1. CloudBridge WAN Optimization and Cloud Connectivity

2. Agenda CloudBridge overview Tools of network optimization
Application specific optimizations
CloudBridge Connector
Appliances overview
Intro to today’s labs
Get your hands dirty
Agenda

3. CloudBridge overview

4. CloudBridge and the Citrix Application Delivery Architecture
Cloud Platforms
Cloud Networking
Data Sharing
Social Collaboration
Mobile Platforms
Desktop Virtualization
GoToMeeting
ShareFile
XenMobile
XenDesktop
NetScaler
CloudBridge
CloudPlatform
Presentation
Delivery
When you think about Citrix, we’ve built a comprehensive portfolio of cloud services technologies that range from social collaboration and data sharing to core infrastructure in cloud networking and cloud platforms.
In Social Collaboration space, key products include GoToMeeting and Podio;
In Data Sharing, we offer Sharefile;
From Mobile platforms perspective, XenMobile;
In Desktop Virtualization, are leading products are XenDesktop along with XenApp;
In Cloud Networking, we offer NetScaler; and
Lastly, in cloud infrastructure, automation and orchestration, we offer CloudPlatform.
Citrix is uniquely positioned with a wide variety of cloud solutions. A Citrix delivery architecture enhances client experience and productivity from the presentation layer to network delivery.

5. Citrix CloudBridge in a Nutshell
Network X
Network Y
Cloud Provider
Traditional
Datacenter
Requirements
L2 Tunnel and Bridging
L3 Secured Tunnel
Seamless network
WAN Optimized

6. Citrix CloudBridge in a Nutshell
IPSec Tunnel
L2 GRE Tunnel
Network X
Cloud Provider
Traditional
Datacenter
Together, IPSec and L2 tunneling provide network transparency
Provides a seamless extension of the Enterprise network into the Cloud
Provides secure connectivity from the Enterprise network into the Cloud

7. Citrix CloudBridge in a Nutshell
IPSec Tunnel
L2 GRE Tunnel
Optimizes application availability through advanced L4-7 load balancing and traffic management
Provides a seamless extension of the Enterprise network into the Cloud
Network X
Cloud Provider
Traditional
Datacenter
A truly network-transparent WAN optimization solution that does not rely on disruptive tunneling techniques

8. Citrix CloudBridge in a Nutshell
IPSec Tunnel
L2 GRE Tunnel
Optimizes application availability through advanced L4-7 load balancing and traffic management
Provides a seamless extension of the Enterprise network into the Cloud
Network X
Cloud Provider
Traditional
Datacenter
Provides a seamless extension of the Enterprise network into the Cloud
Provides secure connectivity from the Enterprise network into the Cloud
Together, IPSec and L2 tunneling provide network transparency
A truly network-transparent WAN optimization solution that doesn’t rely on disruptive tunneling techniques

9. CloudBridge Delivers XenDesktop to the Branch
This slide shows a high level network diagram of a XenDesktop deployment for users who are collocated with the data center. This architecture works well when users are located in close proximity to the data center, but for branch employees who are farther away, distance may degrade the user experience. What do we mean by a degraded user experience? Simply put, mouse actions and keyboard input will exhibit a slow response. That is where CloudBridge comes in.
CloudBridge is deployed in pairs. One device is located at the data center. The other CloudBridge devices is deployed at the branch site. Together, the pair of CloudBridge devices work to minimize any performance issues that may be caused by congestion and latency.
In terms of application acceleration, CloudBridge differentiates itself from other WAN optimization vendors in the delivery of XenDesktop. Why is that? As the HDX protocol is Citrix developed, the CloudBridge platform is better suited to optimize this protocol over a WAN. Other WAN optimization vendors must rely on reverse engineering of the protocol in order to provide optimization. Further, CloudBridge is pre-configured to identify XenDesktop traffic, thereby minimizing the effort required for setup and installation. With deep knowledge of the HDX protocol, CloudBridge can ensure that the individual virtual channels within the HDX protocol are mapped to the correct priority level to ensure that real time traffic, such as mouse movement and keyboard input receive the highest priority, while non-real time functions, such as printing complete with lower priority.

10. CloudBridge for WAN Optimization in the Cloud Era
CloudBridge Client
Data Center
CloudBridge
CloudBridge
Accelerated application delivery and connectivity from all application instances to all users and services

11. CloudBridge Benefits Summary
Citrix CloudBridge is a WAN optimization controller designed for tomorrow’s hosted desktop environments. CloudBridge provides customers with the following:
User-centric XenDesktop Prioritization:  CloudBridge is unique in its ability to prioritize virtual desktops and apps by user groups, allowing IT to accelerate the delivery differently for different user groups, determined by their business policies.
Application Acceleration for virtual desktop and apps as well as traditional enterprise applications such as Microsoft Exchange and SharePoint.
Powerful Traffic Management capabilities that include intelligent and adaptive mechanisms to guarantee quality of service (QoS) and experience (QoE) by enabling IT with a set of tools for holistic service delivery management:  these tools assess network traffic patterns and usage, classify apps and services traffic, control bandwidth consumption and protect delay-sensitive apps using granular policies, monitor network congestion and delays affecting user experience, and remediate those problems quickly to minimize support calls.
Ability to scale as the CloudBridge platform supports the highest number of simultaneous HD sessions than any other WAN optimization controller.
And Citrix has recently added Secure Cloud Connectivity functionality to CloudBrirdge to enable enterprises to quickly and efficiently take advantage of cloud-based compute resources, be it their own or from a third party cloud provider such as Amazon or Windows Azure.

12. Tools of network optimization

13. CloudBridge Optimization Technologies
TCP Flow
Control
Compression
Protocol
Accelerators
QoS
WAN Optimization Engine
Improve inefficient protocols
Data compression / De-duplication
Overcome loss/latency penalties
Prioritize critical traffic
Network Congestion, Latency and Packet Loss

14. TCP Flow Control
TCP waits for a ACK after 64 Kbytes are sent on the wire
TCP does not like to compete for bandwidth
Multiple TCP sessions collide with each other causing back off and retransmit behavior
The first of the four techniques is flow control. Flow control encompasses a couple of TCP idiosyncrasies that can lead to a significant degradation in response time and performance.
TCP allows a certain amount of data on the wire and then stops. The default value is 64 kB. In Microsoft shops, the newer versions of Windows tend to do a very good job of adjusting this window size to meet the detected latency of a connection. But in older applications and older networks, you’re likely to run into the 64 kB limitation on many latent WAN segments.
One other thing that TCP doesn’t tend to like his contention. If you have several hundred TCP sessions all vying for highly constrained bandwidth, you’re going to experience TCP’s back off and re-ramp features.
CloudBridge manages the streaming between two locations to overcome these limitations of TCP.

15. Compression and Deduplication
Compression and Deduplication work by analyzing the data and searching for redundancies.
Without Compression: AAAAAAAAAABCDAAAAA AAAAA (23 digits)
With Compression: Ax10BCDAx10 (11 digits)

16. Big File Transfer Quality of Service Big Print Job
HDX Sessions
VoIP calls
HTTP
MAPI
CIFS
Big Print Job
No QoS: Interactive apps impacted
With QoS: Interactive apps prioritized
Quality of service. Is the last tool that we use to enhance the user experience in the branch. By placing interactive oriented data streams in high priority queues, we lead to an overall consistent user experience especially in the presence of large, time insensitive applications like print jobs and file transfers. Everyone is working along just fine until someone downloads a 50 MB CAD drawing or kicks off a big, graphics intensive print job.
CloudBridge gives you the ability to define and prioritize hundreds of service classes on your wide-area network.

17. Protocol Acceleration
Accelerates various protocols that WANs use to communicate. Thus minimizing the number of back-and-forth trips taken.

18. Application specific optimizations

19. Protocol Acceleration
First generation CIFS wouldn’t send the next packet until the preceding ACK was received – not true any longer
MAPI is still pretty chatty
HDX benefits from de-duplication and QoS
even with flow control and compression there are still protocols that need to be optimize the network.
First and second generation Microsoft CIFS, along with MAPI, is a great example where specific protocol optimizations can significantly improve the user experience.
But let’s take a better example, one that is already highly optimized for WAN use, and that’s our own ICA and CGP protocols. Even with all the optimizations and compression that are built into ICA, it still can benefit from techniques like selective compression, de-duplication and layer 7 QOS. More on that later.

20. XenDesktop
CloudBridge reduces WAN bandwidth requirements by almost 80%
Preconfigured QoS settings ensure correct prioritization
Supports both single-stream and multi-stream deployments
And optimizes other enterprise applications as well…

21. XenApp Optimization Speed 50X 30X 2X 2.5X 6X Bandwidth Savings 99% 89%
97%
Print
File
So what can you optimize with CloudBridge?
There are a variety of protocols that CloudBridge can accelerate not just Ica and citrix apps like XenDesktop. But a wide variety of other protocols such as http, SMB, MAPI, CIFS, Sharepoint, etc. Moreover CloudBridge will accelerate and improve TCP performance for virtually all apps . That means that the solution are offering your customers or just benefit to XenDesktop but also in the most other apps they have deployed .

22. CloudBridge accelerates ShareFile for Branch offices
Control Plane
Accelerate file transfers
Compress WAN data usage
Prioritize and shape bandwidth usage by application
Flexible physical and Virtual appliances up to 2Gbps
Login
Authorization
Storage Center (EC2) S3
File Transfer
Storage Center (Windows IIS)
Branch
CloudBridge
CloudBridge WAN Optimization appliances are deployed symmetrically – one in the Branch and one in the enterprise data center to accelerate ShareFile file transfers
CloudBridge implements the following :
TCP optimizations to alleviate WAN latency / packet loss and accelerate downloads
High performance data compression to reduce the amount data sent out on the WAN
QoS support to enable application level classification and traffic shaping
The deployment is transparent and the product line offers physical and virtual appliances options.
Physical appliances range in capacity from 1Mbps all the way to 2Gbps while the virtual appliances go from 2Mbps to 45 Mbps
NAS
NAS
Customer-Managed StorageZones

23. CloudBridge Benefits for NetApp Storage Replication
Link Capacity
Customer Data Center 1
Customer Data Center 2
SSL
SSL SSL SSL SSL SSL SSL SSL
NAS
NAS
NAS
NAS
NetApp’s SnapMirror application includes compression functionality
Enabling compression affects file server performance
CloudBridge accelerates better:
Better TCP window size adjustment
Congestion measurement and control
De-duplicates across storage volumes
CloudBridge’s acceleration benefits are complimentary to NetApp’s

24. Optimize Video Delivery to Branches
Download Time
CloudBridge provides:
Caching or de-duplication of video content for XenDesktop environments
Cache videos from content sites, both internal and external
Prioritize traffic from preferred video content sites
Deliver a better video experience while reducing WAN bandwidth
Data center
User A
Video server
XenDesktop
Download Time
Branch office
Enterprise video consumption will reach 16 hours / worker / month in 2016 per the Gartner Group. Training, product launches, marketing content, and entertainment is driving this growth All of that video content can cause congestion on the WAN. And CloudBridge can help with this.
Native support for a variety of formats, CODECs and sources
All major formats
All major CODECs
Major Web sources such as YouTube and Vimeo
Define sources that can be cached (e.g., Youtube.com)
Cached data only resides on the remote device
Not cached in the datacenter
Cache ages based on last accessed and the number of content accesses
WAN
XenApp
CloudBridge
User B

25. AppFlow for Enhanced Visibility
CloudBridge esports AppFlow for enhanced diagnostics
Report template available from Splunk
HDX Insight Center availability 2H14
Just like NetScaler, CB also exports AppFlow records
Enhanced network diagnostics and reporting
Report template available from Splunk for download, includes:
Aggregate WAN bandwidth utilization
Compression information
Usage/compression by application
Usage/compression by client
Diagnostics by application/client
Provides real time as well as historical views
Additional report templates can be created
Complement NS insight

26. CloudBridge Connector

27. CloudBridge Connector
Feature to build a cloud-extended data center
Create bridges to connect one or more virtual private clouds (VPCs) to your network
No reconfiguration of your data center
Enables to create a seamless connectivity between:
Your existing data center and applications hosted in the VPC
Two Clouds
Data Center to Data Center
AWS, Azure, SoftLayer, etc
-CloudBridge Connector feature is a tool used to build a cloud-extended data center.
-With CloudBridge Connector you can create bridges to connect one or more virtual private clouds (VPCs) to your network, without reconfiguring your data center.
-It also allows you to create seamless connectivity between:
Your existing data center and applications hosted in VPCs
Between Two Clouds or
Between a Data Center and a Data Center

28. CloudBridge Basic Use-Case
Premise Datacenter
Cloud
LDAP
DB Server
Network:
Subnet:
Private
Public
Public
Private
Storage
CloudBridge
Web Server

29. CloudBridge Basic Use-Case
IPSec Tunnel
L2 Tunnel
Premise Datacenter
Cloud
Connection: L2 Tunnel
Security: IPSec VPN
Routes: IP/IP, IPv6, non-IP
LDAP
DB Server
Network:
Subnet:
Network:
Subnet:
Private
Public
Public
Private
Storage
CloudBridge
CloudBridge
Web Server
Eth0 (External):
Eth1 (Internal): /24
Eth0 (External):
Eth1 (Internal): /24
Network:
Subnet:

30. CloudBridge Basic Use-Case
IPSec Tunnel
CloudBridge
L2 Tunnel
Premise Datacenter
Cloud
LDAP
DB Server
Private
Public
Public
Private
Storage
CloudBridge
CloudBridge
Web Server
Web Server
Migration / On-Boarding
IP:
Subnet:
Reqs: DB and LDAP

31. CloudBridge: Proximity GSLB
Hypervisor
Location: Office
Application: XenApp
Public
Private
Request
Request
Response
Client 1
Response
Switch
Request
vSwitch
Response
CloudBridge
LDAP
DB Server
Storage
Intranet
Premise Datacenter
World Wide Web
Cloud
Hypervisor
Location: Boston
Application: XenApp
Request
Public
Private
Request
Response
Client 2
Response
Request
Switch
vSwitch
Response
= CloudBridge

32. CloudBridge: Site Capacity GSLB
Hypervisor
Location: Office
Application: XenApp
Public
Private
Request
Request
Response
“N” Clients
Request
Response
Switch
Request
vSwitch
Response
CloudBridge
LDAP
Maximum Threshold
DB Server
Storage
Intranet
Premise Datacenter
World Wide Web
Cloud
Hypervisor
Type of spillover used to divert traffic to the backup GSLB
virtual server when the primary virtual server reaches the
spillover threshold. Possible values:
• CONNECTION. Causes spillover based on
connections.
• DYNAMIC CONNECTION. Causes spillover based
on connections.
• BANDWIDTH. Causes spillover based on traffic rate.
• HEALTH. Causes spillover if bound and active
services and service groups fall below a threshold
relative to all bound elements.
• NONE.
Public
Private
Switch
vSwitch
= CloudBridge

33. CloudBridge: Site Capacity GSLB
Hypervisor
Location: Office
Application: XenApp
Public
Private
Request
Request
Response
“N” Clients
Request
Response
Switch
Request
vSwitch
Response
CloudBridge
Response
LDAP
DB Server
Storage
Request
Response
Intranet
Premise Datacenter
World Wide Web
Cloud
Hypervisor
Type of spillover used to divert traffic to the backup GSLB
virtual server when the primary virtual server reaches the
spillover threshold. Possible values:
• CONNECTION. Causes spillover based on
connections.
• DYNAMIC CONNECTION. Causes spillover based
on connections.
• BANDWIDTH. Causes spillover based on traffic rate.
• HEALTH. Causes spillover if bound and active
services and service groups fall below a threshold
relative to all bound elements.
• NONE.
Request
Public
Private
Response
Switch
vSwitch
= NetScaler CloudBridge

34. CloudBridge: DR for GSLB
Hypervisor
Public
Private
Request
Request
Response
“N” Clients
Response
Switch
Request
vSwitch
Response
CloudBridge
LDAP
DB Server
Storage
Server Failure
Request
Response
Intranet
Premise Datacenter
World Wide Web
Cloud
Hypervisor
Request
Public
Private
Response
Switch
vSwitch
= NetScaler CloudBridge

35. Appliances overview

36. CloudBridge Product Lineup
Deployment Type
Model
Capacity (Mbps)
HDX Sessions
Global Datacenter
5000
1,500 – 2,000
3,500 – 5,000
Large Datacenter
4000
310 – 1,000
750 – 2,500
Medium Datacenter
3000
50 – 155
300 – 500
Large Branch
2000
2000WS
10 – 50
100 – 300
Small Branch
1000WS
6 – 20
20 – 200
800
2 – 10
20 – 100
Micro Branch
400
2 – 6
10 – 30
Cloud Service Providers
VPX
2 – 45
4000 and 5000 come with CloudBridge connector included. Large branch boxes on roadmap.

37. CloudBridge Windows Server Overview
CloudBridge 2000WS/1000WS
WAN Optimization
CloudBridge Connector
(Future)
WAN Optimization
Windows Apps
CloudBridge Connector
(Future)
Windows Server
XenServer
XenServer
CloudBridge Hardware
CloudBridge Hardware
CloudBridge 2000WS / CloudBridge 1000WS are available.
Windows Server 2102R2 OEM Standard Edition is installed, licensed, and activated – Supported by Citrix
Two 1TB HDDs are added to existing CloudBridge 2000 device / Windows Server can provide RAID1 mirroring

38. CloudBridge 2000WS and 1000WS Branch Platforms
6 to 50 Mbps of accelerated throughput
Windows Server 2012 R2 Standard Edition fully installed, licensed configured and supported by Citrix
60 to 300 concurrent HDX sessions
Up to 200 Mbps QoS throughput
10,000 to 20,000 TCP sessions

39. Configurations: CloudBridge 2000WS CloudBridge 1000WS CPU E3-1275
4 core, 3.4 GHz
E3-1105C v2
4 Core 1.8GHz
Memory
24 GB
32 GB
Storage
Intel 600 GB SSD
(WAN opt)
2 x 1 TB HDD
(Windows)
Intel 300GB SSD
Seagate 1TB HDD (Windows)
Recovery
Disk boot partition
16GB Internal eUSB
Network Interface
2 pair w/bypass 10/100/1000
Cooling Fans
4 high speed (N+1 Redundant)
3 low speed (N+1 redundant)

40. Citrix Extensible Appliance Architecture
Hypervisor-based architecture
Secure: all VMs fully isolated from the others
Guaranteed acceleration bandwidth
Mgmt VM
Windows Server 2012 R2 Std.
WAN Optimization VM
XenServer Hypervisor
Interface 0/1 Mgmt
AUX
Windows
apA LAN Acceleration
apA WAN Acceleration
apB LAN Acceleration
apB WAN Acceleration
Local Network
/16
WAN

41. CloudBridge 1000WS with Windows Server 2012 R2
License levels: 6 / 10 / 20 Mbps
Pay Grow available
HDX Sessions: 60 / 100 / 200
TCP Sessions: 10,000
Full-featured, advanced WAN optimization
Full Windows Server domain controller / server functionality
AD, DNS, DHCP, RODC, LDS
File
Print
CloudBridge 1000WS with Windows Server 2012 R2

42. CloudBridge 400 and 800 Overview
Micro Branch – CloudBridge 400
WANOP with limited connections
No video caching
2 x bridge pairs
160 GB SSD
2, 6 Mbps with Pay Grow
Starting at $3,500
Branch – CloudBridge 800
Full featured WANOP
Video caching support
240 GB SSD
2, 6, 10 Mbps with Pay Grow
Starting at $5,000
Two new models will replace the 600 devices to broaden deployment options
New devices bring SSD reliability at an attractive price to small and micro branch locations.
Large performance increase due to faster CPUs, yet same or better price point
Two new models will replace the 600 devices to broaden deployment options
New devices bring SSD reliability at an attractive price
Large performance increase due to faster CPUs, yet same or better price point

43. New to CloudBridge Aleria (CloudBridge 7.3)
CloudBridge AppFlow with HDX Insight
RPC over HTTPS / Outlook Anywhere (Outlook 2013)
Branch device auto-configuration – with Command Center
Video Cache pre warming
Validated designs
Removing the SDX loopback cable

44. Lab Introduction

45. We have a main data center with a variety of apps including Exchange, XenDesktop, SharePoint, and FTP.
A windows client sits in the remote data center that will be accessing the apps in the main datacenter.
The goal is to establish and validate acceleration with CloudBridge while getting familiar with the CloudBridge gui.
In the final exercise we will set up CloudBridge connector on the NetScaler appliances in order to create an IPSec tunnel over the public internet.

46. Lab Exercises Exercise 1: Verify Connectivity
Exercise 2: Active Directory Memebership
Exercise 3: ICA Optimization
Exercise 4: CIFS Optimization
Exercise 5: FTP Optimization
Exercise 6: Configuration of WanEmulation
Exercise 7: MAPI Optimization
Exercise 8: Cloud Connectivity
Exercise 9 (Optional): General CloudBridge Counters