Anycast ã«ã€ããŠèããããšããã人ã¯å€ãã§ãããã ãã®ãããã¯ãŒã¯ ã¢ãã¬ã¹æå®ããã³ã«ãŒãã£ã³ã°æ¹æ³ã§ã¯ãåäžã® IP ã¢ãã¬ã¹ããããã¯ãŒã¯äžã®è€æ°ã®ãµãŒããŒã«å²ãåœãŠãããŸãã ãããã®ãµãŒããŒã¯ãäºãã«é¢ããããŒã¿ã»ã³ã¿ãŒã«é 眮ããããšãã§ããŸãã ãšããŒãã£ã¹ãã®èãæ¹ã¯ããªã¯ãšã¹ãã®éä¿¡å ã®å Žæã«å¿ããŠãããŒã¿ãæãè¿ã (ãããã¯ãŒã¯ ããããžãããæ£ç¢ºã«ã¯ BGP ã«ãŒãã£ã³ã° ãããã³ã«ã«åŸã£ãŠ) ãµãŒããŒã«éä¿¡ããããšãããã®ã§ãã ããããããšã§ããããã¯ãŒã¯ ãããã®æ°ãšé 延ãæžããããšãã§ããŸãã
åºæ¬çã«ãåãã«ãŒããäžçäžã®è€æ°ã®ããŒã¿ã»ã³ã¿ãŒããã¢ããã¿ã€ãºãããŸãã ãããã£ãŠãã¯ã©ã€ã¢ã³ãã¯ãBGP ã«ãŒãã«åºã¥ããŠãæé©ããã€ãæãè¿ããããŒã¿ã»ã³ã¿ãŒã«éä¿¡ãããŸãã ãªããšããŒãã£ã¹ããªã®ãïŒ ãŠããã£ã¹ãã§ã¯ãªããšããŒãã£ã¹ãã䜿çšããã®ã¯ãªãã§ãã?
ãŠããã£ã¹ãã¯ãWeb ãµãŒããŒã XNUMX ã€ããããã©ãã£ãã¯éãäžçšåºŠã®ãµã€ãã«éåžžã«é©ããŠããŸãã ãã ãããµãŒãã¹ã«äœçŸäžãã®å å
¥è
ãããå Žåã¯ãéåžžããããããåã IP ã¢ãã¬ã¹ãæã€å€æ°ã® Web ãµãŒããŒã䜿çšããŸãã ãããã®ãµãŒããŒã¯å°ççã«åæ£ãããŠããããªã¯ãšã¹ãã«æé©ã«å¯Ÿå¿ããŸãã
ãã®ã·ããªãªã§ã¯ããšããŒãã£ã¹ãã¯ããã©ãŒãã³ã¹ãåäžãã (ãã©ãã£ãã¯ã¯æå°éã®é 延ã§ãŠãŒã¶ãŒã«éä¿¡ãããŸã)ããµãŒãã¹ã®ä¿¡é Œæ§ã確ä¿ã (ããã¯ã¢ãã ãµãŒããŒã®ãããã§)ãè² è·åæ£ãå®çŸããŸããè€æ°ã®ãµãŒããŒãžã®ã«ãŒãã£ã³ã°ã«ãããµãŒããŒéã®è² è·ãå¹æçã«åæ£ãããé床ãåäžããŸãããµã€ãã®ã
ãªãã¬ãŒã¿ã¯ããšããŒãã£ã¹ããš DNS ã«åºã¥ããããŸããŸãªã¿ã€ãã®è² è·åæ£ãã¯ã©ã€ã¢ã³ãã«æäŸããŸãã ã¯ã©ã€ã¢ã³ãã¯ããµã€ãã®å°ççäœçœ®ã«åºã¥ããŠãªã¯ãšã¹ãã®éä¿¡å ãšãªã IP ã¢ãã¬ã¹ãæå®ã§ããŸãã ããã«ããããŠãŒã¶ãŒã®ãªã¯ãšã¹ããããæè»ã«æ¯ãåããããšãå¯èœã«ãªããŸãã
ããšãã°ã100 æ¥ã« 000 件ã®ãªã¯ãšã¹ãããããªã³ã©ã€ã³ ã¹ãã¢ã人æ°ã®ããã°ãªã©ãè² è· (ãŠãŒã¶ãŒ) ãåæ£ããå¿ èŠããããµã€ããè€æ°ãããšããŸãã ãŠãŒã¶ãŒãç¹å®ã®ãµã€ãã«ã¢ã¯ã»ã¹ããå°åãå¶éããã«ã¯ãGeo Community ãªãã·ã§ã³ã䜿çšã§ããŸãã ããã«ããããªãã¬ãŒã¿ãŒãã«ãŒãã宣äŒããå°åãå¶éã§ããŸãã
ãšããŒãã£ã¹ããšãŠããã£ã¹ã: éã
ãšããŒãã£ã¹ãã¯ãDNS (ãã¡ã€ã³ ããŒã ã·ã¹ãã ) ã CDN (ã³ã³ãã³ãé ä¿¡ãããã¯ãŒã¯) ãªã©ã®ã¢ããªã±ãŒã·ã§ã³ã§ãã䜿çšããããããã¯ãŒã¯ ããã©ãŒãã³ã¹ãåäžãããã«ãŒãã£ã³ã°ã®æ±ºå®ãå¯èœã«ããŸãã ã³ã³ãã³ãé ä¿¡ãããã¯ãŒã¯ã¯å€§éã®ãã©ãã£ãã¯ãåŠçãããããAnycast ã䜿çšããŸãããã®å ŽåãAnycast ã«ã¯å€ãã®å©ç¹ããããŸã (詳现ã¯åŸè¿°ããŸã)ã DNS ã§ã¯ããšããŒãã£ã¹ãã䜿çšãããšããµãŒãã¹ã®ä¿¡é Œæ§ãšãã©ãŒã«ã ãã¬ã©ã³ã¹ã®ã¬ãã«ãå€§å¹ ã«åäžãããããšãã§ããŸãã
ãšããŒãã£ã¹ã IP ã§ã¯ãBGP ã䜿çšããå Žåãç¹å®ã®ãã¹ããžã®ã«ãŒããè€æ°ååšããŸãã ãããã¯å®éã«ã¯ãè€æ°ã®ããŒã¿ã»ã³ã¿ãŒã«ãããã¹ãã®ã³ããŒã§ãããäœé
延ã®æ¥ç¶ã確ç«ããããã«äœ¿çšãããŸãã
ãã®ããããšããŒãã£ã¹ã ãããã¯ãŒã¯ã§ã¯ãåã IP ã¢ãã¬ã¹ãããŸããŸãªå Žæããã¢ããã¿ã€ãºããããããã¯ãŒã¯ã¯ã«ãŒãã®ãã³ã¹ããã«åºã¥ããŠãŠãŒã¶ãŒã®ãªã¯ãšã¹ããã©ãã«ã«ãŒãã£ã³ã°ãããã決å®ããŸãã ããšãã°ãBGP ã¯ãããŒã¿éä¿¡ã®æçã«ãŒãã決å®ããããã«ãã䜿çšãããŸãã ãŠãŒã¶ãŒããšããŒãã£ã¹ã ãªã¯ãšã¹ããéä¿¡ãããšãBGP ã¯ãããã¯ãŒã¯äžã§å©çšå¯èœãªãšããŒãã£ã¹ã ãµãŒããŒã®æé©ãªã«ãŒãã決å®ããŸãã
ãšããŒãã£ã¹ãã®å©ç¹
ã¬ã€ãã³ã·ã®ççž®
ãšããŒãã£ã¹ãã䜿çšããã·ã¹ãã ã§ã¯ãæãè¿ããµãŒããŒããããŒã¿ãåä¿¡ã§ããããããŠãŒã¶ãŒèŠæ±ãåŠçããéã®åŸ
ã¡æéãççž®ã§ããŸãã ã€ãŸãããŠãŒã¶ãŒã¯åžžã« (ã«ãŒãã£ã³ã° ãããã³ã«ã®èŠ³ç¹ãã) ãæãè¿ãã DNS ãµãŒããŒã«æ¥ç¶ããŸãã ãã®çµæããšããŒãã£ã¹ãã¯ã¯ã©ã€ã¢ã³ããšãµãŒããŒéã®ãããã¯ãŒã¯è·é¢ãççž®ããããšã§å¯Ÿè©±æéãççž®ããŸãã ããã«ãããåŸ
ã¡æéãççž®ãããã ãã§ãªããè² è·åæ£ãå®çŸãããŸãã
ã¹ããŒã
ãã©ãã£ãã¯ã¯æãè¿ãããŒãã«ã«ãŒãã£ã³ã°ãããã¯ã©ã€ã¢ã³ããšããŒãéã®åŸ ã¡æéãççž®ããããããã¯ã©ã€ã¢ã³ããã©ãããæ å ±ãèŠæ±ããŠãããã«é¢ä¿ãªããé ä¿¡é床ãæé©åãããŸãã
å®å®æ§ãšèé害æ§ã®åäž
äžçäžã®è€æ°ã®ãµãŒããŒãåã IP ã䜿çšããŠããå ŽåããµãŒããŒã® XNUMX ã€ã§é害ãçºçãããåæãããããããšããã©ãã£ãã¯ã¯æãè¿ããµãŒããŒã«ãªãã€ã¬ã¯ããããŸãã ãã®çµæããšããŒãã£ã¹ãã¯ãµãŒãã¹ã®å埩åãé«ãããããã¯ãŒã¯ ã¢ã¯ã»ã¹ãé 延ãé床ãåäžãããŸãã
ãããã£ãŠããŠãŒã¶ãŒãè€æ°ã®ãµãŒããŒãåžžã«å©çšã§ããããã«ããããšã§ãããšãã°ãšããŒãã£ã¹ã㯠DNS ã®å®å®æ§ãåäžãããŸãã ããŒãã«é害ãçºçããå ŽåããŠãŒã¶ãŒã®ãªã¯ãšã¹ãã¯æåã«ããä»å ¥ãåæ§æãè¡ããã«å¥ã® DNS ãµãŒããŒã«ãªãã€ã¬ã¯ããããŸãã ãšããŒãã£ã¹ãã¯ãåé¡ã®ãããµã€ãã®ã«ãŒããåé€ããã ãã§ãä»ã®ãµã€ããžã®å®è³ªçã«ééçãªã¹ã€ããã³ã°ãå®çŸããŸãã
ããŒããã©ã³ã·ã³ã°
ãšããŒãã£ã¹ãã§ã¯ããããã¯ãŒã¯ ãã©ãã£ãã¯ã¯ããŸããŸãªãµãŒããŒã«åæ£ãããŸãã ã€ãŸããããŒã ãã©ã³ãµãŒãšããŠæ©èœããåäžã®ãµãŒããŒã倧éã®ãã©ãã£ãã¯ãåä¿¡ããã®ãé²ããŸãã è² è·åæ£ã¯ãããšãã°ããªã¯ãšã¹ã ãœãŒã¹ããåãå°ççè·é¢ã«è€æ°ã®ãããã¯ãŒã¯ ããŒããååšããå Žåã«äœ¿çšã§ããŸãã ãã®å Žåãè² è·ã¯ããŒãéã§åæ£ãããŸãã
DoS æ»æã®åœ±é¿ã軜æžãã
ãšããŒãã£ã¹ãã®ãã XNUMX ã€ã®ç¹åŸŽã¯ãDDoS èæ§ã§ãã DDoS æ»æã§ã¯ãéªåŽ©ã®ããã«ãããã¯ãŒã¯å ã®ãã¹ãŠã®ãµãŒããŒããªã¯ãšã¹ãã§å§åããå¿ èŠãããããããšããŒãã£ã¹ã ã·ã¹ãã ãããŠã³ãããããšã¯ã§ãããã«ãããŸããã
DDoS æ»æã§ã¯ããããããã䜿çšãããããšãå€ããæ»æ察象ã®ãµãŒããŒã«éè² è·ãäžããã»ã©ã®å€§éã®ãã©ãã£ãã¯ãçæãããå¯èœæ§ããããŸãã ãã®ç¶æ³ã§ãšããŒãã£ã¹ãã䜿çšããå©ç¹ã¯ãåãµãŒããŒãæ»æã®äžéšããåžåãã§ããããããã®ç¹å®ã®ãµãŒããŒã®è² è·ã軜æžãããããšã§ãã ãµãŒãã¹æåŠæ»æã¯ãµãŒããŒã«éå®ãããå¯èœæ§ãé«ãããµãŒãã¹å šäœã«ã¯åœ±é¿ããŸããã
é«ãæ°Žå¹³ã¹ã±ãŒã©ããªãã£
ãšããŒãã£ã¹ã ã·ã¹ãã ã¯ã倧éã®ãã©ãã£ãã¯ã䌎ããµãŒãã¹ã«é©ããŠããŸãã ãšããŒãã£ã¹ãã䜿çšãããµãŒãã¹ã§å¢å ãããã©ãã£ãã¯ãåŠçããããã«æ°ãããµãŒããŒãå¿ èŠãªå Žåã¯ããããåŠçããããã«æ°ãããµãŒããŒããããã¯ãŒã¯ã«è¿œå ã§ããŸãã æ°èŠãŸãã¯æ¢åã®ãµã€ãã«é 眮ã§ããŸãã
ç¹å®ã®å Žæã§ãã©ãã£ãã¯ãå€§å¹ ã«å¢å ããŠããå ŽåããµãŒããŒãè¿œå ãããšããã®ãµã€ãã®è² è·ã®ãã©ã³ã¹ãåããŸãã æ°ãããµã€ãã«ãµãŒããŒãè¿œå ãããšãäžéšã®ãŠãŒã¶ãŒã«å¯ŸããŠæ°ããæçã«ãŒããäœæãããåŸ ã¡æéãççž®ãããŸãã ã©ã¡ãã®æ¹æ³ãããããã¯ãŒã¯äžã§æ°ãããµãŒããŒãå©çšå¯èœã«ãªãããããµãŒãã¹ã®å®å®æ§ãåäžãããã®ã«åœ¹ç«ã¡ãŸãã ããããããšã§ããµãŒããŒãéè² è·ã«ãªã£ãå Žåã«ãéè² è·ã«ãªã£ããµãŒããŒã®ãªã¯ãšã¹ãã®äžéšãåãå ¥ããããå Žæã«å¥ã®ãµãŒããŒããããã€ããã ãã§æžã¿ãŸãã ããã«ã¯ãã¯ã©ã€ã¢ã³ãåŽã§ã®æ§æã¯å¿ èŠãããŸããã
ãµãŒããŒã« 10 Gbps ãŸã㯠25 Gbps ã®ããŒããæ°åãããªãå Žåã§ãããã®æ¹æ³ã®ã¿ã§ãã©ãããã®ãã©ãã£ãã¯ãšéåžžã«å€ãã®ãŠãŒã¶ãŒã«ãµãŒãã¹ãæäŸã§ããŸãã 100 ã€ã® IP ã¢ãã¬ã¹ãæ〠XNUMX å°ã®ãã¹ãã«ããããã©ãããèŠæš¡ã®ãã©ãã£ãã¯ãåŠçã§ããããã«ãªããŸãã
ç°¡åãªæ§æ管ç
äžã§è¿°ã¹ãããã«ããšããŒãã£ã¹ãã®èå³æ·±ãçšé㯠DNS ã§ãã ãããã¯ãŒã¯ ããŒãäžã«è€æ°ã®ç°ãªã DNS ãµãŒããŒãé 眮ã§ããŸããã䜿çšãã DNS ã¢ãã¬ã¹ã¯ XNUMX ã€ã ãã§ãã ãœãŒã¹ã®å Žæã«å¿ããŠããªã¯ãšã¹ãã¯æãè¿ãããŒãã«ã«ãŒãã£ã³ã°ãããŸãã ããã«ãããDNS ãµãŒããŒã«é害ãçºçããå Žåã«ãããçšåºŠã®ãã©ãã£ãã¯ã®ãã©ã³ã¹ãšåé·æ§ãæäŸãããŸãã ãã®ããã«ãããšãå Žæã«å¿ããŠç°ãªã DNS ãµãŒããŒãæ§æãã代ããã«ãXNUMX ã€ã® DNS ãµãŒããŒã®æ§æããã¹ãŠã®ããŒãã«äŒæããããšãã§ããŸãã
ãšããŒãã£ã¹ã ãããã¯ãŒã¯ã¯ãè·é¢ã ãã§ãªãããµãŒããŒã®ååšã確ç«ãããæ¥ç¶ã®æ°ãªã©ã®ãã©ã¡ãŒã¿ã«ãåºã¥ããŠãªã¯ãšã¹ããã«ãŒãã£ã³ã°ããããã«æ§æã§ããŸãã ãŸãã¯å¿çæéã
ãšããŒãã£ã¹ã ãã¯ãããžã䜿çšããããã«ãã¯ã©ã€ã¢ã³ãåŽã«ç¹å¥ãªãµãŒããŒããããã¯ãŒã¯ããŸãã¯ç¹å¥ãªã³ã³ããŒãã³ãã¯å¿ èŠãããŸããã ãããããšããŒãã£ã¹ãã«ã¯æ¬ ç¹ããããŸãã ãã®å®è£ ã¯è€éãªäœæ¥ã§ãããè¿œå ã®æ©åšãä¿¡é Œã§ãããããã€ããŒãé©åãªãã©ãã£ã㯠ã«ãŒãã£ã³ã°ãå¿ èŠã«ãªããšèããããŠããŸãã
çŽç²ãªæºããçŸãããŸã§ã¯çšé ã
ãšããŒãã£ã¹ãã¯æå°ãããã«åºã¥ããŠãŠãŒã¶ãŒãã«ãŒãã£ã³ã°ããŸãããããã¯å¿ ãããé 延ãæå°ã§ããããšãæå³ããããã§ã¯ãããŸããã ã¬ã€ãã³ã·ã¯ãXNUMX åã®é·ç§»ããã XNUMX åã®é·ç§»ã®æ¹ãé«ããªãå¯èœæ§ããããããããè€éãªææšã«ãªããŸãã
äŸ: 倧éžéã®éä¿¡ã«ã¯ãé
延ãéåžžã«é·ãåäžããããå«ãŸããå ŽåããããŸãã
ãšããŒãã£ã¹ãã¯äž»ã«ãDNS ãªã©ã® UDP ããŒã¹ã®ãµãŒãã¹ã«äœ¿çšãããŸãã ãŠãŒã¶ãŒãªã¯ãšã¹ãã¯ãBGP ã«ãŒãã«åºã¥ããŠãæé©ãªãããã³ãæãè¿ããããŒã¿ã»ã³ã¿ãŒã«ã«ãŒãã£ã³ã°ãããŸãã
äŸ: ãšããŒãã£ã¹ã DNS IP ã¢ãã¬ã¹ 123.10.10.10 ãæ〠DNS ã¯ã©ã€ã¢ã³ã ã¯ãŒã¯ã¹ããŒã·ã§ã³ã¯ãåããšããŒãã£ã¹ã IP ã¢ãã¬ã¹ã䜿çšããŠå±éããã 1 ã€ã® DNS ããŒã ãµãŒããŒã®ãã¡æãè¿ããã®ã«å¯Ÿã㊠DNS 解決ãå®è¡ããŸãã ã«ãŒã¿ãŒ R2 ãŸãã¯ãµãŒã㌠A ã«é害ãçºçããå ŽåãDNS ã¯ã©ã€ã¢ã³ã ãã±ããã¯ã«ãŒã¿ãŒ R3 ããã³ RXNUMX ãä»ããŠæ¬¡ã«è¿ã DNS ãµãŒããŒã«èªåçã«è»¢éãããŸãã ããã«ããµãŒã㌠A ãžã®ã«ãŒããã«ãŒãã£ã³ã° ããŒãã«ããåé€ããããã®ããŒã ãµãŒããŒã¯ä»åŸäœ¿çšã§ããªããªããŸãã
å°å ¥ã·ããªãª
ãŠãŒã¶ãŒãæ¥ç¶ãããµãŒããŒã決å®ããããã«äœ¿çšãããäžè¬çãªã¹ããŒã ã XNUMX ã€ãããŸãã
- ãšããŒãã£ã¹ããããã¯ãŒã¯å±€ã ãŠãŒã¶ãŒãæãè¿ããµãŒããŒã«æ¥ç¶ããŸãã ããã§ã¯ããŠãŒã¶ãŒãããµãŒããŒãŸã§ã®ãããã¯ãŒã¯ ãã¹ãéèŠã§ãã
- ã¢ããªã±ãŒã·ã§ã³ã¬ãã«ã®ãšããŒãã£ã¹ãã ãã®ã¹ããŒã ã«ã¯ããµãŒããŒã®å¯çšæ§ãå¿çæéãæ¥ç¶æ°ãªã©ãå«ããããèšç®ãããã¡ããªãã¯ãå«ãŸããŸããããã¯ããããã¯ãŒã¯çµ±èšãæäŸããå€éšã¢ãã¿ãŒã«äŸåããŸãã
ãšããŒãã£ã¹ãã«åºã¥ã CDN
ããã§ãã³ã³ãã³ãé ä¿¡ãããã¯ãŒã¯ã§ã® Anycast ã®äœ¿çšã«æ»ããŸãããã ãšããŒãã£ã¹ãã¯ç¢ºãã«èå³æ·±ããããã¯ãŒãã³ã°æŠå¿µã§ããã次äžä»£ CDN ãããã€ããŒã®éã§åãå ¥ãããã€ã€ãããŸãã
CDN ã¯ãé«å¯çšæ§ãšäœé 延ã§ãšã³ã ãŠãŒã¶ãŒã«ã³ã³ãã³ããé ä¿¡ãããµãŒããŒã®åæ£ãããã¯ãŒã¯ã§ãã ã³ã³ãã³ãé ä¿¡ãããã¯ãŒã¯ã¯çŸåšãå€ãã®ãªã³ã©ã€ã³ ã¡ãã£ã¢ ãµãŒãã¹ã®ããã¯ããŒã³ãšããŠéèŠãªåœ¹å²ãæãããŠããŸãããæ¶è²»è ã¯ããŠã³ããŒãé床ã®é ãã«å¯ŸããŠãŸããŸãå¯å®¹ã§ã¯ãªããªã£ãŠããŸãã ãããªããã³é³å£°ã¢ããªã±ãŒã·ã§ã³ã¯ããããã¯ãŒã¯ã®ãžãã¿ãŒãšé 延ã®åœ±é¿ãç¹ã«åãããããªããŸãã
CDN ã¯ãã¹ãŠã®ãµãŒããŒã 5 ã€ã®ãããã¯ãŒã¯ã«æ¥ç¶ããã³ã³ãã³ãã®èªã¿èŸŒã¿ãé«éåããŸãã å Žåã«ãã£ãŠã¯ããŠãŒã¶ãŒã®åŸ ã¡æéã 6 ïœ XNUMX ç§ççž®ã§ããå ŽåããããŸãã CDN ã®ç®çã¯ããšã³ã ãŠãŒã¶ãŒã«æãè¿ããµãŒããŒããã³ã³ãã³ããæäŸããããšã§é ä¿¡ãæé©åããããšã§ãã ããã¯ãšããŒãã£ã¹ããšéåžžã«äŒŒãŠããããšã³ã ãŠãŒã¶ãŒã®äœçœ®ã«åºã¥ããŠæãè¿ããµãŒããŒãéžæãããŸãã ãã¹ãŠã® CDN ãµãŒãã¹ ãããã€ããŒãããã©ã«ãã§ãšããŒãã£ã¹ãã䜿çšããŠããããã«èŠããŸãããå®éã«ã¯ããã§ã¯ãããŸããã
HTTP/TCP ãªã©ã®ãããã³ã«ã䜿çšããã¢ããªã±ãŒã·ã§ã³ã¯ã確ç«ãããæ¥ç¶ã«äŸåããŸãã æ°ãããšããŒãã£ã¹ã ããŒããéžæãããå Žå (ãµãŒããŒé害ãªã©ã«ãã)ããµãŒãã¹ãäžæãããå¯èœæ§ããããŸãã ãããã以å㯠UDP ã DNS ãªã©ã®ã³ãã¯ã·ã§ã³ã¬ã¹åãµãŒãã¹ã«ãšããŒãã£ã¹ããæšå¥šãããŠããçç±ã§ãã ãã ãããšããŒãã£ã¹ãã¯æ¥ç¶æåã®ãããã³ã«ã§ãé©åã«æ©èœããŸããããšãã°ãTCP ã¯ãšããŒãã£ã¹ã ã¢ãŒãã§é©åã«æ©èœããŸãã
CDN ãããã€ããŒã®äžã«ã¯ããšããŒãã£ã¹ã ããŒã¹ã®ã«ãŒãã£ã³ã°ã䜿çšãããããã€ããŒãããã°ãDNS ããŒã¹ã®ã«ãŒãã£ã³ã°ã奜ããããã€ããŒããããŸãããŠãŒã¶ãŒã® DNS ãµãŒããŒã®å Žæã«åºã¥ããŠæãè¿ããµãŒããŒãéžæãããŸãã
ãã€ããªããããã³ãã«ãããŒã¿ã»ã³ã¿ãŒã®ã€ã³ãã©ã¹ãã©ã¯ãã£ã¯ããšããŒãã£ã¹ãã®äœ¿çšäŸã®ãã XNUMX ã€ã§ãã ãããã€ããŒããåãåã£ãè² è·åæ£ IP ã¢ãã¬ã¹ã䜿çšãããšããããã€ããŒã®ããŒã¿ ã»ã³ã¿ãŒå ã®ããŸããŸãªã¯ã©ã€ã¢ã³ã ãµãŒãã¹ã® IP ã¢ãã¬ã¹éã§è² è·ãåæ£ã§ããŸãã ãšããŒããã€ã¹ ãã¯ãããžãŒã®ãããã§ããã©ãã£ãã¯ãå€ãå Žåã§ãããã©ãŒãã³ã¹ãåäžããèé害æ§ãåäžããå€æ°ã®ãŠãŒã¶ãŒãåŠçããå Žåã®å¿çæéã®æé©åã«åœ¹ç«ã¡ãŸãã
ãã€ããªãã ãã«ãããŒã¿ ã»ã³ã¿ãŒ ã€ã³ãã©ã¹ãã©ã¯ãã£ã§ã¯ããã©ãã£ãã¯ããµãŒããŒå šäœã«åæ£ããããå°çšãµãŒããŒäžã®ä»®æ³ãã·ã³ã«ããåæ£ãããã§ããŸãã
ãããã£ãŠãã€ã³ãã©ã¹ãã©ã¯ãã£ãæ§ç¯ããããã®æè¡ãœãªã¥ãŒã·ã§ã³ã«ã¯èšå€§ãªéžæè¢ããããŸãã ãŸããè€æ°ã®ããŒã¿ã»ã³ã¿ãŒã«ããã IP ã¢ãã¬ã¹éã§è² è·åæ£ãæ§æããã°ã«ãŒãå ã®ä»»æã®ããã€ã¹ãã¿ãŒã²ããã«ããŠãµã€ãã®ããã©ãŒãã³ã¹ãæé©åããããšãã§ããŸãã
åããŒã¿ã»ã³ã¿ãŒå ã®åæ£ãµãŒããŒããããã®ãéã¿ããå®çŸ©ããç¬èªã®ã«ãŒã«ã«åŸã£ãŠãã©ãã£ãã¯ãåæ£ã§ããŸãã ãã®æ§æã¯ãåæ£ãµãŒã㌠ããŒã¯ãããããµãŒãã¹ã®ããã©ãŒãã³ã¹ãäžåäžãªå Žåã«ç¹ã«åœ¹ç«ã¡ãŸãã ããã«ããããã©ãã£ãã¯ãããé »ç¹ã«åæ£ããããµãŒããŒã®ããã©ãŒãã³ã¹ãåäžããŸãã
ping ã³ãã³ãã䜿çšããŠç£èŠã·ã¹ãã ãäœæããã«ã¯ããããŒããæ§æã§ããŸãã ããã«ããã管çè ã¯ç¬èªã®ç£èŠæé ãå®çŸ©ããã€ã³ãã©ã¹ãã©ã¯ãã£å ã®åã³ã³ããŒãã³ãã®ã¹ããŒã¿ã¹ãããæ確ã«ææ¡ã§ããããã«ãªããŸãã ãã®ããã«ããŠãã¢ã¯ã»ã·ããªãã£åºæºãå®çŸ©ã§ããŸãã
ãã€ããªãã ã€ã³ãã©ã¹ãã©ã¯ãã£ãæ§ç¯ããããšãå¯èœã§ããå Žåã«ãã£ãŠã¯ããã㯠ãªãã£ã¹ãäŒæ¥ãããã¯ãŒã¯å ã«æ®ããã€ã³ã¿ãŒãã§ã€ã¹éšåããããã€ããŒã«ã¢ãŠããœãŒã·ã³ã°ããæ¹ã䟿å©ãªå ŽåããããŸãã
è² è·åæ£ãéä¿¡ããŒã¿ã®æå·åããµã€ã蚪åè ãšäŒæ¥ã€ã³ãã©ã¹ãã©ã¯ãã£éã®éä¿¡ã®ã»ãã¥ãªãã£ã®ããã« SSL 蚌ææžãè¿œå ããããšãã§ããŸãã ããŒã¿ã»ã³ã¿ãŒéã®è² è·åæ£ã®å Žåã¯ãSSL ã䜿çšã§ããŸãã
ã¢ãã¬ã¹è² è·åæ£ãåãããšããŒãã£ã¹ã ãµãŒãã¹ã¯ããããã€ããŒããå ¥æã§ããŸãã ãã®æ©èœã¯ããŠãŒã¶ãŒãäœçœ®æ å ±ã«åºã¥ããŠã¢ããªãæäœããæ¹æ³ãæ¹åããã®ã«åœ¹ç«ã¡ãŸãã ããŒã¿ã»ã³ã¿ãŒã§ã©ã®ãããªãµãŒãã¹ãå©çšã§ããããéç¥ããã ãã§ååã§ããããã©ãã£ãã¯ã¯æãè¿ãã€ã³ãã©ã¹ãã©ã¯ãã£ã«ãªãã€ã¬ã¯ããããŸãã ãã©ã³ã¹ãåç±³ãªã©ã«å°çšãµãŒããŒãããå Žåãã¯ã©ã€ã¢ã³ãã¯ãããã¯ãŒã¯äžã®æãè¿ããµãŒããŒã«èªå°ãããŸãã
ãšããŒãã£ã¹ãã䜿çšããããã®ãªãã·ã§ã³ã® XNUMX ã€ã¯ããªãã¬ãŒã¿ã® Point of Presence (PoP) ã®æé©ãªéžæã§ãã ãããŸããã
ãã®çç±ã¯ããŠããã£ã¹ãã®å Žåãå LinkedIn PoP ãåºæã® IP ã¢ãã¬ã¹ãæã£ãŠããããã§ãã ãŠãŒã¶ãŒã¯ãDNS ã䜿çšããŠå°ççäœçœ®ã«åºã¥ã㊠PoP ã«å²ãåœãŠãããŸãã åé¡ã¯ãDNS ã䜿çšãããšãç±³åœã®ãŠãŒã¶ãŒã®çŽ 30% ã次åã® PoP ã«ãªãã€ã¬ã¯ããããããšã§ãã ãšããŒãã£ã¹ãã®æ®µéçãªå®è£ ã«ãããæé©ã§ã¯ãªã PoP å²ãåœãŠã¯ 31% ãã 10% ã«äœäžããŸããã
ãã€ããã ãã¹ãã®çµæãã°ã©ãã«ç€ºãããŠããŸããY 軞ã¯æé©ãª PoP å²ãåœãŠã®å²åã§ãã ãšããŒãã£ã¹ãã®å¢å ã«äŒŽããç±³åœã®å€ãã®å·ã§æé©ãª PoP ãžã®ãã©ãã£ãã¯ã®å²åãæ¹åãããŸããã
ãšããŒãã£ã¹ããããã¯ãŒã¯ç£èŠ
ãšããŒãã£ã¹ã ãããã¯ãŒã¯ã¯çè«çã«ã¯åçŽã§ããè€æ°ã®ç©çãµãŒããŒã«åã IP ã¢ãã¬ã¹ãå²ãåœãŠãããBGP ã¯ãã® IP ã¢ãã¬ã¹ã䜿çšããŠã«ãŒãã決å®ããŸãã ãããããšããŒãã£ã¹ã ãã©ãããã©ãŒã ã®å®è£ ãšèšèšã¯è€éã§ããããã®ç¹ã§ã¯ãã©ãŒã«ã ãã¬ã©ã³ããªãšããŒãã£ã¹ã ãããã¯ãŒã¯ãç¹ã«æåã§ãã ããã«é£ããã®ã¯ããšããŒãã£ã¹ã ãããã¯ãŒã¯ãå¹æçã«ç£èŠããŠãé害ãè¿ éã«ç¹å®ããŠéé¢ããããšã§ãã
ãµãŒãã¹ããµãŒãããŒãã£ã® CDN ãããã€ããŒã䜿çšããŠã³ã³ãã³ããæäŸããå Žåããããã¯ãŒã¯ ããã©ãŒãã³ã¹ãç£èŠããã³æ€èšŒããããšãéåžžã«éèŠã§ãã ãšããŒãã£ã¹ãããŒã¹ã® CDN ã¢ãã¿ãªã³ã°ã¯ãã©ã®ããŒã¿ã»ã³ã¿ãŒãã³ã³ãã³ããæäŸããŠããããç解ããããã«ããšã³ãããŒãšã³ãã®é 延ãšæåŸãã XNUMX çªç®ã®ãããã®ããã©ãŒãã³ã¹ã枬å®ããããšã«éç¹ã眮ããŠããŸãã HTTP ãµãŒããŒã®ããããŒãåæããããšã¯ãããŒã¿ã®éä¿¡å ãå€æãããã XNUMX ã€ã®æ¹æ³ã§ãã
äŸ: CDN ãµãŒããŒã®å Žæã瀺ã HTTP å¿çããããŒã
ããšãã°ãCloudFlare 㯠HTTP å¿çã¡ãã»ãŒãžã§ç¬èªã® CF-Ray ããããŒã䜿çšããŸããããã«ã¯ããªã¯ãšã¹ããè¡ãããããŒã¿ã»ã³ã¿ãŒã®æ瀺ãå«ãŸããŸãã Zendesk ã®å Žåãã·ã¢ãã«å°åã® CF-Ray ããããŒã¯ CF-RAY: 2a21675e65fd2a3d-SEAãã¢ã ã¹ãã«ãã ã®å Žå㯠CF-RAY: 2a216896b93a0c71-AMS ã§ãã HTTP å¿çã® HTTP-X ããããŒã䜿çšããŠãã³ã³ãã³ãã®å Žæãç¹å®ããããšãã§ããŸãã
ä»ã®ã¢ãã¬ã¹æå®æ¹æ³
ãŠãŒã¶ãŒèŠæ±ãç¹å®ã®ãããã¯ãŒã¯ ãšã³ããã€ã³ãã«ã«ãŒãã£ã³ã°ããããã®ä»ã®ã¢ãã¬ã¹æå®æ¹æ³ããããŸãã
ãŠããã£ã¹ã
çŸåšã®ã€ã³ã¿ãŒãããã®ã»ãšãã©ã¯ãã®æ¹æ³ã䜿çšããŠããŸãã ãŠããã£ã¹ã - ãŠããã£ã¹ãéä¿¡ã§ã¯ãIP ã¢ãã¬ã¹ã¯ãããã¯ãŒã¯äžã® XNUMX ã€ã®ç¹å®ã®ããŒãã®ã¿ã«é¢é£ä»ããããŸãã ããã XNUMX 察 XNUMX ãããã³ã°ãšåŒã³ãŸãã
ãã«ããã£ã¹ã
ãã«ããã£ã¹ãã§ã¯ãXNUMX 察å€ãŸãã¯å€å¯Ÿå€ã®é¢ä¿ã䜿çšãããŸãã ãã«ããã£ã¹ãã䜿çšãããšãéä¿¡è ããã®ãªã¯ãšã¹ãããéžæãããç°ãªããšã³ããã€ã³ãã«åæã«éä¿¡ã§ããŸãã ããã«ãããã¯ã©ã€ã¢ã³ãã¯è€æ°ã®ãã¹ãããåæã«ãã¡ã€ã«ããã£ã³ã¯ã§ããŠã³ããŒãã§ããããã«ãªããŸã (ããã¯ããªãŒãã£ãªãŸãã¯ãããªã®ã¹ããªãŒãã³ã°ã«åœ¹ç«ã¡ãŸã)ã ãã«ããã£ã¹ãã¯ãšããŒãã£ã¹ããšããæ··åãããŸãããäž»ãªéãã¯ãè€æ°ã®ããŒããå©çšå¯èœãªå Žåã§ãããšããŒãã£ã¹ãã¯éä¿¡è ã XNUMX ã€ã®ç¹å®ã®ããŒãã«èªå°ããããšã§ãã
æŸé
åäžã®éä¿¡è ããã®ããŒã¿ã°ã©ã ã¯ããããŒããã£ã¹ã ã¢ãã¬ã¹ã«é¢é£ä»ãããããã¹ãŠã®ãšã³ããã€ã³ãã«è»¢éãããŸãã ãããã¯ãŒã¯ã¯ããããŒããã£ã¹ãå ã®ãã¹ãŠã®åä¿¡è (éåžžã¯åããµããããäž) ã«å°éã§ããããã«ãããŒã¿ã°ã©ã ãèªåçã«è€è£œããŸãã
ãžãªãã£ã¹ã
ãžãªãã£ã¹ãã¯ãã«ããã£ã¹ãã«äŒŒãŠããŸããéä¿¡è ããã®ãªã¯ãšã¹ãã¯è€æ°ã®ãšã³ããã€ã³ãã«åæã«éä¿¡ãããŸãã ãã ããå®å ãå°ççäœçœ®ã«ãã£ãŠæ±ºãŸããšããç¹ãç°ãªããŸãã ããã¯ãã¢ãã€ã« ã¢ããã㯠ãããã¯ãŒã¯ã®äžéšã®ã«ãŒãã£ã³ã° ãããã³ã«ã§äœ¿çšãããç¹æ®ãªåœ¢åŒã®ãã«ããã£ã¹ãã§ãã
å°çã«ãŒã¿ãŒã¯ãµãŒãã¹ãšãªã¢ãèšç®ããŠè¿äŒŒããŸãã ãžãªã«ãŒã¿ãŒã¯ãµãŒãã¹ãšãªã¢ã亀æããã«ãŒãã£ã³ã°ããŒãã«ãæ§ç¯ããŸãã ãžãªã«ãŒã¿ãŒ ã·ã¹ãã ã¯éå±€æ§é ãæã£ãŠããŸãã
ãŠããã£ã¹ãããã«ããã£ã¹ãããããŒããã£ã¹ãã
ãšããŒãã£ã¹ã ãã¯ãããžãŒã䜿çšãããšãDNS ã®ä¿¡é Œæ§ãèé害æ§ãã»ãã¥ãªãã£ã®ã¬ãã«ãåäžããŸãã ãã®ãã¯ãããžãŒã䜿çšããŠãéä¿¡äºæ¥è ã¯ãDNS ã«åºã¥ããããŸããŸãªã¿ã€ãã®è² è·åæ£ãµãŒãã¹ãã¯ã©ã€ã¢ã³ãã«æäŸããŸãã ã³ã³ãããŒã« ããã«ã§ã¯ãå°ççäœçœ®ã«å¿ããŠãªã¯ãšã¹ãã®éä¿¡å ãšãªã IP ã¢ãã¬ã¹ãæå®ã§ããŸãã ããã«ãããã¯ã©ã€ã¢ã³ãã¯ãŠãŒã¶ãŒã®ãªã¯ãšã¹ããããæè»ã«åæ£ããæ©äŒãåŸãããŸãã
äžéšã®éä¿¡äºæ¥è ã¯ãå Point of Presence (POP) ã«ã«ãŒãç£èŠæ©èœãå®è£ ããŠããŸããã·ã¹ãã ã¯ãPoint of Presence ã®æçã®ããŒã«ã«ããã³ã°ããŒãã« ã«ãŒããèªåçã«åæããããŠã³ã¿ã€ã ãªãã§é 延ãæãçãå°ççå Žæãçµç±ããŠã«ãŒããã«ãŒãã£ã³ã°ããŸãã
çŸæç¹ã§ã¯ããšããŒãã£ã¹ãã¯ãå®å®æ§ãšä¿¡é Œæ§ã«å¯Ÿããé«ãèŠä»¶ãæ±ããããé«è² è·ã® DNS ãµãŒãã¹ãæ§ç¯ããããã®æãå®å®æ§ãšä¿¡é Œæ§ã®é«ããœãªã¥ãŒã·ã§ã³ã§ãã
.ru ãã¡ã€ã³ã¯ã35 ã€ã® Anycast ã¯ã©ãŠãã«åæ£ããã 20 ããŒãã«ã°ã«ãŒãåããã XNUMX ã® Anycast DNS ãµãŒããŒããµããŒãããŸãã ãã®å Žåãå°ççç¹æ§ã«åºã¥ããæ§ç¯ã®ååã䜿çšãããŸãã ãžãªãã£ã¹ãã DNS ããŒããé 眮ããå Žåãæãã¢ã¯ãã£ããªãŠãŒã¶ãŒã«è¿ãå°ççã«åæ£ããå ŽæãããŒããé 眮ãããå Žæã§ã®ãã·ã¢ã®ãããã€ããŒã®æ倧éäžãããã³ç©ºã容éã®å©çšå¯èœæ§ãšå®¹æ㪠DNS ããŒãã«ç§»åããããšãæ³å®ãããŠããŸãããµã€ããšã®ããåãã
CDN ãæ§ç¯ããã«ã¯ã©ãããã°ããã§ãã?
CDN ã¯ããŠãŒã¶ãŒãžã®ã³ã³ãã³ãã®é
ä¿¡ãé«éåãããµãŒããŒã®ãããã¯ãŒã¯ã§ãã
CDN ã䜿çšãããšã察象ãŠãŒã¶ãŒã«æãè¿ããµãŒããŒã䜿çšã§ããŸãã ããã«ãããåŸ ã¡æéãççž®ããããã¹ãŠã®èšªåè ã«å¯Ÿãããµã€ã ã³ã³ãã³ãã®èªã¿èŸŒã¿é床ãåäžããŸããããã¯ã倧ããªãã¡ã€ã«ããã«ãã¡ãã£ã¢ ãµãŒãã¹ãå«ããµã€ãã§ã¯ç¹ã«éèŠã§ãã CDN ã®å žåçãªã¢ããªã±ãŒã·ã§ã³ã¯ãé»ååååŒãšãšã³ã¿ãŒãã€ã¡ã³ãã§ãã
CDN ã€ã³ãã©ã¹ãã©ã¯ãã£å ã«äœæãããè¿œå ãµãŒããŒã®ãããã¯ãŒã¯ã¯ããŠãŒã¶ãŒã«ã§ããã ãè¿ãå Žæã«é 眮ãããããå®å®ããé«éãªããŒã¿é ä¿¡ã«è²¢ç®ããŸãã çµ±èšã«ãããšãCDN ã䜿çšãããšãCDN ã䜿çšããªããµã€ããšæ¯èŒããŠããµã€ãã«ã¢ã¯ã»ã¹ãããšãã®é 延ã 70% 以äžççž®ãããŸãã
Ðак
GeoDNS ã䜿çšãããšããŠãŒã¶ãŒã® IP ã¢ãã¬ã¹ã«å¿ããŠç°ãªã DNS å¿çãè¿ãããšãã§ããŸãã ãããè¡ãããã«ãDNS ãµãŒããŒã¯ãèŠæ±å ã®éä¿¡å IP ã¢ãã¬ã¹ã«å¿ããŠç°ãªã IP ã¢ãã¬ã¹ãè¿ãããã«æ§æãããŠããŸãã éåžžãGeoIP ããŒã¿ããŒã¹ã¯ããªã¯ãšã¹ãã®éä¿¡å ã®å°åã決å®ããããã«äœ¿çšãããŸãã DNS ã䜿çšããå°çäœçœ®æ å ±ã«ãããè¿ãã®ãµã€ããããŠãŒã¶ãŒã«ã³ã³ãã³ããéä¿¡ã§ããŸãã
GeoDNS ã¯ãDNS èŠæ±ãéä¿¡ããã¯ã©ã€ã¢ã³ãã® IP ã¢ãã¬ã¹ããŸãã¯ã¯ã©ã€ã¢ã³ãèŠæ±ã®åŠçæã«äœ¿çšããããããã€ããŒã®ååž° DNS ãµãŒããŒã® IP ã¢ãã¬ã¹ã決å®ããŸãã åœ/å°åã¯ãã¯ã©ã€ã¢ã³ãã® IP ããã³ GeoIP ããŒã¿ããŒã¹ã«ãã£ãŠæ±ºå®ãããŸãã 次ã«ãã¯ã©ã€ã¢ã³ãã¯æãè¿ã CDN ãµãŒããŒã® IP ã¢ãã¬ã¹ãååŸããŸãã GeoDNS ã®èšå®ã«ã€ããŠè©³ããã¯ããã¡ããã芧ãã ããã
ãšããŒãã£ã¹ããGeoDNSã?
ãšããŒãã£ã¹ãã¯ã³ã³ãã³ããäžçèŠæš¡ã§é ä¿¡ããåªããæ¹æ³ã§ãããå ·äœæ§ã«æ¬ ããŸãã ããã§ãGeoDNS ã圹ã«ç«ã¡ãŸãã ãã®ãµãŒãã¹ã䜿çšãããšããŠãŒã¶ãŒãå Žæã«åºã¥ããŠäžæã®ãšã³ããã€ã³ãã«éä¿¡ããã«ãŒã«ãäœæã§ããŸãã
äŸ: ãšãŒãããã®ãŠãŒã¶ãŒã¯å¥ã®ãšã³ããã€ã³ãã«èªå°ãããŸãã
ãã¹ãŠã®ãªã¯ãšã¹ããç Žæ£ããŠããã¡ã€ã³ãžã®ã¢ã¯ã»ã¹ãæåŠããããšãã§ããŸãã ããã¯ç¹ã«ãäŸµå ¥è ãçŽ æ©ãé®æããæ¹æ³ã§ãã
GeoDNS ã¯ãšããŒãã£ã¹ããããæ£ç¢ºãªåçãæäŸããŸãã ãšããŒãã£ã¹ãã®å Žåãæçã«ãŒãããããæ°ã«ãã£ãŠæ±ºå®ãããå ŽåãGeoDNS ã§ã¯ããšã³ã ãŠãŒã¶ãŒã®ç©ççãªäœçœ®ã«å¿ããŠãšã³ã ãŠãŒã¶ãŒã®ã«ãŒãã£ã³ã°ãçºçããŸãã ããã«ãããé 延ãççž®ããã詳现ãªã«ãŒãã£ã³ã° ã«ãŒã«ãäœæããéã®ç²ŸåºŠãåäžããŸãã
ãã¡ã€ã³ã«ç§»åãããšããã©ãŠã¶ã¯æãè¿ã DNS ãµãŒããŒã«æ¥ç¶ãããã¡ã€ã³ã«å¿ããŠããµã€ããããŒãããããã® IP ã¢ãã¬ã¹ãçºè¡ããŸãã ãªã³ã©ã€ã³ ã¹ãã¢ã¯ç±³åœãšãšãŒãããã§äººæ°ããããŸããããã®ãªã³ã©ã€ã³ ã¹ãã¢ã® DNS ãµãŒããŒã¯ãšãŒãããã§ã®ã¿å©çšã§ãããšä»®å®ããŸãã ãã®å Žåãã¹ãã¢ã®ãµãŒãã¹ãå©çšãããç±³åœã®ãŠãŒã¶ãŒã¯ãæå¯ãã®ãµãŒããŒã«ãªã¯ãšã¹ããéä¿¡ããå¿ èŠããããŸããããµãŒããŒãéåžžã«é ããããå¿çãŸã§é·ãæéåŸ ããªããã°ãªããããµã€ãã¯ããã«èªã¿èŸŒãŸããŸããã
GeoDNS ãµãŒããŒãç±³åœã«ããå ŽåããŠãŒã¶ãŒã¯ãã§ã«ãã®ãµãŒããŒã«ã¢ã¯ã»ã¹ããŠããŸãã å¿çãæ©ããªãããµã€ãã®èªã¿èŸŒã¿é床ã«åœ±é¿ããŸãã
ç±³åœã«æ¢åã® DNS ãµãŒããŒãããç¶æ³ã§ã¯ãç±³åœã®ãŠãŒã¶ãŒãç¹å®ã®ãã¡ã€ã³ã«ç§»åãããšãå¿ èŠãª IP ãæäŸããæãè¿ããµãŒããŒã«æ¥ç¶ããŸãã ãŠãŒã¶ãŒã¯ãµã€ãã®ã³ã³ãã³ããå«ããµãŒããŒã«ãªãã€ã¬ã¯ããããŸãããã³ã³ãã³ãã®ãããµãŒããŒã¯é¢ããŠãããããããã«ã¯ã³ã³ãã³ããåä¿¡ã§ããŸããã
ãã£ãã·ã¥ãããããŒã¿ã䜿çšããŠç±³åœã§ CDN ãµãŒããŒããã¹ãããŠããå Žåãã¯ã©ã€ã¢ã³ã ãã©ãŠã¶ãŒã¯ããŒãæã«æãè¿ã DNS ãµãŒããŒã«ãªã¯ãšã¹ããéä¿¡ããå¿ èŠãª IP ã¢ãã¬ã¹ãè¿éãããŸãã åä¿¡ãã IP ãæã€ãã©ãŠã¶ã¯ãæå¯ãã® CDN ãµãŒããŒãšã¡ã€ã³ ãµãŒããŒã«æ¥ç¶ããCDN ãµãŒããŒã¯ãã£ãã·ã¥ãããã³ã³ãã³ãããã©ãŠã¶ã«æäŸããŸãã ãã£ãã·ã¥ãããã³ã³ãã³ãã®ããŒãäžã«ããµã€ãå šäœãããŒãããããã«äžè¶³ããŠãããã¡ã€ã«ãã¡ã€ã³ ãµãŒããŒããåä¿¡ãããŸãã ãã®çµæãã¡ã€ã³ ãµãŒããŒããéä¿¡ããããã¡ã€ã«ãå€§å¹ ã«æžãããµã€ãã®èªã¿èŸŒã¿æéãççž®ãããŸãã
ç¹å®ã® IP ã¢ãã¬ã¹ã®æ£ç¢ºãªå Žæãç¹å®ããããšã¯ãå¿ ãããç°¡åãªäœæ¥ã§ã¯ãããŸãããå€ãã®èŠå ãé¢ä¿ããŠãããããŸããŸãª IP ã¢ãã¬ã¹ã®ææè ãããã® IP ã¢ãã¬ã¹ãå°çã®å察åŽã«ã¢ããã¿ã€ãºããããšã決å®ããå ŽåããããŸã (ãã®å Žåã¯ãæ£ããå ŽæãååŸããã«ã¯ãããŒã¿ããŒã¹ãæŽæ°ããããŸã§åŸ ã¡ãŸã)ã VPS ãããã€ããŒã¯ãç±³åœã«ãããšæãããã¢ãã¬ã¹ãã·ã³ã¬ããŒã«ã® VPS ã«å²ãåœãŠãããšããããŸãã
ãšããŒãã£ã¹ã ã¢ãã¬ã¹ã䜿çšããå Žåãšã¯ç°ãªããé åžã¯ãã£ãã·ã¥ ãµãŒããŒãžã®æ¥ç¶äžã§ã¯ãªããåå解決äžã«è¡ãããŸãã ååž°ãµãŒããŒã EDNS ã¯ã©ã€ã¢ã³ã ãµããããããµããŒãããŠããªãå Žåã¯ããã£ãã·ã¥ ãµãŒããŒã«æ¥ç¶ãããŠãŒã¶ãŒã§ã¯ãªãããã®ååž°ãµãŒããŒã®å Žæã䜿çšãããŸãã
DNS ã®ã¯ã©ã€ã¢ã³ã ãµããããã¯ãååž° DNS ãµãŒããŒãã¯ã©ã€ã¢ã³ãæ å ±ãç¹ã« GeoDNS ãµãŒããŒãã¯ã©ã€ã¢ã³ãã®äœçœ®ãããæ£ç¢ºã«å€æããããã«äœ¿çšã§ãããããã¯ãŒã¯æ å ±ã DNS ãµãŒããŒã«éä¿¡ããæ¹æ³ãå®çŸ©ãã DNS (RFC7871) ã®æ¡åŒµæ©èœã§ãã
ã»ãšãã©ã®å ŽåãISP ã® DNS ãµãŒããŒããŸãã¯å°ççã«è¿ã DNS ãµãŒããŒã䜿çšããŸãããç±³åœå ã®èª°ããäœããã®çç±ã§ãªãŒã¹ãã©ãªã¢ã«ãã DNS ãªãŸã«ããŒã䜿çšããããšã«ããå ŽåããªãŒã¹ãã©ãªã¢ã«æãè¿ã IP ãµãŒã㌠ã¢ãã¬ã¹ã䜿çšããããšã«ãªãå¯èœæ§ããããŸãã
GeoDNS ã䜿çšããå Žåã¯ãå Žåã«ãã£ãŠã¯ãã£ãã·ã¥ ãµãŒããŒãšã¯ã©ã€ã¢ã³ãéã®è·é¢ãé·ããªãå¯èœæ§ãããããããããã®æ©èœãèªèããŠããããšãéèŠã§ãã
æŠèŠ: è€æ°ã® VPS ã XNUMX ã€ã® CDN ã«çµåããå Žåãæè¯ã®å±éãªãã·ã§ã³ã¯ãGeoDNS + Anycast æ©èœãåãã DNS ãµãŒã㌠ãã³ãã«ããã®ãŸãŸäœ¿çšããããšã§ãã
åºæïŒ habr.com