$30 off During Our Annual Pro Sale. View Details »

CMブートキャンプ(社内勉強会) DNS 第4回 AWSのDNSサービス /cm-dnsstudy-4

takipone
February 21, 2018

CMブートキャンプ(社内勉強会) DNS 第4回 AWSのDNSサービス /cm-dnsstudy-4

2018/02/21 @takipone

takipone

February 21, 2018
Tweet

More Decks by takipone

Other Decks in Technology

Transcript

  1. CMϒʔτΩϟϯϓ(ࣾ಺ษڧձ)
    DNS ୈ4ճ AWSͷDNSαʔϏε
    2018/02/21 @takipone

    View Slide

  2. શ4ճ༧ఆ
    17:00-18:00@ΠτʔϐΞ5Fٳܜࣨ
    • 1/31(ਫ) DNSೖ໳
    • 2/8(໦) DNSίϯςϯπαʔόʔ
    • 2/14(ਫ) DNSηΩϡϦςΟ
    • 2/21(ਫ) VPCͱRoute 53 ΠϚίί

    View Slide

  3. ۀ຿࿈བྷ
    • ࣭໰΍ཁ๬͸ChatWork෦԰ʹͲ͏ͧ
    • ϋϯάΞ΢τͰதܧ&࿥ը͋Γ·͢
    • ࣾ಺ίϯϑϧͷϖʔδʹࢿྉͳͲͷ৘ใ͕͋Γ·͢
    • ࠷ޙʹQ&AऔΓ·͕͢ɺਵ࣌ϦϞʔτͰ΋ߏΘ࣭ͣ໰ͯ͠Ͷ

    View Slide

  4. ࣗݾ঺հ
    • େ୍ོଠ @takipone
    • IoTΤϯδχΞཆ੒ಡຊ -ઃܭฤ-
    • ൃച೔(3/13)͕ܾ·Γ·ͨ͠

    & AmazonͰ༧໿ελʔτ
    • ʮཹҙ఺ʯͷࣈ͕͍͢͝σΧ͍

    View Slide

  5. ΞδΣϯμ
    1. Amazon Route 53
    2. Amazon VPCͷDNS

    View Slide

  6. 1. Amazon Route 53

    View Slide

  7. Amazon Route 53
    • AWS͕ఏڙ͢ΔϚωʔδυݖҖDNSαʔϏε
    • Τοδϩέʔγϣϯʹ഑උ͞ΕΔ෼ࢄDNSαʔόʔ܈
    • SLA 100%

    View Slide

  8. Route 53ͷϧʔςΟϯάϙϦγʔ
    • Weighted
    • Latency
    • Geolocation
    • Failover
    • Multivalue Answer
    • ৄ͘͠͸Black Belt(AWSͷ΢ΣϏφʔ)ͷࢿྉΛ؍ͯͶ

    https://www.slideshare.net/AmazonWebServicesJapan/aws-
    black-belt-tech-2016-amazon-route-53

    View Slide

  9. CloudFrontͱͷҧ͍
    • CloudFront(CDN)΋ΤοδϩέʔγϣϯΛར༻
    ʘ 3PVUF $MPVE'SPOU
    ϦιʔεͷΤϯυϙΠϯτ ͭͷ/4Ϩίʔυ ϗετ໊
    ϩέʔγϣϯ ࠷دΓͷΤοδ
    *1ΞυϨεͷݸ਺ /4Ϩίʔυຖʹͭ ෳ਺Ͱεέʔϧ͢Δ
    άϩʔόϧ*1ΞυϨε ݻఆ ΤχʔΩϟετ
    Մม

    View Slide

  10. IPΤχʔΩϟετ
    • ֤஍ͷΤοδͰಉ͡άϩʔόϧIPΞυϨεΛ໊৐Δ
    • ΠϯλʔωοτͷϧʔςΟϯά(BGP)Ͱ࠷دΓͷΤοδʹ޲
    ͚Δ
    • େن໛DNSαʔϏεͰ͸Α͋͘Δߏ੒(RFC 3258)

    ৑௕ੑɺෛՙ෼ࢄʹد༩
    • DNSϕʔεͷ࢓૊ΈΑΓ΋ޮՌతʹಈ͕͘ӡ༻ͷϋʔυϧ͸
    ߴ͍(GCPͰଟ༻͞Ε͍ͯΔ)

    View Slide

  11. IPΤχʔΩϟετ
    http://www.atmarkit.co.jp/fnetwork/dnstips/035.html

    View Slide

  12. IPΤχʔΩϟετ
    • ҟͳΔυϝΠϯͰ΋άϩʔόϧIPͷCIDR͸Ұॹ(όʔνϟϧϗετ)
    $ dig +short classmethod.jp ns | xargs -I{} host -t a {}
    ns-1421.awsdns-49.org has address 205.251.197.141
    ns-1722.awsdns-23.co.uk has address 205.251.198.186
    ns-266.awsdns-33.com has address 205.251.193.10
    ns-576.awsdns-08.net has address 205.251.194.64
    $ dig +short cloudpack.jp ns | xargs -I{} host -t a {}
    ns-282.awsdns-35.com has address 205.251.193.26
    ns-607.awsdns-11.net has address 205.251.194.95
    ns-1495.awsdns-58.org has address 205.251.197.215
    ns-1784.awsdns-31.co.uk has address 205.251.198.248
    $ dig +short serverworks.co.jp ns | xargs -I{} host -t a {}
    ns-1638.awsdns-12.co.uk has address 205.251.198.102
    ns-307.awsdns-38.com has address 205.251.193.51
    ns-948.awsdns-54.net has address 205.251.195.180
    ns-1205.awsdns-22.org has address 205.251.196.181

    View Slide

  13. IPΤχʔΩϟετ
    • EC2 ౦ژϦʔδϣϯ
    $ dig +short classmethod.jp ns | \
    sort | xargs -I{} ping -q -c 3 {} | grep rtt
    rtt min/avg/max/mdev = 9.355/9.370/9.393/0.016 ms
    rtt min/avg/max/mdev = 11.019/11.029/11.044/0.086 ms
    rtt min/avg/max/mdev = 16.669/16.683/16.705/0.015 ms
    rtt min/avg/max/mdev = 0.443/0.447/0.452/0.024 ms
    $ dig +short classmethod.jp ns | \
    sort | xargs -I{} ping -q -c 3 {} | grep rtt
    rtt min/avg/max/mdev = 2.217/2.289/2.358/0.069 ms
    rtt min/avg/max/mdev = 74.218/74.241/74.285/0.031 ms
    rtt min/avg/max/mdev = 51.218/51.231/51.253/0.185 ms
    rtt min/avg/max/mdev = 2.865/2.888/2.925/0.067 ms
    • EC2 ΞΠϧϥϯυϦʔδϣϯ
    ౦ژˠΞΠϧϥϯυ͕
    ԟ෮ SSU
    NTڧͳͷͰɺ
    ಉҰσʔληϯλʔͰ͸
    ࣮ݱͰ͖ͳ͍SUU

    View Slide

  14. ΤΠϦΞεϨίʔυ
    • AWSϦιʔεʹඥ෇͘DNSϨίʔυΛ಺෦తʹղܾͯ͘͠ΕΔ
    • ALIASͳ͠



    • ALIAS͋Γ

    ઃఆ :

    Ϩεϙϯε :
    • 1RTTઅ໿Ͱ͖ΔͷͰɺجຊతʹ͸ΤΠϦΞεΛ࢖͏
    www.example.com IN CNAME xxx.cloudfront.net

    xxx.cloudfront.net IN A 192.168.1.1
    www.example.com ALIAS xxx.cloudfront.net
    www.example.com IN A 192.168.1.1

    View Slide

  15. 2. Amazon VPCͷDNS

    View Slide

  16. Amazon Provided DNS
    • VPCͷCIDRͷ.2(ݫີʹ͸CIDRͷ3൪໨ͷIPΞυϨε)͕

    DNSΩϟογϡαʔόʔͱͯ͠ಈ࡞
    • DHCPͷDNSαʔόʔͱͯ͠EC2ʹ௨஌͞ΕΔ

    (ΧελϚΠζՄೳ)
    • ENI͋ͨΓͷϨʔτϦϛοτ(1024PPS)͕͋Δ
    • ϦιʔεϨίʔυͷTTLͷ্ݶ஋͕60ʹͳΔ

    View Slide

  17. Amazon Provided DNS
    https://dev.classmethod.jp/cloud/vpcfor-infra-engineer-1/

    View Slide

  18. Amazon Provided DNS (Cont.)
    • औΓѻ͏ϦιʔεϨίʔυ
    • ΠϯλʔωοτͷωʔϜεϖʔε
    • VPC Private IPͷٯҾ͖&ਖ਼Ҿ͖
    • Route 53 Private Hosted Zone
    • VPCΤϯυϙΠϯτͷΠϯλʔϑΣʔελΠϓ
    • Φϯ/ΦϑͷΈͰϑΥϫʔυͳͲͷΦϓγϣϯػೳ͸ແ͍

    View Slide

  19. ·ͱΊ
    • Route 53͸ߴ͍Մ༻ੑͱ༷ʑͳػೳΛ࣋ͭϚωʔδυͳ

    ݖҖDNSαʔϏε
    • ੵۃతʹΤΠϦΞεϨίʔυΛ࢖͓͏
    • Amazon Provided DNS͸VPCͰར༻Ͱ͖ΔϚωʔδυͳ
    ΩϟογϡDNSαʔϏε

    View Slide

  20. Q&A?

    View Slide

  21. Ξϯέʔτʹ͝ڠྗ͍ͩ͘͞ʂ

    View Slide