1. Code Hosting Platforms

GitLab, Gitee, Tencent Cloud CodeHub

• GitLab

  • Advantages: Open-source with extensive features, supports both self-hosted and cloud-based deployment. Includes built-in CI/CD (GitLab CI/CD), project management, and code review tools. Offers strong security and privacy controls.
  • Disadvantages: For large enterprises, complex customization and integration can incur high operational costs. The free version has limited features, with advanced capabilities requiring a paid license.

• Gitee

  • Advantages: A leading code hosting platform in China, user-friendly for Chinese developers. Features a rich repository of open-source projects and offers enterprise services. Provides good Chinese language support and fast local access speeds.
  • Disadvantages: Lower internationalization compared to global platforms, leading to less community participation from non-Chinece developers. The ecosystem of advanced features and plugins is less mature than GitHub or GitLab.

• Tencent Cloud CodeHub

  • Advantages: Deeply integrated with the Tencent Cloud ecosystem, offering seamless connectivity with other services like DevOps and container solutions. Provides an end-to-end platform for development, testing, and deployment.
  • Disadvantages: Has a smaller market share compared to GitLab and Gitee, resulting in lower community activity and fewer third-party plugin integrations.

2. Project Management Tools

Taiga, Jira, Tencent Tapd, Alibaba Cloud Yunxiao

• Taiga

  • Advantages: An open-source, user-friendly project management tool. Integrates agile workflow management, supporting kanban, epics, tasks, and user stories. Well-suited for small to medium-sized teams.
  • Disadvantages: May not fully support the complex requirements of large enterprises. Customization and integration capabilities are relatively limited.

• Tencent Tapd (Tencent Agile Product Development Platform)

  • Advantages: Developed by Tencent, it supports full-cycle agile development management. Feature-rich, covering requirement management, iteration planning, and defect tracking. Offers mobile access and integrates well with Tencent Cloud services.
  • Disadvantages: Support for large orgenizational structures is less granular than Jira. Pricing can be relatively high.

• Jira

  • Advantages: An industry-standard, mature project management tool known for its powerful customization and flexibility. Widely used in agile, waterfall, and other project management methodologies. Boasts a rich plugin ecosystem.
  • Disadvantages: Has a steep learning curve and can be overly complex for small teams. Cost are high, particularly for small and medium-sized businesses.

3. Continuous Integration (CI) Tools

Jenkins, Tencent Cloud CODING, Alibaba Cloud Yunxiao

• Jenkins

  • Advantages: Open-source, highly flexible, and customizable CI/CD tool. Supports a vast array of plugins and integrations, suitable for diverse development environments.
  • Disadvantages: Configuration can be complex, presenting a barrier for beginners. Managing and maintaining large-scale clusters incurs significant overhead.

• Tencent Cloud CODING

  • Advantages: Often deeply integrated with Tencent's container services, providing one-click deployment and CI/CD pipelines. Simplifies operational workflows, especially for applications deployed on Kubernetes.
  • Disadvantages: Compatibility, extensibility, and customization may be limited when used outside the Tencent Cloud ecosystem.

• Alibaba Cloud Yunxiao

  • Advantages: An all-in-one DevOps solution from Alibaba Cloud, covering the entire process from code commit to automated testing, building, and release. Tightly integrated with other Alibaba Cloud services, offering visual pipelines and rich templates.
  • Disadvantages: Integration with other cloud providers or self-managed infrastructure may not be as seamless as with native cloud services.

4. Continuous Deployment & Container Orchestration

Rancher, Alibaba Cloud ACK, Tencent Cloud TKE, Kuboard, OpenShift

• Alibaba Cloud ACK (Container Service for Kubernetes)

  • Advantages: A managed Kubernetes service that simplifies cluster setup, operation, and management. Provides enterprise-grade security and high availability. Supports one-click deployment, auto-scaling, multi-zone deployment, and canary releases. Compatible with native Kubernetes APIs for easy application migration. Integrates with other Alibaba Cloud services like object storage and load balancing.
  • Disadvantages: Lock-in to the Alibaba Cloud ecosystem can create migration challenges to other providers. Advanced features and services often require additional fees, potentially making it more expensive than self-managed Kubernetes.

• Tencent Cloud TKE (Tencent Kubernetes Engine)

  • Advantages: A managed Kubernetes service offering high scalability and stability. Provides rich monitoring, logging, and alerting features. Easily integrates with other Tencent Cloud products like CDN, cloud databases, and object storage. Supports one-click deployment and automatic fault recovery.
  • Disadvantages: Similar to ACK, it is dependent on the Tencent Cloud ecosystem, posing migration challenges. Advanced features also typically incur extra costs.

• Kubernetes (K8s)

  • Advantages: The industry-standard open-source container orchestration system, originally developed by Google. Ideal for deploying, managing, and scaling large-scale containerized applications. Offers a powerful declarative API for automated deployment, rollback, scaling, and self-healing. Has a vibrant community and a rich ecosystem of third-party tools.
  • Disadvantages: Initial learning and deployment costs are high, requiring a deep understanding of its concepts. Self-managing a Kubernetes cluster demands significant technical expertise and operational experience.

• Rancher

  • Advantages: An open-source enterprise Kubernetes management platform. Provides a consistent management experience across multi-cloud and on-premises infrastructure, supporting multi-cluster management through a unified UI. Offers a powerful graphical interface for deploying, managing, and monitoring clusters and applications. Supports various authentication mechanisms for fine-grained access control.
  • Disadvantages: Advanced features for large, complex environments may require the commercial version of Rancher. The learning curve can be steep, especially for users new to Kubernetes.

• Kuboard

  • Advantages: A lightweight Kubernetes-based DevOps platform designed to lower the barrier to entry for K8s. Provides an easy-to-use UI for operations and suppports CI/CD. Includes templates for common application scenarios to simplify daily cluster management tasks.
  • Disadvantages: Functionality is relatively basic and may not meet the custom needs of complex enterprises. Compared to major cloud providers' K8s services, its ecosystem is smaller, with potentially less robust updates and community support.

5. Code Scanning & Security Analysis

SonarQube, Snyk, Fortify, OWASP ZAP

• SonarQube (Focus: Code Quality & SAST)

  • An open-source platform for continuous inspection of code quality. Performs Static Application Security Testing (SAST).
  • Supports multiple programming languages (Java, C#, JavaScript, etc.).
  • Generates detailed reports on code complexity, potential bugs, code coverage, and security vulnerabilities.
  • Offers a customizable rule set and provides visual dashboards for team insights.

• Snyk (Focus: SCA)

  • Specializes in Software Composition Analysis (SCA) for open-source dependencies.
  • Scans project dependencies against a vulnerability database to identify known security issues in open-source libraries.
  • Provides actionable reports and supports integration into CI/CD pipelines for automated security checks.
  • Compatible with multiple languages and environments (JavaScript, Java, Python, etc.).

• Fortify (Focus: SAST)

  • A commercial Static Application Security Testing (SAST) tool from Micro Focus.
  • Analyzes source code or compiled binaries to detect security vulnerabilities across many programming languages.
  • Offers extensive features and high customizability but requires a paid license.

• OWASP ZAP (Focus: DAST)

  • An open-source web security testing tool maintained by OWASP, used for Dynamic Application Security Testing (DAST) and penetration testing.
  • Provides both automated and manual testing capabilities to simulate attacks.
  • Detects various vulnerabilities like injection flaws, XSS, and CSRF.
  • Can be integrated into CI/CD pipelines for automated security testing.

6. Infrastructure as a Service (IaaS)

Alibaba Cloud, Tencent Cloud, Huawei Cloud

• Alibaba Cloud

  • Advantages: Extensive global data center network, particularly strong in the Chinese market with deep customer base and support. Offers a comprehensive product portfolio with good stability.
  • Disadvantages: International market presence and brand recognition are weaker compared to some global leaders. Network latency can be higher in certain regions outside China.

• Tencent Cloud

  • Advantages: Leverages Tencent's strong technical background and massive user base. Provides mature cloud products with specialized solutions for gaming, audio/video, and other sectors.
  • Disadvantages: International expansion lags behind other major providers. The depth of solutions in some enterprise domains may still be developing.

• Huawei Cloud

  • Advantages: Benefits from Huawei's hardware R&D and global infrastructure. Holds competitive advantages in hybrid cloud and edge computing, particularly in government and enterprise markets.
  • Disadvantages: Global public cloud market share is smaller compared to AWS or Alibaba Cloud. Service availability and market recognition in some regions continue to grow.

7. Tools for Managing Cloud Servers (ECS)

For macOS:

• Terminal Emulator:
  • iTerm2: A powerful, feature-rich terminal emulator for macOS. Offers split panes, hotkey windows, search, and extensive customization options. Ideal for SSH connections too cloud servers.
• File Transfer:
  • FileZilla: A free, open-source FTP, FTPS, and SFTP client. Provides an intuitive interface with drag-and-drop support for uploading/downloading files to cloud servers, including features like resume transfer.

For Windows:

• Terminal/SSH Client:
  • PuTTY: A free, lightweight SSH and telnet client widely used on Windows. Simple to use, supports various encryption algorithms and configuration options for connecting to remote servers.
• File Transfer:
  • WinSCP: A free, open-source SFTP, SCP, and FTP client for Windows. Combines file explorer functionality with secure file management, supporting drag-and-drop operations for efficient file transfers to and from ECS instances.