1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
|
Free and open source software enables the world as we know it. From web servers to kiosks to the big data algorithms mining your Facebook feed, nearly every computer system you interact with runs, at least in part, on free software. Free software has given rise to a galaxy of startups and enabled the [largest software acquisition](https://arstechnica.com/information-technology/2018/10/ibm-buys-red-hat-with-eye-on-cloud-dominance/) in the history of the world.
Free software is a gift. It's the gift that made the world as we know it possible. It's an astounding gift to give. So astounding in fact that it made businesses unaccustomed to this kind of generosity uncomfortable. They weren't unwilling to use free software, it was too radical and by extension, too political. It had to be renamed "open source."
Once that happened open source software took over the world.
Recently though there's been a disturbance in the open source force.
Redis Labs, MongoDB, and Confluent all changed their software licenses in recent months, moving away from open source licenses to more restrictive terms that limit what can be done with the software, making it no longer open source software.
The problem, argue Redis Labs, MongoDB and others, is hosted software services. Also known as, "the cloud." Also known as Amazon AWS.
## Cloud Burst
MongoDB the company is built around the open source "NoSQL" database of the same name. MongoDB's database is useful for storing unstructured data, for example images, which it can handle just as well as it handles more traditional data types. Data is stored in JSON-like documents rather than the columns and rows of a relational database. Since there's no structured tables there's no "structured query language" for working with the data, hence the term "NoSQL."
MongoDB is not the only NoSQL database out there, but it's one of the most widely used. According to industry aggregator, DB Engines, MongoDB is the [fifth most popular database](https://db-engines.com/en/ranking), with everyone from Google to Code Academy to Foursquare using MongoDB.
MongoDB is also leading the charge to create a new kind of open source license, which CTO Eliot Horowitz believes is necessary to protect open source software businesses as computing moves into the new world of the cloud.
The cloud, argue Horowitz and others, requires the open source community to re-think and possibly update open source licenses to "deal with new challenges in a new environment." The challenges are, essentially, AWS, Google Cloud and Microsoft Azure, which are all capable of taking open source software, wrapping it up as a service and reselling it. The problem with AWS or Azure wrapping up MongoDB and offering it as part of a software as a service (SaaS), is that it then competes with MongoDB's own cloud-based SaaS -- MongoDB Atlas. What's threatened then is not MongoDB's source code, but MongoDB's own SaaS derived from that source code, and which is the company's chief source of revenue.
To combat the potential threat to its bottom line, MongoDB has moved from the Gnu Public License (GPL) to what it calls the Server Side Public License, or SSPL. The SSPL says, in essence, you can do anything you want with this software, except use it to build something that competes with MongoDB Atlas.
MongoDB has submitted the SSPL to the Open Source Initiative (OSI), the organization that oversees and approves new open source licenses, but the approval process is still in the early review stages. That said, judging by discussion on the mailing lists, and the wording of the license, the SSPL is unlikely to ever be approved by the OSI, at least as it's currently written.
Part of MongoDB's problem is that it's not the first open source business to run into this situation. In fact, part of this problem -- companies taking software, using it as they please and contributing nothing back -- is the reason open source software exists at all.
Open source licenses vary, but the gist is generally, you can take this code and do what you want with it, but you can’t make the code proprietary, and if you use it in another project, then that project can’t be proprietary either. These licenses were written this way to prevent companies from taking open source code, using it in their own code and not sharing any of it back to the original project.
Horowitz argues that wrapping a piece of code in a SaaS offering is the modern equivalent of using it in an application.
It is a novel argument, but it's in defense of a very old problem that goes well beyond licensing. It's a problem that goes all the back to the beginning of free software -- how do you make money off software if you give it away for free?
One traditional answer has been that you sell services around your open source software. But for Horowitz that's not good enough. "Monetizing open source with support contracts has never been a great business model," he tells Ars. Red Hat would likely disagree, but Horowitz believes that more protective licenses would bring more venture capital investment and spawn more software businesses based on the open model MongoDB has used. "We're unique," he says, "I want us to be less unique."
He may be correct. A more protective license could induce more venture capital investment because there's (arguably) a greater likelihood of return on their investment. But if that capital did come, it wouldn't be investing in open source because that kind of restriction on the software means it no longer fits the definition of open source.
Quite a few open source advocates have already made the counter argument that the current set of licenses are fine, it's the business models that need work.
Bruce Perens, co-author of the original [open source definition](https://opensource.org/docs/osd), says the SSPL is incompatible with the OSI's open source definition number nine, which says that the "license must not restrict other software." Since the SSPL forces any SaaS software that is aggregated with the covered software, but not a derivative of it, to nevertheless be open source, it fails this test. "I wrote number nine into the OSD to prohibit exactly this sort of conduct," says Perens, "the text is really clear."
MongoDB is not the only one complaining that the cloud is raining on its profits.
Redis Labs, another data storage company, was the first to sound the alarm about cloud providers threatening its business and may have the better solution. Redis Labs initially changed its license to include something called the Common Clause sub-license, which forbids anyone from selling any software it covers. Software licensed with the Common Clause is not, by anyone's definition, open source, which the company Labs acknowledged. It has never described those portions of its software as open source.
As this article was wrapping up Redis Labs made yet another licensing change, in essence dropping all pretense of being open source software and adopting a homegrown proprietary license for some of its modules. To be clear, most of Redis is governed by the Apache 2.0 License, but some modules are not, namely RedisJSON, RedisSearch, RedisGraph, RedisML and RedisBloom.
The license that applies to these modules says that while users can view and modify the code, use it in their applications, it restricts which types of applications they can build. With this new license you are not free to build anything you want. You cannot build database products, a caching engine, a processing engine, a search engine, an indexing engine or any kinds of ML or AI derived serving engine. You cannot in other words use Redis Labs' code to compete with Redis Labs. This violates one of the core tenants of open source licensing -- that there be no restrictions on derivative software.
This is the same sort of protection MongoDB also wants, but MongoDB wants to retain the open source label.
Unfortunately for MongoDB it doesn't make sense to simultaneously say that you are open source, and that only you should profit from your open source software. There *is* a business model where than does make sense: proprietary software.
## Lessons from history
Why does MongoDB want to be open source at all? After all there is no shortage of very successful proprietary software, so why not embrace that path and move on?
Horowitz tells me he believes "that open source results in better systems software, especially databases," going on to cite security and community as advantages of remaining open source. While he's right about both of those things, those are often cited as reasons to use open source software, more eyes on the software means fewer bugs, in theory anyway.
But looking at the working of the OSD, it's clear that Horowitz is missing one key component that's built into to every open source license -- generosity. Open source does not limit what you can do with the software, ever. And that may well be the reason for its success. Generosity of this kind is how you get community, the cornerstone on which any successful open source project is built. By allowing the widest possible range of users to use your software you get the biggest possible community. More eyes on bugs, more people fixing them. That community is what turns into momentum. That momentum becomes market share. Market share sometimes becomes profit, but that's not a promise of open source.
As Bruce Perens puts it, "we have to draw a line between open source... and the right to make money with open source. The open source definition allows, but does not support your right to make money. We're not going to change the rules because you can make money better that way."
Just because you build it and they come, does not mean massive profit.
In fact, if you build it and they come and then you take it away, it might be worse than if you'd never built it.
Redis Labs' move away from open source comes after it reaped all the benefits of open source -- community support, wide adoption and code contributions from a widespread sources. To put it bluntly, Redis Labs angered the community.
When free software developers get mad, they get forking, and there is indeed a fork of Redis, [GoodFORM](https://goodformcode.com/). GoodFORM takes the re-licensed Redis modules as they were prior to the license change, and will maintain them for Debian, Fedora and other Linux distros that cannot ship proprietary software.
The unintended consequence of Redis Labs' new license is that anyone wanting to use a full and open source version of Redis will have to use GoodFORM, not Redis.
Individual developers might not much care, but large companies looking to use open source software aren't so cavalier. For them it usually comes down to a choice, either use clearly open source software with an OSI approved license, or call the lawyers. And no one ever wants to call the lawyers just to install a piece of software.
Perens tells Ars that this was one of the key motivations behind the intimal open source definition (originally written for the Debian project). "The open source definition means that you shouldn't need a lawyer just to be a user," says Perns. "And one of the ways we do that is minimizing the legal load."
Redis Labs' new license puts companies in the position of needing a lawyer, and GoodFORM becomes the more logical choice. This also may hint at why MongoDB wants to remain open source.
Other open source projects which have changed to closed source licenses have not fared well. The Xfree86 project was the defacto standard for running X Windows for most of the 1990s, up through the early 2000s. In 2004 Xfree86 began shipping code that the Free Software Foundation felt was counter to the GPL. The downstream operating systems using Xfree86 decided that was unacceptable and a fork, X.org, was born. Today X.org occupies the place Xfree86 once did and Xfree86 is abandoned.
Other examples are easy to find, LibreOffice forked from OpenOffice, MariaDB came out of license changes in MySQL, Wireshark came out of Ethereal, the list goes on, but the key thing to note is not just that the forks happened, but that they took with them the developers, the community, the momentum that sustains open source software over the long haul. Lose the goodwill of the open source community and it can be vicious in exacting its revenge. It's also efficient in doing so, Xfree86 was effectively dead six months after X.org began, OpenOffice disappeared into irrelevancy similarly quickly.
The overwhelming lesson of open source history is that once you are open source, it's very unlikely you will change that and survive.
## What makes open source work: generosity
If open source history teaches that there is no going back, it's worth considering why.
After years of using Quickbooks to appease accountants, I got fed up with it. I looked around for some open source accounting software and stumbled across something that fit my needs, [Beanbooks](https://beansbooks.com/opencode), a little project spun out of Linux computer manufacturer System76.
System76's Beanbooks is a perfect example of what Perens sees as an ideal open source software scenario. In <cite>The emerging economic paradigm of Open Source</cite> Perens argues that a company's non-differentiating software is its best scenario for open source software. That is, open source the infrastructure of the business, not the core.
To put it another way, Beanbooks was not System76's profit center, but it is an enabling technology for System76's profit center -- building Linux-based computers.
However, despite being a perfect candidate for an open source license, Beanbooks is not open source. Why?
System76 sells a hosted version of [Beanbooks](https://beansbooks.com/opencode), a SaaS, and at the time the company was worried that a larger company would come along, take the GPL code, essentially clone Beanbooks and get all the profit from System76's investment.
System76 founder Carl Richell says he can empathize with MongoDB and Redis Labs, but he has already been down the worry-about-someone-stealing-your-code-for-competing-SaaS road and regrets it. "Our concern was that someone would wrap up the software and we would lose all our investment." He says System76 wanted something like patent protection for a few years, but that "ended up hurting us, hurting the platform, and we shouldn't have had those concerns."
While the SaaS version of Beanbooks looks to be fine, the available code does not get updates and is, from a free software perspective, fairly useless. The Github page is a ghost town. There's no development, no community.
Beanbooks the service carries on, but it does so without a community contributing ideas, code and everything else vibrant open source projects have. Richell thinks Beanbooks might have avoided its fate if it had a GPL or similar license from the beginning.
"If it was good enough that someone wanted it that's great," says Richell. The key to success for Ritchell isn't the open source software, it's the innovation. "Differentiation is not what you've done today, but how rapidly you can advance," he says. As the software developer you have a head start, and, hopefully, a vision of where you are going, those are your differentiators, to use Perens' terms.
"The only way to be successful is to stay ahead," says Richell, "I don't think the license has anything to do with it."
## What the future looks like
Everyone loves an underdog, and Redis Labs and MongoDB want to portray themselves as the open source underdogs waging a heroic battle against the forces of evil in the form of AWS. But are they?
Redis Labs and MongoDB both look like very healthy companies. Redis Labs just raised $60 million dollars in funding and, based on the companies doing the funding, looks poised for a successful IPO. MongoDB's IPO last year was, by all accounts, a huge success. It's stock IPOed at $24 and has steadily climbed ever since then. Today it trades at at around $100 a share. Just before this article went to press one of MongoDB's biggest users, Lyft, did defect to Amazon, but after a slight stock drop, MongoDB's stock was right back up where it was before Lyft defected.
Neither company is hurting. At least not yet. The fallout from their license changes remains to be seen, but given that much of the development of MongoDB comes from employees, it will likely be fine regardless of whether it's open source or not. The fate of either is unimportant to the fate of the larger open source paradigm.
The open source paradigm doesn't work for everyone. As Perens put it in a conversation we had as I was wrapping this up, "you can use any license you want as long as you don't call it open source, that's your freedom. But we have certain rights that come with open source it doesn't make sense to give these up to protect a business model."
Through all the conversations I had with developers and founders, one line kept coming back to me. System76 founder Carl Richell told me: "if generosity isn't built into open source, it isn't going to work."
Generosity in this case is the right to use the software for any purpose.
This has always been the basic litmus test for new open licenses -- is the license limiting the generosity of the software? What got open source where it is today is that it could be used anywhere, with anything. Need to combine open source and proprietary software? No problem. Need to re-write that open source library so it can interface with your proprietary code? No problem. Want to take that open source library, wrap it up as a service and sell it? No problem. Because in the end, that's what open source is: freedom through generosity. And as Perens points out, that's what it is even when that model doesn't work for a particular business.
|
