Keynote: An Exploration of Citrix Delivery Networks by Danny Phillips

## Overview

Danny Phillips presents Citrix's NetScaler technology, repositioning it as an Application Delivery Controller (ADC) rather than a traditional load balancer. The keynote traces NetScaler's evolution from physical appliances to container-based solutions, emphasizing Citrix's core philosophy of delivering consistent technology across multiple form factors through a single API, codebase, feature set, and management infrastructure.

## Key Topics

NetScaler operates on four foundational pillars: availability, performance, processing offload, and security. The speaker notes that NetScaler has served e-commerce since 2002, with major customers including Amazon (customer one) and Google (customer two, who later developed their own technology). Most conference attendees were unaware Citrix had any networking products, motivating Phillips to provide this background.

## Technical Details

**Load Balancing & Traffic Routing:** - Layer 4 and Layer 7 load balancing with intelligent routing based on client device type, request origin, and request content - Global Server Load Balancing enabling single-URL access with users directed to the nearest, most performant datacenter

**Performance Optimization:** - Integrated caching and data compression to reduce payload size - Front-end optimization: automatic removal of unnecessary HTML whitespace and inlining of JavaScript to reduce client-side object downloads

**Processing Offload:** - SSL offloading for centralized certificate management and reduced server workload - TCP multiplexing using a custom TCP/IP stack that reuses backend connections, reducing backend resource utilization by up to 40%

**Security:** - Web Application Firewall (WAF) built directly into NetScaler to protect web services

**Product Evolution:** - **NetScaler MPX (2007):** Physical appliance combining speed with flexibility using multi-core general-purpose processors - **NetScaler VPX:** Virtual machine deployable on Hyper-V, ESX, Zen Server, and KVM - **NetScaler SDX:** High-density consolidation using SR-IOV to bypass hypervisor overhead and directly access network components and SSL chipsets, addressing "appliance sprawl" - **NetScaler CPX:** Lightweight, container-based load balancer in Docker format for microservices deployments within container infrastructures

**Management & Orchestration:** - **NetScaler Mazo:** Unified management platform provisioning NetScaler CPX instances across container environments, synchronized with container orchestration (Kubernetes, Marathon) - Service-level monitoring verifies application health before load balancing and removes failed instances

## Takeaways

1. **Beyond Load Balancing:** NetScaler's ADC approach integrates availability, performance, offloading, and security into one platform, moving beyond basic traffic distribution.

2. **Architectural Flexibility:** Consistency across form factors (physical, virtual, container) eliminates need for separate tools or retraining when transitioning between deployment models.

3. **Microservices Adaptation:** Traditional north-south traffic routing through central ADCs gives way to microload balancers deployed within containers using CPX, reducing unnecessary external routing for inter-service communication.

4. **Bridging Bimodal IT:** NetScaler Mazo addresses the coexistence of traditional IT ("Platform 9") and agile DevOps IT ("Platform 10"), automating deployment and configuration synchronization across hybrid environments.

5. **Free Access:** CPX Express is available as a free download at microloadbalancer.com.