Gleanster Delphix State-of-DevOps 2015 Report (1)
1 like486 views
The document provides an overview and analysis of a survey conducted on DevOps practitioners and leaders. Some key findings include: - DevOps is generally ill-defined, though most see it as defined, its practices vary widely. - Top DevOps activities are continuous integration, testing in production, deploying to private cloud, and agile data management. - For leaders, development drives DevOps more than operations. - Systems most affected are web applications, relational databases, and real-time applications. Storage and middleware are least affected. - Top motivations for DevOps are faster software delivery, reduced bugs, and more frequent software delivery.
Gleanster Delphix State-of-DevOps 2015 Report (1)
- 1. 2015 Annual State of DevOps A GLOBAL PERSPECTIVE ON THE EVOLUTION OF DEVOPS & A BENCHMARK FOR SUCCESS
- 2. 1 Contents Introduction 1 State of DevOps 8 The State of Data in DevOps 19 The Future of DevOps 23
- 3. 2 Foreword DevOps is one of the hottest trends in IT, but it is also one of the most ill-defined trends in the market. While vendors, analysts, consultants and IT practitioners can recognize DevOps when they see it, it’s frequently defined by a collection of tools and practices that are still evolving. Indeed, if you press a DevOps practitioner for a definition of DevOps, you often hear a variety of answers centered around tools and techniques. For some people embracing DevOps is about managing IT resources with Chef, Puppet, or CFEngine, and for others it is about using tools like Jenkins to automate deployments to cloud- based infrastructure. For several of the organizations we surveyed DevOps was simply about making sure that developers and operations professionals were communicating efficiently. Some companies have dedicated staff focused on DevOps initiatives, while others think of DevOps as a philosophy rather than a job description. Clearly DevOps is a popular term in 2015, and it’s time to put a stronger definition on this movement, as well as some standardized metrics for measuring success. Gleanster Research, in collaboration with Delphix, surveyed 2,381 IT practitioners from across the globe to understand the role of DevOps, its evolving best practices, and the current and planned investments in DevOps initiatives. This comprehensive survey engaged thousands of IT professionals from North America, France, Germany, the UK and the Netherlands within companies with over 100 employees and active involvement in DevOps, software development, database administration, quality assurance, or product support. Our goal is not to provide another “me-too” definition of DevOps that is skewed to a technology solution or service offering. We seek to offer the most comprehensive deep dive on the state of DevOps and provide a standardized data-driven definition based on current best practices – a definition that reflects how the most successful organizations that have invested in DevOps approach the concept from the standpoints of people, process, and technology. With nearly every company we surveyed reporting ongoing DevOps initiatives or plans to start a DevOps initiative in the next 24 months, these findings are well overdue. Our intention with this survey is to provide a solid foundation of research on the motivations behind the DevOps movement. – What drives organizations to start DevOps initiatives? – What practices comprise DevOps? – How do organizations measure the effectiveness of DevOps in the enterprise? Existing research has focused more on DevOps as a collection of tools, techniques, and technology. Our research focuses on motivations and more practical aspects of how DevOps relates to the overall business.
- 4. 3 Overview DevOps is changing at an impressive speed, as the movement is now being influenced by a sea of vendors and conferences, all designed to champion DevOps among companies looking to adopt established best practices. As with cloud computing and other hot trends in IT, there’s a sense that DevOps means both everything and nothing. In the midst of all of this activity the IT industry often loses sight of what DevOps offers to organizations struggling with application development, production support, and infrastructure management issues. What is DevOps? What are the benefits it provides? Answering these simple questions could help to clarify and define one the fastest growing components of the IT budget. While our survey respondents report that they are investing hundreds of millions of dollars in DevOps, how they translate DevOps into investments remained very unique to each organization. Our findings showcase how the most successful “DevOps Leaders” define the concept. DevOps is about much more than collaboration and agility. “DevOps” defines the transformation IT experiences when cross-functional teams develop and deliver software across the full spectrum of IT systems. From software architecture and design, to system administration and production support, the term “DevOps” refers to a style of IT management and implementation that places an emphasis on automation and iterative delivery of software while also empowering developers to manage portions of the software delivery process that were previously inaccessible due to specialization within IT. Instead of outlining a subjective vision for DevOps, we’ve asked the leaders and the trend-setters to tell us what works and what doesn’t. A note of caution is in order: we’re seeing the “gold rush” phase for DevOps in 2015, and the DevOps hype machine is in overdrive. While this is certainly true of deployment automation, continuous integration, and data management products, the same cannot be said of issue trackers, ITIL-based service management tools, and other systems that predated the emergence of DevOps as a movement in 2009.
- 5. 5 Survey Demographics In Q2 2015, Gleanster Research (in collaboration with Delphix) conducted an extensive online survey spanning 2,381 IT practitioners from across the globe to understand DevOps best practices and success metrics. A GLOBAL PERSPECTIVE FOR A GLOBAL CHALLENGE The survey targeted IT professionals from North America, France, Germany, the UK, and the Netherlands among companies with over 100 employees and active involvement in DevOps, software development, database administration, quality assurance, or product support. NUMBER OF EMPLOYEES TITLES 30% CIO 1129 952 100 100 100 19% IT Director 16% IT Manager 15% Software Engineer 11% System Administrator 16% Database Administrator > 5000 1001-5000 501-1000 251-500 100-250 24% 19% 27% 15% 13%
- 6. 6 Benchmark Classifications The primary goal of this survey is to identify trends in DevOps by polling DevOps practitioners on common practices, motivations, and success metrics. To understand DevOps we’ve contrasted IT professionals who simply adopted DevOps (DevOps Practitioners) with those who have already experienced success via a strongly defined approach to DevOps (DevOps Leaders). The following sections outline the criteria for each population of survey respondents. HOW ARE DEVOPS LEADERS CLASSIFIED? DevOps Leaders are respondents who are directly involved in what they consider to be a strongly defined and successful series of DevOps initiatives. This population of respondents accounted for approximately 10% of survey respondents. – Participating in ongoing DevOps activities – Reported DevOps as strongly defined – Engaged in at least 3 DevOps initiatives – Reported improvements in DevOps-related KPIs HOW ARE DEVOPS PRACTITIONERS CLASSIFIED? DevOps Practitioners are respondents involved in an ongoing DevOps initiative. They consider themselves to be directly involved in DevOps, and they are still searching for a strongly defined vision of DevOps success. This population of respondents accounted for approximately 59% of survey respondents. – Participating in ongoing DevOps initiatives – Plans on starting at least 3 DevOps initiatives – Directly involved in DevOps activities
- 7. 7 > $2M $1M - $2M $500k - $1M $100k - $500k Budget and Resource Allocation Trends The majority of respondents with active DevOps initiatives report a DevOps budget under $1M. Thirty-six percent (36%) of DevOps Leaders indicated their DevOps budget was higher than $1M. DevOps Leaders have larger budgets. DevOps initiatives are often supported by small teams of experts in deployment automation, data management, and continuous integration. Fifty-eight percent (58%) of respondents reported that there are 50 or fewer resources supporting DevOps in their organizations. Do you have a dedicated DevOps group? 73% of DevOps Practitioners and 87% of DevOps Leaders have groups dedicated to DevOps initiatives. How many teams are responsible for DevOps initiatives? 83% of DevOps Practitioners and 92% of DevOps Leaders consolidate DevOps responsibility to a single, dedicated group. The data reveals DevOps is more than a movement and a set of tools, it is now an established IT function. DevOps has a budget and a dedicated support staff. 2015 BUDGET ALLOCATED TO DEVOPS INITIATIVES HOW MANY RESOURCES SUPPORT DEVOPS INITIATIVES AT YOUR ORGANIZATION? 23% 45% 11% 21% 58% 50 or Fewer Resources 23% 101-500 Resources 10% 50-101 Resources 9% 500+ Resources DIFFERENTIATORS: Leaders have larger budgets, and slightly more staff allocated to DevOps initiatives. Leaders are also more focused and are more likely to have a dedicated DevOps team. All Respondents
- 9. 9 DevOps is Generally Ill-Defined DevOps and the tools and practices associated with it have transformed IT in just a few years. Continuous deployment, deployment automation, and the self-service provisioning and configuration of hardware, data sources, and networks to support ongoing application development are just a few of the practices that have started to take hold across the entire industry. What started as a trend for internet-focused companies such as Etsy and Flickr is now approaching the enterprise; daily production releases, agile data management, and testing in production are now commonplace in many organizations, with cloud-based deployments supporting even the most critical of systems. From the financial industry to healthcare to government, DevOps is being applied to industries once thought too risky for the rapid pace of infrastructure and development work that has come to typify DevOps. Over the past two years DevOps for the enterprise has emerged to support related initiatives such as scaled agile and other processes that place an emphasis on faster time to market and more rapid software releases. PERCEPTION VERSUS REALITY While DevOps grows more popular and has established a foothold in the enterprise, the movement still lacks a strong definition across industries and organizations. Two separate organizations engaged in DevOps may both agree on a common set of tools and techniques, but they often don’t follow the same practices. Some organizations view DevOps as an integral part of the day-to-day activities of the entire IT department. However, organizations with a stronger definition of DevOps tend to empower dedicated teams who are exclusively responsible for rolling out DevOps initiatives, and these are the organizations that see the greatest DevOps success. IT’S DEFINED… BUT NOT STANDARDIZED The vast majority of organizations believe DevOps is well defined. Yet survey data suggest DevOps tactics and practices vary dramatically among all respondents. That’s why exploring what DevOps Leaders do differently will be critical to reaching a globally applicable definition of DevOps. IN YOUR MIND, HOW WELL IS DEVOPS DEFINED? Strongly defined Somewhat defined Neutral Somewhat undefined Strongly undefined 39% 36% 2% 6% 17%
- 10. 10 Agile Data Management Testing in Production Deploy to Private Cloud Continuous Integration What is DevOps Doing? “What is DevOps?” is a tough question to answer if DevOps practices vary widely across industries and organizations. We asked DevOps Practitioners and DevOps Leaders to tell us which DevOps initiatives they were working on, and here are the top four. WHAT DEVOPS ACTIVITIES HAS YOUR ORGANIZATION INVESTED IN OVER THE LAST 12 MONTHS? Why the Delta? DevOps Leaders tended to place DevOps close to the development side of the IT organization. Development-driven DevOps therefore places a greater emphasis on continuous integration. Developers are focused on continuous integration while operations professionals are focused on cloud infrastructure. It is important to realize that both sides of the DevOps equation are focused on managing databases. WHAT ARE DEVOPS PRACTITIONERS NOT DOING? Continuous integration had the lowest support among practitioners, followed by deployments to private clouds. WHAT ARE DEVOPS LEADERS NOT DOING? Container-based deployments also had the lowest support among DevOps Leaders, with 33% having no plans to implement. Key Takeaway: DevOps practices support rapid iterations, frequent production deployments, and the ability to quickly deliver data required for testing and verification in support of more frequent releases. 79% 55% 61% 51% 29% 47% 64% 45% DevOps Leaders DevOps Practitioners
- 11. 11 Development Operations Shared Development Operations Shared Who Drives DevOps? Given the concept of “DevOps” and a common perception that it helps break down the “wall of confusion” between development and operations, we hypothesized that established DevOps initiatives would emphasize communication between development and operations – on an equal footing. Surprisingly, the survey results suggest that is not the case. For Practitioners DevOps is just that – a responsibility shared among development and operations. But for DevOps Leaders there’s a greater emphasis on development, which is a key driver behind DevOps activities. In organizations with an effective, well-defined DevOps function, developers largely own DevOps innovation. Therefore it becomes abundantly clear that operations is not the center of DevOps activity – for any of our survey respondents. Wait? Isn’t DevOps about cooperation and communication? It is, and it isn’t. This data very clearly illustrates that DevOps isn’t about two sides of IT collaborating together. DevOps was created as a reaction to slow-moving IT functions that couldn’t keep up with developer-driven innovation and the pace of software delivery in an agile development process. Developers drive value creation in IT. They are looking for immediate gratification when it comes to data environments, deployments, and self-service infrastructure. DevOps isn’t just about collaboration between Development and Operations for DevOps Leaders; it’s about developers embracing operations functions and deriving scale through automation. DevOps helps developers clearly communicate what they need for faster software delivery. DEVOPS PRACTITIONERS Who runs DevOps Initiatives? DEVOPS LEADERS Who runs DevOps Initiatives? 50% 17% 34% 39% 25% 35%
- 12. 12 What Systems Does DevOps Affect? Not all IT systems are created equal. For example, a team supporting mainframe applications might not be as focused on continuous integration and testing in production as a team delivering a Node.js application powering a social network. Here are the top three systems were most affected by DevOps initiatives: All Respondents: SYSTEMS AFFECTED BY DEVOPS Web Applications Relational Databases Real-time Applications 1 2 3 In 2015, investments in DevOps have the greatest effect on three IT systems: Web Apps, Databases, and Real-time Apps We asked respondents to tell us what systems were least affected by DevOps initiatives, and here’s what they told us: All Respondents: SYSTEMS LEAST AFFECTED BY DEVOPS Wait, DevOps doesn’t apply to Big Data? It does. While the Hadoop ecosystem has an exciting set of options for cloud-based deployment automation, respondents are more focused on application development targeting the web- backed by relational databases and supported by real-time services. Middleware and Storage: Survey data suggests that DevOps is more applicable to certain parts of IT than others. Middleware and storage systems don’t always experience the same level of development activity as web and real-time applications. DevOps is more applicable to areas of IT that experience high levels of development-driven activity. Storage (SAN/NAS) Middleware Applications Big Data (Hadoop) 20% 16% 12%
- 13. 13 Motivations Behind DevOps Initiatives We asked respondents to select the top thee reasons for starting a DevOps initiative, and here’s what they told us about their expectations from DevOps investments: WHAT WERE YOUR COMPANY’S TOP 3 REASONS FOR STARTING A DEVOPS INITIATIVE? While self-service provisioning of infrastructure is an important part of DevOps in the enterprise, a very small percentage of enterprise respondents actually indicated that “Teams will engage in self-service provisioning of infrastructure resources.” HOW MANY DEVOPS INITIATIVES DOES THE AVERAGE ORGANIZATION SUPPORT? The vast majority of respondents currently had fewer than 10 active DevOps initiatives. This stat balloons to an average of 37 planned DevOps initiatives over the next 24 months. Again, this trend suggests DevOps is not a fad and further highlights a need for a long-term standardized definition and best practices. Software will be delivered faster Faster identification of bugs reduces the need for recoding later in the development cycle Software will be delivered more frequently Operations tasks will be accelerated Feedback cycle will be reduced Teams will be more self-enabled NUMBER OF DEVOPS INITIATIVES STARTED IN THE LAST 24 MONTHS 88% 69% 64% 59% 43% 40% 60% 0-10 Initiatives 11% 160+ Initiatives 29% 10-59 Initiatives
- 14. 14 The Definition is a Moving Target How do organizations define DevOps? We gave respondents multiple choice answers to determine how they would generally define DevOps. The hope was one or two areas would clearly emerge among the 2,000 plus survey respondents. But definitions of DevOps vary dramatically, and if anything, it’s become a catch-all that embodies everything from collaboration, to technology, to operations, to agility. All Respondents: WHICH OF THESE STATEMENTS WOULD YOU INCLUDE IN YOUR DEFINITION OF DEVOPS? Ultimately DevOps must be defined by measurable outcomes. Some of the definitions we collected can drive quantitative success metrics, while others were less suited to it. DevOps Leaders were 12 times more likely than Practitioners to select “uncovering defects in the development lifecycle” as a central part of defining DevOps. What is interesting about this is that quality issues are a tangible metric for tracking success, whereas collaboration is far more nebulous. As we explore the definition of DevOps we’re looking for ways to link the benefits with measurable success. Themes like automation and collaboration are critical but often difficult to measure. Developers and Sysadmins collaborating to ease the transition between development and production Using infrastructure automation to facilitate self-service provisioning of infrastructure by development teams Evolving operations to meet the demands of agile software development teams Developers taking full responsibility for all operations tasks Increasing the frequency of deployments to uncover defects earlier in the development lifecycle 84% 69% 60% 42% 35% This should be higher
- 15. 15 Under Pressure to Deliver? Organizations Turn to DevOps How organizations prioritize value and measure success is key to understanding investments in DevOps. Eighty percent (80%) of all respondents indicated they were under strong pressure to reduce the number of defects in development and the number of defects in software delivered to production as early as possible in the development cycle. In fact, these drivers were among the top three for all organizations. Time to market and speed of delivery actually emerged as a secondary concern for all respondents. For most practitioners the widespread definition of DevOps focuses on agility – the speed and rate at which software can be developed and deployed to production. But the data reveals that, as a practice, organizations turn to DevOps to identify defects before they get to production. TOP 4 PRESSURES CAUSING ORGANIZATIONS TO INVEST IN DEVOPS TOP DEVOPS DRIVER: QUALITY OVER AGILITY DevOps isn’t just about delivering software faster and more frequently. Teams engaging in DevOps initiatives mark quality and defect identification as a stronger motivation to invest. Interestingly, headcount reduction is not a significant pressure for DevOps Leaders. Leaders tend to support dedicated DevOps teams in IT. This highlights another important theme in the data: DevOps is not just about cutting costs. That means your primary justification around investments in DevOps shouldn’t be to work with fewer resources. DevOps Leaders are focused on producing optimal quality and agility with the right level of resources. Leaders aren’t pressured to sacrifice quality to save on headcount costs. This also underscores the fact that people are an integral part of DevOps success – technology should be empowering human capital, not replacing it. Deliver software to production with fewer defects Identify defects earlier in the software development lifecycle Deliver software faster Deliver software with fewer resources 70% 59% 68% 62% 65% 57% DevOps Leaders DevOps Practitioners 32% 55%
- 16. 16 How Effective Are You at DevOps? DevOps is still an emerging trend in the IT industry, and organizations adopting DevOps show very little consistency with respect to practices. Therefore, it’s interesting to understand how well they think their organization actually is at supporting DevOps. Put differently, do companies engaged in DevOps feel like there’s room for improvement? DevOps Practitioners are less confident about their effectiveness, which generally highlights a need for 1) continuous improvement and 2) a standardized definition of DevOps complete with proven best practices. HOW EFFECTIVE WOULD YOU SAY YOUR ORGANIZATION IS AT DEVOPS? Organizations with a stronger internal definition of DevOps are twice as confident in the effectiveness of DevOps initiatives. Leaders are 4 times more likely than Practitioners to support dedicated DevOps groups – with an emphasis on developer-driven DevOps. For this reason Leaders were 200% more likely to say they were very effective at DevOps. DOES DEVOPS BENEFIT ALL ORGANIZATIONS (ALL INDUSTRIES AND COMPANY SIZES) EQUALLY? DOES DEVOPS BENEFIT SOME COMPANIES MORE THAN OTHERS AND WOULD THIS IMPACT A STANDARD DEFINITION? We asked respondents if they thought certain industries or types of companies would benefit more from DevOps. What we found was that DevOps initiatives are applicable to development teams working on modern, web-based applications and agile databases. Survey data suggests that organizations practicing DevOps see more benefits when focused on these application development groups. 70% 35% 26% 45% 20% 4% Very Effective DevOps PractitionersDevOps Leaders Somewhat Effective Ineffective All Organizations Benefit Equally Not All Organizations Benefit Equally No Response 47% 44% 9%
- 17. 17 What Are the Measurable Benefits of DevOps? Given a clear focus on quality and agility, we wanted to understand how survey respondents were measuring the success of DevOps. Given the dynamic nature of the concept and a wide variety of metrics that could be used to measure success, we split KPI’s between release-related metrics and quality-related metrics, which we thought would be easier for respondents to link to DevOps than metrics related to “overall IT budget,” “agility,” or “cost savings.” It’s abundantly clear that the economic impact of time is a theme that ripples through all facets of DevOps. This comes as no surprise given the fact that survey respondents indicated that on average 40% of their day is spent re-coding due to bugs. Respondents also indicated it takes an average of 2 hours to reset an environment after a test cycle; reducing this time could have a real and substantial impact on efficiency and effectiveness. An increased cadence of software releases affects when teams identify and address defects. Forty-eight percent (48%) of DevOps Leaders reported that DevOps initiatives resulted in more defects being identified earlier in the software development lifecycle. When defects are identified earlier in the development lifecycle teams spend less time recoding and more time delivering value. All Respondents: RELEASE-RELATED KPIS All Respondents: QUALITY-RELATED KPIS Time required to release software to production Frequency of production releases Number of people involved in a release Effort to populate production data Number of defects in production QA downtime due to data & environment issues Number of defects identified early in development lifecycle Number of defects in production Effort to populate production data Effort to fix defects in development cycle 89% 75% 68% 66% 64% 76% 72% 68% 65% 65%
- 18. 18 What Are the Top Challenges with DevOps? We asked respondents about their top challenges with DevOps (internally), and they paint a picture of an emerging movement experiencing growing pains. WHAT ARE THE TWO BIGGEST CHALLENGES TO DEVOPS INITIATIVES IN YOUR ORGANIZATION? WHAT EMERGE ARE THREE CORE THEMES IN THE CHALLENGES: Limited availability of testing environments due to data management issues Application teams are moving too fast for IT to keep up Operations doesn’t understand DevOps – the shared responsibility and communication is creating turbulence 1 2 3 Application teams move faster, the rest of IT struggles to keep up Testing environments are limited due to data management challenges Several DevOps groups compete for limited resources and budgets Operations doesn’t understand DevOps and is resistant to change Development teams don’t understand DevOps and are resistant to change Our legacy infrastructure doesn’t support modern approaches to deployment automation Management is not able to support smaller, more frequent delivery cycles 92% 90% 82% 65% 57% 42% 20%
- 19. 19 The State of Data in DevOps HOW DATA MANAGEMENT AFFECTS DEVOPS
- 20. 20 Databases: An Obstacle to DevOps Progress? The biggest challenge facing DevOps initiatives among both DevOps Practitioners and Leaders is limited testing environments due to data issues. One-third of Practitioners and nearly half of DevOps Leaders report this as the primary challenge with productivity. But this inefficiency affected DevOps Leaders disproportionately, with 62% of DevOps Leaders reporting access to full data as a requirement for non-production environments and only 44% of DevOps Practitioners reporting the same. Today, applications teams are moving faster than the organization can keep up. One-third of all respondents indicated their organization has a difficult time keeping up with the rate of software delivery from teams engaged in DevOps practices. We also learned that DevOps Practitioners are working around data security constraints and taking data environment setup and tare down into their own hands. This would explain why 55% of Practitioners and 79% of Leaders reported Agile Data Management as the most common DevOps practice adopted. of DevOps Leaders report that access to full data is a requirement for non-production environments. of DevOps Leaders report that the organization can’t keep up with the pace of software delivery. of DevOps Leaders reported that Agile Data Management (also referred to as Data-as-a-Service) was the most common DevOps practice adopted. 62% 39% 79%
- 21. 21 DATA ENVIRONMENTS AND THE NEED FOR PRODUCTION DATA WAS A KEY THEME IN INTERVIEWS WITH PRACTITIONERS: “Our test environments do not include enough production data to allow comprehensive testing, so we often encounter many production problems that need to be corrected.” “Having the data and system available for QA on time and coordinating the operations and development team.” Development Demands Full Production Data Delivering software faster and more frequently calls for more rapid approaches to quality assurance and release verification. With the increased pace of development and testing, organizations are under pressure to create testing and staging environments that can support frequent testing efforts. This is required to support the sort of agile software delivery practices that often accompany DevOps. The survey data suggests that companies with a commitment to DevOps are more likely to require full production data for both QA and development activities. Here’s the breakdown between DevOps Practitioners and DevOps Leaders. All Respondents “DOES DEVELOPMENT AND QA REQUIRE FULL PRODUCTION DATA?” All Respondents “HOW LONG DOES IT TAKE TO RESET A TESTING ENVIRONMENT?” Yes, we need it Not practical Partial is OK 62% 44% 26% 31% 12% 25% DevOps Leaders DevOps Practitioners 38% 2 Hours 47% 1 Day 15% Longer than 1 Day
- 22. 22 ARE INADEQUATE APPROACHES TO DATA MASKING DRIVING COMPANIES TO COMPROMISE SECURITY? Among qualified respondents 12% reported refresh rates of less than a week with 71% of respondents saying it takes a week or longer to refresh data from production. Fully 17% never refresh masked data at all. When faced with a choice between moving faster and waiting for data to be masked and secured for use in non-production data the results are clear: companies are opting for agility over security. Correlation: DevOps and Data Security Risk Survey data suggests that DevOps Leaders are taking shortcuts with production data in non-production testing environments. A staggering 72% of DevOps Leaders noted that development and QA has access to production and that access is not audited (versus 59% of DevOps Practitioners). For DevOps Leaders the structured investments in DevOps come at the expense of secure data – something all organizations investing in DevOps must address. While today’s businesses face an unprecedented risk of data loss, it appears that companies in a rush to adopt more agile DevOps practices are choosing to ignore data security. In an effort to reduce delay and bureaucracy, organizations have opted to expand the population of internal actors with access to full production data. DEVELOPERS AND QUALITY ASSURANCE PERSONNEL HAVE ACCESS TO PRODUCTION DATA, ACCESS IS NOT AUDITED. All Respondents: HOW OFTEN IS MASKED DATA REFRESHED FROM PRODUCTION? 72% 59% Yes DevOps Practitioners DevOps Leaders 17% 25% 46%12% Longer Than a Week Once a Week Never Refreshed Every Few Days
- 23. 23 The Future of DevOps
- 24. 24 ‘Full Stack’ DevOps Initiatives Address Delay DevOps emerged from a combination of industry trends. While agile software development has grown into an industry standard over the last decade, cloud computing and infrastructure automation only became practical within the last six to seven years. These two factors, combined with increasing pressure to deliver software faster and more frequently, set the stage for the emergence of DevOps. When application development teams assert more ownership over infrastructure automation and continuous integration, the IT function must support a full-stack approach to architecture. In a DevOps-aware organization developers are now responsible for the full lifecycle of development, deployment, and production support. These are full-stack initiatives that define DevOps in 2015. With this new, “full-stack” approach to software delivery comes new opportunity for delay. DevOps was developed as a reaction to the long lead times required for infrastructure provisioning and integration with bureaucracy-laden ITIL processes. But what are these new sources of delay in the software development lifecycle? All Respondents COMMON SOURCES OF DELAY: Bugs identified late in the development lifecycle 1 Teams delayed while waiting for data environments 2 Teams delayed while waiting for data masking 3 Teams delayed by process for production control 4 DEVOPS LEADERS ARE MORE AFFECTED BY DELAYS FROM DATA ENVIRONMENTS AND DATA MASKING. Data-driven delays are providing greater motivation for DevOps teams to take more proactive steps toward developer-driven agility. DEVOPS LEADERS 42% reported delays waiting for data environments DEVOPS LEADERS 39% reported delays waiting for data masking 42% 39%
- 25. 25 Critical Need: Standard Success Measures DevOps still needs universally agreed upon standard KPIs to measure success across industries and organizations. Current approaches to DevOps adoption can be characterized as ad-hoc, either placing an emphasis on following established leaders or on following the advice of an abundance of competing “DevOps vendors.” Unlike all other parts of the IT department, fewer than half of DevOps staff stated that there was a strong definition of DevOps internally. DevOps in 2015 needs both a strong definition and a set of standard success measures, but how does one measure “improved cooperation between development and operations” or “alignment”? Based on our survey results, we’ve identified two focus areas with a series of Key Performance Indicators: Software Quality and Release Agility. Development SOFTWARE QUALITY DevOps has a direct effect on software quality, as it allows development teams to integrate and test systems earlier in the software development lifecycle. Prior to the arrival of DevOps, development teams viewed deployment and integration as a separate phase of the software delivery cycle driven by operations. With DevOps Integration and deployment efforts starting earlier, they are driven by developers, and defects related to data environments and deployments can be addressed earlier to avoid costly recoding and delays. – Reduced downtime for non-production testing and integration environments – Increased availability and timeliness of data environments for development and QA – Greater percentage of defects identified earlier in the software development lifecycle – Faster identification and turnaround times for defects in production environments Operations RELEASE AGILITY With an emphasis on infrastructure automation, secure data, and shared responsibility for operations, DevOps addresses inefficiencies in the provisioning and management of IT infrastructure to support both production and non-production environments. Automation and lightweight approaches to software releases with less emphasis on ITIL-based process provide IT departments with a roadmap to scale to meet demand as the average size of IT portfolios continues to increase. – Reduction in effort required to deliver software to all environments – Increase in the frequency of releases and software development lifecycles with a shorter duration – More automated approaches to data management and data-security-as-a-service – Fewer resources required to support an increased number of applications with more frequent releases
- 26. 26 A Standard Definition of DevOps The data from the survey reveals there is an overwhelming need to establish not just a universal definition of DevOps, but a way to measure the success of DevOps initiatives. If you don’t know where you are headed, every road will take you there. Based on the current state of the market and the success of DevOps Leaders, we are proposing the following: A GLOBAL DEFINITION OF DEVOPS IN 2015 DevOps is more than just the close collaboration of two departments (development and operations) within IT, it is more than just managing infrastructure with Chef or Puppet, and DevOps is much more than a specific collection of tools and techniques used to automate deployments and manage infrastructure. The term “DevOps” refers to the transformation IT experiences when cross-functional teams develop and deliver software across the full spectrum of IT systems. From software architecture and design to system administration and production support, the term “DevOps” refers to a style of IT management and implementation that places an emphasis on automation and iterative delivery of software, while also empowering developers to manage portions of the software delivery process that were previously inaccessible due to specialization within IT. DevOps tools and practices have one thing in common: they focus on reducing time to market and making it possible to extend the frequent iterations of Agile into infrastructure and data environments. Overall DevOps is inseparable from both agile software development and cloud computing. As a term, “DevOps” stands for “our infrastructure moves as quickly as our developers need it to.” AND SUCCESS IS MEASURED BY: ...how quickly the organization can leverage infrastructure and assemble data to support software delivery. DevOps success is measured by the speed, frequency, and quality of software releases.
- 27. 27 Release Agility: Success Criteria DevOps is a combination of development-focused innovation alongside innovation in infrastructure management and operations. Software releases and the various quality assurance and testing environments supporting a production release play an important part in the success of DevOps initiatives, such as continuous deployment and deployment automation. OTHER RELEASE METRICS Number of People Involved in a Production Release – 52% of DevOps Practitioners and 62% of DevOps Leaders selected this. WHAT’S NEXT FOR RELEASE MANAGEMENT AND DEVOPS? Automation. Forty-three percent (43%) of qualified respondents are planning to use “Percentage of Production Release Automated” as a metric alongside 38% of qualified respondents choosing “Number of Releases Automated.” Many organizations have already established a successful track record of deployment automation and they are looking to increase release frequency while also decreasing the overall work-effort required to support more frequent releases. RELEASE AGILITY IS AN IMPERATIVE FOR TODAY’S IT DEPARTMENT AS PORTFOLIO SIZES INCREASE AND AS TECHNOLOGY CONTINUES TO ACCELERATE. The ITSM-focused approaches of the last decade will not scale to meet demand. KEY DIFFERENTIATORS: – Self-service infrastructure – Self-service deployments – Secure Data-as-a-Service RELEASE-RELATED METRICS FOR DEVOPS SUCCESS Time Required to Perform a Production Release – 69% of DevOps Practitioners and 86% of DevOps Leaders reported this as the primary release-related metric for DevOps success. Frequency of Production Releases – 58% of DevOps Practitioners and 71% of DevOps Leaders selected this as the second most popular release-related KPI for DevOps. Effort Required to Populate Environments with Data – 65% of DevOps Leaders selected this as the third most- popular quality-related DevOps metric. DevOps Leaders DevOps Practitioners 69% 86% 58% 71% 65% 52% 62%
- 28. 28 Software Quality: Success Criteria While the release-related benefits of DevOps initiatives are faster and more frequent software delivery organizations, look for quality-related KPIs to break this benefit down into more concrete, measurable metrics. OTHER QUALITY METRICS Number of Defects Identified in Production – 53% of DevOps Practitioners and 58% of DevOps Leaders. Effort Required to Address a Defect in Production – 61% of DevOps Leaders identified this as an important quality-related KPI for measuring DevOps success. WHEN ARE DEFECTS IDENTIFIED IN THE SOFTWARE DEVELOPMENT LIFECYCLE? Reduced QA downtime due to data or environment issues – 59% of DevOps Practitioners and 77% of Devops Leaders selected this metric as the most common metric used to measure DevOps success. Number of Defects Identified Early in the Development Lifecycle – 56% of DevOps Practitioners and 66% of DevOps Leaders selected this as the second most popular KPI for DevOps. Number of Testing Cycles Required During Development – 64% of DevOps Leaders selected this as the third most-popular quality-related DevOps metric. DevOps Leaders identify and defects earlier in the software development lifecycle with 53% saying that bugs are identified during initial design phases. The ability to rapidly deploy and test systems with real data accounts for a +17% difference between practitioners and leaders. Moving defect identification “up and to the left” in the development lifecycle has a positive effect on both software delay and overall cost. The cost of fixing a bug early in the development process versus later in the release process can approach 10x. In this way DevOps is an effective way to reduce the cost of software development. DevOps Leaders DevOps Practitioners 59% 56% 66% 63.5% 53% 58% 61% 60% 50% 40% 30% Design First Half Second Half QA DevOps Leaders DevOps Practitioners QUALITY-RELATED METRICS FOR DEVOPS SUCCESS Survey respondents reported several key performance indicators for DevOps success. The three most important KPIs for DevOps are:
- 29. 29 Key Findings – Large organizations have a propensity for stronger definitions of DevOps, suggesting the emergence of an enterprise-ready DevOps movement. The fact that a higher number of overall employees would correspond to a stronger definition of DevOps is a surprising outcome in this survey. – Among DevOps Leaders private clouds such as OpenStack have a much higher adoption rate than public clouds. For larger enterprises, private clouds are making greater inroads than public cloud offerings. – More than half of the respondents to this DevOps survey wait a week or longer to refresh non-production environments from the production environment. This is why turnkey solutions such as Secure Data-as-a-Service are rapidly growing in adoption and delivering increased efficiency in enterprise DevOps initiatives. – There is a shocking lack of security and access control for critical production data. 72% of DevOps Leaders reported they had no access controls or audits placed on production data. This suggests that more active and successful DevOps initiatives are correlated with a lack of commitment to Secure Data initiatives. – What’s next for DevOps? 39% report that achieving a daily production release cycle is a top priority. – About a quarter of enterprise respondents have no plans to use public clouds. – Of those with a strong definition of DevOps and a track record of DevOps success, 50% say DevOps is led by Developers with 35% indicating it’s a shared responsibility with Operations. – Top Three Reasons for DevOps – Deliver Software Faster (66%), Identify Bugs Earlier (44%), Deliver Software Frequently (43%) – Biggest challenge to DevOps? We’re still waiting for data – 46% of DevOps Leaders say that testing environments are limited due to data issues.
- 30. 30 Summary DevOps is changing at an impressive speed, and the movement is now being influenced by a sea of vendors and conferences all designed to champion DevOps. For many companies embracing DevOps practices, 2015 has been a year to extend DevOps to areas of the software delivery lifecycle previously untouched by the movement. While the survey data suggests that DevOps is strongly affecting web-based and real-time applications, there’s a growing pressure to start applying DevOps to data environments and databases in general. The efficiency improvements IT departments are seeing from existing DevOps initiatives are acting as a “contagion” within enterprise IT departments. Skeptical managers in IT are being convinced both by evidence of success and by increasing pressure to deliver more software faster with the same or fewer resources. Automating the deployment of often-stateless web applications on either containers or virtual machines is now something that organizations embracing DevOps take for granted, yet there is still a large component of the market that has yet to fully embrace automation and cloud- based infrastructure. For companies approaching mature adoption of DevOps, 2015 is a year to extend DevOps initiatives to cover more challenging projects that remove delay and inefficiency from IT. An attractive “next target” for DevOps optimization in the enterprise will be databases, with many respondents continuing to identify the database as the gap in DevOps initiatives. Companies new to DevOps are facing interesting questions only made possible by the popularity of the DevOps movement. Questions such as “Which cloud provider to use?” or “Which private cloud technology to adopt?” are answered alongside questions about development platforms, operating systems, and (with containers) the definition of a deployable applications. “Are teams deploying code or containers?” is a debate currently being played out on an industry- wide scale with technologies such as Docker generating buzz over the previous year. Containerization is an important trend for DevOps as it moves responsibility for deployment and configuration management toward application developers as build pipelines and continuous delivery pipelines are generating systems rather than artifacts to be deployed. An important question for containerization in 2015 is how this trend relates to the relational databases companies rely on. While it is safe to say that DevOps has “arrived” in most IT departments, there’s still great uncertainty across organizations. Companies with a strong definition of DevOps typically have a dedicated team
- 31. 31 of specialists responsible for implementing DevOps initiatives. Other companies distributed responsibility for DevOps across the entire IT department, treating DevOps as more of a philosophy and less as a job description or specific set of responsibilities for a dedicated staff. As DevOps continues to evolve different approaches and patterns will emerge for both budget and team composition within IT, but DevOps will face a constant challenge if the industry settles on established, dedicated DevOps teams. When and if this happens DevOps will run the risk of becoming yet another specialization within IT, building a different kind of “wall of confusion.” DevOps could transition from a developer-driven movement to the new Operations department that has adapted to the faster-moving Development teams that more than a decade of Agile has created. Public clouds had a moment in the spotlight over the previous four years as high-profile projects across multiple industries (including the government) made use of public clouds such as Amazon’s AWS, Rackspace, and Microsoft Azure. In this survey we continue to see support for public cloud, but we see stronger, emerging support for private clouds such as Openstack. There are several reasons for this, but it’s becoming clear that large enterprises still feel uncomfortable using public clouds for the most sensitive and mission-critical applications. This is especially true for the highly- sensitive databases that run finance, e-commerce, and healthcare. Data security is a top concern on everyone’s list in 2015. For five years, data compromises, data leaks, and security vulnerabilities are delivering a steady cadence of headlines making the public aware of just how insecure many industries have been with the sensitive data they entrust to banks, health insurers, hospitals, and governments. There is a new expectation that business must provide strong protection and stewardship of the data it has been entrusted with by clients and customers, and this survey identifies a disturbing correlation between companies embracing DevOps and companies taking dangerous short-cuts with sensitive data from production systems. The conclusions from this survey are that databases and data security are the next requirements for DevOps.
- 32. Gleanster Research helps business leaders uncover best practices in technology adoption by benchmarking the successes and failures of Top Performing firms. We publish the results online so you can learn from the most successful CIOs on the planet. We do this through a proprietary benchmark research methodology that informs a library of best practice market research and a comprehensive directory of vendor showcases (complete with vendor rankings based on reviews from users). Contact Gleanster: 4695 Chabot Dr Pleasanton, CA, 94588 www.gleanster.com [email protected] Business is increasingly digital, and applications enable digital business. The companies that manage their application portfolios well will be the disruptors and leaders of their industries. Data is the fuel for application projects, and Delphix transforms the way that organizations manage data for their application projects. Delphix software enables Data as a Service, within a firm’s on-premise, private, or public cloud infrastructure. With a unique focus on applications and databases, and features that exist nowhere else, the Delphix solution brings enterprise data into the modern age. Contact Delphix 650-494-1645 www.delphix.com [email protected]