Questions tagged [netscaler]
NetScaler is an application delivery controller (ADC) and load balancing solution developed, sold and supported by Citrix. NetScaler operates in a similar market as F5 and other leading load balancer/ADC solutions and comes in both physical hardware (MPX/SDX) and virtualized forms (VPX/SDX). NetScaler operates at OSI Layer 4-7 in general, though it does have some Layer 2/3 functionality.
52
questions
0
votes
1
answer
208
views
How to get a secure HTTP monitor in NetScaler to send SNI in its request?
We have a content switch in front of a virtual server in NetScaler ADC, and it acts as a load balancer. It is tied to a service group that has an HTTP monitor. We cannot get this monitor to work.
The ...
0
votes
0
answers
30
views
unable to download backup file on ADC SDX via GUI or API call
While trying to download the backup file via API or GUI using the nsroot account which has the owner group, I get the bellow error: {"Not Authorized to perform this operation"}
Have checked ...
0
votes
1
answer
89
views
Unable to connect web server VM from my netscaler VM
I have created a lab to learn VPX ADC and my lab environment as per below. All the below 3 machines are connected via VMWare Workstation Bridged Network.
Host - Windows 10, IP Address is 192.168.2....
- 101
1
vote
1
answer
82
views
Serial Drops on Citrix after upgrade
Our company recently upgraded from Citrix version 6 (server 2008 R2 host servers) to 7.15 (Server 2016 host servers). We have an application that we host where external users connect with a WYSE ...
- 165
0
votes
1
answer
140
views
Where to securely deploy Citrix Netscaler?
We are currently using Citrix Netscaler to provide users with Virtual Desktops.
Netscaler is located in DMZ and has access from whole internet. Unfortunately Netscaler has access to LDAP (to ...
0
votes
0
answers
250
views
Implementing Health Check for Websites Hosted Behind a Shared LB
we host 4 web servers behind a shared load balancer. We don't have control over this Citrix NetScaler load balancer. We submit tickets to make changes as needed.
Recently, one of the web servers ...
- 1
1
vote
0
answers
395
views
Deploying Citrix ADC CPX to Docker - Container is Up, but Logs Errors
I'm trying to design a container-based network that uses Citrix ADC CPX (formerly Netscaler CPX). At this stage, I'm trying to get it to run locally on Docker Desktop. When I run:
docker run -dt -P --...
- 111
1
vote
2
answers
3k
views
Citrix Netscaler Gateway does not work in macOS Catalina 10.15.4
Under macOS version 10.15.3, the extensions used by Citrix Netscaler Gateway could be allowed in the Security settings under System Preferences, as suggested in this serverfault answer.
However, ...
- 113
0
votes
1
answer
1k
views
Css, js and images get partially downloaded with Netscaler
Trying to sort this out with our Netscaler provider but they have issues finding the problem for this aswell so asking her to see if anyone have any input on where to start looking.
We have ...
- 113
3
votes
1
answer
600
views
TLS Implementation/RFC interpretation
Does the Server Hello break the RFC? There seems to be contradiction in RFC.
A customer claims our device (Citrix Netscaler) returns Extension (ec_point_formats: EC point format: uncompressed) when ...
- 1,038
0
votes
0
answers
444
views
SSL connection error but works if you telnet port first
I'm troubleshooting a connection to an application (Citrix Netscaler), between several countries in a complex network. There are definitely firewalls along the route.
Machine is pingable
tracert is ...
- 680
0
votes
1
answer
246
views
Point a subdomain to a dedicated application server using NetScaler
Background on a question: we have a domain (www.example.com) that point to multiple servers with an SSL Wildcard *.example.com aka hitting a VIP (I am not an expert on VIP would love to learn more).
...
- 87
1
vote
1
answer
9k
views
Error: "Your logon has expired. Please log on again to continue" When Accessing StoreFront Through NetScaler Gateway
My Citrix test environment is the following:
One Windows 2016 VM acting as Domain Controller and DNS
One Windows 2016 VM with everything from Citrix in it (XenDesktop 7.15) plus the SQL Server DB
Two ...
- 252
0
votes
1
answer
384
views
weird netstat output on netscaler
We have a VPX-1000 netscaler. When traffic suddenly increases our website goes offline and doesn't response to requests but our netscaler load is fine (cpu %40 ram %50 4 cores 4gb). After incident ...
- 23
3
votes
2
answers
5k
views
NetScaler Gateway for MAC is not connecting correctly: Protocoll shows "AGAS: Failed to initialise ssl vpn plugin"
I'm using the Citrix Netscaler Gateway for Mac (Version 3.1.8 which is the newest for mac) and macOS High Sierra.
When I use the Gateway Plugin to connect to our gateway, it seems to work, because ...
- 151
1
vote
2
answers
3k
views
How can I connect to a 2FA VPN on Linux?
I need to connect to the office VPN from a linux machine. I'm able to connect to it only via Citrix NetScaler Gateway on Windows. The connection needs the secondary password (in my case is an OTP from ...
- 11
0
votes
1
answer
125
views
NetScaler prioritizing faster hosts in round robin
For a NetScaler load balancer running SSL passthrough, is there any aspect to the round robin load balancing algorithm that would direct more traffic to hosts that respond more quickly?
As a ...
- 1
1
vote
2
answers
430
views
NetScaler retry next server if failed
I have 8 servers that are loadbalanced by NetScaler VPX (10). How to make NetScaler load balancer to resend request to next server if previous server responded with the 502 status?
- 337
0
votes
1
answer
239
views
Get requested hostname in Netscaler
I have a Netscaler which is mainly acting as a SSL bridge for a bunch of sites. I would like to see every requested hostname that is going to the Netscaler but I am unable to fix it.
The hostname is ...
- 274
0
votes
2
answers
10k
views
Log source IP of traffic destined to Cirtix Netscaler
I have tried to make Netscaler log the source IP of all traffic that's destined to the Netscaler. Is this possible?
To be clear I don't want to forward the client-IP to a backend server, I want to ...
- 274
1
vote
1
answer
275
views
Timeouts connecting to Citrix NetScaler
We have a C# ASP.NET MVC website that is hosted on Azure (app service) that connects to a 3rd party REST API. This always ran without problems, but some time ago the 3rd party replaced their old ...
- 173
0
votes
1
answer
63
views
Netscaler Load Balancing Persistance to specific member?
In the Netscaler load balancing persistence rules it is straightforward to sticky a client IP to the same member each time.
What I would like to do is sticky a client IP to a specific member server, ...
- 1,298
0
votes
1
answer
854
views
Bind SSL cert to a VIP in Netscaler without doing offloading
I have a question regarding SSL certificates in Netscaler. Is it possible to bind/include a SSL certificate in a VIP in the Netscaler without doing any HTTPS offloading? I'm doing the HTTPS offloading ...
- 274
0
votes
1
answer
2k
views
Netscaler URL rewrite
Context: I have little/no experience with Netscaler and I'm just starting to use them. One of the first jobs I've been given to work with it is what I thought would be a simple one. I have to have the ...
- 21
0
votes
1
answer
453
views
COOKIEINSERT Persistence with AJAX
We are using COOKIEINSERT set to use session cookies with 4 servers behind the NetScaler. If i open the webpage, it loads OK. If i remove the NetScaler added cookie and refresh the page I am asked to ...
- 111
0
votes
0
answers
115
views
Migrating a Citrix Netscaler Insight Server to AWS
Is there any proper documentation for Migrating a Citrix Netscaler Insight Server to AWS? Or any way we can do that ? Any help would be a great help. VM import is not an option as well, and it is just ...
0
votes
1
answer
718
views
Counters in Citrix Netscaler and their meanings (Diff) or (Actual)
I try to configure some Citrix Netscaler Command Center Reports. When I configure a Custom Report I can choose between different available counters. Per example:
Vserver Hits
Vserver Hits(Actual)
...
0
votes
1
answer
259
views
Netscaler persistence fails, drop packets
I have a vserver configured with this
-persistenceType CUSTOMSERVERID -lbMethod ROUNDROBIN -rule "URLQUERY CONTAINS sid="
It seems that if the "sid" parameter is set to go to "server 1" and at the ...
- 541
3
votes
1
answer
2k
views
NTLM on a Load Balanced Environment
We have a Netscaler VPX that load balances HTTP requests to 3 IIS services on 3 Windows servers. Authentication is set to "Windows Authentication" but because our environment isn't set up for Kerberos ...
- 213
1
vote
0
answers
1k
views
Citrix NetScaler sending FIN, ACK for SSL VPN Clients
I realise that it's unlikely anyone here has a definite "Check this box to resolve this" answer, but I'm struggling with this issue and I'm hoping that someone with more knowledge than me can give me ...
- 15.4k
0
votes
1
answer
2k
views
Kerberos constrained delegation using Citrix NetScaler
I'm currently evaluating Citrix NetScaler VPX (NS10.5 56.12.nc) as a potential replacement for Microsoft TMG server.
Kerberos Constrained Delegation is at the top of my list of mandatory features.
...
- 111
0
votes
1
answer
97
views
MS Certificate authority issued to wrong entity
Hi I have created a CA signing request on my netscaler where the common name is *.mydomain.com
When I sign the CRS in my MS CA its ends up being issued to "Fredrik" instead of *.mydomain.com
This ...
- 33
0
votes
1
answer
5k
views
How to enable SNMP on a Citrix NetScaler 10.1
I am trying to set up MRTG against a Citrix NetScaler 10.1 appliance, but I am not getting a response to SNMP requests.
I have added the MRTG machine as a SNMP manager and added a community.
It does ...
- 318
1
vote
1
answer
3k
views
Can a Citrix NetScaler loadbalance based on the path portion of a URL?
So I have a domain hosting two lovely applications thus...
http://intranet.lan:80/firstapp
http://intranet.lan:80/secondapp
And two physical boxes serving them up
http://box1.lan:80/firstapp
http://...
- 123
-1
votes
1
answer
5k
views
How to get email alerts when a monitor goes down on NetScaler?
How to get email alerts when a monitor goes down on NetScaler?
I am looking for a way to get email notifications when different things go wild with backend services served by a NS instance.
NS ...
- 8,036
0
votes
1
answer
2k
views
Citrix Netscaler 10.1 AAA Application Traffic Single Sign On
I have a Netscaler deployment with a virtual server where I have enabled authentication through the AAA Application Traffic feature. As Expected this allows my users to log on to the netscaler login ...
- 87
0
votes
1
answer
14k
views
How do I configure netscaler to act as a simple HTTP proxy?
I want to start use a netscaler instance as a HTTP proxy (like squid), so all the requests from my browser will go directly to netscaler.
How can I obtain this behaviour?
Note: Netscaler is already ...
- 8,036
1
vote
1
answer
2k
views
Issues Load balancing .Net web app using State Server
We have multiple web servers behind a Netscaler load balancer. The (Win2008) servers each host an ASP.Net application (using iis 6.1) that are configured to use a central server running the .Net ...
- 141
1
vote
0
answers
268
views
Device aware multifactor authentication with Citrix environment?
There are many services that advertise themselves as providing multifactor authentication for Citrix. But, most seem to require the additional generated passcode every time. Are there any that can ...
- 528
0
votes
1
answer
620
views
NetScaler and Domino iNotes
We are putting a NetScaler device in front of our Domino iNotes servers, which will act as a reverse proxy.
However, we get "Error 400" errors in the iNotes webinterface, and the behaviour is ...
- 1,386
2
votes
2
answers
2k
views
Can I give a friendly error message for connections less than TLS 1.1?
For security reasons, I want to block all TLS connections older than TLS1.1. I also want to give a friendly error message for users who use less than TLS 1.1 on my site. Is there any way to ...
- 8,921
2
votes
0
answers
768
views
Putting a NetScaler infront of Redis master failover
I have a redis-sentinel solution for master failover, I just need to setup a vserver with all the master services in the pool. Only one master can act as the master at a time, the rest are slaves ...
- 121
9
votes
1
answer
317
views
Where can I embed proprietary information in a layer 2 or layer 3 packet?
The Citrix Netscaler has an interesting property that embeds information in the TCP packet that gets sent to the host. This property is echoed back to the Netscaler in such a way that the Netscaler ...
- 8,921
0
votes
1
answer
12k
views
When configuring a Citrix Netscaler for use with Exchange 2010, what should the persistence timeout be?
I have a Netscaler that I'm using to front end 4 Exchange 2010 CAS servers. The clients that use this virtual server include
Outlook Web Access (OWA)
Exchange Web Services (Outlook for Mac 2011)
...
- 8,921
0
votes
2
answers
2k
views
SSL Offloading with Citrix Netscaler is not working when requesting PDF files
we are working in one of our projects with Citrix Netscaler in front of our web site.
we configured the Citrix Netscaler to use SSL offloading but when we request a PDF file the SSL offloading does ...
1
vote
1
answer
1k
views
Can I restrict an AD account to login only on Xenapp servers and not locally?
I have some users who want to test a Xenapp application using some generic accounts (I don't like to use generic accounts but for reasons I won't go into, they are necessary). I want to setup the ...
- 1,032
1
vote
1
answer
1k
views
Does PHP get executed when a page gets a HEAD request?
We set up a Netscaler in front of our PHP application server, the netscaler now preforms a large amount of HEAD requests as evidenced by our apache logs. I wonder if each time apache gets a one of ...
- 113
5
votes
1
answer
1k
views
Multiple DNS names and IP address to make load balancing more efficient in an Exchange CAS Array
The tl;dr problem
The CAS server occasionally gets one or two NAT'ed IP addresses that have several hundred users behind it. That is bad for scalability.
The tl;dr solution
Have the NAT'ed ...
- 8,921
4
votes
1
answer
7k
views
Load balancing SMTP in a way that doesn't hide the source IP address
I need to load balance SMTP to handle some applications that don't know how to use MX records.
I set up a Netscaler using the TCP option on port 25 and now Exchange sees the source IP as that of the ...
- 8,921
0
votes
1
answer
7k
views
Figuring out the reason for a "Connection timed out" error
For the last 24 hours two independent servers are having a hard time connecting to our web server. They are trying to open a port 80 connection.
They are both receiving "connection timed out" errors. ...
- 943