Click here to close now.


Cloud Security Authors: Pat Romanski, Cloud Best Practices Network, Liz McMillan, Marc Crespi, Teresa Schoch

Related Topics: @CloudExpo, Microservices Expo, Cloud Security, @BigDataExpo, SDN Journal

@CloudExpo: Article

PaaS, Present, and Future

Platform as a Service is more than just the buzzword of the day – it’s the development & deployment approach of our dreams

Recently large numbers of consumers in the US were understandably upset and angry when online purchases that they made in the days just prior to Christmas were not delivered in time. Yet it was not so long ago that online (and traditional mail order) purchases almost always took a very long time, often weeks, to arrive. Order-to-delivery times of a few days, now considered normal, were unheard of and overnight was almost impossible to achieve.

This is just one more example of the many ways in which instant gratification has become the norm rather than the exception. People expect answers and results immediately, whether they are online or operating in the physical world. In information technology, Platform-as-a-Service (PaaS) is another evolution toward faster, "instant" gratification. PaaS offers a new way to support and deliver applications, leveraging cloud technology. It is still enabling the same activities involved with development and deployment that we have always practiced in IT, but with the cost, agility and scalability benefits of the cloud.

However, PaaS is faster - getting ideas to market quicker and opening new, cloud-based delivery options for existing applications. Because of the power it provides, it is clearly the "next big thing" for the developer community.

Understanding PaaS
Service is the key word in the PaaS acronym. Empowered by cloud computing service options, a PaaS computing platform can deliver a solution stack of services. PaaS service providers, in turn, offer up tools and libraries that support development, testing and instant deployment. It sounds simple and it is. To use an automotive analogy, it's like the development of electric starters... early Model Ts and other silent-film-era vehicles needed to be started by hand - like giant lawnmowers. At best it was unpleasant. At its worst, it could be dangerous.

But good engineering and new technology made electric starting systems affordable for everyone. No one missed the old way of doing things - people could concentrate on the task of driving and getting some place rather than the tricky art of simply starting the car.

PaaS is similar. It takes the familiar design-develop-deploy process and eliminates a lot of the cost and unpleasantness so you can concentrate on innovating, getting to market, and making money.

While there are many flavors of PaaS vendors, the common thread of offering application hosting services and deployment options is pretty much universal.

To make those concepts more understandable, I like to put PaaS into a visual structure that contrasts traditional on-premise practices with Infrastructure-a-a-Service (IaaS) and Software-as-a-Service (SaaS). In my simplified schematic (see illustration), the orange color denotes the functions that you need to worry about yourself. In the on-premises world, storage, server, networking, virtualization, the operating system, middleware, data, and applications all "belong" to you. It's a craft industry model where almost everything is procured, operated, managed, and customized by you and your organization. There are broad similarities from organization to organization, but there is always a lot of "reinventing the wheel."

For example, if performance is suffering due to storage limits (or even backups that are getting out of hand), you need to think about acquiring more hardware, refining tiering schemas, data management policies, retention goals, and more. Or if you need to bring remote users into the mix, it's up to you to provide the infrastructure.

For some organizations, that's fine. Maybe you are big enough that you can afford to be expert in every aspect and every layer of the stack. But for most organizations, simplifying the picture and focusing more on areas where they can better add value makes sense. Thus, IaaS - typified by services like Rackspace and AWS - has become a hugely popular option for deploying new or supplemental capacity and capability, and even providing a total replacement for on-premise investments.

The cloud-based IaaS providers offer physical or virtual machines and storage and the ability to scale services up and down according to customers' varying requirements (a so-called utility model).

PaaS Is the Next Step
PaaS takes the proven approach of IaaS and adds value - the expertise and the specific technology of the operating system and middleware layers - so that you can focus on your data and your key applications. While IaaS provides the elements of cloud computing to those with the capabilities to build their own platforms, PaaS goes a step further, delivering complex and highly labor-intensive middleware technology patterns.

PaaS is flexible and powerful - allowing self-service and self-provisioning of resources to support cloud architectures.

With PaaS, you bring your application, and the PaaS provider takes care of everything else, including:

  • Internet connectivity
  • Power
  • hardware
  • Operating systems
  • Databases
  • Web servers
  • Application servers
  • Monitoring
  • Backup
  • Restore
  • Failover
  • Scaling

Choices and the Market
Although PaaS is new, it's rapidly gaining momentum, with growth projected at 48 percent annually by Technavio, the research firm, and topping $6 billion in value by 2016.

As with any new technology or approach to doing business PaaS will appeal to different groups for different reasons. For example, PaaS can help ISVs extend the availability of a traditional software product or enable organizations to add new capabilities to their existing IT spectrum. It's also helpful to anyone wishing to achieve productivity gains, speed time to results, or reduce their capex costs.

Productivity PaaS offerings are often a model-driven approach to development and deployment that invoke high level programming languages, or even template-based software to help users, including those with little or no coding background, to create functioning business applications. Deployment is greatly simplified through PaaS because developers don't have to think about architecting, managing, or scaling the virtual machines that support the application.

PaaS offers a rapid route to SaaS if you want to be able to offer your application as a service and reach customers wherever they are. Likewise, if you are developing a new application, you want to eliminate boundaries. By choosing the right PaaS provider you can avoid concerns about development language or database technology. The PaaS provider can abstract those things in a way that allows you to focus on delivering functionality and value.

In the past, building an application required a commitment to a language or a database technology. With PaaS you don't need to be concerned about those issues. You only need to worry about your business domain expertise and usability.

Likewise, if you are aiming to modernize or use code you already have, PaaS will help expedite the trip to the cloud. It obviates the need to think about middleware and infrastructure and makes use of wizards and templates to update your application and even deliver new features quickly.

There are both public and private deployment options for PaaS. Many organizations love the idea of PaaS but, for a variety of reason, still balk at putting their mission-critical capabilities into a shared, public, environment. If that is the case for you, choose a PaaS that can be deployed in your own cloud environment where you can maintain some control, such as security and where data gets stored. This affords you the simplicity of PaaS and ensures future portability while providing the sense of security and ownership that many organizations still prefer.

Understanding some more about PaaS is the first step to selecting a provider. In addition, you should consider factors such:

  • Programming languages,
  • Database servers
  • Availability
  • Support
  • Ease of deployment and options
  • Portability
  • Security
  • Pricing

PaaS Now
PaaS technologies are so compelling because they have the potential to accelerate software development while recasting the way IT supports application development.

As you adopt PaaS, be sure to maintain a balance between the desire for speed and the necessity of planning and control. Tooling can help, but people are crucial too. As with any technological shift, PaaS adoption requires changes in how people work and demands collaboration if it is to be as successful as possible.

Last, but not least, PaaS should be viewed and acted upon as a substantial strategic opportunity - a chance to align agendas across IT and across the business. Development, operations, security, and infrastructure choices are all part of the mix with PaaS, providing a "once in a generation" opportunity to clarify, improve, and strengthen everything you do.

More Stories By Karen Tegan Padir

Karen Tegan Padir joined Progress Software in 2012 as senior vice president and business line executive for application development and subsequently moved into the CTO role. Among her previous experiences, she was a member of the Java Platform, Enterprise Edition team at Sun, helping to create one of most important “next big things” for developers.

Comments (1)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.

@ThingsExpo Stories
SYS-CON Events announced today that Super Micro Computer, Inc., a global leader in high-performance, high-efficiency server, storage technology and green computing, will exhibit at the 17th International Cloud Expo®, which will take place on November 3–5, 2015, at the Santa Clara Convention Center in Santa Clara, CA. Supermicro (NASDAQ: SMCI), the leading innovator in high-performance, high-efficiency server technology is a premier provider of advanced server Building Block Solutions® for Data Center, Cloud Computing, Enterprise IT, Hadoop/Big Data, HPC and Embedded Systems worldwide. Supermi...
As more intelligent IoT applications shift into gear, they’re merging into the ever-increasing traffic flow of the Internet. It won’t be long before we experience bottlenecks, as IoT traffic peaks during rush hours. Organizations that are unprepared will find themselves by the side of the road unable to cross back into the fast lane. As billions of new devices begin to communicate and exchange data – will your infrastructure be scalable enough to handle this new interconnected world?
Who are you? How do you introduce yourself? Do you use a name, or do you greet a friend by the last four digits of his social security number? Assuming you don’t, why are we content to associate our identity with 10 random digits assigned by our phone company? Identity is an issue that affects everyone, but as individuals we don’t spend a lot of time thinking about it. In his session at @ThingsExpo, Ben Klang, Founder & President of Mojo Lingo, will discuss the impact of technology on identity. Should we federate, or not? How should identity be secured? Who owns the identity? How is identity ...
This week, the team assembled in NYC for @Cloud Expo 2015 and @ThingsExpo 2015. For the past four years, this has been a must-attend event for MetraTech. We were happy to once again join industry visionaries, colleagues, customers and even competitors to share and explore the ways in which the Internet of Things (IoT) will impact our industry. Over the course of the show, we discussed the types of challenges we will collectively need to solve to capitalize on the opportunity IoT presents.
Today’s connected world is moving from devices towards things, what this means is that by using increasingly low cost sensors embedded in devices we can create many new use cases. These span across use cases in cities, vehicles, home, offices, factories, retail environments, worksites, health, logistics, and health. These use cases rely on ubiquitous connectivity and generate massive amounts of data at scale. These technologies enable new business opportunities, ways to optimize and automate, along with new ways to engage with users.
WebRTC converts the entire network into a ubiquitous communications cloud thereby connecting anytime, anywhere through any point. In his session at WebRTC Summit,, Mark Castleman, EIR at Bell Labs and Head of Future X Labs, will discuss how the transformational nature of communications is achieved through the democratizing force of WebRTC. WebRTC is doing for voice what HTML did for web content.
Through WebRTC, audio and video communications are being embedded more easily than ever into applications, helping carriers, enterprises and independent software vendors deliver greater functionality to their end users. With today’s business world increasingly focused on outcomes, users’ growing calls for ease of use, and businesses craving smarter, tighter integration, what’s the next step in delivering a richer, more immersive experience? That richer, more fully integrated experience comes about through a Communications Platform as a Service which allows for messaging, screen sharing, video...
SYS-CON Events announced today that Dyn, the worldwide leader in Internet Performance, will exhibit at SYS-CON's 17th International Cloud Expo®, which will take place on November 3-5, 2015, at the Santa Clara Convention Center in Santa Clara, CA. Dyn is a cloud-based Internet Performance company. Dyn helps companies monitor, control, and optimize online infrastructure for an exceptional end-user experience. Through a world-class network and unrivaled, objective intelligence into Internet conditions, Dyn ensures traffic gets delivered faster, safer, and more reliably than ever.
SYS-CON Events announced today that Sandy Carter, IBM General Manager Cloud Ecosystem and Developers, and a Social Business Evangelist, will keynote at the 17th International Cloud Expo®, which will take place on November 3–5, 2015, at the Santa Clara Convention Center in Santa Clara, CA.
With major technology companies and startups seriously embracing IoT strategies, now is the perfect time to attend @ThingsExpo in Silicon Valley. Learn what is going on, contribute to the discussions, and ensure that your enterprise is as "IoT-Ready" as it can be! Internet of @ThingsExpo, taking place Nov 3-5, 2015, at the Santa Clara Convention Center in Santa Clara, CA, is co-located with 17th Cloud Expo and will feature technical sessions from a rock star conference faculty and the leading industry players in the world. The Internet of Things (IoT) is the most profound change in personal an...
The Internet of Things (IoT) is growing rapidly by extending current technologies, products and networks. By 2020, Cisco estimates there will be 50 billion connected devices. Gartner has forecast revenues of over $300 billion, just to IoT suppliers. Now is the time to figure out how you’ll make money – not just create innovative products. With hundreds of new products and companies jumping into the IoT fray every month, there’s no shortage of innovation. Despite this, McKinsey/VisionMobile data shows "less than 10 percent of IoT developers are making enough to support a reasonably sized team....
The IoT market is on track to hit $7.1 trillion in 2020. The reality is that only a handful of companies are ready for this massive demand. There are a lot of barriers, paint points, traps, and hidden roadblocks. How can we deal with these issues and challenges? The paradigm has changed. Old-style ad-hoc trial-and-error ways will certainly lead you to the dead end. What is mandatory is an overarching and adaptive approach to effectively handle the rapid changes and exponential growth.
There will be 20 billion IoT devices connected to the Internet soon. What if we could control these devices with our voice, mind, or gestures? What if we could teach these devices how to talk to each other? What if these devices could learn how to interact with us (and each other) to make our lives better? What if Jarvis was real? How can I gain these super powers? In his session at 17th Cloud Expo, Chris Matthieu, co-founder and CTO of Octoblu, will show you!
Developing software for the Internet of Things (IoT) comes with its own set of challenges. Security, privacy, and unified standards are a few key issues. In addition, each IoT product is comprised of at least three separate application components: the software embedded in the device, the backend big-data service, and the mobile application for the end user's controls. Each component is developed by a different team, using different technologies and practices, and deployed to a different stack/target - this makes the integration of these separate pipelines and the coordination of software upd...
As a company adopts a DevOps approach to software development, what are key things that both the Dev and Ops side of the business must keep in mind to ensure effective continuous delivery? In his session at DevOps Summit, Mark Hydar, Head of DevOps, Ericsson TV Platforms, will share best practices and provide helpful tips for Ops teams to adopt an open line of communication with the development side of the house to ensure success between the two sides.
The IoT is upon us, but today’s databases, built on 30-year-old math, require multiple platforms to create a single solution. Data demands of the IoT require Big Data systems that can handle ingest, transactions and analytics concurrently adapting to varied situations as they occur, with speed at scale. In his session at @ThingsExpo, Chad Jones, chief strategy officer at Deep Information Sciences, will look differently at IoT data so enterprises can fully leverage their IoT potential. He’ll share tips on how to speed up business initiatives, harness Big Data and remain one step ahead by apply...
The Internet of Everything is re-shaping technology trends–moving away from “request/response” architecture to an “always-on” Streaming Web where data is in constant motion and secure, reliable communication is an absolute necessity. As more and more THINGS go online, the challenges that developers will need to address will only increase exponentially. In his session at @ThingsExpo, Todd Greene, Founder & CEO of PubNub, will explore the current state of IoT connectivity and review key trends and technology requirements that will drive the Internet of Things from hype to reality.
Today air travel is a minefield of delays, hassles and customer disappointment. Airlines struggle to revitalize the experience. GE and M2Mi will demonstrate practical examples of how IoT solutions are helping airlines bring back personalization, reduce trip time and improve reliability. In their session at @ThingsExpo, Shyam Varan Nath, Principal Architect with GE, and Dr. Sarah Cooper, M2Mi's VP Business Development and Engineering, will explore the IoT cloud-based platform technologies driving this change including privacy controls, data transparency and integration of real time context w...
"Matrix is an ambitious open standard and implementation that's set up to break down the fragmentation problems that exist in IP messaging and VoIP communication," explained John Woolf, Technical Evangelist at Matrix, in this interview at @ThingsExpo, held Nov 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA.
Nowadays, a large number of sensors and devices are connected to the network. Leading-edge IoT technologies integrate various types of sensor data to create a new value for several business decision scenarios. The transparent cloud is a model of a new IoT emergence service platform. Many service providers store and access various types of sensor data in order to create and find out new business values by integrating such data.