Deploy NetScaler ingress controller

• Unified ingress

• Dual-tier ingress

• Using Kops

• On Rancher

• On PKS

Deployment solutions

• NetScaler Integrated canary deployment solution

• Deploy NetScaler IPAM controller

• Deploy NetScaler API Gateway

  • Deploy NetScaler API Gateway using Rancher

  • Deploy NetScaler API Gateway with GitOps

• NetScaler GSLB controller for applications deployed in distributed Kubernetes clusters

  • GSLB overview and deployment topologies

  • Deploy NetScaler GSLB controller

• NetScaler GSLB controller for single site

• Service mesh lite

• Platform integrations

  • Deploy NetScaler ingress controller as an OpenShift router

  • Deploy NetScaler ingress controller with OpenShift router sharding support

  • Deploy NetScaler ingress controller using OpenShift Operator

  • Deploy NetScaler Observability Exporter using OpenShift Operator

  • Deploy NetScaler CPX as an Ingress in Azure Kubernetes Engine

  • Deploy NetScaler ingress controller in an Azure Kubernetes Service cluster with NetScaler VPX

  • Deploy NetScaler CPX as an Ingress in Google Cloud Platform

  • Deploy NetScaler ingress controller in Anthos Platform

  • Deploy NetScaler VPX in active-active high availability in EKS environment using Amazon ELB and NetScaler ingress controller

  • Deploy NetScaler ingress controller for NetScaler with admin partitions

  • Citrix solution for service of type LoadBalancer in AWS

  • Multi-cloud and GSLB solution with Amazon EKS and Microsoft AKS clusters

Configure

• Annotations

• ConfigMap

• Ingress

• Ingress class

• Service class

• HTTP, TCP, or SSL Profiles

• Log levels

• SSL certificate for services of type LoadBalancer through the Kubernetes secret resource

• BGP advertisement for type LoadBalancer services and Ingresses using NetScaler CPX

• NetScaler CPX integration with MetalLB in layer 2 mode for on-premises Kubernetes clusters

• Advanced content routing for Kubernetes Ingress using the HTTPRoute CRD

• Profile support for the Listener CRD

• IP address management using the NetScaler IPAM controller for Ingress resources

• Apply CRDs using annotations

• Listener CRD support for Ingress through annotation

• Consistent hashing algorithm

• Add DNS records using NetScaler ingress controller

• Configure OPA

• Exporting metrics directly to Prometheus

• Network

  • Static routing

  • Establish network between K8s nodes and Ingress NetScaler using node controller

  • Expose services of type NodePort

  • Pod to pod communication using Calico

  • Enhancement to services of type LoadBalancer

• Certificate management

  • TLS certificates handling in NetScaler ingress controller

  • TLS client authentication in NetScaler

  • TLS server authentication in NetScaler

  • Install, link, and update certificates on NetScaler using the NetScaler ingress controller

  • Configure SSL passthrough using Kubernetes Ingress

  • Introduction to automated certificate management with cert-manager

  • Deploy HTTPs web applications on K8s with NetScaler ingress controller and Let's Encrypt using cert-manager

  • Deploy HTTPs web application on K8s with NetScaler ingress controller and HashiCorp vault using cert-manager

  • Enable NetScaler certificate validation

  • Disable API server certificate verification

  • Create a self-signed certificate and linking into a Kubernetes secret

• Metrics

  • Integrate with Prometheus and Grafana

  • Analytics and observability

  • NetScaler Observability Exporter support using ConfigMap

Upgrade and troubleshooting

• Troubleshooting

• Call Home

• Upgrade

Use cases

• IP address management using the IPAM controller

• Securing ingress

• TCP use cases

• HTTP use cases

• HTTP call out

• Session affinity

• Allowlisting or blocklisting IP addresses

• Interoperability with ExternalDNS

• Use NetScaler credentials stored in Vault server

• Use Kubernetes secrets for storing NetScaler credentials

• Load balance Ingress traffic to UDP-based application

• Set up dual-tier deployment

• Horizontal pod autoscaler

• Direct server return

• Admission controller webhook

• Enable GRPC support

• Policy based routing

• MongoDB solution

• Canary and blue-green deployment using Azure pipelines

• Traffic management for external services

• Support for external name service across namespaces

References

• Supported platforms

• CRDs

  • Authentication

  • Rate limit

  • Rewrite and Responder policy

  • IPAM or VIP

  • HTTPRoute

  • Content Routing

  • Listener

  • Web application firewall policy

  • Bot

  • CORS

  • Enable request retry using AppQoE

  • Wildcard DNS

• Entity name change

• Licensing