Click here to close now.


Linux Containers Authors: Derek Weeks, AppDynamics Blog, Elizabeth White, Liz McMillan, Dana Gardner

Related Topics: Linux Containers

Linux Containers: Article

Succeeding with Open Source

Meeting your needs

In this issue, Bernard Golden, author of Succeeding with Open Source, discusses open source software, its pros and cons, and how to choose the right Linux implementation for your business.

What is open source software and how is it different from traditional software?
The primary difference between open source software and traditional software is the licensing conditions under which open source is distributed. Traditional software licenses tightly control the use and distribution of the software in order to ensure consistency, so they can realize revenues from license sales. This means, for example, you are usually restricted as to how many machines you may install the software on.

Open source software, by contrast, is distributed under licenses designed to encourage widespread use with few restrictions. This means you can use the software on as many machines as you choose.

Another important difference between open source and traditional software is that open source is distributed as source code, which users are encouraged to modify and redistribute. Users can modify the product to better serve their needs rather than being forced to live with the product's functionality as is. One of the few restrictions about open source is that, should you modify the product and redistribute it, you are expected to make your source changes available.

This is a general overview of open source software licenses. There are additional nuances depending upon the specific license. For most IT shops, license differences don't really mean anything because they don't modify the product and don't distribute to other organizations. If you want to know more about licenses, Larry Rosen's book Open Source Licensing: Software Freedom and Intellectual Property Law (Prentice Hall PTR, 2004) is an excellent reference.

Is all open source software also free?
Open source software tends to be extremely inexpensive, available on CDs at a low price, and usually also available for download at no charge. Open source products are usually not built by commercial entities but rather by informal project teams, so there is no company as such that distributes and charges for the product.

Anyone can take an open source product and distribute (and charge) for it; however, open source licenses preclude a distributor from imposing conditions on users and preventing them from further distributing the product. What this means, in effect, is that even if a commercial entity distributes an open source product at a given price, the purchaser can then make it available to others for free. Essentially, this forces distribution at no cost, or at the cost of distribution. So, open source software tends to be available at no cost.

This discussion applies to the software itself. There are many organizations that offer open source support, training, consulting, and other services, all of which have a price. Since software has virtually no marginal costs associated with additional copies, open source software tends to be free; however, open source services have significant costs like labor, marketing, and capital, and therefore are not free.

What questions should managers be asking their employees when the employees suggest using open source tools?
The most important question a manager should ask is, "How mature are the product elements our organization needs?" Because open source is so easy to download, many times implementation of the software begins before other important organization requirements like training, documentation, support, and so forth are considered. A formal process to assess the product in its entirety is important. The Open Source Maturity Model, described in Succeeding with Open Source, is a tool that enables IT shops to perform open source assessments. Without asking the question about the maturity of all the product elements, the organization runs the risk that it may be unprepared to support the product it has implemented.

What are the basic advantages and disadvantages of using open source software?
For most organizations the biggest advantages of open source are its low cost and control. We've talked about pricing already, but control can be just as important. Using open source, organizations have a lot more ability to use software in ways that work for them. They can implement as many copies as they want, rather than being limited to only installing on certain machines. Organizations can control how often and how soon they want to upgrade to a new version of the software, rather than being forced to move based on the vendor's plans. There's no vendor lock-in either, since the software is not usually provided by a commercial entity. Finally, the availability of source code means that, should it choose, the organization can modify the product to better suits its needs - no one-size-fits-all situation.

The downside to open source is implied by the answer to your third question. Open source is much more of an unbundled product compared to its commercial counterpart. The other product elements users can usually depend on (training, etc.) need to be found and assessed by the user organization. In effect, IT organizations need to take on an integration role. This integration responsibility is the flip side of the enhanced control described above: the control carries responsibility along with it.

There are so many open source software packages around. How do I know which ones are "ready for prime time"?
As noted, a formal process like the OSMM is important to determine if a given product is suitable for your organization. Relying on "buzz" or opinions expressed on product forums is dangerous because the organization's requirements aren't taken into account. Only by assessing all of the product's elements in light of the organization's requirements can it be determined if the product is "ready for prime time."

Which open source packages provide the greatest value for users in terms of overall capability and maturity?
This is a great question. Many organizations have realized excellent ROI on their Linux implementations and are eager to consider other open source packages, but aren't sure where to turn for other open source candidates. The broad coalition of major technology providers that endorsed Linux is not so obvious for other products, so it takes a bit more persistence to find good products. I call this search "reaching into second- and third-tier open source products," not so much because they're not good quality, but because they're not so well known. The best established of the lesser-known products are MySQL ( and JBoss (, both excellent candidates for the enterprise software stack. MySQL is a very fast SQL database, while JBoss is a fully certified J2EE application server.

The Apache Software Foundation ( is an umbrella organization for a number of valuable open source applications like Struts (Java Web applications), SpamAssassin (anti-spam software), and some Web services software like Axis.

Zope ( is an enterprise content management system designed to enable decentralized control of Web site content. Plone ( is a portal product built on top of Zope. Computer Associates has recently announced support for Zope and participated in the creation of the Plone Foundation.

Snort ( is a network Intrusion Detection System that helps organizations improve their security by doing network traffic and protocol analysis as well as packet logging and attack detection.

This is by no means an exhaustive list; there are over 80,000 open source products and it's impossible to keep up with all of them. The critical thing to keep in mind is that each of them must be assessed for maturity in light of an organization's requirements to ensure that the product in question will serve its intended purpose.

About Bernard Golden
Bernard Golden is the CEO of Navica.
[email protected]

More Stories By Kevin Bedell

Kevin Bedell, one of the founding editors of, writes and speaks frequently on Linux and open source. He is the director of consulting and training for Black Duck Software.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.

@ThingsExpo Stories
As organizations realize the scope of the Internet of Things, gaining key insights from Big Data, through the use of advanced analytics, becomes crucial. However, IoT also creates the need for petabyte scale storage of data from millions of devices. A new type of Storage is required which seamlessly integrates robust data analytics with massive scale. These storage systems will act as “smart systems” provide in-place analytics that speed discovery and enable businesses to quickly derive meaningful and actionable insights. In his session at @ThingsExpo, Paul Turner, Chief Marketing Officer at...
In his keynote at @ThingsExpo, Chris Matthieu, Director of IoT Engineering at Citrix and co-founder and CTO of Octoblu, focused on building an IoT platform and company. He provided a behind-the-scenes look at Octoblu’s platform, business, and pivots along the way (including the Citrix acquisition of Octoblu).
In his General Session at 17th Cloud Expo, Bruce Swann, Senior Product Marketing Manager for Adobe Campaign, explored the key ingredients of cross-channel marketing in a digital world. Learn how the Adobe Marketing Cloud can help marketers embrace opportunities for personalized, relevant and real-time customer engagement across offline (direct mail, point of sale, call center) and digital (email, website, SMS, mobile apps, social networks, connected objects).
We all know that data growth is exploding and storage budgets are shrinking. Instead of showing you charts on about how much data there is, in his General Session at 17th Cloud Expo, Scott Cleland, Senior Director of Product Marketing at HGST, showed how to capture all of your data in one place. After you have your data under control, you can then analyze it in one place, saving time and resources.
Two weeks ago (November 3-5), I attended the Cloud Expo Silicon Valley as a speaker, where I presented on the security and privacy due diligence requirements for cloud solutions. Cloud security is a topical issue for every CIO, CISO, and technology buyer. Decision-makers are always looking for insights on how to mitigate the security risks of implementing and using cloud solutions. Based on the presentation topics covered at the conference, as well as the general discussions heard between sessions, I wanted to share some of my observations on emerging trends. As cyber security serves as a fou...
The Internet of Everything is re-shaping technology trends–moving away from “request/response” architecture to an “always-on” Streaming Web where data is in constant motion and secure, reliable communication is an absolute necessity. As more and more THINGS go online, the challenges that developers will need to address will only increase exponentially. In his session at @ThingsExpo, Todd Greene, Founder & CEO of PubNub, exploreed the current state of IoT connectivity and review key trends and technology requirements that will drive the Internet of Things from hype to reality.
With all the incredible momentum behind the Internet of Things (IoT) industry, it is easy to forget that not a single CEO wakes up and wonders if “my IoT is broken.” What they wonder is if they are making the right decisions to do all they can to increase revenue, decrease costs, and improve customer experience – effectively the same challenges they have always had in growing their business. The exciting thing about the IoT industry is now these decisions can be better, faster, and smarter. Now all corporate assets – people, objects, and spaces – can share information about themselves and thei...
Continuous processes around the development and deployment of applications are both impacted by -- and a benefit to -- the Internet of Things trend. To help better understand the relationship between DevOps and a plethora of new end-devices and data please welcome Gary Gruver, consultant, author and a former IT executive who has led many large-scale IT transformation projects, and John Jeremiah, Technology Evangelist at Hewlett Packard Enterprise (HPE), on Twitter at @j_jeremiah. The discussion is moderated by me, Dana Gardner, Principal Analyst at Interarbor Solutions.
Too often with compelling new technologies market participants become overly enamored with that attractiveness of the technology and neglect underlying business drivers. This tendency, what some call the “newest shiny object syndrome” is understandable given that virtually all of us are heavily engaged in technology. But it is also mistaken. Without concrete business cases driving its deployment, IoT, like many other technologies before it, will fade into obscurity.
Discussions of cloud computing have evolved in recent years from a focus on specific types of cloud, to a world of hybrid cloud, and to a world dominated by the APIs that make today's multi-cloud environments and hybrid clouds possible. In this Power Panel at 17th Cloud Expo, moderated by Conference Chair Roger Strukhoff, panelists addressed the importance of customers being able to use the specific technologies they need, through environments and ecosystems that expose their APIs to make true change and transformation possible.
The Internet of Things is clearly many things: data collection and analytics, wearables, Smart Grids and Smart Cities, the Industrial Internet, and more. Cool platforms like Arduino, Raspberry Pi, Intel's Galileo and Edison, and a diverse world of sensors are making the IoT a great toy box for developers in all these areas. In this Power Panel at @ThingsExpo, moderated by Conference Chair Roger Strukhoff, panelists discussed what things are the most important, which will have the most profound effect on the world, and what should we expect to see over the next couple of years.
Microservices are a very exciting architectural approach that many organizations are looking to as a way to accelerate innovation. Microservices promise to allow teams to move away from monolithic "ball of mud" systems, but the reality is that, in the vast majority of organizations, different projects and technologies will continue to be developed at different speeds. How to handle the dependencies between these disparate systems with different iteration cycles? Consider the "canoncial problem" in this scenario: microservice A (releases daily) depends on a couple of additions to backend B (re...
The cloud. Like a comic book superhero, there seems to be no problem it can’t fix or cost it can’t slash. Yet making the transition is not always easy and production environments are still largely on premise. Taking some practical and sensible steps to reduce risk can also help provide a basis for a successful cloud transition. A plethora of surveys from the likes of IDG and Gartner show that more than 70 percent of enterprises have deployed at least one or more cloud application or workload. Yet a closer inspection at the data reveals less than half of these cloud projects involve production...
Growth hacking is common for startups to make unheard-of progress in building their business. Career Hacks can help Geek Girls and those who support them (yes, that's you too, Dad!) to excel in this typically male-dominated world. Get ready to learn the facts: Is there a bias against women in the tech / developer communities? Why are women 50% of the workforce, but hold only 24% of the STEM or IT positions? Some beginnings of what to do about it! In her Day 2 Keynote at 17th Cloud Expo, Sandy Carter, IBM General Manager Cloud Ecosystem and Developers, and a Social Business Evangelist, wil...
PubNub has announced the release of BLOCKS, a set of customizable microservices that give developers a simple way to add code and deploy features for realtime apps.PubNub BLOCKS executes business logic directly on the data streaming through PubNub’s network without splitting it off to an intermediary server controlled by the customer. This revolutionary approach streamlines app development, reduces endpoint-to-endpoint latency, and allows apps to better leverage the enormous scalability of PubNub’s Data Stream Network.
Container technology is shaping the future of DevOps and it’s also changing the way organizations think about application development. With the rise of mobile applications in the enterprise, businesses are abandoning year-long development cycles and embracing technologies that enable rapid development and continuous deployment of apps. In his session at DevOps Summit, Kurt Collins, Developer Evangelist at, examined how Docker has evolved into a highly effective tool for application delivery by allowing increasingly popular Mobile Backend-as-a-Service (mBaaS) platforms to quickly crea...
Apps and devices shouldn't stop working when there's limited or no network connectivity. Learn how to bring data stored in a cloud database to the edge of the network (and back again) whenever an Internet connection is available. In his session at 17th Cloud Expo, Ben Perlmutter, a Sales Engineer with IBM Cloudant, demonstrated techniques for replicating cloud databases with devices in order to build offline-first mobile or Internet of Things (IoT) apps that can provide a better, faster user experience, both offline and online. The focus of this talk was on IBM Cloudant, Apache CouchDB, and ...
Today air travel is a minefield of delays, hassles and customer disappointment. Airlines struggle to revitalize the experience. GE and M2Mi will demonstrate practical examples of how IoT solutions are helping airlines bring back personalization, reduce trip time and improve reliability. In their session at @ThingsExpo, Shyam Varan Nath, Principal Architect with GE, and Dr. Sarah Cooper, M2Mi’s VP Business Development and Engineering, explored the IoT cloud-based platform technologies driving this change including privacy controls, data transparency and integration of real time context with p...
I recently attended and was a speaker at the 4th International Internet of @ThingsExpo at the Santa Clara Convention Center. I also had the opportunity to attend this event last year and I wrote a blog from that show talking about how the “Enterprise Impact of IoT” was a key theme of last year’s show. I was curious to see if the same theme would still resonate 365 days later and what, if any, changes I would see in the content presented.
Cloud computing delivers on-demand resources that provide businesses with flexibility and cost-savings. The challenge in moving workloads to the cloud has been the cost and complexity of ensuring the initial and ongoing security and regulatory (PCI, HIPAA, FFIEC) compliance across private and public clouds. Manual security compliance is slow, prone to human error, and represents over 50% of the cost of managing cloud applications. Determining how to automate cloud security compliance is critical to maintaining positive ROI. Raxak Protect is an automated security compliance SaaS platform and ma...