Showing results for tag Api Gateway

Solving a Real-World Information Leakage Problem with WebAssembly and Gloo Edge

Multiple Gloo Edge customers have approached us recently with questions like, “Our product security team wants our applications to remove any response headers from our services that indicate to a potential attacker that we’re using Envoy as the foundation of our API Gateway.  In particular, we’d like to remove the server header and any header […]

Jim Barton | April 9, 2021
Read More

Securing Your APIs with Gloo Edge and Auth0

  Gloo Edge is a cloud-native API Gateway and Ingress Controller built on Envoy Proxy to facilitate and secure application traffic at the edge.  Enterprise users of Gloo Edge commonly want to delegate authentication decisions to an Identity Management Provider based on the popular OpenID Connect (OIDC) standard. Auth0 is one of the most popular […]

Jim Barton | March 14, 2021
Read More

[Tutorial] How to configure a basic failover using Gloo Edge

Introduction Failover is the ability to seamlessly and automatically switch to a reliable backup system to make critical systems more fault-tolerant and avoid major business impacts. The following tutorial demonstrates how to easily configure the failover for your upstreams using Gloo Edge. Gloo Edge Gloo Edge is a feature-rich, Kubernetes-native ingress controller, and next-generation API […]

Adam Sayah | February 10, 2021
Read More

[Tutorial] Crush CSRF Attacks with Gloo Edge

Shield your applications from session-riding, Cross-Site Request Forgery attacks.   According to OWASP: “Cross-Site Request Forgery (CSRF) is an attack that forces an end user to execute unwanted actions on a web application in which they’re currently authenticated. With a little help of social engineering (such as sending a link via email or chat), an […]

Jim Barton | January 11, 2021
Read More

[Tutorial] Rewriting Express Routes with Gloo Edge

Rewriting Express Routes with Gloo Edge During this tutorial we are going to leverage Gloo Edge as an API Gateway and Kubernetes Ingress Controller to rewrite the routes of a simple Express app. You can clone the source code from here. The repository itself is packed with Scenarios that show off more features of Gloo […]

Casey Wylie | December 30, 2020
Read More

Advanced Authentication Workflows with OpenID Connect using Gloo API Gateway – Part 2

In the previous Blog post, we covered how Gloo can be used to authenticate users with OIDC and how it can process the JWT token returned by the identity provider. The JWT token was stored as a cookie in the web browser and sent with each HTTP request as a header. We configured Gloo to […]

Denis Jannot | November 9, 2020
Read More

End User Case Study: uShip

In this post, we feature a Q&A with Richard Simpson, software engineer at uShip working on platform engineering. uShip is a transportation marketplace company launched in 2004 with the mission to make shipping large or bulky items (like cars, cranes, furniture, and freight) quick, easy and affordable. The uShip platform helps people, businesses, e-commerce sellers, […]

Solo.io | November 4, 2020
Read More

Webinar Recap – What’s New in Gloo API Gateway version 1.5

Gloo is a next generation API gateway and Kubernetes Ingress Controller built on Envoy Proxy to manage and secure application traffic at the edge. Recently we released version 1.5 which includes new features, enhancements, and bug fixes for Gloo API Gateway, Federation, and Developer Portal. You can read more about the latest release, here and […]

Solo.io | October 21, 2020
Read More

Webinar Recap – Can You Replace API Management with Service Mesh?

This webinar was long in the making as we looked at answering the #1 most frequently asked question: Can I replace my Edge/API Gateway or API management solution with a service mesh? This is not surprising given the amount of service mesh hype in the cloud-native ecosystem and service mesh functionality like traffic routing, shaping, […]

Solo.io | October 7, 2020
Read More

Updated Developer Portal for Gloo and Istio version 0.4.11

Today, alongside our Gloo 1.5 announcement, we are also releasing the latest enhancements to the Developer Portal for Gloo and Istio. The Gloo Developer Portal was introduced back in April with Gloo 1.3 and the Developer Portal for Istio in May of this year to help teams catalog and expose their running APIs securely to […]

Solo.io Engineering | October 1, 2020
Read More

CREALOGIX and Solo.io partner to deliver a secure digital banking platform for the cloud

It takes strong technology and partners to modernize a long-standing digital banking platform to the cloud. CREALOGIX and Solo.io partner up to enable banking customers to benefit from secure online banking solutions delivered on modern and cloud-native, Kubernetes-based technologies. CREALOGIX, the leading digital banking software provider, and Solo.io, the modern API infrastructure company and 2019 […]

Solo.io | September 30, 2020
Read More

Webinar Recap – Multi-Cluster API Gateway Patterns

Designing, building and operating applications for cloud-native infrastructure that are resilient, scalable, secure, and meet compliance and IT objectives gets complicated. Another wrinkle for the organizations with which we work is the fact they need to run across a hybrid deployment footprint, not just Kubernetes. Add to that the need to shape, manage, and secure […]

Solo.io | September 15, 2020
Read More