ADC

Support for active-active GSLB deployments on NetScaler Gateway

May 2, 2023

Contributed by:

S C

NetScaler Gateway configured as an Identity Provider (IdP) using the OIDC protocol can support active-active GSLB deployments.

For more information on configuring a GSLB setup, see Example of a GSLB setup and configuration.

Important:

Active-active GSLB with NetScaler Gateway as an OAuth IdP is not supported for Citrix Cloud.

GSLB active-active support for multifactor authentication using connection proxy

Starting from NetScaler release 13.1 build 12.x, support is added for GSLB active-active deployment for multifactor authentication using connection proxy. This support is applicable for NetScaler Gateway and NetScaler authentication, authorization, and auditing scenarios. Connection proxy is used to route requests to the correct GSLB sites once the authentication succeeds. For details on connection proxy persistence, see Connection Proxy.

How it works

The GSLB site persistence cookie is inserted in the authentication response. Using this cookie, the NetScaler or the NetScaler Gateway appliance identifies whether the request is for a local site or a remote site. The requests are then routed accordingly.

Important:

Only GSLB active-active type deployment is supported.

Parent-child topology is not supported.

The persistence type in the GSLB deployment must be configured as “ConnectionProxy”.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Support for active-active GSLB deployments on NetScaler Gateway

May 2, 2023

Contributed by:

S C

May 2, 2023

Contributed by:

S C

Support for active-active GSLB deployments on NetScaler Gateway

GSLB active-active support for multifactor authentication using connection proxy

How it works

In this article