Amazon Elasticsearch Service正式更名，雲廠商和開源社區間必有一戰？

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"雲計算的普及幾乎顛覆了各個行業和職能角色，商業開源市場自然也不例外。雲服務所強調的效率、靈活性與可用性，同開源軟件開發及商業化領域的既定秩序爆發出一場激烈的衝突。最典型的就是，近日亞馬遜雲科技與Elastic之間醞釀已久、並在今年全面爆發的衝突對抗。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"全面爆發的對抗"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"“Elasticsearch 事件”時間線梳理："}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"bulletedlist","content":[{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"2010 年，Shay Banon 在標準 Apache 2 開源許可下將Elasticsearch 開源。2012 年，Banon 成立"},{"type":"link","attrs":{"href":"http:\/\/www.elastic.co\/","title":null,"type":null},"content":[{"type":"text","text":"Elastic"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"，提供圍繞 Elasticsearch 訂閱、託管和培訓等服務。這家公司非常成功，吸引了超過 1.62 億美元的融資，並在 2018 年上市，估值在 15 億至 30 億美元之間。Elastic 僱傭了一些 Lucene 提交者，這些人併爲 Lucene 和 Elasticsearch 的開發作出了重大貢獻。"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"隨後，Elastic在他們自己的“可用源”許可下發布了一些增強功能，即"},{"type":"link","attrs":{"href":"https:\/\/www.elastic.co\/blog\/doubling-down-on-open","title":null,"type":null},"content":[{"type":"text","text":"Elastic License"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"。Elastic規定對 Elasticsearch 的任何貢獻（在任何一個許可下）均由其管理。Elastic 因將一些新功能置於此許可證下而受到了批評，因爲這些新功能始於開放、社區討論和想法。很明顯，"},{"type":"link","attrs":{"href":"https:\/\/www.flax.co.uk\/index.html@p=3709.html","title":null,"type":null},"content":[{"type":"text","text":"該許可證不是已批准的開源許可證"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"。這種模式是“開放代碼”——但Elastic 對於“開放”的特定價值，即對產品的路線圖和方向進行了集中控制。"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"亞馬遜和一些較小的公司開始以軟件即服務模式 (SaaS) 提供託管 Elasticsearch，直接與 Elastic 的產品競爭。Elastic 開始將他們的代碼部分混合爲 Apache 2 和 Elastic License，使這些企業難以僅使用開源部分，而"},{"type":"link","attrs":{"href":"https:\/\/opensourceconnections.com\/blog\/2019\/04\/10\/weather-forecast-cloudy-with-a-chance-of-elasticsearch\/","title":null,"type":null},"content":[{"type":"text","text":"亞馬遜通過有效的分叉 Elasticsearch"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"提供了一個完全 Apache 2 許可的版本，他們將其命名爲"},{"type":"link","attrs":{"href":"https:\/\/opendistro.github.io\/for-elasticsearch\/","title":null,"type":null},"content":[{"type":"text","text":"Elasticsearch OpenDistro"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"。此外，Elastic 還"},{"type":"link","attrs":{"href":"https:\/\/www.elastic.co\/blog\/dear-search-guard-users-including-amazon-elasticsearch-service-open-distro-and-others","title":null,"type":null},"content":[{"type":"text","text":"起訴了 Floragunn GmbH"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"，後者提供了構成 OpenDistro 一部分的安全插件，並單獨"},{"type":"link","attrs":{"href":"https:\/\/searchaws.techtarget.com\/news\/252471650\/AWS-faces-Elasticsearch-lawsuit-for-trademark-infringement","title":null,"type":null},"content":[{"type":"text","text":"起訴 AWS 商標侵權"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"。"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"2021年1月，Elastic 稱將"},{"type":"link","attrs":{"href":"https:\/\/www.elastic.co\/blog\/licensing-change","title":null,"type":null},"content":[{"type":"text","text":"在雙重許可模式下發布 Elasticsearch 的所有未來版本"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"，使用他們的 Elastic 許可和"},{"type":"link","attrs":{"href":"https:\/\/www.mongodb.com\/licensing\/server-side-public-license","title":null,"type":null},"content":[{"type":"text","text":"由 MongoDB 創建"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"的SSPL許可"},{"type":"link","attrs":{"href":"https:\/\/www.mongodb.com\/licensing\/server-side-public-license","title":null,"type":null},"content":[{"type":"text","text":"，"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"專門用於防止亞馬遜等第三方提供其軟件的託管版本。"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"2021年4月，亞馬遜雲科技將分叉項目Elasticsearch OpenDistro重新命名爲OpenSearch，並計劃將Amazon Elasticsearch Service更名爲Amazon OpenSearch Service。7月，亞馬遜雲科技發佈了OpenSearch 1.0版本。"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"2021年9月，Amazon Elasticsearch Service 再更名爲 Amazon OpenSearch Service，並支持 OpenSearch 1.0。"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"變更許可證時，Elastic與亞馬遜科技的衝突幾近高潮。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"Elastic公司創始人兼CEO Shay Banon表示，變更許可證是爲了保證企業無法在未與Elastic合作的情況下將Elasticsearch與Kibana產品作爲商業服務來牟利。Banon還在博文中寫道，“設想一下，當亞馬遜在2015年推出基於Elasticsearch的服務並將其定名爲Amazon Elasticsearch Service時，我們有多麼驚訝。”"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"作爲迴應，亞馬遜雲科技的高管們表示，“亞馬遜雲科技將加緊建立並維護開源Elasticsearch與Kibana的ALv2許可分支。”其Elasticsearch服務的所有新版本都將基於此分支，而且這場變化不會“減慢服務的發展速度”。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"image","attrs":{"src":"https:\/\/static001.geekbang.org\/infoq\/5b\/5b6581839deb16917357e1ef39f97d16.png","alt":null,"title":null,"style":[{"key":"width","value":"75%"},{"key":"bordertype","value":"none"}],"href":null,"fromPaste":true,"pastePass":true}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"OpenSearch 與 Elasticsearch 在GitHub代碼貢獻對比"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"雙方在你來我往，各說各的道理，持續爆發的爭執也讓用戶們對於OSS許可的限制感到困惑。撲面而來的壓力，也讓Elastic越來越擔心項目的後續資金供應跟不上發展需求。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"作爲一家上市企業，Elastic的Elasticsearch軟件一直在爲沃爾瑪、奧迪等企業客戶提供網站搜索支持。亞馬遜卻將Elastic的開源Elasticsearch重新打包並出售給客戶。Elastic認爲，亞馬遜在本質上是奪取了由整個社區共同創造的自由代碼，並通過巧取豪奪的方式保證只有自己能夠從中獲取價值。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#323232","name":"user"}}],"text":"開源的商業模式需要改變了？"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"自由軟件運動以來，開源許可也隨之發生了重大變化。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"如今市面上有數十種開源許可證，但使用者最多的是以Apache 2.0和MIT爲代表的少數許可證。Apache 2.0和MIT被稱爲寬鬆許可證，因爲它們允許商業供應商重新分發開源軟件（OSS）及其專有的附加內容，唯一的要求是必須在分發過程中保留原始OSS的源代碼及版權信息。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"寬鬆許可證大受歡迎，因爲像Banon這樣的OSS開發者可以將原始代碼與專有附加組件共同打包到商業產品當中，以此實現貨幣化轉換。這樣，開放許可也不會影響到專有代碼，而GNU等通用公共許可證就作出了這方面限制。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"Cloudera、Elastic、MongoDB以及Talend等公司都依賴這樣的商業模式，即先讓用戶喜歡上軟件的免費開源版本，再在之後的生產應用當中付費來獲取額外的企業功能與技術支持。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"MongoDB在其2017年的S-1募股文件中就有過類似的表述，其中提到MongoDB數據庫的免費版本並不包含商業版本的所有功能，主要是爲了“鼓勵開發者使用、熟悉並接納我們的平臺”。"}]},{"type":"heading","attrs":{"align":null,"level":3}},{"type":"image","attrs":{"src":"https:\/\/static001.geekbang.org\/infoq\/60\/608fd06e218956de5602665542cab2b7.png","alt":null,"title":null,"style":[{"key":"width","value":"75%"},{"key":"bordertype","value":"none"}],"href":null,"fromPaste":true,"pastePass":true}},{"type":"heading","attrs":{"align":null,"level":3}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"這種商業開源軟件（COSS）模式在企業私有基礎設施安裝與運行的時代表現不錯。然而，雲服務的橫空出世顛覆了一切：雲服務開始在生產級服務上直接提供OSS功能與API的租賃式訪問，這在根本上對COSS模式構成了威脅。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"應用服務商通過互聯網出售對COSS產品的訪問權，這種訪問是由專有增強功能再打包核心OSS代碼創建而成，基本設計只需要考慮如何在多租戶雲基礎設施及其他專有云服務中穩定運行，全程不涉及任何實際分發。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"像亞馬遜雲科技這樣的企業並不是在銷售Elasticsearch軟件，而是在銷售基礎設施、運營支持Elasticsearch各種功能。這種情況下，他們甚至將使用REST API或SQL語法的分佈式搜索作爲按需服務進行銷售。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"雲服務商的服務產品並不會直接威脅到COSS商業模式，畢竟廠商可以通過單獨的許可對其中的專有功能予以限制。讓COSS陷入困境的主要有以下兩個原因："}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"bulletedlist","content":[{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"企業開發者使用等效的雲服務替代內部運營的軟件安裝方案，消除了由COSS廠商向企業出售附加組件安全性、可靠性及集成功能的空間。"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"Elastic等企業可能利用開源運動中的善意，創建僞OSS許可證來保護其專有代碼，同時繼續保留OSS產品的外衣。"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"雲時代下，商業開源模式應該如何發展？"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"面對這個問題，Elastic當前“我全都要”的態度只會讓情況進一步惡化。他們既想當OSS道德楷模，又想把握住商業軟件供應商的豐厚利潤。糟糕的是，他們爲了限制軟件商業用途而使用的全新服務器端公共許可證（SSPL）已經被開源軟件倡議（OSI）公開嘲諷。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"OSI指出，Elastic的SSPl許可證存在幾個問題，特別是對於OSS的擁護者們而言，他們長期支持開源項目的善意未來很可能被鎖定在專有限制性許可證之下。OSI認爲，Elastic的變化並不代表着OSS許可模式的失敗。相反，它反映出“Elastic在現有商業模式與開源許可證設計目標上存在着內生衝突。”"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"企業應該如何參與開源"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"事實上，亞馬遜雲科技的OpenSearch分叉反而成了Elasticsearch亂局的最佳解決方案。當然，必須要有足夠多的獨立開發者（即與亞馬遜雲科技無關的開發者）參與進去，該項目才能取得真正的成功。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"在Linux基金會及跨行業開源安全基金會的支持下，《哈佛商業評論》對企業使用開源項目進行了調查。調查指出，企業進入開源生態時，需要認真思考事關開源生態未來的以下幾個問題："}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"bulletedlist","content":[{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"企業的參與是否會對開源生態的未來健康和福祉產生負面影響？"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"如果開源項目較少受到社區意識的驅動，而更多被追求利潤的機構所擺佈，開發者是否會決定停止參與？"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"企業是否會單純關注有利可圖的開源項目，忽略掉全社會所依賴的其他關鍵基礎設施？這類軟件的安全維護難度大嗎？"}]}]},{"type":"listitem","attrs":{"listStyle":null},"content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"如果更多開源落入少數企業手中，是不是代表着參與bug及潛在漏洞檢查的人手會越來越少？"}]}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"如今的開源生態成熟且龐大，單靠志同道合人們的努力不可能保持高效運轉。企業和政府這樣的大型機構應該明白，當自己直接或間接贊助開源項目時會對整個生態系統產生怎樣的影響，同時遵循一些必要的原則。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"首先，企業和政府應該在不扼殺社區精神這一基本貢獻動機的前提下，推動開源繼續穩步發展。換句話說，企業應該設定明確的開源策略（最好鼓勵員工儘可能爲開源做貢獻）。調查發現，不少員工對其所在企業的開源策略並不瞭解，導致他們一直猶豫要不要公開使用並參與到開源項目中。此外，企業和政府也可以主動支持開源項目，保證那些與自身運作息息相關的重要項目能夠穩定發展下去。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"第二，使用開源項目的企業（其實這幾乎涵蓋了所有企業）應該提高自身對所使用開源項目的認知水平。近期，美國出臺的總統行政令要求將政府購買的所有產品彙總成一份軟件材料清單（SBOM），確保政府瞭解使用了哪些開源軟件和專有軟件，進而做出潛在漏洞預判。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"這一點非常重要，也值得其他企業效仿。這樣能夠幫助企業更好地理解自己對於開源社區的依賴性，並以更高的透明度瞭解到自己是否會受到新披露安全漏洞的影響。當前很多企業都在使用過時的開源版本，如果未能及時更新，則意味着軟件中可能包含已知的bug及安全漏洞。同時，商業軟件中使用範圍最廣的各大開源軟件包都被存放在個人開發者（而非整體社區）的賬戶之下，這不僅會引發安全性問題，更存在着可靠性隱患。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"第三，隨着企業深入參與開源項目，各方都應該關注當前軟件的穩定性，企業應該鼓勵員工爲那些對公司有用的項目出力，同時參與到常規的安全維護工作中。另外，企業應該意識到這些項目背後的志願者社區至關重要，理應受到保護。通過這種方式，他們不僅能夠被准許自己新添加的功能，同時也能保證整個開源生態的未來健康與福祉。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"儘管越來越多的貢獻者能夠拿到企業贊助，但他們的主要驅動力並不是金錢。換言之，企業採取的傳統激勵槓桿也許起不了作用，必須更多關注貢獻者們的內驅因素，例如對學習的熱情、對開源社區的歸屬感及對程序員這一專業身份的認同等。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"結束語"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"亞馬遜雲科技與Elastic之間圍繞"},{"type":"text","text":"Elasticsearch"},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"商業用途的鬥爭，凸顯出開源軟件供應商在雲時代下已經必須要作出改變了。"},{"type":"text","text":"但開源生態系統中涉及的利益相關方數量衆多，任何單一的參與者都很難解決所有問題。因此，未來需要企業、政府機構及個人貢獻者等多方的共同努力，來保障開源生態系統的發展與活力。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"相關鏈接："}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"link","attrs":{"href":"https:\/\/hbr.org\/2021\/09\/the-digital-economy-runs-on-open-source-heres-how-to-protect-it","title":null,"type":null},"content":[{"type":"text","text":"https:\/\/hbr.org\/2021\/09\/the-digital-economy-runs-on-open-source-heres-how-to-protect-it"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"link","attrs":{"href":"https:\/\/searchcloudcomputing.techtarget.com\/opinion\/Elastic-vs-AWS-highlights-open-source-monetization-dilemma","title":null,"type":null},"content":[{"type":"text","text":"https:\/\/searchcloudcomputing.techtarget.com\/opinion\/Elastic-vs-AWS-highlights-open-source-monetization-dilemma"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]}]}]}