C3 Citrix Cloud Center
ā¢
2 likesā¢3,042 views
Citrix Cloud Center demo for CloudViews 2009 @ IPP.
Recommended
Recommended
More Related Content
What's hot
What's hot (18)
Similar to C3 Citrix Cloud Center
Similar to C3 Citrix Cloud Center (20)
More from Rui Lopes
More from Rui Lopes (7)
Recently uploaded
Recently uploaded (20)
C3 Citrix Cloud Center
- 1. Citrix Cloud Center Rui Miguel Lopes System Engineer ā Albora Soluciones
- 2. Agenda ļ¢ Conceitos e Componentes do C3 ļ¢ Xenserver ā VirtualizaĆ§Ć£o de Servidores ļ¢ VirtualizaĆ§Ć£o e ProvisĆ£o de Desktops ļ¢ VirtualizaĆ§Ć£o de AplicacƵes ļ¢ Acesso Remoto e gestao de trĆ”fego ļ¢ AutomaĆ§Ć£o do datacenter ļ¢ Resposta em cenĆ”rios de contingĆŖncia Ā© 2008 Citrix Systems, Inc. ā All rights reserved 2
- 3. C3 - Citrix Cloud Center
- 4. Service delivery infrastructure for hosting, managing and delivering cloud-based services Ā© 2008 Citrix Systems, Inc. ā All rights reserved 4
- 5. Laboratorio IPP : my.cloudcenter.demo ZONA āPUBLICAā REDE DATACENTER 172.17.41.0 /24 10.20.0.0 /16 Xen50-alb03 Xen50-alb02 10.20.30.253 10.20.30.252 PvS DC 10.20.40.150 10.20.30.100 IP WAN Xendesktop vDesktops 10.20.40.140 10.20.40.[1...50] Xenapp50 10.20.40.160 workflow web1porto 10.20.40.170 10.20.50.1 web2porto 10.20.50.2 AGEE-Porto Vip: 172.17.41.5 AGEE-Lisboa Vip: 172.17.41.5 Ā© 2008 Citrix Systems, Inc. ā All rights reserved 5
- 6. Saber mais : Citrix C3 Lab online ā¢ Citrix Developer Network ā¢ Comunidade de desenvolvimento para soluƧƵes Citrix ā¢ AplicaĆ§Ć£o de diferentes tecnologias numa prespectiva de cloud computing http://community.citrix.com/ ā¢ Citrix C3 Lab @ Amazon ā¢ Recurso recentemente publicado ā¢ CenĆ”rio de laboratĆ³rio e investigaĆ§Ć£o ā¢ ProvisĆ£o de serviƧos na nuvem http://community.citrix.com/pages/viewpage.action?spaceKey=cdn&title=Citrix+C3+ Ā© 2008 Citrix Systems, Inc. ā All rights reserved 6
- 7. Citrix XenServer (Hipervisor e consola de administraĆ§Ć£o)
- 8. D a ta c e nte r E v o lu t io n P ha s e 1 ā P has e 4 ā P has e 2 ā P has e 3 ā R e c o g n iz e D y n a m ic C o n s o lid a t e A g ilit y D a ta c e nte r Under utilized Test/Dev Some tier 1 Dynamic Workload hardware applications Delivery Encapsulation Increasing costs of High Availability Automation / Policy ownership Consolidation Disaster Recovery Chargeback / Utility Difficult management āCraplicationsā Mobility Pervasive Barriers to expansion Virtualization Ā© 2008 Citrix Systems, Inc. ā All rights reserved 8
- 9. W h a t is X e n ? ā¢ Native 64-bit hypervisor ā¢ Runs on bare metal ā¢ Widely-deployed at tens of thousands of sites ā¢ Optimized for hardware-assisted & S un C it r ix paravirtualization HP C it r ix ā¢ Highly secure Xen open security framework In t e l IB M ā¢ Small exposure footprint ā¢ Lightweight and efficient Ā© 2008 Citrix Systems, Inc. ā All rights reserved 9
- 10. XenMotion enables zero downtime Device Drivers Device Drivers Device Drivers XenTool Stack XenTool Stack XenTool Stack Xen Hypervisor Xen Hypervisor Xen Hypervisor Bare Metal Hardware Bare Metal Hardware Bare Metal Hardware Remote VM guest storage Ā© 2008 Citrix Systems, Inc. ā All rights reserved 10
- 11. High Availability ā¢ Automatically restart VMs upon host server failure ā¢ Easily administered within XenCenter ā¢ Reports failover capacity Ā© 2008 Citrix Systems, Inc. ā All rights reserved 11
- 12. High Availability Shared Storage VIDEO Ā© 2008 Citrix Systems, Inc. ā All rights reserved 12
- 13. Disaster Recovery ā Virtual Machine ā¢ From an architectural point of view a VM exists of: ā¢ Metadata and Virtual Machine ā¢ Virtual Disk Image(s) XenServer Host ā¢ Metadata is stored in a database Metadata on the hosts: ā¢ VM Name, Description, uuid ā¢ Virtual Memory, vCPUs ā¢ Virtual Networks, SR, etc. VDI1 VDI2 Storage Repository ā¢ VDIs are stored on storage array Ā© 2008 Citrix Systems, Inc. ā All rights reserved 13
- 14. Disaster Recovery ā¢ Storage Replication is out-of-band ā¢ Use vendor specific instructions for Storage Replication ā¢ Metadata export and import done from CLI /script Production Environment Disaster Recovery Environment XenServer Host XenServer Host Export/Import Metadata Metadata VDI1 VDI2 VDI1 VDI2 Storage Replication Storage Repository Storage Repository Ā© 2008 Citrix Systems, Inc. ā All rights reserved 14
- 15. Simplifying Disaster Recovery 1 Automated backup of VM metadata to SR 4 2 Replication of SR includes Virtual Disks and VM metadata 1 3 3 Attach replicated SR 4 Restore of VM metadata 2 Shared Storage Shared Storage will recreate VMs VIDEO: 7:30 Production Site DR Site Ā© 2008 Citrix Systems, Inc. ā All rights reserved 15
- 16. XenDesktop & XenApp (Desktops & WinApps as a Service)
- 17. Desktop as a Service Ā© 2008 Citrix Systems, Inc. ā All rights reserved 17
- 18. How Do XenApp and XenDesktop Complement Each Other? XenApp for Virtual Desktops Virtual Desktop Apps virtual delivery User protocol Settings Use O Data rs S Center On-demand Assembly Delivered Dynamically Single master with best assembled at image of each user runtime component experience Ā© 2008 Citrix Systems, Inc. ā All rights reserved 18
- 19. How XenDesktop Works Desktop Delivery Controller request license A D Login Page Licensing Data DomainO U Store Controller ch policies find desktop un la validate & gn si ICA prepare resume Profiles Desktop Receiver Xen, Hyper-V, VM Apps Golden Image: ā¢PV Tools ā¢Virtual Desktop Agent ā¢ICA & Streaming Client OS VDisk Ā© 2008 Citrix Systems, Inc. ā All rights reserved 19
- 20. Protocolo ICA ā¢ Largura de banda optimizada : 5-10 Kbps. (kilobits por segundo) ā¢ Normalmente estabelece-se uma mĆ©dia de 20 Kbps por utilizador Ā© 2008 Citrix Systems, Inc. ā All rights reserved 20
- 21. ImplementaĆ§Ć£o Windows Tradicional 16-bit/32-bit Client components Server component Web apps Desktop apps Custom apps Web Browser Data Center Desktop GestĆ£o e suporte dispendioso. Pouco Seguro Limitado na acessibilidade Ā© 2008 Citrix Systems, Inc. ā All rights reserved 21
- 22. XenApp - VirtualizaĆ§Ć£o de ApplicaƧƵes Server component Client component Web apps Web browser Custom apps Desktop apps Data Center Application Servers Presentation Server environment Desktop CentralizaĆ§Ć£o do host no data center FĆ”cil de instalar, gerir e suportar Apps e dados protegidos Ā© 2008 Citrix Systems, Inc. ā All rights reserved 22
- 23. Why Separate Apps? Integrated App Delivery ā Streamed Applications Application Profile Streamed Application XenApp for Virtual Desktops Isolation Environ ment ļ¼ Centralized application management XenDesktop ļ¼ Apps streamed to the Applications are leverage CPU/RAM of virtual desktop desktop Applications execute locally in ļ¼ Best for common productivity apps with isolation moderate CPU/RAM requirements Applications can be used offline Ā© 2008 Citrix Systems, Inc. ā All rights reserved 23
- 24. Independent Validation by Tolly Group & Entisys Separating Apps and Desktops SAP running on SAP hosted virtual desktop on XenApp Server Dual quad core, Dual quad core, 32GB RAM 32GB RAM RAM required per 1GB 512MB desktop CPU utilization 85% 85% Ā© 2008 Citrix Systems, Inc. ā All rights reserved 24
- 25. Saber Mais: VirtualizaĆ§Ć£o de AplicaƧƵes ā¢ Download XenApp 5.0 (versĆ£o trial ā 30 dias) http://www.citrix.com/English/ps2/products/subfeature.asp?contentID=1680656 ā¢ Demos Online http://citrix.com/English/ps2/products/demo.asp?contentid=186 ā¢ DocumentaĆ§Ć£o XenApp 5.0 Win2003: http://support.citrix.com/product/xa/v5.0_2003/ Win2008: http://support.citrix.com/product/xa/v5.0_2008/ ā¢ Forums de suporte (XenApp 5.0) http://forums.citrix.com/category.jspa?categoryID=151 Ā© 2008 Citrix Systems, Inc. ā All rights reserved 25
- 26. Provisioning Server (provisĆ£o e gestĆ£o de workloads - OS)
- 27. Delivering Native and Virtualized Workloads Silo One A Citrix Provisioning Server B Silo Two C Silo Three Image repository holds Virtual Hard Disks Servers are configured for network boot. No local storage required Ā© 2008 Citrix Systems, Inc. ā All rights reserved 27
- 28. āAny Workload, Any Server, Any Timeā Silo One XenServer / Hyper-V A Citrix Provisioning Server B Silo Two C Silo Three Virtual Hard Disks are streamed from image repository Boot hundreds of VMs/servers from Ā© 2008 Citrix Systems, Inc. ā All rights reserved 1 image 28
- 29. Managing Disaster Recovery Primary Data Center Backup Data Center XenServer / Hyper-V XenServer / Hyper-V XenServer / Hyper-V Backup 2 3 1 Site host Server servers Failure Failure real workloads Storage Replication Provisioning Server Network Provisioning Server Network Storage Storage VIDEO Ā© 2008 Citrix Systems, Inc. ā All rights reserved 29
- 30. Access Gateway Entreprise (SeguranƧa no acesso a recursos)
- 31. Existing Remote Access Scenario Remote DSL/Cable Firewall Datacenter Employees Connection IPSec VPN Madison, s WI Citrix XenApp Web Interface Ā© 2008 Citrix Systems, Inc. ā All rights reserved 31
- 32. What is Citrix SmartAccessā¢? Who is connecting? What is the result What resources of the connection? can be accessed? Which User What Device VPN Access Clientless Web and FileNetwork Level Access Server Access Access What What Web Interface XenDesktop Outlook Web XenApp Authentication Location XenApp Access XenDesktop Resources Endpoint Analysis Session Policy Session and Authentication Policy Authorization Policy Ā© 2008 Citrix Systems, Inc. ā All rights reserved 32
- 33. All Applications Reduced Applications Denied Access & Virtual Channels & Virtual Channels Full Network Access Restricted network Access + + + Full Access + + Reduced Access + Restricted Access Clientless Portal and SnR Security + Email Access Remediation Web Site Global Access Ā© 2008 Citrix Systems, Inc. ā All rights reserved 33
- 34. XenApp Integration External DMZ Internal DNS 53 (UDP) LDAP/ IP 443,80* (HTTP/ NS LDAPS TCP) P NSI 389/636 Web Interface (TCP) VIP SNIP or MIP Remote End User 80, 8080, 443 (HTTP/TCP) 1494, 2598 (TCP) XenApp NS * Port 80 used for https IP redirect 443,80 (TCP/HTTP) 3010, 3008 ,22 (TCP) Ā© 2008 Citrix Systems, Inc. ā All rights reserved 34
- 35. Accessing XenApp with Access Gateway 1. User accesses https://agee.corp.ctx Web 2. Access Gateway authenticates the 4) HTTPS 3) HTTP(S) Interface user and validates the end-point 1) SSL 3. Access Gateway communicates the 8) SSL 9) X 6) XML user credentials and policy conditions Access 10) ML to Web Interface Gateway ICA Client 4. Web Interface displays the userās set XenApp of applications. Farm 5. User clicks an application icon 6. Web Interface requests a ticket from the Secure Ticket Authority 7. Web Interface sends a ticket to the user in a ICA Ā® file 8. The ICA client launches and sends secure ICA traffic to Access Gateway 9. Access Gateway validates the ticket against the STA 10. The ICA session is established Ā© 2008 Citrix Systems, Inc. ā All rights reserved 35
- 36. Ā© 2008 Citrix Systems, Inc. ā All rights reserved 36
- 37. AutomaĆ§Ć£o do Datacenter (AutomaĆ§Ć£o do datacenter)
- 38. Workflow Studio Workflow Studio SSL 001000111010101 SSL 001000111010101 SSL 001000111010101 SSL 0011010101 SSL 001000111010101 Receiver Branch Access Repeater Gateway ā¢ Graphically compose workflows without scripting Users ā¢ Automate IT processes across technology components ā¢ Dynamically orchestrate systems to deliver on- demand Ā© 2008 Citrix Systems, Inc. ā All rights reserved 38
- 39. Availability Available to All Customers of All Products in Citrix Delivery Center ā¢ XenApp ā¢ XenDesktop ā¢ XenServer ā¢ NetScaler Ā© 2008 Citrix Systems, Inc. ā All rights reserved 39
- 40. Technology Workflow Stack Activity Libraries Product APIs Web PowerS VBScr W Service hell ipt MI s Citrix Products 3rd Party Products XenApp XenDesktop XenServer NetScaler Ā© 2008 Citrix Systems, Inc. ā All rights reserved 40
- 41. Available Activity Libraries ā¢ XenApp ā¢ Active ā¢ XenServer Directory ā¢ NetScaler ā¢ Group Policy ā¢ Networking ā¢ Windows / WMI ā¢ PowerShell Ā© 2008 Citrix Systems, Inc. ā All rights reserved 41
- 42. The Citrix Delivery Center in Action Citrix Workflow Studio Citrix XenServer Pool A Unpowered, bare Metal servers Citrix NetScaler Pool B Monitor Decide Act Ā© 2008 Citrix Systems, Inc. ā All rights reserved 42
- 43. Global Site load balancing (GestĆ£o de trĆ”fego e alta disponibilidade com Netscaler)
- 44. What Is GSLB? ā¢ DNS-based technology that uses an authoritative DNS service to direct users to an appropriate instance of an application using its Fully Qualified Domain Name (FQDN) ā¢ Distributes network traffic and server load across multiple sites based upon service availability Ā© 2008 Citrix Systems, Inc. ā All rights reserved 44
- 45. NetScaler GSLB ā¢ NetScaler Monitors ā¢ Server Response, Service Availability, Service Response: ā¢ NetScaler Verifies applications are responding correctly at each site ā¢ Eligibility of Site for GSLB distribution: ā¢ NetScaler excludes site from distribution if application is not completely available Ā© 2008 Citrix Systems, Inc. ā All rights reserved 45
- 46. How NetScaler GSLB Works 1. Client makes a DNS Request for the GSLB domain What site should I go to? 2. NetScaler GSLB ADNS returns the IP address of the most suitable site Go to site number 3. 3. Client makes network connection to the ADNS specified IP address Site 1 Site 2 Site 3 Ā© 2008 Citrix Systems, Inc. ā All rights reserved 46
- 47. GSLB Distribution Methods ā¢ Basic ā¢ Round Robin ā¢ Weighted Round Robin ā¢ Geographic Proximity ā¢ IP - Location ā¢ Network Proximity ā¢ Least Return Trip Time ā¢ Disaster Recovery ā¢ Passive Ā© 2008 Citrix Systems, Inc. ā All rights reserved 47
- 48. Distribution: Round Robin Datacenter 1 Datacenter 1 Site Up: Active Site Up: Active Round Robin 33% 50% ā¢ Requests are distributed evenly across all sites in round-robin fashion Datacenter 2 Datacenter 2 Site Site Down Up: Active 33% 0% ā¢ If site goes down, the other sites automatically receive the remaining traffic Datacenter 3 Site Up: Active 50% 33% Ā© 2008 Citrix Systems, Inc. ā All rights reserved 48
- 49. Distribution: Weighted Round Robin Datacenter 1 Site Up: Active Weighted Round Robin 50% Weight: 5 ā¢ Site traffic distributed based on administrator configured weights Datacenter 2 Site Up: Active ā¢ Site capacities or cost of operations dictate distribution models 20% Weight: 2 Datacenter 3 Site Up: Active 30% Weight: 3 Ā© 2008 Citrix Systems, Inc. ā All rights reserved 49
- 50. Distribution: Disaster Recovery Datacenter 1 Datacenter 2 ā¢ Sites set up in Site Up: Passive active/passive mode Site Up: Active ā¢ All traffic routed to active site until it becomes unavailable ā¢ Passive site assumes active role when Datacenter 2 Datacenter 1 primary site is unavailable Site Down Site Up: Active Ā© 2008 Citrix Systems, Inc. ā All rights reserved 50
- 51. OBRIGADO! Rui Miguel Lopes rlopes@ingrammicro.pt +351 91 414 3083 mai2009 Ā© 2008 Citrix Systems, Inc. ā All rights reserved 51
Editor's Notes
- Presentation Title Goes Here Insert Version Number Here Ā© 2007 Citrix Systems, Inc.āAll rights reserved.
- Presentation Title Goes Here Insert Version Number Here Ā© 2007 Citrix Systems, Inc.āAll rights reserved.
- Plase 1: Many issues. Commoditized hardware and one app per server model has created a monster. Average utilization of servers ~ 15% ( Source: Gartner) Space, power, cooling challenges abound. Nearly 80% of IT costs spent just to keep the lights onā¦let alone innovate. Etcā¦ Phase 2: Virtualization begins to take root in test/dev. Benefits of consolidation starting to be seen for some production apps (āCraplicationsā) This is goodness. Phase 3: Virtualization beginning to be seen for more than just consolidation. Moving to more business and mission critical apps. HA and recovery (DR) become focus areas. Virtualization seen as a way to eliminate planned downtime. Again, more goodnessā¦ Phase 4: Goes beyond āAgilityā to policy based computing and new ways (paradigms) to deliver apps. Applications may become largely streamed and diskless. More āUtility-likeā Virtualization is a key enabler and begins to become pervasively adopted. BUTā¦ reality is that very few severs (even today) are virtualized. Weāre still a long way off from seeing pervasive adoption of virtualization. Still in the low teens. (see next slideā¦) 79% of IT budget to keep the business running Source: Gartner Server sprawl, electricity, floor space Managing too many physical servers
- We must first start with the underpinnings of XenServer and thatās the Xen hypervisor. Leverages Open Source standard Lean with < 50K lines of code Work closely with OS vendors and advisory board: Citrix, IBM, Intel, HP, Novell, Red Hat and Sun Microsystems Community patches, updates and enhancements Security CIA and NSA actively contribute to Xen XS Differentiation from Xen Open Source Management console; XenMotion; Templates; Optimization
- XenMotion. Check. Got it.
- XenServer supports several features to guarantee service uptime in the event of infrastructure failure. Firstly, resource pools can be configured for automated high-availability. This deals with individual host failures by restarting VMs that were running on that host onto the next available machine in the resource pool. Notable features include: Peer-to-peer &quot;self-healing&quot; architecture ensures there is no single point of management failure. Set VM restart priorities individually, to control the order in which services are restarted in the event of host failure. Dynamic failure planning algorithms allow administrators to see how many hosts failures can be tolerated without compromising services. Presentation Title Goes Here Insert Version Number Here Ā© 2007 Citrix Systems, Inc.āAll rights reserved.
- VMās on failed physical servers can automatically be restarted on other servers in the pool
- From an architectural point of view, a XenServer virtual machine (VM) consists of two components: metadata describing the virtual machine environment, and the virtual disk image (VDI) which is being used by the virtual machine. The VM metadata is stored in a small database on the XenServer hosts, and the virtual disk images are stored on the configured Storage Repository, which in multiple host deployments will be a NAS or SAN device. The metadata for a VM contains information about the VM (e.g. name, description, uuid), VM configuration (e.g. amount of virtual memory, number of virtual CPUās) and information about the use of resources on the host or Resource Pool (e.g. Virtual Networks, Storage Repository, ISO Library).
- To provide effective Disaster Recovery (DR), we need to replicate both the metadata and the virtual disk images from our production environment to our DR environment. This is easily accomplished by exporting the metadata from the production environment, and importing this data into the DR environment. The replication of the virtual disk image is best handled by the storage vendor, as they will vary from device to device, but any real-time or scheduled replication system will suffice. Later on during this presentation we will hear a little bit more about which solutions NetApp can offer.
- Even if you are not using remote storage you can backup VMs and move them around using our import/export functionality. Again since the VMs are isolated from any hardware differences between the underlying servers you remove all of the driver headache found when moving a physical OS instance around to different boxes.
- Presentation Title Goes Here Insert Version Number Here Ā© 2007 Citrix Systems, Inc.āAll rights reserved.
- With virtual desktop delivery we can provide desktops as a service to the users.
- How XD works is essentially quite similar to how end users connect to XenApp. The end user will get to the landing page shown earlier and enter their credentials at which point, the request for the desktop are sent to the delivery controller. The delivery controller then works out which desktop is appropriate for the end user. It establishes that from the data store. What it does then is to set up the environment for the end user to connect to. If itās a provisioned desktop (the way that weāve recommended that you implement the product) and the environment is not already spun up, it will initiate a boot of the virtual machine and the operating system will be delivered from Provisioning Server. In the setup for XD, you have an alternative option to eliminate the startup delay for the end user. You can do this by configuring that for particular desktop groups, you want to specify an idle pool. From marketing perspective, this will be known as an āinstant onā capability. What that really means is that on the backend, we can have the virtual machines pre-launched such that when the user connects, they get an instant on experience. The way that this is configured on the desktop delivery controller is for each group, you specify the range of time you want a specific number of idle machines available. For example you can say that from 9am to 5pm you want 15 machines spun up and ready for use, where as outside of working hours, you bring it down to 2 or 3. Then the Desktop delivery controller will manage your infrastructure accordingly so that the user gets an instant on experience. That integration is only available for virtual machines at launch, but an SDK will be coming later on for customers to modify that for support with blades. Weāre going to introduce blade support as we move forward in upcoming releases. Once the VM has been started, we send a preparation for connection to the VDA (the thing that delivers the ICA experience from the virtual desktop). The VDA resides on the virtual desktop. Its not always waiting for a connection. From a security perspective, we wanted to be able to control when youād be able to connect to those virtual machines. Not until an end user authenticates and the desktop delivery controller sends a preparation message to the VDA that you can connect to a virtual machine using ICA. This is a nice security feature that weāve implemented to control who can access the virtual desktop and when. What happens then is that the Desktop Receiver connects to the VDA. What's important about this is that clearly unlike the first release of DS v1, this is a direct ICA connection to whatever the virtual desktop is running on, virtual machine or the blade. This is a direct ICA experience just like customers are used to with XenApp. What we do then is that we validate through examining a ticket that was previously created, whether that is the right user that is supposed to be connecting to the virtual machine and if that is not correct, we drop the connection. We consume a license (XenDesktop will be licensed on a CCU basis, just like XenApp). Then we implement policies for the way that that ICA connection is delivered. This is the point at which we would in XenApp say which apps are available. In XenDesktop this is the point at which we control policies like the āend user is able to map drives from the local machineā. We have full support for the policies that customers are familiar with in XenApp as well as the SmartAccess capabilities of the AG product line. That is when those policies would be implemented. That is essentially how XD works.
- Just like we described in the whiteboard discussion, the traditional way of doing it is to load everything onto individual desktops or laptops ā all the client software of client/server applications, the desktop applications, the web clients, etc. This is costly to manage and support in this distributed fashion ā never mind trying to secure it on the endpoints, lock down devices, ensure client-side compatibility, etc. So, rather than ādeployā applications, ādeliverā them using Presentation Server and its application virtualization and application streaming features.
- With application virtualization, those applications are centralized ā the application is no longer installed on the endpoint, instead it is installed on servers in the data center, where you can monitor, control, update and secure them. The client device doesnāt actually need to process the application at all ā freeing the application from client-side dependencies altogether. This is why we call this virtualization.
- Presentation Title Goes Here Insert Version Number Here Ā© 2007 Citrix Systems, Inc.āAll rights reserved.
- The power of OS Streaming technology is more evident the wider it gets deployed. Simplifies intractable problems. Now, rather than having dedicated back up sites, multiple sites can back up to the same datacenter. This creates big savings.
- Presentation Title Goes Here Insert Version Number Here Ā© 2007 Citrix Systems, Inc.āAll rights reserved.
- The purpose of todayās HOT session is to update the environment for a fictitious company named SNR, inc. This slide represents the current environment. Remote employees have access to the internal network through an IPSec VPN. This works but there is no way to enforce conditional access. Everyone that logs in through the IPSec VPN receives the same level of access.
- SmartAccess is not a feature but rather a concept. SmartAccess incorporates the following: Who is connecting? Access Gateway uses EPA scans to determine various characteristics about a client device. What is the result of the connection? Once users are authenticated, will they receive a full VPN connection, clientless access, Web Interface/Published Applications, etc? What resources can be accessed? Will users receive full access to internal network resources or only a subset of resources? How will users be able to access these resources (published apps only, FTA, etc.)?
- Here is an example of providing different levels of access, based on the results of client security scans. Here, if the user doesnāt have Windows XP they are denied. Full access is given to PCās with Prism, Symantec, a particluar registry key, and are running XP. Access is reduced as the users have fewer of these components.
- In most environments the communication between the AGEE and the backend servers would be as follows: Communication to the DNS and Authentication Server will occur in most topologies using the Netscaler IP. In this example, we are using LDAP or LDAPS which means we need 389 and 636 open from the DMZ to the private network. Communication to the Web Interface and XenApp Servers will occur using the Mapped or Subnet IPs. Typical ports required at the firewall for allowed access will be 80, 443, 1494, and 2598. Last, management traffic generally comes from an internal device to the NSIP. Initially users will connect over 80 or 443 to the NSIP, but once the java administration applet has luanched connections will occur over 3010 for unsecure and 3008 for secured. Depending on whether you connected to HTTP or HTTPS initially will determine if the actual management connection is secured or not.
- Presentation Title Goes Here Insert Version Number Here Ā© 2003 Citrix Systems, Inc.āAll rights reserved. Important points to remember: WI can point to any vpn vserver, not necessarily the one where users connect. WI must be able to resolve the FQDN of the virtual server WI must be able to route to the virtual server IP of HTTPS WI must trust the SSL certificate from a machine level.
- The Access Gateway Wizard can be used to create/edit virtual servers, bind certificates, configure DNS/WINS settings, configure authentication settings, specify default authorization settings and access scenarios.
- Presentation Title Goes Here Insert Version Number Here Ā© 2007 Citrix Systems, Inc.āAll rights reserved.
- Availability The Workflow Studio platform is available as a feature of the Citrix Delivery Center. All customers of XenApp, XenDesktop, XenServer, and NetScaler current on SA for all editions except the Express Editions will be able to download from MyCitrix.
- Workflow Studio builds on the capabilities of Workflow Foundation and PowerShell. Workflow Foundation provides the Visual Designer, the base activity library functionality, and runtime services. Workflow Studio extends each of these to target an IT Professional. Workflow Studio also melds Workflow Foundation with PowerShell, providing native support for PowerShell activities (not available yet in Workflow Foundation.) Starting at the bottom: Automation is desired for a product or a group of products (both Citrix and 3 rd party) Products expose functionality through an API Activity Libraries expose this functionality to a workflow developer Workflows can be created that solve business problems Activity libraries can be implemented as a raw translation of the product API, but this is not the most usable method. Some thought needs to be put into what we expect customers to do with a workflow. We have built support for Snippets into the core product to help facilitate this process, but these activity libraries still need to be ādesignedā.
- Letās review the list of activity libraries that are available today for Workflow Studio. Many Windows systems are supported today: Active Directory and Group Policy libraries provide the building blocks necessary for user provisioning and rights management The Networking library provides the ability to do remote shutdown of your Windows servers and desktops as well as supporting WakeOnLAN for power on technology The Windows and WMI libraries offers a broad range of activities for typical Windows OS management. Reading from the Windows Registry, querying performance counters, manipulating files, and accessing any data exposed via WMI The PowerShell library exposes the functionality of PowerShell, and in particular allows you to import and export CSV files Initial Citrix libraries are available for XenApp, XenServer, and NetScaler today with XenDesktop support and deeper integration with product sub-features (like Provisioning Server and StorageLink) coming soon. An SDK is also available if you want to build your own libraries to integrate with other products.
- Presentation Title Goes Here Insert Version Number Here Ā© 2007 Citrix Systems, Inc.āAll rights reserved.