IPv6 on AWS

AWS Premier Night #2 2016/09/16

Transcript

1. IPv6 on AWS
   AWS Premier Night #2 2016/09/16
   Ϋϥεϝιου େ୍ོଠ
   

   View Slide

2. About me
   • Ryuta Otaki @takipone
   • Job :

   AWS / IoT / SORACOM

   Pre-sales/Engineer

   @Classmethod, Inc.
   • Interest :

   Network / Deploment Tools
   • Favorite AWS Service :

   Amazon Route 53 / ACM
   

   View Slide

3. Ϋϥεϝιουͷ঺հ
   

   AWSɺiOSʹؔ͢Δٕज़ϒϩάΛ

   ࣾһ૯ग़Ͱ΍ͬͯ·͢ɻ

   http://dev.classmethod.jp/
   

   View Slide

4. Agenda
   • ࿩͢͜ͱ
   • AWSͷIPv6ରԠ͸
   • ͍ͭ΍Δͷʁ
   • Կ͢Ε͹͍͍ͷʁ
   • ࿩͞ͳ͍͜ͱ
   • IPv6ͱ͸ / IPv6ΞυϨογϯά
   *1WΞυϨε͕
   ଍Γͳ͍
   ˝
   ܻ਺ͷଟ͍*1Wʹ
   UI
   

   View Slide

5. ݱࡏͷAWSͷ

   IPv6αϙʔτঢ়گ
   

   View Slide

6. IPv6ରԠAWSαʔϏεͷఆٛ
   • ҎԼͷ͍ͣΕ͔͕IPv6ΞυϨε

   (≒DNSͷAAAAϨίʔυ)Λ࣋ͭ
   • αʔϏε͔ΒׂΓ౰ͯΒΕΔϦιʔε
   • ڞ༗αʔϏεͷΤϯυϙΠϯτ
   

   View Slide

7. IPv6ରԠͷAWSαʔϏε
   • EC2 Classic
   • ELB Classic Load Balancer & Classic EC2ͷ
   Έ
   • Amazon S3 ※ [NEW!!]
   • AWS IoT
   ※ ELBͱS3͸αϒυϝΠϯ`dualstack.`

   ͷ༗ແʹΑΔબ୒੍
   

   View Slide

8. ๕͘͠ͳ͍
   ͳ͔ͥ
   

   View Slide

9. IPv6Πϯλʔωοτ͕

   ·ͩओྲྀ͡Όͳ͍͔Βɻ

   (ಛʹίϯςϯπϓϩόΠμଆ)
   

   View Slide

10. v6Πϯλʔωοτ͸v4ͱ͸ผ෺
    • v4Πϯλʔωοτͱv6Πϯλʔωοτ͸ผʹߏ੒
    ͞Ε͍ͯΔͷͰɺΫϥΠΞϯτ/αʔόʔͦΕͧΕ
    ͕v6Πϯλʔωοτʹ઀ଓ͠ͳ͚Ε͹ͳΒͳ͍
    ΫϥΠΞϯτ
    Πϯλʔ

    ωοτ αʔόʔ
    v6Πϯλʔωοτ
    

    View Slide

11. ΫϥΠΞϯτଆ͸·ͣ·ͣ਎ۙʹ
    • ISPͷv6ΦϓγϣϯʹՃೖ͢Ε͹ɺv6Πϯλʔωοτ
    ΁ͷ൶͕։͘
    • υϝΠϯ໊ͰͷΞΫηε͕΄ͱΜͲͳͷͰɺΫϥΠΞ
    ϯτ͕v4/v6Λҙࣝ͢Δͷ͸ك
    ΫϥΠΞϯτ
    Πϯλʔ

    ωοτ
    v6

    Πϯλʔωοτ
    ISPઃඋ
    σϡΞϧελοΫ
    ରԠ͸΄΅׬ྃ
    v6

    Φϓγϣϯ
    

    View Slide

12. αʔόʔଆ͸શવฉ͔ͳ͍
    • ݱࡏ͸v4Πϯλʔωοτ͕ओྲྀͳͷͰਖ਼௚ɺ

    ࠔΔ͜ͱ͸ແ͍ɻ

    (v6 over v4ͷม׵ٕज़΋ൃల)
    ΫϥΠΞϯτ
    Πϯλʔ

    ωοτ αʔόʔ
    v6 over v4ͷྫ
    

    View Slide

13. v6Πϯλʔωοτ͕ීٴ͠ͳ͍
    • શTLS/SSLԽ΍HTTP/2ͷීٴͱൺ΂ΔͱϞν
    ϕʔγϣϯ͕ऑ͍ (ηΩϡϦςΟରࡦɺύ
    ϑΥʔϚϯεΞοϓͱ͔ແ͍)
    • IPv6΁ͷ੾Γସ͑ʹΑΔӨڹ͕ਙେ
    • ಛʹDNS͸ରԠͤ͞Δ೉қ౓͕ߴ͍
    

    View Slide

14. v6Πϯλʔωοτ͕ීٴ͠ͳ͍
    • ଍Ի͸େ͖͘ͳ͖ͬͯͨ
    • Apple App StoreͷIPv6ରԠٛ຿Խ
    • ࣍ʹಈ͘ͱͨ͠ΒGoogle?
    

    View Slide

15. IPv6ରԠ͸͍ͭ΍Δͷʁ
    

    View Slide

16. ΋͏ͪΐͬͱ༷ࢠݟ·͠ΐ͏
    

    View Slide

17. IPv6ରԠͬͯ
    ͳʹ͢Ε͹͍͍ͷʁ
    ͦ͏͸͍͍ͭͭ
    

    View Slide

18. αʔόʔଆͷIPv6ରԠ
    • v6Πϯλʔωοτͷ઀ଓ఺
    • ϦόʔεϓϩΩγ
    • CDN
    • όοΫΤϯυαʔόʔ·ͰͷIPv6Խ͕

    ඞਢͱ͸ݶΒͳ͍
    ϦόʔεϓϩΩγ
    / CDN αʔόʔ
    v6

    Πϯλʔωοτ
    ͬͪ͜͸W
    

    View Slide

19. αʔόʔଆͷIPv6ରԠ
    • ্ҐΞϓϦέʔγϣϯ
    • ϛυϧ΢ΣΞ/ϥΠϒϥϦͷIPv6ରԠ֬ೝ
    • ΞυϨεͷϋʔυίʔυ
    • ϩάͷσʔλαΠζ૿
    

    View Slide

20. ΫϥΠΞϯτͷಈ࡞֬ೝ
    • σϡΞϧελοΫ/ϐϡΞIPv6ͰৼΔ෣͍͕ҟ
    ͳΔ
    • IPv6͕μϝͳ৔߹ʹIPv4ʹϑΥʔϧόοΫ
    (࠶઀ଓ)͢Δ
    • ໊લղܾ/DNSͱͷಆ͍ɻhostsϑΝΠϧ͕݁
    ߏཔΓʹͳΔ
    • ϛυϧ/ϥΠϒϥϦͷϦκϧό͕ಠ࣮ࣗ૷ͷ
    ৔߹͸ཁ஫ҙ!! tcpdumpͰύέοτղੳ΋
    ༗ޮ
    

    View Slide

21. ΫϥΠΞϯτͷಈ࡞֬ೝ
    • ISPͷIPv6Φϓγϣϯ
    • IPv6ରԠࡁΈΫϥ΢υ/VPSͷར༻
    • DigitalOcean
    • ͘͞Β
    

    View Slide

22. AWSͰϥΫ͍ͨ͠
    

    View Slide

23. LB/CDNͷIPv6ରԠʹظ଴
    • ELB/ALB(in VPC)ͷIPv6ରԠΛفΔ
    • CloudFrontͷIPv6ରԠΛفΔ
    • ͍ͭͰʹRoute 53ͷIPv6ରԠΛفΔ
    

    View Slide

24. VPC͸ʁ
    

    View Slide

25. VPCͷIPv6Խ͸ඞਢʁ
    • ϦόʔεϓϩΩγɺCDN͕IPv6ରԠ͢Ε͹

    OKͱ൑அ͢Δ͜ͱ΋Ͱ͖Δ
    • VPN/Direct ConnectͰIPv6ͳΦϯϓϨϛε
    ωοτϫʔΫͱܨ͙৔߹͸ʁ
    

    View Slide

26. IPv6ͳดҬ໢ʁ
    

    View Slide

27. NTT ϑϨοπޫ஍Ҭ໢
    

    View Slide

28. Ϋϥ΢υήʔτ΢ΣΠ

    ΞϓϦύοέʔδ
    • https://flets.com/cloudgateway/
    ݱࡏ͸/55౦೔ຊͷΈ
    

    View Slide

29. ݕূϒϩά͋Γ·͢&

    ΋͏ͪΐͬͱॻ͖·͢
    

    View Slide

30. ·ͱΊ
    • ELBͱCloudFront͕IPv6ʹରԠͨ͠Βߟ͑Α͏
    • ϑϧIPv6Խ͕ඞͣ͠΋ཁ݅ʹͳΔͱ͸ݶΒͳ͍
    • ಈ࡞֬ೝ͸ख͕͔͔ؒΔ͜ͱΛ֮ޛͯ͠ܭըతʹ
    

    View Slide