SUM307: NetScaler VPX

Implementation and
Troubleshooting
Download this slide
http://ouo.io/3X4ZA
Agenda

• Introduction to NetScaler VPX

• Installation and Licensing
• Troubleshooting
• Use Cases

Citrix Confidential - Do Not Distribute

Introduction to NetScaler VPX
App delivery without the
expensive tin

- Maxwell Cooter, TechWorld

Citrix Confidential - Do Not Distribute

Introduction to NetScaler VPX

• Virtual NetScaler appliance

• Hardware requirements
• Hypervisors Supported
• Differences between VPX and hardware

Citrix Confidential - Do Not Distribute

XenServer components

• XenServer
• XenCenter
• XenConvert

Citrix Confidential - Do Not Distribute

XenServer Architecture

Citrix XenServer

Drivers PV
Drivers

Linux NS VPX Guest OS

Dom0 DomU DomU

Xen Hypervisor
Client L2/L3 L2 /L3 Server

eth1 eth0
VM Mechanism
Binary Translation – Sensitive/Privileged CPU Instructions are replaced with
hypervisor code or calls “on the fly”
• Advantages: Unmodified Guest OS, No special hardware
• Disadvantages: Performance

Paravirtualization – The Guest OS is modified so that privileged/sensitive

instructions are replaced with calls to the hypervisor
• Advantages: Performance, no special hardware required, relatively easy for hypervisor
• Disadvantages: Guest OS must be modified

Hardware assisted – Sensitive/Privileged CPU Instructions executed by the

Guest OS trap out to the hypervisor
• Each processor vendor brands and implements this differently.
• Intel: “VT-x”
• AMD: “AMD-V”
• Advantages: Unmodified Guest OS, Relatively easy for hypervisor
• Disadvantages: Special hardware required
Citrix Confidential - Do Not Distribute
 Hypervisor Architecture - XenServer
• Bare metal.
• Managed by “Domain0”
• Domain 0 manages network and
storage I/O of guest VMs
Xen
• Hardware drivers run in Domain0 Xen
Tools
daemon(s)
• Paravirtualized Guest OS or hardware
assist VMs only – no Binary Translation
PV
Drivers Drivers

NS VPX GuestOS2
Linux
Domain0 DomainU DomainU

Xen Hypervisor

XenCenter
Client

Citrix Confidential - Do Not Distribute

NS VPX: Internals

Dom0 (Linux) DomU (NS VPX )

Xen Xen
daemon(s) Tools

Virtual Memory Virtual Memory

Real Back-end PV Front end

Virtual CPU Drivers Virtual CPU
Drivers Drivers

CPU Scheduler Memory

Xen Hypervisor

Citrix Confidential - Do Not Distribute

Hardware requirements

• Virtual hardware assist

• CPUs
• Memory
• NIC

Citrix Confidential - Do Not Distribute

Differences between VPX and hardware

Features of VPX Features of Hardware

•Tagged VLANs not supported •Full L2 support
•No LACP
•Hardware assists
•No hardware assists
•No nCore support (yet)
•nCore with MPX models
•Only version 9.1 & up •All versions compatible with hardware

Citrix Confidential - Do Not Distribute

Installation and Licensing
Setting the VM memory and VCPUs for the NetScaler VPX
Installation

Citrix Confidential - Do Not Distribute

Citrix Confidential - Do Not Distribute
Identifying the VPX from the CLI and GUI
NetScaler VPX

• 1 Mbps
• 20 Mbps
• 1000 Mbps
• Standard
• Enterprise
• Platinum
• http://support.citrix.com/article/ctx122426
Citrix Confidential - Do Not Distribute
XenServer licenses

• Free license

• Unlimited VMs
• XenConvert (P2V and V2V)
• Centralized multi-server manangement console
• Live motion
• Virtual infrastructure patch management
• Intelligent server maintenance mode

Citrix Confidential - Do Not Distribute

XenServer licenses (continued)

• Citrix Essentials

• High Availability
• Advanced server virtualization management
• Intelligent workload placement
• Rapid provisioning of new VMs

Citrix Confidential - Do Not Distribute

Troubleshooting
TroubleShooting VPX

• Issues dealing with Networking

• Tracing
• Log file locations

Citrix Confidential - Do Not Distribute

Why is my CPU so high?

• CPU from XenCenter is 100%

• VPX shows lower values
• Which is right?

Citrix Confidential - Do Not Distribute

XenCenter View

Citrix Confidential - Do Not Distribute

NetScaler VPX view

Citrix Confidential - Do Not Distribute

Lack of proper license while adding SSL certificates
NetScaler VPX missing a valid license
Some examples of problems with the license file(s)
The shell command `cat /var/log/license.log` reveals a missing license:

The shell command `cat /var/log/license.log` reveals an invalid license:

The shell command `cat /var/log/license.log` reveals an expired license:

Using Tagged VLANs With the NetScaler VPX

Virtual Machines (DomU)

NetScaler VPX
1/2 1/3 1/4 Virtual Interfaces
Vlan 1
Vlan 53
Vlan 128

Untagged
VLANs

External
Trunk Port Virtual Switches
Switch
(tagged VLANs) XenServer Host (Dom0)

Citrix Confidential - Do Not Distribute

Identifying the NetScaler VPX interfaces
Reboot messages in the logs

Citrix Confidential - Do Not Distribute

Reboot messages in the logs

Citrix Confidential - Do Not Distribute

Reboot messages in the logs

Citrix Confidential - Do Not Distribute

Use Cases
Use Cases

• Lab Environment
• Proof of Concept
• Separation of traffic
• Real world simulation

Citrix Confidential - Do Not Distribute

Real World Simulation
Virtual NetScalers
Virtual Server Hyper
Real World
Visor

North America

Virtual Router
Europe

Asia

Africa

Citrix Confidential - Do Not Distribute

Additional Resources

• NetScaler Licensing: CTX122426

• NetScaler VPX 9.1 FAQ CTX12191
• NetScaler setup and configuring CTX124306
• How to video: importing and configuring CTX122721
• Importing VPX on ESX CTX123683
• Support.citrix.com (search for VPX)
• Forums
Citrix Confidential - Do Not Distribute
Before you leave…
• Session surveys are available online at www.citrixsummit.com
starting Thursday, May 13
• Provide your feedback and pick up your complimentary Starbucks or iTunes giftcard at the
registration desk

• Download presentations starting Friday, May 21, from your My

Schedule Tool located in your My Synergy Microsite event account
 Questions/Comments?

Citrix Confidential - Do Not Distribute