LIXILの静的コンテンツ配信について

2019/06/05 Shiftup! JP_Getshifter Vol.4

Transcript

1. LIXILͷ੩తίϯςϯπ഑৴ʹ͍ͭͯ גࣜձࣾLIXIL 
 Software Engineer ݪా ಞ 2019/06/05 Shiftup! JP_Getshifter Vol4
2. About me • IT෦໳ B2CγεςϜ෦ σδλϧςΫϊϩδʔηϯλʔ • Software Engineer • Stack: Authentication, Serverless, AWS • Favorite SaaS: Auth0 • ڈ೥ͷre:inventͷམॻ͖ ࠷ۙύύʹͳΓ·ͨ͠
4. 2011೥ʹॅ୐ઃඋϝʔΧʔ͕߹ซͯ͠Ͱ͖ͨձࣾ
5. ৭ʑͳϓϩμΫτΛఏڙͯ͠·͢
6. ຊ୊
7. LIXILͷ੩తίϯςϯπαΠτʹ͍ͭͯ ᶃαΠτɺӡ༻ฤ
8. ੩తίϯςϯπͨ͘͞Μ͋Γ·͢ LIXIL SQUARE
9. ੩తίϯςϯπͨ͘͞Μ͋Γ·͢ ϚυຊฮϝϯόʔζαΠτ
10. αΠτ΍ӡ༻पΓͷಛ௃ • ίʔϙϨʔταΠτ΍ΩϟϯϖʔϯαΠτͳͲ͕ଟ͍
 →΄ͱΜͲ੩తίϯςϯπ • ؾ͍ͮͨΒ૿͑ͯΔ
 →഑৴ͷ࢓ํΛنఔ͠ͳ͍ͱ͍ΖΜͳํ๏Ͱ഑৴͞ΕΔ • ChromeͬͯͳΜͰ͔͢ʁ
 →ITϦςϥγʔ͕ฏۉతʹߴ͍Θ͚Ͱ͸ͳ͍ • ΤϯδχΞগͳ͍
 →ӡ༻ෛՙԼ͍͛ͨ
11. LIXILͷ੩తίϯςϯπαΠτʹ͍ͭͯ ᶃٕज़ฤ
12. CDN • Akamai࢖ͬͨΓ • Cloudfront࢖ͬͨΓ
13. Netlify͸·ͩ୯ମͰ࢖ͬͯͳ͍͚Ͳ ؾʹͳͬͯ·͢
14. WAF
15. Origin • On Premis (IIS, Apache)
 →αʔόʔ͕࿝ٺԽͯͨ͠Γɺӡ༻͕൥ࡶͩͬͨΓɾɾɾ • S3 Web Hosting
 →࠷ۙ૿͖͑ͯͨ
16. Authentication • ձһ޲͚αΠτͳͲ͕͋Δ৔߹ɾɾɾೝূ͕ඞཁ • αΠτʹ૊Έࠐ·Ε͍ͯΔύλʔϯ
 →૊ΈࠐΈํ͕όϥόϥ • ϦμΠϨΫταʔόʔͰCookieೝূ
 →ํ͕ࣜݹ͍ɺγεςϜ࿝ٺԽ
17. CMS • Wordpress • Movable Type • OpenText TeamSite • PowerCMS ͳΜ͔͍ͬͺ͍͋Δ
18. ٕज़पΓͷಛ௃ • CDN͸Ͱ͖Δ͚ͩAkamai࢖͍͍ͨ • WAF͸Akamai • Origin͸Ҡઃ͠ͳ͍ͱ͍͚ͳ͍΋ͷ͕ଟ͍ • Authentication͸ɾɾɾ • ੩తαΠτͰΘ͟Θ͟ೝূ૊ΈࠐΈͨ͘ͳ͍ • ϦμΠϨΫτೝূαʔόʔ͸࿝ٺԽͯ͠Δ • CMS͍ͬͺ͍͋Δ
19. ͳΜͱ͔͍ͨ͠
21. ✖ = ?
22. ࣄྫᶃ ೝূͳ͠αΠτ LIXIL SQUARE
23. ೝূͳ͠αΠτ • CMSΛWordpressʹ͍ͨ͠ύλʔϯ͸ShifterΛ࢖͏ • AkamaiCDNͰShifterͷOriginΛर͏ • Deploy͸ShifterͷGenerate webhookͰ
 CDNͷCache Purge APIΛୟ͘
24. ҰൠϢʔβʔ ؅ཧϢʔβʔ
 ฤूϢʔβʔ shifterͰίϯςϯπฤू CDN/WAF
 Akamai ೝূͳ͠αΠτ ߏ੒
25. ࣄྫᶄ ೝূ͋ΓαΠτ • ձһ޲͚αΠτΛ࡞Δ
 →ೝূΛALBͰ୲อ͢ΔɻOIDCɻ • ArtifactΛS3ʹஔ͘
 →ArtifactΛஷΊ͓ͯ͘Stock bucketͱɺ࣮ࡍʹ഑৴͞ΕΔArtifact ΛೖΕΔDeploy bucketΛ࡞ͬͨ • S3ʹArtifactΛALB͔Β഑৴͢ΔͨΊʹnginxίϯςφͰProxypass ͢Δ • DeployपΓΛϢʔβʔଆʹ΍ͬͯ΋Β͏ͨΊʹɺ؅ཧϖʔδΛ࡞Δ
26. ࣄྫᶄ σϓϩΠૢ࡞༻ϖʔδ
27. ҰൠϢʔβʔ ALB IdP
 Akamai nginx Public Subnet LIXIL AWS Deploy Bucket OIDC VPC ؅ཧϢʔβʔ
 ฤूϢʔβʔ shifterͰίϯςϯπฤू ੩తHTML Generate
 + Download Stock Bucket Private Subnet Lambda Lambda CDN/WAF
 Akamai ೝূ͋ΓαΠτ ߏ੒
28. ྑ͔ͬͨͱ͜Ζ • WordpressʹݶΔ͕ɺӡ༻ָ͕ʹͳͬͯ؆୯ʹεέʔϧͰ͖Δ
 WordpressͷΠϯϑϥ؅ཧ͠ͳ͍͍ͯ͘ • AWS࢖͏Α͏ʹͳͬͯ؀ڥߏங͸͔ͳΓૣ͘ͳ͕ͬͨɺ
 ര଎ͰShifter͸Wordpress؀ڥ͕ೖखͰ͖Δ • Generaterʹؔͯ͠΋ϓϥάΠϯΛೖΕͨΓ͢Δඞཁ͕ͳ͘ɺ Ұఆͷ඼࣭Ͱ࢖͑Δ
29. ࠔͬͨͱ͜Ζ • ձһ޲͚αΠτΛߏ੒͢Δͱ͖ʹɺshfiter͚ͩͰ࡞Εͳ͔ͬͨ
 →netlifyଆʹೝূػೳ͋Γ·͢ʁʁ • ձһ޲͚αΠτͷΞʔςΟϑΝΫτΛAWS্Ͱ഑৴͢Δ࣌ʹɺnginxίϯςφ Ͱ͖Ε͹ݐͯͨ͘ͳ͍
 →ALB-Lambda-S3ߏ੒Ͱ഑৴Ͱ͖ͳ͍͔ͳɾɾɾ • shifterͷGenerate͔ΒAWS഑৴؀ڥ΁ͷdeployૢ࡞ϖʔδΛϢʔβʔ޲͚ʹ ࡞Δͷҙຯ͋Μ·Γͳͦ͞͏
 →shifter্ʹࣗ෼Ͱ࡞ͬͨAPIΛ࣮ߦͰ͖ΔΧελϜϘλϯΈ͍ͨͳͷཉ͍͠ • ͦͷଞɾɾɾshifterͷΤϯλʔϓϥΠζ޲͚ػೳͰɺϢʔβʔ؅ཧʹ͍ͭͯ OIDC͔SAML࿈ܞػೳ͕ཉ͍͠
30. Thank you!