Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [netscaler]

NetScaler is an application delivery controller (ADC) and load balancing solution developed, sold and supported by Citrix. NetScaler operates in a similar market as F5 and other leading load balancer/ADC solutions and comes in both physical hardware (MPX/SDX) and virtualized forms (VPX/SDX). NetScaler operates at OSI Layer 4-7 in general, though it does have some Layer 2/3 functionality.

As well as the traditional load balancing role, NetScaler also provides content switching, HTTP rewrites/manipulation, data compression, content caching, hardware based SSL acceleration (not VPX), application flow visibility and an application firewall.

The underlying OS of a NetScaler is FreeBSD based (6.3 currently) with a completely customized kernel, TCP/IP stack etc. running on commodity Intel x86 hardware. SSL acceleration is provided by cards (usually Cavium based).

Virtualized versions of NetScaler can be run on the SDX platform to take advantage of SSL acceleration, otherwise it is simply done in software. The official site can be found here:

http://www.citrix.com/netscaler

50 questions
9
votes
1 answer

Where can I embed proprietary information in a layer 2 or layer 3 packet?

The Citrix Netscaler has an interesting property that embeds information in the TCP packet that gets sent to the host. This property is echoed back to the Netscaler in such a way that the Netscaler can use this to determine which Virtual Server,…
makerofthings7
  • 8,821
  • 28
  • 115
  • 196
5
votes
3 answers

Alternatives to Citrix NetScaler?

I'm interested in Citrix product NetScaler. It's an applicance that you put in front of the web-servers. Features I like is: SSL offload an acceleration (good because of performance and that Verisign charges per machine) GZIP compression of HTTP…
Allrameest
  • 153
  • 1
  • 4
5
votes
1 answer

Multiple DNS names and IP address to make load balancing more efficient in an Exchange CAS Array

The tl;dr problem The CAS server occasionally gets one or two NAT'ed IP addresses that have several hundred users behind it. That is bad for scalability. The tl;dr solution Have the NAT'ed outlook clients connect to more than one DNS name/IP…
makerofthings7
  • 8,821
  • 28
  • 115
  • 196
5
votes
3 answers

Do Citrix Netscalers have a feature equivalent to iRules?

I'm looking to move from F5 to Netscaler and having a hard time figuring out if Netscalers have a feature similar to iRules.
GeorgeU
  • 496
  • 1
  • 5
  • 17
4
votes
1 answer

Load balancing SMTP in a way that doesn't hide the source IP address

I need to load balance SMTP to handle some applications that don't know how to use MX records. I set up a Netscaler using the TCP option on port 25 and now Exchange sees the source IP as that of the DMZ of the Netscaler for every connection, not the…
makerofthings7
  • 8,821
  • 28
  • 115
  • 196
3
votes
1 answer

TLS Implementation/RFC interpretation

Does the Server Hello break the RFC? There seems to be contradiction in RFC. A customer claims our device (Citrix Netscaler) returns Extension (ec_point_formats: EC point format: uncompressed) when they do not request it. Because of this they…
Leo
  • 1,008
  • 1
  • 8
  • 13
3
votes
2 answers

NetScaler Gateway for MAC is not connecting correctly: Protocoll shows "AGAS: Failed to initialise ssl vpn plugin"

I'm using the Citrix Netscaler Gateway for Mac (Version 3.1.8 which is the newest for mac) and macOS High Sierra. When I use the Gateway Plugin to connect to our gateway, it seems to work, because the the NetScaler starts and shows the popup…
artgrohe
  • 151
  • 1
  • 9
3
votes
1 answer

NTLM on a Load Balanced Environment

We have a Netscaler VPX that load balances HTTP requests to 3 IIS services on 3 Windows servers. Authentication is set to "Windows Authentication" but because our environment isn't set up for Kerberos the authentication falls back to using NTLM.…
Bruno
  • 213
  • 2
  • 12
2
votes
2 answers

Can I give a friendly error message for connections less than TLS 1.1?

For security reasons, I want to block all TLS connections older than TLS1.1. I also want to give a friendly error message for users who use less than TLS 1.1 on my site. Is there any way to accomplish this in IIS or Windows? Assuming the answer is…
makerofthings7
  • 8,821
  • 28
  • 115
  • 196
2
votes
0 answers

Putting a NetScaler infront of Redis master failover

I have a redis-sentinel solution for master failover, I just need to setup a vserver with all the master services in the pool. Only one master can act as the master at a time, the rest are slaves waiting for promotion. I only see options to load…
Kyle
  • 121
  • 4
1
vote
1 answer

Error: "Your logon has expired. Please log on again to continue" When Accessing StoreFront Through NetScaler Gateway

My Citrix test environment is the following: One Windows 2016 VM acting as Domain Controller and DNS One Windows 2016 VM with everything from Citrix in it (XenDesktop 7.15) plus the SQL Server DB Two Windows 2016 VM acting as XenApp in my unique…
NBajanca
  • 192
  • 1
  • 4
  • 14
1
vote
2 answers

NetScaler retry next server if failed

I have 8 servers that are loadbalanced by NetScaler VPX (10). How to make NetScaler load balancer to resend request to next server if previous server responded with the 502 status?
Jonas
  • 265
  • 2
  • 9
1
vote
1 answer

Timeouts connecting to Citrix NetScaler

We have a C# ASP.NET MVC website that is hosted on Azure (app service) that connects to a 3rd party REST API. This always ran without problems, but some time ago the 3rd party replaced their old loadbalancer with a brand new Citrix NetScaler. Since…
Razzie
  • 173
  • 7
1
vote
0 answers

Citrix NetScaler sending FIN, ACK for SSL VPN Clients

I realise that it's unlikely anyone here has a definite "Check this box to resolve this" answer, but I'm struggling with this issue and I'm hoping that someone with more knowledge than me can give me some more insight or perhaps some terms and…
Dan
  • 15,280
  • 1
  • 35
  • 67
1
vote
1 answer

Can a Citrix NetScaler loadbalance based on the path portion of a URL?

So I have a domain hosting two lovely applications thus... http://intranet.lan:80/firstapp http://intranet.lan:80/secondapp And two physical boxes serving them…
chillitom
  • 123
  • 2
  • 5
1
2 3 4