser en comparaison d'IBM Connect, Akana et Apigee.
3. Il justifie son coût pour les consommateurs car il n'est pas cher à souscrire.
4. La pile de plugins de Kong est excellente et toujours en cours d'ajout de nouveaux plugins comme avec la mise en œuvre de l'IA.
5. La faible latence pour la requête API est également un grand avantage.
1. Kong n'a pas encore compris les exigences des clients, sans parler de l'idée de les mettre en œuvre, car cela prend trop de temps (des mois) pour résoudre un simple bug.
2. Le retard dans la livraison de produits comme Kong Mesh et Api Hub est un gros point négatif pour moi.
3.
1. Gestion du trafic - Il gère le trafic entrant de manière si efficace avec une faible latence qu'il est leader du segment.
2. Monétisation des API - Il aide les clients à monétiser leurs API via leur portail développeur.
3. Sécurisation des points de terminaison - Kong aide à restreindre l'accès non autorisé aux points de terminaison des API.
4. Test des API - L'outil Insomnia de Kong est un excellent outil pour les tests unitaires grâce à des fonctionnalités comme la création automatique de tests et bien plus encore.
Légende de l'API
1. Permettre l'ajout d'en-têtes aux charges utiles de mes/demandes client avant de les transmettre en amont, grâce au plugin de transformation de requêtes.
2. Protéger mon service contre les attaques DDOS grâce aux plugins de limitation de débit.
3. Faciliter la mise en cache des réponses via le plugin de cache de réponse, réduisant ainsi les temps de réponse.