Citrix ADC

Deploy a VPX high-availability pair on Google Cloud Platform

You can configure two Citrix ADC VPX instances on Google Cloud Platform as a high availability (HA) active-passive pair. When you configure one instance as the primary node and the other as the secondary node, the primary node accepts connections and manages servers. The secondary node monitors the primary. If for any reason, if the primary node is unable to accept connections, the secondary node takes over. Also, the client IP of the primary node must be bound to an external static IP address, for traffic to resume after a failover.

For more information on HA, seeHigh Availability.

The nodes must be in the same region; however, they can be either in same zone or different zones. For more information, seeRegions and Zones.

Each VPX instance requires at least three IP subnets (Google VPC networks):

  • A management subnet
  • A client-facing subnet (VIP)
  • A back-end facing subnet (SNIP, MIP, and so on)

Citrix recommends three network interfaces for a standard VPX instance.

Before you start

REQUIRED_INSTANCE_IAM_PERMS = [ "compute.instances.addAccessConfig", "compute.instances.deleteAccessConfig", "compute.instances.get", "compute.instances.list", "compute.networks.useExternalIp", "compute.subnetworks.useExternalIp", "compute.zones.list", ] 

How to deploy a VPX HA pair on Google Cloud Platform

Here’s a summary of the HA deployment steps:

  1. Create three VPC networks in the same region. For example, Asia-east.
  2. Create two VPX instances (primary and secondary nodes) on the same region. They can be in the same zone or different zones. For example Asia east-1a and Asia east-Ib.
  3. 通过使用t HA配置设置在两个实例he Citrix ADC GUI or ADC CLI commands.

NoteStayprimaryandStaysecondarysettings are not supported for high availability deployment on the Google Cloud Platform.

Step 1. Create three VPC networks

Create three VPC networks for associating with management NIC, client NIC, and server NIC. To create a VPC network, log on theGoogle console > Networking > VPC network > Create VPC Network. Complete the required fields, and clickCreate. For more information, see the section “Create VPC Networks” inDeploy a Citrix ADC VPX instance on Google Cloud Platform.

Step 2. Create two VPX instances

Create two VPX instances by following the steps given inScenario: deploy a multi-NIC, multi-IP standalone VPX instance.

Important Assign a static external IP address to the client IP address (VIP) of the primary node. To create a static external, underNetwork interface > External IP, click Create IP address.

External static IP

After the failover, when the old primary becomes the new secondary, the static external IP address moves from the old primary and is attached to the new primary. For more information, see the Google cloud documentReserving a Static External IP Address.

After you’ve configured the VPX instances, you can configure the required IP addresses. For more information, seeConfiguring Citrix ADC-owned IP addresses.

Step 3. Configure high availability

After you’ve created the instances on Google Cloud Platform, you can configure HA by using the Citrix ADC GUI for CLI.

Configure HA by using the GUI

Step 1. Set up high availability in INC mode on both the instances.

  1. 登录到主节点with user namensrootand instance ID as password.
  2. From the GUI, go toConfiguration > System > High Availability. ClickAdd.
  3. At theRemote Node IP address field, add the private IP address of the management NIC of the secondary node.
  4. Select Turn on INC (Independent Network Configuration) mode on self-node.
  5. UnderRemote System Login Credential, add the user name and password for the secondary node and clickCreate.
  6. Repeat the steps in the secondary node.

Step 2. Add IP set and bind IP set to the VIP set on both the instances.

  1. From the GUI, navigate toSystem > Network > IPs > Add.
  2. Add the required values for IP Address, Netmask, IP Type (virtual IP) and click Create.
  3. Navigate toSystem > Network > IP Sets > Add. Add an IP set name and click Insert.
  4. From the IPV4s page, select the virtual IP and click Insert. Click Create to create the IP set.

Note You can bind the IP set to the primary VIP or to the secondary VIP. However, if you bind the IP set to the primary VIP, use the secondary VIP to add to the virtual server, and conversely.

Step 3. Add a virtual server in the primary instance.

  1. From the GUI, go toConfiguration > Traffic Management > Load Balancing > Virtual Servers > Add.

保存配置。现在,二级节点has the same log-on credentials as the primary node. After a forced failover, the secondary becomes the new primary. The external static IP of the old primary VIP moves to the new secondary VIP.

Configure high availability using CLI

Step 1. Set up high availability in INC mode in both the instances by using the Citrix ADC CLI.

On the primary node, type the following command.

add ha node 1  -inc ENABLED in primary 

On the secondary node, type the following command.

add ha node 1  -inc ENABLED in secondary 

sec_ipRefers to the private IP address of the management NIC of the secondary node.

prim_ipRefers to the private IP address of the management NIC of the primary node.

Step 2. Add IP set in both the instances.

Type the following command on both the instances:

add ipset  

Step 3. Bind IP set to the VIP set on both the instances.

Type the following commands on both the instances:

add ns ip   -type VIP 

Note Skip this command if the VIP is already configured.

bind ipset   

Note You can bind the IP set to the primary VIP or to the secondary VIP. However, if you bind the IP set to the primary VIP, use the secondary VIP to add to the virtual server, and conversely.

Step 4. Add a virtual server on the primary instance.

Type the following command:

add  vserver     -ipset  

Note:

To save your configuration, type the commandsave config. Otherwise, the configurations are lost after you restart the instances.

GDM templates to deploy a VPX high-availability pair on GCP

You can use a Citrix ADC Google Deployment Manager (GDM) template to deploy a VPX high-availability pair on GCP. For details, seeCitrix ADC GDM Templates.

Deploy a VPX high-availability pair on Google Cloud Platform