base-drink-base-ssl-2016-04-27

base-drink-base-ssl-2016-04-27

Transcript

1. ʹ͓͚Δ׬શSSLԽͷऔΓࠐΈͱࠓޙͷల๬ SHOHEI KOBAYASHI SITE RELIABILITY ENGINEER@BASE, INC.
2. ࣗݾ঺հΆ͍΍ͭ SHOHEI KOBAYASHI @ SITE RELIABILITY ENGINEERʢSREʣ ▸ ΍ͬͯΔ͜ͱ͸৽ن։ൃҎ֎ͷશ෦ ▸ ٕज़ج൫ͷઃܭͱ࣮૷ / αʔόϓϩϏδϣχϯά / ։ൃϑϩʔͷ վળˍτϥϒϧରԠ / αʔότϥϒϧରԠ / ूܭΠϯϑϥͷ࣮૷ ͱվળ / ࣾ಺γεςϜ԰΋݉຿ ▸ վળͷͨΊͷΞϓϦέʔγϣϯΤϯδχΞͱͯ͠ͷ࢓ࣄͱैདྷͷ ΠϯϑϥΤϯδχΞͱͯ͠ͷ࢓ࣄ͕6:4͘Β͍ ▸ CTOͷ͑;͠Μ͞Μͱ͸ϖύϘ࣌୅͔Βͷ10೥͘Β͍ͷ෇͖߹͍ ▸ ٕज़ΞυόΠβʔͷ͔ͥͿΖ͞Μͱ͸mixi࣌୅ྡͷ੮ͩͬͨ
3. લஔ͖ ৗ࣌SSLͱ͍͏ྲྀΕʹ͍ͭͯ ▸ ʮWebαΠτͷ৴པੑΛߴΊΔʯʮGoogleͷݕࡧॱ Ґ༏۰ʯͱ͍͏ϝϦοτʹΑΓαΠτͷҰ෦͚ͩͰ ͸ͳ͘શ෦httpsԽͷྲྀΕ͕Ͱ͖ͨ ▸ Google͕ൃදͨ͠SPDYˍHTTP/2ͷ࣮૷ʹΑΓ ʮhttpsԽͨ͠Β஗͍ʯͱ͍͏ৗ͕ࣝͳ͘ͳͬͨ
4. લஔ͖ ৗ࣌SSLͱ͍͏ྲྀΕʹ͍ͭͯ2 ▸ ࠃ಺ˍւ֎ͷେखϓϥοτϑΥʔϜ͕૬͍࣍Ͱৗ࣌ SSLԽΛൃදɻ ▸ httpsͷϖʔδ಺ʹhttpͷϒϩάύʔπ͕ೖ͍ͬͯΔ ͱΤϥʔʹͳΔͷͰαʔϏεΛఏڙ͢Δଆͱͯ͠͸ ৗ࣌SSLԽ͸ආ͚ΒΕͳ͍ྲྀΕ
5. ฐࣾͷͱΓ͘Έ ZERO STEP.
6. BASE͕໨ࢦ͢SSLԽͷऔ૊ BASEʹొ࿥͍ͯ͠ΔγϣοϓશͯΛHTTPSԽ ▸ BASE͔Βఏڙ͍ͯ͠ΔυϝΠϯͷγϣοϓɺಠࣗυ ϝΠϯͷγϣοϓ΋ؚΉશͯͷγϣοϓͰʮαΠτ৴ པੑʯʮSEOޮՌʯʮαΠτϨεϙϯε଎౓ʯͷ޲ ্Λ໨ࢦ͢ ▸ ͜ΕʹΑΓγϣοϓΦʔφʔ͞ΜˍγϣοϓΛར༻ ͍ͯ͠Δ͓٬༷ͷϢʔβମݧΛ޲্͢Δ
7. ఏڙυϝΠϯͷγϣοϓ ΛશͯHTTPSԽ 1ST STEP.
8. ఏڙ͍ͯ͠ΔυϝΠϯͷγϣοϓΛSSLԽ BASEͰ͸σϑΥϧτͰ10ݸͷυϝΠϯ͕࢖͑Δ ▸ ݱঢ়৽نొ࿥͢Δͱ10ݸͷυϝΠϯ͔ΒҰͭબͼɺ ͦͷαϒυϝΠϯͱ͍͏ܗͰγϣοϓ͕࡞੒Ͱ͖Δ ▸ ࡞੒׬ྃ͢ΔͱAll httpsͰΞΫηεͰ͖Δγϣοϓ͕ ࡞੒Ͱ͖Δʂ ->ରԠࡁΈͰ͢ʂ
9. ఏڙ͍ͯ͠ΔγϣοϓͷSSLԽ هࣄʹ΋ͯ͠΋Β͍·ͨ͠
10. ٕज़తͳத਎ ϚϧνυϝΠϯϫΠϧυΧʔυূ໌ॻΛELBʹઃఆ ▸ httpsԽʹ͸ূ໌ॻΛߪೖ͢Δඞཁ͕͋ΓαϒυϝΠϯશͯΛରԠ͢Δʹ ͸ *.thebase.inͱ͍ͬͨܗͷূ໌ॻ͕͍Δ ▸ ࢖͑Δෳ਺ͷυϝΠϯͷϫΠϧυΧʔυʹରԠͨ͠Ұຕͷূ໌ॻΛऔಘ
11. ಠࣗυϝΠϯͷγϣοϓ ΛશͯHTTPSԽ 2ND STEP.
12. ಠࣗυϝΠϯγϣοϓΛSSLରԠԽ ೉͕͍͔ؔͭ͘…… ->͜ͷ··ͩͱແཧΆ ▸ ELBʹ͸ূ໌ॻ͸Ұ͔ͭ͠ೖΕΒΕͳ͍ ▸ ಠࣗυϝΠϯγϣοϓશͯͷಠࣗυϝΠ ϯΛBASEࣾଆͰରԠ͸ෆՄೳ ▸ AWSͷELB͸HTTP/2ରԠͯ͠ͳ͍ <-ॏ ཁ
13. ಠࣗυϝΠϯγϣοϓΛSSLରԠԽ ->PRϚʔδ͞ΕͨΜͰ ɹ׬੒ͨ͠ΒผΠϕͰ࿩͠·͢ޤ͏͝ظ଴ʂ
14. ·ͱΊ ·ͱΊˍࠓޙ ▸ طଘγϣοϓ΋ଓʑରԠ͢ΔΑ ▸ ಠࣗυϝΠϯͰ΋ৗ࣌SSLରԠ͍ͯ͘͠Α ▸ ߴ଎Ͱ৴པੑͷ͋ΔαʔϏε໨ࢦ͕ͯ͠Μ͹ΔΑʂ ……ਐԽͨ͠BASEͷ Πϯϑϥʹ͍ͭͯ͸·ͨͲ͔͜Ͱ
15. ͓·͚ BASEͰ͸ຊ൪σʔλΛফͨ͜͠ͱ͋ΔΤϯδχΞืूͯ͠ΔΑ
16. GOSEITYO ARIGATO GOZAIMASITA!