IAC2: Infrastructure-as-code Architecture Decision Compliance

IAC2：基础设施即代码架构决策合规性

• 批准号: 314720630
• 负责人: Professor Dr. Frank Leymann
• 金额: --
• 依托单位: Forschungsgruppe Software Architecture
• 依托单位国家: 德国
• 项目类别: Research Grants
• 资助国家: 德国
• 项目状态: 未结题
• 来源: https://gepris.dfg.de/gepris/projekt/314720630?language=en
• 关键词: IAC2; Infrastructure; code; Architecture; Decision

Infrastructure-as-code (IaC) helps practitioner to automatically provision and manage IT infrastructures at scale, rather than using manual processes. The promise of IaC is easy, rapid, secure, reliable, and repeatable IT infrastructure provisioning and management. In IaC design and development many complex architectural design decisions (ADD) are made for the IaC system, the underlying infrastructure, and the software system to be delivered. Today foundations to make the (often huge) complexity of IaC manageable are missing, leading to low quality, high risks, and high costs/efforts in IaC design and development. The project has the objective to develop foundational concepts and methods to address these research gaps by studying the following research questions:RQ1: How can the informal IaC established practices documented in the literature today be specified in a rigorous way?RQ2: How can a broad set of IaC code and especially architecture smells and patterns be identified and detected in a systematic and automated fashion?RQ3: How can the enormous complexity of large-scale IaC architectures be tackled through evidence-based decision making?To address the research questions, the project aims to reduce complexity and improve quality through rigorous IaC ADD compliance specifications, and reduce risks and uncertainties by basing these specifications on established patterns and bad smells. Based on this foundation, it aims to provide means for precise identification of these patterns and bad smells in IaC code and architectures, and to provide automatic detection in IaC code and architectures. Together these contributions will enable improving quality through precise identification and automatic detection, and reducing risks and uncertainties by replacing manual processes, which also reduces the necessary costs and efforts in especially maintaining complex IaC architectures. Finally, the project aims to provide novel means for continuously measuring and monitoring IaC compliance improvements and degradations, thus enabling evidence-based improvement of the architecture. All project results will be evaluated in various empirical studies. While IaC has been used as a tool to help continuously improve the system to be deployed, e.g. for cloud applications, the evolution of the IaC architecture itself has not yet been studied in the literature. Given the broad use of IaC in practice and the enormous complexity of existing IaC architectures in large deployments, it is rather likely that often non-optimal decisions will be made, leading to severe design issues. This problem has not been addressed by any major research effort yet and requires new foundational research.

基础设施即代码(IAC)可帮助从业者大规模自动调配和管理IT基础设施，而不是使用手动流程。IAC的承诺是轻松、快速、安全、可靠和可重复的IT基础设施配置和管理。在IAC设计和开发中，许多复杂的体系结构设计决策(ADD)都是针对IAC系统、底层基础设施和要交付的软件系统做出的。今天，使IAC的复杂性(通常是巨大的)易于管理的基础缺失，导致IAC设计和开发中的低质量、高风险和高成本/高努力。该项目的目标是通过研究以下研究问题来开发基本的概念和方法来填补这些研究空白：RQ1：如何以严格的方式指定目前文献中记录的非正式IAC建立的实践？RQ2：如何以系统和自动化的方式识别和检测广泛的IAC代码，特别是体系结构气味和模式？RQ3：如何通过基于证据的决策来解决大规模IAC体系结构的巨大复杂性？为了解决研究问题，该项目的目标是通过严格的IAC添加遵从性规范来降低复杂性和提高质量，并通过基于已建立的模式和不良气味来基于这些规范来降低风险和不确定性。在此基础上，旨在为准确识别IAC代码和体系结构中的这些模式和恶臭提供手段，并提供IAC代码和体系结构中的自动检测。综合起来，这些贡献将能够通过精确识别和自动检测来提高质量，并通过取代手动流程来降低风险和不确定性，这还可以减少必要的成本和工作量，特别是维护复杂的IAC架构。最后，该项目旨在为持续衡量和监测机构间咨询委员会遵守情况的改进和退化提供新的手段，从而使该架构能够以证据为基础进行改进。所有项目成果将在各种实证研究中进行评估。虽然IAC已被用作帮助持续改进要部署的系统(例如用于云应用)的工具，但IAC体系结构本身的演变尚未在文献中进行研究。鉴于IAC在实践中的广泛使用以及大型部署中现有IAC架构的巨大复杂性，很可能会经常做出非最佳决策，从而导致严重的设计问题。这一问题尚未得到任何重大研究努力的解决，需要进行新的基础研究。