{"id":4296,"date":"2018-12-05T00:00:06","date_gmt":"2018-12-04T15:00:06","guid":{"rendered":"https:\/\/www.syuheiuda.com\/?p=4296"},"modified":"2020-08-02T21:12:36","modified_gmt":"2020-08-02T12:12:36","slug":"azure-vnet-%e3%81%ae%e4%bb%95%e7%b5%84%e3%81%bf","status":"publish","type":"post","link":"https:\/\/www.syuheiuda.com\/?p=4296","title":{"rendered":"[Day5] Azure \u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u304c\u3055\u3063\u3071\u308a\u5206\u304b\u3089\u3093"},"content":{"rendered":"<p># <a href=\"https:\/\/qiita.com\/advent-calendar\/2018\/microsoft-azure-tech\">Microsoft Azure Tech Advent Calendar 2018<\/a> \u306e 5 \u65e5\u76ee\u3067\u3059\u3002<\/p>\n<p>\u4eca\u56de\u306f\u3001\u30a4\u30f3\u30d5\u30e9\u91ce\u90ce\u304c\u5927\u597d\u304d\u306a Azure \u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306b\u3064\u3044\u3066\u6574\u7406\u3057\u3066\u307f\u305f\u3044\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n<h2>4 \u7a2e\u985e\u306e Azure \u30cd\u30c3\u30c8\u30ef\u30fc\u30af<\/h2>\n<p>Azure\u00a0 \u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306f\u3001\u5927\u304d\u304f 4 \u7a2e\u985e\u306b\u5206\u304b\u308c\u307e\u3059\u3002<\/p>\n<ul>\n<li>Private IP (Azure VNET) \u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af: VNET \u5185\u306b\u5c55\u958b\u3055\u308c\u308b VM \u7b49<\/li>\n<li>Public IP (VNET \u5916) \u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af: VNET \u5916\u306b\u914d\u7f6e\u3055\u308c\u308b\u5404\u7a2e PaaS \u3084\u3001VM \u306e Public IP \u7b49<\/li>\n<li>Azure \u57fa\u677f\u5074\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af: \u30d0\u30c3\u30af\u30dc\u30fc\u30f3 \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3084\u3001\u7269\u7406\u30b5\u30fc\u30d0\u30fc\u7528 (\u30e6\u30fc\u30b6\u30fc\u304b\u3089\u306f\u898b\u3048\u306a\u3044\u90e8\u5206)<\/li>\n<li>Azure \u5916\u306b\u5b58\u5728\u3059\u308b\u30cd\u30c3\u30c8\u30ef\u30fc\u30af: Azure DNS \u3084 Traffic Manager\u3001CDN\u3001FrontDoor \u7b49<\/li>\n<\/ul>\n<p>\u3056\u3063\u304f\u308a\u56f3\u306b\u3059\u308b\u3068\u3001\u3053\u3093\u306a\u611f\u3058\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/VNET1.png\"><img decoding=\"async\" loading=\"lazy\" class=\"alignnone wp-image-4461 size-large\" src=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/VNET1-1024x576.png\" alt=\"\" width=\"860\" height=\"484\" \/><\/a><\/p>\n<p># \u3088\u304f\u3042\u308b\u8aa4\u89e3<\/p>\n<p>\u305f\u307e\u306b Azure Storage \u3084 SQL Database \u7b49\u306e PaaS \u306b\u5bfe\u3057\u3066 VPN \u63a5\u7d9a\u3057\u305f\u3044\u3068\u3044\u3046\u8a71\u3092\u805e\u304d\u307e\u3059\u304c\u3001VPN \u63a5\u7d9a\u51fa\u6765\u308b\u306e\u306f VNET \u306e\u307f\u3067\u3059\u306e\u3067\u3001Public IP \u306e\u4e16\u754c\u306b\u63a5\u7d9a\u3057\u305f\u3044\u5834\u5408\u306b\u306f ExpressRoute \u306e Microsoft Peering \u304c\u5fc5\u8981\u3067\u3059\u3002(\u3082\u3057\u304f\u306f\u3001App Service Environment \u3084 SQL Database Managed Instance \u306e\u3088\u3046\u306b VNET \u5185\u306b\u5c02\u7528\u306e\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u3092\u5efa\u3066\u3089\u308c\u308b\u4e0a\u4f4d\u30d7\u30e9\u30f3\u3092\u4f7f\u7528\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002)<\/p>\n<p>\u307e\u305f\u3001Azure \u306e\u30b5\u30fc\u30d3\u30b9\u3067\u3042\u3063\u3066\u3082\u3001Azure \u30c7\u30fc\u30bf\u30bb\u30f3\u30bf\u30fc\u5916\u306e Public IP \u304b\u3089\u30b5\u30fc\u30d3\u30b9\u3092\u63d0\u4f9b\u3059\u308b Azure DNS, Traffic Manager, CDN, FrontDoor \u7b49\u306e\u30b5\u30fc\u30d3\u30b9\u306b\u3064\u3044\u3066\u306f\u3001VPN \u3067\u3082 ExpressRoute \u7d4c\u7531\u3067\u3082\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3053\u3068\u304c\u51fa\u6765\u307e\u305b\u3093\u3002(\u3053\u308c\u3089\u306f Internet \u7d4c\u7531\u306e\u30a2\u30af\u30bb\u30b9\u3092\u524d\u63d0\u3068\u3057\u305f\u30b5\u30fc\u30d3\u30b9\u306a\u306e\u3067\u3001\u9589\u57df\u74b0\u5883\u3067\u4f7f\u3046\u4e8b\u3092\u60f3\u5b9a\u3055\u308c\u3066\u3044\u307e\u305b\u3093) \u304f\u308f\u3048\u3066\u3001\u5185\u90e8\u7684\u306b\u3053\u308c\u3089\u3092\u4f7f\u3063\u3066\u3044\u308b\u3082\u306e (\u4f8b\u3048\u3070 Azure Portal \u3068\u304b) \u306b\u5bfe\u3057\u3066\u3082\u3001ExpressRoute \u7d4c\u7531\u3067\u9589\u57df\u3060\u3051\u3067\u63a5\u7d9a\u3059\u308b\u3068\u3044\u3063\u305f\u3053\u3068\u306f\u51fa\u6765\u307e\u305b\u3093\u306e\u3067\u6c17\u3092\u3064\u3051\u307e\u3057\u3087\u3046\u3002<\/p>\n<h2>\u7269\u7406\u7684\u306a\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u69cb\u6210<\/h2>\n<p>Microsoft \u304c\u4e16\u754c\u4e2d\u306b\u4fdd\u6709\u3059\u308b\u30d0\u30c3\u30af\u30dc\u30fc\u30f3 \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3084\u3001Azure \u30c7\u30fc\u30bf\u30bb\u30f3\u30bf\u30fc\u5185\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30a2\u30fc\u30ad\u30c6\u30af\u30c1\u30e3\u306b\u3064\u3044\u3066\u306f\u3001\u591a\u5c11\u60c5\u5831\u304c\u53e4\u3044\u3082\u306e\u3082\u6df7\u3058\u3063\u3066\u307e\u3059\u304c\u4ee5\u4e0b\u304c\u53c2\u8003\u306b\u306a\u308a\u307e\u3059\u3002\u4f7f\u7528\u3057\u3066\u3044\u308b\u30b9\u30a4\u30c3\u30c1\u3084\u30eb\u30fc\u30bf\u30fc\u306e\u540d\u79f0\u307e\u3067\u8a18\u8f09\u3055\u308c\u3066\u3044\u308b\u3082\u306e\u3082\u3042\u308b\u306e\u3067\u3001\u30a4\u30f3\u30d5\u30e9\u91ce\u90ce\u306f\u9685\u304b\u3089\u9685\u307e\u3067\u76ee\u3092\u901a\u3059\u3068\u8208\u5473\u6df1\u3044\u304b\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n<ul>\n<li>Azure \u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30a2\u30fc\u30ad\u30c6\u30af\u30c1\u30e3<br \/>\n<a href=\"https:\/\/docs.microsoft.com\/ja-jp\/azure\/security\/azure-infrastructure-network\">https:\/\/docs.microsoft.com\/ja-jp\/azure\/security\/azure-infrastructure-network<\/a><\/li>\n<li>Inside Azure datacenter architecture with Mark Russinovich &#8211; BRK3347 (11:35-)<br \/>\n<a href=\"https:\/\/www.youtube.com\/watch?v=D8hMu4jJAwo\">https:\/\/www.youtube.com\/watch?v=D8hMu4jJAwo<\/a><\/li>\n<\/ul>\n<p># \u4ee5\u4e0b\u3001\u4e0a\u8a18\u304b\u3089\u62dd\u501f\u3002<\/p>\n<p>Microsoft \u6240\u6709\u306e Global Network \u306e\u5168\u4f53\u50cf\u3002\u6c34\u8272\u304c\u81ea\u793e\u6240\u6709\u3001\u6fc3\u3044\u9752\u304c\u501f\u7528\u3001\u70b9\u7dda\u304c\u8a08\u753b\u4e2d\u306e\u3082\u306e\u3002<\/p>\n<p><a href=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/AzureNetwork2.png\"><img decoding=\"async\" loading=\"lazy\" class=\"alignnone size-large wp-image-4458\" src=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/AzureNetwork2-1024x576.png\" alt=\"\" width=\"860\" height=\"484\" srcset=\"\/wp-content\/uploads\/2018\/12\/AzureNetwork2-1024x576.png 1024w, \/wp-content\/uploads\/2018\/12\/AzureNetwork2-300x169.png 300w, \/wp-content\/uploads\/2018\/12\/AzureNetwork2-768x432.png 768w, \/wp-content\/uploads\/2018\/12\/AzureNetwork2-560x315.png 560w, \/wp-content\/uploads\/2018\/12\/AzureNetwork2-260x146.png 260w, \/wp-content\/uploads\/2018\/12\/AzureNetwork2-160x90.png 160w, \/wp-content\/uploads\/2018\/12\/AzureNetwork2.png 1193w\" sizes=\"(max-width: 860px) 100vw, 860px\" \/><\/a><\/p>\n<p>Azure \u306e\u5404\u30ea\u30fc\u30b8\u30e7\u30f3\u306f Microsoft \u306e Global Network (WAN) \u306b\u63a5\u7d9a\u3055\u308c\u3001\u4e16\u754c\u4e2d\u306e Edge \u304b\u3089 Internet \u3084 ExpressRoute \u3067\u63a5\u7d9a\u3055\u308c\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/AzureNetwork1.png\"><img decoding=\"async\" loading=\"lazy\" class=\"alignnone size-large wp-image-4457\" src=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/AzureNetwork1-1024x576.png\" alt=\"\" width=\"860\" height=\"484\" srcset=\"\/wp-content\/uploads\/2018\/12\/AzureNetwork1-1024x576.png 1024w, \/wp-content\/uploads\/2018\/12\/AzureNetwork1-300x169.png 300w, \/wp-content\/uploads\/2018\/12\/AzureNetwork1-768x432.png 768w, \/wp-content\/uploads\/2018\/12\/AzureNetwork1-560x315.png 560w, \/wp-content\/uploads\/2018\/12\/AzureNetwork1-260x146.png 260w, \/wp-content\/uploads\/2018\/12\/AzureNetwork1-160x90.png 160w, \/wp-content\/uploads\/2018\/12\/AzureNetwork1.png 1192w\" sizes=\"(max-width: 860px) 100vw, 860px\" \/><\/a><\/p>\n<p>\u5404\u30ea\u30fc\u30b8\u30e7\u30f3\u306b\u306f\u8907\u6570\u306e\u30c7\u30fc\u30bf\u30bb\u30f3\u30bf\u30fc\u304c\u3042\u308a\u3001RNG (Regional Network Gateway) \u3067\u675f\u306d\u3089\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/AzureNetwork3.png\"><img decoding=\"async\" loading=\"lazy\" class=\"alignnone size-large wp-image-4459\" src=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/AzureNetwork3-1024x575.png\" alt=\"\" width=\"860\" height=\"483\" srcset=\"\/wp-content\/uploads\/2018\/12\/AzureNetwork3-1024x575.png 1024w, \/wp-content\/uploads\/2018\/12\/AzureNetwork3-300x168.png 300w, \/wp-content\/uploads\/2018\/12\/AzureNetwork3-768x431.png 768w, \/wp-content\/uploads\/2018\/12\/AzureNetwork3-560x314.png 560w, \/wp-content\/uploads\/2018\/12\/AzureNetwork3-260x146.png 260w, \/wp-content\/uploads\/2018\/12\/AzureNetwork3-160x90.png 160w, \/wp-content\/uploads\/2018\/12\/AzureNetwork3.png 1192w\" sizes=\"(max-width: 860px) 100vw, 860px\" \/><\/a><\/p>\n<p>\u30c7\u30fc\u30bf\u30bb\u30f3\u30bf\u30fc\u5185\u306f\u3001Quantum 10 (Q10) \u306e\u30a2\u30fc\u30ad\u30c6\u30af\u30c1\u30e3\u304c\u63a1\u7528\u3055\u308c\u3001\u4ee5\u4e0b\u306e\u69d8\u306a\u6a5f\u5668\u304c\u4f7f\u7528\u3055\u308c\u3066\u3044\u308b\u3089\u3057\u3044\u3067\u3059\u3002<\/p>\n<p><a href=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/network-arch.png\"><img decoding=\"async\" loading=\"lazy\" class=\"alignnone size-large wp-image-4460\" src=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/network-arch-1024x474.png\" alt=\"\" width=\"860\" height=\"398\" srcset=\"\/wp-content\/uploads\/2018\/12\/network-arch-1024x474.png 1024w, \/wp-content\/uploads\/2018\/12\/network-arch-300x139.png 300w, \/wp-content\/uploads\/2018\/12\/network-arch-768x356.png 768w, \/wp-content\/uploads\/2018\/12\/network-arch-560x259.png 560w, \/wp-content\/uploads\/2018\/12\/network-arch-260x120.png 260w, \/wp-content\/uploads\/2018\/12\/network-arch-160x74.png 160w, \/wp-content\/uploads\/2018\/12\/network-arch.png 1164w\" sizes=\"(max-width: 860px) 100vw, 860px\" \/><\/a><\/p>\n<h2>VNET \u306e\u4ed5\u7d44\u307f<\/h2>\n<p>IaaS \u30e6\u30fc\u30b6\u30fc\u306e\u65b9\u304b\u3089\u3059\u308b\u3068\u3001\u5148\u306e\u3088\u3046\u306a\u6982\u5ff5\u7684\u306a\u8a71\u3088\u308a\u3082\u3001Azure VNET \u306e\u65b9\u304c\u8eab\u8fd1\u304b\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n<p>\u304c\u3001VNET \u306e\u4ed5\u7d44\u307f\u3092\u304d\u3061\u3093\u3068\u7406\u89e3\u3057\u305f\u4e0a\u3067\u4f7f\u3063\u3066\u3044\u308b\u4eba\u306f\u5c11\u306a\u3044\u306e\u3067\u306f\u306a\u3044\u304b\u3068\u601d\u3046\u306e\u3067\u6539\u3081\u3066\u3002<\/p>\n<p>Azure \u3067\u306f\u3001\u6570\u767e\u4e07\u53f0\u898f\u6a21\u306e\u7269\u7406\u30b5\u30fc\u30d0\u30fc\u304c\u4e16\u754c\u4e2d\u306b\u5b58\u5728\u3057\u3066\u3044\u307e\u3059\u3002VM \u306f\u30ea\u30fc\u30b8\u30e7\u30f3\u5185\u306e\u3069\u3053\u304b\u306e\u7269\u7406\u30b5\u30fc\u30d0\u30fc\u4e0a\u3067\u30db\u30b9\u30c8\u3055\u308c\u307e\u3059\u304c\u3001\u540c\u4e00 VNET \u5185\u306e VM \u9593\u306e\u901a\u4fe1\u306f\u3069\u306e\u3088\u3046\u306b\u884c\u308f\u308c\u3066\u3044\u308b\u304b\u3092\u8003\u3048\u308b\u306b\u306f\u3001Azure \u57fa\u677f\u5074\u306e\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4 \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3068\u3001VNET \u5074\u306e\u30aa\u30fc\u30d0\u30fc\u30ec\u30a4 \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3092\u610f\u8b58\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<p>\u3053\u3053\u3067\u306f\u3001\u4ee5\u4e0b\u306e\u56f3\u306e\u3088\u3046\u306b 2 \u53f0\u306e\u7269\u7406\u30b5\u30fc\u30d0\u30fc\u4e0a\u306b 2 \u3064\u306e VNET (A, B) \u304c\u5b58\u5728\u3057\u3066\u3044\u308b\u5834\u5408\u3092\u8003\u3048\u307e\u3059\u3002VNET A \u306e 10.0.0.4 -&gt; 10.0.0.5 \u5b9b\u306b\u901a\u4fe1\u3059\u308b\u5834\u5408\u306f\u3001\u7269\u7406\u30b5\u30fc\u30d0\u30fc\u4e0a\u3067\u4e00\u5ea6\u30ab\u30d7\u30bb\u30eb\u5316\u3055\u308c\u3066\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4 \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u4e0a\u3067\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u3055\u308c\u307e\u3059\u3002<\/p>\n<p># VNET A \u3068 B \u306f\u8ad6\u7406\u7684\u306b\u5206\u96e2\u3055\u308c\u3066\u3044\u308b\u306e\u3067\u3001\u5225 VNET \u306b\u540c\u4e00\u306e Private IP \u3092\u6301\u3064 VM \u304c\u4e57\u3063\u3066\u3044\u3066\u3082\u554f\u984c\u306f\u8d77\u304d\u307e\u305b\u3093\u3002<\/p>\n<p><a href=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/VNET2.png\"><img decoding=\"async\" loading=\"lazy\" class=\"alignnone size-large wp-image-4462\" src=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/VNET2-1024x576.png\" alt=\"\" width=\"860\" height=\"484\" \/><\/a><\/p>\n<h3>VFP \u306e\u4ed5\u7d44\u307f<\/h3>\n<p>\u3053\u3046\u3057\u305f Azure \u306e SDN \u3092\u652f\u3048\u3066\u3044\u308b\u306e\u304c\u3001Hyper-V \u306e Virtual Switch \u3067\u52d5\u4f5c\u3059\u308b VFP (Virtual Filtering Platform) \u3067\u3059\u3002<\/p>\n<p>\u8a73\u3057\u3044\u3053\u3068\u306f Windows Server 2016 \u7b49\u306e HNV \u7cfb\u306e\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u3084\u3001Microsoft Research \u306e\u8ad6\u6587\u3092\u8aad\u3080\u3068\u7406\u89e3\u304c\u6df1\u307e\u308a\u307e\u3059\u3002<\/p>\n<ul>\n<li>Windows Server 2016 \u3067 HYPER-V \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u4eee\u60f3\u5316\u306e\u6280\u8853\u7684\u306a\u8a73\u7d30<br \/>\n<a href=\"https:\/\/docs.microsoft.com\/ja-jp\/windows-server\/networking\/sdn\/technologies\/hyper-v-network-virtualization\/hyperv-network-virtualization-technical-details-windows-server\">https:\/\/docs.microsoft.com\/ja-jp\/windows-server\/networking\/sdn\/technologies\/hyper-v-network-virtualization\/hyperv-network-virtualization-technical-details-windows-server<\/a><\/li>\n<li>Azure Virtual Filtering Platform (VFP)<br \/>\n<a href=\"https:\/\/www.microsoft.com\/en-us\/research\/project\/azure-virtual-filtering-platform\/#!publications\">https:\/\/www.microsoft.com\/en-us\/research\/project\/azure-virtual-filtering-platform\/#!publications<\/a><\/li>\n<\/ul>\n<p>\u8ad6\u6587\u5185\u306e\u753b\u50cf\u3092\u629c\u7c8b\u3057\u3064\u3064\u3001\u304b\u3044\u3064\u307e\u3093\u3067\u8aac\u660e\u3059\u308b\u3068\u3001Hyper-V \u306e\u4eee\u60f3\u30b9\u30a4\u30c3\u30c1\u4e0a\u3067\u30d5\u30a3\u30eb\u30bf\u30fc \u30c9\u30e9\u30a4\u30d0\u30fc\u306e\u7528\u306b\u632f\u308b\u821e\u3044\u3001Ingress \/ Egress \u306e\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u306b\u5bfe\u3057\u3066\u306e\u51e6\u7406\u3092\u884c\u3046\u306e\u304c VFP \u3067\u3059\u3002<\/p>\n<p><a href=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/VFP1.png\"><img decoding=\"async\" loading=\"lazy\" class=\"alignnone size-full wp-image-4468\" src=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/VFP1.png\" alt=\"\" width=\"603\" height=\"345\" srcset=\"\/wp-content\/uploads\/2018\/12\/VFP1.png 603w, \/wp-content\/uploads\/2018\/12\/VFP1-300x172.png 300w, \/wp-content\/uploads\/2018\/12\/VFP1-560x320.png 560w, \/wp-content\/uploads\/2018\/12\/VFP1-260x149.png 260w, \/wp-content\/uploads\/2018\/12\/VFP1-160x92.png 160w\" sizes=\"(max-width: 603px) 100vw, 603px\" \/><\/a><\/p>\n<p><a href=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/VFP2.png\"><img decoding=\"async\" loading=\"lazy\" class=\"alignnone size-full wp-image-4469\" src=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/VFP2.png\" alt=\"\" width=\"593\" height=\"407\" srcset=\"\/wp-content\/uploads\/2018\/12\/VFP2.png 593w, \/wp-content\/uploads\/2018\/12\/VFP2-300x206.png 300w, \/wp-content\/uploads\/2018\/12\/VFP2-560x384.png 560w, \/wp-content\/uploads\/2018\/12\/VFP2-260x178.png 260w, \/wp-content\/uploads\/2018\/12\/VFP2-160x110.png 160w\" sizes=\"(max-width: 593px) 100vw, 593px\" \/><\/a><\/p>\n<p>VFP \u3067\u306f\u3069\u306e\u3088\u3046\u306a\u51e6\u7406\u304c\u884c\u308f\u308c\u308b\u304b\u3068\u3044\u3046\u3068\u3001\u4ee5\u4e0b\u306e\u56f3\u306e\u3088\u3046\u306b\u5927\u304d\u304f 4 \u7a2e\u985e\u306e\u51e6\u7406\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<ul>\n<li>VNET: \u524d\u8ff0\u306e\u30a2\u30f3\u30c0\u30fc\u30ec\u30a4\u30fb\u30aa\u30fc\u30d0\u30fc\u30ec\u30a4 \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u9593\u306e\u30ab\u30d7\u30bb\u30eb\u5316 (encap \/ decap) \u3092\u62c5\u3044\u307e\u3059\u3002<\/li>\n<li>NAT: Public IP \u3067\u53d7\u4fe1\u3057\u305f\u30d1\u30b1\u30c3\u30c8\u3092 VNET \u5185\u306e Private IP \u306b\u5909\u63db\u3057\u305f\u308a\u3001LB \u7d4c\u7531\u306e\u901a\u4fe1\u306e NAT \u3092\u62c5\u3044\u307e\u3059\u3002<\/li>\n<li>ACLs: Network Security Group (NSG) \u306e\u6a5f\u80fd\u306b\u8a72\u5f53\u3059\u308b\u3082\u306e\u3067\u3059\u3002<\/li>\n<li>Metering: \u5404\u7a2e\u30e1\u30c8\u30ea\u30c3\u30af\u306e\u30c7\u30fc\u30bf\u53d6\u5f97\u3092\u62c5\u3044\u307e\u3059\u3002\u8ab2\u91d1\u30e1\u30fc\u30bf\u30fc\u3082\u3053\u306e\u30ec\u30a4\u30e4\u30fc\u3067\u884c\u3063\u3066\u3044\u307e\u3059\u3002<\/li>\n<\/ul>\n<p><a href=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/VFP3.png\"><img decoding=\"async\" loading=\"lazy\" class=\"alignnone size-full wp-image-4470\" src=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/VFP3.png\" alt=\"\" width=\"518\" height=\"473\" srcset=\"\/wp-content\/uploads\/2018\/12\/VFP3.png 518w, \/wp-content\/uploads\/2018\/12\/VFP3-300x274.png 300w, \/wp-content\/uploads\/2018\/12\/VFP3-260x237.png 260w, \/wp-content\/uploads\/2018\/12\/VFP3-160x146.png 160w\" sizes=\"(max-width: 518px) 100vw, 518px\" \/><\/a><\/p>\n<p># \u3061\u306a\u307f\u306b\u3001\u4e0a\u56f3\u306e\u7565\u79f0\u306f\u305d\u308c\u305e\u308c\u4ee5\u4e0b\u306e\u901a\u308a<\/p>\n<ul>\n<li>PA: Physical Address (\u57fa\u76e4\u5074\u306e IP \u30a2\u30c9\u30ec\u30b9)<\/li>\n<li>CA: Customer Address (VNET \u5185\u306e Private IP \u30a2\u30c9\u30ec\u30b9)<\/li>\n<li>VIP: Virtual IP (Public IP \u306e\u3053\u3068)<\/li>\n<li>DIP:\u00a0Dynamic IP (Private IP \u306e\u3053\u3068)<\/li>\n<\/ul>\n<h3>VNET \u5185\u306e\u901a\u4fe1\u3092\u884c\u3046\u5834\u5408<\/h3>\n<p>\u3067\u306f\u3001\u3082\u3046\u5c11\u3057\u565b\u307f\u7815\u3044\u3066\u898b\u3066\u307f\u307e\u3057\u3087\u3046\u3002(Metering \u306f\u901a\u4fe1\u306b\u76f4\u63a5\u95a2\u4fc2\u3057\u306a\u3044\u306e\u3067\u7701\u7565)<\/p>\n<p>10.0.0.4 \u306e VM \u304b\u3089\u30d1\u30b1\u30c3\u30c8\u304c\u51fa\u3066\u884c\u304f\u969b\u306f\u300110.0.0.4 -&gt; 10.0.0.5 \u306e\u901a\u4fe1\u3068\u3057\u3066 NIC \u304a\u3088\u3073 Subnet \u306eNSG \u9001\u4fe1\u898f\u5247\u3067\u8a55\u4fa1\u304c\u884c\u308f\u308c\u307e\u3059\u3002\u305d\u306e\u5f8c\u30ab\u30d7\u30bb\u30eb\u5316\u304c\u884c\u308f\u308c\u3001\u9001\u4fe1\u5143\u306e\u7269\u7406\u30b5\u30fc\u30d0\u30fc\u306e PA -&gt; \u5b9b\u5148 IP \u306e VM \u3092\u30db\u30b9\u30c8\u3059\u308b\u7269\u7406\u30b5\u30fc\u30d0\u30fc\u306e PA (192.0.2.1 -&gt; 192.0.2.2) \u306e\u3088\u3046\u306b Azure \u57fa\u76e4\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u4e0a\u3092\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u3055\u308c\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/VNET3.png\"><img decoding=\"async\" loading=\"lazy\" class=\"alignnone size-large wp-image-4473\" src=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/VNET3-1024x576.png\" alt=\"\" width=\"860\" height=\"484\" srcset=\"\/wp-content\/uploads\/2018\/12\/VNET3-1024x576.png 1024w, \/wp-content\/uploads\/2018\/12\/VNET3-300x169.png 300w, \/wp-content\/uploads\/2018\/12\/VNET3-768x432.png 768w, \/wp-content\/uploads\/2018\/12\/VNET3-560x315.png 560w, \/wp-content\/uploads\/2018\/12\/VNET3-260x146.png 260w, \/wp-content\/uploads\/2018\/12\/VNET3-160x90.png 160w, \/wp-content\/uploads\/2018\/12\/VNET3.png 1280w\" sizes=\"(max-width: 860px) 100vw, 860px\" \/><\/a><\/p>\n<p>\u53d7\u4fe1\u5074\u3067\u306f\u30ab\u30d7\u30bb\u30eb\u5316\u3092\u89e3\u9664\u3059\u308b\u3068\u3068\u3082\u306b\u3001\u305d\u306e\u30d1\u30b1\u30c3\u30c8\u304c\u81ea\u8eab\u306e\u30db\u30b9\u30c8\u3059\u308b\u3069\u306e VM \/ VNET \u5b9b\u306a\u306e\u304b\u3092\u5224\u65ad\u3057\u3001Subnet \u304a\u3088\u3073 NIC \u306e NSG \u3067\u53d7\u4fe1\u898f\u5247\u306b\u57fa\u3065\u3044\u3066\u8a55\u4fa1\u3092\u884c\u3044\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/VNET4.png\"><img decoding=\"async\" loading=\"lazy\" class=\"alignnone size-large wp-image-4474\" src=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/VNET4-1024x576.png\" alt=\"\" width=\"860\" height=\"484\" srcset=\"\/wp-content\/uploads\/2018\/12\/VNET4-1024x576.png 1024w, \/wp-content\/uploads\/2018\/12\/VNET4-300x169.png 300w, \/wp-content\/uploads\/2018\/12\/VNET4-768x432.png 768w, \/wp-content\/uploads\/2018\/12\/VNET4-560x315.png 560w, \/wp-content\/uploads\/2018\/12\/VNET4-260x146.png 260w, \/wp-content\/uploads\/2018\/12\/VNET4-160x90.png 160w, \/wp-content\/uploads\/2018\/12\/VNET4.png 1280w\" sizes=\"(max-width: 860px) 100vw, 860px\" \/><\/a><\/p>\n<p>Azure VM \u9593\u3067\u901a\u4fe1\u3092\u3059\u308b\u969b\u3001\u901a\u5e38\u3053\u3053\u307e\u3067\u610f\u8b58\u306f\u3057\u307e\u305b\u3093\u304c\u3001\u5b9f\u306f\u88cf\u3067\u306f VFP \u304c\u9811\u5f35\u3063\u3066\u304f\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<h3>VM \u306e Public IP \u5b9b\u306e\u901a\u4fe1\u306e\u5834\u5408 (LB \u5b9b\u3082\u307b\u307c\u540c\u7b49)<\/h3>\n<p>\u7d9a\u3044\u3066\u3001Azure VM \u306e Public IP \u5b9b\u306b\u901a\u4fe1\u304c\u6765\u305f\u5834\u5408\u3092\u8003\u3048\u3066\u307f\u307e\u3059\u3002<\/p>\n<p>Internet \u5074\u304b\u3089\u30d1\u30b1\u30c3\u30c8\u304c\u5c4a\u304d\u307e\u3059\u304c\u3001VFP \u306f Public IP \u3068 Private IP \u306e\u5bfe\u5fdc\u3092\u77e5\u3063\u3066\u3044\u308b\u305f\u3081\u3001\u5b9b\u5148 IP \u3092 DNAT \u3057\u3066 VM \u306b\u6e21\u3057\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/VNET5.png\"><img decoding=\"async\" loading=\"lazy\" class=\"alignnone size-large wp-image-4475\" src=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/VNET5-1024x576.png\" alt=\"\" width=\"860\" height=\"484\" srcset=\"\/wp-content\/uploads\/2018\/12\/VNET5-1024x576.png 1024w, \/wp-content\/uploads\/2018\/12\/VNET5-300x169.png 300w, \/wp-content\/uploads\/2018\/12\/VNET5-768x432.png 768w, \/wp-content\/uploads\/2018\/12\/VNET5-560x315.png 560w, \/wp-content\/uploads\/2018\/12\/VNET5-260x146.png 260w, \/wp-content\/uploads\/2018\/12\/VNET5-160x90.png 160w, \/wp-content\/uploads\/2018\/12\/VNET5.png 1280w\" sizes=\"(max-width: 860px) 100vw, 860px\" \/><\/a><\/p>\n<p>\u53cd\u5bfe\u306b\u3001\u623b\u308a\u306e\u30d1\u30b1\u30c3\u30c8\u3067\u306f SNAT \u3092\u3057\u3066 Src IP \u3092 Public IP \u306b\u66f8\u304d\u63db\u3048\u3066\u304b\u3089\u51fa\u3066\u3044\u304d\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/VNET6.png\"><img decoding=\"async\" loading=\"lazy\" class=\"alignnone size-large wp-image-4476\" src=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/VNET6-1024x576.png\" alt=\"\" width=\"860\" height=\"484\" srcset=\"\/wp-content\/uploads\/2018\/12\/VNET6-1024x576.png 1024w, \/wp-content\/uploads\/2018\/12\/VNET6-300x169.png 300w, \/wp-content\/uploads\/2018\/12\/VNET6-768x432.png 768w, \/wp-content\/uploads\/2018\/12\/VNET6-560x315.png 560w, \/wp-content\/uploads\/2018\/12\/VNET6-260x146.png 260w, \/wp-content\/uploads\/2018\/12\/VNET6-160x90.png 160w, \/wp-content\/uploads\/2018\/12\/VNET6.png 1280w\" sizes=\"(max-width: 860px) 100vw, 860px\" \/><\/a><\/p>\n<p>\u306a\u304a\u3001NSG \u306e\u8a55\u4fa1\u306f\u53d7\u4fe1\u65b9\u5411\u306e\u901a\u4fe1\u3067\u3042\u308c\u3070 Public IP \u3084 LB \u306e NAT \u51e6\u7406\u5f8c\u3001\u9001\u4fe1\u65b9\u5411\u306e\u901a\u4fe1\u3067\u3042\u308c\u3070 NAT \u51e6\u7406\u524d\u306b\u884c\u308f\u308c\u308b\u306e\u3067\u3001VM \u306e Private IP \u306e\u307e\u307e\u8a55\u4fa1\u3055\u308c\u307e\u3059\u3002<\/p>\n<p># \u305f\u307e\u306b\u3001Public IP \u5b9b\u306b\u5c4a\u3044\u305f\u901a\u4fe1\u3092 NSG \u3067\u30d6\u30ed\u30c3\u30af\u3057\u3088\u3046\u3068\u3059\u308b\u4eba\u304c\u3044\u307e\u3059\u304c\u3001\u305d\u3093\u306a\u3053\u3068\u306f\u3067\u304d\u307e\u305b\u3093\u3002<\/p>\n<h3>UDR \u3092\u8a2d\u5b9a\u3057\u305f\u5834\u5408\u306e\u6319\u52d5<\/h3>\n<p>\u6b21\u306b\u3001\u4eee\u60f3\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9 (NVA) \u3092\u69cb\u7bc9\u3059\u308b\u5834\u5408\u306a\u3069\u3067\u3001\u5168\u3066\u306e\u5b9b\u5148 (0.0.0.0\/0) \u5b9b\u306e\u901a\u4fe1\u3092 NVA \u3078\u5411\u3051\u308b\u3088\u3046\u306a UDR \u3092\u8a2d\u5b9a\u3057\u305f\u5834\u5408\u3092\u8003\u3048\u3066\u307f\u307e\u3059\u3002<\/p>\n<p>\u524d\u8ff0\u306e 10.0.0.4 -&gt; 10.0.0.5 \u5b9b\u306e\u901a\u4fe1\u3068\u4f3c\u3066\u3044\u307e\u3059\u304c\u3001\u9001\u4fe1\u5143\u306e\u7269\u7406\u30b5\u30fc\u30d0\u30fc\u4e0a\u3067\u30ab\u30d7\u30bb\u30eb\u5316\u304c\u884c\u308f\u308c\u308b\u969b\u3001UDR \u3092\u5411\u3051\u305f NVA \u304c\u30db\u30b9\u30c8\u3055\u308c\u3066\u3044\u308b\u7269\u7406\u30b5\u30fc\u30d0\u30fc\u306e PA \u5b9b\u3068\u3057\u3066 Azure \u57fa\u76e4\u5074\u3067\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u304c\u884c\u308f\u308c\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/VNET7.png\"><img decoding=\"async\" loading=\"lazy\" class=\"alignnone size-large wp-image-4477\" src=\"https:\/\/blob.syuheiuda.com\/wp-content\/2018\/12\/VNET7-1024x576.png\" alt=\"\" width=\"860\" height=\"484\" srcset=\"\/wp-content\/uploads\/2018\/12\/VNET7-1024x576.png 1024w, \/wp-content\/uploads\/2018\/12\/VNET7-300x169.png 300w, \/wp-content\/uploads\/2018\/12\/VNET7-768x432.png 768w, \/wp-content\/uploads\/2018\/12\/VNET7-560x315.png 560w, \/wp-content\/uploads\/2018\/12\/VNET7-260x146.png 260w, \/wp-content\/uploads\/2018\/12\/VNET7-160x90.png 160w, \/wp-content\/uploads\/2018\/12\/VNET7.png 1280w\" sizes=\"(max-width: 860px) 100vw, 860px\" \/><\/a><\/p>\n<p>\u3053\u306e\u8fba\u308a\u306f SDN \u7279\u6709\u3067\u3001\u6163\u308c\u306a\u3044\u3068\u6df7\u4e71\u3057\u307e\u3059\u304c\u3001\u5206\u304b\u3089\u306a\u304f\u306a\u3063\u305f\u3089\u843d\u3061\u7740\u3044\u3066\u56f3\u306b\u3059\u308b\u306e\u304c\u5409\u3067\u3059\u3002<\/p>\n<p>Azure \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3001\u30e0\u30ba\u30ab\u30b7\u30a4\u30cd\u3002<\/p>\n<h2>\u305d\u306e\u4ed6\u3001Azure \u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3092\u7406\u89e3\u3059\u308b\u3046\u3048\u3067\u53c2\u8003\u306b\u306a\u308b\u8cc7\u6599<\/h2>\n<ul>\n<li>Azure Network Security Group(NSG)\u306b\u3064\u3044\u3066\u304a\u3055\u3089\u3044<br \/>\n<a href=\"https:\/\/qiita.com\/yotan\/items\/d5e3e8dcc94a2099fa05\">https:\/\/qiita.com\/yotan\/items\/d5e3e8dcc94a2099fa05<\/a><br \/>\n<a href=\"https:\/\/www.slideshare.net\/ssusere44d0e1\/azure-network-security-groupnsg\">https:\/\/www.slideshare.net\/ssusere44d0e1\/azure-network-security-groupnsg<\/a><\/li>\n<li>INF-018_OS \u306e\u4e2d\u3067 SDN \u6297\u4e89\u52c3\u767a!? \uff5e\u4e3b\u5f79\u3092\u4e89\u3046 VXLAN vs NVGRE\uff5e<br \/>\n<a href=\"https:\/\/www.slideshare.net\/decode2016\/inf018os-sdn-vxlan-vs-nvgre\">https:\/\/www.slideshare.net\/decode2016\/inf018os-sdn-vxlan-vs-nvgre<\/a><br \/>\n<a href=\"https:\/\/channel9.msdn.com\/Events\/de-code\/2016\/INF-018\">https:\/\/channel9.msdn.com\/Events\/de-code\/2016\/INF-018<\/a><\/li>\n<li>Azure \u304b\u3089\u751f\u307e\u308c\u305f Windows Server 2016 SDN \uff5e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u7248\uff5e<br \/>\n<a href=\"https:\/\/www.slideshare.net\/TechSummit2016\/cld019-azure-windowsserver20\">https:\/\/www.slideshare.net\/TechSummit2016\/cld019-azure-windowsserver20<\/a><br \/>\n<a href=\"https:\/\/www.youtube.com\/watch?v=zQpdjONLvsQ\">https:\/\/www.youtube.com\/watch?v=zQpdjONLvsQ<\/a><\/li>\n<li>\u30b5\u30dd\u30fc\u30c8 \u30a8\u30f3\u30b8\u30cb\u30a2\u304c Azure Networking \u3092\u3058\u3063\u304f\u308a\u305f\u3063\u3077\u308a\u8a9e\u308a\u3064\u304f\u3059\u4f1a<br \/>\n<a href=\"https:\/\/www.slideshare.net\/ShuheiUda\/azure-networking-165852712\">https:\/\/www.slideshare.net\/ShuheiUda\/azure-networking-165852712<\/a><br \/>\n<a href=\"https:\/\/www.youtube.com\/watch?v=YMAV8aqb9pk\">https:\/\/www.youtube.com\/watch?v=YMAV8aqb9pk<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p># Microsoft Azure Tech Advent Calendar 2&hellip;<\/p>\n<p class=\"more-link-p\"><a class=\"more-link\" href=\"https:\/\/www.syuheiuda.com\/?p=4296\">Read more &rarr;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_locale":"","_original_post":""},"categories":[42,31],"tags":[],"views":46466,"_links":{"self":[{"href":"https:\/\/www.syuheiuda.com\/index.php?rest_route=\/wp\/v2\/posts\/4296"}],"collection":[{"href":"https:\/\/www.syuheiuda.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.syuheiuda.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.syuheiuda.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.syuheiuda.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4296"}],"version-history":[{"count":13,"href":"https:\/\/www.syuheiuda.com\/index.php?rest_route=\/wp\/v2\/posts\/4296\/revisions"}],"predecessor-version":[{"id":5314,"href":"https:\/\/www.syuheiuda.com\/index.php?rest_route=\/wp\/v2\/posts\/4296\/revisions\/5314"}],"wp:attachment":[{"href":"https:\/\/www.syuheiuda.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4296"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.syuheiuda.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4296"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.syuheiuda.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4296"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}