Edited transcript of BriefingsDirect[TM] podcast on DRM and business services for Internet media with host Dana Gardner, recorded Dec. 15, 2006. Podcast sponsor: Akamai Technologies Inc.
Listen to the podcast here. See more Akamai podcasts.
Dana Gardner: Hi, this is Dana Gardner, principal analyst at Interarbor Solutions, and you’re listening to BriefingsDirect. Today, a discussion with Tim Napoleon of Akamai Technologies. He’s their Media and Entertainment Product Line Director, and we’re going to discuss a very interesting topic: Digital rights management (DRM), the collection of use metrics, and the business model around media and entertainment on the Internet today.
A great deal is being discussed about who controls what when it comes to content, particularly when you’re distributing it openly and freely on the Web, when you’re exploring new distribution models, and when you’re using new technologies. Tim is joining us for a second BriefingsDirect podcast. Tim, tell us a little about the state of Web commerce, and why DRM is such an important topic today?
Tim Napoleon: Digital rights management is doing well. It’s alive and healthy. There was a general concern a few years back that the consumers wouldn’t adapt to paper-media-type experience online, and I think the ubiquitous nature of the iPod has proved that wrong. There are a lot of other great devices that are coming out, or have come out, with really solid content protection schemes in place that the studios are comfortable with.
It’s everything from TiVo’s broadband platform, to the Zune player from Microsoft, to several other soon-to-be-announced platforms that are getting people excited again about what is possible to do with digital content in a real business-model fashion.
Gardner: One of the things I’ve heard from listeners, users of content, is “Wow, there seems to be so many of these DRM approaches, do we need a different one for every media company, for every modality? Shouldn’t there be some standards?” What is the state of standardization, or at least some de facto industry accepted approaches, with DRM?
Napoleon: If you’re a business development officer at a content-owner studio, you probably have a very clear agenda. You want a platform that has almost no royalty to it and you want something that’s ubiquitous, so you can sell as many units to consumers as possible. If you’re a technologist or if you’re a company that’s based upon getting royalties for your technology platform, you probably want to try to create such a great technology platform that you can charge a royalty for it and potentially have some strategic effect of lock-in on that platform.
If you’re a consumer, basically you want your favorite artist, music, title, in whatever format that you want it, wherever you want it, whether that’s on your TV, your PC or your iPod. There has been a willingness we’ve seen from consumers to pay for the same media across multiple platforms. It’s not uncommon for someone to buy the DVD as well as the iTunes download, as well as to go to the Website and watch the episode online.
All these different vehicles and delivery mechanisms aren’t necessarily taking money out of the studio’s pocket. They’re actually creating an additive effect. We’re seeing an overall trend. As you make this media more convenient and more usable, consumers are in a consumption pattern, and if consumption is going up, they’re using more of this media.
Right now, studios are trying to figure out what platforms have enough scale and enough users to make it worthwhile for them to have their content on that platform, but there’s definitely still room for that one global standard for content protection.
Gardner: Just for the sake of all of our listeners, when we talk about digital rights management, we’re talking about something such as iTunes, which many people might be familiar with. You can buy a song from the iTunes Store and you can use that through iTunes on as many as five different devices, and then it’s shut off. That’s the management part of digital rights management.
The goal here is to preserve the copyright, the protection, and the ownership of media or artistic production, from the perspective of the artist or the distributor -- but at the same time to give users a bit more flexibility in terms of how they can enjoy media. Do you have anything else to offer that’s a general definition of DRM in today’s working environment?
Napoleon: Sure, if you go back to the business sense of DRM -- why do we even need to control content? Studios have very complex business processes when they develop content. For example, with a movie, it’s not uncommon for a studio to pre-sell the international rights to fund the development of that movie. They go to each different region and pre-sell that right to have the future revenue from that movie to different finance companies around the world. Then, they might keep the rights from the North America release.
When go onto the Internet with that movie title, you don’t own the rights to all these different geographies. There’s the need for the studio to make their business arrangements and the contracts map the use pattern of the Internet. There are some nice technologies from Microsoft and others that facilitate this business transaction for the studio. The great news is they’ve gotten a lot better, so the consumers are willing to put up with the little extra overhead that’s required.
Gardner: Consumers might not even appreciate the level of complexity when we’re dealing with multiple geographies, multiple legal systems, different approaches that are culturally accepted for how people absorb or use technology-driven media. Tell us a little about how an applications and media-management and -optimization provider like Akamai is addressing some of this complexity?
Napoleon: First, everybody knows Akamai for scale. Now you’re starting to see major live events like World Cup and others come online. That’s one of the first very good use-cases of meeting DRM services that scale. Akamai has one of the largest, if not the largest, license delivery services in the world. So when people go to watch a DRM-encoded stream, then you receive credentials to watch that stream.
The Akamai License Delivery Service is a global, secure distribution platform for those licenses. It also packages tools that usually allows the rights owner to assign what rights they want to give -- or not give -- to the end customers, based upon some different parameters.
Lastly, there are some advanced services that Akamai can wrap around that. For example, in sports, geography is very important. Different teams have the ability to have their games play and not play in different areas on the Web. We have geo-restrictions built in to our platforms so that we can protect the content owner and make sure that rights for certain areas only play streams in certain areas. It’s a very key feature for sports.
Gardner: That’s the equivalent of blacking out a game for electronic viewing when there are still plenty of empty seats at the stadium. Is that what you’re getting at?
Napoleon: Yes, absolutely. For example, ESPN may own the North American rights to a football game, but another company may own the UK rights. There might be a UK website that wants to put a live event up, but they don’t have the rights to it in the North American market.
Previously, they couldn’t do it, because they couldn’t guarantee that people from around the world wouldn’t come to their site and watch it. Now, we have the ability to allow them to put up a lot more content, because they can enforce all the policy around it.
Gardner: So, before the media companies and the producers of content -- for example, in this case the sports franchise or even a league or a foundation of some kind -- open the floodgates and let their content out they need to make sure that they can adhere to the licenses they’ve already got in place, the contracts that they’ve already set up with the various media outlets or even stadium owners and local business owners that are there.
Then, they also have to think about what they want in terms of a business model, by taking this out to the Web and the Internet. So for them to get the content to the end users, there has to be a system in place to manage all of this complicated provisioning. I guess you can think of it as service level agreement management, right?
Napoleon: Absolutely. As you can imagine, just describing that at a high level is complicated. When you actually go to implement it, it can be even more complicated. You can have all sorts of questions about your business model, but it’s nice to know that with Akamai at least the technology hurdles aren’t going to be as high. Its going to be much easier to get the technology implemented. You can focus all your resource on that mouthful of business challenges that you’re going to have getting your content aligned.
Gardner: In order for end users to enjoy this ability to access content through their Internet protocol, packet-driven pipe -- that might be their broadband connection -- a lot has to happen behind the scenes in order for the people who produce and distribute content to feel comfortable about it. And you’re trying to bring that to the table.
Napoleon: My sound byte there is: How long does it take to do a live event on the Web? Well, it takes about 10 years and 10 minutes. It takes you about 10 years to learn everything you need to know to do it, and about 10 minutes to actually do it. The learning curve is definitely something that Akamai can assist with when you want to monetize and bring your content online.
Gardner: Tell us a little bit about the business models that this enables. Once we’ve crossed this threshold of putting in a technological capability to allow companies to adhere to the contracts and their service-level agreements (SLAs), what is possible in terms of new types of subscription? We see what Apple’s been doing with video recently. We see what Google is doing with YouTube and distributing more content. Now that we’ve got the technology to manage sort of the old model, what’s on the horizon for new models of media distribution, entertainment, and business?
Napoleon: Maybe we should just rewind a little bit and talk about one of the biggest challenges that studios have had since their inception, and that’s physical distribution. If you look back at Warner Brothers, when they rolled out Atari, they over-estimated their popularity; what Atari would be at the time when they released the product. They ended up with all these consoles coming back from retailers, and they ultimately had to sell off some very valuable online cable properties to pay for that inventory.
Studios have heart palpitations when they have to know how many DVDs to press, or how much physical inventory to create. With online and a scaleable system -- that’s variable capacity from Akamai -- you can scale it all up to billions of users, if you need to. You don’t have the physical cost of pressing a disk or having to forecast inventory. You never run out of it. A consumer never goes to store that doesn’t have the title they want to rent. The opposite benefit is that you don’t have a warehouse full of disks on your balance sheet account.
You’ve got just the right amount of inventory. It’s probably the one business issue that this solves better than anything for the studios -- having the ability to get into the hands of consumers hot content, and also capture a fragment of the market with maybe just a little bit of content. In the past, the distribution pipeline for projects that might not be mainstream didn’t find a voice.
People often call us the long tail of content, but really it’s having unlimited inventory and the ability to really let the consumers self-select from a very large library and filter that down to exactly what they’re interested in, and then order it. That’s just making people order and buy more media.
The Internet is also enabling a larger audience to view more titles. Some of them are okay with watching media via advertising instead of having to pay for it. One of the hottest trends right now is the ad market, and being able to put ad insertion and other things around your content to generate ad revenue. We’re seeing properties like Fox and NBC and other U.S. broadcasters roll out full-length television shows on the Web that are ad-supported. The feedback from advertisers and consumers has been that these are extremely popular, and the trend is definitely going to continue and accelerate.
Gardner: We’ve got a nice problem-solution set here. That's because users get to watch the content they want. They can take advantage of the long tail -- if your tastes are eclectic, you can find what you like; it doesn’t have to be mainstream. The providers of the content like these solutions because they can manage inventory. They don’t have to predict physical numbers of units to get distributed and then either come up short or over-deliver, which is a waste of money for them. So, it’s in their best interest to distribute via the Internet. And in doing so, we can now start injecting advertising into these content properties.
Now, help me understand this. Are we putting the same ad across a 100,000 audience-wide distributions, or can we target the long-tail effect and its advertising capabilities? Can you actually decide that someone’s interest in a certain type of content and so they might align through their interests with whatever an advertiser wants to provide to them?
Napoleon: It goes into a marketplace of content. What you’re seeing is that publishers now are facilitating their audience. In the case of channels like speedtv.com, you have this very focused property on cars. Not only can you put all your own original programming on that about cars, you can also look out to other content owners who have auto enthusiast-type material, and bring that all together into a very focused portal for auto fans.
Now that you have an audience that’s self-selecting into auto, and it’s the right demographic and the right type of consumer for car parts or new cars, you can charge them a much higher ad rate. We refer to ad rates of CPMs, or cost per thousand. Once you have a focused target audience like that, the ad rates go up. Instead of seeing all this general mainstream programming, you’re starting to see a lot of these more-focused and more-niche sites really accelerate and take off, because -- in a sense -- on the Internet there’s unlimited broadcast time. You could have as much programming as you need to get a large enough audience. You don’t have to worry that you only have eight hours in a day to broadcast television.
Gardner: You’ve injected another thing in here. I guess we could call it user-generated content. If there are some great bloggers or video bloggers out there who are creating really compelling content on a certain subject, then whatever the organization is that’s creating a community approach around that subject could bring that in, as well as professionally produce new media. That creates this notion of a channel, just like we would think of with cable television.
You’ve got Animal Planet, Discovery, Biography and so forth on cable. Now we can get much more discrete -- down to car enthusiasts or home and gardening -- or even something as nichey as a business topic like jet engine maintenance. Putting the content together creates a much more valuable audience for a specific advertising community. People are matching buyers and sellers, and because they’re better matched, it’s less a waste of time for the viewers because they’re getting advertising that might actually be relevant to their interest and needs. Advertisers are getting a much more efficient approach, because they can direct ads specifically at those who are most interested in that information.
So, the theory is great. However, as we discussed earlier, complexity is layer upon layer here. How does a network services and business services provider like Akamai help create this sense of buyer and seller community that’s really aligned well?
Napoleon: I think the first step in any of this is reporting and tracking. You’ve got to see what your audience is today and what type of media consumption you’re seeing across your content.
Gardner: This won’t work without metrics.
Napoleon: Exactly. Media is one of the most metrics-driven businesses out there. Getting the stats and getting the things digestible, so you really understand where you’re at, is step one. Akamai has world-class reporting that facilitates that.
Step two is bringing in relationships, and this goes into the concept of syndication. We talked about some of the technologies there, rights control, as well as a nice easy interface for users to get content in and out of your portfolio. Akamai offers ubiquity in the media space and interoperability. Our systems work with most media companies out there, and they use them. There is a familiarity with it, and it’s a common language.
Lastly, there’s the innovation curve. Akamai really strives to study the business, and learn the best practices and tips and tricks, and then share those. If you go to our site, there’s some great podcasts from this guy named Dana Gardner on there, as well as a lot of white papers, sample source codes, all kinds of things that facilitate building out these applications. And, we’ve got a rather large professional services organization. If you don’t want to learn how to fish, we can do the fishing for you, and just build out these business systems for you.
Gardner: It seems to me, because of what you said about unlimited inventory and much more efficient management and alignment of advertisers and information seekers, that the Internet is perhaps the only place to be in five or 10 years for content. Broadcast is waning, even when it goes to HD.
I expect that the number of people who are accessing this stuff through an antenna on their roof is going to be relatively small, and the level of service they get is going to be rather kludgey. It’s going to be an obtuse approach to media. Whereas if you go to the Internet, it’s even better than cable. It’s where you can bring all of these services and efficiencies together, where you get the benefit of a long tail. You get the blockbuster movie the week it comes out, and you can access it in your home. Am I going overboard in painting what could be a very interesting future in a couple of years?
Napoleon: You’re painting a rosy picture, but we have a long way to go. Today our stance is that we’re additive to all the different technologies out there. If you’re a traditional broadcaster, and you have television and radio stations -- those are incredibly valuable assets today. There are still a lot of people who like to just turn on the TV and watch professional programmers program for them. In the sense of television programming, I don’t see that changing in the near-term. If anything, I think the Internet has invigorated and created an innovation curve.
If you’re a television broadcaster, it’s kind of like having a new competitor that might get you a little bit fired up. You’re seeing that in the network lineup this year. There’s just some great programming, from “Lost” to “Heroes.” Television has definitely stepped up the game, and right now they’re one of the platforms that has enough distribution to afford creating these really highly visual, big-star type shows. The Internet is absolutely dependent right now on the television revenue to fund and produce original content.
We’re providing a great mechanism for additional distribution right now, but there’s no way that the current monetization system of the Internet is big enough on its own to facilitate shows by the J.J. Abrams of the world. So, I don’t think that we should ever look at it as "us-versus-them." Hopefully, it’s a "we" and the "we" is better than all the other platforms are today.
Gardner: It’s an interesting environment from my perspective. The Internet is the big opportunity for the future. And if someone likes to have to professional programmers pick-out their programming, they can access that through the Internet as well. It’s just that the Internet offers additional granularity, mixing and matching, and better metrics.
On the other hand, as you point out, the amount of revenue that’s derived through the Internet with media is still quite small, a fraction of what you get through traditional media distribution channels. Therefore, we’re at this very interesting juncture, where we need to maintain both systems, one for the future and the other for, in a sense, the monetization that allows that future to come about.
Napoleon: Absolutely. We’ve learned so many valuable lessons from working with traditional broadcasters. I don’t think you ever want to throw everything out and reinvent the entire industry. There’s lots of great best practices that have come out of broadcasting over the last 100 years. We want to make to sure that we learn the best of those, and we incorporate them into the Internet. That is what's so fun about working in the Internet space right now. All the rules aren’t defined. We don’t have all the standards baked. We don’t have everything completely done.
This core group of interactive teams at all these different organizations -- and even individuals -- are right now creating what’s going to be the future. That’s exciting, and that’s why we see a lot of the college guys coming into this space. The thing I’m most excited about is the talent that the interactive space is recruiting. So many people want to work at the Yahoos, the Googles, the Microsofts, the Akamais. We’re getting the best of the best to come and work for us. That’s what’s fun about this industry right now.
Gardner: Definitely an exciting time. Now, we talked a little bit how there could be a greater CPM payoff by matching up advertisers and knowledge or entertainment seekers, but what about pay-per-view? Isn’t there an opportunity for me as an Internet viewer to say, “Listen, I’m willing to spend $8 or $10 on a movie. I’m going to spend that going down to the theater this week anyway. I would like to buy a new run, new release movie.” Is there a way for you all to facilitate a pay-per-view approach through the Internet, as well as taking advantage of some of these more precise advertising and metrics-driven approaches?
Napoleon: That’s the way I like to do it, personally. I’m speaking about my own personal experience. I watched all my shows via iTunes this year. I found that I’ve not watched as much TV, but I’m watching the shows I want. I just don’t have to watch all the commercials. That’s my preferred choice -- just spend a little bit more money, and then not have to watch as much advertising.
I like that approach, but it’s somewhat expensive. So I can see that a consumer who doesn’t want to spend $2 for something he can get for free based on ad-support on television might not want to do that model. But there’s definitely intelligence from consumers that they know that they can now buy media. There are some great payment mechanisms out there that make it almost transparent to purchase media.
I think that has lowered the bar for people to participate. You’re seeing a lot more of that revenue coming into the space. We had some new stats from comScore today. I think Apple’s online digital revenues from iTunes are up over 80% year-to-date. So, it’s definitely taken off.
Gardner: That would include, of course, this ability to buy trailers and short animation clips and television shows, and I would think, increasingly, full-run movies.
Napoleon: Your hard drive gets full fast in this modern world.
Gardner: Does every distributor, whether it’s Apple or Time Warner or Paramount, want to come up with their own pay-per-view technology platform and infrastructure, or is this something that’s going to become a component on the network and a de facto industry standard approach?
Napoleon: Studios came in early on with Movielink. That was a collaborative effort among the studios. They saw the need to have an aggregated content library. No one content producer has enough content to provide a full suite of entertainment choices for a consumer. So the aggregators, like the Comcasts and the iTunes of the world are very important to the consumer experience, because people really don’t want to have a relationship with 30 different sites to get the content they’re interested in. They appreciate the fact of a really solid aggregator to get them everything that they’re interested in at one place.
There are also technologies that are replacing the aggregator. If you look at RSS readers and tools like that, consumers are now controlling their own aggregation in bringing together media experiences. It’s very easy to be entertained by podcasts. So you can go and subscribe to a bunch of podcasts via RSS, and that can be your way of programming your content. I think we’re still up in the air in what the ultimate model there is. I think you’re going to have studios doing some things directly.
You’re going to have them definitely syndicating and participating with affiliates and different regional people that can regionalize the content. There’s still is the need for regionalization and language. Then, lastly, you're going to see different types of models emerge that we’re probably not even aware of yet. Social networking was a great example of that. People adding to content by creating derivatives of it, mash ups and things like that on the social networking site.
It’s still completely up in the air, and there’s going to be hundreds of startups this year to try new ideas and new concepts around it.
Gardner: So once again we’re in a very interesting period, a dynamic period. There are all these great notions and visions about where media can go and how the Internet can provide a platform and a distribution approach for that. There’s also some parallels to the past. Some business models that have been very lucrative are now under some threat, certainly under a cloud of change. I suppose right now we’re at the point of creating the foundations for some of these unknown approaches.
One of those foundation bricks is DRM, another is metrics, another is the ability to align advertisers with highly qualified viewers. What else is there? What other major bricks need to go into this foundation, before we can move forward on some of these visions?
Napoleon: My challenge to everybody in the industry is to make sure it works. Consumers want to try something, free samples, if you will. They’re going on the Web to try something. If they don’t have a perfect experience, it’s easy for them to go back to television, to go back to these other forms in media that do work very well. So, our challenge with Akamai -- and what we want to try to deliver -- is that perfect experience. When you click on the video, it should come up instantly in place, with all the business and tracking and the reporting working flawlessly.
Right now, what we’re trying to focus on is just flawless execution and making sure it all works and works well. So whatever part in the value-chain that you are coming at this from, you’re having a good experience. That’s what Akamai is about. It’s about the end experience, and the goal is perfect, flawless video every time.
Gardner: So another major brick is simply the technology and the network integrity to provide a pleasing, repetitive, dependable experience -- regardless of the type of media that’s coming down the pipe.
Napoleon: Absolutely.
Gardner: Okay, thanks. This has been a sponsored BriefingsDirect podcast. We’ve been talking with Tim Napoleon, the Media and Entertainment Product Line Director for Akamai Technologies.
Thank you for listening. I think it’s been an interesting discussion that’s sort of opened my eyes a bit more to the possibilities -- but more importantly it's opened my eyes to the level of complexity that needs to be managed before we can get even realize what we have today, never mind reaching this vision of where we could be in the several years. Anything else to offer on this subject, Tim?
Napoleon: I think there are some great resources at Akamai.com. I will invite you to look at our expert section there and then please email us. Let us know future podcasts what we can do and what type of information would be helpful.
Gardner: Great. Thanks once again for listening and thanks to you, Tim and Akamai for sponsoring this podcast.
Napoleon: Thanks, Dana.
Listen to the podcast here.
Podcast sponsor: Akamai Technologies, Inc. See more Akamai podcasts.
Transcript of Dana Gardner’s BriefingsDirect podcast on Internet media trends. Copyright Interarbor Solutions, LLC, 2005-2007. All rights reserved.
Wednesday, January 10, 2007
Thursday, January 04, 2007
Transcript of Webinar on SOA Trends with Analyst Dana Gardner and Cape Clear CEO Annrai O'Toole
Edited transcript of SOA trends webinar recorded Nov. 15, 2006.
Listen to a podcast of the webinar here. Sponsor: Cape Clear Software, Inc.
Welcome to a special BriefingsDirect presentation, a podcast created from a recent webinar with Interarbor Solutions Principal Analyst Dana Gardner and Cape Clear Software CEO Annrai O'Toole. This sponsored webinar presents a Services Oriented Architecture (SOA) market perspective by Dana, followed by comments by Annrai, and some questions from the live webinar audience. Today’s topic is how the value provided by SOA may be the best way to demonstrate the business value of SOA investments. Now, let’s listen to the analyst’s perspective.
Dana Gardner: Hello, we’re going to work through a state-of-the-market analysis on SOA at a very important juncture in SOA's evolution. An incredibly important issue right now is whether we are going to win broad acceptance and deep penetration, or whether SOA remains somewhat marginal.
There are a number of things going on in the market that we will look over. Trends and developments in information technology (IT) such as market acceptance and tipping points -- and a sort of social-animal instinct and on how people behave -- become very important. It is no longer just about the technology; it's about what motivates people, particularly in their businesses.
So, let’s take a level-set in changing times. These are very dynamic times. There are so many things going on in addition to SOA that we can’t look at SOA alone; we have to look at it in the context of what’s going on in general with IT and business. Over the last two to four years, we have seen SOA develop as a vision, spawned off the work done with Web services, progeny of object orientation and components, bringing it into a standard environment and, hopefully, into much broader usage across IT -- not just in development but in how people conceive of IT; a transformative type of activity.
We have gone through SOA standards. We have seen companies come up with methodologies, and have had examples of successful, and not so successful, implementations of SOA in the marketplace. Most, if not all, of the large vendors are solidly behind SOA. We’ve seen them use the terminology. Some are talking more about the business results than the SOA nomenclature itself. It is clear from IBM to SAP, to Oracle and Sun, that their products and services are based on SOA principles. We expect that will then follow through into the marketplace. We are also seeing quite a bit of development from the large global systems integrators around SOA practices.
Question for SOA is when, not if
It has been my analysis for several years that this is an extremely big deal, but what has been missing is the agreement generally in the marketplace as to not if, but when, to do this. We have also had a lot of activity in the marketplace around startups merging and rearranging their businesses. If they did not start focused on SOA, they seem to be heading in that direction. And that has led to a period of consolidation. We have seen mergers and acquisitions, partnerships, and ecology developments.
We’ve seen the notion of SOA, and it includes governance, bleed over into how IT actually functions -- and not just how development and deployment strategies are defined. We are really up against the tipping point here. The crucial issue for SOA is how that tipping point manifests itself.
The real force behind SOA is a transformative activity, both for the technologists in the IT department as well as for how IT is conceived, perceived, and used by the businesses. This has been an ongoing issue for many years, if not decades. At this point we have quite a bit of buy-in around SOA from the technologists. What we see mainly, however, is SOA use behind firewalls and within fairly vertical applications, within a defined business process activity.
What's more, many services today are data-centric. My studies show about two-thirds of current in-production SOA services have been data-service layer or data-centric services, and so perhaps as few as one third are being devoted to business logic and transactional activities. This, of course, will vary from company to company, in vertical industry to vertical industry, but the trend is showing a predominance of interest in making data available as a service. That service is then consumed and used in non-SOA activities and in more traditional integration portal Web applications, and Web or thin-client presentation applications.
How will SaaS and SOA emerge together?
So, SOA remains somewhat tactical even at most mainstream enterprises. There is also an important trend line around software as a service (SaaS) providers as they build their applications to be consumed and used as services. They might have a deep impact on how SOA is consumed -- almost on an outsourced basis rather than a homegrown basis -- and we are going to be tracking that carefully.
An inhibitor to the business side of the house in enterprises adopting SOA broadly is a lack of discretionary spending in IT for SOA types of investments. There is a lot of confusion around SOA and its values, and what business terms and issues are the motivators. Therefore SOA remains difficult to define and rationalize in purely economic terms. There are a lot of reasons for that.
The market is going to work toward a better understanding of the rationale behind businesses as they seek investments in this disruptive technology. We will move from monolithic silos of development and deployment infrastructure and sort of break that apart. Then after the decomposition process we can extend and reuse and redeploy -- hopefully with a great deal more efficiency -- these resources as granular components or services.
Follow the money
Though the concept is quite strong, the benefits in terms of numbers and metrics can be rather soft. We could tell people they are going to be more agile, be able to change in the marketplace more quickly, and be able to consolidate and use more singular architectures. Yet these are not numbers you can bring in on a quarterly basis and say, “Here’s what SOA has done for us this quarter in terms of dollars and cents.” Financial rewards are part of a long-term transformative process as well; something we expect will take years, if not decades, to fully play out.
SOA is really a journey without a destination and, as such, it is harder to quantify and qualify in terms of payback. If there is no destination, when does one know one has succeeded? This also affects cross-organizational use and deployment. There is a traditional chicken-and-egg relationship on whether developers move first, or the SaaS operators, or the people who deploy them on-premises, and that’s currently being played out.
For the true payback of SOA to come about, be it in soft terms or hard terms, it does require a horizontal, holistic, and general usage. Politics are also involved here. We have people that have been quite content to remain within a small, isolated arena with their own budget to control, working for several well-known and established taskmasters.
SOA, in a sense, disrupts that. There is no central taskmaster with SOA (and that's why governance is so important). The idea is for more and more folks to have a handle on these services, and then use them in new and innovative ways -- closer to the line of business, closer to the business processes, and extending beyond the confines of the enterprise into a supply chain, for example. So there is naturally some control politics.
Also budgeting issues play a role, which often means control from the top down rather than the bottom up because it is the central command-and-control folks that effectively change budget structure and allocate funds. So that is in process now as well.
There is also the need for collaboration across these groups. Not only do we want to change how budgets might be formed, we want to encourage people to work in a simultaneous fashion rather than in a linear fashion. So the hand-off of an application project really can’t happen over a period of six months to 12 months anymore; it needs to happen simultaneously with development. The whole idea here is to go to the business side of the house and tell them we can work quickly and change the process for you, as you have to adapt to a rapidly changing marketplace.
Make the business case for SOA
Gaining market acceptance for SOA requires a compelling business and economic case, something that we haven’t seen, at least not in a cohesive matter. There isn’t a central SOA defining body; there isn’t a central mouthpiece for SOA or SOA activities. It is been happening on an ad hoc, willy-nilly basis from a number of large and small vendors, as well as integrators and professional service providers. It is happening almost as if we were in a social network, and perhaps we are. This is a global SOA social network effect that we are seeing. It is happening at a time when we can’t just focus on SOA, however.
We need to look at all of the other trends, changes, and, frankly, complexity that CIOs, decision makers, enterprises, and telecommunication carriers are facing. If we look at a laundry list of what is going on right now we are not only looking at SOA issues, but also Web 2.0 (and this new concept of Enterprise 2.0), event driven architecture, complex event processing, SaaS, grid-utility computing, application virtualization, open source software and its impact, business process management, and on and on. People are dealing with convergence issues and mobility issues cutting across different types of devices. We are talking about "fabrics" for interconnected networks.
IT trends are also in flux. These are not just technology issues, but affect how IT is consumed such as through "shared services," where IT departments function more as a business customer within an enterprise. They behave based on market forces internally and the need to fulfill service level agreements locally. A very hot area now is IT governance from regulatory impetus to general organizational business practices, where IT departments are maturing and behaving as would an accounting department or an external field organization.
We are looking at application modernization, with people rationalizing which applications should remain and which should go as part of a datacenter consolidation trend. There is infrastructure virtualization, where we can cut costs on hardware and find new benefits around platforms, and instances of runtime, where we can deploy applications in new and interesting ways.
There is also business continuity to consider. We have natural and man-made disasters and disruptions that need to be addressed and, therefore, redundancy plays an important part, and data centers that are strategically placed outside of places that are perhaps at risk. Furthermore, there are regulatory compliance and intellectual property issues involving what code can be used in which ways. This is all part of a barrage of issues that are affecting CIOs and decision makers simultaneously.
More ROI for SOA
Yet, despite the complexities, despite these numerous trends and changes in the market, aggregate spending growth for IT remains fairly confined. We see large single-digit numbers in many organizations. Even within that confined growth trend we still see 60 percent to 80 percent of the total IT cost going to just maintaining and keeping current infrastructure and applications running, which does not leave much for discretionary SOA spending.
As I mentioned earlier, not many individuals are jumping up and down and singing the SOA song in a mutual chorus. Microsoft, for example, has remained somewhat distant from using SOA as a phrase, although many of the business benefits they project for their infrastructure and applications (particularly the newer ones) do align with SOA methods and business benefits.
We need to energize folks to invest in SOA now. I have addressed this issue by looking at the many-faceted benefits of SOA, both as an opportunity and as an area of fear. There is an opportunity to beat your competition if you can embrace SOA and use some of these other large technical and organizational changes to your benefit; to make IT a weapon you can use to do better than your opponent and, therefore, get better traction in the marketplace.
There is also the fear that your competitor might do that to you. There is an opportunity to exploit new avenues for change by obtaining applications or modernizing applications including SaaS. If your opponent in the marketplace (or the person who might get to the marketplace first) is using SaaS, their costs are lower and their agility might be higher. So, there is a fear of that as well.
This is also a great opportunity to exploit these convergence issues, reach mobile workers, and better deliver data and application and logic to the end users across the organization. SOA benefits also work both internally and externally. They allow you to be an architected organization where the focus is on what you need to do in a market to gain new business and to know where the new business is expected to be in six months; to be an early mover, not a trailing-adopter.
Architecture for competitiveness and risk reduction
SOA architecture is absolutely essential to become a first-mover and to focus strategically on architecture over applications to win business. The relationship between the application and the architecture is something we must focus on.
It is not just the fear and opportunity, but general and broad risk reduction that should energize people about SOA. SOA can empower businesses to reduce their risk of losing value from past IT investments. SOA allows you to continue to reap rewards from your past IT investments; to not necessarily sunset applications, but find new value in them. You can mitigate your risk against not competing with newer companies that don't need to support a costly legacy because you can bring in greenfield and modern application architectures as well. SOA allows you to play with both legacy and new greenfield approaches.
There is also risk reduction and mitigation against the unforeseeable future; against new architectural benefits, IT benefits, or trends that might be here in two-to-three years. SOA has a risk-reduction benefit because it is defensive, it is offensive, it is inclusive, and it works across organizational boundaries.
There is also risk-reduction around data and application logic, and the use of data in applications in new formats. There is reduced risk in the ability to absorb and manage merger and acquisitions, expected or not. I’ve spoken with folks at venders like Oracle that say they probably couldn’t have done the J.D. Edwards and the PeopleSoft activities without Web services and, increasingly, without SOA. If they can do it to move fast and successfully in their markets, their customers need to think the same way.
They need visibility across an entire process chain to reduce risk in terms of actually controlling what is going on within IT. One of the things that we are discussing with IT governance and enterprise service buses (ESBs), and some of the standards and methodologies used, is an ability to gain a holistic total view into a process -- not just a set of technologies; not just a particular server farm or a particular layer within a distributed architecture but across a business process.
"How am I actually doing?" This is a very important element for businesses on a regulatory compliance basis for Sarbanes-Oxley, for example, but also for companies to be fleet. If you don’t know what you are doing or how things are going, you cannot react appropriately.
So, in summary, SOA is really a means, an ongoing journey. It has soft advantages, but I think it has great benefits in terms of risk reduction and of meeting opportunity rather than fearing opportunity. It is a defensive and offensive weapon, both inside and outside of the firewall, and it bridges the past and the future while encouraging organizational transformation -- not just IT transformation but business transformation.
SOA promotes total excellence over subset excellence and fosters change management as a core competency. It also allows for constant process refinement; things do not get locked in and then set into a monolithic and static hierarchy, they are constantly being changed and improved. The ultimate goal is to be able to attain many of these things with overall reduced cost of capital and in the cost of ongoing maintenance and support.
That is the end of my presentation on the state of SOA. It is important now to energize and find ways to make the business case for this because the managers, over time, will play out for those that are early movers. Thank you.
Cape Clear CEO comments
Annrai O'Toole: Thanks very much, Dana. I am going to pick up where Dana left off. Dana has pointed out a few of the topics here, and there are a few things that I would like to add to the mix.
Before we jump in to this, I would just like to stand back and think about SOA in a very broad sense. I have been writing a blog article about this topic as well. It is fair to compare SOA to things that we have seen in the past like client-server and the Internet because they are very similar. Those were terms that the industry applied to a big change. The Internet was very easy for people to understand, because it is very visual and people could get on to a browser and move around.
So, the Internet did not need a whole lot of selling. Client-server needed quite a bit. However, there were a lot of clear business benefits to client-server in particular because it came from a mainframe-dominated world of computing. Client-server essentially offered people a much cheaper hardware infrastructure, and a much cheaper way to get far more powerful applications onto people’s desktops. So it was pretty easy; business users could use those applications to see what it was all about and they received client-server at a high level.
SOA is very similar to client-server. SOA is essentially a set of technologies and a methodology and a philosophy about how we build enterprise applications. SOA is never going to have much meaning for the average consumer in the streets, but it does have a lot of meaning for large enterprises. We are here today to discuss what SOA means to business users and enterprises. As Dana outlined, it is a kind of struggle because we can approach a business user and say, “SOA gives you more agile applications.” They ask, “What precisely does more agile applications mean?”
The term in itself is vague and building any metrics around this is tough. The business users get the notion that they want the applications to change more easily, but it is very difficult to quantify that. If we asked business users and a focus group what they meant by "agile applications," I think we would get many different answers. If you read in the blogosphere about SOA, you read only the articles. Once people get beyond agile applications, they are into reducing integration in half and that is nice. It is definitely very quantifiable.
More meat for the business users
In particular, as Dana exemplified so well, you know there are so many things that IT is grappling with today. I am not going to repeat what Dana spoke about, but the business user and the context of reducing integration costs is important. I don’t think that there are many business users who jump out of bed in the morning and say, “How am I going to reduce IT integration costs?” So I think these are the two main planks about how we justify SOA to a business user today, and I think we are all being pretty candid here, but these are not great.
We need to do a better job on this. If you start reading all the stuff in the blogosphere about SOA, it is really techies talking to techies; it is all about how you adopt SOA and the architectural approaches to adopting SOA. At Cape Clear a lot of our content is focused on IT guys, which is correct, but we in the industry have the onus on us to do a better job of explaining this to business users.
So the bad news is that I do not have a magic answer to this, and the good news is that I have a few things to say that I think are interesting. There are a number of very powerful things that SOA is doing today, and we are involved in some of them. For instance, there is increasing use of software as a service (SaaS). A long-running problem that many business users have had is that they all want greater business applications that give them better insight into their business but they do not want to spend three or four years doing large enterprise resource planning (ERP) implementations.
So SaaS for a lot of cost reasons and efficiencies -- and in use adoption -- is doing really well. There is a new Salesforce.com-breed that has done extremely well there. Just last week we announced our partnership with Workday. They have a whole new take on ERP applications based on the hosted model. They are embedding our software, along with other companies. So there is a whole range of SaaS applications that are turning to SOA to provide the kind of back-end integrations between the SaaS and existing applications that customers already have. SOA is already playing a very important part in pairing the next generation of business applications. And I think many business users understand that.
This next line is not something that I think business users understand yet, but it is incredibly important. A lot of techies know this stuff, but as you begin and you look at what SOA is doing -- it is really blurring the line between the underlying middleware infrastructure and the sets of business applications. The clearest example of this is Oracle Fusion. Oracle is spending a ton of money in increasing the Fusion middleware line and they are not doing it because they want to find new middleware; not really.
Middleware and applications blur
Oracle Fusion is an application strategy, and the only way that Oracle is able to deliver a unified set of applications from all the things they have acquired is by integrating them together around Oracle Fusion. Oracle is very clear about this. If you read all the documentation or the messages that they are sending, Oracle Fusion is an application strategy. That is very important, because the infrastructure (the middleware stuff that we have all been involved with for years and years) is really getting more and more powerful. And so that’s really making this infrastructure into things that people can really build, can easily build applications, on top of.
Dana certainly picked up on this. I think that when you distill all this, what really stands out is that SOA is increasingly about liberating the business process because today many business processes are hard-coated in cement inside big-tent applications like SAP. We have a couple of ex-PeopleSoft people working with us at Cape Clear, and they tell a great story about how they used to do sales pitches against SAP. They went to the customer with a small cup of quick-drying cement and poured it into a mold. By the time they finished the presentation, the cement is set and it has SAP written on it.
They then say, “There you go, that’s the deal with SAP.” It is easy to design, but once you get your business process done, it is embedded in cement. For lots of businesses all over the world, the business process is very difficult to change because the idea is so hard to change. SOA is all about how to use that application in new and more transparent ways that are easier to change and that deliver agility.
I recently had a conversation with a Gartner analyst about how they describe the whole SOA space and the ESB space. They were saying that there were some conversations going on inside Gartner about the fact that they might change the definition for this and bolt the stuff into business processes management (BPM).
At first she recoiled against that saying, but the more you think about SOA, the more you realize that it is just about helping people understand, and making those business processes more transparent and more open to change. We here at Cape Clear see this forcefully with our customers. Just yesterday we announced a business activity monitoring (BAM) solution with the Cape Clear ESB. We are doing this because when people get an ESB installed, it gives them a perfect opportunity for the ESB to power a BAM for the dashboards, so they can understand what is going on in the business process.
We have a great story from one of our customers about repairing an online website. With the BAM solution in, we are looking at the site and we noticed there was a set of faults building up on the credit card validation side. This was tough to track down because of the very obscure problem. The BAM insight showed how the process had been written and, because of that, we were able to point out that they were losing a large number of visitors who were stopped at a certain point because the credit card validation was jamming up.
SOA as new business applications
This example validates having the ability to expose business processes and tell people what is going wrong and how to fix it. If you can show where things are going wrong and how they can increase the top line revenue, it is very easy to sell SOA. Every businessperson can relate to that. So, I just started to pull this together and join some dots here. You come to the conclusion that SOA is a new business application.
I am borrowing from those that have gone before me. The great Scott McNealy line at Sun was that the "Network is the Computer." He was saying that for years. That was a model for the longest time. When he was saying that, they were delivering things like RPC and NFS, and it made sense in those terms. When the Internet arrived it made huge sense and everybody agreed that the network is the computer.
Now, if you join the dots between a new world of easy-to-use host applications then making business processes transparent and being able to see what is going on in real-time in your business is essential. When you start to join the dots between those and other things that SOA is enabling, it starts to give real meaning to this notion that SOA is indeed the new business application. It is not about Web services and WSDL and BPEL, which is for technologists, but the business people need over time to see where they’re going to build applications, and it is around SOA.
As you start to frame it in those terms, we can come up with a language that explains what SOA is all about to business users and we absolutely need to do that. I’m writing this up in a blog article and will hopefully get it posted soon. If you want to join in the conversation and add your two-cents to what you have heard today, we certainly welcome you to do so.
So with that, I’m going to hand it back to the moderator and I am going to take some questions. Thanks very much.
Questions from the audience
Moderator: Thanks, Annrai. Okay, our first question reads, Annrai, you mentioned BAM as an example of an application-level benefit of SOA. What other business application-level benefits may be coming?
O'Toole: That is a good question. First, let me talk about just specifically in relation to how we at Cape Clear think about it, and then maybe more generically. So, one of the topics that’s gained a lot of attraction recently is this whole notion of SOA governance, whatever that means. It is a great term. If you dig into it and if you look at a lot of what the products today are offering in terms of SOA governance, it is about IT governance.
It is essentially a workflow system for IT, to make sure we’ve done the correct designs, to make sure we are going through the right development steps, to make sure we are following the right checklist in terms of deploying things and so on. So, it is a workflow to make sure that IT is doing the right thing.
That’s interesting, but it is not much use for business users. Business users, when they think about SOA governance, they want to have some notion that they can understand the set of services and what they’re doing, and just get more transparency into what IT is actually doing. To that end, we at Cape Clear, we’ve talked a bit about this notion of a SOA wiki. I mean a wiki is a fantastic way of communicating information in a semi-structured way.
A lot of the information that business users want about services is pretty semi-structured; they want to understand what services we are running today, they want to see high level pictures of them, and they want to comment on them and say, “It’ll be really great if you could do this rather than the other ...” They want an easy way to do that. They want to see nice pictures, maybe of business flow diagrams that go behind them. In fact, we see the SOA wiki in Cape Clear terms as a metaphor for how you deliver the next-generation of business tools.
The state of the art today in terms of business-level tools around IT are things like the Rational software from IBM. It is a very good set of tools, but if you look at what they do, they give you things like the Rational Unified Process, which is the UML system. That is not really of use to a business user. I’ll pay anybody handsome money if they can show me a business user that can make sense for a UML diagram.
So, I think there is a big need to take what we’ve done today in SOA and really start to build out the next generation of tools that are in the wiki mode to help business users see the set of services, and business processes, understand the set of policies that are being enforced by the IT organization, and be able to interact with those in a manageable way.
All this information flows into a repository, and can then be pulled out and IT guys can work on it then. But I see SOA going in that direction, and from that moving to the next-generation of business process modeling tools, and so on. There is a long way for the full plate of things, that both Cape Clear and the industry in general, is going to address around giving better business tools to business users.
How to get started with SOA
Moderator: Okay, thanks. I think both of you can comment on this next question. Dana, you can comment first and then Annrai. How does a company with a significant number of legacy applications get started with SOA?
Gardner: Well, the gist or the crux of the issue is where to start on this process. We have seen a preponderance of services around data and I think it is important for people to look at the data within those legacy applications and to liberate it so that it can be applied more broadly to processes, to offer visibility, and give metrics and knowledge about the business -- but outside of the strict confines of the applications and legacy applications.
So one of the first and perhaps best business pay-off activities you can do is to look at the data -- elevate it, cleanse it, and make it available as a service. This is probably something people have been doing within a fairly rigid set of database technologies. A good place to start is to take that data and abstract it to a services level or a layer where the metadata is more important in a process or holistic sense rather than the formats and originating repository.
Once you have liberated the data, you can start looking at liberating logic, exposing more of the applications as components or services, or at least integrating them beyond just a point-to-point basis; liberating them to integrate at a higher abstraction. So, you look at the data, you look at the logic, and it is also a great opportunity to start rationalizing which of those legacy applications are worth maintaining.
You might want to sunset some applications once you have the data out, or once you have taken out some of the logic in the COBOL or whatever code is there. You probably don’t have much documentation and the people who wrote it are long gone. It might make economic sense to retire some of it. If you’re not going to retire it, you might think about what platform makes more sense over a period of time. For example, should I move it to a Linux on Intel or x86 architecture? Should I think about decomposing them into either Web applications or client-server application services? So, look at the topology and what makes sense.
I would have the legacy rationalization process include movement toward SOA along with your movement of what to sunset, what to modernize, what to consolidate, and unify under the newer architectures. By doing that, you are protecting yourself against the risk of spending money needlessly on outdated things that are not contributing to your bottom or top lines -- and at the same time reducing your overall IT cost.
O'Toole: I do not have much to add to that other than our usual dictum which is to start small; define something that is definitely doable, and do it. There is a lot of learning that folks have to do if they get into this world, and they need to just get going somewhere.
How do SOA and Web 2.0 intersect?
Moderator: Okay, thanks. The next question is, How do you see Web 2.0 and SOA coming together? Is that what people mean by Enterprise 2.0? Dana, I think you were talking about this in your presentation.
Gardner: Yes, we’ve seen a lot of activity around social networks that allow collaboration on an ad hoc basis, using things like wikis, podcasts, blogging, transparency and openness -- where the technology is really above and beyond (and totally separate from) traditional applications and platforms.
These things could actually be services that you would take off of the Internet as a Web service from Google or Yahoo or some open source or proprietary company that you might pay for on a subscription basis. We have some of these new tools, and some of the younger folks that are coming into IT that are used to doing this in their high school yearbook or equivalent. So we are looking for these ways of communicating and collaborating, where you blend some of these Web 2.0 capabilities into an SOA opportunity, where you’re looking at automation.
You’re providing more graphical interfaces for people to start reacting to IT as a business user, where the automation of the services is beneath the covers and people are increasingly finding an intercept. How will they do that? Will people think about intercepting with business processes and an automated layer of highly abstracted IT through a traditional tree diagram, or will they think about it more like a discussion and how can I get other people who have an impact on this business process, either inside or outside of my company? How can I bring them into the process? How can we communicate and collaborate?
So, I think that there is a great deal of opportunity for Web 2.0 principles, ideas, and approaches to be applied to SOA, just as SOA is bubbling up. I see this liberating and freeing data and logic into services that can be arranged and re-arranged. Some people are worried that SOA becomes less relevant under Web 2.0; some will just use ad hoc and loosely coupled and some of the client interfaces as the equivalent of SOA. But you still want to have impact on your legacy systems, down into the distributed computing environment, while also taking advantage of these high-abstraction social interaction benefits.
O'Toole: Web 2.0 is fundamentally a consumer Internet technology and Dana’s point is well-made. If you look over the last four or five years, there is been very little change in the enterprise computing landscape. In fact, what we have seen is massive consolidation at the enterprise computing level ... this massive consolidation of big old giants, and I think there are lots of things people mean by Enterprise 2.0.
But one thing everybody would agree on is there is a big change coming at the enterprise computing landscape. The days of very cumbersome, hard-to-use monolithic expensive technology is coming to an end. As Dana mentioned earlier, we are at a tipping point where the whole existing enterprise and software world comes crashing down. It is going to be a big bang.
Moderator: Okay, thanks. The next question is for you, Annrai. What lessons did you take away from your dealings with Workday that speak to the advancements of SOA?
O'Toole: There are a few tactical ones in making SOA work in that 24x7 host environment. This is no walk in the park. It is a very demanding environment, and your stuff needs to be up to the job. The traditional interoperability stuff does not work. A lot of the people using the Workday service are using .NET clients. Everything we have spoken about in terms of adding SOA into operability and out-of-the-box integration all needs to work in production.
Workday is offering two elements: One is hosted applications, initially human resources functionality; and secondly hosted integration. They need to be able to host integrations on behalf of their customers, to talk to ADP and other payroll processes and so on. This whole multi-talented, hosted integration thing is a really interesting idea. And I think that’s come out as how we help a lot of existing enterprises move forward into this new world of SOA.
Key messages for ROI
Moderator: This will be our last question. What have been the key messages specifically around ROI that an IT professional or CIO could take to our CEO about why we should invest in SOA? Dana, maybe you could respond that?
Gardner: Sure, I think CIOs need to stress to their leadership the need to get behind transformation, and that all the complaints about IT will not back away by themselves. A proactive approach to transformation is essential. Once you have decided you want to change the mindset around IT from being a cost-center and an inhibitor and a place for excuses or to develop as quickly as code, then you will make the shift toward being a differentiator -- a place where IT are accountable.
If they can make change happen and become more accountable with both developers and operators working hand-in-hand on a common methodology or understanding -- that's architecture. They also need to take into account the networks and communications folks. It is not just cutting across developers and the operators. We need to bring in all those folks that used to exist down the hall alone with their PBX and their communications protocols and their own set of goobly-gook and acronyms, and allow for those communications to be exposed to services as well.
Then all those services need to be embedded within business process. It is not just about what you do with your PC. It is what you do with your phone, your mobile device, and multi-modality communications -- anything that touches IT. It all blends together.
So the mindset to take to your CEO is transformation. If they were invigorated by business process re-engineering 15 years ago, they should be reinvigorated by SOA and see it not through the lens of yet another technology shift, but really through a larger lens in order to be adaptable and changeable in the marketplace.
Moderator: Great, thank you. That’s all the time we have today. If your question was not answered online, we will be happy to follow up with you after the event.
If you would like to learn more about Cape Clear, please visit our website at www.capeclear.com. You can also register for one of our upcoming SOA forums. Thank you very much, Dana and Annrai, for your time today and thank you all for attending.
You’ve been listening to a sponsored BriefingsDirect Podcast with your host Dana Gardner, principal analyst at Interarbor Solutions. Remember that full transcripts of these podcasts are available at www.briefingsdirect.com. If you would like information on how to sponsor a podcast or to repurpose a webinar into a podcast, contact Interarbor Solutions at 603-528-2435 and at www.interarbor-solutions.com.
Listen to the podcast here.
Sponsor: Cape Clear Software.
Transcript of Dana Gardner’s BriefingsDirect podcast on the state of SOA. Copyright Interarbor Solutions, LLC, 2005-2007. All rights reserved.
Listen to a podcast of the webinar here. Sponsor: Cape Clear Software, Inc.
Welcome to a special BriefingsDirect presentation, a podcast created from a recent webinar with Interarbor Solutions Principal Analyst Dana Gardner and Cape Clear Software CEO Annrai O'Toole. This sponsored webinar presents a Services Oriented Architecture (SOA) market perspective by Dana, followed by comments by Annrai, and some questions from the live webinar audience. Today’s topic is how the value provided by SOA may be the best way to demonstrate the business value of SOA investments. Now, let’s listen to the analyst’s perspective.
Dana Gardner: Hello, we’re going to work through a state-of-the-market analysis on SOA at a very important juncture in SOA's evolution. An incredibly important issue right now is whether we are going to win broad acceptance and deep penetration, or whether SOA remains somewhat marginal.
There are a number of things going on in the market that we will look over. Trends and developments in information technology (IT) such as market acceptance and tipping points -- and a sort of social-animal instinct and on how people behave -- become very important. It is no longer just about the technology; it's about what motivates people, particularly in their businesses.
So, let’s take a level-set in changing times. These are very dynamic times. There are so many things going on in addition to SOA that we can’t look at SOA alone; we have to look at it in the context of what’s going on in general with IT and business. Over the last two to four years, we have seen SOA develop as a vision, spawned off the work done with Web services, progeny of object orientation and components, bringing it into a standard environment and, hopefully, into much broader usage across IT -- not just in development but in how people conceive of IT; a transformative type of activity.
We have gone through SOA standards. We have seen companies come up with methodologies, and have had examples of successful, and not so successful, implementations of SOA in the marketplace. Most, if not all, of the large vendors are solidly behind SOA. We’ve seen them use the terminology. Some are talking more about the business results than the SOA nomenclature itself. It is clear from IBM to SAP, to Oracle and Sun, that their products and services are based on SOA principles. We expect that will then follow through into the marketplace. We are also seeing quite a bit of development from the large global systems integrators around SOA practices.
Question for SOA is when, not if
It has been my analysis for several years that this is an extremely big deal, but what has been missing is the agreement generally in the marketplace as to not if, but when, to do this. We have also had a lot of activity in the marketplace around startups merging and rearranging their businesses. If they did not start focused on SOA, they seem to be heading in that direction. And that has led to a period of consolidation. We have seen mergers and acquisitions, partnerships, and ecology developments.
We’ve seen the notion of SOA, and it includes governance, bleed over into how IT actually functions -- and not just how development and deployment strategies are defined. We are really up against the tipping point here. The crucial issue for SOA is how that tipping point manifests itself.
The real force behind SOA is a transformative activity, both for the technologists in the IT department as well as for how IT is conceived, perceived, and used by the businesses. This has been an ongoing issue for many years, if not decades. At this point we have quite a bit of buy-in around SOA from the technologists. What we see mainly, however, is SOA use behind firewalls and within fairly vertical applications, within a defined business process activity.
What's more, many services today are data-centric. My studies show about two-thirds of current in-production SOA services have been data-service layer or data-centric services, and so perhaps as few as one third are being devoted to business logic and transactional activities. This, of course, will vary from company to company, in vertical industry to vertical industry, but the trend is showing a predominance of interest in making data available as a service. That service is then consumed and used in non-SOA activities and in more traditional integration portal Web applications, and Web or thin-client presentation applications.
How will SaaS and SOA emerge together?
So, SOA remains somewhat tactical even at most mainstream enterprises. There is also an important trend line around software as a service (SaaS) providers as they build their applications to be consumed and used as services. They might have a deep impact on how SOA is consumed -- almost on an outsourced basis rather than a homegrown basis -- and we are going to be tracking that carefully.
An inhibitor to the business side of the house in enterprises adopting SOA broadly is a lack of discretionary spending in IT for SOA types of investments. There is a lot of confusion around SOA and its values, and what business terms and issues are the motivators. Therefore SOA remains difficult to define and rationalize in purely economic terms. There are a lot of reasons for that.
The market is going to work toward a better understanding of the rationale behind businesses as they seek investments in this disruptive technology. We will move from monolithic silos of development and deployment infrastructure and sort of break that apart. Then after the decomposition process we can extend and reuse and redeploy -- hopefully with a great deal more efficiency -- these resources as granular components or services.
Follow the money
Though the concept is quite strong, the benefits in terms of numbers and metrics can be rather soft. We could tell people they are going to be more agile, be able to change in the marketplace more quickly, and be able to consolidate and use more singular architectures. Yet these are not numbers you can bring in on a quarterly basis and say, “Here’s what SOA has done for us this quarter in terms of dollars and cents.” Financial rewards are part of a long-term transformative process as well; something we expect will take years, if not decades, to fully play out.
SOA is really a journey without a destination and, as such, it is harder to quantify and qualify in terms of payback. If there is no destination, when does one know one has succeeded? This also affects cross-organizational use and deployment. There is a traditional chicken-and-egg relationship on whether developers move first, or the SaaS operators, or the people who deploy them on-premises, and that’s currently being played out.
For the true payback of SOA to come about, be it in soft terms or hard terms, it does require a horizontal, holistic, and general usage. Politics are also involved here. We have people that have been quite content to remain within a small, isolated arena with their own budget to control, working for several well-known and established taskmasters.
SOA, in a sense, disrupts that. There is no central taskmaster with SOA (and that's why governance is so important). The idea is for more and more folks to have a handle on these services, and then use them in new and innovative ways -- closer to the line of business, closer to the business processes, and extending beyond the confines of the enterprise into a supply chain, for example. So there is naturally some control politics.
Also budgeting issues play a role, which often means control from the top down rather than the bottom up because it is the central command-and-control folks that effectively change budget structure and allocate funds. So that is in process now as well.
There is also the need for collaboration across these groups. Not only do we want to change how budgets might be formed, we want to encourage people to work in a simultaneous fashion rather than in a linear fashion. So the hand-off of an application project really can’t happen over a period of six months to 12 months anymore; it needs to happen simultaneously with development. The whole idea here is to go to the business side of the house and tell them we can work quickly and change the process for you, as you have to adapt to a rapidly changing marketplace.
Make the business case for SOA
Gaining market acceptance for SOA requires a compelling business and economic case, something that we haven’t seen, at least not in a cohesive matter. There isn’t a central SOA defining body; there isn’t a central mouthpiece for SOA or SOA activities. It is been happening on an ad hoc, willy-nilly basis from a number of large and small vendors, as well as integrators and professional service providers. It is happening almost as if we were in a social network, and perhaps we are. This is a global SOA social network effect that we are seeing. It is happening at a time when we can’t just focus on SOA, however.
We need to look at all of the other trends, changes, and, frankly, complexity that CIOs, decision makers, enterprises, and telecommunication carriers are facing. If we look at a laundry list of what is going on right now we are not only looking at SOA issues, but also Web 2.0 (and this new concept of Enterprise 2.0), event driven architecture, complex event processing, SaaS, grid-utility computing, application virtualization, open source software and its impact, business process management, and on and on. People are dealing with convergence issues and mobility issues cutting across different types of devices. We are talking about "fabrics" for interconnected networks.
IT trends are also in flux. These are not just technology issues, but affect how IT is consumed such as through "shared services," where IT departments function more as a business customer within an enterprise. They behave based on market forces internally and the need to fulfill service level agreements locally. A very hot area now is IT governance from regulatory impetus to general organizational business practices, where IT departments are maturing and behaving as would an accounting department or an external field organization.
We are looking at application modernization, with people rationalizing which applications should remain and which should go as part of a datacenter consolidation trend. There is infrastructure virtualization, where we can cut costs on hardware and find new benefits around platforms, and instances of runtime, where we can deploy applications in new and interesting ways.
There is also business continuity to consider. We have natural and man-made disasters and disruptions that need to be addressed and, therefore, redundancy plays an important part, and data centers that are strategically placed outside of places that are perhaps at risk. Furthermore, there are regulatory compliance and intellectual property issues involving what code can be used in which ways. This is all part of a barrage of issues that are affecting CIOs and decision makers simultaneously.
More ROI for SOA
Yet, despite the complexities, despite these numerous trends and changes in the market, aggregate spending growth for IT remains fairly confined. We see large single-digit numbers in many organizations. Even within that confined growth trend we still see 60 percent to 80 percent of the total IT cost going to just maintaining and keeping current infrastructure and applications running, which does not leave much for discretionary SOA spending.
As I mentioned earlier, not many individuals are jumping up and down and singing the SOA song in a mutual chorus. Microsoft, for example, has remained somewhat distant from using SOA as a phrase, although many of the business benefits they project for their infrastructure and applications (particularly the newer ones) do align with SOA methods and business benefits.
We need to energize folks to invest in SOA now. I have addressed this issue by looking at the many-faceted benefits of SOA, both as an opportunity and as an area of fear. There is an opportunity to beat your competition if you can embrace SOA and use some of these other large technical and organizational changes to your benefit; to make IT a weapon you can use to do better than your opponent and, therefore, get better traction in the marketplace.
There is also the fear that your competitor might do that to you. There is an opportunity to exploit new avenues for change by obtaining applications or modernizing applications including SaaS. If your opponent in the marketplace (or the person who might get to the marketplace first) is using SaaS, their costs are lower and their agility might be higher. So, there is a fear of that as well.
This is also a great opportunity to exploit these convergence issues, reach mobile workers, and better deliver data and application and logic to the end users across the organization. SOA benefits also work both internally and externally. They allow you to be an architected organization where the focus is on what you need to do in a market to gain new business and to know where the new business is expected to be in six months; to be an early mover, not a trailing-adopter.
Architecture for competitiveness and risk reduction
SOA architecture is absolutely essential to become a first-mover and to focus strategically on architecture over applications to win business. The relationship between the application and the architecture is something we must focus on.
It is not just the fear and opportunity, but general and broad risk reduction that should energize people about SOA. SOA can empower businesses to reduce their risk of losing value from past IT investments. SOA allows you to continue to reap rewards from your past IT investments; to not necessarily sunset applications, but find new value in them. You can mitigate your risk against not competing with newer companies that don't need to support a costly legacy because you can bring in greenfield and modern application architectures as well. SOA allows you to play with both legacy and new greenfield approaches.
There is also risk reduction and mitigation against the unforeseeable future; against new architectural benefits, IT benefits, or trends that might be here in two-to-three years. SOA has a risk-reduction benefit because it is defensive, it is offensive, it is inclusive, and it works across organizational boundaries.
There is also risk-reduction around data and application logic, and the use of data in applications in new formats. There is reduced risk in the ability to absorb and manage merger and acquisitions, expected or not. I’ve spoken with folks at venders like Oracle that say they probably couldn’t have done the J.D. Edwards and the PeopleSoft activities without Web services and, increasingly, without SOA. If they can do it to move fast and successfully in their markets, their customers need to think the same way.
They need visibility across an entire process chain to reduce risk in terms of actually controlling what is going on within IT. One of the things that we are discussing with IT governance and enterprise service buses (ESBs), and some of the standards and methodologies used, is an ability to gain a holistic total view into a process -- not just a set of technologies; not just a particular server farm or a particular layer within a distributed architecture but across a business process.
"How am I actually doing?" This is a very important element for businesses on a regulatory compliance basis for Sarbanes-Oxley, for example, but also for companies to be fleet. If you don’t know what you are doing or how things are going, you cannot react appropriately.
So, in summary, SOA is really a means, an ongoing journey. It has soft advantages, but I think it has great benefits in terms of risk reduction and of meeting opportunity rather than fearing opportunity. It is a defensive and offensive weapon, both inside and outside of the firewall, and it bridges the past and the future while encouraging organizational transformation -- not just IT transformation but business transformation.
SOA promotes total excellence over subset excellence and fosters change management as a core competency. It also allows for constant process refinement; things do not get locked in and then set into a monolithic and static hierarchy, they are constantly being changed and improved. The ultimate goal is to be able to attain many of these things with overall reduced cost of capital and in the cost of ongoing maintenance and support.
That is the end of my presentation on the state of SOA. It is important now to energize and find ways to make the business case for this because the managers, over time, will play out for those that are early movers. Thank you.
Cape Clear CEO comments
Annrai O'Toole: Thanks very much, Dana. I am going to pick up where Dana left off. Dana has pointed out a few of the topics here, and there are a few things that I would like to add to the mix.
Before we jump in to this, I would just like to stand back and think about SOA in a very broad sense. I have been writing a blog article about this topic as well. It is fair to compare SOA to things that we have seen in the past like client-server and the Internet because they are very similar. Those were terms that the industry applied to a big change. The Internet was very easy for people to understand, because it is very visual and people could get on to a browser and move around.
So, the Internet did not need a whole lot of selling. Client-server needed quite a bit. However, there were a lot of clear business benefits to client-server in particular because it came from a mainframe-dominated world of computing. Client-server essentially offered people a much cheaper hardware infrastructure, and a much cheaper way to get far more powerful applications onto people’s desktops. So it was pretty easy; business users could use those applications to see what it was all about and they received client-server at a high level.
SOA is very similar to client-server. SOA is essentially a set of technologies and a methodology and a philosophy about how we build enterprise applications. SOA is never going to have much meaning for the average consumer in the streets, but it does have a lot of meaning for large enterprises. We are here today to discuss what SOA means to business users and enterprises. As Dana outlined, it is a kind of struggle because we can approach a business user and say, “SOA gives you more agile applications.” They ask, “What precisely does more agile applications mean?”
The term in itself is vague and building any metrics around this is tough. The business users get the notion that they want the applications to change more easily, but it is very difficult to quantify that. If we asked business users and a focus group what they meant by "agile applications," I think we would get many different answers. If you read in the blogosphere about SOA, you read only the articles. Once people get beyond agile applications, they are into reducing integration in half and that is nice. It is definitely very quantifiable.
More meat for the business users
In particular, as Dana exemplified so well, you know there are so many things that IT is grappling with today. I am not going to repeat what Dana spoke about, but the business user and the context of reducing integration costs is important. I don’t think that there are many business users who jump out of bed in the morning and say, “How am I going to reduce IT integration costs?” So I think these are the two main planks about how we justify SOA to a business user today, and I think we are all being pretty candid here, but these are not great.
We need to do a better job on this. If you start reading all the stuff in the blogosphere about SOA, it is really techies talking to techies; it is all about how you adopt SOA and the architectural approaches to adopting SOA. At Cape Clear a lot of our content is focused on IT guys, which is correct, but we in the industry have the onus on us to do a better job of explaining this to business users.
So the bad news is that I do not have a magic answer to this, and the good news is that I have a few things to say that I think are interesting. There are a number of very powerful things that SOA is doing today, and we are involved in some of them. For instance, there is increasing use of software as a service (SaaS). A long-running problem that many business users have had is that they all want greater business applications that give them better insight into their business but they do not want to spend three or four years doing large enterprise resource planning (ERP) implementations.
So SaaS for a lot of cost reasons and efficiencies -- and in use adoption -- is doing really well. There is a new Salesforce.com-breed that has done extremely well there. Just last week we announced our partnership with Workday. They have a whole new take on ERP applications based on the hosted model. They are embedding our software, along with other companies. So there is a whole range of SaaS applications that are turning to SOA to provide the kind of back-end integrations between the SaaS and existing applications that customers already have. SOA is already playing a very important part in pairing the next generation of business applications. And I think many business users understand that.
This next line is not something that I think business users understand yet, but it is incredibly important. A lot of techies know this stuff, but as you begin and you look at what SOA is doing -- it is really blurring the line between the underlying middleware infrastructure and the sets of business applications. The clearest example of this is Oracle Fusion. Oracle is spending a ton of money in increasing the Fusion middleware line and they are not doing it because they want to find new middleware; not really.
Middleware and applications blur
Oracle Fusion is an application strategy, and the only way that Oracle is able to deliver a unified set of applications from all the things they have acquired is by integrating them together around Oracle Fusion. Oracle is very clear about this. If you read all the documentation or the messages that they are sending, Oracle Fusion is an application strategy. That is very important, because the infrastructure (the middleware stuff that we have all been involved with for years and years) is really getting more and more powerful. And so that’s really making this infrastructure into things that people can really build, can easily build applications, on top of.
Dana certainly picked up on this. I think that when you distill all this, what really stands out is that SOA is increasingly about liberating the business process because today many business processes are hard-coated in cement inside big-tent applications like SAP. We have a couple of ex-PeopleSoft people working with us at Cape Clear, and they tell a great story about how they used to do sales pitches against SAP. They went to the customer with a small cup of quick-drying cement and poured it into a mold. By the time they finished the presentation, the cement is set and it has SAP written on it.
They then say, “There you go, that’s the deal with SAP.” It is easy to design, but once you get your business process done, it is embedded in cement. For lots of businesses all over the world, the business process is very difficult to change because the idea is so hard to change. SOA is all about how to use that application in new and more transparent ways that are easier to change and that deliver agility.
I recently had a conversation with a Gartner analyst about how they describe the whole SOA space and the ESB space. They were saying that there were some conversations going on inside Gartner about the fact that they might change the definition for this and bolt the stuff into business processes management (BPM).
At first she recoiled against that saying, but the more you think about SOA, the more you realize that it is just about helping people understand, and making those business processes more transparent and more open to change. We here at Cape Clear see this forcefully with our customers. Just yesterday we announced a business activity monitoring (BAM) solution with the Cape Clear ESB. We are doing this because when people get an ESB installed, it gives them a perfect opportunity for the ESB to power a BAM for the dashboards, so they can understand what is going on in the business process.
We have a great story from one of our customers about repairing an online website. With the BAM solution in, we are looking at the site and we noticed there was a set of faults building up on the credit card validation side. This was tough to track down because of the very obscure problem. The BAM insight showed how the process had been written and, because of that, we were able to point out that they were losing a large number of visitors who were stopped at a certain point because the credit card validation was jamming up.
SOA as new business applications
This example validates having the ability to expose business processes and tell people what is going wrong and how to fix it. If you can show where things are going wrong and how they can increase the top line revenue, it is very easy to sell SOA. Every businessperson can relate to that. So, I just started to pull this together and join some dots here. You come to the conclusion that SOA is a new business application.
I am borrowing from those that have gone before me. The great Scott McNealy line at Sun was that the "Network is the Computer." He was saying that for years. That was a model for the longest time. When he was saying that, they were delivering things like RPC and NFS, and it made sense in those terms. When the Internet arrived it made huge sense and everybody agreed that the network is the computer.
Now, if you join the dots between a new world of easy-to-use host applications then making business processes transparent and being able to see what is going on in real-time in your business is essential. When you start to join the dots between those and other things that SOA is enabling, it starts to give real meaning to this notion that SOA is indeed the new business application. It is not about Web services and WSDL and BPEL, which is for technologists, but the business people need over time to see where they’re going to build applications, and it is around SOA.
As you start to frame it in those terms, we can come up with a language that explains what SOA is all about to business users and we absolutely need to do that. I’m writing this up in a blog article and will hopefully get it posted soon. If you want to join in the conversation and add your two-cents to what you have heard today, we certainly welcome you to do so.
So with that, I’m going to hand it back to the moderator and I am going to take some questions. Thanks very much.
Questions from the audience
Moderator: Thanks, Annrai. Okay, our first question reads, Annrai, you mentioned BAM as an example of an application-level benefit of SOA. What other business application-level benefits may be coming?
O'Toole: That is a good question. First, let me talk about just specifically in relation to how we at Cape Clear think about it, and then maybe more generically. So, one of the topics that’s gained a lot of attraction recently is this whole notion of SOA governance, whatever that means. It is a great term. If you dig into it and if you look at a lot of what the products today are offering in terms of SOA governance, it is about IT governance.
It is essentially a workflow system for IT, to make sure we’ve done the correct designs, to make sure we are going through the right development steps, to make sure we are following the right checklist in terms of deploying things and so on. So, it is a workflow to make sure that IT is doing the right thing.
That’s interesting, but it is not much use for business users. Business users, when they think about SOA governance, they want to have some notion that they can understand the set of services and what they’re doing, and just get more transparency into what IT is actually doing. To that end, we at Cape Clear, we’ve talked a bit about this notion of a SOA wiki. I mean a wiki is a fantastic way of communicating information in a semi-structured way.
A lot of the information that business users want about services is pretty semi-structured; they want to understand what services we are running today, they want to see high level pictures of them, and they want to comment on them and say, “It’ll be really great if you could do this rather than the other ...” They want an easy way to do that. They want to see nice pictures, maybe of business flow diagrams that go behind them. In fact, we see the SOA wiki in Cape Clear terms as a metaphor for how you deliver the next-generation of business tools.
The state of the art today in terms of business-level tools around IT are things like the Rational software from IBM. It is a very good set of tools, but if you look at what they do, they give you things like the Rational Unified Process, which is the UML system. That is not really of use to a business user. I’ll pay anybody handsome money if they can show me a business user that can make sense for a UML diagram.
So, I think there is a big need to take what we’ve done today in SOA and really start to build out the next generation of tools that are in the wiki mode to help business users see the set of services, and business processes, understand the set of policies that are being enforced by the IT organization, and be able to interact with those in a manageable way.
All this information flows into a repository, and can then be pulled out and IT guys can work on it then. But I see SOA going in that direction, and from that moving to the next-generation of business process modeling tools, and so on. There is a long way for the full plate of things, that both Cape Clear and the industry in general, is going to address around giving better business tools to business users.
How to get started with SOA
Moderator: Okay, thanks. I think both of you can comment on this next question. Dana, you can comment first and then Annrai. How does a company with a significant number of legacy applications get started with SOA?
Gardner: Well, the gist or the crux of the issue is where to start on this process. We have seen a preponderance of services around data and I think it is important for people to look at the data within those legacy applications and to liberate it so that it can be applied more broadly to processes, to offer visibility, and give metrics and knowledge about the business -- but outside of the strict confines of the applications and legacy applications.
So one of the first and perhaps best business pay-off activities you can do is to look at the data -- elevate it, cleanse it, and make it available as a service. This is probably something people have been doing within a fairly rigid set of database technologies. A good place to start is to take that data and abstract it to a services level or a layer where the metadata is more important in a process or holistic sense rather than the formats and originating repository.
Once you have liberated the data, you can start looking at liberating logic, exposing more of the applications as components or services, or at least integrating them beyond just a point-to-point basis; liberating them to integrate at a higher abstraction. So, you look at the data, you look at the logic, and it is also a great opportunity to start rationalizing which of those legacy applications are worth maintaining.
You might want to sunset some applications once you have the data out, or once you have taken out some of the logic in the COBOL or whatever code is there. You probably don’t have much documentation and the people who wrote it are long gone. It might make economic sense to retire some of it. If you’re not going to retire it, you might think about what platform makes more sense over a period of time. For example, should I move it to a Linux on Intel or x86 architecture? Should I think about decomposing them into either Web applications or client-server application services? So, look at the topology and what makes sense.
I would have the legacy rationalization process include movement toward SOA along with your movement of what to sunset, what to modernize, what to consolidate, and unify under the newer architectures. By doing that, you are protecting yourself against the risk of spending money needlessly on outdated things that are not contributing to your bottom or top lines -- and at the same time reducing your overall IT cost.
O'Toole: I do not have much to add to that other than our usual dictum which is to start small; define something that is definitely doable, and do it. There is a lot of learning that folks have to do if they get into this world, and they need to just get going somewhere.
How do SOA and Web 2.0 intersect?
Moderator: Okay, thanks. The next question is, How do you see Web 2.0 and SOA coming together? Is that what people mean by Enterprise 2.0? Dana, I think you were talking about this in your presentation.
Gardner: Yes, we’ve seen a lot of activity around social networks that allow collaboration on an ad hoc basis, using things like wikis, podcasts, blogging, transparency and openness -- where the technology is really above and beyond (and totally separate from) traditional applications and platforms.
These things could actually be services that you would take off of the Internet as a Web service from Google or Yahoo or some open source or proprietary company that you might pay for on a subscription basis. We have some of these new tools, and some of the younger folks that are coming into IT that are used to doing this in their high school yearbook or equivalent. So we are looking for these ways of communicating and collaborating, where you blend some of these Web 2.0 capabilities into an SOA opportunity, where you’re looking at automation.
You’re providing more graphical interfaces for people to start reacting to IT as a business user, where the automation of the services is beneath the covers and people are increasingly finding an intercept. How will they do that? Will people think about intercepting with business processes and an automated layer of highly abstracted IT through a traditional tree diagram, or will they think about it more like a discussion and how can I get other people who have an impact on this business process, either inside or outside of my company? How can I bring them into the process? How can we communicate and collaborate?
So, I think that there is a great deal of opportunity for Web 2.0 principles, ideas, and approaches to be applied to SOA, just as SOA is bubbling up. I see this liberating and freeing data and logic into services that can be arranged and re-arranged. Some people are worried that SOA becomes less relevant under Web 2.0; some will just use ad hoc and loosely coupled and some of the client interfaces as the equivalent of SOA. But you still want to have impact on your legacy systems, down into the distributed computing environment, while also taking advantage of these high-abstraction social interaction benefits.
O'Toole: Web 2.0 is fundamentally a consumer Internet technology and Dana’s point is well-made. If you look over the last four or five years, there is been very little change in the enterprise computing landscape. In fact, what we have seen is massive consolidation at the enterprise computing level ... this massive consolidation of big old giants, and I think there are lots of things people mean by Enterprise 2.0.
But one thing everybody would agree on is there is a big change coming at the enterprise computing landscape. The days of very cumbersome, hard-to-use monolithic expensive technology is coming to an end. As Dana mentioned earlier, we are at a tipping point where the whole existing enterprise and software world comes crashing down. It is going to be a big bang.
Moderator: Okay, thanks. The next question is for you, Annrai. What lessons did you take away from your dealings with Workday that speak to the advancements of SOA?
O'Toole: There are a few tactical ones in making SOA work in that 24x7 host environment. This is no walk in the park. It is a very demanding environment, and your stuff needs to be up to the job. The traditional interoperability stuff does not work. A lot of the people using the Workday service are using .NET clients. Everything we have spoken about in terms of adding SOA into operability and out-of-the-box integration all needs to work in production.
Workday is offering two elements: One is hosted applications, initially human resources functionality; and secondly hosted integration. They need to be able to host integrations on behalf of their customers, to talk to ADP and other payroll processes and so on. This whole multi-talented, hosted integration thing is a really interesting idea. And I think that’s come out as how we help a lot of existing enterprises move forward into this new world of SOA.
Key messages for ROI
Moderator: This will be our last question. What have been the key messages specifically around ROI that an IT professional or CIO could take to our CEO about why we should invest in SOA? Dana, maybe you could respond that?
Gardner: Sure, I think CIOs need to stress to their leadership the need to get behind transformation, and that all the complaints about IT will not back away by themselves. A proactive approach to transformation is essential. Once you have decided you want to change the mindset around IT from being a cost-center and an inhibitor and a place for excuses or to develop as quickly as code, then you will make the shift toward being a differentiator -- a place where IT are accountable.
If they can make change happen and become more accountable with both developers and operators working hand-in-hand on a common methodology or understanding -- that's architecture. They also need to take into account the networks and communications folks. It is not just cutting across developers and the operators. We need to bring in all those folks that used to exist down the hall alone with their PBX and their communications protocols and their own set of goobly-gook and acronyms, and allow for those communications to be exposed to services as well.
Then all those services need to be embedded within business process. It is not just about what you do with your PC. It is what you do with your phone, your mobile device, and multi-modality communications -- anything that touches IT. It all blends together.
So the mindset to take to your CEO is transformation. If they were invigorated by business process re-engineering 15 years ago, they should be reinvigorated by SOA and see it not through the lens of yet another technology shift, but really through a larger lens in order to be adaptable and changeable in the marketplace.
Moderator: Great, thank you. That’s all the time we have today. If your question was not answered online, we will be happy to follow up with you after the event.
If you would like to learn more about Cape Clear, please visit our website at www.capeclear.com. You can also register for one of our upcoming SOA forums. Thank you very much, Dana and Annrai, for your time today and thank you all for attending.
You’ve been listening to a sponsored BriefingsDirect Podcast with your host Dana Gardner, principal analyst at Interarbor Solutions. Remember that full transcripts of these podcasts are available at www.briefingsdirect.com. If you would like information on how to sponsor a podcast or to repurpose a webinar into a podcast, contact Interarbor Solutions at 603-528-2435 and at www.interarbor-solutions.com.
Listen to the podcast here.
Sponsor: Cape Clear Software.
Transcript of Dana Gardner’s BriefingsDirect podcast on the state of SOA. Copyright Interarbor Solutions, LLC, 2005-2007. All rights reserved.
Tuesday, December 19, 2006
Transcript of BriefingsDirect SOA Insights Edition Vol. 6 Podcast: Year in Review, Predictions for 2007
Edited transcript of weekly BriefingsDirect[TM] SOA Insights Edition, recorded Dec. 1, 2006.
Listen to the podcast here. If you'd like to learn more about BriefingsDirect B2B informational podcasts, or to become a sponsor of this or other B2B podcasts, contact Dana Gardner at 603-528-2435.
Dana Gardner: Hello, and welcome to the latest BriefingsDirect SOA Insights Edition, Volume 6. This is a weekly discussion and dissection of Services Oriented Architecture (SOA) related news and events with a panel of independent IT industry analysts. I’m your host and moderator, Dana Gardner, principal analyst at Interarbor Solutions.
Joining us this week, our panel of independent IT analysts includes show regular Steve Garone. Steve is an independent analyst, a former program vice president at IDC, and the founder of the AlignIT Group. Welcome Steve.
Steve Garone: Hi Dana. It’s great to be here today.
Gardner: Also joining us is Joe McKendrick. He’s an independent research consultant and columnist at Database Trends, as well as a blogger for ZDNet and ebizQ. Welcome, Joe.
Joe McKendrick: Hello, Dana.
Gardner: Also, a return visit from Jon Collins. He’s the principal analyst at Macehiter Ward-Dutton in the UK. Welcome back, Jon.
Jon Collins: Hi there, everyone.
Gardner: Making his debut on the show this week is Tony Baer, principal at onStrategies.
Tony Baer: Hey, Dana.
Gardner: Thanks, Tony, for coming along. This week, the week of Nov. 25, 2006, we’re coming up to the end of the year, and so we thought it would make sense to take some stock of the year in review around SOA issues. We’ve seen an awful lot this year, and 2006 is probably the most prominent year for SOA.
We’ve had a bevy of consolidation events, mergers, and acquisitions. We’ve seen some large vendors further and more deeply embrace SOA. We’ve seen startups realign themselves around the SOA message and value, and we’ve seen SOA extend, perhaps a little bit high in the stack, around application and services, and the application-as-services in more than the infrastructure.
To help us weed through some of this, our panel will be coming up with some of their own insights, as well as a round-robin approach to SOA. Let me start off. From my perspective, the biggest story of the year is consolidation: A lot of purchasing, mergers, and acquisitions. Perhaps the most impactful of these included the Red Hat acquisition of JBoss, as well as the HP acquisition of Mercury, which came on the heels of Mercury’s acquisition of Systinet.
We’ve seen many others. There was Progress and Actional/Sonic, BEA-Flashline, webMethods-Infravio, we’ve seen FileNet go to IBM, and IBM with a slew of other smaller companies. But I want to go around the table and see if there’s some concurrence around this notion that the Red Hat JBoss and the HP Mercury had perhaps the most impact in the field? Why don’t we start with our new analyst this week, Tony?
Baer: Well, I probably wouldn’t disagree too heavily with that. A problem is that it’s becoming increasingly difficult to distinguish software from services, at least in terms of vendor products. So, you almost cast almost any major product introduction or acquisition with an SOA angle or SOA spin to it.
A really great example was Mercury, which prior to the Systinet acquisition, surprisingly didn’t have that big a play in services per se. They were more heavily invested obviously in testing and IT governance. The obvious question is when was this going to extend to SOA governance.
They acquired Systinet, but my sense with Mercury is that they were obviously a bit distracted this year and did not get around to absorbing Systinet as fast as they otherwise could have. Now that it’s under HP’s watch -- and without the distractions of SEC-related inquiries -- hopefully this will go along a little bit faster, and they’ll start to coalesce their SOA strategy.
Gardner: Perhaps we shouldn’t think of these as SOA mergers and acquisitions. It’s just software and services. Maybe the SOA moniker isn’t as important and has become more or less like oxygen. Do you agree with that Steve Garone?
Garone: Kind of. What drives the acquisitions -- and this is not unique to this market -- is that as people begin to adopt a technology or paradigm in terms of development, deployment, maintenance, and management, the comprehensive nature of the solution becomes more and more important.
Vendors who naturally don’t have all the pieces will try to acquire other companies that do -- to will fill in the blanks, so to speak. That’s really what’s going on here and it’s nothing new.
In terms of impact, given the two examples you cited, I think you’re on the money in terms of the ones that were the most impactful, but I think it’s also important to ask the question: impactful to whom? Let me just use the Red Hat/JBoss example to illustrate what I mean. There’s probably very little in the combined solution offered by that acquisition and merger that an end user could not get from another large vendor who provides SOA-related solutions.
It was very important from a competitive standpoint for those two companies to get together, so that they could respond in a way where they could say, “We’ve got a comprehensive answer to the SOA problem that other vendors have.” The impact from that perspective was mostly in terms of the two vendors getting together and being able to compete effectively.
There’s a secondary impact from that particular one, focused on giving more credibility and more visibility to the open-source model, which is playing, as we know, an ever increasing role in the SOA space, as well as other areas. So, yes, they were very impactful, but in that particular case I think it’s important to look at just who it’s impacting and why.
Gardner: I suppose another aspect of this is that those investors who put up money several years ago in the smaller companies that got gobbled up did okay. There was a period of time, not that long ago, when the notion of investing in a software company that was going to be focusing its business on enterprise was a no-win situation. Selling to the enterprise as a startup was difficult. Coming up with a direct sales force was going to be very hard.
SOA, in some ways, reversed that mentality. It has allowed for investment to be made in startups and smaller companies, and has also encouraged companies that may have been infrastructure-focused to adjust their focus, or at least their messaging, toward SOA.
Joe, do you think that the SOA ecology is alive and well in 2006? Do these mergers and acquisitions help that, or do you think that, conversely, when this consolidation phase is over that this investment will dry up?
McKendrick: SOA is something that is not really tangible. SOA is a methodology, a philosophy, and the vendors have a real challenge. Essentially, they’re selling a concept, not a specific product. Maybe ESBs could be example of a tangible product that’s out there, but other than that it’s really difficult to package and market a concept to the market.
With the HP acquisition of Mercury, which had earlier acquired Systinet, I wonder what's going to happen with Systinet going forward. If you look at HP, they’re still compact, but there’s a reminiscence of DEC in there, and Tandem. I could see HP perhaps building Systinet registry solutions into some of its own products, but I fear for this vendor. I think Systinet may just kind of disappear into the large organization, and we may never hear from it again.
Gardner: Systinet had a pretty good run in terms of being a perceived best-of-breed player, even after these acquisitions, so the jury remains out on that.
Let’s go to Jon Collins. Jon, on this consolidation issue, is this a flash-in-the-pan, so to speak, with consolidation? Is it going to just go through its paces and then we'll be back to half-a-dozen large vendors? Or do you think that there is a vibrant ongoing ecological development around those companies that support SOA, either as component services or approaching more of a complete solution?
Collins: Excellent question. I was just reminded, while someone else was talking, a PR person a couple of years ago said to me, “We’re going to have to look at a new name other than SOA, because it’s been around too long. We’re going to have to create a new bandwagon or something, because people are going to get bored with it.” And, here we are two years later. I think we’re only at the beginning of it.
What’s happened this year is that SOA has become mainstream, if one can say that, in the IT industry. Maybe it hasn’t in enterprise companies, but it certainly is in the IT industry. A lot of companies have acquired a smaller or larger companies in order to build their portfolio.
The one thing that’s been lacking so far -- and I’ve talked to a number of vendors about this -- is integration, which is to me the ultimate irony, because its exactly what SOA is about as a concept. It’s about helping bring together the disparate pieces.
One of the things I’ve talked to a few vendors about is the fact that they’re actually having to become service-oriented in terms of how they put together their products, deliver solutions to their own customers, and how they build more specific suites of capability that suits the needs of specific customers. We’re at the beginning of something that is all about how we move away from just having a consolidated set of resources. The point about Red Hat JBoss was well made. Everyone needs all the pieces, and now it’s a case of how they compete in terms of how they deliver the integrated solutions to the market.
Gardner: Okay, let’s go back to Tony. What would be your next pick for a top SOA story or a vendor issue for 2006?
Baer: I’m having a hard time with that, but I think if I were to pick one, it would be governance. That’s a loaded term for obvious reasons, but if you look at the whole notion of SOA, it’s supposed to make exposing your assets, and your data enterprise process assets, easier. If you think about, that kind of goes against the objectives of a lot of the regulations of enterprises.
As we open these assets up, we expose them as services. As we start to ramp up beyond pilot stage, we need control and we need to document what assets are being exposed to services, under what circumstances, to whom, and when. We have to start getting into versioning issues. What’s interesting is that until now SOA has been primarily a skunkworks operation, with few exceptions, maybe for someone like the Verizons of the world.
Mostly we’re focused on runtime governance, which is what services can we expose to which requester at run time, but that was largely in a fairly controlled environment. You’re starting to see more attention to the rest of the lifecycle. As part of that, we’re seeing not just UDDI, Systinet or Systinet cell registries.
We’re also starting to see the emergence of repositories. Something I would not have predicted a year ago is the converging of the two. It would have seemed totally illogical to me before this. At runtime you don’t want a repository with a lot of overhead. Yet I see vendors seeming to building brute-force solutions, just like years ago they brute-forced relational databases, so that their performance was not all that bad compared to legacy databases. So, I guess that in answer to your question, the one thing I would say would be governance.
Gardner: I guess I agree with that. I wondered earlier in the year why this emphasis on governance. It seemed that the value here was that, you’re going to be headed toward some sort of a train wreck if you ramp up SOA, so we have to put governance into play.
Yet as you pointed out, these things remain predominantly as pilots, isolated -- not horizontal, not yet at the scale where the system is breaking down under load, pressure and volume. Yet, there is this big drive to governance. I thought a little bit about that, and I recognized that governance is a way of extending SOA into a larger role of transformation, taking over where policy and even directory left off.
It’s sort of a land grab by these vendors into this larger domain of how to actually manage your business, not just your IT. And it portends the possibility of joining IT governance with corporate governance at some level. So, that’s a big enchilada, a big opportunity. Do you agree with that, Steve? Do you think that this is a land grab, this governance thing, or are they really reacting to what’s a scaling issue?
Garone: I think there’s some of that, although typically what happens in that particular cycle is that a vendor will understand and raise the issue and make it prominent, because they’ve got a solution. Then other vendors will jump in and start creating and talking about nuance that the original vendor can’t deal with -- and what results after that is some level of confusion and lack of understanding on the part of the end user as to how to approach solving that problem. Eventually it all shakes out, of course, but that’s usually the cycle that’s takes place.
If I were going to talk about some of the major highlights of SOA in 2006, that brings me to one point that I think stands out. There’s been a lot of talk about enablers to SOA -- governance, ESBs, which I think is another very important one. Because of the way vendors approach providing solutions, sometimes the enablers become a point of confusion to the point where it actually slows down adoption.
I think some of that is taking place with SOA. I think some confusion around standards is also playing a role in that. I forget who it was earlier who said that they feel we’re right at the beginning of SOA adoption, I agree with that, and when we talk in a little while about trends in 2007, I think that’s going to come out more clearly.
So, yes, I think that vendors are trying to do a land grab, but in the process they may be introducing a level of confusion that may actually be slowing down adoption in a big way.
Gardner: How About you, Jon? Do you think that this movement toward governance and the alignment, if not mashing up, of repository and register, is this just a reaction to the potential scale issues of SOA or is this really trying to broaden the purview of SOA into a higher business set of issues?
Collins: I think it’s broadening its horizons. SOA, certainly from my experience, came out of the developer world, in terms of evolving out of component-based development and out of the Web-service based application space. It’s really a post-deployment characteristic of enterprise architecture, and if that’s the case, then it needs to built in. There’s operational management. There’s deployment management. How do we cope with this stuff once we’ve got it? The idea of a registry, the idea of a repository of assets, all of these things start to kick in.
It’s broadened out from it’s original space and it’s gone into a place where governance is much more necessary, but equally it’s a symptom of maturity. A lot of IT starts in terms of innovation, where people are pretty much left to work out how. Networking started with people saying, “Hey look, we can join this to this,” and then suddenly everyone’s joining everything to everything. After that, people are saying, “Shouldn’t we start to work out whether or not we should be joining things together?” And there’s a level of maturity that I think we’re hitting with SOA, which means that governance becomes far more important.
Gardner: I suppose that if eventually you have to get the sign-off from a CEO or a very high-level executive on investing in SOA activities or continuing to invest in integration at any level, it might be nice to walk into that leaders office and say, “Hey, not only are you going to get some more efficiency and some agility and faster time-to-market for your applications, but we’re going to give you a dashboard where you can actually go in and see what’s going on, vis-Ã -vis IT into your business processes. We might even give you a couple of dials and knobs where you can start turning up and down or prioritizing.”
Over to you Joe, can we use this governance thing as a way of bringing to the chief executives of these major corporations more controlled visibility into IT -- and therefore into their businesses?
McKendrick: Absolutely, Dana. In fact, look at most enterprises. They’re not going to take any projects seriously unless there’s some aspect of governance. By governance I think we’re talking about two levels here. There’s the nitty-gritty deployment, management, registry, repository, versioning aspect of what’s being done with the artifacts, and with the services that are being put out there. Then there’s the governance we speak of, which involves bringing in the business and asking the business what they need out of IT, what they need out of the technology.
Be it a committee or an evangelist within the enterprise, you need some type of board, body, committee, or team that represents a cross-section of the business that can look at what they need and interact with the IT department to bring about the solutions that are required for the business. IT can’t operate in a vacuum and doesn’t. It’s not IT’s fault, but they can’t have the sense of what a business needs, or what the business units need from week to week or month to month. You need that business input and that the high-level definition of governance. That’s the only way SOA can be sold into the organization.
Collins: I totally agree, and furthermore this is a fundamental re-alignment. We’re actually seeing the business itself take more and more of an active role in these issues, and talking about things like IT risk with relation to the overall business risk landscapes. IT is actually seen as a valid part of the businesses, rather than seeing IT -- as often it’s seen – as a little place with a bunch of geeks developing stuff. So, yes, absolutely, and it’s being driven by both sides.
Gardner: All right, let's move on to our next big issue from 2006. To you, Steve Garone. You mentioned ESBs, and you mentioned the possible negative impact of over-emphasizing -- not the main course, but some of the side dishes for SOA. So my question to you is, is ESB your next big story of the year? If so, do you think that we’ve watered this one down, that people don't have a firm idea of what ESB’s are? What’s the story around ESB’s this year?
Garone: It’s fair to say that ESBs were at least one of the top stories in 2006 in relation to SOA. That makes sense, because as people started to adopt a SOA approach, whatever that meant to them, they were searching around for the right infrastructure elements that they needed, in order to make that architecture work for them. The notion of an ESB is right at the core of that. In fact, when I was thinking about what we were going to talk about today, the two issues on my list that stood out the most were governance and ESBs.
Some of the confusion around ESBs has stemmed from the fact that they’re pretty big items in terms of what they’re capable of doing. The reality is that a lot of organizations may not need a full ESB, as many vendors are defining it, to make their environments work. They may already have some of the integration capabilities. They may have some of the event-handling capabilities in place, and they really may just need some mediation and governance elements added in, in order to make their environments work. That’s introduced a bit of confusion that has caused some grief amongst end users, at least the ones that I talked to.
There’s a tendency also to look in the other direction in terms of sort of creating an “Uber ESB,” if you will, one instantiation of that being in the form of a JBI implementation that will allow people, regardless of how they’ve chosen to implement the functionality, to bring that all together and integrate that into a complete environment. What you then get into is, “How do I navigate the world of standards to make sure that I’m adopting this and implementing it in the right way.”
So, ESBs have been very prominent. There’s been a lot of noise, news, and discussion about ESBs, a lot of product announcements in 2006. I think you’re going to see that continue in 2007, hopefully in a way that clarifies and brings together the activities to something that’s coherent and therefore makes organizations feel comfortable that they can move forward.
Gardner: We saw, just recently, announcements -- roll outs, I suppose, more appropriately -- from IBM and JBoss around ESB. There’s been some open-source activity. We’ve got a couple of Apache Foundation projects that are ESB-related that IONA’s active with. The question to the rest of the group is, do you see ESBs remaining standalone? Does this become something you take as a component, as a best of breed, or is this something that should be baked into a larger solution, approach or a technological approach to SOA?
Baer: I would vote for the fact that it becomes part of your general platform, your general infrastructure. I don’t see ESB as being an end. It’s a means to an end, and as Steve was saying, there are many different functions that an ESB can or should perform, and that’s going to depend on what your existing IT infrastructure is. It’s going just like governance. It’s going to become an extension of whatever your service platform is.
What’s very interesting is that in the past year IBM finally admitted that ESBs are not just an architectural pattern, it’s actually the real product. There’s been a lot of confusion, fear, uncertainty, and doubt out there as to what ESBs actually are. What I would love to see -- and of course this would probably never happen -- is some industry consensus, “Here’s a Lego blocks model. Here are different things that an ESB can do.”
But, guess what? In some cases, if you already have TIBCO in your environment, or something like that, you may not need, for example, the capabilities that a lot of ESBs have. So, I would love a building-block approach.
Gardner: We can probably loosely define ESBs as EAI, but with more hooks and on-ramps and off-ramps.
Garone: Hooks and standards.
Gardner: Hooks and standards, there you go.
McKendrick: To Microsoft the ESB probably meant enterprise service buses or those vehicles that employees ride around on at the Redmond campus. It seems that Microsoft has gotten on board with the ESB concept lately as well, which surprised a lot of observers, because Microsoft usually likes to take its own route with things and not buy into the acronym of the moment.
Gardner: That would be more hooks than standards then, wouldn’t it?
McKendrick: Probably, yes, highly integrated within .NET Framework and the Windows Communication Foundation.
Gardner: Moving on to standards, Joe, you had an interesting blog the other day about the WS.* standards. And I wonder if you thought that that was perhaps an issue by omission. It seems to me that there was a certain atrophy in 2006 around SOA standards. We did have BPEL come out with a 2.0 major release, upgrade, improvement -- but what’s the status of specifications and standards for SOA? Was this sort of a lull in the action this year?
McKendrick: Well, Dana, most of the standards focus on web services, and there are folks out there that would say SOA isn’t just about web services. It’s probably 90 percent of what SOA is about, but most of the activity is been around web services. Some of the standards are highly adopted everywhere you look, of course XML being the prime example of that.
You have SOAP and then WSDL, which are ubiquitous everywhere you go. The WS-splat or WS-* standards have been another story. There’s been a lot of controversy, a lot of confusion. In surveys I’ve done, I’ve seen some very low levels of knowledge -- let alone adoption -- of the WS-splat array, with the exception of WS-Security, which has been taking off fairly nicely and proving itself in many situations. You’re right Dana, it has been a build year/build season for the standards bodies this year.
Gardner: Jon, do you concur with that, that the standards had evolved and it was time for the implementations to catch up? And, should we read anything more into that?
Collins: That’s probably a good way of putting it. The other standard I’d bring into it is the management side of things. While there may not have been many great advances in the standards themselves, it’s more of an aligning of vendors behind the various standards or an agreement that there’s going to be a interoperability between them.
If you’ve got, let’s say WS-Security or WS-Policy, because of the nature of SOA and how it actually needs everything to be ready before any parts of it can work, that’s a very broad statement. But if you’re trying to manageably deliver multi-vendor, multi-application, multi-system environments in an enterprise context, a lot of these things are there already.
While some standards that were actually quite advanced to be able to roll out full fact SOA, a lot of other standards are still in catch-up. We’ve got standards that are saying, “Come on guys, let’s get out there and do the job.” Meanwhile, things like management are saying, “Hey, we’re coming. We’re on our way. We’re a bit behind. We’re still try to work out of what a CMDB is and how to talk to each other, but we’re on our way and will be there shortly.”
Gardner: All right, before we move into the prediction’s phase, I wonder if anyone else out there had a major issue from 2006 they wanted to raise as one of significant importance.
Collins: I’ll just say one word about Microsoft. Maybe the fact they even mentioned SOA was a pretty good incidence, if not a major happening.
Baer: Actually, I’ll add one thing to that which is that Microsoft has even felt compelled to publish a web page listing which standards they will support. When would you ever have thought that Microsoft would’ve ever published such a page in the past.
Gardner: Probably the same time they came out and supported Linux.
Collins: It was within a month, wasn’t it?
Gardner: Well, as a matter of fact Jon, we did a recent BriefingsDirect SOA Insights Edition on the SOA-Microsoft question. So, moving into 2007, next year, we’ve talked about some levels of maturation. We’ve talked about some technology developments, some vendor activity, but the question still remains is when do we move SOA -- and I do emphasis "when" and not "if" -- from the pilot and skunkworks-type of approach to, “This is how we’re going to do more of our IT, more of our development, more of our process in modeling. We are going to build this out?”
So let’s go around. Is 2007 the year for the SOA build-out, or are we being a little bit too optimistic? How about you, Steve?
Garone: It will be the beginnings of what you’re terming as a SOA build-out, but I’d like to deal with less of a product- or a vendor-related issue now and talk a little bit more about end-user organizations themselves. I’m still amazed, somewhat amazed at how much I’m hearing organizations talk about two issues.
One is that we hear about IT, business analysts, and business people working together to come up with requirements and actually having tools where they can work together to build business processes and then implement them and support them with services. But, little of that is actually going on and being effective within organizations. I hear a lot of folks on both sides of that pointing fingers and claming that the other one doesn’t get it, and that’s sort of manifesting itself in several ways.
It’s partially responsible for the pilot-nature of implementations that you see today in most of our organization that have tried SOA. I think it’s also responsible for the overall slowness with which you see this moving through some organizations. Over 2007, I think you’re going to see some shake-out and some advancement in terms of building that bridge between the two organizations within corporations that want to do SOA and therefore forming the foundation for moving on, but I don’t quite think we’re there yet.
Gardner: So, for 2007, if we could put some sort of a metric on adoption, with 1 being no further movement from 2006, and 10 being a total SOA in place, architecturally across the board, where do you think the dial, the meter, the needle, will go to in 2007?
Garone: There are two elements to that. Organizations that have not done it yet are going to, for the most part, remain down at the 3 or 4 level, if 3 or 4 level is defined as doing small-pilot implementations. Some percentage, say 25 percent to 30 percent of those organizations that have gotten to that first stage, will move on in a big way. I still believe that there are some impediments, having in some part to do with organizational issues and the relationships between IT and business, that are going hold that up a bit.
Gardner: Just to poke a little fun at our own industry, the IT research business, we can safely say from reports that have come out in 2006 that somewhere between 10% and 90% of enterprises will be doing SOA.
Garone: Well, yes, that’s true.
Gardner: What are your other predictions for 2007?
Garone: Getting back to one of the issues that we talked about earlier, the whole ESB issue and its place in an overall infrastructure that supports SOA will get pretty much resolved and be much clearer to end users as we get toward the end of 2007. I also think that there’s going to be a lot of work around registry, repository, and standards, mostly because as organizations start really using SOA to support real business processes with services, there’s going to have to be a lot in the way of semantic-level information and defining relationships that are going to be have to be incorporated in a real robust repository. So, I think from the product standpoint, those are two areas where we’re going to see a lot of advancement.
Gardner: Okay, how about you Tony? What are your predictions for SOA in 2007?
Baer: A couple of things. First, a more general trend, which is not SOA specific. We're no longer in the era of big-bang implementations. So, in terms of the pace of SOA adoption, it’s going to be a pretty boring answer: It’s just going to continue to be incremental.
You’ll see several hot-spots in organizations that are dealing with certain consequences of M&A, for instance, where they need to link to general ledger systems or something like that. You’ll see some opportunistic SOA there. Otherwise, it will be that the leaders will continue, those that have been leaders in 2006. Like the Verizons of the world. I hate to keep harping on that. I saw them working outside my house yesterday. So, I figure that they have some ambitious initiatives on the table there. But, I think the mainstream will incrementally get to the first things beyond the skunkworks stage.
Gardner: How about on a scale of 1 to 10, with 1 being no further movement from 2006 and 10 being full metaphysical SOA implementations?
Baer: I was going to say about a 3 or 4, just averaging things out. The Verizons of the world may be at about a 5. Whereas say the mainstream was probably at a 2 or a 3, but that still is progress.
Gardner: Okay, Jon Collins, what are your predictions for 2007?
Collins: Predictions for 2007: The thing that we’re going to see the most of is what we’ve talked about already as industry acceptance of SOA in 2006. In 2007, we’re going to see an enterprise acceptance of SOA. In terms of adoption levels, people aren’t going to suddenly sort of rip out everything that they’ve got and say, “Let’s paint the whole town SOA.” But there will be more of an understanding of where it can benefit the organization.
When there are projects that are appropriate, they will be done in a way that encourages and helps develop more service orientation inside the organization. That fits in with the need for and the delivery of improved governance of better relationships between IT and business, a better understanding of business issues on the technology side. So, it’s everything, all moving forward at once, and without that you can’t really do SOA.
The other thing is that it does go all the way down the stacks. We could talk to SAP. I’m talking to clients at the moment who are doing SAP rationalization projects. We could talk to HP about how they’re providing a platform to support applications, and talk to Cisco about Service Oriented Network Architecture (SONA). If you’ve got something that can be understood as a service delivery, then they’re putting in place the network facilities to support that. Then, you can even talk to the service providers, the British Telecoms, who are putting in place some service delivery networks.
It goes all the way down the stack, and I think we’re going to see that integration, top to bottom, become more of a reality in all those companies that I’ve just talked about there. They’re doing it for themselves right now, and they’re going to start doing it with each other, which will be a change.
Gardner: So the good news is that SOA affects everything and the bad news is that SOA affects everything.
Collins: Absolutely.
Gardner: On your scale of 1 to 10 next year?
Collins: I put it down as the difference between acceptance and implementations. I’ll still put it down as between 2 and 3. It’s low, but it’s a good low.
Gardner: It's 20 percent, it’s double digits.
Gardner: Joe McKendrick, 2007?
McKendrick: SOA is a very amorphous concept. It’s not a tangible concept, and SOA as a term has crested, as we’ve discussed in this conversation. It wouldn’t surprise me if we started seeing more vendors move toward some other terminology or other focus in their marketing efforts at the vendor level. Maybe we’re going to be hearing more about EDA, Event Driven Architecture. It has more of an action sound to it. It’s something new, and it has that real-time aspect that ties into business intelligence, and can be integrated well within business intelligence solutions.
So, I wouldn’t be surprised if we saw vendors moving away from SOA terminology and toward things such as EDA, maybe software as a service. Maybe we’ll be hearing more about that. At the enterprise level, the end users in the trenches, where the real work takes place, there’s going to be slow, steady progress toward the SOA model. It’s not going to be a revolutionary thing happening in 2007. It’s going to be evolutionary. There are going to be more pilot projects moving into the enterprise production space. What may mitigate this, and what would be interesting to watch over the coming year, is the availability of staff, availability of the right skills.
The economy has been going well. I don’t know what 2007 will bring, but by all indications, IT budgets are holding up and there’s been already shortages of the right types of skills. For enterprises that need to keep their day-to-day operations going, it maybe difficult to allocate the human resources to really move SOA projects forward.
Gardner: On a scale of 1 to 10, increase in SOA adoption in 2007?
McKendrick: Two, a solid 2.
Gardner: We’re going down, we’re going down. I’ve got a few predictions myself that I'd like to throw out. I think we can also look to 2007 as being the year of modeling. I think we’re going to see a lot more product and specification and methodology around the modeling of services that can leverage and exploit some of the activity from 2006 around this governance and the registry and repository. I’m expecting some much improved tools, graphical tools, and some innovative approaches to how to choreograph -- and that plays into your event-driven stuff, too.
I’m also predicting that this notion that Web 3.0, which is better characterized as the "Semantic Web," will offer on one hand competition against the SOA messaging and value, but more importantly offer a tag-team approach. We’ve discussed this a little bit before around Web 2.0.
If we do start getting some specifications, and as IP Version 6 becomes more widely deployed around the world, we’ll get much richer in approaching this level of a semantic Web capability on the network. If you can combine that with what you’re doing internally, that that’s one of the big tipping points for the further adoption of SOA.
I’ll use that as my opportunity to say I see about a 4 in terms of actual SOA adoption increase, so 40 percent, which is pretty big. I’m going to go on the top side of this trend for our group.
I’m also going to go out on a limb and say that I’m going to expect some big SOA-related acquisitions again in 2007, and I’m going to look to SAP and Oracle as likely candidates for acquiring other companies. The net-net on that is the application guys are going to start to flex their muscles on SOA. If you have both the infrastructure and the applications, and then you produce the SOA benefits, that’s a very advantageous place to be.
That’s it from me. Anyone else want to chime in on 2007?
Garone: Yeah, I want to respond to a couple of things. Let me start with what you just said around the enterprise apps vendors. That was one 2007 prediction that I had on my list, driven by something a lit bit different than what you said, though. One of the empirical pieces of feedback that I get often from end users is that they’re waiting and pining for the day when they’re not wrapping their legacy apps anymore in Web services standards and, all this stuff will be essentially done for them by the people who provide the applications.
Gardner: SOA-native-as-services.
Garone: Native as services, exactly right. I think you’re going to start seeing the SAP’s and the Oracle’s and everyone else that services that market, stepping up in a big way to help solve that problem, so I completely concur with you on that.
One of the proof points that I didn’t mention earlier -- I’d mentioned it in a previous podcast -- is the lack of synergy, integration, and operability between the business side and the IT side in real life. Most of the end users I talk to, when I see them present, when I talk to them in detail about their SOA activities, they really just cite cost savings. They mention raw cost savings in terms of development and operations as really the primary, and in some cases only, benefit of doing an SOA implementation.
We all know, as analysts and people who have talked a lot about SOA and how they can benefit organizations, that that’s a very narrow view. What that tells me is that the business case, the true comprehensive business case, still hasn’t been met in a lot of cases, and hasn’t been articulated very clearly. I think that’s going to start turning around in 2007.
Gardner: When you emphasize the modeling and the applications, you start getting closer to that business-level benefit?
Garone: I agree. The other thing I would just say very quickly is that -- and I’ve mentioned this before – it’s going to be harder and harder to divorce the services approach to building solutions from the virtualization area that a lot of companies are looking at, because they’re looking to do them at around the same time, and they’re very closely related.
So, we’re going to see more of a comprehensive view of that, not only in terms of how organizations want to implement it, but from vendors as a response. I also think you’ve defined a good podcast topic for the future in Web 3.0.
Gardner: We’ll be there. All right, gentlemen, thank you very much. Let’s quickly go around the table for purposes of disclosure. If there are any vendors that were mentioned or implicated today that you do business with, it would be a nice time for you to mention that, so that we all have a sense of where we’re coming from. Why don’t you go first, Steve?
Garone: At this point I would just list IBM.
McKendrick: IBM, and I’ve also done work with Systinet.
Collins: Mercury, so HP I guess.
Baer: Mercury, ditto.
Gardner: I’m going to disclose that I’ve worked with Borland, Cape Clear, Eclipse Foundation, Hewlett-Packard, IONA, and I think that’s probably it.
All right. Thanks very much. Also, if any of our listeners are interested in learning more about BriefingsDirect B2B informational podcasts or to become a sponsor of this or other B2B podcasts, please fill free to contact me, Dana Gardner at 603-528-2435. That’s it for this week’s, and I suppose this year’s, SOA Insights Edition. I’m your moderator and host, Dana Gardner. Thanks for joining.
Listen to the podcast here.
Transcript of Dana Gardner’s BriefingsDirect SOA Insights Edition, Vol. 6. Copyright Interarbor Solutions, LLC, 2005-2006. All rights reserved.
Listen to the podcast here. If you'd like to learn more about BriefingsDirect B2B informational podcasts, or to become a sponsor of this or other B2B podcasts, contact Dana Gardner at 603-528-2435.
Dana Gardner: Hello, and welcome to the latest BriefingsDirect SOA Insights Edition, Volume 6. This is a weekly discussion and dissection of Services Oriented Architecture (SOA) related news and events with a panel of independent IT industry analysts. I’m your host and moderator, Dana Gardner, principal analyst at Interarbor Solutions.
Joining us this week, our panel of independent IT analysts includes show regular Steve Garone. Steve is an independent analyst, a former program vice president at IDC, and the founder of the AlignIT Group. Welcome Steve.
Steve Garone: Hi Dana. It’s great to be here today.
Gardner: Also joining us is Joe McKendrick. He’s an independent research consultant and columnist at Database Trends, as well as a blogger for ZDNet and ebizQ. Welcome, Joe.
Joe McKendrick: Hello, Dana.
Gardner: Also, a return visit from Jon Collins. He’s the principal analyst at Macehiter Ward-Dutton in the UK. Welcome back, Jon.
Jon Collins: Hi there, everyone.
Gardner: Making his debut on the show this week is Tony Baer, principal at onStrategies.
Tony Baer: Hey, Dana.
Gardner: Thanks, Tony, for coming along. This week, the week of Nov. 25, 2006, we’re coming up to the end of the year, and so we thought it would make sense to take some stock of the year in review around SOA issues. We’ve seen an awful lot this year, and 2006 is probably the most prominent year for SOA.
We’ve had a bevy of consolidation events, mergers, and acquisitions. We’ve seen some large vendors further and more deeply embrace SOA. We’ve seen startups realign themselves around the SOA message and value, and we’ve seen SOA extend, perhaps a little bit high in the stack, around application and services, and the application-as-services in more than the infrastructure.
To help us weed through some of this, our panel will be coming up with some of their own insights, as well as a round-robin approach to SOA. Let me start off. From my perspective, the biggest story of the year is consolidation: A lot of purchasing, mergers, and acquisitions. Perhaps the most impactful of these included the Red Hat acquisition of JBoss, as well as the HP acquisition of Mercury, which came on the heels of Mercury’s acquisition of Systinet.
We’ve seen many others. There was Progress and Actional/Sonic, BEA-Flashline, webMethods-Infravio, we’ve seen FileNet go to IBM, and IBM with a slew of other smaller companies. But I want to go around the table and see if there’s some concurrence around this notion that the Red Hat JBoss and the HP Mercury had perhaps the most impact in the field? Why don’t we start with our new analyst this week, Tony?
Baer: Well, I probably wouldn’t disagree too heavily with that. A problem is that it’s becoming increasingly difficult to distinguish software from services, at least in terms of vendor products. So, you almost cast almost any major product introduction or acquisition with an SOA angle or SOA spin to it.
A really great example was Mercury, which prior to the Systinet acquisition, surprisingly didn’t have that big a play in services per se. They were more heavily invested obviously in testing and IT governance. The obvious question is when was this going to extend to SOA governance.
They acquired Systinet, but my sense with Mercury is that they were obviously a bit distracted this year and did not get around to absorbing Systinet as fast as they otherwise could have. Now that it’s under HP’s watch -- and without the distractions of SEC-related inquiries -- hopefully this will go along a little bit faster, and they’ll start to coalesce their SOA strategy.
Gardner: Perhaps we shouldn’t think of these as SOA mergers and acquisitions. It’s just software and services. Maybe the SOA moniker isn’t as important and has become more or less like oxygen. Do you agree with that Steve Garone?
Garone: Kind of. What drives the acquisitions -- and this is not unique to this market -- is that as people begin to adopt a technology or paradigm in terms of development, deployment, maintenance, and management, the comprehensive nature of the solution becomes more and more important.
Vendors who naturally don’t have all the pieces will try to acquire other companies that do -- to will fill in the blanks, so to speak. That’s really what’s going on here and it’s nothing new.
In terms of impact, given the two examples you cited, I think you’re on the money in terms of the ones that were the most impactful, but I think it’s also important to ask the question: impactful to whom? Let me just use the Red Hat/JBoss example to illustrate what I mean. There’s probably very little in the combined solution offered by that acquisition and merger that an end user could not get from another large vendor who provides SOA-related solutions.
It was very important from a competitive standpoint for those two companies to get together, so that they could respond in a way where they could say, “We’ve got a comprehensive answer to the SOA problem that other vendors have.” The impact from that perspective was mostly in terms of the two vendors getting together and being able to compete effectively.
There’s a secondary impact from that particular one, focused on giving more credibility and more visibility to the open-source model, which is playing, as we know, an ever increasing role in the SOA space, as well as other areas. So, yes, they were very impactful, but in that particular case I think it’s important to look at just who it’s impacting and why.
Gardner: I suppose another aspect of this is that those investors who put up money several years ago in the smaller companies that got gobbled up did okay. There was a period of time, not that long ago, when the notion of investing in a software company that was going to be focusing its business on enterprise was a no-win situation. Selling to the enterprise as a startup was difficult. Coming up with a direct sales force was going to be very hard.
SOA, in some ways, reversed that mentality. It has allowed for investment to be made in startups and smaller companies, and has also encouraged companies that may have been infrastructure-focused to adjust their focus, or at least their messaging, toward SOA.
Joe, do you think that the SOA ecology is alive and well in 2006? Do these mergers and acquisitions help that, or do you think that, conversely, when this consolidation phase is over that this investment will dry up?
McKendrick: SOA is something that is not really tangible. SOA is a methodology, a philosophy, and the vendors have a real challenge. Essentially, they’re selling a concept, not a specific product. Maybe ESBs could be example of a tangible product that’s out there, but other than that it’s really difficult to package and market a concept to the market.
With the HP acquisition of Mercury, which had earlier acquired Systinet, I wonder what's going to happen with Systinet going forward. If you look at HP, they’re still compact, but there’s a reminiscence of DEC in there, and Tandem. I could see HP perhaps building Systinet registry solutions into some of its own products, but I fear for this vendor. I think Systinet may just kind of disappear into the large organization, and we may never hear from it again.
Gardner: Systinet had a pretty good run in terms of being a perceived best-of-breed player, even after these acquisitions, so the jury remains out on that.
Let’s go to Jon Collins. Jon, on this consolidation issue, is this a flash-in-the-pan, so to speak, with consolidation? Is it going to just go through its paces and then we'll be back to half-a-dozen large vendors? Or do you think that there is a vibrant ongoing ecological development around those companies that support SOA, either as component services or approaching more of a complete solution?
Collins: Excellent question. I was just reminded, while someone else was talking, a PR person a couple of years ago said to me, “We’re going to have to look at a new name other than SOA, because it’s been around too long. We’re going to have to create a new bandwagon or something, because people are going to get bored with it.” And, here we are two years later. I think we’re only at the beginning of it.
What’s happened this year is that SOA has become mainstream, if one can say that, in the IT industry. Maybe it hasn’t in enterprise companies, but it certainly is in the IT industry. A lot of companies have acquired a smaller or larger companies in order to build their portfolio.
The one thing that’s been lacking so far -- and I’ve talked to a number of vendors about this -- is integration, which is to me the ultimate irony, because its exactly what SOA is about as a concept. It’s about helping bring together the disparate pieces.
One of the things I’ve talked to a few vendors about is the fact that they’re actually having to become service-oriented in terms of how they put together their products, deliver solutions to their own customers, and how they build more specific suites of capability that suits the needs of specific customers. We’re at the beginning of something that is all about how we move away from just having a consolidated set of resources. The point about Red Hat JBoss was well made. Everyone needs all the pieces, and now it’s a case of how they compete in terms of how they deliver the integrated solutions to the market.
Gardner: Okay, let’s go back to Tony. What would be your next pick for a top SOA story or a vendor issue for 2006?
Baer: I’m having a hard time with that, but I think if I were to pick one, it would be governance. That’s a loaded term for obvious reasons, but if you look at the whole notion of SOA, it’s supposed to make exposing your assets, and your data enterprise process assets, easier. If you think about, that kind of goes against the objectives of a lot of the regulations of enterprises.
As we open these assets up, we expose them as services. As we start to ramp up beyond pilot stage, we need control and we need to document what assets are being exposed to services, under what circumstances, to whom, and when. We have to start getting into versioning issues. What’s interesting is that until now SOA has been primarily a skunkworks operation, with few exceptions, maybe for someone like the Verizons of the world.
Mostly we’re focused on runtime governance, which is what services can we expose to which requester at run time, but that was largely in a fairly controlled environment. You’re starting to see more attention to the rest of the lifecycle. As part of that, we’re seeing not just UDDI, Systinet or Systinet cell registries.
We’re also starting to see the emergence of repositories. Something I would not have predicted a year ago is the converging of the two. It would have seemed totally illogical to me before this. At runtime you don’t want a repository with a lot of overhead. Yet I see vendors seeming to building brute-force solutions, just like years ago they brute-forced relational databases, so that their performance was not all that bad compared to legacy databases. So, I guess that in answer to your question, the one thing I would say would be governance.
Gardner: I guess I agree with that. I wondered earlier in the year why this emphasis on governance. It seemed that the value here was that, you’re going to be headed toward some sort of a train wreck if you ramp up SOA, so we have to put governance into play.
Yet as you pointed out, these things remain predominantly as pilots, isolated -- not horizontal, not yet at the scale where the system is breaking down under load, pressure and volume. Yet, there is this big drive to governance. I thought a little bit about that, and I recognized that governance is a way of extending SOA into a larger role of transformation, taking over where policy and even directory left off.
It’s sort of a land grab by these vendors into this larger domain of how to actually manage your business, not just your IT. And it portends the possibility of joining IT governance with corporate governance at some level. So, that’s a big enchilada, a big opportunity. Do you agree with that, Steve? Do you think that this is a land grab, this governance thing, or are they really reacting to what’s a scaling issue?
Garone: I think there’s some of that, although typically what happens in that particular cycle is that a vendor will understand and raise the issue and make it prominent, because they’ve got a solution. Then other vendors will jump in and start creating and talking about nuance that the original vendor can’t deal with -- and what results after that is some level of confusion and lack of understanding on the part of the end user as to how to approach solving that problem. Eventually it all shakes out, of course, but that’s usually the cycle that’s takes place.
If I were going to talk about some of the major highlights of SOA in 2006, that brings me to one point that I think stands out. There’s been a lot of talk about enablers to SOA -- governance, ESBs, which I think is another very important one. Because of the way vendors approach providing solutions, sometimes the enablers become a point of confusion to the point where it actually slows down adoption.
I think some of that is taking place with SOA. I think some confusion around standards is also playing a role in that. I forget who it was earlier who said that they feel we’re right at the beginning of SOA adoption, I agree with that, and when we talk in a little while about trends in 2007, I think that’s going to come out more clearly.
So, yes, I think that vendors are trying to do a land grab, but in the process they may be introducing a level of confusion that may actually be slowing down adoption in a big way.
Gardner: How About you, Jon? Do you think that this movement toward governance and the alignment, if not mashing up, of repository and register, is this just a reaction to the potential scale issues of SOA or is this really trying to broaden the purview of SOA into a higher business set of issues?
Collins: I think it’s broadening its horizons. SOA, certainly from my experience, came out of the developer world, in terms of evolving out of component-based development and out of the Web-service based application space. It’s really a post-deployment characteristic of enterprise architecture, and if that’s the case, then it needs to built in. There’s operational management. There’s deployment management. How do we cope with this stuff once we’ve got it? The idea of a registry, the idea of a repository of assets, all of these things start to kick in.
It’s broadened out from it’s original space and it’s gone into a place where governance is much more necessary, but equally it’s a symptom of maturity. A lot of IT starts in terms of innovation, where people are pretty much left to work out how. Networking started with people saying, “Hey look, we can join this to this,” and then suddenly everyone’s joining everything to everything. After that, people are saying, “Shouldn’t we start to work out whether or not we should be joining things together?” And there’s a level of maturity that I think we’re hitting with SOA, which means that governance becomes far more important.
Gardner: I suppose that if eventually you have to get the sign-off from a CEO or a very high-level executive on investing in SOA activities or continuing to invest in integration at any level, it might be nice to walk into that leaders office and say, “Hey, not only are you going to get some more efficiency and some agility and faster time-to-market for your applications, but we’re going to give you a dashboard where you can actually go in and see what’s going on, vis-Ã -vis IT into your business processes. We might even give you a couple of dials and knobs where you can start turning up and down or prioritizing.”
Over to you Joe, can we use this governance thing as a way of bringing to the chief executives of these major corporations more controlled visibility into IT -- and therefore into their businesses?
McKendrick: Absolutely, Dana. In fact, look at most enterprises. They’re not going to take any projects seriously unless there’s some aspect of governance. By governance I think we’re talking about two levels here. There’s the nitty-gritty deployment, management, registry, repository, versioning aspect of what’s being done with the artifacts, and with the services that are being put out there. Then there’s the governance we speak of, which involves bringing in the business and asking the business what they need out of IT, what they need out of the technology.
Be it a committee or an evangelist within the enterprise, you need some type of board, body, committee, or team that represents a cross-section of the business that can look at what they need and interact with the IT department to bring about the solutions that are required for the business. IT can’t operate in a vacuum and doesn’t. It’s not IT’s fault, but they can’t have the sense of what a business needs, or what the business units need from week to week or month to month. You need that business input and that the high-level definition of governance. That’s the only way SOA can be sold into the organization.
Collins: I totally agree, and furthermore this is a fundamental re-alignment. We’re actually seeing the business itself take more and more of an active role in these issues, and talking about things like IT risk with relation to the overall business risk landscapes. IT is actually seen as a valid part of the businesses, rather than seeing IT -- as often it’s seen – as a little place with a bunch of geeks developing stuff. So, yes, absolutely, and it’s being driven by both sides.
Gardner: All right, let's move on to our next big issue from 2006. To you, Steve Garone. You mentioned ESBs, and you mentioned the possible negative impact of over-emphasizing -- not the main course, but some of the side dishes for SOA. So my question to you is, is ESB your next big story of the year? If so, do you think that we’ve watered this one down, that people don't have a firm idea of what ESB’s are? What’s the story around ESB’s this year?
Garone: It’s fair to say that ESBs were at least one of the top stories in 2006 in relation to SOA. That makes sense, because as people started to adopt a SOA approach, whatever that meant to them, they were searching around for the right infrastructure elements that they needed, in order to make that architecture work for them. The notion of an ESB is right at the core of that. In fact, when I was thinking about what we were going to talk about today, the two issues on my list that stood out the most were governance and ESBs.
Some of the confusion around ESBs has stemmed from the fact that they’re pretty big items in terms of what they’re capable of doing. The reality is that a lot of organizations may not need a full ESB, as many vendors are defining it, to make their environments work. They may already have some of the integration capabilities. They may have some of the event-handling capabilities in place, and they really may just need some mediation and governance elements added in, in order to make their environments work. That’s introduced a bit of confusion that has caused some grief amongst end users, at least the ones that I talked to.
There’s a tendency also to look in the other direction in terms of sort of creating an “Uber ESB,” if you will, one instantiation of that being in the form of a JBI implementation that will allow people, regardless of how they’ve chosen to implement the functionality, to bring that all together and integrate that into a complete environment. What you then get into is, “How do I navigate the world of standards to make sure that I’m adopting this and implementing it in the right way.”
So, ESBs have been very prominent. There’s been a lot of noise, news, and discussion about ESBs, a lot of product announcements in 2006. I think you’re going to see that continue in 2007, hopefully in a way that clarifies and brings together the activities to something that’s coherent and therefore makes organizations feel comfortable that they can move forward.
Gardner: We saw, just recently, announcements -- roll outs, I suppose, more appropriately -- from IBM and JBoss around ESB. There’s been some open-source activity. We’ve got a couple of Apache Foundation projects that are ESB-related that IONA’s active with. The question to the rest of the group is, do you see ESBs remaining standalone? Does this become something you take as a component, as a best of breed, or is this something that should be baked into a larger solution, approach or a technological approach to SOA?
Baer: I would vote for the fact that it becomes part of your general platform, your general infrastructure. I don’t see ESB as being an end. It’s a means to an end, and as Steve was saying, there are many different functions that an ESB can or should perform, and that’s going to depend on what your existing IT infrastructure is. It’s going just like governance. It’s going to become an extension of whatever your service platform is.
What’s very interesting is that in the past year IBM finally admitted that ESBs are not just an architectural pattern, it’s actually the real product. There’s been a lot of confusion, fear, uncertainty, and doubt out there as to what ESBs actually are. What I would love to see -- and of course this would probably never happen -- is some industry consensus, “Here’s a Lego blocks model. Here are different things that an ESB can do.”
But, guess what? In some cases, if you already have TIBCO in your environment, or something like that, you may not need, for example, the capabilities that a lot of ESBs have. So, I would love a building-block approach.
Gardner: We can probably loosely define ESBs as EAI, but with more hooks and on-ramps and off-ramps.
Garone: Hooks and standards.
Gardner: Hooks and standards, there you go.
McKendrick: To Microsoft the ESB probably meant enterprise service buses or those vehicles that employees ride around on at the Redmond campus. It seems that Microsoft has gotten on board with the ESB concept lately as well, which surprised a lot of observers, because Microsoft usually likes to take its own route with things and not buy into the acronym of the moment.
Gardner: That would be more hooks than standards then, wouldn’t it?
McKendrick: Probably, yes, highly integrated within .NET Framework and the Windows Communication Foundation.
Gardner: Moving on to standards, Joe, you had an interesting blog the other day about the WS.* standards. And I wonder if you thought that that was perhaps an issue by omission. It seems to me that there was a certain atrophy in 2006 around SOA standards. We did have BPEL come out with a 2.0 major release, upgrade, improvement -- but what’s the status of specifications and standards for SOA? Was this sort of a lull in the action this year?
McKendrick: Well, Dana, most of the standards focus on web services, and there are folks out there that would say SOA isn’t just about web services. It’s probably 90 percent of what SOA is about, but most of the activity is been around web services. Some of the standards are highly adopted everywhere you look, of course XML being the prime example of that.
You have SOAP and then WSDL, which are ubiquitous everywhere you go. The WS-splat or WS-* standards have been another story. There’s been a lot of controversy, a lot of confusion. In surveys I’ve done, I’ve seen some very low levels of knowledge -- let alone adoption -- of the WS-splat array, with the exception of WS-Security, which has been taking off fairly nicely and proving itself in many situations. You’re right Dana, it has been a build year/build season for the standards bodies this year.
Gardner: Jon, do you concur with that, that the standards had evolved and it was time for the implementations to catch up? And, should we read anything more into that?
Collins: That’s probably a good way of putting it. The other standard I’d bring into it is the management side of things. While there may not have been many great advances in the standards themselves, it’s more of an aligning of vendors behind the various standards or an agreement that there’s going to be a interoperability between them.
If you’ve got, let’s say WS-Security or WS-Policy, because of the nature of SOA and how it actually needs everything to be ready before any parts of it can work, that’s a very broad statement. But if you’re trying to manageably deliver multi-vendor, multi-application, multi-system environments in an enterprise context, a lot of these things are there already.
While some standards that were actually quite advanced to be able to roll out full fact SOA, a lot of other standards are still in catch-up. We’ve got standards that are saying, “Come on guys, let’s get out there and do the job.” Meanwhile, things like management are saying, “Hey, we’re coming. We’re on our way. We’re a bit behind. We’re still try to work out of what a CMDB is and how to talk to each other, but we’re on our way and will be there shortly.”
Gardner: All right, before we move into the prediction’s phase, I wonder if anyone else out there had a major issue from 2006 they wanted to raise as one of significant importance.
Collins: I’ll just say one word about Microsoft. Maybe the fact they even mentioned SOA was a pretty good incidence, if not a major happening.
Baer: Actually, I’ll add one thing to that which is that Microsoft has even felt compelled to publish a web page listing which standards they will support. When would you ever have thought that Microsoft would’ve ever published such a page in the past.
Gardner: Probably the same time they came out and supported Linux.
Collins: It was within a month, wasn’t it?
Gardner: Well, as a matter of fact Jon, we did a recent BriefingsDirect SOA Insights Edition on the SOA-Microsoft question. So, moving into 2007, next year, we’ve talked about some levels of maturation. We’ve talked about some technology developments, some vendor activity, but the question still remains is when do we move SOA -- and I do emphasis "when" and not "if" -- from the pilot and skunkworks-type of approach to, “This is how we’re going to do more of our IT, more of our development, more of our process in modeling. We are going to build this out?”
So let’s go around. Is 2007 the year for the SOA build-out, or are we being a little bit too optimistic? How about you, Steve?
Garone: It will be the beginnings of what you’re terming as a SOA build-out, but I’d like to deal with less of a product- or a vendor-related issue now and talk a little bit more about end-user organizations themselves. I’m still amazed, somewhat amazed at how much I’m hearing organizations talk about two issues.
One is that we hear about IT, business analysts, and business people working together to come up with requirements and actually having tools where they can work together to build business processes and then implement them and support them with services. But, little of that is actually going on and being effective within organizations. I hear a lot of folks on both sides of that pointing fingers and claming that the other one doesn’t get it, and that’s sort of manifesting itself in several ways.
It’s partially responsible for the pilot-nature of implementations that you see today in most of our organization that have tried SOA. I think it’s also responsible for the overall slowness with which you see this moving through some organizations. Over 2007, I think you’re going to see some shake-out and some advancement in terms of building that bridge between the two organizations within corporations that want to do SOA and therefore forming the foundation for moving on, but I don’t quite think we’re there yet.
Gardner: So, for 2007, if we could put some sort of a metric on adoption, with 1 being no further movement from 2006, and 10 being a total SOA in place, architecturally across the board, where do you think the dial, the meter, the needle, will go to in 2007?
Garone: There are two elements to that. Organizations that have not done it yet are going to, for the most part, remain down at the 3 or 4 level, if 3 or 4 level is defined as doing small-pilot implementations. Some percentage, say 25 percent to 30 percent of those organizations that have gotten to that first stage, will move on in a big way. I still believe that there are some impediments, having in some part to do with organizational issues and the relationships between IT and business, that are going hold that up a bit.
Gardner: Just to poke a little fun at our own industry, the IT research business, we can safely say from reports that have come out in 2006 that somewhere between 10% and 90% of enterprises will be doing SOA.
Garone: Well, yes, that’s true.
Gardner: What are your other predictions for 2007?
Garone: Getting back to one of the issues that we talked about earlier, the whole ESB issue and its place in an overall infrastructure that supports SOA will get pretty much resolved and be much clearer to end users as we get toward the end of 2007. I also think that there’s going to be a lot of work around registry, repository, and standards, mostly because as organizations start really using SOA to support real business processes with services, there’s going to have to be a lot in the way of semantic-level information and defining relationships that are going to be have to be incorporated in a real robust repository. So, I think from the product standpoint, those are two areas where we’re going to see a lot of advancement.
Gardner: Okay, how about you Tony? What are your predictions for SOA in 2007?
Baer: A couple of things. First, a more general trend, which is not SOA specific. We're no longer in the era of big-bang implementations. So, in terms of the pace of SOA adoption, it’s going to be a pretty boring answer: It’s just going to continue to be incremental.
You’ll see several hot-spots in organizations that are dealing with certain consequences of M&A, for instance, where they need to link to general ledger systems or something like that. You’ll see some opportunistic SOA there. Otherwise, it will be that the leaders will continue, those that have been leaders in 2006. Like the Verizons of the world. I hate to keep harping on that. I saw them working outside my house yesterday. So, I figure that they have some ambitious initiatives on the table there. But, I think the mainstream will incrementally get to the first things beyond the skunkworks stage.
Gardner: How about on a scale of 1 to 10, with 1 being no further movement from 2006 and 10 being full metaphysical SOA implementations?
Baer: I was going to say about a 3 or 4, just averaging things out. The Verizons of the world may be at about a 5. Whereas say the mainstream was probably at a 2 or a 3, but that still is progress.
Gardner: Okay, Jon Collins, what are your predictions for 2007?
Collins: Predictions for 2007: The thing that we’re going to see the most of is what we’ve talked about already as industry acceptance of SOA in 2006. In 2007, we’re going to see an enterprise acceptance of SOA. In terms of adoption levels, people aren’t going to suddenly sort of rip out everything that they’ve got and say, “Let’s paint the whole town SOA.” But there will be more of an understanding of where it can benefit the organization.
When there are projects that are appropriate, they will be done in a way that encourages and helps develop more service orientation inside the organization. That fits in with the need for and the delivery of improved governance of better relationships between IT and business, a better understanding of business issues on the technology side. So, it’s everything, all moving forward at once, and without that you can’t really do SOA.
The other thing is that it does go all the way down the stacks. We could talk to SAP. I’m talking to clients at the moment who are doing SAP rationalization projects. We could talk to HP about how they’re providing a platform to support applications, and talk to Cisco about Service Oriented Network Architecture (SONA). If you’ve got something that can be understood as a service delivery, then they’re putting in place the network facilities to support that. Then, you can even talk to the service providers, the British Telecoms, who are putting in place some service delivery networks.
It goes all the way down the stack, and I think we’re going to see that integration, top to bottom, become more of a reality in all those companies that I’ve just talked about there. They’re doing it for themselves right now, and they’re going to start doing it with each other, which will be a change.
Gardner: So the good news is that SOA affects everything and the bad news is that SOA affects everything.
Collins: Absolutely.
Gardner: On your scale of 1 to 10 next year?
Collins: I put it down as the difference between acceptance and implementations. I’ll still put it down as between 2 and 3. It’s low, but it’s a good low.
Gardner: It's 20 percent, it’s double digits.
Gardner: Joe McKendrick, 2007?
McKendrick: SOA is a very amorphous concept. It’s not a tangible concept, and SOA as a term has crested, as we’ve discussed in this conversation. It wouldn’t surprise me if we started seeing more vendors move toward some other terminology or other focus in their marketing efforts at the vendor level. Maybe we’re going to be hearing more about EDA, Event Driven Architecture. It has more of an action sound to it. It’s something new, and it has that real-time aspect that ties into business intelligence, and can be integrated well within business intelligence solutions.
So, I wouldn’t be surprised if we saw vendors moving away from SOA terminology and toward things such as EDA, maybe software as a service. Maybe we’ll be hearing more about that. At the enterprise level, the end users in the trenches, where the real work takes place, there’s going to be slow, steady progress toward the SOA model. It’s not going to be a revolutionary thing happening in 2007. It’s going to be evolutionary. There are going to be more pilot projects moving into the enterprise production space. What may mitigate this, and what would be interesting to watch over the coming year, is the availability of staff, availability of the right skills.
The economy has been going well. I don’t know what 2007 will bring, but by all indications, IT budgets are holding up and there’s been already shortages of the right types of skills. For enterprises that need to keep their day-to-day operations going, it maybe difficult to allocate the human resources to really move SOA projects forward.
Gardner: On a scale of 1 to 10, increase in SOA adoption in 2007?
McKendrick: Two, a solid 2.
Gardner: We’re going down, we’re going down. I’ve got a few predictions myself that I'd like to throw out. I think we can also look to 2007 as being the year of modeling. I think we’re going to see a lot more product and specification and methodology around the modeling of services that can leverage and exploit some of the activity from 2006 around this governance and the registry and repository. I’m expecting some much improved tools, graphical tools, and some innovative approaches to how to choreograph -- and that plays into your event-driven stuff, too.
I’m also predicting that this notion that Web 3.0, which is better characterized as the "Semantic Web," will offer on one hand competition against the SOA messaging and value, but more importantly offer a tag-team approach. We’ve discussed this a little bit before around Web 2.0.
If we do start getting some specifications, and as IP Version 6 becomes more widely deployed around the world, we’ll get much richer in approaching this level of a semantic Web capability on the network. If you can combine that with what you’re doing internally, that that’s one of the big tipping points for the further adoption of SOA.
I’ll use that as my opportunity to say I see about a 4 in terms of actual SOA adoption increase, so 40 percent, which is pretty big. I’m going to go on the top side of this trend for our group.
I’m also going to go out on a limb and say that I’m going to expect some big SOA-related acquisitions again in 2007, and I’m going to look to SAP and Oracle as likely candidates for acquiring other companies. The net-net on that is the application guys are going to start to flex their muscles on SOA. If you have both the infrastructure and the applications, and then you produce the SOA benefits, that’s a very advantageous place to be.
That’s it from me. Anyone else want to chime in on 2007?
Garone: Yeah, I want to respond to a couple of things. Let me start with what you just said around the enterprise apps vendors. That was one 2007 prediction that I had on my list, driven by something a lit bit different than what you said, though. One of the empirical pieces of feedback that I get often from end users is that they’re waiting and pining for the day when they’re not wrapping their legacy apps anymore in Web services standards and, all this stuff will be essentially done for them by the people who provide the applications.
Gardner: SOA-native-as-services.
Garone: Native as services, exactly right. I think you’re going to start seeing the SAP’s and the Oracle’s and everyone else that services that market, stepping up in a big way to help solve that problem, so I completely concur with you on that.
One of the proof points that I didn’t mention earlier -- I’d mentioned it in a previous podcast -- is the lack of synergy, integration, and operability between the business side and the IT side in real life. Most of the end users I talk to, when I see them present, when I talk to them in detail about their SOA activities, they really just cite cost savings. They mention raw cost savings in terms of development and operations as really the primary, and in some cases only, benefit of doing an SOA implementation.
We all know, as analysts and people who have talked a lot about SOA and how they can benefit organizations, that that’s a very narrow view. What that tells me is that the business case, the true comprehensive business case, still hasn’t been met in a lot of cases, and hasn’t been articulated very clearly. I think that’s going to start turning around in 2007.
Gardner: When you emphasize the modeling and the applications, you start getting closer to that business-level benefit?
Garone: I agree. The other thing I would just say very quickly is that -- and I’ve mentioned this before – it’s going to be harder and harder to divorce the services approach to building solutions from the virtualization area that a lot of companies are looking at, because they’re looking to do them at around the same time, and they’re very closely related.
So, we’re going to see more of a comprehensive view of that, not only in terms of how organizations want to implement it, but from vendors as a response. I also think you’ve defined a good podcast topic for the future in Web 3.0.
Gardner: We’ll be there. All right, gentlemen, thank you very much. Let’s quickly go around the table for purposes of disclosure. If there are any vendors that were mentioned or implicated today that you do business with, it would be a nice time for you to mention that, so that we all have a sense of where we’re coming from. Why don’t you go first, Steve?
Garone: At this point I would just list IBM.
McKendrick: IBM, and I’ve also done work with Systinet.
Collins: Mercury, so HP I guess.
Baer: Mercury, ditto.
Gardner: I’m going to disclose that I’ve worked with Borland, Cape Clear, Eclipse Foundation, Hewlett-Packard, IONA, and I think that’s probably it.
All right. Thanks very much. Also, if any of our listeners are interested in learning more about BriefingsDirect B2B informational podcasts or to become a sponsor of this or other B2B podcasts, please fill free to contact me, Dana Gardner at 603-528-2435. That’s it for this week’s, and I suppose this year’s, SOA Insights Edition. I’m your moderator and host, Dana Gardner. Thanks for joining.
Listen to the podcast here.
Transcript of Dana Gardner’s BriefingsDirect SOA Insights Edition, Vol. 6. Copyright Interarbor Solutions, LLC, 2005-2006. All rights reserved.
Subscribe to:
Posts (Atom)