Amazon VPC Deep Dive: ENI 를 알면 VPC 가 보인다

AWSKRUG 구로디지털단지모임 40회차 발표자료입니다.

Transcript

1. Amazon VPC Deep Dive : ENI ܳ ঌݶ VPC о ࠁੋ׮ #AWSKRUGҳ٣ݽ੐ ߊ಴੗ : ӣక਋
2. ߊ಴੗ ࣗѐ •AWS Solutions Architect @classmethod •2020 APN AWS Top Engineers •12x AWS Certified https://dev.classmethod.jp/author/kim-taewoo/ ೠҴয & ੌࠄয ӝࣿ࠶۽Ӓ I Serverless on AWS
3. ߊ಴ղਊী ؀ೞৈ • ࠄ ߊ಴੗ܐח ૑դߣ ҳ٣ݽ੐ী ੉যࢲ ѐߊ੗ٜਸ ؀࢚ਵ۽ AWS ੄ ֎౟ਕ௼ܳ ખ ؊ Ө੉ ঌইࠁ੗ח ஂ૑۽ ӝദػ ੗ܐੑפ׮. • ੷ח ֎౟ਕ௼ ࠙ঠ੄ ੹ޙоо ইשਸ ߋ൩פ׮. • ߊ಴੗੄ ੌߑ੸ੋ ૑ध੹׳ࠁ׮ب, ࠄ ߊ಴੗ܐܳ ӝ߈ਵ۽ ֎౟ਕ௼ ੹ޙоٜ࠙੄ ଵৈܳ ਬ بೞҊ, ੄Ѽ Үܨܳ ా೧ ׮э੉ ؊ ߓਕо੗ח ஂ૑۽ ٜ݅য૓ ੗ܐੑפ׮. • Ӓ۞޲۽, ֎౟ਕ௼ ূ૑פয ߂ ੋ೐ۄ ূ૑פয ҙ੼ীࢲ੄ Deep Dive о ইק ࣻب ੓਺ী ޷ܻ ন೧ܳ ҳ೤פ׮.
4. ৈ۞࠙, VPC ח ׮ٜ ইदભ?ƃƃ
5. Ӓۢ ENI ب ޥ૑ ঌҊ ҅नоਃ?
6. ENI (Elastic Network Interface)
7. ENI (Elastic Network Interface) • VPC ীࢲ о࢚ ֎౟ਕ௼஠٘ী ೧׼ೞח ѐ֛ਵ۽, VPC উ੄ ೐ۄ੉ࡁ IP ߧਤী ࣘೞח IP ઱ࣗܳ ೠѐ ੉࢚ о૕ ࣻ ੓׮. (Primary, Secondary) • EIP (Elastic IP) ܳ associate दெࢲ ಌ࠶ܼ IP ب о૕ ࣻ ੓׮. • Security Group ੉ attach غח ؀࢚ - Security Group ਷ ENI ী ࠢח Ѫ! • MAC য٘ۨझܳ о૓׮. • Source/Destination Check ب ENI о ׸׼ೠ׮. • VPC Flow Logs ب ENI ܳ ӝ߈ਵ۽ ࢤࢿػ׮.
8. ੉Ѧ ੍যࢲ ੉೧ؼѢݶ Ҷ੉ ੉۠ ߊ಴ উ೧ب غѷભ?ƃƃ
9. Ӓܿਵ۽ ੽Ӕ೧ࠇद׮!
10. VPC ಌ࠶ܼ ࢲ࠳֔ী ਤ஖ೠ EC2 ੋझఢझী ঘࣁझೞח दաܻয়ܳ ࢚࢚೧ࠇद׮
11. ખ ؊ ࢚ࣁ൤ ಴അೞݶ ENI ܳ ా೧ EC2 ী ঘࣁझо оמೞભ!
12. ӒܻҊ ಌ࠶ܼ ࢲ࠳֔੉פө ENI ী EIP ب ࠢয੓ਸѢҊ…
13. Security Group ب ENI ী ੸ਊؾפ׮. (ࠂࣻѐ੄ Security Group ب оמ)
14. ݒפ૑٘ ௑ࣛীࢲ ഛੋ೧ࠇद׮
18. Ӕؘ ݈੉ঠ…. ੉ۧѱ рױೠ ENI ܳ ইחѢی VPC ܳ ؊ ੜ ੉೧ೞחѢی ޖट ࢚ҙ੉ ੓חؘ???
19. AWS Lambda ੗઱ ॳदભ?
20. ޤ ੉੿بତ਷..ƃƃ
21. Ӕؘ Amazon RDS ܳ ॳҊ र׮ݶ?
22. ੉ۧѱ ೞݶ غחѢ ইפঠ?
23. ੉ۧѱ ೞݶ غחѢ ইפঠ?
24. જই.. ੌױ RDS ח VPC ೐ۄ੉ࡁ ࢲ࠳֔ উী ֬Ҋ… Lambda
25. Lambda Lambda ب э਷ VPC э਷ ࢲ࠳֔ী ֬ਵݶ غ۰ա..? ( જ૑ ঋ਷ ࢲ࠳֔ ҳࢿ੐ী ઱੄! )
26. Lambda ই..! DynamoDB یب ాनೞҊ र਷ؘ?!
27. Lambda ই..! DynamoDB یب ాनೞҊ र਷ؘ?!
28. Lambda VPC Endpoint ٜ݅Ҋ ۄ਋ఠী ҃۽ ੑ۱ೞݶ…!!!
29. Lambda VPC Endpoint ٜ݅Ҋ ۄ਋ఠী ҃۽ ੑ۱ೞҊ… ৮੹ औ֎ƃƃ
30. ৈӝࢲ ইޖ۠ ਤചхਸ ޅ וՙ࣑׮ݶ য়ט ݆਷Ѫਸ ঳যоप ࣻ ੓णפ׮ƃƃ
31. Lambda VPC Lambda ח VPC ܻࣗझ৬ ాनೡ ࣻ ੓ח ENI ܳ فח Ѫ ࡺ!!
32. Lambda যۄ..? Lambda о زदী ࣻୌ~ࣻ݅ѐо प೯غݶ ࢲ࠳֔ IP ࠗ઒೧૑חѢ ইצо?!
33. Lambda BEFORE & AFTER ৘੹ VPC Lambda ݽ؛ അ੤ VPC Lambda ݽ؛
35. Lambda Hyperplane Hyperplane?? Hyperlane ENI??
36. Lambda Hyperplane • AWS ղࠗীࢲ ࢎਊغח ۽٘ߖ۠य ࢲ࠺झ • S3 API ੄ ۽٘ߖ۠ࢲо ӝ߈ • EFS ীࢲח ୡӝࠗఠ ࢎਊغҊ ੓਺ • ׮নೠ ࢲ࠺झী ੉ਊغӝ द੘ • API Gateway ੄ VPC Link, NLB, NAT Gateway • ӒܻҊ… VPC Lambda
37. Lambda Hyperplane • ࢎप Ӓր EC2 ੋझఢझ੄ Fleet ҳࢿੌ ࡺ! • ೙ਃী ٮۄ ঌইࢲ झாੌ স/׮਍ ߂ ੋ/ইਓ ػ׮
38. Lambda Hyperplane Hyperlane ী ঘࣁझ оמೠ ENI (AWS ղࠗী ઓ੤)
39. Lambda
40. Lambda ࢎप਷ AWS Lambda ղࠗীب VPC о ઓ੤ (AWS о ҙܻೞ޲۽ Ҋёীѱ উࠁ੐)
41. Lambda VPC Lambda ܳ ࢸ੿ೞݶࢲ Subnet ਸ ࢶఖೞѱغחؘ, ੉ٸ ೧׼ ࢲ࠳֔ উী ENI о ੗زਵ۽ ࢤࢿغযࢲ AWS Lambda ղࠗ੄ Hyperplane ENI ৬ োѾؽ
42. Lambda VPC Lambda ܳ ࢸ੿ೞݶࢲ Subnet ਸ ࢶఖೞѱغחؘ, ੉ٸ ೧׼ ࢲ࠳֔ উী ENI о ੗زਵ۽ ࢤࢿغযࢲ AWS Lambda ղࠗ੄ Hyperplane ENI ৬ োѾؽ
43. BEFORE AFTER
44. Lambda VPC ৬ োزغח ఋ ࢲ࠺झٜী ؀ೞৈ • VPC ߂ ࢲ࠳֔ਸ ࢶఖ೧ࢲ ղо ݅ٚ VPC ৬ োزػ׮ • ೧׼ ࢲ࠳֔ী ENI о ੗زਵ۽ ࢤࢿغҊ, ੉ܳ ా೧ VPC ղࠗ੄ ܻࣗझ৬ ాन੉ оמೞ׮!
45. Lambda VPC ৬ োزغח ఋ ࢲ࠺झٜী ؀ೞৈ
46. Lambda
47. Lambda
48. Lambda Client VPN ਸ ࢎਊೞӝ ਤ೧ Client VPN Endpoint (؀ۚ੸ਵ۽ ࠁݶ ENI) ܳ VPC ղী ࢤࢿೠ׮!
49. Lambda хࢎ೤פ׮! :)