Sikker adgang fra alle devices edgemo summit CPH maj 2014

Kort intro Eigil Ørnfelt Infrastructure specialist Niels Holm Infrastructure specialist

NetScaler Gateway NetScaler Access Gateway Enterprise Edition (AGEE) Citrix Access Gateway (CAG) Citrix Secure Gateway NetScaler ADC Citrix Advanced Access Gateway (CAG)

Citrix TriScale Technology Scale Up Scale Out Scale In Elasticity with Pay-As-You-Grow Simplicity with Many-In-One Expandability with Add-and-Go “Buy only what you need” “End Appliance Sprawl” “Start Small. Grow Forever” “Grow capacity up to 5 x. No New Hardware.” “Megabits to Terabits. Zero Downtime.” “ 80x footprint reduction. No Compromises.”

Citrix NetScaler overview

Cloud Infrastructure Enterprise Datacenter PerformanAcAc Accelerate Offload Security Availability World-class load balancing Health monitoring World-class load balancing Health monitoring Caching Compression Optimization Caching Compression Optimization TCP Connection Management SSL processing TCP Connection Management SSL processing SSL VPN Application firewall AAA SSL VPN Application firewall AAA

Layer 4 Load Balancing Source IP Cookie SSL Session ID Server-ID in URL Query Customer Server-ID Token (header or body) Maintaining User Sessions Distributing Traffic Least Connections Lowest Response Time Round Robin SNMP-based Hash-based Many more… Monitoring Server Health and Availability TCP Connection HTTPS Connection Extended Content Verification Scriptable Health Checks TCP and UDP Client Requests

Global Server Load Balancing Site B Site A

HTTP Requests Anything in request body Device Type Language Cookie Browser Capability XML XPath support Client Attributes Any TCP Request HTTP Get HTTP Post Request Protocol Request Method Any TCP payload value Any HTTP payload value Domain Wildcard URL Content Switching: Load Balancing on Steroids

Optimering

TCP Connection Multiplexing 1.NetScaler terminates connection 2.Client transmits requests 3.NetScaler establishes server connection 4.NetScaler transmits client requests 5.Other clients follow same procedure 6.Multiple client requests are transmitted across common server connection Web Server

Database Scale-Up Performance PerformanceDirectNetScaler Transactions/sec 5,250 14,700 Queries/sec 21,000 58,800 Queries/minute 1,260,000 3,528,000 Latency of each transaction (ms) NetScaler CPU use % N/A 46 SQL server CPU use % 100 SQL server RAM use (MB) RX tput (Mbps) NetScaler: MPX5500 DB Server : MS SQL Server 2008 on 4-cores + 4GB RAM Server/Windows bit, Intel Xeon X GHz Transaction : 1 new TCP Connection with 5 SQL Queries Spare CPU: Scale-Out! PerformanceDirect Transactions/sec 5,250 Queries/sec 21,000 Queries/minute 1,260,000 Latency of each transaction (ms) 34 NetScaler CPU use % N/A SQL server CPU use % 100 SQL server RAM use (MB) 131 RX tput (Mbps) 75

AppCache Memory or flash disk based cache Reduce time to first packet Significantly reduce back-end server workloads Dynamic caching for frequently changing content Flash cache support for realtime updates

AppCache – Non-Caching proxy Deliver it one time Get the web page

AppCache – Caching proxy Deliver it many times Get the web page once

AppCompress Standard based compression – GZIP/DEFLATE Works with all browsers, including mobile Applies to HTML, JavaScript, CSS and Documents 3:1 to 5:1 Compression Ratio

AppCompress 1 Gbyte File 1 Gbyte File 1 Gbps Throughput Mbps Throughput

AppCompression 1 Kb request (for a 100Kb file from server) 1 Kb request (for a 100Kb file from server) Respone with a 100KB file 5Kb Compressed Response

Sikkerhed

AAA - Authentication

Multi-factor authentication REQ.SSL.CLIENT.CERT = EXISTS REQ.BROWSER-TYPE = Internet Explorer REQ.SSL.CLIENT.CERT != EXISTS REQ.SSL.CLIENT.CERT = EXISTS + LDAP

NetScaler Insight Center

Insight Center Internet XenDesktop/ XenApp ? ? ?

Insight Center Old New USER Help-DeskDesktop Admin Network Admin Citrix Support Software Citrix Support Escalation USER Help-DeskNetwork Admin IT Department Citrix Support IT dept calls Citrix Support

NetScaler Insight Center Internet NetScaler XenDesktop/ XenApp NetScaler Insight Center 3 rd Party Analysis Tools AppFlow

Insight Center Application or Network? Which Part of Network? Bandwidth Taken Up? Users Affected Servers Causing Trouble

Insight Center ICA Analytics DC & WAN Latency Active /Inactive Session Data ICA RTTHost Delay Client/ Server IP Virtual Channels

Insight Center

?

Tak for jeres tid!