Branch Repeater 5.6, 5.7 & VPXTechnical Presentation

High Definition Experience Needs Optimization and Orchestration Across the Entire Delivery System

Server

3Network

1Client

2

Citrix Confidential - Do Not DistributeCitrix Confidential - Do Not Distribute

HDX

Receivers Repeaters Gateways Controllers

Our Arrow ECS Labs Setup

Server

RouterWAN

emulator 1Mbps

Client

Citrix Confidential - Do Not DistributeCitrix Confidential - Do Not Distribute

WANem

Receivers

on

Wifi Network

172.32.1.0/24

Repeater VPX

172.32.1.250

Repeater VPX

192.168.1.254

XenDesktop

XenApp

CIFS HTTP MAPI

192.168.0.0/20

XenServer

Branch Offices

Branch Repeater

Citrix Branch Repeater | The Big Picture

Tele-workersMobile Users

Citrix Repeater Plug-in for Citrix Receiver

Redundant Datacenter or Disaster Recovery Site

Repeater

Applications:XenAppXenDesktop File ServersExchange EmailSharePointERP/CRM

Data Center

Repeater

Acceleration for any user, anywhere

Repeater appliancesRepeater Plug-inBranch Repeater with

Windows Server, and

Branch Repeater

What’s new in Branch Repeater 5.x & VPX

Exchange (MAPI) Acceleration

•Features• Protocol acceleration (similar to CIFS)• Compression & de-duplication of attachments• Cross-application and multi-user optimization• Supports Exchange Server 2003 and 2007• Supports MS Outlook 2003 and 2007• Available on all appliances and Repeater Plug-in

•Benefits• Up to 50 times faster sending/receiving emails• Reduces bandwidth consumption

Outlook Exchange

Branch Repeater running Windows Server 2008

•Features• Natively integrated Windows Server 2008 Standard

Edition OS• File, print, DHCP, DNS, WINS, DFS• Read-only Domain Controller (RODC)• MMC, WMI, SCOM manageability

•Benefits• Simplify IT by consolidating servers in the branch• Leverage existing Windows management tools and

expertise

WAN Optimization

Read-Only Domain Controller (RODC)

• Features

• Read-only AD DS database

• Unidirectional replication

• Credential caching

• Administrator role separation

• Read-only Domain Name System (DNS)

• Benefits

• Securely deploy a local DC in any branch location

• Faster authentication and logon times for branch users

• Centralized IT management and control

Command Center Enhancements

• Features

• Now supports all Branch Repeater appliances (Linux and Windows)

• Benefits

• Easy and cost-effective management of large number of remote sites

Citrix Branch Repeater Key Features

HDX Broadcast & HDX IntelliCache

Repeater Plug-in for Citrix Receiver

Plug-n-Play for Any Network

Integrated Windows Services

Flexible & Centralized Management

HDX Broadcast &HDX IntelliCache

Adaptive Protocol

Acceleration

Adaptive Compression

Adaptive TCP Flow Control

HDX IntelliCache and HDX Broadcast

Branch RepeaterRepeater

WAN

HDX Broadcast

Branch Caching ofOnline Apps

Prioritization & QoS

HDX IntelliCache

Branch Staging ofOffline Apps

Branch Repeater Technology – HDX Broadcast

(Improve inefficient protocols)

(Reduce application turns and data)

(Overcome loss/latency penalties)

(Prioritize critical traffic)

Adaptive TCP Flow Control

Adaptive Compression

Adaptive Protocol Acceleration

Prioritization and QoS

Intelligently accelerates common application protocols Adaptive Protocol Acceleration

• Mitigates latency by reducing round trips (chatty protocols)

• CIFS (File Sharing)

• MAPI (Exchange)

• Makes compression engine application-aware

• Separates headers from payload

• ICA, CIFS, MAPI, HTTP, FTP, NFS

Example: CIFS

CIFS

CIFS: Common Internet File System

Most common file sharing protocolMicrosoft Office, Linux Open Office, etc.Windows XP/Vista, Windows Server 2003/2008, Mac OS X NetApp Filers, EMC

File System AccessDrag/Drop, Read/Write, Copy, Directory Browsing

Example: CIFS – without Branch RepeaterI want to open a file

\\dog\bone\blue

“Whatever”

John Whomever

Which file?

Who are you?

Password?

OK, It’s open!

250ms

250ms

250ms

250ms

1000 ms

Example: CIFS – with Branch Repeater

I want to open a file

\\dog\bone\blue

“Whatever”

John Whomever

Which file?

Who are you?

Password?

I want to open a file

\\dog\bone\blue

“Whatever”

John Whomever

Which file?

Who are you?

Password?

OK, It’s open!

1 ms

125 ms

1 ms

OK, It’s open!

125 ms

252 ms

Open \\dog\bone\bluefor John Whomever,password “Whatever”

"Drag & Drop"- 1 Small File

"Drag & Drop"- 1 Large File

"Drag & Drop" 20 Files

Browse Directory with 20 Files

Open Word Doc Over WAN

0% 200% 400% 600% 800% 1000% 1200% 1400% 1600%

Improvement in Application Response Time

Branch Repeater CIFS Performance

CIFS Acceleration Requirements

Windows 2003/2008 Server :

• Set “Microsoft network client: Digitally sign communications (always)” to “Disabled”

• Set “Microsoft network server: Digitally sign communications (always)” to “Disabled”

Windows 2000 Server :

• Set “Digitally sign server communication (always)” to “Disabled”

• Set “Digitally sign client communication (always)” to “Disabled”

For Windows 2008 Server Disable SMB 2.0See : http://www.petri.co.il/how-to-disable-smb-2-on-windows-vista-or-server-2008.htm

• Faster sending/receiving of email attachments

• Lessen MAPI-related bandwidth requirements

• Increase mail system responsiveness for branch office users

• Help enable Exchange server consolidation

• Drastically reduce idle time in sending/receiving emails• Iterations of same or similar messages by email• Optimization when different users, different applications access similar files

Why accelerate MAPI?

What is MAPI Acceleration?

• MAPI Acceleration is:• The pipelining of MAPI-based traffic between Microsoft Outlook and Exchange.• Acceleration of the uploading and downloading of email attachments made to email

messages.• The compression of message attachments.

What is MAPI Acceleration?

• MAPI Acceleration is:• The pipelining of MAPI-based traffic between Microsoft Outlook and Exchange.• Acceleration of the uploading and downloading of email attachments made to email

messages.• The compression of message attachments.

How does MAPI Acceleration work?

• The Outlook client initiates a MAPI connection to Exchange on TCP port 135.

• User authentication and mailbox enumeration occurs.

• Branch Repeater detects the Outlook to Exchange handshake.

• If an accelerated connection is allowed the native Exchange compression is decompressed on the server-side Repeater.

• No acceleration = native compression only

• The Repeater/Branch Repeater pair then apply compression to subsequent MAPI traffic.

How does MAPI Acceleration work?

• A compression bit is flipped in the packet prior to reaching the client, notifying Outlook not to decompress the native Exchange compression.

• Outlook then creates multiple connections the to Exchange server and message requests are exchanged simultaneously among the connections

• The downloading and uploading of message attachments (messages larger than 32k) is then accelerated.

• Appropriate compression is applied to obtain a higher compression ratio.

• Packet header : Memory-based history

• Packet payload: Disk -based history

The acceleration of MAPI is accomplished using several methods

Pipelining of ROP requests containing data• Queuing up of upload bytes acknowledged by the client.

Pipelining of ROP responses containing data• Pre-fetching of bytes of download data to be sent to the client.

Aggregation of DCERPC fragments• MAPI/RPC requests combined into single multithreaded messages

How does MAPI Acceleration work?

Exchange (MAPI) Acceleration

•Requirements• Microsoft Outlook/Exchange Server 2003 and 2007.• Outlook must use normal Exchange mode

(no HTTP or HTTPS proxy), without encryption

• To disable encryption manually on a single Outlook 2007 client, go to the menu shownuncheck the box, “Encrypt data between Microsoft Office Outlook and Microsoft Exchange’.

• To disable encryption for multiple users via group policies, follow the instructions at http://support.microsoft.com/default.aspx/kb/924617 .Change the Properties for “Enable RPC Encryption” to “Disabled” under “User Configuration: Administrative Templates: Microsoft Office Outlook 2007: Tools: Advanced Settings: Exchange.

Branch Repeater Technology – HDX Broadcast

(Improve inefficient protocols)

(Reduce application turns and data)

(Overcome loss/latency penalties)

(Prioritize critical traffic)

Adaptive TCP Flow Control

Adaptive Compression

Adaptive Protocol Acceleration

Prioritization and QoS

Sensing real-time network and traffic conditions Adaptive Compression

• First pass compression• In L2 cache and memory• Various algorithms (ZLIB, LZS)

• Byte Caching• In memory or on disk

• De-Duplication• Across workflows• Across applications• Across users History Length

Cache

DRAM

Disk

Acc

ess

Tim

e

First PassAdaptive Compression

Compression History

Compression History

Second PassAdaptive Compression

Compression History

Compression History

A Small Token Replaces Thousands of Bytes

Branch Repeater Technology – HDX Broadcast

(Improve inefficient protocols)

(Reduce application turns and data)

(Overcome loss/latency penalties)Adaptive TCP Flow Control

Adaptive Compression

Adaptive Protocol Acceleration

Prioritization and QoS (Prioritize critical traffic)

Sensing and responding to latency and packet lossAdaptive TCP Flow Control

Slow Start Slow Ramp

Without Branch Repeater

AverageUtilization

Throughput

Time

With Branch Repeater

AverageUtilization

Throughput

Time

Link Speed

Branch Repeater Technology – HDX Broadcast

(Improve inefficient protocols)

(Reduce application turns and data)

(Overcome loss/latency penalties)

(Prioritize critical traffic)

Adaptive TCP Flow Control

Adaptive Compression

Adaptive Protocol Acceleration

Prioritization and QoS

Traffic Prioritization and QoS

ICA (Interactive)

Bulk Transfers1.5 Mbps

Recreational

Without Branch Repeater

60%

20%

20%

Bulk Transfers

Recreational

ICA (Interactive)

With Branch Repeater

Adaptively allocates bandwidth across different applications and ICA virtual channel types

• 5 traffic classes (or QoS queues)

• Each queue assigned a min % of the link bandwidth

• If queue bandwidth is unused, other traffic can use it

• QoS is Citrix ICA aware

• Dynamic mapping based on ICA priority bits

• Queue specific reporting

Quality of Service (QoS) prioritizes applications

Goal = Fill the pipe

Quality of Service Scheduling

Adapter (NIC)

Flow(Partner unit)

Flow(Partner unit)

Flow(Partner unit)

Class A – 50%

Class B – 25%

Class C – 25%

Class D – 0%

Class E – 0%

• Default Priority bits and ICA virtual channels:

• ICA packet with data from multiple channels gets the priority bit associated with

the highest level Virtual Channel

• ICA Priority bits can be changed via the registry of the Presentation Servers.

Priority Sample Virtual Channels

High (0) Video, Mouse and Keyboard Screen Updates

Medium (1) Program Neighborhood, clipboard, audio mapping, license management

Low (2) Client COM Port Mapping, Client Drive Mapping

Background (3) Auto Client Update, Client Printer Mapping and OEM Channels

QoS and ICA Priority Tags

Branch Repeater Technology – HDX IntelliCache

Branch Staging of Offline Apps

Branch Caching of Online AppsLocal caching and de-duplication across multiple XenApp user sessions

Pre-positions streamed applications locally for rapid delivery to branch users

• Stages and accelerates Offline apps to branches

• Deliver LAN-like performance

• Branch remains productive even during WAN outages

• Reduce management complexities of services in the branch

• Transparent, instant-on service to the user

Accelerating XenApp Offline Apps

Pre-positioning of Offline applications locally in the branchBranch Staging

Branch Repeater with Windows Server

Branch Users

XenApp Application Profiler

File Share (Application Hub)

WAN

• User accesses an app for the first time

• Get updated or patched applications

• After users download the app, it is saved to the local PC cache

When do .CAB stream over the WAN?

XenApp 5

Citrix Repeater

XenAppProfiler

.cabFile

store

Citrix Branch

RepeaterClient

• Very automatic and transparent to client

• Can be done anytime

• QoS administration of both DFS replicated traffic and other traffic to branch

• Tip: Make sure that the Branch Repeater and the XenApp Server have domain permissions.

1

2

WAN

Pre-positioning .CAB files

Citrix Repeater

XenAppProfiler

.cabFile

store

Citrix Branch

RepeaterClient 1

WAN

• Designed based on DFS replication• Redirects client to closest DFS replication site the local BR• No client changes required

2

XenApp 5

and redirection (Authenticate / Download / Redirect)Client accessing the files via DFS Namespace

Citrix Repeater

XenAppProfiler

.cabFile

store

Citrix Branch

RepeaterClient

3

WAN

• Designed based on DFS replication• Redirects client to closest DFS replication site the local BR• No client changes required

XenApp 5

and redirection (Authenticate / Download / Redirect)Client accessing the files via DFS Namespace

XenApp

Citrix Repeater

XenAppProfiler

.cabFile

store

Citrix Branch

Repeater

Client

WAN

• LAN like performance• No need to go over WAN to get the LARGE .cab file

• Results: Very HAPPY user!

Branch Repeater responds to client request

Branch Repeater Technology – HDX IntelliCache

Branch Staging of Offline Apps

Branch Caching of Online AppsLocal caching and de-duplication across multiple XenApp user sessions

Pre-positions streamed applications locally for rapid delivery to branch users

Branch RepeaterRepeater

Optimized TCP Connections

Branch OfficeData Center

XenApp Farm

Infrastructure Servers

Local caching and de-duplication across multiple sessionsBranch Caching

Multi-user Optimization for XenApp

Delivers best performance for XenApp to branch users

• 22-39% faster application start up per user

• 2-6x faster bulk data transfer over ICA + up to 20x less bandwidth consumption

• Up to 30x reduction for UPD print traffic over the WAN

• Multiple users accessing the same text heavy applications• e.g. Microsoft Word or Excel

• Multiple users frequently accessing forms-based Web applications• e.g. Call center environment utilizing SAP

• Multiple users printing similar files within ICA• i.e. Universal Print Driver (UPD)

• Multiple users performing repetitive file transfers within ICA• i.e. Client drive mapping

• Multiple users streaming the same media file within ICA• i.e. HDX MediaStream

Ideal Use Cases for Branch Caching

Example: Text Heavy Application

Same text between users using Word. Redundant data not sent over WAN.

User 1 User 2

Form and web browser based apps share background objects between users. Redundant data not sent over WAN.

Example: Forms-based Web Application

User 1 User 2

Example: Multi-user file and print services on ICA

Cross-session de-duplication benefit for print or transfer of similar files by different users

Redundant data not sent over WAN.

User #1 User #2

•Supports Windows 2003 servers

•Leave all compression, encryption settings enabled

•Native ICA from XenApp is optimized and compressed

ICA Acceleration with XenApp alone

WAN

compressed and encrypted ICA data

XenApp Client

XenApp Server

ICA Acceleration with Branch Repeater

WAN

compressed and encrypted ICA data

XenApp Client

XenApp Server

Branch Repeater

Repeater

ICA data still encrypted ICA data still encrypted

•Branch Repeater decrypts and encrypts ICA traffic to allow the ICA protocol to be parsed and compressed

•Supports basic and advanced encryption

ICA Acceleration with Branch Repeater

WAN

compressed and encrypted ICA data

Branch Repeater

Repeater XenApp Server

XenApp Client

• Automatic disabling of ICA compression on the XenApp server and client

• Branch Repeater parses ICA traffic inside the virtual channel

• Compression works across users and virtual channels to optimize all traffic

• Optimal performance for print, client drive mapping, and common apps

Mixed Environment Support

HQ/Data Center

Branch Office #1

Repeater

Branch Repeater

Branch Office #2

HDX IntelliCache ensures that branch users on direct WAN as well as those behind a Branch Repeater continue to enjoy ICA application performance!

WAN

Decrypted and Encrypted by Repeater

ICA Pass-through by Repeater

Further Reading

Whitepaper: Performance

assessment of Multiuser

XenApp Optimization

• http://www.citrix.com/branchrepeater

• http://support.citrix.com/article/ctx120160

Citrix Repeater Plug-in for Citrix Receiver

Citrix ReceiverSimple user experience

Single point for notificationsOrchestrates installation, updates, and interaction of third party plug-ins with Citrix plug-ins

For the enterprise PC, home PC, and BYOPC

Windows, Macintosh, iPhone, & SmartphonesWorks inside and outside the firewall

A single Citrix client for Citrix Delivery Center infrastructure

• Improved User Experience• Simplified User Interface• Reduce Systray Sprawl• Consistent User Notifications• Simpler Secure Connection from outside work

• Improved IT Experience• Centralized client management• Head-end controls default settings• Simpler support for BYOC, home, etc

Citrix Receiver Key Benefits

Three ComponentsCitrix Receiver for Windows

• Citrix Receiver – software installed on end-user desktop that houses plug-ins and communicates with the Merchandising Server for updates

• Citrix Receiver Merchandising Server – Linux-based XenServer Virtual Machine that stores plug-in updates

• Citrix Receiver Administrator Console – Web-based console used to administer the Merchandising Server and configure plug-in deliveries

• Available as plug-in for the Citrix Receiver as well as standalone

• High-definition experience for mobile users and teleworkers ("office like")

• Overcomes bandwidth and latency uncertainty of 'on-road' connectivity• WiFi, broadband, 3G connections

Citrix Repeater Plug-in

Deployment Scenarios

Integrated mode• Merchandising Server is used to deploy Citrix Receiver and

plug-ins

• Schedule the delivery for self-service install by end-user

Standalone mode• Citrix Repeater plug-in is deployed without the Citrix

Receiver or Merchandising Server

• Citrix Repeater plug-in software is downloaded from www.citrix.com

• Software is customized and deployed using existing software distribution mechanisms

• Repeater and Access Gateway plug-ins interoperate to turbocharge secure, remote access

• Unique, single-vendor secure accelerated access solution

• Best remote and mobile user experience

• Simple, secure and fast

Turbocharge Your Access Gateway!

WANWAN

Turbocharge Access Gateway

Traffic between the client and the secure network is optimized before passing through the VPN tunnel

Repeater Plug-in

Access Gateway Plug-in

Un-optimized traffic

Optimized traffic

Secure & Optimized traffic

Access Gateway

Repeater

Repeater Packet Interceptor

Access Gateway Driver

Network Driver

Application(Email, Web Browser)

User Space

Kernel

Access Gateway Plug-inRepeater Plug-in

TCP/IP Protocol Stack (Kernel) TCP/IP Protocol Stack (Kernel)

Repeater and Access Gateway Plug-Ins Integration

Access Gateway Configuration

Standard Edition

Advanced Edition

Enterprise Edition

All editions of Access Gateway can be turbocharged

Step by step configuration and planning available in CTX121035 Turbocharge Access Gateway Reference Architecture

• Secure and accelerated remote access

• Compared to secure access without the Repeater Plug-in, a turbocharged Access Gateway:• Improves CIFS performance by up to 30X• Improves HTTP performance by up to 50X• Improves MAPI performance by up to 50X

• Up to 99% bandwidth saving with native Windows file shares, Exchange email, SharePoint document libraries, and other apps

Benefits of Access Gateway integration

Turbocharge Access Gateway

Test results showing the performance improvement over different types of bandwidth

Plug-n-Play for Any Network

Plug-and-Play Deployment with Full Transparency

Auto-discoveryNo tunnelsZero impact to:

FirewallsNetFlowQoS

Branch Repeater Repeater

Branch Office Users

Non-CitrixWAN

Optimization

Non-CitrixWAN

Optimization

Proprietary Tunnel

NoTunnel

Multiple Deployment Modes

InlineBypass NIC

Virtual InlinePBRWCCPv2

Switch Router

Repeater or Branch Repeater

LAN WAN

Switch RouterRepeater orBranch Repeater

LAN WAN

Optional HA

Optional HA

Multiple Deployment Modes : Proxy Modes

• The 4-port NIC is two logically-individual fail-to-wire pairs

• 4-port NICs are for the environments that are:• dual homed, load balanced, and redundant• the multiple WAN links have the same speed

• Supports HA Pair mode starting with release 5.0• can be deployed inline, WCCP, or policy based routing modes

High Availability – 4-port NICs in Repeater

• High-availability mode • Transparently combines two Branch Repeaters with Windows Server into a primary/secondary pair• Uses standard protocol VRRP

• Supports multiple HA deployment topologies for uninterrupted service to the branch

High Availability Mode in Branch Repeater

• Asymmetric Routing: In a multi-homed environment, a packet on a given connection might travel over either link

Approaches to Resolve ‘Asymmetric Routing’

Group mode over non-redundant links with possible asymmetric routing

•allows two or more appliances to be grouped together into a single virtual appliance

Group Mode

•where WAN routers send traffic from multiple links to the same appliance (or HA pair), via the WCCP protocol.

WCCP mode

•where routers send traffic from multiple WAN links through the same appliance (or HA pair).

Virtual Inline

•where an appliance (or HA pair) is placed closer to the LAN, before the convergence point of the WAN links

LAN-level aggregation

• When multiple WAN links exist.• Primary/secondary configurations.• Load balanced configurations.• Possibility of asymmetric routing issues.

• Group mode can be used on redundant links without reconfiguring routers.• Group mode applies only to the appliances on one side of the WAN link.• Appliances in group mode have no affect or reliance on the appliances on the other side of the WAN link.

Why deploy in Group Mode

Primary Link

Backup Link

• Within a Group Mode grouping, there is a connection “owner”.

• The owner of a connection is set by default according to a hash of IP/port pairs.

• The owner can optionally be set according to specific IP/port-based rules.

• Group mode uses a heartbeat mechanism to verify that other members of the group are active. Packets are only forwarded to active group members.

How does Group Mode work?

Primary Link

Backup Link

• If traffic arrives first at the “owning” appliance, it is accelerated and forwarded normally. If it arrives first at a non-owning appliance, it is forwarded to its owner, which accelerates it and returns it to the original appliance for forwarding.

• In addition, it means that an appliance is available for acceleration even if its link is down. When the routing tables change to bypass the failed link, group mode still forwards the packets through the owning appliance before sending them across the remaining link.

How does Group Mode work?

Owning Appliance

Integrated Windows Services

• A comprehensive branch solution, Citrix Branch Repeater:• Optimizes application delivery from the Citrix Delivery Center• Provides key native Microsoft Windows™ branch infrastructure services

• Branch Repeater is paired with Citrix Repeater appliances in the data center

• Administration is performed through an MMC snap-in or other Windows management services

Citrix Branch Repeater with Windows Server

FilePrintAD

DNS...

Citrix Hardware

WindowsServices

CitrixServices

Windows OS

Citrix XenApp Repeater for Streamed Apps

Citrix WAN Optimization

Branch Repeater System Architecture

AppsBranch Users

Datacenter

Repeater

• WAN Optimization – Citrix Repeater Technology

• Domain Controller Services – Windows 2003/ 2008

• Active Directory – Windows 2003/ 2008

• Web Content Caching – ISA Server 2006

• File and Print Services – Windows 2003/ 3008

• DNS, WINS and DHCP Services – Windows 2003/ 2008

• Administration – MMC Snap-in Framework or Citrix Command Center

Branch Repeater Feature Breakdown

OR

• The Branch Repeater appliance also serves as a local print server to speed up print job spooling times

• It also provides Windows file and printer services

• The queuing of CIFS messages and the compressing of traffic alleviate the effects of a slow WAN link

Windows File and Print Services

• Remote administration is eased through domain-level, instead of local machine, accounts

• Read Only Domain Controller (RODC) for improved data security in branch office servers

• This scenario also provides local authentication and Windows policy enforcement

• Branch Repeater allows the branch office be self-sufficient in the event of lost WAN connectivity

Domain Controller Services

New

• Management pack available for System Center Operations Manager 2007 (SCOM)

• Windows Management Instrumentation (WMI) support for integrating with custom management and reporting tools

• Using solutions such as Microsoft SCOM and WMI, an entire enterprise-wide deployment of Citrix Branch Repeaters can be centrally and seamlessly managed.

Windows Management Tools

• Optional add-on feature

• The web caching functionality of ISA Server 2006 Enterprise is leveraged

• Page elements, graphics, text and active content are cached locally on the Branch Repeater appliance

• Protocol object caching • HTTP• FTP• BITS

• Requires inline deployment

Advanced Microsoft Services – Web Content Caching

• Branch Repeater is the single platform to configure, administer and maintain the branch systems using existing Microsoft tools

• Eliminate dedicated branch servers and optimize WAN latency and bandwidth• SMS Secondary Site for geographically spread deployments• SCCM Branch Distribution Point for simplified software distribution and faster

patching

• Extend IT consolidation initiatives to the branch

Advanced Microsoft Services – Systems Management

Flexible and Centralized Management

• Single administrative interface to all remote appliances

• Automated discovery and inventory

• One-click configuration replication

• System-wide fault management and performance monitoring

What is Citrix Command Center?

• Manages NetScaler, Access Gateway, Repeater and Branch Repeater from Citrix

• Free and easy to use; runs on any Windows server

• Centralized management of Citrix Branch Repeater devices (both Windows and non-Windows)• Citrix Branch Repeater with Windows Server can also be centrally managed by

Microsoft System Center Operations Manager (SCOM) and other Microsoft management tools

• Centralized Configuration Management

Command Center 3.2 Features

• Microsoft® SQL Server™ support

• High Availability support

• Faster and more efficient backup

• Fault Management and Event Aggregation enhancements

• Historical Reporting and Performance Graphs enhancements

Other Enhancements in Command Center 3.2

Command Center - Web-based Interface

Command Center - Configuration Management

View archived configs and restore to any

previous config

• Multiple levels of performance monitoring• appliance-level (e.g. single WAN link)• System-wide (Citrix Command Center)• End-user (XenApp, XenDesktop)

• Full network transparency allows use of existing performance monitoring tools (e.g. NetFlow)

• Extensive alarm and activity information• Export data to industry-standard NMS tools

Command Center - Monitoring and Reporting

• Web-based configuration

• Scriptable CLI

• SNMPv2 support for NMS integration

Appliances - Additional Management Utilities

Hardware Overview

Mobile User

Integrated Windows Services

Branch Repeater with Windows Server 100 / 200 / 300

Repeater Plug-in

Branch Repeater 100 / 200 / 300

Repeater 85xx 85208540

Repeater 88xx8820

8820 High Speed

Branch Office

(1-10 Mbps)

Regional HQ (10-45 Mbps)

Data Center (45-500 Mbps)

Complete Product Line – Citrix Branch Repeater

Branch Repeater

VPX-2 / 10

Branch Repeater VPX-45

Branch Repeater VPX-45

• Small to medium branch offices

• WAN optimization functionality in a compact and nearly silent form-factor

• VPX = low-cost, flexible branch installation with existing servers

• WAN speeds up to 10 Mbps

• Command Center management

Branch Repeater & Branch Repeater VPX-2/10

• Small to medium branch offices

• Integrated Windows services

• Stages XenApp offline apps

• WAN speeds up to 10 Mbps

• Command Center and Microsoft manageability

Branch Repeater with Windows Server

• Datacenters and large offices

• Fan out to branches

• Datacenter replication

• Repeater Plug-in support

• WAN speeds up to 500 Mbps

• VPX = low-cost, flexible installation with existing servers

• Command Center management

Repeater Appliances & Branch Repeater VPX-45

• For remote and mobile users

• Plug-in for Citrix Receiver or run standalone

• Support broadband, WiFi and 3G connections

• Works with Access Gateway and other leading VPNs

• Included with XenApp, XenDesktop & NetScaler Platinum Editions

Repeater Plug-in

Branch Repeater 5.7 Key Features and Benefits

Feature Customer Benefits

SSL Acceleration Accelerate encrypted XenDesktop and XenApp traffic and secure web applications by up to 30X without compromising security

Disk Encryption Prevent theft of sensitive data and comply with security mandates and regulations

2008 R2 for Branch Repeater with Windows Server

Reduce the number of servers in branch offices and enable customers to upgrade to Windows Server 2008 R2

Windows 7 64-bit plug-in Support growing number of remote users with 64-bit devices

Citrix Confidential - Do Not Distribute

• Repeater appliances: all supported 8xxx models

• Branch Repeater appliances: 100, 200, 300

• Branch Repeater with Windows Server: 100, 200, 300• Note – 5.7 is versioned as 3.0 on Windows appliances

• Repeater plug-in for Receiver

• Branch Repeater VPX: N/A*

Branch Repeater 5.7 Platform Compatibility

* 5.7 features will be available for Branch Repeater VPX in Q4 with 6.0 release

SSL Acceleration

Citrix Confidential - Do Not Distribute

• Accelerate all applications that use SSL, e.g:• XenApp and XenDesktop (when using SSL encryption)• SharePoint and other ERP/CRM applications (e.g. SAP, Oracle) over HTTPS• Exchange – Outlook Web Access over HTTPS*

• Optional encryption of data at rest and over WAN

• Available for appliances and plug-ins

SSL Acceleration – Overview

PC with web browser

Secure Web Server (HTTPS)

Branch Repeater Today:

• TCP Flow Control• Quality of Service

Branch Repeater with SSL Acceleration:

• HTTP/ICA Protocol Awareness/Optimization• Multi-level Compression• TCP Flow Control• Quality of Service

* Note - Encrypted MAPI does not use SSL and is not supported

Brings parity with Riverbed and Cisco and adds a differentiator against others competitors

SSL Acceleration Disk Encryption

Citrix Y Y

Riverbed Y Y

Cisco Y Y

Blue Coat Y -

Juniper - -

Expand Networks - -

• Due to US export restrictions for encryption technology

• Available at zero cost ($0) to customers via MyCitrix

• Unlocks SSL acceleration and disk encryption capabilities

• Applied to each appliance on top of standard Citrix license

• Similar process to other WAN optimization vendors

New “Crypto” Licenses

Traffic InterceptionHow SSL Acceleration Works

• Compatible with existing application/web servers and certificate/key formats

• Interoperability with NetScaler (or any other SSL offload device)

SSL Traffic Interception

Secure Key StoreHow SSL Acceleration Works

• Built-in secure certificate/key store on Repeater• With tracking of certificate/key expiry

• Application/web server private keys NEVER leave data center

Secure, enterprise-class Certificate / Key

Store

Secure Data TransferHow SSL Acceleration Works

• Encrypt and secure user data sent between Repeater appliances

• Optional ability to encrypt ALL (non-SSL) TCP traffic between Repeater appliances

Secure Data transfer between Repeater

Appliances

Secure Disk StorageHow SSL Acceleration Works

• Ability to turn off disk compression for sensitive user data

• Ability to secure/encrypt the user’s data stored on disk• With ability to erase (scrub) the data

• Optional ability to secure/encrypt ALL (non-SSL) user data

Disk encryption

Flexible deployment modes for joining the branch network

LAN Switch Router

Branch Repeater

WANInline• Optional Bypass NIC

Virtual Inline• WCCPv2• Policy-based Routing

LAN Switch Router

Branch Repeater

WAN

• Hypervisor: Citrix XenServer only*

• Based on Branch Repeater software v5.5.1

• Support for Repeater Plug-in

• Inline, WCCP and PBR deployment modes

• Scale VM resources as needed

Branch Repeater VPX Features – 1/2

HypervisorPrint

Server Branch Services

* Additional hypervisor support in future releases

• Centralized management via Command Center*

• Support for “Essentials for XenServer” tools• XenMotion Live Migration, High

Availability and Resource Pool

• No Group Mode support

• No Fail-to-Wire (FTW) support

Branch Repeater VPX Features – 2/2

HypervisorPrint

Server Branch Services

* Requires Command Center v4.0 or higher

XenServer

Use Case 1: Accelerate other Virtual Machines

BranchRepeater

VPX

VM #1

VM #2

Inte

rnal

Net

wor

k

Network 0

XenServer

Use Case 2 : Accelerate other Servers

BranchRepeater

VPXNetwork 0Server

Network 1

VM

XenServer*

Use Case 3 : Accelerate Desktop Virtualization

BranchRepeater

VPX

XenApp

XenDesktop

Inte

rnal

Net

wor

k

Network 0

MerchandisingServer

* Likely to be a Resource Pool or Cluster

Use Case 4 : Multiple Instances for Traffic Separation

XenServer

BranchRepeater

VPX

BranchRepeater

VPX

BranchRepeater

VPX

Segregate traffic by VLAN in XenServer

VLAN 2 VLAN 2

VLAN 1

VLAN 3

VLAN 1

VLAN 3

VPX

VM #1

VM #2

• Cannot “bridge” or bypass the XenServer host if hosting other VMs

• XenServer does not recognize any special hardware (FTW card)

• Use WCCP or PBR

• Use XenServer HA• Configure VPX to start automatically• Configure HA on Resource Pool

Branch Repeater VPX Failover and Bypass Card

VPX Server

Branch Repeater VPX Requirements

VPX Minimum Requirements XenServer Requirements

• 1 CPU

• 1 GB RAM

• 60 GB Disk

• 2 Virtual NICs

• 64 bit x86 server

• VT enabled CPU (Intel VT or AMD-V) for running Windows VMs*

• Min. 1 GB RAM, 16 GB disk**

• Windows PC for XenCenter

* Branch Repeater VPX does not require VT enabled CPU** Not including VM requirements

Citrix Confidential - Do Not Distribute

Citrix Confidential - Do Not Distribute

• Repeater appliances: all supported 8xxx models

• Branch Repeater appliances: 100, 200, 300

• Branch Repeater with Windows Server: 100, 200, 300• Note – 5.7 is versioned as 3.0 on Windows appliances

• Repeater plug-in for Receiver

• Branch Repeater VPX: N/A*

Branch Repeater 5.7 Platform Compatibility

* 5.7 features will be available for Branch Repeater VPX in Q4 with 6.0 release

Repeater as a Virtual Machine available in different flavors :

Repeater VPX Express for trial purpose only (512kbps, 10 accelerated connections, 5 repeater

plugins)

Repeater VPX 2Mbps for WAN links up to 2Mbps

Repeater VPX 10Mbps for WAN links up to 10Mbps

Repeater VPX 45Mbps for WAN links up to 45Mbps

Repeater VPX

Citrix Confidential - Do Not Distribute

• The Citrix® Branch Repeater™ Promotion for XenDesktop™ Customers provides 2 free of charge Citrix Branch Repeater VPX-10 virtual appliances to all existing and new Citrix XenDesktop customers with active SA who purchase any of the following physical or virtual appliances:• Branch Repeater VPX-45• Repeater 8520• Repeater 8540• Repeater 8820• Repeater 8820 with high-speed option

Promotion Overview : Branch Repeater & XenDesktop

Repeater as a Virtual Machine Only on XenServer(a version for Vmware ESX or vSphere is expected Q4 2010)

All features are supported accept :

• Group Mode

• Repeater High-availability mode is not supported. (XenServer HA is supported.)

• Ethernet bypass card

• LCD front-panel display

• Serial console interface

Minimal Standard Config

Only for Demo/POC

Repeater VPX

Citrix FlexLM Licensing

• Branch Repeater product line now follows the standard Citrix Licensing

(a.k.a. V6, Flex LM) infrastructure

• Repeater 8x00 series

• Citrix Repeater Plug-in

• Branch Repeater

• Branch Repeater with Windows Server

Citrix Licensing

• Simplicity – consistent across all Citrix products• Single way to obtain Citrix product licenses (including Platinums)• Consistent license installation, management and compliance• A single way to upgrade and renew licenses• Consistent license consolidation, re-statement and reporting

• Flexibility – ease of deployment• Ability to allocate Repeater Plug-in licenses across multiple Repeater

appliances post-purchase• Separate Repeater Plug-in purchases from Repeater appliance purchases

Benefits of Citrix Licensing

• New Repeater and Branch Repeater units will ship from Citrix without a license

• License entitlements will be available on the “My Citrix” portal (www.mycitrix.com)

• License files can be generated from the “Activation System/Manage Licenses” tool on My Citrix

Obtaining New Licenses