Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Amazon VPC and Amazon EC2

Amazon VPC and Amazon EC2

Amazon VPC and Amazon EC2

daiki.mori

March 01, 2019
Tweet

More Decks by daiki.mori

Other Decks in Technology

Transcript

  1. 1 0 1 # 1 0

  2. U K O W ( S L G P P

    J - 07120 ( - -07 0 A ( - - ) 0 )
  3.  19 2 1 / 0 3 1/ 3

  4. None
  5. CE / / A 5

  6. 6

  7. d I A V C e P a A6 7

  8. )( / e P W i SD R 1 P

    0 ) ) / e t 0 rSWN ec P 0N P D ec N3/. 7 65 98865 W NT I C DAV o 0 I 3/. W . 2 I / e W AV P n 8
  9. PN D R I C R D 9 https://docs.aws.amazon.com/ja_jp/vpc/latest/userguide/VPC_Subnets.html

  10. 10

  11. ( ) 11

  12. 12 https://aws.amazon.com/jp/about-aws/global-infrastructure/

  13. . a stze C uhfdn mp a S ri )(

    : : : / : . . - :. .: cb j a w a voG C A l RC gb - a ri W 13
  14. ( ( ) A Z 14

  15. 15 https://aws.amazon.com/jp/about-aws/global-infrastructure/      

  16. / 16 

  17. .10 ./ ./. 10 17 6 VPC

  18. ./0 01 010 6 . 18 01 010 6 .

    01 010 6 . 01 010 6 . 01 010 6 .   
  19.  19

  20. ( ) )( V P S e C S N

    t I b V P n P u V P S V P V P I N n 20
  21. 041 21 A /23/0232 . 41 /23/0232 . 41 /23/0232

    . 41 6 041 6 041 6 041 /23/0232 . 41 6 041
  22.   22

  23.   23 () P P I R I Deo

    P PD bV T a C PP I l I P P P P u I I P PD l C P P t
  24.   24 ) R T R T N R

    T R T ( e  NP D ( R T ob N R T T PR NP CA N PR R I l V R R I R I a
  25. . 0 6 / / 1 25 C / /

    10.0.0.0/16 local / /
  26.      26

  27.   27

  28. 28 - - - d UV ) l d d

    G d G i n CP) da d tGg ot w dW - d UV e d UV G P d O n ) l Os n CPp rIyoo G E ( - U I
  29. 2 2 - /23 SVC PCRV 29 Z C T

    2 23 1 2 23 1 0 3 0 3 C / 00000000 0 . 3 G I VC PCRV 2 2 6 AAAAAAAA 2 4 . - .
  30.  30

  31.  A I I I A W 6 W T

    PNT I A T S I I 31
  32. U L M b G i Pk N u L

    E P U / ST CIL 5 DCIop E y s Nop E Mw r l eA/ 4 Mt N y 4 5 Mt Nr c a Me eL / ST 32
  33. V 9 0 9V P C , D 5 9

    33 https://docs.aws.amazon.com/ja_jp/vpc/latest/userguide/vpc-nat-gateway.html
  34. TO T d _ S_ E T AOjh _ S_

    S li :: 2 . : . : . _ S_ E _ _ Ce A N a A N E _ S_ g c :: - 2 2 :. : . / -. : : 34
  35. 35

  36. 36 A 4 - oa mad c_ i oa )

    / h nc_P - oa evR a a Sgcep _ j a wz I - S l e a a a aW r A 4 -W a a Sgcep _ j a wz I P tsU r r L S . W A( A# E #4 : 64 4 6 A 42 -2 oa
  37. wz C: /dv p P s s L Iv C:

    /d p tu L Uc s Ienghnga . C: /d s Uc s Ienghnga . s C: /d v ULUc _ C: / do r t N W N P _ njleni m )- d tUcS v US P CC # # G # (2 ) C C A : C: : A : # C : : A E A: 37
  38. 38

  39. 39 ( ) NP L P LP P PV N

    L P L C A k k C P k w Cr e k to NP ( ) to ( ) NP to
  40. . A ) - 40 P ( ) 2 2

    C 1 ) 0/ ) Z I G N V .. . .. . e . A ) - L 2 A2C 6A 2 4 *02/10/2 4 L ( IPv4 I) H CHTTP/HTTPS 8 8C3 S P4P P4P H T e A
  41. . A ) - 41 V IP ( ) 2

    2 C 1 ) 0/ ) N N a Z b .. . .. . . A ) - G L 2 A2C 6A 2 4 *02/10/2 N N a Z/b 100 Custom . TCP 49152- 65535 0.0.0.0/0 * ALL ALL ALL 0.0.0.0/0 . A ) - G G L 3I A AC C H TP L3L 8 L3L AC C H 4 S
  42. 42

  43. 43 2 / Se P c R C R R

    G P B C R ou oury G I R ou G R R ou G r G L R R ou oury r t GV ED i t R G R R G u 2 / 2 / p CGou
  44. 06 8 - 44 Z ( A 89 4898 2

    6 1/ 4 6 G N V S N 00 1 / 11/0 1 / 5 69 - ./ -/2 - ./ 06 8 - G P 1/. - 6 A CCCCCCCC 8 6 3 VPC 8 469SSHC HTTPC ping () (
  45. 06 8 - 45 Z V ( A 89 4898

    2 6 1/ 4 6 N S S a 00 1 / 11/0 1 / 4 56 - ./ -/2 - ./ 06 8 - P 1/. - 6 A CCCCCCCC 8 6 VPC 38 ping9 G () ( N S S a 4 56 ICMP – IPv4 ICMP 0-65535 192.168.0.0/16 06 8 - P
  46. 46 Network ACL Security Group    +(,*%(& 

    +( %(&   !'  # $)" !'   )"
  47.  47

  48.  48 H AC A PN D A

  49.  49 A PA N A V PA W P

    A P P N S
  50.  50 V V c V om V W hnA

    j P :rp P N S : SV P a c ig . / . /
  51.   51 

  52.   52 

  53.  53 / : / : t U A S

    A S W r _ a sDGu W a c C tn a weC / : / : a u / : / : im j od lh p :: . . / : / : :/ : / ./ / / :
  54. 54

  55.  55 : : c b A PWV S H

    P C S Na / .
  56. 56

  57.  57 EN 2 W A 2 EN 2 P

    V E C S a 2
  58.    58

  59.  59

  60.  60 C P

  61.  61        

    
  62.  62 - - /

  63.  63        

     
  64. None
  65. l l l l l l / l l /

    l C l A C 65
  66. None
  67. VA ( L L WS I PR A CM E

    LR A ALC I / 2 ( 2 ( / 2 (( ( ) / 67
  68. 68

  69. S A 69

  70. 2 DC F AE 2 2 2 2 2 2

    2 2 2 70
  71. ( ) 71

  72. ) ( M M M M M M A M

    M M M M S M W 3 I 72
  73. ) ( rp p rp W th a a _

    A mj MS Ua l IS Ua igG E Cso : / . . . / .- : . . 2 . p du mj I Mw Cso n c e so : / . . . / .- : . :. . 73
  74. ( ) A M I 74

  75.  75

  76.          76

  77.    U I t C m U U

    c e C I r 3 P O p f Ix U c p 2 2 4 4 c i U I U e p / / f d e i U U P O 1 i I g f U 77
  78.    G G SU C E G G

    SUC / - 2 . . : -. . . . . / 2 W ASU E 78
  79.         %5+35-"5()5( SA"5()5(;

    <=YHFW 4'0-"5()5( 7B=T[email protected] "5()5( 6UND\: (2*,"5()5( :XQ:X8M G>M9 [PND M[email protected] [email protected](,.-#$!VL"5()5( [email protected]I?&/ "5()5( SA [email protected](,1(,"5()5(HOCZ RJ 79
  80.          

     80
  81.        d d a

    d d _ A u W U m r w zCt E S d d aCslES c U Wd h c p ae d d a p j ae h G w h in d d A d d o r / - 2 . . : -. . . . . / 2 81
  82.    G I IAU G C SWA E

    2 . - - / /: ./ :/ -/ 2 2 . - - / . ./ /- . -/ 2 82
  83.  83

  84.  C U 2W U E U W A P

    A P E A E A 84
  85.  e up Ca d a dtj W _tj W

    rztj lN n UgTSE ws 2 / . - - - . - - : / .: 2 / - .2 C U hGSE cA o ws - Umj i GSE ws 2 / . - - - . - - / - .2 - : -: 2- / - 2 85
  86.    86

  87.    ) 2 A I P ) 2

    E N C E ) 2 ) 2 ( P ) 2 ) 87
  88. 2 / / -2 iiw L / H e W

    o S ()( / (( a cAL eH x E i / -2 H e c c - / / 2 SH U nAL i tALE d um s r 88
  89. 2 2 . znl hCg w I jA C W

    Go W t w I SE . ch I aeG W I j d CMI A W Ut ur hCg urI d C smIAur p . hCg w 3 : / . . . / . : . 2 3 . GznI U j hCg w i_ eo E 89
  90. 6 l E A ) a M ) ) )

    ) ) ) 4 a ) a PCI ( i E I c 90
  91. b P P Iae G NU P_ # 2 /

    / /C : /. - / 2 : : A/ / P Pd I N S Ec W S c 91
  92.  92

  93.  2 ( ( 2 ) 93

  94. pOomaieW T wOh U S 44 / P (5 W_

    yOigOiV s hz o 12 4 44 E / P (5 mO tOi Oe Oo i Osln 0 HI / P (5 l mO mO cd pci rOnu O EB 0 H / P (5 eji mO i Osln II ) E H : H :C: ED EC A: A 4. B:I HI 6H G/ . 4 EB C 5 H ICB 94
  95. S a 3 E 3 B 95

  96. z E a S d e W Ci _ g

    Isn W Uc Uh h A m E t jpl wnG u or C . : : ( /: :/ 2./ : /( / 96
  97.  97

  98.  A I EC CD A A A 2a 2

    98
  99.  99

  100.  / / / 2 100

  101. 2 / / i i j pu A xmL r

    z _ e Ui R h aS Rvw rto rEC G LnlRch U s Wedi_R / .: - : - - . - - : : 2/ 2 :. / .: - : - - . - - : 2 / : 2/ 2 / : :. 101
  102. G G A GE CA W S E : 2

    / / .2 . 102
  103. Enk L_hSC jGuo F C j w ps wl Gh

    C j j aheCc / : iC_ L g h MWCj / 2/: / L_hSC j / : / LgCc / P cd h z rm t /A / /B : /. / 2 : A 2 /:/ 2 2: / 103
  104.    

  105.     105 m snlPw k h de

    rhPN P t / A C . 2C E C : AA E Vg Gc a GaW V ui P z P G Vg g o P Pp jSL A A F 2 C AC A C I sn O T f Pyn
  106.     106

  107.     107 https://aws.amazon.com/jp/compliance/shared-responsibility-model/ A A W A

    S
  108.     108 https://aws.amazon.com/jp/compliance/shared-responsibility-model/

  109.  109

  110.  A S S W : . / . /

    . . 110
  111.    111

  112.    WV a A T S C P

    112
  113. zlA D_ iAt rjw oh lA h p mA iAt

    _ dc o gnatna dc o gnatna dc o es h u z g _ PS W K IS_ p w o / . - - - . - - . / :-3 - : 3/ . / :-3 : 3/ 113
  114. 2 d Vp V o L a i V 2

    d Wsm :DDA C C 3 A D CD A B E B C EB B B :D CEAA BD B C EB C . # / S 2 d Vp wI rI r - g tn NR Id Rhj e lv Pzu _ c f :DDA C C 3 A D CD A B E 2: D C :D :DDAC C A BD D 114
  115.      / SebcnI o f I_

    pK U clf b W jgaj u E C m LVU E lIhPt UPrw Wrz E CSm W- t - s G : C:C : C P G C : C P :3 s d kioc A C FC G A G / C .C E: F C 115
  116. / 0 0. / .0 N A LS Gc eP

    G C I A 116
  117. P W V C U 117

  118.  118

  119.  G I A u t G I C t

    A N P c r C O I P e p GL C r C o t S PAi k c G I A 119
  120.   120

  121.   A C 2 2 A A S /

    2 W A A A E CE W 121
  122.   2 E 2 / C / C 122

  123.   2 / 2 C E 123

  124.   2 A 124

  125.  125

  126.  AU : SW : R L ca . /

    . . . / 126
  127.  D W D 5 D 4 3 C V

    1 2 D 1. 2I2 / 1 / 5 2N D A0 / 1 A0 / 1 2 S2 P D 127
  128.  SLh_ S ecR ong b__s U C Lb_ i

    dj L m ec i S B p S E a Rlt :: . - - -- : 2 2 :/ : : - : - : : 128
  129. None