<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Infrastructure &#8211; Best DevOps</title>
	<atom:link href="https://www.bestdevops.com/tag/infrastructure/feed/" rel="self" type="application/rss+xml" />
	<link>https://www.bestdevops.com</link>
	<description>Lets Learn, Do it &#38; Share! Thats a Best DevOps!!!</description>
	<lastBuildDate>Wed, 14 Oct 2026 00:00:55 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.1.3</generator>
	<item>
		<title>What is the daily work for DevOps Engineer?</title>
		<link>https://www.bestdevops.com/what-is-the-daily-work-for-devops-engineer/</link>
					<comments>https://www.bestdevops.com/what-is-the-daily-work-for-devops-engineer/#respond</comments>
		
		<dc:creator><![CDATA[vijay1 vijay1]]></dc:creator>
		<pubDate>Wed, 05 Feb 2025 06:40:19 +0000</pubDate>
				<category><![CDATA[DevOps]]></category>
		<category><![CDATA[#CloudComputing]]></category>
		<category><![CDATA[Automation]]></category>
		<category><![CDATA[Cloud]]></category>
		<category><![CDATA[computing]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[InfrastructureAsCode]]></category>
		<guid isPermaLink="false">https://www.bestdevops.com/?p=30785</guid>

					<description><![CDATA[A DevOps Engineer plays a critical role in ensuring that development, operations, and IT teams work together effectively to deliver [&#8230;]]]></description>
										<content:encoded><![CDATA[
<figure class="wp-block-image size-full"><img fetchpriority="high" decoding="async" width="848" height="427" src="https://www.bestdevops.com/wp-content/uploads/2025/02/image-30.png" alt="" class="wp-image-30786" srcset="https://www.bestdevops.com/wp-content/uploads/2025/02/image-30.png 848w, https://www.bestdevops.com/wp-content/uploads/2025/02/image-30-300x151.png 300w, https://www.bestdevops.com/wp-content/uploads/2025/02/image-30-768x387.png 768w" sizes="(max-width: 848px) 100vw, 848px" /></figure>



<p class="wp-block-paragraph">A <strong>DevOps Engineer</strong> plays a critical role in ensuring that development, operations, and IT teams work together effectively to deliver high-quality software in a fast and efficient manner. The daily work of a DevOps Engineer involves a mix of tasks, including automation, system monitoring, incident resolution, and collaboration with various teams to improve the overall software lifecycle.</p>



<p class="wp-block-paragraph">In this post, we will explore the typical daily tasks of a DevOps Engineer, shedding light on the responsibilities they handle and the tools they use to ensure smooth software development and operations.</p>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h2 class="wp-block-heading">1. <strong>Managing CI/CD Pipelines</strong></h2>



<h3 class="wp-block-heading">Major Responsibilities:</h3>



<ul class="wp-block-list">
<li><strong>Monitor Continuous Integration (CI)</strong>:
<ul class="wp-block-list">
<li>DevOps Engineers ensure that <strong>continuous integration (CI)</strong> pipelines are running smoothly. This involves checking the automated build and test processes, verifying that code changes integrate correctly, and catching any issues early in the development cycle.</li>
</ul>
</li>



<li><strong>Manage Continuous Deployment (CD)</strong>:
<ul class="wp-block-list">
<li>They oversee <strong>continuous delivery (CD)</strong> pipelines, ensuring that code changes automatically flow through testing and deployment environments. DevOps Engineers make sure that deployments happen quickly and reliably without breaking production systems.</li>
</ul>
</li>



<li><strong>Automate Testing and Deployment</strong>:
<ul class="wp-block-list">
<li>A key task is automating repetitive tasks like testing, integration, and deployment. DevOps Engineers typically work with <strong>Jenkins</strong>, <strong>GitLab CI/CD</strong>, <strong>CircleCI</strong>, or other tools to automate these processes.</li>
</ul>
</li>



<li><strong>Troubleshoot Pipeline Failures</strong>:
<ul class="wp-block-list">
<li>If there are any pipeline failures, DevOps Engineers dive into logs and metrics to troubleshoot and resolve issues, ensuring that code can be deployed quickly and with minimal manual intervention.</li>
</ul>
</li>
</ul>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<figure class="wp-block-image size-full"><img decoding="async" width="908" height="572" src="https://www.bestdevops.com/wp-content/uploads/2025/02/image-31.png" alt="" class="wp-image-30787" srcset="https://www.bestdevops.com/wp-content/uploads/2025/02/image-31.png 908w, https://www.bestdevops.com/wp-content/uploads/2025/02/image-31-300x189.png 300w, https://www.bestdevops.com/wp-content/uploads/2025/02/image-31-768x484.png 768w" sizes="(max-width: 908px) 100vw, 908px" /></figure>



<h2 class="wp-block-heading">2. <strong>Infrastructure Management and Automation</strong></h2>



<h3 class="wp-block-heading">Major Responsibilities:</h3>



<ul class="wp-block-list">
<li><strong>Provision and Manage Infrastructure</strong>:
<ul class="wp-block-list">
<li>DevOps Engineers are responsible for managing infrastructure in both <strong>on-premise</strong> and <strong>cloud environments</strong> (AWS, Azure, Google Cloud). They ensure that the underlying infrastructure is properly provisioned, configured, and scalable to meet the needs of the applications.</li>
</ul>
</li>



<li><strong>Infrastructure as Code (IaC)</strong>:
<ul class="wp-block-list">
<li>DevOps Engineers write and maintain <strong>Infrastructure as Code (IaC)</strong> scripts using tools like <strong>Terraform</strong>, <strong>AWS CloudFormation</strong>, or <strong>Ansible</strong> to automate the creation and management of infrastructure resources.</li>
</ul>
</li>



<li><strong>Cloud Services and Virtual Machines</strong>:
<ul class="wp-block-list">
<li>They regularly interact with cloud services, managing <strong>virtual machines</strong>, <strong>containers</strong>, and <strong>databases</strong>. Automation is key to ensuring that the infrastructure is consistent across environments, minimizing configuration drift.</li>
</ul>
</li>



<li><strong>Ensure Cost Efficiency</strong>:
<ul class="wp-block-list">
<li>DevOps Engineers also monitor resource utilization, helping to <strong>optimize cloud spending</strong> by scaling down unused resources or using reserved instances to reduce costs.</li>
</ul>
</li>
</ul>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h2 class="wp-block-heading">3. <strong>System Monitoring and Incident Management</strong></h2>



<h3 class="wp-block-heading">Major Responsibilities:</h3>



<ul class="wp-block-list">
<li><strong>Real-Time Monitoring of Systems</strong>:
<ul class="wp-block-list">
<li>DevOps Engineers set up and maintain <strong>real-time monitoring</strong> systems using tools like <strong>Prometheus</strong>, <strong>Grafana</strong>, <strong>Datadog</strong>, or the <strong>ELK Stack</strong>. They track application performance, system health, and infrastructure metrics to ensure everything runs smoothly.</li>
</ul>
</li>



<li><strong>Incident Response and Troubleshooting</strong>:
<ul class="wp-block-list">
<li>When issues arise in the system, such as performance degradation or downtime, DevOps Engineers are the first to respond. They troubleshoot and resolve incidents to minimize disruption, often using log aggregation tools like <strong>Splunk</strong> or <strong>ELK Stack</strong> to diagnose issues.</li>
</ul>
</li>



<li><strong>Root Cause Analysis</strong>:
<ul class="wp-block-list">
<li>After resolving incidents, DevOps Engineers perform <strong>root cause analysis (RCA)</strong> to understand the underlying issues and implement corrective actions to prevent recurrence. This could involve fixing bugs, optimizing code, or improving system architecture.</li>
</ul>
</li>



<li><strong>Alert Management</strong>:
<ul class="wp-block-list">
<li>They configure <strong>alerting systems</strong> that notify teams of potential issues, allowing for quick resolution. Ensuring that the right people receive alerts at the right time is a crucial task in maintaining system uptime.</li>
</ul>
</li>
</ul>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h2 class="wp-block-heading">4. <strong>Collaboration with Development and Operations Teams</strong></h2>



<h3 class="wp-block-heading">Major Responsibilities:</h3>



<ul class="wp-block-list">
<li><strong>Facilitate Cross-Functional Communication</strong>:
<ul class="wp-block-list">
<li>DevOps Engineers work as a bridge between the <strong>development (Dev)</strong> and <strong>operations (Ops)</strong> teams, fostering communication and collaboration. They ensure that developers have the tools and resources needed for efficient coding, testing, and deployment.</li>
</ul>
</li>



<li><strong>Support Developers in CI/CD Process</strong>:
<ul class="wp-block-list">
<li>They help <strong>development teams</strong> integrate new code into the system by ensuring that <strong>CI/CD pipelines</strong> are correctly set up. DevOps Engineers work closely with developers to <strong>optimize deployment workflows</strong> and streamline the overall process.</li>
</ul>
</li>



<li><strong>Collaborate on Automation Projects</strong>:
<ul class="wp-block-list">
<li>They collaborate with various teams to automate manual processes, such as deployments, environment configuration, and scaling. Their goal is to reduce friction and improve efficiency across the development and operations workflows.</li>
</ul>
</li>



<li><strong>Provide Technical Guidance</strong>:
<ul class="wp-block-list">
<li>DevOps Engineers often provide guidance on <strong>best practices</strong> for <strong>system design, cloud usage</strong>, and <strong>automation</strong>. They act as technical mentors for other team members, helping them optimize the deployment and infrastructure management process.</li>
</ul>
</li>
</ul>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h2 class="wp-block-heading">5. <strong>Security and Compliance</strong></h2>



<h3 class="wp-block-heading">Major Responsibilities:</h3>



<ul class="wp-block-list">
<li><strong>Implement DevSecOps Practices</strong>:
<ul class="wp-block-list">
<li>DevOps Engineers work to integrate <strong>security practices</strong> into the software delivery pipeline, a practice known as <strong>DevSecOps</strong>. This includes ensuring that security is baked into CI/CD processes, performing code scanning for vulnerabilities, and automating security testing.</li>
</ul>
</li>



<li><strong>Ensure Compliance</strong>:
<ul class="wp-block-list">
<li>They also ensure that the deployed applications comply with <strong>industry regulations</strong> such as <strong>GDPR</strong>, <strong>HIPAA</strong>, or <strong>PCI-DSS</strong>. This includes setting up security monitoring, access control, and audit trails.</li>
</ul>
</li>



<li><strong>Access Control Management</strong>:
<ul class="wp-block-list">
<li>DevOps Engineers manage access control policies to ensure that only authorized personnel can access critical systems and data. They implement tools like <strong>Vault</strong> or <strong>AWS IAM</strong> to manage secrets and credentials securely.</li>
</ul>
</li>



<li><strong>Proactive Security Audits</strong>:
<ul class="wp-block-list">
<li>They perform regular <strong>security audits</strong> of infrastructure and software deployments, ensuring compliance with security best practices. This includes using tools like <strong>Snyk</strong> or <strong>Aqua Security</strong> to scan for vulnerabilities.</li>
</ul>
</li>
</ul>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h2 class="wp-block-heading">6. <strong>Continuous Improvement and Optimization</strong></h2>



<h3 class="wp-block-heading">Major Responsibilities:</h3>



<ul class="wp-block-list">
<li><strong>Evaluate System Performance</strong>:
<ul class="wp-block-list">
<li>DevOps Engineers constantly evaluate system performance and <strong>identify bottlenecks</strong> in the infrastructure. They use tools like <strong>Grafana</strong> or <strong>New Relic</strong> to monitor application performance and optimize performance across various services.</li>
</ul>
</li>



<li><strong>Automate Repetitive Tasks</strong>:
<ul class="wp-block-list">
<li>One of their primary objectives is to <strong>automate repetitive tasks</strong> to reduce manual intervention. This could include automating database backups, patch management, and scaling applications based on usage patterns.</li>
</ul>
</li>



<li><strong>Scaling Systems</strong>:
<ul class="wp-block-list">
<li>DevOps Engineers ensure that systems are scalable, particularly during peak demand periods. They configure auto-scaling mechanisms using tools like <strong>Kubernetes</strong> or <strong>AWS Auto Scaling</strong> to handle changes in traffic or resource needs.</li>
</ul>
</li>



<li><strong>Optimize Resource Usage</strong>:
<ul class="wp-block-list">
<li>DevOps Engineers regularly monitor resource consumption and <strong>optimize usage</strong> to reduce costs and improve efficiency. This includes optimizing cloud infrastructure to avoid overprovisioning and ensuring that resources are used efficiently.</li>
</ul>
</li>
</ul>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h2 class="wp-block-heading">A Day in the Life of a DevOps Engineer</h2>



<p class="wp-block-paragraph">The daily work of a <strong>DevOps Engineer</strong> is dynamic, challenging, and multifaceted. From managing CI/CD pipelines to automating infrastructure, responding to incidents, and improving system performance, the role is central to the <strong>efficient delivery of software</strong> and the <strong>reliability of IT operations</strong>.</p>



<p class="wp-block-paragraph">DevOps Engineers serve as a crucial link between development, operations, and security teams, ensuring that software is developed, deployed, and maintained quickly, securely, and reliably. As organizations continue to adopt DevOps practices, the demand for skilled DevOps Engineers continues to grow, making this a vital and rewarding career path.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/what-is-the-daily-work-for-devops-engineer/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>What is difference between DevOps vs ITops?</title>
		<link>https://www.bestdevops.com/what-is-difference-between-devops-vs-itops/</link>
					<comments>https://www.bestdevops.com/what-is-difference-between-devops-vs-itops/#respond</comments>
		
		<dc:creator><![CDATA[vijay1 vijay1]]></dc:creator>
		<pubDate>Tue, 04 Feb 2025 07:01:08 +0000</pubDate>
				<category><![CDATA[DevOps]]></category>
		<category><![CDATA[Automation]]></category>
		<category><![CDATA[Cloud]]></category>
		<category><![CDATA[computing]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[ITOps]]></category>
		<guid isPermaLink="false">https://www.bestdevops.com/?p=30751</guid>

					<description><![CDATA[In the world of IT, DevOps and IT Operations (ITOps) are two critical concepts that shape the way organizations develop, [&#8230;]]]></description>
										<content:encoded><![CDATA[
<figure class="wp-block-image size-large"><img decoding="async" width="1024" height="434" src="https://www.bestdevops.com/wp-content/uploads/2025/02/image-18-1024x434.png" alt="" class="wp-image-30752" srcset="https://www.bestdevops.com/wp-content/uploads/2025/02/image-18-1024x434.png 1024w, https://www.bestdevops.com/wp-content/uploads/2025/02/image-18-300x127.png 300w, https://www.bestdevops.com/wp-content/uploads/2025/02/image-18-768x325.png 768w, https://www.bestdevops.com/wp-content/uploads/2025/02/image-18.png 1055w" sizes="(max-width: 1024px) 100vw, 1024px" /></figure>



<p class="wp-block-paragraph">In the world of IT, <strong>DevOps</strong> and <strong>IT Operations (ITOps)</strong> are two critical concepts that shape the way organizations develop, deploy, and manage software applications. While both aim to enhance the efficiency and reliability of IT systems, they focus on different aspects of the software lifecycle and have distinct goals. Understanding the differences between these two approaches is crucial for organizations looking to optimize their IT infrastructure and development workflows.</p>



<p class="wp-block-paragraph">In this post, we will explore the key differences between DevOps and ITOps, outline their major features, and highlight how they work together to support high-performing IT environments.</p>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h2 class="wp-block-heading">1. <strong>Definition and Scope</strong></h2>



<h3 class="wp-block-heading">DevOps:</h3>



<ul class="wp-block-list">
<li><strong>Collaborative Culture</strong>:
<ul class="wp-block-list">
<li>DevOps is a set of practices and a cultural philosophy that aims to unify and automate the work of software development (Dev) and IT operations (Ops). It emphasizes collaboration, communication, and integration between traditionally separate teams.</li>
</ul>
</li>



<li><strong>Focus on Continuous Delivery</strong>:
<ul class="wp-block-list">
<li>DevOps focuses on speeding up the software development and delivery process by automating continuous integration (CI), continuous delivery (CD), and continuous testing. The goal is to shorten the development lifecycle, deliver features faster, and maintain high software quality.</li>
</ul>
</li>



<li><strong>End-to-End Involvement</strong>:
<ul class="wp-block-list">
<li>DevOps teams are involved throughout the software lifecycle, from planning and development to testing, deployment, and monitoring in production. This end-to-end involvement allows for faster feedback and iteration.</li>
</ul>
</li>
</ul>



<h3 class="wp-block-heading">ITOps:</h3>



<ul class="wp-block-list">
<li><strong>Traditional IT Management</strong>:
<ul class="wp-block-list">
<li>ITOps focuses on managing and maintaining an organization’s IT infrastructure, including servers, networks, databases, and other hardware and software systems. It is primarily concerned with keeping IT systems running smoothly, secure, and reliable.</li>
</ul>
</li>



<li><strong>Operational Excellence</strong>:
<ul class="wp-block-list">
<li>ITOps is focused on optimizing the performance, availability, and reliability of IT services. It deals with tasks like system monitoring, security patches, backups, and troubleshooting.</li>
</ul>
</li>



<li><strong>Reactive and Proactive Management</strong>:
<ul class="wp-block-list">
<li>ITOps teams address issues both reactively (e.g., fixing problems as they arise) and proactively (e.g., anticipating and preventing potential issues). It’s about maintaining the health of the IT infrastructure on an ongoing basis.</li>
</ul>
</li>
</ul>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h2 class="wp-block-heading">2. <strong>Focus Areas and Objectives</strong></h2>



<h3 class="wp-block-heading">DevOps:</h3>



<ul class="wp-block-list">
<li><strong>Accelerating Software Delivery</strong>:
<ul class="wp-block-list">
<li>The primary focus of DevOps is to accelerate the delivery of software applications by fostering collaboration between development and operations teams. By automating repetitive tasks and integrating CI/CD pipelines, DevOps enables faster software releases and higher-quality applications.</li>
</ul>
</li>



<li><strong>Automation and Efficiency</strong>:
<ul class="wp-block-list">
<li>DevOps emphasizes automation in areas like infrastructure provisioning, configuration management, testing, and deployment. Automation increases efficiency, reduces human error, and accelerates the software delivery process.</li>
</ul>
</li>



<li><strong>Collaboration and Communication</strong>:
<ul class="wp-block-list">
<li>DevOps is built around the idea of breaking down silos between development and operations teams. This collaboration ensures better communication, faster decision-making, and a smoother workflow throughout the development cycle.</li>
</ul>
</li>
</ul>



<h3 class="wp-block-heading">ITOps:</h3>



<ul class="wp-block-list">
<li><strong>Infrastructure Management and Optimization</strong>:
<ul class="wp-block-list">
<li>ITOps is centered around the management of IT infrastructure. Its focus is on ensuring that systems, servers, networks, and databases operate efficiently and without disruption. The goal is to provide stable and secure infrastructure to support applications and users.</li>
</ul>
</li>



<li><strong>Service Continuity and Availability</strong>:
<ul class="wp-block-list">
<li>A key goal of ITOps is ensuring that critical IT services remain available and secure. This involves monitoring system health, preventing outages, ensuring compliance with security policies, and handling capacity planning.</li>
</ul>
</li>



<li><strong>Incident and Problem Management</strong>:
<ul class="wp-block-list">
<li>ITOps teams are responsible for responding to incidents (e.g., system failures or downtime) and ensuring the underlying infrastructure is running smoothly. They work to minimize downtime and optimize the system&#8217;s performance.</li>
</ul>
</li>
</ul>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<figure class="wp-block-image size-full"><img loading="lazy" decoding="async" width="923" height="616" src="https://www.bestdevops.com/wp-content/uploads/2025/02/image-19.png" alt="" class="wp-image-30753" srcset="https://www.bestdevops.com/wp-content/uploads/2025/02/image-19.png 923w, https://www.bestdevops.com/wp-content/uploads/2025/02/image-19-300x200.png 300w, https://www.bestdevops.com/wp-content/uploads/2025/02/image-19-768x513.png 768w" sizes="auto, (max-width: 923px) 100vw, 923px" /></figure>



<h2 class="wp-block-heading">3. <strong>Automation and Tools</strong></h2>



<h3 class="wp-block-heading">DevOps:</h3>



<ul class="wp-block-list">
<li><strong>CI/CD Tools</strong>:
<ul class="wp-block-list">
<li>DevOps heavily relies on <strong>CI/CD tools</strong> like <strong>Jenkins</strong>, <strong>GitLab</strong>, <strong>CircleCI</strong>, and <strong>Travis CI</strong> to automate the process of building, testing, and deploying applications. This automation speeds up the software release cycle and reduces the chances of human error.</li>
</ul>
</li>



<li><strong>Infrastructure as Code (IaC)</strong>:
<ul class="wp-block-list">
<li>Tools like <strong>Terraform</strong>, <strong>Ansible</strong>, and <strong>AWS CloudFormation</strong> are used to automate infrastructure management through code. This ensures consistency across environments and improves the scalability of applications and infrastructure.</li>
</ul>
</li>



<li><strong>Monitoring and Logging</strong>:
<ul class="wp-block-list">
<li>DevOps teams use tools like <strong>Prometheus</strong>, <strong>Grafana</strong>, and the <strong>ELK Stack</strong> to monitor applications and infrastructure. This helps detect issues early, ensuring quick resolution and improving system performance.</li>
</ul>
</li>
</ul>



<h3 class="wp-block-heading">ITOps:</h3>



<ul class="wp-block-list">
<li><strong>System Monitoring and Alerts</strong>:
<ul class="wp-block-list">
<li>ITOps uses traditional system monitoring tools like <strong>Nagios</strong>, <strong>Zabbix</strong>, and <strong>SolarWinds</strong> to track server health, network traffic, and overall infrastructure performance. These tools alert the team to any potential problems.</li>
</ul>
</li>



<li><strong>Configuration Management</strong>:
<ul class="wp-block-list">
<li>ITOps teams use configuration management tools such as <strong>Puppet</strong>, <strong>Chef</strong>, and <strong>SaltStack</strong> to ensure consistency in server configurations, software installations, and security settings.</li>
</ul>
</li>



<li><strong>Patch Management and Security</strong>:
<ul class="wp-block-list">
<li>ITOps relies on security and patch management tools, such as <strong>WSUS</strong> (Windows Server Update Services) or <strong>Red Hat Satellite</strong>, to ensure systems are up to date-and protected from vulnerabilities.</li>
</ul>
</li>
</ul>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h2 class="wp-block-heading">4. <strong>Collaboration and Responsibilities</strong></h2>



<h3 class="wp-block-heading">DevOps:</h3>



<ul class="wp-block-list">
<li><strong>Cross-Functional Collaboration</strong>:
<ul class="wp-block-list">
<li>DevOps emphasizes a collaborative approach where development, testing, and operations teams work together throughout the software lifecycle. This ensures faster feedback, better code quality, and quicker resolution of issues.</li>
</ul>
</li>



<li><strong>Shared Accountability</strong>:
<ul class="wp-block-list">
<li>In DevOps, teams are jointly responsible for both the success and failure of applications. Development teams are accountable for code quality and functionality, while operations teams focus on infrastructure reliability and performance.</li>
</ul>
</li>



<li><strong>Continuous Feedback</strong>:
<ul class="wp-block-list">
<li>DevOps encourages continuous feedback loops, where performance data, user feedback, and incident reports are shared regularly across teams to improve the development process and user experience.</li>
</ul>
</li>
</ul>



<h3 class="wp-block-heading">ITOps:</h3>



<ul class="wp-block-list">
<li><strong>Specialized Roles</strong>:
<ul class="wp-block-list">
<li>ITOps is typically more specialized, with teams focusing on specific aspects of IT infrastructure management, such as networking, server maintenance, security, and cloud management. These roles are separate from the development teams.</li>
</ul>
</li>



<li><strong>Siloed Responsibilities</strong>:
<ul class="wp-block-list">
<li>In traditional ITOps environments, there may be a lack of collaboration between development and operations teams. However, some modern ITOps models are beginning to incorporate more cross-functional collaboration to align with DevOps practices.</li>
</ul>
</li>



<li><strong>Incident Management</strong>:
<ul class="wp-block-list">
<li>ITOps is responsible for resolving incidents and minimizing downtime. Their focus is on maintaining system uptime, security, and troubleshooting issues in the infrastructure that might impact the application’s performance.</li>
</ul>
</li>
</ul>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h2 class="wp-block-heading">5. <strong>Impact on Development and Operations</strong></h2>



<h3 class="wp-block-heading">DevOps:</h3>



<ul class="wp-block-list">
<li><strong>Faster Time-to-Market</strong>:
<ul class="wp-block-list">
<li>By automating workflows and improving collaboration, DevOps accelerates the software development process, allowing organizations to release software faster and more frequently.</li>
</ul>
</li>



<li><strong>Improved Quality and Reliability</strong>:
<ul class="wp-block-list">
<li>Continuous testing, integration, and monitoring ensure that code is thoroughly tested before it reaches production, reducing the likelihood of bugs and performance issues in the final product.</li>
</ul>
</li>



<li><strong>Scalable and Agile Development</strong>:
<ul class="wp-block-list">
<li>DevOps fosters a more agile environment, where developers can quickly iterate on new features, make changes, and scale applications based on feedback and demand.</li>
</ul>
</li>
</ul>



<h3 class="wp-block-heading">ITOps:</h3>



<ul class="wp-block-list">
<li><strong>Operational Stability and Continuity</strong>:
<ul class="wp-block-list">
<li>ITOps focuses on maintaining the stability and continuity of IT services. It ensures that all infrastructure components are functioning properly and that services are available to meet business needs.</li>
</ul>
</li>



<li><strong>Risk Mitigation</strong>:
<ul class="wp-block-list">
<li>ITOps teams play a key role in mitigating risks related to system downtime, security vulnerabilities, and compliance violations. They ensure that infrastructure is secure and compliant with industry standards.</li>
</ul>
</li>



<li><strong>Cost Optimization</strong>:
<ul class="wp-block-list">
<li>ITOps teams often work to optimize resource utilization and manage costs related to IT infrastructure. They may oversee cloud cost management, server optimization, and capacity planning to ensure cost-effective operations.</li>
</ul>
</li>
</ul>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h2 class="wp-block-heading">DevOps vs ITOps – Complementary Practices</h2>



<p class="wp-block-paragraph">While <strong>DevOps</strong> and <strong>ITOps</strong> serve different roles in software development and IT management, they are complementary. <strong>DevOps</strong> emphasizes collaboration, automation, and the rapid delivery of software, while <strong>ITOps</strong> focuses on managing and maintaining the underlying IT infrastructure that supports those applications. Both are critical for creating efficient, high-performance IT environments.</p>



<p class="wp-block-paragraph">Organizations that successfully integrate both DevOps and ITOps practices can benefit from faster software releases, stable and reliable infrastructure, and a collaborative work environment that drives continuous improvement across teams.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/what-is-difference-between-devops-vs-itops/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>Unisys adds Google cloud, infrastructure and digital workplace services to its offering</title>
		<link>https://www.bestdevops.com/unisys-adds-google-cloud-infrastructure-and-digital-workplace-services-to-its-offering/</link>
					<comments>https://www.bestdevops.com/unisys-adds-google-cloud-infrastructure-and-digital-workplace-services-to-its-offering/#respond</comments>
		
		<dc:creator><![CDATA[DM Team]]></dc:creator>
		<pubDate>Wed, 07 Jul 2021 09:11:19 +0000</pubDate>
				<category><![CDATA[Google Cloud]]></category>
		<category><![CDATA[BestDevOps]]></category>
		<category><![CDATA[Digital]]></category>
		<category><![CDATA[Google cloud]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[Services]]></category>
		<category><![CDATA[Unisys]]></category>
		<category><![CDATA[workplace]]></category>
		<guid isPermaLink="false">https://www.bestdevops.com/?p=16946</guid>

					<description><![CDATA[Source:-https://itbrief.co.nz/ Unisys has announced it has joined Google’s Cloud Partner Advantage programme. By providing Google’s complete suite of Cloud and [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>Source:-https://itbrief.co.nz/</p>
<p>Unisys has announced it has joined Google’s Cloud Partner Advantage programme.</p>
<p>By providing Google’s complete suite of Cloud and Infrastructure services and Digital Workplace Services, Unisys says it can offer clients more options for optimising their digital workplace environments through its’ end-to-end cloud management services.</p>
<p>In addition to joining the programme, Unisys will sell Google Cloud and Google Workspace solutions as part of its offering.</p>
<p>“This partnership announcement with Google is significant because it allows Unisys to expand our existing cloud-agnostic approach in Asia Pacific,&#8221; says Brad Bowden, director cloud &amp; infrastructure, Unisys Asia Pacific,</p>
<p>&#8220;Strong vendor relationships are key to Unisys being able offer the best solutions to the client business transformation challenge,&#8221; he says.</p>
<p>&#8220;The success of our go-to-market strategy is directly related to the investment to partner with market leaders like Google.&#8221;</p>
<p>According to the company, joining the Google Cloud Partner Advantage Program expands Unisys’ ability to deliver outcome-based, end-to-end cloud services to its clients via a complete array of cloud advisory, digital transformation, application modernisation, migration, security, compliance automation, orchestration and comprehensive managed services capabilities.</p>
<p>Further, as a Google Workspace reseller, Unisys will assist its clients using Google Cloud to optimise their workplace environment through its extensive field services, service desk, endpoint management, productivity and collaboration offerings.</p>
<p>In February, Unisys was named as a Microsoft Azure Expert Managed Service Provider (MSP) for the third year in a row.</p>
<p>To pass the certification, Unisys had to demonstrate that it had worked successfully with its Azure clients on its Cloud Management Platform (CMP), which is powered by its CloudForte technologies.</p>
<p>Unisys vice president cloud and infrastructure, Mike Morrison, said at the time, “By again passing the Azure Expert MSP criteria, Unisys has proven that it can consistently and securely design, implement and manage Azure services.</p>
<p>“Our success with the clients for whom we are currently using AI-led automation, migrations, optimisation and security to realise the benefits of their cloud transformation is even more concrete proof.”</p>
<p>That same month Unisys joined the Lenovo partner ecosystem.</p>
<p>Unisys says its support of Lenovo’s solutions will be backed by its Digital Workplace Services, including pre-deployment, deployment, maintenance and lifecycle management supply chain services.</p>
<p>Lenovo president of commerical IoT group John Gordon said at the time: “Our ThinkIoT Solutions are helping to accelerate business transformation for the long-term.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/unisys-adds-google-cloud-infrastructure-and-digital-workplace-services-to-its-offering/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>Container Infrastructure Software Market: Key Players, Growth, Analysis, 2021-2026</title>
		<link>https://www.bestdevops.com/container-infrastructure-software-market-key-players-growth-analysis-2021-2026/</link>
					<comments>https://www.bestdevops.com/container-infrastructure-software-market-key-players-growth-analysis-2021-2026/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Mon, 07 Jun 2021 05:07:02 +0000</pubDate>
				<category><![CDATA[Continuous Deployment]]></category>
		<category><![CDATA[Broadcom]]></category>
		<category><![CDATA[Canonical]]></category>
		<category><![CDATA[Cavium]]></category>
		<category><![CDATA[Cisco]]></category>
		<category><![CDATA[Container]]></category>
		<category><![CDATA[Cray]]></category>
		<category><![CDATA[Dell EMC]]></category>
		<category><![CDATA[Docker]]></category>
		<category><![CDATA[HPE]]></category>
		<category><![CDATA[IBM]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[Inspur]]></category>
		<category><![CDATA[Intel]]></category>
		<category><![CDATA[Lenovo]]></category>
		<category><![CDATA[Mellanox]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[Oracle Corporation]]></category>
		<category><![CDATA[Software]]></category>
		<category><![CDATA[Supermicro]]></category>
		<category><![CDATA[Suse]]></category>
		<category><![CDATA[WiWyn]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=16527</guid>

					<description><![CDATA[Source:-https://www.reportsgo.com/ The Global “ Container Infrastructure Software Market” 2021 Research report produces information with reference to market size, share, trends, [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>Source:-https://www.reportsgo.com/</p>
<p>The Global “ Container Infrastructure Software Market” 2021 Research report produces information with reference to market size, share, trends, growth, cost structure, capacity, revenue, and forecast 2026. This report also contains the general and comprehensive study of the Container Infrastructure Software market with all its aspects influencing the growth of the market. This report is a full-scale quantitative survey of the Container Infrastructure Software industry and provides data for building strategies to expand the market growth and effectiveness.</p>
<p>Executive summary:</p>
<p>The research report on Container Infrastructure Software market comprises a thorough evaluation of the past and present business scenario to deliver a conclusive overview of the industry’s growth patterns over 2021-2026. It casts light on the sizes and shares the markets and sub-markets, emphasizing on the primary growth stimulants, obstacles, and lucrative prospects impacting the business dynamics.</p>
<p>As per expert analysts, Container Infrastructure Software market is predicted to record notable growth over the study period, bolstering at XX% CAGR throughout.</p>
<p>The research literature also includes actionable insights into the competitive landscape, stressing on the well-known strategies employed by major contenders to enjoy strong profit margins in the upcoming years. In addition, the document answers all queries relating to implications of COVID-19 pandemic.</p>
<p>Market snapshot:</p>
<p>Geographical outlook:</p>
<p>Key regional contributors of Container Infrastructure Software market are Americas, APAC, Europe, Middle East &amp; Africa.<br />
Market share in relation to the consumption volume and value of each regional market is taken into account.<br />
Role of key regions to the overall industry progression is computed.<br />
Product landscape outline:</p>
<p>The document segments the product terrain of Container Infrastructure Software market into Mobile Phone , Tablet and Computer.<br />
Industry share of every product segment is given.<br />
Data relating to overall revenue generated and total sales amassed by every product type are provided.<br />
Application spectrum summary:</p>
<p>The application spectrum of Container Infrastructure Software market is bifurcated into Monitoring and Logging , Security , Continuous Deployment , Management and Orchestration , Networking and Data Management Services and Others.<br />
Estimates for consumption volume and value of every application scope are supported with stats.<br />
Approximations for each application segment’s market share over the analysis period are enumerated as well.<br />
Competitive arena overview:</p>
<p>Top companies in Container Infrastructure Software market is Dell EMC , HPE , Microsoft , Broadcom , Canonical , Oracle Corporation , Cray , Cavium , Docker , Cisco , Mellanox , SUSE , Supermicro , IBM , Intel , Inspur , WiWyn , Lenovo , Huawei and White Box QCT.<br />
The document offers a business overview of all the mentioned players.<br />
Records of net revenue, pricing models, operating profits, sales, and other financial attributes of each organization are systematically sorted.<br />
Manufacturing facilities and operating areas of the listed players are given.<br />
Up-to-date data on partnerships, associations, and new entrants in the domain are also presented in the study.</p>
<p>What will be the Container Infrastructure Software market scale and growth rate in the estimate years from 2021 to 2026?<br />
What are the significant driving factors of the Container Infrastructure Software market?<br />
What are the opportunity and challenges in front of the market?<br />
Who are the key vendors in the Container Infrastructure Software market?<br />
What are the trending features manipulating market equity?<br />
What are the key products of Porter’s five forces model?<br />
what are the global prospects for expanding the global Container Infrastructure Software market?<br />
<strong>Reasons why you should buy this report</strong></p>
<p>Understand the current and future of the Container Infrastructure Software Market in both developed and emerging markets.<br />
The report assists in realigning the business strategies by highlighting the Container Infrastructure Software business priorities.<br />
The report throws light on the segment expected to dominate the Container Infrastructure Software industry and market.<br />
Forecasts the regions expected to perceive Rapid growth.<br />
The latest developments in the Container Infrastructure Software industry and details of the industry leaders along with their market share and strategies.<br />
Saves time on the entry level research as the report contains important data concerning about growth, size, leading players and segments of the industry.<br />
Save and cut time carrying out entry-level research by distinguishing the growth, size, leading players and segments within the global Market.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/container-infrastructure-software-market-key-players-growth-analysis-2021-2026/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>How Cloud Computing and Edge Computing Fit Together</title>
		<link>https://www.bestdevops.com/how-cloud-computing-and-edge-computing-fit-together/</link>
					<comments>https://www.bestdevops.com/how-cloud-computing-and-edge-computing-fit-together/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Wed, 02 Jun 2021 07:36:34 +0000</pubDate>
				<category><![CDATA[Cloud Computing]]></category>
		<category><![CDATA[BestDevOps]]></category>
		<category><![CDATA[Cloud computing]]></category>
		<category><![CDATA[Edge]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=16439</guid>

					<description><![CDATA[Source:-https://www.rtinsights.com/ Discussions about the relationship between cloud computing and edge computing have a tendency to present the cloud and edge [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>Source:-https://www.rtinsights.com/</p>
<p>Discussions about the relationship between cloud computing and edge computing have a tendency to present the cloud and edge as opposite types of architectures and to treat them as an either/or proposition.</p>
<p>This isn’t the best way to think about cloud and edge. Although there are key differences between cloud and edge computing, the cloud and the edge don’t compete with each other as much as they complement each other.</p>
<p>Differences between cloud and edge<br />
The differences between cloud computing and edge computing boil down largely to where workloads are hosted.</p>
<p>In a conventional cloud, data and applications are housed in large data centers located within a public cloud vendor’s network.</p>
<p>In an edge architecture, workloads are hosted in a location that is “closer” — from the perspective of the network — to end-users than is a traditional data center.</p>
<p>Multiple approaches to edge computing<br />
It’s worth noting that the definition of edge can get a little messy because there are many possible ways to build an edge architecture. Sometimes, an edge environment runs directly on end-user devices. In others, it looks more like a traditional data center populated by conventional servers, which happen to be closer to end-users than traditional cloud data centers.</p>
<p>Cloud computing tends to be more straightforward from an architectural perspective. Although there can be some variation in which cloud regions and zones teams use to host workloads, all public cloud environments rely on conventional data centers that are comparatively distant — again, in networking terms — from end-users.</p>
<p>Why cloud and edge computing go together<br />
Although cloud and edge computing are fundamentally different types of architectures, “cloud vs. edge” is not necessarily the best way to think about them.</p>
<p>In many cases, it makes sense to use both cloud and edge at the same time. Cloud data centers can host workloads that don’t require the minimal latency and high reliability of those hosted on the edge, while edge infrastructure handles those that do.</p>
<p>By pairing cloud and edge together, organizations can leverage the scalability and ease of deployment of cloud environments while still achieving high-performance goals that cloud data centers can’t always support due to network latency issues.</p>
<p>This isn’t to say that you always have to use cloud and edge at the same time. It’s entirely possible to host applications or data in the cloud without also running an edge environment. It’s also possible — although less common — to use edge without using a public cloud.</p>
<p>Cloud and edge supercharge performance<br />
But in general, using cloud computing and edge computing at the same time can lead to the best overall outcome from a performance perspective. The only big downside is that it can be harder to manage a cloud environment and an edge environment at the same time, although platforms like Kubernetes simplify this by making it easy to deploy applications to both types of environments from a central management plane.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/how-cloud-computing-and-edge-computing-fit-together/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>Agile Divide Between IT and Business Is Narrowing</title>
		<link>https://www.bestdevops.com/agile-divide-between-it-and-business-is-narrowing/</link>
					<comments>https://www.bestdevops.com/agile-divide-between-it-and-business-is-narrowing/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Wed, 14 Apr 2021 05:56:17 +0000</pubDate>
				<category><![CDATA[IT Training]]></category>
		<category><![CDATA[Agile]]></category>
		<category><![CDATA[Business]]></category>
		<category><![CDATA[COVID]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[IT]]></category>
		<category><![CDATA[Narrowing]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=16243</guid>

					<description><![CDATA[Source:-https://devops.com/ A global survey of 1,350 business and IT executives conducted by Jigsaw Research on behalf of NTT Ltd., a [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>Source:-https://devops.com/</p>
<p>A global survey of 1,350 business and IT executives conducted by Jigsaw Research on behalf of NTT Ltd., a provider of IT services, suggests organizations are a lot more agile in the wake of the COVID-19 pandemic, but there’s still a significant gap in terms of prioritizing agility.</p>
<p>A full 89% of business and IT leaders agree COVID-19 has caused significant changes to their operating processes, with 87% also agreeing it has accelerated their digital transformation strategy. A third of respondents (33%) also noted they pivoted their technology focus to take advantage of a market opportunity or scale their operations.</p>
<p>However, well over a third of operational executives identified speed and agility as a core component of technology strategy, while only just over half of IT executives agreed (53%).</p>
<p>Overall, the survey found there is a consensus IT remains a key enabler of business efficiency. A total of 91.4% respondents agreed that enabling business efficiency is a key driver for their technology strategy, with 92% of IT respondents saying their overall technology strategy is aligned either fully or partially with the organization’s business strategy needs.</p>
<p>However, there’s a significant divide in terms of the importance of IT’s role in driving business efficiency. A technology strategy that drives business efficiency opportunities is seen as being most crucial by 70% of operations teams, yet only 48% of IT teams said the same.</p>
<p>Sanjay Lakhani, a principal consultant for NTT and head of the IT service management (ITSM) practice for the Americas region said that while the alignment between business operations and IT is not as close as it could be, a lot of improvement has been made. Prior to the COVID-19 pandemic, the divide between IT and the rest of the business was generally wider, noted Lakhani.</p>
<p>Now that more organizations are realizing how dependent they are on software, there’s a lot more focus on application development with business units, he added. There’s also more pressure on IT operations teams, which are being asked to keep pace with the rate at which digital business transformation initiatives have accelerated, added Lakhani.</p>
<p>Unfortunately, the survey also highlighted an emerging technology gap. The survey found 92% of business and IT leaders agreed emerging technology is crucial for their technology strategy, but only two-fifths (41%) believed they have the technology to meet their organization’s immediate objectives. Those result suggest a significant transition is underway, both in terms of how software is constructed and the type of IT infrastructure required.</p>
<p>In the meantime, it remains to be seen to what degree the COVID-19 pandemic has fundamentally altered the DNA of IT operations teams, but it’s apparent enterprise IT will never be the same. Most IT teams have embraced, to varying degrees, agile application development methodologies along with DevOps best practices. The challenge now is aligning the operational cadence IT teams follow with that of the rest of the business in the wake of the pandemic.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/agile-divide-between-it-and-business-is-narrowing/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>At your microservices and service mesh: An infrastructure built for a new standard</title>
		<link>https://www.bestdevops.com/at-your-microservices-and-service-mesh-an-infrastructure-built-for-a-new-standard/</link>
					<comments>https://www.bestdevops.com/at-your-microservices-and-service-mesh-an-infrastructure-built-for-a-new-standard/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Sat, 20 Mar 2021 06:07:03 +0000</pubDate>
				<category><![CDATA[Microservices]]></category>
		<category><![CDATA[and Intuit use Istio]]></category>
		<category><![CDATA[Cash App]]></category>
		<category><![CDATA[DataStax]]></category>
		<category><![CDATA[eBay]]></category>
		<category><![CDATA[Giphy]]></category>
		<category><![CDATA[Googles]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[OpenFrame]]></category>
		<category><![CDATA[TmaxSoft]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=16031</guid>

					<description><![CDATA[Source:-https://www.tmaxsoft.com/ As the one-year anniversary of the pandemic declaration has come and gone, it is getting more difficult to remember [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>Source:-https://www.tmaxsoft.com/</p>
<p>As the one-year anniversary of the pandemic declaration has come and gone, it is getting more difficult to remember what business was like before March 11, 2020. Although we miss the human interaction of office work; some things should be left in the past. Even though vaccinations have created a light at the end of the tunnel, what it illuminates will not be like the past. The top 7 tech trends for 2021 not only reflect the journey to the light but also what lies beyond it.</p>
<p>In short, the 7 tech trends are the way forward for business. In tandem, they are what you can use to thrive in a post-pandemic world. However, you can’t do this with an infrastructure that is decades old. In this series of blogs, we have been showing you how modernization in the cloud is the foundation for adopting the 7 trends. We have already tackled customer experience (CX), data integration, digital culture, digital innovation, the composable enterprise, and automation. This blog looks at the final trend, microservices and service mesh.</p>
<p><strong>Angels in the architecture: Microservices</strong><br />
Microservices have been around since 2009 at least. Recently, as more tech giants have publicized their moves to microservices, they have really taken off. This is because they resolve a lot of the problems of monolithic application architectures, which develop performance issues when they are scaled and are hard to change quickly. So, what are microservices exactly?</p>
<p>Microservices.io has this definition: “an architectural style that structures an application as a collection of services.” Software functionality is isolated into multiple independent modules that are individually responsible for specific standalone tasks. The modules communicate with one another via simple, universally accessible application programming interfaces (APIs). As a result, one team’s changes won’t break an entire app, unlike in monolithic application architectures. Microservices can be deployed in virtual machines or containers; however, containers are becoming the microservices deployment method of choice.</p>
<p>Amazon is a microservices pioneer. It wanted a more robust application that could handle new features and functions quickly. So, it moved from a monolith to a fully distributed, decentralized services architecture. Another pioneer is Netflix, who has built one of the most well-known examples of a modern microservices architecture – one that features an API gateway that handles about two billion API edge requests a day, all supported by over 500 microservices.</p>
<p><strong>Communication breakdown: Service mesh</strong><br />
As the Netflix example shows, in the microservices world, an application can consist of hundreds of services. Each service could have thousands of instances. If the container deployment method is being used, a container orchestrator like Kubernetes is constantly changing the instances. This creates incredibly complex service-to-service communication, which is essential to microservices during runtime.</p>
<p>To ensure end-to-end performance, reliability, and security, organizations are increasingly turning to a service mesh, which adds observability, security, and reliability features to applications by inserting them at the platform layer rather than the application layer. As a result, the application doesn’t need to implement these features, or even be aware of the service mesh.</p>
<p>Lyft is an example of company that uses a service mesh it developed itself. Lyft’s Envoy, one of the earliest service meshes, enables services to communicate with one another through a proxy that is outside the application. It supports L3/L4 filter architecture like a TCP/IP proxy, HTTP/2 based L7 filter architecture, service discovery and active/passive health checking, load balancing, authentication and authorization, and observability. Microsoft, HP, Walmart, and Nordstrom use another service mesh called Linkerd. Cash App, eBay, Giphy, and Intuit use Istio, Google’s and IBM’s joint mesh service.</p>
<p><strong>Microservices, service mesh, and modern cloud infrastructures</strong><br />
Microservices, service mesh, containers, and Kubernetes all enable you to offer differentiated digital services to your customers or consumers. Gartner predicts that these technical advancements will be in place in 70% of organizations by 2022. They are a key aspect of digital transformation, and they can also help you make other tech trends, such as customer experience and automation, a reality.</p>
<p>What should not go unnoticed is these modern application structures were not built for the infrastructures of yesteryear. Although microservices and containers can run on virtual machines, they are more efficient, scalable, and powerful in the cloud. Plus, Kubernetes and service meshes need the cloud. Therefore, an on-premises data center that houses an aging mainframe, legacy applications, and a rigid database with high licensing costs is going to severely inhibit their use.</p>
<p>Instead, you should migrate your mainframe and legacy applications to a cloud infrastructure designed for microservices, service mesh, and more. To do this, you need a legacy modernization platform. With a legacy modernization platform, you move your applications to a cloud-based environment with no reformatting, code changes or user impact. Once in this environment, you can modernize your apps and by breaking them into faster, responsive, agile microservices, and set up your service mesh. To enable your service mesh to help your microservice applications share data with one another, you should also consider a modern RDBMS that runs in the cloud.</p>
<p><strong>Ready to break free from monoliths?</strong><br />
Two TmaxSoft products, OpenFrame and Tibero, can provide the legacy modernization platform and RDBMS you need to make microservices and service mesh part of your digital transformation strategy. Both solutions make it easy to transition your application architectures to the cloud. Learn more about modernizing your legacy applications and moving away from on-premises architectures by reading our eBook on proven modernization strategies.</p>
<p><strong>Kelly McClure</strong><br />
Kelly McClure is the Vice President of Global Marketing for TmaxSoft. Her 20-year marketing career spans both Fortune 1000 companies and fast growth technology startups. Kelly is responsible for leading TmaxSoft’s marketing strategy. She is experienced in aligning marketing and sales, building relevant content and messaging and developing integrated lead generation campaigns. Before joining TmaxSoft, Kelly served as the Vice President of Marketing for 10th Magnitude and held senior marketing roles with DataStax, BMC Software and Micro Focus. Kelly has a bachelor’s degree from Purdue University and an MBA from Loyola University Chicago.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/at-your-microservices-and-service-mesh-an-infrastructure-built-for-a-new-standard/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>All About Cloud Computing, Tricks Of The Trade From A Cloud Infrastructure Leader</title>
		<link>https://www.bestdevops.com/all-about-cloud-computing-tricks-of-the-trade-from-a-cloud-infrastructure-leader/</link>
					<comments>https://www.bestdevops.com/all-about-cloud-computing-tricks-of-the-trade-from-a-cloud-infrastructure-leader/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Sat, 06 Mar 2021 05:45:54 +0000</pubDate>
				<category><![CDATA[Cloud Computing]]></category>
		<category><![CDATA[Cloud computing]]></category>
		<category><![CDATA[Cybersecurity]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[management]]></category>
		<category><![CDATA[Risk]]></category>
		<category><![CDATA[Tricks]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=15786</guid>

					<description><![CDATA[Source:-https://www.cio.co.ke/ Despite all the talk of cybersecurity capabilities being built in versus bolted on, security remains an afterthought for a [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>Source:-https://www.cio.co.ke/</p>
<p>Despite all the talk of cybersecurity capabilities being built in versus bolted on, security remains an afterthought for a vast majority of digital transformation activities such as mobility, cloud services and customer experience programs.<br />
Too often, security is seen as slowing down a project rather than enabling its success, and with time pressure to get a project up and running, the lack of sound security considerations is a problem for organisations striving for true business resilience.</p>
<p>Ensuring that cyber risk management is part of your business resilience plan is not something that can be added after the event. It must be included from the outset and embedded across the organisation, from your technologies right through to your culture. Today, the pressure in the digital economy is to be ‘always on’, offering a continuously available service to customers. And that means that – more than protecting the enterprise – the challenge now is to ensure its resilience.</p>
<p>Red Hat is the world’s leading provider of enterprise open source solutions, using a community-powered approach to deliver high-performing Linux, cloud, container, and Kubernetes technologies. They help you standardise across environments, develop cloud-native applications, and integrate, automate, secure, and manage complex environments with award-winning support, training, and consulting services.</p>
<p>Through Red Hat’s services, your business will be able to combine business continuity planning with risk management planning to better navigate disruptive change and protect shareholder value, this spills over into being strategic about cloud migration too.</p>
<p>As the world becomes more turbulent, organizations need to accelerate their business resilience planning.<br />
As organisations continue to expand their digital footprint, the risks associated with digital business are increasing in quantity and complexity and the need to provide continuously available services to customers requires organizations to become more reliable and more resilient.</p>
<p>As organizations rapidly adopt cloud networks, due to flexibility, scalability, cost effectiveness and more, security needs to be at the front and centre. It is against this background that the virtual Cloud &amp; Security Forum 2020 is designed to assist in driving an impartial and informed dialogue in the rapidly evolving information security industry. The virtual event will unfold on the 18th and 19th of March.</p>
<p>Having continued to create an environment for making new connections, the summit with visionary speakers at the nexus of new technologies and cyber security solutions purposes to share their insights and demonstrate their ability to safeguard customer data.</p>
<p>From new applications being consistently added to networks to employees taking access control shortcuts and credentials being compromised, it is clear that there are endless vulnerabilities to detect and manage.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/all-about-cloud-computing-tricks-of-the-trade-from-a-cloud-infrastructure-leader/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>Global MEA Cloud Infrastructure Services Market 2026: AWS, Microsoft Corporation, Google, IBM</title>
		<link>https://www.bestdevops.com/global-mea-cloud-infrastructure-services-market-2025-aws-microsoft-corporation-google-ibm/</link>
					<comments>https://www.bestdevops.com/global-mea-cloud-infrastructure-services-market-2025-aws-microsoft-corporation-google-ibm/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Mon, 01 Mar 2021 06:28:03 +0000</pubDate>
				<category><![CDATA[AWS]]></category>
		<category><![CDATA[Hybrid Cloud]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[MEA]]></category>
		<category><![CDATA[Microsoft Corporation]]></category>
		<category><![CDATA[Private Cloud]]></category>
		<category><![CDATA[Public Cloud]]></category>
		<category><![CDATA[Service]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=15644</guid>

					<description><![CDATA[Source:-https://neighborwebsj.com Publication of a new analytical documentation including clear synopsis of ongoing market developments governing Global MEA Cloud Infrastructure Services [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>Source:-https://neighborwebsj.com</p>
<p>Publication of a new analytical documentation including clear synopsis of ongoing market developments governing Global MEA Cloud Infrastructure Services Market t has been accomplished, enabling rapid diversification of report repository. The report is mindfully designed to present a holistic overview of the market across historical and current timeframes, for the enablement of futuristic predictions and forecasts. The export includes a 360-degree outline of the market that consistently allows market participants to imbibe growth probabilities.</p>
<p>This information profilesis elementary in rendering crucial business decisions through the forecast span, 2020-25. Talking at length about various drivers and opportunities prevailing in the space, the report also underpins new trend assessment, primarily highlighting novel technological leaps and improvements that further push the market towards systematic growth in global MEA Cloud Infrastructure Services market.</p>
<p>The study encompasses profiles of major companies operating in the MEA Cloud Infrastructure Services Market. Key players profiled in the report include:<br>
AWS<br>
Microsoft Corporation<br>
Google<br>
IBM<br>
Key Points Covered in the Report: Overview of manufacturing landscape<br>
 Outline on Consumption and Production Patterns<br>
 Details on Capacity Building, production initiatives, revenue chains and market valuation in terms of volume have been highly specified in this investigative research report featuring MEA Cloud Infrastructure Services market.<br>
 Following further, the report houses critical evaluation of export and import ratios, trend assessment, as well as futuristic probabilities that effectively ensure sustainable returns.<br>
 As the report progresses further, the report also decodes specific information on sourcing strategies, value chain touchpoints and recurrent information on trader initiatives, growth strategies and distribution highlights.</p>
<p>Segment-wise Assessment</p>
<p>By the product type, the market is primarily split into<br>
Public Cloud<br>
Private Cloud<br>
Hybrid Cloud</p>
<p>By the end-users/application, this report covers the following segments<br>
SME<br>
Large Organization</p>
<p>The key regions covered in the MEA Cloud Infrastructure Services market report are:<br>
North America (U.S., Canada, Mexico)<br>
South America (Cuba, Brazil, Argentina, and many others.)<br>
Europe (Germany, U.K., France, Italy, Russia, Spain, etc.)<br>
Asia (China, India, Russia, and many other Asian nations.)<br>
Pacific region (Indonesia, Japan, and many other Pacific nations.)<br>
Middle East &amp; Africa (Saudi Arabia, South Africa, and many others.)</p>
<p>Segment Assessment:<br>
 This critically compiled market development synopsis reveals that the global MEA Cloud Infrastructure Services market is widely segmented across vivid segmentation comprising product and service type, followed by applications and end-use dimensions. Additional details on geographical developments have also been pinned in the report to encourage skilled deductions and eventual business deliverable.<br>
 This versatile research report is poised to offer a highly granular version of the MEA Cloud Infrastructure Services market evaluating market performance across product segments and multi-functional applications. Such scalable information offered in the report is apt in inculcating growth proficient business discretion based on the profitability quotient of the segments.<br>
 This section of the report entails crucial information on various product types and service variants available on the market and the scope of their futuristic developments and associated revenue generation mettle. This report section clearly focuses on the usability of various products and services available on the market and multifarious developments aligning with user preferences.</p>
<p>The referential data compilation evaluating regional developments and geographical guide to ascertain multiple developments across countries, localities and other global areas. This referential document assessing the market has been compiled to understand diverse market developments across specific regional pockets such as Europe, North and Latin American countries, APAC nations, as well as several countries across MEA and RoW.</p>
<p>With unfailing market gauging skills, has been excelling in curating tailored business intelligence data across industry verticals. Constantly thriving to expand our skill development, our strength lies in dedicated intellectuals with dynamic problem solving intent, ever willing to mold boundaries to scale heights in market interpretation.</p>


<figure class="wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio"><div class="wp-block-embed__wrapper">
<iframe loading="lazy"  id="_ytid_98418"  width="675" height="379"  data-origwidth="675" data-origheight="379" src="https://www.youtube.com/embed/?enablejsapi=1&#038;list=PLTCuRW0ikUdMFARYSiWm733n1DcCem6bN&#038;autoplay=0&#038;cc_load_policy=0&#038;cc_lang_pref=&#038;iv_load_policy=1&#038;loop=0&#038;rel=1&#038;fs=1&#038;playsinline=0&#038;autohide=2&#038;theme=dark&#038;color=red&#038;controls=1&#038;disablekb=0&#038;" class="__youtube_prefs__  epyt-is-override  no-lazyload" title="YouTube player"  allow="fullscreen; accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen data-no-lazy="1" data-skipgform_ajax_framebjll=""></iframe>
</div></figure>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/global-mea-cloud-infrastructure-services-market-2025-aws-microsoft-corporation-google-ibm/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>Learn how to secure your company&#8217;s infrastructure with this AWS training bundle</title>
		<link>https://www.bestdevops.com/learn-how-to-secure-your-companys-infrastructure-with-this-aws-training-bundle/</link>
					<comments>https://www.bestdevops.com/learn-how-to-secure-your-companys-infrastructure-with-this-aws-training-bundle/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Sat, 30 Jan 2021 05:18:06 +0000</pubDate>
				<category><![CDATA[AWS]]></category>
		<category><![CDATA[company’s]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[IT Training]]></category>
		<category><![CDATA[secure]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=15474</guid>

					<description><![CDATA[Source:-https://thehill.com {mosads}If you have been considering options that will allow you to host your company&#8217;s infrastructure on the cloud, it [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>Source:-https://thehill.com</p>
<p>{mosads}If you have been considering options that will allow you to host your company&#8217;s infrastructure on the cloud, it can be hard to know where to start. That said, this transition can ultimately lead to the ability to host your IT infrastructure much more safely and securely.</p>
<p>Luckily, The 2021 Amazon Web Services Certification Training Bundle is on sale for $59.99 down from $2,500, at a 97% discount. The bundle offers 40 hours of content that will train you on the technical essentials, architectural principles, the cloud, and more. The courses will be taught by Certs School, which provides educational resources that are designed to let students learn from industry professionals with years and years of experience.</p>
<p>The courses will introduce you to the fundamentals of Amazon Web Services (AWS), which is a cloud platform that companies use to safely host their infrastructure. The course will walk you through the terminologies, concepts, benefits, and best deployment options for your company. You will also master architectural principles and become a certified AWS solutions architect.</p>
<p>The courses will also provide you with exposure to the cloud platform, which will help you attain valuable expertise in launching, managing, and continuing to operate systems that are completely fault-tolerant. Finally, the course bundle will walk you through Puppet, which is a tool that allows you to automate your IT infrastructure across the entire network. It will walk you through how you can use Puppet for scalability, redundancy, performance, and more.</p>
<p>This deal will provide you with lifetime access that can be used on desktop or mobile devices. Right now, the Amazon Web Services course bundle is on sale for only $59.99.</p>


<figure class="wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio"><div class="wp-block-embed__wrapper">
<iframe loading="lazy"  id="_ytid_42804"  width="675" height="379"  data-origwidth="675" data-origheight="379" src="https://www.youtube.com/embed/?enablejsapi=1&#038;list=PLTCuRW0ikUdMFARYSiWm733n1DcCem6bN&#038;autoplay=0&#038;cc_load_policy=0&#038;cc_lang_pref=&#038;iv_load_policy=1&#038;loop=0&#038;rel=1&#038;fs=1&#038;playsinline=0&#038;autohide=2&#038;theme=dark&#038;color=red&#038;controls=1&#038;disablekb=0&#038;" class="__youtube_prefs__  epyt-is-override  no-lazyload" title="YouTube player"  allow="fullscreen; accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen data-no-lazy="1" data-skipgform_ajax_framebjll=""></iframe>
</div></figure>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/learn-how-to-secure-your-companys-infrastructure-with-this-aws-training-bundle/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>Siemens Smart Infrastructure Chooses AWS as Its Preferred Cloud Provider for SAP Environments</title>
		<link>https://www.bestdevops.com/siemens-smart-infrastructure-chooses-aws-as-its-preferred-cloud-provider-for-sap-environments/</link>
					<comments>https://www.bestdevops.com/siemens-smart-infrastructure-chooses-aws-as-its-preferred-cloud-provider-for-sap-environments/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Fri, 04 Dec 2020 06:50:39 +0000</pubDate>
				<category><![CDATA[AWS]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[SERVERLESS]]></category>
		<category><![CDATA[Siemens]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=14797</guid>

					<description><![CDATA[Source:-https://www.businesswire.com SEATTLE&#8211;(BUSINESS WIRE)&#8211;Today, Amazon Web Services (AWS), an Amazon.com company (NASDAQ: AMZN), announced that Siemens Smart Infrastructure, a business of [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>Source:-https://www.businesswire.com</p>
<p>SEATTLE&#8211;(BUSINESS WIRE)&#8211;Today, Amazon Web Services (AWS), an Amazon.com company (NASDAQ: AMZN), announced that Siemens Smart Infrastructure, a business of the Siemens AG group focusing on energy distribution and intelligent buildings, is moving its SAP infrastructure to AWS. The business will migrate over 20 Enterprise Resource Planning (ERP) and Supply Chain Management (SCM) systems, based on SAP HANA, to AWS before the end of 2021. These systems support business-critical processes in areas such as manufacturing, operations, and sales across different business units including Building Products, Electrical Products, Digital Grid, and Distribution Systems. Moving these workloads to AWS will enable Siemens Smart Infrastructure to significantly shorten hardware refresh cycles, increase agility to test and deploy new systems, and provide the foundation for the company’s future transformation using SAP S/4HANA technology. This is the first migration of production-scale SAP systems to the cloud across the Siemens AG group, with Siemens Smart Infrastructure forecasting significant cost savings over the course of the next three years.</p>
<p>Siemens Smart Infrastructure’s migration of SAP to AWS is a core part of the company’s strategic plan to accelerate the modernization of their business. Working alongside AWS as their preferred cloud provider for SAP, Siemens Smart Infrastructure will be able to integrate their SAP environments with a wide range of advanced AWS technologies, in areas such as analytics and machine learning, to uncover new business value and drive innovation. All of this was not previously possible for Siemens Smart Infrastructure, as their SAP systems were siloed off from the rest of their business in co-located data centers. As the foundation of their new cloud-based SAP environment, Siemens Smart Infrastructure will utilize a broad range of AWS’s Amazon Elastic Compute Cloud (Amazon EC2) instances, including memory-optimized R5 instances for real-time big data analytics workloads, as well as X1 and X1e instances built for high-performance databases, in-memory databases, and other memory-intensive enterprise applications.</p>
<p>Siemens Smart Infrastructure and AWS started their successful collaboration five years ago, when Siemens began moving core parts of its digital building technology to the cloud. The company is currently using a number of other advanced AWS services including Amazon Aurora (a MySQL and PostgreSQL-compatible relational database built for the cloud), AWS Lambda (AWS’s serverless compute service), and Amazon Neptune (a fully managed graph database service).</p>
<p>“2020 has been a year like no other, yet AWS has been a dedicated and trustworthy partner on our digital transformation journey,” said Sébastien Bey, CIO of Siemens Smart Infrastructure. “Our SAP environments are the backbone of our organization; by moving these foundational pieces of the Siemens Smart Infrastructure business to AWS, we are not only reducing costs and upgrading the service we provide to our internal businesses, but also fundamentally changing the way we use technology to transform our business, innovate, and deliver value.”</p>
<p>“AWS is thrilled to be working alongside a forward-thinking and customer-centric business like Siemens Smart Infrastructure as they connect buildings and cities with their advanced technologies. AWS delivers proven performance, insights, and agility to advance Siemens Smart Infrastructure’s mission of helping customers around the world run their infrastructure in the most efficient and sustainable way and ensure our long-term future on this planet,” said Carla Stratfold, Vice President of AWS Global Verticals and Strategic Accounts at Amazon Web Services, Inc. “Organizations around the world trust their most essential SAP workloads to AWS because of our unmatched track record, breadth and depth of services, and vibrant partner community that helps them to transform their SAP landscapes.”</p>
<p>Amazon Web Services</p>
<p>For 14 years, Amazon Web Services has been the world’s most comprehensive and broadly adopted cloud platform. AWS offers over 175 fully featured services for compute, storage, databases, networking, analytics, robotics, machine learning and artificial intelligence (AI), Internet of Things (IoT), mobile, security, hybrid, virtual and augmented reality (VR and AR), media, and application development, deployment, and management from 77 Availability Zones (AZs) within 24 geographic regions, with announced plans for 15 more Availability Zones and five more AWS Regions in India, Indonesia, Japan, Spain, and Switzerland. Millions of customers—including the fastest-growing startups, largest enterprises, and leading government agencies—trust AWS to power their infrastructure, become more agile, and lower costs. To learn more about AWS, visit aws.amazon.com.</p>
<p>Amazon</p>
<p>Amazon is guided by four principles: customer obsession rather than competitor focus, passion for invention, commitment to operational excellence, and long-term thinking. Customer reviews, 1-Click shopping, personalized recommendations, Prime, Fulfillment by Amazon, AWS, Kindle Direct Publishing, Kindle, Fire tablets, Fire TV, Amazon Echo, and Alexa are just some of the products and services pioneered by Amazon. For more information visit www.amazon.com/about and follow @AmazonNews.</p>
<p>Siemens</p>
<p>Siemens Smart Infrastructure (SI) is shaping the market for intelligent, adaptive infrastructure for today and the future. It addresses the pressing challenges of urbanization and climate change by connecting energy systems, buildings and industries. SI provides customers with a comprehensive end-to-end portfolio from a single source – with products, systems, solutions and services from the point of power generation all the way to consumption. With an increasingly digitalized ecosystem, it helps customers thrive and communities progress while contributing toward protecting the planet. SI creates environments that care. Siemens Smart Infrastructure has its global headquarters in Zug, Switzerland, and has around 72,000 employees worldwide.</p>


<figure class="wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio"><div class="wp-block-embed__wrapper">
<iframe loading="lazy"  id="_ytid_31454"  width="675" height="379"  data-origwidth="675" data-origheight="379" src="https://www.youtube.com/embed/?enablejsapi=1&#038;list=PLTCuRW0ikUdMFARYSiWm733n1DcCem6bN&#038;autoplay=0&#038;cc_load_policy=0&#038;cc_lang_pref=&#038;iv_load_policy=1&#038;loop=0&#038;rel=1&#038;fs=1&#038;playsinline=0&#038;autohide=2&#038;theme=dark&#038;color=red&#038;controls=1&#038;disablekb=0&#038;" class="__youtube_prefs__  epyt-is-override  no-lazyload" title="YouTube player"  allow="fullscreen; accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen data-no-lazy="1" data-skipgform_ajax_framebjll=""></iframe>
</div></figure>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/siemens-smart-infrastructure-chooses-aws-as-its-preferred-cloud-provider-for-sap-environments/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>PRESS RELEASE: Trianz Attains AWS DevOps Competency Status</title>
		<link>https://www.bestdevops.com/press-release-trianz-attains-aws-devops-competency-status/</link>
					<comments>https://www.bestdevops.com/press-release-trianz-attains-aws-devops-competency-status/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Wed, 17 Jun 2020 13:10:07 +0000</pubDate>
				<category><![CDATA[AWS]]></category>
		<category><![CDATA[Cloud]]></category>
		<category><![CDATA[Cyber security]]></category>
		<category><![CDATA[DevOps]]></category>
		<category><![CDATA[Digital]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=12946</guid>

					<description><![CDATA[Source:-getthewordout.com.au Sydney, Australia, June 17, 2020 – Trianz, a global digital transformation consulting and technology services firm, has attained the [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>Source:-getthewordout.com.au</p>
<p>Sydney, Australia, June 17, 2020 – Trianz, a global digital transformation consulting and technology services firm, has attained the Amazon Web Services (AWS) DevOps Competency status.</p>
<p>This Competency has cemented Trianz’ position as a differentiated AWS Partner Network (APN) member that provides focused consulting, continuous integration &amp; continuous delivery, monitoring, logging and performance management, and infrastructure as code services. The firm successfully fulfills the AWS Competency Program’s requirement of deep AWS expertise and seamless solution delivery.</p>
<p>With Trianz’ DevOps practice, clients can quickly build, test and deploy code for eliminating bugs, enhance mission functionality and implement cybersecurity protection efficiently, while also minimizing downtime and providing on-going 24x7x365 enterprise technical support. Trianz’ approach brings in greater visibility of most granular details on deployment and gives clients insights on the real progress.</p>
<p>“We are delighted that AWS recognizes the strength, depth and quality of our DevOps capabilities,” said Sameer Zaveri, Vice President – Cloud Practice at Trianz. “This validation underlines our proven expertise in helping customers transform their business by adopting Agile and DevOps practices. Our growth momentum will not stop as we continue to invest heavily in our DevOps capabilities and help clients in transforming their businesses.”</p>
<p>“We are thrilled to attain the APN DevOps Competency status,” said Eric Lucas, Director – Cloud Practice at Trianz. “By leveraging DevOps, our customers can accelerate speed to market through highly automated and efficient processes, which results in increased certainty and reduced risk. Also, our unique methodology for implementing DevOps use cases supported by the latest tools and technologies provides business agility to our customers, which is critical in this digital economy.”</p>
<p>To receive the designation, APN Partners must undergo rigorous technical validation related to DevOps, as well as an assessment of the security, performance, and reliability of their Amazon Web Services (AWS) solutions.</p>
<p>About Trianz<br>
Trianz simplifies digital evolutions of companies from strategy through execution. Leveraging its global digital transformation database of over 1.5 million datapoints, Trianz provides digital maturity and benchmarking services, transformation strategy development and execution blueprint services. With a unique, multi-disciplinary and collaborative model, Trianz helps clients transition to new business models, digitalized processes and deliver great experiences utilizing Analytics, Digital, Cloud, Infrastructure and Cyber Security technologies.</p>


<figure class="wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio"><div class="wp-block-embed__wrapper">
<iframe loading="lazy"  id="_ytid_86358"  width="675" height="379"  data-origwidth="675" data-origheight="379" src="https://www.youtube.com/embed/?enablejsapi=1&#038;list=PLTCuRW0ikUdMFARYSiWm733n1DcCem6bN&#038;autoplay=0&#038;cc_load_policy=0&#038;cc_lang_pref=&#038;iv_load_policy=1&#038;loop=0&#038;rel=1&#038;fs=1&#038;playsinline=0&#038;autohide=2&#038;theme=dark&#038;color=red&#038;controls=1&#038;disablekb=0&#038;" class="__youtube_prefs__  epyt-is-override  no-lazyload" title="YouTube player"  allow="fullscreen; accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen data-no-lazy="1" data-skipgform_ajax_framebjll=""></iframe>
</div></figure>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/press-release-trianz-attains-aws-devops-competency-status/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>Why You Shouldn&#8217;t Be Afraid of DevOps</title>
		<link>https://www.bestdevops.com/why-you-shouldnt-be-afraid-of-devops/</link>
					<comments>https://www.bestdevops.com/why-you-shouldnt-be-afraid-of-devops/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Fri, 17 Jan 2020 05:37:07 +0000</pubDate>
				<category><![CDATA[DevOps]]></category>
		<category><![CDATA[automation deployment]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[Scalable-Configuration]]></category>
		<category><![CDATA[Software]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=10066</guid>

					<description><![CDATA[DevOps can look intimidating from the outside, but the core ideas are practical and approachable. Here's a plain-language breakdown of what DevOps actually is, why it matters for developers and businesses, and how to start small with tools like Terraform, Ansible, and Kubernetes.]]></description>
										<content:encoded><![CDATA[
<p class="wp-block-paragraph"><em>This article is based on a post originally published on <a href="https://technical.ly" rel="noopener">technical.ly</a>, lightly adapted and expanded for a DevOps engineering audience.</em></p>



<p class="wp-block-paragraph">Terminology and complexity can make any new concept scary. DevOps — a portmanteau of <strong>Dev</strong>elopment and <strong>Op</strong>erations — can feel particularly intimidating because it inherits jargon and practices from two distinct disciplines. Three-letter acronyms, overlapping toolchains, and a steep-looking learning curve all contribute to that perception.</p>



<p class="wp-block-paragraph">But the core goal of DevOps is straightforward: create <strong>consistency and repeatability</strong> for anyone on your team who needs to perform development or systems tasks. The underlying principle is that the people who write software and the people who keep that software running should collaborate closely — not hand off work over a wall.</p>



<h2 class="wp-block-heading">Origins of DevOps: The Problem It Was Built to Solve</h2>



<p class="wp-block-paragraph">Before DevOps became a recognised discipline, the typical workflow looked like this: a software team pushed out code changes, and an operations team handled installation, configuration, and upgrades — often with little or no coordination. The result was a predictable set of problems: mismatched dependencies, conflicting OS patches, and subtle differences between production, staging, and test environments.</p>



<p class="wp-block-paragraph">This &#8220;fire and forget&#8221; model created friction and blame culture. The developer&#8217;s infamous response — <em>&#8220;works on my machine&#8221;</em> — became a cliché precisely because environment mismatches were so common.</p>



<p class="wp-block-paragraph">Just as <strong>Agile</strong> improved both the quality of software and the working conditions of teams producing it, DevOps aims to improve the quality of <em>delivering</em> that software. With a focus on transparency, automation, and shared ownership, it is good for engineers and good for the business they support.</p>



<h2 class="wp-block-heading">DevOps Is Good for Developers</h2>



<h3 class="wp-block-heading">Automation</h3>



<p class="wp-block-paragraph">Developers instinctively look for ways to automate repetitive tasks in software. DevOps applies that same instinct to infrastructure. Clicking through cloud-provider consoles is a fine way to explore a new service, but it does not scale. Manual configuration is error-prone: it is easy to misconfigure a security rule, forget to shut down an idle resource, or apply settings inconsistently across environments. Codifying infrastructure removes that category of error entirely.</p>



<h3 class="wp-block-heading">Scalable, Repeatable Configuration</h3>



<p class="wp-block-paragraph">Tools like <strong>Terraform</strong> give you granular, version-controlled, and repeatable control over cloud resources. Its declarative syntax makes it straightforward to see exactly how security groups, networking rules, and compute resources are configured at any point in time. Adding a resource is a few lines of code and a single command — not a multi-step journey through a web console.</p>



<h3 class="wp-block-heading">Infrastructure as Living Documentation</h3>



<p class="wp-block-paragraph">Developers are rarely enthusiastic about writing documentation. Infrastructure as Code (IaC) sidesteps this problem: a well-structured set of Terraform or Ansible files <em>is</em> the documentation. A new team member can read those files and understand the network topology, security posture, and deployment model without needing a separate wiki page that may already be out of date. Diagrams and inline comments still add value, but the code itself captures the authoritative state of the system.</p>



<h2 class="wp-block-heading">DevOps Is Good for Business</h2>



<h3 class="wp-block-heading">Resource Utilisation and Cost Control</h3>



<p class="wp-block-paragraph">A significant benefit of adopting DevOps practices is gaining clear visibility into what infrastructure is running and whether it is over- or under-utilised. When infrastructure is defined as code and subject to peer review, it becomes much harder to spin up servers unnecessarily or leave idle resources consuming budget. Developers and operations staff can collaborate on infrastructure changes using the same pull-request workflow they already use for application code.</p>



<h3 class="wp-block-heading">Environment Repeatability</h3>



<p class="wp-block-paragraph">One of DevOps&#8217;s core tenets is that every environment — development, test, staging, and production — should be as identical as possible. When environments diverge, bugs that only appear in production become difficult and expensive to reproduce and fix. IaC tools make it practical to keep all environments in sync, dramatically reducing deployment-related defects.</p>



<h3 class="wp-block-heading">Disaster Recovery</h3>



<p class="wp-block-paragraph">Repeatability has direct implications for disaster recovery. If your entire infrastructure is defined in code, rebuilding a lost system is a controlled, documented process rather than a chaotic scramble. A good DevOps workflow also brings development teams into disaster-recovery conversations early, allowing them to make application-level decisions — such as stateless service design or idempotent operations — that make recovery faster and more reliable.</p>



<h3 class="wp-block-heading">Attracting and Retaining Engineers</h3>



<p class="wp-block-paragraph">Experienced engineers want to work in environments where they feel effective and empowered. A mature DevOps culture — with automated pipelines, peer-reviewed infrastructure changes, and shared ownership — signals to candidates that the organisation takes engineering craft seriously. That is a meaningful competitive advantage when hiring.</p>



<h2 class="wp-block-heading">DevOps Is More Approachable Than It Looks</h2>



<p class="wp-block-paragraph">The breadth of the DevOps ecosystem — Terraform, Ansible, Kubernetes, Helm, Rancher, CI/CD platforms, observability stacks — can make the whole thing feel overwhelming. The good news is that you do not need all of it at once. Start with a specific pain point and solve it with a targeted tool. Each win builds confidence and skills for the next step.</p>



<p class="wp-block-paragraph">Here are three practical entry points to begin a DevOps journey:</p>



<h3 class="wp-block-heading">1. Manage Security Groups with Terraform</h3>



<p class="wp-block-paragraph">If you are struggling to keep track of AWS Security Group rules spread across multiple console screens, Terraform is an excellent first IaC project. Define your ingress and egress rules in <code>.tf</code> files, commit them to source control, and from that point on anyone can read the files to understand the current security posture. Adjusting an IP allowlist or opening a port becomes a code change subject to review, not an undocumented click in a web console. Terraform also supports importing existing resources, so you can adopt it incrementally without recreating infrastructure from scratch.</p>



<h3 class="wp-block-heading">2. Consolidate Deployment Scripts with Ansible</h3>



<p class="wp-block-paragraph">If deployment involves a collection of ad-hoc shell scripts that are difficult to reason about or maintain, consider migrating them to <strong>Ansible</strong>. Ansible&#8217;s key property is <em>idempotency</em>: if a file or configuration is already in the desired state, Ansible skips the step rather than re-applying it. Its change-focused output makes it easy to see exactly what changed on each run — and equally importantly, what did not need to change. As your fleet of servers grows, Ansible makes it straightforward to apply the same configuration across all of them in a single command, and it integrates naturally with Terraform-provisioned instances.</p>



<h3 class="wp-block-heading">3. Orchestrate Containers with Kubernetes</h3>



<p class="wp-block-paragraph">If your application has grown into a collection of Docker images — a microservices architecture — and managing their deployment, networking, and scaling is becoming unwieldy, <strong>Kubernetes</strong> is the industry-standard solution. It provides a declarative model for running and connecting containers, and every major cloud provider offers a managed Kubernetes service (EKS, GKE, AKS) that removes much of the operational overhead of running the control plane yourself.</p>



<p class="wp-block-paragraph">Kubernetes does come with complexity: its configuration is expressed in YAML, and the ecosystem of supporting tools — <strong>Helm</strong> for package management, <strong>Rancher</strong> for multi-cluster management, among others — takes time to learn. It is not the right tool for every situation; if you are running a handful of containers, Docker Compose may be sufficient. But when you genuinely need to orchestrate many services at scale, Kubernetes is a powerful and well-supported choice.</p>



<h2 class="wp-block-heading">DevOps Grows With Your Organisation</h2>



<p class="wp-block-paragraph">Modern DevOps tooling is designed to be adopted incrementally. You do not need a complete transformation on day one. Start with the pain point that costs your team the most time or causes the most incidents, apply a targeted solution, and iterate from there. As your product scales, your DevOps practice can scale with it — adding more automation, tighter feedback loops, and broader team involvement over time.</p>



<p class="wp-block-paragraph">The complexity that makes DevOps look intimidating from the outside is, in practice, a collection of individually learnable tools and patterns. Each one exists to solve a real problem. Understand the problem first, then reach for the tool — and the learning curve becomes much less steep.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/why-you-shouldnt-be-afraid-of-devops/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>The Top Six Cloud Computing Trends of 2019: A Year in Review</title>
		<link>https://www.bestdevops.com/the-top-six-cloud-computing-trends-of-2019/</link>
					<comments>https://www.bestdevops.com/the-top-six-cloud-computing-trends-of-2019/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Tue, 17 Dec 2019 06:08:04 +0000</pubDate>
				<category><![CDATA[Cloud Computing]]></category>
		<category><![CDATA[Automations]]></category>
		<category><![CDATA[Cloud computing]]></category>
		<category><![CDATA[Deployment]]></category>
		<category><![CDATA[DevOps]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[Kubernetes]]></category>
		<category><![CDATA[Software Market]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=9620</guid>

					<description><![CDATA[From the rise of the enterprise cloud manager to mainstream container adoption, 2019 was a defining year for cloud computing. Here are the six trends that shaped the industry.]]></description>
										<content:encoded><![CDATA[
<p class="wp-block-paragraph"><em>This article is based on a retrospective originally published at devops.com, summarizing the major cloud computing trends observed throughout 2019.</em></p>



<p class="wp-block-paragraph">Cloud computing was one of the dominant themes in technology and business throughout 2019. The sector had been on a steep growth trajectory for several years, and 2019 was no exception. Synergy Research Group reported 37% year-over-year growth in the public cloud market overall, and noted that the public IaaS and PaaS markets had doubled in size in just two years, with forecasts pointing to another doubling within three years of that report.</p>



<p class="wp-block-paragraph">Beyond raw market growth, a number of specific trends stood out as particularly significant in shaping how organizations approached cloud strategy, operations, and tooling in 2019. Here are the six that defined the year.</p>



<h2 class="wp-block-heading">1. Rise of the Enterprise Cloud Manager</h2>



<p class="wp-block-paragraph">A growing proportion of technical leads at companies of all sizes began carrying job titles that explicitly referenced cloud platforms — for example, &#8220;Cloud Architect,&#8221; &#8220;AWS Engineer,&#8221; or &#8220;Enterprise Cloud Manager.&#8221; Analysis of user data from ParkMyCloud (a cloud cost management platform) found this trend reflected in its own customer base, indicating that cloud infrastructure management was maturing into a dedicated professional discipline.</p>



<p class="wp-block-paragraph">This specialization signals that organizations are no longer treating cloud as a side responsibility of general infrastructure teams. Instead, dedicated roles now own the design, governance, and optimization of cloud environments — a significant shift in how IT departments are structured.</p>



<h2 class="wp-block-heading">2. Consolidated Multi-Cloud Views</h2>



<p class="wp-block-paragraph">As enterprises expanded their use of multiple public cloud providers, the operational complexity of managing disparate environments grew proportionally. In 2019, there was a sharp increase in demand for consolidated dashboards and management tools that could provide a single, unified view across AWS, Azure, Google Cloud, and other providers.</p>



<p class="wp-block-paragraph">Third-party tools addressing this need allow teams to orchestrate, govern, and optimize hybrid and multi-cloud environments from a single interface. A key driver cited by practitioners was operational simplicity: native cloud provider consoles, while powerful, are not always intuitive or well-suited to cross-cloud management tasks.</p>



<h2 class="wp-block-heading">3. Multi-Cloud Becomes the Default Strategy</h2>



<p class="wp-block-paragraph">2019 was widely regarded as the year multi-cloud moved from a forward-looking strategy to mainstream practice. Studies conducted throughout the year suggested that more than 80% of enterprises had adopted or were actively pursuing a multi-cloud approach.</p>



<p class="wp-block-paragraph">The top reasons organizations cited for going multi-cloud included:</p>



<ul class="wp-block-list">
<li><strong>Avoiding vendor lock-in:</strong> Reducing dependency on any single cloud provider&#8217;s pricing, APIs, or availability.</li>
<li><strong>Best-of-breed services:</strong> Selecting the strongest offerings from each provider — for example, using Google Cloud for machine learning workloads while running core infrastructure on AWS.</li>
<li><strong>Application efficiency:</strong> Matching workloads to the cloud environment best suited to their performance and cost requirements.</li>
</ul>



<h2 class="wp-block-heading">4. Automation Expands Across Cloud Operations</h2>



<p class="wp-block-paragraph">Automation has long been a core principle of DevOps, and 2019 saw its continued and accelerating adoption within cloud environments. The ability to automate repetitive operational tasks — provisioning, scaling, patching, cost optimization, and compliance checks — remained one of the primary reasons organizations cited for adopting a DevOps culture alongside cloud infrastructure.</p>



<p class="wp-block-paragraph">Tools supporting infrastructure-as-code (IaC) approaches, such as Terraform and AWS CloudFormation, continued to mature and gain wider adoption during this period, enabling teams to manage cloud resources programmatically rather than through manual console interactions.</p>



<h2 class="wp-block-heading">5. Greater Abstraction: Serverless and PaaS Growth</h2>



<p class="wp-block-paragraph">A broader trend toward infrastructure abstraction continued throughout 2019. Developers increasingly adopted models that removed or minimized the need to think about the underlying infrastructure on which their applications run.</p>



<p class="wp-block-paragraph">Serverless computing — where cloud providers automatically manage server provisioning, scaling, and availability — gained significant traction. Platform-as-a-Service (PaaS) offerings similarly allowed development teams to focus on writing and deploying code without managing virtual machines, operating systems, or network configuration. This shift contributed directly to faster development cycles and reduced operational overhead for engineering teams.</p>



<h2 class="wp-block-heading">6. Containers Go Mainstream</h2>



<p class="wp-block-paragraph">Application containerization completed its transition from emerging technology to mainstream cloud practice in 2019. Docker-based container workflows became standard in many development pipelines, and Kubernetes emerged as the dominant container orchestration platform.</p>



<p class="wp-block-paragraph">Managed Kubernetes services from major cloud providers — including Amazon EKS, Azure AKS, and Google GKE — saw growing adoption, lowering the barrier for organizations that wanted the benefits of container orchestration without the operational burden of managing the Kubernetes control plane themselves.</p>



<p class="wp-block-paragraph">Containers offered engineering teams portability, consistency across development and production environments, and more efficient resource utilization — making them a natural fit for the multi-cloud strategies that were simultaneously becoming the norm.</p>



<h2 class="wp-block-heading">Looking Ahead</h2>



<p class="wp-block-paragraph">The six trends described above — specialized cloud roles, consolidated multi-cloud management, multi-cloud adoption, automation, infrastructure abstraction, and container maturity — collectively illustrated that cloud computing in 2019 was not simply growing larger, but growing more sophisticated. Organizations were moving beyond basic cloud migration and beginning to optimize, govern, and architect cloud environments at a level of maturity the industry had not previously seen at scale.</p>



<p class="wp-block-paragraph">These trends set the stage for the cloud landscape that followed in 2020 and beyond, as the discipline of cloud engineering continued to professionalize and the pace of infrastructure innovation showed no sign of slowing.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/the-top-six-cloud-computing-trends-of-2019/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>Kubernetes Explained Like You&#8217;re Five</title>
		<link>https://www.bestdevops.com/kubernetes-explained-like-youre-five/</link>
					<comments>https://www.bestdevops.com/kubernetes-explained-like-youre-five/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Mon, 23 Sep 2019 05:37:22 +0000</pubDate>
				<category><![CDATA[Docker]]></category>
		<category><![CDATA[Kubernetes]]></category>
		<category><![CDATA[Cloud scaling]]></category>
		<category><![CDATA[Course]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=7977</guid>

					<description><![CDATA[A beginner-friendly explanation of Kubernetes and Docker — what they are, why you need them, and the core concepts every DevOps engineer should know before diving deeper.]]></description>
										<content:encoded><![CDATA[
<p class="wp-block-paragraph">Kubernetes — by definition — is a <strong>container orchestration tool</strong>. That is really all there is to it at the highest level. But unpacking what that means requires a quick primer on Docker first, because the two technologies are deeply intertwined and understanding one makes the other much easier to grasp.</p>



<p class="wp-block-paragraph">This article is written as an accessible, plain-language introduction to both technologies. It is not an exhaustive reference — think of it as the foundation you need before diving into the official documentation or a hands-on tutorial.</p>



<h2 class="wp-block-heading">What Is Docker?</h2>



<p class="wp-block-paragraph"><strong>Docker</strong> is software that packages applications into portable, self-contained units called <strong>images</strong>. To appreciate why that matters, consider what it takes to share an application you have written.</p>



<p class="wp-block-paragraph">Suppose you write a To-do app in Node.js. On your machine you have the right runtime installed, the right libraries, and the right environment variables set. You hand the source code to a friend who runs a different operating system. Immediately, problems appear: missing dependencies, wrong library versions, a different file-system layout. The code that works perfectly on your laptop does not run on theirs.</p>



<p class="wp-block-paragraph">Docker solves this by bundling your application together with everything it needs to run — the OS filesystem, runtime, libraries, and configuration — into a single artefact called a <strong>Docker image</strong>. That image can be executed on any machine that has a Docker runtime installed, regardless of the underlying operating system.</p>



<h3 class="wp-block-heading">Images vs. Containers</h3>



<ul class="wp-block-list">
<li><strong>Image:</strong> A read-only blueprint that describes what your application and its environment look like.</li>
<li><strong>Container:</strong> A running instance of an image — an isolated process on the host machine.</li>
</ul>



<p class="wp-block-paragraph">A common concern is that shipping an entire OS filesystem sounds heavy. In practice, minimal Linux distributions such as <strong>Alpine Linux</strong> are only a few megabytes, so images can remain very lean.</p>



<p class="wp-block-paragraph">The workflow is straightforward:</p>



<ol class="wp-block-list">
<li>Write a <code>Dockerfile</code> that describes how to build your image.</li>
<li>Run <code>docker build</code> to produce the image.</li>
<li>Push the image to a registry (such as Docker Hub or a private registry).</li>
<li>Anyone with Docker installed can pull and run the image with a single command.</li>
</ol>



<h2 class="wp-block-heading">So Where Does Kubernetes Come In?</h2>



<p class="wp-block-paragraph">Docker is excellent at packaging and running a single container. But real-world production services are rarely a single container running on a single machine. They involve many containers, many machines, traffic spikes, failures, rolling updates, and dozens of other operational concerns. Managing all of that by hand does not scale.</p>



<p class="wp-block-paragraph">Returning to the To-do app example: you have packaged it as a Docker image and you want to expose it as a public web service. Now you face a new set of questions:</p>



<ul class="wp-block-list">
<li>What happens when the container crashes? Does it restart automatically?</li>
<li>How do you handle a sudden surge in traffic without manually provisioning more servers?</li>
<li>How do you roll out a new version without downtime?</li>
<li>How do you route traffic to healthy instances only?</li>
<li>How do you restrict which parts of your system can talk to each other?</li>
</ul>



<p class="wp-block-paragraph"><strong>Kubernetes answers all of these questions.</strong> It <em>orchestrates</em> your containers — deciding where they run, restarting them when they fail, scaling them up or down based on load, and exposing them to the network in a controlled way.</p>



<h2 class="wp-block-heading">Core Kubernetes Concepts</h2>



<p class="wp-block-paragraph">You do not need to memorise every Kubernetes primitive before getting started, but the following four concepts form the foundation of almost everything else.</p>



<h3 class="wp-block-heading">1. Clusters and Nodes</h3>



<p class="wp-block-paragraph">Kubernetes operates on a <strong>cluster</strong> — a group of machines (physical or virtual) that work together. Each machine in the cluster is called a <strong>node</strong>.</p>



<p class="wp-block-paragraph">Nodes come in two roles:</p>



<ul class="wp-block-list">
<li><strong>Control-plane nodes (formerly called master nodes):</strong> Run the Kubernetes system components that make cluster-wide decisions — what to run, where to run it, and whether the current state matches the desired state.</li>
<li><strong>Worker nodes:</strong> Run your application workloads. They receive instructions from the control plane and report back their status.</li>
</ul>



<h3 class="wp-block-heading">2. The Control Plane</h3>



<p class="wp-block-paragraph">The control plane is the brain of the cluster. Its core components include:</p>



<ul class="wp-block-list">
<li><strong>kube-apiserver:</strong> The front door to the cluster. Every interaction — from the CLI, from internal components, from external tooling — goes through the API server.</li>
<li><strong>kube-scheduler:</strong> Watches for new workloads and decides which node they should run on, based on available resources and constraints.</li>
<li><strong>kube-controller-manager:</strong> Runs control loops that continuously reconcile the current state of the cluster with the desired state you have declared.</li>
</ul>



<p class="wp-block-paragraph">Worker nodes run two key agents:</p>



<ul class="wp-block-list">
<li><strong>kubelet:</strong> Ensures containers described in Pod specs are running and healthy on that node.</li>
<li><strong>kube-proxy:</strong> Manages network rules on the node to enable service-to-service communication within the cluster.</li>
</ul>



<h3 class="wp-block-heading">3. Declarative Configuration</h3>



<p class="wp-block-paragraph">You interact with Kubernetes by describing <em>what you want</em>, not <em>how to achieve it</em>. You write a configuration file — in YAML or JSON — that declares the desired state, and Kubernetes works continuously to make reality match that declaration.</p>



<p class="wp-block-paragraph">A minimal example of a Kubernetes Deployment manifest:</p>


<pre class="wp-block-code"><span><code class="hljs">apiVersion: apps/v1
kind: Deployment
metadata:
  name: todo-app
spec:
  replicas: 3
  selector:
    matchLabels:
      app: todo
  template:
    metadata:
      labels:
        app: todo
    spec:
      containers:
        - name: todo
          image: your-registry/todo-app:latest
          ports:
            - containerPort: 3000</code></span></pre>


<p class="wp-block-paragraph">This tells Kubernetes: <em>run three copies of this container image and keep them running</em>. If one crashes, Kubernetes automatically starts a replacement.</p>



<h3 class="wp-block-heading">4. kubectl — The CLI Tool</h3>



<p class="wp-block-paragraph">The primary way to interact with a Kubernetes cluster is through <code>kubectl</code>, the official command-line interface. Common operations include:</p>



<ul class="wp-block-list">
<li><code>kubectl apply -f deployment.yaml</code> — apply a configuration file to the cluster.</li>
<li><code>kubectl get pods</code> — list running pods.</li>
<li><code>kubectl logs &lt;pod-name&gt;</code> — stream logs from a container.</li>
<li><code>kubectl describe pod &lt;pod-name&gt;</code> — inspect a pod&#8217;s events and status.</li>
</ul>



<h2 class="wp-block-heading">What Kubernetes Handles for You</h2>



<p class="wp-block-paragraph">To make the value concrete, here is a summary of what Kubernetes manages once your application is deployed:</p>



<ul class="wp-block-list">
<li><strong>Self-healing:</strong> Failed containers are restarted automatically. Nodes that become unresponsive cause their workloads to be rescheduled elsewhere.</li>
<li><strong>Horizontal scaling:</strong> Increase or decrease the number of running replicas with a single command or automatically via a Horizontal Pod Autoscaler.</li>
<li><strong>Rolling updates and rollbacks:</strong> Deploy a new version gradually, with automatic rollback if health checks fail.</li>
<li><strong>Service discovery and load balancing:</strong> Kubernetes assigns DNS names to services and distributes traffic across healthy pods.</li>
<li><strong>Secret and configuration management:</strong> Sensitive data (API keys, passwords) and configuration values can be injected into containers without baking them into the image.</li>
<li><strong>Storage orchestration:</strong> Automatically mount storage systems — local disks, cloud volumes, network file systems — to containers that need them.</li>
</ul>



<h2 class="wp-block-heading">Getting Started: Practical Advice</h2>



<p class="wp-block-paragraph">Before standing up a full production cluster, use local tooling to learn the concepts without cloud costs:</p>



<ul class="wp-block-list">
<li><strong>minikube</strong> — runs a single-node Kubernetes cluster inside a VM or container on your laptop. Ideal for development and experimentation.</li>
<li><strong>kind (Kubernetes IN Docker)</strong> — runs Kubernetes clusters using Docker containers as nodes. Fast to start and popular for CI pipelines.</li>
<li><strong>k3s</strong> — a lightweight, production-grade Kubernetes distribution suited to edge, IoT, and resource-constrained environments.</li>
</ul>



<p class="wp-block-paragraph">For production deployments on AWS, tools such as <strong>kops</strong> (Kubernetes Operations) and managed services such as <strong>Amazon EKS</strong>, <strong>Google GKE</strong>, or <strong>Azure AKS</strong> significantly reduce the operational overhead of managing the control plane yourself.</p>



<h2 class="wp-block-heading">Further Reading</h2>



<p class="wp-block-paragraph">The official Kubernetes documentation is thorough and well-maintained. The interactive tutorial at <a href="https://kubernetes.io/docs/tutorials/kubernetes-basics/" rel="noopener">kubernetes.io/docs/tutorials/kubernetes-basics</a> walks you through deploying, scaling, and updating an application against a live cluster — all from the browser, no local setup required.</p>



<p class="wp-block-paragraph">Once you are comfortable with the basics, explore the concepts reference at <a href="https://kubernetes.io/docs/concepts/" rel="noopener">kubernetes.io/docs/concepts</a> to understand the full object model and how the scheduler, controller manager, and kubelet interact.</p>



<p class="wp-block-paragraph">Kubernetes has a steep-looking learning curve from the outside, but once the mental model clicks — declare what you want, let Kubernetes figure out how — the pieces fall into place quickly.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/kubernetes-explained-like-youre-five/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>Microsoft Azure Trails Amazon AWS in the 2019 Gartner Cloud Infrastructure Magic Quadrant</title>
		<link>https://www.bestdevops.com/microsoft-azure-continues-to-lag-behind-amazon-in-the-cloud-infrastructure-market/</link>
					<comments>https://www.bestdevops.com/microsoft-azure-continues-to-lag-behind-amazon-in-the-cloud-infrastructure-market/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Tue, 30 Jul 2019 11:31:04 +0000</pubDate>
				<category><![CDATA[Azure]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[continues]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[Market]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=6515</guid>

					<description><![CDATA[Gartner's 2019 Magic Quadrant for Cloud Infrastructure as a Service ranked AWS ahead of Azure and Google Cloud. Here is what the report said about Azure's strengths, cautions, and growth trajectory.]]></description>
										<content:encoded><![CDATA[
<p class="wp-block-paragraph"><em>Originally reported by <a href="https://mspoweruser.com" rel="noopener">mspoweruser.com</a>. Source data: Gartner Magic Quadrant for Cloud Infrastructure as a Service (IaaS) Worldwide, 2019.</em></p>



<h2 class="wp-block-heading">Gartner&#8217;s 2019 IaaS Magic Quadrant: The Big Picture</h2>



<p class="wp-block-paragraph">Research and advisory firm Gartner published its 2019 Magic Quadrant for Cloud Infrastructure as a Service (IaaS) Worldwide, placing Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform in the Leaders quadrant. Of the three, AWS retained the top position, distinguished by the breadth, maturity, and continued innovation of its service portfolio. Microsoft Azure ranked second — ahead of Google Cloud — but notably lost ground on the &#8220;Ability to Execute&#8221; axis compared to the previous year&#8217;s report.</p>



<p class="wp-block-paragraph">The report offers a structured view of where each major cloud provider stands in terms of both current delivery capability and long-term strategic vision. For teams evaluating cloud platforms or benchmarking vendor commitments, understanding where analysts see gaps is as important as understanding where providers excel.</p>



<h2 class="wp-block-heading">Microsoft Azure: Strengths Identified by Gartner</h2>



<ul class="wp-block-list">
  <li><strong>Deep Microsoft ecosystem integration:</strong> Enterprises already committed to Microsoft technology tend to choose Azure as their primary IaaS and PaaS provider. The end-to-end experience for building .NET applications in Visual Studio and deploying them directly to Azure was cited as particularly strong. Microsoft&#8217;s ability to co-sell Azure alongside its broader product portfolio (Office 365, Dynamics, etc.) is a significant adoption driver.</li>
  <li><strong>Edge computing and IoT:</strong> Azure offers a well-integrated approach to edge and Internet of Things workloads, spanning from hyperscale data centers through edge solutions such as Azure Stack and Data Box Edge. This coherent edge-to-cloud story is a differentiator for industrial and distributed-computing use cases.</li>
  <li><strong>Openness and innovation:</strong> By 2019, approximately 50% of Azure workloads were reported to be Linux-based, reflecting a meaningful shift toward open-source compatibility. Gartner also highlighted Microsoft&#8217;s strategy of bringing technology partners — including VMware, NetApp, Red Hat, Cray, and Databricks — into Azure as native, first-party offerings.</li>
</ul>



<h2 class="wp-block-heading">Microsoft Azure: Cautions Identified by Gartner</h2>



<ul class="wp-block-list">
  <li><strong>Reliability and outages:</strong> Gartner flagged recurring reliability issues as a meaningful challenge. Since September 2018, Azure experienced multiple service-impacting incidents, including significant outages affecting Azure Active Directory. A key concern was that many of these incidents left customers with limited or no controls to mitigate the resulting downtime.</li>
  <li><strong>Implementation expectations vs. reality:</strong> Gartner clients reported difficulties delivering projects on time and within budget. The report attributed this partly to Microsoft setting unrealistically high expectations during the sales cycle, combined with field sales teams that were not always well-positioned to scope Azure engagements accurately.</li>
  <li><strong>Technical support quality and cost:</strong> Enterprises frequently criticized the quality of Microsoft&#8217;s technical support and field solution architects, alongside rising support costs. Gartner noted that poor support experiences negatively affect customer satisfaction and slow Azure adoption and spending growth.</li>
</ul>



<h2 class="wp-block-heading">Azure Revenue Growth: Strong Numbers, but a Long Road to Close the Gap</h2>



<p class="wp-block-paragraph">Microsoft&#8217;s FY19 Q4 earnings results (reported around the same time as this analysis) showed Azure revenue growing 64% year-over-year — a strong headline figure by any measure. However, AWS retains a substantially larger absolute market share, meaning that a 64% growth rate on a smaller base does not automatically close the gap in dollar terms. Analysts at the time suggested that to meaningfully challenge AWS&#8217;s lead within a few years, Azure would need to sustain triple-digit percentage growth rates — a bar that becomes progressively harder to clear as the business scales.</p>



<h2 class="wp-block-heading">What This Means for Engineering and Platform Teams</h2>



<p class="wp-block-paragraph">The Gartner findings carry practical implications for DevOps and platform engineering teams evaluating or already operating on Azure:</p>



<ul class="wp-block-list">
  <li><strong>Design for resilience:</strong> Given the documented reliability incidents — particularly around identity services — teams should architect for Azure Active Directory failures using retries, circuit breakers, and multi-region redundancy where business requirements justify the cost.</li>
  <li><strong>Validate sales commitments in writing:</strong> The caution around unrealistic implementation expectations is a known pattern with large cloud vendors. Require detailed Statements of Work, reference architectures, and explicit SLA definitions before committing to timelines or budgets.</li>
  <li><strong>Budget for support tiers:</strong> If Azure is a primary platform, factor in the cost of elevated support plans early. Relying on community or basic support for production workloads may create risk given the quality concerns Gartner cited.</li>
  <li><strong>Leverage the Microsoft ecosystem where it adds value:</strong> If your organization runs .NET, Active Directory, or Microsoft 365 heavily, Azure&#8217;s native integrations are a genuine productivity advantage — lean into them rather than defaulting to lowest-common-denominator cloud patterns.</li>
</ul>



<p class="wp-block-paragraph"><em>Note: This article reflects the Gartner Magic Quadrant findings as reported in mid-2019. Cloud provider capabilities, market positions, and pricing change rapidly. Consult the most recent Gartner publications and vendor documentation before making current infrastructure decisions.</em></p>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/microsoft-azure-continues-to-lag-behind-amazon-in-the-cloud-infrastructure-market/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>How DevOps Changes the Delivery of IT Functions</title>
		<link>https://www.bestdevops.com/how-devops-changes-the-delivery-of-it-functions/</link>
					<comments>https://www.bestdevops.com/how-devops-changes-the-delivery-of-it-functions/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Wed, 14 Jun 2017 05:51:11 +0000</pubDate>
				<category><![CDATA[DevOps]]></category>
		<category><![CDATA[IT trends]]></category>
		<category><![CDATA[Business Alignment]]></category>
		<category><![CDATA[Collaboration]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<category><![CDATA[IT]]></category>
		<category><![CDATA[IT functions]]></category>
		<category><![CDATA[IT Industry]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=1829</guid>

					<description><![CDATA[DevOps disrupts traditional shared services and labor arbitrage models by replacing functional silos with cross-functional, business-aligned teams operating in software-defined environments. Here is what that shift means in practice.]]></description>
										<content:encoded><![CDATA[
<p class="wp-block-paragraph"><em>This article is based on analysis originally published on <strong>cio.com</strong> (2017). The core arguments remain relevant to DevOps adoption discussions today.</em></p>



<h2 class="wp-block-heading">The Traditional Shared Services Model</h2>



<p class="wp-block-paragraph">For roughly two decades, labor arbitrage and shared services have operated in close alignment. Shared service organizations are built around functional expertise stacked in layers: infrastructure, security, application development and maintenance, compliance, and so on. Each layer has dedicated champions responsible for delivering that function cost-effectively and at a defined quality level.</p>



<p class="wp-block-paragraph">Labor arbitrage fits naturally into this structure. Because the work is organized by function rather than by business outcome, tasks within each layer can frequently be performed more cost-effectively by offshore teams. The model rewards low unit costs per function and scales by adding people within those functional layers.</p>



<h2 class="wp-block-heading">How DevOps Restructures the Stack</h2>



<p class="wp-block-paragraph">DevOps introduces a fundamentally different organizational construct. Instead of aligning work by functional expertise, DevOps aligns work by <strong>business service</strong>. Cross-functional teams own the entire delivery stack — development, testing, infrastructure, and operations — for a specific business capability.</p>



<p class="wp-block-paragraph">A useful illustration is the treatment of infrastructure, application development, and testing. In a traditional shared services model, each of these is a separate functional silo with its own management chain. In a DevOps model, these workloads move into a software-defined environment where a single cross-functional team holds end-to-end responsibility. The functional stack effectively collapses into a unified, product-oriented team.</p>



<h2 class="wp-block-heading">Why DevOps Is Disruptive to Labor Arbitrage</h2>



<p class="wp-block-paragraph">This restructuring creates three specific pressures on the shared services and labor arbitrage model:</p>



<ol class="wp-block-list">
<li><strong>Fewer people are needed.</strong> Automating infrastructure through software-defined environments and shifting operational responsibilities to the development team reduces the total headcount required. When you need fewer people overall, the cost advantage of offshore labor becomes proportionally less significant.</li>
<li><strong>Teams gravitate toward the business.</strong> Because DevOps teams are aligned by business service, they require tight, continuous communication with business stakeholders. That communication need creates a natural pull toward co-location — same time zone, same building, or at minimum close proximity. The distributed, time-shifted model that underpins labor arbitrage works against this communication requirement. The &#8220;follow the sun&#8221; productivity argument, which relies on handing off work across time zones, does not translate well to DevOps, where synchronous collaboration is a core productivity driver.</li>
<li><strong>The success metric changes.</strong> Shared service organizations optimize for low unit cost per function. DevOps teams optimize for <strong>high business impact delivered at speed</strong>. These are different objective functions, and they reward different organizational designs. As companies commit to genuine DevOps operating models, the metrics that justified labor arbitrage become less relevant.</li>
</ol>



<h2 class="wp-block-heading">Offshore DevOps: A Different Pattern</h2>



<p class="wp-block-paragraph">Some large technology organizations — Microsoft among them — do operate DevOps teams in offshore locations. However, the model they use differs materially from classical labor arbitrage. Rather than distributing individual functional specialists across locations, they relocate <em>entire cross-functional teams</em> offshore. The team remains co-located and autonomous; only its geography changes. This preserves the communication and collaboration properties that make DevOps effective, while still achieving geographic cost advantages.</p>



<p class="wp-block-paragraph">This is a meaningful distinction. Moving a whole product team to a lower-cost location is not the same as disaggregating functional work and distributing it across offshore specialists. The former is compatible with DevOps principles; the latter largely is not.</p>



<h2 class="wp-block-heading">What This Means for IT Service Delivery</h2>



<p class="wp-block-paragraph">Organizations evaluating or expanding their DevOps adoption should consider the following implications:</p>



<ul class="wp-block-list">
<li><strong>Sourcing strategies need revisiting.</strong> Contracts and governance structures designed around functional shared services may not map cleanly onto DevOps team topologies. Re-examine sourcing assumptions as DevOps matures in the organization.</li>
<li><strong>Co-location or team-level offshoring should be the unit of analysis.</strong> If geographic cost savings are still a business requirement, evaluate moving complete product teams rather than individual functional roles.</li>
<li><strong>Measure business outcomes, not unit costs.</strong> Continuing to measure DevOps teams using shared-services metrics (cost per ticket, cost per function) will produce misleading signals. Adopt outcome-focused metrics: deployment frequency, lead time for changes, mean time to restore, and change failure rate.</li>
<li><strong>Automation investment reduces the labor base.</strong> Infrastructure-as-code, CI/CD pipelines, and test automation reduce repetitive manual work — the category of work most amenable to labor arbitrage. The more mature the automation, the smaller the pool of arbitrageable tasks.</li>
</ul>



<h2 class="wp-block-heading">Summary</h2>



<p class="wp-block-paragraph">DevOps does not simply speed up existing IT delivery processes — it restructures who does the work, how they are organized, and what they are optimizing for. The functional stack of the shared services model gives way to cross-functional teams aligned to business outcomes. As a consequence, the labor arbitrage equation that sustained shared services for two decades becomes progressively less applicable. Organizations that recognize this structural shift early will be better positioned to redesign their sourcing and governance models before legacy contracts and org structures become blockers to DevOps maturity.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/how-devops-changes-the-delivery-of-it-functions/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>Docker Reference Architecture: Docker Datacenter Best Practices and Design Considerations</title>
		<link>https://www.bestdevops.com/docker-reference-architecture-docker-datacenter-best-practices-and-design-considerations/</link>
					<comments>https://www.bestdevops.com/docker-reference-architecture-docker-datacenter-best-practices-and-design-considerations/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Sat, 18 Feb 2017 09:10:51 +0000</pubDate>
				<category><![CDATA[Cloud Computing]]></category>
		<category><![CDATA[DevOps]]></category>
		<category><![CDATA[DevOps Best Practices]]></category>
		<category><![CDATA[DevOps Tools]]></category>
		<category><![CDATA[Application Containers]]></category>
		<category><![CDATA[Architecture]]></category>
		<category><![CDATA[Automation]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[Datacenter]]></category>
		<category><![CDATA[DDC]]></category>
		<category><![CDATA[Deployment]]></category>
		<category><![CDATA[Design]]></category>
		<category><![CDATA[Docker]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=698</guid>

					<description><![CDATA[Source:- docker.com Introduction Docker Datacenter (DDC) is the enterprise container platform from Docker to be used across the entire software [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>Source:- docker.com</p>
<p><strong>Introduction</strong><br />
<a href="http://www.scmgalaxy.com/courses/agenda/virtulization-and-container-tools/docker-training.html">Docker </a>Datacenter (DDC) is the enterprise container platform from Docker to be used across the entire software supply chain. It is a fully-integrated solution for container-based application development, deployment, and management. With integrated end-to-end security, DDC enables application portability by abstracting your infrastructure so that applications can move seamlessly from development to production.</p>
<p><strong>What You Will Learn</strong><br />
This reference architecture describes a standard, production-grade, Docker Datacenter deployment. It also details the components of DDC, how they work, how to automate deployments, how to manage users and teams, how to provide high availability for the platform, and how to manage the infrastructure.</p>
<p>Some environment-specific configuration details are not be provided. For instance, load balancers vary greatly between cloud platforms and on-premises infrastructure platform. For these types of components, general guidelines to environment-specific resources are provided.</p>
<p><strong>Understanding Docker Datacenter Components</strong><br />
From development to production, Docker Datacenter provides a seamless platform for containerized applications both on-premises and on the Cloud. It includes three components:</p>
<ul>
<li>Docker CS Engine, the commercially supported Docker Engine</li>
<li>Docker Trusted Registry (DTR), a resilient and secure image management repository</li>
<li>Universal Control Plane (UCP), the web-based, unified cluster and application management solution</li>
</ul>
<p>Together they provide an integrated solution with the following design goals:</p>
<ul>
<li>Agility — the Docker API is used to interface with the platform so that operational features do not slow down application delivery</li>
<li>Portability — the platform abstracts details of the infrastructure for applications</li>
<li>Control — the environment is secure by default, provides robust access control, and logging of all operations</li>
</ul>
<p>To achieve these goals the platform must be resilient and highly available. This reference architecture demonstrates this robust configuration.</p>
<p><strong>Docker CS Engine</strong><br />
The building block of Docker Datacenter, the <a href="http://www.scmgalaxy.com/courses/agenda/virtulization-and-container-tools/docker-training.html">Docker </a>Commercially Supported Engine (CS Engine) is responsible for container-level operations, interaction with the OS, providing the Docker API, and running the Swarm cluster. The Engine is also the integration point for infrastructure, including the OS resources, networking, and storage.</p>
<p><strong>Universal Control Plane</strong><br />
UCP extends CS Engine by providing an integrated application management platform. It is both the main interaction point for users and the integration point for applications. UCP runs an agent on all nodes in the cluster to monitor them and a set of services on the controller nodes. This includes identity services to manage users, Certificate Authorities (CA) for user and cluster PKI, the main controller providing the Web UI and API, data stores for UCP state, and a Classic Swarm service for backward compatibility.</p>
<p><strong>Docker Trusted Registry</strong><br />
The DTR is an application managed by, and integrated with UCP, that provides Docker images distribution and security services. The DTR uses UCP&#8217;s identity services to provide Single Sign-On (SSO), and establish a mutual trust to integrate with its PKI. It runs as a set of services on one or several replicas: the registry to store and distribute images, an image signing service, a Web UI, an API, and data stores for image metadata and DTR state.</p>
<p><strong>Swarm Mode</strong><br />
To provide a seamless cluster based on a number of nodes, DDC relies on CS Engine&#8217;s Swarm-mode capability. Swarm-mode divides nodes between workers, nodes running application workloads defined as services, and managers, nodes in charge of maintaining desired state, managing the cluster&#8217;s internal PKI, and providing an API. Managers can also run workloads, in a DDC environment they run UCP controllers, and shouldn&#8217;t run anything else.</p>
<p>The Swarm-mode service model provides a declarative desired state for workloads, scalable to a number of tasks (the service&#8217;s containers), accessible through a stable resolvable name, and optionally exposing an end-point. Exposed services are accessible from any node on a cluster-wide reserved port, reaching tasks through the routing mesh, a fast routing layer using high-performance switching in the Linux Kernel. This set of features enable internal and external discoverability for services, UCP&#8217;s HTTP Routing Mesh (HRM) adding hostname-to-service mapping.</p>
<p><strong>A Standard Deployment Architecture</strong><br />
This section demonstrates a standard, production-level architecture for Docker Datacenter using 10 nodes: 3 UCP controllers, 3 nodes for the DTR, and 4 worker nodes for application workloads. The number of worker nodes is arbitrary, most environments will have more depending on applications needs, it doesn&#8217;t change the architecture or the cluster configuration.</p>
<p>Access to the environment is done through 3 Load Balancers (or 3 load balancer virtual hosts) with corresponding DNS entries for the UCP controllers, the DTR replicas, and the applications running in the cluster.</p>
<p>The DTR replicas use shared storage for images. S3-compatible object storage (the default) and NFS storage are both covered in this section</p>
<p><img loading="lazy" decoding="async" class="alignnone  wp-image-699" src="http://www.bestdevops.com/wp-content/uploads/2017/02/docker-api-ucp-300x151.png" alt="" width="483" height="243" srcset="https://www.bestdevops.com/wp-content/uploads/2017/02/docker-api-ucp-300x151.png 300w, https://www.bestdevops.com/wp-content/uploads/2017/02/docker-api-ucp-768x388.png 768w, https://www.bestdevops.com/wp-content/uploads/2017/02/docker-api-ucp-1024x517.png 1024w, https://www.bestdevops.com/wp-content/uploads/2017/02/docker-api-ucp.png 1625w" sizes="auto, (max-width: 483px) 100vw, 483px" /></p>
<p><strong>Node Size</strong><br />
A node is a machine in the cluster (virtual or physical) with Docker Engine running on it. When provisioning each node, assign it a role: UCP Controller, DTR, or worker node so that they are protected from running application workloads.</p>
<p>To decide what size the node should be in terms of CPU, RAM, and storage resources, consider the following:</p>
<ol>
<li>All nodes should at least fulfil the minimal requirements, for UCP 2.0 2GB of RAM and 3GB of storage. More detailed requirements are in the UCP documentation.</li>
<li>UCP Controller nodes should be provided with more than the minimal requirements, but won&#8217;t need much more if nothing else runs on them.</li>
<li>Ideal Worker nodes size will vary based on your workloads, it is impossible to define a universal standard size.</li>
<li>Other considerations like target density (average number of container per node), wether one standard node type or several are preferred, and other operational considerations might also influence sizing.</li>
</ol>
<p>If possible, node size should be determined by experimentation and testing actual workloads, and they should be refined iteratively. A good starting point is to select a standard or default machine type in your environment and use this size only. If your standard machine type provides more resources than the UCP Controllers need, it makes sense to have a smaller node size for these. Whatever the starting choice, it&#8217;s important to monitoring resource usage and cost to improve the model.</p>
<p>Two example scenarios:</p>
<ul>
<li>One standard node size: 2VCPU, 8GB RAM, 20GB storage</li>
<li>Two node sizes: 2VCPU, 8GB RAM, 20GB storage for UCP Controllers and 4VCPU, 64GB RAM, 40GB storage for worker nodes</li>
</ul>
<p>Depending on your OS of choice, storage configuration for Docker Engine might require some planning. Refer to the Support Matrix to see what storage drivers are supported for your host OS. This is especially important if you are using RHEL or CentOS, which use device mapper with direct-lvm.</p>
<p class="editable"><strong>Load Balancers</strong></p>
<p>Load balancers configuration should be done before installation, including the creation of DNS entries. Most load balancers should work with DDC. The only requirements are TCP passthrough and the ability to do healthchecks on an HTTPS endpoint.</p>
<p>In our example architecture, UCP controllers ensure UCP resiliency in case of node failure or controller reconfiguration. Access to UCP through the GUI or API is always done using TLS. The load balancer is configured for simple TCP pass-through on port 443, using a custom HTTPS health check at <code>https://&lt;ucp_controller&gt;/_ping</code>.</p>
<p>Be sure to create a DNS entry for the UCP host such as <code>ucp.example.com</code> and point to the load balancer.</p>
<p>The setup for the three DTR replicas is similar to setting up the UCP controllers. Again, use TCP pass-through to port 443 on the nodes, except the health check is at <code>https://&lt;dtr_replica_node&gt;/health</code>.</p>
<p>Create a DNS entry for the DTR host such as <code>dtr.example.com</code> and point it to the load balancer. It&#8217;s important to keep it as concise as possible because it will be part of the full name of images. For example, <code>user_a</code>&#8216;s <code>webserver</code> image will be named <code>dtr.example.com/user_a/webserver</code>.</p>
<p>The application load balancer provides access to services HTTP endpoints exposed through UCP&#8217;s HTTP Routing Mesh (HRM). HRM provides a reverse-proxy to map domain names to services that expose ports and are attached to the <code>ucp-hrm</code> overlay network. As an example, the <code>voting</code> application exposes the <code>vote</code> service&#8217;s port <code>80</code>. The HRM maps <code>http://vote.apps.example.com</code> to this port on the <code>ucp-hrm</code> overlay network, and the application LB itself maps <code>*.apps.example.com</code> to nodes in the cluster.</p>
<p><strong>DTR Storage</strong><br />
The DTR usually needs to store a large number of images. It uses external storage (S3, NFS, etc.), not node storage so that it can be shared between DTR replicas. The DTR replicates metadata and configuration information between replicas, but not image layers themselves. To determine storage size, start with the size of the existing images used in the environment and evolve from there.</p>
<p>It&#8217;s best to use an existing storage solution in your environment so that image storage can benefit from existing operations experience. If you have to chose a new solution, consider using S3-compatible object storage, which maps more closely to registry operations.</p>
<p><strong>Recommendations for the Docker Datacenter Installation</strong><br />
This section will detail the installation process for the architecture and provide a checklist. It is not a substitute for the documentation, which provides more details and is authoritative in any case. The goal is to help you define a repeatable (and ideally automated) process to deploy, configure, upgrade and expand your DDC environment.</p>
<p>The three main stages of a DDC installation are:</p>
<ol>
<li>Deploying and configuring the infrastructure (hosts, network, storage).</li>
<li>Installing and configuring the Docker Engine, running as an application on the hosts.</li>
<li>Installing and configuring UCP and the DTR, delivered as containers running on the engine.</li>
</ol>
<p><strong>Infrastructure Considerations</strong><br />
The installation documentation details infrastructure requirements for DDC. It is recommended to use existing or platform specific tools in your environment to provide standardized and repeatable configuration for infrastructure components.</p>
<div id="section_12" class="mt-page-section">
<div id="section_13" class="mt-page-section">
<div id="section_15" class="mt-page-section">
<h4 class="editable">Firewall</h4>
<p>Access to DDC is done using port 443 only (ports 443 and 80 for DTR), whether it&#8217;s to access the Web UI or the remote API. This makes external firewall configuration simple. In most cases you only need to open ports 80, 443, and 22. Port 22 is for SSH access is is optional since DDC doesn&#8217;t require SSH access. Access to applications is through a load balancer using HTTPS. If you expose other TCP services to the outside world, open these ports on the firewall. As explained in the previous section, several ports need to be open for communication inside the cluster. If you have a firewall between some nodes in the cluster, for example, to separate controllers from worker nodes, open the relevant port there too.</p>
<p><img decoding="async" class="internal" src="https://success.docker.com/@api/deki/files/358/DDC_Ports.png?revision=1" alt="DDC Ports" /></p>
</div>
<div id="section_16" class="mt-page-section"><span id="Load_Balancers_2"></span></p>
<h4 class="editable">Load Balancers</h4>
<p>Load balancers are detailed in the previous section. They must be in place before installation and must be provisioned with the right hostnames. External (load balancer) hostnames are used for HA and also for TLS certificates. It&#8217;s easier not having to reconfigure them during or after installation.</p>
<p>Refer to the previous section DDC Components for details about load balancer configuration.</p>
</div>
<div id="section_17" class="mt-page-section"><span id="Shared_Storage"></span></p>
<h4 class="editable">Shared Storage</h4>
<p>DTR shared storage, used for images in the registry, must be ready and accessible from the DTR nodes. Test it works using an S3 or NFS command line client to avoid having to debug DTR storage configuration.</p>
</div>
<div id="section_18" class="mt-page-section"><span id="Host_Configuration"></span></p>
<h4 class="editable">Host Configuration</h4>
<p>Host configuration varies based on the OS used and existing configuration standards, but there are some important steps that must be followed after OS installation:</p>
<ol>
<li><strong>Clock synchronization</strong> using NTP or similar service. Clock skew can produce hard to debug errors, especially where the Raft algorithm is used (UCP and the DTR).</li>
<li><strong>Static IPs</strong> are required for UCP for all hosts.</li>
<li><strong>Hostnames</strong> are used for node identification in the cluster. The hostname must be set in an non-ephemeral way.</li>
<li><strong>Host firewalls</strong> must allow intra-cluster traffic on all the ports specified in the installation docs.</li>
<li><strong>Storage</strong> must be configured if needed. For example, the <code>devicemapper</code> driver need a logical volume configured before Docker Engine installation.</li>
</ol>
</div>
</div>
<div id="section_19" class="mt-page-section"><span id="Docker_CS_Engine_Installation_Considerations"></span></p>
<h3 class="editable">Docker CS Engine Installation Considerations</h3>
<p>Detailed installation instructions for CS Engine are provided by the documentation. To install on machines that don&#8217;t have Internet access, add these package to your own private repository. After installing the package, make sure the <code>docker</code> service is configured to start on system boot.</p>
<p>The best way to change parameters for CS Engine is to use the <code>/etc/docker/daemon.json</code> configuration file. This ensures that the configuration can be reused across different systems and OS in a consistent way. See the documentation for <a class="link-https" href="https://docs.docker.com/engine/reference/commandline/dockerd/#/daemon-configuration-file" target="_blank" rel="external nofollow noopener">the full list of options</a>.</p>
<p>Make sure Engine is configured correctly by starting the <code>docker</code> service and verifying the parameters with <code>docker info</code>.</p>
</div>
<div id="section_20" class="mt-page-section"><span id="UCP_Installation_Considerations"></span></p>
<h3 class="editable">UCP Installation Considerations</h3>
<p>The UCP installer creates a functional cluster from a set of machines running CS Engine. That includes creating a Swarm cluster and installing the UCP controllers. The default installation mode as described in the <a class="link-https" href="https://docs.docker.com/datacenter/ucp/2.0/guides/installation/#/step-4-install-ucp" target="_blank" rel="external nofollow noopener">Installation Guide</a> is interactive.</p>
<p>To perform fully-automated, repeatable deployments, provide more information to the installer:</p>
<pre><code>docker run --rm -v /var/run/docker.sock:/var/run/docker.sock \
  -v /tmp/docker_subscription.lic:/config/docker_subscription.lic \
  -e UCP_ADMIN_PASSWORD=password --name ucp docker/ucp install --host-address IP_or_interface \
  --san manager1.example.com --san ucp.example.com 
</code></pre>
<p>Each of these options are explained in the following sections.</p>
<div id="section_21" class="mt-page-section"><span id="External_Certificates"></span></p>
<h4 class="editable">External Certificates</h4>
<p>By default UCP uses self-signed TLS certificates. For production deployments, it is recommended to use certificates generated by a trusted CA. In most cases, this is your organization&#8217;s internal CA.</p>
<p>The certificates and keys needed as follows:</p>
<ol>
<li>The root CA&#8217;s public certificate <code>ca.pem</code>.</li>
<li>The TLS certificate <code>cert.pem</code>. It must also include the public certificates of any intermediate CA and have SANs for all addresses used to access UCP, including the load balancer&#8217;s hostname (e.g. <code>ucp.example.com</code>) and the individual controllers&#8217; hostnames (e.g. <code>ucp-controller1.example.com</code>) to access them directly.</li>
<li>The TLS private key, <code>key.pem</code>.</li>
</ol>
<p>To add these automatically during installation, add these files with the exact names to a volume named <code>ucp-controller-server-certs</code> on the machine where you install UCP, and use the <code>--external-server-cert</code> install parameter.</p>
<p>It is also possible to add the certificates through the Web UI after installation.</p>
</div>
<div id="section_22" class="mt-page-section"><span id="License_File"></span></p>
<h4 class="editable">License File</h4>
<p>The license file can be provided for installation via the command line as well using a bind-mount (volume) in <code>/config</code>. Specify its location with <code>-v /path/to/docker_subscription.lic:/config/docker_subscription.lic</code>.</p>
</div>
<div id="section_23" class="mt-page-section"><span id="Admin_Password"></span></p>
<h4 class="editable">Admin Password</h4>
<p>To make the installation entirely non-interactive, the admin password must be passed using the <code>--admin-password</code> install parameter. The admin username is <code>admin</code> by default. Use <code>--admin-username</code> to change it.</p>
</div>
<div id="section_24" class="mt-page-section"><span id="Adding_Nodes"></span></p>
<h4 class="editable">Adding Nodes</h4>
<p>Once the installation has finished for the first controller node, the two additional controllers must be installed by joining them to the cluster. UCP configures a full controller replica on the manager node in the cluster, so the only command needed on the two controllers is a <code>docker swarm join</code> with the right token. The exact command can be obtained by running <code>docker swarm join-token manager</code> on the first controller.</p>
<p>To join the worker nodes, the equivalent command can be obtained with <code>docker swarm join-token worker</code> on any controller:</p>
<pre><code>docker swarm join-token worker
</code></pre>
<p>To add a worker to this swarm, run the following command:</p>
<pre><code>docker swarm join \
--token SWMTKN-1-00gqkzjo07dxcxb53qs4brml51vm6ca2e8fjnd6dds8lyn9ng1-092vhgjxz3jixvjf081sdge3p \
192.168.65.2:2377
</code></pre>
<p>To make sure everything is running correctly, log into UCP at <code>https://ucp.example.com</code>.</p>
</div>
</div>
<div id="section_25" class="mt-page-section"><span id="DTR_Installation_Considerations"></span></p>
<h3 class="editable">DTR Installation Considerations</h3>
<p>Installation of the DTR is similar to that of UCP. Install and configure one node, and then join replicas to form a full, highly-available setup. For installation of the first instance as well as replicas, point the installer to the node in the cluster it will install on.</p>
<p>Certificates and image storage must be configured after installation. Once shared storage is configured, the two replicas can be added with the <code>join</code> command.</p>
</div>
<div id="section_26" class="mt-page-section"><span id="Validating_the_Deployment"></span></p>
<h3 class="editable">Validating the Deployment</h3>
<p>When installation of everything has finished, tests can be done to validate the deployment. Disable scheduling of workloads on UCP controllers and nodes running the DTR.</p>
<p>Basic tests to consider:</p>
<ol>
<li>Log in through <code>https://ucp.example.com</code> as well as directly to a manager node, eg. <code>https://manager1.example.com</code>. Make sure the cluster and all nodes are healthy.</li>
<li>Test that you can deploy an application following <a class="link-https" href="https://docs.docker.com/datacenter/ucp/2.0/guides/applications/" target="_blank" rel="external nofollow noopener">the example in the documentation</a>.</li>
<li>Test that users can download a bundle and connect to the cluster from the CLI. Test that they can use docker-compose.</li>
<li>Test DTR with a full image workflow. Make sure storage isn&#8217;t misconfigured and images are stored in the right place.</li>
</ol>
<p>Consider building a standard automated test suite to validate new environments and updates. Just testing standard functionality should hit most configuration issues. Make sure you run these tests with a non-admin user, the test user should have similar rights as users of the platform. Measuring time taken by each test can also pinpoint issues with underlying infrastructure configuration. Fully deploying an actual application from your organization should be part of this test suite.</p>
</div>
</div>
<div id="section_27" class="mt-page-section"><span id="High_Availability_in_DDC"></span></p>
<h2 class="editable">High Availability in DDC</h2>
<p>In a production environment, it is vital that critical services have minimal downtime. It is important to understand how high availability (HA) is achieved in UCP and the DTR, and what to do to when it fails. UCP and DTR use the same principles to provide HA, but UCP is more directly tied to Swarm&#8217;s features. The general principle is to have core services replicated in a cluster, which allows another node to take over when one fails. Load balancers make that transparent to the user by providing a stable hostname, independent of the actual node processing the request. It&#8217;s the underlying clustering mechanism that provides HA.</p>
<div id="section_28" class="mt-page-section"><span id="Swarm"></span></p>
<h3 class="editable">Swarm</h3>
<p>The foundation of UCP HA is provided by Swarm, the clustering functionality of Docker Engine. As detailed in the Docker Engine documentation, there are two algorithms involved in managing a Swarm cluster: a Gossip protocol for worker nodes and the Raft consensus algorithm for managers. Gossip protocols are <em>eventually consistent</em>, which means that different parts of the cluster might have different versions of a value while new information spreads in the cluster (they are also called <em>epidemic protocols</em> because information spreads like a virus). This allows for very large scale cluster because it&#8217;s not necessary to wait for the whole cluster to agree on a value, while still allowing fast propagation of information to reach consistency in an acceptable time. Managers handle tasks that need to be based on highly consistent information because they need to make decisions based on global cluster and services state.</p>
<p>In practice, <em>high consistency</em> can be difficult to achieve without impeding availability because each write needs to be acknowledged by all participants, and a participant being unavailable or slow to respond will impact the whole cluster. This is explained by the CAP Theorem, which (to simplify) states that in the presence of partitions (P) in a distributed system, we have to chose between consistency (C) or availability (A). Consensus algorithms like Raft address this trade-off using a <em>quorum</em>: if a majority of participant agree on a value, it is good enough, the minority participant eventually get the new value. That means that a write needs only acknowledgement from 2 out of 3, 3 out of 5, or 4 out of 7 nodes.</p>
<p>Because of the way consensus works, an odd number of nodes is recommended when configuring Swarm. With 3 manager nodes in Swarm, the cluster can temporarily lose 1 and still have a functional cluster, with 5 you can lose 2, and so on. Conversely, you need 2 managers to acknowledge a write in a 3 manager cluster, but 3 with 5 managers, so more managers don&#8217;t provide more performance or scalability — you are actually replicating more data. Having 4 managers doesn&#8217;t add any benefits since you still can only lose 1 (majority is 3), and more data is replicated than with just 3. In practice, it is more fragile.</p>
<p>If you have 3 managers and lose 2, your cluster is non-functional. Existing services and containers keep running, but new requests are not processed. <strong>A single remaining manager in a cluster doesn&#8217;t &#8220;switch&#8221; to single manager mode. It is just a minority node.</strong> You also cannot just promote worker nodes to manager to regain quorum. The failed nodes are still members of the consensus group and need to come back online.</p>
</div>
<div id="section_29" class="mt-page-section"><span id="UCP"></span></p>
<h3 class="editable">UCP</h3>
<p>UCP runs a global service across all cluster nodes called <code>ucp-agent</code>. This agent installs a UCP controller on all Swarm manager nodes. There is a one-to-one correspondence between Swarm managers and UCP controllers, but they have different roles. Using its agent, UCP relies on Swarm for HA, but it also includes replicated data stores that rely on their own raft consensus groups that are distinct from Swarm: ucp-auth-store, a replicated database for identity management data, and ucp-kv, a replicated key-value store for UCP configuration data.</p>
</div>
<div id="section_30" class="mt-page-section"><span id="DTR"></span></p>
<h3 class="editable">DTR</h3>
<p>The DTR has a replication model that is similar to how UCP works, but it doesn&#8217;t synchronize with Swarm. It has one replicated component, its datastore, which might also have a lot of state to replicate at one time. It relies on raft consensus.</p>
<p>Both UCP controllers and DTR replicas may have a lot more state to replicate when (re)joining the cluster. Some reconfiguration operations can make a cluster member temporary unavailable. With 3 members, it&#8217;s good practice to wait for the one you reconfigured to get back in sync before reconfiguring a second one, or they could lose quorum. Temporary losses in quorum are easily recoverable, but it still means the cluster is in an unhealthy state. Monitoring the state of controllers to ensure the cluster doesn&#8217;t stay in that state is critical.</p>
</div>
</div>
<div id="section_31" class="mt-page-section"><span id="Backup_and_Restore"></span></p>
<h2 class="editable">Backup and Restore</h2>
<p>The HA setup using multiple nodes works well to provide continuous availability in the case of temporary failure, including planned node downtime for maintenance. For other cases, including the loss of the full cluster, permanent loss of quorum, and data loss due to storage faults, restoring from backup is necessary.</p>
<div id="section_32" class="mt-page-section"><span id="UCP_Backup"></span></p>
<h3 class="editable">UCP Backup</h3>
<p>UCP backup is done using the <code>docker/ucp backup</code> command on a controller node. It stops the UCP containers on the node and perform a full backup of the configuration and state of UCP. Some of this information is sensitive, so you should always use the <code>--passphrase</code> option to encrypt the backup. The backup also includes the orgs, teams, and users used by DTR as well as UCP. Regular backups should be scheduled. Here is an example showing how to run the command without user input:</p>
<pre><code>UCPID=$(docker run --rm -i --name ucp -v /var/run/docker.sock:/var/run/docker.sock docker/ucp id)
docker run --rm -i --name ucp -v /var/run/docker.sock:/var/run/docker.sock docker/ucp backup --id $UCPID --passphrase "secret" &gt; /tmp/backup.tar
</code></pre>
<p>There are two ways to use the backup:</p>
<ul>
<li>To restore a controller using the <code>docker/ucp restore</code> command (only the backup from that controller can be used)</li>
<li>To install a new cluster using the <code>docker/ucp install --from-backup</code> command (preserves users and configuration)</li>
</ul>
</div>
<div id="section_33" class="mt-page-section"><span id="DTR_Backup"></span></p>
<h3 class="editable">DTR Backup</h3>
<p>A DTR backup includes configuration information, images metadata, and certificates. Images themselves need to be backed up separately directly from storage. Remember that users and organizations are managed and backed up by UCP.</p>
<p>The backup can only be used to create a new DTR, using the <code>docker/dtr restore</code> command.</p>
</div>
</div>
<div id="section_34" class="mt-page-section"><span id="Identity_Management"></span></p>
<h2 class="editable">Identity Management</h2>
<p>Accessing resources (images, containers, volumes, networks etc) and functionality within the components of DDC (UCP &amp; DTR) require at a minimum, an account and a corresponding password to be accessed. Accounts within DDC are identities stored within an internal database, but the source of creating those accounts and the associated access control can be manual (managed or internal) or external through a connection to a directory server (LDAP) or Active Directory (AD). Managing the authorization for these accounts is an extension of coarse and fine grained permissions that are described in the sections below.</p>
<div id="section_35" class="mt-page-section"><span id="Managed_(Internal)_Authentication"></span></p>
<h3 class="editable">Managed (Internal) Authentication</h3>
<p>Managed mode of authentication and authorization is the default mode in DDC. In this mode, accounts are directly created using the DDC API. User accounts can be created manually by accessing the <strong>User Management —&gt; Create User</strong> form in the UCP US. Accounts can also be created and managed in an automated fashion by making HTTP requests to the authentication and authorization RESTful service known as eNZi.</p>
<p>User management using the &#8220;Managed&#8221; mode is recommended only for demo purposes or where the number of users needing to access DDC is very small.</p>
<p>Pros:</p>
<ul>
<li>Easy and quick to setup &#8211; Simple to troubleshoot</li>
<li>Appropriate for a small set of users with static roles</li>
<li>Managed without leaving the UCP interface</li>
</ul>
<p>Cons:</p>
<ul>
<li>User Account management gets cumbersome for larger numbers or when roles need to be managed for several applications.</li>
<li>All lifecycle changes such as adding / removing permissions of users need to be accomplished manually user by user.</li>
<li>Users must be deleted manually, meaning access may not get cleaned up quickly, making the system less secure.</li>
<li>Sophisticated setups of integrating application creation and deployment through LDAP or external systems is not possible.</li>
</ul>
</div>
<div id="section_36" class="mt-page-section"><span id="LDAP_.2F_AD_Integration"></span></p>
<h3 class="editable">LDAP / AD Integration</h3>
<p>The LDAP method of user account authentication can be turned on to manage user access. As the name suggests, this mode enables automatically synchronization of user accounts from a directory server such as Active Directory or OpenLDAP.</p>
<p>This method is particularly applicable for enterprise use cases where organizations have a large set of users, typically maintained in a centralized identity store that manages both authentication and authorization. Most of these stores are based on a directory server such as Microsoft&#8217;s Active Directory or a system that supports the LDAP protocol. Additionally, such enterprises already have mature processes for on-boarding, off-boarding, and managing the lifecycle of changes to user and system accounts. All these can be leveraged to provide a seamless and efficient process of access control within DDC.</p>
<p>Pros:</p>
<ul>
<li>Ability to leverage already established access control processes to grant and revoke permissions.</li>
<li>Ability to continue managing users and permissions from a centralized system based on LDAP.</li>
<li>Increased security due to self-cleaning nature of this mode, where non-existent LDAP users are automatically removed from DDC on the next sync.</li>
<li>Ability to configure complex upstream systems such as flat files, database tables using an LDAP proxy, and the automatic time-based de-provisioning of access through AD/LDAP groups.</li>
</ul>
<p>Cons:</p>
<ul>
<li>Increased complexity compared to Managed mode</li>
<li>Higher admin requirements since knowledge on an external system (LDAP) is needed</li>
<li>Greater time needed to troubleshoot issues with an extra components (LDAP) in the mix</li>
<li>Unexpected changes to DDC due to changes made to upstream LDAP/AD systems, which can have unexpected effects on DDC</li>
</ul>
<p>A recommended best practice is to use group membership to control access of users accounts to resources. Ideally, the management of such group membership is achieved through a centralized Identity Management or a Role Based Access Control system. This provides a standard, flexible, and scalable model to control the authentication and authorization rules within DDC through a centralized directory server. Through the Identity Management system, this directory server is kept in sync with user on-boarding, off-boarding, and changes in roles and responsibilities.</p>
<p>To change the mode of authentication, use the form at <strong>Admin Settings —&gt; Auth</strong> in the UCP UI. In this form, change the <strong>METHOD</strong> field under <strong>Authentication</strong> from the default value of <strong>Managed</strong> to <strong>LDAP</strong>.</p>
<p>Accounts that are discovered and subsequently synced from the directory server can be automatically assigned default permissions. It is recommended to leave the option for default permission to <strong>No Access</strong> Any necessary additional access can be granted based on group memberships.</p>
<p><img decoding="async" class="internal" src="https://success.docker.com/@api/deki/files/359/LDAP-configuration.png?revision=2" alt="Auth Configuration - LDAP" /></p>
<p>For details about the LDAP configuration options, read the Integrate with LDAP documentation.</p>
<p>This section highlights important configuration options to consider when setting up LDAP authentication.</p>
<p>In LDAP auth mode, when accounts are discovered and subsequently imported, all previously created accounts in a Managed mode including the admin accounts are deleted. A new admin account is created when authentication is switched to LDAP. This admin account is a local account and is intended to be useable independent of the LDAP settings (for example, in a situation when there is a loss of connectivity to the directory server). The details of this admin account can be set during the sync using <strong>RECOVERY ADMIN USERNAME</strong> and <strong>RECOVERY ADMIN PASSWORD</strong>.</p>
<p>A user account on the directory server has to be configured to discover and import accounts from the directory server. This user account need not be a very powerful account. In fact, it is recommended that it is a read-only account that can view the necessary organizationalUnits (<code>ou</code>) and query for group memberships. The details for this account are configured using the fields <strong>READER DN</strong> and <strong>READER PASSWORD</strong>. The <strong>READER DN</strong> must be in the distinguishedName format.</p>
<p>Use secure LDAP if at all possible.</p>
<p>Use the Test LDAP Connection section to make sure you can connect before switching to LDAP authentication.</p>
<p>Once the form is filled out and the test connection succeeds, the sync button provides an option to run a sync immediately without waiting for the next interval. Doing so initiates an LDAP connection and runs the filters to import the users. Any previously logged in user is logged out due to the disablement of all pre-existing accounts.</p>
<p><img decoding="async" class="internal" src="https://success.docker.com/@api/deki/files/360/LDAP-mode-deactivate-accounts.png?revision=2" alt="LDAP mode - Deactivate all existing accounts" /></p>
<p>After the sync is complete, it should be possible to log in using the recovery account and password. Be sure to test this recovery account. It should also be possible to log in using a sync-ed LDAP/AD account (the only supported attributes are <code>uid</code> and <code>sAMAccountName</code>) and its corresponding LDAP/AD password. The sync-ed account should be in good standing within the LDAP/AD system for the login to be successful within DDC.</p>
<p>The progress / status of the sync and any errors that occur can be viewed and analyzed on the controllers by running:</p>
<pre><code>docker logs ucp-controller
</code></pre>
</div>
<div id="section_37" class="mt-page-section"><span id="Teams"></span></p>
<h3 class="editable">Teams</h3>
<p>User accounts that exist within DDC, either through an LDAP sync or manually managed, can be organized into teams. Each team created can be assigned customized permissions and managed as a group of users as opposed to granting permissions to each user account on an individual basis.</p>
<p>Teams can be created in the UCP UI using the <strong>TEAMS +Create</strong> interface under <strong>User Management</strong>. The same can be accomplished by using the eNZi API that is described in a later section. Members can be added to the team one-by-one. An alternative method of adding members to a team can be employed if using the LDAP Auth mode. This is based on an automatic sync of discovered accounts from the directory server that was configured to enable the LDAP Auth mode. Finer filters can be applied here which determine which discovered accounts are placed into which teams. A team can have multiple users, and a user can be a member of zero to multiple teams.</p>
</div>
<div id="section_38" class="mt-page-section"><span id="RBAC_and_Managing_Team_Level_Access_to_Resources"></span></p>
<h3 class="editable">RBAC and Managing Team Level Access to Resources</h3>
<p>Permissions to resources through UCP are managed through default access levels. The default access permissions are <code>No Access</code>, <code>View Only</code>, <code>Restricted Control</code> and <code>Full Control</code>. Description about these permissions and how they relate to each other are detailed in the Reference Architecture Securing Docker Datacenter and Security Best Practices. These permissions can be further extended by adding the user accounts to specific teams. In other words, the default permissions assigned directly to a user provide a coarse-grained access control. The user should then be added to teams to attain higher granularity in what a user account can do on specific containers, images, and other resources. The teams are assigned attributes in the form of labels that provide additional flexibility through a fine-grained access control. In some ways this mimics a traditional Role Based Access Control (RBAC), where the teams are the roles assigned to user accounts, but there are specks of the finer Attribute Based Access Control (ABAC) through the assignment of one of more labels to each team, which ultimately define the level of access of the account to UCP resources.</p>
<p>While teams can be associated with as many labels as necessary, the resources within UCP like <code>services</code>, <code>images</code>, <code>volumes</code>, <code>networks</code>, and <code>secrets</code> can also be associated with any one of these labels to tie the two together. It should be noted that any labels assigned to a service are automatically inherited by the tasks which currently are container workloads. So this behaves in just the same way as assigning meta information in the form of labels to containers (or any other resource for that matter). Internally, the resources are assigned a label with the key <code>com.docker.ucp.access.label</code> with the value as specified.</p>
<p>It would be easier to understand with a concrete example as described in the following section.</p>
</div>
<div id="section_39" class="mt-page-section"><span id="Strategy_for_Using_LDAP_Filters"></span></p>
<h3 class="editable">Strategy for Using LDAP Filters</h3>
<p>This section demonstrates a typical use case that uses the principles of &#8220;least privilege / permission&#8221; as well as &#8220;separation of duties.&#8221;</p>
<p>Suppose you have a simple application called <code>www</code>, which is a web server based on the <code>nginx</code> official image. Say there are three teams that need access to this application — <code>developers</code>, <code>testers</code>, and <code>operations</code>. Typically, <code>testers</code> need <code>View Only</code> access and nothing further, while the <code>operations</code> team usually needs <code>Full Control</code>. The <code>developers</code> team needs access to troubleshoot, restart, and control the lifecycle of the application but should be forbidden from any other activity involving the need to access the host file systems, or starting up privileged containers. This type of special access is termed <code>Restricted Control</code>.</p>
<p>The users needing to access UCP are all sourced from the corporate Directory Server system. These users are the admin users needed to manage DDC infrastructure as well as all members of each of the teams configured within UCP. Also assume that the total universe of users needing access to DDC (includes admins, developers, testers and operations) is a subset of the gamut of users within the Directory Server.</p>
<p>A recommended strategy to use when organizing the DDC users is to create an overarching membership group that identifies all users of DDC irrespective of which team they are a part of. Let us call this group <code>DDC_Users</code>. No user should be made a member of this group directly. Instead, the <code>DDC_Users</code> group should have other groups in it and only groups as its members. Per our example, let us call these groups <code>dev</code>, <code>test</code>, and <code>ops</code>. In our example, these groups are part of what is known as a <em>nested group</em> structure within the directory server. Nested groups allow the inheritance of permissions from one group to each of its sub-groups.</p>
<blockquote><p>**NOTE:** Some directory servers do not support the feature of nested groups or even the `memberOf` attribute by default. If so, then they would need to be enabled. If the choice of directory server does not support these features at all, then alternate means of organizing users and querying them should be used. Microsoft Active Directory supports both these features out of the box.</p></blockquote>
<p>User accounts should be added as members of these sub-groups in the directory server. This should not impact any existing layout in the organization units or pre-existing group membership for these users.</p>
<p>Within UCP, the first step is to enable the LDAP Auth mode. Under <strong>User Search Configurations</strong>, for the <strong>FILTER</strong> field, the value based on our example above should be <code>(&amp;(objectClass=person)(memberOf=cn=DDC_Users,ou=groups,dc=example,dc=com))</code>.</p>
<p>Performing a sync with this setting discovers and import all users that are members of the group <code>DDC_Users</code> (through the nested sub-groups).</p>
<p>Next, using the <strong>TEAMS +Create</strong> link under <strong>User Management</strong>, the individual teams can be created. An example of creating the <code>developers</code> team is shown below. The value of the <strong>Group DN</strong> field reflects the sub-group created under <code>DDC_Users</code> called <code>dev</code>.</p>
<p><img decoding="async" class="internal" src="https://success.docker.com/@api/deki/files/361/developer-team-creation.png?revision=2" alt="Developers team creation" /></p>
<p>After the team is created, bring up the <strong>Add Label</strong> form by clicking on the <strong>PERMISSIONS</strong> link. Here, as many permissions as needed can be added. In the image below, two labels are added to denote that members of the <code>developers</code> team have <code>View Only</code> access to any resource labeled as <code>production</code>. An additional label grants the members of the <code>developers</code> team <code>Full Control</code> on resources labeled as <code>development</code>.</p>
<p><img decoding="async" class="internal" src="https://success.docker.com/@api/deki/files/362/developer-team-permissions.png?revision=2" alt="Developers permissions" /></p>
<p>Similarly, the <code>testers</code> and <code>operations</code> teams are created and assigned permissions per the table below:</p>
<table>
<thead>
<tr>
<th>Team</th>
<th>Group</th>
<th>Permissions</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>testers</code></td>
<td><code>cn=test,ou=groups,dc=example,dc=com</code></td>
<td><code>production</code>: <code>No Access</code></td>
</tr>
<tr>
<td></td>
<td></td>
<td><code>development</code>: <code>View Only</code></td>
</tr>
<tr>
<td><code>operations</code></td>
<td><code>cn=ops,ou=groups,dc=example,dc=com</code></td>
<td><code>production</code>: <code>Full Control</code></td>
</tr>
<tr>
<td></td>
<td></td>
<td><code>development</code>: <code>Full Control</code></td>
</tr>
</tbody>
</table>
<p>Now, you can create the service <code>www</code> and assign it the appropriate <code>access label</code> to allow only specific users access to the resource using a command like below:</p>
<pre><code>docker service create --name www -p 80:80 --label com.docker.ucp.access.label=development nginx
</code></pre>
<p>The same can be done in the UCP UI while creating a service by selecting an appropriate label (<code>development</code> in this example) from the <strong>PERMISSIONS LABEL</strong> dropdown as shown below. The label is applied to the service for enforcing role-based access control.</p>
<p><img decoding="async" class="internal" src="https://success.docker.com/@api/deki/files/363/service-create-permissions-label.png?revision=2" alt="Service create - Permissions Labels" /></p>
<p>Only those labels that the logged in user has access to shows up in the dropdown. An admin user or a user assigned <code>Full Control</code> permission is shown all available labels regardless of the labels assigned to the team of which the user is a member of.</p>
<p>Now, create another service <code>www-prod</code> similarly based on the <code>nginx</code> image but with the <strong>Permission Label</strong> of <code>production</code> applied to it while logged in as a user <code>boyle</code> who is a member of the developers team. His permissions look as follows:</p>
<p><img decoding="async" class="internal" src="https://success.docker.com/@api/deki/files/364/developers-member-profile.png?revision=3" alt="Developers - boyle profile" /></p>
<p>The account <code>boyle</code> can see both services, <code>www</code> and <code>www-prod</code>, but only the <code>www</code> service allows edits and other control because the permission label of <code>development</code> matches with the team&#8217;s resource label of <code>development</code> granted with <code>Full Control</code> permissions. The <code>www-prod</code> service forbids any edits using the account <code>boyle</code> because it has a permission label of <code>production</code>, which has been marked as <code>View Only</code> in the team <code>developers'</code> resource label. For example, if the account <code>boyle</code> was used to scale up the number of replicas of each service, from 1 to 2 (for instance), an error of <code>Access Denied</code> would be thrown for the <code>www-prod</code> service, while the same would work for <code>www</code> service.</p>
<p>Further, as evident in the profile image, <code>boyle</code> has <code>Default Permissions</code> of <code>No Access</code>. This prevents the <code>boyle</code> account from accessing any other resource unless the permission label and team resource label match and provide explicit permissions that override the <code>No Access</code> default permission.</p>
<p>Finally, if and when it becomes necessary to terminate all access for any user account, removing the group membership of the account from just the one group <code>DDC_Users</code> would remove all access for the user. Due to the nature of how nested groups work, all additional access within DDC is automatically cleaned — the user account is removed from any and all team memberships at the time of the next sync without need for manual intervention or additional steps. This step can be integrated into a standard on-boarding / off-boarding automated provisioning step within a corporate Identity Management system.</p>
</div>
<div id="section_40" class="mt-page-section"><span id="Authentication_API_(eNZi)"></span></p>
<h3 class="editable">Authentication API (eNZi)</h3>
<p>The AuthN API or eNZi (as it is known internally and pronounced N-Z) is a centralized authentication and authorization service and framework for DDC. This API is completely integrated and configured into DDC and works seamlessly with UCP as well as DTR. This is the component and service under the hood that manages accounts, teams and organizations, user sessions, permissions and access control through labels, Single-Sign-On (Web SSO) through OpenID Connect, and synchronization of account details from an external LDAP-based system into DDC.</p>
<p>For regular day-to-day activities, users and operators need not be concerned with the AuthN API and how it works, however its features can be leveraged to automate many common functions and/or bypass the DDC UI altogether to manage and manipulate the data directly.</p>
<p>The RESTFul AuthN API endpoints are documented in the AuthN API.</p>
<p>Interaction with AuthN can be accomplished in two ways: via the exposed RESTful AuthN API over HTTP or via the <code>enzi</code> command.</p>
<p>For example, the command below uses <code>curl</code> and <code>jq</code> to fetch all user accounts in <a href="http://www.scmgalaxy.com/courses/agenda/virtulization-and-container-tools/docker-training.html">DDC</a> via the AuthN API over HTTP:</p>
<pre><code>curl --silent --insecure --header "Authorization: Bearer $(curl --silent --insecure \
     --data '{"username":"&lt;admin-username&gt;","password":"&lt;admin-password&gt;"}' \
    https://&lt;UCP-domain-name&gt;/auth/login | jq --raw-output .auth_token)" \
    https://&lt;UCP-domain-name&gt;/enzi/v0/accounts | jq .
</code></pre>
<p>The AuthN service can also be invoked on the CLI on a UCP controller. To connect into it, run the following on a UCP controller:</p>
<pre><code>docker exec -it ucp-auth-api sh
</code></pre>
<p>At the resulting prompt (<code>#</code>), type the <code>enzi</code> command with a sub-command such as the one below to list the database table status:</p>
<pre><code>enzi db-status
</code></pre>
</div>
</div>
<h3 class="editable"></h3>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/docker-reference-architecture-docker-datacenter-best-practices-and-design-considerations/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>What Is the Point of Hybrid Cloud? Is It Time to Re-Evaluate?</title>
		<link>https://www.bestdevops.com/what-is-the-point-of-hybrid-cloud-or-is-it-time-to-re-evaluate-hybrid/</link>
					<comments>https://www.bestdevops.com/what-is-the-point-of-hybrid-cloud-or-is-it-time-to-re-evaluate-hybrid/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Thu, 16 Feb 2017 05:02:31 +0000</pubDate>
				<category><![CDATA[Cloud Computing]]></category>
		<category><![CDATA[DevOps]]></category>
		<category><![CDATA[Cloud Adoption]]></category>
		<category><![CDATA[Cloud computing]]></category>
		<category><![CDATA[Containers]]></category>
		<category><![CDATA[Environments]]></category>
		<category><![CDATA[Hybrid Cloud]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=667</guid>

					<description><![CDATA[Hybrid cloud once promised the best of both worlds — on-premises security with cloud-scale elasticity. But did it deliver? We examine the original promise, the real-world failures, and whether a maturing DevOps and container landscape changes the calculus.]]></description>
										<content:encoded><![CDATA[
<p class="wp-block-paragraph"><em>This article is based on an opinion piece originally published on cloudcomputing-news.net in 2017. The perspectives reflect the cloud adoption debates of that era, though many of the structural arguments remain relevant today.</em></p>



<h2 class="wp-block-heading">The Original Promise of Hybrid Cloud</h2>



<p class="wp-block-paragraph">For several years, hybrid cloud generated significant enthusiasm in enterprise IT circles. The concept was straightforward: run mission-critical, sensitive applications on-premises where security and control were tightest, then &#8220;burst&#8221; into a public cloud provider when additional capacity was needed. On paper, this offered the governance of private infrastructure with the elasticity of a commodity cloud service.</p>



<p class="wp-block-paragraph">In practice, widespread adoption ran into serious obstacles. Two problems dominated: <strong>network latency</strong> between on-premises and cloud stacks degraded application performance, and the <strong>operational complexity</strong> of orchestrating heterogeneous platforms — different APIs, toolchains, networking models, and security policies — proved far harder to manage than vendors had suggested.</p>



<h2 class="wp-block-heading">Does a DevOps and Container-First World Change Anything?</h2>



<p class="wp-block-paragraph">As container runtimes and orchestration platforms (such as Kubernetes) became mainstream, the abstraction layer between environments improved substantially. Containers package an application and its dependencies together, making it theoretically easier to run the same workload on-premises or in a public cloud without re-architecting it. This directly addresses one of the classic hybrid pain points: environment inconsistency.</p>



<p class="wp-block-paragraph">Similarly, a mature <a href="http://www.scmgalaxy.com/courses/agenda/devops/devops-training-course-online.html">DevOps</a> culture — with infrastructure-as-code, CI/CD pipelines, and unified observability tooling — reduces some of the operational friction that plagued early hybrid deployments. So the technical barriers have genuinely lowered. Yet the author of the original piece, and many practitioners since, argue that these improvements do not make hybrid a <em>destination</em>; they simply make the <em>transition to full cloud adoption</em> less painful.</p>



<h2 class="wp-block-heading">Five Reasons Hybrid Cloud&#8217;s Days May Be Numbered</h2>



<h3 class="wp-block-heading">1. Hybrid Was Partly a Vendor-Driven Narrative</h3>



<p class="wp-block-paragraph">Critics argue that the loudest early advocates of hybrid cloud were hardware manufacturers, network equipment vendors, and storage companies — organisations whose revenue depended on enterprises continuing to purchase and refresh physical infrastructure. The hybrid framing allowed them to position on-premises kit as a complement to cloud rather than a liability to be retired. As the ROI of running your own hardware estate has eroded, the vendor motivation behind some of that messaging has become clearer.</p>



<h3 class="wp-block-heading">2. Hybrid Adds Complexity, Not Simplicity</h3>



<p class="wp-block-paragraph">One of the foundational benefits organisations seek from cloud adoption is operational simplicity: fewer data centres to manage, standardised APIs, and commodity billing that aligns cost with actual consumption. Hybrid environments undercut this promise. Teams must:</p>



<ul class="wp-block-list">
<li>Test applications across multiple environments with potentially different toolchains.</li>
<li>Maintain separate cost models and billing processes for on-premises and cloud spend.</li>
<li>Build and retain staff skilled across both worlds, which increases hiring and training costs.</li>
<li>Manage inter-environment networking, security policies, and identity federation simultaneously.</li>
</ul>



<p class="wp-block-paragraph">Each of these adds overhead. For most organisations, this overhead is only justifiable as a temporary state.</p>



<h3 class="wp-block-heading">3. Hybrid Is a Migration Phase, Not a Long-Term Strategy</h3>



<p class="wp-block-paragraph">Many enterprises running hybrid environments today are not doing so by choice as a permanent architecture — they are mid-migration. Legacy systems that cannot be refactored immediately remain on-premises while newer workloads move to the cloud. The on-premises footprint is being &#8220;sweated&#8221; until its useful life expires or until re-platforming becomes feasible. Calling this hybrid is technically accurate, but it is a transitional state rather than a strategic destination.</p>



<h3 class="wp-block-heading">4. Cloud Security Has Matured Significantly</h3>



<p class="wp-block-paragraph">In the early days of public cloud adoption, security was the most commonly cited reason for keeping workloads on-premises. That argument has become harder to sustain. Major cloud providers invest heavily in compliance certifications, encryption at rest and in transit, identity and access management tooling, and dedicated security services. Highly regulated sectors — financial services, healthcare, government — have increasingly moved sensitive workloads to certified cloud environments. The security argument for mandatory on-premises hosting applies to a narrower set of use cases than it once did.</p>



<h3 class="wp-block-heading">5. The Risk of Standing Still Now Outweighs the Risk of Moving</h3>



<p class="wp-block-paragraph">For many years, technology leaders could reasonably argue that the risk of a large, complex cloud migration outweighed the risk of deferring it. That calculus has shifted. Businesses face competitive pressure to iterate faster, and business units that cannot get infrastructure provisioned quickly enough will find ways to acquire it themselves — creating ungoverned &#8220;shadow IT&#8221; that is harder to secure and audit. IT departments that do not lead the cloud journey risk losing influence over it entirely.</p>



<h2 class="wp-block-heading">What About Vendor Hybrid Offerings?</h2>



<p class="wp-block-paragraph">At the time the original article was written (early 2017), offerings such as Azure Stack and VMware Cloud on AWS were either not yet available or in very early stages. The author was sceptical that they would fundamentally change the calculus, arguing that owning hardware remains an outdated capital investment: unlike real property, IT infrastructure depreciates rapidly and does not benefit from the economies of scale that a hyperscaler can achieve.</p>



<p class="wp-block-paragraph">Since 2017, those products have shipped and matured, and a genuine market has developed around them — particularly for edge computing, data sovereignty requirements, and latency-sensitive workloads. This is one area where the original argument merits updating: there are legitimate architectural reasons to run cloud-managed infrastructure on-premises in specific contexts. However, these remain specialised scenarios, not a general-purpose argument for maintaining a large private hardware estate.</p>



<h2 class="wp-block-heading">The Bigger Picture: Cloud as Business Modernisation</h2>



<p class="wp-block-paragraph">The organisations making the most decisive moves to cloud are not primarily driven by cost savings alone, though those are real. The deeper motivation is <strong>business agility</strong>: the ability to scale capacity on demand, adopt new managed services without infrastructure procurement cycles, and respond to market disruption faster than competitors locked into multi-year hardware refresh cycles.</p>



<p class="wp-block-paragraph">When you consider the engineering investment the largest cloud providers make in their infrastructure, networking, and managed service portfolios, very few organisations can replicate that capability internally at comparable cost and quality. Infrastructure is rarely a core business differentiator — and treating it as a commodity, procured and consumed as needed, frees engineering teams to focus on what actually differentiates the product.</p>



<h2 class="wp-block-heading">Key Takeaways</h2>



<ul class="wp-block-list">
<li><strong>Hybrid cloud was a genuine engineering concept</strong> that addressed real concerns about latency, security, and control — but execution proved difficult at scale.</li>
<li><strong>Containers and DevOps tooling have reduced</strong> environment inconsistency, making hybrid architectures easier to operate technically, but this does not make hybrid a permanent destination for most organisations.</li>
<li><strong>For most enterprises, hybrid represents a transitional phase</strong> during migration to a cloud-first or cloud-only model, not a long-term infrastructure strategy.</li>
<li><strong>Genuine hybrid use cases exist</strong> — edge computing, data residency compliance, ultra-low latency requirements — but they are narrower than the broad hybrid narrative once suggested.</li>
<li><strong>The competitive and governance risks of delaying cloud adoption</strong> now often outweigh the risks of executing a migration project.</li>
</ul>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/what-is-the-point-of-hybrid-cloud-or-is-it-time-to-re-evaluate-hybrid/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>Turn Your DevOps Volume Up to 11: Seizing the Full Business Opportunity</title>
		<link>https://www.bestdevops.com/turn-your-devops-volume-up-to-11-and-seize-the-business-opportunity/</link>
					<comments>https://www.bestdevops.com/turn-your-devops-volume-up-to-11-and-seize-the-business-opportunity/#respond</comments>
		
		<dc:creator><![CDATA[anil]]></dc:creator>
		<pubDate>Thu, 19 Jan 2017 05:29:54 +0000</pubDate>
				<category><![CDATA[DevOps]]></category>
		<category><![CDATA[DevOps Best Practices]]></category>
		<category><![CDATA[Test Driven DevOps]]></category>
		<category><![CDATA[Business]]></category>
		<category><![CDATA[DevOps practices]]></category>
		<category><![CDATA[Digital]]></category>
		<category><![CDATA[Infrastructure]]></category>
		<guid isPermaLink="false">http://www.bestdevops.com/?p=387</guid>

					<description><![CDATA[Velocity alone won't win in DevOps. Learn 11 practical toolchain integrations that let you crank up quality, resilience, compliance, and release speed — all at once.]]></description>
										<content:encoded><![CDATA[
<p class="wp-block-paragraph"><em>Originally sourced from cloudcomputing-news.net (January 2017). Expanded and updated for a DevOps engineering audience.</em></p>



<h2 class="wp-block-heading">Why &#8220;Going to 11&#8221; Is the Wrong Goal — Unless You Do It Right</h2>



<p class="wp-block-paragraph">&#8220;These go to 11.&#8221; The immortal line from the 1984 mockumentary <em>This Is Spinal Tap</em>, where fictional guitarist Nigel Tufnel proudly reveals that his amplifier&#8217;s volume dial goes one notch beyond the standard maximum. It&#8217;s absurd — and that&#8217;s exactly the point.</p>



<p class="wp-block-paragraph">Applied to DevOps, the metaphor holds up surprisingly well. Continuous delivery pipelines make it technically possible to crank deployment frequency to seemingly absurd levels: hundreds of releases per day, every code commit pushed straight to production. But raw deployment volume — like a volume dial cranked to 11 — is meaningless if the signal is distorted. Speed without quality, resilience, or compliance is just noise.</p>



<p class="wp-block-paragraph">Mature DevOps practitioners understand this intuitively. The real goal is to push <em>every</em> dimension of software delivery to its maximum simultaneously: deployment frequency, application quality, test coverage, observability, compliance, and supportability. That requires more than a fast pipeline — it requires deeply integrated toolchains that make quality a built-in property of every release, not an afterthought.</p>



<h2 class="wp-block-heading">11 Toolchain Integrations That Amplify DevOps Across Every Dimension</h2>



<p class="wp-block-paragraph">The following integrations address the cross-functional collaboration and automation that separate high-performing DevOps teams from those that simply deploy frequently. Consider them a starting checklist, not an exhaustive list.</p>



<h3 class="wp-block-heading">1. Auto-Generate Test Cases From Agile User Stories</h3>



<p class="wp-block-paragraph">Connect your agile planning tool to your test management platform so that user stories automatically produce the minimum viable set of test cases covering 100% of the described functionality. Each test case should link to the correct test data and expected outcomes, reducing manual translation effort and the risk of untested acceptance criteria slipping into production.</p>



<h3 class="wp-block-heading">2. Real-Time Release Content Dashboards</h3>



<p class="wp-block-paragraph">Give every stakeholder — dev, QA, ops, and business — a unified, live view of what is in each release: which user stories, features, bug fixes, and dependencies are moving through the pipeline and at what stage. A shared dashboard reduces the coordination overhead that typically kills release velocity and helps teams reconcile cross-application dependencies before they become production incidents.</p>



<h3 class="wp-block-heading">3. Environment-Aware Test Data Attachment</h3>



<p class="wp-block-paragraph">Automatically attach test data criteria to test cases at the point of creation in your agile planning tool. As a feature is promoted from development to test to pre-production, the test execution engine should automatically resolve and use data that already exists in the target environment — eliminating the classic &#8220;works on my machine&#8221; failure mode caused by mismatched data sets.</p>



<h3 class="wp-block-heading">4. APM-Gated Continuous Integration Builds</h3>



<p class="wp-block-paragraph">Integrate Application Performance Management (APM) directly into your CI system so that every build is evaluated against defined pass/fail performance thresholds — not just functional test results. Developers should be able to trigger this check from within the tools they already use (such as the Jenkins dashboard) and be linked directly to the relevant APM data when a build fails, shortening the feedback loop from hours to minutes.</p>



<h3 class="wp-block-heading">5. Service Virtualization With Integrated Test Data Management</h3>



<p class="wp-block-paragraph">Use service virtualization to simulate downstream services and APIs that are unavailable, unstable, or cost-prohibitive to use in test environments. Combine this with a test data management layer that injects referentially correct, compliant data into those virtual services. This combination dramatically increases test environment availability and fidelity while reducing the compliance risk associated with using real production data in non-production environments.</p>



<h3 class="wp-block-heading">6. Automated Test Data Generation and Reservation in Deployment Workflows</h3>



<p class="wp-block-paragraph">Embed test data provisioning directly into your deployment pipeline. Rather than requiring testers to manually request and configure data before a test run, each deployment workflow should automatically generate, reserve, and assign the necessary test data sets. This removes a common bottleneck that inflates cycle time between code completion and validated release.</p>



<h3 class="wp-block-heading">7. Automated Test Execution Tied to Go/No-Go Promotion Gates</h3>



<p class="wp-block-paragraph">Automatically trigger the appropriate test suites when a build reaches a new pipeline stage and feed the results back into the release management system. Define promotion rules — pass rates, severity thresholds, coverage minimums — so that promotion to the next environment happens automatically when criteria are met and is blocked when they are not. This removes human latency from routine promotion decisions without sacrificing quality control.</p>



<h3 class="wp-block-heading">8. Virtual Environment Provisioning Within Deployment Workflows</h3>



<p class="wp-block-paragraph">Provision virtual services and spin up complete virtual test environments as a native step in the deployment pipeline, rather than requiring separate infrastructure requests. Teams no longer need to wait for physical or cloud environments to be built, configured, and stabilised before testing can begin. This is particularly impactful for integration and system testing stages, which traditionally carry the longest environment lead times.</p>



<h3 class="wp-block-heading">9. APM Deployment as Part of the Release Workflow</h3>



<p class="wp-block-paragraph">Treat APM instrumentation and configuration as a first-class deployment artifact. When an application is deployed, APM agents and dashboards should be automatically configured alongside it, with baseline performance metrics captured immediately before and after the release event. This gives operations teams a clean before/after comparison for every deployment rather than discovering regressions during incidents.</p>



<h3 class="wp-block-heading">10. API Management Integrated With APM for Business Transaction Tracing</h3>



<p class="wp-block-paragraph">Combine API gateway telemetry with APM data to gain end-to-end visibility into how specific APIs affect application performance and customer experience. The integration should support proactive alerting on emerging performance degradation and the ability to trace the full interaction chain of APIs involved in a specific business transaction — not just individual service health checks in isolation.</p>



<h3 class="wp-block-heading">11. Load Test Scenarios Embedded in APM Business Analysis</h3>



<p class="wp-block-paragraph">Allow APM users to incorporate load test results — including throughput, response time distributions, and error rates under synthetic load — directly into their performance dashboards and business analysis workflows. This connects synthetic performance data with real-world APM metrics, enabling earlier detection of capacity and scalability issues before they manifest under production traffic.</p>



<h2 class="wp-block-heading">The Underlying Principle: Data, Metrics, and Context Flow Across the Whole Pipeline</h2>



<p class="wp-block-paragraph">What these 11 integrations share is a common architectural principle: the right data and context must be available to the right person in the right tool at the right moment in the pipeline. A test result is only actionable if a developer can see it in their CI dashboard. An APM alert is only useful if it&#8217;s tied to a specific deployment event. A go/no-go gate only works if the criteria are grounded in business requirements, not just technical thresholds.</p>



<p class="wp-block-paragraph">When toolchains are integrated with this level of intentionality, no individual discipline — development, testing, or operations — becomes a bottleneck. Each function operates with full context, and the pipeline as a whole moves with purpose rather than lurching from handoff to handoff.</p>



<h2 class="wp-block-heading">Start With the Integrations That Address Your Biggest Constraint</h2>



<p class="wp-block-paragraph">Not every team needs all 11 integrations immediately, and implementing them all at once without a clear value hypothesis is a recipe for a slow, expensive toolchain project that never ships. A more pragmatic approach:</p>



<ul class="wp-block-list">
<li>Identify where your pipeline currently loses the most time or quality signal.</li>
<li>Pick the one or two integrations from this list that directly address that constraint.</li>
<li>Instrument the before/after: measure cycle time, defect escape rate, or mean time to restore before and after implementing the integration.</li>
<li>Use those results to justify and prioritise the next integration.</li>
</ul>



<p class="wp-block-paragraph">DevOps maturity is incremental. The teams that sustain the highest deployment frequencies with the lowest failure rates didn&#8217;t build their toolchains overnight. They built them deliberately, one well-justified integration at a time — and they measured the outcome of each one.</p>



<p class="wp-block-paragraph">So go ahead: crank every dial to 11. Just make sure every dial is wired up correctly first.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://www.bestdevops.com/turn-your-devops-volume-up-to-11-and-seize-the-business-opportunity/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
	</channel>
</rss>
