+ All Categories
Home > Documents > Optimizing NetScaler for Enterprise Applications

Optimizing NetScaler for Enterprise Applications

Date post: 14-Jan-2016
Category:
Upload: loyal
View: 77 times
Download: 1 times
Share this document with a friend
Description:
Optimizing NetScaler for Enterprise Applications. Dave Hawkins, TRM May 11, 2010. Topics. Generic Optimization Features Standard NetScaler Optimization & Configuration AppExpert Templates Specific Application Examples Troubleshooting. NetScaler Optimization Features. - PowerPoint PPT Presentation
Popular Tags:
44
Optimizing NetScaler for Enterprise Applications Dave Hawkins, TRM May 11, 2010
Transcript
Page 1: Optimizing NetScaler for Enterprise Applications

Optimizing NetScaler for Enterprise ApplicationsDave Hawkins, TRMMay 11, 2010

Page 2: Optimizing NetScaler for Enterprise Applications

• Generic Optimization Features

• Standard NetScaler Optimization & Configuration

• AppExpert Templates

• Specific Application Examples

• Troubleshooting

Citrix Confidential - Do Not Distribute

Topics

Page 3: Optimizing NetScaler for Enterprise Applications

NetScaler Optimization Features

Page 4: Optimizing NetScaler for Enterprise Applications

• SSL Offload

• Content Compression

• Content Caching

• Connection reuse

• NetScaler Push

• Responder

Citrix Confidential - Do Not Distribute

NetScaler Optimization Features

Page 5: Optimizing NetScaler for Enterprise Applications

Citrix Confidential - Do Not Distribute

• Reduce Server Load

• Higher TPS

• Central Certificate Management

• Central Cipher Management

NetScaler Optimization Features – SSL Offload

Page 6: Optimizing NetScaler for Enterprise Applications

Citrix Confidential - Do Not Distribute

• Faster response

• Fewer bytes on-wire

• Better response for low-bandwidth clients

• Policy-based rules

NetScaler Optimization Features – Compression

Page 7: Optimizing NetScaler for Enterprise Applications

Citrix Confidential - Do Not Distribute

• Reduce server load

• Faster response

• Policy-based controls

NetScaler Optimization Features – Caching

Page 8: Optimizing NetScaler for Enterprise Applications

Citrix Confidential - Do Not Distribute

• Reduce server load

• Faster server response

NetScaler Optimization Features – Connection Reuse

Page 9: Optimizing NetScaler for Enterprise Applications

Citrix Confidential - Do Not Distribute

• Web 1.0: Request-Response model

NetScaler Optimization Features – NetScaler Push

RequestRequest

ResponseResponse

• Web 2.0: Request-Response-Response model

• Requires long-lived sessions with dynamic updatesUpdateUpdate

UpdateUpdate

Page 10: Optimizing NetScaler for Enterprise Applications

ResponseResponseUpdateUpdate

Citrix Confidential - Do Not Distribute

• Alleviate long-lived TCP connections between clients & servers

• Push single update to multiple clients

• *MPP REST based

NetScaler Optimization Features – NetScaler Push

RequestRequest

ResponseResponse

ResponseResponse

ResponseResponse

ResponseResponse

ResponseResponse

UpdateUpdate UpdateUpdate

UpdateUpdate

RequestRequest

RequestRequest

RequestRequest

RequestRequest

RequestRequest

Page 11: Optimizing NetScaler for Enterprise Applications

ZZZzzzzzz...

Citrix Confidential - Do Not Distribute

• Policy-based configuration

• Reduce server load

• Reset, Redirect, or Respond-With

NetScaler Optimization Features – Responder

RequestRequest

ResponseResponse

GET /etc/db/credit-cards.xml

Page 12: Optimizing NetScaler for Enterprise Applications

Standard Configuration and Optimization Performance

Page 13: Optimizing NetScaler for Enterprise Applications

“Sharepoint” SSL+HTTP Load Balancing ConfigurationStandard HTTP Load Balancing

Citrix Confidential - Do Not Distribute

SSL Handling on Servers

Doc. Size Baseline

987 kB .doc 16.34s

5.29 MB .doc 89.86s

1.75 MB .pdf 28.62s

5.10 MB .pdf 80.28s

Source: Citrix Application Optimization for MOSS 2007 Performance Assessment - http://support.citrix.com/article/ctx120235

*Times based on 1.5mbps connection with 0.7%packet loss.

Page 14: Optimizing NetScaler for Enterprise Applications

SSL-Offload + Compression Load Balancing ConfigurationSSL-Offloaded HTTP Load Balancing

Citrix Confidential - Do Not Distribute

SSL Handling on NetScalerStatic/Dynamic content

compressed

Doc. Size BaselineSSL Offload

+ Compress

987 kB .doc 16.34s 12.29s

5.29 MB .doc 89.86s 56.20s

1.75 MB .pdf 28.62s 18.87s

5.10 MB .pdf 80.28s 70.36s

Servers configured as plaintext HTTP

Source: Citrix Application Optimization for MOSS 2007 Performance Assessment - http://support.citrix.com/article/ctx120235

Page 15: Optimizing NetScaler for Enterprise Applications

SSL offload + Compression + Integrated CachingLoad Balancing Configuration

SSL-Offload + Cmp +Caching HTTP Load Balancing

Citrix Confidential - Do Not Distribute

Doc. Size BaselineSSL Offload

+ CompressCaching

987 kB .doc 16.34s 12.29s 8.62s

5.29 MB .doc 89.86s 56.20s 42.78s

1.75 MB .pdf 28.62s 18.87s 14.51s

5.10 MB .pdf 80.28s 70.36s 60s

SSL Handling on NetScaler + Compression with Integrated

Caching

*Cache object max. limit set to 10MB

Source: Citrix Application Optimization for MOSS 2007 Performance Assessment - http://support.citrix.com/article/ctx120235

Page 16: Optimizing NetScaler for Enterprise Applications

• Specific doc types require different handling - .aspx, .doc, .css, etc.

• Separate caching policies and content-groups for doc types

• Configured max. object size per content-group:Scripts, Images: 4MBDocuments (.doc, .pdf): 10MB

• Documents have specific expiry times: 360Ksec

Citrix Confidential - Do Not Distribute

Sharepoint Optimizations

HTTP.REQ.METHOD.EQ(GET) && HTTP.REQ.URL.PATH.EQ("/_layouts/download.aspx")

HTTP.REQ.METHOD.CONTAINS("LOCK")

Page 17: Optimizing NetScaler for Enterprise Applications

• Compression policy – all requests for items not already compressed (except image services) .gz, .tgz

• Configure servers for “Load Balanced URL”

• Responder module redirect HTTP to SSL

Citrix Confidential - Do Not Distribute

Sharepoint Optimizations

Page 18: Optimizing NetScaler for Enterprise Applications

Advanced Optimization

Page 19: Optimizing NetScaler for Enterprise Applications

AppExpert

Templates

Citrix Confidential - Do Not Distribute

Page 20: Optimizing NetScaler for Enterprise Applications

• Built around standard configuration

• Time-tested for stability

• Performance-tested for maximumbenefit

• Rapid deployment with minimalconfiguration

• Free!

Citrix Confidential - Do Not Distribute

AppExpert Templates

Page 21: Optimizing NetScaler for Enterprise Applications

• Detailed deployment guide

• 10 Application Services templates

• Includes compression, caching, responder policies

• Includes caching selectors for parameterized caching• Available at http://community.citrix.com/display/ns/Microsoft+Sharepoint+AppExpert+Template

Citrix Confidential - Do Not Distribute

Example: Sharepoint AppExpert Template

Page 22: Optimizing NetScaler for Enterprise Applications

• Use Content-Group settings to optimizefor min/max content size, or overallnumber of hits.

• Use parameterization to optimize cache retrieval or invalidation.

• Prioritize NO_CACHE policies before CACHE policies

• Use multiple Content-Groups to allow for specific cache-clearing

Citrix Confidential - Do Not Distribute

Advanced Optimization: Caching

Page 23: Optimizing NetScaler for Enterprise Applications

• Select Optimal compression level (gzip level 5-6 for best size / performance)

Citrix Confidential - Do Not Distribute

Advanced Optimization: Compression

Page 24: Optimizing NetScaler for Enterprise Applications

• In end-to-end, use low-level ciphers in NS-to-service communication

• Cipher selection depends on client-needs, and security considerations.

• Can be combined with IC and Compression for maximum impact

Citrix Confidential - Do Not Distribute

Advanced Optimization: SSL Offload

Page 25: Optimizing NetScaler for Enterprise Applications

• SACK and Window Scaling

• Nagle’s Algorithm for small packets

• TCP Buffering for slow clients

• PMTUD – Path MTU Discovery

• USIP (Use Source-IP) & DSR when available =~ 50% Network Savings

Citrix Confidential - Do Not Distribute

Advanced Optimization: Network Optimizations

Req

uest

Req

uest

RequestRequest

Response

Response

Page 26: Optimizing NetScaler for Enterprise Applications

Advanced Troubleshooting

Page 27: Optimizing NetScaler for Enterprise Applications

• Primary tool for detailed analysis

• NetScaler logs all statistics every 7 seconds

• Uses logs from /var/nslog

• Logfiles are gzipped (use zcat)

• Some stats now available via GUI(System > Diagnostics)

Citrix Confidential - Do Not Distribute

NSCONMSG

Page 28: Optimizing NetScaler for Enterprise Applications

nsconmsg –K <file> -s <options> -g <grep> -d <operation>(zcat <file.gz> | nsconmsg –K pipe – or gunzip them)

Citrix Confidential - Do Not Distribute

NSCONMSG – General Format

-s options include:

•Start date or time•Maximum values•Rate counts•Add timestamps•Debugging levels•*csv format!

Format:-s option=valueie, -s disptime=1

-d options include:

•Stats – view raw statistics•Memstats – view memory-only stastics•Event – view system events (svc failures)• Auditedcmd – view cmds run on the system•Devcr – view device creation/removal

Example:-d memstats

Page 29: Optimizing NetScaler for Enterprise Applications

Scenario: Testing reports problems with SSL VIP earlier. What happened?

Citrix Confidential - Do Not Distribute

NSCONMSG – Examples

nsconmsg –K newnslog –g ssl_err –d stats

Displaying current counter value informationNetScaler V20 Performance DataNetScaler NS9.1: Build 101.5.cl, Date: Jan 19 2010, 07:12:11

reltime:mili second between two records Fri Feb 5 10:31:31 2010Index reltime counter-value symbol-name&device-no 0 0 0 ssl_err_ssl3_badversion 1 0 0 ssl_err_cavium_random_seed_failed 2 0 0 ssl_err_ubsec_card_reset 3 0 0 ssl_err_ssl3_send_server_hello 4 0 0 ssl_err_ssl3_send_server_certificate 5 0 0 ssl_err_ssl3_send_server_key_exchange 6 0 0 ssl_err_ssl3_send_certificate_request 7 0 0 ssl_err_ssl3_send_server_done 8 0 0 ssl_err_ssl3_check_client_hello_A_OR_get_client_cert 9 0 0 ssl_err_ssl3_get_client_certificate 10 0 0 ssl_err_ssl3_get_client_key_exchange_card 11 0 0 ssl_err_ssl3_check_client_hello_B_OR_get_client_keyEx 12 0 0 ssl_err_ssl3_get_client_key_exchange 13 0 0 ssl_err_ssl3_get_change_cipher_spec 14 0 0 ssl_err_ssl3_get_cert_verify 15 0 0 ssl_err_ssl3_get_finished 16 0 0 ssl_err_ssl3_setup_key_block

Current logfile

Grep for ‘ssl_err’

View initial statistics

Page 30: Optimizing NetScaler for Enterprise Applications

Scenario: Testing reports problems with SSL VIP earlier. What happened?

Citrix Confidential - Do Not Distribute

NSCONMSG – Examples

nsconmsg –K newnslog –s disptime=1 –g ssl_err_ssl3 –d current

Index rtime totalcount-val delta rate/sec symbol-name&device-no&time 108 0 78 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:01:06 2010 109 14000 11 2 0 ssl_error_cvm_bad_record Fri Feb 5 12:01:20 2010 110 7000 79 1 0 ssl_err_ssl3_badversion Fri Feb 5 12:01:27 2010 111 0 79 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:01:27 2010 112 28000 81 2 0 ssl_err_ssl3_badversion Fri Feb 5 12:01:55 2010 113 0 81 2 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:01:55 2010 114 7000 83 2 0 ssl_err_ssl3_badversion Fri Feb 5 12:02:02 2010 115 0 83 2 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:02:02 2010 116 14000 93 10 1 ssl_err_ssl3_badversion Fri Feb 5 12:02:16 2010 117 0 93 10 1 ssl_err_ssl3_get_client_hello Fri Feb 5 12:02:16 2010 118 7000 96 3 0 ssl_err_ssl3_badversion Fri Feb 5 12:02:23 2010 119 0 96 3 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:02:23 2010 120 112000 97 1 0 ssl_err_ssl3_badversion Fri Feb 5 12:04:15 2010 121 0 97 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:04:15 2010 122 7000 98 1 0 ssl_err_ssl3_badversion Fri Feb 5 12:04:22 2010 123 0 98 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:04:22 2010 124 7000 104 6 0 ssl_err_ssl3_badversion Fri Feb 5 12:04:29 2010 125 0 104 6 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:04:29 2010 126 70025 105 1 0 ssl_err_ssl3_badversion Fri Feb 5 12:05:45 2010 127 0 105 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:05:45 2010 128 7000 107 2 0 ssl_err_ssl3_badversion Fri Feb 5 12:05:52 2010 129 0 107 2 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:05:52 2010

View historic statistics

View timestamps

Page 31: Optimizing NetScaler for Enterprise Applications

Scenario: Testing reports problems with SSL VIP earlier. What happened?

Citrix Confidential - Do Not Distribute

NSCONMSG – Examples

nsconmsg –K newnslog -s csv=1 –g ssl_err_ssl3_badversion –d current > sslv3.csv

Grep specific counter

Output to csv

Write to file

 Screen clipping taken: 3/24/2010, 1:59 PM

  

Page 32: Optimizing NetScaler for Enterprise Applications

Scenario: Intermittent dropped sessions – what’s going on?

Citrix Confidential - Do Not Distribute

NSCONMSG – Examples

nsconmsg –K newnslog –g tcp_err –d current

reltime:mili second between two records Fri Feb 5 10:55:31 2010 Index rtime totalcount-val delta rate/sec symbol-name&device-no 1256 0 9 1 0 tcp_err_rst_pass_pnd_data 1257 0 26 1 0 tcp_err_rst_pass_pnd_get 1258 0 60 4 0 tcp_err_rst_pass_srvr 1259 0 140 1 0 tcp_err_oo_range_ack 1260 0 112 1 0 tcp_err_srvr_retransmit 1261 0 448 18 2 tcp_err_clnt_retransmit 1262 0 556 19 2 tcp_err_full_retransmit 1263 0 785 22 3 tcp_err_clnt_out_of_order 1264 0 102 33 4 tcp_err_srvr_out_of_order 1265 0 83 1 0 tcp_err_orphan_ack_keepalive 1266 0 772 21 3 tcp_err_hole_client 1267 0 4 1 0 tcp_err_hole_server 1268 0 776 22 3 tcp_err_hole_detected

Page 33: Optimizing NetScaler for Enterprise Applications

Scenario: Intermittent dropped sessions – what’s going on?

Citrix Confidential - Do Not Distribute

NSCONMSG – Examples

nsconmsg –K newnslog –g tcp_err_ooo –d current

reltime:mili second between two records Fri Feb 5 13:43:54 2010 Index rtime totalcount-val delta rate/sec symbol-name&device-no 0 11340678 7 7 1 tcp_err_ooo_maxpkt 1 2485190 10 3 0 tcp_err_ooo_maxpkt 2 7001 12 2 0 tcp_err_ooo_maxpkt 3 1470172 13 1 0 tcp_err_ooo_maxpkt 4 252023 15 2 0 tcp_err_ooo_maxpkt 5 392017 24 9 1 tcp_err_ooo_maxpkt 6 357024 26 2 0 tcp_err_ooo_maxpkt 7 252036 33 7 1 tcp_err_ooo_maxpkt 8 539040 35 2 0 tcp_err_ooo_maxpkt 9 1148108 38 3 0 tcp_err_ooo_maxpkt 10 780611 39 1 0 tcp_err_ooo_maxpkt 11 504035 55 16 2 tcp_err_ooo_maxpkt 12 28000 56 1 0 tcp_err_ooo_maxpkt 13 305818 57 1 0 tcp_err_ooo_maxpkt 14 589541 62 5 0 tcp_err_ooo_maxpkt 15 49021 69 7 0 tcp_err_ooo_maxpkt

Page 34: Optimizing NetScaler for Enterprise Applications

Displaying current memory stats information----------------------------------------------------------------------------------------------------------------------TotalMEM: 2688046946 Allocated: 258642274(9.62%) ActualInUse: 192482290(7.16%) Free: 2429404672

MEMPOOL MaxAllowd CurAlloc ErrLmtFailed ErrAllocFailed ErrFreeFailed----------------------------------------------------------------------------------------------------------------------MEM_CPROXY 134217728 16777216(0.62%) 0 0 0MEM_PAC Dynamic 32768(0.00%) 0 0 0MEM_RESPONDER_CONFIG Dynamic 8256(0.00%) 0 0 0MEM_RW_CONFIG Dynamic 330606(0.01%) 0 0 0MEM_SSL Dynamic 5509248(0.20%) 0 0 0MEM_CACONF Dynamic 0(0.00%) 0 0 0MEM_PANNER Dynamic 0(0.00%) 0 0 0MEM_PANSTR Dynamic 434(0.00%) 0 0 0MEM_PI_RUNTIME Dynamic 0(0.00%) 0 0 0MEM_HINFOBUF Dynamic 0(0.00%) 0 0 0MEM_PIRL Dynamic 0(0.00%) 0 0 0MEM_PATSET Dynamic 177994(0.01%) 0 0 0MEM_ASYNC Dynamic 0(0.00%) 0 0 0MEM_WU_MEM Dynamic 5594104(0.21%) 0 0 0MEM_APPSECURE Dynamic 29886297(1.11%) 0 0 0MEM_PI_CONFIG Dynamic 63280(0.00%) 0 0 0MEM_AUDITLOG 16384000 333772(0.01%) 0 0 0MEM_POLENG 100663296 106000(0.00%) 0 0 0MEM_GSLB 33554432 0(0.00%) 0 0 0MEM_DNS 5242880 0(0.00%) 0 0 0MEM_DCC 10485760 0(0.00%) 0 0 0MEM_TCPBUFFP 0 0(0.00%) 0 0 0MEM_LB_PHYSVC 4796416 801(0.00%) 0 0 0MEM_LB_PHYSERVER 3932160 768(0.00%) 0 0 0MEM_URLMON 15728640 0(0.00%) 0 0 0MEM_IPFRAG 524288 0(0.00%) 0 0 0MEM_SERVMON 24514560 8704(0.00%) 0 0 0MEM_MISC Dynamic 136541842(5.08%) 0 0 0MEM_DEBUG 262144 1216(0.00%) 0 0 0MEM_SNMP 41943040 15808(0.00%) 0 0 0MEM_CONN Dynamic 62949376(2.34%) 0 0 0MEM_LOGGING Dynamic 0(0.00%) 0 0 0MEM_IOH 5242880 0(0.00%) 0 0 0MEM_CSWMEM 16777216 2560(0.00%) 0 0 0MEM_LB_SERVICE 12165120 0(0.00%) 0 0 0MEM_LB_VIP 47448064 10144(0.00%) 0 0 0MEM_LB_SESSION 136314880 0(0.00%) 0 0 0MEM_LB_SERVER 12582912 0(0.00%) 0 0 0MEM_PE 20971520 291080(0.01%) 0 0 0

4MB_PAGE_CONN_POOL_MEMBERS:Name CurAllocd CurFree PgAllocd PgAllocFailed ----------------------------------------------------------------------------------NSB 16380 15867 7 (1.1%) 0PCB 6553 6552 1 (0.2%) 0NATPCB 21845 21845 1 (0.2%) 0B64 65536 65532 1 (0.2%) 0B128 0 0 0 (0.0%) 0B256 0 0 0 (0.0%) 0DNSsmall 0 0 0 (0.0%) 0DNSfull 0 0 0 (0.0%) 0SPCB 0 0 0 (0.0%) 0SSL_SESS 0 0 0 (0.0%) 0

Other_CONN_POOL_MEMBERS:CacheBuf 1(0.0%) 0

4MB_PAGE_MISC_POOL_MEMBERS:Name CurAllocd CurFree PgAllocd PgAllocFailed ----------------------------------------------------------------------------------SINFO 2048 2025 1 (0.2%) 0DEVNAME 174762 174422 1 (0.2%) 0

4MB_PAGE_SSL_POOL_MEMBERS:Name CurAllocd CurFree PgAllocd PgAllocFailed ---------------------------------------------------------------------------------- CVMBUF 1 (0.2%) 0

4MB_PAGE_PANNER_POOL_MEMBERS:Name CurAllocd CurFree PgAllocd PgAllocFailed ----------------------------------------------------------------------------------PAN 0 0 0 (0.0%) 0

4MB_PAGE_CPROXY_POOL_MEMBERS:Name CurAllocd CurFree PgAllocd PgAllocFailed ----------------------------------------------------------------------------------CK1024 4096 4096 1 (0.2%) 0CK2048 2048 2048 1 (0.2%) 0CK4096 1024 1024 1 (0.2%) 0CKPATH 4032 4032 1 (0.2%) 0

Checking utilization and memory use in detail

Citrix Confidential - Do Not Distribute

NSCONMSG – Examples

nsconmsg –K newnslog –d memstats

Page 35: Optimizing NetScaler for Enterprise Applications

Checking for distribution and performance

Citrix Confidential - Do Not Distribute

NSCONMSG – Examples

nsconmsg –K newnslog –s ConLb=3 –d distrconmsg

VIP(1.1.1.1:636:UP:WEIGHTEDRR): Hits(2506) Pers(OFF) PersHits(0:0%) Err(0:0%) Ovrride(0:0%)S(1.1.1.100:636:UP) Hits(835:33%) PHits(0:0%) LbHits(835:100%)S(1.1.1.101:636:UP) Hits(836:33%) PHits(0:0%) LbHits(836:100%)S(1.1.1.102:636:UP) Hits(835:33%) PHits(0:0%) LbHits(835:100%)VIP(2.2.2.2:389:UP:WEIGHTEDRR): Hits(6) Pers(OFF) PersHits(0:0%) Err(0:0%) Ovrride(0:0%)S(2.2.2.100:389:UP) Hits(2:33%) PHits(0:0%) LbHits(2:100%)S(2.2.2.101:389:UP) Hits(2:33%) PHits(0:0%) LbHits(2:100%)S(2.2.2.102:389:UP) Hits(2:33%) PHits(0:0%) LbHits(2:100%)VIP(3.3.3.3:123:UP:WEIGHTEDRR): Hits(180) Pers(SOURCEIP) PersHits(180:100%) Err(0:0%) Ovrride(0:0%)S(3.3.3.100:123:UP) Hits(42:23%) PHits(42:100%) LbHits(0:0%)S(3.3.3.101:123:UP) Hits(49:27%) PHits(49:100%) LbHits(0:0%)S(3.3.3.102:123:UP) Hits(46:25%) PHits(46:100%) LbHits(0:0%)S(3.3.3.103:123:UP) Hits(43:23%) PHits(43:100%) LbHits(0:0%)VIP(4.4.4.4:53:UP:WEIGHTEDRR): Hits(9410) Pers(OFF) PersHits(0:0%) Err(0:0%) Ovrride(0:0%)S(4.4.4.100:53:UP) Hits(4705:50%) PHits(0:0%) LbHits(4705:100%)S(4.4.4.101:53:UP) Hits(4705:50%) PHits(0:0%) LbHits(4705:100%)VIP(127.0.0.2:53:DOWN:WEIGHTEDRR): Hits(0) Pers(OFF) PersHits(0:0%) Err(0:0%) Ovrride(0:0%)-------------------------------------------------------CPU:2.2% MEM:213817642 UP:19.13:41:43 since:Sat Mar 20 01:03:59 2010

Page 36: Optimizing NetScaler for Enterprise Applications

Checking for distribution and performance

Citrix Confidential - Do Not Distribute

NSCONMSG – Examples

nsconmsg –K newnslog –s ConLb=3 –d oldconmsg

current time is Thu Apr 8 14:45:28 2010-------------------------------------------------------NATSession : Free(19644)A(21845)InUse(2201)NATSession: Cur(Tcp[194] Udp[2007] Icmp[0] Other[0])NATSession: Op/s(Tcp[3] Udp[436] Icmp[1] Other[0])Session: A:9187 F:4604 IUse:4583 SEs: SIP:4582 C:0 SSL:0 Svr:1 UserId:0 SIPDIP:0 DIP:0 SO:0SSF: Conn (Srvr 0 Clnt 1) U:0CM: Conn (Srvr 0 Clnt 1) Sessions PCB 0 NATPCB 0Z(SIP[68307], C[0], SSL[0] Server[22] SIPDIP[0] DIP[0] SO[0])Mon: Probes: 24303862, Failed: 3757181

Page 37: Optimizing NetScaler for Enterprise Applications

Checking for distribution and performance

Citrix Confidential - Do Not Distribute

NSCONMSG – Examples

nsconmsg –K newnslog –s ConLb=3 –d oldconmsg

VIP(3.3.3.3:123:UP:WEIGHTEDRR): Hits(6108723, 4/sec) Mbps(0.01) Pers(SOURCEIP) Err(0) LConn_BestIdx: 1024 Pkt(13/sec, 48 bytes) actSvc(4) DefPol(NONE) override(0) Conn: Clt(907, 4/sec, OE[907]) Svr(907)S(3.3.3.100:123:UP) Hits(1513624, 0/sec, P[1512683, 0/sec]) ATr(210:210) Mbps(0.00) BWlmt(0 kbits) RspTime(0.00 ms) Load(0) LConn_Idx: (C:0; V:0,I:1) Other: Pkt(1/sec, 48 bytes) Wt(1) Wt(Reverse Polarity)(10000) Conn: CSvr(210, 0/sec) MCSvr(249) OE(210) E(210) RP(0) SQ(0) Monitor_ping-default_of_serv1-123(10.153.40.27:123) Resp Time : 461 microsS(3.3.3.101:123:UP) Hits(1512236, 1/sec, P[1511295, 1/sec]) ATr(237:237) Mbps(0.00) BWlmt(0 kbits) RspTime(0.00 ms) Load(0) LConn_Idx: (C:0; V:0,I:1) Other: Pkt(4/sec, 48 bytes) Wt(1) Wt(Reverse Polarity)(10000) Conn: CSvr(237, 1/sec) MCSvr(269) OE(237) E(237) RP(0) SQ(0) Monitor_ping-default_of_serv2-123(10.153.40.26:123) Resp Time : 578 microsS(3.3.3.102:123:UP) Hits(1544960, 0/sec, P[1544019, 0/sec]) ATr(243:243) Mbps(0.00) BWlmt(0 kbits) RspTime(0.00 ms) Load(0) LConn_Idx: (C:0; V:0,I:1) Other: Pkt(2/sec, 48 bytes) Wt(1) Wt(Reverse Polarity)(10000) Conn: CSvr(243, 0/sec) MCSvr(237) OE(243) E(243) RP(0) SQ(0) Monitor_ping-default_of_serv3-123(10.153.38.27:123) Resp Time : 553 microsS(3.3.3.103:123:UP) Hits(1537903, 1/sec, P[1536962, 1/sec]) ATr(217:217) Mbps(0.00) BWlmt(0 kbits) RspTime(0.00 ms) Load(0) LConn_Idx: (C:0; V:0,I:1) Other: Pkt(5/sec, 48 bytes) Wt(1) Wt(Reverse Polarity)(10000) Conn: CSvr(217, 1/sec) MCSvr(260) OE(217) E(217) RP(0) SQ(0) Monitor_ping-default_of_serv4-123(10.153.38.26:123) Resp Time : 543 micros

Page 38: Optimizing NetScaler for Enterprise Applications

Checking for distribution and performance

Citrix Confidential - Do Not Distribute

NSCONMSG – Examples

nsconmsg –K newnslog –s Con???=3 –d oldconmsg

ConDebug - DebuggingConLb - Load BalancingConMon - Monitoring ProbesConMEM - Memory ManagementConCSW - Content SwitchingConSSL - SSL OffloadConCMP - CompressionConIC - Integrated Caching

Page 39: Optimizing NetScaler for Enterprise Applications

• Nstrace supports filtering in 9.x

Citrix Confidential - Do Not Distribute

nstrace.sh

http://support.citrix.com/article/ctx121166

nstrace -size 0 -filter "SOURCEIP == 10.1.2.3 && SOURCEPORT == 8080" -link ENABLE

Packet-size limit Filters in standard NS policy format

Automatically capture linkedclient/server connections

Filter on: SOURCEIPSOURCEPORTDESTIPDESTPORTSVCNAMEVSVRNAMESTATE

Booleans supported!

Page 40: Optimizing NetScaler for Enterprise Applications

Citrix Confidential - Do Not Distribute

Wireshark

Just one missing frame…

…can cause big headaches.

Page 41: Optimizing NetScaler for Enterprise Applications

• nstrace files now officially supported in Wireshark!

• Available in latest dev release (not Stable release) – 1.3.4

• Includes ns.pdevno and ns.l_pdevno filtering

Citrix Confidential - Do Not Distribute

Wireshark

Page 42: Optimizing NetScaler for Enterprise Applications

Before you leave…

• Recommended related breakout sessions: • SYN410D – Implementing NetScaler to Optimize Microsoft Exchange hands-on (Wed. 12th @

2PM)

•Continue your learning – visit www.citrix.com/SynergyEDU for more information

• Session surveys are available online at www.citrixsummit.com starting Thursday, May 13• Provide your feedback and pick up your complimentary Starbucks or iTunes giftcard at the

registration desk

• Download presentations starting Friday, May 21, from your My Schedule Tool located in your My Synergy Microsite event account

Page 43: Optimizing NetScaler for Enterprise Applications

Questions? Comments?

Page 44: Optimizing NetScaler for Enterprise Applications

Recommended