$30 off During Our Annual Pro Sale. View Details »

devio-osaka-aws-vpn-introduction.pdf

 devio-osaka-aws-vpn-introduction.pdf

・Virtual Private Network (VPN)
・AWS サイト間 VPN
・AWS Client VPN
を トンネリング や サーバー証明書といった周辺技術を交えながら、ざっくりと紹介しました。

MasahiroKawahara

October 11, 2019
Tweet

More Decks by MasahiroKawahara

Other Decks in Technology

Transcript

  1. "84Ͱ࢝ΊΔ71/ೖ໳
    "84ࣄۀຊ෦ɹίϯαϧςΟϯά෦
    ઒ݪ੐େ

    View Slide

  2. εϥΠυ͸ޙͰೖख͢Δ͜ͱ͕ग़དྷ·͢ͷͰ
    ൃදதͷ಺༰ΛϝϞ͢Δඞཁ͸͋Γ·ͤΜɻ
    ࣸਅࡱӨΛ͢Δ৔߹͸
    ϑϥογϡɾγϟολʔԻ͕ग़ͳ͍Α͏ʹ͝഑ྀ͍ͩ͘͞
    Attention

    View Slide

  3. ࣗݾ঺հ
    ઒ݪ੐େ
    "84ࣄۀຊ෦ίϯαϧςΟϯά෦
    ˎ৬ྺ
    ɹɿ4&
    ɹɹˠओʹΦϯϓϨωοτϫʔΫ
    ɹɹˠগ͠"84
    ɹɿΫϥεϝιου
    ˎ޷͖ͳ΋ͷɿ

    View Slide

  4. ໨࣍
    71/ͱ͸
    "84αΠτؒ71/
    "84$MJFOU71/

    View Slide


  5. VPN

    View Slide


  6. ීஈར༻͍ͯ͠Δ VPN
    ࢥ͍ු͔΂ͯΈ·͠ΐ͏

    View Slide

  7. ྫɿΦϑΟεؒ௨৴

    View Slide

  8. ྫɿϦϞʔτϫʔΫ΍ग़ு

    View Slide


  9. VPN

    View Slide

  10. 7JSVBM1SJWBUF/FUXPSL 71/
    ͱ͸
    Ծ૝తͳϓϥΠϕʔτωοτϫʔΫ
    ڌ఺ؒͷηΩϡΞͳ௨৴Λ࣮ݱ

    View Slide

  11. 71/ͷछྨ
    Πϯλʔωοτ71/ͱ*171/
    Πϯλʔωοτ71/ʜެऺճઢΛར༻
    *171/ʜ௨৴ࣄۀ͕ࣾఏڙ͢Δઐ༻ճઢΛར༻

    View Slide

  12. ରԠ͢Δ"84αʔϏε
    71/ ରԠ͢Δ"84αʔϏε
    Πϯλʔωοτ71/
    "84αΠτؒ71/
    "84$MJFOU71/
    *171/ "84%JSFDU$POOFDU

    View Slide

  13. ରԠ͢Δ"84αʔϏε
    71/ ରԠ͢Δ"84αʔϏε
    Πϯλʔωοτ71/
    "84αΠτؒ71/
    "84$MJFOU71/
    *171/ "84%JSFDU$POOFDU
    ΦϯϓϨϛε͔Β"84΁
    ઐ༻ճઢΛҾ͘αʔϏε

    View Slide

  14. ରԠ͢Δ"84αʔϏε
    71/ ରԠ͢Δ"84αʔϏε
    Πϯλʔωοτ71/
    "84αΠτؒ71/
    "84$MJFOU71/
    *171/ "84%JSFDU$POOFDU

    View Slide


  15. AWS αΠτؒ VPN

    View Slide

  16. "84αΠτؒ71/
    ࡞੒͢ΔϦιʔε͸ͭ

    View Slide


  17. AWS αΠτؒ VPN
    ߏங 3εςοϓ

    View Slide

  18. "84αΠτؒ71/
    ֤ήʔτ΢ΣΠΛ࡞੒

    View Slide

  19. "84αΠτؒ71/
    71/઀ଓΛ࡞੒

    View Slide

  20. "84αΠτؒ71/
    ΦϯϓϨϧʔλʹ௥Ճઃఆ $POpH͸"84͔ΒऔಘՄೳ

    View Slide


  21. վΊͯ αΠτؒ VPNͱ͸

    View Slide

  22. αΠτؒ71/
    ήʔτ΢ΣΠ ϧʔλ
    ؒͰ௨৴ΛτϯωϦϯάɾ҉߸Խ
    "84͸*1TFDʹΑΔ71/઀ଓΛαϙʔτ
    ˞*1TFD4FDVSJUZ"SDIJUFDUVSFGPS*OUFSOFU1SPUPDPM

    View Slide

  23. *1TFD
    *1TFD͸ωοτϫʔΫ૚ͷϓϩτίϧ
    τϯωϦϯάɾ҉߸ԽΛߦ͏

    View Slide

  24. τϯωϦϯά
    ύέοτΛΧϓηϧԽͯ͠௨৴Λߦ͏͜ͱ

    View Slide

  25. τϯωϦϯά

    View Slide

  26. τϯωϦϯά

    View Slide

  27. τϯωϦϯά

    View Slide

  28. τϯωϦϯά
    ͔͋ͨ΋ϩʔΧϧωοτϫʔΫ಺Ͱ
    ௨৴͍ͯ͠ΔΑ͏ʹΈ͑Δ(ॏཁ!)
    ɾૹ৴ଆ: ϩʔΧϧIPѼ΁ͷૹ৴
    ɾड৴ଆ: ϩʔΧϧIP͔Βͷड৴

    View Slide

  29. ҉߸Խ
    ·ΔΈ͑ˠ

    View Slide

  30. ҉߸Խ

    View Slide

  31. ҉߸Խ

    View Slide

  32. αΠτؒ71/ɿ·ͱΊ
    ɾήʔτ΢ΣΠ ϧʔλ
    ؒͷ௨৴ΛτϯωϦϯάɾ҉߸Խ
    ɾωοτϫʔΫ૚ͷϓϩτίϧ
    ˞ࣄલʹ྆୺ϧʔλͷ71/ઃఆΛ͋Θ͓ͤͯ͘ඞཁΞϦ
    ɹˠϓϩτίϧ "84αΠτؒ71/͸*1TFD

    ɹˠ҉߸Խͷํࣜ "84αΠτؒ71/͸"&4

    ɹˠࣄલڞ༗伴
    ɹʜͳͲͳͲ

    View Slide


  33. AWS Client VPN

    View Slide

  34. "84$MJFOU71/
    ࡞੒͢ΔϦιʔε͸ͭ
    ɹ"84$FSUJpDBUF.BOBHFS "$.
    Λར༻

    View Slide


  35. AWS Client VPN
    ߏங 3 εςοϓ

    View Slide

  36. "84$MJFOU71/
    αʔόʔΫϥΠΞϯτূ໌ॻΛ"$.ʹอଘ
    ˞ΫϥΠΞϯτͷೝূʹ
    ɹΫϥΠΞϯτূ໌ॻΛ࢖͏૝ఆ
    ɹ "%ʹΑΔೝূ΋Մೳ

    View Slide

  37. "84$MJFOU71/
    ΫϥΠΞϯτ71/ΤϯυϙΠϯτΛ࡞੒

    View Slide

  38. "84$MJFOU71/
    ΫϥΠΞϯτ1$Λઃఆ

    View Slide


  39. վΊͯ Client VPNͱ͸

    View Slide

  40. $MJFOU71/
    ΫϥΠΞϯτ1$ͱήʔτ΢ΣΠؒͷ71/௨৴
    ҉߸Խʹ44-ٕज़Λ࢖༻
    ˞44-4FDVSF4PDLFUT-BZFS

    View Slide

  41. 44-
    44-͸ηογϣϯ૚ͷϓϩτίϧ
    αʔόʔূ໌ॻΛར༻

    View Slide

  42. αʔόʔূ໌ॻ
    ৴པ͞Εͨୈࡾऀ ೝূہ$"
    ͔Βൃߦ͞ΕΔ
    ͭͷ༻్
    ɾαʔόʔͷ৴པੑ୲อ
    ɾ҉߸Խ௨৴
    ˞$"$FSUJpDBUF"VUIPSJUZ

    View Slide

  43. αʔόʔূ໌ॻ
    44-઀ଓཁٻʹରͯ͠ɺαʔόʔূ໌ॻΛૹ෇

    View Slide

  44. αʔόʔূ໌ॻ
    αʔόʔূ໌ॻͷਖ਼౰ੑΛ֬ೝ

    View Slide

  45. αʔόʔূ໌ॻ
    ҉߸෮߸Խ༻ͷڞ௨伴Λੜ੒ͯ͠44-௨৴Λ։࢝

    View Slide

  46. 44-71/
    αʔόʔূ໌ॻ͚ͩͩͱɾɾɾ
    ˢ
    ΞΫηεͯ͘͠Δ͔΋

    View Slide

  47. 44-71/
    44-71/͸ΫϥΠΞϯτ1$ͷೝূ΋ߦ͏

    View Slide

  48. $MJFOU71/ɿ·ͱΊ
    ɾΫϥΠΞϯτ1$㱻ήʔτ΢ΣΠؒͷ44-71/
    ɾηογϣϯ૚ͷϓϩτίϧ
    ɾαʔόʔূ໌ॻͰ௨৴҉߸ԽɹʴɹΫϥΠΞϯτ1$ͷೝূ
    ˞"84$MJFOU71/ͷೝূํ๏
    ɹˠΫϥΠΞϯτূ໌ॻ
    ɹˠ"DUJWF%JSFDUPSZ

    View Slide

  49. $MJFOU71/ɿ·ͱΊ
    ɾ ௥ه
    44-௨৴ͷϓϩηεৄࡉΛϒϩάʹͯ͠Έͨ
    ɹIUUQTEFWDMBTTNFUIPEKQDMPVEBXTTTMJOUSPEVDUJPOGPSBXTDMJFOUWQO

    View Slide


  50. ·ͱΊ

    View Slide

  51. ·ͱΊ
    ˝"84αΠτؒ71/
    ɾήʔτ΢ΣΠ ϧʔλ
    ؒͷ௨৴
    ɾωοτϫʔΫ૚ͷϓϩτίϧ
    ɾ*1TFDΛ༻͍ͨτϯωϦϯά҉߸Խ
    ˝"84$MJFOU71/
    ɾΫϥΠΞϯτ㱻ήʔτ΢ΣΠؒͷ௨৴
    ɾηογϣϯ૚ͷϓϩτίϧ
    ɾ44-ʹΑΔ҉߸Խೝূ

    View Slide