44
Optimizing NetScaler for Enterprise Applications Dave Hawkins, TRM May 11, 2010

Optimizing NetScaler for Enterprise Applications

Embed Size (px)

DESCRIPTION

Optimizing NetScaler for Enterprise Applications. Dave Hawkins, TRM May 11, 2010. Topics. Generic Optimization Features Standard NetScaler Optimization & Configuration AppExpert Templates Specific Application Examples Troubleshooting. NetScaler Optimization Features. - PowerPoint PPT Presentation

Citation preview

Page 1: Optimizing NetScaler for Enterprise Applications

Optimizing NetScaler for Enterprise ApplicationsDave Hawkins, TRMMay 11, 2010

Page 2: Optimizing NetScaler for Enterprise Applications

• Generic Optimization Features

• Standard NetScaler Optimization & Configuration

• AppExpert Templates

• Specific Application Examples

• Troubleshooting

Citrix Confidential - Do Not Distribute

Topics

Page 3: Optimizing NetScaler for Enterprise Applications

NetScaler Optimization Features

Page 4: Optimizing NetScaler for Enterprise Applications

• SSL Offload

• Content Compression

• Content Caching

• Connection reuse

• NetScaler Push

• Responder

Citrix Confidential - Do Not Distribute

NetScaler Optimization Features

Page 5: Optimizing NetScaler for Enterprise Applications

Citrix Confidential - Do Not Distribute

• Reduce Server Load

• Higher TPS

• Central Certificate Management

• Central Cipher Management

NetScaler Optimization Features – SSL Offload

Page 6: Optimizing NetScaler for Enterprise Applications

Citrix Confidential - Do Not Distribute

• Faster response

• Fewer bytes on-wire

• Better response for low-bandwidth clients

• Policy-based rules

NetScaler Optimization Features – Compression

Page 7: Optimizing NetScaler for Enterprise Applications

Citrix Confidential - Do Not Distribute

• Reduce server load

• Faster response

• Policy-based controls

NetScaler Optimization Features – Caching

Page 8: Optimizing NetScaler for Enterprise Applications

Citrix Confidential - Do Not Distribute

• Reduce server load

• Faster server response

NetScaler Optimization Features – Connection Reuse

Page 9: Optimizing NetScaler for Enterprise Applications

Citrix Confidential - Do Not Distribute

• Web 1.0: Request-Response model

NetScaler Optimization Features – NetScaler Push

RequestRequest

ResponseResponse

• Web 2.0: Request-Response-Response model

• Requires long-lived sessions with dynamic updatesUpdateUpdate

UpdateUpdate

Page 10: Optimizing NetScaler for Enterprise Applications

ResponseResponseUpdateUpdate

Citrix Confidential - Do Not Distribute

• Alleviate long-lived TCP connections between clients & servers

• Push single update to multiple clients

• *MPP REST based

NetScaler Optimization Features – NetScaler Push

RequestRequest

ResponseResponse

ResponseResponse

ResponseResponse

ResponseResponse

ResponseResponse

UpdateUpdate UpdateUpdate

UpdateUpdate

RequestRequest

RequestRequest

RequestRequest

RequestRequest

RequestRequest

Page 11: Optimizing NetScaler for Enterprise Applications

ZZZzzzzzz...

Citrix Confidential - Do Not Distribute

• Policy-based configuration

• Reduce server load

• Reset, Redirect, or Respond-With

NetScaler Optimization Features – Responder

RequestRequest

ResponseResponse

GET /etc/db/credit-cards.xml

Page 12: Optimizing NetScaler for Enterprise Applications

Standard Configuration and Optimization Performance

Page 13: Optimizing NetScaler for Enterprise Applications

“Sharepoint” SSL+HTTP Load Balancing ConfigurationStandard HTTP Load Balancing

Citrix Confidential - Do Not Distribute

SSL Handling on Servers

Doc. Size Baseline

987 kB .doc 16.34s

5.29 MB .doc 89.86s

1.75 MB .pdf 28.62s

5.10 MB .pdf 80.28s

Source: Citrix Application Optimization for MOSS 2007 Performance Assessment - http://support.citrix.com/article/ctx120235

*Times based on 1.5mbps connection with 0.7%packet loss.

Page 14: Optimizing NetScaler for Enterprise Applications

SSL-Offload + Compression Load Balancing ConfigurationSSL-Offloaded HTTP Load Balancing

Citrix Confidential - Do Not Distribute

SSL Handling on NetScalerStatic/Dynamic content

compressed

Doc. Size BaselineSSL Offload

+ Compress

987 kB .doc 16.34s 12.29s

5.29 MB .doc 89.86s 56.20s

1.75 MB .pdf 28.62s 18.87s

5.10 MB .pdf 80.28s 70.36s

Servers configured as plaintext HTTP

Source: Citrix Application Optimization for MOSS 2007 Performance Assessment - http://support.citrix.com/article/ctx120235

Page 15: Optimizing NetScaler for Enterprise Applications

SSL offload + Compression + Integrated CachingLoad Balancing Configuration

SSL-Offload + Cmp +Caching HTTP Load Balancing

Citrix Confidential - Do Not Distribute

Doc. Size BaselineSSL Offload

+ CompressCaching

987 kB .doc 16.34s 12.29s 8.62s

5.29 MB .doc 89.86s 56.20s 42.78s

1.75 MB .pdf 28.62s 18.87s 14.51s

5.10 MB .pdf 80.28s 70.36s 60s

SSL Handling on NetScaler + Compression with Integrated

Caching

*Cache object max. limit set to 10MB

Source: Citrix Application Optimization for MOSS 2007 Performance Assessment - http://support.citrix.com/article/ctx120235

Page 16: Optimizing NetScaler for Enterprise Applications

• Specific doc types require different handling - .aspx, .doc, .css, etc.

• Separate caching policies and content-groups for doc types

• Configured max. object size per content-group:Scripts, Images: 4MBDocuments (.doc, .pdf): 10MB

• Documents have specific expiry times: 360Ksec

Citrix Confidential - Do Not Distribute

Sharepoint Optimizations

HTTP.REQ.METHOD.EQ(GET) && HTTP.REQ.URL.PATH.EQ("/_layouts/download.aspx")

HTTP.REQ.METHOD.CONTAINS("LOCK")

Page 17: Optimizing NetScaler for Enterprise Applications

• Compression policy – all requests for items not already compressed (except image services) .gz, .tgz

• Configure servers for “Load Balanced URL”

• Responder module redirect HTTP to SSL

Citrix Confidential - Do Not Distribute

Sharepoint Optimizations

Page 18: Optimizing NetScaler for Enterprise Applications

Advanced Optimization

Page 19: Optimizing NetScaler for Enterprise Applications

AppExpert

Templates

Citrix Confidential - Do Not Distribute

Page 20: Optimizing NetScaler for Enterprise Applications

• Built around standard configuration

• Time-tested for stability

• Performance-tested for maximumbenefit

• Rapid deployment with minimalconfiguration

• Free!

Citrix Confidential - Do Not Distribute

AppExpert Templates

Page 21: Optimizing NetScaler for Enterprise Applications

• Detailed deployment guide

• 10 Application Services templates

• Includes compression, caching, responder policies

• Includes caching selectors for parameterized caching• Available at http://community.citrix.com/display/ns/Microsoft+Sharepoint+AppExpert+Template

Citrix Confidential - Do Not Distribute

Example: Sharepoint AppExpert Template

Page 22: Optimizing NetScaler for Enterprise Applications

• Use Content-Group settings to optimizefor min/max content size, or overallnumber of hits.

• Use parameterization to optimize cache retrieval or invalidation.

• Prioritize NO_CACHE policies before CACHE policies

• Use multiple Content-Groups to allow for specific cache-clearing

Citrix Confidential - Do Not Distribute

Advanced Optimization: Caching

Page 23: Optimizing NetScaler for Enterprise Applications

• Select Optimal compression level (gzip level 5-6 for best size / performance)

Citrix Confidential - Do Not Distribute

Advanced Optimization: Compression

Page 24: Optimizing NetScaler for Enterprise Applications

• In end-to-end, use low-level ciphers in NS-to-service communication

• Cipher selection depends on client-needs, and security considerations.

• Can be combined with IC and Compression for maximum impact

Citrix Confidential - Do Not Distribute

Advanced Optimization: SSL Offload

Page 25: Optimizing NetScaler for Enterprise Applications

• SACK and Window Scaling

• Nagle’s Algorithm for small packets

• TCP Buffering for slow clients

• PMTUD – Path MTU Discovery

• USIP (Use Source-IP) & DSR when available =~ 50% Network Savings

Citrix Confidential - Do Not Distribute

Advanced Optimization: Network Optimizations

Req

uest

Req

uest

RequestRequest

Response

Response

Page 26: Optimizing NetScaler for Enterprise Applications

Advanced Troubleshooting

Page 27: Optimizing NetScaler for Enterprise Applications

• Primary tool for detailed analysis

• NetScaler logs all statistics every 7 seconds

• Uses logs from /var/nslog

• Logfiles are gzipped (use zcat)

• Some stats now available via GUI(System > Diagnostics)

Citrix Confidential - Do Not Distribute

NSCONMSG

Page 28: Optimizing NetScaler for Enterprise Applications

nsconmsg –K <file> -s <options> -g <grep> -d <operation>(zcat <file.gz> | nsconmsg –K pipe – or gunzip them)

Citrix Confidential - Do Not Distribute

NSCONMSG – General Format

-s options include:

•Start date or time•Maximum values•Rate counts•Add timestamps•Debugging levels•*csv format!

Format:-s option=valueie, -s disptime=1

-d options include:

•Stats – view raw statistics•Memstats – view memory-only stastics•Event – view system events (svc failures)• Auditedcmd – view cmds run on the system•Devcr – view device creation/removal

Example:-d memstats

Page 29: Optimizing NetScaler for Enterprise Applications

Scenario: Testing reports problems with SSL VIP earlier. What happened?

Citrix Confidential - Do Not Distribute

NSCONMSG – Examples

nsconmsg –K newnslog –g ssl_err –d stats

Displaying current counter value informationNetScaler V20 Performance DataNetScaler NS9.1: Build 101.5.cl, Date: Jan 19 2010, 07:12:11

reltime:mili second between two records Fri Feb 5 10:31:31 2010Index reltime counter-value symbol-name&device-no 0 0 0 ssl_err_ssl3_badversion 1 0 0 ssl_err_cavium_random_seed_failed 2 0 0 ssl_err_ubsec_card_reset 3 0 0 ssl_err_ssl3_send_server_hello 4 0 0 ssl_err_ssl3_send_server_certificate 5 0 0 ssl_err_ssl3_send_server_key_exchange 6 0 0 ssl_err_ssl3_send_certificate_request 7 0 0 ssl_err_ssl3_send_server_done 8 0 0 ssl_err_ssl3_check_client_hello_A_OR_get_client_cert 9 0 0 ssl_err_ssl3_get_client_certificate 10 0 0 ssl_err_ssl3_get_client_key_exchange_card 11 0 0 ssl_err_ssl3_check_client_hello_B_OR_get_client_keyEx 12 0 0 ssl_err_ssl3_get_client_key_exchange 13 0 0 ssl_err_ssl3_get_change_cipher_spec 14 0 0 ssl_err_ssl3_get_cert_verify 15 0 0 ssl_err_ssl3_get_finished 16 0 0 ssl_err_ssl3_setup_key_block

Current logfile

Grep for ‘ssl_err’

View initial statistics

Page 30: Optimizing NetScaler for Enterprise Applications

Scenario: Testing reports problems with SSL VIP earlier. What happened?

Citrix Confidential - Do Not Distribute

NSCONMSG – Examples

nsconmsg –K newnslog –s disptime=1 –g ssl_err_ssl3 –d current

Index rtime totalcount-val delta rate/sec symbol-name&device-no&time 108 0 78 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:01:06 2010 109 14000 11 2 0 ssl_error_cvm_bad_record Fri Feb 5 12:01:20 2010 110 7000 79 1 0 ssl_err_ssl3_badversion Fri Feb 5 12:01:27 2010 111 0 79 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:01:27 2010 112 28000 81 2 0 ssl_err_ssl3_badversion Fri Feb 5 12:01:55 2010 113 0 81 2 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:01:55 2010 114 7000 83 2 0 ssl_err_ssl3_badversion Fri Feb 5 12:02:02 2010 115 0 83 2 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:02:02 2010 116 14000 93 10 1 ssl_err_ssl3_badversion Fri Feb 5 12:02:16 2010 117 0 93 10 1 ssl_err_ssl3_get_client_hello Fri Feb 5 12:02:16 2010 118 7000 96 3 0 ssl_err_ssl3_badversion Fri Feb 5 12:02:23 2010 119 0 96 3 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:02:23 2010 120 112000 97 1 0 ssl_err_ssl3_badversion Fri Feb 5 12:04:15 2010 121 0 97 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:04:15 2010 122 7000 98 1 0 ssl_err_ssl3_badversion Fri Feb 5 12:04:22 2010 123 0 98 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:04:22 2010 124 7000 104 6 0 ssl_err_ssl3_badversion Fri Feb 5 12:04:29 2010 125 0 104 6 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:04:29 2010 126 70025 105 1 0 ssl_err_ssl3_badversion Fri Feb 5 12:05:45 2010 127 0 105 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:05:45 2010 128 7000 107 2 0 ssl_err_ssl3_badversion Fri Feb 5 12:05:52 2010 129 0 107 2 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:05:52 2010

View historic statistics

View timestamps

Page 31: Optimizing NetScaler for Enterprise Applications

Scenario: Testing reports problems with SSL VIP earlier. What happened?

Citrix Confidential - Do Not Distribute

NSCONMSG – Examples

nsconmsg –K newnslog -s csv=1 –g ssl_err_ssl3_badversion –d current > sslv3.csv

Grep specific counter

Output to csv

Write to file

 Screen clipping taken: 3/24/2010, 1:59 PM

  

Page 32: Optimizing NetScaler for Enterprise Applications

Scenario: Intermittent dropped sessions – what’s going on?

Citrix Confidential - Do Not Distribute

NSCONMSG – Examples

nsconmsg –K newnslog –g tcp_err –d current

reltime:mili second between two records Fri Feb 5 10:55:31 2010 Index rtime totalcount-val delta rate/sec symbol-name&device-no 1256 0 9 1 0 tcp_err_rst_pass_pnd_data 1257 0 26 1 0 tcp_err_rst_pass_pnd_get 1258 0 60 4 0 tcp_err_rst_pass_srvr 1259 0 140 1 0 tcp_err_oo_range_ack 1260 0 112 1 0 tcp_err_srvr_retransmit 1261 0 448 18 2 tcp_err_clnt_retransmit 1262 0 556 19 2 tcp_err_full_retransmit 1263 0 785 22 3 tcp_err_clnt_out_of_order 1264 0 102 33 4 tcp_err_srvr_out_of_order 1265 0 83 1 0 tcp_err_orphan_ack_keepalive 1266 0 772 21 3 tcp_err_hole_client 1267 0 4 1 0 tcp_err_hole_server 1268 0 776 22 3 tcp_err_hole_detected

Page 33: Optimizing NetScaler for Enterprise Applications

Scenario: Intermittent dropped sessions – what’s going on?

Citrix Confidential - Do Not Distribute

NSCONMSG – Examples

nsconmsg –K newnslog –g tcp_err_ooo –d current

reltime:mili second between two records Fri Feb 5 13:43:54 2010 Index rtime totalcount-val delta rate/sec symbol-name&device-no 0 11340678 7 7 1 tcp_err_ooo_maxpkt 1 2485190 10 3 0 tcp_err_ooo_maxpkt 2 7001 12 2 0 tcp_err_ooo_maxpkt 3 1470172 13 1 0 tcp_err_ooo_maxpkt 4 252023 15 2 0 tcp_err_ooo_maxpkt 5 392017 24 9 1 tcp_err_ooo_maxpkt 6 357024 26 2 0 tcp_err_ooo_maxpkt 7 252036 33 7 1 tcp_err_ooo_maxpkt 8 539040 35 2 0 tcp_err_ooo_maxpkt 9 1148108 38 3 0 tcp_err_ooo_maxpkt 10 780611 39 1 0 tcp_err_ooo_maxpkt 11 504035 55 16 2 tcp_err_ooo_maxpkt 12 28000 56 1 0 tcp_err_ooo_maxpkt 13 305818 57 1 0 tcp_err_ooo_maxpkt 14 589541 62 5 0 tcp_err_ooo_maxpkt 15 49021 69 7 0 tcp_err_ooo_maxpkt

Page 34: Optimizing NetScaler for Enterprise Applications

Displaying current memory stats information----------------------------------------------------------------------------------------------------------------------TotalMEM: 2688046946 Allocated: 258642274(9.62%) ActualInUse: 192482290(7.16%) Free: 2429404672

MEMPOOL MaxAllowd CurAlloc ErrLmtFailed ErrAllocFailed ErrFreeFailed----------------------------------------------------------------------------------------------------------------------MEM_CPROXY 134217728 16777216(0.62%) 0 0 0MEM_PAC Dynamic 32768(0.00%) 0 0 0MEM_RESPONDER_CONFIG Dynamic 8256(0.00%) 0 0 0MEM_RW_CONFIG Dynamic 330606(0.01%) 0 0 0MEM_SSL Dynamic 5509248(0.20%) 0 0 0MEM_CACONF Dynamic 0(0.00%) 0 0 0MEM_PANNER Dynamic 0(0.00%) 0 0 0MEM_PANSTR Dynamic 434(0.00%) 0 0 0MEM_PI_RUNTIME Dynamic 0(0.00%) 0 0 0MEM_HINFOBUF Dynamic 0(0.00%) 0 0 0MEM_PIRL Dynamic 0(0.00%) 0 0 0MEM_PATSET Dynamic 177994(0.01%) 0 0 0MEM_ASYNC Dynamic 0(0.00%) 0 0 0MEM_WU_MEM Dynamic 5594104(0.21%) 0 0 0MEM_APPSECURE Dynamic 29886297(1.11%) 0 0 0MEM_PI_CONFIG Dynamic 63280(0.00%) 0 0 0MEM_AUDITLOG 16384000 333772(0.01%) 0 0 0MEM_POLENG 100663296 106000(0.00%) 0 0 0MEM_GSLB 33554432 0(0.00%) 0 0 0MEM_DNS 5242880 0(0.00%) 0 0 0MEM_DCC 10485760 0(0.00%) 0 0 0MEM_TCPBUFFP 0 0(0.00%) 0 0 0MEM_LB_PHYSVC 4796416 801(0.00%) 0 0 0MEM_LB_PHYSERVER 3932160 768(0.00%) 0 0 0MEM_URLMON 15728640 0(0.00%) 0 0 0MEM_IPFRAG 524288 0(0.00%) 0 0 0MEM_SERVMON 24514560 8704(0.00%) 0 0 0MEM_MISC Dynamic 136541842(5.08%) 0 0 0MEM_DEBUG 262144 1216(0.00%) 0 0 0MEM_SNMP 41943040 15808(0.00%) 0 0 0MEM_CONN Dynamic 62949376(2.34%) 0 0 0MEM_LOGGING Dynamic 0(0.00%) 0 0 0MEM_IOH 5242880 0(0.00%) 0 0 0MEM_CSWMEM 16777216 2560(0.00%) 0 0 0MEM_LB_SERVICE 12165120 0(0.00%) 0 0 0MEM_LB_VIP 47448064 10144(0.00%) 0 0 0MEM_LB_SESSION 136314880 0(0.00%) 0 0 0MEM_LB_SERVER 12582912 0(0.00%) 0 0 0MEM_PE 20971520 291080(0.01%) 0 0 0

4MB_PAGE_CONN_POOL_MEMBERS:Name CurAllocd CurFree PgAllocd PgAllocFailed ----------------------------------------------------------------------------------NSB 16380 15867 7 (1.1%) 0PCB 6553 6552 1 (0.2%) 0NATPCB 21845 21845 1 (0.2%) 0B64 65536 65532 1 (0.2%) 0B128 0 0 0 (0.0%) 0B256 0 0 0 (0.0%) 0DNSsmall 0 0 0 (0.0%) 0DNSfull 0 0 0 (0.0%) 0SPCB 0 0 0 (0.0%) 0SSL_SESS 0 0 0 (0.0%) 0

Other_CONN_POOL_MEMBERS:CacheBuf 1(0.0%) 0

4MB_PAGE_MISC_POOL_MEMBERS:Name CurAllocd CurFree PgAllocd PgAllocFailed ----------------------------------------------------------------------------------SINFO 2048 2025 1 (0.2%) 0DEVNAME 174762 174422 1 (0.2%) 0

4MB_PAGE_SSL_POOL_MEMBERS:Name CurAllocd CurFree PgAllocd PgAllocFailed ---------------------------------------------------------------------------------- CVMBUF 1 (0.2%) 0

4MB_PAGE_PANNER_POOL_MEMBERS:Name CurAllocd CurFree PgAllocd PgAllocFailed ----------------------------------------------------------------------------------PAN 0 0 0 (0.0%) 0

4MB_PAGE_CPROXY_POOL_MEMBERS:Name CurAllocd CurFree PgAllocd PgAllocFailed ----------------------------------------------------------------------------------CK1024 4096 4096 1 (0.2%) 0CK2048 2048 2048 1 (0.2%) 0CK4096 1024 1024 1 (0.2%) 0CKPATH 4032 4032 1 (0.2%) 0

Checking utilization and memory use in detail

Citrix Confidential - Do Not Distribute

NSCONMSG – Examples

nsconmsg –K newnslog –d memstats

Page 35: Optimizing NetScaler for Enterprise Applications

Checking for distribution and performance

Citrix Confidential - Do Not Distribute

NSCONMSG – Examples

nsconmsg –K newnslog –s ConLb=3 –d distrconmsg

VIP(1.1.1.1:636:UP:WEIGHTEDRR): Hits(2506) Pers(OFF) PersHits(0:0%) Err(0:0%) Ovrride(0:0%)S(1.1.1.100:636:UP) Hits(835:33%) PHits(0:0%) LbHits(835:100%)S(1.1.1.101:636:UP) Hits(836:33%) PHits(0:0%) LbHits(836:100%)S(1.1.1.102:636:UP) Hits(835:33%) PHits(0:0%) LbHits(835:100%)VIP(2.2.2.2:389:UP:WEIGHTEDRR): Hits(6) Pers(OFF) PersHits(0:0%) Err(0:0%) Ovrride(0:0%)S(2.2.2.100:389:UP) Hits(2:33%) PHits(0:0%) LbHits(2:100%)S(2.2.2.101:389:UP) Hits(2:33%) PHits(0:0%) LbHits(2:100%)S(2.2.2.102:389:UP) Hits(2:33%) PHits(0:0%) LbHits(2:100%)VIP(3.3.3.3:123:UP:WEIGHTEDRR): Hits(180) Pers(SOURCEIP) PersHits(180:100%) Err(0:0%) Ovrride(0:0%)S(3.3.3.100:123:UP) Hits(42:23%) PHits(42:100%) LbHits(0:0%)S(3.3.3.101:123:UP) Hits(49:27%) PHits(49:100%) LbHits(0:0%)S(3.3.3.102:123:UP) Hits(46:25%) PHits(46:100%) LbHits(0:0%)S(3.3.3.103:123:UP) Hits(43:23%) PHits(43:100%) LbHits(0:0%)VIP(4.4.4.4:53:UP:WEIGHTEDRR): Hits(9410) Pers(OFF) PersHits(0:0%) Err(0:0%) Ovrride(0:0%)S(4.4.4.100:53:UP) Hits(4705:50%) PHits(0:0%) LbHits(4705:100%)S(4.4.4.101:53:UP) Hits(4705:50%) PHits(0:0%) LbHits(4705:100%)VIP(127.0.0.2:53:DOWN:WEIGHTEDRR): Hits(0) Pers(OFF) PersHits(0:0%) Err(0:0%) Ovrride(0:0%)-------------------------------------------------------CPU:2.2% MEM:213817642 UP:19.13:41:43 since:Sat Mar 20 01:03:59 2010

Page 36: Optimizing NetScaler for Enterprise Applications

Checking for distribution and performance

Citrix Confidential - Do Not Distribute

NSCONMSG – Examples

nsconmsg –K newnslog –s ConLb=3 –d oldconmsg

current time is Thu Apr 8 14:45:28 2010-------------------------------------------------------NATSession : Free(19644)A(21845)InUse(2201)NATSession: Cur(Tcp[194] Udp[2007] Icmp[0] Other[0])NATSession: Op/s(Tcp[3] Udp[436] Icmp[1] Other[0])Session: A:9187 F:4604 IUse:4583 SEs: SIP:4582 C:0 SSL:0 Svr:1 UserId:0 SIPDIP:0 DIP:0 SO:0SSF: Conn (Srvr 0 Clnt 1) U:0CM: Conn (Srvr 0 Clnt 1) Sessions PCB 0 NATPCB 0Z(SIP[68307], C[0], SSL[0] Server[22] SIPDIP[0] DIP[0] SO[0])Mon: Probes: 24303862, Failed: 3757181

Page 37: Optimizing NetScaler for Enterprise Applications

Checking for distribution and performance

Citrix Confidential - Do Not Distribute

NSCONMSG – Examples

nsconmsg –K newnslog –s ConLb=3 –d oldconmsg

VIP(3.3.3.3:123:UP:WEIGHTEDRR): Hits(6108723, 4/sec) Mbps(0.01) Pers(SOURCEIP) Err(0) LConn_BestIdx: 1024 Pkt(13/sec, 48 bytes) actSvc(4) DefPol(NONE) override(0) Conn: Clt(907, 4/sec, OE[907]) Svr(907)S(3.3.3.100:123:UP) Hits(1513624, 0/sec, P[1512683, 0/sec]) ATr(210:210) Mbps(0.00) BWlmt(0 kbits) RspTime(0.00 ms) Load(0) LConn_Idx: (C:0; V:0,I:1) Other: Pkt(1/sec, 48 bytes) Wt(1) Wt(Reverse Polarity)(10000) Conn: CSvr(210, 0/sec) MCSvr(249) OE(210) E(210) RP(0) SQ(0) Monitor_ping-default_of_serv1-123(10.153.40.27:123) Resp Time : 461 microsS(3.3.3.101:123:UP) Hits(1512236, 1/sec, P[1511295, 1/sec]) ATr(237:237) Mbps(0.00) BWlmt(0 kbits) RspTime(0.00 ms) Load(0) LConn_Idx: (C:0; V:0,I:1) Other: Pkt(4/sec, 48 bytes) Wt(1) Wt(Reverse Polarity)(10000) Conn: CSvr(237, 1/sec) MCSvr(269) OE(237) E(237) RP(0) SQ(0) Monitor_ping-default_of_serv2-123(10.153.40.26:123) Resp Time : 578 microsS(3.3.3.102:123:UP) Hits(1544960, 0/sec, P[1544019, 0/sec]) ATr(243:243) Mbps(0.00) BWlmt(0 kbits) RspTime(0.00 ms) Load(0) LConn_Idx: (C:0; V:0,I:1) Other: Pkt(2/sec, 48 bytes) Wt(1) Wt(Reverse Polarity)(10000) Conn: CSvr(243, 0/sec) MCSvr(237) OE(243) E(243) RP(0) SQ(0) Monitor_ping-default_of_serv3-123(10.153.38.27:123) Resp Time : 553 microsS(3.3.3.103:123:UP) Hits(1537903, 1/sec, P[1536962, 1/sec]) ATr(217:217) Mbps(0.00) BWlmt(0 kbits) RspTime(0.00 ms) Load(0) LConn_Idx: (C:0; V:0,I:1) Other: Pkt(5/sec, 48 bytes) Wt(1) Wt(Reverse Polarity)(10000) Conn: CSvr(217, 1/sec) MCSvr(260) OE(217) E(217) RP(0) SQ(0) Monitor_ping-default_of_serv4-123(10.153.38.26:123) Resp Time : 543 micros

Page 38: Optimizing NetScaler for Enterprise Applications

Checking for distribution and performance

Citrix Confidential - Do Not Distribute

NSCONMSG – Examples

nsconmsg –K newnslog –s Con???=3 –d oldconmsg

ConDebug - DebuggingConLb - Load BalancingConMon - Monitoring ProbesConMEM - Memory ManagementConCSW - Content SwitchingConSSL - SSL OffloadConCMP - CompressionConIC - Integrated Caching

Page 39: Optimizing NetScaler for Enterprise Applications

• Nstrace supports filtering in 9.x

Citrix Confidential - Do Not Distribute

nstrace.sh

http://support.citrix.com/article/ctx121166

nstrace -size 0 -filter "SOURCEIP == 10.1.2.3 && SOURCEPORT == 8080" -link ENABLE

Packet-size limit Filters in standard NS policy format

Automatically capture linkedclient/server connections

Filter on: SOURCEIPSOURCEPORTDESTIPDESTPORTSVCNAMEVSVRNAMESTATE

Booleans supported!

Page 40: Optimizing NetScaler for Enterprise Applications

Citrix Confidential - Do Not Distribute

Wireshark

Just one missing frame…

…can cause big headaches.

Page 41: Optimizing NetScaler for Enterprise Applications

• nstrace files now officially supported in Wireshark!

• Available in latest dev release (not Stable release) – 1.3.4

• Includes ns.pdevno and ns.l_pdevno filtering

Citrix Confidential - Do Not Distribute

Wireshark

Page 42: Optimizing NetScaler for Enterprise Applications

Before you leave…

• Recommended related breakout sessions: • SYN410D – Implementing NetScaler to Optimize Microsoft Exchange hands-on (Wed. 12th @

2PM)

•Continue your learning – visit www.citrix.com/SynergyEDU for more information

• Session surveys are available online at www.citrixsummit.com starting Thursday, May 13• Provide your feedback and pick up your complimentary Starbucks or iTunes giftcard at the

registration desk

• Download presentations starting Friday, May 21, from your My Schedule Tool located in your My Synergy Microsite event account

Page 43: Optimizing NetScaler for Enterprise Applications

Questions? Comments?

Page 44: Optimizing NetScaler for Enterprise Applications