adc as a service · 2019-09-23 · vpx for aws, azure, gcp containers public & private cloud,...

© 2018 Citrix | Confidential

Improving employee and customer experience through application fabric

SEPTEMBER 20, 2019

Citrix Networking

Marissa SchmidtSenior Director, Product Management

2 © 2018 Citrix | Confidential

Citrix Mission

Choice Security

Experience


Connecting applications with People

Citrix VisionCitrix Solutions

Workspace Networking

AnalyticsChoice Security

Experience


Analytics

Experience: User Productivity Use Case

SSO

Citrix Workspace

1. Single Sign-On to all Workspace delivered applications

SaaS

Public

Citrix

Data Center

Workspace Intelligent

Service

2. SaaS App ‘to do’ actions appear in Workspace Notifications Feed.

3. App Data can be presented as a Micro-App to save opening an actual SaaS Application

4.Productivity Analytics learns user behavior. For example Auto Approving all expense claims under $500 from certain employees

User ProductivityUser Experience Analytics

Workspace Intelligence: Organize,

Guide, Automate

Access PerformanceADC: Content Optimization & Caching

SD-WAN: Cloud Direct, Optimizations

Intelligent Traffic Management & GSLB.

App PerformanceOptimized SaaS, Cloud & Virtual

ADC Load Balancing, Protocol. Acceleration

SD-WAN: 4500+ app visibility, HDX, O365 + +


Analytics

End to End User Experience Use Case

Citrix Workspace

SDWAN ADC

Performance

1. Citrix Workspace user in branch connected via Citrix SDWAN to application fronted with Citrix ADC

2. All Citrix solutions in the path feed performance data to Citrix Analytics to deliver end to end User Experience Analytics

User ProductivityUser Experience Analytics

Workspace Intelligent : Organize,

Guide, Automate

Access PerformanceADC: Content Optimization & Caching

SD-WAN: Cloud Direct, Optimizations

Intelligent Traffic Management & GSLB.

App PerformanceOptimized SaaS, Cloud & Virtual

ADC Load Balancing, Protocol Acceleration

SD-WAN: 4500+ app visibility, HDX, O365 + +


Analytics

Security: End to End Example

2. User malicious behavior is flagged by UEBA

WAF

1. Hacker Hijacks User Credentials and successfully accesses the enterprise network

5. WAF Detects malicious activity

6. WAF alerts Citrix UEBA Analytics and attack is correlated to malicious user

7. Citrix Analytics triggers disconnection of malicious user

3. Citrix Analytics triggers disconnection of malicious user

4. Hacker Hijacks User Credentials and does not trigger abnormal behaviors, then launches SQL injection attack against enterprise application

User ProtectionUser & Entity Behavior Analytics.

Prevent Data Loss: copy/paste, screen

capture and anti key-logging controls.

App & API ProtectionWAF. API Security gateway.

Prevent Data Theft and Application

attacks. Content Protection (Files)+ +

Access ProtectionContextual Access. Web & SaaS Access

Controls. ICSA Certified Firewall, NGFW & Cloud SWG options, Secure Browser Service.


Choice = Increased Flexibility + Avoid Lock-in

Choice Security

ExperienceWorkspace Networking

Analytics

Bringing Citrix Workspace, Networking and Analytics Together for the Best Choices

Any Application3 Tier Web & Cloud Native Apps.

Mobile Apps, SaaS Apps, O365

Virtual Apps & Desktops

Any DeviceLaptop, Desktop, Thin Client.

Smartphone, Tablet.

BYOD or Corporate Managed.+ +

Any CloudPublic (Azure, GCP, AWS, Oracle).

Private. Hybrid, Multi Cloud


Choice Security

Experience

Citrix Networking Mission

Application First

Application FabricDistributed Services

Intent Based Automation


2 31

Cloud First | Developer First| Software First | Native First| Hybrid First

Application First

In a world of firsts being ‘Application First’ is what matters


Citrix ADC + ITM

ApplicationExperience


PerformanceOptimization

AvailabilityOffload

Deliver Better User Experience with Citrix ADC Intelligence

• Hyper cloud scale to 5.12 Tb with clustering across 32 nodes

• Auto-scale in public & private cloud• 100 Gbps with VPX, 200 Gbps with

MPX

• Monitor servers for overload, responsiveness & availability

• Disaster recovery support • Multi cloud support & GSLB

Reduce server load & save cost by terminating SSL traffic & acceleration,

and content compressions on ADC

Improve app performance by HTTP/2 & TCP Multiplexing for faster responseStatic & dynamic web content caching

Optimize images for faster deliveryTCP & HTTP protocol acceleration

TCP optimization for 4G/5G


More intelligent app delivery with Citrix ITM and ADC together

Industry’s only solution to eliminate the internet blind spots for the best user experience

Citrix ITMDeep and live internet visibilitylatency, throughput, availability, reachability

Citrix ADCDeep and live datacenter visibility

server usage (CPU, connections), availability

+

Make the best possible decisions to reach the best available destinationswith combined visibility and analysis from the internal datacenter and external internet

Holistic networking Visualize ADC in ITM; view datacenter and internet

state; run scenarios

Reduce time to 1st byte30-200 ms

by decreasing DNS resolution time

Optimal steeringMake trade-offs between state of internet &

datacenter for optimizing experience

Better Together use-cases


Hybrid Cloud Infrastructure Analytics Dashboard

Deployment Infrastructure

AWS APAC

Singapore DCAWS EU

AZ China North

AWS US East

2 instances with CriticalMemory issues

4 instances with SSL certs expired

Instance Score andAvailability


Hybrid Cloud Dashboard Example – App Owner

Application Trends

Connections

Application Throughput

Response Time

Active Services

CPU & Memory Usage


Hybrid Cloud Dashboard Example – App Owner

Performance and Error Indicators

Recommended Actions

App Performance Penalties and Errors

App Performance Anomalies


EMEA

US

APJ

Public Cloud

Traditional OnPrem

GSLB

A3

ADC

PrivateCloud

InternetS2

AWSUSEast

S3

S1

A3

S2

S1

A3

S2

S1

VMware

ITM

ADC

ADC

Hybrid-Multi CloudEMEA

US

APJ

Public Cloud

Traditional OnPrem

GSLB

A3

ADC

PrivateCloud

InternetS2

AWSUSEast

S3

S1

A3

S2

S1

A3

S2

S1

VMware

ITM

ADC

ADC

Hybrid-Multi CloudEMEA

US

APJ

Public Cloud

Traditional OnPrem

GSLB

A3

ADC

PrivateCloud

InternetS2

AWSUSEast

S3

S1

A3

S2

S1

A3

S2

S1

VMware

ITM

ADC

ADC

Hybrid-Multi Cloud

Citrix Global Service Graph

Choice


Citrix ADC Portfolio: Built for Hybrid Multi CloudMost Comprehensive, Feature Rich & Software-Centric

Physical | Virtual | Containers | Private Cloud | Public Cloud | Hybrid Cloud

Hardware AppliancesDC & Private Cloud, MPX

Virtual AppliancesDC & Private Cloud, VPX

In Public CloudVPX for AWS, Azure, GCP

ContainersPublic & Private Cloud, CPX

Bare MetalPrivate & Public Cloud, BLX*

Multi-TenantMSP & Private Cloud, SDX

For Your Every Step for Transition to Hybrid Multi Cloud

Choice* Planned


Citrix ADC Portfolio: Built for Hybrid Multi CloudMost Comprehensive, Feature Rich & Software-Centric

For Your Every Step for Transition to Hybrid Multi Cloud

Single Software Code Base across Portfolio for

Features, APIs & Operational Consistency, and Innovation Velocity

Hardware AppliancesDC & Private Cloud, MPX

Virtual AppliancesDC & Private Cloud, VPX

In Public CloudVPX for AWS, Azure, GCP

ContainersPublic & Private Cloud, CPX

Bare MetalPrivate & Public Cloud, BLX

Multi-TenantMSP & Private Cloud, SDX


Pooled Capacity Licensing: Built for Hybrid Multi CloudMore Agility and More Value

Transition to Hybrid Multi Cloud at your Business Speed

Better EconomicsBetter utilization,

granularity, use cases

SimplerEnterprise-wide visibility &

automation

FlexibilityMove the capacity among ADCs in hybrid multi cloud


Use Case 1: Flexible Capacity Allocation and Re-allocation

Site A Site B

20 Gbps

40 Gbps

60 Gbps

20 Gbps

140 Gbps

Subscribe to a pool of capacity

Buy Zero-Capacity hardware

VPX


Site B

Use Case 1: Flexible Capacity Allocation and Re-allocation

Deduct from capacity pool based on site needs

40 Gbps60 Gbps20 Gbps140 Gbps80 Gbps40 Gbps

Site A

20 Gbps


Use Case 2: Migration from On-prem to Cloud

On-PremiseCloud

200 Gbps

100 Gbps

50 Gbps

150 Gbps

300 Gbps

Pooled Capacity

100 Gbps50 Gbps

Portability

Capacity Hardware

Reduce hardware investment Lower the barrier to Cloud and virtualization

Security


Application Security at DevOps Speed

Securing Your Apps, APIs, and Web Sites Proactively

BoT ManagementBehavior based BoT detection with advanced device finger printing & signatures

API Protection for Cloud Native AppsAdvanced features: rate limiting, authentication, authorization & encryptionCRDs/Templates for faster deployment by DevOps in any Kubernetes environments

{ api }

Cloud Native


Typical cloud journeys customers invest in

SaaSInternet

Workspace users(Employees, contractors,

partners)

On-premises Data Center

Digital business users(Consumers)

WAN

Branch, ClinicStore, Campus

Hosted Private Cloud

Web 3-tier

Virtualized

Cloud Native

Ent Apps

• Use of SaaS apps• Build private cloud in the DC; Adopt a managed private cloud• Deploy a hybrid cloud environment - on-premises and public cloud• Move or migrate workloads in one or more public clouds• Develop cloud native apps and deploy in private or public cloud

Private Cloud


Cloud Native Apps are Happening Now, and Changing Everything

Modular Loosely Coupled Services

Container BasedInfrastructure

Acceleratedby DevOps

Driven by API

Drivers for Cloud NativeDigital TransformationSpeed with Stability

Transition to Public CloudHyperscale & Portability

Need for Speed with Stability

>75% Of global organizations will be running containerized apps in production by 2022

Cloud native app require high degree of infrastructure automation, security, monitoring, and networking.

<10% Of multi cloud deployment will take advantage of anticipated portability by 2021


Choice of Architectures, Kubernetes, and Open source Platforms

Accelerating Your Journey to Cloud Native Apps

Citrix CPX as Sidecar & Istio Support for Service Mesh

Kubernetes EcosystemExpansion

Intuitive Service Graphto Troubleshoot Faster

Container Container

Container Container

CPX

CPX

CPX

CPX

Service Mesh architecture for better visibility, security & availability

Open source Istio control plane

Prometheus, Grafana, Spinnaker, Kibana, Zipkin

RedHat OpenShift certificationGoogle Anthos Partnership

Know problems proactively, Improve app availability

Visualize, gain insights, learn health score, detect anomalies


Actionable Insights: Introducing Service Graphs for Kubernetes

VisualizeComplete Micro-services map

Gain Insights Hits, Errors, Latency , Data Volume for Each Micro-service

Learn Service ScoreSimple Colors, Scores

Detect AnomaliesIdentify Potential Problems

Visibility into Micro-services Traffic & Health is Required for Mission Critical Apps

Node: K8 service

Node Colour: Service Score

Key Metrics Monitoring

Edge: Txns between 2 services

Edge Colour: Based on Errors


Citrix SD-WAN - New

ApplicationExperience


Best Experience and Performance for SaaS, Cloud, and Virtual AppsWith industry’s most advanced application control engine

always-onworkspace

Only Citrixdetects, classifies,

accelerates4,500+ apps

Deep Packet Inspection | APIs | Auto QoS | WAN Optimization | Proximate DNS

CitrixWorkspace


Industry-Leading Networking Controls Keep the workspace Always-On

Packet-basedtraffic/app handling

Traffic shaping on diverse, bonded links

Seamless link failover (milliseconds)

First & last mile visibilityDual-ended QoS

Selective packet replication

CitrixSD-WAN

Best application performance• Improved productivity• Fewer IT incident calls


Automate and Simplify Deployment and ManagementEasy service provisioning and scaled management with Citrix SD-WAN Orchestrator

SecurityOn-prem Devices

SD-WAN Orchestrator

Clouds

Virtual WAN

SaaS


Citrix Vision for the future of Application Delivery

Citrix Application FabricAbstract All Resources

Unify Visibility & Policy across Silos

Intent BasedML Driven Automated provisioning

Link Business intent to Network Configuration Policy

Distributed ServicesDistributed Across the entire fabric

Create service instance automatically at best location


SaaS & Web Apps

Windows Apps

Mobile Apps

Corporate, Branch, Remote,

Home

DevicesData

Collaboration

Internet Access

Virtual Assistant/

Universal Search

User Personal WorkspaceBetter

Together

adc as a service · 2019-09-23 · vpx for aws, azure, gcp containers public & private cloud,...

Documents