Amplexor Drupal for the Enterprise seminar - evaluating Drupal for the Enterprise
0 likes2,961 views
Drupal is an open source content management framework that is flexible, extendable and user-centric. When deploying Drupal in an enterprise environment, key considerations include selecting reliable contributed modules, ensuring security best practices, and having the necessary Drupal expertise for infrastructure, support and product life cycles. Drupal 8 will improve the platform with new configuration management, multilingual and REST capabilities.
Amplexor Drupal for the Enterprise seminar - evaluating Drupal for the Enterprise
- 1. Drupal in the Enterprise
- 2. 1. functional features 2. technical features 3. knowledge & support 4. product life cycle 5. future
- 3. introduction
- 4. open source free of licensing costs public scrutiny of code no vendor lock-in
- 5. made in Belgium created by Dries Buytaert
- 6. since 2001 7 stable releases
- 7. organic no central roadmap 1,003,094 people in 228 countries speaking 181 languages power Drupal
- 8. community maintains the ecosystem Drupal core contributed modules documentation ...
- 9. Drupal is user- and content-centric build for user-generated content
- 10. Drupal is not a full-fledged “product” flexible & extendible framework engagement content publishing social commerce community Drupal !
- 11. Drupal is lightweight basic CMS functionality + APIs
- 12. Drupal is lightweight most functionality is added by modules
- 13. theme! core module! contrib module! contrib module! Drupal API! custom module!
- 14. theme! core module! contrib module! contrib module! custom module! Drupal API! database!
- 15. Drupal has no separate back-end system visitor! webserver! editor!
- 17. key points of attention when deploying Drupal in an Enterprise environment
- 19. core vs. contrib quality security code quality test coverage UI interoperability
- 20. core vs. contrib selecting contributed modules maintenance status development status # reported installs stability # active comitters # open bugs security background
- 22. publishing workflows can be added (contrib) Workbench module
- 23. multi-language core contains basic localisation features synchronous/asynchronous RTL support > 100 languages supported Internationalization module suite
- 24. asset management core only provides a file upload field Media module
- 25. mailing mailing from the webserver is a bad idea performance no tracking, batch sending, segmentation, ... risk for black-listing
- 26. personalisation Drupal is very user-centric user APIs modules (e.g. WEM module)
- 27. search integration with e.g. Acquia Search (Solr)
- 28. commerce Drupal Commerce suite of modules well documented and maintained commercial support available
- 30. multisite website 1! website 2! website 3! website 4! codebase" core + modules! db1! db2! db3! db4!
- 31. multisite creates a strong dependency between sites perfect for a “family” of related websites not that feasible for separate projects
- 32. security Drupal Security Team (since 2005) Benjamin Jeavons Gregory Knaddison
- 33. security Security Advisories (SA) Drupal core contributed code limited advance disclosure before public disclosure core and stable contrib modules are conform OWASP top 10
- 34. security Security Advisories (SA) number of Security Advisories per year (2013 data to date)
- 35. security cause of vulnerabilities and weaknesess incorrect use of core APIs misconfiguration infrastructure issues
- 36. security key points of attention use only stable modules developer training to fully grasp core APIs security testing/audit update core and contrib
- 37. infrastructure Trafic to Drupal & openX Application Firewall (stand-by) Application firewall Trafic for Assets (video & images) Load Balancer + Cache (stand-by) Load Balancer + Cache Assets (Images & Video) OpenX Database Slave Database Master Drupal Search Monitoring (zabbix?) Test & Dev Environment
- 38. infrastructure PHP, Apache, MySQL, load balancing, reverse proxy, Memcached, Apache Solr, monitoring, firewalling, etc. lots of different technologies expertise is an absolute must
- 40. 3. knowledge & support
- 41. Drupal 7 contains only 1 vendor library (jQuery)
- 42. Drupal lives on its own island all documentation needs to come from inside hard to find good Drupal talent holds back community growth reduced compatibility Drupal 8 contains 7 vendor libraries
- 43. 4. product life cycle
- 44. product life cycle no backwards compatibility major versions 5 6 7 8 ... minor versions 7.1 7.2 7.3 ... 7.23
- 45. product life cycle Drupal core release windows st Wednesday of each month: bug fix release 1 rd Wednesday of each month: security release 3
- 46. project life cycle project finish! D8 upgrade start! project start (D6)! 2010! 2011! Drupal 7 release! D8 upgrade finish! 2012! 2013! 2015! 2014! Drupal 8 release! no support!!
- 47. project life cycle new community proposal example D6 security updates untill 3 months after D8 LTS release" LTS = last minor version
- 48. 5. future
- 49. Drupal 8 https://drupal.org/drupal-8.0 configuration management multi-language and Views in core new back-end UI + inline editing REST webservices built in OO patterns + Symfony integration new templating engine (Twig) support for WAI-ARAI standards
- 50. Drupal 8 configuration management deployments made easier
- 51. Drupal 8 new back-end UI
- 53. Drupal 8 multi-language/Views in core two of the most important modules in the ecosystem no waiting for stable version start earlier with new project or migration
- 54. Drupal 8 web services in core integrating with other systems modules can use core APIs
- 55. Drupal 8 release expected Q2 2014
- 56. conclusion
- 57. conclusion Drupal is a very lightweight framework heavily content- and user-centric extremely flexible and extendable
- 58. enterprise Drupal = expertise Drupal core + selection of modules + integration with services + professional support
- 59. Customer Solution! Amplexor Offer Acquia Network Subscription! Acquia Cloud! Drupal specific managed hosted environment! Training Professional Services strategy, creative, design, integration, implementation, migration, go-live, production, incremental, development!