‹ Reports
The Dispatch

OSS Report: Kong/kong


Kong API Gateway Faces Critical Bug Reports Amidst Active Development

Kong API Gateway, a high-performance, cloud-native API management tool, has recently experienced a surge in critical bug reports, particularly concerning plugin behavior and migration challenges. The project, maintained by the open-source community and Kong Inc., continues to evolve with significant contributions enhancing its AI capabilities and performance optimizations.

Recent Activity

Recent issues and pull requests (PRs) highlight ongoing efforts to stabilize and enhance the Kong API Gateway. Key PRs such as #13519 and #13506 address critical operational issues, focusing on database resilience and streaming protocol fixes. The development team is actively engaged in refining the platform's stability, with a strong emphasis on performance improvements seen in PR #13511, which optimizes plugin iteration processes.

Development Team and Recent Contributions

  1. Aapo Talvensaari (bungle)

    • Recent Commits: 15
    • Notable Changes: Dependency updates, DNS client fixes, TLS verification improvements.
  2. Chrono (chronolaw)

    • Recent Commits: 11
    • Notable Changes: Dependency bumps, plugin iterator optimization.
  3. Wangchong Zhou (fffonion)

    • Recent Commits: 11
    • Notable Changes: AI proxy enhancements, AWS Bedrock support.
  4. Jun Ouyang (oowl)

    • Recent Commits: 7
    • Notable Changes: AI proxy configuration changes, schema fixes.
  5. Niklaus Schen (Water-Melon)

    • Recent Commits: 6
    • Notable Changes: CI/CD improvements, dependency management.

The team's recent activities demonstrate a collaborative approach to addressing both feature enhancements and critical bug fixes, ensuring the gateway remains robust and performant.

Of Note

The Kong API Gateway project is navigating through critical challenges while simultaneously advancing its technological capabilities through active community engagement and strategic development efforts.

Quantified Reports

Quantify commits



Quantified Commit Activity Over 30 Days

Developer Avatar Branches PRs Commits Files Changes
Aapo Talvensaari 5 13/9/3 15 42 2122
Jack Tysoe 2 3/3/0 4 31 1909
Jun Ouyang 2 6/6/0 7 22 1465
Chrono 1 7/11/0 11 58 923
Stephen Brown (srb3) 1 1/0/0 4 14 899
Xiaochen Wang 2 4/3/0 4 34 801
Wangchong Zhou 2 10/10/0 11 38 756
Zhefeng C. 1 2/2/0 3 14 589
Hisham Muhammad 1 0/0/0 4 12 324
Murillo 1 2/2/0 2 8 302
Keery Nie 3 3/2/0 7 11 282
Robin Xiang 1 1/2/0 2 6 217
Yusheng Li 1 0/1/1 1 9 192
Xiaoyan Rao 1 1/2/0 2 9 187
Michael Martin 1 2/2/0 1 23 186
Yufu Zhao 1 1/3/0 3 11 160
Xumin 1 0/1/1 1 3 124
Antoine Jacquemin 1 2/2/0 2 10 122
Niklaus Schen 2 7/5/2 6 11 106
Samuele (samugi) 2 1/0/0 2 2 63
Andy Zhang 1 1/3/3 1 1 53
Haoxuan (Oyami-Srk) 1 1/0/0 1 2 44
Qi 1 3/3/0 3 2 43
Isa Farnik (curiositycasualty) 1 1/0/0 1 24 40
BrianChen 1 1/1/0 1 5 20
kurt 1 0/1/0 1 2 13
saisatishkarra 1 1/1/0 1 1 6
dependabot[bot] 3 3/1/0 3 3 6
Gabriele 1 1/1/0 1 1 2
Guilherme Salazar (gszr) 0 0/1/0 0 0 0
Joshua Schmid (jschmid1) 0 0/2/0 0 0 0

PRs: created by that dev and opened/merged/closed-unmerged during the period

Quantify Issues



Recent GitHub Issues Activity

Timespan Opened Closed Comments Labeled Milestones
7 Days 4 1 8 3 1
30 Days 14 13 57 7 1
90 Days 69 71 354 26 1
1 Year 227 199 1253 59 2
All Time 4384 4353 - - -

Like all software activity quantification, these numbers are imperfect but sometimes useful. Comments, Labels, and Milestones refer to those issues opened in the timespan in question.

Detailed Reports

Report On: Fetch issues



Recent Activity Analysis

The Kong GitHub repository has seen notable recent activity with 31 open issues, indicating ongoing user engagement and potential areas of concern within the community. Among the issues, several highlight critical bugs and feature requests that could impact the functionality and performance of the API Gateway. A recurring theme is the transition challenges users face when upgrading between major versions, particularly from 2.x to 3.x.

Several issues indicate problems with plugin behavior, especially regarding rate limiting and DNS resolution, suggesting that users are experiencing inconsistencies in expected functionalities. The presence of multiple issues related to plugins also points to a need for improved documentation and support for custom plugins.

Issue Details

  1. #13521: Kong Gateway API with 104 Connection reset by peer message to OpenShift ngressController

    • Priority: High
    • Status: Open
    • Created: 0 days ago
    • Updated: N/A
  2. #13515: Building kong deb package failed behind proxy for version 3.5.0 and above

    • Priority: Medium
    • Status: Open
    • Created: 1 day ago
    • Updated: N/A
  3. #13502: Abnormal route occurred on the kong upstream

    • Priority: Medium
    • Status: Open
    • Created: 4 days ago
    • Updated: N/A
  4. #13485: PostgreSQL error during migrations bootstrap

    • Priority: High
    • Status: Open
    • Created: 10 days ago
    • Updated: N/A
  5. #13473: Rate-limiting error Redis timeout

    • Priority: High
    • Status: Open
    • Created: 11 days ago
    • Updated: N/A
  6. #13462: Kong opensource installation issues with custom plugins not working as expected

    • Priority: Medium
    • Status: Open
    • Created: 13 days ago
    • Updated: N/A
  7. #13452: Passive health checks not behaving as expected

    • Priority: Medium
    • Status: Open
    • Created: 14 days ago
    • Updated: N/A
  8. #13443: Available memory of the Kong machine suddenly dropped from 18G to 6.12G

    • Priority: Low
    • Status: Open
    • Created: 18 days ago
    • Updated: N/A
  9. #13438: File named api.lua in custom lua plugin directory causes errors

    • Priority: Medium
    • Status: Open
    • Created: 19 days ago
    • Updated: N/A
  10. #12822 (Closed): URI is sometimes /kong_error_handler on upstream status 502s

    • This issue indicates a potential misconfiguration or bug in how Kong handles upstream errors, which could lead to confusion in debugging.

Important Observations

  • There are multiple reports of issues related to plugins, particularly concerning rate limiting and DNS resolution.
  • Users migrating from older versions (2.x) to newer ones (3.x) report unexpected behavior changes, indicating a need for clearer documentation on breaking changes.
  • The presence of several high-priority issues suggests that there may be underlying stability concerns that could affect user experience.

The analysis indicates a vibrant but potentially troubled ecosystem where users are actively engaging with the platform while facing significant challenges that need addressing by the maintainers.

Report On: Fetch pull requests



Report on Pull Requests

Overview

The dataset provided contains a comprehensive list of pull requests (PRs) from the Kong API Gateway repository, detailing their current state, creation dates, and descriptions of changes made. The focus of these PRs spans various improvements, fixes, and features aimed at enhancing the functionality and performance of the Kong API Gateway.

Summary of Pull Requests

  1. PR #13519: fix(db): pass "read" on read-only database operations

    • State: Open
    • Created: 0 days ago
    • Summary: Addresses issues with read-only operations in Kong's database handling by ensuring that "read" is passed as a parameter. This is a step towards improving resilience when write nodes are offline.
  2. PR #13514: fix(dns): disable new dns client by default

    • State: Open
    • Created: 1 day ago
    • Summary: Disables the new DNS client by default in preparation for the upcoming 3.8 release to avoid breaking existing behavior.
  3. PR #13511: perf(plugins-iterator): remove unneeded tail-calls and optimize lookup_cfg

    • State: Open
    • Created: 3 days ago
    • Summary: Aims to improve performance by optimizing function calls within the plugin iterator, potentially reducing garbage collection overhead.
  4. PR #13506: fix(ai-proxy): disable gzip for SSE streams

    • State: Open
    • Created: 3 days ago
    • Summary: Fixes a regression that caused issues with gzip compression for Server-Sent Events (SSE) streams.
  5. PR #13504: fix(vault): reference ending with slash when parsed should not return a key

    • State: Open
    • Created: 3 days ago
    • Summary: Corrects logic in parsing secret references to ensure that paths ending with a slash are treated correctly.
  6. PR #13494: feat(plugins)(datadog): add a datadog tag for the route name to each metric

    • State: Open
    • Created: 7 days ago
    • Summary: Enhances Datadog metrics by including route names, responding to user requests for improved observability.
  7. PR #13484: Feat(ai huggingface)

    • State: Open
    • Created: 10 days ago (Draft)
    • Summary: Introduces Hugging Face LLM driver support, expanding AI capabilities within Kong.
  8. PR #13477: chore(ci): update rpm prefix

    • State: Open
    • Created: 11 days ago (Draft)
    • Summary: Updates RPM packaging configuration for consistency across builds.
  9. PR #13476: chore(gha): Set default timeouts.

    • State: Open
    • Created: 11 days ago (Edited)
    • Summary: Sets default timeouts for GitHub Actions workflows to enhance reliability.
  10. PR #13475: chore(ci): deck integration tests fail CI on test failure

    • State: Open
    • Created: 11 days ago (Edited)
    • Summary: Modifies CI behavior to fail on deck integration test failures, improving oversight on test results.

Analysis of Pull Requests

The pull requests submitted in this dataset reveal several key themes and trends within the ongoing development of the Kong API Gateway:

Focus on Stability and Resilience

A significant number of PRs are dedicated to fixing bugs and enhancing stability across various components of the gateway. For instance, PRs like #13519 and #13506 address specific operational issues related to database interactions and streaming protocols, respectively. This indicates a strong emphasis on ensuring that the system remains robust even under adverse conditions, such as when write nodes are offline or during streaming data transfers.

Enhancements in Observability

The introduction of features such as those found in PR #13494 (Datadog metrics enhancement) reflects an increasing demand for better observability tools within the platform. As organizations rely more heavily on APIs, having detailed metrics becomes crucial for monitoring performance and diagnosing issues effectively.

Performance Optimizations

Several PRs focus explicitly on performance improvements, such as PR #13511 which optimizes plugin iteration processes. This trend suggests that there is an ongoing effort to refine the underlying architecture to handle increased loads more efficiently, which is essential for maintaining high performance in production environments.

Community Engagement

The discussions surrounding various PRs indicate active community engagement and collaboration among contributors. Comments from different team members reflect a healthy dialogue about best practices, potential impacts of changes, and suggestions for improvements. This collaborative spirit is vital for open-source projects as it fosters innovation while ensuring quality through peer review.

Preparations for Upcoming Releases

Many open PRs are clearly aimed at preparing for future releases, particularly version 3.8 as indicated by several comments about holding merges until after specific release candidates are finalized (e.g., PR #13514). This strategic planning showcases a proactive approach to software development where features and fixes are aligned with release schedules.

Documentation and User Guidance

Several PRs also emphasize improving documentation and user guidance (e.g., PR #13489), which is crucial for helping users adapt to new features or changes in behavior resulting from updates. Clear documentation helps mitigate confusion and enhances user experience when interacting with complex systems like API gateways.

In summary, the current set of pull requests reflects a balanced approach towards enhancing stability, performance, observability, and user guidance within the Kong API Gateway project. The active engagement from contributors also highlights a collaborative environment conducive to continuous improvement and innovation in API management solutions.

Report On: Fetch commits



Repo Commits Analysis

Development Team and Recent Activity

Team Members and Recent Contributions

  1. Aapo Talvensaari (bungle)

    • Recent Commits: 15
    • Notable Changes:
    • Bumped dependencies for lua-resty-lmdb, lua-resty-acme, and lua-protobuf.
    • Reverted a previous commit related to OpenSSL.
    • Worked on various fixes including DNS client initialization and service-level TLS verification.
    • Collaborations: Worked with multiple team members on various branches.
  2. saisatishkarra

    • Recent Commits: 1
    • Notable Changes: Improved CI workflow for graceful handling of CDN failures during image scans.
  3. Murillo (gruceo)

    • Recent Commits: 2
    • Notable Changes: Fixed issues in the ACME plugin regarding username/password authentication and removed log warnings for Redis password compatibility.
  4. BrianChen (ProBrian)

    • Recent Commits: 1
    • Notable Changes: Refactored DNS client initialization to reduce redundancy.
  5. Xiaoyan Rao (raoxiaoyan)

    • Recent Commits: 2
    • Notable Changes: Fixed issues with loading certificate configurations in DB-less mode.
  6. Yusheng Li (vm-001)

    • Recent Commits: 1
    • Notable Changes: Introduced a new configuration for queue concurrency limits.
  7. Chrono (chronolaw)

    • Recent Commits: 11
    • Notable Changes: Bumped several dependencies, optimized plugin iterator performance, and made various improvements across multiple files.
  8. Jun Ouyang (oowl)

    • Recent Commits: 7
    • Notable Changes: Made several changes to AI proxy configurations and fixed schema-related issues.
  9. Wangchong Zhou (fffonion)

    • Recent Commits: 11
    • Notable Changes: Contributed extensively to AI proxy features, including support for AWS Bedrock and improvements in multi-modal input handling.
  10. Xiaochen Wang (chobits)

    • Recent Commits: 4
    • Notable Changes: Focused on DNS client fixes and enhancements.
  11. Qi (ADD-SP)

    • Recent Commits: 3
    • Notable Changes: Contributed to documentation improvements and minor bug fixes.
  12. Niklaus Schen (Water-Melon)

    • Recent Commits: 6
    • Notable Changes: Involved in CI/CD improvements and dependency management.
  13. Robin Xiang (liverpool8056)

    • Recent Commits: 2
    • Notable Changes: Fixed bugs related to PDK logging functionality.
  14. Michael Martin (flrgh)

    • Recent Commits: 1
    • Notable Changes: Addressed build-related issues in the Docker setup.
  15. Jack Tysoe (tysoekong)

    • Recent Commits: 4
    • Notable Changes: Worked on AI proxy enhancements, particularly for AWS Bedrock integration.

Patterns, Themes, and Conclusions

  • Dependency Management: A significant number of recent commits focus on updating dependencies, indicating an ongoing effort to keep the project up-to-date with the latest libraries and tools.
  • AI Integration: There is a strong emphasis on enhancing AI capabilities within the Kong API Gateway, with multiple contributors working on AI proxy features and integrations.
  • Collaboration: Many commits involve co-authorship or collaboration among team members, suggesting a cooperative development environment.
  • Bug Fixes: A notable amount of activity is dedicated to fixing bugs across various components, particularly in plugins related to authentication and DNS functionalities.
  • Performance Improvements: Several contributions aim at optimizing performance, especially concerning the plugin iterator and DNS client operations.
  • CI/CD Enhancements: Continuous improvements to the CI/CD pipeline are evident, focusing on robustness during deployment processes.

Overall, the development team is actively engaged in enhancing the functionality, performance, and reliability of the Kong API Gateway while integrating advanced features such as AI capabilities.