Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [netscaler]

NetScaler is an application delivery controller (ADC) and load balancing solution developed, sold and supported by Citrix. NetScaler operates in a similar market as F5 and other leading load balancer/ADC solutions and comes in both physical hardware (MPX/SDX) and virtualized forms (VPX/SDX). NetScaler operates at OSI Layer 4-7 in general, though it does have some Layer 2/3 functionality.

As well as the traditional load balancing role, NetScaler also provides content switching, HTTP rewrites/manipulation, data compression, content caching, hardware based SSL acceleration (not VPX), application flow visibility and an application firewall.

The underlying OS of a NetScaler is FreeBSD based (6.3 currently) with a completely customized kernel, TCP/IP stack etc. running on commodity Intel x86 hardware. SSL acceleration is provided by cards (usually Cavium based).

Virtualized versions of NetScaler can be run on the SDX platform to take advantage of SSL acceleration, otherwise it is simply done in software. The official site can be found here:

http://www.citrix.com/netscaler

52 questions
1
vote
1 answer

Can a Citrix NetScaler loadbalance based on the path portion of a URL?

So I have a domain hosting two lovely applications thus... http://intranet.lan:80/firstapp http://intranet.lan:80/secondapp And two physical boxes serving them…
chillitom
  • 123
  • 2
  • 5
1
vote
1 answer

Issues Load balancing .Net web app using State Server

We have multiple web servers behind a Netscaler load balancer. The (Win2008) servers each host an ASP.Net application (using iis 6.1) that are configured to use a central server running the .Net StateServer service for session sate management. When…
Stelloy
  • 141
  • 6
1
vote
0 answers

Device aware multifactor authentication with Citrix environment?

There are many services that advertise themselves as providing multifactor authentication for Citrix. But, most seem to require the additional generated passcode every time. Are there any that can require the password once per device, like Google's…
RyanW
  • 528
  • 3
  • 9
  • 19
1
vote
1 answer

Can I restrict an AD account to login only on Xenapp servers and not locally?

I have some users who want to test a Xenapp application using some generic accounts (I don't like to use generic accounts but for reasons I won't go into, they are necessary). I want to setup the accounts such that they can only login to the Xenapp…
David Yu
  • 1,032
  • 7
  • 14
1
vote
1 answer

Does PHP get executed when a page gets a HEAD request?

We set up a Netscaler in front of our PHP application server, the netscaler now preforms a large amount of HEAD requests as evidenced by our apache logs. I wonder if each time apache gets a one of these HEAD requests, it executes the PHP…
tomwoods
  • 113
  • 3
1
vote
1 answer

Serial Drops on Citrix after upgrade

Our company recently upgraded from Citrix version 6 (server 2008 R2 host servers) to 7.15 (Server 2016 host servers). We have an application that we host where external users connect with a WYSE terminal and serial connections (antiquated,…
SausageBuscuit
  • 165
  • 2
  • 12
1
vote
0 answers

Deploying Citrix ADC CPX to Docker - Container is Up, but Logs Errors

I'm trying to design a container-based network that uses Citrix ADC CPX (formerly Netscaler CPX). At this stage, I'm trying to get it to run locally on Docker Desktop. When I run: docker run -dt -P --privileged=true --net=host -e NS_NETMODE="HOST"…
Meow_ly
  • 111
  • 6
1
vote
2 answers

Citrix Netscaler Gateway does not work in macOS Catalina 10.15.4

Under macOS version 10.15.3, the extensions used by Citrix Netscaler Gateway could be allowed in the Security settings under System Preferences, as suggested in this serverfault answer. However, macOS 10.15.4 does not offer such a possibility,…
noe
  • 113
  • 1
  • 9
0
votes
1 answer

Css, js and images get partially downloaded with Netscaler

Trying to sort this out with our Netscaler provider but they have issues finding the problem for this aswell so asking her to see if anyone have any input on where to start looking. We have Netscaler as an SSL offload handling traffic into our IIS…
Hyzac
  • 113
  • 4
0
votes
0 answers

SSL connection error but works if you telnet port first

I'm troubleshooting a connection to an application (Citrix Netscaler), between several countries in a complex network. There are definitely firewalls along the route. Machine is pingable tracert is successful along the route. Hostname resolves…
Spence
  • 680
  • 3
  • 10
  • 19
0
votes
1 answer

Point a subdomain to a dedicated application server using NetScaler

Background on a question: we have a domain (www.example.com) that point to multiple servers with an SSL Wildcard *.example.com aka hitting a VIP (I am not an expert on VIP would love to learn more). The question is we are performing a Proof of…
Moojjoo
  • 87
  • 1
  • 10
0
votes
1 answer

weird netstat output on netscaler

We have a VPX-1000 netscaler. When traffic suddenly increases our website goes offline and doesn't response to requests but our netscaler load is fine (cpu %40 ram %50 4 cores 4gb). After incident occurs every time when traffic increases I've…
ender ulusoy
  • 23
  • 1
  • 1
  • 5
0
votes
1 answer

NetScaler prioritizing faster hosts in round robin

For a NetScaler load balancer running SSL passthrough, is there any aspect to the round robin load balancing algorithm that would direct more traffic to hosts that respond more quickly? As a concrete example, in a load balancer directing traffic to…
Spencer
  • 1
0
votes
1 answer

Get requested hostname in Netscaler

I have a Netscaler which is mainly acting as a SSL bridge for a bunch of sites. I would like to see every requested hostname that is going to the Netscaler but I am unable to fix it. The hostname is not encrypted in the SSL session so I should be…
krt
  • 274
  • 1
  • 2
  • 12
0
votes
2 answers

Log source IP of traffic destined to Cirtix Netscaler

I have tried to make Netscaler log the source IP of all traffic that's destined to the Netscaler. Is this possible? To be clear I don't want to forward the client-IP to a backend server, I want to log the source IP of all traffic that reaches the…
krt
  • 274
  • 1
  • 2
  • 12
1
2
3 4