Amazon VPC Deep Dive: ENI 를 알면 VPC 가 보인다

Acb6390b6c4b5192f40e10601b63dafc?s=47 Taewoo Kim
November 17, 2020

Amazon VPC Deep Dive: ENI 를 알면 VPC 가 보인다

AWSKRUG 구로디지털단지모임 40회차 발표자료입니다.

Acb6390b6c4b5192f40e10601b63dafc?s=128

Taewoo Kim

November 17, 2020
Tweet

Transcript

  1. Amazon VPC Deep Dive : ENI ܳ ঌݶ VPC о

    ࠁੋ׮ #AWSKRUGҳ٣ݽ੐ ߊ಴੗ : ӣక਋
  2. ߊ಴੗ ࣗѐ •AWS Solutions Architect @classmethod •2020 APN AWS Top

    Engineers •12x AWS Certified https://dev.classmethod.jp/author/kim-taewoo/ ೠҴয & ੌࠄয ӝࣿ࠶۽Ӓ I Serverless on AWS
  3. ߊ಴ղਊী ؀ೞৈ • ࠄ ߊ಴੗ܐח ૑դߣ ҳ٣ݽ੐ী ੉যࢲ ѐߊ੗ٜਸ ؀࢚ਵ۽

    AWS ੄ ֎౟ਕ௼ܳ ખ ؊ Ө੉ ঌইࠁ੗ח ஂ૑۽ ӝദػ ੗ܐੑפ׮. • ੷ח ֎౟ਕ௼ ࠙ঠ੄ ੹ޙоо ইשਸ ߋ൩פ׮. • ߊ಴੗੄ ੌߑ੸ੋ ૑ध੹׳ࠁ׮ب, ࠄ ߊ಴੗ܐܳ ӝ߈ਵ۽ ֎౟ਕ௼ ੹ޙоٜ࠙੄ ଵৈܳ ਬ بೞҊ, ੄Ѽ Үܨܳ ా೧ ׮э੉ ؊ ߓਕо੗ח ஂ૑۽ ٜ݅য૓ ੗ܐੑפ׮. • Ӓ۞޲۽, ֎౟ਕ௼ ূ૑פয ߂ ੋ೐ۄ ূ૑פয ҙ੼ীࢲ੄ Deep Dive о ইק ࣻب ੓਺ী ޷ܻ ন೧ܳ ҳ೤פ׮.
  4. ৈ۞࠙, VPC ח ׮ٜ ইदભ?ƃƃ

  5. Ӓۢ ENI ب ޥ૑ ঌҊ ҅नоਃ?

  6. ENI (Elastic Network Interface)

  7. ENI (Elastic Network Interface) • VPC ীࢲ о࢚ ֎౟ਕ௼஠٘ী ೧׼ೞח

    ѐ֛ਵ۽, VPC উ੄ ೐ۄ੉ࡁ IP ߧਤী ࣘೞח IP ઱ࣗܳ ೠѐ ੉࢚ о૕ ࣻ ੓׮. (Primary, Secondary) • EIP (Elastic IP) ܳ associate दெࢲ ಌ࠶ܼ IP ب о૕ ࣻ ੓׮. • Security Group ੉ attach غח ؀࢚ - Security Group ਷ ENI ী ࠢח Ѫ! • MAC য٘ۨझܳ о૓׮. • Source/Destination Check ب ENI о ׸׼ೠ׮. • VPC Flow Logs ب ENI ܳ ӝ߈ਵ۽ ࢤࢿػ׮.
  8. ੉Ѧ ੍যࢲ ੉೧ؼѢݶ Ҷ੉ ੉۠ ߊ಴ উ೧ب غѷભ?ƃƃ

  9. Ӓܿਵ۽ ੽Ӕ೧ࠇद׮!

  10. VPC ಌ࠶ܼ ࢲ࠳֔ী ਤ஖ೠ EC2 ੋझఢझী ঘࣁझೞח दաܻয়ܳ ࢚࢚೧ࠇद׮

  11. ખ ؊ ࢚ࣁ൤ ಴അೞݶ ENI ܳ ా೧ EC2 ী ঘࣁझо

    оמೞભ!
  12. ӒܻҊ ಌ࠶ܼ ࢲ࠳֔੉פө ENI ী EIP ب ࠢয੓ਸѢҊ…

  13. Security Group ب ENI ী ੸ਊؾפ׮. (ࠂࣻѐ੄ Security Group ب

    оמ)
  14. ݒפ૑٘ ௑ࣛীࢲ ഛੋ೧ࠇद׮

  15. None
  16. None
  17. None
  18. Ӕؘ ݈੉ঠ…. ੉ۧѱ рױೠ ENI ܳ ইחѢی VPC ܳ ؊

    ੜ ੉೧ೞחѢی ޖट ࢚ҙ੉ ੓חؘ???
  19. AWS Lambda ੗઱ ॳदભ?

  20. ޤ ੉੿بତ਷..ƃƃ

  21. Ӕؘ Amazon RDS ܳ ॳҊ र׮ݶ?

  22. ੉ۧѱ ೞݶ غחѢ ইפঠ?

  23. ੉ۧѱ ೞݶ غחѢ ইפঠ?

  24. જই.. ੌױ RDS ח VPC ೐ۄ੉ࡁ ࢲ࠳֔ উী ֬Ҋ… Lambda

  25. Lambda Lambda ب э਷ VPC э਷ ࢲ࠳֔ী ֬ਵݶ غ۰ա..? (

    જ૑ ঋ਷ ࢲ࠳֔ ҳࢿ੐ী ઱੄! )
  26. Lambda ই..! DynamoDB یب ాनೞҊ र਷ؘ?!

  27. Lambda ই..! DynamoDB یب ాनೞҊ र਷ؘ?!

  28. Lambda VPC Endpoint ٜ݅Ҋ ۄ਋ఠী ҃۽ ੑ۱ೞݶ…!!!

  29. Lambda VPC Endpoint ٜ݅Ҋ ۄ਋ఠী ҃۽ ੑ۱ೞҊ… ৮੹ औ֎ƃƃ

  30. ৈӝࢲ ইޖ۠ ਤചхਸ ޅ וՙ࣑׮ݶ য়ט ݆਷Ѫਸ ঳যоप ࣻ ੓णפ׮ƃƃ

  31. Lambda VPC Lambda ח VPC ܻࣗझ৬ ాनೡ ࣻ ੓ח ENI

    ܳ فח Ѫ ࡺ!!
  32. Lambda যۄ..? Lambda о زदী ࣻୌ~ࣻ݅ѐо प೯غݶ ࢲ࠳֔ IP ࠗ઒೧૑חѢ

    ইצо?!
  33. Lambda BEFORE & AFTER ৘੹ VPC Lambda ݽ؛ അ੤ VPC

    Lambda ݽ؛
  34. None
  35. Lambda Hyperplane Hyperplane?? Hyperlane ENI??

  36. Lambda Hyperplane • AWS ղࠗীࢲ ࢎਊغח ۽٘ߖ۠य ࢲ࠺झ • S3

    API ੄ ۽٘ߖ۠ࢲо ӝ߈ • EFS ীࢲח ୡӝࠗఠ ࢎਊغҊ ੓਺ • ׮নೠ ࢲ࠺झী ੉ਊغӝ द੘ • API Gateway ੄ VPC Link, NLB, NAT Gateway • ӒܻҊ… VPC Lambda
  37. Lambda Hyperplane • ࢎप Ӓր EC2 ੋझఢझ੄ Fleet ҳࢿੌ ࡺ!

    • ೙ਃী ٮۄ ঌইࢲ झாੌ স/׮਍ ߂ ੋ/ইਓ ػ׮
  38. Lambda Hyperplane Hyperlane ী ঘࣁझ оמೠ ENI (AWS ղࠗী ઓ੤)

  39. Lambda

  40. Lambda ࢎप਷ AWS Lambda ղࠗীب VPC о ઓ੤ (AWS о

    ҙܻೞ޲۽ Ҋёীѱ উࠁ੐)
  41. Lambda VPC Lambda ܳ ࢸ੿ೞݶࢲ Subnet ਸ ࢶఖೞѱغחؘ, ੉ٸ ೧׼

    ࢲ࠳֔ উী ENI о ੗زਵ۽ ࢤࢿغযࢲ AWS Lambda ղࠗ੄ Hyperplane ENI ৬ োѾؽ
  42. Lambda VPC Lambda ܳ ࢸ੿ೞݶࢲ Subnet ਸ ࢶఖೞѱغחؘ, ੉ٸ ೧׼

    ࢲ࠳֔ উী ENI о ੗زਵ۽ ࢤࢿغযࢲ AWS Lambda ղࠗ੄ Hyperplane ENI ৬ োѾؽ
  43. BEFORE AFTER

  44. Lambda VPC ৬ োزغח ఋ ࢲ࠺झٜী ؀ೞৈ • VPC ߂

    ࢲ࠳֔ਸ ࢶఖ೧ࢲ ղо ݅ٚ VPC ৬ োزػ׮ • ೧׼ ࢲ࠳֔ী ENI о ੗زਵ۽ ࢤࢿغҊ, ੉ܳ ా೧ VPC ղࠗ੄ ܻࣗझ৬ ాन੉ оמೞ׮!
  45. Lambda VPC ৬ োزغח ఋ ࢲ࠺झٜী ؀ೞৈ

  46. Lambda

  47. Lambda

  48. Lambda Client VPN ਸ ࢎਊೞӝ ਤ೧ Client VPN Endpoint (؀ۚ੸ਵ۽

    ࠁݶ ENI) ܳ VPC ղী ࢤࢿೠ׮!
  49. Lambda хࢎ೤פ׮! :)