ã¢ãã¾ã³ãããå ¥ã£ã¦ãããã«ã®ã¨ã¬ãã¼ã¿ããã®ãã³ãã¼ã«é¢¨ã£ã¦æ¬å½ã§ããï¼
ããããæ°ã«ãªãã¾ãï¼
å
·ä½çã«ã¯éã³ã«è¡ããã¦ä¸ããï¼
ãã®ãã³ãã¼ã«ã§ã馴æã¿ã®ã¢ãã¾ã³ãããå©ç¨ãããã¨ããªãã¨ããæ¹ã¯ã»ã¨ãã©ããã£ããããªãã¨æãã¾ãã
ãã®ã¢ãã¾ã³ãããã¯ã©ã¦ããµã¼ãã¹ããã£ã¦ãããã¨ã¯å¾¡åç¥ã§ããï¼ï¼å¾¡åç¥ãªãæ¹ãæå¤ã«ããã£ãããã¾ãï¼
ãã¯ã©ã¦ãããã£ã¦ãããã¨ã¯åãã£ããã§ãããµã¼ããç«ã¦ããå
¬éããã¡ãããã ãï¼ã
ãããããã¢ãã¾ã³ããã®ã¯ã©ã¦ãï¼AWSï¼ã¯ããç§ãã使ããªãã¯ã©ã¦ããããã©ã¤ãã¼ããªã¯ã©ã¦ããä½ããã¨ãã§ãããã§ãã
ããã¼ã¿ã»ã³ã¿ãåãã¦ããµã¼ããè²·ã£ã¦ããã©ã¤ãã¼ãã»ã¯ã©ã¦ããä½ãããã¨æ¯å·»ãåã«ãä¸è¨ã®ãç¶ããèªãããã¯ãªãã¯ãã¦ç¶ãããèªã¿é ããã°ã¨æãã¾ãã
ï¼åç¨åº¦ã§èªãã¾ããAWSã§ããã©ã¤ãã¼ãã»ã¯ã©ã¦ããã§ããã¨ãåããããã ããã¨æãã¾ãã
ãããªãã¯ï¼å ¬éï¼ã¨ãã©ã¤ãã¼ãï¼éå ¬éï¼ã®éã
ãããªãã¯
ã¾ãããããªãã¯ã§ãµã¼ããç«ã¦ã¦ã¿ã¾ããï¼å³ï¼ï¼
å³ï¼ï¼ã¯ãªãã¯ããã¨å¤§ãã表示ããã¾ãï¼
éåºå®ã®ã°ãã¼ãã«IPã¢ãã¬ã¹ãä»å ããã¾ãã®ã§ããã®ã¾ã¾ä½¿ããã¨ãã§ãã¾ãã
ãã ããããã ã¨ä¸ç¹å®å¤æ°ããã®ã¢ã¯ã»ã¹ã許ããã¨ã«ãªãã¾ãã
ãã¡ãããé©åãªã»ãã¥ãªãã£ã®è¨å®ã§ã¢ã¯ã»ã¹ãå¶éãããã¨ã¯ã§ãã¾ãããä¾ãã°ããã®ãµã¼ãã¯ãã¡ã¤ã«ãµã¼ãã§ç¤¾å
ãããã使ããªããã¨ãã£ããã©ã¤ãã¼ãç¨éã ã¨ã©ãã§ãããï¼
ã»ãã¥ãªãã£ããã£ã¡ããã£ãã¨ãã¦ãããããªãã¯ãªã¨ããã«ç½®ãã¦ããã®ãï¼ãã¨æã£ã¦ãã¾ãã¾ãã
ï¼å京é ãªã©ã§ãã£ããããã¯ããã¨ãã¦ãèªåãã使ããªãå·èµåº«ãå¾æ¥ã«ç½®ãã¦ããã®ã¯ã¤ã¤ã§ãããï¼
ã¾ãã社å
ã¨ãã®ãµã¼ãã¨ã®éä¿¡ãæå·åãããªããªã©ãã¾ã 課é¡ãããã¾ãã
ãããããµã¼ãã社å
ã«ä»è¾¼ãã§ãå®å
¨æ§ãç¶æã§ããªãã¯ãªãã§ãããé¢åã§ãããï¼
ã
ãã©ã¤ãã¼ãï¼VPC
ãã®ãé¢åããç°¡åã«è§£æ±ºã§ããã®ããAmazon VPC(Virtual Private Cloud)ã§ãã
ä¼æ¥ããã¯ã©ã¦ããããããã ãã社å
ã·ã¹ãã ãªã®ã§ãã©ã¤ãã¼ãã»ã¯ã©ã¦ãã«ããããã¨ããã¢ã¬ã§ãã
ãã¼ã¿ã»ã³ã¿ã«ã©ãã¯ãåãã¦ããµã¼ããè²·ã£ã¦ãã¦ããµã¼ãã«ããããè¨å®ãã¦â¦ã§ãæ§ç¯ãããã©ã¤ãã¼ãã»ã¯ã©ã¦ãã¨åããã¨ãå®ç¾ã§ãã¾ãã
å
ã»ã©ã®ç¤¾å
ç¨éã®ãã©ã¤ãã¼ãã«ããããµã¼ããVPCã«çµã¿å
¥ãã¦ã¿ã¾ããããï¼å³ï¼ï¼
å³ï¼ï¼ã¯ãªãã¯ããã¨å¤§ãã表示ããã¾ãï¼
- 1. VPCãè¨ç½®ãã¾ã
ãããããã«ç½®ããµã¼ãã¯ãã©ã¤ãã¼ãç¨éã§ä½¿ãã¾ããã¨ãããæ ããä½ãã¾ãã - 2. ãµãããããè¨ç½®ãã¾ã
ããVPCã¯"æ "ã ãã§IPã¢ãã¬ã¹ãªã©æ¥ç¶ããããã®æ å ±ã¯æã£ã¦ãã¾ããã
ããæ¥ç¶ããããã®IPã¢ãã¬ã¹å¸¯ãè¨å®ãã¾ãã - 3. 社å
ããVPCã«æ¥ç¶ããã«ã¼ã¿ã®è¨å®ãã
ããVPCãVPCå ã®ãµã¼ãã«æ¥ç¶ãããã社å ã«è¨ç½®ããã«ã¼ã¿ã«VPNæ¥ç¶ã®è¨å®ããã¾ãã
ã¯ããããã§ãã©ã¤ãã¼ãã»ã¯ã©ã¦ããã§ãã¾ããã
VPCå
ã®ãµã¼ãã«ã¯ãVPNæ¥ç¶ã§ããã¢ã¯ã»ã¹ã§ãã¾ããã
ãã®ãããã®è¨å®ã¯AWSã®ãµã¤ãã«ã¦å
¬éããã¦ãã¾ãã
å¼ç¤¾ã«ã¦å°å
¥æ¯æ´ã®ãµã¼ãã¹ãè¡ãªã£ã¦ãã¾ãããããããã°ãæ¤è¨ãã ããï¼å®£ä¼ï¼
ãã©ã¤ãã¼ãã§ãã¤ã³ã¿ã¼ããããããã
VPCå
ã«è¨ç½®ãããµã¼ãã«ã¤ã³ã¿ã¼ãããããæ¥ç¶ãããããããã¯ãVPCå
ã«è¨ç½®ãããµã¼ãããã¤ã³ã¿ã¼ãããã«æ¥ç¶ãããå ´åã§ãã
ä¸è¨ãå³ï¼ã§ã¯VPCå
ã®ãµã¼ãã«ã¯ã¤ã³ã¿ã¼ãããã¯ã¢ã¯ã»ã¹ã§ãããã¾ããVPCå
ã®ãµã¼ãã¯ã¤ã³ã¿ã¼ãããã«æ¥ç¶ã¯ã§ãã¾ããã
以åã®VPCã¯ãVPCå
ã®ãµã¼ãããã¤ã³ã¿ã¼ãããã«ç´æ¥æ¥ç¶ããæ段ã¯ããã¾ããã§ããã
ç¾å¨ã¯ãInternet Gatewayããè¨ç½®ã»è¨å®ããã ãã§ã¤ã³ã¿ã¼ãããæ¥ç¶ãã§ãã¾ããï¼å³ï¼ï¼
å³ï¼ï¼ã¯ãªãã¯ããã¨å¤§ãã表示ããã¾ãï¼
VPCå
ã®ãµããããã§ã»ãã¥ãªãã£ã°ã«ã¼ãã¨ã«ã¼ãã£ã³ã°ãã¼ãã«ã®è¨å®ãã§ãã¾ãã®ã§ãã©ãã¨ã§ãå¶å¾¡ãã§ãã¾ãã
ï¼ä¸å³ã§ã¯ããããããªãã®ã§çç¥ãã¦ãã¾ãï¼
VPCå ã®ãµã¼ããã¹ã¦ãã¤ã³ã¿ã¼ãããã«ç¹ãããã¯ãªã
ã¤ã³ã¿ã¼ãããã²ã¼ãã¦ã§ã¤ãè¨ç½®ãã¦ãã«ã¼ãã£ã³ã°ãã¼ãã«ã®è¨å®ã«ãä¾ãã¾ãããVPCå
ã®ãµã¼ããã¤ã³ã¿ã¼ãããã«æ¥ç¶å¯è½ã«ããããªãå ´åãããã¾ãã
ãã¼ã¿ãã¼ã¹ã»ãµã¼ããªã©ã該å½ãã¾ãã ããããå ´åã¯ã©ããããï¼ ç°¡åã§ãããµãããããè¤æ°VPCå
ã«è¨ããã°è¯ãã®ã§ããï¼å³ï¼ï¼
å³ï¼ï¼ã¯ãªãã¯ããã¨å¤§ãã表示ããã¾ãï¼ ãµããããAå ã®ãµã¼ãã¯ã¤ã³ã¿ã¼ãããã«æ¥ç¶ãã¤ã³ã¿ã¼ãããããæ¥ç¶ã§ãã¾ããããµããããï¼¢å ã®ãµã¼ãã¯æ¥ç¶ã¯ã§ããªãããã«ã§ãã¾ãã
VPCå ã®ãµã¼ãã¯ã¤ã³ã¿ã¼ãããã«æ¥ç¶ãããããæ¥ç¶ãããªãããã«ããã
社å
ã家åºå
ã®ãã½ã³ã³ã¯ã¤ã³ã¿ã¼ãããã«ã¢ã¯ã»ã¹ã§ãã¾ãããã¤ã³ã¿ã¼ãããããã¢ã¯ã»ã¹ã¯ã§ãã¾ããã
ãã½ã³ã³ã¨ã¤ã³ã¿ã¼ãããã®éã«ã«ã¼ã¿ããããNATã¨å¼ã°ããã¢ã¯ã»ã¹å¤æããã¦ãã¾ãã ããã¨åãäºããã¦ããã°è¯ãã®ã§ããï¼å³ï¼ï¼
å³ï¼ï¼ã¯ãªãã¯ããã¨å¤§ãã表示ããã¾ãï¼
NATããã¦ãããå°ç¨ã¤ã³ã¹ã¿ã³ã¹ãã²ã¼ãã¦ã§ã¤ããããµããããå
ã«è¨ç½®ãã¾ãã
ãã®NATã¤ã³ã¹ã¿ã³ã¹ã社å
ã家åºå
ã«ããNATããã¦ãããã«ã¼ã¿ã«ç¸å½ãã¾ãã
VPCå
ã¨VPCå
ã§ãªãéã
VPCãå©ç¨ããã¡ãªãã
ãµã¼ã(EC2ã¤ã³ã¹ã¿ã³ã¹ï¼èªä½ã¯å¤ããã¾ãããä¸è¨ã®ç¹ã§éããããã¾ãã
- ã»VPCå ã¯ãéããããã
- ã»ã»ãã¥ãªãã£ã°ã«ã¼ãã¯ãVPCå ã¯OutBoundã®å¶å¾¡ãã§ãããVPCã§ãªãã¨InBoundã®å¶å¾¡ã®ã¿
- ã»VPCå ã®ãã©ã¤ãã¼ãIPã¯åºå®ã§ãã
- ã»VPCå ã«ãµãããããè¨ç½®ã§ãã¦ç®¡çã§ãã
- ã»VPCå ã®ãµã¼ãã¯IPã¢ãã¬ã¹ãè¤æ°å²ãå½ã¦ããã
- ã»VPCå
ã§ãªããµã¼ããVPCå
ã¸ããããã¯ãã®éã¸ã®ãµã¼ãã®ç§»åã¯ã§ãã¾ããã
ããã ãããµã¼ãã¤ã³ã¹ã¿ã³ã¹ããã£ããAMIï¼ãµã¼ãã®ã¤ã¡ã¼ã¸åï¼ãã¦ããã®AMIããVPCå ã«EC2ã¤ã³ã¹ã¿ã³ã¹ãçæããã°ã移åãã¯å¯è½ã§ããç°ãªãVPCéã®ãµã¼ãã®ç§»åãAMIã«ãã¦ç§»åã§ãã¾ãã
ã¾ã¨ã
VPCãè¨ç½®ãããã¨èªä½ã¯å¥éæéã¯ãããã¾ãããï¼VPCã«VPNæ¥ç¶ããã¨æéããããã¾ãï¼
ã¤ã¾ãããã¨ãããããµã¼ãã¯VPCå
ã«è¨ç½®ãã¨ãã¦ããã¨ãå¶å¾¡ãè¨å®ãç´°ããã§ããã¡ãªãããå¾ããã¾ãã
VPCã«ã²ã¼ãã¦ã§ã¤ãè¨ç½®ãã²ã¼ãã¦ã§ã¤ã¨VPCå
ã®ãµã¼ãã¨ã®éãã«ã¼ãã£ã³ã°è¨å®ãã¦ããµã¼ãã¯ã»ãã¥ãªãã£ã°ã«ã¼ãã§ã¢ã¯ã»ã¹å¶å¾¡ãè¡ãæ§å³ã¯ãå¾æ¥ã®ãã¼ã¿ã»ã³ã¿ã®ã©ãã¯ã¨åç·ãåãã¦ãã©ãã¯ã«ãµã¼ããè¨ç½®ãã¦ç°å¢ãæ§ç¯ããæ¹æ³ã¨ä¼¼ã¦ãããã¤ã¡ã¼ã¸ããããã®ã§ã¯ãªãã§ãããããï¼å³ï¼ï¼
å³ï¼ï¼ã¯ãªãã¯ããã¨å¤§ãã表示ããã¾ãï¼
æ¹æ³ãä¼¼ã¦ããã¨ãããã¨ã¯ãç¾å¨ã©ãã¯ãåãã¦ãããªã©ã®ãªã³ãã¬ãã¹ç°å¢ããã®ç§»è¡ããããããã¨ãããã¨ã§ãã
VPCã¯ããããAWSãå©ç¨ããã«ã¯å¿
é ã®ç¥èã«ãªãããã§ãã
ãããã¯ã¼ã¯ã®ç¥èãå¤å°å¿
è¦ã§ãããã¯ã©ã¦ãã§ãã®ã§ç°¡åã«è©¦ããã¨ãã§ãã¾ãã
ã¯ã©ã¦ãã§ã¯ãééãããã失æãããã¨ãªãã°ãæ¨ã¦ã¦ããç´ããã¨ãæ°è»½ã«ã§ããããã§ãã
å®éã«ããã£ã¦ã¿ãã°ãä½ã¨ãªãã§ããåããããã ãããã¨æãã¾ããæ¯é試ãã¦ã¿ã¦ä¸ããã