NetScaler Insight Center Deployment and Sizing Guide

Deployment & Sizing Guide
NetScaler Insight Center
Deployment & Sizing Guide
citrix.com
Deployment & Sizing Guide
NetScaler Insight Center
Table of Contents
Introduction3
Prerequisites 4
Licensing4
Supported Software
4
Supported Receiver Versions for HDX Insight
5
Ports Settings
5
Insight Installation Resource Allocation
5
Browser Recommendation
5
XA/XD 6.5 Prerequisites for HDX Insight
5
Prerequisites for NetScaler
6
Sizing Guidelines
6
HDX Insight
6
WEB Insight
7
Installation7
Importing Insight VM – XenServer 7
Importing Insight VM – ESX
9
Importing Insight VM – Hyper-V
13
Initial Configuration
17
Web Insight - Configuring the Insight for HTTP Analytics
18
HDX Insight - Configuring Insight for ICA Analytics
19
Configuring HDX Insight for Single hop NetScaler Gateway Deployment
20
Configuring HDX Insight For Double Hop NetScaler Gateway Deployment 21
Configuring HDX Insight in Transparent Mode
22
Configuring HDX Insight for Director Setup
24
Conclusion25
Appendix (Troubleshooting Tips)
25
I Cannot See Any Records On The NetScaler Insight Center Dashboard
25
ICA RTT Value Display Is Zero Or Na
26
An Error Message Is Displayed When I Add The NetScaler Appliance To The Netscaler Insight 27
citrix.com
2
Deployment & Sizing Guide
NetScaler Insight Center
In today’s Application centric market the visibility challenges are
being realized and its significance is growing as the data is
increasing day by day. Most of the enterprise Apps has a common &
basic requirement of being load balanced and providing optimized
data delivery, thus ADCs like NetScaler become the central node
through which all application data traverses. This is where
technology like AppFlow comes in picture. AppFlow is the standard
for fetching the visibility information through NetScaler and
forwarding to NetScaler Insight Center. NetScaler Insight Center
collects the AppFlow records, analyzes them and brings precise
analytical reports for administrator’s consumption.
It is a high performance collector that provides end-to-end user experience visibility. It provides
visibility across Web traffic (Web Insight) and HDX™ traffic (HDX Insight™). It collects ICA®/HTTP
AppFlow® records generated by NetScaler® ADC appliances and populate analytical graphs over
Layer 3 to Layer 7 statistics. Giving in-depth analysis over real time and historical data across last
5min (real time), last one hour, one day, one week and one month as historic data.
It gives a bird’s eye view over all the HDX Users, Applications, Desktops, Gateway as well as Web
traffic Client, Server, Application level information. It showcases the SSL VPN license usage over the
time. Based on the use cases the administrator can drill down and identify the pain points from any
of these dashboards giving them a perfect visibility and troubleshooting solution.
This deployment guide aims to provide administrators a smooth installation of NetScaler Insight
Center™ and to enable them with all the information they need to know to get started with the
installation process.
citrix.com
3
Deployment & Sizing Guide
NetScaler Insight Center
Prequisites
NetScaler Insight Center comes in virtual machine format supported over XenServer®, ESX and
Hyper-V. Before getting started, you should consider and know certain aspect to have a successful
deployment. This section will throw some light on following:
•Licensing: This will explain what levels of reports are available across Web and HDX Insight based
on NetScaler version and Licenses.
•Supported Software: Which NetScaler, XenApp® & XenDesktop® versions are supported on Insight.
•Supported Receiver versions for HDX Insight: Which receiver versions are supported to be able
to see reports on HDX Insight.
•Port Settings: Ports to be opened for complete communication between NetScaler & Insight.
• Insight Installation Resource Allocation: Summary over resources to allocate for Insight Installation.
•Browser Recommendations: Browser to use for accessing Insight GUI.
•XA/XD Recommendation for HDX Insight: Few XA/XD 6.5 deployment based recommendations
•Prerequisites for NetScaler: Points to know about NetScaler before starting NetScaler
configuration on Insight.
Licensing
Web Insight
NetScaler License/ Version
9.3
10.0
10.1
10.5
Standard
Limited
Limited
All Metrics
All Metrics
Enterprise
Limited
Limited
All Metrics
All Metrics
Platinum
Limited
All Metrics
All Metrics
All Metrics
Here, Limited implies following metrics will not be available: Response Time, Client Network Latency, Server Network Latency, Server
processing Time, Load Time & Render Time.
HDX Insight
License/Duration
5 minutes
1 Hour
1 Day
1 Week
1 Month
Standard
X
X
X
X
X
Enterprise
Yes
Yes
X
X
X
Platinum
Yes
Yes
Yes
Yes
Yes
Here, X stands for no reports available.
Supported Software (HDX Insight)
Product
Versions
NetScaler
10.1 build 120.13 and later
XenApp
6.5, build 6682 with HRP01 and later
XenDesktop
5.6, build 56060
7.0, build 3018
7.1, 7.5, 7.6
citrix.com
4
Deployment & Sizing Guide
NetScaler Insight Center
Supported Receiver Versions For HDX Insight
Operating system
Receiver version
Windows 7
3.4 Enterprise Edition
4.0 Standard Edition
Windows 8
3.4 Enterprise Edition
4.0 Standard Edition
Mac
11.8, build 238301 and above
Windows 8/DR
Win 8/RT, version 1.4
* Windows 8/DR (Win8/RT, version 1.4) is not supported for now.
Ports Settings
Component
NetScaler Insight Center
Type
Port
Details
TCP
80/443
For NITRO communication from NetScaler Insight Center to NetScaler.
TCP
22
For SSH communication from NetScaler Insight Center to NetScaler.
UDP
4739
For AppFlow communication from NetScaler to NetScaler Insight
Center.
ICMP
No reserved port
To detect the network reachability from NetScaler Insight Center
to NetScaler
Insight Installation Resource Allocation
Component
Requirement
RAM
3 GB or more
Virtual CPU
2 or more
Storage space
120 GB ( Don’t allocate more than 120 GB as Insight image can’t extend more than 120 GB today)
Virtual Network Interfaces
1
Throughput
1 Gbps or 100 Mbps
Disk I/O
>200MBps & SSD (preferably)
Browser Recommendation
• Internet Explorer—IE 9, and later versions
• Google Chrome—Chrome 19, and later versions
• Safari—Safari 5.1.1, and later versions
• Mozilla Firefox—Mozilla Firefox 3.6.25, and later versions
XA/XD 6.5 Prerequisites For HDX Insight
• ICA RTT –
- On a XenApp or XenDesktop server running version 6.5, make sure that the ICA round trip
calculations for Idle Connections option is enabled. If the option is not enabled, enable it and
execute the gpupdate command.
• EUEM –
- The EUEM service must be running on the server as well as VDI Desktops.
citrix.com
5
Deployment & Sizing Guide
NetScaler Insight Center
Prerequisites For NetScaler
• NSIP- Add NS using NSIP not SNIP.
• NetScaler State - The state of NetScaler has to be UP before adding to Insight.
• nCore - Only nCore NetScaler appliances.
• Standalone NetScaler Gateway - You cannot add & get reports over Standalone NetScaler
Gateway™ appliance on Insight.
• HA - For NetScaler HA deployment, add both NetScaler appliances on Insight to get report
across both the nodes.
• Cluster - You can’t monitor NetScaler Cluster deployment today on Insight.
• HTTP/HTTPS - Make sure that both the NetScaler appliance and the NetScaler Insight Center
appliance have either HTTP access or HTTPS access enabled.
• NS User - The user added while adding NetScaler on Insight should have write level access
to NetScaler.
• NTP - If you want to use NTP server time on the NetScaler Insight Center, make sure that you
configure NTP before enabling AppFlow on the virtual servers.
• Set the ICA session time out value on Insight.
• HDX Insight - Double Hop & session reliability is supported from NetScaler Release 10.5 Build
54.9 onwards.
Sizing Guidelines
HDX Insight
Sizing Recommendation for Insight 10.5 (SSD)
Below recommendations are for Insight working with SSD disk storage mechanisms (DiskIO >
200MBps)
RAM
vCPU
Unique Users
Concurrent
Sessions
Insight
Storage
Throughput
on Insight
6
4
25K
50K
120G
7Mbps
Sizing Recommendation for 10.5 (HDD)
RAM
vCPU
Unique Users
Concurrent
Sessions
Insight
Storage
Throughput
on Insight
6
4
5K
10K
120G
5Mbps
8
6
10K
20K
120G
12Mbps
Sizing Recommendation for 10.1 (HDD)
RAM
vCPU
Unique Users
Concurrent
Sessions
Insight Storage
3
2
1000
2000
120G
6
4
3000
6000
120G
citrix.com
6
Deployment & Sizing Guide
NetScaler Insight Center
Web Insight
Sizing Recommendation for Insight 10.5 and over (SSD)
Corresponding
HTTPs
Req/Sec on throughput on
Insight
NetScaler
Insight RAM
Insight vCPU
Insight
Storage
DISK I/O
3000
12
8
120G
>200Mbps
20Mbps
Installation
To get started with the installation process, first foremost step is to have the right image
downloaded on your system. You can download the latest image from the given link:
Download Link:
https://www.citrix.com/downloads/netscaler-adc/components/netscaler-insight-center-105.html
Importing Insight VM – Xenserver
Prerequisites for Insight XenServer Install
• XenServer version 5.6 or later
•XenCenter® to install NetScaler Insight Center on XenServer.
• Time Zone
- Verify that correct date, time, and time zone is configured on XenServer before NetScaler
Insight Center is installed.
• Insight XenServer VM image.
Screenshots
Description
Import the Insight Xenserver
Image
citrix.com
7
Deployment & Sizing Guide
NetScaler Insight Center
Browse and select the
downloaded image.
Select the right location to
import the VM.
Select the storage
repository.
citrix.com
8
Deployment & Sizing Guide
NetScaler Insight Center
After the previous selection,
you will be prompted with
this window.
Select an accessible
interface and you are done
with the importing process.
Once the image is imported
and installed, go to the
console and configure the IP
address configuration as
prompted.
Importing Insight Vm – Esx
Prerequisites for Insight ESX Install
• VMware ESX version 4.1 or later.
• VMware Client on a management workstation.
• VMware OVF Tool (required for VMware ESX version 4.1) on a management workstation.
• NetScaler Insight Center ESX VM image.
citrix.com
9
Deployment & Sizing Guide
Screenshots
NetScaler Insight Center
Description
You can get the Vsphere
Client from an existing
VMWare ESX or ESXi
installation or by
downloading from internet.
Start the VI Client and log
into VMWare Server.For
default server installations
you must add the “:8333”
port definition.
From the file menu click on
Deploy OVF Template.
On the source, select import
from file, click Browse and
navigate to where the
extracted NSVPX-ESX-10.1X.X_nc.zip files are available.
citrix.com
10
Deployment & Sizing Guide
NetScaler Insight Center
On the OVF Template
Details page click Next
Type in the desired name for
the Insight VM and click next
Specify the Disk Format.
Thick provisioned
(Recommended).
citrix.com
11
Deployment & Sizing Guide
NetScaler Insight Center
Map the virtual network
adapters to a preconfigured network.
On the Ready to Complete
page click Finish.
The importing should
complete within a few
minutes.
Once completed
successfully click Close.
citrix.com
12
Deployment & Sizing Guide
NetScaler Insight Center
Once the image is imported
and installed, go to the
console and configure the IP
address as prompted.
Importing Insight Vm – Hyper-V
Prerequisites for Insight Hyper-V Install
• Hyper-V version 6.2.x or later.
• Hyper-V Manager on a management workstation.
• Insight Hyper-V VM image.
• Unzip the downloaded hyper-v install.
Screenshots
Description
Go to Action >> Import
Virtual Machine
citrix.com
13
Deployment & Sizing Guide
NetScaler Insight Center
Click Next on the
introductory screen
Select the hyper-v install
Select the Import mode as
per your requirement.
Please note that exported
files can be reused to clone
machines only using “Copy
The virtual machine (create
a new unique ID)” option.
We recommend to select
this option amongst the
three and click next.
citrix.com
14
Deployment & Sizing Guide
NetScaler Insight Center
Change the location for VM
files if need be.
Select the folder path to store
Virtual machine Hard disk.
This is your storage location.
Click Finish and you are 90%
done with the installation
process.
citrix.com
15
Deployment & Sizing Guide
NetScaler Insight Center
Right click on the newly
imported Insight VM and
select start.
Right click on Insight VM,
select “Settings >> VM-Bus
Network Adapter”, select the
right virtual switch, click
“Apply” and “Ok”.
The Hyper-V Virtual Switch is
a software-based layer-2
network switch that is
available in Hyper-V
Manager when you install
the Hyper-V server role. The
switch includes
programmatically managed
and extensible capabilities
to connect virtual machines
to both virtual networks and
the physical network. All the
reasons to select the right
virtual switch!
citrix.com
16
Deployment & Sizing Guide
NetScaler Insight Center
Now the final step is to
double click the bottom left
black square and access the
console to start with Insight
IP address configuration.
Initial Configuration
Screenshots
Description
Access Insight with the
configured IP address over a
supported browser.
Enter the default credentials
as nsroot/nsroot.
Click on “Get Started”
citrix.com
17
Deployment & Sizing Guide
NetScaler Insight Center
Enter a valid “NetScaler IP
address” and its credentials.
This NetScaler account should
have read & write level access.
Web Insight - Configuring The Insight For Http Analytics
Based on the deployment type, Web Insight reports can be enabled over CS or LB vserver. Once
decided, next step is to enable Appflow on the selected vserver with the right expression. This
expression defines a filter to perform Appflow forwarding for a set of traffic.
Enabling Appflow forwarding for Web Insight is quite straight-forward. Here is how you can do that.
Screenshots
Description
Select the desired NetScaler
from the inventory dashboard
to see these details.
Right click on vserver you
want to get visibility on and
click Enable Appflow.
citrix.com
18
Deployment & Sizing Guide
NetScaler Insight Center
Here “Expression” defines
the type of traffic you want
the visibility for.
This Expression will define a
filter for NetScaler to send
Appflow records for only
that type of traffic.
Select the right expression
that defines your requirement.
For instance, select “HTTP.
REQ.METHOD.EQ(GET)” if you
want to assess the GET
requests only.
Enable “HTML Injection” for
getting L7 metrics line Load
Time, Render Time and
Response Time, Client
Network Latency, Server
Network Latency, Server
Processing Time.
Once done, you will see an
“Enabled” text written besides
the vserver selected earlier.
HDX Insight - Configuring Insight For Ica Analytics
HDX Insight Reports are available over four deployment types. First is Single Hop NetScaler
Gateway deployment. For this deployment the administrator just needs to enable Appflow
forwarding over the SSLVPN vserver which is providing access to the remote users. Second, HDX
Insight reports over NetScaler Gateway double hop deployment. In this scenario, the administrator
will need to enable Appflow forwarding across both the nodes.
Third, Transparent mode should be deployed when the administrator wants visibility over internal
users also. For this deployment, appflow forwarding needs to be enabled at global level.
citrix.com
19
Deployment & Sizing Guide
NetScaler Insight Center
Fourth, the administrator can get these reports under the console of Director also across any of the
first three deployments.
The rest of the section will provide configuration details over all four types of deployment.
Configuring HDX Insight For Single Hop NetScaler Gateway Deployment
citrix.com
20
Deployment & Sizing Guide
NetScaler Insight Center
Screenshots
Description
Select the right NetScaler
from the inventory dashboard
and select “VPN” from the
Application List drop down.
Right click on the VPN vserver
and select Enable Appflow.
Select “True” as the
expression and click “OK”.
This signifies that you want to
assess all the traffic
intercepted by the selected
VPN vserver.
Configuring HDX Insight For Double Hop NetScaler Gateway Deployment
Users can get HDX Insight reports for NetScaler Gateway in Double Hop deployment from
NetScaler Release 10.5 Build 54.9 onwards. Following is the way export option needs to be
enabled across the nodes.
• Enable ICA as the export option on NetScaler Gateway 1.
• Enable TCP as the export option on NetScaler Gateway 2.
citrix.com
21
Deployment & Sizing Guide
Screenshots
NetScaler Insight Center
Description
Select the right NetScaler
from the inventory dashboard
and select “VPN” from the
Application List drop down.
Right click on the VPN vserver
and select Enable Appflow.
Select “True” as the
expression and click “OK”.
Select ICA for NetScaler
Gateway 1 & TCP for
NetScaler Gateway 2. The
device reference is with
respect to the double hop
diagram mentioned in the
beginning of this section.
Configuring HDX Insight In Transparent Mode
HDX Insight reports can’t be enabled from Insight for Transparent mode. These configurations
need to be done only through NetScaler.
citrix.com
22
Deployment & Sizing Guide
NetScaler Insight Center
1.NetScaler Configuration
• Log on to the NetScaler appliance.
• Specify the ICA ports at which the NetScaler appliance listens for traffic.
set ns param --icaPorts <port>...
Example: set ns param -icaPorts 2598 1494.
Note: You can specify up to 10 ports with this command.
• Add NetScaler Insight Center as an appflow collector on the NetScaler appliance.
add appflow collector <name> -IPAddress <ip_addr>.
Example: add appflow collector MyInsight -IPAddress 192.168.1.101.
Note: A NetScaler appliance supports a maximum four Appflow collectors. If there are already
four Appflow collectors configured, you cannot add another AppFlow collector (in this case,
NetScaler Insight Center) to the NetScaler appliance. Delete an existing Appflow collector to add
a new collector. To view the appflow collectors configured on the NetScaler appliance, use the
show appflow collector command.
• Create an appflow action and associate the collector with the action.
add appflow action <name> -collectors <string> ...
Example: add appflow action act -collectors MyInsight.
• Create an appflow policy to specify the rule for generating the traffic.
add appflow policy <policyname> <rule> <action>.
Example: add appflow policy pol true act.
• Bind the appflow policy to a global bind point.
bind appflow global <policyname> <priority> -type <type>.
Example: bind appflow global pol 1 -type ICA_REQ_DEFAULT.
Note: The value of type should be ICA_REQ_OVERRIDE or ICA_REQ_DEFAULT in order
to apply to ICA traffic.
• Set the value of the flowRecordInterval parameter for Appflow to 60 seconds.
set appflow param -flowRecordInterval 60.
Example: set appflow param -flowRecordInterval 60.
• Save the configuration.
save ns config.
2. Client configuration
• route add <ip_XA_server> mask 255.255.255.255 <NSIP>.
• route print.
• tracert <ip_XA_server>.
citrix.com
23
Deployment & Sizing Guide
NetScaler Insight Center
Configuring HDX Insight For Director Setup
HDX Insight on Director is represented as “Network”. All the relevant HDX Insight reports have
been integrated with the Director solution.
NetScaler Insight Center must be installed on one of the hypervisors and configured in Director to
enable reports under “Network”. Below are the part of the configuration done on Director setup. Before
moving to this step, ensure Insight Center VM is installed, able to collect traffic and show reports.
1. On the server where Director is installed, locate the DirectorConfig command line tool in
C:\inetpub\wwwroot\Director\tools\DirectorConfig.exe, and run it with parameter
/confignetscaler in command line prompt.
2. When prompted, configure the NetScaler Insight Center machine name (FQDN or IP address),
username, password, and HTTP or HTTPS connection type.
3. To verify the changes, log off and log back on.
citrix.com
24
Deployment & Sizing Guide
NetScaler Insight Center
For more details on this refer to following HDX Insight & Director reference architecture guide:
https://support.citrix.com/servlet/KbServlet/download/35767-102-706176/Reference%20
Architecture%20-%20Dir%20and%20ES%20-%20final.pdf
Conclusion
NetScaler Insight Center deployment and configuration process has been aimed to keep it as
simple as possible and provide a smooth deployment experience. Prerequisites & sizing guidelines
will ensure even smoother process and should be considered before installation & configuration.
Once the NetScaler Insight Center setup is complete and ready, you will be exposed to a complete
new world of visibility, trends and insights.
Appendix (Troubleshooting Tips)
I Cannot See Any Records On The NetScaler Insight Center Dashboard
• UDP Port –
- Is UDP port 4739 on the NetScaler Insight Center virtual appliance reachable from NetScaler
appliance?
• Traffic on VPN vserver –
- On the NetScaler appliance, is traffic flowing through the virtual server for which data
collection was enabled in NetScaler Insight Center?
- Hit counts - Verify that the hits counter is increasing on the AppFlow policy, by running the
following command from the NetScaler command line interface:
- sh appflow policy <policyname>
• Right VPN Vserver - Ensure the appflow is enabled on right VPN vserver
• UDP port - Is UDP port 4739 on the NetScaler Insight Center virtual appliance reachable from
NetScaler appliance?
• NTP Sync - Make sure that the times set for the NetScaler appliance and NetScaler Insight Center
are correct and in sync.
• Skip flow issue
- nsconmsg -g hdx_skip -d stats.
- Check XA/XD and receiver version.
citrix.com
25
Deployment & Sizing Guide
NetScaler Insight Center
ICA RTT Value Display Is Zero Or Na
XA with WI
• RDP to XA. From the Citrix AppCenter, navigate to Citrix Resources > XenApp > Select Farm >
Policies.
• On the Computer > Settings tab, go to ICA > End User Monitoring and make sure that the
following configurations are enabled:
- ICA Round Trip Calculation.
- ICA Round Trip Calculation Interval.
- ICA Round Trip Calculation for Idle Connections.
• Verify the configurations.
XA with Storefront
• RDP to XA
• Citrix Studio > Policy > Settings. Make sure that the following configurations are enabled.
- ICA Round Trip Calculation.
- ICA Round Trip Calculation Interval.
- ICA Round Trip Calculation for Idle Connections.
EUEM Service
• EUEM Service - Make sure that the services for these configurations are set to Automatic.
- Open the command prompt from your Windows machine.
- Type services.msc and press Enter.
- In the Services dialog box, make sure that Citrix End User Experience.
- Monitoring is listed and the Startup Type is set to Automatic.
• Virtual Desktop –
- If you are using a virtual desktop application, make sure that the Startup Type is set to
Automatic. This has to be done on the master image.
• Open the command prompt from your Windows machine.
• Type services.msc and press Enter.
• In the Services dialog box, make sure that Citrix End User Experience Monitoring is listed and
the Startup Type is set to Automatic.
• Use Latest XenApp 6.5.
• FlowRecordInterval
- Make sure that the value of flowRecordInterval parameter on the NetScaler appliance is set to
60 seconds. To verify, run the following command on the NetScaler appliance:
• Show appflow param.
- Confirm by checking if the following output parameter is set to 60:
• IPFIX flow record export interval: 60 seconds.
- If the value is not 60, then set the value by running the following command:
• Set appflow param -flowRecordInterval 60.
citrix.com
26
Deployment & Sizing Guide
NetScaler Insight Center
An Error Message Is Displayed When I Add The NetScaler Appliance To The NetScaler Insight
Center Inventory.
Make sure that the GUI is accessible, by verifying that port is open for communication. To do so, run
the following command from the command line interface:
• show ns ip <ipaddress>
• Example:
- show ns ip 10.102.60.31
- IP: 10.102.60.31
Netmask: 255.255.255.128
Type: NetScaler IP
...
...
...
gui: Enabled
...
...
...
Corporate Headquarters
Fort Lauderdale, FL, USA
India Development Center
Bangalore, India
Latin America Headquarters
Coral Gables, FL, USA
Silicon Valley Headquarters
Santa Clara, CA, USA
Online Division Headquarters
Santa Barbara, CA, USA
UK Development Center
Chalfont, United Kingdom
EMEA Headquarters
Schaffhausen, Switzerland
Pacific Headquarters
Hong Kong, China
About Citrix
Citrix (NASDAQ:CTXS) is a leader in mobile workspaces, providing virtualization, mobility management, networking and cloud services to
enable new ways to work better. Citrix solutions power business mobility through secure, personal workspaces that provide people with
instant access to apps, desktops, data and communications on any device, over any network and cloud. This year Citrix is celebrating 25
years of innovation, making IT simpler and people more productive. With annual revenue in 2013 of $2.9 billion, Citrix solutions are in use at
more than 330,000 organizations and by over 100 million users globally. Learn more at www.citrix.com.
Copyright © 2015 Citrix Systems, Inc. All rights reserved. Citrix, AppFlow, NetScaler Gateway, NetScaler, NetScaler Insight Center, HDX, ICA,
XenServer, XenApp, XenDesktop, HDX Insight and XenCenter are trademarks of Citrix Systems, Inc. and/or one of its subsidiaries, and may
be registered in the U.S. and other countries. Other product and company names mentioned herein may be trademarks of their respective
companies.
0115/PDF
citrix.com
27
Download PDF

advertising