Forwarder management: deployment server vs Chef

[responsys_cm]

I have very little experience with chef. I have a client with very high security requirements. I was wondering if anyone in the community can explain the costs and benefits of using the deployment server vs chef. I'm assuming the customer would want to use client certs with the deployment server.

Thanks.

[richgalloway]

If the client is already using Chef then they should continue to do so. Chef can do much more than a deployment server can. Even if they use a DS, they'll still need Chef to update the forwarder executable itself (something a DS can't do).