?
Solved

Looking for white Paper on Segregating Development/Test/Production Environments i n Corporate A.D. and Distributive Systems

Posted on 2001-06-27
2
Medium Priority
?
1,590 Views
Last Modified: 2008-01-16
I've searched the web pretty well.  I can't find what I'm looking for.  Can someone point me towards a white paper (or white-paper type info) that proposes the best way (if at all) to separate development, test, and production environments in a corporate application development and distributive systems group?  It would hopefully cover things like:

-must development and test servers be separate from production servers?  If so, should there be separate server rooms?
-what security procedures should be used?  
-what network (severed?) ties are recommended if separate environments are proposed?
-what operational change management (change control)  procedures should be used?
-how should the distributive systems group (network and server maintenance) research and test upgrades/patches/new hardware?  Use the same recommendation as that for A.D?

Any info would be greatly appreciated!  Thx!
0
Comment
Question by:Rogee
2 Comments
 
LVL 1

Accepted Solution

by:
GuitarWizard earned 300 total points
ID: 6237153
First off.....should development and test servers be separate from production servers....it depends; how confident are you that the code you push to the production servers won't crash and burn?  Is this just a corporate environment, or an e-commerce environment?  I worked for Priceline.com WebHouse Club in the NOC, in which we had one of the largest, if not the largest, transactional system in existence at the time.  In addition to our production servers, we had pre-production servers in each grouping of servers (object servers, web servers, transactional servers, tax servers, etc), in which code would be tested and also stress tested with LoadRunner.  If it was a fairly large deploy, the powers-that-be would try to make sure that there were no problems once the code was deployed to the production servers, but believe me, from time to time there were problems, and the deploy got rolled back if the problems were severe enough; otherwise a patch would be quickly developed and deployed to the production servers.

As far as separating your environments, try subnetting.  

In regards to people researching and testing upgrades/patches/new hardware....it depends on how your company is structured.  We had a QA department that would test what the developers had created; essentially try and "break" it.  Also, depending on the severity of the problem code, the QA department would sometimes determine what the problems are with the code versus the developers initially looking at the problem (however, if it was a major issue, then the developers were called into the NOC ASAP)

I don't know of any white papers off the top of my head that goes over these procedures; it really depends on your organization.  What I described above is first-hand knowledge of how our environment was managed.  It's really more of a common-sense issue; do you want suspect code to be immediately pushed to your production site, or do you want to test it first?  Do you require "lower level" developers to provide QA to test new code and troubleshoot problem code?  Are there any managers who can write up processes relating to the business environment as to how deploys and "change management" is handled?  What may work for one environment may not necessarily work for another environment.  Security, for example, at the Department of Defense would be much more of an issue than say, Priceline.com.  Not that we were lax and had everyone from the CEO to a secretary messing around with servers....but, generally speaking, only developers, support groups, the NOC and its' managers, and upper level management had access to the pre-prod environment.  

I hope this helped a little.....if you have any questions or need clarification, please feel free to ask...
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 9012588
Rogee,
No comment has been added lately (757 days), so it's time to clean up this TA.
I will leave a recommendation in the Cleanup topic area for this question:

RECOMMENDATION: Award points to GuitarWizard http:#6237153

Please leave any comments here within 7 days.

-- Please DO NOT accept this comment as an answer ! --

Thanks,

lrmoore
EE Cleanup Volunteer
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I had an issue with InstallShield not being able to use Computer Browser service on Windows Server 2012. Here is the solution I found.
This article explains the fundamentals of industrial networking which ultimately is the backbone network which is providing communications for process devices like robots and other not so interesting stuff.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…

578 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question