1. Sikker adgang fra alle devices edgemo summit CPH maj 2014

2. Kort intro Eigil Ørnfelt Infrastructure specialist eoe@edgemo.com Niels Holm Infrastructure specialist nch@edgemo.com

3. NetScaler Gateway NetScaler Access Gateway Enterprise Edition (AGEE) Citrix Access Gateway (CAG) Citrix Secure Gateway NetScaler ADC Citrix Advanced Access Gateway (CAG)

4. Citrix TriScale Technology Scale Up Scale Out Scale In Elasticity with Pay-As-You-Grow Simplicity with Many-In-One Expandability with Add-and-Go “Buy only what you need” “End Appliance Sprawl” “Start Small. Grow Forever” “Grow capacity up to 5 x. No New Hardware.” “Megabits to Terabits. Zero Downtime.” “ 80x footprint reduction. No Compromises.”

5. Citrix NetScaler overview

6. Cloud Infrastructure Enterprise Datacenter PerformanAcAc Accelerate Offload Security Availability World-class load balancing Health monitoring World-class load balancing Health monitoring Caching Compression Optimization Caching Compression Optimization TCP Connection Management SSL processing TCP Connection Management SSL processing SSL VPN Application firewall AAA SSL VPN Application firewall AAA

7. Layer 4 Load Balancing Source IP Cookie SSL Session ID Server-ID in URL Query Customer Server-ID Token (header or body) Maintaining User Sessions Distributing Traffic Least Connections Lowest Response Time Round Robin SNMP-based Hash-based Many more… Monitoring Server Health and Availability TCP Connection HTTPS Connection Extended Content Verification Scriptable Health Checks TCP and UDP Client Requests

8. Global Server Load Balancing Site B Site A

9. HTTP Requests Anything in request body Device Type Language Cookie Browser Capability XML XPath support Client Attributes Any TCP Request HTTP Get HTTP Post Request Protocol Request Method Any TCP payload value Any HTTP payload value Domain Wildcard URL Content Switching: Load Balancing on Steroids

10. Optimering

11. TCP Connection Multiplexing 1.NetScaler terminates connection 2.Client transmits requests 3.NetScaler establishes server connection 4.NetScaler transmits client requests 5.Other clients follow same procedure 6.Multiple client requests are transmitted across common server connection Web Server

14. Database Scale-Up Performance PerformanceDirectNetScaler Transactions/sec 5,250 14,700 Queries/sec 21,000 58,800 Queries/minute 1,260,000 3,528,000 Latency of each transaction (ms) 34 13 NetScaler CPU use % N/A 46 SQL server CPU use % 100 SQL server RAM use (MB) 131 123 RX tput (Mbps) 75 160 NetScaler: MPX5500 DB Server : MS SQL Server 2008 on 4-cores + 4GB RAM Server/Windows 2003 32 bit, Intel Xeon X5680 3.33 GHz Transaction : 1 new TCP Connection with 5 SQL Queries Spare CPU: Scale-Out! PerformanceDirect Transactions/sec 5,250 Queries/sec 21,000 Queries/minute 1,260,000 Latency of each transaction (ms) 34 NetScaler CPU use % N/A SQL server CPU use % 100 SQL server RAM use (MB) 131 RX tput (Mbps) 75

15. AppCache Memory or flash disk based cache Reduce time to first packet Significantly reduce back-end server workloads Dynamic caching for frequently changing content Flash cache support for realtime updates

16. AppCache – Non-Caching proxy Deliver it one time Get the web page

17. AppCache – Caching proxy Deliver it many times Get the web page once

18. AppCompress Standard based compression – GZIP/DEFLATE Works with all browsers, including mobile Applies to HTML, JavaScript, CSS and Documents 3:1 to 5:1 Compression Ratio

19. AppCompress 1 Gbyte File 1 Gbyte File 1 Gbps Throughput200-300Mbps Throughput

20. AppCompression 1 Kb request (for a 100Kb file from server) 1 Kb request (for a 100Kb file from server) Respone with a 100KB file 5Kb Compressed Response

21. Sikkerhed

22. AAA - Authentication

23. Multi-factor authentication REQ.SSL.CLIENT.CERT = EXISTS REQ.BROWSER-TYPE = Internet Explorer REQ.SSL.CLIENT.CERT != EXISTS REQ.SSL.CLIENT.CERT = EXISTS + LDAP

24. NetScaler Insight Center

25. Insight Center Internet XenDesktop/ XenApp ? ? ?

26. Insight Center Old New USER Help-DeskDesktop Admin Network Admin Citrix Support Software Citrix Support Escalation USER Help-DeskNetwork Admin IT Department Citrix Support IT dept calls Citrix Support

27. NetScaler Insight Center Internet NetScaler XenDesktop/ XenApp NetScaler Insight Center 3 rd Party Analysis Tools AppFlow

28. Insight Center Application or Network? Which Part of Network? Bandwidth Taken Up? Users Affected Servers Causing Trouble

29. Insight Center ICA Analytics DC & WAN Latency Active /Inactive Session Data ICA RTTHost Delay Client/ Server IP Virtual Channels

30. Insight Center

32. ?

33. Tak for jeres tid!