Entitlements
The NetScaler App Delivery and Security service license is based on flexible consumption-based metering, where your applications automatically consume capacity from available entitlements. This consumption-based method is a software as a service (SaaS) model, where you consume a service based on the entitlement that you’ve purchased. This flexibility helps you to reduce capacity wastage and avoid license-related performance limits. To use NetScaler App Delivery and Security service, you need a valid entitlement.
Entitlement types
You can use one of the following entitlements for NetScaler App Delivery and Security service.
- Standalone entitlement - See Standalone entitlements.
- Trial entitlement - See Trial entitlement.
- Bundle with NetScaler App Delivery and Security service – Self Managed entitlement - See NetScaler App Delivery and Security service Self Managed entitlements.
Standalone entitlements
The NetScaler App Delivery and Security service standalone entitlements come in two editions: Advanced and Premium. Entitlements are yearly subscriptions, which means every entitlement has a one-year validity. The two editions have the following entitlement types:
Table 1. Entitlement types
| Edition type | Entitled to |
|---|---|
| Advanced | 300 TB bandwidth + 25 million DNS queries |
| Advanced | 1200 TB bandwidth + 100 million DNS queries |
| Advanced | 4800 TB bandwidth + 480 million DNS queries |
| Advanced | 20000 TB bandwidth + 2 billion DNS queries |
| Premium | 300 TB bandwidth + 25 million DNS queries |
| Premium | 1200 TB bandwidth + 100 million DNS queries. |
| Premium | 4800 TB bandwidth + 480 million DNS queries |
| Premium | 20000 TB bandwidth + 2 billion DNS queries |
NetScaler App Delivery and Security service uses the Citrix Intelligent Traffic Management (ITM) to monitor traffic. The Usage dashboard in the NetScaler App Delivery and Security service GUI measures the number of DNS queries sent for an application.
Customers also buy a DNS pack for yearly subscription.
Table 2. Subscription types
| Subscription type | Entitled to |
|---|---|
| Yearly | 1 billion DNS queries |
The following table shows the features that the two entitlement editions support.
Table 3. Supported features
| Feature | NetScaler App Delivery and Security service Advanced | NetScaler App Delivery and Security service Premium |
|---|---|---|
| SSL/load balancing/content switching | Yes | Yes |
| Content rules | Yes | Yes |
| Authentication | Yes | Yes |
| GSLB | Yes | Yes |
| Caching and compression | Yes | Yes |
| Analytics | Yes | Yes |
| Lifecycle management | Yes | Yes |
| ITM based GSLB | Yes | Yes |
| Security (WAF, BOT management) | No | Yes |
| ICA Proxy | No | No |
| Gateway SSL VPN | No | No |
You can buy multiple units of the entitlements listed in Table 1. Entitlement types, in any combination of editions or any combination of tiers with different or same start date and end date.
For example, you can buy:
-
Two units of 1200 TB pack of the same edition or a different edition.
-
One unit of 300 TB pack premium and one unit of 4800 TB advanced.
To know more about how to buy a NetScaler App Delivery and Security entitlement, see https://www.citrix.com/en-in/buy/licensing/product.html
When you create an application, select one of the available editions from the list. Select the edition based on the feature that you want to see. To create an application, from the GUI navigate to Applications > New Application. Refer to Table 3. Supported features for features supported on each edition.
Trial entitlement
You can explore the NetScaler App Delivery and Security service without buying an entitlement. The trial entitlement is valid for 60 days and comes with the following capacity:
Premium: 1 TB + 1 million DNS queries
To use the trial entitlement, create a Citrix Cloud account and log on to Citrix Cloud.
After the trial entitlement has expired or a trial quota (data processed in TB) is exhausted, the NetScaler App Delivery and Security service stops processing the traffic. After 30 days from the trial expiry, all the resources created in the service get deleted. During these 30 days, you can opt to buy an entitlement and move your apps from trial to paid entitlements.
View Usage dashboard
You can view and track the standalone entitlement consumption details (Advanced, Premium, and DNS Queries) in the Usage dashboard.
NetScaler App Delivery and Security service applies metering parameters to incoming and outgoing application traffic at the ADC instances provisioned by the service. Based on these meters, the service generates the dashboard report.
Navigate to the Usage dashboard to view the validity, capacity, and the consumption details of the all the entitlements purchased.
-
Premium entitlements
Navigate to Usage > Premium to see the details of all the Premium entitlements.
You see a tabular view and a donut view of the validity, capacity, and the consumption details of all the existing and expired premium entitlements. You can also view the details of the purchase and expiry dates in a tabular view for all the existing and expired entitlements.
You can also view the details of the entitlements that are in the grace period.
You can also view the validity, capacity, and the consumption details of the Trial Entitlements. Based on the available details you can make an informed decision to buy and move from trial to paid entitlements.
-
Advanced entitlements
Navigate to Usage > Advanced to see details of all the Advanced entitlement.
You see a tabular view and a donut view of the validity, capacity, and the consumption details of all the existing and expired advanced entitlements. You can also view the details of the purchase and expiry dates in a tabular view for all the existing and expired entitlements.
You can also view the details of the entitlements that are in the grace period.
-
DNS Queries
Navigate to Usage > DNS Queries to see DNS query details for the entitlements. You can see a tabular view and a donut view of the validity, capacity, and the consumption details of all the existing and expired DNS Queries. You can also view the details of the purchase and expiry dates in a tabular view for all the existing and expired DNS Queries.
NetScaler App Delivery and Security service behavior on reaching expiry or reaching end of quota
This section describes NetScaler App Delivery and Security service behavior on reaching expiry or reaching the end of quota, in different scenarios.
Scenario 1: You have only one entitlement, and it has expired.
Behavior: After expiry, the grace period for 30 days starts. During this period, you get the edition of the expired entitlement; for example, 10 TB of data processing + 1 million DNS queries.
After the end of the grace period, the service stops processing the application traffic.
After 90 days from the end of the grace period, your account and data plane components will be deleted.
Scenario 2: You have multiple entitlements of the same edition with a different expiry date, and one of them expires:
Behavior: NetScaler App Delivery and Security service continues with the active entitlement.
Scenario 3: You’ve multiple entitlements of different editions with different expiry dates, and one of them expires.
Behavior: Grace period starts for the expired entitlement.
Scenario 4: You’ve multiple entitlements, and the quota of one of the entitlements is consumed before the expiry date.
Behavior: NetScaler App Delivery and Security service continues with the active entitlement.
Scenario 5: You have purchased annual entitlements for a multiyear.
Behavior: Customer-entitled quota is given yearly.
Example: If you have purchased Advanced: 300 TB + 25 million DNS queries entitlement for 2 years, then
• In the first year, your quota is 300 TB + 25 million DNS queries.
• In the second year, any remaining quota of the first year expires and you get a fresh quota of 300 TB + 25 million DNS queries, due for the second year.