ARTICLE
Modern IT infrastructure must support business evolution: activating new environments, adapting resources and managing changes without compromising operational control. Computing capacity remains important, but so does the way servers, networks and storage are configured and governed.
The software-defined model addresses this need by bringing automation and software development practices into infrastructure management.
What is a software-defined data center?
A software-defined data center is an infrastructure in which computing, networking and storage resources are abstracted and managed through software. Hardware remains essential, but many configuration tasks can be centralized and automated.
The model comprises three main components:
- Software-Defined Compute: management of computing resources through virtualization and, in environments that adopt it, containerization.
- Software-Defined Networking: network configuration and control through software.
- Software-Defined Storage: storage management through software capabilities and policies, reducing dependence on individual device configuration.
The aim is to make infrastructure more consistent and easier to adapt to application requirements.
Infrastructure as Code: defined and version-controlled configurations
Infrastructure as Code (IaC) allows IT resources to be defined and managed through configuration files or code. These files can be stored in version control systems such as Git, reviewed and applied through automated procedures.
This approach can help:
- Make environments reproducible, reducing undocumented manual configurations.
- Track changes, preserving configuration history.
- Standardize provisioning, using reusable templates and procedures.
- Detect and manage deviations between the intended configuration and the actual state.
- Support checks and audits, making evidence of changes managed through the process available.
These benefits require appropriate operational rules and controls. Versioning code does not, on its own, guarantee that every change is reversible or that the infrastructure meets applicable requirements.
The role of Kubernetes and hybrid cloud
In container-based environments, Kubernetes supports application orchestration: it manages workload deployment, resource scaling and certain recovery operations according to defined configurations.
IaC can complement this management by defining the necessary infrastructure resources. The two have distinct and complementary roles: Kubernetes orchestrates containerized workloads, while IaC supports infrastructure creation and management.
The software-defined approach is also useful in hybrid and multicloud environments, where it can encourage shared practices across on-premises infrastructure, private cloud and public cloud. However, it does not eliminate differences between platforms or automatically make every application portable.
Data control and protection in the Swiss context
The technical ability to deploy or move a workload must be assessed alongside the requirements governing the data it uses. For a Swiss company, environment selection must also consider data location, contractual terms and any transfers abroad.
When personal data is processed, the Swiss Federal Act on Data Protection (FADP) must be respected, and the conditions applicable to its disclosure abroad must be checked. This does not imply a general obligation to keep all data in Switzerland: the assessment depends on the context and any sector-specific or contractual requirements.
Automation and policy-as-code can support the implementation of controls, but they do not replace this assessment.
Where should you start?
The first step is to identify a concrete scope: an environment to make reproducible, a recurring procedure to automate or configurations to standardize. The initiative can then expand to change management, orchestration and observability. The aim is to build infrastructure that is easier to control, with automation supporting the IT team’s expertise.
Would you like to explore the technologies and adoption process in more detail?