docomo cloud package

43
© 2015 NTT DOCOMO, INC. All rights reserved. NTT ドコモの AWS 開発ガイドラインと セキュリティデザインパターン事例 ~「ドコモクラウドパッケージ」 が誕生するまで~ 6/3/2015 栄藤 稔、 @mickbean 1

Upload: ntt-docomo-ventures-inc

Post on 04-Aug-2015

7.887 views

Category:

Technology


0 download

TRANSCRIPT

1. 2015 NTT DOCOMO, INC. All rights reserved. NTT AWS 6/3/2015 @mickbean 1 2. 2015 NTT DOCOMO, INC. All rights reserved. 2 AWS Summit Tokyo 15 1. 2. 3. 2015 NTT DOCOMO, INC. All rights reserved. 3 Hardware v.s. Software AWS 4. 2015 NTT DOCOMO, INC. All rights reserved. 4 Cloud Native Cloud 1.0 v.s. Cloud 2.0 coined by M.E. 5. 2015 NTT DOCOMO, INC. All rights reserved. 5 API 6. 2015 NTT DOCOMO, INC. All rights reserved. 6 Moved to AWS (2012) Moved to AWS (2014) Web 7. 2015 NTT DOCOMO, INC. All rights reserved. AWS 7 8. 2015 NTT DOCOMO, INC. All rights reserved. 8 RI RI RI RI RI 1/1 (RI) AZ 1/1 (RI) AZ 9. 2015 NTT DOCOMO, INC. All rights reserved. 9 10. 2015 NTT DOCOMO, INC. All rights reserved. Cloud2.0 10 Design for failure AWS AWS EBSS3 11. 2015 NTT DOCOMO, INC. All rights reserved. 11 Design for failure AZ/DC1 AZ-a AZ-b Service status : OK Service status : stop Service status : OK 2AZ Design for Failure 12. 2015 NTT DOCOMO, INC. All rights reserved. 12 Multi-AZ DBRDSDBAZ AZRPO RTO3-5 DB SnapshotS3DB AZ S3 Region Multi-AZ RDS MySQL Oracle PostgreSQL SQL ServerMulti-AZ Design for Failure 13. 2015 NTT DOCOMO, INC. All rights reserved. 13 AZAZELB ELBELBAWS HTTP/HTTPS/TCP Firewall EC2 Server EC2 Server ELB EC2 Server EC2 Server Availability Zone #1 Availability Zone #2 /ELB Tier Web Server Web Server Web Server AP Server AP Server AP Server Web Server Web Server Web Server AP Server AP Server AP Server Design for Failure 14. 2015 NTT DOCOMO, INC. All rights reserved. 14 Auto-Scaling // AMI Tier AMI AutoScaling Auto scaling Group CloudWatch EC2 Server EC2 Server EC2 Server & AutoScaling Availability Zone #1 Availability Zone #2 Design for Failure 15. 2015 NTT DOCOMO, INC. All rights reserved. 15 AWS AWSVPN GatewayAWS 1 Design for Failure 16. 2015 NTT DOCOMO, INC. All rights reserved. 16 DynamoDB NoSQL DBDynamoDB DynamoDB EC2 Server ELB EC2 Server EC2 ServerA B EC2 Server ELB EC2 Server EC2 Server A B 17. 2015 NTT DOCOMO, INC. All rights reserved. 17 RDSDB DB RDS DB EC2 Server EC2 Server RDS DB Read RDS DB Read Read Write Read EC2 Server EC2 Server EC2 Server EC2 Server RDS MySQL 18. 2015 NTT DOCOMO, INC. All rights reserved. 18 S3S3 EC2 S3 CDNCloudFront AWS Cloud S3EC2 EC2 RDS Web App Web App DB AZ1 AZ2 static.example.com www.example.com ELB 19. 2015 NTT DOCOMO, INC. All rights reserved. SLA 19 20. 2015 NTT DOCOMO, INC. All rights reserved. HP 20054 20 21. 2015 NTT DOCOMO, INC. All rights reserved. 21 RD 22. 2015 NTT DOCOMO, INC. All rights reserved. (2009-) 22 23. 2015 NTT DOCOMO, INC. All rights reserved. RedShift 23 Data o(2014) Web 24. 2015 NTT DOCOMO, INC. All rights reserved. 24 230 25. 2015 NTT DOCOMO, INC. All rights reserved. 25 IAMMFA MFAIAM MFA AWS account owner (master) Developer (IAM) Operator (IAM) Administrator (IAM) Developer EC2: R/W RDS: R S3: R/W Operator EC2: - RDS: - S3: R Administrator EC2: R/W RDS: R/W S3: R/W EC2 IAM Role 26. 2015 NTT DOCOMO, INC. All rights reserved. 26 Firewall / MFA 27. 2015 NTT DOCOMO, INC. All rights reserved. VPC(2009- 27 (in/out NACL(2011-) 28. 2015 NTT DOCOMO, INC. All rights reserved. AWS 28 IAM ROLE AWS Identity Access Management IAM ROLE IAM CLOUDTRAIL CLOUDTRAILAWS API 29. 2015 NTT DOCOMO, INC. All rights reserved. AWS Summit Japan 2014 E-JAWS 29 CIO 30. 2015 NTT DOCOMO, INC. All rights reserved. 30 31. 2015 NTT DOCOMO, INC. All rights reserved. 31 Firewall/ NACL AWS AWS 32. 2015 NTT DOCOMO, INC. All rights reserved. 32 IAM ROLE Cloud Trail IAM CLOUDWATCH 33. 2015 NTT DOCOMO, INC. All rights reserved. 33 Web Cloud-native On premise-hybrid 34. 2015 NTT DOCOMO, INC. All rights reserved. 34 AWS Cloud Formation 35. 2015 NTT DOCOMO, INC. All rights reserved. 35 [email protected] https://www.39works.net/assets/dcm-cloudconsulting 36. 2015 NTT DOCOMO, INC. All rights reserved. 36 37. 2015 NTT DOCOMO, INC. All rights reserved. + + +d 37 M2M Server 38. 2015 NTT DOCOMO, INC. All rights reserved. 38 39. 2015 NTT DOCOMO, INC. All rights reserved. 39 15 21 40. 2015 NTT DOCOMO, INC. All rights reserved. 40 Cloudpack NTT 41. 2015 NTT DOCOMO, INC. All rights reserved. Updates 20155 DCP Cost Visualizer6 41 42. 2015 NTT DOCOMO, INC. All rights reserved. 42 API Bild: Mimi Potter / fotolia.de https://en.fotolia.com/id/59201779 43. 2015 NTT DOCOMO, INC. All rights reserved. 43