ロリポップ！で目指す PHPのためのセキュリティと性能要件を 同時に満たすサーバホスティング技術 / loli-next

PHP実行基盤の高速化・セキュリティ・省メモリ・ペパボKernel

Transcript

1. 1)1࣮ߦج൫ͷߴ଎ԽɾηΩϡϦςΟɾলϝϞϦɾϖύϘ,FSOFM
   2016/05/21 PHPΧϯϑΝϨϯε෱Ԭ2016
   ϩϦϙοϓʂͰ໨ࢦ͢
   1)1ͷͨΊͷηΩϡϦςΟͱੑೳཁ݅Λ
   ಉ࣌ʹຬͨ͢αʔόϗεςΟϯάٕज़
   GMOϖύϘגࣜձࣾ
   γχΞɾϓϦϯγύϧΤϯδχΞ
   MATSUMOTO, Ryosuke
   @matsumotory
   

   View Slide

2. ࣗݾ঺հ
   (.0ϖύϘגࣜձٕࣾज़ج൫νʔϜ
   γχΞɾϓϦϯγύϧΤϯδχΞ
   দຊ྄հ!NBUTVNPUPSZ
   ઐ໳͸Πϯλʔωοτͱӡ༻ٕज़
   શࣾతʹ৽ٕज़ͷԠ༻΍৽نݚڀɾ։ൃΛ୲౰
   IUUQSFTFBSDINBUTVNPUPSKQ
   

   View Slide

3. ໨࣍
   ߴूੵϗεςΟϯάαʔϏε
   1)1࣮ߦج൫ͷηΩϡϦςΟͱੑೳͷཱ྆
   1)1࣮ߦج൫ͷϝϞϦޮ཰Խ
   1)1࣮ߦج൫҆ఆԽͷͨΊʹϖύϘ,FSOFMར༻
   ·ͱΊ
   

   View Slide

4. ߴूੵϗεςΟϯάαʔϏε
   

   View Slide

5. ϗεςΟϯάαʔϏεͷಛ௃
   ࣄۀऀ͸͓٬༷ͷ8FCίϯςϯπΛ੍ޚͰ͖ͳ͍
   ϛυϧ΢ΣΞɾ04Ͱ੍ޚ͢Δඞཁ͕͋Δ
   ڞ༗ͷ৔߹͸Ϧιʔε੍ޚ΍ηΩϡϦςΟ͕ॏཁ
   ಛʹੑೳͱ͍͔ʹόϥϯεΛͱΔ͔
   ฐࣾͰ͸௒ߴूੵͷڞ༗ϗεςΟϯάʹ߆͍ͬͯΔ
   

   View Slide

6. ͳͥߴूੵʹͩ͜ΘΔͷ͔
   

   View Slide

7. View Slide

8. View Slide

9. ݸਓ޲͚αΠτத৺
   ໿ສαΠτΛӡӦ
   ֶੜ΍ओ්ͩͬͨΓݸਓ͕झຯͰ࢖͏༻్
   ϋʔυ΢ΣΞʹͲΕ͚ͩߴूੵͰ͖Δ͔ʹ௅ઓ
   ͱʹ͔҆͘͘ੑೳͷྑ͍΋ͷΛఏڙ͍ͨ͠
   ιϑτ΢ΣΞʹΑΔٕज़ྗʹΑͬͯղܾՄೳ
   

   View Slide

10. 8FCαʔόͷΞʔΩςΫνϟ
    

    View Slide

11. ϓϩηε਺ͱऩ༰αΠτ਺
    ϝϞϦ͸(#Ͱ$16ίΞ͸ݸ
    αΠτ਺Λ਺ສ͔ΒສαΠτͰऩ༰
    ϓϩηε਺͕αΠτ਺ʹґଘ͠ͳ͍Α͏ͳߏ੒
    ෳ਺αΠτڞ༗ͷIUUQEϓϩηε͕ϦΫΤετ͞Εͨϗετ
    ໊͔ΒಈతʹίϯςϯπΛݕग़ͯ͠ॲཧʢ7JSUVBM)PTU˞
    ʣ
    ˞IUUQIUUQEBQBDIFPSHEPDTDVSSFOUFOWIPTUT
    

    View Slide

12. IUUQE
    ߴूੵͷͨΊͷΞʔΩςΫνϟ
    IUUQEϓϩηεݸºສສϓϩηεʢϢʔβݸผʹϓϩηεىಈʣ
    IUUQEϓϩηεݸ͙Β͍ͷԾ૝ϗετͰશϢʔβڞ༗
    Ϣʔβ"
    IUUQE
    Ϣʔβ#
    IUUQE
    Ϣʔβ$
    IUUQE
    Ϣʔβ"
    Ϣʔβ#
    Ϣʔβ$
    ޮ཰ྑ͘࢒ϦιʔεΛ࢖͑Δ
    ىಈʹඞཁ
    ͳϦιʔε
    ىಈʹඞཁ
    ͳϦιʔε
    ىಈʹඞཁ
    ͳϦιʔε
    ىಈʹඞཁͳϦιʔε
    04 04
    

    View Slide

13. ߴूੵͷͨΊͷ
    ΞʔΩςΫνϟͷ՝୊
    

    View Slide

14. ηΩϡϦςΟͱੑೳͷཱ྆
    ϗεςΟϯάͷಛੑ্Ϣʔβຖʹݫີʹݖݶ෼཭
    ߴूੵ؀ڥͷ1)1ͷݖݶ෼཭ͷੑೳͷޮ཰Խ
    ୯ҰͷBQBDIFݖݶͰىಈ͍ͯ͠ΔϓϩηεͰηΩϡϦ
    ςΟͱੑೳΛཱ͍͔྆ͭͭ͠ʹద੾ʹݖݶ෼཭͢Δ͔
    

    View Slide

15. ֶज़ݚڀͷΞϓϩʔνͰ
    ৽ٕज़Λ։ൃɾಋೖ
    

    View Slide

16. View Slide

17. 1)1࣮ߦج൫ͷ
    ηΩϡϦςΟͱੑೳͷཱ྆
    

    View Slide

18. ߴूੵʹ͓͚Δ1)1ͷݖݶ෼཭
    TV&9&$͸ϦΫΤετຖʹϓϩηεੜ੒ഁغ͕ඞཁͰ஗͍
    'BTU$(*͸Ϣʔβ਺ʹԠͯ͡ϓϩηε਺ͱϝϞϦྔ૿Ճ
    NPE@SVJE΍TVJE͸ੑೳɾηΩϡϦςΟ໘Ͱ໰୊͋Γ˞
    
    ݖݶ෼཭ͷͨΊͷίετΛͲ͏Լ͛Δ͔
    େن໛ߴूੵͷͨΊͷݖݶ෼཭ΞʔΩςΫνϟݕ౼
    ˞দຊ྄հ Ԭ෦णஉ εϨου୯ҐͰݖݶ෼཭Λߦ͏8FCαʔόͷΞΫηε੍ޚΞʔΩςΫνϟ ిࢠ৘ใ௨৴ֶձ࿦จࢽ
    7PM+# /P QQ 0DU
    

    View Slide

19. NPE@QSPDFTT@TFDVSJUZ
    "QBDIFͷεϨου୯ҐͰݖݶ෼཭ΞʔΩςΫνϟ˞
    
    NPE@QIQͳͲͷݖݶ෼཭Λߴ଎ʹߦ͑Δ
    ϦΫΤετ࣌ͷݖݶ෼཭ͷίετΛ௿ݮ
    ϓϩηεੜ੒ഁغ͔ΒεϨουੜ੒ഁغ΁
    ˞দຊ྄հ Ԭ෦णஉ εϨου୯ҐͰݖݶ෼཭Λߦ͏8FCαʔόͷΞΫηε੍ޚΞʔΩςΫνϟ ిࢠ৘ใ௨৴ֶձ࿦จࢽ
    7PM+# /P QQ 0DU
    IUUQTHJUIVCDPNNBUTVNPUPSNPE@QSPDFTT@TFDVSJUZ
    

    View Slide

20. $(*QSPDFTT
    PXOFSVTFS
    
    $(*QSPDFTT
    PXOFSSPPU
    
    QIQDHJJOEFYQIQ
    PXOFSVTFS
    
    $(*QSPDFTT
    PXOFSVTFS
    
    TFUVJE
    TFUHJE
    ʜ
    GPSL
    
    FYFDWF
    TVFYFDQSPHSBN TFUVJESPPU
    
    UFSNJOBUFQSPDFTT
    FYFDWF
    
    1BSFOUIUUQEQSPDFTT
    PXOFSSPPU
    
    $IJMEIUUQEQSPDFTT
    PXOFSBQBDIF
    
    ˞$(*TV&9&$NPEFM
    

    View Slide

21. εϨουͱ-JOVY$BQBCJMJUZ
    ਌ϓϩηε͔Βݖݶ෼཭ͷDBQBCJMJUZ DBQ
    ͷΈΛҾ͖ܧ͙
    ಈతίϯςϯπ࣮ߦલʹεϨουΛ࡞Δ
    εϨου্ͰݖݶมߋޙʹDBQΛམͱͯ͠ίϯςϯπ࣮ߦ
    7JSUVBMJOH˞
    Λ࢖ͬͯɺ"QBDIFͦͷ΋ͷΛ֤छಛݖΛམͱ
    ͭͭ͠3FBEPOMZͷCJOEϚ΢ϯτͱඞཁϑΝΠϧͱϦιʔ
    ε੍ݶԽͷDISPPU؀ڥʹͯىಈͤ͞Δ͓ͯ͘ͱΑΓڧݻ
    ˞IUUQTHJUIVCDPNNBUTVNPUPSNSVCZWJSUVBMJOH
    

    View Slide

22. 1BSFOUIUUQEQSPDFTT
    PXOFSSPPU
    
    $IJMEIUUQEQSPDFTT
    PXOFSBQBDIF
    
    NQTUISFBE
    PXOFSVTFS
    
    NQTUISFBE
    PXOFSBQBDIF
    
    JOEFYQIQ
    PXOFSVTFS
    
    TFUVJE
    TFUHJE
    ʜ VOTFUDBQT
    DSFBUFUISFBE TFUDBQT
    EFTUSPZUISFBE
    QBSTF SVO
    QSDUM
    TFUVJETFUHJEDBQT
    NQTUISFBE
    PXOFSVTFS
    
    ˞%40NPE@QSPDFTT@TFDVSJUZNPEFM
    7JSUVBMJOH&OWJSPONFOU
    

    View Slide

23. γεςϜίʔϧͷ਺
    QIQJOGP
    ΁ͷΞΫηεΛTUSBDF͔Βղੳ˞
    
    $(*TV&9&$ճ
    NPE@QIQNPE@QSPDFTT@TFDVSJUZճ
    ΦʔόʔϔουʹͳͬͯΔγεςϜίʔϧ˞
    
    DMPOF
    PQFO
    DMPTF
    FYFDWF
    ͳͲͳͲ
    ˞TUSBDFDGQ1*%
    ˞DBUDHJMPHcHSFQWFQPMM@XBJUcHSFQWGVUFYcQFSMBOF
    QSJOU@JG
    

    View Slide

24. View Slide

25. ͦͷଞͷϝϦοτ΋͋ͬͨ
    ෛՙ͕େ෯ʹ௿ݮʢ1)1ར༻ऀ͕ଟ਺ʣ
    ϩʔυΞϕϨʔδʹͳΔΑ͏ͳΞΫηε͕ҎԼ
    ࠓ͸$(*ͱ%40ͷڞଘ͍ͯ͠Δঢ়ଶ
    %40ઐ༻ʹ͢Ε͹΋ͬͱऩ༰ޮ཰্͕͕Δ
    

    View Slide

26. ಋೖલޙͷ$16࢖༻ྔൺֱ
    Ұ೔ͷΞΫηε਺͸ͲͪΒͷαʔό΋໿ສʢαʔϏεશମͰ͸਺ेԯʣ
    $(*ʴTV&9&$ %40ʴNPE@QSPDFTT@TFDVSJUZ
    ˙TZTUFN
    ˙VTFS
    ˙JEMF
    

    View Slide

27. ͞Βʹ҆͘ɺ͞Βʹߴੑೳ΁
    

    View Slide

28. 1)1࣮ߦج൫ͷϝϞϦޮ཰Խ
    

    View Slide

29. ϩϦϙοϓʂ͸௒ߴूੵ
    ͱʹ͔͘ϓϩηεΛઅ໿͍ͨ͠
    ͱʹ͔͘ϝϞϦΛઅ໿͍ͨ͠
    NPE@QIQ݁ߏϝϞϦΛ৯͏
    ಛʹϓϩηεͷ13*7"5&ͳϝϞϦ͸અ໿͍ͨ͠
    

    View Slide

30. NFNPSZ@MJNJUʹΑΔ੍ݶ
    NFNPSZ@MJNJUͰ13*7"5&ϝϞϦ͸੍ݶͰ͖Δ͕ʜ
    1)1࣮ߦޙʹ13*7"5&ϝϞϦ͕ཷ·Δͷ͕໰୊
    NFNPSZ@MJNJUΛԼ͛Δͱ͓٬༷͕໎࿭
    NFNPSZ@MJNJU͸े෼ʹ͋Δ͕࣮ߦޙʹ͸࢖͍ͬͯ
    ͳ͍13*7"5&ϝϞϦΛݮΒ͢ʹ͸Ͳ͏͢Ε͹Α͍͔
    

    View Slide

31. ;&/%@..@4&(@4*;&
    ϝϞϦϒϩοΫΛׂΓ౰ͯΔࡍͷηάϝϯταΠζ
    ॲཧޙʹϝϞϦ͕ແବʹ࢒Δύλʔϯ͕͋Δ
    ׂ౰ͯྔΛνϡʔχϯάͯ͠࢒Βͳ͍Α͏ʹͰ͖Δ
    ৚͕݅߹͑͹େ͖ͳޮՌ͕ಘΒΕΔ͸ͣ
    ίʔυΛݟΔݶΓ؀ڥม਺Ͱ੍ޚՄೳ
    

    View Slide

32. View Slide

33. NPE@QIQىಈ࣌
    PID VSZ RSS PRIVATE SHARED[KB]
    10280 51188 49824 128 49696 ( 99%)
    10281 51188 49824 124 49700 ( 99%)
    10282 51188 49824 124 49700 ( 99%)
    10283 51188 49824 124 49700 ( 99%)
    10284 51188 49824 124 49700 ( 99%)
    10285 51188 49824 124 49700 ( 99%)
    10286 51188 49824 124 49700 ( 99%)
    10287 51188 49824 124 49700 ( 99%)
    10288 51188 49824 124 49700 ( 99%)
    IUUQTHJUIVCDPNIJSPTFTIBSFENFNPSZTJ[F
    

    View Slide

34. σϑΥϧτʢ81ΞΫηεޙʣ
    PID VSZ RSS PRIVATE SHARED[KB]
    10281 125628 67372 18428 48944 ( 72%)
    10282 125628 67368 18400 48968 ( 72%)
    10286 125628 67368 18400 48968 ( 72%)
    10291 125628 67368 18400 48968 ( 72%)
    10293 125628 67368 18400 48968 ( 72%)
    10294 125628 67368 18400 48968 ( 72%)
    10300 125628 67368 18400 48968 ( 72%)
    10301 125628 67368 18400 48968 ( 72%)
    10303 125628 67368 18400 48968 ( 72%)
    8PSE1SFTTͷॲཧޙͷ13*7"5&ͷϝϞϦ֬อྔ͸.#
    

    View Slide

35. νϡʔχϯάޙʢ81ΞΫηεޙʣ
    PID VSZ RSS PRIVATE SHARED[KB]
    20908 129212 55076 6108 48968 ( 88%)
    20909 129212 55076 6108 48968 ( 88%)
    20910 129212 55076 6108 48968 ( 88%)
    20911 129212 55076 6108 48968 ( 88%)
    20912 129212 55076 6108 48968 ( 88%)
    20913 129212 55076 6108 48968 ( 88%)
    20914 129212 55076 6108 48968 ( 88%)
    20915 129212 55076 6108 48968 ( 88%)
    20916 129212 55076 6108 48968 ( 88%)
    ϓϩηεͰ13*7"5&Λ.#࡟ݮɺϓϩηεͩͱ(#ͷ࡟ݮ
    

    View Slide

36. ͓٬༷ͷϝϞϦΛ੍ݶ͢Δ͜
    ͱͳ͘1)1ଆͰઅ໿͕Ͱ͖ͨ
    

    View Slide

37. 1)1࣮ߦج൫҆ఆԽͷͨΊ
    ϖύϘ,FSOFMར༻
    

    View Slide

38. 1)1͕LFSOFMΛ௒͑ͨ೔
    

    View Slide

39. USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
    apache 10241 55636314 0.0 0 0 ? R 12:36 21115121:16 [httpd]
    

    View Slide

40. ϖύϘ,FSOFM
    ,FSOFMܥͷDHSPVQͰ͸,FSOFMύχοΫ΍ϋϯάසൃ
    $16ສͷQIQͷLFSOFMεϨου ͷ༷ʹݟ͑Δʣ
    ࡴͤͳ͍ɺIBMUͰ͖ͳ͍ɺϋʔυϦηοτ͢Δ͔͠ͳ͍
    $FOU04ʹ,FSOFMܥϕʔεͷϖύϘ,FSOFMΛಋೖ
    .BDͰ΋ಈ͘,FSOFMͷSQNϏϧυγεςϜ։ൃ
    IUUQTHJUIVCDPNNBUTVNPUPSLFSOFMCVJMETZTUFNGPSDFOUPT
    

    View Slide

41. ಛఆͷ1)1͕๫૸ͨ͠Γ੬ऑͰ͋ͬͯ΋
    ଞϗετʹඃ֐͕Ͱͳ͍Α͏ʹ͖ͪΜͱ੍ޚ
    

    View Slide

42. ·ͱΊ
    

    View Slide

43. ͥͻϩϦϙοϓʂͷ1)1Λ
    ࢖ͬͯԼ͍͞
    IUUQTMPMJQPQKQ
    

    View Slide

44. ϖύϘɾ͸ͯͳٕज़େձ։࠵
    ओʹ8FCαʔϏεاۀʹڵຯͷ͋Δֶੜ޲͚
    ژ౎ͱ෱ԬͰि࿈ଓͰ։࠵ʢͱʣ
    ୈҰճ͸8FCαʔϏεͷج൫ٕज़
    ৄ͘͠͸ҎԼͷ63-Ͱ
    IUUQEFWFMPQFSIBUFOBTUBGGDPNFOUSZ
    

    View Slide