LIXILの静的コンテンツ配信について

by Atsushi Harada

Slide 1

Slide 1 text

LIXILͷ੩తίϯςϯπ഑৴ʹ͍ͭͯ גࣜձࣾLIXIL   Software Engineer ݪా ಞ 2019/06/05 Shiftup! JP_Getshifter Vol4

Slide 2

Slide 2 text

About me • IT෦໳ B2CγεςϜ෦ σδλϧςΫϊϩδʔηϯλʔ • Software Engineer • Stack: Authentication, Serverless, AWS • Favorite SaaS: Auth0 • ڈ೥ͷre:inventͷམॻ͖ ࠷ۙύύʹͳΓ·ͨ͠

Slide 3

Slide 3 text

No content

Slide 4

Slide 4 text

2011೥ʹॅ୐ઃඋϝʔΧʔ͕߹ซͯ͠Ͱ͖ͨձࣾ

Slide 5

Slide 5 text

৭ʑͳϓϩμΫτΛఏڙͯ͠·͢

Slide 6

Slide 6 text

ຊ୊

Slide 7

Slide 7 text

LIXILͷ੩తίϯςϯπαΠτʹ͍ͭͯ ᶃαΠτɺӡ༻ฤ

Slide 8

Slide 8 text

੩తίϯςϯπͨ͘͞Μ͋Γ·͢ LIXIL SQUARE

Slide 9

Slide 9 text

੩తίϯςϯπͨ͘͞Μ͋Γ·͢ ϚυຊฮϝϯόʔζαΠτ

Slide 10

Slide 10 text

αΠτ΍ӡ༻पΓͷಛ௃ • ίʔϙϨʔταΠτ΍ΩϟϯϖʔϯαΠτͳͲ͕ଟ͍  →΄ͱΜͲ੩తίϯςϯπ • ؾ͍ͮͨΒ૿͑ͯΔ  →഑৴ͷ࢓ํΛنఔ͠ͳ͍ͱ͍ΖΜͳํ๏Ͱ഑৴͞ΕΔ • ChromeͬͯͳΜͰ͔͢ʁ  →ITϦςϥγʔ͕ฏۉతʹߴ͍Θ͚Ͱ͸ͳ͍ • ΤϯδχΞগͳ͍  →ӡ༻ෛՙԼ͍͛ͨ

Slide 11

Slide 11 text

LIXILͷ੩తίϯςϯπαΠτʹ͍ͭͯ ᶃٕज़ฤ

Slide 12

Slide 12 text

CDN • Akamai࢖ͬͨΓ • Cloudfront࢖ͬͨΓ

Slide 13

Slide 13 text

Netlify͸·ͩ୯ମͰ࢖ͬͯͳ͍͚Ͳ ؾʹͳͬͯ·͢

Slide 14

Slide 14 text

WAF

Slide 15

Slide 15 text

Origin • On Premis (IIS, Apache)  →αʔόʔ͕࿝ٺԽͯͨ͠Γɺӡ༻͕൥ࡶͩͬͨΓɾɾɾ • S3 Web Hosting  →࠷ۙ૿͖͑ͯͨ

Slide 16

Slide 16 text

Authentication • ձһ޲͚αΠτͳͲ͕͋Δ৔߹ɾɾɾೝূ͕ඞཁ • αΠτʹ૊Έࠐ·Ε͍ͯΔύλʔϯ  →૊ΈࠐΈํ͕όϥόϥ • ϦμΠϨΫταʔόʔͰCookieೝূ  →ํ͕ࣜݹ͍ɺγεςϜ࿝ٺԽ

Slide 17

Slide 17 text

CMS • Wordpress • Movable Type • OpenText TeamSite • PowerCMS ͳΜ͔͍ͬͺ͍͋Δ

Slide 18

Slide 18 text

ٕज़पΓͷಛ௃ • CDN͸Ͱ͖Δ͚ͩAkamai࢖͍͍ͨ • WAF͸Akamai • Origin͸Ҡઃ͠ͳ͍ͱ͍͚ͳ͍΋ͷ͕ଟ͍ • Authentication͸ɾɾɾ • ੩తαΠτͰΘ͟Θ͟ೝূ૊ΈࠐΈͨ͘ͳ͍ • ϦμΠϨΫτೝূαʔόʔ͸࿝ٺԽͯ͠Δ • CMS͍ͬͺ͍͋Δ

Slide 19

Slide 19 text

ͳΜͱ͔͍ͨ͠

Slide 20

Slide 20 text

No content

Slide 21

Slide 21 text

✖ = ?

Slide 22

Slide 22 text

ࣄྫᶃ ೝূͳ͠αΠτ LIXIL SQUARE

Slide 23

Slide 23 text

ೝূͳ͠αΠτ • CMSΛWordpressʹ͍ͨ͠ύλʔϯ͸ShifterΛ࢖͏ • AkamaiCDNͰShifterͷOriginΛर͏ • Deploy͸ShifterͷGenerate webhookͰ  CDNͷCache Purge APIΛୟ͘

Slide 24

Slide 24 text

ҰൠϢʔβʔ ؅ཧϢʔβʔ  ฤूϢʔβʔ shifterͰίϯςϯπฤू CDN/WAF  Akamai ೝূͳ͠αΠτ ߏ੒

Slide 25

Slide 25 text

ࣄྫᶄ ೝূ͋ΓαΠτ • ձһ޲͚αΠτΛ࡞Δ  →ೝূΛALBͰ୲อ͢ΔɻOIDCɻ • ArtifactΛS3ʹஔ͘  →ArtifactΛஷΊ͓ͯ͘Stock bucketͱɺ࣮ࡍʹ഑৴͞ΕΔArtifact ΛೖΕΔDeploy bucketΛ࡞ͬͨ • S3ʹArtifactΛALB͔Β഑৴͢ΔͨΊʹnginxίϯςφͰProxypass ͢Δ • DeployपΓΛϢʔβʔଆʹ΍ͬͯ΋Β͏ͨΊʹɺ؅ཧϖʔδΛ࡞Δ

Slide 26

Slide 26 text

ࣄྫᶄ σϓϩΠૢ࡞༻ϖʔδ

Slide 27

Slide 27 text

ҰൠϢʔβʔ ALB IdP  Akamai nginx Public Subnet LIXIL AWS Deploy Bucket OIDC VPC ؅ཧϢʔβʔ  ฤूϢʔβʔ shifterͰίϯςϯπฤू ੩తHTML Generate  + Download Stock Bucket Private Subnet Lambda Lambda CDN/WAF  Akamai ೝূ͋ΓαΠτ ߏ੒

Slide 28

Slide 28 text

ྑ͔ͬͨͱ͜Ζ • WordpressʹݶΔ͕ɺӡ༻ָ͕ʹͳͬͯ؆୯ʹεέʔϧͰ͖Δ  WordpressͷΠϯϑϥ؅ཧ͠ͳ͍͍ͯ͘ • AWS࢖͏Α͏ʹͳͬͯ؀ڥߏங͸͔ͳΓૣ͘ͳ͕ͬͨɺ  ര଎ͰShifter͸Wordpress؀ڥ͕ೖखͰ͖Δ • Generaterʹؔͯ͠΋ϓϥάΠϯΛೖΕͨΓ͢Δඞཁ͕ͳ͘ɺ Ұఆͷ඼࣭Ͱ࢖͑Δ

Slide 29

Slide 29 text

ࠔͬͨͱ͜Ζ • ձһ޲͚αΠτΛߏ੒͢Δͱ͖ʹɺshﬁter͚ͩͰ࡞Εͳ͔ͬͨ  →netlifyଆʹೝূػೳ͋Γ·͢ʁʁ • ձһ޲͚αΠτͷΞʔςΟϑΝΫτΛAWS্Ͱ഑৴͢Δ࣌ʹɺnginxίϯςφ Ͱ͖Ε͹ݐͯͨ͘ͳ͍  →ALB-Lambda-S3ߏ੒Ͱ഑৴Ͱ͖ͳ͍͔ͳɾɾɾ • shifterͷGenerate͔ΒAWS഑৴؀ڥ΁ͷdeployૢ࡞ϖʔδΛϢʔβʔ޲͚ʹ ࡞Δͷҙຯ͋Μ·Γͳͦ͞͏  →shifter্ʹࣗ෼Ͱ࡞ͬͨAPIΛ࣮ߦͰ͖ΔΧελϜϘλϯΈ͍ͨͳͷཉ͍͠ • ͦͷଞɾɾɾshifterͷΤϯλʔϓϥΠζ޲͚ػೳͰɺϢʔβʔ؅ཧʹ͍ͭͯ OIDC͔SAML࿈ܞػೳ͕ཉ͍͠

Slide 30

Slide 30 text

Thank you!