SlideShare a Scribd company logo
1 of 16
Download to read offline
White Paper
Citrix NetScaler
Deployment
Guide
2
citrix.com
White Paper
Table of Contents
Citrix NetScaler ADC Overview ...........................................................................................................................3
		 Standard Edition ..........................................................................................................................................3
		 Enterprise Edition ........................................................................................................................................3
		 Platinum Edition ...........................................................................................................................................4
		 Software Options ........................................................................................................................................4
NetScaler ADC Features and Benefits ...............................................................................................................4
NetScaler MPX portfolio and hardware information .......................................................................................6
Network Topology ..................................................................................................................................................6
	 Where Does a NetScaler Fit in the Network? ...........................................................................................6
		 Physical Deployment Modes ....................................................................................................................7
		 Citrix NetScaler as an L2 Device .............................................................................................................8
		 Citrix NetScaler as a Packet Forwarding Device .................................................................................8
How a NetScaler Communicates with Clients and Servers ..........................................................................9
	 Traffic Management Building Blocks ..........................................................................................................9
		 A Simple Load Balancing Configuration ..............................................................................................10
Understanding Policies and Expressions ........................................................................................................11
Accelerating Load Balanced Traffic by Using Compression .......................................................................12
Accessing a Citrix NetScaler ..............................................................................................................................12
	 Using the Command Line Interface ..........................................................................................................12
		 Logging on to the Command Line Interface through the Console Port ........................................12
		 Logging on to the Command Line Interface by using SSH .............................................................13
	 Using the Graphical User Interface ...........................................................................................................13
Quick Start Installation and Configuration ......................................................................................................13
	 Configuration Requirements .......................................................................................................................13
	 Setting Up Connectivity ...............................................................................................................................14
		 Configuration Utility Setup .......................................................................................................................14
		 To configure the NetScaler by using the configuration utility ..........................................................14
		 CLI Setup ....................................................................................................................................................14
		 LCD Keypad Setup ...................................................................................................................................15
Additional Information ..........................................................................................................................................15
3
citrix.com
White Paper
Citrix NetScaler ADC Overview
The Citrix®
NetScaler®
ADC product line optimizes delivery of applications over the Internet and
private networks. NetScaler is an application delivery controller (ADC) that accelerates application
performance, enhances application availability with advanced L4-7 load balancing, secures mission-
critical apps from attacks and lowers server expenses by offloading computationally intensive tasks.
All these capabilities are combined into a single, integrated appliance for increased productivity, with
lower overall total cost of ownership.
NetScaler is deployed in front of web, application and database servers. It combines high-speed
L4-7 load balancing and content switching with application acceleration, data compression, static
and dynamic content caching, SSL acceleration, network optimization, application performance
monitoring application visibility and robust application security via an application firewall.
NetScaler appliances are installed in the data center and route all connections to back-end servers.
The NetScaler features are enabled and the policies configured are then applied to incoming
and outgoing traffic. NetScaler requires no additional client or server side software, and can be
configured using the NetScaler web-based GUI, RESTful API (“Nitro”) and CLI configuration utilities.
NetScaler is available as a high-performance network appliance and a virtual appliance for maximum
deployment flexibility. The hardware based MPX appliances with multi-core processor designs are
available with a wide range of appliance availability; from sub gigabit throughput to 50 Gbps. Each
leverages a fully hardened and secure operating system.
NetScaler appliances provide multi-dimensional scalability for a superior ROI. Pay-As-You-Grow and
Burst Pack upgrade licenses enable specific models to be upgraded to higher-end models within a
particular platform via a software license. NetScaler SDX models allow up to 40 fully independently
managed NetScaler instances to run on a single platform. NetScaler with Citrix TriScale clustering
allows up to 32 NetScaler appliances (of the same platform, model and edition) to be aggregated
into a single group to increase aggregate app delivery capacity.
NetScaler solutions are available in three software editions: Standard, Enterprise, and Platinum.
These editions offer the following feature sets:
Standard Edition
NetScaler Standard Edition provides comprehensive layer 4-7 load balancing and content switching,
SSL acceleration and server offload capabilities.
Enterprise Edition
NetScaler Enterprise Edition is a highly integrated application delivery solution. It includes all
Standard Edition capabilities, plus dynamic routing support, data compression (AppCompress),
global server load balancing (GSLB), surge protection, priority queuing, L7 DoS protection, AAA for
traffic management and cache redirection. Enterprise Edition also includes Citrix Command Center
software.
4
citrix.com
White Paper
Platinum Edition
NetScaler Platinum Edition is the most integrated and feature-rich NetScaler offering. It includes all
Enterprise Edition capabilities, plus content caching (AppCache), web application firewall, NetScaler
Cloud Bridge and EdgeSight for NetScaler application performance monitoring. It also includes Citrix
Command Center software and NetScaler Cloud Bridge.
Note: NetScaler clustering license upgrades are available on all NetScaler MPX and VPX models and
software editions.
Software Options
The following options are available for NetScaler MPX appliances.
	 •	Global Server Load Balancing (GSLB) - Directs user requests to the data center best 			
		 able to handle it. Requests can be redirected based on dynamic changes in global network 		
		 performance, site connectivity and availability. Server location, load and many other factors 		
		 determine the optimal server to use.
	 •	NetScaler AppCompress™ - Improves end-user performance and reduces bandwidth 		
		 consumption by compressing HTML/text content before transmission to clients. 			
		 AppCompress supports both encrypted and unencrypted data.
	 •	AppCache™ – Citrix NetScaler AppCache improves application performance by storing 		
		 cacheable content, both static and dynamic, directly on the NetScaler platform. Multiple 		
		 techniques ensure content freshness.
	 •	NetScaler Application Firewall™ – NetScaler Application Firewall ensures security at the 		
		 application layer. It is an ICSA-certified web application firewall that automatically blocks 		
		 malicious web traffic.
	 •	Citrix EdgeSight™ for NetScaler – EdgeSight for NetScaler is a transparent tool to 			
		 measure end-user performance, and does not require a client-based agent. EdgeSight for 		
		 NetScaler helps evaluate performance issues and monitor trends to anticipate future 			
		 unacceptable performance levels allowing proactive network changes. Numerous application 		
		 performance parameters, such as time to download a page and round trip response times, 		
		 are stored and displayed in a variety of formats.
Click here for the NetScaler Product Overview.
NetScaler ADC Features and Benefits
Table 1 summarizes the features and benefits of the NetScaler MPX Appliances.
Table 1: Features and Benefits
Feature
Availability
Application switching
Benefit
The Citrix NetScaler appliances provide load-balancing and content-switching functions with granular
traffic control based on customizable Layer 4 through 7 rules with support for both IPv4 and IPv6
addresses, virtual IP addresses (VIPs) and server farms.
NetScaler can natively load-balance the following protocols in an IPv4 environment: HTTP/HTTPS,
FTP, DNS, ICMP, SIP, RTSP, Extended RTSP, LDAP, RADIUS, SCCP and Microsoft RDP. In an IPv6
environment, it can natively load-balance HTTP, HTTPS and SSL protocols. It has generic protocol parsing
capabilities that enable the configuration of application switching and persistence policies
5
citrix.com
White Paper
based on any information in the traffic payload for custom and packaged applications without requiring
any programming.
NetScaler supports translation and load balancing between IPv4 and IPv6 networks and provides flexibility
to customers in planning their IPv6 migration.
Stickiness allows the same client to maintain multiple simultaneous or subsequent TCP or IP connections
with the same real server for the duration of a session
Stateful failover capabilities help ensure resilient network protection for enterprise network environments.
NetScaler integrates global server load balancing to provide a multiple data center scaling and failover
system.
NetScaler checks the health of application servers and server farms through configuration of health
probes.
SQL-aware health monitors increase availability of database servers. SQL connection offload increases
database server performance and aids in scaling database servers. SQL intelligent load balancing enables
scaling out database deployments to routing SQL requests to the most appropriate server.
Citrix TriScale clustering allows up to 32 appliances to work in concert to deliver one or multiple
applications. The result is a cost effective and simple option for scaling out application delivery
infrastructures.
NetScaler delivers up to 11 Gbps data compression and provides faster application performance for
application users.
NetScaler MPX and SDX integrates hardware-based SSL acceleration technology, which offloads the
encryption and decryption of up to 11 Gbps of SSL traffic from servers,
Offload web, application, and database servers from compute intensive tasks such as TCP connection
management, SSL encryption/decryption and in-memory caching of both dynamic and static content.
Deliver application content immediately, both static and Dynamic, without burdening servers.
NetScaler protects the data center and critical applications from protocol and denial-of-service (DoS)
attacks at both L4 and L7 and encrypts mission-critical content.
NetScaler Web Application Firewall provides deep protocol inspection capabilities, which enables IT
professionals to comprehensively secure high-value applications in the data center. It secures mission-
critical applications and protects against identity theft, data theft, application disruption, and fraud and
defends web-based applications and transactions against targeted attacks by professional hackers.
NetScaler uses a hybrid model including scanning over 3000 signatures for preventing known attack
vectors.
Policy-based bidirectional rewriting of HTTP header, payload elements and URLs. Policy-based redirection
of incoming requests. Responder module with custom responses and redirects. Policy-based routing and
network aware policies.
L3 and L4 access control lists. Network Address Translation.
NetScaler SDX provides a means for creating complete resource segmentation and isolation, allowing
the NetScaler appliance to act as if it were several individual appliances within a single physical
appliance. NetScaler SDX enable organizations to provide defined levels of service to up to 40 business
departments, applications, or customers and partners from a single NetScaler SDX appliance.
RBAC allows organizations to specify administrative roles and restrict administrators to specific functions
within the appliance or virtual contexts, allowing each administrator group to freely perform its tasks
without affecting the other groups.
Through consolidation of application switching, SSL acceleration, data center security, and other functions
on one device, NetScaler helps achieve better application performance, with fewer devices, simpler
network designs, and easier management.
NetScaler supports virtualization with one administrator device and up to 40 virtual contexts, 400,000
SSL transactions per second (TPS), and up to 11 Gbps of compression. The licensed throughput can be
increased to up to 50 Gbps without the need for new equipment, through software license upgrades.
Persistency
Redundancy
Server health monitoring
Database load balancing
Clustering
Performance
Compression
SSL acceleration
TCP offload
Caching
Security
Datacenter security
Application Security
Content rewrite and
response control
Packet filtering
Virtualized Services
Virtual contexts
Role-based access
control (RBAC)
Function consolidation
Deployment and
Management
Investment protection
6
citrix.com
White Paper
Operational visibility
Network Topology
Where Does a NetScaler Fit in the Network?
NetScaler resides in front of web and applications servers, so that client requests and server
responses pass through it. In a typical installation, virtual servers (vservers) configured on the
NetScaler provide connection/termination points that clients use to access the applications
delivered by NetScaler. In this case, the NetScaler owns public IP addresses that are associated
with its vservers, while the real servers are isolated in a private network. It is also possible to operate
the NetScaler in a transparent mode as an L2 bridge or L3 router, or even to combine aspects of
these and other modes.
Provides network administrators application level details; AppFlow extends network monitoring to include
granular application-layer visibility. By using IPFIX standard extensions NetScaler can provide inputs into a
wide variety of monitoring tools. This eliminates span ports and network taps.
AppExpert Visual Policy Builder visually builds the policy for every web app delivery feature without
programming. AppExpert Templates provide pre-configured settings to optimize specific applications.
Integrated, easy-to-use application analysis and policy-based control. Complements AppFlow with insight
into full web application and SQL environments. Provides real-time monitoring and adaptive policy controls
that transform raw data into actionable information to deliver better business intelligence and automatically
tune application delivery policies.
AppExpert framework
ActionAnalytics
NetScaler MPX portfolio and hardware information
Table 2: NetScaler MPX platform options and specifications.
NetScaler
MPX Model
Throughput
(Gbps)
Compression
(Gbps)
SSL
Throughput
(Gbps)
SSL TPS: 1K
& 2K Key
(K)
HTTP
Requests
per Second
(K/s)
5550
5650
8200
8400
8600
11500
13500
14500
16500
17550
18500
19550
20500
20550
21550
0.5
1
2
4
6
8
12
18
24
20
36
30
42
40
50
0.5
1
1.1
2.3
3.5
3.5
4.5
5
6
7
7
8
8
9
11
0.5
1
2
4
5.5
6
6.5
7
10
8
10.5
9
11
10
11
7.5/1.5
10/2
13/2.8
25/5.7
40/8.5
80/15
93/19
105/22
133/28
150/33
158/34
245/50
205/45
330/73
380/98
175
250
350
600
800
1,200
1,600
1,800
2,000
2,400
2,500
3,500
2,600
4,000
4,000
7
citrix.com
White Paper
Physical Deployment Modes
NetScaler can be deployed in either of two physical modes: inline and one-arm. In inline mode,
multiple network interfaces are connected to different Ethernet segments, and the NetScaler is
placed between the clients and the servers. The NetScaler has a separate network interface to
each client network and a separate network interface to each server network. The NetScaler and
the servers can exist on different subnets in this configuration. It is possible for the servers to be
in a public network and the clients to directly access the servers through the NetScaler, with the
NetScaler transparently applying the L4-L7 features. Usually, vservers are configured to provide an
abstraction of the real servers.
The following figure shows a typical inline deployment.
Figure 1- Inline Deployment
In one-arm mode, only one network interface of the NetScaler is connected to an Ethernet
segment. The NetScaler in this case does not isolate the client and server sides of the network, but
provides access to applications through configured vservers. One-arm mode can simplify network
changes needed for NetScaler installation in some environments.
8
citrix.com
White Paper
Citrix NetScaler as an L2 Device
A NetScaler functioning as an L2 device is said to operate in L2 mode. In L2 mode, the NetScaler
forwards packets between network interfaces when all of the following conditions are met:
	 •	The packets are destined to another device’s media access control (MAC) address.	 	 	
	 •	The destination MAC address is on a different network interface.	 	 	 	 	
	 •	The network interface is a member of the same virtual LAN (VLAN).
By default, all network interfaces are members of a pre-defined VLAN, VLAN 1. Address Resolution
Protocol (ARP) requests and responses are forwarded to all network interfaces that are members of
the same VLAN. To avoid bridging loops, L2 mode must be disabled if another L2 device is working
in parallel with the NetScaler.
Citrix NetScaler as a Packet Forwarding Device
A NetScaler can function as a packet forwarding device, and this mode of operation is called
L3 mode. With L3 mode enabled, the NetScaler forwards any received unicast packets that are
destined for an IP address that it does not have internally configured, if there is a route to the
destination. A NetScaler can also route packets between VLANs.
In both modes of operation, L2 and L3, a NetScaler generally drops packets that are in:
	 •	Multicast frames	 	 	 	 	 	 	 	 	 	 	
	 •	Unknown protocol frames destined for a NetScaler’s MAC address (non-IP and non-ARP)	 	
	 •	Spanning Tree protocol (unless BridgeBPDUs is ON)
How a NetScaler Communicates with Clients and Servers
A NetScaler appliance is usually deployed in front of a server farm and functions as a transparent
TCP proxy between clients and servers, without requiring any client-side configuration. This basic
mode of operation is called Request Switching technology and is the core of NetScaler functionality.
Request Switching enables a NetScaler to multiplex and offload the TCP connections, maintain
Figure 2- Topology Diagram for One-Arm Mode, Multiple Subnets
9
citrix.com
White Paper
persistent connections, and manage traffic at the request (application layer) level. This is possible
because the NetScaler can separate the HTTP request from the TCP connection on which the
request is delivered.
Depending on the configuration, a NetScaler may process the traffic before forwarding the request
to a server. For example, if the client attempts to access a secure application on the server, the
NetScaler might perform the necessary SSL processing before sending traffic to the server.
To facilitate efficient and secure access to server resources, a NetScaler uses a set of IP
addresses collectively known as NetScaler-owned IP addresses. To manage your network traffic,
you assign NetScaler-owned IP addresses to virtual entities that become the building blocks of
your configuration. For example, to configure load balancing, you create virtual servers (vservers)
to receive client requests and distribute them to services, which are entities representing the
applications on your servers.
Traffic Management Building Blocks
The configuration of a NetScaler is typically built up with a series of virtual entities that serve as
building blocks for traffic management. The building block approach helps separate traffic flows.
Virtual entities are abstractions, typically representing IP addresses, ports, and protocol handlers
for processing traffic. Clients access applications and resources through these virtual entities. The
most commonly used entities are vservers and services. Vservers represent groups of servers in a
server farm or remote network, and services represent specific applications on each server.
Most features and traffic settings are enabled through virtual entities. For example, you can
configure a NetScaler to compress all server responses to a client that is connected to the server
farm through a particular vserver. To configure the NetScaler for a particular environment, you need
to identify the appropriate features and then choose the right mix of virtual entities to deliver them.
Most features are delivered through a cascade of virtual entities that are bound to each other. In
this case, the virtual entities are like blocks being assembled into the final structure of a delivered
application. You can add, remove, modify, bind, enable, and disable the virtual entities to configure
the features. The following figure shows the concepts covered in this section.
Figure 3. How Traffic Management Building Blocks Work
10
citrix.com
White Paper
A Simple Load Balancing Configuration
In the example shown in the following figure, the NetScaler is configured to function as a load
balancer. For this configuration, you need to configure virtual entities specific to load balancing and
bind them in a specific order. As a load balancer, a NetScaler distributes client requests across
several servers and thus optimizes the utilization of resources.
The basic building blocks of a typical load balancing configuration are services and load balancing
vservers. The services represent the applications on the servers. The vservers abstract the servers
by providing a single IP address to which the clients connect. To ensure that client requests are
sent to a server, you need to bind each service to a vserver. That is, you must create services for
every server and bind the services to a vserver. Clients use the VIP to connect to a NetScaler. When
the NetScaler receives client requests on the VIP, it sends them to a server determined by the load
balancing algorithm. Load balancing uses a virtual entity called a monitor to track whether a specific
configured service (server plus application) is available to receive requests.
Figure 4. Load Balancing Virtual Server, Services, and Monitors
In addition to configuring the load balancing algorithm, you can configure several parameters that
affect the behavior and performance of the load balancing configuration. For example, you can
configure the vserver to maintain persistence based on source IP address. The NetScaler then
directs all requests from any specific IP address to the same server.
Understanding Policies and Expressions
A policy defines specific details of traffic filtering and management on a NetScaler. It consists of two
parts: the expression and the action. The expression defines the types of requests that the policy
matches. The action tells the NetScaler what to do when a request matches the expression. As
an example, the expression might be to match a specific URL pattern to a type of security attack,
with the action being to drop or reset the connection. Each policy has a priority, and the priorities
determine the order in which the policies are evaluated.
11
citrix.com
White Paper
When a NetScaler receives traffic, the appropriate policy list determines how to process the traffic.
Each policy on the list contains one or more expressions, which together define the criteria that a
connection must meet to match the policy.
For all policy types except Rewrite policies, a NetScaler implements only the first policy that a
request matches, not any additional policies that it might also match. For Rewrite policies, the
NetScaler evaluates the policies in order and, in the case of multiple matches, performs the
associated actions in that order. Policy priority is important for getting the results you want.
Accelerating Load Balanced Traffic by Using Compression
Compression is a popular means of optimizing bandwidth usage, and all modern web browsers
support compressed data. If you enable the AppCompress feature, the Citrix NetScaler intercepts
requests from clients and determines whether the client can accept compressed content. After
receiving the HTTP response from the server, the NetScaler examines the content to determine
whether it is compressible. If the content is compressible, the NetScaler compresses it, modifies
the response header to indicate the type of compression performed, and forwards the compressed
content to the client.
NetScaler compression is a policy-based feature. A policy filters requests and responses to identify
responses to be compressed, and specifies the type of compression to apply to each response.
The NetScaler provides several built-in policies to compress common MIME types such as text/
html, text/ plain, text/xml, text/css, text/rtf, application/msword, application/vnd.ms-excel, and
application/vnd.mspowerpoint.
You can also create custom policies. The NetScaler does not compress compressed MIME types
such as application/octet-stream, binary, bytes, and compressed image formats such as GIF and
JPEG.
To configure compression, you must enable it globally and on each service that will provide
responses that you want compressed. If you have configured vservers for load balancing or content
switching, you should bind the polices to the vservers. Otherwise, the policies apply to all traffic that
passes through the NetScaler.
Accessing a Citrix NetScaler
A NetScaler®
appliance has both a command line interface (CLI) and a graphical user interface
(GUI). The GUI includes a configuration utility for configuring the appliance and a statistical utility,
called Dashboard. For initial access, all NetScaler appliances ship with the default NetScaler IP
address (NSIP) of 192.168.100.1 and default subnet mask of 255.255.0.0. You can assign a new
NSIP and an associated subnet mask during initial configuration.
Using the Command Line Interface
You can access the CLI either locally, by connecting a workstation to the console port, or remotely,
by connecting through secure shell (SSH) from any workstation on the same network.
For more information about the features of the CLI, including SSH, see the Citrix NetScaler
Command Reference Guide.
12
citrix.com
White Paper
Logging on to the Command Line Interface through the Console Port
The NetScaler has a console port for connecting to a computer workstation. To log on to the
NetScaler, you need a serial crossover cable and a workstation with a terminal emulation program.
	 To log on to the CLI through the console port
	 1.	Connect the console port to a serial port on the workstation, as described in “Connecting the 	
		 Console Cable” section in the Citrix Hardware Installation and Setup Guide.
	 2.	On the workstation, start HyperTerminal or any other terminal emulation program. If the logon 		
		 prompt does not appear, you may need to press ENTER one or more times to display it.
	 3.	Log on by using the administrator credentials. The command prompt (>) appears on the 		
		 workstation monitor.
Logging on to the Command Line Interface by using SSH
The SSH protocol is the preferred remote access method for accessing a NetScaler remotely from
any workstation on the same network. You can use either SSH version 1 (SSH1) or SSH version 2
(SSH2.)
	 To log on to a NetScaler by using an SSH client
	 1.	On your workstation, start the SSH client.
	 2.	For initial configuration, use the default NetScaler IP address (NSIP), which is 192.168.100.1. 		
		 For subsequent access, use the NSIP that was assigned during initial configuration. Select 		
		 either SSH1 or SSH2 as the protocol.
	 3.	Log on by using the administrator credentials.
Using the Graphical User Interface
The graphical user interface includes a configuration utility and a statistical utility, called Dashboard,
either of which you access through a workstation connected to an Ethernet port on the NetScaler. If
your computer does not have a supported Java plugin installed, the utility prompts you to download
and install the plug-in the first time you log on. If automatic installation fails, you can install the plug-
in separately before you attempt to log on to the configuration utility or Dashboard.
The system requirements for the workstation running the GUI are as follows:
	 •	For Windows-based workstations, a Pentium® 166 MHz or faster processor with at least 	 	
		 48 MB of RAM is recommended for applets running in a browser using a Java plugin product. 	
		 You should have 40 MB free disk space before installing the plug-in.
	 •	For Linux-based workstations, a Pentium platform running Linux kernel v2.2.12 or above, 	 	
		 and glibc version 2.12-11 or later. A minimum of 32 MB RAM is required, and 48 MB RAM 		
		 is recommended. The workstation should support 16-bit color mode, KDE and KWM window 	
		 managers used in conjunction, with displays set to local hosts.
	 •	For Solaris-based workstations, a Sun running either Solaris 2.6, Solaris 7, or Solaris 8, and 	 	
		 the Java 2 Runtime Environment, Standard Edition, version 1.6 or later.
Your workstation must have a supported web browser and version 1.6 or above of the Java® applet
plug-in installed to access the configuration utility and Dashboard.
13
citrix.com
White Paper
Quick Start Installation and Configuration
Configuration Requirements
	 Determine the following information for performing the initial configuration.
	 •	NetScaler IP address: The management IP address of the appliance.	 	 	 	
	 •	Subnet IP address or Mapped IP address: The IP address used by the appliance to represent 	
		 the client when communicating with a server.							
	 •	Default gateway: The IP address of the router that forwards traffic out of the appliance’s subnet.		
	 •	Root password: The root user (nsroot) has full administrative privileges on the appliance. The 		
		 root password is used to authenticate the root user.
Setting Up Connectivity
	 Connect the appliance to a management workstation or the network by using the NetScaler 		
	 configuration utility, the command-line interface (CLI), or the LCD keypad.
Configuration Utility Setup
	 To set up the appliance by using the configuration utility, you need a management workstation 		
	 or laptop configured on the same network as the appliance. To run the configuration utility, the 		
	 Java RunTime Environment (JRE) version 1.4.2_04 or later must be installed on the workstation 		
	 or laptop.
	 Note: The Setup Wizard automatically opens upon log on when the appliance is configured 		
	 with the default IP address, when licenses are not installed on the appliance, and when either 		
	 the mapped IP address or subnet IP address is not configured.
To configure the NetScaler by using the configuration utility
	 1.	Connect the NetScaler to a management workstation or network.					
	 2.	Open a browser and type: http://192.168.100.1 							
		 Note: The NetScaler is preconfigured with the IP address 192.168.100.1.				
	 3.	In User Name, type nsroot.									
	 4.	In Password, type nsroot.										
	 5.	In the Setup Wizard, click Next and follow the instructions in the wizard.				
	 6.	To confirm that the NetScaler is configured correctly, you can either ping the new NetScaler		
		 IP address (NSIP) or use the new NSIP to open the configuration utility in a browser.
CLI Setup
	 To set up the appliance by using the command-line interface (CLI), connect the serial cable to 		
	 the console port. Access the command line with a terminal or terminal emulator with the 		
	 following settings:
	 •	Baud rate: 9600	 	 	 	 	 	 	 	 	 	 	
	 •	Data bits: 8	 	 	 	 	 	 	 	 	 	 	
	 •	Parity: None	 	 	 	 	 	 	 	 	 	 	
	 •	Stop bits: 1	 	 	 	 	 	 	 	 	 	 	
	 •	Flow control: None
14
citrix.com
White Paper
Example:
set ns config -ipaddress 10.102.29.60 –
netmask 255.255.255.0 add ns ip 10.102.29.61
255.255.255.0 - type snip add route 0.0.0.0
0.0.0.0 10.102.29.1 set system user nsroot
administrator save ns config reboot
	 Log on to the NetScaler with the following credentials:
	 User name: nsroot
	 Password: nsroot
To configure the NetScaler by using the NetScaler command line
At the NetScaler command prompt, type:
	 •	set ns config -ipaddress<IPAddress> -netmask<subnetMask>	 	 	 	 	
	 •	add ns ip<IPAddress> <subnetMask> -type<type>	 	 	 	 	 	 	
	 •	add route Network<subnetMask> <gateway>	 	 	 	 	 	 	
	 •	set system user<userName> <password>	 	 	 	 	 	 	 	
	 •	save ns config	 	 	 	 	 	 	 	 	 	 	
	 •	reboot
LCD Keypad Setup
	 To set up the appliance by using the LCD keypad on the front panel of the appliance, enter the 		
	 following initial settings in the following order:
	 1.	Subnet mask
	 2.	NSIP
	 3.	Gateway
	 The NSIP and the default gateway should be on the same subnet.
	 The subnet mask, NSIP, and gateway values are saved in the configuration file. You can then 		
	 use the NSIP to connect to the appliance remotely. For more information, see the Citrix 			
	 NetScaler Hardware Installation and Setup Guide at http://support.citrix.com/ article/	CTX132365.
15
citrix.com
White Paper
Additional Information
A complete set of documentation is available on the Documentation tab of your NetScaler and from
http://support.citrix.com/. (Most of the documents require Adobe Reader, available at http://adobe.
com/ .)
To view the documentation
	 1.	From a Web browser, log on to the NetScaler.
	 2.	Click the Documentation tab.
	 3.	To view a short description of each document, hover your cursor over the title. To open a 		
		 document, click the title.
If you have support questions, please contact Citrix Technical Support at 1-800-4-CITRIX (1-800-
424-8749). For additional contact information, see Support Phone Numbers at http://support.
citrix.com/. If you have comments or feedback on this documentation, please email to nsdocs_
feedback@citrix.com.
citrix.com0112/PDF
16
About Citrix
Citrix Systems, Inc. (NASDAQ:CTXS) is a leading provider of virtual computing solutions that help companies deliver IT as an on-demand service.
Founded in 1989, Citrix combines virtualization, networking and cloud computing technologies into a full portfolio of products that enable virtual
workstyles for users and virtual datacenters for IT. More than 230,000 organizations worldwide rely on Citrix to help them build simpler and more
cost-effective IT environments. Citrix partners with over 10,000 companies in more than 100 countries. Annual revenue in 2010 was $1.87 billion.
©2012 Citrix Systems, Inc. All rights reserved. Citrix®
, NetScaler®
and Citrix Application Firewall™
are trademarks of Citrix Systems, Inc. and/or one or
more of its subsidiaries, and may be registered in the United States Patent and Trademark Office and in the other countries. All other trademarks and
registered trademarks are the property of their respective owners.
Corporate Headquarters
Fort Lauderdale, FL, USA
Silicon Valley Headquarters
Santa Clara, CA, USA
EMEA Headquarters
Schaffhausen, Switzerland
India Development Center
Bangalore, India
Online Division Headquarters
Santa Barbara, CA, USA
Pacific Headquarters
Hong Kong, China
Latin America Headquarters
Coral Gables, FL, USA
UK Development Center
Chalfont, United Kingdom

More Related Content

What's hot

LTM essentials
LTM essentialsLTM essentials
LTM essentialsbharadwajv
 
Kubernetes Concepts And Architecture Powerpoint Presentation Slides
Kubernetes Concepts And Architecture Powerpoint Presentation SlidesKubernetes Concepts And Architecture Powerpoint Presentation Slides
Kubernetes Concepts And Architecture Powerpoint Presentation SlidesSlideTeam
 
VDI and Application Virtualization
VDI and Application VirtualizationVDI and Application Virtualization
VDI and Application VirtualizationJames W. De Rienzo
 
Virtualization Vs. Containers
Virtualization Vs. ContainersVirtualization Vs. Containers
Virtualization Vs. Containersactualtechmedia
 
Open shift 4 infra deep dive
Open shift 4    infra deep diveOpen shift 4    infra deep dive
Open shift 4 infra deep diveWinton Winton
 
Palo alto networks next generation firewalls
Palo alto networks next generation firewallsPalo alto networks next generation firewalls
Palo alto networks next generation firewallsCastleforce
 
vSAN architecture components
vSAN architecture componentsvSAN architecture components
vSAN architecture componentsDavid Pasek
 
Cloud Native Application
Cloud Native ApplicationCloud Native Application
Cloud Native ApplicationVMUG IT
 
Introduction to Zabbix - Company, Product, Services and Use Cases
Introduction to Zabbix - Company, Product, Services and Use CasesIntroduction to Zabbix - Company, Product, Services and Use Cases
Introduction to Zabbix - Company, Product, Services and Use CasesZabbix
 
VMware NSX 101: What, Why & How
VMware NSX 101: What, Why & HowVMware NSX 101: What, Why & How
VMware NSX 101: What, Why & HowAniekan Akpaffiong
 
F5 Networks: architecture and risk management
F5 Networks: architecture and risk managementF5 Networks: architecture and risk management
F5 Networks: architecture and risk managementAEC Networks
 
Projeto Zabbix: Conhecendo a ferramenta
Projeto Zabbix: Conhecendo a ferramentaProjeto Zabbix: Conhecendo a ferramenta
Projeto Zabbix: Conhecendo a ferramentaAécio Pires
 
Vce vxrail-customer-presentation new
Vce vxrail-customer-presentation newVce vxrail-customer-presentation new
Vce vxrail-customer-presentation newJennifer Graham
 
OpenShift 4, the smarter Kubernetes platform
OpenShift 4, the smarter Kubernetes platformOpenShift 4, the smarter Kubernetes platform
OpenShift 4, the smarter Kubernetes platformKangaroot
 
Platform as a Service (PaaS) Providers
Platform as a Service (PaaS) ProvidersPlatform as a Service (PaaS) Providers
Platform as a Service (PaaS) ProvidersCloud Computing Wire
 

What's hot (20)

Zabbix
ZabbixZabbix
Zabbix
 
LTM essentials
LTM essentialsLTM essentials
LTM essentials
 
Kubernetes Concepts And Architecture Powerpoint Presentation Slides
Kubernetes Concepts And Architecture Powerpoint Presentation SlidesKubernetes Concepts And Architecture Powerpoint Presentation Slides
Kubernetes Concepts And Architecture Powerpoint Presentation Slides
 
VDI and Application Virtualization
VDI and Application VirtualizationVDI and Application Virtualization
VDI and Application Virtualization
 
Virtualization Vs. Containers
Virtualization Vs. ContainersVirtualization Vs. Containers
Virtualization Vs. Containers
 
Open shift 4 infra deep dive
Open shift 4    infra deep diveOpen shift 4    infra deep dive
Open shift 4 infra deep dive
 
Palo alto networks next generation firewalls
Palo alto networks next generation firewallsPalo alto networks next generation firewalls
Palo alto networks next generation firewalls
 
vSAN architecture components
vSAN architecture componentsvSAN architecture components
vSAN architecture components
 
Cloud Native Application
Cloud Native ApplicationCloud Native Application
Cloud Native Application
 
Introduction to Zabbix - Company, Product, Services and Use Cases
Introduction to Zabbix - Company, Product, Services and Use CasesIntroduction to Zabbix - Company, Product, Services and Use Cases
Introduction to Zabbix - Company, Product, Services and Use Cases
 
VMware NSX 101: What, Why & How
VMware NSX 101: What, Why & HowVMware NSX 101: What, Why & How
VMware NSX 101: What, Why & How
 
F5 Networks: architecture and risk management
F5 Networks: architecture and risk managementF5 Networks: architecture and risk management
F5 Networks: architecture and risk management
 
VSICM8_M02.pptx
VSICM8_M02.pptxVSICM8_M02.pptx
VSICM8_M02.pptx
 
Projeto Zabbix: Conhecendo a ferramenta
Projeto Zabbix: Conhecendo a ferramentaProjeto Zabbix: Conhecendo a ferramenta
Projeto Zabbix: Conhecendo a ferramenta
 
DAS RAID NAS SAN
DAS RAID NAS SANDAS RAID NAS SAN
DAS RAID NAS SAN
 
Vce vxrail-customer-presentation new
Vce vxrail-customer-presentation newVce vxrail-customer-presentation new
Vce vxrail-customer-presentation new
 
Storage
StorageStorage
Storage
 
OpenShift 4, the smarter Kubernetes platform
OpenShift 4, the smarter Kubernetes platformOpenShift 4, the smarter Kubernetes platform
OpenShift 4, the smarter Kubernetes platform
 
EMEA Airheads- Aruba Central with Instant AP
EMEA Airheads- Aruba Central with Instant APEMEA Airheads- Aruba Central with Instant AP
EMEA Airheads- Aruba Central with Instant AP
 
Platform as a Service (PaaS) Providers
Platform as a Service (PaaS) ProvidersPlatform as a Service (PaaS) Providers
Platform as a Service (PaaS) Providers
 

Viewers also liked

SYN207: Newest and coolest NetScaler features you should be jazzed about
SYN207: Newest and coolest NetScaler features you should be jazzed aboutSYN207: Newest and coolest NetScaler features you should be jazzed about
SYN207: Newest and coolest NetScaler features you should be jazzed aboutCitrix
 
SYN 220: XenApp and XenDesktop Security Best Practices
SYN 220: XenApp and XenDesktop Security Best Practices SYN 220: XenApp and XenDesktop Security Best Practices
SYN 220: XenApp and XenDesktop Security Best Practices Citrix
 
SYN 305: Architecting Citrix on Microsoft Azure
SYN 305: Architecting Citrix on Microsoft AzureSYN 305: Architecting Citrix on Microsoft Azure
SYN 305: Architecting Citrix on Microsoft AzureCitrix
 
In-depth Troubleshooting on NetScaler using Command Line Tools
In-depth Troubleshooting on NetScaler using Command Line ToolsIn-depth Troubleshooting on NetScaler using Command Line Tools
In-depth Troubleshooting on NetScaler using Command Line ToolsDavid McGeough
 
Citrix Group Policy Troubleshooting for XenApp and XenDesktop
Citrix Group Policy Troubleshooting for XenApp and XenDesktopCitrix Group Policy Troubleshooting for XenApp and XenDesktop
Citrix Group Policy Troubleshooting for XenApp and XenDesktopDavid McGeough
 
企業の通信コストを大幅に削減! SD-WANの正体とは?
企業の通信コストを大幅に削減! SD-WANの正体とは?企業の通信コストを大幅に削減! SD-WANの正体とは?
企業の通信コストを大幅に削減! SD-WANの正体とは?Citrix Systems Japan
 
AppDynamics VS New Relic – The Complete Guide
AppDynamics VS New Relic – The Complete GuideAppDynamics VS New Relic – The Complete Guide
AppDynamics VS New Relic – The Complete GuideTakipi
 
Citrix & Canalys: Northern European Channel Partners in a State of Transforma...
Citrix & Canalys: Northern European Channel Partners in a State of Transforma...Citrix & Canalys: Northern European Channel Partners in a State of Transforma...
Citrix & Canalys: Northern European Channel Partners in a State of Transforma...Citrix
 
Transforming Business with Citrix: Customers Share Their Stories.
Transforming Business with Citrix: Customers Share Their Stories.Transforming Business with Citrix: Customers Share Their Stories.
Transforming Business with Citrix: Customers Share Their Stories.Citrix
 
State of the Word 2011
State of the Word 2011State of the Word 2011
State of the Word 2011photomatt
 

Viewers also liked (11)

SYN207: Newest and coolest NetScaler features you should be jazzed about
SYN207: Newest and coolest NetScaler features you should be jazzed aboutSYN207: Newest and coolest NetScaler features you should be jazzed about
SYN207: Newest and coolest NetScaler features you should be jazzed about
 
SYN 220: XenApp and XenDesktop Security Best Practices
SYN 220: XenApp and XenDesktop Security Best Practices SYN 220: XenApp and XenDesktop Security Best Practices
SYN 220: XenApp and XenDesktop Security Best Practices
 
SYN 305: Architecting Citrix on Microsoft Azure
SYN 305: Architecting Citrix on Microsoft AzureSYN 305: Architecting Citrix on Microsoft Azure
SYN 305: Architecting Citrix on Microsoft Azure
 
In-depth Troubleshooting on NetScaler using Command Line Tools
In-depth Troubleshooting on NetScaler using Command Line ToolsIn-depth Troubleshooting on NetScaler using Command Line Tools
In-depth Troubleshooting on NetScaler using Command Line Tools
 
Citrix Day 2015 Cloud Bridge 7.3 and WSA v10
Citrix Day 2015 Cloud Bridge 7.3 and WSA v10Citrix Day 2015 Cloud Bridge 7.3 and WSA v10
Citrix Day 2015 Cloud Bridge 7.3 and WSA v10
 
Citrix Group Policy Troubleshooting for XenApp and XenDesktop
Citrix Group Policy Troubleshooting for XenApp and XenDesktopCitrix Group Policy Troubleshooting for XenApp and XenDesktop
Citrix Group Policy Troubleshooting for XenApp and XenDesktop
 
企業の通信コストを大幅に削減! SD-WANの正体とは?
企業の通信コストを大幅に削減! SD-WANの正体とは?企業の通信コストを大幅に削減! SD-WANの正体とは?
企業の通信コストを大幅に削減! SD-WANの正体とは?
 
AppDynamics VS New Relic – The Complete Guide
AppDynamics VS New Relic – The Complete GuideAppDynamics VS New Relic – The Complete Guide
AppDynamics VS New Relic – The Complete Guide
 
Citrix & Canalys: Northern European Channel Partners in a State of Transforma...
Citrix & Canalys: Northern European Channel Partners in a State of Transforma...Citrix & Canalys: Northern European Channel Partners in a State of Transforma...
Citrix & Canalys: Northern European Channel Partners in a State of Transforma...
 
Transforming Business with Citrix: Customers Share Their Stories.
Transforming Business with Citrix: Customers Share Their Stories.Transforming Business with Citrix: Customers Share Their Stories.
Transforming Business with Citrix: Customers Share Their Stories.
 
State of the Word 2011
State of the Word 2011State of the Word 2011
State of the Word 2011
 

Similar to Citrix Netscaler Deployment Guide

application-template-deployment-guide.pdf
application-template-deployment-guide.pdfapplication-template-deployment-guide.pdf
application-template-deployment-guide.pdfamazon4it
 
Simplifying User Access with NetScaler SDX and CA Single Sign-on
 Simplifying User Access with NetScaler SDX and CA Single Sign-on Simplifying User Access with NetScaler SDX and CA Single Sign-on
Simplifying User Access with NetScaler SDX and CA Single Sign-onCA Technologies
 
Bliv klar til cloud med Citrix Netscaler (pdf)
Bliv klar til cloud med Citrix Netscaler (pdf)Bliv klar til cloud med Citrix Netscaler (pdf)
Bliv klar til cloud med Citrix Netscaler (pdf)Kim Jensen
 
Netscaler for mobility and secure remote access
Netscaler for mobility and secure remote accessNetscaler for mobility and secure remote access
Netscaler for mobility and secure remote accessCitrix
 
Standard Content Guide for ArcSight Express w/ CORR-Engine v3.0
Standard Content Guide for ArcSight Express w/ CORR-Engine v3.0Standard Content Guide for ArcSight Express w/ CORR-Engine v3.0
Standard Content Guide for ArcSight Express w/ CORR-Engine v3.0Protect724
 
RapidScale Company Presentation
RapidScale Company PresentationRapidScale Company Presentation
RapidScale Company PresentationRapidScale
 
Oracle11g arch
Oracle11g archOracle11g arch
Oracle11g archSal Marcus
 
HP: Implementácia cloudu s HP
HP: Implementácia cloudu s HPHP: Implementácia cloudu s HP
HP: Implementácia cloudu s HPASBIS SK
 
Hosted Desktop and Evolution of Hardware Server Technologies-2015 Edition
Hosted Desktop and Evolution of Hardware Server Technologies-2015 EditionHosted Desktop and Evolution of Hardware Server Technologies-2015 Edition
Hosted Desktop and Evolution of Hardware Server Technologies-2015 EditionAhmed Sallam
 
Hosted desktop and evolution of hardware server technologies - 2015 edition
Hosted desktop and evolution of hardware server technologies - 2015 editionHosted desktop and evolution of hardware server technologies - 2015 edition
Hosted desktop and evolution of hardware server technologies - 2015 editionAhmed Sallam
 
Xendesktop 7-on-windows-azure-design-guide
Xendesktop 7-on-windows-azure-design-guideXendesktop 7-on-windows-azure-design-guide
Xendesktop 7-on-windows-azure-design-guideNuno Alves
 
Array Networks Corporate Overview
Array Networks Corporate OverviewArray Networks Corporate Overview
Array Networks Corporate OverviewYancey Gordon
 
StreamAnalytix - Multi-Engine Streaming Analytics Platform
StreamAnalytix - Multi-Engine Streaming Analytics PlatformStreamAnalytix - Multi-Engine Streaming Analytics Platform
StreamAnalytix - Multi-Engine Streaming Analytics PlatformAtul Sharma
 
Ensure the Secure, Reliable Delivery of Applications to Any User, Over Any Ne...
Ensure the Secure, Reliable Delivery of Applications to Any User, Over Any Ne...Ensure the Secure, Reliable Delivery of Applications to Any User, Over Any Ne...
Ensure the Secure, Reliable Delivery of Applications to Any User, Over Any Ne...Citrix
 
Rapid deployment of Sitecore on AWS
Rapid deployment of Sitecore on AWSRapid deployment of Sitecore on AWS
Rapid deployment of Sitecore on AWSGaurav "GP" Pal
 
Scaling Security on 100s of Millions of Mobile Devices Using Apache Kafka® an...
Scaling Security on 100s of Millions of Mobile Devices Using Apache Kafka® an...Scaling Security on 100s of Millions of Mobile Devices Using Apache Kafka® an...
Scaling Security on 100s of Millions of Mobile Devices Using Apache Kafka® an...confluent
 
wp-converged-infrastructure-2405387
wp-converged-infrastructure-2405387wp-converged-infrastructure-2405387
wp-converged-infrastructure-2405387Martin Fabirowski
 

Similar to Citrix Netscaler Deployment Guide (20)

NetScaler 11 Update
NetScaler 11 UpdateNetScaler 11 Update
NetScaler 11 Update
 
application-template-deployment-guide.pdf
application-template-deployment-guide.pdfapplication-template-deployment-guide.pdf
application-template-deployment-guide.pdf
 
Simplifying User Access with NetScaler SDX and CA Single Sign-on
 Simplifying User Access with NetScaler SDX and CA Single Sign-on Simplifying User Access with NetScaler SDX and CA Single Sign-on
Simplifying User Access with NetScaler SDX and CA Single Sign-on
 
Bliv klar til cloud med Citrix Netscaler (pdf)
Bliv klar til cloud med Citrix Netscaler (pdf)Bliv klar til cloud med Citrix Netscaler (pdf)
Bliv klar til cloud med Citrix Netscaler (pdf)
 
Netscaler for mobility and secure remote access
Netscaler for mobility and secure remote accessNetscaler for mobility and secure remote access
Netscaler for mobility and secure remote access
 
Standard Content Guide for ArcSight Express w/ CORR-Engine v3.0
Standard Content Guide for ArcSight Express w/ CORR-Engine v3.0Standard Content Guide for ArcSight Express w/ CORR-Engine v3.0
Standard Content Guide for ArcSight Express w/ CORR-Engine v3.0
 
Cisco project ideas
Cisco   project ideasCisco   project ideas
Cisco project ideas
 
RapidScale Company Presentation
RapidScale Company PresentationRapidScale Company Presentation
RapidScale Company Presentation
 
Oracle11g arch
Oracle11g archOracle11g arch
Oracle11g arch
 
HP: Implementácia cloudu s HP
HP: Implementácia cloudu s HPHP: Implementácia cloudu s HP
HP: Implementácia cloudu s HP
 
brocade-virtual-adx-ds
brocade-virtual-adx-dsbrocade-virtual-adx-ds
brocade-virtual-adx-ds
 
Hosted Desktop and Evolution of Hardware Server Technologies-2015 Edition
Hosted Desktop and Evolution of Hardware Server Technologies-2015 EditionHosted Desktop and Evolution of Hardware Server Technologies-2015 Edition
Hosted Desktop and Evolution of Hardware Server Technologies-2015 Edition
 
Hosted desktop and evolution of hardware server technologies - 2015 edition
Hosted desktop and evolution of hardware server technologies - 2015 editionHosted desktop and evolution of hardware server technologies - 2015 edition
Hosted desktop and evolution of hardware server technologies - 2015 edition
 
Xendesktop 7-on-windows-azure-design-guide
Xendesktop 7-on-windows-azure-design-guideXendesktop 7-on-windows-azure-design-guide
Xendesktop 7-on-windows-azure-design-guide
 
Array Networks Corporate Overview
Array Networks Corporate OverviewArray Networks Corporate Overview
Array Networks Corporate Overview
 
StreamAnalytix - Multi-Engine Streaming Analytics Platform
StreamAnalytix - Multi-Engine Streaming Analytics PlatformStreamAnalytix - Multi-Engine Streaming Analytics Platform
StreamAnalytix - Multi-Engine Streaming Analytics Platform
 
Ensure the Secure, Reliable Delivery of Applications to Any User, Over Any Ne...
Ensure the Secure, Reliable Delivery of Applications to Any User, Over Any Ne...Ensure the Secure, Reliable Delivery of Applications to Any User, Over Any Ne...
Ensure the Secure, Reliable Delivery of Applications to Any User, Over Any Ne...
 
Rapid deployment of Sitecore on AWS
Rapid deployment of Sitecore on AWSRapid deployment of Sitecore on AWS
Rapid deployment of Sitecore on AWS
 
Scaling Security on 100s of Millions of Mobile Devices Using Apache Kafka® an...
Scaling Security on 100s of Millions of Mobile Devices Using Apache Kafka® an...Scaling Security on 100s of Millions of Mobile Devices Using Apache Kafka® an...
Scaling Security on 100s of Millions of Mobile Devices Using Apache Kafka® an...
 
wp-converged-infrastructure-2405387
wp-converged-infrastructure-2405387wp-converged-infrastructure-2405387
wp-converged-infrastructure-2405387
 

More from Citrix

Building The Digital Workplace
Building The Digital WorkplaceBuilding The Digital Workplace
Building The Digital WorkplaceCitrix
 
Maximize your Investment in Microsoft Office 365 with Citrix Workspace
Maximize your Investment in Microsoft Office 365 with Citrix Workspace Maximize your Investment in Microsoft Office 365 with Citrix Workspace
Maximize your Investment in Microsoft Office 365 with Citrix Workspace Citrix
 
XenApp on Google Cloud Deployment Guide
XenApp on Google Cloud Deployment GuideXenApp on Google Cloud Deployment Guide
XenApp on Google Cloud Deployment GuideCitrix
 
Deploying Citrix XenApp & XenDesktop Service on Google Cloud Platform
Deploying Citrix XenApp & XenDesktop Service on Google Cloud PlatformDeploying Citrix XenApp & XenDesktop Service on Google Cloud Platform
Deploying Citrix XenApp & XenDesktop Service on Google Cloud PlatformCitrix
 
Manage Risk by Protecting the Apps and Data That Drive Business Productivity
Manage Risk by Protecting the Apps and Data That Drive Business ProductivityManage Risk by Protecting the Apps and Data That Drive Business Productivity
Manage Risk by Protecting the Apps and Data That Drive Business ProductivityCitrix
 
How do Organizations Plan to Assure Application Delivery in a Multi-Cloud World?
How do Organizations Plan to Assure Application Delivery in a Multi-Cloud World?How do Organizations Plan to Assure Application Delivery in a Multi-Cloud World?
How do Organizations Plan to Assure Application Delivery in a Multi-Cloud World?Citrix
 
Workforce Flexibility Can Drive Greater Engagement & Productivity
Workforce Flexibility Can Drive Greater Engagement & ProductivityWorkforce Flexibility Can Drive Greater Engagement & Productivity
Workforce Flexibility Can Drive Greater Engagement & ProductivityCitrix
 
Citrix Cloud Services: Total Economic Benefits Assessment Guide
Citrix Cloud Services: Total Economic Benefits Assessment GuideCitrix Cloud Services: Total Economic Benefits Assessment Guide
Citrix Cloud Services: Total Economic Benefits Assessment GuideCitrix
 
The Growing U.S. IT Productivity Gap
The Growing U.S. IT Productivity GapThe Growing U.S. IT Productivity Gap
The Growing U.S. IT Productivity GapCitrix
 
Citrix Cloud Services: Total Economic Benefits Assessment Guide
Citrix Cloud Services: Total Economic Benefits Assessment GuideCitrix Cloud Services: Total Economic Benefits Assessment Guide
Citrix Cloud Services: Total Economic Benefits Assessment GuideCitrix
 
Citrix Synergy 2017: Technology Keynote Sketch Notes
Citrix Synergy 2017: Technology Keynote Sketch NotesCitrix Synergy 2017: Technology Keynote Sketch Notes
Citrix Synergy 2017: Technology Keynote Sketch NotesCitrix
 
Citrix Synergy 2017: Malcolm Gladwell Innovation Super Session Sketch Notes
Citrix Synergy 2017: Malcolm Gladwell Innovation Super Session Sketch NotesCitrix Synergy 2017: Malcolm Gladwell Innovation Super Session Sketch Notes
Citrix Synergy 2017: Malcolm Gladwell Innovation Super Session Sketch NotesCitrix
 
Synergy 2017: Colin Powell Innovation Super Session Sketch Notes
Synergy 2017: Colin Powell Innovation Super Session Sketch NotesSynergy 2017: Colin Powell Innovation Super Session Sketch Notes
Synergy 2017: Colin Powell Innovation Super Session Sketch NotesCitrix
 
Who Are Citrix Customers?
Who Are Citrix Customers?Who Are Citrix Customers?
Who Are Citrix Customers?Citrix
 
Manage risk by protecting apps, data and usage
Manage risk by protecting apps, data and usageManage risk by protecting apps, data and usage
Manage risk by protecting apps, data and usageCitrix
 
Enterprise Case Study: Enabling a More Mobile Way of Working
Enterprise Case Study: Enabling a More Mobile Way of Working Enterprise Case Study: Enabling a More Mobile Way of Working
Enterprise Case Study: Enabling a More Mobile Way of Working Citrix
 
Life in the Digital Workspace
Life in the Digital WorkspaceLife in the Digital Workspace
Life in the Digital WorkspaceCitrix
 
Comparing traditional workspaces to digital workspaces
Comparing traditional workspaces to digital workspacesComparing traditional workspaces to digital workspaces
Comparing traditional workspaces to digital workspacesCitrix
 
4 Ways to Ensure a Smooth Windows 10 Migration
4 Ways to Ensure a Smooth Windows 10 Migration4 Ways to Ensure a Smooth Windows 10 Migration
4 Ways to Ensure a Smooth Windows 10 MigrationCitrix
 
Citrix Paddington
Citrix PaddingtonCitrix Paddington
Citrix PaddingtonCitrix
 

More from Citrix (20)

Building The Digital Workplace
Building The Digital WorkplaceBuilding The Digital Workplace
Building The Digital Workplace
 
Maximize your Investment in Microsoft Office 365 with Citrix Workspace
Maximize your Investment in Microsoft Office 365 with Citrix Workspace Maximize your Investment in Microsoft Office 365 with Citrix Workspace
Maximize your Investment in Microsoft Office 365 with Citrix Workspace
 
XenApp on Google Cloud Deployment Guide
XenApp on Google Cloud Deployment GuideXenApp on Google Cloud Deployment Guide
XenApp on Google Cloud Deployment Guide
 
Deploying Citrix XenApp & XenDesktop Service on Google Cloud Platform
Deploying Citrix XenApp & XenDesktop Service on Google Cloud PlatformDeploying Citrix XenApp & XenDesktop Service on Google Cloud Platform
Deploying Citrix XenApp & XenDesktop Service on Google Cloud Platform
 
Manage Risk by Protecting the Apps and Data That Drive Business Productivity
Manage Risk by Protecting the Apps and Data That Drive Business ProductivityManage Risk by Protecting the Apps and Data That Drive Business Productivity
Manage Risk by Protecting the Apps and Data That Drive Business Productivity
 
How do Organizations Plan to Assure Application Delivery in a Multi-Cloud World?
How do Organizations Plan to Assure Application Delivery in a Multi-Cloud World?How do Organizations Plan to Assure Application Delivery in a Multi-Cloud World?
How do Organizations Plan to Assure Application Delivery in a Multi-Cloud World?
 
Workforce Flexibility Can Drive Greater Engagement & Productivity
Workforce Flexibility Can Drive Greater Engagement & ProductivityWorkforce Flexibility Can Drive Greater Engagement & Productivity
Workforce Flexibility Can Drive Greater Engagement & Productivity
 
Citrix Cloud Services: Total Economic Benefits Assessment Guide
Citrix Cloud Services: Total Economic Benefits Assessment GuideCitrix Cloud Services: Total Economic Benefits Assessment Guide
Citrix Cloud Services: Total Economic Benefits Assessment Guide
 
The Growing U.S. IT Productivity Gap
The Growing U.S. IT Productivity GapThe Growing U.S. IT Productivity Gap
The Growing U.S. IT Productivity Gap
 
Citrix Cloud Services: Total Economic Benefits Assessment Guide
Citrix Cloud Services: Total Economic Benefits Assessment GuideCitrix Cloud Services: Total Economic Benefits Assessment Guide
Citrix Cloud Services: Total Economic Benefits Assessment Guide
 
Citrix Synergy 2017: Technology Keynote Sketch Notes
Citrix Synergy 2017: Technology Keynote Sketch NotesCitrix Synergy 2017: Technology Keynote Sketch Notes
Citrix Synergy 2017: Technology Keynote Sketch Notes
 
Citrix Synergy 2017: Malcolm Gladwell Innovation Super Session Sketch Notes
Citrix Synergy 2017: Malcolm Gladwell Innovation Super Session Sketch NotesCitrix Synergy 2017: Malcolm Gladwell Innovation Super Session Sketch Notes
Citrix Synergy 2017: Malcolm Gladwell Innovation Super Session Sketch Notes
 
Synergy 2017: Colin Powell Innovation Super Session Sketch Notes
Synergy 2017: Colin Powell Innovation Super Session Sketch NotesSynergy 2017: Colin Powell Innovation Super Session Sketch Notes
Synergy 2017: Colin Powell Innovation Super Session Sketch Notes
 
Who Are Citrix Customers?
Who Are Citrix Customers?Who Are Citrix Customers?
Who Are Citrix Customers?
 
Manage risk by protecting apps, data and usage
Manage risk by protecting apps, data and usageManage risk by protecting apps, data and usage
Manage risk by protecting apps, data and usage
 
Enterprise Case Study: Enabling a More Mobile Way of Working
Enterprise Case Study: Enabling a More Mobile Way of Working Enterprise Case Study: Enabling a More Mobile Way of Working
Enterprise Case Study: Enabling a More Mobile Way of Working
 
Life in the Digital Workspace
Life in the Digital WorkspaceLife in the Digital Workspace
Life in the Digital Workspace
 
Comparing traditional workspaces to digital workspaces
Comparing traditional workspaces to digital workspacesComparing traditional workspaces to digital workspaces
Comparing traditional workspaces to digital workspaces
 
4 Ways to Ensure a Smooth Windows 10 Migration
4 Ways to Ensure a Smooth Windows 10 Migration4 Ways to Ensure a Smooth Windows 10 Migration
4 Ways to Ensure a Smooth Windows 10 Migration
 
Citrix Paddington
Citrix PaddingtonCitrix Paddington
Citrix Paddington
 

Recently uploaded

"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack
"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack
"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek SchlawackFwdays
 
"ML in Production",Oleksandr Bagan
"ML in Production",Oleksandr Bagan"ML in Production",Oleksandr Bagan
"ML in Production",Oleksandr BaganFwdays
 
Merck Moving Beyond Passwords: FIDO Paris Seminar.pptx
Merck Moving Beyond Passwords: FIDO Paris Seminar.pptxMerck Moving Beyond Passwords: FIDO Paris Seminar.pptx
Merck Moving Beyond Passwords: FIDO Paris Seminar.pptxLoriGlavin3
 
WordPress Websites for Engineers: Elevate Your Brand
WordPress Websites for Engineers: Elevate Your BrandWordPress Websites for Engineers: Elevate Your Brand
WordPress Websites for Engineers: Elevate Your Brandgvaughan
 
Vertex AI Gemini Prompt Engineering Tips
Vertex AI Gemini Prompt Engineering TipsVertex AI Gemini Prompt Engineering Tips
Vertex AI Gemini Prompt Engineering TipsMiki Katsuragi
 
Commit 2024 - Secret Management made easy
Commit 2024 - Secret Management made easyCommit 2024 - Secret Management made easy
Commit 2024 - Secret Management made easyAlfredo García Lavilla
 
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)Mark Simos
 
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024BookNet Canada
 
Designing IA for AI - Information Architecture Conference 2024
Designing IA for AI - Information Architecture Conference 2024Designing IA for AI - Information Architecture Conference 2024
Designing IA for AI - Information Architecture Conference 2024Enterprise Knowledge
 
How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.Curtis Poe
 
TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024Lonnie McRorey
 
The Ultimate Guide to Choosing WordPress Pros and Cons
The Ultimate Guide to Choosing WordPress Pros and ConsThe Ultimate Guide to Choosing WordPress Pros and Cons
The Ultimate Guide to Choosing WordPress Pros and ConsPixlogix Infotech
 
Powerpoint exploring the locations used in television show Time Clash
Powerpoint exploring the locations used in television show Time ClashPowerpoint exploring the locations used in television show Time Clash
Powerpoint exploring the locations used in television show Time Clashcharlottematthew16
 
SIP trunking in Janus @ Kamailio World 2024
SIP trunking in Janus @ Kamailio World 2024SIP trunking in Janus @ Kamailio World 2024
SIP trunking in Janus @ Kamailio World 2024Lorenzo Miniero
 
How to write a Business Continuity Plan
How to write a Business Continuity PlanHow to write a Business Continuity Plan
How to write a Business Continuity PlanDatabarracks
 
Developer Data Modeling Mistakes: From Postgres to NoSQL
Developer Data Modeling Mistakes: From Postgres to NoSQLDeveloper Data Modeling Mistakes: From Postgres to NoSQL
Developer Data Modeling Mistakes: From Postgres to NoSQLScyllaDB
 
Nell’iperspazio con Rocket: il Framework Web di Rust!
Nell’iperspazio con Rocket: il Framework Web di Rust!Nell’iperspazio con Rocket: il Framework Web di Rust!
Nell’iperspazio con Rocket: il Framework Web di Rust!Commit University
 
Advanced Computer Architecture – An Introduction
Advanced Computer Architecture – An IntroductionAdvanced Computer Architecture – An Introduction
Advanced Computer Architecture – An IntroductionDilum Bandara
 
Artificial intelligence in cctv survelliance.pptx
Artificial intelligence in cctv survelliance.pptxArtificial intelligence in cctv survelliance.pptx
Artificial intelligence in cctv survelliance.pptxhariprasad279825
 

Recently uploaded (20)

DMCC Future of Trade Web3 - Special Edition
DMCC Future of Trade Web3 - Special EditionDMCC Future of Trade Web3 - Special Edition
DMCC Future of Trade Web3 - Special Edition
 
"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack
"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack
"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack
 
"ML in Production",Oleksandr Bagan
"ML in Production",Oleksandr Bagan"ML in Production",Oleksandr Bagan
"ML in Production",Oleksandr Bagan
 
Merck Moving Beyond Passwords: FIDO Paris Seminar.pptx
Merck Moving Beyond Passwords: FIDO Paris Seminar.pptxMerck Moving Beyond Passwords: FIDO Paris Seminar.pptx
Merck Moving Beyond Passwords: FIDO Paris Seminar.pptx
 
WordPress Websites for Engineers: Elevate Your Brand
WordPress Websites for Engineers: Elevate Your BrandWordPress Websites for Engineers: Elevate Your Brand
WordPress Websites for Engineers: Elevate Your Brand
 
Vertex AI Gemini Prompt Engineering Tips
Vertex AI Gemini Prompt Engineering TipsVertex AI Gemini Prompt Engineering Tips
Vertex AI Gemini Prompt Engineering Tips
 
Commit 2024 - Secret Management made easy
Commit 2024 - Secret Management made easyCommit 2024 - Secret Management made easy
Commit 2024 - Secret Management made easy
 
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)
 
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
 
Designing IA for AI - Information Architecture Conference 2024
Designing IA for AI - Information Architecture Conference 2024Designing IA for AI - Information Architecture Conference 2024
Designing IA for AI - Information Architecture Conference 2024
 
How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.
 
TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024
 
The Ultimate Guide to Choosing WordPress Pros and Cons
The Ultimate Guide to Choosing WordPress Pros and ConsThe Ultimate Guide to Choosing WordPress Pros and Cons
The Ultimate Guide to Choosing WordPress Pros and Cons
 
Powerpoint exploring the locations used in television show Time Clash
Powerpoint exploring the locations used in television show Time ClashPowerpoint exploring the locations used in television show Time Clash
Powerpoint exploring the locations used in television show Time Clash
 
SIP trunking in Janus @ Kamailio World 2024
SIP trunking in Janus @ Kamailio World 2024SIP trunking in Janus @ Kamailio World 2024
SIP trunking in Janus @ Kamailio World 2024
 
How to write a Business Continuity Plan
How to write a Business Continuity PlanHow to write a Business Continuity Plan
How to write a Business Continuity Plan
 
Developer Data Modeling Mistakes: From Postgres to NoSQL
Developer Data Modeling Mistakes: From Postgres to NoSQLDeveloper Data Modeling Mistakes: From Postgres to NoSQL
Developer Data Modeling Mistakes: From Postgres to NoSQL
 
Nell’iperspazio con Rocket: il Framework Web di Rust!
Nell’iperspazio con Rocket: il Framework Web di Rust!Nell’iperspazio con Rocket: il Framework Web di Rust!
Nell’iperspazio con Rocket: il Framework Web di Rust!
 
Advanced Computer Architecture – An Introduction
Advanced Computer Architecture – An IntroductionAdvanced Computer Architecture – An Introduction
Advanced Computer Architecture – An Introduction
 
Artificial intelligence in cctv survelliance.pptx
Artificial intelligence in cctv survelliance.pptxArtificial intelligence in cctv survelliance.pptx
Artificial intelligence in cctv survelliance.pptx
 

Citrix Netscaler Deployment Guide

  • 2. 2 citrix.com White Paper Table of Contents Citrix NetScaler ADC Overview ...........................................................................................................................3 Standard Edition ..........................................................................................................................................3 Enterprise Edition ........................................................................................................................................3 Platinum Edition ...........................................................................................................................................4 Software Options ........................................................................................................................................4 NetScaler ADC Features and Benefits ...............................................................................................................4 NetScaler MPX portfolio and hardware information .......................................................................................6 Network Topology ..................................................................................................................................................6 Where Does a NetScaler Fit in the Network? ...........................................................................................6 Physical Deployment Modes ....................................................................................................................7 Citrix NetScaler as an L2 Device .............................................................................................................8 Citrix NetScaler as a Packet Forwarding Device .................................................................................8 How a NetScaler Communicates with Clients and Servers ..........................................................................9 Traffic Management Building Blocks ..........................................................................................................9 A Simple Load Balancing Configuration ..............................................................................................10 Understanding Policies and Expressions ........................................................................................................11 Accelerating Load Balanced Traffic by Using Compression .......................................................................12 Accessing a Citrix NetScaler ..............................................................................................................................12 Using the Command Line Interface ..........................................................................................................12 Logging on to the Command Line Interface through the Console Port ........................................12 Logging on to the Command Line Interface by using SSH .............................................................13 Using the Graphical User Interface ...........................................................................................................13 Quick Start Installation and Configuration ......................................................................................................13 Configuration Requirements .......................................................................................................................13 Setting Up Connectivity ...............................................................................................................................14 Configuration Utility Setup .......................................................................................................................14 To configure the NetScaler by using the configuration utility ..........................................................14 CLI Setup ....................................................................................................................................................14 LCD Keypad Setup ...................................................................................................................................15 Additional Information ..........................................................................................................................................15
  • 3. 3 citrix.com White Paper Citrix NetScaler ADC Overview The Citrix® NetScaler® ADC product line optimizes delivery of applications over the Internet and private networks. NetScaler is an application delivery controller (ADC) that accelerates application performance, enhances application availability with advanced L4-7 load balancing, secures mission- critical apps from attacks and lowers server expenses by offloading computationally intensive tasks. All these capabilities are combined into a single, integrated appliance for increased productivity, with lower overall total cost of ownership. NetScaler is deployed in front of web, application and database servers. It combines high-speed L4-7 load balancing and content switching with application acceleration, data compression, static and dynamic content caching, SSL acceleration, network optimization, application performance monitoring application visibility and robust application security via an application firewall. NetScaler appliances are installed in the data center and route all connections to back-end servers. The NetScaler features are enabled and the policies configured are then applied to incoming and outgoing traffic. NetScaler requires no additional client or server side software, and can be configured using the NetScaler web-based GUI, RESTful API (“Nitro”) and CLI configuration utilities. NetScaler is available as a high-performance network appliance and a virtual appliance for maximum deployment flexibility. The hardware based MPX appliances with multi-core processor designs are available with a wide range of appliance availability; from sub gigabit throughput to 50 Gbps. Each leverages a fully hardened and secure operating system. NetScaler appliances provide multi-dimensional scalability for a superior ROI. Pay-As-You-Grow and Burst Pack upgrade licenses enable specific models to be upgraded to higher-end models within a particular platform via a software license. NetScaler SDX models allow up to 40 fully independently managed NetScaler instances to run on a single platform. NetScaler with Citrix TriScale clustering allows up to 32 NetScaler appliances (of the same platform, model and edition) to be aggregated into a single group to increase aggregate app delivery capacity. NetScaler solutions are available in three software editions: Standard, Enterprise, and Platinum. These editions offer the following feature sets: Standard Edition NetScaler Standard Edition provides comprehensive layer 4-7 load balancing and content switching, SSL acceleration and server offload capabilities. Enterprise Edition NetScaler Enterprise Edition is a highly integrated application delivery solution. It includes all Standard Edition capabilities, plus dynamic routing support, data compression (AppCompress), global server load balancing (GSLB), surge protection, priority queuing, L7 DoS protection, AAA for traffic management and cache redirection. Enterprise Edition also includes Citrix Command Center software.
  • 4. 4 citrix.com White Paper Platinum Edition NetScaler Platinum Edition is the most integrated and feature-rich NetScaler offering. It includes all Enterprise Edition capabilities, plus content caching (AppCache), web application firewall, NetScaler Cloud Bridge and EdgeSight for NetScaler application performance monitoring. It also includes Citrix Command Center software and NetScaler Cloud Bridge. Note: NetScaler clustering license upgrades are available on all NetScaler MPX and VPX models and software editions. Software Options The following options are available for NetScaler MPX appliances. • Global Server Load Balancing (GSLB) - Directs user requests to the data center best able to handle it. Requests can be redirected based on dynamic changes in global network performance, site connectivity and availability. Server location, load and many other factors determine the optimal server to use. • NetScaler AppCompress™ - Improves end-user performance and reduces bandwidth consumption by compressing HTML/text content before transmission to clients. AppCompress supports both encrypted and unencrypted data. • AppCache™ – Citrix NetScaler AppCache improves application performance by storing cacheable content, both static and dynamic, directly on the NetScaler platform. Multiple techniques ensure content freshness. • NetScaler Application Firewall™ – NetScaler Application Firewall ensures security at the application layer. It is an ICSA-certified web application firewall that automatically blocks malicious web traffic. • Citrix EdgeSight™ for NetScaler – EdgeSight for NetScaler is a transparent tool to measure end-user performance, and does not require a client-based agent. EdgeSight for NetScaler helps evaluate performance issues and monitor trends to anticipate future unacceptable performance levels allowing proactive network changes. Numerous application performance parameters, such as time to download a page and round trip response times, are stored and displayed in a variety of formats. Click here for the NetScaler Product Overview. NetScaler ADC Features and Benefits Table 1 summarizes the features and benefits of the NetScaler MPX Appliances. Table 1: Features and Benefits Feature Availability Application switching Benefit The Citrix NetScaler appliances provide load-balancing and content-switching functions with granular traffic control based on customizable Layer 4 through 7 rules with support for both IPv4 and IPv6 addresses, virtual IP addresses (VIPs) and server farms. NetScaler can natively load-balance the following protocols in an IPv4 environment: HTTP/HTTPS, FTP, DNS, ICMP, SIP, RTSP, Extended RTSP, LDAP, RADIUS, SCCP and Microsoft RDP. In an IPv6 environment, it can natively load-balance HTTP, HTTPS and SSL protocols. It has generic protocol parsing capabilities that enable the configuration of application switching and persistence policies
  • 5. 5 citrix.com White Paper based on any information in the traffic payload for custom and packaged applications without requiring any programming. NetScaler supports translation and load balancing between IPv4 and IPv6 networks and provides flexibility to customers in planning their IPv6 migration. Stickiness allows the same client to maintain multiple simultaneous or subsequent TCP or IP connections with the same real server for the duration of a session Stateful failover capabilities help ensure resilient network protection for enterprise network environments. NetScaler integrates global server load balancing to provide a multiple data center scaling and failover system. NetScaler checks the health of application servers and server farms through configuration of health probes. SQL-aware health monitors increase availability of database servers. SQL connection offload increases database server performance and aids in scaling database servers. SQL intelligent load balancing enables scaling out database deployments to routing SQL requests to the most appropriate server. Citrix TriScale clustering allows up to 32 appliances to work in concert to deliver one or multiple applications. The result is a cost effective and simple option for scaling out application delivery infrastructures. NetScaler delivers up to 11 Gbps data compression and provides faster application performance for application users. NetScaler MPX and SDX integrates hardware-based SSL acceleration technology, which offloads the encryption and decryption of up to 11 Gbps of SSL traffic from servers, Offload web, application, and database servers from compute intensive tasks such as TCP connection management, SSL encryption/decryption and in-memory caching of both dynamic and static content. Deliver application content immediately, both static and Dynamic, without burdening servers. NetScaler protects the data center and critical applications from protocol and denial-of-service (DoS) attacks at both L4 and L7 and encrypts mission-critical content. NetScaler Web Application Firewall provides deep protocol inspection capabilities, which enables IT professionals to comprehensively secure high-value applications in the data center. It secures mission- critical applications and protects against identity theft, data theft, application disruption, and fraud and defends web-based applications and transactions against targeted attacks by professional hackers. NetScaler uses a hybrid model including scanning over 3000 signatures for preventing known attack vectors. Policy-based bidirectional rewriting of HTTP header, payload elements and URLs. Policy-based redirection of incoming requests. Responder module with custom responses and redirects. Policy-based routing and network aware policies. L3 and L4 access control lists. Network Address Translation. NetScaler SDX provides a means for creating complete resource segmentation and isolation, allowing the NetScaler appliance to act as if it were several individual appliances within a single physical appliance. NetScaler SDX enable organizations to provide defined levels of service to up to 40 business departments, applications, or customers and partners from a single NetScaler SDX appliance. RBAC allows organizations to specify administrative roles and restrict administrators to specific functions within the appliance or virtual contexts, allowing each administrator group to freely perform its tasks without affecting the other groups. Through consolidation of application switching, SSL acceleration, data center security, and other functions on one device, NetScaler helps achieve better application performance, with fewer devices, simpler network designs, and easier management. NetScaler supports virtualization with one administrator device and up to 40 virtual contexts, 400,000 SSL transactions per second (TPS), and up to 11 Gbps of compression. The licensed throughput can be increased to up to 50 Gbps without the need for new equipment, through software license upgrades. Persistency Redundancy Server health monitoring Database load balancing Clustering Performance Compression SSL acceleration TCP offload Caching Security Datacenter security Application Security Content rewrite and response control Packet filtering Virtualized Services Virtual contexts Role-based access control (RBAC) Function consolidation Deployment and Management Investment protection
  • 6. 6 citrix.com White Paper Operational visibility Network Topology Where Does a NetScaler Fit in the Network? NetScaler resides in front of web and applications servers, so that client requests and server responses pass through it. In a typical installation, virtual servers (vservers) configured on the NetScaler provide connection/termination points that clients use to access the applications delivered by NetScaler. In this case, the NetScaler owns public IP addresses that are associated with its vservers, while the real servers are isolated in a private network. It is also possible to operate the NetScaler in a transparent mode as an L2 bridge or L3 router, or even to combine aspects of these and other modes. Provides network administrators application level details; AppFlow extends network monitoring to include granular application-layer visibility. By using IPFIX standard extensions NetScaler can provide inputs into a wide variety of monitoring tools. This eliminates span ports and network taps. AppExpert Visual Policy Builder visually builds the policy for every web app delivery feature without programming. AppExpert Templates provide pre-configured settings to optimize specific applications. Integrated, easy-to-use application analysis and policy-based control. Complements AppFlow with insight into full web application and SQL environments. Provides real-time monitoring and adaptive policy controls that transform raw data into actionable information to deliver better business intelligence and automatically tune application delivery policies. AppExpert framework ActionAnalytics NetScaler MPX portfolio and hardware information Table 2: NetScaler MPX platform options and specifications. NetScaler MPX Model Throughput (Gbps) Compression (Gbps) SSL Throughput (Gbps) SSL TPS: 1K & 2K Key (K) HTTP Requests per Second (K/s) 5550 5650 8200 8400 8600 11500 13500 14500 16500 17550 18500 19550 20500 20550 21550 0.5 1 2 4 6 8 12 18 24 20 36 30 42 40 50 0.5 1 1.1 2.3 3.5 3.5 4.5 5 6 7 7 8 8 9 11 0.5 1 2 4 5.5 6 6.5 7 10 8 10.5 9 11 10 11 7.5/1.5 10/2 13/2.8 25/5.7 40/8.5 80/15 93/19 105/22 133/28 150/33 158/34 245/50 205/45 330/73 380/98 175 250 350 600 800 1,200 1,600 1,800 2,000 2,400 2,500 3,500 2,600 4,000 4,000
  • 7. 7 citrix.com White Paper Physical Deployment Modes NetScaler can be deployed in either of two physical modes: inline and one-arm. In inline mode, multiple network interfaces are connected to different Ethernet segments, and the NetScaler is placed between the clients and the servers. The NetScaler has a separate network interface to each client network and a separate network interface to each server network. The NetScaler and the servers can exist on different subnets in this configuration. It is possible for the servers to be in a public network and the clients to directly access the servers through the NetScaler, with the NetScaler transparently applying the L4-L7 features. Usually, vservers are configured to provide an abstraction of the real servers. The following figure shows a typical inline deployment. Figure 1- Inline Deployment In one-arm mode, only one network interface of the NetScaler is connected to an Ethernet segment. The NetScaler in this case does not isolate the client and server sides of the network, but provides access to applications through configured vservers. One-arm mode can simplify network changes needed for NetScaler installation in some environments.
  • 8. 8 citrix.com White Paper Citrix NetScaler as an L2 Device A NetScaler functioning as an L2 device is said to operate in L2 mode. In L2 mode, the NetScaler forwards packets between network interfaces when all of the following conditions are met: • The packets are destined to another device’s media access control (MAC) address. • The destination MAC address is on a different network interface. • The network interface is a member of the same virtual LAN (VLAN). By default, all network interfaces are members of a pre-defined VLAN, VLAN 1. Address Resolution Protocol (ARP) requests and responses are forwarded to all network interfaces that are members of the same VLAN. To avoid bridging loops, L2 mode must be disabled if another L2 device is working in parallel with the NetScaler. Citrix NetScaler as a Packet Forwarding Device A NetScaler can function as a packet forwarding device, and this mode of operation is called L3 mode. With L3 mode enabled, the NetScaler forwards any received unicast packets that are destined for an IP address that it does not have internally configured, if there is a route to the destination. A NetScaler can also route packets between VLANs. In both modes of operation, L2 and L3, a NetScaler generally drops packets that are in: • Multicast frames • Unknown protocol frames destined for a NetScaler’s MAC address (non-IP and non-ARP) • Spanning Tree protocol (unless BridgeBPDUs is ON) How a NetScaler Communicates with Clients and Servers A NetScaler appliance is usually deployed in front of a server farm and functions as a transparent TCP proxy between clients and servers, without requiring any client-side configuration. This basic mode of operation is called Request Switching technology and is the core of NetScaler functionality. Request Switching enables a NetScaler to multiplex and offload the TCP connections, maintain Figure 2- Topology Diagram for One-Arm Mode, Multiple Subnets
  • 9. 9 citrix.com White Paper persistent connections, and manage traffic at the request (application layer) level. This is possible because the NetScaler can separate the HTTP request from the TCP connection on which the request is delivered. Depending on the configuration, a NetScaler may process the traffic before forwarding the request to a server. For example, if the client attempts to access a secure application on the server, the NetScaler might perform the necessary SSL processing before sending traffic to the server. To facilitate efficient and secure access to server resources, a NetScaler uses a set of IP addresses collectively known as NetScaler-owned IP addresses. To manage your network traffic, you assign NetScaler-owned IP addresses to virtual entities that become the building blocks of your configuration. For example, to configure load balancing, you create virtual servers (vservers) to receive client requests and distribute them to services, which are entities representing the applications on your servers. Traffic Management Building Blocks The configuration of a NetScaler is typically built up with a series of virtual entities that serve as building blocks for traffic management. The building block approach helps separate traffic flows. Virtual entities are abstractions, typically representing IP addresses, ports, and protocol handlers for processing traffic. Clients access applications and resources through these virtual entities. The most commonly used entities are vservers and services. Vservers represent groups of servers in a server farm or remote network, and services represent specific applications on each server. Most features and traffic settings are enabled through virtual entities. For example, you can configure a NetScaler to compress all server responses to a client that is connected to the server farm through a particular vserver. To configure the NetScaler for a particular environment, you need to identify the appropriate features and then choose the right mix of virtual entities to deliver them. Most features are delivered through a cascade of virtual entities that are bound to each other. In this case, the virtual entities are like blocks being assembled into the final structure of a delivered application. You can add, remove, modify, bind, enable, and disable the virtual entities to configure the features. The following figure shows the concepts covered in this section. Figure 3. How Traffic Management Building Blocks Work
  • 10. 10 citrix.com White Paper A Simple Load Balancing Configuration In the example shown in the following figure, the NetScaler is configured to function as a load balancer. For this configuration, you need to configure virtual entities specific to load balancing and bind them in a specific order. As a load balancer, a NetScaler distributes client requests across several servers and thus optimizes the utilization of resources. The basic building blocks of a typical load balancing configuration are services and load balancing vservers. The services represent the applications on the servers. The vservers abstract the servers by providing a single IP address to which the clients connect. To ensure that client requests are sent to a server, you need to bind each service to a vserver. That is, you must create services for every server and bind the services to a vserver. Clients use the VIP to connect to a NetScaler. When the NetScaler receives client requests on the VIP, it sends them to a server determined by the load balancing algorithm. Load balancing uses a virtual entity called a monitor to track whether a specific configured service (server plus application) is available to receive requests. Figure 4. Load Balancing Virtual Server, Services, and Monitors In addition to configuring the load balancing algorithm, you can configure several parameters that affect the behavior and performance of the load balancing configuration. For example, you can configure the vserver to maintain persistence based on source IP address. The NetScaler then directs all requests from any specific IP address to the same server. Understanding Policies and Expressions A policy defines specific details of traffic filtering and management on a NetScaler. It consists of two parts: the expression and the action. The expression defines the types of requests that the policy matches. The action tells the NetScaler what to do when a request matches the expression. As an example, the expression might be to match a specific URL pattern to a type of security attack, with the action being to drop or reset the connection. Each policy has a priority, and the priorities determine the order in which the policies are evaluated.
  • 11. 11 citrix.com White Paper When a NetScaler receives traffic, the appropriate policy list determines how to process the traffic. Each policy on the list contains one or more expressions, which together define the criteria that a connection must meet to match the policy. For all policy types except Rewrite policies, a NetScaler implements only the first policy that a request matches, not any additional policies that it might also match. For Rewrite policies, the NetScaler evaluates the policies in order and, in the case of multiple matches, performs the associated actions in that order. Policy priority is important for getting the results you want. Accelerating Load Balanced Traffic by Using Compression Compression is a popular means of optimizing bandwidth usage, and all modern web browsers support compressed data. If you enable the AppCompress feature, the Citrix NetScaler intercepts requests from clients and determines whether the client can accept compressed content. After receiving the HTTP response from the server, the NetScaler examines the content to determine whether it is compressible. If the content is compressible, the NetScaler compresses it, modifies the response header to indicate the type of compression performed, and forwards the compressed content to the client. NetScaler compression is a policy-based feature. A policy filters requests and responses to identify responses to be compressed, and specifies the type of compression to apply to each response. The NetScaler provides several built-in policies to compress common MIME types such as text/ html, text/ plain, text/xml, text/css, text/rtf, application/msword, application/vnd.ms-excel, and application/vnd.mspowerpoint. You can also create custom policies. The NetScaler does not compress compressed MIME types such as application/octet-stream, binary, bytes, and compressed image formats such as GIF and JPEG. To configure compression, you must enable it globally and on each service that will provide responses that you want compressed. If you have configured vservers for load balancing or content switching, you should bind the polices to the vservers. Otherwise, the policies apply to all traffic that passes through the NetScaler. Accessing a Citrix NetScaler A NetScaler® appliance has both a command line interface (CLI) and a graphical user interface (GUI). The GUI includes a configuration utility for configuring the appliance and a statistical utility, called Dashboard. For initial access, all NetScaler appliances ship with the default NetScaler IP address (NSIP) of 192.168.100.1 and default subnet mask of 255.255.0.0. You can assign a new NSIP and an associated subnet mask during initial configuration. Using the Command Line Interface You can access the CLI either locally, by connecting a workstation to the console port, or remotely, by connecting through secure shell (SSH) from any workstation on the same network. For more information about the features of the CLI, including SSH, see the Citrix NetScaler Command Reference Guide.
  • 12. 12 citrix.com White Paper Logging on to the Command Line Interface through the Console Port The NetScaler has a console port for connecting to a computer workstation. To log on to the NetScaler, you need a serial crossover cable and a workstation with a terminal emulation program. To log on to the CLI through the console port 1. Connect the console port to a serial port on the workstation, as described in “Connecting the Console Cable” section in the Citrix Hardware Installation and Setup Guide. 2. On the workstation, start HyperTerminal or any other terminal emulation program. If the logon prompt does not appear, you may need to press ENTER one or more times to display it. 3. Log on by using the administrator credentials. The command prompt (>) appears on the workstation monitor. Logging on to the Command Line Interface by using SSH The SSH protocol is the preferred remote access method for accessing a NetScaler remotely from any workstation on the same network. You can use either SSH version 1 (SSH1) or SSH version 2 (SSH2.) To log on to a NetScaler by using an SSH client 1. On your workstation, start the SSH client. 2. For initial configuration, use the default NetScaler IP address (NSIP), which is 192.168.100.1. For subsequent access, use the NSIP that was assigned during initial configuration. Select either SSH1 or SSH2 as the protocol. 3. Log on by using the administrator credentials. Using the Graphical User Interface The graphical user interface includes a configuration utility and a statistical utility, called Dashboard, either of which you access through a workstation connected to an Ethernet port on the NetScaler. If your computer does not have a supported Java plugin installed, the utility prompts you to download and install the plug-in the first time you log on. If automatic installation fails, you can install the plug- in separately before you attempt to log on to the configuration utility or Dashboard. The system requirements for the workstation running the GUI are as follows: • For Windows-based workstations, a Pentium® 166 MHz or faster processor with at least 48 MB of RAM is recommended for applets running in a browser using a Java plugin product. You should have 40 MB free disk space before installing the plug-in. • For Linux-based workstations, a Pentium platform running Linux kernel v2.2.12 or above, and glibc version 2.12-11 or later. A minimum of 32 MB RAM is required, and 48 MB RAM is recommended. The workstation should support 16-bit color mode, KDE and KWM window managers used in conjunction, with displays set to local hosts. • For Solaris-based workstations, a Sun running either Solaris 2.6, Solaris 7, or Solaris 8, and the Java 2 Runtime Environment, Standard Edition, version 1.6 or later. Your workstation must have a supported web browser and version 1.6 or above of the Java® applet plug-in installed to access the configuration utility and Dashboard.
  • 13. 13 citrix.com White Paper Quick Start Installation and Configuration Configuration Requirements Determine the following information for performing the initial configuration. • NetScaler IP address: The management IP address of the appliance. • Subnet IP address or Mapped IP address: The IP address used by the appliance to represent the client when communicating with a server. • Default gateway: The IP address of the router that forwards traffic out of the appliance’s subnet. • Root password: The root user (nsroot) has full administrative privileges on the appliance. The root password is used to authenticate the root user. Setting Up Connectivity Connect the appliance to a management workstation or the network by using the NetScaler configuration utility, the command-line interface (CLI), or the LCD keypad. Configuration Utility Setup To set up the appliance by using the configuration utility, you need a management workstation or laptop configured on the same network as the appliance. To run the configuration utility, the Java RunTime Environment (JRE) version 1.4.2_04 or later must be installed on the workstation or laptop. Note: The Setup Wizard automatically opens upon log on when the appliance is configured with the default IP address, when licenses are not installed on the appliance, and when either the mapped IP address or subnet IP address is not configured. To configure the NetScaler by using the configuration utility 1. Connect the NetScaler to a management workstation or network. 2. Open a browser and type: http://192.168.100.1 Note: The NetScaler is preconfigured with the IP address 192.168.100.1. 3. In User Name, type nsroot. 4. In Password, type nsroot. 5. In the Setup Wizard, click Next and follow the instructions in the wizard. 6. To confirm that the NetScaler is configured correctly, you can either ping the new NetScaler IP address (NSIP) or use the new NSIP to open the configuration utility in a browser. CLI Setup To set up the appliance by using the command-line interface (CLI), connect the serial cable to the console port. Access the command line with a terminal or terminal emulator with the following settings: • Baud rate: 9600 • Data bits: 8 • Parity: None • Stop bits: 1 • Flow control: None
  • 14. 14 citrix.com White Paper Example: set ns config -ipaddress 10.102.29.60 – netmask 255.255.255.0 add ns ip 10.102.29.61 255.255.255.0 - type snip add route 0.0.0.0 0.0.0.0 10.102.29.1 set system user nsroot administrator save ns config reboot Log on to the NetScaler with the following credentials: User name: nsroot Password: nsroot To configure the NetScaler by using the NetScaler command line At the NetScaler command prompt, type: • set ns config -ipaddress<IPAddress> -netmask<subnetMask> • add ns ip<IPAddress> <subnetMask> -type<type> • add route Network<subnetMask> <gateway> • set system user<userName> <password> • save ns config • reboot LCD Keypad Setup To set up the appliance by using the LCD keypad on the front panel of the appliance, enter the following initial settings in the following order: 1. Subnet mask 2. NSIP 3. Gateway The NSIP and the default gateway should be on the same subnet. The subnet mask, NSIP, and gateway values are saved in the configuration file. You can then use the NSIP to connect to the appliance remotely. For more information, see the Citrix NetScaler Hardware Installation and Setup Guide at http://support.citrix.com/ article/ CTX132365.
  • 15. 15 citrix.com White Paper Additional Information A complete set of documentation is available on the Documentation tab of your NetScaler and from http://support.citrix.com/. (Most of the documents require Adobe Reader, available at http://adobe. com/ .) To view the documentation 1. From a Web browser, log on to the NetScaler. 2. Click the Documentation tab. 3. To view a short description of each document, hover your cursor over the title. To open a document, click the title. If you have support questions, please contact Citrix Technical Support at 1-800-4-CITRIX (1-800- 424-8749). For additional contact information, see Support Phone Numbers at http://support. citrix.com/. If you have comments or feedback on this documentation, please email to nsdocs_ feedback@citrix.com.
  • 16. citrix.com0112/PDF 16 About Citrix Citrix Systems, Inc. (NASDAQ:CTXS) is a leading provider of virtual computing solutions that help companies deliver IT as an on-demand service. Founded in 1989, Citrix combines virtualization, networking and cloud computing technologies into a full portfolio of products that enable virtual workstyles for users and virtual datacenters for IT. More than 230,000 organizations worldwide rely on Citrix to help them build simpler and more cost-effective IT environments. Citrix partners with over 10,000 companies in more than 100 countries. Annual revenue in 2010 was $1.87 billion. ©2012 Citrix Systems, Inc. All rights reserved. Citrix® , NetScaler® and Citrix Application Firewall™ are trademarks of Citrix Systems, Inc. and/or one or more of its subsidiaries, and may be registered in the United States Patent and Trademark Office and in the other countries. All other trademarks and registered trademarks are the property of their respective owners. Corporate Headquarters Fort Lauderdale, FL, USA Silicon Valley Headquarters Santa Clara, CA, USA EMEA Headquarters Schaffhausen, Switzerland India Development Center Bangalore, India Online Division Headquarters Santa Barbara, CA, USA Pacific Headquarters Hong Kong, China Latin America Headquarters Coral Gables, FL, USA UK Development Center Chalfont, United Kingdom