This list is an update to the list I created seven years ago https://alternativeto.net/lists/8013/devops-systems/ which focused on the SRE/DevOps component of infrastructure for web applications. The web and development world has changed a lot since then and rather than re-write history, decided to create a new list based on current patters and shifts in enterprise environments. These details are based on both what I've seen in the professional world as well as for hobbyists and web development enthusiasts who run their own projects. The general pattern for these tools will cover three main points for each function:
I also cover any GUI interfaces available for folks who don't want to interact with these services using a terminal.
In addition to consulting the documentation for each of the tools below, I'd like to shout out the following projects which also played a big part in informing the overall structure of this list:
This is a no-AI zone since I am unfamiliar with these tools. Nor do I wish to change that.
Amazon Managed Service for Prometheus is a serverless, Prometheus-compatible monitoring service for container metrics that makes it easier to securely monitor container environments at scale. With Amazon Managed Service for Prometheus, you can use the same open-source Prometheus...
Some basic security services I see used by enterprises to manage both user endpoints and servers.
Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments.
SaaS-based endpoint security platform offering real-time detection, prevention, and response using advanced machine learning, graph data, and threat intelligence cloud.
Below are commonly used secure networking processes, both for SSH and VPNs. I rarely see OpenVPN servers used anywhere, despite having some advantages missing from Wireguard.
OpenSSH is a free version of the SSH connectivity tools that technical users rely on. OpenSSH encrypts all traffic (including passwords) to effectively eliminate eavesdropping, connection hijacking, and other attacks.
WireGuard® is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPsec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN.
Some security monitoring tools I see occasionally deployed beyond the enterprise models noted above.
Suricata is a high performance Network IDS, IPS and Network Security Monitoring engine. Open Source and owned by a community run non-profit foundation, the Open Information Security Foundation (OISF). Suricata is developed by the OISF and its supporting vendors.
AWS WAF is a web application firewall that lets you monitor and manage web requests that are forwarded to protected AWS resources. With AWS WAF, you can protect resources such as Amazon CloudFront distributions, Amazon API Gateway REST APIs, Application Load Balancers, and AWS...
Is there anything I missed? What tools have you seen commonly used in the tech world? Don't forget to like, comment and subscribe!
No comments so far, maybe you want to be first?
