Amazon VPC Deep Dive: ENI 를 알면 VPC 가 보인다

AWSKRUG 구로디지털단지모임 40회차 발표자료입니다.

Transcript

1. Amazon VPC Deep Dive
   : ENI ܳ ঌݶ VPC о ࠁੋ׮
   #AWSKRUGҳ٣ݽ੐
   ߊ಴੗ : ӣక਋
   

   View Slide

2. ߊ಴੗ ࣗѐ
   •AWS Solutions Architect @classmethod
   •2020 APN AWS Top Engineers
   •12x AWS Certified
   https://dev.classmethod.jp/author/kim-taewoo/
   ೠҴয & ੌࠄয ӝࣿ࠶۽Ӓ
   I Serverless on AWS
   

   View Slide

3. ߊ಴ղਊী ؀ೞৈ
   • ࠄ ߊ಴੗ܐח ૑դߣ ҳ٣ݽ੐ী ੉যࢲ ѐߊ੗ٜਸ ؀࢚ਵ۽ AWS ੄ ֎౟ਕ௼ܳ ખ ؊ Ө੉
   ঌইࠁ੗ח ஂ૑۽ ӝദػ ੗ܐੑפ׮.
   
   • ੷ח ֎౟ਕ௼ ࠙ঠ੄ ੹ޙоо ইשਸ ߋ൩פ׮.
   
   • ߊ಴੗੄ ੌߑ੸ੋ ૑ध੹׳ࠁ׮ب, ࠄ ߊ಴੗ܐܳ ӝ߈ਵ۽ ֎౟ਕ௼ ੹ޙоٜ࠙੄ ଵৈܳ ਬ
   بೞҊ, ੄Ѽ Үܨܳ ా೧ ׮э੉ ؊ ߓਕо੗ח ஂ૑۽ ٜ݅য૓ ੗ܐੑפ׮.
   
   • Ӓ۞޲۽, ֎౟ਕ௼ ূ૑פয ߂ ੋ೐ۄ ূ૑פয ҙ੼ীࢲ੄ Deep Dive о ইק ࣻب ੓਺ী
   ޷ܻ ন೧ܳ ҳ೤פ׮.
   

   View Slide

4. ৈ۞࠙, VPC ח ׮ٜ ইदભ?ƃƃ
   

   View Slide

5. Ӓۢ ENI ب ޥ૑ ঌҊ ҅नоਃ?
   

   View Slide

6. ENI (Elastic Network Interface)
   

   View Slide

7. ENI (Elastic Network Interface)
   • VPC ীࢲ о࢚ ֎౟ਕ௼஠٘ী ೧׼ೞח ѐ֛ਵ۽, VPC উ੄ ೐ۄ੉ࡁ IP ߧਤী ࣘೞח
   IP ઱ࣗܳ ೠѐ ੉࢚ о૕ ࣻ ੓׮. (Primary, Secondary)
   
   • EIP (Elastic IP) ܳ associate दெࢲ ಌ࠶ܼ IP ب о૕ ࣻ ੓׮.
   
   • Security Group ੉ attach غח ؀࢚ - Security Group ਷ ENI ী ࠢח Ѫ!
   
   • MAC য٘ۨझܳ о૓׮.
   
   • Source/Destination Check ب ENI о ׸׼ೠ׮.
   
   • VPC Flow Logs ب ENI ܳ ӝ߈ਵ۽ ࢤࢿػ׮.
   

   View Slide

8. ੉Ѧ ੍যࢲ ੉೧ؼѢݶ
   Ҷ੉ ੉۠ ߊ಴ উ೧ب غѷભ?ƃƃ
   

   View Slide

9. Ӓܿਵ۽ ੽Ӕ೧ࠇद׮!
   

   View Slide

10. VPC ಌ࠶ܼ ࢲ࠳֔ী ਤ஖ೠ EC2 ੋझఢझী ঘࣁझೞח दաܻয়ܳ ࢚࢚೧ࠇद׮
    

    View Slide

11. ખ ؊ ࢚ࣁ൤ ಴അೞݶ ENI ܳ ా೧ EC2 ী ঘࣁझо оמೞભ!
    

    View Slide

12. ӒܻҊ ಌ࠶ܼ ࢲ࠳֔੉פө ENI ী EIP ب ࠢয੓ਸѢҊ…
    

    View Slide

13. Security Group ب ENI ী ੸ਊؾפ׮. (ࠂࣻѐ੄ Security Group ب оמ)
    

    View Slide

14. ݒפ૑٘ ௑ࣛীࢲ ഛੋ೧ࠇद׮
    

    View Slide

15. View Slide

16. View Slide

17. View Slide

18. Ӕؘ ݈੉ঠ….
    ੉ۧѱ рױೠ ENI ܳ ইחѢی
    VPC ܳ ؊ ੜ ੉೧ೞחѢی
    ޖट ࢚ҙ੉ ੓חؘ???
    

    View Slide

19. AWS Lambda ੗઱ ॳदભ?
    

    View Slide

20. ޤ ੉੿بତ਷..ƃƃ
    

    View Slide

21. Ӕؘ Amazon RDS ܳ ॳҊ र׮ݶ?
    

    View Slide

22. ੉ۧѱ ೞݶ غחѢ ইפঠ?
    

    View Slide

23. ੉ۧѱ ೞݶ غחѢ ইפঠ?
    

    View Slide

24. જই.. ੌױ RDS ח VPC ೐ۄ੉ࡁ ࢲ࠳֔ উী ֬Ҋ…
    Lambda
    

    View Slide

25. Lambda
    Lambda ب э਷ VPC э਷ ࢲ࠳֔ী ֬ਵݶ غ۰ա..? ( જ૑ ঋ਷ ࢲ࠳֔ ҳࢿ੐ী ઱੄! )
    

    View Slide

26. Lambda
    ই..! DynamoDB یب ాनೞҊ र਷ؘ?!
    

    View Slide

27. Lambda
    ই..! DynamoDB یب ాनೞҊ र਷ؘ?!
    

    View Slide

28. Lambda
    VPC Endpoint ٜ݅Ҋ ۄ਋ఠী ҃۽ ੑ۱ೞݶ…!!!
    

    View Slide

29. Lambda
    VPC Endpoint ٜ݅Ҋ ۄ਋ఠী ҃۽ ੑ۱ೞҊ…
    ৮੹ औ֎ƃƃ
    

    View Slide

30. ৈӝࢲ ইޖ۠ ਤചхਸ ޅ וՙ࣑׮ݶ
    য়ט ݆਷Ѫਸ ঳যоप ࣻ ੓णפ׮ƃƃ
    

    View Slide

31. Lambda
    VPC Lambda ח VPC ܻࣗझ৬ ాनೡ ࣻ ੓ח ENI ܳ فח Ѫ ࡺ!!
    

    View Slide

32. Lambda
    যۄ..? Lambda о زदী ࣻୌ~ࣻ݅ѐо प೯غݶ ࢲ࠳֔ IP ࠗ઒೧૑חѢ ইצо?!
    

    View Slide

33. Lambda
    BEFORE & AFTER
    ৘੹ VPC Lambda ݽ؛ അ੤ VPC Lambda ݽ؛
    

    View Slide

34. View Slide

35. Lambda
    Hyperplane
    Hyperplane?? Hyperlane ENI??
    

    View Slide

36. Lambda
    Hyperplane
    • AWS ղࠗীࢲ ࢎਊغח ۽٘ߖ۠य ࢲ࠺झ
    • S3 API ੄ ۽٘ߖ۠ࢲо ӝ߈
    
    • EFS ীࢲח ୡӝࠗఠ ࢎਊغҊ ੓਺
    
    • ׮নೠ ࢲ࠺झী ੉ਊغӝ द੘
    
    • API Gateway ੄ VPC Link, NLB, NAT Gateway
    
    • ӒܻҊ… VPC Lambda
    

    View Slide

37. Lambda
    Hyperplane
    • ࢎप Ӓր EC2 ੋझఢझ੄ Fleet ҳࢿੌ ࡺ!
    
    • ೙ਃী ٮۄ ঌইࢲ झாੌ স/׮਍ ߂ ੋ/ইਓ ػ׮
    

    View Slide

38. Lambda
    Hyperplane
    Hyperlane ী ঘࣁझ оמೠ ENI
    (AWS ղࠗী ઓ੤)
    

    View Slide

39. Lambda
    

    View Slide

40. Lambda
    ࢎप਷ AWS Lambda ղࠗীب VPC о ઓ੤ (AWS о ҙܻೞ޲۽ Ҋёীѱ উࠁ੐)
    

    View Slide

41. Lambda
    VPC Lambda ܳ ࢸ੿ೞݶࢲ Subnet ਸ ࢶఖೞѱغחؘ, ੉ٸ ೧׼ ࢲ࠳֔ উী ENI о ੗زਵ۽ ࢤࢿغযࢲ
    AWS Lambda ղࠗ੄ Hyperplane ENI ৬ োѾؽ
    

    View Slide

42. Lambda
    VPC Lambda ܳ ࢸ੿ೞݶࢲ Subnet ਸ ࢶఖೞѱغחؘ, ੉ٸ ೧׼ ࢲ࠳֔ উী ENI о ੗زਵ۽ ࢤࢿغযࢲ
    AWS Lambda ղࠗ੄ Hyperplane ENI ৬ োѾؽ
    

    View Slide

43. BEFORE
    AFTER
    

    View Slide

44. Lambda
    VPC ৬ োزغח ఋ ࢲ࠺झٜী ؀ೞৈ
    • VPC ߂ ࢲ࠳֔ਸ ࢶఖ೧ࢲ ղо ݅ٚ VPC ৬ োزػ׮
    
    • ೧׼ ࢲ࠳֔ী ENI о ੗زਵ۽ ࢤࢿغҊ, ੉ܳ ా೧ VPC ղࠗ੄ ܻࣗझ৬ ాन੉ оמೞ׮!
    

    View Slide

45. Lambda
    VPC ৬ োزغח ఋ ࢲ࠺झٜী ؀ೞৈ
    

    View Slide

46. Lambda
    

    View Slide

47. Lambda
    

    View Slide

48. Lambda
    Client VPN ਸ ࢎਊೞӝ ਤ೧ Client VPN Endpoint (؀ۚ੸ਵ۽ ࠁݶ ENI) ܳ VPC ղী ࢤࢿೠ׮!
    

    View Slide

49. Lambda
    хࢎ೤פ׮! :)
    

    View Slide