ホスティング事業部TechMtg.pdf

社内発表の時の資料です

Transcript

1. ਐԽ͢ΔϩϦϙοϓʂߏ੒
2. ໨࣍  ࣗݾ঺հ
    ϩϦϙοϓʂͷݱߦߏ੒
    ݱߦߏ੒ͷ՝୊఺
    ϩϦϙοϓʂͷ৽͍͠ߏ੒
    ·ͱΊ
3. ࠷ۙೖࣾप೥Λܴ͑·ͨ͠ ΤϯδχΞ ฏݪਖ਼༟
   
   !GPYUSPU ϗεςΟϯάࣄۀ෦ΠϯϑϥνʔϜ
4. ϩϦϙοϓʂͷݱߦߏ੒
5. ϩϦϙοϓʂͷݱߦߏ੒ LoadBalancer http+SharedSSL LoadBalancer Original SSL XFCQSPYZ XFCQSPYZ XFCQSPYZ QSPYZ TTMQSPYZ QSPYZ VTFST VTFST VTFST VTFST XFC
   TFSWFS
6. ݱߦͷ՝୊఺
7. ݱߦͷ՝୊̍ LoadBalancer http+SharedSSL XFCQSPYZ XFCQSPYZ XFCQSPYZ QSPYZ VTFST VTFST VTFST VTFST XFC
   TFSWFS ೥
   XFC
   TFSWFS͸৽ߏ੒ʹͳΓ·ͨ͠ʂ
   w ৽͍͠ᝑମ $16ɺϝϞϦΛେ෯ڧԽ
   w ETP൛QIQͷϦϦʔε
   w NPE@NSVCZͳͲ৽͍͠πʔϧͷಋೖ QSPYZ͸ҎલͱมΘΒͣ
   QSPYZ΋৽͘͠ʂ
8. ݱߦͷ՝୊̎ LoadBalancer Original SSL XFCQSPYZ QSPYZ VTFST VTFST VTFST VTFST XFC
   TFSWFS ͚ͩͲɺҎԼͷ໰୊͸࢒ͬͨ··
   w QSPYZ͕୆͔͠ͳ͍ͨΊෛՙʹͳΓ΍͍͢
   w ূ໌ॻΛ؅ཧͮ͠Β͍
   w *1௥ՃͳͲ֦ுͮ͠Β͍ ೥
   ಠࣗ44-༻ͷQSPYZ΋৽ᝑମʹ
   w ᝑମͷੑೳVQ
9. ݱߦͷ՝୊ )5514ͷ࣌୅͖ͨΔ
10. ՝୊ʹཱͪ޲͔͏ͨΊʹ
11. ϩϦϙοϓʂͷ৽͍͠ߏ੒
12. ϩϦϙοϓʂͷ৽͍͠ߏ੒ LoadBalancer http+SharedSSL LoadBalancer OriginalSSL XFCQSPYZ XFCQSPYZ XFCQSPYZ QSPYZ
    OHJOY TTMQSPYZ QSPYZ VTFST VTFST VTFST VTFST XFC
    TFSWFS ίίʂ
13. ৽͍͠ߏ੒ͷϙΠϯτ w QSPYZΛ"QBDIF͔ΒOHJOYʹஔ͖׵͑Δ
    w OHJOYͰ4/*ରԠ͢Δ
    w OHJOYͰ)551ରԠ͢Δ
    w OHY@NSVCZΛ࢖༻͠ɺಈతʹূ໌ॻΛಡΈࠐ·ͤΔ
    w SFEJTͰQSPYZͷϩʔΧϧʹΩϟογϡΛ࣋ͨͤΔ
14. OHJOY w େྔͷϦΫΤετΛࡋ͘͜ͱΛ೦಄ʹஔ͔Εͯ։ൃ͞Ε͍ͯΔͷͰɺ QSPYZʹ࢖͑͹"QBDIFΑΓ΋OHJOYͷ΄͏͕ૣ͍ ͸ͣʂ
    w OHY@NSVCZΛ૊ΈࠐΜͩΓɺIUUQΛ࢖͍͔ͨͬͨΓɺPQFOTTM Λ࢖͍͍ͨͷͰɺखݩͰϏϧυ͍ͯ͠·͢ɻ
    w Ϗϧυ͸WBHSBOUͰ͍ͯ͠·͢ɻ·ͩ੔උ͢Δඞཁ͸͋Γͦ͏ɻ
15. 4/* client server a.example.com b.example.com ᶃ 44-ϋϯυγΣΠΫ ᶄ TFSWFSOBNF
    
    BFYBNQMFDPN 4/*Λಋೖ͢Ε͹ɺ44-ϋϯυγΣΠΫதʹ4FSWFSOBNFΛڭ͑ͯ͘Ε·͢ɻ
    PQFOTTM
    
    Ҏ߱Ͱ4/*͸ରԠࡁΈͰ͢ɻ
    PQFOTTMͷCVJME࣌ʹFOBCMFUMTFYUΛ͚ͭΔͱ༗ޮʹͳΓ·͢
    EFGBVMU༗ޮ
    
    OHJOY
    7
    Ͱ֬ೝͰ͖·͢ BFYBNQMFDPNͷূ໌ॻ <SPPU!UFTUQSPYZ
    d>
    OHJOY
    7
    OHJOY
    WFSTJPO
    OHJOY
    CVJMU
    CZ
    HDD
    
    
    3FE
    )BU
    
    ($$
    CVJMU
    XJUI
    0QFO44-
    K
    
    
    4FQ
    
    ⭐ 5-4
    4/*
    TVQQPSU
    FOBCMFE
16. )551 w OHJOY
    
    Ҏ্͕ରԠ
    w OHJOYͷCVJME࣌ʹίϯύΠϧΦϓγϣϯΛ෇༩͠·͢ XJUIIUUQ@W@NPEVMF
    w OHJOYͷDPOGͰIUUQΛࢦఆ͠·͢ TFSWFS
    \
    
    
    
    MJTUFO
    
    TTM
    IUUQ
    
    
    
    TFSWFS@OBNF
    TTMUFTUKQ w )551Y
    ͱͷ൑ผʹ5-4/1/ɺ·ͨ͸5-4"-1/ͱ͍͏ػೳΛ࢖༻͠·͢
    w 5-4/1/Λར༻͢Δʹ͸0QFO44-
    Ҏ্
    w 5-4"-1/Λར༻͢Δʹ͸0QFO44-
    Ҏ্
17. ಈతূ໌ॻಡΈࠐΈ w ূ໌ॻΛ͋Β͔͡ΊDPOGʹهࡌͯ͠ಡΈࠐ·ͤͣɺϦΫΤετ͕͋Δͨͼʹ ؅ཧ༻EC͔Βऔಘ͢ΔΑ͏ʹ͢Δ
    w ଞαʔϏεͰ͢Ͱʹ࣮૷͞Ε͓ͯΓɺՔಇத w OHY@NSVCZͷNSVCZ@TTM@IBOETIBLF@IBOEMFSΛ࢖༻ͯ͠ɺTFSWFSOBNFΛ औಘ
    
    ରԠ͢Δূ໌ॻΛ؅ཧ༻EC͔Β͖࣋ͬͯͯOHJOYͷDPOGʹTFU͢Δ server { listen 443 ssl http2; server_name *.ssl-test.jp; access_log /var/log/nginx/access.log main; resolver 127.0.0.1 valid=300 ipv6=off; ssl_certificate /etc/nginx/key/ssl-test.jp.pem; ssl_certificate_key /etc/nginx/key/ssl-test.jp.key; … ⭐ mruby_ssl_handshake_handler /etc/nginx/mruby/get_ssl_crt.rb cache;
18. ಈతূ໌ॻಡΈࠐΈ
    ৽͍͠ߏ੒ QSPYZ ؅ཧ༻EC ᶄূ໌ॻΛਘͶΔ ᶆূ໌ॻΛਘͶΔ ᶇରԠ͢Δূ໌ॻΛฦ͢ DBDIF OHY@NSVCZ ᶅDBDIFʹ
    ͋ͬͨΒฦ͢ DMJFOU ᶃϦΫΤετΛૹΔ ᶈϦΫΤετʹରԠ͢Δূ໌ॻΛฦ͢
19. ·ͱΊ
20. ϩϦϙοϓʂ͸ਐԽ͠ଓ͚·͢ w ࣌୅ͱͱ΋ʹٻΊΒΕΔ࢓༷͸มΘ͍͖ͬͯ·͕͢ɺ৽͍ٕ͠ज़Λۦ ࢖͠ରԠ͖ͯ͠·͢
    w ༷ʑͳ৽ػೳΛઈࢍ։ൃதͰ͢