How high availability on AWS works

You can configure two Citrix ADC VPX instances on AWS as a high availability (HA) active-passive pair. When you configure one instance as the primary node and the other as the secondary node, the primary node accepts connections and manages servers. The secondary node monitors the primary. If for any reason, the primary node is unable to accept connections, the secondary node takes over.

In AWS, the following deployment types are supported for VPX instances:

  • High availability within same zone
  • High availability across different zones

High availability within the same zones

In a high-availability deployment within same zones, both VPX instances are on the same subnet.

From 13.0 41.x onwards, high availability can be achieved by migrating secondary private IP addresses attached to the NICs (client and server-side NICs) of the primary HA node to the secondary HA node after failover.In this deployment:

  • Both the VPX instances have same number of NICs and subnet mapping according to NIC enumeration.

  • Each VPX NICs has one extra private IP address, except the first NIC - which corresponds to management IP address. The extra private IP address appears as the primary private IP address in the AWS web console. In our document, we refer to this extra IP address as the dummy IP address).

  • The dummy IP addresses must be not configured on the Citrix ADC instance as VIP and SNIP.

  • Additional secondary private IP addresses must be created, as required, and configured as VIP and SNIP.

  • On failover, the new primary node looks for configured SNIPs and VIPs and moves them from NICs attached to previous primary to corresponding NICs on new primary.

This method is faster than the legacy method, where HA is achieved by migration the AWS elastic network interfaces of the primary node to the secondary node.

For more information, see Deploy a high availability pair on AWS.

High availability across different zones

You can configure two Citrix ADC VPX instances on two different subnets or two different AWS availability zones, as a high availability active-passive pair in Independent Network Configuration (INC) mode. Upon failover, the EIP of the VIP of the primary instance migrates to the secondary, which takes over as the new primary. In the failover process, AWS API:

  • Checks the vservers that have IPSets attached to them.
  • Finds the IP address that has an associated public IP, from the two IP addresses the vserver is listening on. One that is directly attached to the vserver, and one that is attached through the IP set.
  • Re-associates the public IP (EIP) to the private IP belonging to the new primary VIP.

For more information, see High availability across AWS availability zones.

Before you start your deployment

Before you start any HA deployment on AWS, read the following document: