-
Getting Started with Citrix ADC
-
Deploy a Citrix ADC VPX instance
-
Install a Citrix ADC VPX instance on Microsoft Hyper-V servers
-
Install a Citrix ADC VPX instance on Linux-KVM platform
-
Prerequisites for Installing Citrix ADC VPX Virtual Appliances on Linux-KVM Platform
-
Provisioning the Citrix ADC Virtual Appliance by using OpenStack
-
Provisioning the Citrix ADC Virtual Appliance by using the Virtual Machine Manager
-
Configuring Citrix ADC Virtual Appliances to Use SR-IOV Network Interface
-
Configuring Citrix ADC Virtual Appliances to use PCI Passthrough Network Interface
-
Provisioning the Citrix ADC Virtual Appliance by using the virsh Program
-
Provisioning the Citrix ADC Virtual Appliance with SR-IOV, on OpenStack
-
Configuring a Citrix ADC VPX Instance on KVM to Use OVS DPDK-Based Host Interfaces
-
-
Deploy a Citrix ADC VPX instance on AWS
-
Deploy a VPX high-availability pair with elastic IP addresses across different AWS zones
-
Deploy a VPX high-availability pair with private IP addresses across different AWS zones
-
Configure a Citrix ADC VPX instance to use SR-IOV network interface
-
Configure a Citrix ADC VPX instance to use Enhanced Networking with AWS ENA
-
Deploy a Citrix ADC VPX instance on Microsoft Azure
-
Network architecture for Citrix ADC VPX instances on Microsoft Azure
-
Configure multiple IP addresses for a Citrix ADC VPX standalone instance
-
Configure a high-availability setup with multiple IP addresses and NICs
-
Configure a high-availability setup with multiple IP addresses and NICs by using PowerShell commands
-
Configure a Citrix ADC VPX instance to use Azure accelerated networking
-
Configure HA-INC nodes by using the Citrix high availability template with Azure ILB
-
Configure address pools (IIP) for a Citrix Gateway appliance
-
-
FAQ
-
Upgrade and downgrade a Citrix ADC appliance
-
Solutions for Telecom Service Providers
-
Load Balance Control-Plane Traffic that is based on Diameter, SIP, and SMPP Protocols
-
Provide Subscriber Load Distribution Using GSLB Across Core-Networks of a Telecom Service Provider
-
Authentication, authorization, and auditing application traffic
-
Basic components of authentication, authorization, and auditing configuration
-
On-premises Citrix Gateway as an identity provider to Citrix Cloud
-
Authentication, authorization, and auditing configuration for commonly used protocols
-
Troubleshoot authentication and authorization related issues
-
-
-
-
-
-
Persistence and persistent connections
-
Advanced load balancing settings
-
Gradually stepping up the load on a new service with virtual server–level slow start
-
Protect applications on protected servers against traffic surges
-
Retrieve location details from user IP address using geolocation database
-
Use source IP address of the client when connecting to the server
-
Use client source IP address for backend communication in a v4-v6 load balancing configuration
-
Set a limit on number of requests per connection to the server
-
Configure automatic state transition based on percentage health of bound services
-
-
Use case 2: Configure rule based persistence based on a name-value pair in a TCP byte stream
-
Use case 3: Configure load balancing in direct server return mode
-
Use case 6: Configure load balancing in DSR mode for IPv6 networks by using the TOS field
-
Use case 7: Configure load balancing in DSR mode by using IP Over IP
-
Use case 10: Load balancing of intrusion detection system servers
-
Use case 11: Isolating network traffic using listen policies
-
Use case 14: ShareFile wizard for load balancing Citrix ShareFile
-
-
-
-
Authentication and authorization for System Users
-
-
Configuring a CloudBridge Connector Tunnel between two Datacenters
-
Configuring CloudBridge Connector between Datacenter and AWS Cloud
-
Configuring a CloudBridge Connector Tunnel Between a Datacenter and Azure Cloud
-
Configuring CloudBridge Connector Tunnel between Datacenter and SoftLayer Enterprise Cloud
-
Configuring a CloudBridge Connector Tunnel Between a Citrix ADC Appliance and Cisco IOS Device
-
CloudBridge Connector Tunnel Diagnostics and Troubleshooting
-
-
Synchronizing Configuration Files in a High Availability Setup
-
Restricting High-Availability Synchronization Traffic to a VLAN
-
Understanding the High Availability Health Check Computation
-
Managing High Availability Heartbeat Messages on a Citrix ADC Appliance
-
Remove and Replace a Citrix ADC in a High Availability Setup
This content has been machine translated dynamically.
Dieser Inhalt ist eine maschinelle Übersetzung, die dynamisch erstellt wurde. (Haftungsausschluss)
Cet article a été traduit automatiquement de manière dynamique. (Clause de non responsabilité)
Este artículo lo ha traducido una máquina de forma dinámica. (Aviso legal)
此内容已动态机器翻译。 放弃
このコンテンツは動的に機械翻訳されています。免責事項
This content has been machine translated dynamically.
This content has been machine translated dynamically.
This content has been machine translated dynamically.
This article has been machine translated.
Dieser Artikel wurde maschinell übersetzt. (Haftungsausschluss)
Ce article a été traduit automatiquement. (Clause de non responsabilité)
Este artículo ha sido traducido automáticamente. (Aviso legal)
この記事は機械翻訳されています.免責事項
이 기사는 기계 번역되었습니다.
Este artigo foi traduzido automaticamente.
这篇文章已经过机器翻译.放弃
Translation failed!
FAQs
The following section helps you to categorize the FAQs based on Citrix Application Delivery Controller (ADC) VPX.
Feature and functionality
What is Citrix ADC VPX?
Citrix ADC VPX is a virtual ADC appliance that can be hosted on a Hypervisor installed on industry standard servers.
Does Citrix ADC VPX include all the web application optimization functionality as ADC appliances?
Yes. Citrix ADC VPX includes all load balancing, traffic management, application acceleration, application security (including Citrix ADC Gateway and Citrix Application Firewall), and offload functionality. For a complete overview of the Citrix ADC feature and functionality, see Application delivery your way.
Are there any limitations with Citrix Application Firewall when using it on Citrix ADC VPX?
Citrix Application Firewall on Citrix ADC VPX provides the same security protections as it does on Citrix ADC appliances. Performance or throughput of Citrix Application Firewall varies by platform.
Are there any differences between Citrix ADC Gateway on Citrix ADC VPX and Citrix ADC Gateway on Citrix ADC appliances?
Functionally, they are identical. Citrix ADC Gateway on Citrix ADC VPX supports all the Citrix ADC Gateway features available in Citrix ADC software release 9.1. However, because Citrix ADC appliances provide dedicated SSL acceleration hardware, it offers greater SSL VPN scalability than a Citrix ADC VPX instance.
Other than the obvious difference of being able to run on a Hypervisor, how does Citrix ADC VPX differ from Citrix ADC physical appliances?
There are two main areas where customers see differences in behavior. The first is Citrix ADC VPX cannot offer the same performance as many Citrix ADC appliances. The second is that while Citrix ADC appliances incorporate its own L2 networking functionality, Citrix ADC VPX relies upon the Hypervisor for its L2 networking services. Generally, it does not limit how the Citrix ADC VPX can be deployed. There can be certain L2 functionality that is configured on a physical Citrix ADC appliance must be configured on the underlying Hypervisor.
How does Citrix ADC VPX play a role in the Application Delivery market?
Citrix ADC VPX changes the game in the application delivery market in the following ways:
-
By making a Citrix ADC appliance even more affordable, Citrix ADC VPX enables any IT organization to deploy a Citrix ADC appliance. It is not just for their most mission-critical web applications, but for all of their Web applications.
-
Citrix ADC VPX allows customers to further converge networking and virtualization within their data centers. Citrix ADC VPX cannot only be used to optimize web applications hosted on virtualized servers. It also enables web application delivery itself to become a virtualized service that can be easily and rapidly deployed anywhere. IT organizations use there standard data center processes for tasks such as provisioning, automation, and charge-back for the web application delivery infrastructure.
-
Citrix ADC VPX opens up new deployment architectures that are not practical if only physical appliances are used. Citrix ADC VPX and Citrix ADC MPX appliances can be used basis, tailored to the individual needs of each respective application to handle processor-intensive actions such as compression and application firewall inspection. At the data center edge, Citrix ADC MPX appliances handle high-volume network-wide tasks such as initial traffic distribution, SSL encryption/decryption, denial of service (DoS) attack prevention, and global load balancing. Pairing high-performance Citrix ADC MPX appliances with easy-to-deploy Citrix ADC VPX virtual appliance brings unparalleled flexibility and customization capabilities to modern, large-scale, data center environments while also reducing overall data center costs.
How does Citrix ADC VPX fit into our Citrix delivery center strategy?
With the availability of Citrix ADC VPX, the entire Citrix delivery center offering is available as a virtualized offering. The entire Citrix delivery center benefits from the powerful management, provisioning, monitoring, and reporting capabilities available in Citrix XenCenter, and can be deployed rapidly into almost any environment, and managed centrally from anywhere. With one integrated, virtualized application delivery infrastructure, organizations can deliver desktops, client-server applications, and Web applications.
Encryption
Does Citrix ADC VPX support SSL offload?
Yes. However, Citrix ADC VPX does all SSL processing in software, so Citrix ADC VPX does not offer the same SSL performance as Citrix ADC appliances. Citrix ADC VPX can support up to 750 new SSL transactions per second.
Does third-party SSL cards installed on the server hosting Citrix ADC VPX accelerate SSL encryption or decryption?
No. Supporting third-party SSL cards cannot associate the Citrix ADC VPX to specific hardware implementations. It greatly diminishes an organizations ability to flexibly host Citrix ADC VPX anywhere within the data center. Citrix ADC MPX appliances must be used when more SSL throughput than Citrix ADC VPX provides is required.
Does Citrix ADC VPX support the same encryption ciphers as physical Citrix ADC appliances?
VPX supports all encryption ciphers as physical Citrix ADC appliances, except the ECDSA.
What is the SSL transactions throughput of Citrix ADC VPX?
Refer to Citrix ADC VPX data sheet for information on SSL transactions throughput.
Pricing and packaging
How is Citrix ADC VPX packaged?
Citrix ADC VPX selection is similar to the selection of Citrix ADC appliances. First, the customer selects the Citrix ADC edition based on its functionality requirements. Then, the customer selects the specific Citrix ADC VPX bandwidth tier based on their throughput requirements. Citrix ADC VPX is available in Standard, Enterprise, and Platinum Editions. Citrix ADC VPX offers from 10 Mbps (VPX 10) to 100 Gbps (VPX 100G). More details can be found in the Citrix ADC VPX data sheet.
Is Citrix ADC VPX priced the same for all Hypervisors?
Yes.
Are the same Citrix ADC SKUs used for VPX on all Hypervisors?
Yes.
Can a Citrix ADC VPX license be moved from one Hypervisor to another (For example from VMware to Hyper-V)?
Yes. Citrix ADC VPX licenses are independent of the underlying Hypervisor. If you decide to move the Citrix ADC VPX virtual machine from one Hypervisor to another, you do not have to get a new license. However, you might need to rehost the existing Citrix ADC VPX license.
Can Citrix ADC VPX instances be upgraded?
Yes. Both the throughput limits and Citrix ADC family edition can be upgraded. Upgrade SKUs for both types of upgrade are available.
If I want to deploy Citrix ADC VPX in a high availability pair, how many licenses do I need?
As with Citrix ADC physical appliances, a Citrix ADC high availability configuration requires two active instances. Therefore, the customer must purchase two licenses.
Citrix ADC VPX Express and 90-day fee trial
Does Citrix ADC VPX Express include all Citrix ADC standard functionality? Does it include Citrix ADC Gateway and load balancing for Citrix Virtual Apps (formerly XenApp) Web Interface and XML broker?
Yes. Citrix ADC VPX Express includes full Citrix ADC Standard functionality. Starting from Citrix ADC release 12.0–56.20, Citrix modified the VPX express behavior.
Does Citrix ADC VPX Express include all Citrix ADC standard functionality? Does it include Citrix ADC Gateway and load balancing for Citrix Virtual Apps Web Interface and XML broker?
Starting from Citrix ADC release 12.0–56.20, VPX Express offers the Citrix ADC Standard Edition feature set, except Gateway functionality. Earlier to the 12.0–56.20 release, VPX expresses includes all features in the standard edition.
Does Citrix ADC VPX Express require a license?
With the new Citrix ADC VPX Express release (12.0–56.20 and onwards), VPX Express is free and requires no license files to install and comes with no commitment. If you have a VPX Express license already, then the prior VPX Express behavior is preserved. If the VPX Express license file is removed and the 12.0–56.20 and onwards release is used, the new VPX express behavior takes effect.
Does the Citrix ADC VPX Express license expire?
With the new VPX express, no. There is no license and no expiry date. If you have a VPX express license already, the license expires one year after download.
Does Citrix ADC VPX Express include the five free Citrix ADC Gateway concurrent licenses?
Yes, if you own a VPX express license.
Is there a limit to how many Citrix ADC VPX Expresses a customer can download?
Five.
Does Citrix ADC VPX Express support the same encryption ciphers as Citrix ADC MPX appliances?
For general availability, all the same strong encryption ciphers supported on Citrix ADC appliances are available on Citrix ADC VPX and Citrix ADC VPX Express. It is subjected to the same import or export regulations.
Can I file technical support cases for Citrix ADC VPX Express?
No. A retail Citrix ADC VPX license such as, VPX-10, VPX-200, VPX-1000, VPX- 3000 is required to file technical support cases. However, Citrix ADC VPX Express users are free to use both the Citrix ADC VPX Knowledge Center, and request help from the community using the Z discussion forums.
Can Citrix ADC VPX Express be upgraded to a retail version?
Yes. Simply purchase the retail Citrix ADC VPX license you need, and then apply the corresponding license key to the Citrix ADC VPX Express instance.
Hypervisor
What VMware versions does Citrix ADC VPX support?
Citrix ADC VPX supports both VMware ESX and ESXi for versions 3.5 or later. For more information, see Support matrix and usage guidelines
For VMware, how many virtual network interfaces can you allocate to a VPX?
You can allocate up to 10 virtual network interfaces to a Citrix ADC VPX.
From VSphere, how can we access the Citrix ADC VPX command line?
The VMware VSphere client provides built-in access to the Citrix ADC VPX command line through a console tab. Also, you can use any SSH or Telnet client to access the command line. You can use the NSIP address of the Citrix ADC VPX in the SSH or Telnet client.
How can you access the Citrix ADC VPX GUI?
To access the Citrix ADC VPX GUI, type the NSIP of the Citrix ADC VPX, for example, http://NSIP address
in the address field of any browser.
Can two Citrix ADC VPX instances installed on the same VMware ESX be configured in a high availability setup?
Yes, but it is not recommended. A hardware failure would affect both Citrix ADC VPX instances.
Can two Citrix ADC VPX instances running on two different VMware ESX systems be configured in a high availability setup?
Yes. It is recommended in a high availability setup.
For the VMware, are interface related events supported on Citrix ADC VPX?
No. Interface related events are not supported.
For the VMware, are tagged VLANs supported on Citrix ADC VPX?
Yes. Citrix ADC tagged VLANs are supported on Citrix ADC VPX from release 11.0 and higher. For more information refer to Citrix documentation.
For VMware, are link aggregation and LACP supported on Citrix ADC VPX?
No. Link Aggregation and LACP are not supported for Citrix ADC VPX. Link aggregation must be configured at the VMware level.
How do we access Citrix ADC VPX documentation?
The documentation is available from the Citrix ADC VPX GUI. After logging in, select the Documentation tab.
Capacity planning or sizing
What performance can I expect with Citrix ADC VPX?
Citrix ADC VPX offers good performance. Refer to Citrix ADC VPX data sheet for a specific performance level achievable using Citrix ADC VPX.
Given that server CPU power varies, how can we estimate the maximum performance of a Citrix ADC instance?
Using a faster CPU can result in higher performance (up to the maximum allowed by the license), while using a slower CPU can certainly limit the performance.
Are Citrix ADC VPX bandwidth or throughput limits for inbound only traffic, or both inbound and outbound traffic?
Citrix ADC VPX bandwidth limits are enforced for traffic inbound to the Citrix ADC only, regardless of whether the request traffic or response traffic. It indicates that a Citrix ADC VPX-1000 (for example) can process both 1 Gbps of inbound traffic and 1 Gbps of outbound traffic simultaneously. Inbound and outbound traffic is not the same as request and response traffic. To the Citrix ADC, both traffic coming from endpoints (request traffic) and traffic coming from origin servers (response traffic) is “inbound” (that is, coming into the Citrix ADC).
Can multiple instances of Citrix ADC VPX be run on the same server?
Yes. However, ensure that the physical server has enough CPU and I/O capacity to support the total workload running on the host, or Citrix ADC VPX performance can be impacted.
If more than one instance of Citrix ADC VPX is running on a physical server, what is the minimum hardware requirement per Citrix ADC VPX instance?
Each Citrix ADC VPX instance must be allocated 2 GB of physical RAM, 20 GB of hard disk space, and 2 vCPUs.
Can I host Citrix ADC VPX and other applications on the same server?
Yes. For example, Citrix ADC VPX, Citrix Virtual Apps Web Interface and Citrix Virtual Apps XML Broker can all be virtualized and can run on the same server. For best performance, ensure that the physical host has enough CPU and I/O capacity to support all the running workloads.
Will adding CPU cores to a single Citrix ADC VPX instance increase the performance of that instance?
Depending on the license, a Citrix ADC VPX instance can use up to 4 vCPU today. Adding an extra CPU to a Citrix ADC VPX instance that can use more CPUs increase the performance.
Why Citrix ADC VPX looks like consuming more than 90% of the CPU even though it is idle?
It is normal behavior and Citrix ADC appliances exhibit the same behavior. To see the true extent of Citrix ADC VPX CPU utilization, use the stat CPU command in the Citrix ADC CLI, or view Citrix ADC VPX CPU utilization from the Citrix ADC GUI. The Citrix ADC packet processing engine is always “looking for work,” even when there is no work to be done. Therefore, it does everything to take control of the CPU and not release it. On a server installed with Citrix ADC VPX and nothing else, results in looking like (from the Hypervisor perspective) that Citrix ADC VPX is consuming the entire CPU. Looking at the CPU utilization from “inside Citrix ADC” (by using the CLI or the GUI) provides a picture of Citrix ADC VPX CPU capacity being used.
System requirements
What is the minimum hardware requirement for Citrix ADC VPX?
Refer to Citrix ADC VPX data sheet for its system requirements.
Citrix ADC VPX requires:
- Processor requirements: Dual core server with Intel VTx.
- Memory available: 2 GB RAM(4 GB if there is VPX running on 13.0 firmware), 20 GB hard drive.
- Hypervisor: Citrix Hypervisor 5.6 or later; VMware ESX/ESXi 3.5 or later, Windows Server 2008 R2 with Hyper-V.
- Connectivity: 100 Mbps minimum. 1 Gbps recommended.
- A NIC compatible with the Hypervisor.
Note
AMD processors are not supported.
What is Intel VTx?
These features, sometimes referred to as “hardware assist” or “virtualization assist,” trap sensitive or privileged CPU instructions run by the guest OS out to the Hypervisor. This simplifies hosting guest OSs (BSD for a Citrix ADC VPX) on the Hypervisor.
How common are VTx?
Virtually, all servers shipped within the last two years might support VTx. Many servers ship with virtualization assist disabled in the BIOS. Before assuming you cannot run Citrix ADC VPX, check if you need to change this setting on the server.
Is there a hardware compatibility list (HCL) for Citrix ADC VPX?
As long as the server supports Intel VTx, Citrix ADC VPX must run on any server compatible with the underlying Hypervisor. See the Hypervisor HCL for a comprehensive list of supported platforms.
What version of Citrix ADC OS is Citrix ADC VPX based on?
Citrix ADC VPX is based on Citrix ADC 9.1 or later releases.
Since Citrix ADC VPX runs on BSD, can it be run natively on a server with BSD Unix installed?
No. Citrix ADC VPX requires the Hypervisor to run. Detailed Hypervisor supports can be found in Citrix ADC VPX data sheet.
Other technical FAQs
Does link aggregation on a physical server with multiple NIC’s work?
LACP is not supported. For the Citrix Hypervisor, Static link aggregation is supported and has limits of four channels and seven virtual interfaces. For VMware, static link aggregation is not supported within Citrix ADC VPX, but can be configured at the VMware level.
Is MAC based forwarding (MBF) supported on VPX? Is there any change from the Citrix ADC appliance implementation?
MBF is supported and it behaves the same way as with the Citrix ADC appliance. The Hypervisor basically switches all the packets received from Citrix ADC VPX to the outside and conversely.
How is the Citrix ADC VPX upgrade process carried out?
Upgrades are performed the same way as for Citrix ADC appliances: download a kernel file and use install ns or the upgrade utility in the GUI.
How are flash and disk space allocated? Can we change it?
/flash = 965M /var = 14G A minimum of 2 GB memory must be allocated to each Citrix ADC VPX instance. The Citrix ADC VPX disk image was sized at 20 GB for serviceability purposes such as, room for taking and storing up to 4 GB core dumps, and log and trace files. While it would be possible to generate a smaller disk image, there are no plans to do this currently. /flash and /var are both in the same disk image, they are kept as separate file systems for compatibility purposes. For detailed memory allocation recommendation, refer to Citrix ADC VPX data sheet.
What can we expect to regard the NetScaler VPX build numbering and interoperability with other builds?
Citrix ADC VPX has similar build numbering as the 9.1.Cl (classic) and 9.1.Nc (nCore) release, for instance 9.1_97.3.vpx, 9.1_97.3.nc, and 9.1_97.3.cl.
Can the Citrix ADC VPX be a part of a high availability setup with a Citrix ADC appliance?
Not a supported configuration.
Are all the interfaces visible in Citrix ADC VPX directly related to the number of interfaces on the Hypervisor?
No. You can add up to seven interfaces (10 for VMware) through the Citrix ADC VPX configuration utility with only one physical NIC on the Hypervisor.
Can Citrix Hypervisor XenMotion or VMware VMotion be used to move active instances of Citrix ADC VPX?
Citrix ADC VPX does not support XenMotion. VMotion is supported since Citrix ADC 12.1. For more information, see Release Notes.
Share
Share
This Preview product documentation is Citrix Confidential.
You agree to hold this documentation confidential pursuant to the terms of your Citrix Beta/Tech Preview Agreement.
The development, release and timing of any features or functionality described in the Preview documentation remains at our sole discretion and are subject to change without notice or consultation.
The documentation is for informational purposes only and is not a commitment, promise or legal obligation to deliver any material, code or functionality and should not be relied upon in making Citrix product purchase decisions.
If you do not agree, select Do Not Agree to exit.