Infrastructure as code
Infrastructure as code is the process of managing and provisioning computer data centers through machine-readable definition files, rather than physical hardware configuration or interactive configuration tools.
The IT infrastructure managed by this process comprises both physical equipment, such as bare-metal servers, as well as virtual machines, and associated configuration resources.
The definitions may be in a version control system.
It can use either scripts or declarative definitions, rather than manual processes, but the term is more often used to promote declarative approaches.
Overview
IaC grew as a response to the difficulty posed by utility computing and second-generation web frameworks. In 2006, the launch of Amazon Web Services’ Elastic Compute Cloud and the 1.0 version of Ruby on Rails just months before created widespread scaling problems in the enterprise that were previously experienced only at large, multi-national companies. With new tools emerging to handle this ever growing field, the idea of IaC was born. The thought of modelling infrastructure with code, and then having the ability to design, implement, and deploy applications infrastructure with known software best practices appealed to both software developers and IT infrastructure administrators. The ability to treat infrastructure like code and use the same tools as any other software project would allow developers to rapidly deploy applications.Added value and advantages
The value of IaC can be broken down into three measurable categories: cost, speed and risk. Cost reduction aims at helping not only the enterprise financially, but also in terms of people and effort, meaning that by removing the manual component, people are able to refocus their efforts towards other enterprise tasks. Infrastructure automation enables speed through faster execution when configuring your infrastructure and aims at providing visibility to help other teams across the enterprise work quickly and more efficiently. Automation removes the risk associated with human error, like manual misconfiguration; removing this can decrease downtime and increase reliability. These outcomes and attributes help the enterprise move towards implementing a culture of DevOps, the combined working of development and operations.Types of approaches
There are generally three approaches to IaC: declarative vs. imperative vs. intelligent. The difference between the declarative, the imperative and the intelligent approach is essentially 'what' versus 'how' versus 'why' . The declarative approach focuses on what the eventual target configuration should be; the imperative focuses on how the infrastructure is to be changed to meet this; the intelligent approach focuses on why the configuration should be a certain way in consideration of all the co-relationships and co-dependencies of multiple applications running on the same infrastructure typically found in production. The declarative approach defines the desired state and the system executes what needs to happen to achieve that desired state. Imperative defines specific commands that need to be executed in the appropriate order to end with the desired conclusion. The intelligent determines the correct desired state before the system executes what needs to happen to achieve a desired state that does not impact co-dependent applications. Environment aware desired state is the next generation of IaC.Methods
There are two methods of IaC: 'push' and 'pull' . The main difference is the manner in which the servers are told how to be configured. In the pull method the server to be configured will pull its configuration from the controlling server. In the push method the controlling server pushes the configuration to the destination system.Tools
There are many tools that fulfill infrastructure automation capabilities and use IaC. Broadly speaking, any framework or tool that performs changes or configures infrastructure declaratively or imperatively based on a programmatic approach can be considered IaC. Traditionally, server automation and configuration management tools were used to accomplish IaC. Now enterprises are also using continuous configuration automation tools or stand-alone IaC frameworks, such as Microsoft’s PowerShell DSC or AWS CloudFormation.Continuous configuration automation
All continuous configuration automation tools can be thought of as an extension of traditional IaC frameworks. They leverage IaC to change, configure, and automate infrastructure, and they also provide visibility, efficiency and flexibility in how infrastructure is managed. These additional attributes provide enterprise-level security and compliance - making companies keen on implementing these types of tools.Community content
An important aspect when considering CCA tools, if they are open source, is the community content. As Gartner states, the value of CCA tools is “as dependent on user-community-contributed content and support as it is on the commercial maturity and performance of the automation tooling.” Vendors like Puppet and Chef, those that have been around a significant amount of time, have created their own communities. Chef has Chef Community Repository and Puppet has PuppetForge. Other vendors rely on adjacent communities and leverage other IaC frameworks such as PowerShell DSC. New vendors are emerging that are not content driven, but model driven with the intelligence in the product to deliver content. These visual, object-oriented systems work well for developers, but they are especially useful to production oriented DevOps and operations constituents that value models versus scripting for content. As the field continues to develop and change, the community based content will become ever important to how IaC tools are used, unless they are model driven and object oriented.Notable CCA tools include:
| Tool | Released by | Method | Approach | Written in | Comments |
| Pulumi | Pulumi | Push | Declarative and imperative | TypeScript, Python, Go, C | - |
| Chef | Chef | Pull | Declarative and imperative | Ruby | - |
| Otter | Inedo | Push | Declarative and imperative | - | Windows oriented |
| Puppet | Puppet | Pull | Declarative | C++ & Clojure since 4.0, Ruby | - |
| SaltStack | SaltStack | Push and Pull | Declarative and imperative | Python | - |
| CFEngine | Northern.tech | Pull | Declarative | C | - |
| Terraform | HashiCorp | Push | Declarative | Go | - |
| DSC | Microsoft | Push/Pull | Declarative/Imperative | PowerShell | - |
| Ansible / Ansible Tower | Red Hat | Push | Declarative and imperative | Python | - |
| Paco | Waterbear Cloud | Push | Declarative | Python | - |
Other tools include AWS CloudFormation, cdist, StackStorm and Juju.