In Citrix ADC 13.0
In Citrix ADC
In All products
Product documentation
In Citrix ADC 13.0
In Citrix ADC
In All products
Citrix ADC 13.0
13.0 12.1 12.0 11.1 10.5
View PDF

Deploy a VPX high-availability pair with external static IP address on Google Cloud Platform

September 21, 2020
Contributed by: 
S

You can deploy a VPX high-availability pair on GCP using external static IP address. The client IP address of the primary node must be bound to an external static IP address. Upon failover, the external static IP address is moved to the secondary node for traffic to resume.

A static external IP address is an external IP address that is reserved for your project until you decide to release it. If you use an IP address to access a service, you can reserve that IP address so that only your project can use it. For more information, see Reserving a Static External IP Address.

For more information on HA, see High Availability.

Before you start

  • Read the Limitation, Hardware requirements, Points to note mentioned in Deploy a Citrix ADC VPX instance on Google Cloud Platform. This information applies to HA deployments also.

  • Enable Cloud Resource Manager API for your GCP project.

  • Ensure your GCP service account has the following IAM permissions:

REQUIRED_INSTANCE_IAM_PERMS = [

"compute.addresses.use"

"compute.instances.addAccessConfig",

"compute.instances.deleteAccessConfig",

"compute.instances.get",

"compute.instances.list",

"compute.networks.useExternalIp",

"compute.subnetworks.useExternalIp",

"compute.zones.list",

]

How to deploy a VPX HA pair on Google Cloud Platform

Here’s a summary of the HA deployment steps:

  1. Create three VPC networks in the same region. For example, Asia-east.
  2. Create two VPX instances (primary and secondary nodes) on the same region. They can be in the same zone or different zones. For example Asia east-1a and Asia east-Ib.
  3. Configure HA settings on both instances by using the Citrix ADC GUI or ADC CLI commands.

Note Stayprimary and Staysecondary settings are not supported for high availability deployment on Google Cloud Platform.

Step 1. Create three VPC networks

Create three VPC networks for associating with management NIC, client NIC, and server NIC. To create a VPC network, log on the Google console > Networking > VPC network > Create VPC Network. Complete the required fields, and click Create. For more information, see the section “Create VPC Networks” in Deploy a Citrix ADC VPX instance on Google Cloud Platform.

Step 2. Create two VPX instances

Create two VPX instances by following the steps given in Scenario: deploy a multi-NIC, multi-IP standalone VPX instance.

Important Assign a static external IP address to client IP address (VIP) of the primary node. To create a static external, under Network interface > External IP, click Create IP address.

External-static-ip

After the failover, when the old primary becomes the new secondary, the static external IP address moves from the old primary and is attached to the new primary. For more information, see the Google cloud document Reserving a Static External IP Address.

After you’ve configured the VPX instances, you can configure the required IP addresses. For more information, see Configuring Citrix ADC-owned IP addresses.

Step 3. Configure high availability

After you’ve created the instances on Google Cloud Platform, you can configure HA by using the Citrix ADC GUI for CLI.

Configure HA by using the GUI

Step 1. Set up high availability in INC mode on both the instances.

  1. Log on to the primary node with user name nsroot and instance ID as password.
  2. From the GUI, go to Configuration > System > High Availability. Click Add.
  3. At the Remote Node IP address field, add the private IP address of the management NIC of the secondary node.
  4. Select Turn on INC (Independent Network Configuration) mode on self-node.
  5. Under Remote System Login Credential, add the user name and password for the secondary node and click Create.
  6. Repeat the steps in the secondary node.

Step 2. Add IP set and bind IP set to the VIP set on both the instances.

  1. From the GUI, navigate to System > Network > IPs > Add.
  2. Add the required values for IP Address, Netmask, IP Type (virtual IP) and click Create.
  3. Navigate to System > Network > IP Sets > Add. Add an IP set name and click Insert.
  4. From the IPV4s page, select the virtual IP and click Insert. Click Create to create the IP set.

Note You can bind the IP set to the primary VIP or to the secondary VIP. However, if you bind the IP set to the primary VIP, use the secondary VIP to add to the virtual server, and conversely.

Step 3. Add a virtual server in the primary instance.

  1. From the GUI, go to Configuration > Traffic Management > Load Balancing > Virtual Servers > Add.

Save the configuration. Now, the secondary node has the same log-on credentials as the primary node. After a forced failover, the secondary becomes the new primary. The external static IP of the old primary VIP moves to the new secondary VIP.

Configure high availability using CLI

Step 1. Set up high availability in INC mode in both the instances by using the Citrix ADC CLI.

On the primary node, type the following command.

add ha node 1 <sec_ip> -inc ENABLED in primary

On the secondary node, type the following command.


add ha node 1 <prim_ip> -inc ENABLED in secondary

sec_ip refers to the private IP address of the management NIC of the secondary node.

prim_ip refers to the private IP address of the management NIC of the primary node.

Step 2. Add IP set in both the instances.

Type the following command on both the instances:

add ipset <ipsetname>

Step 3. Bind IP set to the VIP set on both the instances.

Type the following commands on both the instances:

add ns ip <secondary vip> <subnet> -type VIP

Note Skip this command if the VIP is already configured.

bind ipset <ipsetname> <secondary VIP>

Note You can bind the IP set to the primary VIP or to the secondary VIP. However, if you bind the IP set to the primary VIP, use the secondary VIP to add to the virtual server, and conversely.

Step 4. Add a virtual server on the primary instance.

Type the following command:

add <server_type> vserver <vserver_name> <protocol> <primary_vip> <port> -ipset <ipset_name>

Note:

To save your configuration, type the command save config. Otherwise, the configurations are lost after you restart the instances.

Deploy a VPX high-availability pair with external static IP address on Google Cloud Platform

September 21, 2020
Contributed by: 
S
September 21, 2020
Contributed by: 
S

In this article