IT ã€ã³ãã©ã¹ãã©ã¯ãã£å šäœããããªã㯠ã¯ã©ãŠãã«å°å ¥ãããŠãŒã¶ãŒããŸããŸãå¢ããŠããŸãã ããããã客æ§ã®ã€ã³ãã©ã¹ãã©ã¯ãã£ã®ãŠã€ã«ã¹å¯Ÿç管çãäžååãªå Žåãé倧ãªãµã€ããŒãªã¹ã¯ãçºçããŸãã å®éã«ã¯ãæ¢åã®ãŠã€ã«ã¹ã®æ倧 80% ãä»®æ³ç°å¢å ã§å®å šã«çåããŠããããšãããã£ãŠããŸãã ãã®èšäºã§ã¯ããããªã㯠ã¯ã©ãŠã㧠IT ãªãœãŒã¹ãä¿è·ããæ¹æ³ãšãåŸæ¥ã®ãŠã€ã«ã¹å¯Ÿçããããã®ç®çã«å®å šã«é©ããŠããªãçç±ã«ã€ããŠèª¬æããŸãã
ãŸããéåžžã®ãŠã€ã«ã¹å¯Ÿçä¿è·ããŒã«ã¯ãããªã㯠ã¯ã©ãŠãã«ã¯é©ããŠãããããªãœãŒã¹ãä¿è·ããã«ã¯å¥ã®ã¢ãããŒããå¿
èŠã§ãããšããèãã«ã©ã®ããã«ããŠè³ã£ãã®ãã説æããŸãã
ãŸãããããã€ããŒã¯éåžžãã¯ã©ãŠã ãã©ãããã©ãŒã ãé«ã¬ãã«ã§ä¿è·ãããããã«ããããã«å¿ èŠãªæªçœ®ãæäŸããŸãã ããšãã°ã#CloudMTS ã§ã¯ããã¹ãŠã®ãããã¯ãŒã¯ ãã©ãã£ãã¯ãåæããã¯ã©ãŠãã®ã»ãã¥ãªã㣠ã·ã¹ãã ã®ãã°ãç£èŠããäŸµå ¥ãã¹ããå®æçã«å®è¡ããŠããŸãã åã ã®ã¯ã©ã€ã¢ã³ãã«å²ãåœãŠãããã¯ã©ãŠã ã»ã°ã¡ã³ããå®å šã«ä¿è·ããå¿ èŠããããŸãã
次ã«ããµã€ã㌠ãªã¹ã¯ã«å¯ŸåŠããããã®å€å žçãªãªãã·ã§ã³ã«ã¯ãåä»®æ³ãã·ã³ã«ãŠã€ã«ã¹å¯ŸçããŒã«ãšãŠã€ã«ã¹å¯Ÿç管çããŒã«ãã€ã³ã¹ããŒã«ããããšãå«ãŸããŸãã ãã ããä»®æ³ãã·ã³ã®æ°ãå€ãå Žåããã®æ¹æ³ã¯å¹æããªãã倧éã®ã³ã³ãã¥ãŒãã£ã³ã° ãªãœãŒã¹ãå¿ èŠãšããããã顧客ã®ã€ã³ãã©ã¹ãã©ã¯ãã£ã«ããã«è² è·ãããããã¯ã©ãŠãã®å šäœçãªããã©ãŒãã³ã¹ãäœäžããå¯èœæ§ããããŸãã ããã¯ã顧客ã®ä»®æ³ãã·ã³ã«å¯Ÿããå¹æçãªãŠã€ã«ã¹å¯Ÿçä¿è·ãæ§ç¯ããããã®æ°ããã¢ãããŒãã暡玢ããããã®éèŠãªåææ¡ä»¶ãšãªã£ãŠããŸãã
ããã«ãåžå Žã«åºåã£ãŠããã»ãšãã©ã®ãŠã€ã«ã¹å¯Ÿçãœãªã¥ãŒã·ã§ã³ã¯ããããªã㯠ã¯ã©ãŠãç°å¢ã§ã® IT ãªãœãŒã¹ã®ä¿è·ã®åé¡ã解決ããããã«ã¯é©å¿ãããŠããŸããã ååãšããŠããããã¯ééçŽã® EPP ãœãªã¥ãŒã·ã§ã³ (ãšã³ããã€ã³ãä¿è·ãã©ãããã©ãŒã ) ã§ãããããã«ãã¯ã©ãŠã ãããã€ããŒã®ã¯ã©ã€ã¢ã³ãåŽã§å¿ èŠãªã«ã¹ã¿ãã€ãºãæäŸããŸããã
åŸæ¥ã®ãŠã€ã«ã¹å¯Ÿçãœãªã¥ãŒã·ã§ã³ã¯ãæŽæ°ãã¹ãã£ã³äžã«ä»®æ³ã€ã³ãã©ã¹ãã©ã¯ãã£ã«æ·±å»ãªè² è·ããããå¿ èŠãªã¬ãã«ã®åœ¹å²ããŒã¹ã®ç®¡çãèšå®ãåããŠããªããããã¯ã©ãŠãã§ã®äœæ¥ã«ã¯ããŸãé©ããŠããªãããšãæããã§ãã 次ã«ãã¯ã©ãŠãã«ãŠã€ã«ã¹å¯Ÿçä¿è·ã«å¯Ÿããæ°ããã¢ãããŒããå¿ èŠãªçç±ã詳ããåæããŸãã
ãããªã㯠ã¯ã©ãŠãã®ãŠã€ã«ã¹å¯ŸçããŒã«ã§ã§ããããš
ããã§ã¯ãä»®æ³ç°å¢ã§ã®äœæ¥ã®è©³çŽ°ã«æ³šç®ããŠã¿ãŸãããã
ã¢ããããŒããšã¹ã±ãžã¥ãŒã«ãããäžæ¬ã¹ãã£ã³ã®å¹çã åŸæ¥ã®ãŠã€ã«ã¹å¯ŸçãœãããŠã§ã¢ã䜿çšããŠããå€æ°ã®ä»®æ³ãã·ã³ãåæã«æŽæ°ãéå§ãããšããããããåµãã®ãããªæŽæ°ãã¯ã©ãŠãã§çºçããŸãã è€æ°ã®ä»®æ³ãã·ã³ããã¹ããã ESXi ãã¹ãã®èœåã¯ãããã©ã«ãã§å®è¡ãããåæ§ã®ã¿ã¹ã¯ã®éäžåŠçãåŠçããã«ã¯ååã§ã¯ãªãå¯èœæ§ããããŸãã ã¯ã©ãŠã ãããã€ããŒã®èŠ³ç¹ããèŠããšããã®ãããªåé¡ã¯å€ãã® ESXi ãã¹ãã«ãããªãè² è·ãäžããå¯èœæ§ããããæçµçã«ã¯ã¯ã©ãŠãä»®æ³ã€ã³ãã©ã¹ãã©ã¯ãã£ã®ããã©ãŒãã³ã¹ã®äœäžã«ã€ãªãããŸãã ããã¯ãä»ã®ã¯ã©ãŠã ã¯ã©ã€ã¢ã³ãã®ä»®æ³ãã·ã³ã®ããã©ãŒãã³ã¹ã«åœ±é¿ãäžããå¯èœæ§ããããŸãã äžæ¬ã¹ãã£ã³ãéå§ãããšãã«ãåæ§ã®ç¶æ³ãçºçããå¯èœæ§ããããŸããç°ãªããŠãŒã¶ãŒããã®å€æ°ã®åæ§ã®ãªã¯ãšã¹ãããã£ã¹ã¯ ã·ã¹ãã ãåæã«åŠçãããšãã¯ã©ãŠãå šäœã®ããã©ãŒãã³ã¹ã«æªåœ±é¿ãåãŒããŸãã ã¹ãã¬ãŒãž ã·ã¹ãã ã®ããã©ãŒãã³ã¹ã®äœäžã¯ãé«ã確çã§ãã¹ãŠã®ã¯ã©ã€ã¢ã³ãã«åœ±é¿ããŸãã ãã®ãããªçªç¶ã®è² è·ã¯ãã¯ã©ãŠãå ã®ãè¿é£ãã«åœ±é¿ãäžããããããããã€ããŒã«ãšã£ãŠã顧客ã«ãšã£ãŠã奜ãŸãããããŸããã ãã®èŠ³ç¹ããèŠããšãåŸæ¥ã®ãŠã€ã«ã¹å¯ŸçãœãããŠã§ã¢ã¯å€§ããªåé¡ãåŒãèµ·ããå¯èœæ§ããããŸãã
å®å šãªéé¢ã ãŠã€ã«ã¹ã«ææããŠããå¯èœæ§ã®ãããã¡ã€ã«ãŸãã¯ããã¥ã¡ã³ããã·ã¹ãã äžã§æ€åºãããå Žåãããã¯éé¢ã«éãããŸãã ãã¡ãããææãããã¡ã€ã«ã¯ããã«åé€ã§ããŸãããããã¯ã»ãšãã©ã®äŒæ¥ã«ãšã£ãŠåãå ¥ããããªãããšããããããŸãã ãããã€ããŒã®ã¯ã©ãŠãã§ã®åäœã«é©å¿ããŠããªãäŒæ¥åããŠã€ã«ã¹å¯Ÿç補åã«ã¯ãååãšããŠå ±éã®éé¢ãŸãŒã³ããããææãããªããžã§ã¯ãã¯ãã¹ãŠããã«åé¡ãããŸãã ããšãã°ãäŒæ¥ãŠãŒã¶ãŒã®ã³ã³ãã¥ãŒã¿ã«ãããã®ãªã©ã§ãã ã¯ã©ãŠã ãããã€ããŒã®ã¯ã©ã€ã¢ã³ãã¯ãç¬èªã®ã»ã°ã¡ã³ã (ãŸãã¯ããã³ã) ã«ãååšãããŸãã ãããã®ã»ã°ã¡ã³ãã¯äžéæã§å€ç«ããŠããŸããã¯ã©ã€ã¢ã³ãã¯ãäºãã®ããšãç¥ããŸãããããã¡ãããã¯ã©ãŠãã§ä»ã®ã¯ã©ã€ã¢ã³ããäœããã¹ãããŠããã®ããç¥ããŸããã æããã«ãã¯ã©ãŠãå ã®ãã¹ãŠã®ãŠã€ã«ã¹å¯ŸçãŠãŒã¶ãŒãã¢ã¯ã»ã¹ããäžè¬çãªéé¢ã«ã¯ãæ©å¯æ å ±ãäŒæ¥ç§å¯ãå«ãææžãå«ãŸããå¯èœæ§ããããŸãã ããã¯ãããã€ããŒãšãã®é¡§å®¢ã«ãšã£ãŠå®¹èªã§ããªãããšã§ãã ãããã£ãŠã解決ç㯠XNUMX ã€ãããããŸãããããã¯ããããã€ããŒãä»ã®ã¯ã©ã€ã¢ã³ããã¢ã¯ã»ã¹ã§ããªããã»ã°ã¡ã³ãå ã®åã¯ã©ã€ã¢ã³ãã®å人éé¢ã§ãã
åå¥ã®ã»ãã¥ãªã㣠ããªã·ãŒã ã¯ã©ãŠãå ã®åã¯ã©ã€ã¢ã³ãã¯å¥åã®äŒç€Ÿã§ããããã® IT éšéã¯ç¬èªã®ã»ãã¥ãªã㣠ããªã·ãŒãèšå®ããŸãã ããšãã°ã管çè ã¯ã¹ãã£ã³ ã«ãŒã«ãå®çŸ©ãããŠã€ã«ã¹å¯Ÿçã¹ãã£ã³ãã¹ã±ãžã¥ãŒã«ããŸãã ãããã£ãŠããŠã€ã«ã¹å¯Ÿçããªã·ãŒãæ§æããã«ã¯ãåçµç¹ãç¬èªã®ã³ã³ãããŒã« ã»ã³ã¿ãŒãçšæããå¿ èŠããããŸãã åæã«ãæå®ãããèšå®ã¯ä»ã®ã¯ã©ãŠã ã¯ã©ã€ã¢ã³ãã«åœ±é¿ãäžããŠã¯ãªããããããã€ããŒã¯ãããšãã°ãŠã€ã«ã¹å¯Ÿçã®æŽæ°ããã¹ãŠã®ã¯ã©ã€ã¢ã³ãä»®æ³ãã·ã³ã«å¯ŸããŠéåžžã©ããå®è¡ãããããšã確èªã§ããå¿ èŠããããŸãã
è«æ±ãšã©ã€ã»ã³ã¹ã®æ§æã ã¯ã©ãŠã ã¢ãã«ã¯æè»æ§ãç¹åŸŽã§ãæéã¯é¡§å®¢ã䜿çšãã IT ãªãœãŒã¹ã®éã«å¯ŸããŠã®ã¿çºçããŸãã ããšãã°ãå£ç¯æ§ãªã©ã«ããå¿ èŠæ§ãããå ŽåããªãœãŒã¹ã®éã¯ãçŸåšã®ã³ã³ãã¥ãŒãã£ã³ã°èœåã®ããŒãºã«åºã¥ããŠãããã«å¢æžã§ããŸãã åŸæ¥ã®ãŠã€ã«ã¹å¯Ÿçã¯ããã»ã©æè»æ§ããããŸãããååãšããŠãã¯ã©ã€ã¢ã³ãã¯ãããããã決ããããæ°ã®ãµãŒããŒãŸãã¯ã¯ãŒã¯ã¹ããŒã·ã§ã³ã«å¯Ÿã㊠XNUMX 幎éã®ã©ã€ã»ã³ã¹ãè³Œå ¥ããŸãã ã¯ã©ãŠã ãŠãŒã¶ãŒã¯ãçŸåšã®ããŒãºã«å¿ããŠè¿œå ã®ä»®æ³ãã·ã³ãå®æçã«åæãããæ¥ç¶ãããããããããŠã€ã«ã¹å¯Ÿçã©ã€ã»ã³ã¹ã¯åãã¢ãã«ããµããŒãããå¿ èŠããããŸãã
XNUMX çªç®ã®è³ªåã¯ãã©ã€ã»ã³ã¹ãå ·äœçã«äœãã«ããŒããã®ããšããããšã§ãã åŸæ¥ã®ãŠã€ã«ã¹å¯Ÿçã¯ããµãŒããŒãŸãã¯ã¯ãŒã¯ã¹ããŒã·ã§ã³ã®æ°ã«å¿ããŠã©ã€ã»ã³ã¹ãä»äžãããŸãã ä¿è·ãããä»®æ³ãã·ã³ã®æ°ã«åºã¥ãã©ã€ã»ã³ã¹ã¯ãã¯ã©ãŠã ã¢ãã«å ã«ã¯å®å šã«é©ããŠããããã§ã¯ãããŸããã ã¯ã©ã€ã¢ã³ãã¯ãå©çšå¯èœãªãªãœãŒã¹ããéœåã®ããæ°ã®ä»®æ³ãã·ã³ (ããšãã°ãXNUMX å°ãŸã㯠XNUMX å°ã®ãã·ã³) ãäœæã§ããŸãã ãã®æ°å€ã¯ã»ãšãã©ã®ã¯ã©ã€ã¢ã³ãã«ãšã£ãŠäžå®ã§ã¯ãªãããããã€ããŒãšããŠãã®å€åã远跡ããããšã¯ã§ããŸããã CPU ããšã«ã©ã€ã»ã³ã¹ãååŸããæè¡çãªå¯èœæ§ã¯ãããŸãããã¯ã©ã€ã¢ã³ãã¯ä»®æ³ããã»ããµ (vCPU) ãåãåãããããã©ã€ã»ã³ã¹ã«äœ¿çšããå¿ èŠããããŸãã ãããã£ãŠãæ°ãããŠã€ã«ã¹å¯Ÿçä¿è·ã¢ãã«ã«ã¯ããŠã€ã«ã¹å¯Ÿçã©ã€ã»ã³ã¹ãåãåãããã«å¿ èŠãª vCPU ã®æ°ã顧客ã決å®ã§ããæ©èœãå«ãŸããŠããå¿ èŠããããŸãã
æ³ä»€ã®éµå®ã 䜿çšããããœãªã¥ãŒã·ã§ã³ã¯èŠå¶åœå±ã®èŠä»¶ã«ç¢ºå®ã«æºæ ããå¿ èŠããããããããã¯éèŠãªç¹ã§ãã ããšãã°ãã¯ã©ãŠãã®ãåžžé§è ãã¯å人ããŒã¿ãæ±ãããšããããããŸãã ãã®å Žåããããã€ããŒã¯ãå人ããŒã¿æ³ã®èŠä»¶ã«å®å šã«æºæ ãããèªå®ãããã¯ã©ãŠã ã»ã°ã¡ã³ããå¥ã«æã€å¿ èŠããããŸãã ããããã°ãäŒæ¥ã¯å人ããŒã¿ãæ±ãããã®ã·ã¹ãã å šäœãç¬èªã«ãæ§ç¯ãããå¿ èŠããªããªããŸããèªå®ãããæ©åšãè³Œå ¥ããæ¥ç¶ããŠæ§æããèªå®ãåããå¿ èŠããããŸãã ãã®ãããªã¯ã©ã€ã¢ã³ãã® ISPD ããµã€ããŒä¿è·ããããã«ããŠã€ã«ã¹å¯ŸçãœãããŠã§ã¢ã¯ãã·ã¢ã®æ³åŸã®èŠä»¶ã«ãæºæ ããFSTEC 蚌ææžãååŸããŠããå¿ èŠããããŸãã
ãããªã㯠ã¯ã©ãŠãã®ãŠã€ã«ã¹å¯Ÿçä¿è·ãæºãããªããã°ãªããªãå¿ é ã®åºæºãæ€èšããŸããã 次ã«ããããã€ããŒã®ã¯ã©ãŠãã§åäœããããã«ãŠã€ã«ã¹å¯Ÿçãœãªã¥ãŒã·ã§ã³ãé©å¿ãããç§ãã¡èªèº«ã®çµéšãå ±æããŸãã
ã©ãããã°ãŠã€ã«ã¹å¯Ÿçãšã¯ã©ãŠãã仲è¯ãã§ããã§ãããã?
ç§ãã¡ã®çµéšã瀺ããŠããããã«ã説æãšããã¥ã¡ã³ãã«åºã¥ããŠãœãªã¥ãŒã·ã§ã³ãéžæããããšã¯å¥ã®ããšã§ããããã§ã«çšŒåããŠããã¯ã©ãŠãç°å¢ã«ãããå®éã«å®è£ ããããšã¯ãè€éãã®ç¹ã§ãŸã£ããå¥ã®ã¿ã¹ã¯ã«ãªããŸãã ç§ãã¡ãå®éã«äœãè¡ã£ããããããŠãããã€ããŒã®ãããªã㯠ã¯ã©ãŠãã§åäœããããã«ãŠã€ã«ã¹å¯ŸçãœãããŠã§ã¢ãã©ã®ããã«é©å¿ããããã«ã€ããŠèª¬æããŸãã ãŠã€ã«ã¹å¯Ÿçãœãªã¥ãŒã·ã§ã³ã®ãã³ããŒã¯ Kaspersky ã§ããã®ããŒããã©ãªãªã«ã¯ã¯ã©ãŠãç°å¢åãã®ãŠã€ã«ã¹å¯Ÿçä¿è·ãœãªã¥ãŒã·ã§ã³ãå«ãŸããŠããŸãã ç§ãã¡ã¯ãKaspersky Security for VirtualizationãïŒã©ã€ããšãŒãžã§ã³ãïŒã«èœã¡çããŸããã
ããã«ã¯ãåäžã® Kaspersky Security Center ã³ã³ãœãŒã«ãå«ãŸããŠããŸãã ã©ã€ã ãšãŒãžã§ã³ããšã»ãã¥ãªãã£ä»®æ³ãã·ã³ (SVMãã»ãã¥ãªãã£ä»®æ³ãã·ã³)ãããã³ KSC çµ±åãµãŒããŒã
ã«ã¹ãã«ã¹ã㌠ãœãªã¥ãŒã·ã§ã³ã®ã¢ãŒããã¯ãã£ãç 究ãããã³ããŒã®ãšã³ãžãã¢ãšäžç·ã«æåã®ãã¹ããå®æœããåŸããµãŒãã¹ãã¯ã©ãŠãã«çµ±åãããã©ãããšããçåãçããŸããã æåã®å®è£ ã¯ã¢ã¹ã¯ã¯ã®ã¯ã©ãŠã ãµã€ãã§å ±åã§å®æœãããŸããã ãããŠãããç§ãã¡ãæ°ã¥ããããšã§ãã
ãããã¯ãŒã¯ ãã©ãã£ãã¯ãæå°éã«æããããã«ãå ESXi ãã¹ãã« SVM ãé 眮ããSVM ã ESXi ãã¹ãã«ãçµã³ä»ãããããšã決å®ãããŸããã ãã®å Žåãä¿è·ãããä»®æ³ãã·ã³ã®ã©ã€ã ãšãŒãžã§ã³ãã¯ãããããå®è¡ãããŠããæ£ç¢ºãª ESXi ãã¹ãã® SVM ã«ã¢ã¯ã»ã¹ããŸãã ã¡ã€ã³ KSC ã«ã¯å¥ã®ç®¡çããã³ããéžæãããŸããã ãã®çµæãäžäœ KSC ã¯åã¯ã©ã€ã¢ã³ãã®ããã³ãã«é 眮ããã管çã»ã°ã¡ã³ãã«é 眮ãããäžäœ KSC ã«å¯Ÿå¿ããŸãã ãã®ã¹ããŒã ã«ãããã¯ã©ã€ã¢ã³ã ããã³ãã§çºçããåé¡ãè¿ éã«è§£æ±ºã§ããŸãã
ãŠã€ã«ã¹å¯Ÿçãœãªã¥ãŒã·ã§ã³èªäœã®ã³ã³ããŒãã³ããå¢ãããšããåé¡ã«å ããŠãè¿œå ã® VxLAN ã®äœæãéããŠãããã¯ãŒã¯çžäºäœçšãçµç¹ãããšãã課é¡ã«ãçŽé¢ããŸããã ãã®ãœãªã¥ãŒã·ã§ã³ã¯ããšããšãã©ã€ããŒã ã¯ã©ãŠãã䜿çšããäŒæ¥ã¯ã©ã€ã¢ã³ãã察象ãšããŠããŸããããNSX Edge ã®ãšã³ãžãã¢ãªã³ã°ã®ç¥èãšæè¡çãªæè»æ§ã®ãããã§ãããã³ããšã©ã€ã»ã³ã¹ã®åé¢ã«é¢é£ãããã¹ãŠã®åé¡ã解決ããããšãã§ããŸããã
ç§ãã¡ã¯ã«ã¹ãã«ã¹ããŒã®ãšã³ãžãã¢ãšç·å¯ã«é£æºããŸããã ãããã£ãŠãã·ã¹ãã ã³ã³ããŒãã³ãéã®ãããã¯ãŒã¯çžäºäœçšã®èŠ³ç¹ãããœãªã¥ãŒã·ã§ã³ ã¢ãŒããã¯ãã£ãåæããéçšã§ãã©ã€ã ãšãŒãžã§ã³ããã SVM ãžã®ã¢ã¯ã»ã¹ã«å ããŠãSVM ããã©ã€ã ãšãŒãžã§ã³ããžã®ãã£ãŒãããã¯ãå¿ èŠã§ããããšãããããŸããã ç°ãªãã¯ã©ãŠã ããã³ãã®ä»®æ³ãã·ã³ã®ãããã¯ãŒã¯èšå®ãåäžã«ãªãå¯èœæ§ãããããããã«ãããã³ãç°å¢ã§ã¯ãã®ãããã¯ãŒã¯æ¥ç¶ã¯äžå¯èœã§ãã ãããã£ãŠãç§ãã¡ã®èŠæ±ã«å¿ããŠããã³ããŒã®ååã¯ãSVM ããã©ã€ã ãšãŒãžã§ã³ããžã®ãããã¯ãŒã¯æ¥ç¶ã®å¿ èŠæ§ãæé€ãããšãã芳ç¹ãããã©ã€ã ãšãŒãžã§ã³ããš SVM ã®éã®ãããã¯ãŒã¯çžäºäœçšã®ã¡ã«ããºã ãäœãçŽããŸããã
ãœãªã¥ãŒã·ã§ã³ãã¢ã¹ã¯ã¯ã®ã¯ã©ãŠã ãµã€ãã«å±éããŠãã¹ãããåŸãèªå®ãããã¯ã©ãŠã ã»ã°ã¡ã³ããå«ãä»ã®ãµã€ãã«ãœãªã¥ãŒã·ã§ã³ãè€è£œããŸããã ãã®ãµãŒãã¹ã¯çŸåšãåœå ã®ãã¹ãŠã®å°åã§å©çšå¯èœã§ãã
æ°ããã¢ãããŒãã®æ çµã¿ã«ãããæ å ±ã»ãã¥ãªã㣠ãœãªã¥ãŒã·ã§ã³ã®ã¢ãŒããã¯ãã£
ãããªã㯠ã¯ã©ãŠãç°å¢ã«ããããŠã€ã«ã¹å¯Ÿçãœãªã¥ãŒã·ã§ã³ã®äžè¬çãªéçšã¹ããŒã ã¯æ¬¡ã®ãšããã§ãã
ãããªãã¯ã¯ã©ãŠãç°å¢ã«ããããŠã€ã«ã¹å¯Ÿçãœãªã¥ãŒã·ã§ã³ã®éçšã¹ããŒã #CloudMTS
ã¯ã©ãŠãã«ããããœãªã¥ãŒã·ã§ã³ã®åã ã®èŠçŽ ã®åäœã®ç¹åŸŽã説æããŸãããã
⢠åäžã®ã³ã³ãœãŒã«ã«ãããã¯ã©ã€ã¢ã³ãã¯ã¹ãã£ã³ã®å®è¡ãæŽæ°ã®å¶åŸ¡ãéé¢ãŸãŒã³ã®ç£èŠãªã©ãä¿è·ã·ã¹ãã ãéäžç®¡çã§ããŸãã ã»ã°ã¡ã³ãå ã§åå¥ã®ã»ãã¥ãªã㣠ããªã·ãŒãæ§æããããšãå¯èœã§ãã
åœç€Ÿã¯ãµãŒãã¹ãããã€ããŒã§ã¯ãããŸãããã¯ã©ã€ã¢ã³ããèšå®ããèšå®ã«ã¯å¹²æžããŸããã åæ§æãå¿ èŠãªå Žåã¯ãã»ãã¥ãªã㣠ããªã·ãŒãæšæºã®ããªã·ãŒã«ãªã»ãããããããããŸããã ããšãã°ãã¯ã©ã€ã¢ã³ãã誀ã£ãŠç· ãä»ããããèãã匱ãããããå Žåã«ããããå¿ èŠã«ãªãå ŽåããããŸãã äŒæ¥ã¯ãããã©ã«ãã®ããªã·ãŒãåããã³ã³ãããŒã« ã»ã³ã¿ãŒããã€ã§ãåãåãããšãã§ããåå¥ã«æ§æã§ããŸãã Kaspersky Security Center ã®æ¬ ç¹ã¯ããã®ãã©ãããã©ãŒã ãçŸåš Microsoft ãªãã¬ãŒãã£ã³ã° ã·ã¹ãã ã§ã®ã¿å©çšã§ããããšã§ãã ãã ãã軜éãšãŒãžã§ã³ã㯠Windows ãã·ã³ãš Linux ãã·ã³ã®äž¡æ¹ã§åäœããŸãã ãã ããKaspersky Lab ã¯ãè¿ãå°æ¥ãKSC ã Linux OS äžã§åäœããããšãçŽæããŠããŸãã KSC ã®éèŠãªæ©èœã® XNUMX ã€ã¯ãéé¢ã管çããæ©èœã§ãã ç§ãã¡ã®ã¯ã©ãŠãå ã®åã¯ã©ã€ã¢ã³ãäŒæ¥ã¯ãå人çšã®ã¯ã©ãŠããæã£ãŠããŸãã ãã®ã¢ãããŒãã«ãããäžè¬çãªéé¢æ©èœãåããåŸæ¥ã®äŒæ¥åããŠã€ã«ã¹å¯Ÿç補åã®å Žåã«çºçããå¯èœæ§ã®ããããŠã€ã«ã¹ã«ææããããã¥ã¡ã³ãã誀ã£ãŠäžè¬å ¬éãããç¶æ³ãæé€ãããŸãã
⢠ã©ã€ããšãŒãžã§ã³ãã æ°ããã¢ãã«ã®äžéšãšããŠã軜éã® Kaspersky Security ãšãŒãžã§ã³ããåä»®æ³ãã·ã³ã«ã€ã³ã¹ããŒã«ãããŸãã ããã«ãããå VM ã«ãŠã€ã«ã¹å¯ŸçããŒã¿ããŒã¹ãä¿åããå¿ èŠããªããªããå¿ èŠãªãã£ã¹ã¯å®¹éãåæžãããŸãã ãã®ãµãŒãã¹ã¯ã¯ã©ãŠã ã€ã³ãã©ã¹ãã©ã¯ãã£ãšçµ±åãããŠãããSVM ãéããŠåäœããŸããããã«ãããESXi ãã¹ãäžã®ä»®æ³ãã·ã³ã®å¯åºŠãåäžããã¯ã©ãŠã ã·ã¹ãã å šäœã®ããã©ãŒãã³ã¹ãåäžããŸãã ã©ã€ã ãšãŒãžã§ã³ãã¯ãåä»®æ³ãã·ã³ã®ã¿ã¹ã¯ã®ãã¥ãŒãæ§ç¯ããŸãããã¡ã€ã« ã·ã¹ãã ãã¡ã¢ãªãªã©ããã§ãã¯ããŸãã ãã ããSVM ã¯ãããã®æäœãå®è¡ãã責任ããããŸããããã«ã€ããŠã¯åŸã§èª¬æããŸãã ãã®ãšãŒãžã§ã³ãã¯ãã¡ã€ã¢ãŠã©ãŒã«ãšããŠãæ©èœããã»ãã¥ãªã㣠ããªã·ãŒãå¶åŸ¡ããææãã¡ã€ã«ãéé¢ã«éä¿¡ãããšãŒãžã§ã³ããã€ã³ã¹ããŒã«ãããŠãããªãã¬ãŒãã£ã³ã° ã·ã¹ãã å šäœã®ãå¥å šæ§ããç£èŠããŸãã ããããã¹ãŠã¯ããã§ã«è¿°ã¹ãåäžã®ã³ã³ãœãŒã«ã䜿çšããŠç®¡çã§ããŸãã
⢠ã»ãã¥ãªãã£ä»®æ³ãã·ã³ã ãªãœãŒã¹ã倧éã«æ¶è²»ãããã¹ãŠã®ã¿ã¹ã¯ïŒãŠã€ã«ã¹å¯ŸçããŒã¿ããŒã¹ã®æŽæ°ãã¹ã±ãžã¥ãŒã«ãããã¹ãã£ã³ïŒã¯ãå¥ã®ã»ãã¥ãªãã£ä»®æ³ãã·ã³ïŒSVMïŒã«ãã£ãŠåŠçãããŸãã 圌女ã¯ãæ¬æ ŒçãªãŠã€ã«ã¹å¯Ÿçãšã³ãžã³ãšãã®ããŒã¿ããŒã¹ã®éçšãæ åœããŠããŸãã äŒæ¥ã® IT ã€ã³ãã©ã¹ãã©ã¯ãã£ã«ã¯ãè€æ°ã® SVM ãå«ãŸããå ŽåããããŸãã ãã®ã¢ãããŒãã«ãããã·ã¹ãã ã®ä¿¡é Œæ§ãåäžããŸããXNUMX å°ã®ãã·ã³ã«é害ãçºçã㊠XNUMX ç§éå¿çããªãå ŽåããšãŒãžã§ã³ãã¯èªåçã«å¥ã®ãã·ã³ãæ¢ãå§ããŸãã
⢠KSC çµ±åãµãŒããŒã ã¡ã€ã³ KSC ã®ã³ã³ããŒãã³ãã® XNUMX ã€ãèšå®ã§æå®ãããã¢ã«ãŽãªãºã ã«åŸã£ãŠ SVM ãã©ã€ã ãšãŒãžã§ã³ãã«å²ãåœãŠãSVM ã®å¯çšæ§ãå¶åŸ¡ããŸãã ãããã£ãŠããã®ãœãããŠã§ã¢ ã¢ãžã¥ãŒã«ã¯ãã¯ã©ãŠã ã€ã³ãã©ã¹ãã©ã¯ãã£ã®ãã¹ãŠã® SVM ã«ãããè² è·åæ£ãæäŸããŸãã
ã¯ã©ãŠãã§äœæ¥ããããã®ã¢ã«ãŽãªãºã : ã€ã³ãã©ã¹ãã©ã¯ãã£ã®è² è·ã軜æžãã
äžè¬ã«ããŠã€ã«ã¹å¯Ÿçã¢ã«ãŽãªãºã ã¯æ¬¡ã®ããã«è¡šãããšãã§ããŸãã ãšãŒãžã§ã³ãã¯ä»®æ³ãã·ã³äžã®ãã¡ã€ã«ã«ã¢ã¯ã»ã¹ããŠãã§ãã¯ããŸãã æ€èšŒã®çµæã¯ãå ±éã®éäžå SVM å€å®ããŒã¿ããŒã¹ (å ±æãã£ãã·ã¥ãšåŒã°ãã) ã«ä¿åãããåãšã³ããªã¯äžæã®ãã¡ã€ã« ãµã³ãã«ãèå¥ããŸãã ãã®ã¢ãããŒãã«ãããåããã¡ã€ã«ãé£ç¶ããŠè€æ°åã¹ãã£ã³ãããããšã確å®ã«é²ãããšãã§ããŸã (ããšãã°ããã¡ã€ã«ãå¥ã®ä»®æ³ãã·ã³ã§éãããå Žåãªã©)ã ãã¡ã€ã«ãåã¹ãã£ã³ãããã®ã¯ããã¡ã€ã«ã«å€æŽãå ããããå ŽåããŸãã¯ã¹ãã£ã³ãæåã§éå§ãããå Žåã®ã¿ã§ãã
ãããã€ããŒã®ã¯ã©ãŠããžã®ãŠã€ã«ã¹å¯Ÿçãœãªã¥ãŒã·ã§ã³ã®å®è£
ãã®ç»åã¯ãã¯ã©ãŠãã§ã®ãœãªã¥ãŒã·ã§ã³å®è£ ã®äžè¬çãªå³ã瀺ããŠããŸãã ã¡ã€ã³ã® Kaspersky Security Center ã¯ã¯ã©ãŠãã®ã³ã³ãããŒã« ãŸãŒã³ã«å±éãããåå¥ã® SVM 㯠KSC çµ±åãµãŒããŒã䜿çšããŠå ESXi ãã¹ãã«å±éãããŸã (å ESXi ãã¹ãã«ã¯ãVMware vCenter Server äžã®ç¹å¥ãªèšå®ã§æ¥ç¶ãããç¬èªã® SVM ããããŸã)ã ã¯ã©ã€ã¢ã³ãã¯ããšãŒãžã§ã³ããåããä»®æ³ãã·ã³ãé 眮ãããŠããç¬èªã®ã¯ã©ãŠã ã»ã°ã¡ã³ãã§äœæ¥ããŸãã ãããã¯ãã¡ã€ã³ KSC ã«åŸå±ããåã ã® KSC ãµãŒããŒãéããŠç®¡çãããŸãã å°æ°ã®ä»®æ³ãã·ã³ (æ倧 5 å°) ãä¿è·ããå¿ èŠãããå Žåã¯ãã¯ã©ã€ã¢ã³ãã«ç¹å¥ãªå°çš KSC ãµãŒããŒã®ä»®æ³ã³ã³ãœãŒã«ãžã®ã¢ã¯ã»ã¹ãæäŸã§ããŸãã ã¯ã©ã€ã¢ã³ã KSC ãšã¡ã€ã³ KSCãããã³ã©ã€ã ãšãŒãžã§ã³ããš SVM ã®éã®ãããã¯ãŒã¯å¯Ÿè©±ã¯ãEdgeGW ã¯ã©ã€ã¢ã³ãä»®æ³ã«ãŒã¿ãŒãä»ã㊠NAT ã䜿çšããŠå®è¡ãããŸãã
ç§ãã¡ã®æšå®ãšãã³ããŒã®ååã«ãããã¹ãã®çµæã«ãããšãLight Agent ã¯ã¯ã©ã€ã¢ã³ãã®ä»®æ³ã€ã³ãã©ã¹ãã©ã¯ãã£ã®è² è·ãçŽ 25% åæžããŸã (åŸæ¥ã®ãŠã€ã«ã¹å¯ŸçãœãããŠã§ã¢ã䜿çšããã·ã¹ãã ãšæ¯èŒããå Žå)ã ç¹ã«ãç©çç°å¢çšã®æšæºã® Kaspersky Endpoint Security (KES) ã¢ã³ããŠã€ã«ã¹ã¯ã軜éã®ãšãŒãžã§ã³ãããŒã¹ã®ä»®æ³åãœãªã¥ãŒã·ã§ã³ (2,95%) ã®ã»ãŒ 1,67 åã®ãµãŒã㌠CPU æé (XNUMX%) ãæ¶è²»ããŸãã
CPUè² è·æ¯èŒè¡š
ãã£ã¹ã¯æžã蟌ã¿ã¢ã¯ã»ã¹ã®é »åºŠã§ãåæ§ã®ç¶æ³ã芳å¯ãããŸããåŸæ¥ã®ãŠã€ã«ã¹å¯Ÿçã§ã¯ 1011 IOPSãã¯ã©ãŠã ãŠã€ã«ã¹å¯Ÿçã§ã¯ 671 IOPS ã§ãã
ãã£ã¹ã¯ã¢ã¯ã»ã¹é床æ¯èŒã°ã©ã
ããã©ãŒãã³ã¹äžã®å©ç¹ã«ãããã€ã³ãã©ã¹ãã©ã¯ãã£ã®å®å®æ§ãç¶æããã³ã³ãã¥ãŒãã£ã³ã°èœåãããå¹ççã«äœ¿çšã§ããããã«ãªããŸãã ãã®ãœãªã¥ãŒã·ã§ã³ã¯ãããªã㯠ã¯ã©ãŠãç°å¢ã§ã®äœæ¥ã«é©å¿ããããšã§ãã¯ã©ãŠãã®ããã©ãŒãã³ã¹ãäœäžãããŸããããã¡ã€ã«ãäžå
çã«ãã§ãã¯ããŠæŽæ°ãããŠã³ããŒãããè² è·ãåæ£ããŸãã ããã¯ãã¯ã©ãŠã ã€ã³ãã©ã¹ãã©ã¯ãã£ã«é¢é£ããè
åšãèŠéããªãäžæ¹ã§ãä»®æ³ãã·ã³ã®ãªãœãŒã¹èŠä»¶ãåŸæ¥ã®ãŠã€ã«ã¹å¯Ÿç補åãšæ¯èŒããŠå¹³å 25% åæžãããããšãæå³ããŸãã
æ©èœã®ç¹ã§ã¯ãäž¡æ¹ã®ãœãªã¥ãŒã·ã§ã³ã¯äºãã«éåžžã«äŒŒãŠããŸãã以äžã«æ¯èŒè¡šã瀺ããŸãã ãã ããäžèšã®ãã¹ãçµæã瀺ãããã«ãã¯ã©ãŠãã§ã¯ãä»®æ³ç°å¢çšã®ãœãªã¥ãŒã·ã§ã³ã䜿çšããããšãäŸç¶ãšããŠæé©ã§ãã
æ°ããã¢ãããŒãã®æ çµã¿ã«ãããé¢çšã«ã€ããŠã vCPU ã®æ°ã«åºã¥ããŠã©ã€ã»ã³ã¹ãååŸã§ããã¢ãã«ã䜿çšããããšã«ããŸããã ããã¯ãã©ã€ã»ã³ã¹ã®æ°ã vCPU ã®æ°ãšåãã«ãªãããšãæå³ããŸãã ãªã¯ãšã¹ããæ®ãããšã§ãŠã€ã«ã¹å¯Ÿçããã¹ãã§ããŸã
ã¯ã©ãŠã ãããã¯ã«é¢ãã次ã®èšäºã§ã¯ãã¯ã©ãŠã WAF ã®é²åãšãããŒããŠã§ã¢ããœãããŠã§ã¢ãã¯ã©ãŠãã®ã©ããéžæããã®ãè¯ããã«ã€ããŠèª¬æããŸãã
ãã®ããã¹ãã¯ãã¯ã©ãŠã ãããã€ã㌠#CloudMTS ã®åŸæ¥å¡ãäž»åã¢ãŒããã¯ãã®ããã¹ã»ãã£ã°ã³ãæ°ãšæ å ±ã»ãã¥ãªãã£è£œåéçºãããŒãžã£ãŒã®ã¢ã¬ã¯ã»ã€ã»ã¢ãã¡ãã·ãšãæ°ã«ãã£ãŠäœæãããŸããã
åºæïŒ habr.com