$30 off During Our Annual Pro Sale. View Details »

20200616_devio_connect_chibayuki

 20200616_devio_connect_chibayuki

YukihiroChiba

June 16, 2020
Tweet

More Decks by YukihiroChiba

Other Decks in Technology

Transcript


  1. ઍ༿޾޺
    ஌Βͳͯ͘΋ࠔΒͳ͍͚Ͳɺ
    ஌Δͱָ͍͠71$ͷཪଆͷੈք

    View Slide

  2. ͸͡Ίʹ
    VPC࢖ͬͯ·͔͢ʁ

    View Slide

  3. ஌ͬͯ·͔͢ʁ
    ɾϚοϐϯάαʔϏε
    ɾBlackfoot
    ɾHyperplane

    View Slide

  4. ࠓճͷ໨త
    ͳΜͱͳ͘ಈ͖ͷ
    ΠϝʔδΛ௫ΜͰཉ͍͠ʂ

    View Slide


  5. ϚοϐϯάαʔϏε

    View Slide

  6. ϚοϐϯάαʔϏεͱ͸
    ෺ཧϗετؒͷ௨৴Λॿ͚ͯ͘ΕΔ΋ͷɻ
    w෼ࢄࢀরγεςϜ
    w."$ΞυϨε΍ɺ෺ཧϗετͷ*1ͳͲΛ؅ཧ
    wԑͷԼͷྗ࣋ͪ

    View Slide

  7. ͜Μͳ௨৴Λߟ͑ͯΈ·͠ΐ͏

    View Slide

  8. ·ͣ͸͓͞Β͍͔Β
    ϨΠϠ̎ͷ௨৴Λந৅Խͯ͠ߟ͑ͯΈΔ

    View Slide

  9. ηάϝϯτʹ͓͚Δϊʔυؒͷ௨৴

    View Slide

  10. ."$ΞυϨεΛ஌ΔͨΊʹ

    View Slide

  11. ."$ΞυϨε׬શʹ೺Ѳͨ͠

    View Slide

  12. ௨৴ͷ४උ0,ʂ

    View Slide

  13. ·ͨผͷ੾Γޱ͔Β
    EC2ΠϯελϯεΛ෺ཧ૚͔Βߟ͑ͯΈΔ

    View Slide

  14. σʔληϯλʔͳͲͷઃඋ
    ϑΝγϦςΟ

    View Slide

  15. σʔληϯλʔؒɺσʔληϯλʔ಺
    ϑΝγϦςΟ
    ωοτϫʔΫ

    View Slide

  16. ͍͢͝਺͕͋Γ·͢
    ϑΝγϦςΟ
    ωοτϫʔΫ
    ෺ཧϗετ ෺ཧϗετ

    View Slide

  17. Α͏΍͘&$Πϯελϯεొ৔
    ϑΝγϦςΟ
    ωοτϫʔΫ
    ෺ཧϗετ ෺ཧϗετ
    ϋΠύʔόΠβ ϋΠύʔόΠβ
    Πϯελϯε
    71$

    View Slide

  18. ͜͏͍͏௨৴͕͍ͨ͠
    ϑΝγϦςΟ
    ωοτϫʔΫ
    ෺ཧϗετ ෺ཧϗετ
    ϋΠύʔόΠβ ϋΠύʔόΠβ
    Πϯελϯε
    71$
    &/* &/*

    View Slide

  19. ."$ΞυϨεΛ஌Γ͍ͨ
    ϑΝγϦςΟ
    ωοτϫʔΫ
    ෺ཧϗετ ෺ཧϗετ
    ϋΠύʔόΠβ ϋΠύʔόΠβ
    Πϯελϯε
    71$
    &/* &/*
    *1ΞυϨε
    ."$ΞυϨε

    View Slide

  20. ͜͜ͰҰͭ໰୊͕
    ϑΝγϦςΟ
    ωοτϫʔΫ
    ෺ཧϗετ ෺ཧϗετ
    ϋΠύʔόΠβ ϋΠύʔόΠβ
    &/* &/*
    71$͸ϒϩʔυΩϟετʹ
    ରԠ͍ͯ͠ͳ͍

    View Slide

  21. ͜͜Ͱొ৔͢Δͷ͕ϚοϐϯάαʔϏε
    ϑΝγϦςΟ
    ωοτϫʔΫ
    ෺ཧϗετ ෺ཧϗετ
    ϋΠύʔόΠβ ϋΠύʔόΠβ
    &/* &/*
    Ϛοϐϯά
    αʔϏε
    ෼ࢄ8FCγεςϜ
    ͦ͜Ͱ׆༂͢Δͷ͕
    ϚοϐϯάαʔϏε

    View Slide

  22. ͍ͭ͜ʹฉ͚͹ڭ͑ͯ͘ΕΔ
    ϑΝγϦςΟ
    ωοτϫʔΫ
    ෺ཧϗετ ෺ཧϗετ
    ϋΠύʔόΠβ ϋΠύʔόΠβ
    &/* &/*
    Ϛοϐϯά
    αʔϏε
    ෼ࢄ8FCγεςϜ
    &/*ͷ."$ΞυϨε
    ஌ͬͯΔΑ

    View Slide

  23. Ұ࿈ͷॲཧͷΠϝʔδʢ̍ʣ
    ϑΝγϦςΟ
    ωοτϫʔΫ
    ෺ཧϗετ ෺ཧϗετ
    ϋΠύʔόΠβ ϋΠύʔόΠβ Ϛοϐϯά
    αʔϏε

    View Slide

  24. Ұ࿈ͷॲཧͷΠϝʔδʢ̎ʣ
    ϑΝγϦςΟ
    ωοτϫʔΫ
    ෺ཧϗετ ෺ཧϗετ
    ϋΠύʔόΠβ ϋΠύʔόΠβ Ϛοϐϯά
    αʔϏε
    ᶃ"31ϦΫΤετΛ
    Πϯλʔηϓτ
    ᶄѼઌΠϯελϯεͷ
    ."$ΞυϨεΛΫΤϦ
    ᶅ"31ϦϓϥΠͰ
    Ѽઌ."$ΞυϨεΛฦ٫

    View Slide

  25. ."$ΞυϨε׬શʹ೺Ѳͨ͠
    ϑΝγϦςΟ
    ωοτϫʔΫ
    ෺ཧϗετ ෺ཧϗετ
    ϋΠύʔόΠβ ϋΠύʔόΠβ
    Πϯελϯε
    71$
    &/* &/*
    *1ΞυϨε
    ."$ΞυϨε ʜ
    Ϛοϐϯά
    αʔϏε

    View Slide

  26. ͜͜ͰҰͭ໰୊͕
    ϑΝγϦςΟ
    ωοτϫʔΫ
    ෺ཧϗετ ෺ཧϗετ
    ϋΠύʔόΠβ ϋΠύʔόΠβ
    Πϯελϯε
    71$
    &/* &/*
    *1ΞυϨε
    ."$ΞυϨε ʜ
    Ϛοϐϯά
    αʔϏε
    Ͳ͏΍ͬͯ
    ෺ཧϗετ
    ܦ༝͠Α͏

    View Slide

  27. ͜͜Ͱ΋·ͨ׆༂͢ΔϚοϐϯάαʔϏε
    ϑΝγϦςΟ
    ωοτϫʔΫ
    ෺ཧϗετ ෺ཧϗετ
    ϋΠύʔόΠβ ϋΠύʔόΠβ
    &/* &/*
    Ϛοϐϯά
    αʔϏε
    ΠϯελϯεΛ
    ϗετ͢Δ
    ෺ཧϗετͷ*1
    ஌ͬͯΔΑ

    View Slide

  28. Ұ࿈ͷॲཧͷΠϝʔδʢ̍ʣ
    ϑΝγϦςΟ
    ωοτϫʔΫ
    ෺ཧϗετ ෺ཧϗετ
    ϋΠύʔόΠβ ϋΠύʔόΠβ Ϛοϐϯά
    αʔϏε

    View Slide

  29. Ұ࿈ͷॲཧͷΠϝʔδʢ̎ʣ
    ϑΝγϦςΟ
    ωοτϫʔΫ
    ෺ཧϗετ ෺ཧϗετ
    ϋΠύʔόΠβ ϋΠύʔόΠβ Ϛοϐϯά
    αʔϏε
    ᶃύέοτΛ
    Πϯλʔηϓτ
    ᶄϚοϐϯάαʔϏε΁ͷ
    ΫΤϦޙɺ
    ύέοτΛΧϓηϧԽͯ͠௨৴
    ᶅϚοϐϯάαʔϏε΁ͷ
    ΫΤϦʹΑΓݕূޙɺ
    ύέοτΛඇΧϓηϧԽ

    View Slide

  30. ΧϓηϧԽͱ͸
    Ѽઌ."$ ૹ৴ݩ."$ ૹ৴ݩ*1 Ѽઌ*1 σʔλ
    ૹ৴ݩ*1
    ʢ෺ཧϗετʣ
    Ѽઌ*1
    ʢ෺ཧϗετʣ
    71$*%
    σʔλ
    ʢݩͷύέοτʣ
    Ѽઌ."$ ૹ৴ݩ."$ ૹ৴ݩ*1 Ѽઌ*1 σʔλ
    ෺ཧϗετ
    ΧϓηϧԽ
    ඇΧϓηϧԽ

    View Slide

  31. ͋Γ͕ͱ͏ϚοϐϯάαʔϏε
    ϚοϐϯάαʔϏεͷ
    ͓͔͛Ͱ෺ཧ૚Λҙࣝͤͣ
    ௨৴Մೳʂ

    View Slide

  32. ࠓ౓͸͜ͷΑ͏ͳ௨৴Λߟ͑Δ

    View Slide

  33. ;ͨͨͼ͓͞Β͍
    ·ͨந৅Խͯ͠ߟ͑ͯΈΔ

    View Slide

  34. σϑΥϧτήʔτ΢ΣΠΛܦ༝

    View Slide

  35. ."$ΞυϨεͷॻ͖׵͑

    View Slide

  36. ͪ͜Β΋;ͨͨͼ
    EC2ΠϯελϯεͰߟ͑ͯΈΔ

    View Slide

  37. ͱ͸ݴͬͨ΋ͷͷ
    ϑΝγϦςΟ
    ωοτϫʔΫ
    ෺ཧϗετ ෺ཧϗετ
    ϋΠύʔόΠβ ϋΠύʔόΠβ Ϛοϐϯά
    αʔϏε
    جຊతʹઌ΄Ͳͱ
    มΘΒͳ͍

    View Slide

  38. ·ͨ΋΍ϚοϐϯάαʔϏε
    ϑΝγϦςΟ
    ωοτϫʔΫ
    ෺ཧϗετ ෺ཧϗετ
    ϋΠύʔόΠβ ϋΠύʔόΠβ
    &/* &/*
    Ϛοϐϯά
    αʔϏε
    Ծ૝ϧʔλʔͷ
    ."$ΞυϨε
    ஌ͬͯΔΑ

    View Slide

  39. ͜͜Ͱٙ໰͕
    ϑΝγϦςΟ
    ωοτϫʔΫ
    ෺ཧϗετ ෺ཧϗετ
    ϋΠύʔόΠβ ϋΠύʔόΠβ Ϛοϐϯά
    αʔϏε
    Ծ૝ϧʔλͬͯ
    Ͳ͜ʹ͋Δͷʁ

    View Slide

  40. ෺ཧϗετΛ͜ͷΑ͏ʹߟ͑ͯΈΔ
    ϋΠύʔόΠβ
    /*$
    ϋʔυ
    ΢ΣΞ
    ϋΠύʔόΠβ
    /*$
    ιϑτ
    ΢ΣΞ
    ैདྷͷ෺ཧϗετ ৽͠Ίͷ෺ཧϗετ

    View Slide

  41. ͪΐͬͱදݱΛม͑ͯΈ·ͨ͠
    ෺ཧϗετ ෺ཧϗετ
    Ϛοϐϯά
    αʔϏε

    View Slide

  42. ෺ཧ*1
    71$*%
    Ծ૝ϧʔλΛܦ༝ͨ͠௨৴
    ෺ཧϗετ ෺ཧϗετ
    Ϛοϐϯά
    αʔϏε
    *1ύέοτ

    View Slide

  43. େࣄͳ͜ͱͳͷͰճݴ͍·ͨ͠
    ϚοϐϯάαʔϏεͷ
    ͓͔͛Ͱ෺ཧ૚Λҙࣝͤͣ
    ௨৴Մೳʂ

    View Slide


  44. #MBDLGPPU

    View Slide

  45. #MBDLGPPUͱ͸
    ͍͔ͭ͘ͷήʔτ΢ΣΠΛϗετ͢ΔσόΠεɻ
    w&EHFσόΠεͱ΋ݺ͹ΕΔ
    w&$Πϯελϯεͷ෺ཧϗετͱ͸ผ΋ͷ
    w͜ͷ*1ΞυϨε΋ϚοϐϯάαʔϏε͕ڭ͑ͯ͘ΕΔ

    View Slide

  46. ήʔτ΢ΣΠͨͪ

    View Slide

  47. #MBDLGPPUσόΠε
    ෺ཧϗετ #MBDLGPPU

    View Slide

  48. -JOVYϕʔεͰ։ൃ͞Εͨͦ͏Ͱ͢
    ෺ཧϗετ #MBDLGPPU
    https://www.publicdomainpictures.net/ΑΓ
    ࠇ଍ϖϯΪϯ͕༝དྷ

    View Slide

  49. ϚοϐϯάαʔϏε;ͨͨͼ
    ෺ཧϗετ #MBDLGPPU
    Ϛοϐϯά
    αʔϏε

    View Slide

  50. Ѽઌ*1ΞυϨε͔Β൑அͯ͘͠Ε·͢
    ෺ཧϗετ #MBDLGPPU
    Ϛοϐϯά
    αʔϏε
    ϧʔτςʔϒϧʹԠͯ͡
    ద੾ͳ#MBDLGPPU
    σόΠεΛڭ͑ΔΑ

    View Slide

  51. #MBDLGPPUΛܦ༝ͨ͠௨৴
    ෺ཧϗετ #MBDLGPPU
    Ϛοϐϯά
    αʔϏε
    ෺ཧ*1
    71$*%
    *1ύέοτ

    View Slide

  52. ྫ͑͹Πϯλʔωοτήʔτ΢ΣΠͰ͸
    ෺ཧϗετ #MBDLGPPU
    ෺ཧ*1
    71$*%
    *1ύέοτ
    *1ύέοτ
    ૹ৴ݩ*1
    άϩʔόϧ

    Ѽઌ*1
    άϩʔόϧ

    σʔλ
    NAT
    ૹ৴ݩ*1
    ϓϥΠϕʔτ

    Ѽઌ*1
    άϩʔόϧ

    σʔλ

    View Slide

  53. #MBDLGPPU·ͱΊ
    ֤छήʔτ΢ΣΠͷػೳ͸
    #MBDLGPPUʹΑ࣮ͬͯݱʂ
    ϚοϐϯάαʔϏε΋׆༂ʂ

    View Slide

  54. ͋Εʁଞͷήʔτ΢ΣΠ͸ʁ
    ɾNAT Gateway
    ɾTransit Gateway
    ɾVPC EndpointʢInterfaceʣ

    View Slide


  55. )ZQFSQMBOF

    View Slide

  56. )ZQFSQMBOFͱ͸
    "84಺෦Ͱ࢖༻͞ΕΔϩʔυόϥϯγϯάαʔϏεɻ
    w4"1*ͷϩʔυόϥϯαʔ͕ϕʔε
    w&'4Ͱ͸ॳظ͔Β࢖༻͞Ε͍ͯΔ
    w༷ʑͳαʔϏεʹར༻͞Ε࢝Ί͍ͯΔ
    w"1*(BUFXBZͷ71$ϦϯΫ
    w71$಺-BNCEB

    View Slide

  57. ϝΠϯͱͳΔͷ͸)ZQFSQMBOϊʔυ
    ෺ཧϗετ #MBDLGPPU
    Hyperplaneϊʔυ

    View Slide

  58. ࣮ଶ͸&$ΠϯελϯεͰ͢
    ෺ཧϗετ #MBDLGPPU
    Hyperplaneϊʔυ
    &$Πϯελϯε
    ʹΑΔ'MFFUߏ੒

    View Slide

  59. ΧελϚʔ71$ͷ&/*ͱඥͮ͘
    Hyperplaneϊʔυ
    ENI

    View Slide

  60. ͜Μͳ௨৴Λߟ͑ͯΈ·͢
    EC2Πϯελϯε NAT Gateway Internet Gateway

    View Slide

  61. ͦΕͧΕόοΫϘʔϯʹ͋Δͷ͸͜Μͳٕज़
    EC2Πϯελϯε NAT Gateway Internet Gateway
    ෺ཧϗετ #MBDLGPPU
    Hyperplaneϊʔυ

    View Slide

  62. ෺ཧϗετ͔Β)ZQFSQMBOFϊʔυ
    ෺ཧϗετ

    View Slide

  63. ͜͜Ͱ΋ϚοϐϯάαʔϏε
    ෺ཧϗετ
    Ϛοϐϯά
    αʔϏε
    /"5(BUFXBZѼͳΒ
    ͋ͷ&/*ʹૹΓͳΑ

    View Slide

  64. ΧϓηϧԽ͞ΕͨύέοτΛૹΓ·͢
    ෺ཧϗετ
    Ϛοϐϯά
    αʔϏε
    ෺ཧ*1
    71$*%
    *1ύέοτ

    View Slide

  65. )ZQFSQMBOFϊʔυ͕ҙࣝ͢Δͷ͸ϑϩʔͷΈ
    ෺ཧ*1
    71$*%
    *1ύέοτ
    ϑϩʔ
    ϓϩτίϧ
    ૹ৴ݩ
    *1
    Ѽઌ
    *1
    ૹ৴ݩ
    ϙʔτ
    Ѽઌ
    ϙʔτ
    5$1 YYYYYYYY ZZZZZZZZ
    5$1 YYYYYYYY ZZZZZZZZ
    6%1 YYYYYYYY ZZZZZZZZ
    *$.1 YYYYYYYY ZZZZZZZZ

    View Slide

  66. ϑϩʔͷ୯ҐͰ෼ࢄॲཧ͞ΕΔ
    ෺ཧϗετ
    71$*%
    *1ύέοτ
    71$*%
    *1ύέοτ
    ෺ཧ*1
    71$*%
    *1ύέοτ

    View Slide

  67. )ZQFSQMBOFϊʔυ͔Β#MBDLGPPU΁
    #MBDLGPPU
    Ϛοϐϯά
    αʔϏε

    View Slide

  68. ͍Ζ͍Ζॲཧ͕͞Ε·͢
    #MBDLGPPU
    ෺ཧ*1
    71$*%
    *1ύέοτ
    Ϛοϐϯά
    αʔϏε
    *1ύέοτ
    IGW ʹΑΔ
    ૹ৴ݩIPͷNAT
    NGW ʹΑΔ
    ૹ৴ݩIP(ͱϙʔτ)ͷNAT

    View Slide

  69. /"5(BUXFXBZͱ/-#͸Α͘ࣅ͍ͯΔ
    NGW
    NLB

    View Slide

  70. )ZQFSQMBOFϊʔυ͸Ϛϧνςφϯτ
    ϑϩʔ
    ϑϩʔ
    ϑϩʔ
    ϑϩʔ
    ϑϩʔ
    ϑϩʔ
    ϑϩʔ
    ϑϩʔ
    ϑϩʔ

    View Slide

  71. ಛఆͷ"84ΧελϚʔͷӨڹΛݶఆతʹ
    ϑϩʔ
    ϑϩʔ
    ϑϩʔ
    ϑϩʔ
    ϑϩʔ
    ϑϩʔ
    ϑϩʔ
    ϑϩʔ
    ϑϩʔ

    View Slide

  72. )ZQFSQMBOF·ͱΊ
    EC2Πϯελϯε NAT Gateway Internet Gateway
    ෺ཧϗετ #MBDLGPPU
    Hyperplaneϊʔυ
    )ZQFSQMBOFʹΑͬͯ
    ๲େͳ਺ͷϑϩʔΛॲཧʂ
    ϚοϐϯάαʔϏε΋׆༂ʂ

    View Slide

  73. ຊ೔ͷ·ͱΊ
    ·ͱΊ

    View Slide

  74. 71$ͷཪଆͰ׆༂͢Δ΋ͷͨͪ
    ϚοϐϯάαʔϏε
    w ෺ཧϗετ΍ɺ71$ͷϚοϐϯάΛ͢Δ෼ࢄγεςϜ
    #MBDLGPPU
    w ήʔτ΢ΣΠΛϗετ͢ΔσόΠε
    )ZQFSQMBOF
    w ϚϧνϊʔυͷϩʔυόϥϯγϯάαʔϏε

    View Slide

  75. "84SF*OWFOUͷಈըΛνΣοΫ͍ͯͩ͘͠͞ʂ
    AWS re:Invent 2015 | (NET403)
    Another Day, Another Billion Packets
    AWS re:Invent 2017: Another Day,
    Another Billion Flows (NET405)
    AWS re:Invent 2018: Amazon VPC:
    Security at the Speed Of Light (NET313)

    View Slide

  76. View Slide