Upgrade to Pro — share decks privately, control downloads, hide ads and more …

SaaSで実現するトラッフィク制御とセキュリティ

D637d86990571c01ea0fd098a2bdfa33?s=47 ttakada
December 04, 2019

 SaaSで実現するトラッフィク制御とセキュリティ

九州インフラ交流勉強会(Kixs) Vol.010 での発表資料です

D637d86990571c01ea0fd098a2bdfa33?s=128

ttakada

December 04, 2019
Tweet

Transcript

  1. | ©2019 F5 NETWORKS 1 SaaSW e s r Bs

    December 5, 2019 k (KIXS) VOL.010
  2. | ©2019 F5 NETWORKS 2 F5 CLOUD SERVICES SERVICES DNS

    DNS Load Balancer Beacon Bot Protect D B E / B (/ B B i B B
  3. | ©2019 F5 NETWORKS 3 F5 CLOUD SERVICES iBr s

    API Portal > curl http://api.cs.f5.com:8888/users/43837 F5 Cloud Services DNS Load Balancer DNS Cloud Services Service Centric Analytics Customer workloads SERVICE FRAMEWORK New Service … Data Center New Service
  4. | ©2019 F5 NETWORKS 4 DNS Cloud Secondary Primary DNS

    Zone Transfer Cloud Secondary Cloud Secondary Primary DNS Zone Transfer B B 1: B B B :2 Hidden B DNS B • DDoS k • BGP Anycast GSt B n k • DNSSEC
  5. | ©2019 F5 NETWORKS 5 DNS (#  % 1'

    1 2 C25 $0.20 26C10,000 $0.10 10,000 $0.03 ! % 100$ ,' 300 300 C10 $0.40 10 $0.20 
  6. | ©2019 F5 NETWORKS 6 DNS Load Balancer t B

    B B t B • DDoS k • s B B t • HTTP/HTTPS,TCP,ICMP • B B B t • B t • L • • s B DNS Load Balancer Global Users EU Users DNS Load Balancer Primary Primary Disaster Recover B B 1 GDPR B B 2 DR
  7. | ©2019 F5 NETWORKS 7 DNS Load Balancer (# 

    LBR% 1LBR !' 1 2 $0.013 ! % 100$ ,' 300 300 C10 $0.50 10 $0.25   %  , ' 10 W s 11 s $0.73 Advanced s $2.19   s IPn k
  8. | ©2019 F5 NETWORKS 8 DNS (#  % 1'

    1 2 C25 $0.20 26C10,000 $0.10 10,000 $0.03 ! % 100$ ,' 300 300 C10 $0.40 10 $0.20 
  9. | ©2019 F5 NETWORKS 9 Bot Protect B 2019 12

    W W B N e IF W J NG
  10. | ©2019 F5 NETWORKS 10 be s k B c

    J bUV N VGe 42% be s R bea 50% https://www.globaldots.com/2018-bad-bot-report-the-year-bad-bots-went-mainstream/
  11. | ©2019 F5 NETWORKS 11 Bot Le k Bad bot

    vs Good bot vs Human traffic for 2017 - By industry https://www.globaldots.com/blog/2018-bad-bot-report-the-year-bad-bots-went-mainstream • Bot Le k Se • Bot • r • Bv k • DDoS • • i U • Bot t r LW J e
  12. | ©2019 F5 NETWORKS 12 Gen1: Scripts Gen2: Scripts+State Gen3:Headless

    Browsers Gen4: Infected Users 90;,=3 2000;,2R 2010 2014 Bot s s D / E i B /5 B s V s s k t B oB i s s B r t D E p k p B /5 B t e G B G vB
  13. | ©2019 F5 NETWORKS 13 Gen1: Scripts Gen2: Scripts+State Gen3:Headless

    Browsers Gen4: Infected Users 90;,=3 2000;,2R 2010 2014 Bot s s D / E i B /5 B s V s s k t B oB i s s B r t D E p k p B /5 B t e G B G vB 0- 4%  %   H? I N: 7
  14. | ©2019 F5 NETWORKS 14 Bot Protect 4'Bot( * G>

    • S< BotE1@M • AL"(EJFD8K &' • !%'5Enforcer /Q • DNS P96C'%')O • !%'B.+9!% (# F5 Cloud Services BIG-IP Enforcer ")* 
  15. | ©2019 F5 NETWORKS 15 Bot Protect$

  16. | ©2019 F5 NETWORKS 22 '!

  17. | ©2019 F5 NETWORKS 23 '! https://portal.cloudservices.f5.com/ &+  

    AWS Marketplace  
  18. | ©2019 F5 NETWORKS 24 

  19. | ©2019 F5 NETWORKS 25 SUMMARY • / ) /

    / / s r B O • / ) / k i W W W
  20. | ©2019 F5 NETWORKS 26