[B! network] rgfxã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

rgfx id:rgfx

networkã«é–¢ã™ã‚‹rgfxã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (28)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã‚»ãƒ³ãƒãƒ¥ãƒªãƒ¼ãƒ»ã‚·ã‚¹ãƒ†ãƒ ã‚ºè£½FutureNet NXRã‚·ãƒªãƒ¼ã‚ºã€VXRã‚·ãƒªãƒ¼ã‚ºãŠã‚ˆã³WXRã‚·ãƒªãƒ¼ã‚ºã«ãŠã‘ã‚‹è¤‡æ•°ã®è„†å¼±æ€§ï¼ˆCVE-2024-31070ç‰ï¼‰ã«ã¤ã„ã¦ | æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ | IPA ç‹¬ç«‹è¡Œæ”¿æ³•äºº æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹
ãƒˆãƒƒãƒ—ãƒšãƒ¼ã‚¸ æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ é‡è¦ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ± 2024å¹´åº¦ ã‚»ãƒ³ãƒãƒ¥ãƒªãƒ¼ãƒ»ã‚·ã‚¹ãƒ†ãƒ ã‚ºè£½FutureNet NXRã‚·ãƒªãƒ¼ã‚ºã€VXRã‚·ãƒªãƒ¼ã‚ºãŠã‚ˆã³WXRã‚·ãƒªãƒ¼ã‚ºã«ãŠã‘ã‚‹è¤‡æ•°ã®è„†å¼±æ€§ï¼ˆCVE-2024-31070ç‰ï¼‰ã«ã¤ã„ã¦ ã‚»ãƒ³ãƒãƒ¥ãƒªãƒ¼ãƒ»ã‚·ã‚¹ãƒ†ãƒ ã‚ºè£½FutureNet NXRã‚·ãƒªãƒ¼ã‚ºã€VXRã‚·ãƒªãƒ¼ã‚ºãŠã‚ˆã³WXRã‚·ãƒªãƒ¼ã‚ºã«ãŠã‘ã‚‹è¤‡æ•°ã®è„†å¼±æ€§ï¼ˆCVE-2024-31070ç‰ï¼‰ã«ã¤ã„ã¦ æ³¨é‡ˆï¼šè¿½è¨˜ã™ã¹ãæƒ…å ±ãŒã‚ã‚‹å ´åˆã«ã¯ã€ãã®éƒ½åº¦ã“ã®ãƒšãƒ¼ã‚¸ã‚’æ›´æ–°ã™ã‚‹äºˆå®šã§ã™ã€‚ æ¦‚è¦ ã‚»ãƒ³ãƒãƒ¥ãƒªãƒ¼ãƒ»ã‚·ã‚¹ãƒ†ãƒ ã‚ºæ ªå¼ä¼šç¤¾ãŒæä¾›ã™ã‚‹FutureNet NXRã‚·ãƒªãƒ¼ã‚ºãƒ»WXRã‚·ãƒªãƒ¼ã‚ºã¯ã‚»ãƒ³ã‚¿ãƒ¼å‘ã‘ãƒ»æ‹ ç‚¹å‘ã‘VPNãƒ«ãƒ¼ã‚¿ã€VXRã‚·ãƒªãƒ¼ã‚ºã¯ä»®æƒ³ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãƒ«ãƒ¼ã‚¿ã§ã™ã€‚ FutureNet NXRã‚·ãƒªãƒ¼ã‚ºã€VXRã‚·ãƒªãƒ¼ã‚ºãŠã‚ˆã³WXRã‚·ãƒªãƒ¼ã‚ºã«ã¯è„†å¼±æ€§ãŒç¢ºèªã•ã‚Œã¦ãŠã‚Šã€è„†å¼±æ€§ãŒæ‚ªç”¨ã•ã‚ŒãŸå ´åˆã€Telnetã«ç„¡åˆ¶é™ã§ã‚¢ã‚¯ã‚»ã‚¹
rgfx 2024/08/01
ã€Œ(ISDNãªå°‚ç”¨ç·šã‹ã‚‰VPNã¸ç§»è¡Œã™ã‚‹éš›ã«)é‹ç”¨ã‚³ã‚¹ãƒˆã«ç´›ã‚Œè¾¼ã‚€å½¢ã§ITè³‡ç”£ã¨ã—ã¦ç®¡ç†ã•ã‚Œãªã„ã¾ã¾ã€VPNãƒ«ãƒ¼ã‚¿ã‚„IoTãƒ«ãƒ¼ã‚¿ã¨ã—ã¦ç”¨ã„ã‚‰ã‚Œã¦ã„ã‚‹å ´åˆã‚‚ã‚ã‚Šã¾ã™ã®ã§ã€ï¾‹ï½¯

security

network
ãƒªãƒ³ã‚¯
æ–°äººã®ãŸã‚ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆ&ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯è¶…å…¥é–€2024
rgfx 2024/07/08
ã‚ã‚ŠãŒã¦ãˆã€å‰æ¥ãŒéŽãŽã‚‹

network

tcp-ip

internet
ãƒªãƒ³ã‚¯
DNSå±‹ã•ã‚“ç›®ç·šã§2023å¹´ã‚’æŒ¯ã‚Šè¿”ã‚‹â€•â€•ã€ŒHTTPS RRã€ã‚¯ã‚¨ãƒªæ•°ãŒ48ï¼…ã‚‚å¢—åŠ ã€ã€Œãƒ©ãƒ³ãƒ€ãƒ ã‚µãƒ–ãƒ‰ãƒ¡ã‚¤ãƒ³æ”»æ’ƒã€ã‹ã‚‰ã®æ•™è¨“ãªã©ã€ä»Šå¹´ã®ã€ŒDNS DAYã€ã®è©±é¡Œã‹ã‚‰ã€Internet Week 2023ã€‘
rgfx 2023/12/22
network

dns
ãƒªãƒ³ã‚¯
AWS Transit Gateway ã‚’ç”¨ã„ã¦ NAT Gateway ã‚’é›†ç´„ã—ã€ã‚³ã‚¹ãƒˆã‚’æœ€é©åŒ–ã™ã‚‹ãŸã‚ã®çµŒè·¯è¨è¨ˆ - ã‚µãƒ¼ãƒãƒ¼ãƒ¯ãƒ¼ã‚¯ã‚¹ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒ–ãƒã‚°
ãƒžãƒãƒ¼ã‚¸ãƒ‰ã‚µãƒ¼ãƒ“ã‚¹éƒ¨ ä½ç«¹ã§ã™ã€‚ ä»¥å‰ NAT Gateway é›†ç´„ã®ãŸã‚ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯è¨è¨ˆã«ãŠã„ã¦ãƒˆãƒ©ãƒ–ãƒ«ã‚’ç™ºç”Ÿã•ã›ã¦ã—ã¾ã£ãŸã“ã¨ãŒã‚ã‚Šã€ãã®å†ç™ºé˜²æ¢ã®ãŸã‚ã®ãƒ–ãƒã‚°ã‚’è¨˜è¼‰ã—ã¾ã™ã€‚ ã¯ã˜ã‚ã« å„ VPC ã”ã¨ã« NAT Gateway ã‚’æ§‹ç¯‰ã—ãŸå ´åˆ NAT Gateway ã®åˆ©ç”¨æ–™ AWS Transit Gateway ã‚’ç”¨ã„ã¦é›†ç´„ã™ã‚‹ NAT Gateway é›†ç´„ã¨çµŒè·¯è¨è¨ˆ Transit Gateway ã‚’æ§‹ç¯‰ã™ã‚‹ Transit Gateway Attachment (Type VPC) ã‚’å„ VPC ã§ä½œæˆã™ã‚‹ ã€ŒVPC Aã€ã¨ã€ŒVPC Cã€ã® Subnet ã®çµŒè·¯ã‚’ä¿®æ£ã—ã€ NAT Gateway ã‚’å‰Šé™¤ã™ã‚‹ ä¸€åº¦ã“ã“ã§çµŒè·¯ç¢ºèªã‚’è¡Œã£ã¦ã¿ã‚‹ Transit Gateway ã®ãƒ«ãƒ¼ãƒˆãƒ†ãƒ¼ãƒ–ãƒ«ã«ã€Œ0.0.0.0/0ã€ã‚’è¿½åŠ ã™ã‚‹ Reachability Analyzer ã§ã®å‹•ä½œ
rgfx 2023/11/13
æˆ»ã‚Šãƒ«ãƒ¼ãƒˆãŒãªãã¦ã‚³ã‚±ã‚‹ã€ã‚ã‚‹ã‚ã‚‹ã€‚

aws

network

tcp-ip
ãƒªãƒ³ã‚¯
ã€ŒNATã€ã€ŒNATè¶Šãˆã€ã€ŒNATã‚¿ã‚¤ãƒ—ã€ã£ã¦ãªãƒ¼ã«ï¼Ÿ
ã€ŒNATï¼ˆãƒŠãƒƒãƒˆï¼‰â€»1ã€ã¯ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã‚²ãƒ¼ãƒ ã‚’æ”¯ãˆã‚‹é‡è¦ãªæŠ€è¡“ã®ã²ã¨ã¤ã§ã™ã€‚ ã€ŒNATè¶Šãˆâ€»2ã€ã«å¤±æ•—ã™ã‚‹ã¨ãƒžãƒ«ãƒãƒ—ãƒ¬ã‚¤ãŒã§ããªããªã‚Šã¾ã™ã—ã€ã€ŒNATã‚¿ã‚¤ãƒ—â€»3ã€ã®é•ã„ã¯ãƒžãƒ«ãƒãƒ—ãƒ¬ã‚¤ã®ã—ã‚„ã™ã•ã«å½±éŸ¿ã—ã¾ã™ã€‚ ã¨ã“ã‚ãŒã€NAT ã¯ä»•çµ„ã¿ãŒé›£ã—ãã€åˆå¿ƒè€…å‘ã‘ã®è¨˜äº‹ã‚‚å°‘ãªã„ãŸã‚ã€ã‚¤ã‚«ã‚¹ãƒŸã‚«ãƒ•ã‚§ã«ã¯ NAT ã«ã¤ã„ã¦ã®è³ªå•ãŒã‚ˆãå¯„ã›ã‚‰ã‚Œã¾ã™ã€‚ ãã“ã§ä»Šå›žã¯ã€Nintendo Switchï¼ˆãƒ‹ãƒ³ãƒ†ãƒ³ãƒ‰ãƒ¼ã‚¹ã‚¤ãƒƒãƒï¼‰ã‚’ä¾‹ã«ã—ã¦ã€ä¸–ç•Œä¸€ã‚ã‹ã‚Šã‚„ã™ã NAT ã‚’è§£èª¬ã—ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚
rgfx 2023/09/05
network
ãƒªãƒ³ã‚¯
Network Load Balancer (NLB) ãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚°ãƒ«ãƒ¼ãƒ—ã‚’ã‚µãƒãƒ¼ãƒˆã—ã¦ä½•ãŒå¬‰ã—ã„ã®ã‹æ•´ç†ã—ã¦ã¿ãŸ | DevelopersIO
ã†ãŠãŠãŠãŠãŠãŠãŠãŠãŠ!!! ã£ã¦ãªã£ãŸã‘ã©ãªã‚“ã§æ“å–œã—ã¦ã„ã‚‹ã‚“ã ã£ã‘? ã“ã‚“ã«ã¡ã¯ã€ã®ã‚“ãƒ”(@non____97)ã§ã™ã€‚ çš†ã•ã‚“ã¯Network Load Balancer (ä»¥é™NLB) ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚°ãƒ«ãƒ¼ãƒ—ã‚’ã‚¢ã‚¿ãƒƒãƒã—ãŸã„ãªã¨æ€ã£ãŸã“ã¨ã¯ã‚ã‚Šã¾ã™ã‹? ç§ã¯ã‚ã‚Šã¾ã™ã€‚ æœ¬æ—¥8/11ã«ã¤ã„ã«ã‚µãƒãƒ¼ãƒˆã•ã‚Œã¾ã—ãŸã! æ—©é€Ÿã€å‰å¤§ãªå…ˆäººãŒã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã‚’ã¾ã¨ã‚ã¦ãã‚Œã¦ã„ã¾ã™ã€‚ ç´°ã‹ã„ä»•æ§˜ã¯ä»¥ä¸‹AWSå…¬å¼ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã«ã‚‚è¨˜è¼‰ãŒã‚ã‚Šã¾ã™ã€‚ ã†ãŠãŠãŠãŠãŠãŠãŠãŠãŠãŠãŠãŠãŠ!!! ã¨ã„ã†æ„Ÿã˜ã§ç›®ãŒè¦šã‚ãŸã®ã§ã™ãŒã€ãªãœç§ã¯ã“ã‚“ãªã«æ“å–œã—ã¦ã„ã‚‹ã‚“ã§ã—ã‚‡ã†ã‹ã€‚ ã“ã®æ„Ÿæƒ…ã‚’è¨€èªžåŒ–ã—ã¦ã¿ã¾ã—ãŸã€‚ ã„ããªã‚Šã¾ã¨ã‚ ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆIPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’ä¿æŒã™ã‚‹å ´åˆã€NLBã‚’ä»‹ã•ãšã«ç›´æŽ¥ã‚¢ã‚¯ã‚»ã‚¹ã•ã‚Œã‚‹ã®ã‚’é˜²ãã“ã¨ãŒç°¡å˜ã«ãªã£ãŸ å¾“æ¥ã¯ã‚¿ãƒ¼ã‚²ãƒƒãƒˆã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚°ãƒ«ãƒ¼ãƒ—ã§ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ã‹ã‚‰ã®è¨±å¯ã‚’ã™ã‚‹å¿…è¦ãŒã‚ã£ãŸãŸã‚ã€NL
rgfx 2023/08/12
aws

network

security
ãƒªãƒ³ã‚¯
Android 11ã§è¿½åŠ ã•ã‚ŒãŸEAP-TLSèªè¨¼ã®æ–°ãŸãªåˆ¶ç´„ã¸ã®å¯¾å¿œæ–¹æ³•
2021å¹´ã€æœ€ã‚‚ãƒ¡ã‚¸ãƒ£ãƒ¼ãªWi-Fiã®èªè¨¼æ–¹å¼ã¨ã„ã£ãŸã‚‰WPA2-PSK(AES)ã‹ã‚‚ã—ã‚Œãªã„ãŒã€æ—¢ã«KRACKãªã©ã®è„†å¼±æ€§å ±å‘Šã‚‚2017å¹´è¾ºã‚Šã‹ã‚‰ã‚ã‚Šã€å¸¸è¨ã®Wi-Fi APã«ãŠã„ã¦ã¯å¯èƒ½ãªé™ã‚Š802.1Xæ–¹å¼ã§ã®èªè¨¼ã‚’ä½¿ã„ãŸã„ã€‚*1 EAP-PEAPã¯IDã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’è¦šãˆã‚‹ã®ãŒç…©é›‘ãªã®ã§ã€EAP-TLSã§é‹ç”¨ã—ã¦ã„ãŸã‚ã‘ã ã‘ã©ã€ã“ã®åº¦Android 11ã«ä¸Šã’ãŸç«¯æœ«(Pixel 3a, Pixel 3a XL)ã§è¨¼æ˜Žæ›¸ã‚’å…¥ã‚Œæ›¿ãˆãŸã¨ã“ã‚ç¹‹ãŒã‚‰ãªããªã£ãŸã®ã§è©¦è¡ŒéŒ¯èª¤ã€‚ãã®æ™‚ã®ãƒ¡ãƒ¢ã€‚ Android 11ã§è¿½åŠ ã•ã‚ŒãŸWi-Fiã«ãŠã‘ã‚‹EAP-TLSèªè¨¼ã«å¯¾ã™ã‚‹åˆ¶ç´„ ã‚°ã‚°ã£ãŸã¨ã“ã‚ã€æœ€åˆã«å‡ºã¦ããŸã®ãŒã€2020å¹´12æœˆé ƒã®ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã§ã€ŒCAè¨¼æ˜Žæ›¸ã‚’æ¤œè¨¼ã—ãªã„ã€ã‚ªãƒ—ã‚·ãƒ§ãƒ³ãŒå¡žãŒã‚ŒãŸã¨ã„ã†æƒ…å ±ã€‚ å€‹äººãƒ¬ãƒ™ãƒ«ã§ã€æ©Ÿå™¨æ¯Žã«æ¨™æº–çš„ãªãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ©Ÿé–¢ãŒç½²åã—ã¦ã„ã‚‹CAèªè¨¼å±€ã§ã‚ã–ã‚ã–è¨¼æ˜Žæ›¸ã‚’è³¼å…¥ã™ã‚‹ã“
rgfx 2023/01/31
eap-tls

network
ãƒªãƒ³ã‚¯
[é€Ÿå ±]ã‚µãƒ¼ãƒ“ã‚¹é–“é€šä¿¡ã‚’ã‚·ãƒ³ãƒ—ãƒ«ã«å®Ÿç¾ã™ã‚‹Amazon VPC Latticeï¼ˆãƒ—ãƒ¬ãƒ“ãƒ¥ãƒ¼ï¼‰ãŒç™ºè¡¨ã•ã‚Œã¾ã—ãŸï¼ #reinvent | DevelopersIO
ã©ã‚‚ã€å¤§ç€§ã§ã™ã€‚ ç¾åœ¨é–‹å‚¬ä¸ã®AWS re:Invent 2022ã§ç™ºè¡¨ã•ã‚ŒãŸVPCã®æ–°æ©Ÿèƒ½ã€Amazon VPC Latticeã‚’ã”ç´¹ä»‹ã—ã¾ã™ã€‚ VPC Latticeã¨ã¯ VPC Latticeã¯ã‚µãƒ¼ãƒ“ã‚¹é–“é€šä¿¡ã‚’ã‚·ãƒ³ãƒ—ãƒ«ã«å®Ÿç¾ã™ã‚‹VPCã®æ–°ã—ã„æ©Ÿèƒ½ã§ã™ã€‚ã‚µãƒ¼ãƒ“ã‚¹é–“é€šä¿¡ã«åˆ©ç”¨ã§ãã‚‹AWSã®æ©Ÿèƒ½ã¨ã—ã¦ELB(Elastic Load Balalncing)ã‚„API Gatewayã€RAMã«ã‚ˆã‚‹VPCã‚µãƒ–ãƒãƒƒãƒˆå…±æœ‰ãªã©ãŒã‚ã‚Šã¾ã™ãŒã€VPC Latticeã¯VPCã®ä¸€æ©Ÿèƒ½ã¨ã„ã†ç‰¹æ€§ã‚’æ´»ã‹ã—ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯æ§‹æˆã‚’æ¥µåŠ›æ„è˜ã›ãšã«åˆ©ç”¨ã§ãã‚‹ç‚¹ã‚„ç•°ãªã‚‹AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆãŠã‚ˆã³VPCã¨ã®é€£æºã‚’ä¸€å…ƒçš„ã«æ‰±ãˆã‚‹ç‚¹ãŒãƒ¦ãƒ‹ãƒ¼ã‚¯ã¨è¨€ãˆãã†ã§ã™ã€‚ VPC Latticeã®æ§‹æˆ ELBã®æ§‹æˆã«ã‚ˆãä¼¼ã¦ã„ã¾ã™ã€‚ä»¥ä¸‹ã‚’ãã‚Œãžã‚Œè¨å®šã—ã€ã‚µãƒ¼ãƒ“ã‚¹é€£æºã«åˆ©ç”¨ã—ã¾ã™ã€‚ ãƒªã‚¹ãƒŠ: 1ã¤ã¾ãŸã¯è¤‡æ•°ã®ãƒªã‚¹ãƒŠã‚’ä»»æ„ã®ãƒãƒ¼ãƒˆç•ªå·ã¨ãƒ—ãƒãƒˆã‚³ãƒ«ã§
rgfx 2022/12/02
ï¾‹ï½´ï½¯â€¦ã‚¬ãƒãƒŠãƒ³ã‚¹ãŒã‚°ãƒ€ã‚‹ã¨å·¨å¤§ãªãƒžã‚¤ã‚¯ãƒã‚µãƒ¼ãƒ“ã‚¹æ³¥å›£åãŒå‡ºæ¥ä¸ŠãŒã‚‹ã‚„ã¤ã â€¦

aws

vpc

network
ãƒªãƒ³ã‚¯
Cloudflare Zero Trustã‚’å°Žå…¥ã—ã¦ã¿ãŸ - ãƒãƒªã‚·ãƒ¼è¨å®šç·¨â‘ - ãƒ¡ãƒ¢ã®ãƒšãƒ¼ã‚¸ - ãƒãƒ©ã‚·ã®è£ãƒ¡ãƒ¢ 3æžšç›®
å‰å›žã¯ã€ã‚¼ãƒãƒˆãƒ©ã‚¹ãƒˆãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯(ZTNA)ã®å¦ç¿’ç”¨ç’°å¢ƒã¨ã—ã¦Cloudflare Zero Trustã®POCç’°å¢ƒã‚’æ§‹ç¯‰ã—ã€è‡ªå®…ã®ç’°å¢ƒã§ã‚‚æ‰‹è»½ã«ã‚¼ãƒãƒˆãƒ©ã‚¹ãƒˆãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚’ä½“é¨“å‡ºæ¥ãŸã€‚ ç–Žé€šç¢ºèªã¨ã—ã¦YouTubeã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’Blockã™ã‚‹ãƒãƒªã‚·ãƒ¼ã‚’è¨å®šã—ã€æƒ³å®šã©ãŠã‚Šã‚¢ã‚¯ã‚»ã‚¹ã‚’ãƒ–ãƒãƒƒã‚¯ã•ã›ã‚‹äº‹ãŒå‡ºæ¥ãŸãŒã€ä»Šå›žã¯ã‚‚ã†å°‘ã—è¸ã¿è¾¼ã‚“ã å†…å®¹ã§ãƒãƒªã‚·ãƒ¼ã‚’è¨å®šã—ã¦ã¿ãŸã€‚ å½“è¨˜äº‹ã¯ã€ãƒãƒªã‚·ãƒ¼ã®è¨å®šãŠã‚ˆã³ç–Žé€šç¢ºèªã®ãƒ¡ãƒ¢ã€‚ å‰å›žã®è¨˜äº‹ã®å†…å®¹ã€Cloudflareã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆä½œæˆã‹ã‚‰Cloudflare Zero Trustã®è¨å®šã€ãã—ã¦ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ã®è¨å®šã¾ã§ã®æµã‚Œã«é–¢ã—ã¦ã¯ã€ä»¥ä¸‹ã®ãƒªãƒ³ã‚¯å…ˆã‚’å‚ç…§ã€‚ https://debslink.hatenadiary.jp/entry/20221103/1667482863 Cloudflare Zero Trustã‚’å°Žå…¥ã—ã¦ã¿ãŸ - POCç’°å¢ƒæ§‹ç¯‰ç·¨ è¿½åŠ è¨˜äº‹ã®å†…
rgfx 2022/11/12
security

network
ãƒªãƒ³ã‚¯
Wireshark Tutorial: Examining Emotet Infection Traffic
This post is also available in: æ—¥æœ¬èªž (Japanese) Executive Summary This tutorial is designed for security professionals who investigate suspicious network activity and review packet captures (pcaps). Familiarity with Wireshark is necessary to understand this tutorial, which focuses on Wireshark version 3.x. Emotet is an information-stealer first reported in 2014 as banking malware. It has since evol
rgfx 2021/01/21
security

network

wireshark

emotet
ãƒªãƒ³ã‚¯
WireGuard: fast, modern, secure VPN tunnel
WireGuardÂ® is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPsec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN. WireGuard is designed as a general purpose VPN for running on embedded interfaces and super computers alike, fit for many different c
rgfx 2018/05/10
via: https://www.slideshare.net/codeblue_jp/cb16-donenfeld-ja https://twitter.com/fadis_/status/994219932463198209

VPN

Security

network
ãƒªãƒ³ã‚¯
The secret world of microwave networks
rgfx 2016/11/23
ã‚¹ãƒ¼ãƒ‘ãƒ¼è³‡æœ¬ã¶ã£ã“ã¿ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã

network
ãƒªãƒ³ã‚¯
Submarine Cable Map 2013
Submarine Cable Map 2013 Sponsored by Disclaimer Credits
rgfx 2013/02/04
infrastructure

network
ãƒªãƒ³ã‚¯
OpenFlowãŒæ—¥æœ¬ã§æµè¡Œã‚‹ç†ç”±:Geekãªãºãƒ¼ã˜
ã“ã“1å¹´ãã‚‰ã„ã€OpenFlowãŒçµæ§‹è©±é¡Œã«ãªã£ã¦ã„ã¾ã™ã€‚ æœ€è¿‘ã¯OpenFlowå˜ä½“ã§èªžã‚‰ã‚Œã‚‹ã‚ˆã‚Šã‚‚ã€SDN(Software Defined Networking)ã®å®Ÿç¾æ‰‹æ³•ã®ã²ã¨ã¤ã¨ã—ã¦ç´¹ä»‹ã•ã‚Œã‚‹ã“ã¨ã‚‚å¤šã„ã®ã§ã™ãŒã€ã¨ã«ã‹ãè‰²ã€…ãªã¨ã“ã‚ã§OpenFlowã®è©±é¡Œã‚’è€³ã«ã—ã¾ã™ã€‚ è©±é¡Œã®ä¸ã«ã¯ã€æ—¥æœ¬ã§ã®OpenFlowã‚’æ´»ç”¨ã—ãŸæ–°ãƒ“ã‚¸ãƒã‚¹ã®é–‹å§‹ã‚„ã€å°Žå…¥äº‹ä¾‹ç´¹ä»‹ã‚‚ã‚ã‚Šã¾ã™ã€‚ ãŸã ã€OpenFlowã®è©±é¡Œã«é–¢ã—ã¦ã€æ—¥æœ¬ã¨ã‚¢ãƒ¡ãƒªã‚«ã§éšåˆ†ã¨æ¸©åº¦å·®ã‚’æ„Ÿã˜ã‚‹ã“ã¨ã‚‚ã‚ã‚Šã¾ã™ã€‚ OpenFlowãŒç”£ã¾ã‚Œã€ä»•æ§˜ãŒæ±ºå®šã•ã‚Œã¦ã„ã‚‹æœ¬å ´ã‚¢ãƒ¡ãƒªã‚«ã‚ˆã‚Šã‚‚ã€æ—¥æœ¬ã®æ–¹ãŒOpenFlowã«é–¢ã—ã¦å‡„ãç››ã‚Šä¸ŠãŒã£ã¦ã„ã‚‹ã‚ˆã†ã«ã‚‚æ€ãˆã¾ã™ã€‚ å°Žå…¥äº‹ä¾‹ã®æ–¹å‘æ€§ã‚‚å¤šå°‘é•ã†ã‚¤ãƒ¡ãƒ¼ã‚¸ãŒã‚ã‚Šã¾ã™ã€‚ ã‚¢ãƒ¡ãƒªã‚«ã§OpenFlowã‚’æ´»ç”¨ã—ã¦ã„ã‚‹äº‹ä¾‹ã¯ã€å¤§è¦æ¨¡ãƒ‡ãƒ¼ã‚¿ã‚»ãƒ³ã‚¿ãƒ¼ã‚’ä¿æœ‰ã™ã‚‹ä¼æ¥ãŒè‡ªåŠ›ã§OpenFlowã‚’æ´»ç”¨ã—ã¦æŸ”è»Ÿã«ç®¡ç†ãŒå¯èƒ½ãªãƒãƒƒãƒˆãƒ¯ãƒ¼
rgfx 2012/10/18
openflow

network

SDN
ãƒªãƒ³ã‚¯
[ãƒ¡ãƒ¢] au iPhone 3G/LTE ã¨ Softbank iPhone 3G ã®çµŒè·¯
iPhone 5 ã«å¤‰æ›´ã™ã‚‹ã¤ã„ã§ã«ã€ã‚½ãƒ•ãƒˆãƒãƒ³ã‚¯ãƒ¢ãƒã‚¤ãƒ«ã•ã‚“ã‹ã‚‰ KDDI ã•ã‚“ã«å¤‰ãˆã¦ã€å®Ÿæ©Ÿç’°å¢ƒã§èª¿ã¹ã¦ã¿ãŸãƒ¡ãƒ¢ã€‚
rgfx 2012/10/01
ã€Œã‚·ãƒ³ãƒ—ãƒ«ã§ãƒ›ãƒƒãƒ—æ•°ãŒå°‘ãªã„ã»ã†ãŒã€é€Ÿåº¦ã®é¢ã§æœ‰åˆ©ãªã®ã¯äº‹å®Ÿã§ã™ãŒã€3G ã§ã‚ã‚‹æ™‚ç‚¹ã§ç›¸å½“é…ã„ã®ã§ã€æ–å®šå‡ºæ¥ã‚‹ã»ã©å„ªä½ãªå·®ã§ã¯ãªãã€‚ã€ã‚ã¨ã¾ãƒ¼LTEã®ä½Žãƒ¬ã‚¤ãƒ†ãƒ³ã‚·ã¨ã‹ã‹ã®ãƒ¼ã€‚

network

iPhone

kddi

softbank mobile
ãƒªãƒ³ã‚¯
ã€Œé”æ³•ã®æ•°å—8.8.8.8ã€ã‚’æ¤œè¨¼ã™ã‚‹:Geekãªãºãƒ¼ã˜
ã“ã“æ•°æ—¥ã€8.8.8.8ã‚„8.8.4.4ã¨ã„ã†IPv4ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’æŒã¤Google Public DNSã«é–¢ã™ã‚‹è©±é¡ŒãŒç››ã‚Šä¸ŠãŒã£ã¦ã„ã‚‹ã®ã§ã™ãŒã€å¤šãã®äººãŒã€Œã‚ˆãã‚ã‹ã‚‰ãªã„ã‘ã©è¨å®šå¤‰æ›´ã—ãŸã‚‰æ—©ã„ï¼ã€ã¨è¨€ã£ã¦ã„ã‚‹ã®ã§ã€ãã“ã‚‰è¾ºã®è©±ã‚’èª¿æŸ»ã—ã¦ã¿ã¾ã—ãŸã€‚ æ˜¨æ—¥ã€Twitterã¨ãƒ–ãƒã‚°ã§tracerouteã‚„digã«ã‚ˆã‚‹èª¿æŸ»å”åŠ›ã®ãŠé¡˜ã„ã‚’ç™ºä¿¡ã—ã€8.8.8.8ã¸ã®tracerouteã‚’37ä»¶ã€8.8.8.8ã¨ISP DNSã¸ã®tracerouteæ¯”è¼ƒåŠã³Akamaiã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚µãƒ¼ãƒã¸ã®tracerouteæ¯”è¼ƒã‚’21ä»¶ã€æ—¥æœ¬å„åœ°åŠã³æµ·å¤–ã®ã„ãã¤ã‹ã®åœ°ç‚¹ã‹ã‚‰ã”å”åŠ›é ‚ã‘ã¾ã—ãŸ(çš†æ§˜ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã—ãŸï¼)ã€‚ ãã‚Œã‚‰ã®ãƒ‡ãƒ¼ã‚¿ã‚’ã‚‚ã¨ã«ã€Google Public DNSã‚’åˆ©ç”¨ã—ãŸå ´åˆã®é€šä¿¡çµŒè·¯ã¨ã€ãã‚Œã«ã‚ˆã‚‹é…å»¶ã«é–¢ã™ã‚‹æ¤œè¨¼ã‚’è¡Œã„ã¾ã—ãŸã€‚ Google Public DNSã«å¯¾ã™ã‚‹ç§ã®æ„Ÿæƒ³ ã¾ãšæœ€åˆã«ã€‚ èª¿æŸ»å‰
rgfx 2011/09/22
CDNã¨ã®ç›¸æ€§ãŒæ‚ªã„ã®ã‹ã€‚ã²ã„ã¦ã¯ISPã«ç„¡é§„ãªãƒˆãƒ©ãƒ’ãƒƒã‚¯ãŒç”Ÿã˜ã‚‹ã¨ã€‚

dns

network

Google Public DNS

cdn
ãƒªãƒ³ã‚¯
OpenFlowã«é–¢ã™ã‚‹ã‚ˆãã‚ã‚Šãã†ãªè³ªå•ã¨ã€å°‚é–€å®¶ã‹ã‚‰ã®ç”ãˆï¼ˆå¾Œç·¨ï¼‰
å…ˆæ—¥ã®è¨˜äº‹ã€ŒOpenFlowã®æœ¬è³ªã¯ã€Œãƒ—ãƒã‚°ãƒ©ãƒžãƒ–ãƒ«ã§ã‚ã‚‹ã“ã¨ã€ã€ã‚’å…¬é–‹ã—ãŸã¨ã“ã‚ã€å¤šãã®æ–¹ã«ãƒ„ã‚¤ãƒƒã‚¿ãƒ¼ã‚„ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ã§ã‚³ãƒ¡ãƒ³ãƒˆã‚’ã„ãŸã ãã¾ã—ãŸã€‚ãã®ä¸ã«ã¯OpenFlowã«é–¢ã™ã‚‹ç–‘å•ã€è³ªå•ã‚‚å«ã¾ã‚Œã¦ã„ã¾ã—ãŸã€‚ ã“ã®è¨˜äº‹ã§ã¯ãã®ä¸ã‹ã‚‰OpenFlowã§ã‚ˆãã‚ã‚Šãã†ãªè³ªå•ã‚’3ã¤ã€ã€ŒOpenFlowã®ã‚¹ã‚±ãƒ¼ãƒ©ãƒ“ãƒªãƒ†ã‚£ã€ã€Œã‚³ãƒ³ãƒˆãƒãƒ¼ãƒ©ãŒå˜ä¸€éšœå®³ç‚¹ã«ãªã‚‹å¯èƒ½æ€§ã€ã€Œãƒˆãƒ©ãƒ–ãƒ«æ™‚ã®åˆ‡ã‚Šåˆ†ã‘ã€ã‚’ãƒ”ãƒƒã‚¯ã‚¢ãƒƒãƒ—ã—ã¦ã€OpenFlowã«ã¤ã„ã¦ã®è¬›æ¼”ãªã©ã‚‚è¡Œã£ã¦ã„ã‚‹ã€NTTãƒ‡ãƒ¼ã‚¿ æŠ€è¡“é–‹ç™ºæœ¬éƒ¨ ITã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ãƒ³ã‚¿ ã‚·ãƒ‹ã‚¢ã‚¨ã‚ã‚¹ãƒ‘ãƒ¼ãƒˆã®æ¨‹å£æ™‹ä¹Ÿæ°ã«èžã„ãŸã“ã¨ã‚’ã¾ã¨ã‚ãŸã‚‚ã®ã§ã™ã€‚ ï¼ˆæœ¬è¨˜äº‹ã¯ã€ŒOpenFlowã«é–¢ã™ã‚‹ã‚ˆãã‚ã‚Šãã†ãªè³ªå•ã¨ã€å°‚é–€å®¶ã‹ã‚‰ã®ç”ãˆï¼ˆå‰ç·¨ï¼‰ã€ã®ç¶šãã§ã™ã€‚ ã‚³ãƒ³ãƒˆãƒãƒ¼ãƒ©ãŒå˜ä¸€éšœå®³ç‚¹ã«ãªã‚‹å¯èƒ½æ€§ã¯ï¼Ÿ â”€â”€â”€ OpenFlowã®ã‚¹ã‚±ãƒ¼ãƒ©ãƒ“ãƒªãƒ†ã‚£ã«ã¯å•é¡Œãªã„ã¨ã—ã¦ã€ã‚‚ã†1ã¤OpenF
rgfx 2011/08/22
openflow

network
ãƒªãƒ³ã‚¯
ä»™çŸ³æµ©æ˜Žã®æ—¥è¨˜: Android ç«¯æœ«ä¸Šã§é€éŽåž‹ãƒ—ãƒã‚ã‚·ã‚’å‹•ã‹ã—ã¦ã¿ã‚‹ ã€œ VPN ã®ã‚ˆã†ã«ä½¿ãˆã¦ã€ã—ã‹ã‚‚çœé›»åŠ›
é€éŽåž‹ãƒ—ãƒã‚ã‚· (Transparent Proxy) ã¨ã„ã†ã®ã¯ã€ ãƒ–ãƒ©ã‚¦ã‚¶ã‹ã‚‰ ã€Œè¦‹ãˆãªã„ã€ ãƒ—ãƒã‚ã‚·ã®ã“ã¨ã€‚ ãƒ–ãƒ©ã‚¦ã‚¶è‡ªèº«ã¯ WWW ã‚µãƒ¼ãƒã«ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã„ã‚‹ã¤ã‚‚ã‚Šãªã®ã«ã€ ãƒ–ãƒ©ã‚¦ã‚¶ãŒé€ä¿¡ã—ãŸãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ãƒ—ãƒã‚ã‚·ãŒæ¨ªå–ã‚Šã—ã€ ãƒ—ãƒã‚ã‚·ã‹ã‚‰å‡ºã—ç›´ã™ã€‚ ã‚µãƒ¼ãƒã‹ã‚‰ã®ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã¯å½“ç„¶ãƒ—ãƒã‚ã‚·ã«è¿”ã‚Šã€ ãƒ—ãƒã‚ã‚·ãŒãã‚Œã‚’ãƒ–ãƒ©ã‚¦ã‚¶ã«é€ä¿¡ã™ã‚‹ã®ã ã‘ã©ã€ ãƒ‘ã‚±ãƒƒãƒˆãŒãƒ–ãƒ©ã‚¦ã‚¶ã«å±Šãã¾ã§ã®é–“ã«é€ä¿¡å…ƒã‚¢ãƒ‰ãƒ¬ã‚¹ãŒæ›¸ãæ›ãˆã‚‰ã‚Œã¦ã€ ã‚µãƒ¼ãƒã‹ã‚‰ç›´æŽ¥ãƒ¬ã‚¹ãƒãƒ³ã‚¹ãŒå±Šã„ãŸã‚ˆã†ã«ãƒ–ãƒ©ã‚¦ã‚¶ã‹ã‚‰ã¯è¦‹ãˆã‚‹ã€‚ ãƒ•ãƒ„ãƒ¼ã® ã€Œè¦‹ãˆã‚‹ã€ ãƒ—ãƒã‚ã‚·ã¯ã€ ãƒ–ãƒ©ã‚¦ã‚¶ç‰ã§ãƒ—ãƒã‚ã‚·è¨å®šãŒå¿…è¦ã§ã‚ã‚‹ã®ã«å¯¾ã—ã€ é€éŽåž‹ãƒ—ãƒã‚ã‚·ã ã¨è¨å®šãŒä¸è¦ã€‚ ã ã‹ã‚‰ä¸€éƒ¨ã® ISP (ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆæŽ¥ç¶šãƒ—ãƒãƒã‚¤ãƒ€) ãªã©ã§ã€ ãƒ•ãƒ„ãƒ¼ã®ãƒ—ãƒã‚ã‚·ã®ä»£ã‚Šã«ä½¿ã‚ã‚Œã¦ã„ãŸã‚Šã™ã‚‹ (ãƒ¦ãƒ¼ã‚¶ã«ãƒ—ãƒã‚ã‚·è¨å®šã®æ–¹æ³•ã‚’èª¬æ˜Žã™ã‚‹å¿…è¦ãŒãªãã¦ã‚µãƒãƒ¼ãƒˆã‚³ã‚¹ãƒˆãŒå‰Šæ¸›ã§ãã‚‹)ã€‚ ã‚ã‚‹ã„ã¯ä¼æ¥ç‰
rgfx 2011/06/02
android

network
ãƒªãƒ³ã‚¯
ã‚°ãƒ¼ã‚°ãƒ«ã€ãƒžã‚¤ã‚¯ãƒã‚½ãƒ•ãƒˆã€Yahoo!ã€Facebookã‚‰ãŒæ–°ã—ã„ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚ãƒ³ã‚°æŠ€è¡“ã®å®Ÿç¾ã¸ã€ŒOpen Networking Foundationã€ã‚’çµæˆ
ã‚°ãƒ¼ã‚°ãƒ«ã€ãƒžã‚¤ã‚¯ãƒã‚½ãƒ•ãƒˆã€Yahoo!ã€Facebookã‚‰ãŒæ–°ã—ã„ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚ãƒ³ã‚°æŠ€è¡“ã®å®Ÿç¾ã¸ã€ŒOpen Networking Foundationã€ã‚’çµæˆ ã‚µãƒ¼ãƒã®ä»®æƒ³åŒ–ã‚„ã‚¯ãƒ©ã‚¦ãƒ‰ãŒæ™®åŠã—ãŸã“ã¨ã§ã€ã€Œã‚µãƒ¼ãƒã‚’ç”¨æ„ã™ã‚‹ã“ã¨ã€ã®æ„å‘³ãŒã€ç‰©ç†çš„ãªã‚µãƒ¼ãƒã‚’èª¿é”ã™ã‚‹ã“ã¨ã‹ã‚‰ã€ã‚µãƒ¼ãƒã®ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã‚’ç«‹ã¡ä¸Šã’ã‚‹ã“ã¨ã¸ã¨å¤‰ã‚ã‚ã†ã¨ã—ã¦ã„ã¾ã™ã€‚ã„ã¾ã§ã¯APIã‚’å©ã‘ã°ã€CPUã®æ€§èƒ½ã‚„ãƒ¡ãƒ¢ãƒªå®¹é‡ã‚’æŒ‡å®šã—ã€ã„ãã¤ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã‚’ç«‹ã¡ä¸Šã’ã€ã„ã¤ã‚·ãƒ£ãƒƒãƒˆãƒ€ã‚¦ãƒ³ã™ã‚‹ã®ã‹ã€ã™ã¹ã¦APIã‹ã‚‰æŒ‡å®šã§ãã‚‹ç’°å¢ƒãŒåºƒã¾ã£ã¦ã„ã¾ã™ã€‚ åŒã˜ã“ã¨ãŒãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã§ã‚‚èµ·ã“ã‚ã†ã¨ã—ã¦ã„ã¾ã™ã€‚ç¾åœ¨ã®ã¨ã“ã‚ã€Œãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚’æ§‹ç¯‰ã™ã‚‹ã€ã“ã¨ã¨ã¯ã€ã‚±ãƒ¼ãƒ–ãƒ«ã‚’å¼•ã„ã¦ãƒ«ãƒ¼ã‚¿ã‚„ã‚¹ã‚¤ãƒƒãƒã®è¨å®šç”»é¢ã‹ã‚‰ãƒ«ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚„VLANã‚’è¨å®šã™ã‚‹ã“ã¨ã§ã™ã€‚è¨å®šã•ã‚ŒãŸãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã¯åŸºæœ¬çš„ã«ã‚¹ã‚¿ãƒ†ã‚£ãƒƒã‚¯ãªã‚‚ã®ã§ã‚ã‚Šã€æ§‹æˆã‚’å¤‰ãˆã‚‹ã«ã¯å†ã³ãƒ«ãƒ¼ã‚¿ã‚„ã‚¹ã‚¤ãƒƒãƒã®è¨å®šç”»é¢ã‚’é–‹ã„ã¦è¨å®šã‚’ã‚„
rgfx 2011/03/28
ã†ã²ãƒ¼ã€‚

network

openflow

infrastructure
ãƒªãƒ³ã‚¯
In Japan, Many Undersea Cables Are Damaged â€“ Old GigaOm
The horrific earthquake and the ensuing tsunami in Japan have caused widespread damage to undersea communications, according to data collected by telecom industry sources. Initially, it was thought that the damage to the cables that connect Japan and Asia to each other and other parts of the world was limited, but new data shows the extent of the probl ems. According to research firm, Telegeography
rgfx 2011/03/16
quake

infrastructure

network
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸