Feeds

Citrix pushes the pedal on NetScaler appliance metal

2,048-bit SSL coprocessor nitro

Top 5 reasons to deploy VMware with Tegile

Citrix Systems made a lot of noise by acquiring XenSource a few years back for a half billion bucks, but it still makes a lot of money from its NetScaler line of web application acceleration appliances. These include physical implementations (MPX), virtual ones (VPX) running inside of virtual machines, and the high-end ones for service providers (SDX).

The NetScaler appliances are based on two-socket Xeon 5600 servers in a 2U chassis with SSL encryption/decryption coprocessors plugged into their peripheral slots. The MPX versions just run one image of the NetScaler software on a single appliance: the Standard, Enterprise, or Platinum editions, to be precise. The SDX versions, which first debuted in May, are aimed at service providers and they use the company's XenServer hypervisor to carve up a single server into multiple, isolated virtual application acceleration and access control instances. The MPX and SDX appliances come with all of their hardware installed and Citrix dials up a certain level of bandwidth and SSL encryption/decryption capacity to create different models. Once you have one model, you can do a software upgrade on-the-fly to boost a NetScaler appliance's performance. The VPX virtual appliances can run on any server sporting a Citrix XenServer, Microsoft Hyper-V, or VMware ESXi hypervisor.

With companies freaking out about security on the Wild Wide Web, Citrix has beefed up the performance of the NetScaler MPX and SDX appliances so they can process 2,048-bit SSL encryption and decryption at an acceptable performance level. It's not that the existing NetScaler appliances can't do the 2,048-bit encryption, explains Greg Smith, senior director of product marketing for the Cloud Networking Group at Citrix, but the company had to add come more coprocessing oomph to do so at speed. At the top-end of the NetScaler line, the new MPX 21550/SDX 21550 can handle 90,000 transactions per second with those 2Kb key certificates, which is twice the oomph of the prior MPX 21500/SDX 21500 appliances and more than twice that of the nearest rivals, according to Smith.

Citrix NetScaler

Citrix NetScaler acceleration/access appliances

Smith says that on an existing NetScaler appliance without the extra coprocessors, switching from 1,024-bit to 2,048-bit SSL drops the transaction throughput on the appliance by 80 percent. Doing that extra math takes a lot more time.

The other big change with the latest NetScalers is that the virtual appliance count on the SDX appliance has been boosted from 16 virtual NetScaler instances with the SDX appliances announced in May. With the NetScaler SDX 17550, 19550, 20550 and 21550 appliances that were just announced, service providers can add up to 40 virtual NetScaler instances to the machines. Citrix is still using the XenServer 5.6 hypervisor inside of the SDX appliances, by the way, not the new XenServer 6.0 hypervisor announced a little more than a week ago. The SDX appliances can run different editions and release levels of the NetScaler software at the same time and can have specific amounts of memory, CPU, and SSL encryption/decryption throughput tied to each SDX image.

"We guarantee that no NetScaler instance will starve out any other and that is very important for multitenant service providers," says Smith. The only other way to guarantee performance would be to buy a separate hardware appliance for each customer, and that's not going to work in the cloudy era.

The base MPX 17550 appliance has 20Gb/sec of throughput and can process 44,000 transactions per second using 2,048-bit SSL encryption. It costs $145,000. The SDX 17550 has the same feeds and speeds hardware wise and has five instances of the NetScaler Standard Edition loaded up with the hypervisors. The other three appliances offer 35Gb/sec, 42Gb/sec, and 50Gb/sec raw throughput. The ability to upgrade through those speeds is called "pay-as-you-grow" by Citrix. ®

Secure remote control for conventional and virtual desktops

More from The Register

next story
The cloud that goes puff: Seagate Central home NAS woes
4TB of home storage is great, until you wake up to a dead device
Azure TITSUP caused by INFINITE LOOP
Fat fingered geo-block kept Aussies in the dark
You think the CLOUD's insecure? It's BETTER than UK.GOV's DATA CENTRES
We don't even know where some of them ARE – Maude
Intel offers ingenious piece of 10TB 3D NAND chippery
The race for next generation flash capacity now on
Want to STUFF Facebook with blatant ADVERTISING? Fine! But you must PAY
Pony up or push off, Zuck tells social marketeers
Oi, Europe! Tell US feds to GTFO of our servers, say Microsoft and pals
By writing a really angry letter about how it's harming our cloud business, ta
Astro-boffins start opening universe simulation data
Got a supercomputer? Want to simulate a universe? Here you go
prev story

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
The hidden costs of self-signed SSL certificates
Exploring the true TCO for self-signed SSL certificates, including a side-by-side comparison of a self-signed architecture versus working with a third-party SSL vendor.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.