1年ぶりにAWS Nitroに想いを馳せる/Nitro-ni-shinitro

Transcript

1. ೥ͿΓʹ"84/JUSPʹ૝͍Λ஘ͤΔ
   /JUSPʹ͠ͳ͍ͱSP
   
   "84ࣄۀຊ෦ίϯαϧςΟϯά෦ɹνόϢΩ
   

   View Slide

2. ࣗݾ঺հ
   ઍ༿ ޾޺
   ɾ޷͖ͳΞΫγϣϯ: sts:AssumeRole
   ɾBDS͕ࣦޮͯ͠ 8 ףʹͳΓ·ͨ͠
   νόϢΩ
   

   View Slide

3. 
   ͨ·ʹ͸/JUSPͷ͜ͱΛ
   ߟ͑Α͏
   

   View Slide

4. ΞδΣϯμ
   Nitro ͷ͓͞Β͍
   
   
   Nitro ؔ࿈ͷ৽৘ใ
   
   
   •Nitro SSD
   
   
   •Xen on Nitro
   
   
   •Nitro TPM
   

   View Slide

5. 
   /JUSPͱ͸ͳʹ͔
   

   View Slide

6. /JUSPͱ͸Կ͔
   EC2 ͷཪͰ͍Ζ͍Ζؤுͬͯ͘ΕͯΔ΍ͭ
   

   View Slide

7. /JUSPγεςϜͷίϯϙʔωϯτ
   Nitro
   
   
   ϋΠύʔόΠβʔ
   ιϑτ΢ΣΞ
   ϋʔυ΢ΣΞ
   Nitro ίϯτϩʔϥ
   Nitro
   
   
   Enclaves
   Nitro
   
   
   ηΩϡϦςΟνοϓ
   Χʔυ for EBS
   Χʔυ for VPC
   Χʔυ for
   
   
   ΠϯελϯεετϨʔδ ޿ٛͷ
   ʮ/JUSPΧʔυʯ
   ؅ཧɺ
   
   
   ϞχλϦϯά etc
   

   View Slide

8. /JUSPͷΩʔϫʔυ
   ʮϋʔυ΢ΣΞ΁ͷΦϑϩʔυʯͱ
   
   
   ʮϞϊϦε͔ΒϚΠΫϩαʔϏε΁ʯ
   

   View Slide

9. /JUSPҎલͷ&$ͷΞʔΩςΫνϟ
   re:Invent 2021 The journey of silicon innovation at AWSʢCMP301ʣΑΓ
   

   View Slide

10. /JUSPҎલͷ&$ͷΞʔΩςΫνϟ
    re:Invent 2021 The journey of silicon innovation at AWSʢCMP301ʣΑΓ
    ֤छػೳΛ
    ιϑτ΢ΣΞʹΑ࣮ͬͯݱ
    

    View Slide

11. /JUSPҎલͷ&$ͷΞʔΩςΫνϟ
    re:Invent 2021 The journey of silicon innovation at AWSʢCMP301ʣΑΓ
    ϋΠύʔόΠβʔ͸9FO
    ήετ04ͱϋʔυ΢ΣΞͷ
    ΍ΓͱΓΛ୲͏Ծ૝Ϛγϯ
    %PN͕Քಇ͢Δ
    

    View Slide

12. /JUSPҎ߱ͷΞʔΩςΫνϟ
    re:Invent 2021 The journey of silicon innovation at AWSʢCMP301ʣΑΓ
    

    View Slide

13. /JUSPҎ߱ͷΞʔΩςΫνϟ
    re:Invent 2021 The journey of silicon innovation at AWSʢCMP301ʣΑΓ
    ίϯϙʔωϯτ͝ͱʹ
    ॱ࣍ϋʔυ΢ΣΞ΁
    Φϑϩʔυ
    

    View Slide

14. /JUSPҎ߱ͷΞʔΩςΫνϟ
    re:Invent 2021 The journey of silicon innovation at AWSʢCMP301ʣΑΓ
    ܰྔͳ/JUSPϋΠύʔόΠβʔʹ
    ஔ͖׵͑ΒΕɺ%PN΋ෆཁʹ
    

    View Slide

15. 
    Nitro ͕΋ͨΒ͢΋ͷ
    ͦΜͳ͜ΜͳͰ
    

    View Slide

16. ύϑΥʔϚϯεɺηΩϡϦςΟɺΠϊϕʔγϣϯ
    re:Invent 2021 Building on 15 years of compute innovationʢCMP218-L-SGTʣΑΓ
    

    View Slide

17. ύϑΥʔϚϯεɺηΩϡϦςΟɺΠϊϕʔγϣϯ
    re:Invent 2021 Building on 15 years of compute innovationʢCMP218-L-SGTʣΑΓ
    Nitro ొ৔ޙʹΠϯελϯελΠϓͷൃදεϐʔυ͕ٸ૿
    

    View Slide

18. 
    SF*OWFOUͰͷ
    /JUSPͷ৽৘ใ
    

    View Slide

19. ৽৘ใͦͷ
    ಛఆͷΠϯελϯελΠϓͰ࢖༻Ͱ͖Δ
    
    
    ϩʔΧϧετϨʔδNitro SSD
    

    View Slide

20. /JUSP44%
    [଎ใ] ߴ͍ετϨʔδύϑΥʔϚϯεΛ࣮ݱ͢Δୈ2ੈ୅ͷ AWS Nitro SSD ͕ൃද͞Ε·ͨ͠ #reinvent
    https://dev.classmethod.jp/articles/2gen-nitro-ssd/
    • େྔॻ͖ࠐΈ࣌ʹ΋ϨΠςϯγεύΠΫΛ཈͑ɺ60%
    খ͘͞཈͑ΒΕͨϨΠςϯγ
    • ߴ଎Ͱɺμ΢ϯλΠϜͳ͠ͷϑΝʔϜ΢ΣΞΞοϓ
    σʔτ͕Մೳʹ
    • શͯͷσʔλΛগͳ͘ͱ΋AES-256ΤϑΣϝϥϧΩʔ
    ʹΑΓ҉߸Խ
    ݱ࣌఺Ͱ͸Im4gnͱIs4gen͓ΑͼɺI4iΠϯελ
    ϯεͷϩʔΧϧετϨʔδͰ࢖༻͞ΕΔ
    

    View Slide

21. /JUSP44%
    re:Invent 2021 The journey of silicon innovation at AWSʢCMP301ʣΑΓ
    యܕతͳαʔόʔ
    

    View Slide

22. /JUSP44%
    re:Invent 2021 The journey of silicon innovation at AWSʢCMP301ʣΑΓ
    ΧελϜνοϓ͕࢖༻͞Εͨྫ
    /JUSP44%͸͜͜
    

    View Slide

23. ৽৘ใͦͷ
    چੈ୅ͷΠϯελϯεͷՔಇΛ
    
    
    αϙʔτ͢Δ Xen on Nitro
    

    View Slide

24. 9FOPO/JUSP
    ʢࢀߟʣXen-on-Nitroɺچੈ୅ͷEC2ΠϯελϯεΛ࠷৽NitroͰαϙʔτ͢Δܭը͕ެ։͞Ε·ͨ͠
    https://dev.classmethod.jp/articles/xen-on-nitro-ec2-support/
    • چੈ୅ͷ Xen ϕʔεͷΠϯελϯελΠ
    ϓΛ Nitro ʹΑΓܧଓͯ͠ఏڙՄೳʹ
    • ϋʔυ΢ΣΞ͝ͱ Nitro ͕ΤϛϡϨʔτ
    • ΞϓϦέʔγϣϯ͔Βݟͯಁաత
    2022ʹαϙʔτ։࢝༧ఆ
    re:Invent 2021 Building on 15 years of compute innovationʢCMP218-L-SGTʣΑΓ
    

    View Slide

25. 9FOPO/JUSP
    ϋʔυ΢ΣΞ
    9FOϋΠύʔόΠβʔ
    Πϯελϯε
    /JUSPγεςϜ
    ϋʔυ΢ΣΞ
    9FOϋΠύʔόΠβʔ
    Πϯελϯε
    ΤϛϡϨʔτ
    ΧελϚʔ͔ΒݟͯಁաతͳͷͰɺͲͪΒͳͷ͔ҙࣝ͢Δඞཁ͕ͳ͍
    ϝϯςφϯε͕εέδϡʔϧ͞Εͯ࠶ىಈͰҠߦ͢ΔΒ͍͠
    

    View Slide

26. 9FOPO/JUSP
    ʮXen ϕʔεͷΠϯελϯεΛ
    ར༻͍ͯ͠ΔϢχʔΫΧελ
    Ϛʔ͸120ສࣾʯ
    ʮ༗ݶͳΤϯδχΞϦϯάϦιʔεΛϫʔΫϩʔυͷҠߦ
    ʹׂ͔ͳͯ͘Α͍Α͏ʹ͜ͷػೳΛఏڙ͢Δʯ
    Xen-on-Nitro: AWS Nitro for Legacy Instances
    https://perspectives.mvdirona.com/2021/11/xen-on-nitro-aws-nitro-for-legacy-instances/
    

    View Slide

27. ৽৘ใͦͷ
    EC2 Ͱ TPM Λར༻Մೳʹ͢Δ
    
    
    Nitro TPM
    

    View Slide

28. "84/JUSP51.
    • TPMͱ͸ηΩϡϦςΟػೳΛఏڙ͢ΔϞ
    δϡʔϧʢʹηΩϡϦςΟνοϓʁʣ
    • EC2 Ͱ͸͜Ε·ͰTPM͸αϙʔτ͞Εͯ
    ͍ͳ͔ͬͨ
    • TPMґଘͷϫʔΫϩʔυ΋EC2ʹεϜʔ
    ζʹҠߦՄೳʹ
    2022ʹఏڙ։࢝༧ఆ
    re:Invent 2021 Building on 15 years of compute innovationʢCMP218-L-SGTʣΑΓ
    

    View Slide

29. "84/JUSP51.
    EC2 Ͱ TPM Λར༻Մೳͱ͠ TPM ґଘͷΦϯϓϨϛεϫʔΫϩʔυͷ EC2 ҠߦΛଅਐ͢Δ AWS Nitro
    TPM ͕ 2022೥ʹొ৔͠·͢ #reinvent
    https://dev.classmethod.jp/articles/aws-nitro-tpm-coming-soon-2022/
    TPMΛΑ͘Θ͔ͬͯͳ͍͚Ͳ
    
    
    ΦϯϓϨˠEC2 ҠߦͷোนΛ
    
    
    औΓআ͜͏ͱ͍ͯ͠Δͷ͸Θ͔ͬͨ
    

    View Slide

30. 
    /JUSPΛ஌Γ͚ͨΕ͹ҎԼΛݟΑ͏ʂ
    1PXFSJOHOFYUHFO"NB[PO&$%FFQEJWFPOUIF/JUSP4ZTUFN
    ʢ$.1ʣ˞ެ։
    ৽৘ใ΋ׂͱৄ͘͠ࡌͬͯ·ͨ͠
    

    View Slide

31. View Slide