The new KrakenD Enterprise version 2.2 is now available, and it’s supercharged: Introduces dynamic routing based on headers and query strings, adds a security policies engine, upgrades to OpenAPI 3, improves SOAP integration, default gzip compression and a lot more… see below. Security Policies: Enforce any check, anywhere From RBAC and ABAC, to lifecycle management, restriction of content by country, validation custom cryptography or other strategies, … The new policies engine allows you to do any custom evaluations you need, during runtime and with access to query strings, URLs, parameters, cookies, tokens, time functions, geolocation, cryptography, and a long etcetera.

Continue reading →

A new patch version KrakenD 2.2.1 is available to download page. Upgrading from any 2.x does not require changes in the configuration. What’s changed in v2.2.1 vs 2.2.0 This patch version includes the following fixes: [bugfix] Fixed memory leak on Shadow Proxies when the response wasn’t a 200 [bugfix] Fixed audit command that would still warn on some fixed issues [security] Upgraded Go to version 1.20.1 Full Changelog: https://github.

Continue reading →

The KrakenD team is pleased to announce the release of KrakenD Community Edition v2.2. It introduces a new security audit command (krakend audit) that parses and analyzes your configurations and outputs security recommendations. We have designed it to run as a standalone command or integrated it into your existing CI/CD pipeline to avoid dangerous configurations, such as unwillingly disabling the TLS, setting excessive timeouts, unprotected endpoints, or similar scenarios. You can get v2.

Continue reading →

The new KrakenD Enterprise version 2.1.2 is already available for install or upgrade. This patch version does not bring significant new functionality but updates dependencies that have security vulnerabilities and adds a few fixes: [security]: Upgrade from Go 1.19.3 to Go 1.19.5, which includes security fixes to the net/http, crypto/x509, and os packages amongst others. [fix]: Caching backends with gzipped content wasn’t working properly [fix]: Upgraded the gin router to avoid panics on certain 404 paths.

Continue reading →

The new KrakenD version 2.1.4 is now available. This patch version does not bring significant new functionality but updates dependencies that have security vulnerabilities and adds a few fixes: [security]: Upgrade from Go 1.19.3 to Go 1.19.5, which includes security fixes to the net/http, crypto/x509, and os packages amongst others. [fix]: Caching backends with gzipped content wasn’t working properly [fix]: Upgraded the gin router to avoid panics on certain 404 paths.

Continue reading →

The new KrakenD Enterprise version 2.1.1 is already available for install or upgrade. This patch version does not bring new API Gateway functionality but adds support for ARM64 and other improvements. What’s changed in EE v2.1.1 vs EE 2.1.0 This version includes the following changes: New flag --log (or -l) on the krakend e2e to define where the output of the integration tests are saved. Architectures: Now officially supporting ARM64 architectures, releasing new Docker containers and packages.

Continue reading →

The new KrakenD version 2.1.3 is now available. This patch version does not bring new API Gateway functionality but adds support for ARM64 and other improvements. What’s changed in v2.1.3 vs 2.1.2 This version includes the following changes: Architectures: Now officially supporting ARM64 architectures, releasing new Docker containers and packages. A new flag, hide_version_header, placed in the router settings, allows obfuscating the X-Krakend-Version header. Performance improvement on Lambda usage Bugfix: Return a 400 status code when the body is empty or a malformed JSON (thanks to @efcasado Bugfix: Reject requests with special chars in the params (@Lura)

Continue reading →

The KrakenD team is pleased to announce the release of KrakenD Enterprise 2.1, already available for install or upgrade. KrakenD EE 2.1 brings a lot of new functionality, including advanced manipulation with a JSON Query language, a Revoke Server to manage tokens in clusters, new Kibana and Grafana dashboards, faster encoding, a rewritten and richer NewRelic exporter, Websockets balancing, and much more. Apologies because we have added so much that the summary is not going to be short this time :)

Continue reading →

A new patch version KrakenD 2.1.2 is available to download page. This release fixes a bug while parsing placeholders in endpoint. What’s changed in v2.1.2 vs 2.1.1 This patch version includes the following changes: Bugfix: Some requests sent to backend don’t have the parameters replaced from the client URL

Continue reading →

A new patch version KrakenD 2.1.1 is available to download page. In addition to the patch, we have created a new plugin-builder Docker image for those who compile custom plugins. What’s changed in v2.1.1 vs 2.1.0 This patch version includes the following changes: Bot detector: Avoid aborting with an error by @taik0 (changelog) krakend check: Configs should be able to have 0 endpoints. by @taik0 (changelog) Influx: Logs normalized by @kpacha (changelog) Json Schema: validate schema definitions and reuse schema by @moritzploss (changelog) JOSE: Add cacheDuration by @mguay22 JOSE: use a sempahore to orchestrate the concurrent warm up of the JWK caches by @kpacha (changelog) Lambda: AWS SDK version update by @boris154 (changelog) Lua: deps updated so error messages can contain the : char by @kpacha (changelog) Martian: Replace the header.

Continue reading →