Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Speaker Deck
PRO
Sign in
Sign up for free
IETF QUICに至るプロトコルの透過性問題とその対策
Shigeki Ohtsu
December 05, 2017
Technology
3
940
IETF QUICに至るプロトコルの透過性問題とその対策
Shigeki Ohtsu
December 05, 2017
Tweet
Share
More Decks by Shigeki Ohtsu
See All by Shigeki Ohtsu
Privacy Sandboxとはなにか/Privacy Sandbox Explained
shigeki
5
1.3k
内定者向け黒帯トーク#4/Kuroobi-Talk for fresh persons #4
shigeki
3
1.6k
Signed HTTP Exchanges (SXG)とはなにか/SXG Explained
shigeki
10
2.8k
Webプロトコル最前線
shigeki
0
380
運用の観点から見たTLSプロトコルの動き
shigeki
0
1.1k
祝Node-v10リリース これまでのNodeの振り返り
shigeki
7
3k
運用の観点から見たTLSプロトコルの動き
shigeki
14
3.4k
QUIC WG報告
shigeki
4
740
Nodeへの コード貢献の仕方
shigeki
11
4.8k
Other Decks in Technology
See All in Technology
COSCUP x KCD Taiwan 2020 - 那些年我們在開源社群的日子 - Cloud Native Taiwan
pohsien
0
110
年700万円損するサーバレスの 認可システムをご紹介します!!
higuuu
3
290
ぼくらが選んだ次のMySQL 8.0 / MySQL80 Which We Choose
line_developers
PRO
7
2.7k
私のAWS愛を聞け!ここが好きだよAmazon FSx for NetApp ONTAP
non97
0
710
eBPFで実現するコンテナランタイムセキュリティ / Container Runtime Security with eBPF
tobachi
PRO
5
1.5k
聊聊 Cgo 的二三事
david74chou
0
330
私のAWS愛を聞け! ~ここが好きだよStep Functions~ #devio2022
kongmingstrap
0
270
大声で伝えたい!定時に帰る方法
sbtechnight
0
210
CityGMLとFBXの連携で地理空間のエンタメ化
soh_mitian
0
560
データ分析のためのAWS Well-Architected -Data Analytics Lens-
maru1981
0
220
AWS CLI でやってみる ~ AWS Hands-on for Beginners ECS ハンズオン ~
kentosuzuki
1
140
20220803投資先CXO候補者向け 会社紹介資料_合同会社BLUEPRINT
hik
0
160
Featured
See All Featured
The Brand Is Dead. Long Live the Brand.
mthomps
46
2.7k
Adopting Sorbet at Scale
ufuk
63
7.6k
What's in a price? How to price your products and services
michaelherold
229
9.4k
Let's Do A Bunch of Simple Stuff to Make Websites Faster
chriscoyier
498
130k
Designing Dashboards & Data Visualisations in Web Apps
destraynor
224
49k
Code Review Best Practice
trishagee
44
9.7k
Gamification - CAS2011
davidbonilla
75
3.9k
Done Done
chrislema
174
14k
Testing 201, or: Great Expectations
jmmastey
21
5.5k
Statistics for Hackers
jakevdp
782
210k
Designing for humans not robots
tammielis
241
24k
Fireside Chat
paigeccino
13
1.4k
Transcript
26*$ʹ͍ͭͯ ฏ2912݄5 ୈ̎ճΠϯλʔωοτ௨৴ϓϩτίϧͷ௨৴ίωΫγϣϯվળʹؔ͢Δҙݟަձ Ϡϑʔגࣜձࣾେൟथ *&5'26*$ʹࢸΔϓϩτίϧͷಁաੑͱͦͷରࡦ
%JTDMBJNFS ຊൃදٴͼࢿྉͷ༰ɺϠϑʔגࣜձࣾΛදͨ͠ͷͰ ͋Γ·ͤΜɻ͝ཧղɺྃ͝ঝ͍ͨͩ͘Α͏͓ئ͍க͠·͢ɻ
༰ w ݱࡏ*&5'26*$༷ࡦఆ࡞ۀͷਅͬ࠷தͰ͋Γɺݱࡏͷ υϥϑτͷ༰ࠓޙେ͖͘มߋ͞ΕΔՄೳੑ͕͋Γ·͢ɻ w *&5'26*$ͷಛͱͯ͠Ӆಗੑ͕͋ΓɺػີੑΛ࣮ݱ͢Δ ηΩϡϦςΟཁ͚݅ͩͰͳ͘ϓϩτίϧͷಁաੑΛͰ͖Δ ͚ͩ֬อ͢Δతʹͳ͍ͬͯ·͢ɻ w աڈɺ֤छϓϩτίϧʹ͓͍ͯػೳ֦ுΛ્Μͩඇಁաੑ
ͷࣄྫͱɺͦΕΛड͚ͨ*&5'26*$༷ʹ͓͚ΔಁաੑΛ ߴΊΔΈʹ͍ͭͯΛ͠·͢ɻ
1SPUPDPM0TTJpDBUJPO ࠓճհ͢Δ1SPUPDPM0TTJpDBUJPOͷࣄྫ w 5$1ɺ5-4ɺ(PPHMF26*$ .JEEMF#PY 4FSWFS $MJFOU
5$10TTJpDBUJPO
5$16OLOPXO0QUJPOͷಁաੑ *TJU4UJMM1PTTJCMFUP&YUFOE5$1 IUUQDPOGFSFODFTTJHDPNNPSHJNDEPDTQQEG IUUQTUSBOTQBSFODZSFQPSUHPPHMFDPNIUUQTPWFSWJFX ݱࡏͷํ͕)5514ͷ%FQMPZ͕ਐΈɺUDQͷಁաੑΑΓམ͍ͪͯΔ͔͠Εͳ͍ɻ )5514ͷϖʔδಡΈࠐΈ 64 ɺ+1
5$1'BTU0QFO ͷಁաੑ "QQMFɿz.PTUMZ 5'0XPSLTTVDDFTTGVMMZ d TVDDFTTSBUF #BENJEEMFCPYFTBSFJOUFSGFSJOH XJUI5$1'BTU0QFO
.JDSPTPGUʮ5$1'BTU0QFOඪ४Λશʹαϙʔτ͍ͯ͠ ͳ͍ωοτϫʔΫڥͷ.JDSPTPGU&EHFϢʔβʔ͕ɺҰ෦ ͷ8FCαΠτʹଓͰ͖ͳ͍Λमਖ਼͠·ͨ͠ɻϢʔβʔ BCPVUqBHTͰ5$1'BTU0QFOΛ࠶༗ޮԽ͢Δ͜ͱ͕Ͱ ͖·͢ɻʯ IUUQTUPPMTJFUGPSHIUNMSGD IUUQTXXXOBOPHPSHTJUFTEFGBVMUpMFT1BBTDI@/FUXPSL@4VQQPSUQEG IUUQTTVQQPSUNJDSPTPGUDPNKBKQIFMQXJOEPXTVQEBUFLC
5$1XJOEPXͷ্ݶ 5IF26*$5SBOTQPSU1SPUPDPM%FTJHOBOE*OUFSOFU4DBMF%FQMPZNFOU IUUQTTUBUJDHPPHMFVTFSDPOUFOUDPNNFEJBSFTFBSDIHPPHMFDPNKBQVCTBSDIJWFQEG 6.5 Video Rebuffer Rate ... We believe
that the low advertised maximum receive window for TCP is likely due to the absence of window scaling, which in turn may be caused by legacy clients that lack support for it and/or middlebox interference. ׂ͕̒ۙ͘ ,#ҎԼ
5-40TTJpDBUJPO
5-4'BMTF4UBSU ͷಁաੑ $ISPNF POUIFEFWDIBOOFMBUpSTU XJMMDPOUBJOB MJTUPGUIFPGQSPCMFNBUJDTJUFTBOEXFXPOU VTF'BMTF4UBSUXJUIUIFN 0OF
GBJSMZNBKPS 44-UFSNJOBUPSWFOEPSSFGVTFE UPVQEBUFUPpYUIFJS'BMTF4UBSUJOUPMFSBODF EFTQJUFQSPCMFNTUIBUUIFJSDVTUPNFSTXFSF IBWJOH IUUQTUPPMTJFUGPSHIUNMSGD IUUQTXXXJNQFSJBMWJPMFUPSHCMBDLMJTUJOHIUNM IUUQTXXXJNQFSJBMWJPMFUPSHGBMTFTUBSUIUNM
5-4"-1/ ͷಁաੑ IUUQTUPPMTJFUGPSHIUNMSGD IUUQTUPPMTJFUGPSHIUNMSGD IUUQEIBUFOBOFKQKPWJ IUUQEIBUFOBOFKQKPWJ ෛՙࢄϕϯμʔͷΤϯδχΞΑΓόΠτͰ͕ղܾ͞ΕΔͱ͍͏ใΛड͚ɺ
$MJFOU)FMMPΛόΠτҎ্ʹΒ·ͤΔQBEEJOHFYUFOTJPO Λಋೖ͠ղܾɻ
5-4 ESBGU ͷಁաੑ 7FSTJPO/FHPUJBUJPOΛ$MJFOU)FMMPͷFYUFOTJPOʹมߋ 3FDPSE-BZFSதͷ7FSTJPO'JFMEΛ5-4ʹݻఆ
5-4 ESBGU ͷಁաੑ ಁաੑΛ͛Δ.JEEMFCPYϕϯμʔ໊Λެ։͖͢ͱͷ͋ͬͨ ͕ɺΞοϓσʔτ͠ͳ͍ϢʔβଆͷݪҼ͋Δͱͷ͜ͱͰɺESBGU Ͱݟ্͔͚5-4ͱ΄΅۠ผ͕͔ͭͳ͍Α͏ʹมߋɻ IUUQTEBUBUSBDLFSJFUGPSHNFFUJOHNBUFSJBMTTMJEFTUMTTFTTBUMT
(PPHMF26*$ 0TTJpDBUJPO
(PPHMF26*$ͷಁաੑ &YQFSJFODFTXJUI.JEEMFCPYFT w 8FJEFOUJpFEUIFNJEEMFCPYBOESFBDIFEPVUUP UIFWFOEPS5IFWFOEPSBEESFTTFEUIFJTTVFCZ VQEBUJOHUIFJSDMBTTJpFSUPBMMPXUIFWBSJBUJPOTTFFO JOUIFqBHT5IJTpYXBTSPMMFEPVUUPUIFJS DVTUPNFSTPWFSUIFGPMMPXJOHNPOUI 5IF26*$5SBOTQPSU1SPUPDPM%FTJHOBOE*OUFSOFU4DBMF%FQMPZNFOU IUUQTTUBUJDHPPHMFVTFSDPOUFOUDPNNFEJBSFTFBSDIHPPHMFDPNKBQVCTBSDIJWFQEG
(PPHMF26*$ͷಁաੑ w ݄$ISPNF4UBCMF$IBOOFM6QEBUF . w IUUQTDISPNFSFMFBTFTHPPHMFCMPHDPN TUBCMFDIBOOFMVQEBUFGPSEFTLUPQIUNM w HPPHMFDPNΛݟΔͱ&33@26*$@13050$0-@&3303͕සൃ
w IUUQTCVHTDISPNJVNPSHQDISPNJVNJTTVFTEFUBJM JE w .D"GFFϢʔβ͔ΒͷJTTVFɻ͕ͩ࠷ऴతͳݪҼެද͞Εͣɻ
(PPHMF26*$@7&34*0/@8JSF'PSNBU 1VCMJD'MBHT CZUF 1VCMJD 'MBHT DPOOFDUJPO *%
2VJD 7FSTJPO 4FRVFODF /VNCFS 1SJWBUF 'MBHT '&$ 'SBNF 'SBNF SFTFSWFE NVMJUJQBUI qBH QBDLFUOVNCFSMFOHUI CZUF CZUFT CZUFT CZUFT DPOOFDUJPOJEMFOHUI CZUFT CZUF CZUFT CZUFT STU WFSTJPO
(PPHMF26*$@7&34*0/@8JSF'PSNBU 1VCMJD'MBHT CZUF
SFTFSWFE NVMJUJQBUI qBH QBDLFUOVNCFSMFOHUI CZUF CZUFT CZUFT CZUFT DPOOFDUJPOJE MFOHUI CZUFT CZUFT OPODF qBH STU WFSTJPO 1VCMJD 'MBHT DPOOFDUJPO *% 2VJD 7FSTJPO /PODF 4FRVFODF /VNCFS 1SJWBUF 'MBHT '&$ 'SBNF 'SBNF
Λىͨ͜͠෦ 21VCMJD'MBHT CZUF
SFTFSWFE NVMJUJQBUI qBH QBDLFUOVNCFSMFOHUI CZUF CZUFT CZUFT CZUFT DPOOFDUJPOJE MFOHUI CZUFT CZUFT OPODF qBH STU WFSTJPO 21VCMJD'MBHT CZUF SFTFSWFE NVMJUJQBUI qBH QBDLFUOVNCFSMFOHUI CZUF CZUFT CZUFT CZUFT DPOOFDUJPOJEMFOHUI CZUFT CZUF CZUFT CZUFT STU WFSTJPO CJUͷ༷มߋ ͕ಁաੑΛ્
*&5'26*$%SBGUͷ 0TTJpDBUJPOରࡦ ҙ ɻ ক དྷ ม ߋ ͢
Δ Մ ೳ ੑ ͕ ͋ Γ · ͢ɻ
*&5'26*$W ҙ ɻ ক དྷ ม ߋ ͢ Δ
Մ ೳ ੑ ͕ ͋ Γ · ͢ɻ
*&5'26*$ESBGU8JSF'PSNBU -POH)FBEFS )FBEFS 'PSN MPOH 5ZQF
7FSTJPO/FHPUJBUJPO $MJFOU*OJUJBM 4FSWFS4UBUFMFTT3FUSZ 4FSWFS$MFBSUFYU $MJFOU$MFBSUFYU 3551SPUFDUFE $POOFDUJPO*% 1BDLFU /VNCFS 7FSTJPO $MFBSUFYU 1BZMPBE 4IPSU)FBEFS )FBEFS 'PSN TIPSU $POOFDUJPO *%'MBH PNJUUFE QSFTFOFE ,FZ 1IBTF #JU 5ZQF 1BDLFU /VNCFS4J[F PDUFU PDUFUT PDUFUT $POOFDUJPO*% 1BDLFU /VNCFS 1SPUFDUFE1BZMPBE ҙ ɻ ক དྷ ม ߋ ͢ Δ Մ ೳ ੑ ͕ ͋ Γ · ͢ɻ CZUF "&"%1SPUFDUFE "&"%1SPUFDUFE 5-4Ͱ҉߸Խ ޙड़Ͱ҉߸Խ
ର.JEEMFCPYͷΈ 26*$$MFBSUFYUޚ w ϋϯυγΣΠΫதͷ$MFBSUFYUΛESBGU͔Β'/7Bϋογϡ͔Β 5-4@"&4@@($.@4)"Ͱ҉߸ԽʹมߋɻͱͱσʔλΤϥʔݕ༻్ɻ w 26*$όʔδϣϯݻ༗ͷTBMUͱDMMJFOUDPOOFDUJPOJE͔Βڞ༗伴Λੜɻ w શʹػີੑશੑΛकΔΘ͚Ͱͳ͍͕ɺӅಗੑ͕େ্͖͘ɻόʔδϣϯ্͕ ͕ΔͱTBMUΛߋ৽͠ͳ͍ݶΓϛυϧϘοΫε͕ղಡͰ͖ͳ͘ͳΔɻ
ҙ ɻ ক དྷ ม ߋ ͢ Δ Մ ೳ ੑ ͕ ͋ Γ · ͢ɻ -POH)FBEFS )FBEFS 'PSN MPOH 5ZQF 7FSTJPO/FHPUJBUJPO $MJFOU*OJUJBM 4FSWFS4UBUFMFTT3FUSZ 4FSWFS$MFBSUFYU $MJFOU$MFBSUFYU 3551SPUFDUFE $POOFDUJPO*% 1BDLFU /VNCFS 7FSTJPO $MFBSUFYU 1BZMPBE "&4($.Ͱ҉߸Խ "&"%1SPUFDUFE
ର.JEEMFCPYͷΈ 4UBUFMFTT3FTFU w αʔό͕ΫϥογϡͳͲͰDPOOFDUJPOTUBUFΛҡ࣋Ͱ͖ͳ͍߹ʹΫϥ ΠΞϯτʹ&OE5P&OEͰ3FTFUΛ௨͢ΔΈɻ1BUI͕มΘΓ 4PVSDF"EESFTT7BMJEBUJPO͕Ͱ͖ͳ͍߹Ͱ3FTFU͕ՄೳʹͳΔɻ w ࣄલʹαʔόΫϥΠΞϯτؒͰ҉߸Խ͞ΕͨϋϯυγΣΠΫதʹ 4UBUFMFTT3FTFU5PLFOΛަɻ w
௨ৗͷ26*$ϑϨʔϜʹࣅͤͯ࠷ޙʹ4UBUFMFTT3FTFU5PLFOΛ༩ɻ .JEEMFCPY҉߸Խ͞Εͨ௨ৗͷ26*$௨৴ͳͷ͔4UBUFMFTT3FTFU͔۠ ผ͕͔ͭͳ͍͠ɺ3FTFUΛ4QPPG͢Δ͜ͱෆՄೳɻ ҙ ɻ ক དྷ ม ߋ ͢ Δ Մ ೳ ੑ ͕ ͋ Γ · ͢ɻ )FBEFS 'PSN TIPSU $POOFDUJPO *%'MBH PNJUUFE QSFTFOFE ,FZ 1IBTF #JU 5ZQF 1BDLFU /VNCFS4J[F PDUFU PDUFUT PDUFUT $POOFDUJPO*% 1BDLFU /VNCFS 3BOEPN0DUFU 4UBUFMFTT3FTFU 5PLFO
1VCMJD)FBEFSΛΊ͙Δٞ -POH)FBEFS )FBEFS 'PSN MPOH 5ZQF
7FSTJPO/FHPUJBUJPO $MJFOU*OJUJBM 4FSWFS4UBUFMFTT3FUSZ 4FSWFS$MFBSUFYU $MJFOU$MFBSUFYU 3551SPUFDUFE 4IPSU)FBEFS )FBEFS 'PSN TIPSU $POOFDUJPO *%'MBH PNJUUFE QSFTFOFE ,FZ 1IBTF #JU 5ZQF 1BDLFU /VNCFS4J[F PDUFU PDUFUT PDUFUT CZUF CZUF 6%1.VMUJQMFYJOHPG4351%5-4 3'$ WT26*$ IUUQTEBUBUSBDLFSJFUGPSHEPDIUNMESBGUUIPNTPONVYQSJODJQMFT 4QJO#JUGPS355NFBTVSFNFOU IUUQTEBUBUSBDLFSJFUGPSHEPDESBGUUSBNNFMMRVJDTQJO ҙ ɻ ক དྷ ม ߋ ͢ Δ Մ ೳ ੑ ͕ ͋ Γ · ͢ɻ ৄ͘͠*&5'ͷ26*$8(.JOVUFTΛࢀরͯ͠Լ͍͞ɻ
26*$*OWBSJBOUTͷٞ 7FSTJPO*OEFQFOEFOU1SPQFSUJFTPG26*$ IUUQTEBUBUSBDLFSJFUGPSHEPDESBGUUIPNTPORVJDJOWBSJBOUT ҙ ɻ ক དྷ ม ߋ
͢ Δ Մ ೳ ੑ ͕ ͋ Γ · ͢ɻ ৄ͘͠*&5'ͷ26*$8(.JOVUFTΛࢀরͯ͠Լ͍͞ɻ -POH)FBEFS )FBEFS 'PSN MPOH 5ZQF 7FSTJPO/FHPUJBUJPO $MJFOU*OJUJBM 4FSWFS4UBUFMFTT3FUSZ 4FSWFS$MFBSUFYU $MJFOU$MFBSUFYU 3551SPUFDUFE $POOFDUJPO*% 7FSTJPO 1BDLFU /VNCFS 1BZMPBE 4IPSU)FBEFS )FBEFS 'PSN TIPSU $POOFDUJPO *%'MBH PNJUUFE QSFTFOFE ,FZ 1IBTF #JU 5ZQF 1BDLFU /VNCFS4J[F PDUFU PDUFUT PDUFUT $POOFDUJPO*% 1BDLFU /VNCFS 1SPUFDUFE1BZMPBE 26*$*OWBSJBOUTҊ
*&5'26*$8($IBSUFS 5IFpGUIGPDVTBSFBXJMMQSPWJEFBO"QQMJDBCJMJUZBOE .BOBHFBCJMJUZ4UBUFNFOU EFTDSJCJOHIPX BOEVOEFSXIBU DJSDVNTUBODFT 26*$NBZCFTBGFMZVTFE BOEEFTDSJCJOH EFQMPZNFOUBOENBOBHFBCJMJUZJNQMJDBUJPOTPGUIFQSPUPDPM
"QQMJDBCJMJUZPGUIF26*$5SBOTQPSU1SPUPDPM IUUQTEBUBUSBDLFSJFUGPSHEPDESBGUJFUGRVJDBQQMJDBCJMJUZ .BOBHFBCJMJUZPGUIF26*$5SBOTQPSU1SPUPDPM IUUQTEBUBUSBDLFSJFUGPSHEPDESBGUJFUGRVJDNBOBHFBCJMJUZ ௨৴ۀऀ༷ʹͪ͜Βͷํ͕ॏཁɻ ͋Δఔ༷͕མͪண͍͔ͯΒυϥϑτ͕ਐΉ͜ͱʹͳΓ·͢ɻ