https://qiita.com/jkudo/items/0c1e2588811d978f0742
https://www.alibabacloud.com/help/ja/cdn/getting-started/cdn-getting-started
https://www.alibabacloud.com/help/ja/cdn/getting-started/verify-the-ownership-of-a-domain-name
https://www.alibabacloud.com/help/en/cdn/developer-reference/api-cdn-2018-05-10-addcdndomain
https://www.alibabacloud.com/help/ja/cdn/getting-started/add-a-cname-record-for-a-domain-name
前提:
Alibaba Cloud CDN アクティベート済み
-- 1. 配信元サーバの作成
cat <<-'EOF' | base64
#!/bin/bash
yum install -y httpd
systemctl start httpd
systemctl enable httpd
echo $(uname -n) > /var/www/html/index.html
EOF
echo "IyEvYmluL2Jhc2gKeXVtIGluc3RhbGwgLXkgaHR0cGQKc3lzdGVtY3RsIHN0YXJ0IGh0dHBkCnN5c3RlbWN0bCBlbmFibGUgaHR0cGQKZWNobyAkKHVuYW1lIC1uKSA+IC92YXIvd3d3L2h0bWwvaW5kZXguaHRtbAo=" | base64 -d
cat <<-'EOF' > variables.tf
locals {
availability_zone = "ap-northeast-1a"
}
variable "instance_type" {
description = "instance_type"
type = string
default = "ecs.t5-lc2m1.nano"
}
variable "image_id" {
description = "image_id"
type = string
default = "aliyun_2_1903_x64_20G_alibase_20231221.vhd"
}
EOF
cat <<-'EOF' > main.tf
terraform {
required_version = ">= 1.0.0, < 2.0.0"
required_providers {
alicloud = {
source = "aliyun/alicloud"
version = "= 1.217.0"
}
}
}
provider "alicloud" {
region = "ap-northeast-1"
}
resource "alicloud_vpc" "vpc01" {
vpc_name = "vpc01"
description = "vpc01"
cidr_block = "10.2.0.0/16"
}
resource "alicloud_vswitch" "sw01" {
vswitch_name = "sw01"
description = "sw01"
vpc_id = alicloud_vpc.vpc01.id
cidr_block = "10.2.1.0/24"
zone_id = local.availability_zone
}
resource "alicloud_security_group" "sg01" {
name = "sg01"
description = "sg01"
vpc_id = alicloud_vpc.vpc01.id
security_group_type = "normal"
}
resource "alicloud_security_group_rule" "sg0101" {
type = "ingress"
ip_protocol = "tcp"
port_range = "80/80"
security_group_id = alicloud_security_group.sg01.id
nic_type = "intranet"
policy = "accept"
priority = 10
cidr_ip = "0.0.0.0/0"
description = "sg0101"
}
resource "alicloud_vpc_ipv4_gateway" "gw01" {
ipv4_gateway_name = "gw01"
ipv4_gateway_description = "gw01"
vpc_id = alicloud_vpc.vpc01.id
enabled = true
}
# ルートテーブルへvSwitchの関連付け
resource "alicloud_route_table_attachment" "sw01_rt01" {
vswitch_id = alicloud_vswitch.sw01.id
route_table_id = alicloud_vpc.vpc01.route_table_id
}
# ルートテーブルへカスタムルート追加
resource "alicloud_route_entry" "rt0101" {
name = "rt0101"
route_table_id = alicloud_vpc.vpc01.route_table_id
destination_cidrblock = "0.0.0.0/0"
nexthop_type = "Ipv4Gateway"
nexthop_id = alicloud_vpc_ipv4_gateway.gw01.id
}
resource "alicloud_instance" "ecs01" {
image_id = var.image_id
instance_type = var.instance_type
security_groups = [alicloud_security_group.sg01.id]
instance_name = "ecs01"
system_disk_category = "cloud_ssd"
system_disk_name = "ecs01"
system_disk_size = 20
description = "ecs01"
internet_charge_type = "PayByBandwidth"
internet_max_bandwidth_out = 0
host_name = "ecs01"
vswitch_id = alicloud_vswitch.sw01.id
instance_charge_type = "PostPaid"
key_name = "alibabakey01"
deletion_protection = false
credit_specification = "Standard"
user_data = "IyEvYmluL2Jhc2gKeXVtIGluc3RhbGwgLXkgaHR0cGQKc3lzdGVtY3RsIHN0YXJ0IGh0dHBkCnN5c3RlbWN0bCBlbmFibGUgaHR0cGQKZWNobyAkKHVuYW1lIC1uKSA+IC92YXIvd3d3L2h0bWwvaW5kZXguaHRtbAo="
}
resource "alicloud_eip_address" "eip01" {
address_name = "eip01"
bandwidth = 1
deletion_protection = false
description = "eip01"
internet_charge_type = "PayByTraffic"
isp = "BGP"
payment_type = "PayAsYouGo"
netmode = "public"
}
# インスタンスとEIPの関連付け
resource "alicloud_eip_association" "ecs01_eip01" {
instance_id = alicloud_instance.ecs01.id
allocation_id = alicloud_eip_address.eip01.id
}
EOF
cat <<-'EOF' > outputs.tf
output "vpc01_id" {
value = alicloud_vpc.vpc01.id
description = "vpc01.id"
}
output "sw01_id" {
value = alicloud_vswitch.sw01.id
description = "sw01.id"
}
output "sg01_id" {
value = alicloud_security_group.sg01.id
description = "sg01.id"
}
output "ecs01_id" {
value = alicloud_instance.ecs01.id
description = "ecs01.id"
}
EOF
terraform init
terraform fmt
terraform -version
terraform plan
terraform apply -auto-approve
-- 2. ドメインの追加
aliyun cdn DescribeDomainVerifyData \
--DomainName www.example.com
表示された「verifyKey」をホスト名、「verifiCode」を値としたTXTレコードを
DNSサービスプロバイダーの管理コンソールで、登録
aliyun cdn VerifyDomainOwner \
--DomainName www.example.com \
--VerifyType dnsCheck
aliyun cdn DescribeVerifyContent \
--DomainName www.example.com
aliyun cdn AddCdnDomain \
--CdnType web \
--DomainName www.example.com \
--Sources '[
{
"content": "192.0.2.1",
"type": "ipaddr",
"priority": "20",
"port": 80,
"weight": "15"
}
]' \
--Scope overseas
aliyun cdn DescribeCdnDomainDetail \
--DomainName www.example.com
-- 3. CNAMEの設定
コンソールでCNAMEを確認
CNAME：www.example.com.w.cdngslb.com
DNSサービスプロバイダーの管理コンソールで実行
nslookup -type=CNAME www.example.com
aliyun cdn DescribeDomainCname \
--DomainName www.example.com
-- 4. 動作確認
curl -I http://www.example.com
-- 5. クリーンアップ
aliyun cdn DescribeCdnDomainDetail \
--DomainName www.example.com
aliyun cdn DeleteCdnDomain \
--DomainName www.example.com
DNSサービスプロバイダーの管理コンソールで下記レコード削除
TXT
CNAME
terraform destroy -auto-approve
