Skip to main content
InfraGap.com Logo
Home
Getting Started
Core Concept What is a CDE? How It Works Benefits CDE Assessment Getting Started Guide Inner Loop vs Outer Loop Environment Drift Local vs Cloud CDEs for Startups
AI & Automation
AI Coding Assistants Agentic AI AI-Native IDEs Agentic Engineering AI Agent Orchestration AI Governance AI-Assisted Architecture Shift-Left AI LLMOps Autonomous Development AI/ML Workloads CDEs for Data Science GPU Computing
Agent Infrastructure
Agent Experience (AX) Agent Egress Control Computer Use Agents Agent Evals Agent Runbooks Agent Client Protocol AGENTS.md MCP Servers Git Worktrees Kubernetes Agent Sandbox Agent Fleets Agent Identity Prompt Injection Defense Agent Observability Context Engineering AI Code Review Bottleneck Headless Agents in CI Spec-Driven Development Agent Readiness Code Provenance
Implementation
Architecture Patterns DevContainers Advanced DevContainers Language Quickstarts IDE Integration CI/CD Integration Platform Engineering Developer Portals Container Registry Multi-CDE Strategies Remote Dev Protocols Nix Environments Hermetic Builds OpenTofu for CDEs Kubernetes Development
Operations
Performance Optimization High Availability & DR Disaster Recovery Monitoring Capacity Planning Multi-Cluster Development Troubleshooting Runbooks Ephemeral Environments Sandbox Environments Workspace Snapshots Database Branching
Security
Security Deep Dive Zero Trust Architecture Secrets Management Vulnerability Management Network Security IAM Guide Supply Chain Security Air-Gapped Environments AI Agent Security MicroVM Isolation Compliance Guide EU AI Act Cyber Resilience Act Data Residency Governance
Planning
Pilot Program Design Stakeholder Communication Risk Management Migration Guide Cost Analysis FinOps GreenOps Vendor Evaluation Training Resources Developer Onboarding Team Structure Platform Maturity Model Open Source CDEs AI Productivity Paradox Build vs Buy DevEx Metrics Productivity Engineering Industry Guides CDEs for Healthcare CDEs for Financial Services CDEs for Government Edge Development WebAssembly in CDEs
Resources
Tools Comparison State of CDEs 2026 Isolation Decision Tool Template Library
Learning Paths
All Paths Platform Engineer Security and Compliance Engineering Manager
Vendor Reviews
GitHub Codespaces Coder Ona Google Workstations Microsoft Dev Box Okteto Eclipse Che DevPod Daytona E2B
Head to Head
Coder vs Codespaces Coder vs Ona Ona vs Codespaces Coder vs Okteto Self-Hosted vs Managed E2B vs Daytona CDE Market Guide CDE vs Alternatives Case Studies Lessons Learned Glossary FAQ Sources & Citations

CDE vs Alternatives

Cloud Development Environments compared to local development, AI-native IDEs, DevContainers, VDI, SSH, and traditional approaches

Development Environment Approaches

There are many ways to set up developer environments - from traditional local setups to AI-native IDEs and cloud platforms. Each has strengths and weaknesses. This guide helps you choose based on your security, compliance, AI strategy, team size, and infrastructure needs.

CDE vs Local Development Traditional laptop-based coding

Local Development: Developers install tools directly on their laptop (macOS, Windows, Linux). Clone Git repos, install runtimes (Node.js, Python, Java), run databases, and execute builds locally. The original development model.

When it makes sense: Solo developers, offline work, simple projects with no compliance requirements, teams with identical hardware.

Local Development

Works offline - no internet required
Zero latency - instant IDE response
Full control over environment
No cloud costs - use existing hardware
Mature workflow - decades of tooling
"Works on my machine" syndrome - environment drift
Security risk - source code on laptops
Onboarding often takes days (dependency hell)
Hardware limitations - no GPU/high RAM workloads
Lost laptops = lost IP - data exfiltration risk

Cloud Development Environment

Code never on laptop - stays in VPC/data center
Standardized environments - no drift
Onboarding in minutes - spin up pre-configured workspace
Scalable resources - CPU/RAM/GPU sized per workspace
Compliance-friendly - HITRUST, SOC2, GDPR
Requires internet connection - network dependency
Slight latency - depends on network speed
Cloud costs - infrastructure needed
Platform engineering required - team needs expertise

Verdict: CDEs win for teams with security/compliance needs or scaling challenges. Local dev wins for solo developers and offline-first workflows.

CDE vs Local DevContainers VS Code + Docker Desktop locally

Local DevContainers: Docker containers running on your laptop via Docker Desktop. VS Code Remote Containers extension connects your IDE to the container. You get reproducible environments without leaving your machine.

When it makes sense: Teams wanting reproducibility without cloud infrastructure. Good for macOS/Linux users with modern laptops.

Local DevContainers

Reproducible - same container for everyone
Works offline - containers run locally
No cloud costs - free Docker Desktop
Fast startup - containers boot in seconds
DevContainer standard - portable configs
Code still on laptop - security risk
Docker Desktop required - licensing costs for teams
Limited resources - still bound by laptop hardware
Windows performance issues - WSL2 required
No centralized management - decentralized setup

Cloud Development Environment

DevContainer compatible - use same configs
Code stays in cloud - meets compliance
Scales past laptop limits - large RAM and GPU instances
Centralized control - platform team manages
Works on cheap laptops - Chromebook OK
Requires internet - no offline mode
Infrastructure costs - cloud compute expenses
Initial setup - platform engineering needed

Verdict: Local DevContainers are a stepping stone. If reproducibility matters, eventually security/scale push you to CDEs.

CDE vs VDI/Virtual Desktops Citrix, VMware Horizon, Windows 365

VDI (Virtual Desktop Infrastructure): Full remote Windows/Linux desktop streamed to your device. Traditional enterprise solution for secure remote access. Developers get a complete OS (desktop, browser, Office, IDE).

When it makes sense: Organizations already invested in Citrix/VMware. Non-developer teams need same infrastructure. Legacy desktop apps required.

VDI/Virtual Desktops

Full desktop - all apps available
Existing IT tooling - familiar to IT teams
Code stays in data center - compliance OK
Supports any OS - Windows, Linux, macOS
Heavy resource usage - streams entire desktop
Expensive - per-seat licensing on top of always-on VMs
Poor dev experience - laggy GUI, no native IDE feel
Not infrastructure as code - manual setup
Permanent machines - always-on costs
Environment drift returns - users customize desktops

Cloud Development Environment

Lightweight - only terminal/IDE connection
Native IDE - use local VS Code/JetBrains
Infrastructure as code - Terraform templates
Ephemeral - auto-stop saves money
Built for developers - dev-specific features
Lower cost - you pay for compute hours, not desktop seats
No drift - fresh workspace from template
Developer-only - not for general workforce
New platform - separate from existing VDI

Verdict: CDEs win for developers. VDI is overkill, expensive, and delivers poor dev experience. Only use VDI if forced by existing infrastructure.

CDE vs AWS Cloud9 Closed to new customers

Status: AWS closed Cloud9 to new customers on 07-25-2024. The service is in maintenance mode and receives no new features. AWS has not announced an end-of-life date, and Cloud9 is not on the AWS full-shutdown list - existing environments keep running. AWS points users to the AWS IDE Toolkits and AWS CloudShell.

AWS Cloud9: Amazon's browser-based IDE with an integrated terminal, running on EC2 instances in your own account with deep AWS service integration. It was widely used for serverless and Lambda development.

What changed: developers moved to native editors with remote extensions, and the browser-only IDE model stopped competing with that. Note the practical difference between "closed" and "deprecated": there is no deadline forcing you off Cloud9, but there is also no roadmap, so migration is a planning decision rather than an emergency.

AWS Cloud9 (Closed to new customers)

AWS integrated - native service access
Simple setup - launched in minutes
Lambda debugging - built-in SAM support
Pay-per-use - only EC2 costs
Closed to new customers since 07-25-2024
AWS lock-in - can't use on GCP/Azure
Browser IDE only - can't use VS Code/JetBrains
Maintenance mode - no new features, no roadmap
No centralized management - per-user setup

Cloud Development Environment

Multi-cloud - AWS, GCP, Azure, on-prem
Use your IDE - VS Code, IntelliJ, PyCharm
Full IDE features - extensions, debugging, IntelliSense
Terraform templates - infrastructure as code
Platform control - centralized management
AI agent ready - Coder ships MCP server support and Coder Agents
Any language/stack - not vendor-specific
More setup - requires platform engineering
Learning curve - team needs to learn platform

Verdict: Cloud9 is a dead end even without a shutdown date - a service closed to new customers cannot be a standard for a growing team. If you are on it, migrate on your own schedule to a CDE (Coder, Codespaces), or use AWS CloudShell for quick tasks.

CDE vs SSH to EC2/VM Traditional remote development

SSH to EC2/VM: Manually provision a cloud VM (EC2, GCE, Azure VM). SSH in. Install tools. Edit files via SSH or VS Code Remote SSH extension. The original "cloud dev" approach.

When it makes sense: Solo developers, quick prototypes, teams without platform engineering resources, legacy workflows.

SSH to EC2/VM

Simple - no platform needed
Flexible - full root access
Code off laptop - cloud-based
Works with VS Code Remote SSH
Any cloud - AWS, GCP, Azure, DigitalOcean
Manual setup - install everything yourself
No standardization - every dev's VM is different
Security risks - SSH keys, open ports, manual patching
Always-on costs - devs forget to stop VMs
No management - no visibility, no control

Cloud Development Environment

Automated setup - Terraform templates
Standardized - everyone gets same environment
Secure - centralized auth, no SSH key management
Auto-stop - workspaces shut down when idle
Managed - platform team has visibility and control
Same IDE - VS Code Remote SSH still works
Ephemeral - fresh workspace from template
Platform overhead - requires setup and maintenance

Verdict: Manual SSH is where teams start. CDEs are where they end up after hitting scaling/security/cost challenges.

CDE vs AI-Native IDEs Cursor, Windsurf, Replit Agent

AI-Native IDEs: A new category of development tools built around AI-assisted coding. Cursor and Windsurf fork VS Code to add deep AI integration (inline edits, multi-file agents, chat with codebase). Replit offers a full cloud IDE with autonomous agents. These tools focus on individual developer productivity through AI pair programming.

When it makes sense: Individual developers wanting maximum AI assistance, small teams without compliance needs, rapid prototyping. These solve a different problem than CDEs - they optimize the coding experience, not the infrastructure.

AI-Native IDEs

AI-first - agents handle multi-file edits autonomously
Tight AI loop - inline edits and codebase-aware chat
Familiar UX - based on VS Code (Cursor, Windsurf, Void)
Simple per-seat subscription, no infrastructure to run
Quick setup - install and start coding
Code still on laptop - same security risks as local dev
No environment standardization - each dev differs
No compliance story - code leaves your network
No centralized control - no platform management
Vendor risk - fast-moving market, acquisitions common

Cloud Development Environment

Secure infrastructure - code stays in VPC
AI agents supported - Coder Agents and MCP server support
Use AI IDEs remotely - Cursor/Windsurf connect via SSH
Standardized - everyone gets same environment + AI tools
Compliance-friendly - HITRUST, SOC2, GDPR ready
Platform control - manage AI tool access centrally
Scalable compute - AI workloads need GPU/high RAM
Platform setup needed - more initial investment
Higher cost - infrastructure + AI tool licenses

Verdict: AI-native IDEs and CDEs are complementary, not competing. A common setup is to run Cursor or Windsurf locally and connect it to a remote CDE workspace, so the AI tooling is local while the code and compute stay in your network. Coder supports agent workflows directly through its MCP server support and, from beta on 05-06-2026, Coder Agents.

Self-hosted CDE vs Managed CDE Coder or Okteto vs GitHub Codespaces/Ona (formerly Gitpod)

The final decision: once you have committed to CDEs, do you self-host (Coder, Okteto, Eclipse Che, DevPod) or buy a managed service (GitHub Codespaces, Ona)? This is control versus convenience.

Check what "self-hosted" actually means before you commit. The word has been stretched. Ona has no customer-managed self-hosted edition: its Enterprise runners are Ona-managed and deployed into your own AWS or GCP VPC, so your code and execution stay in your network while the control plane stays with Ona. Daytona left this comparison entirely - it pivoted to AI agent sandbox infrastructure and no longer sells a developer workspace product. The platforms where you genuinely run the control plane yourself are Coder, Okteto, Eclipse Che, and (client-side only) DevPod.

Key question: Do you need data to stay in your VPC/data center? Do you have platform engineering resources? Do you need AI agent governance?

Managed CDE (Codespaces/Ona)

Zero infrastructure - vendor manages everything
Fast setup - minutes to start
Great UX - polished, well-tested
No platform team needed - developers self-serve
Automatic updates - always latest features
Usage billing adds up - Codespaces charges per compute-hour and storage-GB, not a flat seat fee
Code in vendor cloud - compliance issues
Limited customization - vendor's infrastructure
Vendor lock-in - hard to migrate out
No air-gapped deployments - internet required

Self-hosted CDE (Coder/Okteto/Eclipse Che/DevPod)

Full control - your VPC, your rules
Deploys inside your existing compliance boundary and audit tooling
Free open-source tiers exist (Coder Community, Okteto, Eclipse Che, DevPod)
Maximum flexibility - Terraform = anything
AI agent governance - enforce policies on AI-generated code
Air-gapped option - on-prem or private cloud
No vendor lock-in - portable infrastructure
Platform team required - operational overhead
Longer setup - days to weeks
Manual updates - you manage upgrades

Verdict: Regulated industries (healthcare, finance, defense) need self-hosted. Startups and small teams often prefer managed SaaS.

Decision Matrix - All Approaches Compared

CriteriaLocal DevDevContainersVDIAI IDEsSSH/EC2Managed CDESelf-hosted CDE
Security (Code off laptop) Poor Poor Good Poor Good Vendor cloud Excellent
Compliance (HITRUST/SOC2) No No Possible No Manual Limited Excellent
Performance (Latency) Instant Instant Laggy Instant Good Good Good
AI Integration Via plugins Via plugins Poor Native Via plugins Good Agent-ready
Flexibility (Infrastructure) Laptop only Containers VMs only Laptop only Good Vendor Terraform
Ease of Use (Setup time) Days Hours Days Minutes Hours Minutes Minutes*
Cost model Hardware only Hardware + Docker licensing Per-seat + always-on VMs Per-seat subscription Cloud compute hours Metered compute + storage Cloud compute + platform time
Scalability (Resources) Laptop max Laptop max VMs Laptop max Cloud VMs Limited Cloud-scale
Standardization Drift Excellent Possible Drift Drift Good Excellent
Offline Work Yes Yes No Partial No No No
Platform Eng. Required No No IT team No No No Yes

* After platform setup complete

Decision Tree - Choose Your Approach

Do you need source code off developer laptops? (Security/Compliance)

YES - Go to Question 2

NO - Go to Question 5

Question 2: Are you in a regulated industry? (HITRUST, SOC2, GDPR, FedRAMP)

YES - Self-hosted CDE required

Recommendation: Coder (Terraform flexibility, control plane in your network) or Okteto (Kubernetes-native, self-hosted or BYOC). Data must stay in your VPC/data center.

NO - Go to Question 3

Question 3: Do you have a platform engineering team?

YES - Self-hosted CDE gives you flexibility

Recommendation: Coder (Terraform power, agent governance), Eclipse Che (Kubernetes-native, fully open source) or DevPod (client-only, free).

NO - Go to Question 4

Question 4: Is budget a concern?

YES - Managed CDE might be expensive at scale

Recommendation: Start with GitHub Codespaces (if already on GitHub) or DevPod (free, open-source). Consider self-hosted Coder or Okteto if the team grows. Model Codespaces in core-hours, not clock hours - the free allowance is smaller than it looks.

NO - Managed CDE is easiest

Recommendation: GitHub Codespaces (GitHub users) or Ona (agent workflows, multi-Git) - noting that OpenAI announced on 06-11-2026 that it is acquiring Ona and the deal has not yet closed.

Question 5: Is offline work critical?

YES - Go to Question 6

NO - Cloud development is fine

Recommendation: Consider Managed CDE for convenience, AI IDE + CDE for productivity, or SSH to EC2 for simplicity.

Question 6: Do you need reproducible environments?

YES - Use DevContainers locally

Recommendation: VS Code DevContainers with Docker Desktop. Works offline, reproducible.

NO - Traditional local development

Recommendation: Local development on laptop. Simple, no complexity.

Hybrid Approaches - Mix and Match

By Team Type

Different teams can use different approaches based on their needs.

Backend/Security Team: Self-hosted CDE (Coder) - handles sensitive data
Frontend Team: GitHub Codespaces - fast iteration, public repos
Mobile Team: Local DevContainers - need macOS for Xcode
Data Science/AI Team: Self-hosted CDE (Coder or Okteto) - need GPUs and high RAM; pair with a dedicated agent sandbox if you run AI-generated code

By Project Lifecycle

Use different approaches at different project stages.

Prototyping: AI IDE (Cursor/Windsurf) or Replit Agent - fast AI-assisted experimentation
Active Development: CDE (managed or self-hosted) - team collaboration
Debugging Production: SSH to EC2 - direct access to production-like environment
Maintenance: Local DevContainers - quick fixes, no cloud needed

Migration Strategy

Gradually transition from local to cloud development.

Phase 1: Add DevContainer configs to repos (works locally and in CDEs)
Phase 2: Pilot with 5-10 developers on managed CDE (GitHub Codespaces) or DevPod
Phase 3: Expand to 50% of team, add AI IDE support (Cursor/Windsurf via SSH)
Phase 4: If compliance needed, migrate to a self-hosted CDE (Coder, Okteto, or Eclipse Che)
Phase 5: Full rollout with AI agent governance, retire local dev for most teams

By Developer Location

Consider network quality and developer distribution.

Office Workers: CDEs work great - fast corporate internet
Remote (Good Internet): CDEs or SSH to EC2 - latency acceptable
Remote (Slow Internet): Local DevContainers - minimize network dependency
Frequent Travelers: Local development - offline work required