L7 Reporting
ã¢ããªã±ãŒã·ã§ã³ãã©ãã£ãã¯ãåãªããã°è¡ã§ã¯ãªããçè§£ããããããã·ã¥ããŒããšã¬ããŒããšããŠèŠãã
ã¢ã¯ã»ã¹ãã°ã ãã§ã¯äžååã§ããæ¬çªç°å¢ã§ãšã©ãŒçãäžæããããã»ãã¥ãªãã£ã€ãã³ããçºçããããããã©ãŒãã³ã¹ãäœäžããããããšãããŒã ã¯è¿ éãªçããå¿ èŠãšããŸã:ã©ã®ã¢ããªã±ãŒã·ã§ã³ã§èµ·ããã?ã©ã®URLã圱é¿ãåããã?ã©ã®ãŠãŒã¶ãŒã°ã«ãŒããã©ã®åœãã©ã®ããã¯ãšã³ããã©ã®WAAPã«ãŒã«ãã©ã®response timeç¯å²ããã®ã€ãã³ãã«é¢äžããŠããã?
åŸæ¥ã®ã¢ãããŒãã§ã¯ããããã®è³ªåã®ããã«ãã°ããšã¯ã¹ããŒããããå¥åã®ããã·ã¥ããŒãã€ã³ãã©ãæ§ç¯ãããã¬ããŒããæäœæ¥ã§èšèšãããã¡ã³ããã³ã¹è² è·ãå¥åã®éçšã«ãªããŸãããã®ã¢ãã«ã¯æéãããããããŒã ãç°ãªãããŒã«éã§åå²ããŠãæ ¹æ¬åå åæãé ãããŸãã
TR7 L7 Reportingã¯ãã¢ããªã±ãŒã·ã§ã³å±€ãã©ãã£ãã¯ãTR7ãã©ãããã©ãŒã å ã§çŽæ¥å¯èŠåããŸããçµã¿èŸŒã¿ããã·ã¥ããŒãã詳现ãªãã©ãã£ãã¯å èš³ãWAAPæ»æã¬ããŒããããã©ãŒãã³ã¹åæãã¹ã±ãžã¥ãŒã«ãããã¬ããŒãé ä¿¡ãåã管çäœéšå ã§åäœããŸãã
ãã°è¡ãæ¢ããªãã§ãã ããããã©ãã£ãã¯ãçè§£ããŠãã ããã
L7 Reportingã¯ãADCãWAAPããã«ã¹ãã§ãã¯ãããã¯ãšã³ããã¢ããªã±ãŒã·ã§ã³ããã©ãŒãã³ã¹ã·ã°ãã«ãåäžã®èгå¯ãšãªã¢ã«çµ±åããŸããéçšãã»ãã¥ãªãã£ãã³ã³ãã©ã€ã¢ã³ã¹ããŒã ãåãããŒã¿ã«åºã¥ããŠè¿ éã«æ±ºå®ããŸãã
L7å¯èŠæ§ãšã¬ããŒãæ©èœ
ã¢ããªã±ãŒã·ã§ã³ãã©ãã£ãã¯ãæå³ã®ãããã®ã«ãã3ã€ã®ã¬ã€ã€ãŒ
L7 Reportingã¯çã®ãã°ããŒã¿ãéçšå¯èŠæ§ã«å€æããŸããããã·ã¥ããŒãããã©ãã£ãã¯åæãã¬ã€ã€ãŒéçžé¢ãå ±ã«åäœããããŒã ããšã©ãŒãæ»æãããã©ãŒãã³ã¹åé¡ãããè¿ éã«çè§£ã§ããããã«ããŸãã
詳现ãªãã©ãã£ãã¯ããã«
ã¢ããªã±ãŒã·ã§ã³ãã©ãã£ãã¯ã¯ããªã¯ãšã¹ãæ°ãã¹ããŒã¿ã¹ã³ãŒããresponse timeãSSL TPSãã¹ã«ãŒãããããœãŒã¹åœãURLãIPãããã¯ãšã³ãã®ãããªçè§£ããããå èš³ã§ç£èŠãããŸãã
- ãªã¯ãšã¹ãçãSSL TPSãã¹ã«ãŒããããCPUãã¡ã¢ãªããã«
- Response timeååžãp50/p90/p99枬å®ããã¹ãã°ã©ã ãã¥ãŒ
- 2xxã3xxã4xxã5xxã¹ããŒã¿ã¹ã³ãŒãååž
- ããã¯ãšã³ããšãã«ã¹ãã§ãã¯ç¶æ ã®ãã©ãã£ãã¯ãšå ±ã«ç£èŠ
- WAAPæ»æçããããã¯ããããªã¯ãšã¹ããbanã®æ å ±
- Geo-IPååžãæãã¢ã¯ãã£ããªIPãšæãæ··éããŠããURL
äºåæ§æãããããã·ã¥ããŒããã¥ãŒ
TR7ã¯ãã¢ããªã±ãŒã·ã§ã³ããŒã¹ãšãã©ãããã©ãŒã å šäœã§äœ¿çšå¯èœãªäºåæ§æãããããã·ã¥ããŒããã¥ãŒãåããŠããŸãããªãã¬ãŒã¿ãŒã¯å¥åã®ããã·ã¥ããŒããèšèšããããšãªãã©ã€ããã©ãã£ãã¯å¯èŠæ§ãåŸãŸãã
- vServiceããã·ã¥ããŒãã§åäžã¢ããªã±ãŒã·ã§ã³ã®è©³çްã¡ããªã¯ã¹ãç£èŠãããŸã
- ã°ããŒãã«ãã©ãããã©ãŒã ããã·ã¥ããŒãã§TR7ç°å¢å šäœã®äžè¬ç¶æ ãèŠãããŸã
- ãã£ã«ã¿ãŒãšããªã«ããŠã³ãªãã·ã§ã³ã§ã€ãã³ãã®è©³çްã«å ¥ãããšãã§ããŸã
- æéç¯å²ãã£ã«ã¿ãŒã§æåŸã®åãæåŸã®æéãæåŸã®æ¥ããŸãã¯ã«ã¹ã¿ã æéã調æ»ã§ããŸã
- ããã·ã¥ããŒãã¯äºåæ§æãããŠæ¥ãŠãå¿ èŠã«å¿ããŠã«ã¹ã¿ãã€ãºã§ããŸã
ã¬ã€ã€ãŒéçžé¢
åé¡ãçºçããããçµæã ãã§ãªãåå ãžã®éãèŠãå¿ èŠããããŸããL7 Reportingã¯ADCãWAAPãããã¯ãšã³ãããã«ã¹ãã§ãã¯ãresponse timeã·ã°ãã«ãåãæé軞ã§çµ±åããŸãã
- ADCã¡ããªãã¯ãWAAPæ»æã·ã°ãã«ããã«ã¹ãã§ãã¯ãããã¯ãšã³ãç¶æ ãå ±ã«ç£èŠãããŸã
- 5xxå¢å ãããã°ãåé¡ãã¢ããªã±ãŒã·ã§ã³ã«ããããããã¯ãšã³ãã«ããããWAAPããªã·ãŒã«ãããèŠãããŸã
- ããã©ãŒãã³ã¹äœäžã¯URLãvServiceãããã¯ãšã³ãã¬ãã«ã§åé¢ã§ããŸã
- 容éèšç»ã®ããã«ã©ã®ã¢ããªã±ãŒã·ã§ã³ã飜åã«è¿ã¥ããŠãããèŠãããŸã
- ã³ã³ãã©ã€ã¢ã³ã¹ã¬ããŒãã®ããã«ã©ã€ãã§æ€èšŒå¯èœãªãã©ãã£ãã¯èšŒæ ãäœæãããŸã
TR7å ã§åäœããçµã¿èŸŒã¿L7åæã¬ã€ã€ãŒ
L7 Reportingã¯ãåã«ãã°ãå€éšã«éä¿¡ããããŒã¿åºåãã€ã³ãã§ã¯ãããŸãããTR7ãã©ãããã©ãŒã å ã§åäœããã¢ããªã±ãŒã·ã§ã³ãã©ãã£ãã¯ãããã·ã¥ããŒããã¬ããŒããåæã¬ã€ã€ãŒã«å€æããçµã¿èŸŒã¿èг坿©èœã§ãã
- TR7äžã®çµã¿èŸŒã¿L7åæãšã³ãžã³
- å¥åã®GrafanaãPrometheusããŸãã¯SIEMã€ã³ãã©ã¯å¿ é ã§ã¯ãããŸãã
- ãã°ãšã¡ããªã¯ã¹ããŒã¿ã¯çµç¹ç®¡çäžã®TR7管çãšãªã¢ã«ä¿åã§ããŸã
- äºåæ§æãããããã·ã¥ããŒããéããŠçŽæ¥å¯èŠæ§ãæäŸãããŸã
- REST APIã§å€éšã·ã¹ãã ã«ããŒã¿ã転éã§ããŸã
- åžæããã°SIEMã¹ããªãŒãã³ã°ã©ã€ã³ã§äŒæ¥ã»ãã¥ãªãã£éçšã«æ¥ç¶ãããŸã
- Central Managementã«ãããã«ããªãŒãžã§ã³ TR7ç°å¢ã§éäžã¬ããŒãããµããŒããããŸã
- ä¿ææéãšã¬ããŒãç¯å²ã¯çµç¹ããªã·ãŒã«åŸã£ãŠç®¡çã§ããŸã
L7 Reportingãåäœãã4ã€ã®éèŠãªé å
L7 Reportingã¯ãéçšãã»ãã¥ãªãã£ãããã©ãŒãã³ã¹ãç£æ»ããŒã ãåããã©ãã£ãã¯çŸå®ã«åºã¥ããŠäœæ¥ã§ããããã«ããŸããåé¡ãçºçãããããã°ãæ¢ã代ããã«ããã·ã¥ããŒãããã€ãã³ããæå³ä»ããŸãã
5xxå¢å ã€ã³ã·ãã³ã調æ»
æ¬çªç°å¢ã§çªç¶ã®5xxå¢å ãèŠãããŸããéçšããŒã ã¯ãšã©ãŒãã©ã®ã¢ããªã±ãŒã·ã§ã³ãã©ã®URLãã©ã®ããã¯ãšã³ããã©ã®æéç¯å²ã§éäžããŠããããããã«çè§£ããããšèããŸãã
L7 Reportingã¯5xxå¢å ãvServiceãURLãresponse timeãããã¯ãšã³ãã®å èš³ã§è¡šç€ºããŸãããã«ã¹ãã§ãã¯ãWAAPã·ã°ãã«ãããã¯ãšã³ãç¶æ ãåãæé軞ã§è¡šç€ºãããŸããæ ¹æ¬åå åæãå éãããŸãã
容éèšç»
æ°ãããã£ã³ããŒã³ãããŒã¯æéããŸãã¯ã·ã¹ãã æé·ã®åã«ãã©ã®ã¢ããªã±ãŒã·ã§ã³ãããå€ãã®å®¹éãå¿ èŠãšããŠããããç¥ãå¿ èŠããããŸãã
ã°ããŒãã«ããã·ã¥ããŒãã¯vServiceãšããã¯ãšã³ãã¬ãã«ã§ãã©ãã£ãã¯ãã¬ã³ãã衚瀺ããŸããã©ã®ã¢ããªã±ãŒã·ã§ã³ãæé·ããŠããããã©ãã飜åã«è¿ã¥ããŠããããã©ã®ãªãœãŒã¹ã匷åããå¿ èŠãããããããŒã¿ã§èŠãããŸãã
ã³ã³ãã©ã€ã¢ã³ã¹ãšç£æ»ã¬ããŒã
ç£æ»äººã¯éå»90æ¥éã§ã©ã®ã¢ããªã±ãŒã·ã§ã³ã«ã©ãã ãã®ãã©ãã£ãã¯ãæ¥ãããäœä»¶ã®æ»æããããã¯ãããããã©ã®ãœãŒã¹ãããªã¹ã¯ã®ãããªã¯ãšã¹ããæ¥ãããã©ã®ã»ãã¥ãªãã£ã³ã³ãããŒã«ãåäœããããèŠãããšèããŸãã
L7 Reportingã¯WAAPæ»æããããã¯ããããªã¯ãšã¹ããã¿ãŒã²ããvServiceããœãŒã¹åœãIPããã©ãã£ãã¯ãã¿ãŒã³ã®ã¬ããŒããçæããŸããPDF/XLSXåºåã¯ç£æ»ããã»ã¹ã§èšŒæ ãšããŠäœ¿çšã§ããŸãã
ããã©ãŒãã³ã¹ååž°åæ
æ°ããã¢ããªã±ãŒã·ã§ã³ããŒãžã§ã³ã®åŸããŠãŒã¶ãŒãé ããå ±åãå§ããŸããããŒã ã¯ã©ã®URLãé ããªã£ãããã©ã®ããã¯ãšã³ããé ãå¿çããããp99 response timeå€ãã©ãå€åããããèŠãããšèããŸãã
Response timeããã«ãšãã¹ãã°ã©ã ã¯å€ãæéãšæ°ããæéã®æ¯èŒã容æã«ããŸããé ããªã£ãURLã圱é¿ãåããããã¯ãšã³ããåé¡ã®ããæéç¯å²ãè¿ éã«ç¹å®ãããŸãã
vServiceæ°ã«ããã©ã€ã»ã³ã¹
L7 Reportingã¯ã¬ããŒãããã¹ã±ãŒã«ããŒãã¹ã®æ°ã«ãã£ãŠã©ã€ã»ã³ã¹ãããŸããå°èŠæš¡ãããã€ããå€ã¢ããªã±ãŒã·ã§ã³äŒæ¥ç°å¢ããµãŒãã¹ãããã€ããŒã·ããªãªãŸã§ã¹ã±ãŒã«ããŸãã
åADCã©ã€ã»ã³ã¹ã§ãç¹å®æ°ã®vServiceã«å¯ŸããŠåºæ¬çãªL7 Reporting容éãæšæºãšããŠæäŸãããŸããããåºãã¬ããŒãããŒãºã®ããã«è¿œå ã®å®¹éãã£ã¢ãæå¹åãããŸãã
PAYG顧客ã®å ŽåãL7 Reportingã¯PAYG Extra Packageå ã§L4 DDoSããã³L7 DDoSæ©èœãšå ±ã«æäŸã§ããŸãã
ãã©ãã£ãã¯å¯èŠæ§ãç£æ»ãæ€æ»ã®ããã®åŒ·åãªã¬ããŒãã¬ã€ã€ãŒ
L7 Reportingã¯ãã¢ããªã±ãŒã·ã§ã³ãã©ãã£ãã¯ãã»ãã¥ãªãã£ã€ãã³ããã¢ã¯ã»ã¹ãã¿ãŒã³ãæ»æã¬ããŒããå¯èŠåããããšã«ãããç£æ»ãšã³ã³ãã©ã€ã¢ã³ã¹ããã»ã¹ããµããŒãããŸãã
GDPR第32æ¡
å人ããŒã¿ãåŠçããã·ã¹ãã ã§ã¢ã¯ã»ã¹ãã¿ãŒã³ãã»ãã¥ãªãã£ã€ãã³ãããã©ãã£ãã¯å¯èŠæ§ã«ããæè¡çæªçœ®ã®ç£èŠããµããŒãããŸãã
EBA Guidelines on ICT Risk / DORA
éèã·ã¹ãã ã«ããããã©ãã£ãã¯ç£èŠã容éã¬ããŒããã€ã³ã·ãã³ã調æ»ãéçšç£æ»å¯èœæ§ã®ããŒãºã«è²¢ç®ããŸãã
PCI DSS 4.0.1 Req 10
ã«ãŒãä¿æè ããŒã¿ç°å¢ã«ã¢ã¯ã»ã¹ããã¢ããªã±ãŒã·ã§ã³ã§ãã©ãã£ãã¯ã€ãã³ããæ»æã¬ããŒããã¢ã¯ã»ã¹ãã¿ãŒã³ã®ç£æ»å¯èœãªç£èŠããµããŒãããŸãã
HIPAAããã³å»çããŒã¿èŠå¶
æ£è ããŒã¿ã·ã¹ãã ãžã®ã¢ã¯ã»ã¹ãã¢ããªã±ãŒã·ã§ã³äœ¿çšãã»ãã¥ãªãã£ã€ãã³ãã®ããã®ã¬ããŒãå¯èœãªãã©ãã£ãã¯å¯èŠæ§ãæäŸããŸãã
ãã¬ãã¢ã ã¢ããªã³ â L7ãã©ãã£ãã¯å¯èŠæ§
L7 Reportingã¯TR7ã®BaseãGeoãSecureãEnterpriseããã±ãŒãžã«ãã¬ãã¢ã ã¢ããªã³ãšããŠè¿œå ã§ããŸããçµã¿èŸŒã¿ããã·ã¥ããŒãããã©ãã£ãã¯åæãã¬ã€ã€ãŒéçžé¢ãã¬ããŒãåºåãREST APIã¢ã¯ã»ã¹ãã¢ããªã³ç¯å²å ã§æäŸãããŸãã
- BaseãGeoãSecureãEnterpriseããã±ãŒãžãã¹ãŠã«è¿œå ã§ããŸã
- ããŒããŠã§ã¢ã¢ãã©ã€ã¢ã³ã¹ãŸãã¯ä»®æ³ãã·ã³ã§å®è¡ã§ããŸã
- å¥åã®GrafanaãPrometheusããŸãã¯SIEMã€ã³ãã©æè³ã¯å¿ é ã§ã¯ãããŸãã
- Central Managementã«ãããã«ããªãŒãžã§ã³ TR7ç°å¢ã§éäžã¬ããŒããå®è¡ã§ããŸã
- REST APIã§å€éšã·ã¹ãã ãžã®ããŒã¿åºåããµããŒããããŸã
- SIEMã¹ããªãŒãã³ã°ã©ã€ã³ã¯ãªãã·ã§ã³ã§äœ¿çšã§ããŸã
ãã©ãã£ãã¯ãéãã ãã§ãªããçè§£ããŠãã ãã
L7 Reportingãã¢ã§ããªãèªèº«ã®ã·ããªãªã«æ²¿ã£ãŠé²ã¿ãŸããã:ã©ã®vServiceãã¬ããŒããããããã©ã®ããã·ã¥ããŒãã䜿çšãããããã©ã®ã¬ããŒããã¹ã±ãžã¥ãŒã«ãããããã»ãã¥ãªãã£/éçšããŒã ãã©ã®ã¡ããªã¯ã¹ã远跡ãããã