// Coding
Chef vs Puppet vs Ansible vs Saltstack: What is Better for 2022
// Coding
None IT specialist doesn’t have the heart to say that the management of computer networks is an "easy job". In recent years, there has been a huge leap forward in the tasks of universal computerization, which adds work for modern system administrators. If earlier small networks were mainly used, today the number of machines and their chains exceeds hundreds, or even thousands of devices.
It is not possible to manually configure them, add or configure the operating system, otherwise the task forces many specialists to be involved in the process. The last decision has its negative sides, because all admins are people and have special thoughts about how best to fulfill the instructions of the management. The human factor inherent in each of us plays a role. And if you entrust the task to one specialist, you need to have a lot of time to spare.
This situation gave rise to the decision to automate this process. Today, specialized software is actively used, which helps to make OS settings in automatic mode so that the network functions correctly. The task is carried out when there is a remote contact. One of the requirements for this is cross-platform, because different Linux, FreeBSD and Windows operating systems can be used within a single network. In this case, an effective solution would be to use a special network administrator tool that will help manage the OS configuration within a single network.
There are a number of applications that network administrators can use to manage different operating systems. But most often, experts use Chef vs Puppet vs Ansible vs Saltstack programs. If you start asking them which application is the best in practice, you may come across different opinions on this matter. We propose to figure out together what these programs are, and why admins prefer them.
Each of the programs is designed to manage the OS configuration within one network. Represented by client-server architecture. The administrator, who is located behind the server, is able to send configuration data to the peripheral machines. The client side must be installed on the devices. The system operates automatically, configuring, relying on the settings that the server delivered.
These software developments are used to administer several VPS, manage server fleet, configure their servers from "0", connect additional nodes to the cluster and other important tasks entrusted to the network administrator.
Chef vs Puppet vs Ansible vs Saltstack are created to manage large infrastructures with 10,000 servers on Google, LinkedIn and WikiMedia.
Just imagine that you have several servers and have to do something with them. The algorithm of actions in such a situation provides for logging into each server and performing actions in turn. If a more difficult task arises, for example, installing software, then you will need to configure it, relying on certain characteristics. The task becomes more difficult, but it will be even harder if you have 10 or even 100 servers at your disposal.
Now you need to log in to each of them in turn - 1, 2, 3... And 100 is still far away. After completing the installation command, we proceed to editing the files with configuration settings, and the process is repeated on each machine. Tiring... Right?!
To avoid these difficulties, you can update the servers at the same time using one of the software products. Let's choose which one is better to use in 2022 – Chef vs Puppet vs Ansible vs Saltstack. To do this, we will review each configuration management system separately.
In terms of functionality, Chef has similar characteristics to the aforementioned systems, but there are also differences, which are the main reasons for its great popularity among network engineers.
The program is implemented on the client side of Ruby. To manage Chef, you need to have a minimum basic knowledge of this programming language, and install the appropriate software environment on the central server.
The administrator deploys Chef on a workstation, creating a chef server where the main control part of the software is installed. He writes a configuration file - Receipt, to configure the desired direction of the network behavior on all Nodes units. This data goes to the repository, where software files, templates of future configuration characteristics are also sent. The system allows you to write several Receipts in the Cookbook at once. This is a big plus, because there are different versions of the OS and software on the nodes. And there can be more than one storage, which allows you to record different scenarios of network behavior.
Network units request current scripts through Chef from the server and are able to accept commands. This is followed by the process of reconfiguring the node parameters.
It turns out that the Chef system is an excellent solution for efficient and fast network reconfiguration for the tasks that the administrator needs to achieve. The platform is ultimatum, but in order to work with it, you need to gain experience, sharpen skills. But labor costs will be not for nothing. A network engineer will be able to save a lot of time by avoiding annoying mistakes and problems in setting up nodes even on a hundred machines at the same time.
Chef can work in 2 modes:
The system is distinguished by the possibility of effective use not only on Linux, Windows, as in the case of the previously considered Chef application, but also on Mac OS X, Unix.
Puppet has Ruby open source. There is professional support and a corporate version of commercial software.
To use Puppet in business, you need to install the server side on the Ruby programming environment. This is where all the system configuration files will be stored. The developer named them "Manifests". During operation, the server will accept requests from client machines. In an automatic process, files with an updated version of the operating system configuration will be sent to them. This will allow all devices to continue to operate efficiently and smoothly on the network.
An important requirement for using Puppet is the installation of the appropriate software on the customer's PC, meaning the client part. These packages are included in the OS. Admin will quickly be able to deploy a computer network to continue performing tasks. If the installation packages are not found, you need to contact the official Puppet website for help. The developer provides guests of the resource with the opportunity to independently download the desired assembly if necessary.
Another plus of this solution is that one network engineer can configure and manage hundreds or even thousands of computers. If a problem occurs, a response will be triggered. This allows the admin to quickly fix the code error and fix problems. But here it should be noted that the specialist should be careful in completing the task. If one of the lines is misspelled, it can cause serious problems that affect the entire network.
In fact, if you use the correct manifest of the previous version of the build, this will allow you to quickly restore the chain of machines and bring it into action.
The system has disadvantages. Puppet is another victim of its own fame. Users report bugs that the developer is in no hurry to fix. Some requests are ignored altogether. There is also resentment among brand customers about its insistent hints to purchase a commercial version of the application.
The Ansible brand has surpassed the aforementioned software giant Puppet, gaining 26.5% of the market share in its influential hands, while Puppet has only 12%. It's about the configuration management systems industry.
It is an open-source Python product released in 2012. Supported by the AnsibleWorks developer. Python gives the system an advantage, because this language allows applications to run at high speed, it is built into Unix and Linux.
Ansible is newer compared to Puppet, Chef, and Salt. Red Hat bought it in 2015. It was developed to simplify complicated tasks and manage the configurations. The platform functions on Python and allows the users to create the scripting YAML commands as an imperative programming paradigm. Ansible offers several push models to send the command module to the nods over SSH. Ansible does not require the agents' presence in each system, and the modules can be hosted on any server. Furthermore, Ansible, a centralized working station, is commonly employed to lead commands through various Bastion host servers and access machines in private networks.
The main advantage of Ansible is easy and fast deployment, it does not even need to use agents to communicate with the master client, the functions are carried out using SSH. If there are configurations that do not support this root profile, the system runs "sudo" as root.
You can run Ansible for simple tasks from the CLI without using configuration files. In this case, we are talking about checking the operation of the service, rebooting and starting updates. If these are more complex goals, Ansible configuration is processed using YAML syntax in the "playbooks" files.
You can set commands to the system in different programming languages. The most common are generic JSON modules. This is a kind of advantage, because in other applications there is no such wide choice in languages.
The popularity of Ansible is due to the fact that the system developer takes a new approach to performing common configuration tasks. The application is actively used to deploy large data centers in modern companies in the world.
The system developer himself regularly develops the product, increasing the audience of its users. There has been improvement of quantity indicators of supported Ansible devices, integration of better Windows support, ecosystem improvement.
We can sum everything about Ansible up the following way:
Ansible Tower abilities:
Ansible considers security as one more thing that just needs automatization. In other words, by using standard Ansible Playbook syntax, you will have the ability to install the firewall rules, block the users and groups, employ manageable security policies and automatize other security functions. It is relatively easy to implement, and many resources on the Internet will help you.
However, as an instrument focused mainly on scripts, Ansible may be limited inabilities to manage situations that have no script read or those that end with an issue. The scriptwriting tools usually can leave security breaches, for they are by default good for following commands. However, they are worse in defining what is missing in your security setting. According to the security report in 2021, Ansible was not designed to protect itself from malicious nodes.
Finally, any instrument based on scripts, like Ansible, can be challenging to scale and manage by many agents required to set an enterprise. However, in a small organization, his solution will be a good fit.
Ansible supports such platforms as CentOs, Linux (Fedora, Scientific and additional packs for Enterprise Linux (EPEL), etc.).
The disadvantages include the fact that the system is still at the stage of developing a graphical interface, and is also relatively young, having no experience of mass testing by users.
The software is open source and written in Python, which is similar to Ansible. Provides a mechanism for remote work. Push-model and SSH protocol are used to execute commands.
It is distinguished by the performance of the assigned tasks at high speed, which outmatches even the abovementioned systems. You can manage configuration, infrastructure, and orchestration. This app is known since 2011.
It’s created with master-slave architecture. The network admin in the application is called Salt Master - he is also the main demon that controls all Salt Minions. He gives one of them or several Minions commands, which they must obey unquestioningly. The received data about changes is delivered to the Master. Communication between the main parties is carried out using ZeroMQ message keys. When connecting to the Master for the first time, the Minion automatically saves the key on the server. There is also a Salt SSH format - "agent-free" management.
IT automation using SaltStack can be carried out in the following format: one Master - up to 10,000 Minions. The app is as easy to use as it is to customize. The remote execution architecture is uniform. There is support for all kinds of languages by system configuration files.
Another feature of SaltStack is the ability to execute commands in parallel on remote systems, which helps speed up the automation process. The application has a simple interface, works well with BSD Unix, Windows, VMware vSphere.
The main advantages of SaltStack are the reliability of the system, its powerful management structure that can handle 10,000 machines. It is a secure product that uses an encrypted protocol and has a fast and light Fast communication bus that guarantees the basis for a remote task execution engine. The process is carried out automatically, the cloud controller Salt Virt is used for this purpose. In a nutshell, the following are the features of SaltStack.
SaltStack Enterprise abilities:
Event SaltStack character differs from other solutions described here. However, it is a potential vulnerability. In any architecture managed by events, it is impossible to predict every single event. When it concerns security, it means that the system indeed has vulnerable points, which can be found by hackers faster than your security group does.
SaltStack is compatible with Linux (multiple versions), macOS, Unix, Windows.
As practice shows, Ansible is chosen by those who are engaged in configuration in the YAML direction. The philosophy of the brand is simplicity, but not at the expense of responsiveness and the ability to manage a large number of machines.
Puppet is chosen by network administrators who work mainly with DSL commands. This is a great tool for those who plan to organize the work of large teams in an easy and predictable format.
SaltStack is the best option for admins who prefer flexible systems to manage cloud infrastructures and extensive documentation. Also, the application will suit those who have planned to build a network in which a variety of environments will easily exist without failures.
Chef will allow you to centrally distribute the specified chef-recipes from the server by defining an easy combination. The system has a normal client for Windows, which is especially valuable for most modern companies, and it works with ruby. The program can be difficult to learn for a newbie networker, but it is great for companies that specialize in software development.
All Pros and Cons
We sincerely hope that this article will help the reader decide which system will be the best for him in 2022: Chef, Puppet, Ansible or Saltstack. Every day the sysadmin has to deal with different tasks, and in order to reduce at least a standard set of goals to automation, you cannot do without one of the programs considered by us! Simplify your work!
