Tweet
Tweet

Slide 1

Slide 1 text

งғؾͰAWSωοτϫʔΫΛ ৮ΔਓͷͨΊͷ AWSωοτϫʔΫ࠶ೖ໳

Slide 2

Slide 2 text

ࣗݾ঺հ ɾଜాओຏ (@canon1ky) ɾגࣜձࣾShowcaseGig ɾઍ༿ݝࢢ઒ࢢࡏॅ ʢࢁསݝग़਎ʣ ɾόοΫΤϯυΤϯδχΞ ɾϏʔτϚχΞSPօ఻ ɾϚΠϒʔϜ: νʔζσβʔτ

Slide 3

Slide 3 text

օ͞Μ

Slide 4

Slide 4 text

AWSωοτϫʔΫ ཧղ͍ͯ͠·͔͢ʁ

Slide 5

Slide 5 text

• ϧʔτςʔϒϧͬͯͲ͏ͯ͠ඞཁͳͷʁ • Nat Gatewayͷ໊લ͸ฉ͍ͨ͜ͱ͕͋Δ͚ͲΠϚΠν Θ͔Βͳ͍ • σϑΥϧτVPC͋Δ͠ͱΓ͋͑ͣ࢖ͬͱ͔͘…

Slide 6

Slide 6 text

લ൒ - ֤छϦιʔεΛཧղ͢Δ 1. VPC 2. Subnet 3. Route Table 4. Internet Gateway 5. Nat Gateway 6. શମ૾ 7. σϑΥϧτVPC

Slide 7

Slide 7 text

ޙ൒ - ΞʔΩςΫνϟͷྫ 1. EC2Ͱߏ੒͢Δ؆୯ͳWebαʔόʔͷྫ 2. EKSΛ࢖ͬͨྫ

Slide 8

Slide 8 text

ڞ༗ࣄ߲ • ࠶ೖ໳ͳͷͰEC2΍RDSͷ֓ཁ͸આ໌͠·ͤΜ ʢ͕࣌ؒ଍Γͳ͍…ʣ • ࡉ͔͍ͱ͜Ζ·Ͱ͸ಥͬࠐΈ·ͤΜ ʢશମ૾Λཧղ͢Δͷ͕໨తʣ • ࢿྉ͸WebʹUP͠·͢

Slide 9

Slide 9 text

લ൒ - ֤छϦιʔεΛཧղ͢Δ

Slide 10

Slide 10 text

ͦͷલʹ

Slide 11

Slide 11 text

཈͓͖͍͑ͯͨલఏ • άϩʔόϧαʔϏε • ϦʔδϣϯαʔϏε • AZαʔϏε

Slide 12

Slide 12 text

άϩʔόϧαʔϏε • AWSΞΧ΢ϯτ୯ҐͰஔ͔ΕΔϦιʔε • શϦʔδϣϯͰڞ௨ • ྫ: IAM, CloudWatch, Route53

Slide 13

Slide 13 text

ϦʔδϣϯαʔϏε • Ϧʔδϣϯ୯ҐͰஔ͔ΕΔϦιʔε • ౦ژϦʔδϣϯɺ๺ΞϝϦΧϦʔδϣϯͳͲ • ྫ: VPC, S3, DynamoDB

Slide 14

Slide 14 text

AZαʔϏε • AZ୯ҐͰஔ͔ΕΔϦιʔε • AZ: ϦʔδϣϯΛ͞Βʹࡉ͔͘੾ͬͨ΋ͷ • ྫ: Subnet, EC2, RDS

Slide 15

Slide 15 text

ωοτϫʔΫͬͯʁ

Slide 16

Slide 16 text

VPC • Ծ૝ωοτϫʔΫ • AWSωοτϫʔΫͷҰ൪େ͖͍ׅΓ • ࡞੒࣌ʹϓϥΠϕʔτIPࢦఆ • ϓϥΠϕʔτIP: VPC಺ͰͷΈ࢖͏IPΞυϨε • AWSωοτϫʔΫͷதͰҰ൪࠷ॳʹ࡞Δ΋ͷ ϦʔδϣϯαʔϏε

Slide 17

Slide 17 text

Subnet • VPCΛ͞Βʹ෼ׂۭͨؒ͠ • ʮʓʓ͸ΞΫηε͞Εͯ΋ྑ͍͚Ͳ˚˚͸ΞΫηε ͞ΕͨΒ·͍ͣʂʂʯ • ࣗ෼Ͱେ͖͞ΛܾΊͯαϒωοτΛ࡞Δ • Πϯελϯε͸ඞͣαϒωοτͷதʹ࡞Δ ";αʔϏε

Slide 18

Slide 18 text

αϒωοτͷྫ • VPC: 10.0.0.0/16 • αϒωοτ1: 10.0.1.0/24 → 256ݸͷIPΞυϨε • αϒωοτ2: 10.0.2.0/24 → 256ݸͷIPΞυϨε • αϒωοτ3: 10.0.3.0/20 → 4096ݸͷIPΞυϨε • αϒωοτ4: 10.0.19.0/20 → 4096ݸͷIPΞυϨε αϒωοτϚεΫͷ਺ࣈͰ αϒωοτͷେ͖͞ΛܾΊΒΕΔ ϓϥΠϕʔτ*1

Slide 19

Slide 19 text

ߏ੒ਤ

Slide 20

Slide 20 text

Route Table • Πϯελϯε͔ΒɺͲ͜ʹ௨৴͕͍͔͘ͷϧʔϧ ΛఆΊ͓ͯ͘΋ͷ • αϒωοτΛ࡞ͬͨঢ়ଶͰΠϯελϯεΛ͓͍ͯ ΋ࣗ෼Ҏ֎ͷαʔόʔʹΞΫηεͰ͖ͳ͍ • ௨৴ܦ࿏ͷಓΛ࡞ΔΠϝʔδ • ͜Ε͕ͳ͍ͱΠϯελϯε͔ΒଞͷϦιʔε΁௨৴ ͕Ͱ͖ͳ͍ ϦʔδϣϯαʔϏε

Slide 21

Slide 21 text

ߏ੒ਤ *1 5BSHFU -PDBM *(8 *1 5BSHFU -PDBM *1 5BSHFU -PDBM *(8 *1 5BSHFU -PDBM 4VCOFU 4VCOFU 4VCOFU 4VCOFU αϒωοτ಺ͷΠϯελϯε͔Β ΁ΞΫηε ˠ71$಺ͷϦιʔεʹ௨৴͕ඈͿ αϒωοτ಺ͷΠϯελϯε͔Β ΁ΞΫηε ˠ*(8ʹ௨৴͕ඈͿ

Slide 22

Slide 22 text

Internet Gateway(IGW) • ΠϯελϯεͱΠϯλʔωοτΛܨ͙ίϯϙʔωϯτ • VPC಺ʹ࡞੒ • ϧʔτςʔϒϧͰαϒωοτͱඥ෇͚Δ • IGWͱඥ͚ͮΔ → ύϒϦοΫαϒωοτ • IGWͱඥ͚ͮͳ͍ → ϓϥΠϕʔταϒωοτ ϦʔδϣϯαʔϏε *1 5BSHFU -PDBM *(8

Slide 23

Slide 23 text

Public Subnet • ΠϯελϯεʹύϒϦοΫIP͕෇༩͞ΕΔ • Πϯλʔωοτ͔ΒΠϯελϯεʹΞΫηεՄೳ • Πϯελϯε͔ΒΠϯλʔωοτ্ͷαʔόʔʹΞΫη εՄೳ

Slide 24

Slide 24 text

Private Subnet • Πϯλʔωοτͱःஅ͞Ε͍ͯΔঢ়ଶ • ʮDB͸֎͔ΒݟΒΕͨ͘ͳ͍ʂʂʯ • ΠϯελϯεʹύϒϦοΫIP͸෇༩͞Εͳ͍ • VPC಺ͷΠϯελϯεͱ௨৴͕Մ • ޙड़ͷNGWΛ࢖͏ͱ֎޲͖ͷ௨৴ͷΈՄೳͱͳΔ

Slide 25

Slide 25 text

Nat Gateway(NGW) • Πϯλʔωοτ΁ͷ֎޲͖ͷ௨৴ΛڐՄ͢Δ ίϯϙʔωϯτ • ʮ֎͔ΒΞΫηεͰ͖ͳ͍Α͏ʹ͍͚ͨ͠ͲɺΠϯελ ϯε͔ΒύοέʔδͷΠϯετʔϧͱ͔͸͍ͨ͠ʂʯ • ϓϥΠϕʔταϒωοτʹΞλον͢ΔͱɺϓϥΠϕʔ ταϒωοτͰ΋֎޲͖௨৴͕ڐՄ͞ΕΔ • ͪΐͬͱߴ͍ (0.045USD/hour → 4000ԁऑ / ݄) ";αʔϏε *1 5BSHFU -PDBM /(8

Slide 26

Slide 26 text

Ϣʔεέʔε • ϓϥΠϕʔταϒωοτ಺ͷΠϯελϯε͔Β • ֎෦APIΛݺͼग़͍ͨ͠ • ύοέʔδͷΠϯετʔϧΛߦ͍͍ͨ • ఆظతʹΫϩʔϦϯά͍ͨ͠

Slide 27

Slide 27 text

શମ૾

Slide 28

Slide 28 text

σϑΥϧτVPCͬͯʁ • AWSΞΧ΢ϯτΛ࡞Δͱඞͣ༻ҙ͞Ε͍ͯΔVPC • AWSϕετϓϥΫςΟεͰ͸ɺσϑΥϧτVPCΛ ࢖͏͜ͱ͸ඇਪ঑ • ύϒϦοΫαϒωοτ2ͭͷΈͷαϒωοτ͕ଘࡏ

Slide 29

Slide 29 text

ࢀߟϖʔδIUUQTEPDTBXTBNB[PODPNKB@KQWQDMBUFTUVTFSHVJEF EFGBVMUWQDIUNMEFGBVMUWQDDPNQPOFOUT

Slide 30

Slide 30 text

EC2ΠϯελϯεΛஔ͘·Ͱ 1. VPC࡞੒ 2. ΠϯελϯεΛஔ͘αϒωοτͷཁ݅ΛܾΊΔ ɾIPΞυϨεͷൣғ ɾύϒϦοΫαϒωοτ or ϓϥΠϕʔταϒωοτ 3. αϒωοτ࡞੒ 4. IGW࡞੒ 5. ඞཁͰ͋Ε͹NGWΛ࡞੒ 6. ϧʔτςʔϒϧ࡞੒ 7. Πϯελϯεઃஔ

Slide 31

Slide 31 text

ޙ൒ - ΞʔΩςΫνϟͷྫ

Slide 32

Slide 32 text

؆୯ͳWebαʔόʔͷྫ(1) w ύϒϦοΫαϒωοτ w &-# w &$ w ϓϥΠϕʔταϒωοτ w 3%4

Slide 33

Slide 33 text

؆୯ͳWebαʔόʔͷྫ(2) w ύϒϦοΫαϒωοτ w &-# w ౿Έ୆αʔόʔ w /(8 w ϓϥΠϕʔταϒωοτ w &$ w 3%4 ΑΓηΩϡΞ

Slide 34

Slide 34 text

EKSΛ࢖ͬͨྫ(1) w ύϒϦοΫαϒωοτ w &-# w &$ w ϓϥΠϕʔταϒωοτ w 3%4 &,4ϦιʔεΛ࡞੒͢Δͱ͖ʹɺ ύϒϦοΫαϒωοτΛొ࿥͢Δ

Slide 35

Slide 35 text

EKSΛ࢖ͬͨྫ(2) w ύϒϦοΫαϒωοτ w &-# w /(8 w ϓϥΠϕʔταϒωοτ" w &$ w ϓϥΠϕʔταϒωοτ# w 3%4 &,4ϦιʔεΛ࡞੒͢Δͱ͖ʹɺ ύϒϦοΫαϒωοτͱϓϥΠϕʔταϒωοτ"Λొ࿥͢Δ ΑΓηΩϡΞ

Slide 36

Slide 36 text

·ͱΊ • ࠓճઆ໌ͨ͠ϦιʔεΛҰ௨Γԡ͓͚͑ͯ͞͹ͳΜ ͱ͔ͳΔ • DHCPΦϓγϣϯͱ͔ɺVPCΤϯυϙΠϯτ΋཈͑ ΒΕΕ͹ͳ͓ྑ͠ • VPC࡞Δ~EC2ཱͯΔ~ApacheೖΕΔ~ΞΫηεʂ Λ1ճ΍Δ͚ͩͰ͔ͳΓମײతʹΘ͔Δͱࢥ͍·͢

Slide 37

Slide 37 text

͝ਗ਼ௌ͋Γ͕ͱ͏͍͟͝·ͨ͠ʂ