The KrakenD team is pleased to announce the release of KrakenD Community Edition v2.2. It introduces a new security audit command (krakend audit) that parses and analyzes your configurations and outputs security recommendations. We have designed it to run as a standalone command or integrated it into your existing CI/CD pipeline to avoid dangerous configurations, such as unwillingly disabling the TLS, setting excessive timeouts, unprotected endpoints, or similar scenarios. You can get v2.

Continue reading →

The new KrakenD Enterprise version 2.1.2 is already available for install or upgrade. This patch version does not bring significant new functionality but updates dependencies that have security vulnerabilities and adds a few fixes: [security]: Upgrade from Go 1.19.3 to Go 1.19.5, which includes security fixes to the net/http, crypto/x509, and os packages amongst others. [fix]: Caching backends with gzipped content wasn’t working properly [fix]: Upgraded the gin router to avoid panics on certain 404 paths.

Continue reading →

The new KrakenD version 2.1.4 is now available. This patch version does not bring significant new functionality but updates dependencies that have security vulnerabilities and adds a few fixes: [security]: Upgrade from Go 1.19.3 to Go 1.19.5, which includes security fixes to the net/http, crypto/x509, and os packages amongst others. [fix]: Caching backends with gzipped content wasn’t working properly [fix]: Upgraded the gin router to avoid panics on certain 404 paths.

Continue reading →

We can’t believe it’s been six years since the first commit to KrakenD. It’s incredible how fast time passes when you have a purpose, and we’ve had a blast working on this project and seeing it grow. We are so grateful to everyone who has been with us on this journey. At KrakenD, we are passionate about building an open-source API Gateway that pursues performance, scalability, and simplicity. This past year marked our first full year as an independent company.

Continue reading →

The new KrakenD Enterprise version 2.1.1 is already available for install or upgrade. This patch version does not bring new API Gateway functionality but adds support for ARM64 and other improvements. What’s changed in EE v2.1.1 vs EE 2.1.0 This version includes the following changes: New flag --log (or -l) on the krakend e2e to define where the output of the integration tests are saved. Architectures: Now officially supporting ARM64 architectures, releasing new Docker containers and packages.

Continue reading →

The new KrakenD version 2.1.3 is now available. This patch version does not bring new API Gateway functionality but adds support for ARM64 and other improvements. What’s changed in v2.1.3 vs 2.1.2 This version includes the following changes: Architectures: Now officially supporting ARM64 architectures, releasing new Docker containers and packages. A new flag, hide_version_header, placed in the router settings, allows obfuscating the X-Krakend-Version header. Performance improvement on Lambda usage Bugfix: Return a 400 status code when the body is empty or a malformed JSON (thanks to @efcasado Bugfix: Reject requests with special chars in the params (@Lura)

Continue reading →

The KrakenD team is pleased to announce the release of KrakenD Enterprise 2.1, already available for install or upgrade. KrakenD EE 2.1 brings a lot of new functionality, including advanced manipulation with a JSON Query language, a Revoke Server to manage tokens in clusters, new Kibana and Grafana dashboards, faster encoding, a rewritten and richer NewRelic exporter, Websockets balancing, and much more. Apologies because we have added so much that the summary is not going to be short this time :)

Continue reading →

The Spanish National Cybersecurity Institute (INCIBE) announces today the addition of KrakenD as a CNA (CVE Numbering Authority). KrakenD assumes as its own, from this date, the best practices of this program. KrakenD is now authorized by the CVE Program to assign CVE identifiers within its scope and its corresponding publication in the CNA section. Information technology and cybersecurity professionals use CVE Records to ensure they are discussing the same issue, and to coordinate their efforts to prioritize and address the vulnerabilities.

Continue reading →

A new patch version KrakenD 2.1.2 is available to download page. This release fixes a bug while parsing placeholders in endpoint. What’s changed in v2.1.2 vs 2.1.1 This patch version includes the following changes: Bugfix: Some requests sent to backend don’t have the parameters replaced from the client URL

Continue reading →

A new patch version KrakenD 2.1.1 is available to download page. In addition to the patch, we have created a new plugin-builder Docker image for those who compile custom plugins. What’s changed in v2.1.1 vs 2.1.0 This patch version includes the following changes: Bot detector: Avoid aborting with an error by @taik0 (changelog) krakend check: Configs should be able to have 0 endpoints. by @taik0 (changelog) Influx: Logs normalized by @kpacha (changelog) Json Schema: validate schema definitions and reuse schema by @moritzploss (changelog) JOSE: Add cacheDuration by @mguay22 JOSE: use a sempahore to orchestrate the concurrent warm up of the JWK caches by @kpacha (changelog) Lambda: AWS SDK version update by @boris154 (changelog) Lua: deps updated so error messages can contain the : char by @kpacha (changelog) Martian: Replace the header.

Continue reading →