![© 2014 Citrix. Confidential.12 © 2015 Citrix - Confidential© 2015 Citrix - Confidential
NetScaler
[ SDX | MPX | VPX |
CPX ]
NetScaler Management
& Analytics System
Any Orchestration System
NetScaler SD-WAN
[ Physical | VPX ]
any datacenter or cloud
Insights & Alerts
Telemetry
Analysis
W W
AA A
DB DB
Application-centric
Configuration
Policy
Network Functions
Instances](https://image.slidesharecdn.com/netscalercpxandmas-devsecopssgpresov1-160818104115/85/Implementing-Docker-Load-Balancing-in-Microservices-Infrastructure-12-320.jpg)
Implementing Docker Load Balancing in Microservices Infrastructure
- 1. 1 © 2016 Citrix | Confidential Implementing Docker Load Balancing in Microservices Infrastructure James Lee Solution Architect, Networking ASEAN James.lee@citrix.com AUG, 2016
- 2. © 2014 Citrix. Confidential.2 © 2015 Citrix - Confidential© 2015 Citrix - Confidential Bimodal IT Mode 1 Mode 2 Sophistication Infrastructure Monolithic Ops DevOps Application Containerization Ease of getting started On-prem Cloud
- 3. © 2014 Citrix. Confidential.3 © 2015 Citrix - Confidential Apps are Being Broken Down or Repackaged into Containers • Monolithic apps are broken down into components, Each component itself becomes an app – typically web apps, consumer apps, data bases • Or, a monolithic app is repackaged as a container • DevOps teams can focus on each containerized apps for development and scalability • These containerized apps can seamlessly move from on-prem to the cloud
- 4. © 2014 Citrix. Confidential.4 © 2015 Citrix - Confidential Docker Simplifies Building, Shipping in Containers Docker enables Mode 2 IT and DevOps •Provides components and libraries in a single object •Extensive versioning management capabilities simplifies committing to new version and rolling back to older version of code •Provides for component reuse allowing developers to build on top of existing container apps .
- 5. © 2014 Citrix. Confidential.5 © 2015 Citrix - Confidential Containerized Apps are Deployed from a Few Tens to Tens of Thousands… Simple Microservices Highly Complex Microservices: Twitter Call flows can be simple to complex. Note Death Star like pattern in a complex architecture .
- 6. © 2014 Citrix. Confidential.6 © 2015 Citrix - Confidential Implement Hub and Spoke for all Microservices Traffic CPX Subnet 1 Subnet 3 Subnet 2 CPX Rate Limit Surge Queue •Takes control of call flows through bridging and ACLs to control which apps can access which apps and rate limiting to protect apps .
- 7. © 2014 Citrix. Confidential.7 © 2015 Citrix - Confidential© 2015 Citrix - Confidential 2007 2009 2011 2016 New AppsTraditional IT Bimodal IT Mode 1 Mode 2
- 8. © 2014 Citrix. Confidential.8 © 2015 Citrix - Confidential Packaged as Docker Container Investment protection • Same code bits container form factor • Managed like any other NetScaler platform • Seamless transition from Development to Production You Can Deploy In Seconds! Server Linux OS Docker Engine App A bin/libs App B bin/libs App C bin/libs C P X bin/libs
- 9. 9 © 2016 Citrix | Confidential L4-L7 Functionality • CPX provides L4-L7 services for containerized apps: • Content Switching • Responder • Redirect • Rewrite • TCP Optimization • SSL Offloading: Equivalent set of ciphers as VPX for front end and back end, including support for ECC and TLS 1.2 • DDoS • DNS load balancing
- 10. © 2014 Citrix. Confidential.10 © 2015 Citrix - Confidential Free Docker and DevOps Friendly ADC: CPX Express • Free, unlicensed, for developer use • Same “great taste” as CPX without TCP optimization and Layer 7 DDoS • Limited to 20 Mbps and 250 SSL connections for US export compliance NetScaler CPX Express Container • Licensed, for production • Full layer 4 to 7 feature set, optimization, security • 1 Gbps, no limits on SSL connections NetScaler CPX Container
- 11. 11 © 2016 Citrix | Confidential Architect your Microservices with NetScaler CPX and MAS
- 12. © 2014 Citrix. Confidential.12 © 2015 Citrix - Confidential© 2015 Citrix - Confidential NetScaler [ SDX | MPX | VPX | CPX ] NetScaler Management & Analytics System Any Orchestration System NetScaler SD-WAN [ Physical | VPX ] any datacenter or cloud Insights & Alerts Telemetry Analysis W W AA A DB DB Application-centric Configuration Policy Network Functions Instances
- 13. © 2014 Citrix. Confidential.13 © 2015 Citrix - Confidential
- 14. © 2014 Citrix. Confidential.14 © 2015 Citrix - Confidential Client Microservices RegisterLookup Discovery Service Service Discovery and DNS Services Keep track of dynamic changes through APIs that describe changes in app environment
- 15. © 2014 Citrix. Confidential.15 © 2015 Citrix - Confidential Client Microservices RegisterLookup Discovery Service Service Discovery and DNS Services Keep track of dynamic changes through APIs that describe changes in app environment
- 16. © 2014 Citrix. Confidential.16 © 2015 Citrix - Confidential CPX NetScaler MAS Client Microservices RegisterLookup Discovery Service Events Keep track of dynamic changes through APIs that describe changes in app environment MAS interfaces with service discovery API and auto-configures CPX based on service discovery events Service Discovery and DNS Services
- 17. © 2014 Citrix. Confidential.17 © 2015 Citrix - Confidential CPX NetScaler MAS Client Microservices RegisterLookup Discovery Service Events Call service Choose Service Instance Dynamic nature of VIP hosted by CPX is abstracted from the client Keep track of dynamic changes through APIs that describe changes in app environment Service Discovery and DNS Services
- 18. © 2014 Citrix. Confidential.18 © 2015 Citrix - Confidential Unify North-South and East-West Traffic Handling MPX/SDX/VPX CPX CPX NetScaler MAS North-South East-West
- 19. © 2014 Citrix. Confidential.19 © 2015 Citrix - Confidential Config Advice Record and Play Configuration Jobs Configuration Management Config Audit Duplicating Configurations
- 20. © 2014 Citrix. Confidential.20 © 2015 Citrix - Confidential Configuration Advice Demo
- 21. © 2014 Citrix. Confidential.21 © 2015 Citrix - Confidential Record and Play Demo
- 22. © 2014 Citrix. Confidential.22 © 2015 Citrix - Confidential Summary reports and alerts Certificate renewal workflow Discovery of SSL Certificates Set and Enforce Policy Proactive Monitoring Certificate Management
- 23. © 2014 Citrix. Confidential.23 © 2015 Citrix - Confidential Certificate Management Demo
- 24. © 2014 Citrix. Confidential.24 © 2015 Citrix - Confidential System Wide RBA Application Level Control Operational Control Group Based Policies Across All Infra Role Based Access Control
- 25. © 2014 Citrix. Confidential.25 © 2015 Citrix - Confidential Advance RBAC Demo
- 26. © 2014 Citrix. Confidential.26 © 2015 Citrix - Confidential Logging and Analytics Log Streaming App Insights Security Insights Advanced Analytics HDX GWWeb AppFw Log aggregation at-scale (thousands of instances) Per-transaction visibility, reporting, and and roll-ups. Identify security threats and assess protection levels Machine-driven triage: scan for anomalies System
- 27. 27 © 2016 Citrix | Confidential CUGC Networking SIG • The place to go for everything related to Networking • Software-defined networking • Application delivery controllers • Next-generation security • Access exclusive content • Discussion forums, blogs, deployment guides, webinars • Citrix News sessions • Connect with peers • Online community within the CUGC • Open to Citrix customers, partners, employees Join now: https://www.mycugc.org/page/networking-sig Google: CUGC Networking SIG
- 28. 28 © 2016 Citrix | Confidential https://community.spiceworks.com/pages/citrixsystems?tab=18384 Vendor page 3800+ Followers 15th of 254 Vendors Forum postings Links to content Product reviews with contest Link to events Links to guides Spiceworks Community
- 29. 29 © 2016 Citrix | Confidential Stack Overflow Community Proposal in process Technical forums Product selection Product discussions Ads on tagged discussions link to NetScaler content
- 30. Work better. Live better.