20140418 aws-casual-network

28
AWS使がもっと楽になるネット ワーク系の新サービス at VPC, ELB, CloudFront, Route53 at AWS Casual Talks #2

Upload: yasuhiro-araki

Post on 05-Dec-2014

6.884 views

Category:

Technology


1 download

DESCRIPTION

AWS 2014ここまでのネットワーク系のサービスアップデートまとめ

TRANSCRIPT

  • 1. AWS at VPC, ELB, CloudFront, Route53 at AWS Casual Talks #2
  • 2. (twitter: ar1) JAWS-UGAWS AWS Amazon Virtual Private Cloud AWS Direct Connect
  • 3. 2008 2009 2010 2011 Amazon EBS Amazon SNS AWS Identity & Access Management Amazon RDS Amazon VPC Auto Scaling Elastic Load Balancing Amazon ElastiCache Amazon SES AWS CloudFormation AWS Direct Connect AWS Elastic Beanstalk GovCloud Amazon SWF Amazon Route 53 Amazon Redshift Amazon Glacier Amazon Dynamo DB Amazon CloudSearch AWS Storage Gateway Amazon CloudTrail Amazon CloudHSM Amazon WorkSpaces Amazon Kinesis Amazon Elastic Transcoder Amazon AppStream AWS OpsWorks AWS Data Pipeline AWS Rapid Pace of Innovation 20132012 Since inception AWS has: Released 745 new services and features Introduced over 35 major new services Announced 42 price reductions 2014 Amazon CloudFront 2014.4.18
  • 4.
  • 5. AWS AWS IAM Amazon CloudWatch Amazon CloudFront Amazon SNS Amazon SQS Elastic MapReduce Amazon SES Amazon Elasticache Amazon EC2 Auto Scale Amazon S3 Amazon EBS AWS StorageGateway Amazon RDS Amazon DynamoDB Amazon SimpleDB AWS Geographical Regions, Availability Zones, Points of Presence & Amazon VPC / Amazon Elastic Load Balancer / Amazon Route 53 /AWS Direct Connect Amazon SWF Web Management Console AWS Elastic Beanstalk AWS CloudFormation IDE Eclipse Visual Studio & SDKs Java, PHP, .NET, Python, Ruby Application Service Infrastructure Service Development & Administration AZRegion
  • 6. 2014 VPC,ELB,CloudFront,Route53 VPC Peering ELB Logging Connection Draining PFS SOP CloudFront EDNS-Client-Subnet SNI HTTP Redirection MS smooth streaming Route53 Health check improve UPSERT
  • 7. Elastic Load Balancer S3 11 12
  • 8. ELBConnection Draining
  • 9. " ELBECDHE " " " (SOP) " Perfect Forward Secrecy " ELBSecurityPolicy-2014-01 ELB: ECDHE Server Order Preference(SOP)
  • 10. HTTPSRSA RSA Premaster SecretRSA Premaster Secret Premaster Secret httpsd
  • 11. EDH DH DH DH httpsd
  • 12. " ELBECDHE " " " (SOP) " Perfect Forward Secrecy " ELBSecurityPolicy-2014-01 " ECDHEDHERSE ELB: ECDHE Server Order Preference(SOP)
  • 13. https://www.nic.ad.jp/ja/ materials/iw/2009/ proceedings/h9/iw2009- h9-04.pdf
  • 14. CloudFront SNIServer Name Identication RFC6606TLS HTTPS IP Windows XPIE
  • 15. CloudFrontHTTP Redirect HTTPHTTPS
  • 16. Amazon CloudFront EDNS-Client-Subnet CloudFront Google Public DNSOpenDNSDNS
  • 17. Route53: 10 1103) = TTL + ( * )
  • 18. Route53: HTTPS 2555120
  • 19. Route53: UPSERT " "
  • 20. VPC Peering
  • 21. VPC(VPC) AWSVPC VPC VPC5011 VPC
  • 22. VPCPeering Region Virtual Private Gateway Customer Gateway
  • 23. VPCInvite OK. Region 3Peering 1 2
  • 24. VPC Region Peering
  • 25. VPCVPC Region Peering
  • 26. VPC 10.0.0.0/16 10.0.0.0/16 10.0.1.0/24
  • 27.
  • 28. 2014 VPC,ELB,CloudFront,Route53 VPC Peering ELB Logging Connection Draining PFS SOP CloudFront EDNS-Client-Subnet SNI HTTP Redirection MS smooth streaming Route53 Health check improve UPSERT