AWS BlackBelt Online Seminar 2017 AWSのIPv6対応

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.2017.12.05
AWS Black Belt Online Seminar
AWS IPv6

© 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
( )
Network
ISP,IXP,VPN
SE AWS
AWS : ELB,Direct Connect,VPC,Market Place

• ej ( izS~ Wn hcUd dUl
i j/75 tu zs II 9 9C9 E EC hd a U
• hj dWol P i f/75 tu zs i h
b P/75 tu zs i f _dU a l
• j f bdUl iW S p P
_dU a l
• 2HD P Q_ Z RRQ NUZPUZS UOQ a Q_ 2HD UOUZS U_ aNXUOXe MbMUXMNXQ MZP U_
_aNVQO OTMZSQ UZ MOO PMZOQ cU T TQ 2HD 4a_ YQ 2S QQYQZ MbMUXMNXQ M
T 1&&Mc_ MYMf Z O Y&MS QQYQZ & 2Ze UOUZS UZR YM U Z UZOXaPQP UZ TU_
P OaYQZ U_ bUPQP ZXe M_ MZ Q_ UYM Q R a_MSQ OTM SQ_ R 2HD _Q bUOQ_ NM_QP
Z OQ MUZ UZR YM U Z TM e a TMbQ bUPQP Z TXe OTM SQ_ cUXX NQ NM_QP Z
e a MO aMX a_Q R 2HD _Q bUOQ_ MZP YMe bM e R Y TQ Q_ UYM Q_ bUPQP

AWS
16 Regions – 44 Availability Zones – 107 Edge Locations
Region & Number of Availability
Zones
AWS GovCloud (2) EU
Ireland (3)
US West Frankfurt (2)
Oregon (3) London (2)
Northern California
(3)
Asia Pacific
US East Singapore (2)
N. Virginia (6), Ohio
(3)
Sydney (2), Tokyo (3),
Seoul (2), Mumbai (2)
Canada
Central (2) China
Beijing (2)
South America
São Paulo (3)
Announced Regions
Paris, Ningxia, Sweden, Hong-Kong, Osaka

CQSU Z aYNQ R 2bMUXMNUXU e K ZQ_
2HD 8 b4X aP ) 1 E
: QXMZP
65 7 I 7 MZWRa )
QS Z ZP Z )
TQ Z 4MXUR ZUM
/ @9 39 @ @
65 19 I DUZSM Q )
GU SUZUM , TU DePZQe ) E We
DQ aX ) aYNMU )
09 9 9
4QZ MX ) 0 @ 9
3QUVUZS )
5E I /C @ 9
Di AMaX
2ZZ aZOQP CQSU Z_
AM U_ UZSdUM D OWT XY _MWM
AWS IPv6
:Ab- MbMUXMNXQ UZ
(, CQSU Z_ h ) 2bMUXMNUXU e K ZQ_ h ( . 6PSQ OM U Z_

ENTERPRISE
APPS
DEVELOPMENT &
OPERATIONS
MOBILE
SERVICES
APP
SERVICES
ANALYTICS
Data
Warehousing
Hadoop/
Spark
Streaming Data
Collection
Machine
Learning
Elastic
Search
Virtual
Desktops
Sharing &
Collaboration
Corporate
Email
Backup
Queuing &
Notifications
Workflow
Search
Email
Transcoding
One-click App
Deployment
Identity
Sync
Single Integrated
Console
Push
Notifications
DevOps Resource
Management
Application Lifecycle
Management
Containers
Triggers
Resource
Templates
TECHNICAL &
BUSINESS
SUPPORT
Account
Management
Support
Professional
Services
Training &
Certification
Security
& Pricing
Reports
Partner
Ecosystem
Solutions
Architects
MARKETPLACE
Business
Apps
Business
Intelligence
Databases
DevOps
Tools
NetworkingSecurity Storage
Regions
Availability
Zones
Points of
Presence
INFRASTRUCTURE
CORE SERVICES
Compute
VMs, Auto-scaling,
& Load Balancing
Storage
Object, Blocks,
Archival, Import/Export
Databases
Relational, NoSQL,
Caching, Migration
Networking
VPC, DX, DNS
CDN
Access
Control
Identity
Management
Key
Management
& Storage
Monitoring
& Logs
Assessment
and reporting
Resource &
Usage Auditing
SECURITY & COMPLIANCE
Configuration
Compliance
Web application
firewall
HYBRID
ARCHITECTURE
Data
Backups
Integrated
App
Deployments
Direct
Connect
Identity
Federation
Integrated
Resource
Management
Integrated
Networking
API
Gateway
IoT
Rules
Engine
Device
Shadows
Device
SDKs
Registry
Device
Gateway
Streaming Data
Analysis
Business
Intelligence
Mobile
Analytics
/75zS~ S v w

2OO aZ Da
Da
MZMSQP
DQ bUOQ_
A RQ__U ZMX
DQ bUOQ_
AM ZQ
6O _e_ QY
E MUZUZS
4Q URUOM U Z
D Xa U Z
2 OTU QO _
2OO aZ
MZMSQYQZ
DQOa U e
A UOUZS
CQ _
EQOTZUOMX
2OO
MZMSQYQZ
M WQ XMOQ
3a_UZQ__
2 XUOM U Z_
5Qb _
E X_
3a_UZQ__
:Z QXXUSQZOQ
DQOa U e
Q c WUZS
5M MNM_Q
D MSQ
DMMD
DaN_O U U Z
_
Q M UZS
De_ QY_
NUXQ
3aUXP EQ_
ZU 2 _
Aa_T
URUOM U Z_
3aUXP
5Q X e
MZMSQ 2A:_
5QbUOQ
EQ_ UZS
:PQZ U e
6Z Q U_Q
2 XUOM U Z_
5 OaYQZ
DTM UZS
6YMUX
4MXQZPM UZ
S
9 _ QP
5Q_W _
2 XUOM U Z
D QMYUZS
3MOWa
8MYQ
5QbQX YQZ
5 8MYQ
6ZSUZQ
aX U
XMeQ
3MOWQZP_
SY E X_
ZU UZS
2aPU UZS
DQ bUOQ
4M MX S
DQ bQ
MZMSQYQZ
4 ZRUSa M U
Z E MOWUZS
UYUfM U Z
CQ_ a OQ
EQY XM Q_
2a YM U Z
2ZMXe UO_
BaQ e M SQ
5M M DQ _
6XM_ UO_QM OT
3a_UZQ__
2ZMXe UO_
9MP &D M W
CQMX UYQ
5M M
D QMYUZS
OTQ_ M U
Z H WRX c_
MZMSQP
DQM OT
MZMSQP
6E
2 URUOUMX
:Z QXXUSQZOQ
G UOQ
EQd
4TM N _
MOTUZQ
QM ZUZS
EQd
D QQOT
:YMSQ
2ZMXe_U_
: E
CaXQ_
6ZSUZQ
OMX
4 Y a Q MZP
DeZO
5QbUOQ
DTMP c_
5QbUOQ
8M QcMe
CQSU_ e
9eN UP
5QbUOQ_
6PSQ
De_ QY_
5M M
:Z QS M U Z
:Z QS M QP
Q c WUZS
CQ_ a OQ
MZMSQYQZ
G cM Q Z
2HD
:PQZ U e
7QPQ M U Z
US M U Z
2 XUOM U Z
5U_O bQ e
2 XUOM U Z
US M U Z
5M MNM_Q
US M U Z
DQ bQ
US M U Z
5M M
US M U Z
:ZR M_ aO a Q CQSU Z_
2bMUXMNUXU e
K ZQ_
A UZ _ R
A Q_QZOQ
4 Y a Q 4 Z MUZQ _
6bQZ
P UbQZ
4 Y a UZS
GU aMX
MOTUZQ_
DUY XQ
DQ bQ _
2a
DOMXUZS
3M OT
HQN
2 XUOM U Z
_
D MSQ
NVQO
D MSQ
2 OTUbQ
3X OW
D MSQ
MZMSQP
7UXQ
D MSQ
6dMNe Q _OMXQ
5M M
E MZ_
5M MNM_Q M UM53
5M M
HM QT a_UZS
DB2a M eDB MOXQ DB DQ bQA _ S QDB
2 XUOM U Z
DQ bUOQ_
E MZ_O PUZ
S
D Q
7aZO U Z_
Q__MSUZS
DQOa U e
4Q URUOM Q
MZMSQYQZ
HQN 2
7U QcMXX
:PQZ U e
2OOQ__
Qe D MSQ
MZMSQYQZ
55 D
A QO U Z
2 XUOM U Z
2ZMXe_U_
2O UbQ
5U QO e
5Qb E X_
A UbM Q 8U
CQ _U UQ
_
4 Z UZa a_
5QXUbQ e
3aUXP EQ_
MZP 5QNaS
5Q X eYQZ
Q c WUZS
:_ XM QP
CQ_ a OQ_
5QPUOM QP
4 ZZQO U Z
_
MP
3MXMZOUZS
DOMXMNXQ
5 D
8X NMX 45
ETQ
2HD
AXM R Y

IPv6
T _1&&Mc_ MYMf Z O Y&V &NX S_&ZQc_&ZQc U b- _a R QO) UZ_ MZOQ_ UZ bU aMX UbM Q OX aP_&
( ( &)
p
( &(-
( ) &)
p p
5U QO
4 ZZQO
2YMf Z
D
2 XUOM U Z
MP 3MXMZOQ
2HD H27
IoT S3 CloudFront WAF Route53 VPC ALB IPv6
IPv4/IPv6
64)64)64)
2YMf Z
4X aP7 Z
2YMf Z
C a Q ,
H63
:Z Q ZQ
SM QcMe
6S Q__ ZXe 8M QcMe 68H
:Ab- p
3M_U Z
: 9 ) : 9 )
: 9 ()
6S Q__ ZXe
:Z Q ZQ
8M QcMe
:Z Q ZQ64)
2HD : E

Classic Load Balancer (CLB)
(https://aws.amazon.com/jp/elasticloadbalancing/classicloadbalancer/)
• Amazon EC2
•
• CLB
• IPv4 IP
(EC2-Classic
(https://aws.amazon.com/jp/elasticloadbalancing/classicloadbalancer/pricing/)
• CLB
• CLB
p p p
p M
p p
p N
4 3
64) 64)
Ye 3 ddd QXN MYMf ZMc_ O Y

CLB IPv6

Web IPv 2011
) (( aZQ / H XP
:Ab- PMe j
2HD

AWS IoT
(https://aws.amazon.com/jp/iot/)
•
• HTTP MQTT Websocket
• SQL
• AWS
• SDK
(https://aws.amazon.com/jp/iot/pricing/)
• 100 $8( )
• 25 / (1 )
p
R ei
rS y

Amazon Simple Storage Service (S3)
(http://aws.amazon.com/jp/s3/)
• 99.999999999%
•
• AWS
• API REST Web
(http://aws.amazon.com/jp/s3/pricing/)
•
• (OUT)
• API
p p p
2YMf Z D

Amazon CloudFront
(http://aws.amazon.com/jp/cloudfront/)
•
•
• 107
(http://aws.amazon.com/jp/cloudfront/pricing/)
• (OUT)
• HTTP/HTTPS
• ( )SSL
p 45 4 Z QZ _ 5QXUbQ e Q c W p
2YMf Z
4X aP7 Z
p
HQN p

AWS WAF(Web Application Firewall)
(https://aws.amazon.com/jp/waf/)
•
• SQL XSS
API
• CloudFront ALB(Application Load Balancer)
(https://aws.amazon.com/jp/waf/pricing/)
• ACL
•
2HD p p

Amazon Route53
(http://aws.amazon.com/jp/route53/)
• Amazon Route53
•
• DNS
(http://aws.amazon.com/jp/route53/pricing/)
•
• 0.5USD/
• : 0.4USD
p 5 D
• p p
k
• :A 2ZeOM_
• &5 D p p
•
• p p p
• p
•
• 2222 BaQ e UZ :Ab-
C a Q,

p
Amazon Virtual Private Cloud (VPC)
(http://aws.amazon.com/jp/vpc/)
• AWS
• AWS
•
(http://aws.amazon.com/jp/vpc/pricing/)
• VPC
p p
GA4 (.) (- &(-
p
p
GA p
p
p

(Direct Connect)
p
p
p
p
6 aUZUd EJ) D(
l2HD
p
l
j2HD p
l
6 aUZUd EJ)
6 aUZUd D(
l p 38A
l z
GA4 p
2HD
lGA
l p
l p

mIPv6 in Amazon VPC
• IP j
( ,
:Z_ MZO
Q
( &(-
( &) ) (1PN/11&-
) (1PN/11
DaNZQ
) (1PN/11&,-

mIPv6 in Amazon VPC
• IPv4 k IPv6
e GA4_
e DaNZQ _

mIPv6 in Amazon VPC

mIPv6 p
• IPv6 VPC p
(GUA)
• GUA
• ymy NAT
• GUA
k p p j p j p
k

6:8H I
( ,
:Z_ MZO
Q
) (1PN/11
DaNZQ
Egress-only Internet Gateway
• IPv6 p
•
• p

m
p j p p jNACL
• IPv6 IPv4 j
6dMY XQ DQOa U e 8 a CaXQ_

GA4 :Ab :Ab-
23 23 )
)NU ()/NU
GA4
r s
4:5C
(-q)/NU
,-NU
2YMf Z QRUd ,-NU 4:5C
r s
(-q)/NU - NU
:A&
p :A
r 2E :A
p :A 2As
r p 6S Q__ ZXe
:Z Q ZQ 8M QcMe s
j8)
p
5 D
p :Aj6XM_ UO :A
5 D
5 D
GA j5U QO 4 ZZQO 5U QO 4 ZZQO
T 1&&P O_ Mc_ MYMf Z O Y&VMLV &2YMf ZGA4&XM Q_ &F_Q 8aUPQ&b O U MPP Q__UZS T YX

Application Load Balancer (ALB)
(https://aws.amazon.com/elasticloadbalancing/applicationloadbalancer/)
• 7
•
• WebSocket, HTTP/2, IPv6, AWS WAF
•
• ALB
(https://aws.amazon.com/jp/elasticloadbalancing/applicationloadbalancer/pricing/)
• ALB
• Load Balancer Capacity Units (LCU)
p p p p
p M
p p
p N
2 3
64)
Ye 3 ddd QXN MYMf ZMc_ O Y
64) 64)
p p p p

VPC Flow Logs
l p
j4X aPHM OT S_ AaNXU_T
l p p &
l p p 24
p MOOQ QP& QVQO
l
( j j
l 4X aPHM OT S_
s

Elasticsearch Service + kibana
GA4 4X aPHM OT
S_
6XM_ UO_QM OT
DQ bUOQ
WUNMZM
6XM_ UO_QM OT
AFE
T _1&&NX S_ Mc_ MYMf Z O Y&_QOa U e& _ &Ed) -8 K 7:H.0 &9 c
UYUfQ MZP GU_aMXUfQ J a DQOa U e 8 a _

(Direct Connect)
p
p
p
p
6 aUZUd EJ) D(
l2HD
p
l
j2HD p
l
6 aUZUd
EJ)&EJ-&EJ.&EJ/
6 aUZUd D(
l p 38A
l z
GA4 p
2HD
lGA
l p
l p

• Direct Connect Gateway Hub
VPC
• Direct Connect VPC
• 1 Direct Connect VPC
• Direct Connect Direct Connect Gateway
Direct Connect Gateway
1 Direct Connect
VPC

Amazon GuardDuty
• 4X aPE MUX 5 D jGA4 7X c S_
p
• 8aM P5a e 2HD j
p k
• p
j
• k
• p

Amazon FreeRTOS
• : E l l
2YMf Z 7 QQCE D
• D 7 QQCE D
p j p
• E2 p p
• p
j
• p

IP (aws:SourceIp)
ip-ranges.json {
"Version": "2012-10-17",
"Statement": {
"Effect": "Allow",
"Action": "someservice:*",
"Resource": "*",
"Condition": {
"IpAddress": {
"aws:SourceIp": [
"203.0.113.0/24",
"2001:DB8:1234:5678::/64”
]
}
}
}
}
"ipv6_prefixes": [
{
"ipv6_prefix": "2400:6500:0:7000::/56",
"region": "ap-southeast-1",
"service": "AMAZON”
},
{
"ipv6_prefix": "2400:6500:0:7100::/56",
"region": "ap-northeast-1",
"service": "AMAZON”
},
(…)
]

IPv6
T _1&&Mc_ MYMf Z O Y&V &NX S_&ZQc_&ZQc U b- _a R QO) UZ_ MZOQ_ UZ bU aMX UbM Q OX aP_&
( ( &)
p
( &(-
( ) &)
p p
5U QO
4 ZZQO
2YMf Z
D
2 XUOM U Z
MP 3MXMZOQ
2HD H27
IoT S3 CloudFront WAF Route53 VPC ALB GuardDuty IPv6
in 23 23 ) r ye
64)64)64)
2YMf Z
4X aP7 Z
2YMf Z
C a Q ,
H63
:Z Q ZQ
SM QcMe
6S Q__ ZXe 8M QcMe 68H
:Ab- p
3M_U Z
: 9 ) : 9 )
: 9 ()
6S Q__ ZXe
:Z Q ZQ
8M QcMe
:Z Q ZQ64)
2HD : E
2YMf Z
8aM P5a e

AWS
• http://aws.amazon.com/jp/aws-jp-introduction/
AWS Solutions Architect
• Q&A
• http://aws.typepad.com/sajp/

AWS BlackBelt Online Seminar 2017 AWSのIPv6対応

Recommended

Recommended

More Related Content

What's hot

What's hot (9)

Similar to AWS BlackBelt Online Seminar 2017 AWSのIPv6対応

Similar to AWS BlackBelt Online Seminar 2017 AWSのIPv6対応 (20)

More from Amazon Web Services Japan

More from Amazon Web Services Japan (20)

Recently uploaded

Recently uploaded (20)

AWS BlackBelt Online Seminar 2017 AWSのIPv6対応