Book Image

Troubleshooting NetScaler

By : Raghu Varma Tirumalaraju
Book Image

Troubleshooting NetScaler

By: Raghu Varma Tirumalaraju

Overview of this book

NetScaler is a high performance Application Delivery Controller (ADC). Making the most of it requires knowledge that straddles the application and networking worlds. As an ADC owner you will also likely be the first person to be solicited when your business applications fail. You will need to be quick in identifying if the problem is with the application, the server, the network, or NetScaler itself. This book provides you with the vital troubleshooting knowledge needed to act fast when issues happen. It gives you a thorough understanding of the NetScaler layout, how it integrates with the network, and what issues to expect when working with the traffic management, authentication, NetScaler Gateway and application firewall features. We will also look at what information to seek out in the logs, how to use tracing, and explore utilities that exist on NetScaler to help you find the root cause of your issues.
Table of Contents (17 chapters)
Troubleshooting NetScaler
Credits
Notice
About the Author
About the Reviewers
www.PacktPub.com
Preface
Index

SSL


We will now look at issues that can arise when load balancing SSL applications via the NetScaler. Let's start by looking at some considerations when deploying SSL, before discussing certificates and some essential Wireshark knowledge that you need in the SSL area. We will then apply this knowledge to troubleshoot some common issues before wrapping up the section with a discussion of SSL security best practices.

SSL deployment considerations

SSL is now ubiquitous. In fact, most public facing deployments simply cannot go into production without it. Using NetScaler to take the SSL processing load off the servers is referred to as SSL offloading. SSL offloading is great for performance because a NetScaler with its specialized SSL cards is optimized for handling SSL transactions, while your application servers typically are not.

Note

While the generic name SSL has stuck, SSL is no longer the choice for security and nor is TLS 1.0. The severity of the POODLE attack that impacts both protocols...