Puppet licensing covers the infrastructure automation products that Perforce Software sells under the Puppet name. Puppet Core provides vendor-supported builds for users of open source Puppet. Puppet Enterprise is an enterprise automation platform, and Puppet Enterprise Advanced adds security and compliance features.[4] All three are licensed per Managed Node. Puppet Enterprise and Puppet Enterprise Advanced fall under the Perforce Master Terms and the Puppet Enterprise Supplemental Terms.[1] Puppet Core has its own Software License Agreement.[2] The node definitions are broad, and nodes run by open source Puppet count. A Puppet estate therefore has to be counted from what Puppet manages, not from what is licensed. See Perforce licensing for the contract framework.
Editions
| Edition | Pricing[4] | Licence document | Notes |
|---|---|---|---|
| Puppet Core Developer | Free under 25 nodes | Puppet Core Developer Program License Agreement[3] | Non-commercial module development and testing |
| Puppet Core Commercial | Custom, 25+ nodes | Puppet Core Software License Agreement[2] | Vendor-backed SLAs, hardened builds |
| Puppet Enterprise | Custom | MTaC with Puppet Enterprise Supplemental Terms[1] | Web GUI, RBAC, Continuous Delivery, Security Compliance Management |
| Puppet Enterprise Advanced | Custom | MTaC with Puppet Enterprise Supplemental Terms[1] | Adds Security Compliance Enforcement, Infra Assistant, multi-cloud cost and VM security compliance |
The Supplemental Terms set out which features each edition includes. Continuous Delivery and Security Compliance Management (formerly Comply) are included in both Puppet Enterprise and Puppet Enterprise Advanced. Security Compliance Enforcement (formerly CEM), Infra Assistant, Multi-Cloud Cost Efficiency Compliance and Multi-Cloud VM OS Security Compliance are included only with Puppet Enterprise Advanced.[1] Puppet Edge, for network, edge and firewall infrastructure, is a separate offering that requires payment of additional fees.[1]
Metrics
The metric is the Puppet Core Managed Node: “the specific number of Managed Nodes for which Customer has paid applicable subscription license fees as specified in the Order Form.”[1] The terms behind it are defined as follows:[1]
- Node. A Virtual Node, Physical Node, Infrastructure Platform Node or other instance of the offering.
- Physical Node. A physical system such as a server, laptop, blade or workstation.
- Virtual Node. An instance executed wholly or partly on a virtual machine, server, computing resource, container or appliance.
- Infrastructure Platform Node. Platform infrastructure that contains or executes the offering, including network devices, firewalls, cloud virtual machines, containers or serverless instances.
- Managed Nodes. Nodes deployed by the customer, its Affiliates or contracted third parties at its direction, and managed under the customer’s Puppet instance.
The Puppet Core licence uses the same definitions.[2]
Counting / floors
One configuration per node. The customer may apply the licence configuration only to the number of Managed Nodes it has paid for. It may not apply one configuration to more than one Managed Node, or to more nodes than it declared and paid for. It may not tamper with the licence-limiting function either (catalog rule).[1]
Open source nodes count. Managed Nodes include any node deployed using any version of Puppet: open source Puppet, Puppet Core, Puppet Edge, Puppet Enterprise and Puppet Enterprise Advanced. They also include nodes deployed under any other or successor Puppet licence agreement (catalog rule).[1] Under these terms, an organization that runs Puppet Enterprise alongside open source Puppet should count both populations. See open-source software licensing.
Puppet Core free threshold. The Puppet Core licence charges no subscription fee while the aggregate number of Managed Nodes does not exceed 25. Each Managed Node above 25 requires one subscription licence (catalog rule).[2] The licence reads as charging only for nodes above 25: one licence for each Managed Node in excess of 25.[2] Because the threshold uses the aggregate count, nodes managed by every version of Puppet count towards it.
Tracking and reporting. Puppet Core customers agree that they have “a commercially reasonable process in place” to track use and licence configurations on Managed Nodes. On written request, they must provide a signed report of their Puppet Core Managed Nodes within five business days (catalog rule).[2] If Perforce has a good-faith reason to believe the report is wrong, it may inspect use no more than once in any 12-month period.[2] For Puppet Enterprise, the general Master Terms verification right applies: at most once per 12 months, with audit costs if underpayment is 10% or more.[5]
Virtualization & partitioning
There is no virtualization discount or partitioning rule. Every virtual machine, container, appliance or serverless instance managed by Puppet is a Node in its own right (catalog rule).[1] Platform infrastructure that runs the Puppet offering itself is an Infrastructure Platform Node.[1] Compare the per-host models in virtualization and partitioning.
Cloud / BYOL
Cloud virtual machines and serverless instances are Nodes like any other.[1] Puppet Enterprise Advanced includes Multi-Cloud VM OS Security Compliance. This feature discovers virtual machines in public cloud accounts, identifies those not yet under Puppet management and brings selected ones under management.[1] Bringing virtual machines under management makes them Managed Nodes.
The Puppet Core licence allows internal business use only. It excludes timesharing, rental, application service provider, commercial hosting and service bureau use.[2]
Programs
Support. Puppet Support Services are provided at the Standard or Premium level stated in the Order Form. Unless the Order Form says otherwise, Puppet Enterprise is sold on a subscription basis with support included in the licence fees. No support is available for a free trial (catalog rule).[1]
Term. The Puppet Core licence is time-based. Its default subscription term is twelve months unless the Order states otherwise (catalog rule).[2] Orders under the Master Terms renew automatically unless notice is given 45 days before the end of the term.[5]
Puppet Core Developer Program. The developer licence is limited, non-commercial and revocable. It allows internal installation to develop or test modules for the developer’s own use, for the Puppet Forge or for its customers. There is no fee while Managed Nodes do not exceed 25. Perforce reserves the right to audit (catalog rule).[3]
Modules. Modules bundled with Puppet Enterprise are licensed under the Agreement. Modules from the Puppet Forge carry their own licences. Perforce does not support Forge modules unless it indicates otherwise.[1]
Out of scope
This article does not cover open source Puppet’s own licence, Puppet Forge module licences, Puppet Edge pricing, the CIS-CAT Pro Assessor licensed from CIS, or the Puppet trademark policy.