GitLab vs. SolarWinds IP Address Manager (IPAM) vs. SonarQube

GitLab is good if you work a lot with code and do complex repository actions. It gives you a very good overview of what were the states of your branches and the files in them at different stages in time. It's also way easier and more efficient to write pipelines for CI\CD. It's easier to read and it's easier to write them. It takes fewer clicks to achieve the same things with GitLab than it does for competitor products.

Incentivized

SolarWinds IP Address Manager is very useful the bigger and more complex the environment. Smaller organizations will have to consider the cost as it provides little benefit over monitoring maybe 2-3 servers. But I have over 24 DHCP servers with on average 15 subnets each so tracking and monitoring all that was very time-consuming. As a result, it was generally ignored until there was an issue. With SolarWinds IP Address Manager, I was able to set alerts to monitor scope utilization and duplicate IP addresses.

Incentivized

SonarQube is excellent if you start using it at the beginning when developing a new system, in this situation you will be able to fix things before they become spread and expensive to correct. It’s a bit less suitable to use on existing code with bad design as it’s usually too expensive to fix everything and only allows you to ensure the situation doesn’t get worse.

Incentivized

• GitLab excels in managing code versions, allowing easy tracking of changes, branch management, and merging contributions.
• It helps maintain code stability and reliability, saving time and effort in the development or research workflow.
• Powerful code review features, enabling collaboration and feedback among team members.
• Robust project management features, including issue tracking, kanban boards, and milestones.

Incentivized

• With IPAM automated address scanning, we can be confident that we are looking at an up-to-date, accurate snapshot of our network.
• The built-in alerts are a great safety net. We know that even if we aren't paying close attention to our IP address space, IPAM is. If a range is nearly full, IPAM lets us know before it becomes a real problem.
• IPAM's event logging gives us insight into any and all changes made by our network engineers.

Incentivized

• Detecting bugs and vulnerabilities: SonarQube can identify a wide range of bugs and vulnerabilities in code, such as null pointer exceptions, SQL injection, and cross-site scripting (XSS) attacks. It uses static analysis to analyze the code and identify potential issues, and it can also integrate with dynamic analysis tools to provide even more detailed analysis.
• Measuring code quality: SonarQube can measure a wide range of code quality metrics, such as cyclomatic complexity, duplicated code, and code coverage. This can help teams understand the quality of their code and identify areas that need improvement.
• Providing actionable insights: SonarQube provides detailed information about issues in the code, including the file and line number where the issue occurs and the severity of the issue. This makes it easy for developers to understand and address issues in the code.
• Integrating with other tools: SonarQube can be integrated with a wide range of development tools and programming languages, such as Git, Maven, and Java. This allows teams to use SonarQube in their existing development workflow and take advantage of its powerful code analysis capabilities.
• Managing technical debt: SonarQube provides metrics and insights on the technical debt on the codebase, enabling teams to better prioritize issues to improve the quality of the code.
• Compliance with coding standards: SonarQube can check the code against industry standards like OWASP, CWE and more, making sure the code is compliant with security and coding standards.

Incentivized

• CI variables management is sometimes hard to use, for example, with File type variables. The scope of each variable is also hard to guess.
• Access Token: there are too many types (Personal, Project, global..), and it is hard to identify the scope and where it comes from once created.
• Runners: auto-scaled runners are for the moment hard to put in place, and monitoring is not easy.

Incentivized

• The user experience is not as intuitive as other products. We have to be more restrictive around level 1 help desk access compared to NCM or NPM in SolarWinds.
• Making and enforcing changes, not just monitoring, has been hit or miss in some instances.

Incentivized

• Importing a new custom quality profile on SonarQube is a bit tricky, it can be made easier
• Every second time when we want to rerun the server, we have to restart the whole system, otherwise, the server stops and closes automatically
• When we generate a new report a second time and try to access the report, it shows details of the old report only and takes a lot of time to get updated with the details of the new and fresh report generated

Incentivized

I really feel the platform has matured quite faster than others, and it is always at the top of its game compared to the different vendors like GitHub, Azure pipelines, CircleCI, Travis, Jenkins. Since it provides, agents, CI/CD, repository hosting, Secrets management, user management, and Single Sign on; among other features

Incentivized

We are heavily invested in SolarWinds. We currently own Network Performance Monitor, Netflow Traffic Analyzer, User Device Tracker, Server Application Monitor and Network Configuration Manager. We have NOC mode setup for deskside support for monitoring any down devices that may effect our network across the globe. This application gives us the information we need when we need it.

Incentivized

I find it easy to use, I haven't had to do the integration work, so that's why it is a 9/10, cause I can't speak to how easy that part was or the initial set up, but day to day use is great!

Incentivized

SolarWinds IPAM is like what SolarWinds itself says, i.e. easy to use and simple. SolarWinds has really made their orion and non-orion platform products so simple that any newbie can give a try and make the best use out of it. I learned SolarWinds IPAM by myself in a POC environment, and not just IPAM but other modules and now I own 6 certifications. You see how easy to use this product is.

Incentivized

It can improve in some user experience and usability parts, like the code view and the way we assign issues it's a bit hidden and not highlighted

Incentivized

I've never had experienced outages from GItlab itself, but regarding the code I have deployed to Gitlab, the history helps a lot to trace the cause of the issue or performing a rollback to go back to a working version

Incentivized

We don't have any issues with availability. Our cluster setup provide us a 99,9% availability that is enough for us.

Incentivized

GItlab reponsiveness is amazing, has never left me IDLE. I've never had issues even with complex projects. I have not experienced any issues when integrating it with agents for example or SSO

Incentivized

We do not integrate IPAM into other systems other than the standard Orion integration. The performance is reasonable, however, we are running all the SolarWinds applications on a very large server.

Incentivized

At this point, I do not have much experience with Gitlab support as I have never had to engage them. They have documentation that is helpful, not quite as extensive as other documentation, but helpful nonetheless. They also seem to be relatively responsive on social media platforms (twitter) and really thrived when GitHub was acquired by Microsoft

Incentivized

I have not contacted customer support and therefore have no experience in this area. I know we have some issues with our VAR support at this time for Orion, but I don't know if the IPAM falls into the same support structure. Perhaps others in the organization may know more regarding the support area.

Incentivized

We we easily able to integrate the SonarQube steps into our TFS process via the Microsoft Marektplace, we didn't have the need to call SonarQube support. We've used their online documentation and community forum if we ran into any issues.

Incentivized

Know the full scope of what you will be installing. Solarwinds can be a very complex installation. IPAM is just one fairly simplistic piece.

Gitlab seems more cutting-edge than GitHub; however, its AI tools are not yet as mature as those of CoPilot. It feels like the next-generation product, so as we selected a tool for our startup, we decided to invest in the disruptor in the space. While there are fewer out-of-the-box templates for Gitlab, we have never discovered a lack of feature parity.

Incentivized

SolarWinds IP Address Manager was cheaper than both alternatives and far easier to manage. Device42 interface is years behind what Solarwinds offers. It is very outdated; BT Diamond required remote management and we constantly had to message support, it reached a point where it was better not to have the product at all.

Incentivized

SonarQube is an open-source. It's a scalable product. The costs for this application, for the kind of job it does, are pretty descent. Pipeline scan is more secured in SonarQube. Its a very good tool and its support multiple languages. Its main core competency is of static code analysis and that is why SonarQube exists and it does it exceedingly well. The quality of scan on code convention, best practices, coding standards, unit test coverage etc makes them one of the best competent tool in the market

Incentivized

I think is very well designed, and like any VCS it works as intended

Incentivized

We have not experienced any scalability issues with this product. However, SolarWinds needs to allow users to scale horizontally without any license restrictions. For example, we would like to separate Netflow and Orion onto different platforms but are unable to due to license restrictions.

Incentivized

• GitLab cut down our spent on container, package and infrastructure registry
• Best thing is we can now have everything in single platform which cost effective too
• Quality of support is really good and they do have emergency support team as well which is great

Incentivized

• IPAM has saved countless hours of running scripts and gathering data to compile reports to plan re-subnetting globally.
• IPAM has reduced helpdesk incidents by immediately spotting bad DNSR and IP conflicts.
• IPAM has helped eliminate blocks on projects whereas there is not currently enough address space requiring major changes to accommodate more IP'ed servers, gear, etc.

Incentivized

• Positive ROI from the standpoint of flagging several issues that would have otherwise likely been unaddressed and caused more time to be spent closer to launch
• Slightly positive ROI from time-saving perspective (it's an automated check which is nice, but depending on the issues it finds, can take developers time to investigate and resolve)