NetScaler Insight Center Deployment and Sizing Guide

NetScaler Insight Center Deployment and Sizing Guide

Deployment & Sizing Guide

NetScaler Insight Center

Deployment & Sizing Guide

citrix.com

Deployment & Sizing Guide

NetScaler Insight Center

Table of Contents

Introduction 3

Prerequisites 4

Licensing 4

Supported Software

Supported Receiver Versions for HDX Insight

Ports Settings

Insight Installation Resource Allocation

5

5

4

5

Browser Recommendation

XA/XD 6.5 Prerequisites for HDX Insight

Prerequisites for NetScaler

Sizing Guidelines

HDX Insight

WEB Insight

Installation 7

Importing Insight VM – XenServer 7

6

7

6

6

5

5

Importing Insight VM – ESX

Importing Insight VM – Hyper-V

Initial Configuration

Web Insight - Configuring the Insight for HTTP Analytics

HDX Insight - Configuring Insight for ICA Analytics

Configuring HDX Insight for Single hop NetScaler Gateway Deployment

Configuring HDX Insight For Double Hop NetScaler Gateway Deployment

Configuring HDX Insight in Transparent Mode

Configuring HDX Insight for Director Setup 24

Conclusion 25

Appendix (Troubleshooting Tips)

I Cannot See Any Records On The NetScaler Insight Center Dashboard

25

25

ICA RTT Value Display Is Zero Or Na 26

An Error Message Is Displayed When I Add The NetScaler Appliance To The Netscaler Insight 27

19

20

21

22

9

13

17

18

citrix.com

2

Deployment & Sizing Guide

NetScaler Insight Center

In today’s Application centric market the visibility challenges are being realized and its significance is growing as the data is increasing day by day. Most of the enterprise Apps has a common & basic requirement of being load balanced and providing optimized data delivery, thus ADCs like NetScaler become the central node through which all application data traverses. This is where technology like AppFlow comes in picture. AppFlow is the standard for fetching the visibility information through NetScaler and forwarding to NetScaler Insight Center. NetScaler Insight Center collects the AppFlow records, analyzes them and brings precise analytical reports for administrator’s consumption.

It is a high performance collector that provides end-to-end user experience visibility. It provides visibility across Web traffic (Web Insight) and HDX™ traffic (HDX Insight™). It collects ICA

®

/HTTP

AppFlow

®

records generated by NetScaler

®

ADC appliances and populate analytical graphs over

Layer 3 to Layer 7 statistics. Giving in-depth analysis over real time and historical data across last

5min (real time), last one hour, one day, one week and one month as historic data.

It gives a bird’s eye view over all the HDX Users, Applications, Desktops, Gateway as well as Web traffic Client, Server, Application level information. It showcases the SSL VPN license usage over the time. Based on the use cases the administrator can drill down and identify the pain points from any of these dashboards giving them a perfect visibility and troubleshooting solution.

This deployment guide aims to provide administrators a smooth installation of NetScaler Insight

Center™ and to enable them with all the information they need to know to get started with the installation process.

citrix.com

3

Deployment & Sizing Guide

NetScaler Insight Center

Prequisites

NetScaler Insight Center comes in virtual machine format supported over XenServer

®

, ESX and

Hyper-V. Before getting started, you should consider and know certain aspect to have a successful deployment. This section will throw some light on following:

• Licensing: This will explain what levels of reports are available across Web and HDX Insight based on NetScaler version and Licenses.

• Supported Software: Which NetScaler, XenApp

®

& XenDesktop

®

versions are supported on Insight.

• Supported Receiver versions for HDX Insight: Which receiver versions are supported to be able to see reports on HDX Insight.

• Port Settings: Ports to be opened for complete communication between NetScaler & Insight.

• Insight Installation Resource Allocation: Summary over resources to allocate for Insight Installation.

• Browser Recommendations: Browser to use for accessing Insight GUI.

• XA/XD Recommendation for HDX Insight: Few XA/XD 6.5 deployment based recommendations

• Prerequisites for NetScaler: Points to know about NetScaler before starting NetScaler configuration on Insight.

Licensing

Web Insight

NetScaler License/ Version

Standard

Enterprise

Platinum

9.3

Limited

Limited

Limited

10.0

Limited

Limited

All Metrics

10.1

All Metrics

All Metrics

All Metrics

10.5

All Metrics

All Metrics

All Metrics

Here, Limited implies following metrics will not be available: Response Time, Client Network Latency, Server Network Latency, Server processing Time, Load Time & Render Time.

HDX Insight

License/Duration 5 minutes

Standard

Enterprise

X

Yes

Platinum Yes

1 Hour

X

Yes

Yes

1 Day

X

X

Yes

1 Week

X

X

Yes

1 Month

X

X

Yes

Here, X stands for no reports available.

Supported Software (HDX Insight)

Product Versions

NetScaler

XenApp

10.1 build 120.13 and later

6.5, build 6682 with HRP01 and later

XenDesktop 5.6, build 56060

7.0, build 3018

7.1, 7.5, 7.6

citrix.com

4

Deployment & Sizing Guide

NetScaler Insight Center

Supported Receiver Versions For HDX Insight

Operating system Receiver version

Windows 7 3.4 Enterprise Edition

Windows 8

Mac

Windows 8/DR

4.0 Standard Edition

3.4 Enterprise Edition

4.0 Standard Edition

11.8, build 238301 and above

Win 8/RT, version 1.4

* Windows 8/DR (Win8/RT, version 1.4) is not supported for now.

Ports Settings

Component

NetScaler Insight Center

Type Port

TCP

TCP

UDP

ICMP

80/443

22

4739

No reserved port

Details

For NITRO communication from NetScaler Insight Center to NetScaler.

For SSH communication from NetScaler Insight Center to NetScaler.

For AppFlow communication from NetScaler to NetScaler Insight

Center.

To detect the network reachability from NetScaler Insight Center to NetScaler

Insight Installation Resource Allocation

Component Requirement

RAM 3 GB or more

Virtual CPU

Storage space

Virtual Network Interfaces

Throughput

Disk I/O

2 or more

120 GB ( Don’t allocate more than 120 GB as Insight image can’t extend more than 120 GB today)

1

1 Gbps or 100 Mbps

>200MBps & SSD (preferably)

Browser Recommendation

• Internet Explorer—IE 9, and later versions

• Google Chrome—Chrome 19, and later versions

• Safari—Safari 5.1.1, and later versions

• Mozilla Firefox—Mozilla Firefox 3.6.25, and later versions

XA/XD 6.5 Prerequisites For HDX Insight

• ICA RTT –

- On a XenApp or XenDesktop server running version 6.5, make sure that the ICA round trip calculations for Idle Connections option is enabled. If the option is not enabled, enable it and execute the gpupdate command.

• EUEM –

- The EUEM service must be running on the server as well as VDI Desktops. citrix.com

5

Deployment & Sizing Guide

NetScaler Insight Center

Prerequisites For NetScaler

NSIP- Add NS using NSIP not SNIP.

NetScaler State - The state of NetScaler has to be UP before adding to Insight.

nCore - Only nCore NetScaler appliances.

Standalone NetScaler Gateway - You cannot add & get reports over Standalone NetScaler

Gateway™ appliance on Insight.

HA - For NetScaler HA deployment, add both NetScaler appliances on Insight to get report across both the nodes.

Cluster - You can’t monitor NetScaler Cluster deployment today on Insight.

HTTP/HTTPS - Make sure that both the NetScaler appliance and the NetScaler Insight Center appliance have either HTTP access or HTTPS access enabled.

NS User - The user added while adding NetScaler on Insight should have write level access to NetScaler.

NTP - If you want to use NTP server time on the NetScaler Insight Center, make sure that you configure NTP before enabling AppFlow on the virtual servers.

• Set the ICA session time out value on Insight.

• HDX Insight - Double Hop & session reliability is supported from NetScaler Release 10.5 Build

54.9 onwards.

Sizing Guidelines

HDX Insight

Sizing Recommendation for Insight 10.5 (SSD)

Below recommendations are for Insight working with SSD disk storage mechanisms (DiskIO >

200MBps)

RAM vCPU Unique Users

Concurrent

Sessions

Insight

Storage

Throughput on Insight

6 4 25K 50K 120G 7Mbps

Sizing Recommendation for 10.5 (HDD)

RAM vCPU Unique Users

6

8

4

6

5K

10K

Sizing Recommendation for 10.1 (HDD)

RAM vCPU Unique Users

3

6

2

4

1000

3000

Concurrent

Sessions

10K

20K

Concurrent

Sessions

2000

6000

Insight

Storage

120G

120G

Throughput on Insight

5Mbps

12Mbps

Insight Storage

120G

120G citrix.com

6

Deployment & Sizing Guide

NetScaler Insight Center

Web Insight

Sizing Recommendation for Insight 10.5 and over (SSD)

HTTPs

Req/Sec on

NetScaler

Corresponding throughput on

Insight

Insight RAM Insight vCPU

3000 20Mbps 12 8

Insight

Storage

120G

DISK I/O

>200Mbps

Installation

To get started with the installation process, first foremost step is to have the right image downloaded on your system. You can download the latest image from the given link:

Download Link: https://www.citrix.com/downloads/netscaler-adc/components/netscaler-insight-center-105.html

Importing Insight VM – Xenserver

Prerequisites for Insight XenServer Install

• XenServer version 5.6 or later

• XenCenter

®

to install NetScaler Insight Center on XenServer.

• Time Zone

- Verify that correct date, time, and time zone is configured on XenServer before NetScaler

Insight Center is installed.

• Insight XenServer VM image.

Screenshots Description

Import the Insight Xenserver

Image citrix.com

7

Deployment & Sizing Guide

NetScaler Insight Center

Browse and select the downloaded image.

Select the right location to import the VM.

Select the storage repository.

citrix.com

8

Deployment & Sizing Guide

NetScaler Insight Center

After the previous selection, you will be prompted with this window.

Select an accessible interface and you are done with the importing process.

Once the image is imported and installed, go to the console and configure the IP address configuration as prompted.

Importing Insight Vm – Esx

Prerequisites for Insight ESX Install

• VMware ESX version 4.1 or later.

• VMware Client on a management workstation.

• VMware OVF Tool (required for VMware ESX version 4.1) on a management workstation.

• NetScaler Insight Center ESX VM image.

citrix.com

9

Deployment & Sizing Guide

Screenshots

NetScaler Insight Center

Description

You can get the Vsphere

Client from an existing

VMWare ESX or ESXi installation or by downloading from internet.

Start the VI Client and log into VMWare Server.For default server installations you must add the “:8333” port definition.

From the file menu click on

Deploy OVF Template.

On the source, select import from file, click Browse and navigate to where the extracted NSVPX-ESX-10.1-

X.X_nc.zip files are available.

citrix.com

10

Deployment & Sizing Guide

NetScaler Insight Center

On the OVF Template

Details page click Next

Type in the desired name for the Insight VM and click next

Specify the Disk Format.

Thick provisioned

(Recommended).

citrix.com

11

Deployment & Sizing Guide

NetScaler Insight Center

Map the virtual network adapters to a preconfigured network.

On the Ready to Complete page click Finish.

The importing should complete within a few minutes.

Once completed successfully click Close.

citrix.com

12

Deployment & Sizing Guide

NetScaler Insight Center

Once the image is imported and installed, go to the console and configure the IP address as prompted.

Importing Insight Vm – Hyper-V

Prerequisites for Insight Hyper-V Install

• Hyper-V version 6.2.x or later.

• Hyper-V Manager on a management workstation.

• Insight Hyper-V VM image.

• Unzip the downloaded hyper-v install.

Screenshots Description

Go to Action >> Import

Virtual Machine citrix.com

13

Deployment & Sizing Guide

NetScaler Insight Center

Click Next on the introductory screen

Select the hyper-v install citrix.com

Select the Import mode as per your requirement.

Please note that exported files can be reused to clone machines only using “Copy

The virtual machine (create a new unique ID)” option.

We recommend to select this option amongst the three and click next.

14

Deployment & Sizing Guide

NetScaler Insight Center

Change the location for VM files if need be.

Select the folder path to store

Virtual machine Hard disk.

This is your storage location.

Click Finish and you are 90% done with the installation process.

citrix.com

15

Deployment & Sizing Guide

NetScaler Insight Center

Right click on the newly imported Insight VM and select start.

Right click on Insight VM, select “Settings >> VM-Bus

Network Adapter”, select the right virtual switch, click

“Apply” and “Ok”.

The Hyper-V Virtual Switch is a software-based layer-2 network switch that is available in Hyper-V

Manager when you install the Hyper-V server role. The switch includes programmatically managed and extensible capabilities to connect virtual machines to both virtual networks and the physical network. All the reasons to select the right virtual switch!

citrix.com

16

Deployment & Sizing Guide

NetScaler Insight Center

Now the final step is to double click the bottom left black square and access the console to start with Insight

IP address configuration.

Initial Configuration

Screenshots Description

Access Insight with the configured IP address over a supported browser.

Enter the default credentials as nsroot/nsroot.

Click on “Get Started” citrix.com

17

Deployment & Sizing Guide

NetScaler Insight Center

Enter a valid “NetScaler IP address” and its credentials.

This NetScaler account should have read & write level access.

Web Insight - Configuring The Insight For Http Analytics

Based on the deployment type, Web Insight reports can be enabled over CS or LB vserver. Once decided, next step is to enable Appflow on the selected vserver with the right expression. This expression defines a filter to perform Appflow forwarding for a set of traffic.

Enabling Appflow forwarding for Web Insight is quite straight-forward. Here is how you can do that.

Screenshots Description

Select the desired NetScaler from the inventory dashboard to see these details.

Right click on vserver you want to get visibility on and click Enable Appflow.

citrix.com

18

Deployment & Sizing Guide

NetScaler Insight Center

Here “Expression” defines the type of traffic you want the visibility for.

This Expression will define a filter for NetScaler to send

Appflow records for only that type of traffic.

Select the right expression that defines your requirement.

For instance, select “HTTP.

REQ.METHOD.EQ(GET)” if you want to assess the GET requests only.

Enable “HTML Injection” for getting L7 metrics line Load

Time, Render Time and

Response Time, Client

Network Latency, Server

Network Latency, Server

Processing Time.

Once done, you will see an

“Enabled” text written besides the vserver selected earlier.

HDX Insight - Configuring Insight For Ica Analytics

HDX Insight Reports are available over four deployment types. First is Single Hop NetScaler

Gateway deployment. For this deployment the administrator just needs to enable Appflow forwarding over the SSLVPN vserver which is providing access to the remote users. Second, HDX

Insight reports over NetScaler Gateway double hop deployment. In this scenario, the administrator will need to enable Appflow forwarding across both the nodes.

Third, Transparent mode should be deployed when the administrator wants visibility over internal users also. For this deployment, appflow forwarding needs to be enabled at global level.

citrix.com

19

Deployment & Sizing Guide

NetScaler Insight Center

Fourth, the administrator can get these reports under the console of Director also across any of the first three deployments.

The rest of the section will provide configuration details over all four types of deployment.

Configuring HDX Insight For Single Hop NetScaler Gateway Deployment citrix.com

20

Deployment & Sizing Guide

NetScaler Insight Center

Screenshots Description

Select the right NetScaler from the inventory dashboard and select “VPN” from the

Application List drop down.

Right click on the VPN vserver and select Enable Appflow.

Select “True” as the expression and click “OK”.

This signifies that you want to assess all the traffic intercepted by the selected

VPN vserver.

Configuring HDX Insight For Double Hop NetScaler Gateway Deployment

Users can get HDX Insight reports for NetScaler Gateway in Double Hop deployment from

NetScaler Release 10.5 Build 54.9 onwards. Following is the way export option needs to be enabled across the nodes.

• Enable ICA as the export option on NetScaler Gateway 1.

• Enable TCP as the export option on NetScaler Gateway 2.

citrix.com

21

Deployment & Sizing Guide

NetScaler Insight Center

Screenshots Description

Select the right NetScaler from the inventory dashboard and select “VPN” from the

Application List drop down.

Right click on the VPN vserver and select Enable Appflow.

Select “True” as the expression and click “OK”.

Select ICA for NetScaler

Gateway 1 & TCP for

NetScaler Gateway 2. The device reference is with respect to the double hop diagram mentioned in the beginning of this section.

Configuring HDX Insight In Transparent Mode

HDX Insight reports can’t be enabled from Insight for Transparent mode. These configurations need to be done only through NetScaler.

citrix.com

22

Deployment & Sizing Guide

NetScaler Insight Center

1. NetScaler Configuration

• Log on to the NetScaler appliance.

• Specify the ICA ports at which the NetScaler appliance listens for traffic. set ns param --icaPorts <port>...

Example: set ns param -icaPorts 2598 1494.

Note: You can specify up to 10 ports with this command.

• Add NetScaler Insight Center as an appflow collector on the NetScaler appliance. add appflow collector <name> -IPAddress <ip_addr>.

Example: add appflow collector MyInsight -IPAddress 192.168.1.101.

Note: A NetScaler appliance supports a maximum four Appflow collectors. If there are already four Appflow collectors configured, you cannot add another AppFlow collector (in this case,

NetScaler Insight Center) to the NetScaler appliance. Delete an existing Appflow collector to add a new collector. To view the appflow collectors configured on the NetScaler appliance, use the show appflow collector command.

• Create an appflow action and associate the collector with the action. add appflow action <name> -collectors <string> ...

Example: add appflow action act -collectors MyInsight.

• Create an appflow policy to specify the rule for generating the traffic. add appflow policy <policyname> <rule> <action>.

Example: add appflow policy pol true act.

• Bind the appflow policy to a global bind point. bind appflow global <policyname> <priority> -type <type>.

Example: bind appflow global pol 1 -type ICA_REQ_DEFAULT.

Note: The value of type should be ICA_REQ_OVERRIDE or ICA_REQ_DEFAULT in order to apply to ICA traffic.

• Set the value of the flowRecordInterval parameter for Appflow to 60 seconds. set appflow param -flowRecordInterval 60.

Example: set appflow param -flowRecordInterval 60.

• Save the configuration. save ns config.

2. Client configuration

• route add <ip_XA_server> mask 255.255.255.255 <NSIP>.

• route print.

• tracert <ip_XA_server>.

citrix.com

23

Deployment & Sizing Guide

Configuring HDX Insight For Director Setup

NetScaler Insight Center

HDX Insight on Director is represented as “Network”. All the relevant HDX Insight reports have been integrated with the Director solution.

NetScaler Insight Center must be installed on one of the hypervisors and configured in Director to enable reports under “Network”. Below are the part of the configuration done on Director setup. Before moving to this step, ensure Insight Center VM is installed, able to collect traffic and show reports.

1. On the server where Director is installed, locate the DirectorConfig command line tool in

C:\inetpub\wwwroot\Director\tools\DirectorConfig.exe, and run it with parameter

/confignetscaler in command line prompt.

2. When prompted, configure the NetScaler Insight Center machine name (FQDN or IP address), username, password, and HTTP or HTTPS connection type.

3. To verify the changes, log off and log back on. citrix.com

24

Deployment & Sizing Guide

NetScaler Insight Center

For more details on this refer to following HDX Insight & Director reference architecture guide: https://support.citrix.com/servlet/KbServlet/download/35767-102-706176/Reference%20

Architecture%20-%20Dir%20and%20ES%20-%20final.pdf

Conclusion

NetScaler Insight Center deployment and configuration process has been aimed to keep it as simple as possible and provide a smooth deployment experience. Prerequisites & sizing guidelines will ensure even smoother process and should be considered before installation & configuration.

Once the NetScaler Insight Center setup is complete and ready, you will be exposed to a complete new world of visibility, trends and insights.

Appendix (Troubleshooting Tips)

I Cannot See Any Records On The NetScaler Insight Center Dashboard

• UDP Port –

- Is UDP port 4739 on the NetScaler Insight Center virtual appliance reachable from NetScaler appliance?

• Traffic on VPN vserver –

- On the NetScaler appliance, is traffic flowing through the virtual server for which data collection was enabled in NetScaler Insight Center?

- Hit counts - Verify that the hits counter is increasing on the AppFlow policy, by running the following command from the NetScaler command line interface:

- sh appflow policy <policyname>

• Right VPN Vserver - Ensure the appflow is enabled on right VPN vserver

• UDP port - Is UDP port 4739 on the NetScaler Insight Center virtual appliance reachable from

NetScaler appliance?

• NTP Sync - Make sure that the times set for the NetScaler appliance and NetScaler Insight Center are correct and in sync.

• Skip flow issue

- nsconmsg -g hdx_skip -d stats.

- Check XA/XD and receiver version. citrix.com

25

Deployment & Sizing Guide

NetScaler Insight Center

ICA RTT Value Display Is Zero Or Na

XA with WI

• RDP to XA. From the Citrix AppCenter, navigate to Citrix Resources > XenApp > Select Farm >

Policies.

• On the Computer > Settings tab, go to ICA > End User Monitoring and make sure that the following configurations are enabled:

- ICA Round Trip Calculation.

- ICA Round Trip Calculation Interval.

- ICA Round Trip Calculation for Idle Connections.

• Verify the configurations.

XA with Storefront

• RDP to XA

• Citrix Studio > Policy > Settings. Make sure that the following configurations are enabled.

- ICA Round Trip Calculation.

- ICA Round Trip Calculation Interval.

- ICA Round Trip Calculation for Idle Connections.

EUEM Service

EUEM Service - Make sure that the services for these configurations are set to Automatic.

- Open the command prompt from your Windows machine.

- Type services.msc and press Enter.

- In the Services dialog box, make sure that Citrix End User Experience.

- Monitoring is listed and the Startup Type is set to Automatic.

Virtual Desktop –

- If you are using a virtual desktop application, make sure that the Startup Type is set to

Automatic. This has to be done on the master image.

• Open the command prompt from your Windows machine.

• Type services.msc and press Enter.

• In the Services dialog box, make sure that Citrix End User Experience Monitoring is listed and the Startup Type is set to Automatic.

• Use Latest XenApp 6.5.

FlowRecordInterval

- Make sure that the value of flowRecordInterval parameter on the NetScaler appliance is set to

60 seconds. To verify, run the following command on the NetScaler appliance:

Show appflow param.

- Confirm by checking if the following output parameter is set to 60:

IPFIX flow record export interval: 60 seconds.

- If the value is not 60, then set the value by running the following command:

Set appflow param -flowRecordInterval 60. citrix.com

26

Deployment & Sizing Guide

NetScaler Insight Center

An Error Message Is Displayed When I Add The NetScaler Appliance To The NetScaler Insight

Center Inventory.

Make sure that the GUI is accessible, by verifying that port is open for communication. To do so, run the following command from the command line interface:

• show ns ip <ipaddress>

• Example:

- show ns ip 10.102.60.31

- IP: 10.102.60.31

...

...

Netmask: 255.255.255.128

Type: NetScaler IP

...

...

... gui: Enabled

...

0115/PDF

Corporate Headquarters

Fort Lauderdale, FL, USA

Silicon Valley Headquarters

Santa Clara, CA, USA

EMEA Headquarters

Schaffhausen, Switzerland

India Development Center

Bangalore, India

Online Division Headquarters

Santa Barbara, CA, USA

Pacific Headquarters

Hong Kong, China

Latin America Headquarters

Coral Gables, FL, USA

UK Development Center

Chalfont, United Kingdom

About Citrix

Citrix (NASDAQ:CTXS) is a leader in mobile workspaces, providing virtualization, mobility management, networking and cloud services to enable new ways to work better. Citrix solutions power business mobility through secure, personal workspaces that provide people with instant access to apps, desktops, data and communications on any device, over any network and cloud. This year Citrix is celebrating 25 years of innovation, making IT simpler and people more productive. With annual revenue in 2013 of $2.9 billion, Citrix solutions are in use at more than 330,000 organizations and by over 100 million users globally. Learn more at www.citrix.com.

Copyright © 2015 Citrix Systems, Inc. All rights reserved. Citrix, AppFlow, NetScaler Gateway, NetScaler, NetScaler Insight Center, HDX, ICA,

XenServer, XenApp, XenDesktop, HDX Insight and XenCenter are trademarks of Citrix Systems, Inc. and/or one of its subsidiaries, and may be registered in the U.S. and other countries. Other product and company names mentioned herein may be trademarks of their respective companies.

citrix.com

27

Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertisement