Resource Center
Hitachi ID Facebook Page Hitachi ID Twitter Page Find us on Google+ Hitachi ID YouTube Page

Appliances vs. Traditional Servers: Pros and Cons

Introduction

This document is intended to help organizations decide whether an appliance or a traditional server is an appropriate platform for hosting enterprise software applications. It is organized as follows:

Definitions

A growing number of vendors are offering what would otherwise be software-only solutions in the form of dedicated appliances, which incorporate both hardware and software. In this section, terms and concepts relevant to appliances are introduced, so that the subsequent discussion can be more clear.

Enterprise Software Application

This document is concerned specifically with "enterprise software applications." That is, applications which:

  1. Run on one or more centralized servers.
  2. Provide a service to many users, possibly distributed across multiple sites.
  3. Must be scalable and reliable, because many users would be adversely impacted by loss of access to the application.

At issue is whether it is preferable to host such applications on appliance servers or traditional servers, as defined below.

Traditional Server

(1)

A traditional server consists of several components, possibly from different vendors, which may have to be assembled into a unit by the organization which wishes to run the enterprise software application:

  1. Hardware -- such as X86-style servers -- from vendors such as IBM, HP or Dell.
  2. An operating system, such as Windows or Linux.
  3. Possibly a web server, such as IIS or Apache.
  4. Possibly a database server, such as Oracle Database, Microsoft SQL Server or MySQL.

Normally, an organization will have many such servers, and deploy one or more applications on each one.

The above description is only approximate. For example, hardware may be virtualized, other operating systems are available and other components may be required.

Appliance Server

An appliance server is one where all of the required functional components, including those identified in (_label_trad-server), plus the application software itself, are integrated and configured into a unit and purchased from a single vendor.

Client Device

Users sign into applications using a client device. This may be a desktop or laptop PC, a telephone or smart phone, a PDA, etc.

Modern applications often use a web interface to interact with users, which means that the user's hardware runs a web browser, which presents a graphical user interface to the user.

Types of Appliances

Home vs. Enterprise Equipment

Many home users are very familiar with appliances, if not with the term "server appliance," in the form of wireless routers, small hardware firewalls, print sharing devices, network attached storage, etc. These devices are small, inexpensive and not really scalable or flexible enough to meet the needs of medium to large organizations.

Commodity Hardware vs. Specialized Processors

Server appliances intended for enterprise deployment have two basic types:

  1. Commodity server hardware, with pre-installed software.
  2. Specialized processing hardware.

The commodity hardware approach serves mainly to reduce the initial setup and configuration effort for organizations deploying the product. "Inside the box" is just a traditional software server, assembled and supported by the vendor.

Specialized processing hardware is used mainly where the performance characteristics of the system cannot be easily reached with a conventional server. This is typically required in the context of specialized networking equipment, such as SSL processors, virus scanners, application firewalls and more, all of which must perform complex at "wire speeds" -- 100Mbps or more.

Appliance Servers: Benefits

The main benefits promoted by vendors who sell solutions in the form of appliances are:

  1. Easy installation:

    The operating system and application software are pre-installed on the hardware, which reduces installation time and effort. To the extent possible, the software is normally either pre-configured or self-configuring.

    It should be noted that this is only a significant advantage for applications that require minimal integration with existing infrastructure, and minimal customization. Where such integration and customization is required, it normally takes up the bulk of configuration time, so the savings from faster initial setup is inconsequential.

  2. Fewer skills required:

    The simplified installation and configuration lead to scenarios where fewer IT skills are required to implement the solution. This is particularly true where the application is quite simple and requires little or no further configuration beyond initial activation.

  3. Sole-source technical support:

    Any questions about hardware compatibility or operating system patches are eliminated when a single vendor supports every "layer" of the solution, starting with hardware and ending with the application software.

  4. High performance specialized hardware:

    In the case of specialized processing hardware, the additional and overriding benefit is increased performance. Note that this is not generally true for commodity hardware bundled as an appliance -- this advantage is only relevant where the appliance incorporates specialized hardware, most often to provide a specialized network infrastructure function.

Appliance Servers: Drawbacks

__DrawbacksOfAppliances

Summary

There are specific use cases where appliances are attractive:

  1. Deployment of simple applications, which require minimal customization and integration, into small to medium environments.
  2. Deployment of very high performance network devices, where specialized hardware provides a significant speed boost.

There are also use cases where appliances are unattractive:

  1. Deployment into high density IT environments.
  2. Deployment into IT environments where virtualization is widely used.

Appliance based solutions reduce initial setup time, but increase hardware cost (for redundancy) and where specialized hardware is not used, usually also reduce scalability.


Appendix: About Hitachi ID Systems

This white paper was produced by Hitachi ID Systems.

Hitachi ID Systems, Inc. delivers access governance and identity administration solutions to organizations globally, including many of the Fortune 500 companies. The Hitachi ID Identity and Access Management Suite is a fully integrated solution for managing identities, security entitlements and credentials, for both business users and shared/privileged accounts, on-premise and in the cloud.

The Hitachi ID Identity and Access Management Suite is well known in the marketplace for high scalability, fault tolerance, a pragmatic design and low total cost of ownership (TCO). Hitachi ID Systems is recognized by customers and analysts for industry leading customer service.

The Hitachi ID Identity and Access Management Suite is an integrated solution for identity administration and access governance. It streamlines and secures the management of identities, security entitlements and credentials across systems and applications. Organizations deploy the Hitachi ID Identity and Access Management Suite to strengthen controls, meet regulatory and audit requirements, improve IT service and reduce IT operating cost.

The Hitachi ID Identity and Access Management Suite is designed to efficiently create, manage and deactivate user objects, identity attributes and security entitlements across systems and applications in medium to large organizations. This is done using a combination of automation and self-service:

A rich set of connectors are included, to easily integrate with most common systems and applications and to manage credentials including passwords, challenge/response profiles, biometric samples, OTP devices, PKI certificates and smart cards.

The Hitachi ID Identity and Access Management Suite is designed as identity management and access governance middleware, in the sense that it presents a uniform user interface and a consolidated set of business processes to manage user objects, identity attributes, security rights and credentials across multiple systems and platforms. This is illustrated in Figure [link].

    Hitachi ID Identity and Access Management Suite Overview: Identity Middleware (2)

figure

The Hitachi ID Identity and Access Management Suite includes several functional identity management and access governance modules:

The relationships between the Hitachi ID Identity and Access Management Suite components is illustrated in Figure [link].

figure

    Components of the Hitachi ID Identity and Access Management Suite (3)