Spring Boot

Spring Boot
Pivotal Software, Inc. · CC BY-SA 2.0 · source
Name	Spring Boot
Developer	Pivotal Software
Initial release	2014
Latest release	(check project page)
Repository	GitHub
Written in	Java
License	Apache License 2.0

Spring Boot

Spring Boot is an open-source framework that simplifies building production-ready applications on the Java (programming language) platform, providing opinionated defaults, auto-configuration, and embedded servers to accelerate development. It builds on the Spring Framework, integrates with projects like Project Reactor, Hibernate ORM, and Jackson (library), and is maintained by organizations including VMware and contributors across the Apache Software Foundation ecosystem. Widely used in enterprise contexts such as Netflix, Amazon Web Services, and Google Cloud Platform deployments, Spring Boot emphasizes convention over configuration and microservice-friendly patterns.

Overview

Spring Boot packages opinionated configurations and starter dependencies to reduce boilerplate when developing Java (programming language) applications, enabling rapid prototyping and streamlined delivery pipelines compatible with Kubernetes, Docker, and OpenShift. It provides embedded servers such as Apache Tomcat, Jetty (web server), and Undertow to run applications as self-contained artifacts deployable to cloud platforms like Heroku, Microsoft Azure, and IBM Cloud. The project interacts with build tools and CI/CD systems like Maven, Gradle, Jenkins, GitHub Actions, and GitLab CI/CD to support automated testing and release workflows.

History and development

Spring Boot originated within the Pivotal Software engineering group as a response to complexity in configuring the Spring Framework and related projects, drawing inspiration from frameworks and tools used at Netflix and ThoughtWorks. Early releases focused on simplifying microservice construction amid rising interest following publications such as the 12-factor app manifesto and architectural patterns promoted by organizations like Amazon Web Services and Google. Development has been coordinated through repositories on GitHub with contributions from corporate sponsors including VMware, academic collaborators affiliated with Massachusetts Institute of Technology, and independent developers active in events such as JavaOne, Devoxx, and SpringOne Platform.

Core concepts and architecture

Key concepts include auto-configuration, opinionated starters, and the actuator endpoints. Auto-configuration inspects classpath components such as Hibernate ORM, Thymeleaf, Jackson (library), and Logback to wire beans automatically, influenced by inversion of control ideas from the Spring Framework and patterns discussed in works like those by Martin Fowler and Rod Johnson. Starters group dependencies for concerns including web, data access, messaging, and security—integrating with projects like Spring Data, Spring Security, Spring MVC, Spring WebFlux, and Spring AMQP. The actuator exposes operational endpoints that map to monitoring solutions including Prometheus, Grafana, New Relic, and Datadog. The architecture supports reactive stacks using Project Reactor and integration with asynchronous runtimes such as Netty.

Features and components

Spring Boot offers features including embedded containers (Apache Tomcat, Jetty (web server), Undertow), starters for Spring Data, Spring Security, and Spring Batch, configuration management via Spring Environment and profiles, and production-ready capabilities like the actuator and health indicators connecting to systems like Consul, Eureka (service registry), HashiCorp Vault, and Keycloak. Integration libraries and dependencies span Hibernate ORM, MyBatis, JPA, MongoDB, Redis, and Elasticsearch clients. Support for serialization and deserialization leverages Jackson (library), Gson, and ProtoBuf standards used in projects like gRPC. Testing support aligns with JUnit, Mockito, Testcontainers, and Spring TestContext Framework.

Ecosystem and integrations

The Spring Boot ecosystem interoperates with cloud providers and platforms including Amazon Web Services, Microsoft Azure, Google Cloud Platform, and container orchestration systems like Kubernetes and OpenShift. It integrates with configuration and discovery tools such as Spring Cloud Config, Consul, Eureka (service registry), and secret management like HashiCorp Vault. Messaging and streaming integrations include Apache Kafka, RabbitMQ, ActiveMQ, Amazon SQS, and Google Pub/Sub. Observability integrates with Prometheus, Grafana, Zipkin, Jaeger (tracing), and OpenTelemetry. Build and dependency ecosystems include Maven, Gradle, Bazel, and CI/CD platforms like Jenkins, Travis CI, and GitHub Actions.

Adoption and use cases

Organizations across sectors—such as Netflix, Zalando, Expedia Group, Ticketmaster, and Spotify—use Spring Boot to build microservices, web applications, batch processing pipelines, and API gateways. Common use cases include backend REST APIs integrated with Hibernate ORM and PostgreSQL, event-driven systems using Apache Kafka and RabbitMQ, serverless adapters targeting AWS Lambda and Azure Functions, and data pipelines interfacing with Apache Spark and Apache Flink. Spring Boot is favored in enterprise modernization programs at firms like ING Group and Deutsche Bank for migration from legacy Java EE stacks to cloud-native architectures promoted at conferences such as KubeCon.

Security and configuration practices

Security practices involve using Spring Security with OAuth 2.0 and OpenID Connect providers such as Keycloak, Okta, Auth0, and Azure Active Directory, applying principles from standards like RFC 6749 and OpenID Connect. Configuration best practices include externalizing properties via Spring Cloud Config, environment variables used in Docker containers, secrets stored in HashiCorp Vault or cloud provider secret managers like AWS Secrets Manager and Azure Key Vault, and profile-based configuration inspired by 12-factor app recommendations. Observability and compliance often rely on integrations with Prometheus, OpenTelemetry, and ELK Stack components such as Elasticsearch, Logstash, and Kibana for audit trails and incident response workflows aligned with guidance from organizations like NIST and standards promoted by OWASP.

Category:Java (programming language) frameworks