NimbostratusReplacing Citrix Netscaler with Big-IP. What is the configuration to accomplish this and still allow access to XenDesktop applications for external users via the Big-IP? Would like to replace Netscaler with the Big-IP. Do I need APM licenses for this or can I do it with LTM?
Thanks.
CirrusYou can deploy your solution with or without APM, it really depends on your requirements. APM will give you very flexible options for authentication and presentation also will proxy ICA traffic . With LTM only there will be ICA traffic from 'Citrix Receiver Client Network' to 'Application and Virtual Desktop Resources'.
See link below its a useful guide:
Citrix XenApp or XenDesktop (BIG-IP v11, 12, 13: LTM, APM, AFM)
NimbostratusThanks for your response. You mean that without APM, firewall ports will need to be open from the client to connect directly to the XenDesktop servers? If doing this remotely, the XenDesktop servers will need a public IP address?
CirrusYes for ICA traffic unless you force it through SSL, you need an iRule for that.
As you mentioned the other thing is after authenticatin when use lunches an app it will connet to app server via private ip so you need an iRule to map and proxy ICA traffic correctly. I haven’t tested the iApp without APM but pretty sure if you select ‘do not proxy ICA’ during iApp config it will sort this for you, if not you need an iRule.
All in all I would consider APM.
NimbostratusThank you. The goal is to get this to work without APM and allow external clients to open XenDesktop apps via the BigIP with few firewall ports as possible. Similar to how the Netscaler is configured. Any more detailed ideas on the setup?
NimbostratusCan any additional help be provided? Thanks.