Customer needs EnterpriseGrade HyperScale Hybrid
Internet Clients On premises Datacenter Azure Virtual Network Frontend Connectivity Load-balanced and direct IPs ACLs & DDoS protection Traffic Manager & Azure DNS Virtual Networks Flexible multi-tier topologies Backend Connectivity Secure Internet cross premises VPN connectivity ExpressRoute – direct connectivity
Performance - Direct to “closest” service based on network latency Round-robin - Distribute equally across all services Failover - Direct to “backup” service if primary fails —also included in other policies
Example: Cross-region failover within a Geo, plus in-region flighting
Internet IP assigned to a single VM Entire port ranges are accessible Support applications with dynamic public ports; e.g., FTP, multi-media Ideal for workloads with heavy outbound connections Instance level public IPs VM1 VM2 Cloud service Reserved VIP LB
Azure Load Balancer
Virtual Network Backend10.3/16Mid-tier10.2/16Frontend10.1/16 VPN GW Internet On Premises 10.0/16 S2S VPNs Internet
NSG
Azure Virtual Machine NIC2 NIC1 Default Internet VIP:
© 2014 Citrix. Confidential.22 Services Anywhere Work Anywhere 1010SSL101SSL App Store Networking & Cloud Infrastructure Windows Desktops Windows & Mobile Apps Data Sync & Sharing Collaboration & Support
© 2014 Citrix. Confidential.23 Infrastructure & Services Mobile Workspace 1010SSL101SSL App Store Networking & Cloud Infrastructure Windows Desktops Windows & Mobile Apps Data Sync & Sharing Collaboration & Support Data Desktops Collaboration Apps Personal
© 2014 Citrix. Confidential.24 Performance Offload Security Availability World-class load balancing Global Server Load Balancing World-class load balancing Global Server Load Balancing Caching Compression Optimization Caching Compression Optimization TCP Connection Management SSL processing TCP Connection Management SSL processing SSL VPN Application firewall SSL VPN Application firewall
© 2014 Citrix. Confidential.25 40% reduction in bytes 30% reduction in Requests ~100% Faster Page Load Time Advanced Application Acceleration
© 2014 Citrix. Confidential.26 NetScaler Insight for Web App and Published App Visibility
© 2014 Citrix. Confidential.27 Web AppsMobile AppsSaaS/Cloud AppsC/S Apps Optimized delivery and threat protection Granular visibility and control Seamless authentication & authorization
© 2014 Citrix. Confidential.28 NetScaler for Azure Same NetScaler binary Supports new Azure multi-NIC Different interfaces in different zones
Secure point-to-site connectivity Developers Developers POC Efforts POC Efforts Small scale deployments Small scale deployments Connect from anywhere Connect from anywhere Secure site-to-site VPN connectivity SMB, Enterprises SMB, Enterprises Connect to Azure compute Connect to Azure compute ExpressRoute private connectivity SMB & Enterprises SMB & Enterprises Mission critical workloads Mission critical workloads Backup/DR, media, HPC Backup/DR, media, HPC Connect to all Azure services Connect to all Azure services
Virtual Network Backend10.3/16 Mid-tier10.2/16 Frontend10.1/16 VPN GW Internet On Premises S2S VPNs Forced Tunneled via S2S VPN Internet
Gateway SKUExpressRoute Throughput* S2S Throughput* Max Tunnels Default500 Mbps100 Mbps10 Performance1000 Mbps200 Mbps30
WAN WAN
Public internet Microsoft Azure Public internet Microsoft Azure
US Atlanta Chicago Dallas Los Angeles New York Seattle Silicon Valley, CA Washington D.C. EMEA Amsterdam London, UK APAC Hong Kong Singapore Sydney Tokyo AT&T British Telecom Colt Equinix Internet Initiative Japan (IIJ) Level3 Orange SingTel Tata Communications Telecity Group Telstra Verizon Azure datacenters ExpressRoute Locations (today) New Locations and coming soon
North Europe West Europe London Amsterdam
Microsoft Azure ExpressRoute Marketing Sales R&D IT