Product Documentation
NetScaler VPX
14.1-Current Release 13.1 13.0 12.1
View PDF

Configure a Citrix ADC VPX instance to use SR-IOV network interface

September 9, 2024
Contributed by: 
C

Note:

Support for SR-IOV interfaces in a high availability setup is available from Citrix ADC release 12.0 57.19 onwards.

After you have created a Citrix ADC VPX instance on AWS, you can configure the virtual appliance to use SR-IOV network interfaces, by using the AWS CLI.

In all Citrix ADC VPX models, except Citrix ADC VPX AWS Marketplace Editions of 3G and 5G, SR-IOV is not enabled in the default configuration of a network interface.

Before you start the configuration, read the following topics:

This section includes the following topics:

  • Change the Interface Type to SR-IOV
  • Configure SR-IOV on a High Availability Setup

Change the interface type to SR-IOV

You can run the show interface summary command to check the default configuration of a network interface.

Example 1: The following CLI screen capture shows the configuration of a network interface where SR-IOV is enabled by default on Citrix ADC VPX AWS Marketplace Editions of 3G and 5G.

Network interface SR-IOV

Example 2: The following CLI screen capture shows the default configuration of a network interface where SR-IOV is not enabled.

Network interface not enabled

For more information about changing the interface type to SR-IOV, see http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sriov-networking.html

To change the interface type to SR-IOV

  1. Shut down the Citrix ADC VPX instance running on AWS.

  2. To enable SR-IOV on the network interface, type the following command in the AWS CLI.

    $ aws ec2 modify-instance-attribute --instance-id \<instance\_id\> --sriov-net-support simple

  3. To check if SR-IOV has been enabled, type the following command in the AWS CLI.

    $ aws ec2 describe-instance-attribute --instance-id \<instance\_id\> --attribute sriovNetSupport

    Example 3: Network interface type changed to SR-IOV, by using the AWS CLI.

    Network interface AWS

    If SR-IOV is not enabled, value for SriovNetSupport is absent.

    Example 4: In the following example, SR-IOV support is not enabled.

    Network interface AWS not enabled

  4. Power on the VPX instance. To see the changed status of the network interface, type “show interface summary” in the CLI.

    Example 5: The following screen capture shows the network interfaces with SR-IOV enabled. The interfaces 10/1, 10/2, 10/3 are SR-IOV enabled.

    Network interface SR-IOV enabled

These steps complete the procedure to configure VPX instances to use SR-IOV network interfaces.

Configure SR-IOV on a high availability setup

High availability is supported with SR-IOV interfaces from Citrix ADC release 12.0 build 57.19 onwards.

If the high availability setup was deployed manually or by using the Citrix CloudFormation template for Citrix ADC version 12.0 56.20 and lower, the IAM role attached to the high availability setup must have the following privileges:

  • ec2:DescribeInstances
  • ec2:DescribeNetworkInterfaces
  • ec2:DetachNetworkInterface
  • ec2:AttachNetworkInterface
  • ec2:StartInstances
  • ec2:StopInstances
  • ec2:RebootInstances
  • autoscaling:*
  • sns:*
  • sqs:*
  • IAM:SimulatePrincipalPolicy
  • IAM:GetRole

By default, the Citrix CloudFormation template for Citrix ADC version 12.0 57.19 automatically adds the required privileges to the IAM role.

Note:

A high availability setup with SR-IOV Interfaces takes around 100 seconds of downtime.

Related resources:

For more information about IAM roles, see AWS documentation.

Configure a Citrix ADC VPX instance to use SR-IOV network interface
September 9, 2024
Contributed by: 
C
September 9, 2024
Contributed by: 
C

In this article

Site feedback | Your privacy choices footer linkYour Privacy Choices | Privacy and legal terms | Cookie preferences | Consent settings | docs.cloud.com
© 1999- Cloud Software Group, Inc. All rights reserved.