CloudBridge products use your existing WAN/VPN infrastructure. A computer on which the plug-in is installed continues to access the LAN, WAN, and Internet as it did before installation of the plug-in. No changes are required to your routing tables, network settings, client applications, or server applications.
Citrix Access Gateway VPNs require a small amount of CloudBridge-specific configuration.
There are two variations on the way connections are handled by the plug-in and appliance: transparent mode
and redirector mode.
Redirector is a legacy mode that is not recommended for new deployments.
- Transparent mode for plug-in-to-appliance acceleration is very similar to appliance-to-appliance acceleration. The CloudBridge appliance must be in the path taken by the packets when traveling between the plug-in and the server. As with appliance-to-appliance acceleration, transparent mode operates as a transparent proxy, preserving the source and destination IP address and port numbers from one end of the connection to the other.
- Redirector mode (not recommended) uses an explicit proxy. The plug-in readdresses outgoing packets to the appliance's redirector IP address. The appliance in turn readdresses the packets to the server, while changing the return address to point to itself instead of the plug-in. In this mode, the appliance does not have to be physically inline with the path between the WAN interface and the server (though this is the ideal deployment).
Best Practice: Use transparent mode when you can, and redirector mode when you must.