メールサーバを移行した話

Gunma.web#39の発表内容。
Gmail(GoogleWorkspace)にメールサーバを移行した話。

Transcript

1. ϝʔϧαʔόΛ
   Ҡߦͨ͠࿩
   2020-10-31 Gunma.web #39 OnLine
   

   View Slide

2. ࣗݾ঺հ
   • ͳ·͑ɿ͗͢ΉΒɹΉͶͷΓ
   • Twitterɿ@ckicktx
   • Perl/JavaScript/HTML/CSS…
   • blogɿhttp://perl.no-tubo.net
   • ͠ΎΈɿnew! ΍·า͖
   

   View Slide

3. χϡʔΪΞ
   

   View Slide

4. χϡʔΪΞ
   ྑ͍εϙοτ஌ͬ
   ͍ͯͨΒ
   ڭ͑ͯԼ͍͞ʂ
   

   View Slide

5. ϝʔϧαʔόΛ
   Gmailʹ
   Ҡߦ͠·ͨ͠
   

   View Slide

6. ͍ʔΊʔΔ
   ࢖ͬͯ·͔͢ʁ
   

   View Slide

7. ECαΠτӡӦ͢
   Δ্Ͱސ٬α
   ϙʔτʹ͸ඞਢ
   

   View Slide

8. Ҡߦͷ͖͔͚ͬ
   

   View Slide

9. ϝʔϧαʔό
   ࿝ٺԽ໰୊
   

   View Slide

10. ϝʔϧαʔόߏங
    2011೥தࠒ
    

    View Slide

11. • smtp:
    • Postfix+MySQL
    • imap:
    • Dovecot2+Procmail+Spa
    mAssassin
    • ΞΧ΢ϯτ؅ཧ:
    • Postfix Admin
    ߏ੒
    

    View Slide

12. (΄΅)ϝʔϧઐ༻
    αʔόͱͯ͠
    

    View Slide

13. TLS1.0/1.1
    ແޮԽ໰୊
    

    View Slide

14. TLS1.2ʹରԠ
    ͢Δʹ͸
    

    View Slide

15. OpenSSL1.0.1
    Ҏ্͕ඞཁ
    

    View Slide

16. $ openssl version
    OpenSSL 0.9.8e-fips-rhel5
    01 Jul 2008
    

    View Slide

17. CentOS 5
    

    View Slide

18. ͤΜͱ͘Μ
    

    View Slide

19. ౰࣌CentOS 6΋
    બ୒ग़དྷͨ͸ͣ
    ͕ͩ…
    

    View Slide

20. ύοέʔδ؅ཧπʔ
    ϧͰΞοϓσʔτ
    ग़དྷͳ͍໰୊
    

    View Slide

21. αϙʔτ੾Εͷ
    ͨΊyumͰ͸ߋ
    ৽Ͱ͖ͳ͍
    

    View Slide

22. OpenSSLΛ
    ιʔε͔ΒϏϧυ
    ||
    Өڹେ
    

    View Slide

23. Postfix
    Dovecot
    MySQL
    Procmail
    SpamAssassin
    PostfixAdmin
    etc…
    ClamAntiVirus
    

    View Slide

24. OSೖΕସ͑ͯ
    ߏங͠௚͢Ґͷ
    ख͕͔͔ؒΔ
    

    View Slide

25. ৽͍͠OSͰߏ
    ஙͯ͠΋5ʙ10
    ೥ޙʹ͸࿝ٺԽ
    

    View Slide

26. ֎෦αʔϏεͰ
    ྑ͍ͷͰ͸ʁ
    

    View Slide

27. Ҡߦઌ
    

    View Slide

28. • Gmail
    • MicroSoft Exchange
    • ଞ
    Ҡߦઌީิ
    

    View Slide

29. ΄΅ೋ୒
    

    View Slide

30. Gmail
    ࢖ͬͱ͚ײ
    

    View Slide

31. Exchangeͷ
    ڞಉτϨΠ͸ؾ
    ʹͳ͕ͬͨ…
    

    View Slide

32. Ҡߦʹ͋ͨͬͯ
    

    View Slide

33. Ҡߦπʔϧ͕༻
    ҙ͞Ε͍ͯΔ
    σʔλͷҠߦ
    

    View Slide

34. imapαʔό͕
    ެ։͞Ε͍ͯΕ
    ͹ok
    σʔλͷҠߦ
    

    View Slide

35. ͨͩ͠SSLඞਢ
    σʔλͷҠߦ
    

    View Slide

36. ͓Ε͓Εূ໌ॻ
    ͸ෆՄ
    σʔλͷҠߦ
    

    View Slide

37. Let’sEncrypt
    SSLͳ͏! (v2)
    https://sslnow.ml/
    σʔλͷҠߦ
    

    View Slide

38. ͱʹ͔͘஗͍
    σʔλͷҠߦ
    

    View Slide

39. 10/17 18:30 ࣮ߦ
    10/21 11:00 Ҡߦ׬ྃ
    σʔλͷҠߦ
    

    View Slide

40. ΞΧ΢ϯτ਺: 1
    ϝʔϧ݅਺: 16,730
    τʔλϧ: 89࣌ؒ
    ໿190௨/h
    σʔλͷҠߦ
    

    View Slide

41. ʲใࠂʳ14.5೥෼ͷGmailΛGsuiteผΞΧ΢
    ϯτʹҠߦ͢Δͷʹ͔͔ͬͨ࣌ؒ͸ͳΜ
    ͱʂʂʂʂ - ΍·͚Μͷग़ு৯͍౗Ε೔ه
    https://www.yamaken.org/mt/kuidaore/
    archives/2020/08/30105.html
    σʔλͷҠߦ
    

    View Slide

42. அࣺ཭େࣄ
    σʔλͷҠߦ
    

    View Slide

43. ϋϚΓϙΠϯτ
    

    View Slide

44. ؅ཧϖʔδ
    (GoogleAdmin)ͱΞϓ
    Ϧ(Gmail)ͷઃఆ͕ࢄΒ
    ͹ͬͯΔ
    

    View Slide

45. Gmailͷҕ೚ͱ͔
    ϨΨγʔΞϓϦͷ
    ڐՄͱ͔
    

    View Slide

46. ศརػೳ
    

    View Slide

47. ΢Σϒϝʔϧ
    

    View Slide

48. αʔόαΠυͰ
    ͷৼΓ෼͚
    ʢϑΟϧλʔʣ
    

    View Slide

49. ΢ΣϒϕʔεͰ
    ͷઃఆ
    

    View Slide

50. ॴײ
    

    View Slide

51. imap͸एׯ
    ΋ͬ͞Γʁ
    

    View Slide

52. imap͸एׯ
    ΋ͬ͞Γʁ
    ϝʔϧΫϥΠΞϯτʹΑΔ
    ͔΋
    

    View Slide

53. ඞཁͳ͜ͱ͸େ
    ମͰ͖ͦ͏
    

    View Slide

54. ࣗαόΛӡ༻͢
    ΔϝϦοτ͸গ
    ͳ͍͔΋
    

    View Slide

55. ·ͱΊ
    

    View Slide

56. • ϝʔϧαʔόͷ؅ཧ͔Β։
    ์͞ΕΔ
    • Ҡߦπʔϧ͸͕͔͔࣌ؒΔ
    • அࣺ཭େࣄ
    • Gmailͷศརػೳ͕࢖͑Δ
    ·ͱΊ
    

    View Slide

57. ͝ਗ਼ௌ͋Γ͕ͱ
    ͏͍͟͝·ͨ͠
    

    View Slide

58. ࠓޙࢼ͍ͨ͠ࣄ
    

    View Slide

59. • αϙʔτ͸Googleάϧʔϓ
    Λ࢖͏
    • εϓϨουγʔτ΍υΩϡ
    ϝϯτྨΛGoogleͰ
    • αʔόΛGCPʹ
    

    View Slide