Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Speaker Deck
PRO
Sign in
Sign up
for free
PFSを考慮したTLS終端とngx_mrubyによる大量ドメイン設定の効率化
MATSUMOTO Ryosuke
PRO
February 05, 2016
Technology
3
3.4k
PFSを考慮したTLS終端とngx_mrubyによる大量ドメイン設定の効率化
nginxにおける大量ドメインの証明書を動的に処理する方法
MATSUMOTO Ryosuke
PRO
February 05, 2016
Tweet
Share
More Decks by MATSUMOTO Ryosuke
See All by MATSUMOTO Ryosuke
matsumoto_r
PRO
1
180
matsumoto_r
PRO
7
1.8k
matsumoto_r
PRO
0
410
matsumoto_r
PRO
3
3k
matsumoto_r
PRO
4
300
matsumoto_r
PRO
1
580
matsumoto_r
PRO
1
340
matsumoto_r
PRO
0
560
matsumoto_r
PRO
0
140
Other Decks in Technology
See All in Technology
line_developers
PRO
0
2k
tdys13
4
3.4k
suzukiry
0
210
yukitodate
2
320
cmwatanabeseigo
0
340
cygames
1
360
satoshirobatofujimoto
0
110
shirayanagiryuji
0
2.1k
sasakendayo
2
390
masakick
0
120
iqbocchi
0
530
hololab
0
160
Featured
See All Featured
jponch
103
5k
imathis
478
150k
bermonpainter
342
26k
denniskardys
220
120k
scottboms
251
11k
pedronauck
652
110k
tenderlove
52
3.4k
malarkey
119
16k
brianwarren
83
4.7k
kneath
294
39k
davidbonilla
69
3.5k
dougneiner
119
7.8k
Transcript
OHJOYʹ͓͚ΔେྔυϝΠϯͷূ໌ॻΛಈతʹॲཧ͢Δํ๏ GMO Pepabo, Inc. ٕज़ج൫νʔϜ γχΞɾϓϦϯγύϧΤϯδχΞ MATSUMOTO, Ryosuke @matsumotory 2016/01/29
ٕࣾज़ڞ༗ࢿྉ 1'4Λߟྀͨ͠5-4ऴͱOHY@NSVCZ ʹΑΔେྔυϝΠϯઃఆͷޮԽ
࣍ 1FSGFDU'PSXBSE4FDSFDZʢ1'4ʣ 1'4Λຬͨ͢伴ަํࣜ '4Λຬͨ͢5-4ηογϣϯΩϟογϡ OHY@NSVCZʹΑΔಈతূ໌ॻಡΈࠐΈ
OHY@NSVCZʹΑΔಈతϦόʔεϓϩΩγ ·ͱΊ
લఏɿલͷ1'4Λߟྀͨ͠OHJOYͷઃఆͱɺ ޙͷυϝΠϯ͕େྔʹ͋Δ߹ͷ OHY@NSVCZΛར༻ͨ͠ূ໌ॻͱϦόʔεϓ ϩΩγͷઃఆ͚ͯ׆༻͢Δ͜ͱ͕ग़དྷ·͢ɻ
1FSGFDU'PSXBSE4FDSFDZ
1FSGFDU'PSXBSE4FDSFDZ ˞Ҏ߱1'4ͱলུ ˞5-4ηογϣϯͷ߹ ൿີ伴͕࿙Ӯͯ͠աڈͷ௨৴͕ղಡͰ͖ͳ͍ঢ়ଶ શͯͷ5-4ηογϣϯͰҟͳΔൿີ伴Λ͏ ҉߸Խ͞Εͨ௨৴Λͻͨ͢ΒஷΊ͜ΜͰͲ͔͜Ͱൿີ 伴ΛಘͨΒͦͷશͯͷ௨৴ΛղੳՄೳͱ͍͏ঢ়ଶඇ
ৗʹ·͍ͣͱ͍͏ͷରࡦ
5-4Ͱ1'4͋Δ͍'4Λຬͨ͢ʹ 1'4ʹରԠͨ͠DJQIFSTVJUFTͷબ '4Λߟྀͨ͠5-4ηογϣϯΩϟογϡํࣜΛબ ΫϥελߏΠϕϯτυϦϒϯʹΑΔ࣮ͷߟྀ 8FCαʔϏεͰͪΌΜͱΖ͏ͱ͢Δͱҙ֎ͱେม
1'4Λຬͨ͢伴ަํࣜ
1'4Λຬͨ͢伴ަ &%)&$%)&伴ަํࣜΛ͏ ηογϣϯຖʹϥϯμϜͳ伴Λ༻ ΫϥΠΞϯτɾαʔόͦΕͧΕͰҟͳΔ伴Λ༻ OHJOYͰͷ伴ަઃఆ
OHJOYͩͱTTM@EIQBSBNσΟϨΫςΟϒ DJQIFSTTVJUFTΛαʔόଆͰࢦఆ͢ΔͳͲ
OHJOYͷؔ࿈σΟϨΫςΟϒ SFGIUUQTXFBLEIPSHTZTBENJOIUNM
'4Λຬͨ͢ 5-4ηογϣϯΩϟογϡ
5-4ηογϣϯΩϟογϡͷछྨ 4FTTJPOSFTVNQUJPO αʔόɾΫϥΠΞϯτͰڞ௨伴ΛΩϟογϡ 4FTTJPOUJDLFU ΫϥΠΞϯτͰڞ௨伴Λνέοτͱͯ͠อଘ
αʔόଆͰΩϟογϡΛ࣋ͭඞཁͳ͠ Ϋϥελߏ࣌ʹศར
4FTTJPOSFTVNQUJPO Ϋϥελ࣌ʹΩϟογϡΛαʔόؒͰڞ༗ OHJOYͰαʔόؒڞ༗ʹରԠ͍ͯ͠ͳ͍ ΠϕϯτυϦϒϯαʔόͰ࣮͕͍͠ ΫϥελؒΩϟογϡΛఘΊΔ
)0ͦΕΛͰ͖ΔΑ͏ʹ͍ͯ͠ΔͷͰ͍͢͝ ͦΕ͔4FTTJPOUJDLFUΛ͏ ΠϕϯτυϦϒϯ͔ͭΫϥελߏͰ͑Δ ͔͠͠4FTTJPOUJDLFU'4ͷ؍Ͱ༗Γ
4FTTJPOUJDLFU ϚελʔΩʔ͕࿙ΕΔͱશ௨৴͕ղಡՄೳ 1'4ͷ֓೦Λຬ͍ͨͤͯͳ͍ αʔόଆͰϚελʔΩʔΛอଘ͢Δͷ͕௨ৗ ΫϥελؒͰϚελʔΩʔΛڞ༗
ΫϥελͷͲͷαʔόʹৼΓ͚ऽΒΕͯΩϟογϡར༻Մೳ OHJOYͷ߹ '4Λຬͨͨ͢ΊʹϚελʔΩʔΛఆظతʹαʔΨଆͰߋ৽ ͜Ε·ͨ)0ࣗಈతߋ৽ʹରԠࡁΈͰ͍͢͝
͜͜·Ͱͷ·ͱΊ
ΫϥελߏͷOHJOYͷ߹ 1'4ʹରԠͨ͠DJQIFSTVJUFTΛઃఆ '4Λຬͨ͢Α͏ʹTFTTJPOUJDLFUͷϚελʔΩʔΛఆظߋ৽ )0σϑΥϧτͰͰߋ৽ Ϋϥελར༻ʹ͓͍ͯϚελʔΩʔΛαʔόؒͰڞ༗
TFTTJPOSFTVNQUJPOͷ߹αʔόؒΩϟογϡڞ༗Λఘ ΊΔ
ಈతূ໌ॻಡΈࠐΈ
υϝΠϯ͕ଟ͍߹ υϝΠϯ͕ઍɾສͷΦʔμʔͷ߹ OHJOYͷ߹ূ໌ॻಡΈࠐΈͷઃఆ υϝΠϯ୯Ґͷઃఆ͕େʹͳΔ OHJOYͷϓϩηεͷϝϞϦେ͖͘ͳΔ ສͷূ໌ॻಡΈࠐΈͰ.#ͱ͔
OHY@NSVCZͰղܾ ಈతূ໌ॻಡΈࠐΈ ηογϣϯ୯ҐͰূ໌ॻಡΈࠐΉ࣌ʹNSVCZΛϑοΫ PQFOTTMҎ্͕ඞཁ 4/*ͷTFSWFSOBNFʹ߹கͨ͠ূ໌ॻϑΝΠϧΛಡΈࠐΉ
ઃఆ͕ҰͭͰࡁΉ͠ϝϞϦݮΔ ੑೳOHY@NSVCZͷIFMMPXPSMEϕϯνͰݮఔ
None
ಈతϦόʔεϓϩΩγ
ಈతϦόʔεϓϩΩγ 5-4ͰΞΫηεͷ͋ͬͨυϝΠϯΛదͳόοΫΤϯ υʹϦόʔεϓϩΩγ͢Δඞཁ༗Γ ඥ͚Λ֎෦σʔλετΞͳͲ͔Βऔಘ ඥ͚ΛͱʹOHY@NSVCZͰಈతϦόʔεϓϩΩγ
͜Εͱ1'4ͷઃఆͱಈతূ໌ॻಡΈࠐΈΛ߹ମͤ͞Δ
·ͱΊ
1'4ͷߟྀͱಈతઃఆ 1'4Λߟྀͨ͠DJQIFSTVJUFTͷઃఆ '4Λߟྀͨ͠ηογϣϯΩϟογϡͷબ ΠϕϯτυϦϒϯΛߟྀͨ͠ηογϣϯΩϟογϡͷબ ಈతূ໌ॻಡΈࠐΈΛOHY@NSVCZͰ࣮ݱ
ಈతϦόʔεϓϩΩγΛOHY@NSVCZͰ࣮ݱ