ADC

Secure GSLB configuration synchronization

February 25, 2026

Contributed by:

NetScaler enhanced GSLB synchronization improves security by removing the dependency on port 22 (SSH) for configuration transfers. This update eliminates common security risks and resolves the operational challenges associated with maintaining legacy SSH access across sites.

The earlier GSLB synchronization mechanism uses RSYNC over SSH (port 22) for transferring configuration data between NetScaler appliances. This method presents significant security risks, including vulnerability to attacks on port 22, conflicts with organizational firewall restrictions, and operational inefficiencies such as timeout delays and increased administrative overhead resulting from manual workarounds.

NetScaler Enhanced GSLB Synchronization improves GSLB synchronization by introducing a secure, authenticated Kernel Remote Procedure Call (KRPC) channel to replace the SSH dependency. This approach leverages the established GSLB MEP secure KRPC channel used for metrics exchange to provide a more robust method for configuration synchronization. The result is increased data security, improved user control, and a strengthened security posture for customers.

Limitations

Manual sync does not work with the forceSync option (sync gslb config –forceSync).
If GSLB site IP addresses are different in main node and subordinate node, synchronization does not work.
In a cluster setup, the useKrpcChannelForSync parameter is to be enabled on all sites for synchronization to work.

Configure the KRPC channel by using the CLI

Run the following command to enable the KRPC channel in the main node: set gslb parameter -useKrpcChannelForSync ENABLED

Run the following command to verify: sh gslb parameter

Run the following command to disable the KRPC channel in the main node: set gslb parameter -useKrpcChannelForSync DISABLED

Configure the KRPC channel by using the GUI

Navigate to Traffic Management -> GSLB -> Dashboard.
Click Change GSLB Settings.
Enable or disable the Use KRPC Channel for Sync option.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

NetScaler Secure Deployment Guide

Secure GSLB configuration synchronization

February 25, 2026

Contributed by:

February 25, 2026

Contributed by:

Secure GSLB configuration synchronization

Limitations

Configure the KRPC channel by using the CLI

Configure the KRPC channel by using the GUI

In this article