Looking Forward to The Development Trend of DevOps in 2020: Security (2)

Source: Internet
Author: User
Keywords devops trending emerging trends in devops future devops
Go and DevOps will prosper together
Although Go has some influence, it will have a greater impact on the DevOps community. Most DevOps tools, such as Kubernetes, Helm, Docker, etcd, Istio, etc. are written in Go. Kubernetes creator Joe Beda once wrote why Kubernetes is written in Go.

Because Go can be statically compiled into a separate binary file, it is ideal for use in environments where you cannot install or do not want to install dependencies. No need to set up the entire environment, which allows you to complete your work faster than using other programming languages.

Areas of Go development

JFrog surveyed more than 1,000 developers at the recent GopherCon conferences held in London and San Diego to better understand the Go community and the overall view of Go modules.

What did they find?

Go developers are highly invested
More than 82% of Go developers use the Go version that enables the Go module, and the number of people who now or expect to use this feature in mid-2020 has reached almost the same proportion.
Go module usage is high
Go is widely used in various industries
Choosing Go module is difficult
Also, please take a look at my other article, which discusses why Go is so suitable for DevOps.

Security will become a higher priority
In the software development life cycle, security has become more important than ever. Security has become everyone's responsibility, not just security experts.

Global DevSecOps market

Although the term DevSecOps seems to be just another popular vocabulary, it still needs to pay more attention to security. DevSecOps creates a security awareness and shared knowledge base within the organization to enhance security in the software development process. Earlier this year, the Capital One vulnerability made cloud security a topic of concern, so the focus was on protecting data in public clouds.

The disaster of Samsung Note 7 largely explains why security is so important at the beginning of the process and at every stage of the development life cycle. Experts speculate that one of the problems with Note 7 phones involves its battery management system. The system monitors the current and stops the charging process when the battery is fully charged. A fault in the system caused the battery to overcharge, become unstable, and eventually explode.

This fault repair cost Samsung nearly $17 billion. If this problem is discovered earlier, they can save a lot of money and the reputation of the brand.

To develop a strategy and method to make security in your organization a must, consider the following:

Start small and deploy security checkpoints at every stage of the development lifecycle from the beginning.
For developers, take security as part of their work and as part of their performance evaluation.
Both development and operations teams need to equate safety with quality.
Don't separate DevOps and security, and combine them thoroughly to make it a mantra for your engineering team.
Many companies will use chaos engineering principles to check the stability and reliability of the system, and check the degree of safety. Deliberately destroying the system can help you discover larger errors and ensure that hackers will not find any holes in the system. This will also help the organization find errors before the customer. The purpose of DevSecOps is to continuously make your system more robust than ever.

Open source will go beyond the border
The advantages and flexibility that open source brings to developers have attracted more and more attention. In a recent survey conducted by Synopsys, it was found that open source code is developing, and almost 70% of company organizations are contributing to or owning open source projects.

Why open source?

Open source software is very helpful for developers to improve their skills. Open source provides developers with the following channels:

Learn new techniques and effective methods to solve problems.
Collaborate on projects and gain experience.
Contributing to an open source project will create a sense of belonging, and it will make you part of a large community with the same goals and ideas.
At the recent India Open Source 2019 conference, we surveyed nearly 300 open source professionals. The following is our response when we asked why they like open source software. Customization is the fact that most people like open source software.

Why developers like open source

The latest research from CB Insights estimates that the open source services industry will exceed 17 billion U.S. dollars in 2019 and is expected to reach nearly 33 billion U.S. dollars in 2022.

Large giants such as Microsoft, Google, Intel and Facebook (they are not open source companies) are actively contributing to various projects on GitHub. Google employees contributed 5,500 contributions in 2018, many of which have helped smaller independent projects.

There is a lot of support for Google’s open source software projects, such as Kubernetes, Istio and Knative, and the demand is high. As company-sponsored projects become more popular, independent developers will continue to contribute. This shows that the giant should come forward to help the open source community develop.

For example, Microsoft’s Visual Studio Code project has more than 19,000 contributors. With the participation of thousands of developers, these technology giants benefit from free developer input and direct user feedback. This allows organizations to build better software faster. Open source technology has undoubtedly become mainstream and has a bright future.

In a speech at the recent European Linux Foundation Open Source Summit, Cheryl Hung, head of the Cloud Native Foundation ecosystem, clearly stated that large companies are working on open source projects. Especially Kubernetes, which created a huge community.

Cheryl Hung

Serverless is still a new thing, but it has a bright future
Millisecond deployment is the future trend, and many companies have made the most of the Serverless architecture. The Serverless market is expected to reach US$7.7 billion by 2021. According to RightScale's 2018 Cloud Status Report, Serverless is the fastest growing cloud service model today, with an annual growth rate of 75%, and is expected to exceed expectations in 2020.

In May 2017, Microsoft CEO Satya Nadella pointed out the potential of Serverless and its ability to change the cloud computing system.

He said: "But one thing that I think will completely change our view of logic is Serverless... Therefore, Serverless will fundamentally change not only the economic value of back-end computing, but also it will become the core of distributed computing in the future. ."

Lego's Serverless journey
Lego's Serverless journey will show you how to start with a small step and achieve great success. The disasters of Black Friday and Cyber Monday turned them to Serverless. Lego has an old system with Oracle ATG, where eight servers communicate with the same database, while SAP supports the TAX system on the back end.

The aforementioned old system participated in the annual Black Friday and Cyber Monday activities. When the system could not control the night peak, it became a disaster. As a result, a series of events occurred, in which the TAX system was shut down first, which caused SAP to go down. As a result, the entire Lego e-commerce platform was suspended for 2 hours, which caused them huge losses.

Lego's serverless journey

This incident reminded them of Serverless, why?

After the disaster, the Lego team decided to move to the cloud, have a simple API, put Lambda behind it, and then use it. This is Lego's first step towards Serverless. This also prompted them to switch to microservices architecture, and even to DevOps and automation.

The Lego team initially used only a single Lambda to calculate business tax, and now it has all used Lambda.

The whole topic is here.

Digital transformation will set an example for others
We will see that many organizations are getting rid of their comfort zones and trying new technologies. Even traditional industries such as healthcare, financial institutions, and governments will also adopt cloud native and DevOps practices to achieve digital transformation, resulting in a substantial improvement overall. Let us look at some recent interesting case studies.

How did the express delivery company FedEx find a way to achieve digital transformation? FedEx does not have enough IT professionals to use modern Cloud-Native and DevOps processes, but it does not stop there. FedEx knew about the lack of suitable skills in its engineer talent pool, so Rob Carte, chief information officer, found a solution. FedEx became a university and began to teach its engineers advanced computer skills and modern software development methods.

To do this, create a team and name it The Cloud Dojo. Dojo consists of a cross-functional team composed of professional cloud developers, security experts, and operations experts, and gathered in one location. The goal is to train the team to combine traditional engineering with modern cloud practices, including DevOps, cloud native, rewriting old applications to run in the cloud, and automation. This indigenous team called Cloud Dojo has retrained more than 2,500 software programmers.

To date, FedEx has rewritten more than 200 production-level applications for cloudification, and more than 300 applications are available. Therefore, the FedEx Cloud Dojo team won the 2019 CIO 100 award. Read the entire story and tips from Carter, FedEx’s chief information officer.

Box's road to digital transformation
A few years ago, at Box, it took six months to build a new microservice. Fast forward to today, it only takes a few days. How do they manage to speed it up? There are two key factors that make this possible:

Kubernetes technology
DevOps practice
Founded in 2005, Box is a monolithic PHP application that has grown to millions of lines of code over time. The integrity of the application led them to establish a very tightly coupled design. This prevents them from innovating at the speed they want. Errors in part of the application will cause them to roll back the entire application.

With so many engineers working on the same code base using millions of lines of code, mistakes are not uncommon. It's getting harder and harder to publish features in time, or even fix errors. Therefore, they looked for solutions and decided to adopt a microservices approach. But then they started to face other problems, which were resolved with the adoption of Kubernetes.

Please watch the full video lecture by Box Senior Engineering Manager Kunal Parmar.

Cloudy will flourish to new heights
Multi-cloud will flourish, and most enterprises have a hybrid cloud strategy. Many applications are written to run locally and non-locally, and may run in multiple public cloud environments. Google’s cloud service platform Anthos proves that multi-cloud is flexible and cost-effective for software companies.

Azure and AWS as leaders in this field will determine the future of multi-cloud.

According to the recent RightScale 2019 cloud status report, you can see that 84% of enterprises have a multi-cloud strategy.

Multi-cloud strategy

Cloudiness is highly correlated with today's growing market trends. According to a recent IDC survey called Cloud Repatriation Acceleration in a Multi-Cloud World, multi-cloud best describes today's cloud reality.
Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.