HashiCorp Consul vs. HashiCorp Terraform

Consul looks to me like an amazing solution to store configuration data. In huge cloud environments like what we are using nowadays, it is quite important to have a reliable source of parameters to our distributed applications, easily scalable and also, easy to change parameters spreading them efficiently over our entire environment.

Incentivized

8 because it's currently best-in-class and is completely essential to use in contrast to not expressing your infrastructure as code. That said, new contenders are nipping at its heels, and I expect stronger tools to emerge in the coming years. Hopefully the Terraform team is able to keep pace.

Incentivized

• Service Health: Using Consul for service health/discovery has been critical to our success in a hybrid environment
• K/V Store: The Consul K/V store is the best solution out there for our particular use case, which is as a locking mechanism to coordinate otherwise random runs of our configuration management system. This has allowed us to have peace of mind of system availability in our on-prem infrastructure.
• API: The Consul API as a whole is excellent and extremely easy to work with
• Documentation: Hashicorp really does documentation well. Their examples are easy to follow and everything is written in a manner that is easy to understand for beginners with the tool.

Incentivized

• Terraform is cloud agnostic. Just select the suitable provider for the cloud and it will do the job.
• Templating is possible to make the Terraform templates reusable.
• Variables can be created to make the templates generic so that it can be reused for different environments or resources.

Incentivized

• Error logs - some of the errors require Googling as you have no idea what they mean
• Misconfiguration is painful - strange errors can occur if you make even a tiny mistake

Incentivized

• The errors generated by the plan and preview commands are pretty cryptic, it can be hard for newcomers to the scripting language to understand how to address problems.
• Access controls around workspaces is limited which makes it harder to secure reduce the scope of teams ability.
• Analytics around user usage, applies and plans would be helpful for managemenet.

Incentivized

Consul's API is extremely user friendly. While their web interface isn't quite as "mature", it's still pretty easily navigated for the average person. Together they make a pretty easy to pick up and use tool.

Incentivized

I love Terraform and I think it has done some great things for people that are working to automate their provisioning processes and also for those that are in the process of moving to the cloud or managing cloud resources. There are some quirks to HCL that take a little bit of getting used to and give picking up Terraform a little bit of a learning curve, thus the rating

Incentivized

Terraform's performance is quite amazing when it comes to deployment of resources in AWS. Of course, the deployment times depend on various parameters like the number of resources to deploy and different regions to deploy. Terraform cannot control that. The only minor drawback probably shows up when a terraform job is terminated mid way. Then in many cases, time-consuming manual cleanup is required.

Incentivized

I've never used paid support from HashiCorp, but I consider its support a good one, since they provide a lot of free resources for the community and there are good user groups supporting you on several sorts of issues. Also, HashiCorp is known as a company with a strong relationship with the community, that is easily noticed by the events HashiCorp promotes over the world.

Incentivized

Terraform is community driven but does offer support for it's Enterprise product. When contacting the team at HashiCorp we have always gotten resolution to our issues. They have been very responsive in returning our calls and answering our questions as they come up. We are currently using the open source model.

Incentivized

We used to use Microsoft SQL Server for configuration management of our services. Unfortunately that was a pain because of:

• Developers did not know how to persist objects effectively in MS SQL Server
• SQL queries or a custom web UI were the ways of keeping the data up to date, but both options were hard to use
• Each service would have its own slightly different configuration in a file and in MS SQL Server so that caused a lot of confusion and configuration management overhead

Consul brought the following benefits:

• Its own modern web UI
• Streamlined use of objects and multiple different configuration (JSON-based)
• Service DNS vs IP addresses is a God-send for the dev and operations teams.

Incentivized

dbt was fine, but you end up with an extremely bloated repo/project. Often where all of the models are the same, named similarly, and generally just doesn't adhere to the concept of DRY coding. In Terraform we're able to template a lot of this work and dynamically generate assets based on variables instead.

Incentivized

• It contains a native web UI, which in contrast to its counterparts, is handy, very intuitive and - most importantly - very informative. It leaves no room for doubt about your services "forest" health. So, for that purpose, the learning curve was almost down to non-existent. Our team managed to work seamlessly with Consul being our services API
• Our management staff had a difficult time understanding what Consul was really all about. For technical staff it is pretty simple to understand the huge value such a tool can pose to our suite of solutions, but once our management staff took the grasp of its valuable handy set of tools, we didn't take long to start using it and keeping track of our Swarm overall health, with was a constant concern for the entire company before.
• For load balancing purposes, we were relying pretty much on guesses before we decided to use Consul. One would check a certain node overall health and decide if we would need to spring a new instance at AWS or Digital Ocean.

Incentivized

• Using code, we are able to build and deploy cloud resources faster and more consistently than producing the same resources in the console manually.
• For applications that share architectures, we can reuse code to expedite development. We can also do the same with modules that are shared across the organization.
• By defining all of our resources as code, we can deploy complete environments with "batteries included." For example, we can use code that spins up servers in a cloud provider and at the same time, creates monitors with in our monitoring provider. Likewise, when the servers are decommissioned, the monitors are decommed along with them. In the past, the creation and decom of the monitors would have been a disjointed, manual step. With Terraform we get it all with one "terraform apply."

Incentivized