Scenario: A Citrix Architect is asked to design a new external access architecture for CGE. The regional datacenters have NetScaler appliances delivering load-balancing services. Security policy…

To design an external access architecture with multiple regional datacenters, and a security policy preventing internal appliances from connecting to the DMZ, the architect should recommend deploying dedicated NetScaler Gateway HA pairs in the DMZ of each datacenter, leveraging…

Design XenDesktop Infrastructure Components

Question

Scenario: A Citrix Architect is asked to design a new external access architecture for CGE. The regional datacenters have NetScaler appliances delivering load-balancing services. Security policy mandates that these internal appliances CANNOT connect to the DMZ. Which configuration should the architect recommend for the new external access architecture?

Options

AOne NetScaler located in all three regional datacenters, configured as a cluster using the same Global
BA high availability pair of NetScalers located in all three regional datacenters. Configure a single public
CA high availability pair of NetScalers located in all three regional datacenters, each configured to use the
DOne NetScaler located in all three regional datacenters. A single public DNS server record should be

Why each option

AOne NetScaler located in all three regional datacenters, configured as a cluster using the same Global

Deploying one NetScaler per datacenter lacks local high availability, and configuring a cluster across regional datacenters is generally not recommended due to WAN latency and state synchronization challenges for NetScaler Gateway.

BA high availability pair of NetScalers located in all three regional datacenters. Configure a single public

CA high availability pair of NetScalers located in all three regional datacenters, each configured to use the

Configuring each HA pair to use the same public IP address across different datacenters is not feasible for external access via DNS without advanced routing, and it would conflict with GSLB requirements where each datacenter's NetScaler Gateway IP needs to be distinct for GSLB services.

DOne NetScaler located in all three regional datacenters. A single public DNS server record should be

Deploying one NetScaler per datacenter lacks local high availability. A single public DNS server record configured for simple round-robin or single A-record entry would not provide intelligent load balancing or disaster recovery capabilities across regional datacenters, making it inefficient and less resilient than GSLB.

Concept tested: Multi-datacenter NetScaler Gateway HA and GSLB design

Source: https://docs.citrix.com/en-us/citrix-adc/current-release/global-server-load-balancing.html

Topics

#NetScaler architecture#external access#DMZ#load balancing

Community Discussion

No community discussion yet for this question.

Full 1Y0-401 Practice