PFSを考慮したTLS終端とngx_mrubyによる大量ドメイン設定の効率化

2b692bd83f4418103142a053ecf5ff59?s=47 MATSUMOTO Ryosuke
February 05, 2016
Technology
3
3.3k

 PFSを考慮したTLS終端とngx_mrubyによる大量ドメイン設定の効率化

nginxにおける大量ドメインの証明書を動的に処理する方法

2b692bd83f4418103142a053ecf5ff59?s=128

MATSUMOTO Ryosuke

February 05, 2016
Tweet

More Decks by MATSUMOTO Ryosuke

See All by MATSUMOTO Ryosuke
2b692bd83f4418103142a053ecf5ff59?s=48 matsumoto_r
0
390
2b692bd83f4418103142a053ecf5ff59?s=48 matsumoto_r
3
2.5k
2b692bd83f4418103142a053ecf5ff59?s=48 matsumoto_r
4
270
2b692bd83f4418103142a053ecf5ff59?s=48 matsumoto_r
1
550
2b692bd83f4418103142a053ecf5ff59?s=48 matsumoto_r
1
310
2b692bd83f4418103142a053ecf5ff59?s=48 matsumoto_r
0
550
2b692bd83f4418103142a053ecf5ff59?s=48 matsumoto_r
0
110
2b692bd83f4418103142a053ecf5ff59?s=48 matsumoto_r
1
300
2b692bd83f4418103142a053ecf5ff59?s=48 matsumoto_r
1
2.2k

Other Decks in Technology

See All in Technology
98234c645fe8c935edc0fec0186d28b8?s=48 garethr
1
600
0620564f0125b8b3b7f4fe40c10b8b4e?s=48 tattn
2
540
11d3072d628a7b976cd2f4e6a3cf750f?s=48 yuyaabo
0
310
E9e3472b8801ed21298ccefeecfaf429?s=48 takamichie
0
140
Bf7fe621f4fe1615c228ef8a79b87282?s=48 shirayanagiryuji
2
650
96d70e4d1094a914c1b6436b9e61962c?s=48 ayehninnkhine
0
100
57eb5b1713206c5edb521dde99cc5f30?s=48 key
0
190
9b600b6d2f592d0944507e989770b9b3?s=48 issei126
1
270
953fe5f1a04d8944ead78db3991cfa6a?s=48 anoriqq
0
200
1d8947ec45ce78c83251f4d076abe329?s=48 rpabank
0
180
C786d7772602b488a7972c38c143f61c?s=48 con_mame
3
1.8k
966e29b84ae7dbde170f66b0bc75b7a6?s=48 ishiayaya
2
210

Featured

See All Featured
3d4519fd34b76fb265fc0237f3792bd4?s=48 danielanewman
1
350
B6a8f005f39d23ffc930508ac9da68b9?s=48 vanstee
115
4.7k
2bb923c57a1fdc3a2eb484bb8d565fd2?s=48 ufuk
55
5.2k
9952dfcd5d338f8a8e7175c8a8f65fb5?s=48 wjessup
335
16k
D8fc2580cfaca035f666d9e4ee79a7f7?s=48 mongodb
23
3.7k
20bfe76b3d6105641f879fe45cfc9272?s=48 bkeepers
51
4k
A60068bce2e73de3a37ca9d2dbe36092?s=48 bryan
29
3.2k
6804f1775cb4babfcc3851298566fbce?s=48 tanoku
85
8.4k
C1daf20e5c49ff910745198ef9869ac2?s=48 hatefulcrawdad
257
16k
C4de88ea47538e4594750e3861a341c8?s=48 brettharned
91
2.8k
Fde6c3a50ca518a909ef35c22c0ee0e4?s=48 destraynor
222
47k
95d9f37115fbb0d13135d0f77132f856?s=48 morganepeng
90
13k

Transcript

  1. OHJOYʹ͓͚ΔେྔυϝΠϯͷূ໌ॻΛಈతʹॲཧ͢Δํ๏ GMO Pepabo, Inc. ٕज़ج൫νʔϜ γχΞɾϓϦϯγύϧΤϯδχΞ MATSUMOTO, Ryosuke @matsumotory 2016/01/29

    ࣾ಺ٕज़ڞ༗ࢿྉ 1'4Λߟྀͨ͠5-4ऴ୺ͱOHY@NSVCZ ʹΑΔେྔυϝΠϯઃఆͷޮ཰Խ

  2. ໨࣍  1FSGFDU'PSXBSE4FDSFDZʢ1'4ʣ  1'4Λຬͨ͢伴ަ׵ํࣜ  '4Λຬͨ͢5-4ηογϣϯΩϟογϡ  OHY@NSVCZʹΑΔಈతূ໌ॻಡΈࠐΈ 

    OHY@NSVCZʹΑΔಈతϦόʔεϓϩΩγ  ·ͱΊ

  3. લఏɿલ൒ͷ1'4Λߟྀͨ͠OHJOYͷઃఆͱɺ ޙ൒ͷυϝΠϯ਺͕େྔʹ͋Δ৔߹ͷ OHY@NSVCZΛར༻ͨ͠ূ໌ॻͱϦόʔεϓ ϩΩγͷઃఆ͸෼͚ͯ׆༻͢Δ͜ͱ͕ग़དྷ·͢ɻ

  4. 1FSGFDU'PSXBSE4FDSFDZ

  5. 1FSGFDU'PSXBSE4FDSFDZ ˞Ҏ߱1'4ͱলུ ˞5-4ηογϣϯͷ৔߹  ൿີ伴͕࿙Ӯͯ͠΋աڈͷ௨৴͕ղಡͰ͖ͳ͍ঢ়ଶ  શͯͷ5-4ηογϣϯͰҟͳΔൿີ伴Λ࢖͏  ҉߸Խ͞Εͨ௨৴Λͻͨ͢ΒஷΊ͜ΜͰͲ͔͜Ͱൿີ 伴ΛಘͨΒͦͷશͯͷ௨৴ΛղੳՄೳͱ͍͏ঢ়ଶ͸ඇ

    ৗʹ·͍ͣͱ͍͏໰୊΁ͷରࡦ

  6. 5-4Ͱ1'4͋Δ͍͸'4Λຬͨ͢ʹ͸  1'4ʹରԠͨ͠DJQIFSTVJUFTͷબ୒  '4Λߟྀͨ͠5-4ηογϣϯΩϟογϡํࣜΛબ୒  Ϋϥελߏ੒΍ΠϕϯτυϦϒϯʹΑΔ࣮૷ͷߟྀ 8FCαʔϏεͰͪΌΜͱ΍Ζ͏ͱ͢Δͱҙ֎ͱେม

  7. 1'4Λຬͨ͢伴ަ׵ํࣜ

  8. 1'4Λຬͨ͢伴ަ׵  &%)΍&$%)&伴ަ׵ํࣜΛ࢖͏  ηογϣϯຖʹϥϯμϜͳ伴Λ࢖༻  ΫϥΠΞϯτɾαʔόͦΕͧΕͰҟͳΔ伴Λ࢖༻  OHJOYͰͷ伴ަ׵ઃఆ 

    OHJOYͩͱTTM@EIQBSBNσΟϨΫςΟϒ  DJQIFSTTVJUFTΛαʔόଆͰࢦఆ͢ΔͳͲ

  9. OHJOYͷؔ࿈σΟϨΫςΟϒ SFGIUUQTXFBLEIPSHTZTBENJOIUNM

  10. '4Λຬͨ͢ 5-4ηογϣϯΩϟογϡ

  11. 5-4ηογϣϯΩϟογϡͷछྨ  4FTTJPOSFTVNQUJPO  αʔόɾΫϥΠΞϯτͰڞ௨伴ΛΩϟογϡ  4FTTJPOUJDLFU  ΫϥΠΞϯτͰڞ௨伴Λνέοτͱͯ͠อଘ 

    αʔόଆͰΩϟογϡΛ࣋ͭඞཁͳ͠  Ϋϥελߏ੒࣌ʹศར

  12. 4FTTJPOSFTVNQUJPO  Ϋϥελ࣌ʹ͸ΩϟογϡΛαʔόؒͰڞ༗  OHJOYͰ͸αʔόؒڞ༗ʹରԠ͍ͯ͠ͳ͍  ΠϕϯτυϦϒϯαʔόͰ͸࣮૷͕೉͍͠  ΫϥελؒΩϟογϡΛఘΊΔ 

    )0͸ͦΕΛͰ͖ΔΑ͏ʹ͍ͯ͠ΔͷͰ͍͢͝  ͦΕ͔4FTTJPOUJDLFUΛ࢖͏  ΠϕϯτυϦϒϯ͔ͭΫϥελߏ੒Ͱ΋࢖͑Δ  ͔͠͠4FTTJPOUJDLFU͸'4ͷ؍఺Ͱ໰୊༗Γ

  13. 4FTTJPOUJDLFU  ϚελʔΩʔ͕࿙ΕΔͱશ௨৴͕ղಡՄೳ  1'4ͷ֓೦Λຬ͍ͨͤͯͳ͍  αʔόଆͰϚελʔΩʔΛอଘ͢Δͷ͕௨ৗ  ΫϥελؒͰϚελʔΩʔΛڞ༗ 

    Ϋϥελ಺ͷͲͷαʔόʹৼΓ෼͚ऽΒΕͯ΋Ωϟογϡར༻Մೳ  OHJOYͷ৔߹  '4Λຬͨͨ͢ΊʹϚελʔΩʔΛఆظతʹαʔΨଆͰߋ৽  ͜Ε·ͨ)0͸ࣗಈతߋ৽ʹରԠࡁΈͰ͍͢͝

  14. ͜͜·Ͱͷ·ͱΊ

  15. Ϋϥελߏ੒ͷOHJOYͷ৔߹  1'4ʹରԠͨ͠DJQIFSTVJUFTΛઃఆ  '4Λຬͨ͢Α͏ʹTFTTJPOUJDLFUͷϚελʔΩʔΛఆظߋ৽  )0͸σϑΥϧτͰ෼Ͱߋ৽  Ϋϥελར༻ʹ͓͍ͯ͸ϚελʔΩʔΛαʔόؒͰڞ༗ 

    TFTTJPOSFTVNQUJPOͷ৔߹͸αʔόؒΩϟογϡڞ༗Λఘ ΊΔ

  16. ಈతূ໌ॻಡΈࠐΈ

  17. υϝΠϯ਺͕ଟ͍৔߹  υϝΠϯ਺͕ઍɾສͷΦʔμʔͷ৔߹  OHJOYͷ৔߹ূ໌ॻಡΈࠐΈͷઃఆ਺ ΍υϝΠϯ୯Ґͷઃఆ͕๲େʹͳΔ  OHJOYͷϓϩηεͷϝϞϦ΋େ͖͘ͳΔ  ສͷূ໌ॻಡΈࠐΈͰ໿.#ͱ͔

  18. OHY@NSVCZͰղܾ  ಈతূ໌ॻಡΈࠐΈ  ηογϣϯ୯ҐͰূ໌ॻಡΈࠐΉ࣌ʹNSVCZΛϑοΫ  PQFOTTMҎ্͕ඞཁ  4/*ͷTFSWFSOBNFʹ߹கͨ͠ূ໌ॻϑΝΠϧΛಡΈࠐΉ 

    ઃఆ͕ҰͭͰࡁΉ͠ϝϞϦ΋ݮΔ  ੑೳ͸OHY@NSVCZͷIFMMPXPSMEϕϯνͰݮఔ౓
  19. None

  20. ಈతϦόʔεϓϩΩγ

  21. ಈతϦόʔεϓϩΩγ  5-4ͰΞΫηεͷ͋ͬͨυϝΠϯΛద੾ͳόοΫΤϯ υʹϦόʔεϓϩΩγ͢Δඞཁ༗Γ  ඥ෇͚Λ֎෦σʔλετΞͳͲ͔Βऔಘ  ඥ෇͚Λ΋ͱʹOHY@NSVCZͰಈతϦόʔεϓϩΩγ

  22. ͜Εͱ1'4ͷઃఆͱಈతূ໌ॻಡΈࠐΈΛ߹ମͤ͞Δ

  23. ·ͱΊ

  24. 1'4ͷߟྀͱಈతઃఆ  1'4Λߟྀͨ͠DJQIFSTVJUFTͷઃఆ  '4Λߟྀͨ͠ηογϣϯΩϟογϡͷબ୒  ΠϕϯτυϦϒϯΛߟྀͨ͠ηογϣϯΩϟογϡͷબ୒  ಈతূ໌ॻಡΈࠐΈΛOHY@NSVCZͰ࣮ݱ 

    ಈతϦόʔεϓϩΩγΛOHY@NSVCZͰ࣮ݱ