Razpoložljivost v oblaku Citrix NetScaler Damjan Mirtič - damjan.mirtic@citrix.com

1. Razpoložljivost v oblaku Citrix NetScaler Damjan Mirtič - damjan.mirtic@citrix.com Grega Zoubek - grega.zoubek@citrix.com

2. NetScaler 10.1 NetScaler 10.1 delivers a high quality mobile experience inservice provide and enterprise cloud environments.

3. Shift in Data Center Networks Drivenby Mobility and Cloud Services Corporate Apps BYO Desktops Mobility SaaS& Web Apps Data

4. Cloud Services and Mobility Centric Support Cloud-Enabled Services Platform BYOD changes the client experience Mobile Focused Optimization Distributed apps break application visibility Cloud-Enabled Visibility Tools

5. Cloud/SP Enables multi-tenant environments to power software defined networks

6. Scale Your Datacenter 150x in Three Dimensions “40:1 footprint reduction. No Compromises.” “Grow capacity up to 5x. No New Hardware.” Simplicity with Many-In –One SDX Elasticity with Pay-As-You-Grow Scale Up Scale Up Scale Up “Megabits to Terabits. Zero Downtime.” Scale In Scale In Scale In Expandability with Add-and-Go Clustering Scale Out Scale Out Scale Out

7. Turn One NetScaler into 40 with SDX for Maximum ROI • Complete appliance instance per tenant • Complete CPU, memory, and SSL isolation • Independent entity spaces • Independent versioning • Independent maintenance schedule • Complete Network Isolation • No performance degradation

8. Available for Every Form Factor 1 AppVery Fast NetScalerVPX Virtual Appliance Hardware Appliance Many Apps Very Manageable App App App App App App App App App App App App App App App App App App Multi-tenant Appliance App App App App App App App App App App App App App App App App Achieve Scale: Management + Performance Any Form-factor: Cluster VPX, MPX, or SDX True Clustering: Data and Management Plane

9. Eliminate Ideal HA Units & Expand As Needed One large system across multiple boxes (up to 32). Clusters across instances Clusters within a single SDX • Single system image for configuration and management • Common health check framework / response sharing • Single VIP can span multiple boxes • Shared persistence state across entire cluster

10. Traffic Domains vs. SDX Multi-tenancy Traffic domains are supported within each SDX instance

11. Integrated Partner Functionality on NetScaler Now open for 3rd party services SDX

12. Mobility: Powering Mobile Web Apps and MDM

13. Mobile Apps: Dogged by Reduced Performance • Packet loss amplified for wireless mobility • WiFiusers drop packets walking around or sharing a congested access point • 3G users drop packets when switching between towers and oversubscribed networks • Current alternatives assume packet loss is due to congestion • Valid for users connected to broadband networks (e.g., DSL) • Transfers slowly ramped until packet loss no longer occurs • Problematic for mobile users (e.g., 3G and LTE) as packet loss is due to more than congestion • Need to aggressively ramp performance. • TCP limitations on long fat pipes • Performance degradation for transfers over long distance and high bandwidth networks

14. Westwood TCP: Enhanced Congestion Control • Rapid growth of mobile devices accessing public facing websites drive the need for Westwood TCP • Significant performance improvement for long distance, high bandwidth links • Modified standard TCP Congestion and Control Algorithm ensures faster recovery and effective congestion avoidance • Designed to handle noisy mobile links (sporadic losses due to overlapping radio channels)

15. Mobility: Modernizing Web Protocols HTTP was designed for the web of 1999. It was fine for then, but is no longer appropriate. Today’s web is richer, uses multi-media, javascript, and supports mobility. HTTP needs a refresh for the mobile world.

16. SPDY in the news SPDY in Amazon’s Kindle Fire Ever wondered why Google search and Gmail is faster on Chrome – SPDY!

17. Accelerate Traffic Delivery with SPDY • SPDY Value Proposition • a two-layer HTTP-compatible protocol. • SPDY provides a number of benefits over standard HTTP • It sends fewer packets and therefore cuts down on packet loss • Uses fewer TCP connections • Uses the TCP connections it makes more effectively. • Encourages content compression • Performance improvement over HTTP of 27% - 60% in page load time (PLT) over plain TCP (without SSL), and 39% - 55% over SSL • Exceptional user experience Impact of SPDY on Page Load Times Page Load Time (ms) Packet Loss Rate(Internet avg is 1%)

18. Transparently Convert HTTP and SPDY Traffic Web Server SPDY:// HTTP:// HTTP Semantics As SPDY slowly evolves into an increasingly popular protocol, web sites can adopt it without having to rebuild their existing infrastructure. SPDYSession HTTP Semantics HTTP Semantics HTTP Semantics SSL TCP/IP TCP/IP TCP/IP TCP/IP

19. Optimize Mobile Client ExperienceMulti-path TCP Using an app over a 3G link is great. App access is done over standard TCP connections. Until the access point changes. The TCP connection must reset leading to access delays. Multi-path TCP solves this by using two TCP connections. NetScaler can then unite the data.

20. Optimizing XenMobile with NetScaler

21. Enterprise Mobility Use Case MDM Mail Web / SaaS Data Native iOS/Android *Device policies *Lock/wipe *Tracking *Full security *Easy for users *Easy for IT *Secure SSO *MicroVPN *Mobilize intranet *Dropbox problem *Follow-me data *Full productivity *MDX app policies *Custom apps *Interact/share data

22. App Management A complete stack for managing and securing apps, data, and devices Data Management Device Management

23. Netscaler with XenMobile Integration

24. Front-end Security How? NetScaler provides High Availability, Security with built in Scalability Why? Provide complete security against external threats – scalable to over 100,000 concurrently connected users XenMobileDevice Managers (XDMs)

25. Email AccessPolicy Controls with NetScaler and XNC How? With tight XenMobile integration, NetScaler filter access to Microsoft Exchange based on DeviceID Why? Protects In-line Exchange ActiveSync access against unauthorized and/or compromised access to the enterprise mail servers, with seamless blacklist/ whitelist control Allow Secured Mobile devices Block Jailbroken devices Help corporate compliance XenMobile MDM w/ XenMobileNetScaler Connector (XNC)

26. Scalable and Secure Access to Mobile Applications How? Full SSL VPN tunnel with NetScaler Gateway and MicroVPN for app-level policy controlled tunneling for mobile apps and browse Why? Policy-driven access to corporate resources are essential especially in BYOD XenMobile MDM AppController

27. Citrix — The Most Complete Mobile Portfolio Requirements of the Mobile Enterprise Value on Investment (VOI) Desktopand App Virtualization Collaboration Mobile Device Management SandboxedMail and Web Mobile AppSecurity Mobile Data Control Mobile Network Control SSO and Identity Management

28. Analytics: NetScaler Insight Center

29. NetScaler Insight Center Visibility and Control NetScaler App Delivery Fabric Action Analytics Mobile Devices Virtual desktops Web apps Cloud services Data services Netscaler Command Center Management and Orchestration

30. Achieving Application Visibility with NetScaler 3rd PartyAnalysis Tools NetScaler Insight Center Cloud Enterprise Combining NetScaler with Analysis Tools NetScaler generates a wealth of application visibility data by way of AppFlow™NetScaler Insight Center is the best way to view Citrix-specific data Desktop

31. NetScaler Insight Center NetScaler Insight Center HDX Insight Analytics for XenApp and XenDesktop Web Insight Analytics for enterprise applications

32. Analytics for Enterprise Applications Web Insight NetScaler Insight Center • Break down detailed reporting on enterprise application use, even for SSL encrypted traffic • Correlate network metrics with application behavior • Determine end user experience without agents AppFlow

33. Application Layer Security

34. Automatic Signature Updates for App Firewall 1. 2. 3. 4. Enable Signature Protection Tune/Auto Updated Signatures Enable Advanced Security Tune Security Policies Comprehensive Application Protection • Auto update of signatures from cloud-based services • Simplifies detection against known application vulnerabilities • Shortens Application Firewall deployment cycle • Signatures based on public vulnerability databases (e.g. Snort, CVE, Bugtraq, etc.)

35. Vulnerability Scanner IntegrationIBM AppScan and Whitehat Run periodic scans Protected website Import files into NetScaler

36. Cisco NetScaler NetScaler virtual appliance sold by Cisco on Nexus 1000V Integrationwith the Cisco Nexus Cloud Services Platform and vPath service insertion architecture Interoperability with Broader Cloud Network Services: ASA 1000V Cloud FW, Virtual Security Gateway virtual FW Cisco validated designs

37. NetScaler – Microsoft TMG replacement

38. Application Delivery Controllers Powering Cloud, Mobile and Data Networks Availability & Performance Cloud Scale Security & Analytics Cloud Infrastructure Infinite Flexibility Any Application Any Data / Information Any User Any Device Any Location Enterprise Datacenter