Universal Hybrid Multi Cloud License – Unlimited NetScaler’s

-

There is a new license model from Citrix that will let you run NetScaler and Citrix in both cloud and on-premises environments using the same license.

In this license there is a generous entitlement to 1000 software instances of NetScaler in the form factors of VPX, CPX and BLX. In other words, all the virtual NetScaler’s. 

You will need a NetScaler Console setup where you can then distribute 1 terabit of bandwidth throughput, granularly configured, the way you need it, to these appliances. Which is very good since NetScaler is now supported on all major delivery platforms:

On-premises: VMware, Nutanix, XenServer, Hyper-V 
Cloud: Azure, AWS, Google Cloud, Oracle Cloud, IBM Cloud

What can we do with all this capacity suddenly offered to us? I have identified a few common scenarios that might remind you of your own situation: 

Scenario 1: I have an F5 solution on-premises, and I use NetScaler only as a Citrix Gateway 

F5 can be migrated to NetScaler and me and Xenit can help you to do this. This will give you a significantly lower cost over time. NetScaler has an advanced architecture and you can improve your configuration while doing this. We have built the competence and experience from multiple projects.

NetScaler can be setup with no extra licensing cost in your cloud environments and your remote datacentres. Because of NetScaler´s highly flexible architecture it can also be used together with F5 (in case you want to keep it) and fill in the weak spots where F5 might not deliver the same value as NetScaler can do.

Scenario 2: I already have NetScaler setup on-premises but nowhere else 

Well, that is good news, you can then build out with virtual NetScaler’s in your cloud environments, in your remote datacentres, in your Kubernetes or docker solution with CPX and on your Linux based servers with BLX. 

Manage, monitor and license with NetScaler Console. Of course, you can also re-build or re-size your current deployment. 

Scenario 3: I really would like to use this new NetScaler capacity, but I am not aware of good use-cases

NetScaler is first and foremost a load balancer just like F5, VMware NSX, Kemp to name a few. 

A common and strong use case is to set NetScaler up as a reverse proxy with connection to both internet and local networks. High security can then be achieved in different layers of the communication to your needs. This can enable or strengthen a Zero Trust Security strategy, replace legacy VPN and be your go-to delivery platform for all your applications.

With the authentication and SSO feature you can create an authentication wall, perhaps with EntraID followed up by LDAP queries. Advanced configurations can be created which can solve challenges in large directories. SSO experiences can be enabled by passing on Kerberos tokens, JWT, custom headers to backend servers and/or load balancers.

NetScaler can help you with improving your security posture, by managing headers like User-Agent, CSP, CORS, X-Robots-tag in dynamic configurations. Web Application Firewall can protect you from exploits, various cyberattacks and rate limiting can be used to protect your API:s. 

NetScaler can help you migrate third-party apps to the cloud that needs a more advanced enterprise load balancer. It can also help you to reduce costs in the cloud by replacing features like Azure Application Gateway, Azure Load Balancer, Azure Traffic Manager, Azure API management. With NetScaler this will not cost you a dime and you will be able to achieve the same thing but in a more advanced and raffinate way. 

NetScaler can help you enrich your cloud-based applications by securing traffic from Cloud to data sources like for example API:s hosted on-premises. 

When all your web applications are fronted with NetScaler it is also an easy step to integrate with a CDN service for global reach, improved performance and even higher security.


Location: Stockholm, Sweden

Comments

Post a Comment

Popular posts from this blog

F5 to NetScaler Migration

-
Image
I recently had the opportunity to participate from start to finish as the primary technical resource in a project with the goal of completely phasing out a physical F5 solution, migrating the entire configuration and all applications to a NetScaler solution. I was also expected to design and implement the solution and to improve and modernize the configuration. The customer requested a fully virtual solution that they could implement in their global VMware-based hypervisor environment. A much more flexible deployment of load balancers could be easily achieved, since the customer had recently acquired a Universal Hybrid Multi Cloud (UHMC) license which entitled them to 1000 units of NetScaler and a terabit of bandwidth throughput. There were approximately 300 unique applications that needed to be managed in some way in the project. In the F5 solution, there was an externally accessible instance and a completely internal instance to be able to distinguish between external traffic from th...
Read more

Verify JWT token with NetScaler unauthenticated

-
So lets say you have tried the wonderful feature with 401 based oauth action to verify JWT tokens. It works great when it works, but there could also be other situations where it does not fulfil the need. Sometimes tokens are not passed in the standard authorization header, correct attributes might not be there or there could be challenges with cookies at client side. JWT_VERIFY_CERTKEY can be used to verify signature with locally installed certs. This is an example of how you can verify multiple cert keys. HTTP.REQ.HEADER("Authorization").AFTER_STR("Bearer ").JWT_VERIFY_CERTKEY("cert-1").NOT && HTTP.REQ.HEADER("Authorization").AFTER_STR("Bearer ").JWT_VERIFY_CERTKEY("cert-2").NOT && HTTP.REQ.HEADER("Authorization").AFTER_STR("Bearer ").JWT_VERIFY_CERTKEY("cert-3).NOT How will you know if these tokens are not too old and expired? This is an example which you can use where the NS would v...
Read more