API Gateway abstracts away the various services from clients. It also helps in securing the underlying APIs in a standardised manner. I'll be taking an example of Kong Gateway, a popular open source project and how it can be leveraged for securing your APIs. In this workshop, we will take an example of a sample service and look into enabling authentication, logging, rate limiting by using Kong Plugins. The structure of the workshop would be as following:
By the end of the session, you will be familiar with what an API gateway is, what Kong Gateway is, and how you can leverage an API Gateway to secure your API endpoints.