2019/5/17è¿½è¨ QUICã®æå·åã«ã¤ãã¦èª¬æãæ¸ãã¾ãã asnokaze.hatenablog.com 2020/09/16ãWiresharkãHTTP/3ã«å¯¾å¿ãã - ASnoKaze blogã Wiresharkã¯IETFç QUICãã±ããã®decryptã«å¯¾å¿ãã¦ããã®ã§ããã£ã¦ã¿ãã Wiresharkã®ç´°ãã対å¿ç¶æ³ã«ã¤ãã¦ã¯ä»¥ä¸ã®éãã§ãã Tools · quicwg/base-drafts Wiki · GitHub ææ°ã®ã½ã¼ã¹ã³ã¼ãå ã«æ¸ããã¦ããTODOã¨ãã¦ã¯ã以ä¸ã®éãã * to-do list: * DONE key update via KEY_PHASE bit (untested) * TODO 0-RTT decryptionhttps://github.com/wireshark/wireshark/blob/master/epan
ãå ¥é ç£è¦ã ã¨ããæ¬ãèªãã ã æ®æ®µã¯ä½ã¬ãã«ãªé¨åã®ç£è¦ãå¤ãã¦è¦å¤±ããã¡ã ã£ããé«ã¬ãã«ãªãã¤ã³ãã®ç£è¦ã«ã¤ãã¦æãã馳ããæ©ä¼ãä¸ãã¦ããã£ãã®ã§èªãã§ããã£ãã 以ä¸ãå人çã«å¿ã®åãããã¤ã³ããè¨ãã æ¬ã®å 容ã«ã¤ãã¦ã¯å¤§ãã¦è§¦ãã¦ããªãã®ã§ãæ¬æ¸ã®å 容ãã®ãã®ãç¥ããã人ã¯èªããããªãã p.12 1.3.2 ã¢ã©ã¼ãã«é¢ãã¦ã¯ãOSã®ã¡ããªã¯ã¹ã¯ãã¾ãæå³ããªã ä½æã¨ãã¦ãOSã¡ããªã¯ã¹èªä½ã«ã¢ã©ã¼ãã¤ãã¦æå³ã®ããã¢ã©ã¼ãåºãããã¨ãããªã«ç¡ãã£ãã ç£è¦ãå§ããã«ããã£ã¦ãããªããã®OSã¡ããªã¯ã¹ããåãçµãã§ã¢ã©ã¼ããè¨å®ããã¨ç²å¼ãããã ã¡ããªã¯ã¹èªä½ã¯ã¨ã£ã¦ãããã ããããã©ãã«ãèµ·ããæã®è§£æææã¨ãã¦ã®ã¿æç¨ã ã¨èããæ¹ãããã OSããåéã§ãããã¼ãã¢ãã¬ã¼ã¸ãã¡ã¢ãªä½¿ç¨çãªã©ãä¸æããããã¨ãã£ã¦ã å¿ ããããµã¼ãã¹ã«å½±é¿ãä¸ããã¨ã¯éããªããã¨
ãããä»åä¸è¬ã®äººã®ç®ã«ã触ããå½¢ã§SNIãHTTPSã®ãã¨ãå ±ããããçµæãã¨ã³ã¸ãã¢ãå«ãã¦æããã«æè¡ã«é¢ãã¦åéãããã¦ããã®ã§ã¯ãªããã¨æããçºè¨ãè¦ããã¨ãããã¾ããããã®ã¾ã¾æ¾ç½®ããã®ãè¯ããªãã¨æãã¦ããã®ã§ãQ&Aã¨ããå½¢ã§SNIãHTTPSã«é¢ãã誤解ãå°ãã§ã解ããã°ã¨æãã¾ãã Q&AQ: ããããSNIã£ã¦ä½ï¼ä»¥åæ¸ããè¨äºã«ãæ¸ããã¦ããã®ã§æ¯éèªãã§ã¿ã¦ãã ããã ç°¡åã«èª¬æããã¨ãHTTPSã§ã¯SSL/TLSãå©ç¨ãã¦éä¿¡ãæå·åããã¾ãããªã®ã§1ã¤ã®IPã¢ãã¬ã¹ã§è¤æ°ã®è¨¼ææ¸ãæ±ããã¨ããå ´åãæåã®éä¿¡æã«ã©ã®è¨¼ææ¸ãå©ç¨ããã°ãããåããã¾ãããããã§SNIãå¿ è¦ã«ãªãã¾ãã SNIã¯æåã®éä¿¡æã«ä»ããéä¿¡ããããµã¼ãã¼ãã¼ã ï¼ãã¡ã¤ã³åã¨èãã¦ãã ããï¼ããµã¼ãã¼ã«å¹³æã§æ¸¡ããã¨ã§ãéä¿¡ãããSSL証ææ¸ãæå®ã§ãã¾ããSNIã¯ç¾å¨ã®ä¸è¬çãªãã©ã¦
OSIåç §ã¢ãã«ã¨TCP/IPã¢ãã« ãªããã¾ã§ãOSIåç §ã¢ãã«ã«ãã説æãå¤ãã QUICã¯ãTCP/IPã¢ãã«ã®ãã©ã³ã¹ãã¼ãã¨ã¯ãããããOSIåç §ã¢ãã«ã®ã¬ã¤ã¤4ã¨ã¯ããã«ãã HTTP/QUICã¢ãã« QUICãã©ã解説ããã OSIåç §ã¢ãã«ã¨TCP/IPã¢ãã« ãã¤ã¦ã¼ããã¡ã¯ã7ã¤ã®ã¬ã¤ã¤ã«åãããOSIåç §ã¢ãã«ã¨ãã姿ã§ã³ã³ãã¥ã¼ã¿ãããã¯ã¼ã¯ãå¦ã³ããã®7層ã®ã¢ãã«ã«ãã£ã¦å種ã®ãããã³ã«ãç解ãããã¨ãã¦ãã¾ããã ã ããããSONET/SDHä¸ã®ATMåç·ã§IPãã±ãããããåããããã¨ããæ§æ³ãããã°ããã¤ã¾ããSONET/SDHãã¬ã¤ã¤1ã§ãATMãã¬ã¤ã¤2ã§ãIPãã¬ã¤ã¤3ãªã®ã ãªãã¨ããæ çµã¿ãé ã«æãã¦ãã¾ããã ã¨åæã«ãOSIã®ã¬ã¤ã¤ã¨ã¯ãã£ããâ¦â¦ãã¨ããã¢ã³ããã¬ã³ããªæ³ãã«ãããªã¾ãããã¨ãããããã¾ããã ãSONET/SDHãã¬ã¤ã¤1ã£ã¦
On Infrastructure at Scale: A Cascading Failure of Distributed Systems At Target, we run a heterogeneous infrastructure in our datacenters (and many other places), where we have multiple different backend hosting infrastructure for workloads. Most of this is a legacy artifact of putting infrastructure into production for different use-cases and application development and deployment patterns. The
ã漫ç»æãåé¡ãªã©ãæµ·è³çãµã¤ãã«ããä½å®¶ãåºç社ãªã©ã®è¢«å®³ãé²ãããã«æ¿åºãç«ã¡ä¸ããæèè ä¼è°ã¯ãçµå±ãè°è«ãçã£åãã対ç«ãã¦æ¹åæ§ã示ããªãã¾ã¾çµãã£ãã é¢ä¿è ã¯ãç¹ã«æªè³ªãªãµã¤ããé²è¦§ã§ããªãããã«ãããããããã³ã°ãããããããããªããããè«ç¹ã«ãªã£ã¦ãã¾ããåæã®è°è«ãæ¬ ãã¦ããã¨ææãããæ¥æ¬ãä¸çã«èªãã³ã³ãã³ãç£æ¥ãã©ãå®ã£ã¦ããããè°è«ã®å å¹ã«è¿«ã£ãã ï¼æ¿æ²»é¨å®é¸ã¯ã©ããæ³çå¯å¾ï¼å®®å å®æ¨¹ï¼ æµ·è³çãµã¤ãã®è å¨ã¨ã¯ï¼ ã¾ãã¯å¤§åãªåæã®è°è«ãããæè¿ã¯æ¼«ç»ãã¹ããã§èªã人ãå¢ãã¦ããããé常ã¯ãéãæã£ã¦ãã¦ã³ãã¼ããã漫ç»ããç¡æã§èªããããã«ãã¦åºåæãªã©ã§ç¨¼ãã§ããã®ããæµ·è³çãµã¤ãã ãé£è¼ä¸ã®ãã®ã ãã§ãªããï¼ï¼å¹´ä»¥ä¸åã«é£è¼ãçµãã£ã漫ç»ã第ï¼è©±ããæçµè©±ã¾ã§èªãããã®ã¾ã§ãã£ãã ãã®å½±é¿ãã©ã®ç¨åº¦æ·±å»ãªã®ããåºç大æã®è¬è«ç¤¾ã®åºå ±å®¤é·ãä¹¾æºä¹ããã«è
Googleã®huproxyã¿ãããªãã®ã§ãä»»æã®protocolãéãããããGoogle Cloud Load Balancingã®Identity aware proxyã«å¯¾å¿ãããã®ã欲ããã£ãã®ã§ãä½ã£ã¦ã¿ãã github.com github.com GCPã®ä¸ã®MySQLã«å¯¾ãã¦ãservice accountã§èªè¨¼ãã¦æ¥ç¶ããã¤ã¡ã¼ã¸ã¨ãã¦ã¯ä»¥ä¸ã®ããã«ãªãã serverå´ pathã¨forwardå ã®è¨å®ãè¡ãmapãã¡ã¤ã«ãã¾ãã¤ãã mysql,10.0.x.x:3306 ssh,127.0.0.1:22 èµ·å $ wsgate-server --listen 0.0.0.0:8080 --map map-server.txt ããã§ã ws://example.com/proxy/mysql ã«WebSocketã§éä¿¡ãè¡ã㨠10.0.x.xã®3306 ã«å¯¾ã
IIJ-II æè¡ç 究æ æè¡éçºå®¤ã®å±±æ¬ã§ããç¾å¨æè¡éçºå®¤ã¯ãç§ãå«ãã4人ã§æ§æããã¦ããã主ã«ããã°ã©ãã³ã°è¨èªHaskellã使ã£ã¦éçºãé²ãã¦ãã¾ããä»åã®è©±é¡ã§ãã TLS(Transport Layer Security) 1.3 ãHaskellã§å®è£ ãã¾ããã 4å¹´ã®æ³æãããã¦è°è«ããã¦ããTLS 1.3ã§ããããã®8æã«ãã§ããä»æ§ãRFC 8446ã¨ãªãã¾ãããè²¢ç®è ãªã¹ãã«ç§ã®ååãè¼ã£ã¦ãããã¨ãèãã¤ããåºå ±ãããããã°è¨äºã®å·çä¾é ¼ãããã¾ããã®ã§ãTLS 1.3ã®æ¨æºåãå®è£ ã®è©±ã«ã¤ãã¦æ¸ãã¦ã¿ã¾ãã ãªãTLS 1.3ãæ¨æºåããå¿ è¦ããã£ãã®ãçç±ãç¥ãããæ¹ã¯ããTLSã®ååãã¨ããè¨äºããTLS 1.3ãã¨ããã¹ã©ã¤ããèªãã§ä¸ããã ã¤ã³ã¿ã¼ãããã§ä½¿ããã¦ãããããã³ã«ã¯ãIETFã¨ããå£ä½ã§ä»æ§ãè°è«ããã¦çå®ããã¾ããIETFã«ã¯ã誰ã§ã
âãVXLANã¨ã¯ VXLANï¼Virtual eXtensible Local Area Networkï¼ã¨ã¯ãL3ãããã¯ã¼ã¯ä¸ã«è«ççãªL2ãããã¯ã¼ã¯ã æ§ç¯ãããã³ããªã³ã°ãããã³ã«ã®ãã¨ã§ããVXLANã§ã¯ãVNIï¼VXLAN IDï¼ã§ã¤ã¼ãµããããã¬ã¼ã ã ã«ãã»ã«åãããã¨ã§ãã³ããªã³ã°ãå®ç¾ãã¦ãã¾ãã2014/8 ã«IETF RFC7348ã¨ãã¦å ¬éããã¦ãã¾ãã VLANã§ã¯æ大ã§ç´4000ã®ãããã¯ã¼ã¯ããæ§æã§ããã大è¦æ¨¡ãããã¯ã¼ã¯ã§ã¯ä¸è¶³ãããã¨ãããã¾ãã VXLANã§ã¯24ãããã®VNIï¼VXLAN IDï¼ã§ãæ大ã§ç´1600ä¸ã®ãããã¯ã¼ã¯ãæ§æãããã¨ãã§ãã¾ãã VXLANã«ããã大è¦æ¨¡ãªè¤æ°ã®ãã¼ã¿ã»ã³ã¿ã¼ã«ã¾ããã£ãä»®æ³ãã¼ã¿ã»ã³ã¿ã¼ãæ§ç¯ãããã¨ãã§ãã¾ãã VTEPï¼ VXLAN Tunnel End Point ï¼ã¨ã¯ããã©ãã£ãã¯ãVXL
2018å¹´9æ6æ¥ã«åæµ·éã襲ã£ãéç½ã«ãããåé»ç¶æ ã«é¥ã£ããããã¤ã³ã¿ã¼ãããã®ç³ç©ãã¼ã¿ã»ã³ã¿ã¼ã«å¯¾ãã9æ8æ¥ããããé»åä¾çµ¦ãåéããããæ³å®ãè¶ ããç´60æéãé常ç¨é»æºè¨åã§ä¹ãåããã¤ã³ãã©äºæ¥è ã¨ãã¦ã®çæãè¦ããç³ç©ãã¼ã¿ã»ã³ã¿ã¼ã®ãå¥è·¡ãã«ã¤ãã¦ãæ¹ãã¦ãã¡ãã¨èª¬æãã¦ããããã¨æãã åè¶ãããªãã¬ã¼ã·ã§ã³è½åã§ãæ³å®å¤ãããæ³å®å ãã« 2011å¹´11æã«éè¨ãããç³ç©ãã¼ã¿ã»ã³ã¿ã¼ã¯ãæ°å¤ãã®ãµã¼ãã¼ãå容ãããããã¤ã³ã¿ã¼ãããã®åºå¹¹ãã¼ã¿ã»ã³ã¿ã¼ã«ãªããéè¨å½æã¯ã½ã¼ã·ã£ã«ã²ã¼ã ã®æ®åã§ãµã¼ãã¼ã®éè¦ãããªãç»ãã ã£ãã»ããç°å¢ã«é æ ®ããã¨ã³ãªãã¼ã¿ã»ã³ã¿ã¼ãæ±ãããã¦ããããããããã¼ãºã«å¯¾å¿ããç³ç©ãã¼ã¿ã»ã³ã¿ã¼ã¯ãå¯å·å°ã®ã¡ãªãããæ´»ãããå¤æ°å·å´ã¨æ±äº¬ãã¼ã 1ååã«ç¸å½ããåºå¤§ãªæ·å°ãç¨ããã¹ã±ã¼ã©ããªãã£ã大ããªå£²ãã ã£ããç§ãéè¨æã¨å¢è¨æã§2åã»
話ãããã¿ Kamueeã¨ã¯ NFV ã½ããã¦ã§ã¢ã«ã¼ã¿ã®ã¡ãªãã Kamueeãä½ãã¢ããã¼ã·ã§ã³ æ¢åã®ã½ããã¦ã§ã¢ã«ã¼ã¿ã®éçãåé¡ç¹ DPDKã¨ã¯ Trieã¨ã¯ ã©ã¹ãã¬ãã«ãã£ãã·ã¥ PopTrieã¨ã¯ Kamueeãä»ã«å®è£ ãã¦ãããã® Interopã®Shownetã«ã¦ãããã¯ãã¼ã³ã³ã¢ã«ã¼ã¿ã§Kamueeãåããã¦ãã話 NTT Tech Conference #3 Cuishark Cuisharkãä½ãã¢ããã¼ã·ã§ã³ Cuisharkã®å®è£ Cursesãçã§ä½¿ãã®ã¯å¤§å¤ æªè¸ã¨ã¯ï¼ DPDKã使ãã®ã¯å¤§å¤ æªè¸2017ãã¼ãç°å¢ã«å¯¾ãã¦èªåæé©åããé«æ§è½éä¿¡åºç¤ã®éçº See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/p
ã©ã³ãã³ã°
ã©ã³ãã³ã°
ã©ã³ãã³ã°
ãªãªã¼ã¹ãé害æ å ±ãªã©ã®ãµã¼ãã¹ã®ãç¥ãã
ææ°ã®äººæ°ã¨ã³ããªã¼ã®é ä¿¡
å¦çãå®è¡ä¸ã§ã
j次ã®ããã¯ãã¼ã¯
kåã®ããã¯ãã¼ã¯
lãã¨ã§èªã
eã³ã¡ã³ãä¸è¦§ãéã
oãã¼ã¸ãéã
{{#tags}}- {{label}}
{{/tags}}