小程序
传感搜
传感圈

Infrastructure as Code: Challenges and How to Deal With Them

2022-09-02
关注

Illustration: © IoT For All

In the early stages of technology, human intervention was the only means to manage computer infrastructure. It wasn’t a concern since development cycles were extensive and infrastructure upgrades were not common throughout the software development life cycle. Virtualization, cloud computing, DevOps, and an agile methodology eventually resulted in much shorter software development cycles. Consequently, there was an increase in demand for more effective infrastructure management strategies. When it came to deploying servers, businesses simply could not afford to wait for a long duration.

Infrastructure as code (IaC) is a method of optimizing infrastructure management and deployment time. With IaC, you can develop and configure infrastructure components in seconds using a collection of tools, languages, protocols, and procedures. 

'Infrastructure as Code is a method of automating infrastructure based on software development methodologies.' -Mariusz MichalowskiClick To Tweet

Understanding Infrastructure as Code

Infrastructure as code is a method of automating infrastructure based on software development methodologies. Consistent, repeatable procedures for provisioning and modifying systems and their configuration are essential to this methodology. Unattended processes, including full validation, are used to make definition changes and subsequently roll them out to systems.

The idea is that current tools can handle infrastructures like software and data. It enables professionals to manage infrastructure using software development tools, including version control systems (VCS), automated testing libraries, and deployment orchestration. It also allows you to make use of development techniques like test-driven development (TDD), continuous integration (CI), and continuous delivery (CD).

The viability of infrastructure as code has been shown under the toughest of conditions. IT systems are not only business core; they are the business for firms like Amazon, Netflix, Google, PayPal, and eBay. There is no room for downtime. Every day, PayPal’s systems process millions of dollars in transactions. Therefore, it should be no surprise that these firms are pioneering new approaches for large-scale, highly dependable IT infrastructure. 

Why Use IaC?

The typical engineering organization’s infrastructure footprint grew substantially when several smaller ones overtook a few large machines. When Ops suddenly had to deal with a lot more infrastructure, this infrastructure was often cyclical in its maintenance. It’s possible to increase capacity during peak hours and then reduce it at night to save money. There is no longer a need to own a depreciating machine. Therefore, it made logical sense to use just the infrastructure required to maximize the benefits of a cloud-based system. 

Virtualization, cloud computing, containers, server orchestration, and networking software applications are supposed to make IT operations more straightforward. Provisioning, configuring, updating, and maintaining services should require less time and effort. Problems must be promptly identified and rectified. IT personnel must spend minimal time on everyday chores and more time making innovations and upgrades to empower their businesses in adapting to the ever-changing challenges of the modern age. 

Key Challenges of IaC

Despite its adaptability and advantages, IaC presents certain challenges such as the following:

#1: Adoption Discrepancies

One of the significant challenges companies have when implementing IaC is correctly merging new frameworks with existing technology. In declarative and imperative approaches with tools like Terraform and AWS Cloudformation, transforming complex and interrelated objects and their dependencies into code isn’t always easy. Adopting IaC requires time, careful preparation, and coordination with other teams, notably those responsible for security and compliance. As your IaC adoption progresses, you may find yourself struggling to figure out where and how your resources are being delivered, controlled, and managed. To minimize infrastructure drift and ensure that your security tools do not fall behind, it is vital to continually communicate and audit your IaC adoption.  

#2: Security Assessment Tools

You may not be able to rely only on your current security measures in the IaC environment. The supplied resources may need human checks to ensure they are operating correctly and being utilized by the appropriate applications. If you’re using conventional security tools, it may take a lot of cycles to get them working with IaC.

Think about the fact that IaC is much more dynamic than the current provisioning and arrangement practices. It has the potential to be utilized optimally or misused much more quickly. It means that you may have to go above and beyond the call of duty in order to guarantee that you’re setting up boundaries for adequate control.  

#3: Requirement of New Human Capital

As the DevOps and infrastructure as code models demand a high degree of technical competence, some senior executives may have difficulties in the continual investment in employees and their skills. It is valid for your present staff and future hires, which may prove too expensive for the company. Even in the early adoption phases, many firms outsource IaC services. They like this choice because it allows them to get comfortable with the process, tools, and practice guidelines before implementing them. Consequently, their automation process is improved in terms of cost and the general quality of their IT infrastructure.  

#4: Versioning and Traceability

At some point, keeping track of the infrastructure and keeping an eye on things like infra-drift become more difficult because of the complexity of IaC. Traceability and versioning of settings are not as simple as they seem when IaC is utilized widely across an organization with various teams. 

#5: Risk of Error Duplication

Even though the IaC architecture and machine development processes are primarily automated, various parts of the process must be completed manually. One of those steps is generating the parent code, and there is always the risk of technical errors when there is human effort involved, even in a setting where quality assurance inspections are performed regularly and consistently. It will help if you always double-check the code that creates your IaC architecture.

IaC Adoption for Optimization

Organizations looking to automate processes and deliver products quicker are increasingly turning to infrastructure as code. Workflow optimization and automation with an enhanced development environment are necessary for speedy application development. IaC is the cornerstone for the future generation of security products and work processes, even though new trends come and go. The early friction between security and engineering may be difficult to overcome.

Still, in the long run, IaC has the potential to be a powerful catalyst for improving cloud security, especially with the adoption of specialized platforms. IaC solutions for unique IT architectures are not something that can be tackled carelessly with minimal resources or even without advice. However, as soon as you have set up your IaC infrastructure, your transformation process will start delivering results right away.

Tweet

Share

Share

Email

  • Cloud Software
  • IT and Security
  • Process Automation

  • Cloud Software
  • IT and Security
  • Process Automation

参考译文
基础设施作为代码:挑战和如何处理它们
在技术的早期阶段,人工干预是管理计算机基础设施的唯一手段。这不是一个值得关注的问题,因为开发周期是广泛的,而且在整个软件开发生命周期中,基础设施升级并不常见。虚拟化、云计算、DevOps和敏捷方法最终缩短了软件开发周期。因此,对更有效的基础设施管理战略的需求增加了。在部署服务器时,企业根本无法承受长时间的等待。基础设施代码(IaC)是一种优化基础设施管理和部署时间的方法。使用IaC,您可以使用一系列工具、语言、协议和过程在几秒钟内开发和配置基础设施组件。基础设施作为代码是一种基于软件开发方法的自动化基础设施的方法。配置和修改系统及其配置的一致的、可重复的过程对这种方法至关重要。使用无人参与流程(包括完全验证)进行定义更改,并随后将其推广到系统。其理念是,当前的工具可以处理软件和数据等基础设施。它使专业人员能够使用软件开发工具管理基础设施,包括版本控制系统(VCS)、自动化测试库和部署编制。它还允许您使用开发技术,如测试驱动开发(TDD)、持续集成(CI)和持续交付(CD)。基础设施作为代码的可行性已经在最苛刻的条件下得到了证明。IT系统不仅是业务核心;它们是亚马逊、Netflix、谷歌、贝宝和eBay等公司的业务。没有停机的余地。贝宝的系统每天处理数百万美元的交易。因此,毫不奇怪,这些公司正在为大规模的、高度可靠的it基础设施开创新方法。当几台较小的机器超过几台大型机器时,典型的工程组织的基础设施足迹大幅增长。当运维突然需要处理大量的基础设施时,这些基础设施的维护通常是周期性的。在高峰时段增加容量,然后在晚上减少容量以省钱是可能的。不再需要拥有一台贬值机器。因此,只使用所需的基础设施来最大化基于云的系统的好处是合乎逻辑的。虚拟化、云计算、容器、服务器编排和网络软件应用程序被认为可以使IT操作更加直观。配置、配置、更新和维护服务需要的时间和精力应该更少。发现问题要及时纠正。IT人员必须在日常琐事上花最少的时间,而要花更多的时间进行创新和升级,以使他们的业务能够适应现代时代不断变化的挑战。尽管IaC具有适应性和优势,但它也带来了一些挑战,例如:公司在实现IaC时面临的一个重大挑战是正确地将新框架与现有技术合并。在使用Terraform和AWS Cloudformation等工具的声明式和命令式方法中,将复杂和相关的对象及其依赖关系转换为代码并不总是那么容易。采用IaC需要时间、仔细的准备以及与其他团队的协调,尤其是那些负责安全和遵从性的团队。随着你的IaC采用的进展,你可能会发现自己很难弄清楚你的资源在哪里以及如何被交付、控制和管理。为了尽量减少基础设施的变化,并确保你的安全工具不落后,持续沟通和审查你的IaC采用情况是至关重要的。 在IaC环境中,您可能无法仅依赖于当前的安全措施。提供的资源可能需要人工检查,以确保它们正确运行并被适当的应用程序使用。如果你使用传统的安全工具,可能需要很多周期才能让它们与IaC一起工作。考虑到IaC比当前的供应和安排实践更加动态的事实。它有可能得到最佳利用或更快地滥用。这意味着你可能必须超越职责的要求,以确保你为充分的控制设置了界限。由于作为代码模型的DevOps和基础设施要求高度的技术能力,一些高管可能在持续投资员工和他们的技能方面有困难。它适用于你现在的员工和未来的雇员,这对公司来说可能太昂贵了。即使在早期采用阶段,许多公司也会外包IaC服务。他们喜欢这种选择,因为它允许他们在实现之前熟悉过程、工具和实践指南。因此,他们的自动化过程在成本和IT基础设施的总体质量方面得到了改善。在某种程度上,由于IaC的复杂性,跟踪基础设施和监视诸如infra-drift之类的东西变得更加困难。当IaC在不同团队的组织中广泛使用时,设置的可跟踪性和版本控制就不像看上去那么简单了。尽管IaC架构和机器开发过程主要是自动化的,但过程的各个部分必须手动完成。其中一个步骤是生成父代码,当涉及到人工工作时,总是存在技术错误的风险,即使在定期且一致地执行质量保证检查的环境中也是如此。如果你总是反复检查创建你的IaC架构的代码,这将会很有帮助。希望自动化过程和更快交付产品的组织越来越多地转向将基础设施作为代码。工作流优化和自动化以及增强的开发环境是快速应用程序开发的必要条件。IaC是未来一代安全产品和工作流程的基石,尽管新趋势来来去去。早期安全与工程之间的摩擦可能很难克服。尽管如此,从长远来看,IaC仍有潜力成为改善云安全的强大催化剂,特别是随着专业平台的采用。独特的IT架构的IaC解决方案不是可以用最少的资源或甚至没有建议就能轻易解决的。然而,一旦您建立了您的IaC基础设施,您的转换过程将立即开始交付结果。
您觉得本篇内容如何
评分

相关产品

EN 650 & EN 650.3 观察窗

EN 650.3 version is for use with fluids containing alcohol.

Acromag 966EN 温度信号调节器

这些模块为多达6个输入通道提供了一个独立的以太网接口。多量程输入接收来自各种传感器和设备的信号。高分辨率,低噪音,A/D转换器提供高精度和可靠性。三路隔离进一步提高了系统性能。,两种以太网协议可用。选择Ethernet Modbus TCP\/IP或Ethernet\/IP。,i2o功能仅在6通道以太网Modbus TCP\/IP模块上可用。,功能

雷克兰 EN15F 其他

品牌;雷克兰 型号; EN15F 功能;防化学 名称;防化手套

Honeywell USA CSLA2EN 电流传感器

CSLA系列感应模拟电流传感器集成了SS490系列线性霍尔效应传感器集成电路。该传感元件组装在印刷电路板安装外壳中。这种住房有四种配置。正常安装是用0.375英寸4-40螺钉和方螺母(没有提供)插入外壳或6-20自攻螺钉。所述传感器、磁通收集器和壳体的组合包括所述支架组件。这些传感器是比例测量的。

TMP Pro Distribution C012EN RF 音频麦克风

C012E射频从上到下由实心黄铜制成,非常适合于要求音质的极端环境,具有非常坚固的外壳。内置的幻像电源模块具有完全的射频保护,以防止在800 Mhz-1.2 Ghz频段工作的GSM设备的干扰。极性模式:心形频率响应:50赫兹-18千赫灵敏度:-47dB+\/-3dB@1千赫

ValueTronics DLRO200-EN 毫欧表

"The DLRO200-EN ducter ohmmeter is a dlro from Megger."

Minco AH439S1N10EN 温湿度变送器

Minco空间湿度探测器组件具有温度补偿功能,结构紧凑,重量轻。它们是为直接安装在建筑内墙上而设计的。他们的特点是集成电路传感器与稳定的聚合物元件,是由烧结不锈钢过滤器封装,加上先进的微处理器,以提供准确和可重复的测量。温度输出是可选的。,用于需要:

评论

您需要登录才可以回复|注册

提交评论

iotforall

这家伙很懒,什么描述也没留下

关注

点击进入下一篇

智能电表:在碎片化市场中走向全球

提取码
复制提取码
点击跳转至百度网盘