Welcome!

Linux Containers Authors: Yeshim Deniz, Elizabeth White, Stackify Blog, Nate Vickery, XebiaLabs Blog

Related Topics: Linux Containers

Linux Containers: Article

Succeeding with Open Source

Meeting your needs

In this issue, Bernard Golden, author of Succeeding with Open Source, discusses open source software, its pros and cons, and how to choose the right Linux implementation for your business.

What is open source software and how is it different from traditional software?
The primary difference between open source software and traditional software is the licensing conditions under which open source is distributed. Traditional software licenses tightly control the use and distribution of the software in order to ensure consistency, so they can realize revenues from license sales. This means, for example, you are usually restricted as to how many machines you may install the software on.

Open source software, by contrast, is distributed under licenses designed to encourage widespread use with few restrictions. This means you can use the software on as many machines as you choose.

Another important difference between open source and traditional software is that open source is distributed as source code, which users are encouraged to modify and redistribute. Users can modify the product to better serve their needs rather than being forced to live with the product's functionality as is. One of the few restrictions about open source is that, should you modify the product and redistribute it, you are expected to make your source changes available.

This is a general overview of open source software licenses. There are additional nuances depending upon the specific license. For most IT shops, license differences don't really mean anything because they don't modify the product and don't distribute to other organizations. If you want to know more about licenses, Larry Rosen's book Open Source Licensing: Software Freedom and Intellectual Property Law (Prentice Hall PTR, 2004) is an excellent reference.

Is all open source software also free?
Open source software tends to be extremely inexpensive, available on CDs at a low price, and usually also available for download at no charge. Open source products are usually not built by commercial entities but rather by informal project teams, so there is no company as such that distributes and charges for the product.

Anyone can take an open source product and distribute (and charge) for it; however, open source licenses preclude a distributor from imposing conditions on users and preventing them from further distributing the product. What this means, in effect, is that even if a commercial entity distributes an open source product at a given price, the purchaser can then make it available to others for free. Essentially, this forces distribution at no cost, or at the cost of distribution. So, open source software tends to be available at no cost.

This discussion applies to the software itself. There are many organizations that offer open source support, training, consulting, and other services, all of which have a price. Since software has virtually no marginal costs associated with additional copies, open source software tends to be free; however, open source services have significant costs like labor, marketing, and capital, and therefore are not free.

What questions should managers be asking their employees when the employees suggest using open source tools?
The most important question a manager should ask is, "How mature are the product elements our organization needs?" Because open source is so easy to download, many times implementation of the software begins before other important organization requirements like training, documentation, support, and so forth are considered. A formal process to assess the product in its entirety is important. The Open Source Maturity Model, described in Succeeding with Open Source, is a tool that enables IT shops to perform open source assessments. Without asking the question about the maturity of all the product elements, the organization runs the risk that it may be unprepared to support the product it has implemented.

What are the basic advantages and disadvantages of using open source software?
For most organizations the biggest advantages of open source are its low cost and control. We've talked about pricing already, but control can be just as important. Using open source, organizations have a lot more ability to use software in ways that work for them. They can implement as many copies as they want, rather than being limited to only installing on certain machines. Organizations can control how often and how soon they want to upgrade to a new version of the software, rather than being forced to move based on the vendor's plans. There's no vendor lock-in either, since the software is not usually provided by a commercial entity. Finally, the availability of source code means that, should it choose, the organization can modify the product to better suits its needs - no one-size-fits-all situation.

The downside to open source is implied by the answer to your third question. Open source is much more of an unbundled product compared to its commercial counterpart. The other product elements users can usually depend on (training, etc.) need to be found and assessed by the user organization. In effect, IT organizations need to take on an integration role. This integration responsibility is the flip side of the enhanced control described above: the control carries responsibility along with it.

There are so many open source software packages around. How do I know which ones are "ready for prime time"?
As noted, a formal process like the OSMM is important to determine if a given product is suitable for your organization. Relying on "buzz" or opinions expressed on product forums is dangerous because the organization's requirements aren't taken into account. Only by assessing all of the product's elements in light of the organization's requirements can it be determined if the product is "ready for prime time."

Which open source packages provide the greatest value for users in terms of overall capability and maturity?
This is a great question. Many organizations have realized excellent ROI on their Linux implementations and are eager to consider other open source packages, but aren't sure where to turn for other open source candidates. The broad coalition of major technology providers that endorsed Linux is not so obvious for other products, so it takes a bit more persistence to find good products. I call this search "reaching into second- and third-tier open source products," not so much because they're not good quality, but because they're not so well known. The best established of the lesser-known products are MySQL (www.mysql.com) and JBoss (www.jboss.org), both excellent candidates for the enterprise software stack. MySQL is a very fast SQL database, while JBoss is a fully certified J2EE application server.

The Apache Software Foundation (www.apache.org) is an umbrella organization for a number of valuable open source applications like Struts (Java Web applications), SpamAssassin (anti-spam software), and some Web services software like Axis.

Zope (www.zope.org) is an enterprise content management system designed to enable decentralized control of Web site content. Plone (www.plone.org) is a portal product built on top of Zope. Computer Associates has recently announced support for Zope and participated in the creation of the Plone Foundation.

Snort (www.snort.org) is a network Intrusion Detection System that helps organizations improve their security by doing network traffic and protocol analysis as well as packet logging and attack detection.

This is by no means an exhaustive list; there are over 80,000 open source products and it's impossible to keep up with all of them. The critical thing to keep in mind is that each of them must be assessed for maturity in light of an organization's requirements to ensure that the product in question will serve its intended purpose.

About Bernard Golden
Bernard Golden is the CEO of Navica.
[email protected]

More Stories By Kevin Bedell

Kevin Bedell, one of the founding editors of Linux.SYS-CON.com, writes and speaks frequently on Linux and open source. He is the director of consulting and training for Black Duck Software.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


@ThingsExpo Stories
The explosion of new web/cloud/IoT-based applications and the data they generate are transforming our world right before our eyes. In this rush to adopt these new technologies, organizations are often ignoring fundamental questions concerning who owns the data and failing to ask for permission to conduct invasive surveillance of their customers. Organizations that are not transparent about how their systems gather data telemetry without offering shared data ownership risk product rejection, regu...
Multiple data types are pouring into IoT deployments. Data is coming in small packages as well as enormous files and data streams of many sizes. Widespread use of mobile devices adds to the total. In this power panel at @ThingsExpo, moderated by Conference Chair Roger Strukhoff, panelists will look at the tools and environments that are being put to use in IoT deployments, as well as the team skills a modern enterprise IT shop needs to keep things running, get a handle on all this data, and deli...
SYS-CON Events announced today that Grape Up will exhibit at SYS-CON's 21st International Cloud Expo®, which will take place on Oct. 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Grape Up is a software company specializing in cloud native application development and professional services related to Cloud Foundry PaaS. With five expert teams that operate in various sectors of the market across the U.S. and Europe, Grape Up works with a variety of customers from emergi...
20th Cloud Expo, taking place June 6-8, 2017, at the Javits Center in New York City, NY, will feature technical sessions from a rock star conference faculty and the leading industry players in the world. Cloud computing is now being embraced by a majority of enterprises of all sizes. Yesterday's debate about public vs. private has transformed into the reality of hybrid cloud: a recent survey shows that 74% of enterprises have a hybrid cloud strategy.
SYS-CON Events announced today that Super Micro Computer, Inc., a global leader in compute, storage and networking technologies, will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. Supermicro (NASDAQ: SMCI), the leading innovator in high-performance, high-efficiency server technology, is a premier provider of advanced server Building Block Solutions® for Data Center, Cloud Computing, Enterprise IT, Hadoop/...
Amazon has gradually rolled out parts of its IoT offerings in the last year, but these are just the tip of the iceberg. In addition to optimizing their back-end AWS offerings, Amazon is laying the ground work to be a major force in IoT – especially in the connected home and office. Amazon is extending its reach by building on its dominant Cloud IoT platform, its Dash Button strategy, recently announced Replenishment Services, the Echo/Alexa voice recognition control platform, the 6-7 strategic...
In his keynote at @ThingsExpo, Chris Matthieu, Director of IoT Engineering at Citrix and co-founder and CTO of Octoblu, focused on building an IoT platform and company. He provided a behind-the-scenes look at Octoblu’s platform, business, and pivots along the way (including the Citrix acquisition of Octoblu).
Bert Loomis was a visionary. This general session will highlight how Bert Loomis and people like him inspire us to build great things with small inventions. In their general session at 19th Cloud Expo, Harold Hannon, Architect at IBM Bluemix, and Michael O'Neill, Strategic Business Development at Nvidia, discussed the accelerating pace of AI development and how IBM Cloud and NVIDIA are partnering to bring AI capabilities to "every day," on-demand. They also reviewed two "free infrastructure" pr...
Judith Hurwitz is president and CEO of Hurwitz & Associates, a Needham, Mass., research and consulting firm focused on emerging technology, including big data, cognitive computing and governance. She is co-author of the book Cognitive Computing and Big Data Analytics, published in 2015. Her Cloud Expo session, "What Is the Business Imperative for Cognitive Computing?" is scheduled for Wednesday, June 8, at 8:40 a.m. In it, she puts cognitive computing into perspective with its value to the busin...
SYS-CON Events announced today that Hitachi, the leading provider the Internet of Things and Digital Transformation, will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. Hitachi Data Systems, a wholly owned subsidiary of Hitachi, Ltd., offers an integrated portfolio of services and solutions that enable digital transformation through enhanced data management, governance, mobility and analytics. We help globa...
Cognitive Computing is becoming the foundation for a new generation of solutions that have the potential to transform business. Unlike traditional approaches to building solutions, a cognitive computing approach allows the data to help determine the way applications are designed. This contrasts with conventional software development that begins with defining logic based on the current way a business operates. In her session at 18th Cloud Expo, Judith S. Hurwitz, President and CEO of Hurwitz & ...
Financial Technology has become a topic of intense interest throughout the cloud developer and enterprise IT communities. Accordingly, attendees at the upcoming 20th Cloud Expo at the Javits Center in New York, June 6-8, 2017, will find fresh new content in a new track called FinTech.
SYS-CON Events announced today that Interoute, owner-operator of one of Europe's largest networks and a global cloud services platform, has been named “Bronze Sponsor” of SYS-CON's 20th Cloud Expo, which will take place on June 6-8, 2017 at the Javits Center in New York, New York. Interoute is the owner-operator of one of Europe's largest networks and a global cloud services platform which encompasses 12 data centers, 14 virtual data centers and 31 colocation centers, with connections to 195 add...
The age of Digital Disruption is evolving into the next era – Digital Cohesion, an age in which applications securely self-assemble and deliver predictive services that continuously adapt to user behavior. Information from devices, sensors and applications around us will drive services seamlessly across mobile and fixed devices/infrastructure. This evolution is happening now in software defined services and secure networking. Four key drivers – Performance, Economics, Interoperability and Trust ...
Grape Up is a software company, specialized in cloud native application development and professional services related to Cloud Foundry PaaS. With five expert teams that operate in various sectors of the market across the USA and Europe, we work with a variety of customers from emerging startups to Fortune 1000 companies.
Cybersecurity is a critical component of software development in many industries including medical devices. However, code is not always written to be robust or secure from the unknown or the unexpected. This gap can make medical devices susceptible to cybersecurity attacks ranging from compromised personal health information to life-sustaining treatment. In his session at @ThingsExpo, Clark Fortney, Software Engineer at Battelle, will discuss how programming oversight using key methods can incre...
The Internet of Things is clearly many things: data collection and analytics, wearables, Smart Grids and Smart Cities, the Industrial Internet, and more. Cool platforms like Arduino, Raspberry Pi, Intel's Galileo and Edison, and a diverse world of sensors are making the IoT a great toy box for developers in all these areas. In this Power Panel at @ThingsExpo, moderated by Conference Chair Roger Strukhoff, panelists discussed what things are the most important, which will have the most profound e...
@ThingsExpo has been named the Most Influential ‘Smart Cities - IIoT' Account and @BigDataExpo has been named fourteenth by Right Relevance (RR), which provides curated information and intelligence on approximately 50,000 topics. In addition, Right Relevance provides an Insights offering that combines the above Topics and Influencers information with real time conversations to provide actionable intelligence with visualizations to enable decision making. The Insights service is applicable to eve...
SYS-CON Events announced today that SoftLayer, an IBM Company, has been named “Gold Sponsor” of SYS-CON's 18th Cloud Expo, which will take place on June 7-9, 2016, at the Javits Center in New York, New York. SoftLayer, an IBM Company, provides cloud infrastructure as a service from a growing number of data centers and network points of presence around the world. SoftLayer’s customers range from Web startups to global enterprises.
SYS-CON Events announced today that Super Micro Computer, Inc., a global leader in compute, storage and networking technologies, will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. Supermicro (NASDAQ: SMCI), the leading innovator in high-performance, high-efficiency server technology, is a premier provider of advanced server Building Block Solutions® for Data Center, Cloud Computing, Enterprise IT, Hadoop/...