Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Speaker Deck
PRO
Sign in
Sign up
for free
PFSを考慮したTLS終端とngx_mrubyによる大量ドメイン設定の効率化
MATSUMOTO Ryosuke
PRO
February 05, 2016
Technology
3
3.4k
PFSを考慮したTLS終端とngx_mrubyによる大量ドメイン設定の効率化
nginxにおける大量ドメインの証明書を動的に処理する方法
MATSUMOTO Ryosuke
PRO
February 05, 2016
Tweet
Share
More Decks by MATSUMOTO Ryosuke
See All by MATSUMOTO Ryosuke
matsumoto_r
PRO
2
450
matsumoto_r
PRO
0
80
matsumoto_r
PRO
1
230
matsumoto_r
PRO
7
2k
matsumoto_r
PRO
0
430
matsumoto_r
PRO
3
3.6k
matsumoto_r
PRO
4
330
matsumoto_r
PRO
1
620
matsumoto_r
PRO
1
380
Other Decks in Technology
See All in Technology
finengine
0
250
supership
0
190
tj8000rpm
0
220
clustervr
PRO
0
150
aamine
4
890
kentaro
2
480
oracle4engineer
0
150
miu_crescent
0
230
legalforce
PRO
0
160
lmi
5
3.6k
yashi8484
0
130
surumegohan
1
180
Featured
See All Featured
mojombo
359
62k
keathley
20
760
jlugia
217
16k
lynnandtonic
272
16k
philhawksworth
191
17k
geeforr
333
29k
destraynor
146
19k
hursman
107
9.3k
samanthasiow
58
6.4k
jonrohan
1021
390k
matthewcrist
73
7.5k
paulrobertlloyd
73
1.5k
Transcript
OHJOYʹ͓͚ΔେྔυϝΠϯͷূ໌ॻΛಈతʹॲཧ͢Δํ๏ GMO Pepabo, Inc. ٕज़ج൫νʔϜ γχΞɾϓϦϯγύϧΤϯδχΞ MATSUMOTO, Ryosuke @matsumotory 2016/01/29
ٕࣾज़ڞ༗ࢿྉ 1'4Λߟྀͨ͠5-4ऴͱOHY@NSVCZ ʹΑΔେྔυϝΠϯઃఆͷޮԽ
࣍ 1FSGFDU'PSXBSE4FDSFDZʢ1'4ʣ 1'4Λຬͨ͢伴ަํࣜ '4Λຬͨ͢5-4ηογϣϯΩϟογϡ OHY@NSVCZʹΑΔಈతূ໌ॻಡΈࠐΈ
OHY@NSVCZʹΑΔಈతϦόʔεϓϩΩγ ·ͱΊ
લఏɿલͷ1'4Λߟྀͨ͠OHJOYͷઃఆͱɺ ޙͷυϝΠϯ͕େྔʹ͋Δ߹ͷ OHY@NSVCZΛར༻ͨ͠ূ໌ॻͱϦόʔεϓ ϩΩγͷઃఆ͚ͯ׆༻͢Δ͜ͱ͕ग़དྷ·͢ɻ
1FSGFDU'PSXBSE4FDSFDZ
1FSGFDU'PSXBSE4FDSFDZ ˞Ҏ߱1'4ͱলུ ˞5-4ηογϣϯͷ߹ ൿີ伴͕࿙Ӯͯ͠աڈͷ௨৴͕ղಡͰ͖ͳ͍ঢ়ଶ શͯͷ5-4ηογϣϯͰҟͳΔൿີ伴Λ͏ ҉߸Խ͞Εͨ௨৴Λͻͨ͢ΒஷΊ͜ΜͰͲ͔͜Ͱൿີ 伴ΛಘͨΒͦͷશͯͷ௨৴ΛղੳՄೳͱ͍͏ঢ়ଶඇ
ৗʹ·͍ͣͱ͍͏ͷରࡦ
5-4Ͱ1'4͋Δ͍'4Λຬͨ͢ʹ 1'4ʹରԠͨ͠DJQIFSTVJUFTͷબ '4Λߟྀͨ͠5-4ηογϣϯΩϟογϡํࣜΛબ ΫϥελߏΠϕϯτυϦϒϯʹΑΔ࣮ͷߟྀ 8FCαʔϏεͰͪΌΜͱΖ͏ͱ͢Δͱҙ֎ͱେม
1'4Λຬͨ͢伴ަํࣜ
1'4Λຬͨ͢伴ަ &%)&$%)&伴ަํࣜΛ͏ ηογϣϯຖʹϥϯμϜͳ伴Λ༻ ΫϥΠΞϯτɾαʔόͦΕͧΕͰҟͳΔ伴Λ༻ OHJOYͰͷ伴ަઃఆ
OHJOYͩͱTTM@EIQBSBNσΟϨΫςΟϒ DJQIFSTTVJUFTΛαʔόଆͰࢦఆ͢ΔͳͲ
OHJOYͷؔ࿈σΟϨΫςΟϒ SFGIUUQTXFBLEIPSHTZTBENJOIUNM
'4Λຬͨ͢ 5-4ηογϣϯΩϟογϡ
5-4ηογϣϯΩϟογϡͷछྨ 4FTTJPOSFTVNQUJPO αʔόɾΫϥΠΞϯτͰڞ௨伴ΛΩϟογϡ 4FTTJPOUJDLFU ΫϥΠΞϯτͰڞ௨伴Λνέοτͱͯ͠อଘ
αʔόଆͰΩϟογϡΛ࣋ͭඞཁͳ͠ Ϋϥελߏ࣌ʹศར
4FTTJPOSFTVNQUJPO Ϋϥελ࣌ʹΩϟογϡΛαʔόؒͰڞ༗ OHJOYͰαʔόؒڞ༗ʹରԠ͍ͯ͠ͳ͍ ΠϕϯτυϦϒϯαʔόͰ࣮͕͍͠ ΫϥελؒΩϟογϡΛఘΊΔ
)0ͦΕΛͰ͖ΔΑ͏ʹ͍ͯ͠ΔͷͰ͍͢͝ ͦΕ͔4FTTJPOUJDLFUΛ͏ ΠϕϯτυϦϒϯ͔ͭΫϥελߏͰ͑Δ ͔͠͠4FTTJPOUJDLFU'4ͷ؍Ͱ༗Γ
4FTTJPOUJDLFU ϚελʔΩʔ͕࿙ΕΔͱશ௨৴͕ղಡՄೳ 1'4ͷ֓೦Λຬ͍ͨͤͯͳ͍ αʔόଆͰϚελʔΩʔΛอଘ͢Δͷ͕௨ৗ ΫϥελؒͰϚελʔΩʔΛڞ༗
ΫϥελͷͲͷαʔόʹৼΓ͚ऽΒΕͯΩϟογϡར༻Մೳ OHJOYͷ߹ '4Λຬͨͨ͢ΊʹϚελʔΩʔΛఆظతʹαʔΨଆͰߋ৽ ͜Ε·ͨ)0ࣗಈతߋ৽ʹରԠࡁΈͰ͍͢͝
͜͜·Ͱͷ·ͱΊ
ΫϥελߏͷOHJOYͷ߹ 1'4ʹରԠͨ͠DJQIFSTVJUFTΛઃఆ '4Λຬͨ͢Α͏ʹTFTTJPOUJDLFUͷϚελʔΩʔΛఆظߋ৽ )0σϑΥϧτͰͰߋ৽ Ϋϥελར༻ʹ͓͍ͯϚελʔΩʔΛαʔόؒͰڞ༗
TFTTJPOSFTVNQUJPOͷ߹αʔόؒΩϟογϡڞ༗Λఘ ΊΔ
ಈతূ໌ॻಡΈࠐΈ
υϝΠϯ͕ଟ͍߹ υϝΠϯ͕ઍɾສͷΦʔμʔͷ߹ OHJOYͷ߹ূ໌ॻಡΈࠐΈͷઃఆ υϝΠϯ୯Ґͷઃఆ͕େʹͳΔ OHJOYͷϓϩηεͷϝϞϦେ͖͘ͳΔ ສͷূ໌ॻಡΈࠐΈͰ.#ͱ͔
OHY@NSVCZͰղܾ ಈతূ໌ॻಡΈࠐΈ ηογϣϯ୯ҐͰূ໌ॻಡΈࠐΉ࣌ʹNSVCZΛϑοΫ PQFOTTMҎ্͕ඞཁ 4/*ͷTFSWFSOBNFʹ߹கͨ͠ূ໌ॻϑΝΠϧΛಡΈࠐΉ
ઃఆ͕ҰͭͰࡁΉ͠ϝϞϦݮΔ ੑೳOHY@NSVCZͷIFMMPXPSMEϕϯνͰݮఔ
None
ಈతϦόʔεϓϩΩγ
ಈతϦόʔεϓϩΩγ 5-4ͰΞΫηεͷ͋ͬͨυϝΠϯΛదͳόοΫΤϯ υʹϦόʔεϓϩΩγ͢Δඞཁ༗Γ ඥ͚Λ֎෦σʔλετΞͳͲ͔Βऔಘ ඥ͚ΛͱʹOHY@NSVCZͰಈతϦόʔεϓϩΩγ
͜Εͱ1'4ͷઃఆͱಈతূ໌ॻಡΈࠐΈΛ߹ମͤ͞Δ
·ͱΊ
1'4ͷߟྀͱಈతઃఆ 1'4Λߟྀͨ͠DJQIFSTVJUFTͷઃఆ '4Λߟྀͨ͠ηογϣϯΩϟογϡͷબ ΠϕϯτυϦϒϯΛߟྀͨ͠ηογϣϯΩϟογϡͷબ ಈతূ໌ॻಡΈࠐΈΛOHY@NSVCZͰ࣮ݱ
ಈతϦόʔεϓϩΩγΛOHY@NSVCZͰ࣮ݱ