Upgrade to Pro — share decks privately, control downloads, hide ads and more …

github-classmethod-study-20170426

 github-classmethod-study-20170426

Koji Nakayama

April 26, 2017
Tweet

More Decks by Koji Nakayama

Other Decks in Technology

Transcript

  1. ᛔ૩奧Օ • Ӿઊ ଛလ • μ϶φϮϊϐϖ AWSԪ䮣᮱ ϊϷϲЄτϴ ЀίЄκϓμϕ •

    AWSΨڥአͭ͵αЀϢ϶΄戔懯/䯤塈/π ЀςϸϓΰЀν • GitHub: knakayama • 奺䵉 • ηЀϤϹςЄϝ΄晁አ3ଙ • AWS 1ଙ 2
  2. 2. AWSΨֵ͜Ӥͽ΄च๜঵㵟 • ᒫӞ΁ϫϚЄυϖςЄϠφ΄ڥአΨ䭥懵ͯΡͩ; • ਞਧ௔ • ՜ςЄϠφ;΄昧൭ • 晁አ揗រ΄֗仂

    • 䰤伛ςЄϠφͽ΅ᥝկ΁ݳΥ΀͚䁰ݳ΁ᛔړ͵ͷͽ֢Ρ • տᐒ͢ಭ揾ͯΏͣϠυϚφϺυϐμ΁ᵞӾͯΡ 6
  3. 晝ਧϪαЀϕ ϜЄϖγδίVPN Direct Connect πφϕ ਞ㭅΀ϦφϕεϢζЄ ϕࢧ娄Θڥአݢᚆ κϰϷί΄䌑አ娄ςЄ Ϡφ΄ॶ夹͢஠ᥝ ϷЄϖόαϭ

    ܨ䦒~ හ昱樌~ 䒏ऒ ิݩ۸΄ηЄϝЄϥϐ ϖ΁ΞΠګᴴ͘Π ~10Gbps ߝ搡 αЀόЄϚϐϕϦЄφ ΄͵Η奺᪠Ӥ΄Ϛϐϕ ϼЄμᇫ䙪΄୽段Ψݑ ͧΡ κϰϷί΁ΞΠߝ搡͢ כ戣ͫ΢ͼ͚Ρ ᵑਸ਼䦒΄ڔΠړͧ αЀόЄϚϐϕϦЄφ ΄͵Ηᛔᐒͽכ೮ͭͼ ͚Ρ塅㾨զक़΄ڔΠړ ͧ͢櫞͚ͭ εЀϖϑЄεЀϖͽͿ ΄奺᪠Ψڥአͭͼ͚Ρ ͡಩ൎͽͣͼ͚Ρ͵Η ྲ斃ጱ਻ฃ https://www.slideshare.net/AmazonWebServicesJapan/aws-black-belt-online-seminar-2016-amazon-vpc/66 14
  4. ϼЄμϢϺЄ • φξυϲЄϸͽਧ๗ጱ΁Ec2ResourceΨ᩸ 㵕 • ᩸㵕ͭ͵αЀφόЀφͽ ShellCommandActivityΨ䋚ᤈ • τδϸπϫЀϖ΄Ӿͽghe-backupπϫЀϖ Ψ䋚ᤈ

    • EBSΔ͵΅EFS΁ϝϐμίϐϤϔЄόΨכਂ • ϝϐμίϐϤ΄ݐ஑΁०䤂ͭ͵䁰ݳ̵SNS ϕϡϐμ奺ኧͽᓕቘᘏ΁᭗Ꭳ 21
  5. Subdomain Isolation Original Path With subdomain isolation http(s)://hostname/gist/ http(s)://gist.hostname/ http(s)://hostname/raw/

    http(s)://raw.hostname/ • SSL戣ก䨗΄ϖϮαЀ͢ *.hostname ;SANͽ hostname ΁䌏䖕ͭͼ͚Ρ஠ᥝ͘͢Ρ • ηϹηϹ戣ก䨗Ͷ;ϣ϶γσ΁ᦄޞ͢ڊͼͭΔ͜ • ᐒٖڥአ΄͵Η΁SSL戣ก䨗Ψ揮͚͵ͥ΀͚ 39
  6. ϺЄϖϝ϶Ѐς • GHE΄2.9ᔮ͡ΟϺЄϖϝ϶ЀςΨςϪЄ ϕ • PROXY protocol(വ䅏) • X-Forwarded-For •

    զӥ΄2ͺ΅ᶋ䌏䖕 • ϺЄϖϝ϶ЀτЀν • SSLόЄϬϚЄτϴЀ • GHE΄ڹྦྷ΁ELBΨ戔ᗝ̵ͭͳͩ΁ACMΨ 戔ਧͯΡ 42
  7. 44

  8. GHE΄HA䯤౮ • GHE΅Active/Standby୵ୗ΄HA䯤౮͢ ݢᚆ • Ϥ϶αϫϷ - ψθЀύϷͽϹϤϷξЄ τϴЀΨ奲Ε̵ϔЄόΨݶ๗ͫͱΡ䯤౮ •

    SSHΚVPNϕЀϚϸΨڥአͭͼ͚Ρ΄ ͽ̵Ϥ϶αϫϷ - ψθЀύϷ樌ͽͳ΢Ο ΄ψϐϕίϐϤΨͭͼͥ͠஠ᥝ͘Π • 戔ਧ΁΅ghe-replᔮ΄πϫЀϖΨڥአͯ Ρ 47