TDUCTFの実行基盤

さくらのクラウドにCTFのためのサーバを構築し、競技会場とVPNを張る話です。

Transcript

1. 5%6$5'ͷ࣮ߦج൫ ͨ͜·͝
   !DIJCJFHH
2. ࣗݾ঺հ w ɹɹɹɹɹͰϗεςΟϯά αʔϏεͷ։ൃ
   w 5%6$5'Πϯϑϥ
   w $5'ج൫ઃܭɾߏங
   w ηΩϡϦςΟରࡦ
3. $5'Ͱඞཁͳج൫ w είΞαʔό
   w αʔόɾ/8Πϯϑϥ
4. είΞαʔό w ຖ౓։ൃ͢Δͷ͸େม
   ˠ
   044ʹ͠Α͏
   w "1*Ͱૢ࡞ՄೳͳόοΫΤϯυ
   ˠ
   %KBOHP
   w ϑϩϯτΤϯυͱ׬શʹ෼཭
   ˠ
   &MFDUSPO !OPNVLFO !NJTPEFOHBLV !N[ZZ !OPNVLFO
5. είΞαʔό
   "1* w $5'ͰඞཁͳҰ௨ΓͷػೳΛ
   3&45
   "1*
   Ͱఏڙ
   w छʑͷ௨஌͸8FCTPDLFUͰϦΞϧλΠϜ௨஌
   w Ӆ͠ػೳ΋͋ΔΑ̇
7. είΞαʔό
   ϑϩϯτΤϯυ w ωΠςΟϒΞϓϦͰఏڙՄೳʹ
   w σβΠϯͷमਖ਼͕༰қ
   w ۓٸ࣌ʹ͸8FC൛΋ఏڙՄೳ
10. αʔόɾωοτϫʔΫ w ໰୊αʔό܈
    ͘͞ΒͷΫϥ΢υʹߏங
    w جװαʔό܈ %/4
    35
    '8
    είΞ
    ؂ࢹ
    w ձ৔ωοτϫʔΫ
    359౳
11. Docker as of 2015 8/30 11:00 CTF Conpetition Netwrok Service L3 L2 LXC endnode application Default Gateway 1000M 500M Virtual Coonection vlan id vlan *CONFIDENTIAL* Tagged Interface Untagged Interface Tunnel Tunnel Player Zone Servers Zone gs908m 172.19.0.0/16 gs908m 172.19.0.0/16 vswitch 172.16.0.0/24 vswitch 172.16.0.0/24 ubuntu gateway ubuntu gateway rtx1200 venue rtx1200 venue unknown 192.168.100.0/24 unknown 192.168.100.0/24 router 61.211.224.129 router 61.211.224.129 vrouter 27.133.136.145 vrouter 27.133.136.145 vswitch 27.133.136.144/28 vswitch 27.133.136.144/28 ubuntu score ubuntu score ubuntu watch ubuntu watch Admin Zone tductf2015 tductf2015 tductf2015-admin tductf2015-admin express5800 download express5800 download swx2200-8poe swx2200-8poe 100 aironet3502 aironet3502 lepus lepus lepus-demo lepus-demo log log zabbix zabbix dnsmasq dnsmasq squid3 squid3 eth1 eth0 LAN2 LAN1 LAN3 eth0 eth0 eth0 eth0 eth0 eth0 eth0 Tunnel1 ipip0 ͘͞ΒΠϯλʔωοτݚڀॴ ' ηϛφʔϧʔϜ eth0 LAN1 172.18.0.0/30 .1 .100 .110 .157 .158 .254 .145 .2 .1 .10 .132 .129 172.19.1.0/29 27.133.136.145/28 172.19.0.0/24 192.168.100.0/24 172.16.0.0/24
12. ໰୊αʔό FUI
 Y CS
 Y -9$ EPDLFS ࡞໰ऀʹҰਓҰݸͷϗετ
 ໰୊͝ͱʹࣗ༝ʹίϯςφΛ࡞੒
13. جװαʔό
    /8 FUI
 άϩʔόϧ FUI
  ໰୊αʔό܈ ؂ࢹ είΞ ɾEOTNBTR
    ϩʔΧϧ%/4
    ɾTRVJE
    ಁաϓϩΩγ 5VOOFM 
  5IF
    *OUFSOFU *OUSBOFU
14. είΞαʔό FUI
 Y CS
 Y TDPSFTBLVSBUEVDUGPSH
 TDPSFEFNPTBLVSBUEVDUGPSH EC MFQVT
15. ؂ࢹ MPH [BCCJY TZTMPH BHFOU BMFSU BMFSU
    BMFSUXBSOJOH ɾΞΫηεϢʔβʔͷಛఆ
 ɾ)5.-
    λΠτϧͷऔಘ TRVJE
    BDDFTT@MPH
16. ؂ࢹ
    ;BCCJY
17. ؂ࢹ
    4ZTMPH
18. ϩάՄࢹԽ
    4QMVOL
19. ηΩϡϦςΟ w ໰୊Ҏ֎΁ͷ߈ܸ
    w είΞαʔό΁ͷ߈ܸ
    %P4
    #'"౳
    w ֎෦΁ͷ߈ܸ
    τϥϑΟοΫ؂ࢹ
20. Docker as of 2015 8/30 11:00 CTF Conpetition Netwrok Service L3 L2 LXC endnode application Default Gateway 1000M 500M Virtual Coonection vlan id vlan *CONFIDENTIAL* Tagged Interface Untagged Interface Tunnel Tunnel Player Zone Servers Zone gs908m 172.19.0.0/16 gs908m 172.19.0.0/16 vswitch 172.16.0.0/24 vswitch 172.16.0.0/24 ubuntu gateway ubuntu gateway rtx1200 venue rtx1200 venue unknown 192.168.100.0/24 unknown 192.168.100.0/24 router 61.211.224.129 router 61.211.224.129 vrouter 27.133.136.145 vrouter 27.133.136.145 vswitch 27.133.136.144/28 vswitch 27.133.136.144/28 ubuntu score ubuntu score ubuntu watch ubuntu watch Admin Zone tductf2015 tductf2015 tductf2015-admin tductf2015-admin express5800 download express5800 download swx2200-8poe swx2200-8poe 100 aironet3502 aironet3502 lepus lepus lepus-demo lepus-demo log log zabbix zabbix dnsmasq dnsmasq squid3 squid3 eth1 eth0 LAN2 LAN1 LAN3 eth0 eth0 eth0 eth0 eth0 eth0 eth0 Tunnel1 ipip0 ͘͞ΒΠϯλʔωοτݚڀॴ ' ηϛφʔϧʔϜ eth0 LAN1 172.18.0.0/30 .1 .100 .110 .157 .158 .254 .145 .2 .1 .10 .132 .129 172.19.1.0/29 27.133.136.145/28 172.19.0.0/24 192.168.100.0/24 172.16.0.0/24 ੬ऑੑͷ͋Δίϯςφ͔Βͷ߈ܸ 44)౳໰୊Ҏ֎΁ͷ߈ܸ
21. Docker as of 2015 8/30 11:00 CTF Conpetition Netwrok Service L3 L2 LXC endnode application Default Gateway 1000M 500M Virtual Coonection vlan id vlan *CONFIDENTIAL* Tagged Interface Untagged Interface Tunnel Tunnel Player Zone Servers Zone gs908m 172.19.0.0/16 gs908m 172.19.0.0/16 vswitch 172.16.0.0/24 vswitch 172.16.0.0/24 ubuntu gateway ubuntu gateway rtx1200 venue rtx1200 venue unknown 192.168.100.0/24 unknown 192.168.100.0/24 router 61.211.224.129 router 61.211.224.129 vrouter 27.133.136.145 vrouter 27.133.136.145 vswitch 27.133.136.144/28 vswitch 27.133.136.144/28 ubuntu score ubuntu score ubuntu watch ubuntu watch Admin Zone tductf2015 tductf2015 tductf2015-admin tductf2015-admin express5800 download express5800 download swx2200-8poe swx2200-8poe 100 aironet3502 aironet3502 lepus lepus lepus-demo lepus-demo log log zabbix zabbix dnsmasq dnsmasq squid3 squid3 eth1 eth0 LAN2 LAN1 LAN3 eth0 eth0 eth0 eth0 eth0 eth0 eth0 Tunnel1 ipip0 ͘͞ΒΠϯλʔωοτݚڀॴ ' ηϛφʔϧʔϜ eth0 LAN1 172.18.0.0/30 .1 .100 .110 .157 .158 .254 .145 .2 .1 .10 .132 .129 172.19.1.0/29 27.133.136.145/28 172.19.0.0/24 192.168.100.0/24 172.16.0.0/24