The State of the Enterprise App Portfolio

F5 Ecosystem | March 09, 2020

When did you last move to a new house?

When you did, did you get rid of your furniture? Decorations? Pictures? Throw rugs? Probably not. You might have taken the opportunity to replace old and worn belongings with new ones, but the bulk of your household moved with you.

Enterprise app portfolios, it turns out, are like the things that compose your household. When organizations adopt new architectures and develop new apps, they don't throw away ones that already exist. While there's always some culling of the portfolio that's taking place over time, it’s generally true that apps put into service years ago using traditional architectures are still in service—providing they continue to offer business value.

For years this has been stated as fact, though there was little data to back up the claim. No one disputes the truth of the premise, but it's nice to finally have empirical data to support it.

In our State of App Services research, we ask about the trends and technology we believe will impact the future of app services. Cloud is one. Automation and orchestration is another. But perhaps the biggest impact on app services naturally comes from the applications these middle functions deliver and secure.

So, we asked about application architectures in use and the composition of the enterprise app portfolio.

The results will likely not surprise anyone, though the rapid adoption of modern architectures—in particular microservices—may be more than passingly interesting.

You know from a previous post that the most prevalent app architecture across enterprise portfolios today is a traditional one: the three-tier web app (36%). Close behind, however, is its predecessor: client-server (34%). Mainframes and monoliths still make up 11% of app portfolios, but modern architectures (defined here as mobile and microservices) have surpassed them, with 14% and 15% of the app portfolio, respectively.

That's interesting but breaking it down into "traditional" versus "modern" architectures is even more fascinating. For purposes of this analysis, we define "traditional" architectures as include monoliths, client-server, and three-tier web apps. "Modern" architectures are mobile and microservices.

Using these categories, we find that most (76%) use a mix of both.

SOAS 2020

The remaining 24% fall heavily on the side of traditional architectures, with 21% using only traditional architectures for their app portfolio. The rest we might call adventurous and rely only on modern architectures. While the average number of app architectures in an enterprise app portfolio is three, a testament to the long-lived nature of some enterprises is evidenced by the 18% of organizations that operate apps in every architecture. All five.

Even more interesting is that 11% of organizations employ just ONE architecture.

Organizations maintain heterogeneous app portfolios. As they adopt modern architectures, they continue to use and integrate with apps that live in the traditional architecture category. While we expect to see app portfolio composition shift over time as apps reach end of life and are replaced by modern equivalents, this shift takes time. In some cases, a lot of time.

I would expect to see a decline in client-server before a significant decline in three-tier web, with consummate growth in apps based on microservices. But I don't anticipate the dramatic death of mainframe and monoliths anytime soon, given the tight coupling of business and applications delivered via such architectures. The reality is that digital transformation is driving tighter integration between business and technology, and 'ancient' monoliths that live on mainframes often already exhibit such tight integration.

To wit, while overall less than a third (31%) of respondents told us their apps were critical to the business, for those with monoliths comprising greater than half their app portfolio, that jumps to 38%. Clearly, monoliths and mainframes continue to generate business value, despite their potential age.

The Relationship with App Services

So why does an app services and security provider care about app architectures aside from the obvious "apps need to be scaled, they need to be secure, and they need to be fast"?

Application architectures have always have—and will continue to have—a profound impact on the way in which app services are delivered. Traditional architectures, for example, are well-suited to traditional, proxy-based delivery mechanisms such as the application delivery controller (ADC). But modern apps, which rely heavily on APIs and distributed models of execution, introduce new delivery mechanisms that often better suit the operators of such apps. Container-native options as well as 'as a service' models are often paired with modern apps. Also, web and app-server plugins (a la NGINX modules) are increasingly attractive delivery mechanisms for app services.

The reality is that microservices are breaking up the network. In doing so, it's shifting the gravitational center of delivery architectures toward the app. That's pulling some critical app services (availability and security, in particular) closer to—and in some cases, into—the app.

That's going to change how we as an industry deploy and operate app services and F5, as a provider, delivers them.

Share
Tags: 2020

About the Author

Related Blog Posts

F5 accelerates and secures AI inference at scale with NVIDIA Cloud Partner reference architecture
F5 Ecosystem | 10/28/2025

F5 accelerates and secures AI inference at scale with NVIDIA Cloud Partner reference architecture

F5’s inclusion within the NVIDIA Cloud Partner (NCP) reference architecture enables secure, high-performance AI infrastructure that scales efficiently to support advanced AI workloads.

F5 Silverline Mitigates Record-Breaking DDoS Attacks
F5 Ecosystem | 08/26/2021

F5 Silverline Mitigates Record-Breaking DDoS Attacks

Malicious attacks are increasing in scale and complexity, threatening to overwhelm and breach the internal resources of businesses globally. Often, these attacks combine high-volume traffic with stealthy, low-and-slow, application-targeted attack techniques, powered by either automated botnets or human-driven tools.

F5 Silverline: Our Data Centers are your Data Centers
F5 Ecosystem | 06/22/2021

F5 Silverline: Our Data Centers are your Data Centers

Customers count on F5 Silverline Managed Security Services to secure their digital assets, and in order for us to deliver a highly dependable service at global scale we host our infrastructure in the most reliable and well-connected locations in the world. And when F5 needs reliable and well-connected locations, we turn to Equinix, a leading provider of digital infrastructure.

Volterra and the Power of the Distributed Cloud (Video)
F5 Ecosystem | 04/15/2021

Volterra and the Power of the Distributed Cloud (Video)

How can organizations fully harness the power of multi-cloud and edge computing? VPs Mark Weiner and James Feger join the DevCentral team for a video discussion on how F5 and Volterra can help.

Phishing Attacks Soar 220% During COVID-19 Peak as Cybercriminal Opportunism Intensifies
F5 Ecosystem | 12/08/2020

Phishing Attacks Soar 220% During COVID-19 Peak as Cybercriminal Opportunism Intensifies

David Warburton, author of the F5 Labs 2020 Phishing and Fraud Report, describes how fraudsters are adapting to the pandemic and maps out the trends ahead in this video, with summary comments.

The Internet of (Increasingly Scary) Things
F5 Ecosystem | 12/16/2015

The Internet of (Increasingly Scary) Things

There is a lot of FUD (Fear, Uncertainty, and Doubt) that gets attached to any emerging technology trend, particularly when it involves vast legions of consumers eager to participate. And while it’s easy enough to shrug off the paranoia that bots...

Deliver and Secure Every App
F5 application delivery and security solutions are built to ensure that every app and API deployed anywhere is fast, available, and secure. Learn how we can partner to deliver exceptional experiences every time.
Connect With Us
The State of the Enterprise App Portfolio | F5