optimizing netscaler for enterprise applications n.
Download
Skip this Video
Loading SlideShow in 5 Seconds..
Optimizing NetScaler for Enterprise Applications PowerPoint Presentation
Download Presentation
Optimizing NetScaler for Enterprise Applications

play fullscreen
1 / 44

Optimizing NetScaler for Enterprise Applications

696 Views Download Presentation
Download Presentation

Optimizing NetScaler for Enterprise Applications

- - - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - - -
Presentation Transcript

  1. Optimizing NetScaler for Enterprise Applications Dave Hawkins, TRM May 11, 2010

  2. Topics • Generic Optimization Features • Standard NetScaler Optimization & Configuration • AppExpert Templates • Specific Application Examples • Troubleshooting Citrix Confidential - Do Not Distribute

  3. NetScaler Optimization Features

  4. NetScaler Optimization Features • SSL Offload • Content Compression • Content Caching • Connection reuse • NetScaler Push • Responder Citrix Confidential - Do Not Distribute

  5. NetScaler Optimization Features – SSL Offload SSL Offload Compression • Reduce Server Load • Higher TPS • Central Certificate Management • Central Cipher Management Caching Connection Reuse Citrix Confidential - Do Not Distribute

  6. NetScaler Optimization Features – Compression SSL Offload Compression • Faster response • Fewer bytes on-wire • Better response for low-bandwidth clients • Policy-based rules Caching Connection Reuse Citrix Confidential - Do Not Distribute

  7. NetScaler Optimization Features – Caching SSL Offload Compression • Reduce server load • Faster response • Policy-based controls Caching Connection Reuse Citrix Confidential - Do Not Distribute

  8. NetScaler Optimization Features – Connection Reuse SSL Offload Compression • Reduce server load • Faster server response Caching Connection Reuse Citrix Confidential - Do Not Distribute

  9. NetScaler Optimization Features – NetScaler Push Request • Web 2.0: Request-Response-Response model • Requires long-lived sessions with dynamic updates Response • Web 1.0: Request-Response model Update Update Citrix Confidential - Do Not Distribute

  10. NetScaler Optimization Features – NetScaler Push Request Update Response Request Response Update Update • Alleviate long-lived TCP connections between clients & servers • Push single update to multiple clients • *MPP REST based Request Request Response Response Request Response Update Request Response Citrix Confidential - Do Not Distribute

  11. NetScaler Optimization Features – Responder GET /etc/db/credit-cards.xml ZZZzzzzzz... • Policy-based configuration • Reduce server load • Reset, Redirect, or Respond-With Request Response 302 – Object MovedLocation: http://www.fbi.gov Citrix Confidential - Do Not Distribute

  12. Standard Configuration and Optimization Performance

  13. Standard HTTP Load Balancing “Sharepoint” SSL+HTTP Load Balancing Configuration SSL Handling on Servers *Times based on 1.5mbps connection with 0.7% packet loss. Source: Citrix Application Optimization for MOSS 2007 Performance Assessment - http://support.citrix.com/article/ctx120235 Citrix Confidential - Do Not Distribute

  14. SSL-Offloaded HTTP Load Balancing SSL-Offload + Compression Load Balancing Configuration SSL Handling on NetScalerStatic/Dynamic content compressed Servers configured as plaintext HTTP Source: Citrix Application Optimization for MOSS 2007 Performance Assessment - http://support.citrix.com/article/ctx120235 Citrix Confidential - Do Not Distribute

  15. SSL-Offload + Cmp +Caching HTTP Load Balancing SSL offload + Compression + Integrated CachingLoad Balancing Configuration SSL Handling on NetScaler + Compression with Integrated Caching *Cache object max. limit set to 10MB Source: Citrix Application Optimization for MOSS 2007 Performance Assessment - http://support.citrix.com/article/ctx120235 Citrix Confidential - Do Not Distribute

  16. Sharepoint Optimizations • Specific doc types require different handling - .aspx, .doc, .css, etc. • Separate caching policies and content-groups for doc types • Configured max. object size per content-group:Scripts, Images: 4MBDocuments (.doc, .pdf): 10MB • Documents have specific expiry times: 360Ksec HTTP.REQ.METHOD.EQ(GET) && HTTP.REQ.URL.PATH.EQ("/_layouts/download.aspx") HTTP.REQ.METHOD.CONTAINS("LOCK") Citrix Confidential - Do Not Distribute

  17. Sharepoint Optimizations • Compression policy – all requests for items not already compressed (except image services) .gz, .tgz • Configure servers for “Load Balanced URL” • Responder module redirect HTTP to SSL Citrix Confidential - Do Not Distribute

  18. Advanced Optimization

  19. AppExpert Templates Citrix Confidential - Do Not Distribute

  20. AppExpert Templates • Built around standard configuration • Time-tested for stability • Performance-tested for maximumbenefit • Rapid deployment with minimalconfiguration • Free! Citrix Confidential - Do Not Distribute

  21. Example: Sharepoint AppExpert Template • Detailed deployment guide • 10 Application Services templates • Includes compression, caching, responder policies • Includes caching selectors for parameterized caching • Available at http://community.citrix.com/display/ns/Microsoft+Sharepoint+AppExpert+Template Citrix Confidential - Do Not Distribute

  22. Advanced Optimization: Caching • Use Content-Group settings to optimizefor min/max content size, or overallnumber of hits. • Use parameterization to optimize cache retrieval or invalidation. • Prioritize NO_CACHE policies before CACHE policies • Use multiple Content-Groups to allow for specific cache-clearing Citrix Confidential - Do Not Distribute

  23. Advanced Optimization: Compression • Select Optimal compression level (gzip level 5-6 for best size / performance) Citrix Confidential - Do Not Distribute

  24. Advanced Optimization: SSL Offload • In end-to-end, use low-level ciphers in NS-to-service communication • Cipher selection depends on client-needs, and security considerations. • Can be combined with IC and Compression for maximum impact Citrix Confidential - Do Not Distribute

  25. Advanced Optimization: Network Optimizations • SACK and Window Scaling • Nagle’s Algorithm for small packets • TCP Buffering for slow clients • PMTUD – Path MTU Discovery • USIP (Use Source-IP) & DSR when available =~ 50% Network Savings Request Response Request Citrix Confidential - Do Not Distribute

  26. Advanced Troubleshooting

  27. NSCONMSG • Primary tool for detailed analysis • NetScaler logs all statistics every 7 seconds • Uses logs from /var/nslog • Logfiles are gzipped (use zcat) • Some stats now available via GUI(System > Diagnostics) Citrix Confidential - Do Not Distribute

  28. NSCONMSG – General Format nsconmsg –K <file> -s <options> -g <grep> -d <operation>(zcat <file.gz> | nsconmsg –K pipe – or gunzip them) • -s options include: • Start date or time • Maximum values • Rate counts • Add timestamps • Debugging levels • *csv format! • Format: • -s option=valueie, -s disptime=1 • -d options include: • Stats – view raw statistics • Memstats – view memory-only stastics • Event – view system events (svc failures) • Auditedcmd – view cmds run on the system • Devcr – view device creation/removal • Example: • -d memstats Citrix Confidential - Do Not Distribute

  29. NSCONMSG – Examples Scenario: Testing reports problems with SSL VIP earlier. What happened? Displaying current counter value information NetScaler V20 Performance Data NetScaler NS9.1: Build 101.5.cl, Date: Jan 19 2010, 07:12:11 reltime:mili second between two records Fri Feb 5 10:31:31 2010 Index reltime counter-value symbol-name&device-no 0 0 0 ssl_err_ssl3_badversion 1 0 0 ssl_err_cavium_random_seed_failed 2 0 0 ssl_err_ubsec_card_reset 3 0 0 ssl_err_ssl3_send_server_hello 4 0 0 ssl_err_ssl3_send_server_certificate 5 0 0 ssl_err_ssl3_send_server_key_exchange 6 0 0 ssl_err_ssl3_send_certificate_request 7 0 0 ssl_err_ssl3_send_server_done 8 0 0 ssl_err_ssl3_check_client_hello_A_OR_get_client_cert 9 0 0 ssl_err_ssl3_get_client_certificate 10 0 0 ssl_err_ssl3_get_client_key_exchange_card 11 0 0 ssl_err_ssl3_check_client_hello_B_OR_get_client_keyEx 12 0 0 ssl_err_ssl3_get_client_key_exchange 13 0 0 ssl_err_ssl3_get_change_cipher_spec 14 0 0 ssl_err_ssl3_get_cert_verify 15 0 0 ssl_err_ssl3_get_finished 16 0 0 ssl_err_ssl3_setup_key_block nsconmsg –K newnslog –g ssl_err –d stats Current logfile Grep for ‘ssl_err’ View initial statistics Citrix Confidential - Do Not Distribute

  30. NSCONMSG – Examples Scenario: Testing reports problems with SSL VIP earlier. What happened? View timestamps nsconmsg –K newnslog –s disptime=1 –g ssl_err_ssl3 –d current View historic statistics Index rtimetotalcount-val delta rate/sec symbol-name&device-no&time 108 0 78 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:01:06 2010 109 14000 11 2 0 ssl_error_cvm_bad_record Fri Feb 5 12:01:20 2010 110 7000 79 1 0 ssl_err_ssl3_badversion Fri Feb 5 12:01:27 2010 111 0 79 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:01:27 2010 112 28000 81 2 0 ssl_err_ssl3_badversion Fri Feb 5 12:01:55 2010 113 0 81 2 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:01:55 2010 114 7000 83 2 0 ssl_err_ssl3_badversion Fri Feb 5 12:02:02 2010 115 0 83 2 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:02:02 2010 116 14000 93 10 1 ssl_err_ssl3_badversion Fri Feb 5 12:02:16 2010 117 0 93 10 1 ssl_err_ssl3_get_client_hello Fri Feb 5 12:02:16 2010 118 7000 96 3 0 ssl_err_ssl3_badversion Fri Feb 5 12:02:23 2010 119 0 96 3 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:02:23 2010 120 112000 97 1 0 ssl_err_ssl3_badversion Fri Feb 5 12:04:15 2010 121 0 97 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:04:15 2010 122 7000 98 1 0 ssl_err_ssl3_badversion Fri Feb 5 12:04:22 2010 123 0 98 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:04:22 2010 124 7000 104 6 0 ssl_err_ssl3_badversion Fri Feb 5 12:04:29 2010 125 0 104 6 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:04:29 2010 126 70025 105 1 0 ssl_err_ssl3_badversion Fri Feb 5 12:05:45 2010 127 0 105 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:05:45 2010 128 7000 107 2 0 ssl_err_ssl3_badversion Fri Feb 5 12:05:52 2010 129 0 107 2 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:05:52 2010 Citrix Confidential - Do Not Distribute

  31. Screen clipping taken: 3/24/2010, 1:59 PM NSCONMSG – Examples Scenario: Testing reports problems with SSL VIP earlier. What happened? Output to csv nsconmsg –K newnslog -s csv=1 –g ssl_err_ssl3_badversion –d current > sslv3.csv Grep specific counter Write to file Citrix Confidential - Do Not Distribute

  32. NSCONMSG – Examples Scenario: Intermittent dropped sessions – what’s going on? nsconmsg –K newnslog –g tcp_err –d current reltime:mili second between two records Fri Feb 5 10:55:31 2010 Index rtimetotalcount-val delta rate/sec symbol-name&device-no 1256 0 9 1 0 tcp_err_rst_pass_pnd_data 1257 0 26 1 0 tcp_err_rst_pass_pnd_get 1258 0 60 4 0 tcp_err_rst_pass_srvr 1259 0 140 1 0 tcp_err_oo_range_ack 1260 0 112 1 0 tcp_err_srvr_retransmit 1261 0 448 18 2 tcp_err_clnt_retransmit 1262 0 556 19 2 tcp_err_full_retransmit 1263 0 785 22 3 tcp_err_clnt_out_of_order 1264 0 102 33 4 tcp_err_srvr_out_of_order 1265 0 83 1 0 tcp_err_orphan_ack_keepalive 1266 0 772 21 3 tcp_err_hole_client 1267 0 4 1 0 tcp_err_hole_server 1268 0 776 22 3 tcp_err_hole_detected Citrix Confidential - Do Not Distribute

  33. NSCONMSG – Examples Scenario: Intermittent dropped sessions – what’s going on? nsconmsg –K newnslog –g tcp_err_ooo –d current reltime:mili second between two records Fri Feb 5 13:43:54 2010 Index rtimetotalcount-val delta rate/sec symbol-name&device-no 0 11340678 7 7 1 tcp_err_ooo_maxpkt 1 2485190 10 3 0 tcp_err_ooo_maxpkt 2 7001 12 2 0 tcp_err_ooo_maxpkt 3 1470172 13 1 0 tcp_err_ooo_maxpkt 4 252023 15 2 0 tcp_err_ooo_maxpkt 5 392017 24 9 1 tcp_err_ooo_maxpkt 6 357024 26 2 0 tcp_err_ooo_maxpkt 7 252036 33 7 1 tcp_err_ooo_maxpkt 8 539040 35 2 0 tcp_err_ooo_maxpkt 9 1148108 38 3 0 tcp_err_ooo_maxpkt 10 780611 39 1 0 tcp_err_ooo_maxpkt 11 504035 55 16 2 tcp_err_ooo_maxpkt 12 28000 56 1 0 tcp_err_ooo_maxpkt 13 305818 57 1 0 tcp_err_ooo_maxpkt 14 589541 62 5 0 tcp_err_ooo_maxpkt 15 49021 69 7 0 tcp_err_ooo_maxpkt Citrix Confidential - Do Not Distribute

  34. NSCONMSG – Examples Checking utilization and memory use in detail nsconmsg –K newnslog –d memstats Displaying current memory stats information ---------------------------------------------------------------------------------------------------------------------- TotalMEM: 2688046946 Allocated: 258642274(9.62%) ActualInUse: 192482290(7.16%) Free: 2429404672 MEMPOOL MaxAllowd CurAlloc ErrLmtFailed ErrAllocFailed ErrFreeFailed ---------------------------------------------------------------------------------------------------------------------- MEM_CPROXY 134217728 16777216(0.62%) 0 0 0 MEM_PAC Dynamic 32768(0.00%) 0 0 0 MEM_RESPONDER_CONFIG Dynamic 8256(0.00%) 0 0 0 MEM_RW_CONFIG Dynamic 330606(0.01%) 0 0 0 MEM_SSL Dynamic 5509248(0.20%) 0 0 0 MEM_CACONF Dynamic 0(0.00%) 0 0 0 MEM_PANNER Dynamic 0(0.00%) 0 0 0 MEM_PANSTR Dynamic 434(0.00%) 0 0 0 MEM_PI_RUNTIME Dynamic 0(0.00%) 0 0 0 MEM_HINFOBUF Dynamic 0(0.00%) 0 0 0 MEM_PIRL Dynamic 0(0.00%) 0 0 0 MEM_PATSET Dynamic 177994(0.01%) 0 0 0 MEM_ASYNC Dynamic 0(0.00%) 0 0 0 MEM_WU_MEM Dynamic 5594104(0.21%) 0 0 0 MEM_APPSECURE Dynamic 29886297(1.11%) 0 0 0 MEM_PI_CONFIG Dynamic 63280(0.00%) 0 0 0 MEM_AUDITLOG 16384000 333772(0.01%) 0 0 0 MEM_POLENG 100663296 106000(0.00%) 0 0 0 MEM_GSLB 33554432 0(0.00%) 0 0 0 MEM_DNS 5242880 0(0.00%) 0 0 0 MEM_DCC 10485760 0(0.00%) 0 0 0 MEM_TCPBUFFP 0 0(0.00%) 0 0 0 MEM_LB_PHYSVC 4796416 801(0.00%) 0 0 0 MEM_LB_PHYSERVER 3932160 768(0.00%) 0 0 0 MEM_URLMON 15728640 0(0.00%) 0 0 0 MEM_IPFRAG 524288 0(0.00%) 0 0 0 MEM_SERVMON 24514560 8704(0.00%) 0 0 0 MEM_MISC Dynamic 136541842(5.08%) 0 0 0 MEM_DEBUG 262144 1216(0.00%) 0 0 0 MEM_SNMP 41943040 15808(0.00%) 0 0 0 MEM_CONN Dynamic 62949376(2.34%) 0 0 0 MEM_LOGGING Dynamic 0(0.00%) 0 0 0 MEM_IOH 5242880 0(0.00%) 0 0 0 MEM_CSWMEM 16777216 2560(0.00%) 0 0 0 MEM_LB_SERVICE 12165120 0(0.00%) 0 0 0 MEM_LB_VIP 47448064 10144(0.00%) 0 0 0 MEM_LB_SESSION 136314880 0(0.00%) 0 0 0 MEM_LB_SERVER 12582912 0(0.00%) 0 0 0 MEM_PE 20971520 291080(0.01%) 0 0 0 4MB_PAGE_CONN_POOL_MEMBERS: Name CurAllocd CurFree PgAllocd PgAllocFailed ---------------------------------------------------------------------------------- NSB 16380 15867 7 (1.1%) 0 PCB 6553 6552 1 (0.2%) 0 NATPCB 21845 21845 1 (0.2%) 0 B64 65536 65532 1 (0.2%) 0 B128 0 0 0 (0.0%) 0 B256 0 0 0 (0.0%) 0 DNSsmall 0 0 0 (0.0%) 0 DNSfull 0 0 0 (0.0%) 0 SPCB 0 0 0 (0.0%) 0 SSL_SESS 0 0 0 (0.0%) 0 Other_CONN_POOL_MEMBERS: CacheBuf 1(0.0%) 0 4MB_PAGE_MISC_POOL_MEMBERS: Name CurAllocd CurFree PgAllocd PgAllocFailed ---------------------------------------------------------------------------------- SINFO 2048 2025 1 (0.2%) 0 DEVNAME 174762 174422 1 (0.2%) 0 4MB_PAGE_SSL_POOL_MEMBERS: Name CurAllocd CurFree PgAllocd PgAllocFailed ---------------------------------------------------------------------------------- CVMBUF 1 (0.2%) 0 4MB_PAGE_PANNER_POOL_MEMBERS: Name CurAllocd CurFree PgAllocd PgAllocFailed ---------------------------------------------------------------------------------- PAN 0 0 0 (0.0%) 0 4MB_PAGE_CPROXY_POOL_MEMBERS: Name CurAllocd CurFree PgAllocd PgAllocFailed ---------------------------------------------------------------------------------- CK1024 4096 4096 1 (0.2%) 0 CK2048 2048 2048 1 (0.2%) 0 CK4096 1024 1024 1 (0.2%) 0 CKPATH 4032 4032 1 (0.2%) 0 Citrix Confidential - Do Not Distribute

  35. NSCONMSG – Examples Checking for distribution and performance nsconmsg –K newnslog –s ConLb=3 –d distrconmsg VIP(1.1.1.1:636:UP:WEIGHTEDRR): Hits(2506) Pers(OFF) PersHits(0:0%) Err(0:0%) Ovrride(0:0%) S(1.1.1.100:636:UP) Hits(835:33%) PHits(0:0%) LbHits(835:100%) S(1.1.1.101:636:UP) Hits(836:33%) PHits(0:0%) LbHits(836:100%) S(1.1.1.102:636:UP) Hits(835:33%) PHits(0:0%) LbHits(835:100%) VIP(2.2.2.2:389:UP:WEIGHTEDRR): Hits(6) Pers(OFF) PersHits(0:0%) Err(0:0%) Ovrride(0:0%) S(2.2.2.100:389:UP) Hits(2:33%) PHits(0:0%) LbHits(2:100%) S(2.2.2.101:389:UP) Hits(2:33%) PHits(0:0%) LbHits(2:100%) S(2.2.2.102:389:UP) Hits(2:33%) PHits(0:0%) LbHits(2:100%) VIP(3.3.3.3:123:UP:WEIGHTEDRR): Hits(180) Pers(SOURCEIP) PersHits(180:100%) Err(0:0%) Ovrride(0:0%) S(3.3.3.100:123:UP) Hits(42:23%) PHits(42:100%) LbHits(0:0%) S(3.3.3.101:123:UP) Hits(49:27%) PHits(49:100%) LbHits(0:0%) S(3.3.3.102:123:UP) Hits(46:25%) PHits(46:100%) LbHits(0:0%) S(3.3.3.103:123:UP) Hits(43:23%) PHits(43:100%) LbHits(0:0%) VIP(4.4.4.4:53:UP:WEIGHTEDRR): Hits(9410) Pers(OFF) PersHits(0:0%) Err(0:0%) Ovrride(0:0%) S(4.4.4.100:53:UP) Hits(4705:50%) PHits(0:0%) LbHits(4705:100%) S(4.4.4.101:53:UP) Hits(4705:50%) PHits(0:0%) LbHits(4705:100%) VIP(127.0.0.2:53:DOWN:WEIGHTEDRR): Hits(0) Pers(OFF) PersHits(0:0%) Err(0:0%) Ovrride(0:0%) ------------------------------------------------------- CPU:2.2% MEM:213817642 UP:19.13:41:43 since:Sat Mar 20 01:03:59 2010 Citrix Confidential - Do Not Distribute

  36. NSCONMSG – Examples Checking for distribution and performance nsconmsg –K newnslog –s ConLb=3 –d oldconmsg current time is Thu Apr 8 14:45:28 2010 ------------------------------------------------------- NATSession : Free(19644)A(21845)InUse(2201) NATSession: Cur(Tcp[194] Udp[2007] Icmp[0] Other[0]) NATSession: Op/s(Tcp[3] Udp[436] Icmp[1] Other[0]) Session: A:9187 F:4604 IUse:4583 SEs: SIP:4582 C:0 SSL:0 Svr:1 UserId:0 SIPDIP:0 DIP:0 SO:0 SSF: Conn (Srvr 0 Clnt 1) U:0 CM: Conn (Srvr 0 Clnt 1) Sessions PCB 0 NATPCB 0 Z(SIP[68307], C[0], SSL[0] Server[22] SIPDIP[0] DIP[0] SO[0]) Mon: Probes: 24303862, Failed: 3757181 Citrix Confidential - Do Not Distribute

  37. NSCONMSG – Examples Checking for distribution and performance nsconmsg –K newnslog –s ConLb=3 –d oldconmsg VIP(3.3.3.3:123:UP:WEIGHTEDRR): Hits(6108723, 4/sec) Mbps(0.01) Pers(SOURCEIP) Err(0) LConn_BestIdx: 1024 Pkt(13/sec, 48 bytes) actSvc(4) DefPol(NONE) override(0) Conn: Clt(907, 4/sec, OE[907]) Svr(907) S(3.3.3.100:123:UP) Hits(1513624, 0/sec, P[1512683, 0/sec]) ATr(210:210) Mbps(0.00) BWlmt(0 kbits) RspTime(0.00 ms) Load(0) LConn_Idx: (C:0; V:0,I:1) Other: Pkt(1/sec, 48 bytes) Wt(1) Wt(Reverse Polarity)(10000) Conn: CSvr(210, 0/sec) MCSvr(249) OE(210) E(210) RP(0) SQ(0) Monitor_ping-default_of_serv1-123(10.153.40.27:123) Resp Time : 461 micros S(3.3.3.101:123:UP) Hits(1512236, 1/sec, P[1511295, 1/sec]) ATr(237:237) Mbps(0.00) BWlmt(0 kbits) RspTime(0.00 ms) Load(0) LConn_Idx: (C:0; V:0,I:1) Other: Pkt(4/sec, 48 bytes) Wt(1) Wt(Reverse Polarity)(10000) Conn: CSvr(237, 1/sec) MCSvr(269) OE(237) E(237) RP(0) SQ(0) Monitor_ping-default_of_serv2-123(10.153.40.26:123) Resp Time : 578 micros S(3.3.3.102:123:UP) Hits(1544960, 0/sec, P[1544019, 0/sec]) ATr(243:243) Mbps(0.00) BWlmt(0 kbits) RspTime(0.00 ms) Load(0) LConn_Idx: (C:0; V:0,I:1) Other: Pkt(2/sec, 48 bytes) Wt(1) Wt(Reverse Polarity)(10000) Conn: CSvr(243, 0/sec) MCSvr(237) OE(243) E(243) RP(0) SQ(0) Monitor_ping-default_of_serv3-123(10.153.38.27:123) Resp Time : 553 micros S(3.3.3.103:123:UP) Hits(1537903, 1/sec, P[1536962, 1/sec]) ATr(217:217) Mbps(0.00) BWlmt(0 kbits) RspTime(0.00 ms) Load(0) LConn_Idx: (C:0; V:0,I:1) Other: Pkt(5/sec, 48 bytes) Wt(1) Wt(Reverse Polarity)(10000) Conn: CSvr(217, 1/sec) MCSvr(260) OE(217) E(217) RP(0) SQ(0) Monitor_ping-default_of_serv4-123(10.153.38.26:123) Resp Time : 543 micros Citrix Confidential - Do Not Distribute

  38. NSCONMSG – Examples Checking for distribution and performance nsconmsg –K newnslog –s Con???=3 –d oldconmsg ConDebug - Debugging ConLb - Load Balancing ConMon - Monitoring Probes ConMEM - Memory Management ConCSW - Content Switching ConSSL - SSL Offload ConCMP - Compression ConIC - Integrated Caching Citrix Confidential - Do Not Distribute

  39. nstrace.sh • Nstrace supports filtering in 9.x nstrace -size 0 -filter "SOURCEIP == 10.1.2.3 && SOURCEPORT == 8080" -link ENABLE Packet-size limit Filters in standard NS policy format Booleans supported! Automatically capture linkedclient/server connections Filter on: SOURCEIPSOURCEPORTDESTIPDESTPORTSVCNAMEVSVRNAMESTATE http://support.citrix.com/article/ctx121166 Citrix Confidential - Do Not Distribute

  40. Wireshark Just one missing frame… …can cause big headaches. Citrix Confidential - Do Not Distribute

  41. Wireshark • nstrace files now officially supported in Wireshark! • Available in latest dev release (not Stable release) – 1.3.4 • Includes ns.pdevno and ns.l_pdevno filtering Citrix Confidential - Do Not Distribute

  42. Recommended related breakout sessions: SYN410D – Implementing NetScaler to Optimize Microsoft Exchange hands-on (Wed. 12th @ 2PM) Continue your learning – visit www.citrix.com/SynergyEDU for more information Session surveys are available online at www.citrixsummit.com starting Thursday, May 13 Provide your feedback and pick up your complimentary Starbucks or iTunes giftcard at the registration desk Download presentations starting Friday, May 21, from your My Schedule Tool located in your My Synergy Microsite event account Before you leave…

  43. Questions? Comments?