Optimizing netscaler for enterprise applications
This presentation is the property of its rightful owner.
Sponsored Links
1 / 44

Optimizing NetScaler for Enterprise Applications PowerPoint PPT Presentation


  • 113 Views
  • Uploaded on
  • Presentation posted in: General

Optimizing NetScaler for Enterprise Applications. Dave Hawkins, TRM May 11, 2010. Topics. Generic Optimization Features Standard NetScaler Optimization & Configuration AppExpert Templates Specific Application Examples Troubleshooting. NetScaler Optimization Features.

Download Presentation

Optimizing NetScaler for Enterprise Applications

An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.


- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -

Presentation Transcript


Optimizing netscaler for enterprise applications

Optimizing NetScaler for Enterprise Applications

Dave Hawkins, TRM

May 11, 2010


Topics

Topics

  • Generic Optimization Features

  • Standard NetScaler Optimization & Configuration

  • AppExpert Templates

  • Specific Application Examples

  • Troubleshooting

Citrix Confidential - Do Not Distribute


Netscaler optimization features

NetScaler Optimization Features


Netscaler optimization features1

NetScaler Optimization Features

  • SSL Offload

  • Content Compression

  • Content Caching

  • Connection reuse

  • NetScaler Push

  • Responder

Citrix Confidential - Do Not Distribute


Netscaler optimization features ssl offload

NetScaler Optimization Features – SSL Offload

SSL Offload

Compression

  • Reduce Server Load

  • Higher TPS

  • Central Certificate Management

  • Central Cipher Management

Caching

Connection

Reuse

Citrix Confidential - Do Not Distribute


Netscaler optimization features compression

NetScaler Optimization Features – Compression

SSL Offload

Compression

  • Faster response

  • Fewer bytes on-wire

  • Better response for low-bandwidth clients

  • Policy-based rules

Caching

Connection

Reuse

Citrix Confidential - Do Not Distribute


Netscaler optimization features caching

NetScaler Optimization Features – Caching

SSL Offload

Compression

  • Reduce server load

  • Faster response

  • Policy-based controls

Caching

Connection

Reuse

Citrix Confidential - Do Not Distribute


Netscaler optimization features connection reuse

NetScaler Optimization Features – Connection Reuse

SSL Offload

Compression

  • Reduce server load

  • Faster server response

Caching

Connection

Reuse

Citrix Confidential - Do Not Distribute


Netscaler optimization features netscaler push

NetScaler Optimization Features – NetScaler Push

Request

  • Web 2.0: Request-Response-Response model

  • Requires long-lived sessions with dynamic updates

Response

  • Web 1.0: Request-Response model

Update

Update

Citrix Confidential - Do Not Distribute


Netscaler optimization features netscaler push1

NetScaler Optimization Features – NetScaler Push

Request

Update

Response

Request

Response

Update

Update

  • Alleviate long-lived TCP connections between clients & servers

  • Push single update to multiple clients

  • *MPP REST based

Request

Request

Response

Response

Request

Response

Update

Request

Response

Citrix Confidential - Do Not Distribute


Netscaler optimization features responder

NetScaler Optimization Features – Responder

GET /etc/db/credit-cards.xml

ZZZzzzzzz...

  • Policy-based configuration

  • Reduce server load

  • Reset, Redirect, or Respond-With

Request

Response

302 – Object MovedLocation: http://www.fbi.gov

Citrix Confidential - Do Not Distribute


Standard configuration and optimization performance

Standard Configuration and Optimization Performance


Standard http load balancing

Standard HTTP Load Balancing

“Sharepoint” SSL+HTTP Load Balancing Configuration

SSL Handling on Servers

*Times based on 1.5mbps connection with 0.7%

packet loss.

Source: Citrix Application Optimization for MOSS 2007 Performance Assessment - http://support.citrix.com/article/ctx120235

Citrix Confidential - Do Not Distribute


Ssl offloaded http load balancing

SSL-Offloaded HTTP Load Balancing

SSL-Offload + Compression Load Balancing Configuration

SSL Handling on NetScalerStatic/Dynamic content compressed

Servers configured as plaintext HTTP

Source: Citrix Application Optimization for MOSS 2007 Performance Assessment - http://support.citrix.com/article/ctx120235

Citrix Confidential - Do Not Distribute


Ssl offload cmp caching http load balancing

SSL-Offload + Cmp +Caching HTTP Load Balancing

SSL offload + Compression + Integrated CachingLoad Balancing Configuration

SSL Handling on NetScaler + Compression with Integrated Caching

*Cache object max. limit set to 10MB

Source: Citrix Application Optimization for MOSS 2007 Performance Assessment - http://support.citrix.com/article/ctx120235

Citrix Confidential - Do Not Distribute


Sharepoint optimizations

Sharepoint Optimizations

  • Specific doc types require different handling - .aspx, .doc, .css, etc.

  • Separate caching policies and content-groups for doc types

  • Configured max. object size per content-group:Scripts, Images: 4MBDocuments (.doc, .pdf): 10MB

  • Documents have specific expiry times: 360Ksec

HTTP.REQ.METHOD.EQ(GET) && HTTP.REQ.URL.PATH.EQ("/_layouts/download.aspx")

HTTP.REQ.METHOD.CONTAINS("LOCK")

Citrix Confidential - Do Not Distribute


Sharepoint optimizations1

Sharepoint Optimizations

  • Compression policy – all requests for items not already compressed (except image services) .gz, .tgz

  • Configure servers for “Load Balanced URL”

  • Responder module redirect HTTP to SSL

Citrix Confidential - Do Not Distribute


Advanced optimization

Advanced Optimization


Optimizing netscaler for enterprise applications

AppExpert

Templates

Citrix Confidential - Do Not Distribute


Appexpert templates

AppExpert Templates

  • Built around standard configuration

  • Time-tested for stability

  • Performance-tested for maximumbenefit

  • Rapid deployment with minimalconfiguration

  • Free!

Citrix Confidential - Do Not Distribute


Example sharepoint appexpert template

Example: Sharepoint AppExpert Template

  • Detailed deployment guide

  • 10 Application Services templates

  • Includes compression, caching, responder policies

  • Includes caching selectors for parameterized caching

  • Available at http://community.citrix.com/display/ns/Microsoft+Sharepoint+AppExpert+Template

Citrix Confidential - Do Not Distribute


Advanced optimization caching

Advanced Optimization: Caching

  • Use Content-Group settings to optimizefor min/max content size, or overallnumber of hits.

  • Use parameterization to optimize cache retrieval or invalidation.

  • Prioritize NO_CACHE policies before CACHE policies

  • Use multiple Content-Groups to allow for specific cache-clearing

Citrix Confidential - Do Not Distribute


Advanced optimization compression

Advanced Optimization: Compression

  • Select Optimal compression level (gzip level 5-6 for best size / performance)

Citrix Confidential - Do Not Distribute


Advanced optimization ssl offload

Advanced Optimization: SSL Offload

  • In end-to-end, use low-level ciphers in NS-to-service communication

  • Cipher selection depends on client-needs, and security considerations.

  • Can be combined with IC and Compression for maximum impact

Citrix Confidential - Do Not Distribute


Advanced optimization network optimizations

Advanced Optimization: Network Optimizations

  • SACK and Window Scaling

  • Nagle’s Algorithm for small packets

  • TCP Buffering for slow clients

  • PMTUD – Path MTU Discovery

  • USIP (Use Source-IP) & DSR when available =~ 50% Network Savings

Request

Response

Request

Citrix Confidential - Do Not Distribute


Advanced troubleshooting

Advanced Troubleshooting


Nsconmsg

NSCONMSG

  • Primary tool for detailed analysis

  • NetScaler logs all statistics every 7 seconds

  • Uses logs from /var/nslog

  • Logfiles are gzipped (use zcat)

  • Some stats now available via GUI(System > Diagnostics)

Citrix Confidential - Do Not Distribute


Nsconmsg general format

NSCONMSG – General Format

nsconmsg –K <file> -s <options> -g <grep> -d <operation>(zcat <file.gz> | nsconmsg –K pipe – or gunzip them)

  • -s options include:

  • Start date or time

  • Maximum values

  • Rate counts

  • Add timestamps

  • Debugging levels

  • *csv format!

  • Format:

  • -s option=valueie, -s disptime=1

  • -d options include:

  • Stats – view raw statistics

  • Memstats – view memory-only stastics

  • Event – view system events (svc failures)

  • Auditedcmd – view cmds run on the system

  • Devcr – view device creation/removal

  • Example:

  • -d memstats

Citrix Confidential - Do Not Distribute


Nsconmsg examples

NSCONMSG – Examples

Scenario: Testing reports problems with SSL VIP earlier. What happened?

Displaying current counter value information

NetScaler V20 Performance Data

NetScaler NS9.1: Build 101.5.cl, Date: Jan 19 2010, 07:12:11

reltime:mili second between two records Fri Feb 5 10:31:31 2010

Index reltime counter-value symbol-name&device-no

0 0 0 ssl_err_ssl3_badversion

1 0 0 ssl_err_cavium_random_seed_failed

2 0 0 ssl_err_ubsec_card_reset

3 0 0 ssl_err_ssl3_send_server_hello

4 0 0 ssl_err_ssl3_send_server_certificate

5 0 0 ssl_err_ssl3_send_server_key_exchange

6 0 0 ssl_err_ssl3_send_certificate_request

7 0 0 ssl_err_ssl3_send_server_done

8 0 0 ssl_err_ssl3_check_client_hello_A_OR_get_client_cert

9 0 0 ssl_err_ssl3_get_client_certificate

10 0 0 ssl_err_ssl3_get_client_key_exchange_card

11 0 0 ssl_err_ssl3_check_client_hello_B_OR_get_client_keyEx

12 0 0 ssl_err_ssl3_get_client_key_exchange

13 0 0 ssl_err_ssl3_get_change_cipher_spec

14 0 0 ssl_err_ssl3_get_cert_verify

15 0 0 ssl_err_ssl3_get_finished

16 0 0 ssl_err_ssl3_setup_key_block

nsconmsg –K newnslog –g ssl_err –d stats

Current logfile

Grep for ‘ssl_err’

View initial statistics

Citrix Confidential - Do Not Distribute


Nsconmsg examples1

NSCONMSG – Examples

Scenario: Testing reports problems with SSL VIP earlier. What happened?

View timestamps

nsconmsg –K newnslog –s disptime=1 –g ssl_err_ssl3 –d current

View historic statistics

Index rtimetotalcount-val delta rate/sec symbol-name&device-no&time

108 0 78 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:01:06 2010

109 14000 11 2 0 ssl_error_cvm_bad_record Fri Feb 5 12:01:20 2010

110 7000 79 1 0 ssl_err_ssl3_badversion Fri Feb 5 12:01:27 2010

111 0 79 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:01:27 2010

112 28000 81 2 0 ssl_err_ssl3_badversion Fri Feb 5 12:01:55 2010

113 0 81 2 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:01:55 2010

114 7000 83 2 0 ssl_err_ssl3_badversion Fri Feb 5 12:02:02 2010

115 0 83 2 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:02:02 2010

116 14000 93 10 1 ssl_err_ssl3_badversion Fri Feb 5 12:02:16 2010

117 0 93 10 1 ssl_err_ssl3_get_client_hello Fri Feb 5 12:02:16 2010

118 7000 96 3 0 ssl_err_ssl3_badversion Fri Feb 5 12:02:23 2010

119 0 96 3 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:02:23 2010

120 112000 97 1 0 ssl_err_ssl3_badversion Fri Feb 5 12:04:15 2010

121 0 97 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:04:15 2010

122 7000 98 1 0 ssl_err_ssl3_badversion Fri Feb 5 12:04:22 2010

123 0 98 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:04:22 2010

124 7000 104 6 0 ssl_err_ssl3_badversion Fri Feb 5 12:04:29 2010

125 0 104 6 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:04:29 2010

126 70025 105 1 0 ssl_err_ssl3_badversion Fri Feb 5 12:05:45 2010

127 0 105 1 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:05:45 2010

128 7000 107 2 0 ssl_err_ssl3_badversion Fri Feb 5 12:05:52 2010

129 0 107 2 0 ssl_err_ssl3_get_client_hello Fri Feb 5 12:05:52 2010

Citrix Confidential - Do Not Distribute


Nsconmsg examples2

Screen clipping taken: 3/24/2010, 1:59 PM

NSCONMSG – Examples

Scenario: Testing reports problems with SSL VIP earlier. What happened?

Output to csv

nsconmsg –K newnslog -s csv=1 –g ssl_err_ssl3_badversion –d current > sslv3.csv

Grep specific counter

Write to file

Citrix Confidential - Do Not Distribute


Nsconmsg examples3

NSCONMSG – Examples

Scenario: Intermittent dropped sessions – what’s going on?

nsconmsg –K newnslog –g tcp_err –d current

reltime:mili second between two records Fri Feb 5 10:55:31 2010

Index rtimetotalcount-val delta rate/sec symbol-name&device-no

1256 0 9 1 0 tcp_err_rst_pass_pnd_data

1257 0 26 1 0 tcp_err_rst_pass_pnd_get

1258 0 60 4 0 tcp_err_rst_pass_srvr

1259 0 140 1 0 tcp_err_oo_range_ack

1260 0 112 1 0 tcp_err_srvr_retransmit

1261 0 448 18 2 tcp_err_clnt_retransmit

1262 0 556 19 2 tcp_err_full_retransmit

1263 0 785 22 3 tcp_err_clnt_out_of_order

1264 0 102 33 4 tcp_err_srvr_out_of_order

1265 0 83 1 0 tcp_err_orphan_ack_keepalive

1266 0 772 21 3 tcp_err_hole_client

1267 0 4 1 0 tcp_err_hole_server

1268 0 776 22 3 tcp_err_hole_detected

Citrix Confidential - Do Not Distribute


Nsconmsg examples4

NSCONMSG – Examples

Scenario: Intermittent dropped sessions – what’s going on?

nsconmsg –K newnslog –g tcp_err_ooo –d current

reltime:mili second between two records Fri Feb 5 13:43:54 2010

Index rtimetotalcount-val delta rate/sec symbol-name&device-no

0 11340678 7 7 1 tcp_err_ooo_maxpkt

1 2485190 10 3 0 tcp_err_ooo_maxpkt

2 7001 12 2 0 tcp_err_ooo_maxpkt

3 1470172 13 1 0 tcp_err_ooo_maxpkt

4 252023 15 2 0 tcp_err_ooo_maxpkt

5 392017 24 9 1 tcp_err_ooo_maxpkt

6 357024 26 2 0 tcp_err_ooo_maxpkt

7 252036 33 7 1 tcp_err_ooo_maxpkt

8 539040 35 2 0 tcp_err_ooo_maxpkt

9 1148108 38 3 0 tcp_err_ooo_maxpkt

10 780611 39 1 0 tcp_err_ooo_maxpkt

11 504035 55 16 2 tcp_err_ooo_maxpkt

12 28000 56 1 0 tcp_err_ooo_maxpkt

13 305818 57 1 0 tcp_err_ooo_maxpkt

14 589541 62 5 0 tcp_err_ooo_maxpkt

15 49021 69 7 0 tcp_err_ooo_maxpkt

Citrix Confidential - Do Not Distribute


Nsconmsg examples5

NSCONMSG – Examples

Checking utilization and memory use in detail

nsconmsg –K newnslog –d memstats

Displaying current memory stats information

----------------------------------------------------------------------------------------------------------------------

TotalMEM: 2688046946 Allocated: 258642274(9.62%) ActualInUse: 192482290(7.16%) Free: 2429404672

MEMPOOL MaxAllowd CurAlloc ErrLmtFailed ErrAllocFailed ErrFreeFailed

----------------------------------------------------------------------------------------------------------------------

MEM_CPROXY 134217728 16777216(0.62%) 0 0 0

MEM_PAC Dynamic 32768(0.00%) 0 0 0

MEM_RESPONDER_CONFIG Dynamic 8256(0.00%) 0 0 0

MEM_RW_CONFIG Dynamic 330606(0.01%) 0 0 0

MEM_SSL Dynamic 5509248(0.20%) 0 0 0

MEM_CACONF Dynamic 0(0.00%) 0 0 0

MEM_PANNER Dynamic 0(0.00%) 0 0 0

MEM_PANSTR Dynamic 434(0.00%) 0 0 0

MEM_PI_RUNTIME Dynamic 0(0.00%) 0 0 0

MEM_HINFOBUF Dynamic 0(0.00%) 0 0 0

MEM_PIRL Dynamic 0(0.00%) 0 0 0

MEM_PATSET Dynamic 177994(0.01%) 0 0 0

MEM_ASYNC Dynamic 0(0.00%) 0 0 0

MEM_WU_MEM Dynamic 5594104(0.21%) 0 0 0

MEM_APPSECURE Dynamic 29886297(1.11%) 0 0 0

MEM_PI_CONFIG Dynamic 63280(0.00%) 0 0 0

MEM_AUDITLOG 16384000 333772(0.01%) 0 0 0

MEM_POLENG 100663296 106000(0.00%) 0 0 0

MEM_GSLB 33554432 0(0.00%) 0 0 0

MEM_DNS 5242880 0(0.00%) 0 0 0

MEM_DCC 10485760 0(0.00%) 0 0 0

MEM_TCPBUFFP 0 0(0.00%) 0 0 0

MEM_LB_PHYSVC 4796416 801(0.00%) 0 0 0

MEM_LB_PHYSERVER 3932160 768(0.00%) 0 0 0

MEM_URLMON 15728640 0(0.00%) 0 0 0

MEM_IPFRAG 524288 0(0.00%) 0 0 0

MEM_SERVMON 24514560 8704(0.00%) 0 0 0

MEM_MISC Dynamic 136541842(5.08%) 0 0 0

MEM_DEBUG 262144 1216(0.00%) 0 0 0

MEM_SNMP 41943040 15808(0.00%) 0 0 0

MEM_CONN Dynamic 62949376(2.34%) 0 0 0

MEM_LOGGING Dynamic 0(0.00%) 0 0 0

MEM_IOH 5242880 0(0.00%) 0 0 0

MEM_CSWMEM 16777216 2560(0.00%) 0 0 0

MEM_LB_SERVICE 12165120 0(0.00%) 0 0 0

MEM_LB_VIP 47448064 10144(0.00%) 0 0 0

MEM_LB_SESSION 136314880 0(0.00%) 0 0 0

MEM_LB_SERVER 12582912 0(0.00%) 0 0 0

MEM_PE 20971520 291080(0.01%) 0 0 0

4MB_PAGE_CONN_POOL_MEMBERS:

Name CurAllocd CurFree PgAllocd PgAllocFailed

----------------------------------------------------------------------------------

NSB 16380 15867 7 (1.1%) 0

PCB 6553 6552 1 (0.2%) 0

NATPCB 21845 21845 1 (0.2%) 0

B64 65536 65532 1 (0.2%) 0

B128 0 0 0 (0.0%) 0

B256 0 0 0 (0.0%) 0

DNSsmall 0 0 0 (0.0%) 0

DNSfull 0 0 0 (0.0%) 0

SPCB 0 0 0 (0.0%) 0

SSL_SESS 0 0 0 (0.0%) 0

Other_CONN_POOL_MEMBERS:

CacheBuf 1(0.0%) 0

4MB_PAGE_MISC_POOL_MEMBERS:

Name CurAllocd CurFree PgAllocd PgAllocFailed

----------------------------------------------------------------------------------

SINFO 2048 2025 1 (0.2%) 0

DEVNAME 174762 174422 1 (0.2%) 0

4MB_PAGE_SSL_POOL_MEMBERS:

Name CurAllocd CurFree PgAllocd PgAllocFailed

----------------------------------------------------------------------------------

CVMBUF 1 (0.2%) 0

4MB_PAGE_PANNER_POOL_MEMBERS:

Name CurAllocd CurFree PgAllocd PgAllocFailed

----------------------------------------------------------------------------------

PAN 0 0 0 (0.0%) 0

4MB_PAGE_CPROXY_POOL_MEMBERS:

Name CurAllocd CurFree PgAllocd PgAllocFailed

----------------------------------------------------------------------------------

CK1024 4096 4096 1 (0.2%) 0

CK2048 2048 2048 1 (0.2%) 0

CK4096 1024 1024 1 (0.2%) 0

CKPATH 4032 4032 1 (0.2%) 0

Citrix Confidential - Do Not Distribute


Nsconmsg examples6

NSCONMSG – Examples

Checking for distribution and performance

nsconmsg –K newnslog –s ConLb=3 –d distrconmsg

VIP(1.1.1.1:636:UP:WEIGHTEDRR): Hits(2506) Pers(OFF) PersHits(0:0%) Err(0:0%) Ovrride(0:0%)

S(1.1.1.100:636:UP) Hits(835:33%) PHits(0:0%) LbHits(835:100%)

S(1.1.1.101:636:UP) Hits(836:33%) PHits(0:0%) LbHits(836:100%)

S(1.1.1.102:636:UP) Hits(835:33%) PHits(0:0%) LbHits(835:100%)

VIP(2.2.2.2:389:UP:WEIGHTEDRR): Hits(6) Pers(OFF) PersHits(0:0%) Err(0:0%) Ovrride(0:0%)

S(2.2.2.100:389:UP) Hits(2:33%) PHits(0:0%) LbHits(2:100%)

S(2.2.2.101:389:UP) Hits(2:33%) PHits(0:0%) LbHits(2:100%)

S(2.2.2.102:389:UP) Hits(2:33%) PHits(0:0%) LbHits(2:100%)

VIP(3.3.3.3:123:UP:WEIGHTEDRR): Hits(180) Pers(SOURCEIP) PersHits(180:100%) Err(0:0%) Ovrride(0:0%)

S(3.3.3.100:123:UP) Hits(42:23%) PHits(42:100%) LbHits(0:0%)

S(3.3.3.101:123:UP) Hits(49:27%) PHits(49:100%) LbHits(0:0%)

S(3.3.3.102:123:UP) Hits(46:25%) PHits(46:100%) LbHits(0:0%)

S(3.3.3.103:123:UP) Hits(43:23%) PHits(43:100%) LbHits(0:0%)

VIP(4.4.4.4:53:UP:WEIGHTEDRR): Hits(9410) Pers(OFF) PersHits(0:0%) Err(0:0%) Ovrride(0:0%)

S(4.4.4.100:53:UP) Hits(4705:50%) PHits(0:0%) LbHits(4705:100%)

S(4.4.4.101:53:UP) Hits(4705:50%) PHits(0:0%) LbHits(4705:100%)

VIP(127.0.0.2:53:DOWN:WEIGHTEDRR): Hits(0) Pers(OFF) PersHits(0:0%) Err(0:0%) Ovrride(0:0%)

-------------------------------------------------------

CPU:2.2% MEM:213817642 UP:19.13:41:43 since:Sat Mar 20 01:03:59 2010

Citrix Confidential - Do Not Distribute


Nsconmsg examples7

NSCONMSG – Examples

Checking for distribution and performance

nsconmsg –K newnslog –s ConLb=3 –d oldconmsg

current time is Thu Apr 8 14:45:28 2010

-------------------------------------------------------

NATSession : Free(19644)A(21845)InUse(2201)

NATSession: Cur(Tcp[194] Udp[2007] Icmp[0] Other[0])

NATSession: Op/s(Tcp[3] Udp[436] Icmp[1] Other[0])

Session: A:9187 F:4604 IUse:4583 SEs: SIP:4582 C:0 SSL:0 Svr:1 UserId:0 SIPDIP:0 DIP:0 SO:0

SSF: Conn (Srvr 0 Clnt 1) U:0

CM: Conn (Srvr 0 Clnt 1) Sessions PCB 0 NATPCB 0

Z(SIP[68307], C[0], SSL[0] Server[22] SIPDIP[0] DIP[0] SO[0])

Mon: Probes: 24303862, Failed: 3757181

Citrix Confidential - Do Not Distribute


Nsconmsg examples8

NSCONMSG – Examples

Checking for distribution and performance

nsconmsg –K newnslog –s ConLb=3 –d oldconmsg

VIP(3.3.3.3:123:UP:WEIGHTEDRR): Hits(6108723, 4/sec) Mbps(0.01) Pers(SOURCEIP) Err(0) LConn_BestIdx: 1024

Pkt(13/sec, 48 bytes) actSvc(4) DefPol(NONE) override(0)

Conn: Clt(907, 4/sec, OE[907]) Svr(907)

S(3.3.3.100:123:UP) Hits(1513624, 0/sec, P[1512683, 0/sec]) ATr(210:210) Mbps(0.00) BWlmt(0 kbits) RspTime(0.00 ms) Load(0) LConn_Idx: (C:0; V:0,I:1)

Other: Pkt(1/sec, 48 bytes) Wt(1) Wt(Reverse Polarity)(10000)

Conn: CSvr(210, 0/sec) MCSvr(249) OE(210) E(210) RP(0) SQ(0)

Monitor_ping-default_of_serv1-123(10.153.40.27:123) Resp Time : 461 micros

S(3.3.3.101:123:UP) Hits(1512236, 1/sec, P[1511295, 1/sec]) ATr(237:237) Mbps(0.00) BWlmt(0 kbits) RspTime(0.00 ms) Load(0) LConn_Idx: (C:0; V:0,I:1)

Other: Pkt(4/sec, 48 bytes) Wt(1) Wt(Reverse Polarity)(10000)

Conn: CSvr(237, 1/sec) MCSvr(269) OE(237) E(237) RP(0) SQ(0)

Monitor_ping-default_of_serv2-123(10.153.40.26:123) Resp Time : 578 micros

S(3.3.3.102:123:UP) Hits(1544960, 0/sec, P[1544019, 0/sec]) ATr(243:243) Mbps(0.00) BWlmt(0 kbits) RspTime(0.00 ms) Load(0) LConn_Idx: (C:0; V:0,I:1)

Other: Pkt(2/sec, 48 bytes) Wt(1) Wt(Reverse Polarity)(10000)

Conn: CSvr(243, 0/sec) MCSvr(237) OE(243) E(243) RP(0) SQ(0)

Monitor_ping-default_of_serv3-123(10.153.38.27:123) Resp Time : 553 micros

S(3.3.3.103:123:UP) Hits(1537903, 1/sec, P[1536962, 1/sec]) ATr(217:217) Mbps(0.00) BWlmt(0 kbits) RspTime(0.00 ms) Load(0) LConn_Idx: (C:0; V:0,I:1)

Other: Pkt(5/sec, 48 bytes) Wt(1) Wt(Reverse Polarity)(10000)

Conn: CSvr(217, 1/sec) MCSvr(260) OE(217) E(217) RP(0) SQ(0)

Monitor_ping-default_of_serv4-123(10.153.38.26:123) Resp Time : 543 micros

Citrix Confidential - Do Not Distribute


Nsconmsg examples9

NSCONMSG – Examples

Checking for distribution and performance

nsconmsg –K newnslog –s Con???=3 –d oldconmsg

ConDebug - Debugging

ConLb - Load Balancing

ConMon - Monitoring Probes

ConMEM - Memory Management

ConCSW - Content Switching

ConSSL - SSL Offload

ConCMP - Compression

ConIC - Integrated Caching

Citrix Confidential - Do Not Distribute


Nstrace sh

nstrace.sh

  • Nstrace supports filtering in 9.x

nstrace -size 0 -filter "SOURCEIP == 10.1.2.3 && SOURCEPORT == 8080" -link ENABLE

Packet-size limit

Filters in standard NS policy format

Booleans supported!

Automatically capture linkedclient/server connections

Filter on:

SOURCEIPSOURCEPORTDESTIPDESTPORTSVCNAMEVSVRNAMESTATE

http://support.citrix.com/article/ctx121166

Citrix Confidential - Do Not Distribute


Wireshark

Wireshark

Just one missing frame…

…can cause big headaches.

Citrix Confidential - Do Not Distribute


Wireshark1

Wireshark

  • nstrace files now officially supported in Wireshark!

  • Available in latest dev release (not Stable release) – 1.3.4

  • Includes ns.pdevno and ns.l_pdevno filtering

Citrix Confidential - Do Not Distribute


Before you leave

Recommended related breakout sessions:

SYN410D – Implementing NetScaler to Optimize Microsoft Exchange hands-on (Wed. 12th @ 2PM)

Continue your learning – visit www.citrix.com/SynergyEDU for more information

Session surveys are available online at www.citrixsummit.com starting Thursday, May 13

Provide your feedback and pick up your complimentary Starbucks or iTunes giftcard at the registration desk

Download presentations starting Friday, May 21, from your My Schedule Tool located in your My Synergy Microsite event account

Before you leave…


Questions comments

Questions? Comments?


  • Login