Upload
leontyne-durand
View
80
Download
7
Tags:
Embed Size (px)
DESCRIPTION
Optimizing NetScaler for Enterprise Applications. Dave Hawkins, TRM May 11, 2010. Topics. Generic Optimization Features Standard NetScaler Optimization & Configuration AppExpert Templates Specific Application Examples Troubleshooting. NetScaler Optimization Features. - PowerPoint PPT Presentation
Citation preview
Optimizing NetScaler for Enterprise ApplicationsDave Hawkins, TRMMay 11, 2010
• Generic Optimization Features
• Standard NetScaler Optimization & Configuration
• AppExpert Templates
• Specific Application Examples
• Troubleshooting
Citrix Confidential - Do Not Distribute
Topics
NetScaler Optimization Features
• SSL Offload
• Content Compression
• Content Caching
• Connection reuse
• NetScaler Push
• Responder
Citrix Confidential - Do Not Distribute
NetScaler Optimization Features
Citrix Confidential - Do Not Distribute
• Reduce Server Load
• Higher TPS
• Central Certificate Management
• Central Cipher Management
NetScaler Optimization Features – SSL Offload
Citrix Confidential - Do Not Distribute
• Faster response
• Fewer bytes on-wire
• Better response for low-bandwidth clients
• Policy-based rules
NetScaler Optimization Features – Compression
Citrix Confidential - Do Not Distribute
• Reduce server load
• Faster response
• Policy-based controls
NetScaler Optimization Features – Caching
Citrix Confidential - Do Not Distribute
• Reduce server load
• Faster server response
NetScaler Optimization Features – Connection Reuse
Citrix Confidential - Do Not Distribute
• Web 1.0: Request-Response model
NetScaler Optimization Features – NetScaler Push
RequestRequest
ResponseResponse
• Web 2.0: Request-Response-Response model
• Requires long-lived sessions with dynamic updatesUpdateUpdate
UpdateUpdate
ResponseResponseUpdateUpdate
Citrix Confidential - Do Not Distribute
• Alleviate long-lived TCP connections between clients & servers
• Push single update to multiple clients
• *MPP REST based
NetScaler Optimization Features – NetScaler Push
RequestRequest
ResponseResponse
ResponseResponse
ResponseResponse
ResponseResponse
ResponseResponse
UpdateUpdate UpdateUpdate
UpdateUpdate
RequestRequest
RequestRequest
RequestRequest
RequestRequest
RequestRequest
ZZZzzzzzz...
Citrix Confidential - Do Not Distribute
• Policy-based configuration
• Reduce server load
• Reset, Redirect, or Respond-With
NetScaler Optimization Features – Responder
RequestRequest
ResponseResponse
GET /etc/db/credit-cards.xml
Standard Configuration and Optimization Performance
“Sharepoint” SSL+HTTP Load Balancing ConfigurationStandard HTTP Load Balancing
Citrix Confidential - Do Not Distribute
SSL Handling on Servers
Doc. Size Baseline
987 kB .doc 16.34s
5.29 MB .doc 89.86s
1.75 MB .pdf 28.62s
5.10 MB .pdf 80.28s
Source: Citrix Application Optimization for MOSS 2007 Performance Assessment - http://support.citrix.com/article/ctx120235
*Times based on 1.5mbps connection with 0.7%packet loss.
SSL-Offload + Compression Load Balancing ConfigurationSSL-Offloaded HTTP Load Balancing
Citrix Confidential - Do Not Distribute
SSL Handling on NetScalerStatic/Dynamic content
compressed
Doc. Size BaselineSSL Offload
+ Compress
987 kB .doc 16.34s 12.29s
5.29 MB .doc 89.86s 56.20s
1.75 MB .pdf 28.62s 18.87s
5.10 MB .pdf 80.28s 70.36s
Servers configured as plaintext HTTP
Source: Citrix Application Optimization for MOSS 2007 Performance Assessment - http://support.citrix.com/article/ctx120235
SSL offload + Compression + Integrated CachingLoad Balancing Configuration
SSL-Offload + Cmp +Caching HTTP Load Balancing
Citrix Confidential - Do Not Distribute
Doc. Size BaselineSSL Offload
+ CompressCaching
987 kB .doc 16.34s 12.29s 8.62s
5.29 MB .doc 89.86s 56.20s 42.78s
1.75 MB .pdf 28.62s 18.87s 14.51s
5.10 MB .pdf 80.28s 70.36s 60s
SSL Handling on NetScaler + Compression with Integrated
Caching
*Cache object max. limit set to 10MB
Source: Citrix Application Optimization for MOSS 2007 Performance Assessment - http://support.citrix.com/article/ctx120235
• Specific doc types require different handling - .aspx, .doc, .css, etc.
• Separate caching policies and content-groups for doc types
• Configured max. object size per content-group:Scripts, Images: 4MBDocuments (.doc, .pdf): 10MB
• Documents have specific expiry times: 360Ksec
Citrix Confidential - Do Not Distribute
Sharepoint Optimizations
HTTP.REQ.METHOD.EQ(GET) && HTTP.REQ.URL.PATH.EQ("/_layouts/download.aspx")
HTTP.REQ.METHOD.CONTAINS("LOCK")
• Compression policy – all requests for items not already compressed (except image services) .gz, .tgz
• Configure servers for “Load Balanced URL”
• Responder module redirect HTTP to SSL
Citrix Confidential - Do Not Distribute
Sharepoint Optimizations
Advanced Optimization
AppExpert
Templates
Citrix Confidential - Do Not Distribute
• Built around standard configuration
• Time-tested for stability
• Performance-tested for maximumbenefit
• Rapid deployment with minimalconfiguration
• Free!
Citrix Confidential - Do Not Distribute
AppExpert Templates
• Detailed deployment guide
• 10 Application Services templates
• Includes compression, caching, responder policies
• Includes caching selectors for parameterized caching• Available at http://community.citrix.com/display/ns/Microsoft+Sharepoint+AppExpert+Template
Citrix Confidential - Do Not Distribute
Example: Sharepoint AppExpert Template
• Use Content-Group settings to optimizefor min/max content size, or overallnumber of hits.
• Use parameterization to optimize cache retrieval or invalidation.
• Prioritize NO_CACHE policies before CACHE policies
• Use multiple Content-Groups to allow for specific cache-clearing
Citrix Confidential - Do Not Distribute
Advanced Optimization: Caching
• Select Optimal compression level (gzip level 5-6 for best size / performance)
Citrix Confidential - Do Not Distribute
Advanced Optimization: Compression
• In end-to-end, use low-level ciphers in NS-to-service communication
• Cipher selection depends on client-needs, and security considerations.
• Can be combined with IC and Compression for maximum impact
Citrix Confidential - Do Not Distribute
Advanced Optimization: SSL Offload
• SACK and Window Scaling
• Nagle’s Algorithm for small packets
• TCP Buffering for slow clients
• PMTUD – Path MTU Discovery
• USIP (Use Source-IP) & DSR when available =~ 50% Network Savings
Citrix Confidential - Do Not Distribute
Advanced Optimization: Network Optimizations
Req
uest
Req
uest
RequestRequest
Response
Response
Advanced Troubleshooting
• Primary tool for detailed analysis
• NetScaler logs all statistics every 7 seconds
• Uses logs from /var/nslog
• Logfiles are gzipped (use zcat)
• Some stats now available via GUI(System > Diagnostics)
Citrix Confidential - Do Not Distribute
NSCONMSG
nsconmsg –K <file> -s <options> -g <grep> -d <operation>(zcat <file.gz> | nsconmsg –K pipe – or gunzip them)
Citrix Confidential - Do Not Distribute
NSCONMSG – General Format
-s options include:
•Start date or time•Maximum values•Rate counts•Add timestamps•Debugging levels•*csv format!
Format:-s option=valueie, -s disptime=1
-d options include:
•Stats – view raw statistics•Memstats – view memory-only stastics•Event – view system events (svc failures)• Auditedcmd – view cmds run on the system•Devcr – view device creation/removal
Example:-d memstats
Scenario: Testing reports problems with SSL VIP earlier. What happened?
Citrix Confidential - Do Not Distribute
NSCONMSG – Examples
nsconmsg –K newnslog –g ssl_err –d stats
Displaying current counter value informationNetScaler V20 Performance DataNetScaler NS9.1: Build 101.5.cl, Date: Jan 19 2010, 07:12:11
reltime:mili second between two records Fri Feb 5 10:31:31 2010Index reltime counter-value symbol-name&device-no 0 0 0 ssl_err_ssl3_badversion 1 0 0 ssl_err_cavium_random_seed_failed 2 0 0 ssl_err_ubsec_card_reset 3 0 0 ssl_err_ssl3_send_server_hello 4 0 0 ssl_err_ssl3_send_server_certificate 5 0 0 ssl_err_ssl3_send_server_key_exchange 6 0 0 ssl_err_ssl3_send_certificate_request 7 0 0 ssl_err_ssl3_send_server_done 8 0 0 ssl_err_ssl3_check_client_hello_A_OR_get_client_cert 9 0 0 ssl_err_ssl3_get_client_certificate 10 0 0 ssl_err_ssl3_get_client_key_exchange_card 11 0 0 ssl_err_ssl3_check_client_hello_B_OR_get_client_keyEx 12 0 0 ssl_err_ssl3_get_client_key_exchange 13 0 0 ssl_err_ssl3_get_change_cipher_spec 14 0 0 ssl_err_ssl3_get_cert_verify 15 0 0 ssl_err_ssl3_get_finished 16 0 0 ssl_err_ssl3_setup_key_block
Current logfile
Grep for ‘ssl_err’
View initial statistics
Scenario: Testing reports problems with SSL VIP earlier. What happened?
Citrix Confidential - Do Not Distribute
NSCONMSG – Examples
nsconmsg –K newnslog –s disptime=1 –g ssl_err_ssl3 –d current
Index rtime totalcount-val delta rate/sec symbol-name&device-no&time 108 0 78 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:01:06 2010 109 14000 11 2 0 ssl_error_cvm_bad_record Fri Feb 5 12:01:20 2010 110 7000 79 1 0 ssl_err_ssl3_badversion Fri Feb 5 12:01:27 2010 111 0 79 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:01:27 2010 112 28000 81 2 0 ssl_err_ssl3_badversion Fri Feb 5 12:01:55 2010 113 0 81 2 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:01:55 2010 114 7000 83 2 0 ssl_err_ssl3_badversion Fri Feb 5 12:02:02 2010 115 0 83 2 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:02:02 2010 116 14000 93 10 1 ssl_err_ssl3_badversion Fri Feb 5 12:02:16 2010 117 0 93 10 1 ssl_err_ssl3_get_client_hello Fri Feb 5 12:02:16 2010 118 7000 96 3 0 ssl_err_ssl3_badversion Fri Feb 5 12:02:23 2010 119 0 96 3 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:02:23 2010 120 112000 97 1 0 ssl_err_ssl3_badversion Fri Feb 5 12:04:15 2010 121 0 97 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:04:15 2010 122 7000 98 1 0 ssl_err_ssl3_badversion Fri Feb 5 12:04:22 2010 123 0 98 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:04:22 2010 124 7000 104 6 0 ssl_err_ssl3_badversion Fri Feb 5 12:04:29 2010 125 0 104 6 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:04:29 2010 126 70025 105 1 0 ssl_err_ssl3_badversion Fri Feb 5 12:05:45 2010 127 0 105 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:05:45 2010 128 7000 107 2 0 ssl_err_ssl3_badversion Fri Feb 5 12:05:52 2010 129 0 107 2 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:05:52 2010
View historic statistics
View timestamps
Scenario: Testing reports problems with SSL VIP earlier. What happened?
Citrix Confidential - Do Not Distribute
NSCONMSG – Examples
nsconmsg –K newnslog -s csv=1 –g ssl_err_ssl3_badversion –d current > sslv3.csv
Grep specific counter
Output to csv
Write to file
Screen clipping taken: 3/24/2010, 1:59 PM
Scenario: Intermittent dropped sessions – what’s going on?
Citrix Confidential - Do Not Distribute
NSCONMSG – Examples
nsconmsg –K newnslog –g tcp_err –d current
reltime:mili second between two records Fri Feb 5 10:55:31 2010 Index rtime totalcount-val delta rate/sec symbol-name&device-no 1256 0 9 1 0 tcp_err_rst_pass_pnd_data 1257 0 26 1 0 tcp_err_rst_pass_pnd_get 1258 0 60 4 0 tcp_err_rst_pass_srvr 1259 0 140 1 0 tcp_err_oo_range_ack 1260 0 112 1 0 tcp_err_srvr_retransmit 1261 0 448 18 2 tcp_err_clnt_retransmit 1262 0 556 19 2 tcp_err_full_retransmit 1263 0 785 22 3 tcp_err_clnt_out_of_order 1264 0 102 33 4 tcp_err_srvr_out_of_order 1265 0 83 1 0 tcp_err_orphan_ack_keepalive 1266 0 772 21 3 tcp_err_hole_client 1267 0 4 1 0 tcp_err_hole_server 1268 0 776 22 3 tcp_err_hole_detected
Scenario: Intermittent dropped sessions – what’s going on?
Citrix Confidential - Do Not Distribute
NSCONMSG – Examples
nsconmsg –K newnslog –g tcp_err_ooo –d current
reltime:mili second between two records Fri Feb 5 13:43:54 2010 Index rtime totalcount-val delta rate/sec symbol-name&device-no 0 11340678 7 7 1 tcp_err_ooo_maxpkt 1 2485190 10 3 0 tcp_err_ooo_maxpkt 2 7001 12 2 0 tcp_err_ooo_maxpkt 3 1470172 13 1 0 tcp_err_ooo_maxpkt 4 252023 15 2 0 tcp_err_ooo_maxpkt 5 392017 24 9 1 tcp_err_ooo_maxpkt 6 357024 26 2 0 tcp_err_ooo_maxpkt 7 252036 33 7 1 tcp_err_ooo_maxpkt 8 539040 35 2 0 tcp_err_ooo_maxpkt 9 1148108 38 3 0 tcp_err_ooo_maxpkt 10 780611 39 1 0 tcp_err_ooo_maxpkt 11 504035 55 16 2 tcp_err_ooo_maxpkt 12 28000 56 1 0 tcp_err_ooo_maxpkt 13 305818 57 1 0 tcp_err_ooo_maxpkt 14 589541 62 5 0 tcp_err_ooo_maxpkt 15 49021 69 7 0 tcp_err_ooo_maxpkt
Displaying current memory stats information----------------------------------------------------------------------------------------------------------------------TotalMEM: 2688046946 Allocated: 258642274(9.62%) ActualInUse: 192482290(7.16%) Free: 2429404672
MEMPOOL MaxAllowd CurAlloc ErrLmtFailed ErrAllocFailed ErrFreeFailed----------------------------------------------------------------------------------------------------------------------MEM_CPROXY 134217728 16777216(0.62%) 0 0 0MEM_PAC Dynamic 32768(0.00%) 0 0 0MEM_RESPONDER_CONFIG Dynamic 8256(0.00%) 0 0 0MEM_RW_CONFIG Dynamic 330606(0.01%) 0 0 0MEM_SSL Dynamic 5509248(0.20%) 0 0 0MEM_CACONF Dynamic 0(0.00%) 0 0 0MEM_PANNER Dynamic 0(0.00%) 0 0 0MEM_PANSTR Dynamic 434(0.00%) 0 0 0MEM_PI_RUNTIME Dynamic 0(0.00%) 0 0 0MEM_HINFOBUF Dynamic 0(0.00%) 0 0 0MEM_PIRL Dynamic 0(0.00%) 0 0 0MEM_PATSET Dynamic 177994(0.01%) 0 0 0MEM_ASYNC Dynamic 0(0.00%) 0 0 0MEM_WU_MEM Dynamic 5594104(0.21%) 0 0 0MEM_APPSECURE Dynamic 29886297(1.11%) 0 0 0MEM_PI_CONFIG Dynamic 63280(0.00%) 0 0 0MEM_AUDITLOG 16384000 333772(0.01%) 0 0 0MEM_POLENG 100663296 106000(0.00%) 0 0 0MEM_GSLB 33554432 0(0.00%) 0 0 0MEM_DNS 5242880 0(0.00%) 0 0 0MEM_DCC 10485760 0(0.00%) 0 0 0MEM_TCPBUFFP 0 0(0.00%) 0 0 0MEM_LB_PHYSVC 4796416 801(0.00%) 0 0 0MEM_LB_PHYSERVER 3932160 768(0.00%) 0 0 0MEM_URLMON 15728640 0(0.00%) 0 0 0MEM_IPFRAG 524288 0(0.00%) 0 0 0MEM_SERVMON 24514560 8704(0.00%) 0 0 0MEM_MISC Dynamic 136541842(5.08%) 0 0 0MEM_DEBUG 262144 1216(0.00%) 0 0 0MEM_SNMP 41943040 15808(0.00%) 0 0 0MEM_CONN Dynamic 62949376(2.34%) 0 0 0MEM_LOGGING Dynamic 0(0.00%) 0 0 0MEM_IOH 5242880 0(0.00%) 0 0 0MEM_CSWMEM 16777216 2560(0.00%) 0 0 0MEM_LB_SERVICE 12165120 0(0.00%) 0 0 0MEM_LB_VIP 47448064 10144(0.00%) 0 0 0MEM_LB_SESSION 136314880 0(0.00%) 0 0 0MEM_LB_SERVER 12582912 0(0.00%) 0 0 0MEM_PE 20971520 291080(0.01%) 0 0 0
4MB_PAGE_CONN_POOL_MEMBERS:Name CurAllocd CurFree PgAllocd PgAllocFailed ----------------------------------------------------------------------------------NSB 16380 15867 7 (1.1%) 0PCB 6553 6552 1 (0.2%) 0NATPCB 21845 21845 1 (0.2%) 0B64 65536 65532 1 (0.2%) 0B128 0 0 0 (0.0%) 0B256 0 0 0 (0.0%) 0DNSsmall 0 0 0 (0.0%) 0DNSfull 0 0 0 (0.0%) 0SPCB 0 0 0 (0.0%) 0SSL_SESS 0 0 0 (0.0%) 0
Other_CONN_POOL_MEMBERS:CacheBuf 1(0.0%) 0
4MB_PAGE_MISC_POOL_MEMBERS:Name CurAllocd CurFree PgAllocd PgAllocFailed ----------------------------------------------------------------------------------SINFO 2048 2025 1 (0.2%) 0DEVNAME 174762 174422 1 (0.2%) 0
4MB_PAGE_SSL_POOL_MEMBERS:Name CurAllocd CurFree PgAllocd PgAllocFailed ---------------------------------------------------------------------------------- CVMBUF 1 (0.2%) 0
4MB_PAGE_PANNER_POOL_MEMBERS:Name CurAllocd CurFree PgAllocd PgAllocFailed ----------------------------------------------------------------------------------PAN 0 0 0 (0.0%) 0
4MB_PAGE_CPROXY_POOL_MEMBERS:Name CurAllocd CurFree PgAllocd PgAllocFailed ----------------------------------------------------------------------------------CK1024 4096 4096 1 (0.2%) 0CK2048 2048 2048 1 (0.2%) 0CK4096 1024 1024 1 (0.2%) 0CKPATH 4032 4032 1 (0.2%) 0
Checking utilization and memory use in detail
Citrix Confidential - Do Not Distribute
NSCONMSG – Examples
nsconmsg –K newnslog –d memstats
Checking for distribution and performance
Citrix Confidential - Do Not Distribute
NSCONMSG – Examples
nsconmsg –K newnslog –s ConLb=3 –d distrconmsg
VIP(1.1.1.1:636:UP:WEIGHTEDRR): Hits(2506) Pers(OFF) PersHits(0:0%) Err(0:0%) Ovrride(0:0%)S(1.1.1.100:636:UP) Hits(835:33%) PHits(0:0%) LbHits(835:100%)S(1.1.1.101:636:UP) Hits(836:33%) PHits(0:0%) LbHits(836:100%)S(1.1.1.102:636:UP) Hits(835:33%) PHits(0:0%) LbHits(835:100%)VIP(2.2.2.2:389:UP:WEIGHTEDRR): Hits(6) Pers(OFF) PersHits(0:0%) Err(0:0%) Ovrride(0:0%)S(2.2.2.100:389:UP) Hits(2:33%) PHits(0:0%) LbHits(2:100%)S(2.2.2.101:389:UP) Hits(2:33%) PHits(0:0%) LbHits(2:100%)S(2.2.2.102:389:UP) Hits(2:33%) PHits(0:0%) LbHits(2:100%)VIP(3.3.3.3:123:UP:WEIGHTEDRR): Hits(180) Pers(SOURCEIP) PersHits(180:100%) Err(0:0%) Ovrride(0:0%)S(3.3.3.100:123:UP) Hits(42:23%) PHits(42:100%) LbHits(0:0%)S(3.3.3.101:123:UP) Hits(49:27%) PHits(49:100%) LbHits(0:0%)S(3.3.3.102:123:UP) Hits(46:25%) PHits(46:100%) LbHits(0:0%)S(3.3.3.103:123:UP) Hits(43:23%) PHits(43:100%) LbHits(0:0%)VIP(4.4.4.4:53:UP:WEIGHTEDRR): Hits(9410) Pers(OFF) PersHits(0:0%) Err(0:0%) Ovrride(0:0%)S(4.4.4.100:53:UP) Hits(4705:50%) PHits(0:0%) LbHits(4705:100%)S(4.4.4.101:53:UP) Hits(4705:50%) PHits(0:0%) LbHits(4705:100%)VIP(127.0.0.2:53:DOWN:WEIGHTEDRR): Hits(0) Pers(OFF) PersHits(0:0%) Err(0:0%) Ovrride(0:0%)-------------------------------------------------------CPU:2.2% MEM:213817642 UP:19.13:41:43 since:Sat Mar 20 01:03:59 2010
Checking for distribution and performance
Citrix Confidential - Do Not Distribute
NSCONMSG – Examples
nsconmsg –K newnslog –s ConLb=3 –d oldconmsg
current time is Thu Apr 8 14:45:28 2010-------------------------------------------------------NATSession : Free(19644)A(21845)InUse(2201)NATSession: Cur(Tcp[194] Udp[2007] Icmp[0] Other[0])NATSession: Op/s(Tcp[3] Udp[436] Icmp[1] Other[0])Session: A:9187 F:4604 IUse:4583 SEs: SIP:4582 C:0 SSL:0 Svr:1 UserId:0 SIPDIP:0 DIP:0 SO:0SSF: Conn (Srvr 0 Clnt 1) U:0CM: Conn (Srvr 0 Clnt 1) Sessions PCB 0 NATPCB 0Z(SIP[68307], C[0], SSL[0] Server[22] SIPDIP[0] DIP[0] SO[0])Mon: Probes: 24303862, Failed: 3757181
Checking for distribution and performance
Citrix Confidential - Do Not Distribute
NSCONMSG – Examples
nsconmsg –K newnslog –s ConLb=3 –d oldconmsg
VIP(3.3.3.3:123:UP:WEIGHTEDRR): Hits(6108723, 4/sec) Mbps(0.01) Pers(SOURCEIP) Err(0) LConn_BestIdx: 1024 Pkt(13/sec, 48 bytes) actSvc(4) DefPol(NONE) override(0) Conn: Clt(907, 4/sec, OE[907]) Svr(907)S(3.3.3.100:123:UP) Hits(1513624, 0/sec, P[1512683, 0/sec]) ATr(210:210) Mbps(0.00) BWlmt(0 kbits) RspTime(0.00 ms) Load(0) LConn_Idx: (C:0; V:0,I:1) Other: Pkt(1/sec, 48 bytes) Wt(1) Wt(Reverse Polarity)(10000) Conn: CSvr(210, 0/sec) MCSvr(249) OE(210) E(210) RP(0) SQ(0) Monitor_ping-default_of_serv1-123(10.153.40.27:123) Resp Time : 461 microsS(3.3.3.101:123:UP) Hits(1512236, 1/sec, P[1511295, 1/sec]) ATr(237:237) Mbps(0.00) BWlmt(0 kbits) RspTime(0.00 ms) Load(0) LConn_Idx: (C:0; V:0,I:1) Other: Pkt(4/sec, 48 bytes) Wt(1) Wt(Reverse Polarity)(10000) Conn: CSvr(237, 1/sec) MCSvr(269) OE(237) E(237) RP(0) SQ(0) Monitor_ping-default_of_serv2-123(10.153.40.26:123) Resp Time : 578 microsS(3.3.3.102:123:UP) Hits(1544960, 0/sec, P[1544019, 0/sec]) ATr(243:243) Mbps(0.00) BWlmt(0 kbits) RspTime(0.00 ms) Load(0) LConn_Idx: (C:0; V:0,I:1) Other: Pkt(2/sec, 48 bytes) Wt(1) Wt(Reverse Polarity)(10000) Conn: CSvr(243, 0/sec) MCSvr(237) OE(243) E(243) RP(0) SQ(0) Monitor_ping-default_of_serv3-123(10.153.38.27:123) Resp Time : 553 microsS(3.3.3.103:123:UP) Hits(1537903, 1/sec, P[1536962, 1/sec]) ATr(217:217) Mbps(0.00) BWlmt(0 kbits) RspTime(0.00 ms) Load(0) LConn_Idx: (C:0; V:0,I:1) Other: Pkt(5/sec, 48 bytes) Wt(1) Wt(Reverse Polarity)(10000) Conn: CSvr(217, 1/sec) MCSvr(260) OE(217) E(217) RP(0) SQ(0) Monitor_ping-default_of_serv4-123(10.153.38.26:123) Resp Time : 543 micros
Checking for distribution and performance
Citrix Confidential - Do Not Distribute
NSCONMSG – Examples
nsconmsg –K newnslog –s Con???=3 –d oldconmsg
ConDebug - DebuggingConLb - Load BalancingConMon - Monitoring ProbesConMEM - Memory ManagementConCSW - Content SwitchingConSSL - SSL OffloadConCMP - CompressionConIC - Integrated Caching
• Nstrace supports filtering in 9.x
Citrix Confidential - Do Not Distribute
nstrace.sh
http://support.citrix.com/article/ctx121166
nstrace -size 0 -filter "SOURCEIP == 10.1.2.3 && SOURCEPORT == 8080" -link ENABLE
Packet-size limit Filters in standard NS policy format
Automatically capture linkedclient/server connections
Filter on: SOURCEIPSOURCEPORTDESTIPDESTPORTSVCNAMEVSVRNAMESTATE
Booleans supported!
Citrix Confidential - Do Not Distribute
Wireshark
Just one missing frame…
…can cause big headaches.
• nstrace files now officially supported in Wireshark!
• Available in latest dev release (not Stable release) – 1.3.4
• Includes ns.pdevno and ns.l_pdevno filtering
Citrix Confidential - Do Not Distribute
Wireshark
Before you leave…
• Recommended related breakout sessions: • SYN410D – Implementing NetScaler to Optimize Microsoft Exchange hands-on (Wed. 12th @
2PM)
•Continue your learning – visit www.citrix.com/SynergyEDU for more information
• Session surveys are available online at www.citrixsummit.com starting Thursday, May 13• Provide your feedback and pick up your complimentary Starbucks or iTunes giftcard at the
registration desk
• Download presentations starting Friday, May 21, from your My Schedule Tool located in your My Synergy Microsite event account
Questions? Comments?