Welcome!

Cloud Security Authors: Elizabeth White, Dan Potter, Christopher Harrold, Craig Lowell, Richard Hale

Related Topics: @CloudExpo, Microservices Expo, Cloud Security, @BigDataExpo, SDN Journal

@CloudExpo: Article

PaaS, Present, and Future

Platform as a Service is more than just the buzzword of the day – it’s the development & deployment approach of our dreams

Recently large numbers of consumers in the US were understandably upset and angry when online purchases that they made in the days just prior to Christmas were not delivered in time. Yet it was not so long ago that online (and traditional mail order) purchases almost always took a very long time, often weeks, to arrive. Order-to-delivery times of a few days, now considered normal, were unheard of and overnight was almost impossible to achieve.

This is just one more example of the many ways in which instant gratification has become the norm rather than the exception. People expect answers and results immediately, whether they are online or operating in the physical world. In information technology, Platform-as-a-Service (PaaS) is another evolution toward faster, "instant" gratification. PaaS offers a new way to support and deliver applications, leveraging cloud technology. It is still enabling the same activities involved with development and deployment that we have always practiced in IT, but with the cost, agility and scalability benefits of the cloud.

However, PaaS is faster - getting ideas to market quicker and opening new, cloud-based delivery options for existing applications. Because of the power it provides, it is clearly the "next big thing" for the developer community.

Understanding PaaS
Service is the key word in the PaaS acronym. Empowered by cloud computing service options, a PaaS computing platform can deliver a solution stack of services. PaaS service providers, in turn, offer up tools and libraries that support development, testing and instant deployment. It sounds simple and it is. To use an automotive analogy, it's like the development of electric starters... early Model Ts and other silent-film-era vehicles needed to be started by hand - like giant lawnmowers. At best it was unpleasant. At its worst, it could be dangerous.

But good engineering and new technology made electric starting systems affordable for everyone. No one missed the old way of doing things - people could concentrate on the task of driving and getting some place rather than the tricky art of simply starting the car.

PaaS is similar. It takes the familiar design-develop-deploy process and eliminates a lot of the cost and unpleasantness so you can concentrate on innovating, getting to market, and making money.

While there are many flavors of PaaS vendors, the common thread of offering application hosting services and deployment options is pretty much universal.

To make those concepts more understandable, I like to put PaaS into a visual structure that contrasts traditional on-premise practices with Infrastructure-a-a-Service (IaaS) and Software-as-a-Service (SaaS). In my simplified schematic (see illustration), the orange color denotes the functions that you need to worry about yourself. In the on-premises world, storage, server, networking, virtualization, the operating system, middleware, data, and applications all "belong" to you. It's a craft industry model where almost everything is procured, operated, managed, and customized by you and your organization. There are broad similarities from organization to organization, but there is always a lot of "reinventing the wheel."

For example, if performance is suffering due to storage limits (or even backups that are getting out of hand), you need to think about acquiring more hardware, refining tiering schemas, data management policies, retention goals, and more. Or if you need to bring remote users into the mix, it's up to you to provide the infrastructure.

For some organizations, that's fine. Maybe you are big enough that you can afford to be expert in every aspect and every layer of the stack. But for most organizations, simplifying the picture and focusing more on areas where they can better add value makes sense. Thus, IaaS - typified by services like Rackspace and AWS - has become a hugely popular option for deploying new or supplemental capacity and capability, and even providing a total replacement for on-premise investments.

The cloud-based IaaS providers offer physical or virtual machines and storage and the ability to scale services up and down according to customers' varying requirements (a so-called utility model).

PaaS Is the Next Step
PaaS takes the proven approach of IaaS and adds value - the expertise and the specific technology of the operating system and middleware layers - so that you can focus on your data and your key applications. While IaaS provides the elements of cloud computing to those with the capabilities to build their own platforms, PaaS goes a step further, delivering complex and highly labor-intensive middleware technology patterns.

PaaS is flexible and powerful - allowing self-service and self-provisioning of resources to support cloud architectures.

With PaaS, you bring your application, and the PaaS provider takes care of everything else, including:

  • Internet connectivity
  • Power
  • hardware
  • Operating systems
  • Databases
  • Web servers
  • Application servers
  • Monitoring
  • Backup
  • Restore
  • Failover
  • Scaling

Choices and the Market
Although PaaS is new, it's rapidly gaining momentum, with growth projected at 48 percent annually by Technavio, the research firm, and topping $6 billion in value by 2016.

As with any new technology or approach to doing business PaaS will appeal to different groups for different reasons. For example, PaaS can help ISVs extend the availability of a traditional software product or enable organizations to add new capabilities to their existing IT spectrum. It's also helpful to anyone wishing to achieve productivity gains, speed time to results, or reduce their capex costs.

Productivity PaaS offerings are often a model-driven approach to development and deployment that invoke high level programming languages, or even template-based software to help users, including those with little or no coding background, to create functioning business applications. Deployment is greatly simplified through PaaS because developers don't have to think about architecting, managing, or scaling the virtual machines that support the application.

PaaS offers a rapid route to SaaS if you want to be able to offer your application as a service and reach customers wherever they are. Likewise, if you are developing a new application, you want to eliminate boundaries. By choosing the right PaaS provider you can avoid concerns about development language or database technology. The PaaS provider can abstract those things in a way that allows you to focus on delivering functionality and value.

In the past, building an application required a commitment to a language or a database technology. With PaaS you don't need to be concerned about those issues. You only need to worry about your business domain expertise and usability.

Likewise, if you are aiming to modernize or use code you already have, PaaS will help expedite the trip to the cloud. It obviates the need to think about middleware and infrastructure and makes use of wizards and templates to update your application and even deliver new features quickly.

There are both public and private deployment options for PaaS. Many organizations love the idea of PaaS but, for a variety of reason, still balk at putting their mission-critical capabilities into a shared, public, environment. If that is the case for you, choose a PaaS that can be deployed in your own cloud environment where you can maintain some control, such as security and where data gets stored. This affords you the simplicity of PaaS and ensures future portability while providing the sense of security and ownership that many organizations still prefer.

Understanding some more about PaaS is the first step to selecting a provider. In addition, you should consider factors such:

  • Programming languages,
  • Database servers
  • Availability
  • Support
  • Ease of deployment and options
  • Portability
  • Security
  • Pricing

PaaS Now
PaaS technologies are so compelling because they have the potential to accelerate software development while recasting the way IT supports application development.

As you adopt PaaS, be sure to maintain a balance between the desire for speed and the necessity of planning and control. Tooling can help, but people are crucial too. As with any technological shift, PaaS adoption requires changes in how people work and demands collaboration if it is to be as successful as possible.

Last, but not least, PaaS should be viewed and acted upon as a substantial strategic opportunity - a chance to align agendas across IT and across the business. Development, operations, security, and infrastructure choices are all part of the mix with PaaS, providing a "once in a generation" opportunity to clarify, improve, and strengthen everything you do.

More Stories By Karen Tegan Padir

Karen Tegan Padir joined Progress Software in 2012 as senior vice president and business line executive for application development and subsequently moved into the CTO role. Among her previous experiences, she was a member of the Java Platform, Enterprise Edition team at Sun, helping to create one of most important “next big things” for developers.

Comments (1)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


@ThingsExpo Stories
The IETF draft standard for M2M certificates is a security solution specifically designed for the demanding needs of IoT/M2M applications. In his session at @ThingsExpo, Brian Romansky, VP of Strategic Technology at TrustPoint Innovation, explained how M2M certificates can efficiently enable confidentiality, integrity, and authenticity on highly constrained devices.
In today's uber-connected, consumer-centric, cloud-enabled, insights-driven, multi-device, global world, the focus of solutions has shifted from the product that is sold to the person who is buying the product or service. Enterprises have rebranded their business around the consumers of their products. The buyer is the person and the focus is not on the offering. The person is connected through multiple devices, wearables, at home, on the road, and in multiple locations, sometimes simultaneously...
Basho Technologies has announced the latest release of Basho Riak TS, version 1.3. Riak TS is an enterprise-grade NoSQL database optimized for Internet of Things (IoT). The open source version enables developers to download the software for free and use it in production as well as make contributions to the code and develop applications around Riak TS. Enhancements to Riak TS make it quick, easy and cost-effective to spin up an instance to test new ideas and build IoT applications. In addition to...
Identity is in everything and customers are looking to their providers to ensure the security of their identities, transactions and data. With the increased reliance on cloud-based services, service providers must build security and trust into their offerings, adding value to customers and improving the user experience. Making identity, security and privacy easy for customers provides a unique advantage over the competition.
CenturyLink has announced that application server solutions from GENBAND are now available as part of CenturyLink’s Networx contracts. The General Services Administration (GSA)’s Networx program includes the largest telecommunications contract vehicles ever awarded by the federal government. CenturyLink recently secured an extension through spring 2020 of its offerings available to federal government agencies via GSA’s Networx Universal and Enterprise contracts. GENBAND’s EXPERiUS™ Application...
"We've discovered that after shows 80% if leads that people get, 80% of the conversations end up on the show floor, meaning people forget about it, people forget who they talk to, people forget that there are actual business opportunities to be had here so we try to help out and keep the conversations going," explained Jeff Mesnik, Founder and President of ContentMX, in this SYS-CON.tv interview at 18th Cloud Expo, held June 7-9, 2016, at the Javits Center in New York City, NY.
I wanted to gather all of my Internet of Things (IOT) blogs into a single blog (that I could later use with my University of San Francisco (USF) Big Data “MBA” course). However as I started to pull these blogs together, I realized that my IOT discussion lacked a vision; it lacked an end point towards which an organization could drive their IOT envisioning, proof of value, app dev, data engineering and data science efforts. And I think that the IOT end point is really quite simple…
Internet of @ThingsExpo, taking place November 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA, is co-located with the 19th International Cloud Expo and will feature technical sessions from a rock star conference faculty and the leading industry players in the world and ThingsExpo Silicon Valley Call for Papers is now open.
You think you know what’s in your data. But do you? Most organizations are now aware of the business intelligence represented by their data. Data science stands to take this to a level you never thought of – literally. The techniques of data science, when used with the capabilities of Big Data technologies, can make connections you had not yet imagined, helping you discover new insights and ask new questions of your data. In his session at @ThingsExpo, Sarbjit Sarkaria, data science team lead ...
WebRTC is bringing significant change to the communications landscape that will bridge the worlds of web and telephony, making the Internet the new standard for communications. Cloud9 took the road less traveled and used WebRTC to create a downloadable enterprise-grade communications platform that is changing the communication dynamic in the financial sector. In his session at @ThingsExpo, Leo Papadopoulos, CTO of Cloud9, discussed the importance of WebRTC and how it enables companies to focus...
"My role is working with customers, helping them go through this digital transformation. I spend a lot of time talking to banks, big industries, manufacturers working through how they are integrating and transforming their IT platforms and moving them forward," explained William Morrish, General Manager Product Sales at Interoute, in this SYS-CON.tv interview at 18th Cloud Expo, held June 7-9, 2016, at the Javits Center in New York City, NY.
SYS-CON Events announced today that 910Telecom will exhibit at the 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. Housed in the classic Denver Gas & Electric Building, 910 15th St., 910Telecom is a carrier-neutral telecom hotel located in the heart of Denver. Adjacent to CenturyLink, AT&T, and Denver Main, 910Telecom offers connectivity to all major carriers, Internet service providers, Internet backbones and ...
SYS-CON Events announced today that LeaseWeb USA, a cloud Infrastructure-as-a-Service (IaaS) provider, will exhibit at the 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. LeaseWeb is one of the world's largest hosting brands. The company helps customers define, develop and deploy IT infrastructure tailored to their exact business needs, by combining various kinds cloud solutions.
For basic one-to-one voice or video calling solutions, WebRTC has proven to be a very powerful technology. Although WebRTC’s core functionality is to provide secure, real-time p2p media streaming, leveraging native platform features and server-side components brings up new communication capabilities for web and native mobile applications, allowing for advanced multi-user use cases such as video broadcasting, conferencing, and media recording.
SYS-CON Events announced today that Venafi, the Immune System for the Internet™ and the leading provider of Next Generation Trust Protection, will exhibit at @DevOpsSummit at 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. Venafi is the Immune System for the Internet™ that protects the foundation of all cybersecurity – cryptographic keys and digital certificates – so they can’t be misused by bad guys in attacks...
ReadyTalk has expanded the capabilities of the FoxDen collaboration platform announced late last year to include FoxDen Connect, an in-room video collaboration experience that launches with a single touch. With FoxDen Connect, users can now not only engage in HD video conferencing between iOS and Android mobile devices or Chrome browsers, but also set up in-person meeting rooms for video interactions. A host’s mobile device automatically recognizes the presence of a meeting room via beacon tech...
The cloud market growth today is largely in public clouds. While there is a lot of spend in IT departments in virtualization, these aren’t yet translating into a true “cloud” experience within the enterprise. What is stopping the growth of the “private cloud” market? In his general session at 18th Cloud Expo, Nara Rajagopalan, CEO of Accelerite, explored the challenges in deploying, managing, and getting adoption for a private cloud within an enterprise. What are the key differences between wh...
It’s 2016: buildings are smart, connected and the IoT is fundamentally altering how control and operating systems work and speak to each other. Platforms across the enterprise are networked via inexpensive sensors to collect massive amounts of data for analytics, information management, and insights that can be used to continuously improve operations. In his session at @ThingsExpo, Brian Chemel, Co-Founder and CTO of Digital Lumens, will explore: The benefits sensor-networked systems bring to ...
On Dice.com, the number of job postings asking for skill in Amazon Web Services increased 76 percent between June 2015 and June 2016. Salesforce.com saw its own skill mentions increase 37 percent, while DevOps and Cloud rose 35 percent and 28 percent, respectively. Even as they expand their presence in the cloud, companies are also looking for tech professionals who can manage projects, crunch data, and figure out how to make systems run more autonomously. Mentions of ‘data science’ as a skill ...
Manufacturers are embracing the Industrial Internet the same way consumers are leveraging Fitbits – to improve overall health and wellness. Both can provide consistent measurement, visibility, and suggest performance improvements customized to help reach goals. Fitbit users can view real-time data and make adjustments to increase their activity. In his session at @ThingsExpo, Mark Bernardo Professional Services Leader, Americas, at GE Digital, discussed how leveraging the Industrial Internet a...