SaaSで実現するトラッフィク制御とセキュリティ

九州インフラ交流勉強会(Kixs) Vol.010 での発表資料です

Transcript

1. | ©2019 F5 NETWORKS 1 SaaSW e s r Bs December 5, 2019 k (KIXS) VOL.010
2. | ©2019 F5 NETWORKS 2 F5 CLOUD SERVICES SERVICES DNS DNS Load Balancer Beacon Bot Protect D B E / B (/ B B i B B
3. | ©2019 F5 NETWORKS 3 F5 CLOUD SERVICES iBr s API Portal > curl http://api.cs.f5.com:8888/users/43837 F5 Cloud Services DNS Load Balancer DNS Cloud Services Service Centric Analytics Customer workloads SERVICE FRAMEWORK New Service … Data Center New Service
4. | ©2019 F5 NETWORKS 4 DNS Cloud Secondary Primary DNS Zone Transfer Cloud Secondary Cloud Secondary Primary DNS Zone Transfer B B 1: B B B :2 Hidden B DNS B • DDoS k • BGP Anycast GSt B n k • DNSSEC
5. | ©2019 F5 NETWORKS 5 DNS (# 
    
   % 1
   ' 1 2 C25 $0.20 26C10,000 $0.10 10,000 $0.03 ! % 100$ ,' 300 300 C10 $0.40 10 $0.20 
6. | ©2019 F5 NETWORKS 6 DNS Load Balancer t B B B t B • DDoS k • s B B t • HTTP/HTTPS,TCP,ICMP • B B B t • B t • L • • s B DNS Load Balancer Global Users EU Users DNS Load Balancer Primary Primary Disaster Recover B B 1 GDPR B B 2 DR
7. | ©2019 F5 NETWORKS 7 DNS Load Balancer (#  LBR% 1LBR !' 1 2 $0.013 ! % 100$ ,' 300 300 C10 $0.50 10 $0.25   %  , ' 10 W s 11 s $0.73 Advanced s $2.19 
   s IPn k
8. | ©2019 F5 NETWORKS 8 DNS (# 
    
   % 1
   ' 1 2 C25 $0.20 26C10,000 $0.10 10,000 $0.03 ! % 100$ ,' 300 300 C10 $0.40 10 $0.20 
9. | ©2019 F5 NETWORKS 9 Bot Protect B 2019 12 W W B N e IF W J NG
10. | ©2019 F5 NETWORKS 10 be s k B c J bUV N VGe 42% be s R bea 50% https://www.globaldots.com/2018-bad-bot-report-the-year-bad-bots-went-mainstream/
11. | ©2019 F5 NETWORKS 11 Bot Le k Bad bot vs Good bot vs Human traffic for 2017 - By industry https://www.globaldots.com/blog/2018-bad-bot-report-the-year-bad-bots-went-mainstream • Bot Le k Se • Bot • r • Bv k • DDoS • • i U • Bot t r LW J e
12. | ©2019 F5 NETWORKS 12 Gen1: Scripts Gen2: Scripts+State Gen3:Headless Browsers Gen4: Infected Users 90;,=3 2000;,2R 2010 2014 Bot s s D / E i B /5 B s V s s k t B oB i s s B r t D E p k p B /5 B t e G B G vB
13. | ©2019 F5 NETWORKS 13 Gen1: Scripts Gen2: Scripts+State Gen3:Headless Browsers Gen4: Infected Users 90;,=3 2000;,2R 2010 2014 Bot s s D / E i B /5 B s V s s k t B oB i s s B r t D E p k p B /5 B t e G B G vB 0- 4%  %   H? I N: 7
14. | ©2019 F5 NETWORKS 14 Bot Protect 4'Bot( * G> • S< BotE1@M • AL"(EJFD8K &' • !%'5Enforcer /Q • DNS P96C'%')O • !%'B.+9!% (# F5 Cloud Services BIG-IP Enforcer ")* 
15. | ©2019 F5 NETWORKS 15 Bot Protect$
16. | ©2019 F5 NETWORKS 22 '!
17. | ©2019 F5 NETWORKS 23 '! https://portal.cloudservices.f5.com/ &+   AWS Marketplace  
18. | ©2019 F5 NETWORKS 24 
19. | ©2019 F5 NETWORKS 25 SUMMARY • / ) / / / s r B O • / ) / k i W W W
20. | ©2019 F5 NETWORKS 26