What is VPN and How does it Works

cloud is not just about IaaS from hour to hour, and your job is to not only manage the IT infrastructure. you need solutions that make Apps work for the user, while still meeting your business ever-increasing demands for greater agility to ever tightening budgets. Cloud services help you to achieve this goal by automating the deployment and operational tasks that would cost otherwise, your IT team time and money.

Enter Citrix Lifecycle Management (CLM), the first service of Citrix, which takes a centralized command center to control your entire Citrix environment, on the premises and in the cloud. Automated plan, monitor and manage Citrix products, select Partner Solutions and your own applications, CLM deployment and operational costs for all technologies lowers you rely on to make the magic happen for the user.

Citrix Lifecycle Management can work with Citrix Workspace cloud service or as a stand-alone service that the Citrix products and other applications that you already helps in the management. It is managing a level of control to all your workloads anywhere, at your location or on a cloud.

The feedback from customers and partners is excellent. In fact, before the service was also published hundreds of early-access program participants have been with CLM to develop reports and automation to simplify their operations and reduce costs. Citrix Technology Partner in bundling, now that we started tools and programs have, which allow them to use our solutions to check their. Some of our most prominent Citrix Ready partners have already published plans which are to broaden your platform workspaces for delivering enterprise-grade users and more in development now. The answer that we are from our partner community to see was phenomenal and these solutions for customers just keep getting better and more varied.

For example Nutanix is ​​a leading provider of hyper-converged infrastructure that is managed by the software, almost like a cloud. Your Blueprint automatically configure their infrastructure to be ready to deploy Citrix applications and desktops.

Our own Citrix plans for XenApp, XenDesktop, XenMobile, NetScaler and Cloud Bridge can provide to all your software-defined infrastructure, including Nutanix, clouds like Azure and AWS and even traditional servers with hypervisor.

and if you want your Citrix workloads in many styles and positions of the infrastructure, virtual storage solutions like Atlantis ensure that your data is to be executed available everywhere it is needed and optimized essentially the I / O stream, every last bit of performance have possible paid for by the capacity for you to extract, while your data in alternate locations in the event that. for a disaster recovery meeting

Net-net, you spend less time installing manuals to read and more time to your business.

However, a system, getting up and running is only the first step. Partners as Lakeside and LoginVSI specialized applications that consume your users and to provide configuration of the appropriate amount of capacity ideal user experience, in the determination. AppSense provides flexible optimizations that help control and capacity utilization, application security policies and user profiles for enterprise-class, to optimize a global deployment.

Once you have everything installed and the system is live, it is important to maintain the performance and security levels your users expect and that's where our monitoring partners come in. Comtrade, eG Innovations, and Xangati all integrate, implement and ensure that your Citrix environment is so transparent manageable as any other part of the infrastructure. Comtrade specialty includes integration with legacy management systems can already, such as Microsoft System Center or HP OpenView have. Goliath specialty includes workspaces monitoring and deep integration with Citrix NetScaler, so you can detect and connect correct problems in real-time.

If you do not have access to the lifecycle management plans, you can start by creating a workspace Cloud account here first. From there, take the architect section and start your Lifecycle Management Study. Then you can find each of these partner CLM crack in Blueprint Catalog Lifecycle Management.

These partners provide a few who participated in an early access program for lifecycle management. Now, the CLM is generally available, many others are hard at work making it easier for you to make your user workspaces even better, so stay tuned!

If you have come so far in this blog series, you will know that we will have a look through the keyhole in the Citrix give course eLearning designed to work out on a custom storefront 3.0 experience for your users provide

If you landed here directly, I suggest you start from the first video this series. Things make more sense.

in previous video, They saw on the rest of the storefront server in the same server group changes from the to propagate a storefront server.

in this video we present the fashion show the most common adjustments to the storefront UI to make, the user would have seen as well in their web interface UI. We have an additional entry is added to the Actions menu of the storefront console - Receiver for Web site to allow you to make these common customizations. In the video you can see how to change the logo on the login page and the header logo appears on all pages of storefront. You will also see how to change the color, throughout the user interface header and links.

The final video of this series, we will see how feature to implement application groups, the new way, a set of applications for the users to advertise, making them the flexibility so that at one time to a number of related applications to subscribe.

Introduction

After a pair of Citrix NetScaler SDXs to buy, they rack mounting and it is powered up, which is the next step?

, the next steps would be to always access the management instance that create "service Virtual Machine" (SVM) and start virtual NetScaler instances on the physical SDX platforms.

for the best elasticity, it is wise to have two physical SDX platforms within a data center and a few virtual instances in a high availability arrangement pair (they are so active / backup for the workload) actively in the two separate physical systems. The instance cluster option is now also available should an active / active configuration may be required.

This is affecting a non-service design, which can be bent to provide service as needed. This can then be made available to high above sites with something like Global Server Load Balancing.

Figure 1 A NetScaler SDX, with a single virtual instance

Regarding a quick start process there are documents online, describing how new create instance, when it is possible to have the review of the notes read here:

http://docs.citrix.com/en-us/sdx/11/configuring-managing-netscaler-instance.html

The purpose of this document is to provide guidance as to a SDX system to dismember the resources available, and what to create the various options for a new instance (s).

, the workload itself for the new instance is required, should also be considered when dimensioning the estimate because different workloads have different requirements from the platform.One the main advantages of the SDX is the to revise option allocation as needed, so to some extent it would be possible to make a rough estimate of first and to revise this up or down according to need

. Note: This document relates to the entities that exist on the SDX be specific rather "virtual instances" as a "NetScaler VPX". Citrix NetScaler VPX also has a product to sell, which is developing a product for a number of commercial hypervisor. As a result, with respect to the available power, the virtual instance on the SDX very different from that on other platforms. A SDX virtual instance is a much higher burden capable

Assumptions

It is assumed that

• The reader understands. The allocation of IT resources in a hypervisor-based system.
• , the reader has some familiarity with the NetScaler Application Delivery Controller.
• , the reader has some familiarity with Citrix software products.

NetScaler SDX.

[1945024100Gbps]

SDX system	instances in come: models There are currently six SDX systems available for sale, they are in following summarized device	maximum number of instances	throughput	Platform limit
8015 system	2	5	15Gbps	15Gbps
11515 series	5	20	15Gbps	42Gbps
14020 series	5	25	20Gbps
17550 series	5	40	20Gbps	50Gbps
22040 series	20	80	40Gbps	0Gbps
24100 series	40	80	100Gbps	150Gbps

Table 1 SDX models

the border platform is the ability to have the platform for throughput flexibility, so how much more can the return transfer to the appropriate platform license. As can be seen from the table, this system have very flexible and thus an excellent starting point to make ADC density for the drive and so costs for things such as maintenance saving.

When a SDX buying there are a few ways to add instances, these packs can be added with 3 or 5, as soon as the packages, it is only a matter of resources division added to define what the number of is associated with instances that are available.

How resources assigned Virtual instances

inside the SVM management console contains a series of tabs that can be used to check what the status of SDX appliance system currently, the election of the Dashboard tab, SDX resources are considered accepted.

The following screenshot shows an old 20500 platform with 3 x 5-instance-packs and the relative throughput to new available (this is a 50Gbps appliance) and that the flow rate, which remains (only 33Gbps throughput) for mapping instances. It should be noted that when a virtual instance most of these funds are created permanently assigned, generally is no overcrowding of resources in SDX. However there are some exceptions to this rule.

Figure 2 20500 SDX Resources

In the above example, the SDX has eight virtual NetScaler instances that have created. Some are active and some are below. There are a number of ways when an instance to create, CPU, memory, throughput and SSL key task. So the SDX is a series of virtual instances hosting 17GB throughput totaling 7 SSL cores for SSL processing assigned along with 24 GB of system memory in this case.

These values ​​were assigned using a wizard that is located under the "Configuration" tab. This tab shows the various controls to configure the structure and SDX appliance. The wizard can be used to create new instances and reconfigure existing instances.

For example, after the base platform Stock Exchange more platform throughput with a simple software key, give them the resources might be necessary to revise available a running virtual instance. Add The revision might or remove throughput to an instance, which must manage whatever the administrator available resources and workloads.

The following screenshots of Provisioning Wizard show assign these values, these provisioning wizard for each SDX system. The only difference between the models, the resources and the flow rate for the assignment.

An indication of the Docs page points out that most of the changes do not require that the instance is restarted. However, if the following parameters are changed :. Number of SSL chips, interfaces, memory and feature license, the NetScaler instance implicitly stops and starts these parameters to bring into force

Table 3 Instance Creation

Available resources and the allocation of

In step 2 of the previous section, we had this screenshot:

Figure 3 instance sizing

This is the important part of the virtual instance wizard in terms of resource allocation, as that is where its relative performance is defined.

Here is a table showing the resources available per SDX system.

Table 4 A summary of the SDX platform functions

the SDX system has only two limits, throughput and instances; everything else is purely a function of these values. The following sections will detail the specifics about each resource type and how they are related.

It is worth considering that the SDX is a resource pool, in the allocation of resources decisions, the available resources can change the left are assigned to new instances. The sizing metrics for Saying SDX11515 quote this 20 instance system with its full allocation of instance-pack.

If the allocation of resources, the selected options can mean below that this is something less than 20 instances for a particular application. Here are the details of the various options available:

memory allocation

Table 5 the available memory for SDX platforms

type of allocation? is difficult assigned this resource, it is not possible to commit this resource on the SDX to.

On each SDX platform the size of the memory for the entry version is the same as it is for the top version in a particular series. So that. 11,515 ships with 48GB of memory and this is available, purchased regardless of version (11515 or 11542) The SVM needs a small amount of memory to work, so that they can to 4Gb less than the memory installed in the system for mapping instances.

There are some limitations with respect to SSL cores. Memory and SSL cores are connected to each other so that when each SSL core it will be necessary to assign, 1 GB to be assigned per core memory.

SSL cores

Table 6 SSL Scores for SDX platforms

type of allocation? is difficult assigned this resource, it is not possible to commit this resource on the SDX to. As already mentioned, the SSL core and the memory allocation in connection.

The actual number of SSL cores depends on the allocation on the platform license that has been purchased, although SSL performance is based on let throughput, more throughput faster processing of SSL traffic.

There is an option to create a virtual instance, the assigned no dedicated SSL cores, software-based SSL must be used in this case. Software-based SSL is obtained processed by the CPU. Consequently, it may have less overall performance compared to an instance with special SSL key (s) again. Depending on the traffic profile

Throughput

Table 7 throughput for SDX platforms

type of assignment? This can be a resource to be assigned or set hard breakable; The flow rate is measured as the sum of the received traffic in the NetScaler. exceeds a certain level, the unit will fall trigger traffic on the fixed setting. When using the tearable option options available commitment rate over the target throughput value is to allow, via required. The burst priority then sets which instance prevail when two instances both need a set amount blurted.

In order clear the "burst" is the value to the minimum flow rate, the maximum to offer in addition to the instance flex to up. Billing metrics are used to track how often this happens, so allows the use of track. assign

Figure 4 burst on an instance tracking

Regarding the required throughput per instance, will determine the entire platform license, which is available before instances created be, so this could be 15GB or 150Gb, for example, with this pay-as-you-grow may change with the specific SDX, was obtained.

CPU core allocation

type of allocation? This really depends on the options selected in the wizard, if the resources are assigned to this hard, the number of cores is reduced, which can be shared between the remaining instances in the SDX system. All cores are designed for a specific platform for all licenses for this platform.

With respect to the number of cores for common instances. There is no limit a single core for shared instances assign. Instead, the device all available cores to use instances attempts (which were assigned for dedicated instances not) for shared instances and distributed over these cores.

So if you have 10 physical cores on the device and 10 divided create instances, each shared instance gets its own physical core. But if the number of common instances start, the number of available cores to pass, then the same physical core is shared among multiple instances. So, in the above example 11. Example divides a physical core with the first example, the twelfth to the second, and so on.

In short, the device follows a best fit algorithm for the common cases, based on the number of available cores. This gives the user the ability to mix and match dedicated and shared instances. For example, the user may 5 dedicated instances with a core provide each and 10 shared instances over the remaining five cores are assigned.

The assigned CPU cores is directly related to the number of packet engines that are assigned (maximum) running on the virtual instance on the SDX appliance.

Figure 5 SDX core task

Here is a screenshot of the option to set processor affinity (see above). This screenshot of a 11500-Appliance, the actual number of cores was taken, which can be assigned will vary on the processors in the device. Larger plants (200 systems, for example) is at 7 dedicated cores allow up to assigned.

It should be noted that when cores are dedicated to virtual instances, the number of instances that can be reduced can be created. This is because when the nuclei have a 1: 1 relationship with a virtual instances they are no longer available to be shared between instances

Note1 - core allocation can not CPU socket on platforms extend with. multiple physical CPUs. Core allocation is thus dependent on prior core allocations and available cores on a per physical CPU basis

Note2 -. The cores mentioned in this document are the physical cores that are available in the system. Hyper-Threading will mean that the SDX24040 have 32 cores appears for example. This screen shot below shows this.

Summary

This document describes the various options for the allocation of resources for one NetScaler SDX has virtual instance defined, this is purely to provide a good first make estimates for the instance. , Re-running the Provisioning Wizard allows dynamic changes are applied without compromising Live service

More information is available online at: http://docs.citrix.com/en-us/sdx/11/ SDX-introduction.html

One of the hardest things in the game of futbol -That's football do for those you want to play together in America - is to score a goal.

scoring 2 goals is even harder, and the hat-trick, that's 3 goals in a game-master is virtually impossible! Well, maybe not impossible for the worlds greatest players - # 10 Messi & Ronaldo # 7 ... or NetScaler. say.

Now I am sure you are very familiar that NetScaler, the is global technology leader when. To secure and optimize app delivery Used in thousands of networks around the world, helps NetScaler Enterprise and cloud services to maximize the end-user experience for all users, including mobile clients. We make applications quickly, safely and at any time!

Playing in the technology-specifically, the Application Delivery Controller (ADC) we space- believe that NetScaler many records has been reached, the will last forever. We seem to keep awards to the NetScaler datacenter Trophy!

I'm not bragging, but we have done it again!

Consider this the hat trick of awards in the technology and the NetScaler team receiving very excited about notification from the team at IT Brand Pulse.

NetScaler was matched by IT professionals in the recently published 2015 IT Brand Pulse rate for brand leader in Application Delivery Controller segment.

Who is IT brand Pulse? . For starters, they are a trusted source of data and analysis on private, public cloud IT infrastructure, including servers, storage, networks and operating systems

About the award? Brand Leader reports are designed to the pulse of the brand management in certain product categories categories ~~ POS = HEADCOMP independent to compete with non-sponsored surveys. Participants were of more than 1,000,000 members requested more than 100 online IT groups, and professional from the IT Brand Pulse IT database. The responses were collected using an online survey engine.

In each part, the participants were a Product Category Description List of supplier selection (provided plus an "other" response option to add a provider, if applicable) and were asked six questions:

1. Who controller than Application Delivery market leader perceive yet
2. Who do you? perceive how the controller-price leader Application Delivery?
3. Who you perceive as the Application Delivery Controller Performance leader?
4. Who you perceive as reliability leader of Application Delivery Controller?
5. Who judge as Application Delivery Controller Service & Support Guide?
6. who you recognize as Application Delivery Controllers innovation leader?

It was a clean sweep in all six categories.

We would like to take this opportunity to thank those who voted for NetScaler. We are honored that NetScaler IT brand leader was elected controller segment in Application Delivery. For more information on NetScaler, please visit our Home .

The Linux VDA changes several system parameters to ensure that the best experience for the user is available. These parameters are not permanent and will be reset when the system is restarted.

may have on some Linux distributions, the dbus-daemon of the system is not out of file descriptors. If it is then the desktop environment are not enough, as Gnome or KDE, will not work correctly. The Linux VDA has a minimum open file descriptor limit of 3072. When the dbus-daemon has a file descriptor limit that is greater than 3072, then nothing is changed.

Some Linux distributions have the amount of shared memory is set too low available system. If so, then the value of the kernel is 'kernel.shmmax' increases set to a sufficiently large value.

In the future there will be other system parameters, we change. We will definitely put this information available.

To read more of the Linux Virtual Desktop team, be sure to check out the rest of our posts here.

Citrix XenDesktop recently published / XenApp 7.6 FP3, which includes a new graphics mode and a set of technologies called thin wire compatibility mode, also known as Thin Wire +. XenDesktop needs a variety of platforms to support, especially thin-client platforms, which often lack the processing capacity for high-end graphics and video.

cooperate closely, the XenDesktop / XenApp and Cloudbridge development teams interoperability between the new Thin Wire + and Cloud Bridge in the release to ensure working so that our customers would benefit from an efficient application deployment.

This new mode is designed for practicality of customer requirements in order to greatly restricted subsidiaries and low bandwidth availability. Knowledge workers, with applications such as Microsoft Office, customer service and SAP, a wide range of client support expected, while per session requests further reduce bandwidth. Data compression ratios can not exceed 4: 1 for typical office applications

In IMSCAD we have done more than 500 implementations of Citrix HDX for XenDesktop and XenApp .. Particularly with high latency or jitter networks Cloudbridge WAN optimization of demanding remoting interactive graphical and CAD applications, proving the magic bullet. With Cloud Bridge and HDX graphics together we delivered production implementations to our clients provides CAD applications to 0ms + latency from the US to Germany "Adam Jull, CEO, IMSCAD

Integration of HDX technologies in networking means Cloudbridge allows the use of HDX / ICA protocols far beyond where most protocols would fail, provided:

• , which have control support networks river with high latency, congestion, packet loss and jitter, too. without compression - flow control optimizes the bandwidth utilization of the available bandwidth remote applications to effectively increase and factors that waste bandwidth removal (packet drops, collisions and retransmits)
• Sophisticated data compression and deduplication at the meeting in. a Citrix deployment - reducing bandwidth on XenApp farms in scale
  • initial Microsoft Word test the new Thin Wire compatibility mode shows compression ratios of more than 4: 1 de-duplication across all user sessions
  • we see a improved compression the new mode of approximately 15% above the legacy Thin Wire mode (default in XA 6.5)
  • in some tests and types of data that we have achieved compression ratios of about 10: 1

These improvements mean real savings for bandwidth expensive network or hardware upgrades and an improved user experience to avoid. While many vendors limited to out-of-the-box graphics remoting protocols such as H.264 based streaming, Citrix has invested protocols such as Thin Wire compatibility from scratch as suitable for WAN optimization, compression and deduplication and practical considerations when bandwidth limitations and cost constraints in the design that the real customer encounter. with XenDesktop / XenApp

Along 7.6 FP3 we also have a template provided to help system administrators configure HDX for Citrix deployment for Cloudbridge be optimized here: http://support.citrix.com/article/ CTX2000. What we recommend exploring Cloudbridge customers.

Earlier this year proposed AirWatch a standard approach to building and securing mobile applications. It was intended for use in companies that wanted their employees the tools to do their jobs while away from the office. Since this standard proposed, Application Configuration for Enterprise or ACE, is supported by a number of mobile software provider.

But is ACE on-target, or is missing the mark? Let's take a look.

ACE describes a standard approach to implementing five key safety-related functions in enterprise mobile applications. These are app configuration, App Tunnel, Single Sign On, Access Control and Security Policies (encrypted storage, data leakage prevention, etc.).

On paper, this seems to be a fairly comprehensive approach to mobile security, with the added benefit that EMM vendor-neutral. most EMM provider Citrix contained capability, all ways of supporting the ACE describes. This is because all these capabilities using APIs implemented that Apple and Google have already built into iOS and Android.

But here is where the problem comes in. described None of the functions in ACE without enrolling in an MDM available. This is a big problem.

Out push back on MDM enrollment for their personal devices in the real world, more and more companies are adopting BYOD policies for employees who want mobile access to their corporate email, etc. Employees are , They consider it an intrusion into their privacy, put their music, photos, personal information, etc. at risk. For example, imagine if you lost your phone, and then discovered that your employer off iCloud Backup and all images are gone.

Enterprises begin this level of control over the employee-owned devices to consider liability as unnecessary. MDM is still a niche technology that is applicable only when a company's devices to their employees.

So what is a better approach?

XenMobile MDX technology provides all the capabilities in ACE described without employees need control over their entire equipment cede. XenMobile has the ability in a MAM-only mode (MAM = Mobile Application Management) perform, does not require MDM enrollment.

With XenMobile company can control and secure their applications and data, including the device-level controls for things like jailbreaking / rooting, without relying on MDM enrollment to do so. This is a big win for the company and employees.

Please refer to our white paper with a deeper analysis of ACE vs XenMobile here.