๋กœ์ผ“๐Ÿพ
article thumbnail
[Cert manager] Let's Encrypt ๋ฅผ ์ด์šฉํ•ด์„œ Istio Gateway ์— TLS ์„ ์ ์šฉํ•ด๋ณด์ž! - Route53
DevOps/Cert Manager 2023. 9. 13. 23:52

์ง€๋‚œ ๊ธ€์—์„œ Cloudflare ์—์„œ ์ƒ์„ฑํ•œ ๋„๋ฉ”์ธ๊ณผ Let's Encrypt ๋ฅผ ์ด์šฉํ•ด์„œ TLS ๋ฅผ httpbin ์— ์ ์šฉํ–ˆ์—ˆ์Šต๋‹ˆ๋‹ค. ์ด๋ฒˆ์—๋Š” Cloudflare ๋ณด๋‹ค ๋” ๋Œ€์ค‘์ ์ธ Route53 ์—์„œ ์ƒ์„ฑํ•œ ๋„๋ฉ”์ธ์—๋„ TLS ๋ฅผ ์ ์šฉํ•ด๋ณด๊ณ ์ž ํ•ฉ๋‹ˆ๋‹ค. Route53 ์—์„œ ๊ตฌ๋งคํ•œ ๋„๋ฉ”์ธ์— ๋Œ€ํ•ด์„œ๋Š” AWS ACM ์„ ์ด์šฉํ•ด์„œ ๋ฌด๋ฃŒ๋กœ TLS ๋ฅผ ๋ฐœ๊ธ‰๋ฐ›์„ ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ๊ทธ๋ฆฌ๊ณ  ๋ฐœ๊ธ‰๋ฐ›์€ TLS ๋ฅผ AWS ALB ์— ๋ฐ”๋กœ ์ ์šฉํ•˜๊ฒŒ ๋˜๋ฉด ์•„์ฃผ ์‰ฝ๊ฒŒ TLS ํ†ต์‹ ์ด ๊ฐ€๋Šฅํ•ฉ๋‹ˆ๋‹ค. ๊ทธ๋ž˜์„œ ALB ์™€ Istio ๋ฅผ ์ด์šฉํ•˜๊ฒŒ ๋˜๋ฉด ๋Œ€๋žต ์•„๋ž˜ ๊ทธ๋ฆผ๊ณผ ๊ฐ™์ฃ . ํ•˜์ง€๋งŒ ์™ธ๋ถ€๋งŒ TLS ๋ฅผ ํ†ต์‹ ์ด ๊ฐ€๋Šฅํ•˜๋ฏ€๋กœ ๋‚ด๋ถ€์—์„  TLS ํ†ต์‹ ์ด ๋ถˆ๊ฐ€๋Šฅํ•ฉ๋‹ˆ๋‹ค. ACM ์„ ํ†ตํ•ด ๋„๋ฉ”์ธ์— ๋Œ€ํ•œ Cert ๋ฅผ ๋ฐœ๊ธ‰๋ฐ›์„ ์ˆ˜ ์žˆ๋Š”๋ฐ, ์ด ๊ฐ’์€ ๋‹ค์šด๋ฐ›์•„์„œ ์‚ฌ์šฉ๋ถˆ๊ฐ€๋Šฅ..

article thumbnail
[AWS] HTTP to HTTPS๋กœ ๋ฐฐํฌํ•˜๊ธฐ (S3 ๊ธฐ์ค€)
AWS 2021. 5. 21. 20:39

์ด์ „ ๊ธ€ 'Route 53 ๋„๋ฉ”์ธ ๊ตฌ๋งค ํ›„ ์—ฐ๊ฒฐํ•˜๊ธฐ'์—์„œ ๋„๋ฉ”์ธ ๊ตฌ๋งค ํ›„ S3์™€ ์—ฐ๋™์‹œ์ผฐ์Šต๋‹ˆ๋‹ค. ํ•˜์ง€๋งŒ Http๋กœ ์ ‘์†๋˜๊ธฐ ๋•Œ๋ฌธ์— ์ด๋ฅผ Https๋กœ ๋ฐ”๊ฟ”๋ณด๋Š” ์ž‘์—…์„ ํ•˜๊ฒ ์Šต๋‹ˆ๋‹ค. Https๋กœ ๋ฐ”๊พธ๊ธฐ ์œ„ํ•ด์„œ๋Š” S3, CloudFront, AWS Certificate Manager, Route53 ์„ ์ด์šฉํ•ด์•ผ ํ•ฉ๋‹ˆ๋‹ค. S3๋Š” ์ •์ ์ธ ์›น ํ˜ธ์ŠคํŒ…์ด์—ฌ์„œ EC2์™€ ๊ฐ™์€ ๋™์ ์ธ ์›น ํ˜ธ์ŠคํŒ…์˜ Https๋Š” EC2์˜ Load Balancer๋ฅผ ์ด์šฉํ•ด์•ผ ํ•ฉ๋‹ˆ๋‹ค. Route53์—์„œ ๋„๋ฉ”์ธ ๊ตฌ๋งค ํ›„ S3๋กœ ๋ฐฐํฌํ–ˆ๋‹ค๋Š” ๊ฐ€์ •ํ•˜์— ์ง„ํ–‰ํ•˜๊ฒ ์Šต๋‹ˆ๋‹ค. AWS Certificate Manager AWS์— ์ ‘์†ํ•˜์…”์„œ Certificate Manager๋กœ ์ด๋™ํ•ฉ๋‹ˆ๋‹ค. ์—ฌ๊ธฐ์„œ ์ฃผ์˜ํ•  ์ ์ด ์žˆ๋Š”๋ฐ ๋ฐ˜๋“œ์‹œ ๋ฏธ๊ตญ๋™๋ถ€(๋ฒ„์ง€๋‹ˆ์•„ ๋ถ๋ถ€)us-east-1๋กœ ..

profile on loading

Loading...