Amplexor Drupal for the Enterprise seminar - evaluating Drupal for the Enterprise by Jan Lemmens

1. Drupal in the Enterprise

2. 1. functional features
2. technical features
3. knowledge & support
4. product life cycle
5. future

3. introduction

4. open source
free of licensing costs
public scrutiny of code
no vendor lock-in

5. made in Belgium
created by Dries Buytaert

6. since 2001
7 stable releases

7. organic
no central roadmap
1,003,094 people in 228 countries
speaking 181 languages power Drupal

8. community
maintains the ecosystem
Drupal core
contributed modules
documentation
...

9. Drupal is
user- and content-centric
build for user-generated content

10. Drupal is
not a full-fledged “product”
flexible & extendible framework
engagement
content publishing
social
commerce
community
Drupal !

11. Drupal is
lightweight
basic CMS functionality + APIs

12. Drupal is
lightweight
most functionality is added by modules

13. theme!
core module!
contrib module!
contrib module!
Drupal API!
custom module!

14. theme!
core module!
contrib module!
contrib module!
custom module!
Drupal API!
database!

15. Drupal has
no separate back-end system
visitor!
webserver!
editor!

16. software stack
recommended
Drupal!
PHP!
Apache!
MySQL!
Linux!

17. key points of attention when
deploying Drupal in an
Enterprise environment

18. 1. functional features

19. core vs. contrib
quality
security
code quality
test coverage
UI
interoperability

20. core vs. contrib
selecting contributed modules
maintenance status
development status
# reported installs
stability
# active comitters
# open bugs
security background

22. publishing
workflows can be added (contrib)
Workbench module

23. multi-language
core contains basic localisation features
synchronous/asynchronous
RTL support
> 100 languages supported
Internationalization module suite

24. asset management
core only provides a file upload field
Media module

25. mailing
mailing from the webserver is a bad idea
performance
no tracking, batch sending, segmentation, ...
risk for black-listing

26. personalisation
Drupal is very user-centric
user
APIs
modules (e.g. WEM module)

27. search
integration with e.g. Acquia Search (Solr)

28. commerce
Drupal Commerce
suite of modules
well documented and maintained
commercial support available

29. 2. technical features

30. multisite
website 1!
website 2!
website 3!
website 4!
codebase"
core + modules!
db1!
db2!
db3!
db4!

31. multisite
creates a strong dependency between sites
perfect for a “family” of related websites
not that feasible for separate projects

32. security
Drupal Security Team (since 2005)
Benjamin Jeavons
Gregory Knaddison

33. security
Security Advisories (SA)
Drupal core
contributed code
limited advance disclosure
before public disclosure
core and stable contrib modules are
conform OWASP top 10

34. security
Security Advisories (SA)
number of Security Advisories per year (2013 data to date)

35. security
cause of vulnerabilities and weaknesess
incorrect use of core APIs
misconfiguration
infrastructure issues

36. security
key points of attention
use only stable modules
developer training to fully grasp core APIs
security testing/audit
update core and contrib

37. infrastructure
Trafic to Drupal & openX
Application Firewall
(stand-by)
Application firewall
Trafic for Assets
(video & images)
Load Balancer
+ Cache
(stand-by)
Load Balancer
+ Cache
Assets
(Images & Video)
OpenX
Database
Slave
Database
Master
Drupal
Search
Monitoring
(zabbix?)
Test & Dev
Environment

38. infrastructure
PHP, Apache, MySQL, load balancing, reverse
proxy, Memcached, Apache Solr, monitoring,
firewalling, etc.
lots of different technologies
expertise is an absolute must

39. infrastructure
Acquia Cloud
Drupal PaaS

40. 3. knowledge & support

41. Drupal 7 contains only 1
vendor library
(jQuery)

42. Drupal lives
on its own island
all documentation needs to come from inside
hard to find good Drupal talent
holds back community growth
reduced compatibility
Drupal 8 contains 7 vendor libraries

43. 4. product life cycle

44. product life cycle
no backwards compatibility
major versions
5
6
7
8
...
minor versions
7.1 7.2 7.3 ... 7.23

45. product life cycle
Drupal core release windows
st Wednesday of each month: bug fix release
1
rd Wednesday of each month: security release
3

46. project life cycle
project finish!
D8 upgrade start!
project start (D6)!
2010!
2011!
Drupal 7 release!
D8 upgrade finish!
2012!
2013!
2015!
2014!
Drupal 8 release!
no support!!

47. project life cycle
new community proposal
example
D6 security updates untill 3
months after D8 LTS
release"
LTS = last minor version

48. 5. future

49. Drupal 8
https://drupal.org/drupal-8.0
configuration management
multi-language and Views in core
new back-end UI + inline editing
REST webservices built in
OO patterns + Symfony integration
new templating engine (Twig)
support for WAI-ARAI standards

50. Drupal 8
configuration management
deployments made easier

51. Drupal 8
new back-end UI

52. Drupal 8
inline editing

53. Drupal 8
multi-language/Views in core
two of the most important modules in the ecosystem
no waiting for stable version
start earlier with new project or migration

54. Drupal 8
web services in core
integrating with other systems
modules can use core APIs

55. Drupal 8
release
expected Q2 2014

56. conclusion

57. conclusion
Drupal is a very lightweight framework
heavily content- and user-centric
extremely flexible and extendable

58. enterprise Drupal =
expertise
Drupal core
+
selection of modules
+
integration with services
+
professional support

59. Customer Solution!
Amplexor Offer
Acquia Network Subscription!
Acquia Cloud!
Drupal specific managed hosted
environment!
Training
Professional Services
strategy, creative, design, integration, implementation, migration, go-live,
production, incremental, development!