Citrix ADC

AWS FAQs

  • Does a Citrix ADC VPX instance support the encrypted volumes in AWS?

    Encryption and decryption happen at the hypervisor level, and hence it works seamlessly with any instance. For more information about the encrypted volumes see the following AWS document:

    https://docs.aws.amazon.com/kms/latest/developerguide/services-ebs.html

  • What is the best way to provision Citrix ADC VPX instance on AWS?

    You can provision a Citrix ADC VPX instance on AWS by any of the following ways:

    • AWS CloudFormation Template (CFT) in AWS marketplace
    • Citrix ADM
    • AWS Quick Starts
    • Citrix AWS CFTs in Git hub
    • Citrix Terraform Scripts in Git hub
    • Citrix Ansible Playbooks in Git hub
    • AWS EC2 launch workflow

    You can choose any of the listed options based on the automation tool that you use.

    For more details about the options, see Citrix ADC VPX on AWS.

  • How to upgrade Citrix ADC VPX instance in AWS?

    To upgrade the Citrix ADC VPX instance in AWS, you can upgrade the system software or upgrade to a new Citrix ADC VPX Amazon Machine Image (AMI) by following the procedure at Upgrade a Citrix ADC VPX instance on AWS.

    The recommended way to upgrade a Citrix ADC VPX instance is using the ADM service by following the procedure at Use jobs to upgrade Citrix ADC instances.

  • What is the HA failover time for Citrix ADC VPX in AWS?

    • HA failover of Citrix ADC VPX within the AWS availability zone takes around 3 seconds.
    • HA failover of Citrix ADC VPX across AWS availability zones takes around 5 seconds.
  • What level of support is provided for Citrix ADC VPX marketplace subscription customers who provide the technical support PIN?

    By default, the “Select for Software” service is provided to customers who provide the technical support PIN.

  • In High availability across different zones using Elastic IP deployment, do we need to create Multiple IPSets for each application?

    Yes. If there are multiple applications with multiple VIPs mapped to multiple EIPs then multiple IPSets are required. Therefore during HA failover, all the primary VIP mappings of EIPs are changed to secondary (new primary) VIPs.

  • Why is INC mode enabled in high availability across different zone deployments?

    HA pairs across availability zones are in different networks. For HA synchronization, network configuration must not be synchronized. This is achieved by enabling INC mode on HA pair.

  • Can HA node in one availability zone communicate with backend servers in another availability zone, provided those availabilty zones are in same VPC?

    Yes, subnets in different availability zones of the same VPC are reachable by adding an extra route pointing to the backend-server subnet via SNIP. For example, if the SNIP subnet of ADC in AZ1 is 192.168.3.0/24 and backend-server subnet in AZ2 is 192.168.6.0/24, then a route must be added in the Citrix ADC appliance present in AZ1 as 192.168.6.0 255.255.255.0 192.168.3.1.

  • Can High availability across different zones using Elastic IP and High availability across different zones using Private IP deployments work together?

    Yes, both the configurations can be applied on the same HA Pair.

  • In High availability across different zones using Private IP deployment, if there are multiple subnets with multiple route tables in a VPC, how does a secondary node in HA pair know about the route table to be checked during HA failover?

    Secondary node is aware of the primary NICs and searches across all the route tables in a VPC.

AWS FAQs