Upgrade to Pro — share decks privately, control downloads, hide ads and more …

1年ぶりにAWS Nitroに想いを馳せる/Nitro-ni-shinitro

YukihiroChiba
December 08, 2021

1年ぶりにAWS Nitroに想いを馳せる/Nitro-ni-shinitro

YukihiroChiba

December 08, 2021
Tweet

More Decks by YukihiroChiba

Other Decks in Technology

Transcript

  1. ೥ͿΓʹ"84/JUSPʹ૝͍Λ஘ͤΔ
    /JUSPʹ͠ͳ͍ͱSP

    "84ࣄۀຊ෦ίϯαϧςΟϯά෦ɹνόϢΩ

    View Slide

  2. ࣗݾ঺հ
    ઍ༿ ޾޺
    ɾ޷͖ͳΞΫγϣϯ: sts:AssumeRole
    ɾBDS͕ࣦޮͯ͠ 8 ףʹͳΓ·ͨ͠
    νόϢΩ

    View Slide


  3. ͨ·ʹ͸/JUSPͷ͜ͱΛ
    ߟ͑Α͏

    View Slide

  4. ΞδΣϯμ
    Nitro ͷ͓͞Β͍


    Nitro ؔ࿈ͷ৽৘ใ


    •Nitro SSD


    •Xen on Nitro


    •Nitro TPM

    View Slide


  5. /JUSPͱ͸ͳʹ͔

    View Slide

  6. /JUSPͱ͸Կ͔
    EC2 ͷཪͰ͍Ζ͍Ζؤுͬͯ͘ΕͯΔ΍ͭ

    View Slide

  7. /JUSPγεςϜͷίϯϙʔωϯτ
    Nitro


    ϋΠύʔόΠβʔ
    ιϑτ΢ΣΞ
    ϋʔυ΢ΣΞ
    Nitro ίϯτϩʔϥ
    Nitro


    Enclaves
    Nitro


    ηΩϡϦςΟνοϓ
    Χʔυ for EBS
    Χʔυ for VPC
    Χʔυ for


    ΠϯελϯεετϨʔδ ޿ٛͷ
    ʮ/JUSPΧʔυʯ
    ؅ཧɺ


    ϞχλϦϯά etc

    View Slide

  8. /JUSPͷΩʔϫʔυ
    ʮϋʔυ΢ΣΞ΁ͷΦϑϩʔυʯͱ


    ʮϞϊϦε͔ΒϚΠΫϩαʔϏε΁ʯ

    View Slide

  9. /JUSPҎલͷ&$ͷΞʔΩςΫνϟ
    re:Invent 2021 The journey of silicon innovation at AWSʢCMP301ʣΑΓ

    View Slide

  10. /JUSPҎલͷ&$ͷΞʔΩςΫνϟ
    re:Invent 2021 The journey of silicon innovation at AWSʢCMP301ʣΑΓ
    ֤छػೳΛ
    ιϑτ΢ΣΞʹΑ࣮ͬͯݱ

    View Slide

  11. /JUSPҎલͷ&$ͷΞʔΩςΫνϟ
    re:Invent 2021 The journey of silicon innovation at AWSʢCMP301ʣΑΓ
    ϋΠύʔόΠβʔ͸9FO
    ήετ04ͱϋʔυ΢ΣΞͷ
    ΍ΓͱΓΛ୲͏Ծ૝Ϛγϯ
    %PN͕Քಇ͢Δ

    View Slide

  12. /JUSPҎ߱ͷΞʔΩςΫνϟ
    re:Invent 2021 The journey of silicon innovation at AWSʢCMP301ʣΑΓ

    View Slide

  13. /JUSPҎ߱ͷΞʔΩςΫνϟ
    re:Invent 2021 The journey of silicon innovation at AWSʢCMP301ʣΑΓ
    ίϯϙʔωϯτ͝ͱʹ
    ॱ࣍ϋʔυ΢ΣΞ΁
    Φϑϩʔυ

    View Slide

  14. /JUSPҎ߱ͷΞʔΩςΫνϟ
    re:Invent 2021 The journey of silicon innovation at AWSʢCMP301ʣΑΓ
    ܰྔͳ/JUSPϋΠύʔόΠβʔʹ
    ஔ͖׵͑ΒΕɺ%PN΋ෆཁʹ

    View Slide


  15. Nitro ͕΋ͨΒ͢΋ͷ
    ͦΜͳ͜ΜͳͰ

    View Slide

  16. ύϑΥʔϚϯεɺηΩϡϦςΟɺΠϊϕʔγϣϯ
    re:Invent 2021 Building on 15 years of compute innovationʢCMP218-L-SGTʣΑΓ

    View Slide

  17. ύϑΥʔϚϯεɺηΩϡϦςΟɺΠϊϕʔγϣϯ
    re:Invent 2021 Building on 15 years of compute innovationʢCMP218-L-SGTʣΑΓ
    Nitro ొ৔ޙʹΠϯελϯελΠϓͷൃදεϐʔυ͕ٸ૿

    View Slide


  18. SF*OWFOUͰͷ
    /JUSPͷ৽৘ใ

    View Slide

  19. ৽৘ใͦͷ
    ಛఆͷΠϯελϯελΠϓͰ࢖༻Ͱ͖Δ


    ϩʔΧϧετϨʔδNitro SSD

    View Slide

  20. /JUSP44%
    [଎ใ] ߴ͍ετϨʔδύϑΥʔϚϯεΛ࣮ݱ͢Δୈ2ੈ୅ͷ AWS Nitro SSD ͕ൃද͞Ε·ͨ͠ #reinvent
    https://dev.classmethod.jp/articles/2gen-nitro-ssd/
    • େྔॻ͖ࠐΈ࣌ʹ΋ϨΠςϯγεύΠΫΛ཈͑ɺ60%
    খ͘͞཈͑ΒΕͨϨΠςϯγ
    • ߴ଎Ͱɺμ΢ϯλΠϜͳ͠ͷϑΝʔϜ΢ΣΞΞοϓ
    σʔτ͕Մೳʹ
    • શͯͷσʔλΛগͳ͘ͱ΋AES-256ΤϑΣϝϥϧΩʔ
    ʹΑΓ҉߸Խ
    ݱ࣌఺Ͱ͸Im4gnͱIs4gen͓ΑͼɺI4iΠϯελ
    ϯεͷϩʔΧϧετϨʔδͰ࢖༻͞ΕΔ

    View Slide

  21. /JUSP44%
    re:Invent 2021 The journey of silicon innovation at AWSʢCMP301ʣΑΓ
    యܕతͳαʔόʔ

    View Slide

  22. /JUSP44%
    re:Invent 2021 The journey of silicon innovation at AWSʢCMP301ʣΑΓ
    ΧελϜνοϓ͕࢖༻͞Εͨྫ
    /JUSP44%͸͜͜

    View Slide

  23. ৽৘ใͦͷ
    چੈ୅ͷΠϯελϯεͷՔಇΛ


    αϙʔτ͢Δ Xen on Nitro

    View Slide

  24. 9FOPO/JUSP
    ʢࢀߟʣXen-on-Nitroɺچੈ୅ͷEC2ΠϯελϯεΛ࠷৽NitroͰαϙʔτ͢Δܭը͕ެ։͞Ε·ͨ͠
    https://dev.classmethod.jp/articles/xen-on-nitro-ec2-support/
    • چੈ୅ͷ Xen ϕʔεͷΠϯελϯελΠ
    ϓΛ Nitro ʹΑΓܧଓͯ͠ఏڙՄೳʹ
    • ϋʔυ΢ΣΞ͝ͱ Nitro ͕ΤϛϡϨʔτ
    • ΞϓϦέʔγϣϯ͔Βݟͯಁաత
    2022ʹαϙʔτ։࢝༧ఆ
    re:Invent 2021 Building on 15 years of compute innovationʢCMP218-L-SGTʣΑΓ

    View Slide

  25. 9FOPO/JUSP
    ϋʔυ΢ΣΞ
    9FOϋΠύʔόΠβʔ
    Πϯελϯε
    /JUSPγεςϜ
    ϋʔυ΢ΣΞ
    9FOϋΠύʔόΠβʔ
    Πϯελϯε
    ΤϛϡϨʔτ
    ΧελϚʔ͔ΒݟͯಁաతͳͷͰɺͲͪΒͳͷ͔ҙࣝ͢Δඞཁ͕ͳ͍
    ϝϯςφϯε͕εέδϡʔϧ͞Εͯ࠶ىಈͰҠߦ͢ΔΒ͍͠

    View Slide

  26. 9FOPO/JUSP
    ʮXen ϕʔεͷΠϯελϯεΛ
    ར༻͍ͯ͠ΔϢχʔΫΧελ
    Ϛʔ͸120ສࣾʯ
    ʮ༗ݶͳΤϯδχΞϦϯάϦιʔεΛϫʔΫϩʔυͷҠߦ
    ʹׂ͔ͳͯ͘Α͍Α͏ʹ͜ͷػೳΛఏڙ͢Δʯ
    Xen-on-Nitro: AWS Nitro for Legacy Instances
    https://perspectives.mvdirona.com/2021/11/xen-on-nitro-aws-nitro-for-legacy-instances/

    View Slide

  27. ৽৘ใͦͷ
    EC2 Ͱ TPM Λར༻Մೳʹ͢Δ


    Nitro TPM

    View Slide

  28. "84/JUSP51.
    • TPMͱ͸ηΩϡϦςΟػೳΛఏڙ͢ΔϞ
    δϡʔϧʢʹηΩϡϦςΟνοϓʁʣ
    • EC2 Ͱ͸͜Ε·ͰTPM͸αϙʔτ͞Εͯ
    ͍ͳ͔ͬͨ
    • TPMґଘͷϫʔΫϩʔυ΋EC2ʹεϜʔ
    ζʹҠߦՄೳʹ
    2022ʹఏڙ։࢝༧ఆ
    re:Invent 2021 Building on 15 years of compute innovationʢCMP218-L-SGTʣΑΓ

    View Slide

  29. "84/JUSP51.
    EC2 Ͱ TPM Λར༻Մೳͱ͠ TPM ґଘͷΦϯϓϨϛεϫʔΫϩʔυͷ EC2 ҠߦΛଅਐ͢Δ AWS Nitro
    TPM ͕ 2022೥ʹొ৔͠·͢ #reinvent
    https://dev.classmethod.jp/articles/aws-nitro-tpm-coming-soon-2022/
    TPMΛΑ͘Θ͔ͬͯͳ͍͚Ͳ


    ΦϯϓϨˠEC2 ҠߦͷোนΛ


    औΓআ͜͏ͱ͍ͯ͠Δͷ͸Θ͔ͬͨ

    View Slide


  30. /JUSPΛ஌Γ͚ͨΕ͹ҎԼΛݟΑ͏ʂ
    1PXFSJOHOFYUHFO"NB[PO&$%FFQEJWFPOUIF/JUSP4ZTUFN
    ʢ$.1ʣ˞ެ։
    ৽৘ใ΋ׂͱৄ͘͠ࡌͬͯ·ͨ͠

    View Slide

  31. View Slide