By Jason English (@bluefug) – Intellyx | Part 1 of the Intellyx On-Prem Innovation Series
Software ate the world. Then SaaS started eating software. Then, cloud started enveloping SaaS.
Now, even one flavor of cloud is no longer good enough for most highly distributed software applications. To be agile and responsive, you must orchestrate the delivery of applications across some kind of hybrid public or private cloud, which could be provisioned from service providers, called via APIs from a marketplace, or deployed into ephemeral cloud-native micro services.
The push for off-premises migration of software has never been stronger —by some architectural estimations, it’s taken for granted that most applications should move to the cloud in the next couple of years if they are not there already.
But wait, why are some companies hitting that big red disconnect button today, and doing on-prem air gap software installs?
If you are new to the concept of airgapping, that’s OK. Old hacks like myself with some history of supplying software for banks and government agencies have encountered the need for air gapping — basically, installing onto a system that is not connected to the Internet at all — nor any network that could offer any port for security breaches to occur.
Basically, air gapping is the purest form of on-premises software delivery, in that absolutely everything needed for that software to run must be packaged for local installation and ready to run disconnected from any network.
No calls out to external authentication providers. No remote license keys. No checking for version updates and patches. Sneakernet installation, we called it, meaning someone would need to walk in with a disk or drive and manually execute the install onto the target air gapped system.
Once on-site, ideally, this would have been a double-click, plug-and-play event — but often, the configuration, install, and patching process for one of these systems was a Sisyphean effort.
Vendor product experts and customer sysadmins would work together to run batch scripts, tweak manifest settings and validate the system, sometimes through terminal consoles, once it went live. Mess one step up, or realize the need for a later product update, and both sides would be looking at another extended and costly consulting visit.
It’s not hard to tell why air gapping was reserved for only the most mission-critically remote use cases. Many software vendors simply chose to opt out of this side of the market, waiving their right to work in such secure demesnes in favor of less troublesome Internet-friendly SaaS business models.
If you were to believe pundits who made SaaS and cloud computing predictions ten years ago, we’d be operating everything-as-a-service by now. But for many kinds of secure work, SaaS isn’t a viable option, and even connections to external services and APIs are undesirable.
I was stunned to find out from a 2021 study on The State of On-Prem that customer demand for on-premises software is almost equally as high as for public and private cloud options — and that more than one-third of customers surveyed wanted to procure air gap software.
This flies in the face of expectations of the modern cloud-driven software market. Still, it hits home when you scratch the surface of providers that deliver effective enterprise solutions to regulated or sensitive IP scenarios.
Serious enterprise vendors will still have services teams or certified partners performing on-prem air gap delivery, as well as a support team that provides packaged installs and documentation for just such scenarios.
If air gapping offers so much potential hassle, why would the practice become popular again lately?
There are several good reasons why companies are reconsidering air gap installation.
Given the well-known failures of many previous modernization efforts to maintain application and data integrity in the wild over the years, I wouldn’t blame a company with critical software for staying the course with yesterday’s on-prem install processes.
Still —this ain’t your grandma’s on-prem software anymore. We are now seeing evidence that air gapping is not just a matter of isolating data and controlling software to meet regulatory requirements.
Airgapping is a unique form of on-prem software that can be pretty advantageous in real-world business scenarios, as we’ll cover in our next installment.
© 2021, Intellyx Intellyx, LLC. Intellyx retains editorial control over this content. At the time of publishing, Replicated is an Intellyx client. Image credits: Photo by Taylor Vick on Unsplash