ADC

Prerequisites

Before attempting to create a VPX instance in AWS, ensure you have the following:

  • An AWS account: to launch a Citrix ADC VPX AMI in an Amazon Web Services (AWS) Virtual Private Cloud (VPC). You can create an AWS account for free at www.aws.amazon.com.
  • An AWS Identity and Access Management (IAM) user account: to securely control access to AWS services and resources for your users. For more information about how to create an IAM user account, see the topic Creating IAM Users (Console).

An IAM role is mandatory for both standalone and high availability deployments. The IAM role must have the following privileges:

ec2:DescribeInstances
ec2:DescribeNetworkInterfaces
ec2:DetachNetworkInterface
ec2:AttachNetworkInterface
ec2:StartInstances
ec2:StopInstances
ec2:RebootInstances
ec2:DescribeAddresses
ec2:AssociateAddress
ec2:DisassociateAddress
ec2:AssignPrivateIpAddresses
ec2:UnAssignPrivateIpAddresses
autoscaling:*
sns:CreateTopic
sns:DeleteTopic
sns:ListTopics
sns:Subscribe
sqs:CreateQueue
sqs:ListQueues
sqs:DeleteMessage
sqs:GetQueueAttributes
sqs:SetQueueAttributes
iam:SimulatePrincipalPolicy
iam:GetRole
<!--NeedCopy-->

If you use the Citrix CloudFormation template, the IAM role is automatically created. The template does not allow selecting an already created IAM role.

Note: When you log on the VPX instance through GUI, a prompt to configure the required privileges for IAM role appears. Ignore the prompt if you’ve already configured the privileges.

image

  • AWS CLI: to use all the functionality provided by the AWS Management Console from your terminal program. For more information, see the AWS CLI user guide. You also need the AWS CLI to change the network interface type to SR-IOV.

  • Elastic Network Adapter (ENA): For ENA driver-enabled instance type, the firmware version must be 13.0 and above.

Prerequisites