The IT & Cloud Infrastructure Stack, Organized
Modern software runs on layers of infrastructure that did not exist a generation ago. Where companies once racked their own servers, today they assemble applications from public-cloud compute, container orchestrators, edge networks, distributed storage, and a deep observability stack — often spanning several vendors and multiple data centers at once. InfrastructureDirectory is a curated, vendor-neutral catalog of the platforms and tools that make up that stack, from the hyperscale clouds at the bottom to the GitOps and monitoring layers at the top. Every listing links directly to the official source so you can evaluate each option yourself.
At the foundation sit the public clouds. Amazon Web Services, Microsoft Azure, and Google Cloud Platform together account for the majority of the global cloud market, each offering hundreds of managed services for compute, storage, networking, and databases. Developer-focused providers such as DigitalOcean trade breadth for simplicity and predictable pricing, while colocation and interconnection giants like Equinix provide the physical data-center floor space and private cloud on-ramps that hybrid architectures depend on. Choosing among them is rarely about raw features alone — it comes down to geography, compliance, existing ecosystem investments, and how predictable your costs need to be.
Above the raw infrastructure lives the container and orchestration layer. Docker standardized how applications are packaged, and Kubernetes became the near-universal control plane for running those containers at scale, with simpler alternatives such as HashiCorp Nomad and security-focused engines like Podman serving teams whose needs differ. Deploying to those clusters is increasingly handled through infrastructure as code — Terraform and its open-source fork OpenTofu, Pulumi for those who prefer real programming languages, and the configuration-management veterans Ansible, Chef, and Puppet — together with GitOps tools like Argo CD that treat a Git repository as the single source of truth for cluster state.
Connecting and securing all of this is the job of the networking, CDN, and service-mesh categories. Cloudflare, Fastly, and Akamai push content and compute to the network edge across hundreds of locations, NGINX fronts a large share of the world's web traffic, and service meshes such as Istio, Cilium, and Consul handle encrypted service-to-service communication, traffic routing, and policy inside Kubernetes. Sensitive credentials are kept out of source code by secrets-management tools like HashiCorp Vault, while distributed stores such as etcd and S3-compatible object storage like MinIO hold the state that everything else relies on.
Finally, none of this can be operated blind, which is why monitoring and observability spans so many entries here. Prometheus and Grafana form the open-source backbone for metrics and dashboards, the Elastic stack powers log search, OpenTelemetry has emerged as the vendor-neutral standard for instrumentation, and SaaS platforms such as Datadog and New Relic unify metrics, logs, and traces for teams that prefer a managed approach. Use the category filters and search below to explore each layer of the stack, compare the leading options side by side, and shortlist the infrastructure that fits your architecture, budget, and scale. Listings are independently curated and link straight to the official source, so you can verify the details and pricing yourself before committing to any platform.
Orchestration
Container platform that started the revolution — build, ship, and run containers with Docker Engine and Docker Compose.
Docker popularized Linux containers when it launched in 2013, giving developers a simple, repeatable way to package an application and its dependencies into a portable image. Docker Engine builds and runs those images, Docker Compose defines multi-container local environments in a single file, and Docker Hub hosts millions of public and private images. While Kubernetes dropped the Docker runtime in favor of containerd, the Docker image format — standardized through the Open Container Initiative — remains the universal currency of the container ecosystem and the default starting point for most engineering teams.
Orchestration
containers open-source developer compose
The de facto container orchestration platform — automate deployment, scaling, and management of containerized apps.
Originally built at Google from lessons learned running Borg, Kubernetes was open-sourced in 2014 and now sits at the center of the Cloud Native Computing Foundation as its flagship graduated project. It schedules containers across clusters of machines, handles self-healing through automatic restarts and rescheduling, performs rolling updates and rollbacks, and exposes a declarative API where you describe desired state in YAML. Every major cloud offers a managed distribution — EKS, GKE, and AKS — making Kubernetes the common substrate for modern platform engineering.
Orchestration
container-orchestration cncf open-source leader
HashiCorp's workload orchestrator — simpler than Kubernetes, supports containers, VMs, and standalone binaries.
Nomad is HashiCorp's workload orchestrator, positioned as a simpler, single-binary alternative to Kubernetes. Beyond Docker containers it can schedule virtual machines, standalone executables, Java applications, and batch jobs, making it attractive for organizations with mixed or legacy workloads that do not fit neatly into a container-only model. Nomad integrates tightly with Consul for service discovery and Vault for secrets, scales to thousands of nodes, and uses the same declarative HCL configuration as the rest of the HashiCorp suite. Its operational simplicity appeals to teams that find full Kubernetes overhead excessive.
Orchestration
orchestration hashicorp simple multi-workload
Daemonless, rootless container engine — Docker-compatible CLI with enhanced security, from Red Hat.
Podman is Red Hat's daemonless alternative to Docker, designed around a security-first architecture. Because there is no long-running root daemon, containers can run fully rootless under an unprivileged user, shrinking the attack surface that has historically concerned security teams. Its command-line interface is intentionally Docker-compatible, so most workflows translate by simply aliasing docker to podman. Podman also introduced the concept of pods — groups of containers that share resources, mirroring the Kubernetes primitive — and its companion tools Buildah and Skopeo handle image building and registry operations without a daemon.
Orchestration
containers daemonless rootless redhat
Iac
Agentless configuration management and orchestration — automate provisioning, deployment, and OS configuration with YAML playbooks.
Ansible, created by Michael DeHaan in 2012 and acquired by Red Hat in 2015, automates configuration management, application deployment, and orchestration without requiring any agent on managed hosts — it connects over SSH and runs idempotent tasks defined in human-readable YAML playbooks. Its low barrier to entry made it the most approachable tool in the configuration-management category, and Ansible Galaxy hosts thousands of reusable roles and collections. Red Hat's Ansible Automation Platform layers in a control plane, role-based access, and an execution environment for enterprise-scale automation.
Iac
configuration-management agentless yaml redhat
Configuration management platform — automate infrastructure and application deployment with Ruby-based cookbooks.
Chef, first released in 2009, is one of the original configuration-management platforms and helped define the infrastructure-as-code movement. It models system state as code through Ruby-based recipes and cookbooks, applying a desired-state convergence model so that managed nodes continuously reconcile toward the declared configuration. Chef Infra handles server configuration, Chef InSpec adds compliance-as-code auditing, and Chef Habitat packages applications for portable deployment. Now part of Progress Software, Chef remains common in large regulated enterprises that adopted it early and value its mature, agent-based approach to fleet management at scale.
Iac
configuration-management ruby enterprise
IaC using real programming languages — write infrastructure in Python, TypeScript, or Go instead of DSL.
Pulumi, founded in 2017, takes a different approach to infrastructure as code: instead of a domain-specific language, you define cloud resources using general-purpose programming languages such as TypeScript, Python, Go, C#, and Java. That lets engineers use familiar loops, functions, classes, package managers, and testing frameworks to express infrastructure, which is especially appealing to developer-centric platform teams. Pulumi supports the same major clouds and Kubernetes as Terraform, manages state through a hosted or self-managed backend, and includes Pulumi ESC for centralized secrets and environment configuration.
Iac
iac python typescript go
Enterprise configuration management — enforce desired state on servers at scale with Puppet's declarative DSL.
Puppet, created by Luke Kanies in 2005, is one of the oldest and most established configuration-management tools and was instrumental in shaping infrastructure as code. It uses a declarative, model-driven language to describe the desired state of systems, and a Puppet agent on each node periodically pulls its catalog from a central server and converges the machine toward that state. Puppet excels at enforcing consistent configuration across large, long-lived server fleets and is widely used in regulated enterprises. Now part of Perforce, it remains a mature option for organizations standardizing thousands of nodes.
Iac
configuration-management enterprise ruby-dsl
The most widely used IaC tool — declare infrastructure in HCL, provision and manage resources across all major clouds.
Terraform, released by HashiCorp in 2014, is the dominant infrastructure-as-code tool for provisioning cloud and on-premises resources. Engineers declare desired infrastructure in HashiCorp Configuration Language (HCL), and Terraform builds a dependency graph, computes an execution plan, and applies changes through provider plugins for AWS, Azure, Google Cloud, and thousands of other services in the Terraform Registry. Its state file tracks real-world resources so changes are incremental and predictable. After HashiCorp moved Terraform to the Business Source License in 2023, the community forked it as OpenTofu under the Linux Foundation.
Iac
iac hashicorp multi-cloud declarative
Monitoring
Full-stack observability SaaS — metrics, logs, APM, synthetic monitoring, and security in one integrated platform.
Datadog, founded in 2010 and publicly traded on NASDAQ, is a leading SaaS observability platform that unifies infrastructure metrics, log management, application performance monitoring, real-user monitoring, synthetic tests, and cloud security in one product. A single lightweight agent installs across hosts, containers, and serverless functions, and the platform ships hundreds of turnkey integrations for popular databases, message queues, and cloud services. Its correlated dashboards and alerting let teams pivot from a metric spike to the underlying traces and logs in seconds, which has made it a default monitoring choice for cloud-native enterprises.
Monitoring
apm monitoring enterprise saas
Open-source observability platform — beautiful dashboards for metrics, logs, and traces from any data source.
Grafana, created by Torkel Ödegaard in 2014 and developed by Grafana Labs, is the most widely deployed open-source dashboarding and visualization tool in the observability space. It connects to dozens of data sources — Prometheus, Loki, Tempo, InfluxDB, Elasticsearch, PostgreSQL, and cloud monitoring APIs — and unifies metrics, logs, and traces in a single pane of glass. The broader Grafana stack adds Loki for logs, Tempo for distributed tracing, and Mimir for long-term metric storage, with a managed Grafana Cloud offering for teams that prefer not to self-host.
Monitoring
dashboards observability open-source visualization
Full-stack observability and AMP platform — instrument everything from browser to backend with one agent.
New Relic, founded in 2008, was an early pioneer of application performance monitoring and has since grown into a full-stack observability platform. All telemetry — metrics, events, logs, and traces — flows into a single unified database queryable with NRQL, its SQL-like query language. The platform spans APM, infrastructure monitoring, browser and mobile real-user monitoring, synthetics, and error tracking. In 2020 New Relic moved to a consumption-based pricing model with a generous free tier, lowering the barrier for smaller teams while continuing to serve large enterprises with high-volume, full-stack observability needs.
Monitoring
apm monitoring enterprise saas
CNCF's open-source metrics monitoring system — time-series database with PromQL query language and Alertmanager.
Prometheus began at SoundCloud in 2012 and became the second project to graduate from the Cloud Native Computing Foundation after Kubernetes. It is a pull-based metrics system: it scrapes time-series data from instrumented targets over HTTP, stores it in an efficient local time-series database, and lets engineers slice that data with the powerful PromQL query language. Its bundled Alertmanager handles deduplication, grouping, and routing of alerts to PagerDuty, Slack, email, and other receivers. The Prometheus exposition format has effectively become the industry standard for application metrics.
Monitoring
metrics cncf open-source alerting
Service Mesh
eBPF-based networking and security for Kubernetes — high-performance network policy, service mesh, and observability.
Cilium, created by Isovalent and now a graduated CNCF project, brings eBPF — a technology that runs sandboxed programs directly in the Linux kernel — to Kubernetes networking, security, and observability. By operating in the kernel rather than relying on iptables, Cilium delivers high-performance load balancing, identity-aware network policy, and transparent encryption with minimal overhead. Its Hubble component provides deep, service-level visibility into network flows, and Cilium Service Mesh offers a sidecar-free alternative to traditional mesh architectures. Cisco acquired Isovalent in 2024, reinforcing eBPF's place in cloud-native networking.
Service Mesh
ebpf kubernetes networking cncf
HashiCorp Consul — service discovery, health checking, and service mesh for multi-cloud and hybrid environments.
Consul, released by HashiCorp in 2014, provides service discovery, health checking, a distributed key-value store, and a full service mesh for connecting and securing services across clouds and runtime platforms. Services register with Consul and discover one another through DNS or HTTP, while built-in health checks route traffic away from failing instances. Consul Connect adds mutual-TLS service-to-service encryption and intention-based authorization, and its sidecar-based mesh works across Kubernetes, virtual machines, and bare metal alike. That platform-agnostic reach makes it a common choice for hybrid and multi-runtime environments where workloads are not all containerized.
Service Mesh
service-discovery hashicorp service-mesh open-source
Secrets Management
HashiCorp Vault — centralized secrets management, dynamic credentials, data encryption, and PKI as a service.
HashiCorp Vault, introduced in 2015, centralizes the storage, access control, and auditing of secrets — API keys, database passwords, certificates, and encryption keys. Beyond static secret storage, Vault generates dynamic, short-lived credentials on demand for databases and cloud providers, acts as a private certificate authority for PKI, and offers encryption-as-a-service so applications never hold their own keys. Authentication integrates with Kubernetes, LDAP, cloud IAM, and OIDC, and every access is logged for compliance. It remains the reference implementation for secrets management in zero-trust and dynamic infrastructure environments.
Secrets Management
secrets hashicorp encryption pki