SlideShare a Scribd company logo
1 of 83
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS Webinar
https://amzn.to/JPWebinar https://amzn.to/JPArchive
Solutions Architect
2019/10/29
Elastic Load Balancing (ELB)
[AWS Black Belt Online Seminar]
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
保里 善太(ほり ぜんた)
• 所属
アマゾン ウェブ サービス ジャパン 株式会社
技術統括本部 ソリューションアーキテクト
ゲーム業界のお客様を中心にご支援中
最近の関心事:
統計や機械学習を用いた不正検知やチート検出などのセキュリティの異
常検知技術
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
① 吹き出しをクリック
② 質問を入力
③ Sendをクリック
Twitter
#awsblackbelt
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
• 2019 10 29
AWS (http://aws.amazon.com)
• AWS
AWS
•
• AWS does not offer binding price quotes. AWS pricing is publicly available and is subject to
change in accordance with the AWS Customer Agreement available at
http://aws.amazon.com/agreement/. Any pricing information included in this document is provided
only as an estimate of usage charges for AWS services based on certain information that you
have provided. Monthly charges will be based on your actual use of AWS services, and may vary
from the estimates provided.
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
•
•
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
•
•
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
LBLB
LBLB
LB LB
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
〜 AWSクラウド上のロードバランシングサービス 〜
ELBで実現できるシステム
 スケーラブル : 複数のEC2インスタンス/ECSコンテナ..etc(ターゲット)に負
荷分散
 高い可用性 : 複数のアベイラビリティゾーンにある複数のターゲット
の中から正常なターゲットにのみ振り分け
ELB自体の特徴
 スケーラブル : ELB自体も負荷に応じてキャパシティを自動増減
 安価な従量課金 : 従量課金で利用可能
 運用管理が楽 : マネージドサービスなので管理が不要
 豊富な連携機能 : Auto Scaling, Route 53, Cloud Formation… などと連携
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
新サーバ追加!
過負荷
過負荷
Elastic Load Balancing
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
ELB自体も負荷の増減に応じて自動でスケール
(キャパシティが自動で増加する)
[注意]
NLB以外のELB(ALB/CLB)がスケールするときには、IPアドレス
が変化します。
ELBへアクセスするときには必ずDNS名で!
DNSへ登録することで独自ドメインでのアクセスも可能。
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
HTTP, HTTPS, HTTP/2 TCP, UDP, TLS HTTP, HTTPS, TCP
VPC EC2-Classic, VPCVPC
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
TCP, UDP, TLS HTTP, HTTPS, TCP
VPC EC2-Classic, VPCVPC
ALB NLB
HTTP, HTTPS, HTTP/2
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
ユーザー
マネージメント
コンソール
開発・管理者
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
ユーザー
https://aws.amazon.com/jp/premiumsupport/knowledge-center/security-group-load-balancer/
•
•
•
•
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
ユーザー
https://docs.aws.amazon.com/ja_jp/elasticloadbalancing/latest/classic/elb-listener-config.html
•
•
•
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
•
•
ユーザー
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
•
•
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
ALB NLB CLB
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AZ-b
良くない例:AZ間でキャパシティが不均等
AZ-a
50%
50%
もう一方より
負荷が高くなる
クロスゾーン負荷分散が有効であれば
50%
50%
AZ-b
AZ-a
負荷を基に
均等に
http://docs.aws.amazon.com/ja_jp/ElasticLoadBalancing/latest/DeveloperGuide/enable-disable-crosszone-lb.html
ALB NLB CLB
•
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
• EC2
• 1
•
( )
• ECS
( )
ALB NLB
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Target Group
ALB NLB
Corporate
data center
DC
ロードバランサ
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
–
–
–
•
–
–
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
ALB NLB CLB
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
参照
•
•
ALB NLB CLB
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
https://docs.aws.amazon.com/ja_jp/elasticloadbalancing/latest/network/load-balancer-access-logs.html
•
•
•
ALB NLB CLB
[
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
• ALB/CLB 60
• NLB 350 ( )
ALB/CLB
• 1 4,000
• NLB 350
• ※
ALB NLB CLB
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
–
ALB NLB CLB
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
ALB CLB
•
•
•
•
•
•
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.参照 http://docs.aws.amazon.com/ja_jp/ElasticLoadBalancing/latest/DeveloperGuide/elb-listener-
config.html#using-elb-listenerconfig-quickref
•
•
ALB NLB CLB
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
https://docs.aws.amazon.com/ja_jp/ElasticLoadBalancing/latest/DeveloperGuide/ssl-config-update.html
•
•
•
•
•
•
•
•
ALB NLB CLB
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
参照
http://docs.aws.amazon.com/ja_jp/ElasticLoadBalancing/latest/DeveloperGuide/ssl-server-cert.html
ALB NLB CLB
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
• 複数のTLS証明書を1つのALB/NLBのListenerに設定可能に
• SNIをサポートするクライアントには、適切な証明書を選択してTLSで
通信をできる
• SNI非サポートのクライアントにはデフォルト証明書が使われる
• ドメインはもちろんサポートする鍵交換方式や暗号、署名アルゴリズ
ムを元に証明書を選択するスマートセレクション
• ALB毎に最大25証明書まで (デフォルト証明書を除く)
• ACMまたはIAMの全ての証明書が利用可能
https://aws.amazon.com/jp/blogs/news/new-application-load-balancer-sni/
https://aws.amazon.com/about-aws/whats-new/2017/10/elastic-load-balancing-application-load-balancers-now-support-multiple-ssl-certificates-and-
smart-certificate-selection-using-server-name-indication-sni/
ALB NLB
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
•
•
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
•
•
•
•
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Target GroupTarget Group
example.com
/order /products
HTTP:80 HTTPS:443
•
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
example.com
Target GroupTarget Group
example.com
http://example.com/products
/order /products
http://products.example.com
Target GroupTarget Group
order.example.com products.example.com
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
1
(THEN)YES
Rule 1
Rule 2
Default
2
(THEN)YES
ELSE
ELSE
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Amazon CognitoALB
Amazon EC2
1
2
3
4
OIDC IdP
ALB
1
2
3
4
Amazon EC2
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
X-Forwarded-For: 203.0.113.7, 10.12.33.44, 10.12.23.88
Client IP address
送信元 経由するルート
https://aws.amazon.com/jp/premiumsupport/knowledge-center/elb-capture-client-ip-addresses/
•
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
• HTTP/2
• HTTP 1.1 1 HTTP/2
128
• ALB HTTP/1.1
• HTTP/2
• Lambda
•
• Websocket
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
•
•
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
• TCP(L4)のバランサとして機能
• 固定IPアドレス: AZ毎に1つ、既に持っているEIPも利用可能
• 送信元IPアドレスの保持: X-Forwarded-ForやProxy Protocolが不要
• 暖機なしに急激なスパイクにも対応可能
•
•
https://aws.amazon.com/jp/blogs/news/new-network-load-balancer-effortless-scaling-to-millions-of-requests-per-second/
https://aws.amazon.com/about-aws/whats-new/2017/09/announcing-network-load-balancer-for-elastic-load-balancing/
1. 高可用性、高スループット、低レイテンシ
2. Source IP/Portがターゲットまで保持される
3. 固定IP
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
• 高い可用性を実現
• DNS名なら、UnhealthyなAZのIPアドレスが自動削除される
• 長時間セッションも維持が可能
• 暖機不要で突発的な数百万リクエスト/秒のトラフィックも捌ける
• ELBは動的にキャパシティが拡張されるが、突発的なアクセス上昇の場
合、ALB/CLBの拡張が間に合わないことがある。その場合は暖機申請が
必要
• 固定IPのまま動的にスケールする
• TCP負荷分散を同一AZ内で行うので、レイテンシが小さい
• 単一AZ構成も可能 (ALBは複数AZ構成が必須)
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
• クライアントのSource IPとPortが、そのままTargetまで届く
• Targetはクライアントと直接通信しているかの様に見える
• 実際は、行きも帰りもNLBを通っている (DSRではない)
• IP Target(後述)やPrivateLink経由の場合は保持されず、NLBからの通信とな
る
• Direct Connectは接続されているVPCからのみ通信可能なので、こちらで回避
• TargetのSecurity GroupでクライアントIPの接続を許可する必要あり
• インターネット向けに広く公開する場合は0.0.0.0/0で公開が必要
• ある程度制限をする場合は加えて、Health checkのためにVPC CIDRかNLB ENIからのアク
セスも許可する必要あり
• VPC内からのアクセスの場合でもターゲットへのアクセス許可はセキュリティグループ ID
の指定ではなくクライアントIPの指定が必要
• Targetの選択は5-tupleなのでStickyになる
• src ip, src port, dst ip, dst port, protocol
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
• Internet-facing、Internal共にIPアドレスが固定
• AZ毎に1つのIPアドレスを利用、DNSはAレコードでも設定可能
• ALB, CLBではIPアドレスは不定(DNSで同定可能)
• NLB作成時に自動割当されたIPアドレス、又はNLB作成時に指定し
た自分が持っているElastic IPのいずれか
• 自動割り当てされたIPアドレス以外の自前のElastic IPを使う際にはNLB作成
前にあらかじめElastic IPを用意しておく必要あり(重要)
• NLB作成後に変更は不可能
• よくあるユースケース
• Firewallの制約等で、ELBのIPアドレスの固定が必要な時
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
• Instance Targetには一部古い世代が利用不可
• C1, CC1, CC2, CG1, CG2, CR1, CS1, G1, G2, HI1, HS1, M1, M2, M3, T1
• まとめるとI2,C3を除く2013年以前のインスタンスタイプ
• Idle Connection Timeoutは350秒固定
• アイドルタイムアウト期間の経過後にクライアントまたはターゲットがデータを送信した場
合、TCP RST パケットが返されて接続が無効になったことを示す
• Health Checkの設定に、あまり柔軟性がない
• Timeoutは固定(TCPとHTTPSは10秒、HTTPは6秒)
• Intervalは10秒または30秒のみで、後から変更不可
• TLSリスナーではアクセスログが取得可能だが、TCPの場合はVPC Flow
Logで代替
• NLB自体にセキュリティーグループの設定はない
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
•
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
•
•
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
ALB NLB
CLB
• EC2-Classic
• TCP SSL
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
•
•
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
–
–
ALB NLB CLB
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
ALB NLB
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
•
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS WAF
•
•
•
•
•
•
ALB
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
ALB
NLB
ALB NLB
Region
ap-northeast-1
AWS Global
Accelerator
example.com
Region
us-east-1
• Global Accelerator
ALB, NLB
( Elastic IP)
•
Amazon
Global Network
•
IP
• ALB IP
…..
etc
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Target Group BTarget Group A
example.com
ALB
• Lambda
•
Lambda
JSON Lambda
• VPC ALB
Lambda
EC2 ECS
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
•
•
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
•
•
•
•
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
•
•
•
NLB/ALB CLB
•
•
•
•
•
•
•
•
•
•
•
•
https://aws.amazon.com/jp/elasticloadbalancing/pricing/
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
•
•
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
https://docs.aws.amazon.com/ja_jp/elasticloadbalancing/latest/classic/elb-cloudwatch-metrics.html
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
https://docs.aws.amazon.com/ja_jp/elasticloadbalancing/latest/userguide/migrate-to-application-load-balancer.html
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
–
–
–
•
–
–
時間
負
荷
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
–
–
•
•
•
–
•
–
•
–
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS Japan Blog https://aws.amazon.com/jp/blogs/news/
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
https://amzn.to/JPArchive
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS Webinar
https://amzn.to/JPWebinar https://amzn.to/JPArchive

More Related Content

What's hot

What's hot (20)

20210330 AWS Black Belt Online Seminar AWS Glue -Glue Studioを使ったデータ変換のベストプラクティス-
20210330 AWS Black Belt Online Seminar AWS Glue -Glue Studioを使ったデータ変換のベストプラクティス-20210330 AWS Black Belt Online Seminar AWS Glue -Glue Studioを使ったデータ変換のベストプラクティス-
20210330 AWS Black Belt Online Seminar AWS Glue -Glue Studioを使ったデータ変換のベストプラクティス-
 
AWS Black Belt Online Seminar AWS Direct Connect
AWS Black Belt Online Seminar AWS Direct ConnectAWS Black Belt Online Seminar AWS Direct Connect
AWS Black Belt Online Seminar AWS Direct Connect
 
20190814 AWS Black Belt Online Seminar AWS Serverless Application Model
20190814 AWS Black Belt Online Seminar AWS Serverless Application Model  20190814 AWS Black Belt Online Seminar AWS Serverless Application Model
20190814 AWS Black Belt Online Seminar AWS Serverless Application Model
 
20190402 AWS Black Belt Online Seminar Let's Dive Deep into AWS Lambda Part1 ...
20190402 AWS Black Belt Online Seminar Let's Dive Deep into AWS Lambda Part1 ...20190402 AWS Black Belt Online Seminar Let's Dive Deep into AWS Lambda Part1 ...
20190402 AWS Black Belt Online Seminar Let's Dive Deep into AWS Lambda Part1 ...
 
20210526 AWS Expert Online マルチアカウント管理の基本
20210526 AWS Expert Online マルチアカウント管理の基本20210526 AWS Expert Online マルチアカウント管理の基本
20210526 AWS Expert Online マルチアカウント管理の基本
 
20191105 AWS Black Belt Online Seminar Amazon Route 53 Hosted Zone
20191105 AWS Black Belt Online Seminar Amazon Route 53 Hosted Zone20191105 AWS Black Belt Online Seminar Amazon Route 53 Hosted Zone
20191105 AWS Black Belt Online Seminar Amazon Route 53 Hosted Zone
 
20190911 AWS Black Belt Online Seminar AWS Batch
20190911 AWS Black Belt Online Seminar AWS Batch20190911 AWS Black Belt Online Seminar AWS Batch
20190911 AWS Black Belt Online Seminar AWS Batch
 
20200826 AWS Black Belt Online Seminar AWS CloudFormation
20200826 AWS Black Belt Online Seminar AWS CloudFormation 20200826 AWS Black Belt Online Seminar AWS CloudFormation
20200826 AWS Black Belt Online Seminar AWS CloudFormation
 
20210126 AWS Black Belt Online Seminar AWS CodeDeploy
20210126 AWS Black Belt Online Seminar AWS CodeDeploy20210126 AWS Black Belt Online Seminar AWS CodeDeploy
20210126 AWS Black Belt Online Seminar AWS CodeDeploy
 
AWS初心者向けWebinar AWSとのネットワーク接続入門
AWS初心者向けWebinar AWSとのネットワーク接続入門AWS初心者向けWebinar AWSとのネットワーク接続入門
AWS初心者向けWebinar AWSとのネットワーク接続入門
 
20190828 AWS Black Belt Online Seminar Amazon Aurora with PostgreSQL Compatib...
20190828 AWS Black Belt Online Seminar Amazon Aurora with PostgreSQL Compatib...20190828 AWS Black Belt Online Seminar Amazon Aurora with PostgreSQL Compatib...
20190828 AWS Black Belt Online Seminar Amazon Aurora with PostgreSQL Compatib...
 
AWS Black Belt Online Seminar 2017 AWS Storage Gateway
AWS Black Belt Online Seminar 2017 AWS Storage GatewayAWS Black Belt Online Seminar 2017 AWS Storage Gateway
AWS Black Belt Online Seminar 2017 AWS Storage Gateway
 
20200930 AWS Black Belt Online Seminar Amazon Kinesis Video Streams
20200930 AWS Black Belt Online Seminar Amazon Kinesis Video Streams20200930 AWS Black Belt Online Seminar Amazon Kinesis Video Streams
20200930 AWS Black Belt Online Seminar Amazon Kinesis Video Streams
 
20200811 AWS Black Belt Online Seminar CloudEndure
20200811 AWS Black Belt Online Seminar CloudEndure20200811 AWS Black Belt Online Seminar CloudEndure
20200811 AWS Black Belt Online Seminar CloudEndure
 
20190129 AWS Black Belt Online Seminar AWS Identity and Access Management (AW...
20190129 AWS Black Belt Online Seminar AWS Identity and Access Management (AW...20190129 AWS Black Belt Online Seminar AWS Identity and Access Management (AW...
20190129 AWS Black Belt Online Seminar AWS Identity and Access Management (AW...
 
20180704(20190520 Renewed) AWS Black Belt Online Seminar Amazon Elastic File ...
20180704(20190520 Renewed) AWS Black Belt Online Seminar Amazon Elastic File ...20180704(20190520 Renewed) AWS Black Belt Online Seminar Amazon Elastic File ...
20180704(20190520 Renewed) AWS Black Belt Online Seminar Amazon Elastic File ...
 
20191002 AWS Black Belt Online Seminar Amazon EC2 Auto Scaling and AWS Auto S...
20191002 AWS Black Belt Online Seminar Amazon EC2 Auto Scaling and AWS Auto S...20191002 AWS Black Belt Online Seminar Amazon EC2 Auto Scaling and AWS Auto S...
20191002 AWS Black Belt Online Seminar Amazon EC2 Auto Scaling and AWS Auto S...
 
AWSからのメール送信
AWSからのメール送信AWSからのメール送信
AWSからのメール送信
 
20190806 AWS Black Belt Online Seminar AWS Glue
20190806 AWS Black Belt Online Seminar AWS Glue20190806 AWS Black Belt Online Seminar AWS Glue
20190806 AWS Black Belt Online Seminar AWS Glue
 
20190730 AWS Black Belt Online Seminar Amazon CloudFrontの概要
20190730 AWS Black Belt Online Seminar Amazon CloudFrontの概要20190730 AWS Black Belt Online Seminar Amazon CloudFrontの概要
20190730 AWS Black Belt Online Seminar Amazon CloudFrontの概要
 

Similar to 20191029 AWS Black Belt Online Seminar Elastic Load Balancing (ELB)

以容器技術為基礎的混合雲設計架構
以容器技術為基礎的混合雲設計架構以容器技術為基礎的混合雲設計架構
以容器技術為基礎的混合雲設計架構
Amazon Web Services
 

Similar to 20191029 AWS Black Belt Online Seminar Elastic Load Balancing (ELB) (20)

20191126 AWS Black Belt Online Seminar Amazon AppStream 2.0
20191126 AWS Black Belt Online Seminar Amazon AppStream 2.020191126 AWS Black Belt Online Seminar Amazon AppStream 2.0
20191126 AWS Black Belt Online Seminar Amazon AppStream 2.0
 
20191009 AWS Black Belt Online Seminar Amazon GameLift
20191009 AWS Black Belt Online Seminar Amazon GameLift20191009 AWS Black Belt Online Seminar Amazon GameLift
20191009 AWS Black Belt Online Seminar Amazon GameLift
 
2019-11-05 AWS Pretoria Meetup - Setting up your first environment and adding...
2019-11-05 AWS Pretoria Meetup - Setting up your first environment and adding...2019-11-05 AWS Pretoria Meetup - Setting up your first environment and adding...
2019-11-05 AWS Pretoria Meetup - Setting up your first environment and adding...
 
20191127 AWS Black Belt Online Seminar Amazon CloudWatch Container Insights で...
20191127 AWS Black Belt Online Seminar Amazon CloudWatch Container Insights で...20191127 AWS Black Belt Online Seminar Amazon CloudWatch Container Insights で...
20191127 AWS Black Belt Online Seminar Amazon CloudWatch Container Insights で...
 
20190731 Black Belt Online Seminar Amazon ECS Deep Dive
20190731 Black Belt Online Seminar Amazon ECS Deep Dive20190731 Black Belt Online Seminar Amazon ECS Deep Dive
20190731 Black Belt Online Seminar Amazon ECS Deep Dive
 
20190306 AWS Black Belt Online Seminar Amazon EC2スポットインスタンス
20190306 AWS Black Belt Online Seminar Amazon EC2スポットインスタンス20190306 AWS Black Belt Online Seminar Amazon EC2スポットインスタンス
20190306 AWS Black Belt Online Seminar Amazon EC2スポットインスタンス
 
AWSの最新ネットワーク機能(2019/09/17 NW-JAWS)
AWSの最新ネットワーク機能(2019/09/17 NW-JAWS)AWSの最新ネットワーク機能(2019/09/17 NW-JAWS)
AWSの最新ネットワーク機能(2019/09/17 NW-JAWS)
 
20190318 Amazon EC2 スポットインスタンス再入門
20190318 Amazon EC2 スポットインスタンス再入門20190318 Amazon EC2 スポットインスタンス再入門
20190318 Amazon EC2 スポットインスタンス再入門
 
20190703 AWS Black Belt Online Seminar Amazon MQ
20190703 AWS Black Belt Online Seminar Amazon MQ20190703 AWS Black Belt Online Seminar Amazon MQ
20190703 AWS Black Belt Online Seminar Amazon MQ
 
PatternsResiliency_DevDays2019.pdf
PatternsResiliency_DevDays2019.pdfPatternsResiliency_DevDays2019.pdf
PatternsResiliency_DevDays2019.pdf
 
PatternsResiliency_DevDays2019.pdf
PatternsResiliency_DevDays2019.pdfPatternsResiliency_DevDays2019.pdf
PatternsResiliency_DevDays2019.pdf
 
AWS Lambda 내부 동작 방식 및 활용 방법 자세히 살펴 보기 - 김일호 솔루션즈 아키텍트 매니저, AWS :: AWS Summit ...
AWS Lambda 내부 동작 방식 및 활용 방법 자세히 살펴 보기 - 김일호 솔루션즈 아키텍트 매니저, AWS :: AWS Summit ...AWS Lambda 내부 동작 방식 및 활용 방법 자세히 살펴 보기 - 김일호 솔루션즈 아키텍트 매니저, AWS :: AWS Summit ...
AWS Lambda 내부 동작 방식 및 활용 방법 자세히 살펴 보기 - 김일호 솔루션즈 아키텍트 매니저, AWS :: AWS Summit ...
 
Aws summit strikingly analytics
Aws summit   strikingly analyticsAws summit   strikingly analytics
Aws summit strikingly analytics
 
利用微服務加速創新的步伐
利用微服務加速創新的步伐利用微服務加速創新的步伐
利用微服務加速創新的步伐
 
20191023 AWS Black Belt Online Seminar Amazon EMR
20191023 AWS Black Belt Online Seminar Amazon EMR20191023 AWS Black Belt Online Seminar Amazon EMR
20191023 AWS Black Belt Online Seminar Amazon EMR
 
Getting Started with Serverless Architectures
Getting Started with Serverless ArchitecturesGetting Started with Serverless Architectures
Getting Started with Serverless Architectures
 
How AWS builds Serverless services using Serverless
How AWS builds Serverless services using ServerlessHow AWS builds Serverless services using Serverless
How AWS builds Serverless services using Serverless
 
The Evolution of Database Technologies Christian Bandulet
The Evolution of Database Technologies Christian BanduletThe Evolution of Database Technologies Christian Bandulet
The Evolution of Database Technologies Christian Bandulet
 
Core services
Core servicesCore services
Core services
 
以容器技術為基礎的混合雲設計架構
以容器技術為基礎的混合雲設計架構以容器技術為基礎的混合雲設計架構
以容器技術為基礎的混合雲設計架構
 

More from Amazon Web Services Japan

More from Amazon Web Services Japan (20)

202205 AWS Black Belt Online Seminar Amazon FSx for OpenZFS
202205 AWS Black Belt Online Seminar Amazon FSx for OpenZFS202205 AWS Black Belt Online Seminar Amazon FSx for OpenZFS
202205 AWS Black Belt Online Seminar Amazon FSx for OpenZFS
 
202204 AWS Black Belt Online Seminar AWS IoT Device Defender
202204 AWS Black Belt Online Seminar AWS IoT Device Defender202204 AWS Black Belt Online Seminar AWS IoT Device Defender
202204 AWS Black Belt Online Seminar AWS IoT Device Defender
 
Infrastructure as Code (IaC) 談義 2022
Infrastructure as Code (IaC) 談義 2022Infrastructure as Code (IaC) 談義 2022
Infrastructure as Code (IaC) 談義 2022
 
202204 AWS Black Belt Online Seminar Amazon Connect を活用したオンコール対応の実現
202204 AWS Black Belt Online Seminar Amazon Connect を活用したオンコール対応の実現202204 AWS Black Belt Online Seminar Amazon Connect を活用したオンコール対応の実現
202204 AWS Black Belt Online Seminar Amazon Connect を活用したオンコール対応の実現
 
202204 AWS Black Belt Online Seminar Amazon Connect Salesforce連携(第1回 CTI Adap...
202204 AWS Black Belt Online Seminar Amazon Connect Salesforce連携(第1回 CTI Adap...202204 AWS Black Belt Online Seminar Amazon Connect Salesforce連携(第1回 CTI Adap...
202204 AWS Black Belt Online Seminar Amazon Connect Salesforce連携(第1回 CTI Adap...
 
Amazon Game Tech Night #25 ゲーム業界向け機械学習最新状況アップデート
Amazon Game Tech Night #25 ゲーム業界向け機械学習最新状況アップデートAmazon Game Tech Night #25 ゲーム業界向け機械学習最新状況アップデート
Amazon Game Tech Night #25 ゲーム業界向け機械学習最新状況アップデート
 
20220409 AWS BLEA 開発にあたって検討したこと
20220409 AWS BLEA 開発にあたって検討したこと20220409 AWS BLEA 開発にあたって検討したこと
20220409 AWS BLEA 開発にあたって検討したこと
 
202202 AWS Black Belt Online Seminar AWS Managed Rules for AWS WAF の活用
202202 AWS Black Belt Online Seminar AWS Managed Rules for AWS WAF の活用202202 AWS Black Belt Online Seminar AWS Managed Rules for AWS WAF の活用
202202 AWS Black Belt Online Seminar AWS Managed Rules for AWS WAF の活用
 
202203 AWS Black Belt Online Seminar Amazon Connect Tasks.pdf
202203 AWS Black Belt Online Seminar Amazon Connect Tasks.pdf202203 AWS Black Belt Online Seminar Amazon Connect Tasks.pdf
202203 AWS Black Belt Online Seminar Amazon Connect Tasks.pdf
 
SaaS テナント毎のコストを把握するための「AWS Application Cost Profiler」のご紹介
SaaS テナント毎のコストを把握するための「AWS Application Cost Profiler」のご紹介SaaS テナント毎のコストを把握するための「AWS Application Cost Profiler」のご紹介
SaaS テナント毎のコストを把握するための「AWS Application Cost Profiler」のご紹介
 
Amazon QuickSight の組み込み方法をちょっぴりDD
Amazon QuickSight の組み込み方法をちょっぴりDDAmazon QuickSight の組み込み方法をちょっぴりDD
Amazon QuickSight の組み込み方法をちょっぴりDD
 
マルチテナント化で知っておきたいデータベースのこと
マルチテナント化で知っておきたいデータベースのことマルチテナント化で知っておきたいデータベースのこと
マルチテナント化で知っておきたいデータベースのこと
 
機密データとSaaSは共存しうるのか!?セキュリティー重視のユーザー層を取り込む為のネットワーク通信のアプローチ
機密データとSaaSは共存しうるのか!?セキュリティー重視のユーザー層を取り込む為のネットワーク通信のアプローチ機密データとSaaSは共存しうるのか!?セキュリティー重視のユーザー層を取り込む為のネットワーク通信のアプローチ
機密データとSaaSは共存しうるのか!?セキュリティー重視のユーザー層を取り込む為のネットワーク通信のアプローチ
 
パッケージソフトウェアを簡単にSaaS化!?既存の資産を使ったSaaS化手法のご紹介
パッケージソフトウェアを簡単にSaaS化!?既存の資産を使ったSaaS化手法のご紹介パッケージソフトウェアを簡単にSaaS化!?既存の資産を使ったSaaS化手法のご紹介
パッケージソフトウェアを簡単にSaaS化!?既存の資産を使ったSaaS化手法のご紹介
 
202202 AWS Black Belt Online Seminar Amazon Connect Customer Profiles
202202 AWS Black Belt Online Seminar Amazon Connect Customer Profiles202202 AWS Black Belt Online Seminar Amazon Connect Customer Profiles
202202 AWS Black Belt Online Seminar Amazon Connect Customer Profiles
 
Amazon Game Tech Night #24 KPIダッシュボードを最速で用意するために
Amazon Game Tech Night #24 KPIダッシュボードを最速で用意するためにAmazon Game Tech Night #24 KPIダッシュボードを最速で用意するために
Amazon Game Tech Night #24 KPIダッシュボードを最速で用意するために
 
202202 AWS Black Belt Online Seminar AWS SaaS Boost で始めるSaaS開発⼊⾨
202202 AWS Black Belt Online Seminar AWS SaaS Boost で始めるSaaS開発⼊⾨202202 AWS Black Belt Online Seminar AWS SaaS Boost で始めるSaaS開発⼊⾨
202202 AWS Black Belt Online Seminar AWS SaaS Boost で始めるSaaS開発⼊⾨
 
[20220126] JAWS-UG 2022初頭までに葬ったAWSアンチパターン大紹介
[20220126] JAWS-UG 2022初頭までに葬ったAWSアンチパターン大紹介[20220126] JAWS-UG 2022初頭までに葬ったAWSアンチパターン大紹介
[20220126] JAWS-UG 2022初頭までに葬ったAWSアンチパターン大紹介
 
202111 AWS Black Belt Online Seminar AWSで構築するSmart Mirrorのご紹介
202111 AWS Black Belt Online Seminar AWSで構築するSmart Mirrorのご紹介202111 AWS Black Belt Online Seminar AWSで構築するSmart Mirrorのご紹介
202111 AWS Black Belt Online Seminar AWSで構築するSmart Mirrorのご紹介
 
202201 AWS Black Belt Online Seminar Apache Spark Performnace Tuning for AWS ...
202201 AWS Black Belt Online Seminar Apache Spark Performnace Tuning for AWS ...202201 AWS Black Belt Online Seminar Apache Spark Performnace Tuning for AWS ...
202201 AWS Black Belt Online Seminar Apache Spark Performnace Tuning for AWS ...
 

Recently uploaded

Recently uploaded (20)

Enterprise Knowledge Graphs - Data Summit 2024
Enterprise Knowledge Graphs - Data Summit 2024Enterprise Knowledge Graphs - Data Summit 2024
Enterprise Knowledge Graphs - Data Summit 2024
 
Optimizing NoSQL Performance Through Observability
Optimizing NoSQL Performance Through ObservabilityOptimizing NoSQL Performance Through Observability
Optimizing NoSQL Performance Through Observability
 
Speed Wins: From Kafka to APIs in Minutes
Speed Wins: From Kafka to APIs in MinutesSpeed Wins: From Kafka to APIs in Minutes
Speed Wins: From Kafka to APIs in Minutes
 
How Red Hat Uses FDO in Device Lifecycle _ Costin and Vitaliy at Red Hat.pdf
How Red Hat Uses FDO in Device Lifecycle _ Costin and Vitaliy at Red Hat.pdfHow Red Hat Uses FDO in Device Lifecycle _ Costin and Vitaliy at Red Hat.pdf
How Red Hat Uses FDO in Device Lifecycle _ Costin and Vitaliy at Red Hat.pdf
 
WebAssembly is Key to Better LLM Performance
WebAssembly is Key to Better LLM PerformanceWebAssembly is Key to Better LLM Performance
WebAssembly is Key to Better LLM Performance
 
ECS 2024 Teams Premium - Pretty Secure
ECS 2024   Teams Premium - Pretty SecureECS 2024   Teams Premium - Pretty Secure
ECS 2024 Teams Premium - Pretty Secure
 
Simplified FDO Manufacturing Flow with TPMs _ Liam at Infineon.pdf
Simplified FDO Manufacturing Flow with TPMs _ Liam at Infineon.pdfSimplified FDO Manufacturing Flow with TPMs _ Liam at Infineon.pdf
Simplified FDO Manufacturing Flow with TPMs _ Liam at Infineon.pdf
 
Behind the Scenes From the Manager's Chair: Decoding the Secrets of Successfu...
Behind the Scenes From the Manager's Chair: Decoding the Secrets of Successfu...Behind the Scenes From the Manager's Chair: Decoding the Secrets of Successfu...
Behind the Scenes From the Manager's Chair: Decoding the Secrets of Successfu...
 
Introduction to FDO and How It works Applications _ Richard at FIDO Alliance.pdf
Introduction to FDO and How It works Applications _ Richard at FIDO Alliance.pdfIntroduction to FDO and How It works Applications _ Richard at FIDO Alliance.pdf
Introduction to FDO and How It works Applications _ Richard at FIDO Alliance.pdf
 
PLAI - Acceleration Program for Generative A.I. Startups
PLAI - Acceleration Program for Generative A.I. StartupsPLAI - Acceleration Program for Generative A.I. Startups
PLAI - Acceleration Program for Generative A.I. Startups
 
Top 10 Symfony Development Companies 2024
Top 10 Symfony Development Companies 2024Top 10 Symfony Development Companies 2024
Top 10 Symfony Development Companies 2024
 
Powerful Start- the Key to Project Success, Barbara Laskowska
Powerful Start- the Key to Project Success, Barbara LaskowskaPowerful Start- the Key to Project Success, Barbara Laskowska
Powerful Start- the Key to Project Success, Barbara Laskowska
 
Extensible Python: Robustness through Addition - PyCon 2024
Extensible Python: Robustness through Addition - PyCon 2024Extensible Python: Robustness through Addition - PyCon 2024
Extensible Python: Robustness through Addition - PyCon 2024
 
Intro in Product Management - Коротко про професію продакт менеджера
Intro in Product Management - Коротко про професію продакт менеджераIntro in Product Management - Коротко про професію продакт менеджера
Intro in Product Management - Коротко про професію продакт менеджера
 
FDO for Camera, Sensor and Networking Device – Commercial Solutions from VinC...
FDO for Camera, Sensor and Networking Device – Commercial Solutions from VinC...FDO for Camera, Sensor and Networking Device – Commercial Solutions from VinC...
FDO for Camera, Sensor and Networking Device – Commercial Solutions from VinC...
 
IoT Analytics Company Presentation May 2024
IoT Analytics Company Presentation May 2024IoT Analytics Company Presentation May 2024
IoT Analytics Company Presentation May 2024
 
A Business-Centric Approach to Design System Strategy
A Business-Centric Approach to Design System StrategyA Business-Centric Approach to Design System Strategy
A Business-Centric Approach to Design System Strategy
 
10 Differences between Sales Cloud and CPQ, Blanka Doktorová
10 Differences between Sales Cloud and CPQ, Blanka Doktorová10 Differences between Sales Cloud and CPQ, Blanka Doktorová
10 Differences between Sales Cloud and CPQ, Blanka Doktorová
 
Strategic AI Integration in Engineering Teams
Strategic AI Integration in Engineering TeamsStrategic AI Integration in Engineering Teams
Strategic AI Integration in Engineering Teams
 
Syngulon - Selection technology May 2024.pdf
Syngulon - Selection technology May 2024.pdfSyngulon - Selection technology May 2024.pdf
Syngulon - Selection technology May 2024.pdf
 

20191029 AWS Black Belt Online Seminar Elastic Load Balancing (ELB)

  • 1. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. AWS Webinar https://amzn.to/JPWebinar https://amzn.to/JPArchive Solutions Architect 2019/10/29 Elastic Load Balancing (ELB) [AWS Black Belt Online Seminar]
  • 2. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. 保里 善太(ほり ぜんた) • 所属 アマゾン ウェブ サービス ジャパン 株式会社 技術統括本部 ソリューションアーキテクト ゲーム業界のお客様を中心にご支援中 最近の関心事: 統計や機械学習を用いた不正検知やチート検出などのセキュリティの異 常検知技術
  • 3. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • ① 吹き出しをクリック ② 質問を入力 ③ Sendをクリック Twitter #awsblackbelt
  • 4. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • 2019 10 29 AWS (http://aws.amazon.com) • AWS AWS • • AWS does not offer binding price quotes. AWS pricing is publicly available and is subject to change in accordance with the AWS Customer Agreement available at http://aws.amazon.com/agreement/. Any pricing information included in this document is provided only as an estimate of usage charges for AWS services based on certain information that you have provided. Monthly charges will be based on your actual use of AWS services, and may vary from the estimates provided.
  • 5. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • • • • • •
  • 6. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • • • • • •
  • 7. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. LBLB LBLB LB LB
  • 8. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. 〜 AWSクラウド上のロードバランシングサービス 〜 ELBで実現できるシステム  スケーラブル : 複数のEC2インスタンス/ECSコンテナ..etc(ターゲット)に負 荷分散  高い可用性 : 複数のアベイラビリティゾーンにある複数のターゲット の中から正常なターゲットにのみ振り分け ELB自体の特徴  スケーラブル : ELB自体も負荷に応じてキャパシティを自動増減  安価な従量課金 : 従量課金で利用可能  運用管理が楽 : マネージドサービスなので管理が不要  豊富な連携機能 : Auto Scaling, Route 53, Cloud Formation… などと連携
  • 9. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. 新サーバ追加! 過負荷 過負荷 Elastic Load Balancing
  • 10. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. ELB自体も負荷の増減に応じて自動でスケール (キャパシティが自動で増加する) [注意] NLB以外のELB(ALB/CLB)がスケールするときには、IPアドレス が変化します。 ELBへアクセスするときには必ずDNS名で! DNSへ登録することで独自ドメインでのアクセスも可能。
  • 11. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
  • 12. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. HTTP, HTTPS, HTTP/2 TCP, UDP, TLS HTTP, HTTPS, TCP VPC EC2-Classic, VPCVPC
  • 13. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. TCP, UDP, TLS HTTP, HTTPS, TCP VPC EC2-Classic, VPCVPC ALB NLB HTTP, HTTPS, HTTP/2
  • 14. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • ユーザー マネージメント コンソール 開発・管理者
  • 15. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. ユーザー https://aws.amazon.com/jp/premiumsupport/knowledge-center/security-group-load-balancer/ • • • • • • •
  • 16. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. ユーザー https://docs.aws.amazon.com/ja_jp/elasticloadbalancing/latest/classic/elb-listener-config.html • • • • • •
  • 17. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • • • ユーザー
  • 18. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • • • • • •
  • 19. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • • • • • • • • • • • • • •
  • 20. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
  • 21. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. ALB NLB CLB
  • 22. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. AZ-b 良くない例:AZ間でキャパシティが不均等 AZ-a 50% 50% もう一方より 負荷が高くなる クロスゾーン負荷分散が有効であれば 50% 50% AZ-b AZ-a 負荷を基に 均等に http://docs.aws.amazon.com/ja_jp/ElasticLoadBalancing/latest/DeveloperGuide/enable-disable-crosszone-lb.html ALB NLB CLB • • • •
  • 23. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • EC2 • 1 • ( ) • ECS ( ) ALB NLB
  • 24. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Target Group ALB NLB Corporate data center DC ロードバランサ
  • 25. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • – – – • – – •
  • 26. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
  • 27. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. ALB NLB CLB • • •
  • 28. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. 参照 • • ALB NLB CLB
  • 29. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. https://docs.aws.amazon.com/ja_jp/elasticloadbalancing/latest/network/load-balancer-access-logs.html • • • ALB NLB CLB [
  • 30. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
  • 31. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • ALB/CLB 60 • NLB 350 ( ) ALB/CLB • 1 4,000 • NLB 350 • ※ ALB NLB CLB
  • 32. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • – ALB NLB CLB
  • 33. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. ALB CLB • • • • • • • • •
  • 34. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
  • 35. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.参照 http://docs.aws.amazon.com/ja_jp/ElasticLoadBalancing/latest/DeveloperGuide/elb-listener- config.html#using-elb-listenerconfig-quickref • • ALB NLB CLB
  • 36. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. https://docs.aws.amazon.com/ja_jp/ElasticLoadBalancing/latest/DeveloperGuide/ssl-config-update.html • • • • • • • • ALB NLB CLB
  • 37. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 参照 http://docs.aws.amazon.com/ja_jp/ElasticLoadBalancing/latest/DeveloperGuide/ssl-server-cert.html ALB NLB CLB
  • 38. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • 複数のTLS証明書を1つのALB/NLBのListenerに設定可能に • SNIをサポートするクライアントには、適切な証明書を選択してTLSで 通信をできる • SNI非サポートのクライアントにはデフォルト証明書が使われる • ドメインはもちろんサポートする鍵交換方式や暗号、署名アルゴリズ ムを元に証明書を選択するスマートセレクション • ALB毎に最大25証明書まで (デフォルト証明書を除く) • ACMまたはIAMの全ての証明書が利用可能 https://aws.amazon.com/jp/blogs/news/new-application-load-balancer-sni/ https://aws.amazon.com/about-aws/whats-new/2017/10/elastic-load-balancing-application-load-balancers-now-support-multiple-ssl-certificates-and- smart-certificate-selection-using-server-name-indication-sni/ ALB NLB
  • 39. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • • • • • •
  • 40. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • • • • • • • •
  • 41. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Target GroupTarget Group example.com /order /products HTTP:80 HTTPS:443 • • • •
  • 42. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
  • 43. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. example.com Target GroupTarget Group example.com http://example.com/products /order /products http://products.example.com Target GroupTarget Group order.example.com products.example.com
  • 44. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
  • 45. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. 1 (THEN)YES Rule 1 Rule 2 Default 2 (THEN)YES ELSE ELSE
  • 46. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
  • 47. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon CognitoALB Amazon EC2 1 2 3 4 OIDC IdP ALB 1 2 3 4 Amazon EC2
  • 48. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. X-Forwarded-For: 203.0.113.7, 10.12.33.44, 10.12.23.88 Client IP address 送信元 経由するルート https://aws.amazon.com/jp/premiumsupport/knowledge-center/elb-capture-client-ip-addresses/ • • • •
  • 49. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • HTTP/2 • HTTP 1.1 1 HTTP/2 128 • ALB HTTP/1.1 • HTTP/2 • Lambda • • Websocket
  • 50. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • • • • • •
  • 51. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • TCP(L4)のバランサとして機能 • 固定IPアドレス: AZ毎に1つ、既に持っているEIPも利用可能 • 送信元IPアドレスの保持: X-Forwarded-ForやProxy Protocolが不要 • 暖機なしに急激なスパイクにも対応可能 • • https://aws.amazon.com/jp/blogs/news/new-network-load-balancer-effortless-scaling-to-millions-of-requests-per-second/ https://aws.amazon.com/about-aws/whats-new/2017/09/announcing-network-load-balancer-for-elastic-load-balancing/ 1. 高可用性、高スループット、低レイテンシ 2. Source IP/Portがターゲットまで保持される 3. 固定IP
  • 52. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • 高い可用性を実現 • DNS名なら、UnhealthyなAZのIPアドレスが自動削除される • 長時間セッションも維持が可能 • 暖機不要で突発的な数百万リクエスト/秒のトラフィックも捌ける • ELBは動的にキャパシティが拡張されるが、突発的なアクセス上昇の場 合、ALB/CLBの拡張が間に合わないことがある。その場合は暖機申請が 必要 • 固定IPのまま動的にスケールする • TCP負荷分散を同一AZ内で行うので、レイテンシが小さい • 単一AZ構成も可能 (ALBは複数AZ構成が必須)
  • 53. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • クライアントのSource IPとPortが、そのままTargetまで届く • Targetはクライアントと直接通信しているかの様に見える • 実際は、行きも帰りもNLBを通っている (DSRではない) • IP Target(後述)やPrivateLink経由の場合は保持されず、NLBからの通信とな る • Direct Connectは接続されているVPCからのみ通信可能なので、こちらで回避 • TargetのSecurity GroupでクライアントIPの接続を許可する必要あり • インターネット向けに広く公開する場合は0.0.0.0/0で公開が必要 • ある程度制限をする場合は加えて、Health checkのためにVPC CIDRかNLB ENIからのアク セスも許可する必要あり • VPC内からのアクセスの場合でもターゲットへのアクセス許可はセキュリティグループ ID の指定ではなくクライアントIPの指定が必要 • Targetの選択は5-tupleなのでStickyになる • src ip, src port, dst ip, dst port, protocol
  • 54. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • Internet-facing、Internal共にIPアドレスが固定 • AZ毎に1つのIPアドレスを利用、DNSはAレコードでも設定可能 • ALB, CLBではIPアドレスは不定(DNSで同定可能) • NLB作成時に自動割当されたIPアドレス、又はNLB作成時に指定し た自分が持っているElastic IPのいずれか • 自動割り当てされたIPアドレス以外の自前のElastic IPを使う際にはNLB作成 前にあらかじめElastic IPを用意しておく必要あり(重要) • NLB作成後に変更は不可能 • よくあるユースケース • Firewallの制約等で、ELBのIPアドレスの固定が必要な時
  • 55. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • Instance Targetには一部古い世代が利用不可 • C1, CC1, CC2, CG1, CG2, CR1, CS1, G1, G2, HI1, HS1, M1, M2, M3, T1 • まとめるとI2,C3を除く2013年以前のインスタンスタイプ • Idle Connection Timeoutは350秒固定 • アイドルタイムアウト期間の経過後にクライアントまたはターゲットがデータを送信した場 合、TCP RST パケットが返されて接続が無効になったことを示す • Health Checkの設定に、あまり柔軟性がない • Timeoutは固定(TCPとHTTPSは10秒、HTTPは6秒) • Intervalは10秒または30秒のみで、後から変更不可 • TLSリスナーではアクセスログが取得可能だが、TCPの場合はVPC Flow Logで代替 • NLB自体にセキュリティーグループの設定はない
  • 56. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • • • • •
  • 57. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • • • • • •
  • 58. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. ALB NLB CLB • EC2-Classic • TCP SSL • •
  • 59. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • • • • • •
  • 60. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • – – ALB NLB CLB
  • 61. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. ALB NLB
  • 62. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • • • • •
  • 63. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • •
  • 64. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. AWS WAF • • • • • • ALB
  • 65. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. ALB NLB ALB NLB Region ap-northeast-1 AWS Global Accelerator example.com Region us-east-1 • Global Accelerator ALB, NLB ( Elastic IP) • Amazon Global Network • IP • ALB IP ….. etc
  • 66. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Target Group BTarget Group A example.com ALB • Lambda • Lambda JSON Lambda • VPC ALB Lambda EC2 ECS
  • 67. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • • • • • •
  • 68. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • • • • • • • •
  • 69. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • • • • NLB/ALB CLB • • • • • • • • • • • • https://aws.amazon.com/jp/elasticloadbalancing/pricing/
  • 70. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • • • • • •
  • 71. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • https://docs.aws.amazon.com/ja_jp/elasticloadbalancing/latest/classic/elb-cloudwatch-metrics.html
  • 72. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. https://docs.aws.amazon.com/ja_jp/elasticloadbalancing/latest/userguide/migrate-to-application-load-balancer.html
  • 73. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
  • 74. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • •
  • 75. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • – – – • – – 時間 負 荷
  • 76. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • – – • • • – • – • –
  • 77. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
  • 78. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
  • 79. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
  • 80. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. AWS Japan Blog https://aws.amazon.com/jp/blogs/news/
  • 81. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. https://amzn.to/JPArchive
  • 82. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • •
  • 83. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. AWS Webinar https://amzn.to/JPWebinar https://amzn.to/JPArchive