NetScaler VPX

NetScaler VPX™ on Nutanix Acropolis Hypervisor - FAQs

  • What is the minimum memory required for NetScaler VPX on Nutanix AHV?

    A minimum of 4 GB of memory is required for NetScaler VPX on Nutanix AHV.

    Note:

    Starting with NetScaler release 14.1-72.x, NetScaler VPX on Nutanix AHV can be provisioned with 2 GB RAM.

  • Does VPX on Nutanix AHV support disk expansion beyond 20 GB?

    Yes. To increase disk space on NetScaler® VPX deployed on Nutanix AHV, ensure that the required additional disk space is allocated during the initial provisioning stage. Nutanix AHV does not support increasing the disk size after the VM is provisioned.

  • Is secondary disk supported on Nutanix AHV?

    Yes, secondary disk is supported starting with NetScaler release 14.1-72.x.

  • Is sysctl for NetScaler variables supported on Nutanix AHV?

    No. It is recommended to use specific NSCLI commands to retrieve the same data. Instead of using sysctl netscaler.version, use the NetScaler CLI command show version.

  • How do I change the hostname of NetScaler on Nutanix AHV?

    The host name can be set using the set hostname <hostName> command.

  • Which disk partitions are persisted across reboots and upgrades/reinstalls in VPX Nutanix?

    Only files in the following directories are persisted across reboots:

    • /nsconfig that points to the /flash/nsconfig directory
    • /var directory

    All other files are deleted across reboots.

  • How do I restore accidentally deleted system files (e.g., binary files in /usr/sbin) in VPX Nutanix?

    Reboot NetScaler and select “Re-install NetScaler firmware version 14.1 x.x” during boot. This action does not affect any saved configuration.

  • How do I configure custom log rotation in VPX on Nutanix AHV?

    On Nutanix AHV, newsyslog.conf is not supported. Instead, log rotation is handled using the Linux logrotate utility, which executes once every hour. The configuration file is located at: /etc/logrotate.d/blx-syslog.

  • Is cloud-init supported on Nutanix AHV?

    Yes, but currently only custom scripts are supported. Guided scripts are not yet supported.

    Examples for cloud-init scripts:

    • Example 1: Empty cloud-init script. This triggers DHCP, and if a static or DHCP IP address is configured on the first interface, it is automatically configured as the NetScaler IP address.

       #cloud-config
       <!--NeedCopy-->
      
    • Example 2: Sets the host name to “vpx-nutanix”

       #cloud-config
       fqdn: vpx-nutanix
       <!--NeedCopy-->
      
  • Can I auto-assign NSIP from the primary static/DHCP IP configured on the first interface in VPX Nutanix?

    Yes, but you must specify a dummy cloud-init configuration in the custom configuration while creating the instance.

  • How do I configure domain name system (DNS) for NetScaler on Nutanix AHV?

    Use the add dns nameserver command to configure DNS.

  • How do I debug DNS issues on VPX Nutanix AHV?

    DNS utilities such as dig, nslookup, and host are supported starting with NetScaler release 14.1-72.x on NetScaler VPX for Nutanix. For earlier releases, use the systemd-resolve command to verify DNS resolution.

    Example:

     root@ns# systemd-resolve www.google.com
     www.google.com: 142.251.10.105                 -- link: ns2
                     142.251.10.147                 -- link: ns2
                     142.251.10.104                 -- link: ns2
                     142.251.10.103                 -- link: ns2
                     142.251.10.99                  -- link: ns2
                     142.251.10.106                 -- link: ns2
                     2404:6800:4003:c0f::63         -- link: ns2
     <!--NeedCopy-->
    
  • Which text editor is available in VPX on Nutanix AHV?

    Vim is available as the text editor. The “vi” command is a symbolic link to the vim binary.

  • How do I copy lines to clipboard from a file opened in vim through an SSH session?

    Hold down the Shift key, left-click, and drag to select the text you want to copy.

  • How do I paste content in the vim editor?

    Enter insert mode using “i” and paste using the “Shift + Insert” key combination.

  • What’s the recommended way to configure IP addresses on Nutanix AHV interfaces in an overlay subnet when using High Availability (HA) with NetScaler?

    When using a Nutanix overlay subnet, you can assign both primary and secondary IP addresses to a network interface. However, these IPs are tied to the specific node’s interface and do not support HA failover if used as Virtual IP addresses (VIPs) or Subnet IP addresses (SNIPs).

    To ensure proper HA behavior with NetScaler, follow these best practices:

    • Assign only one (mandatory) IP address to each interface in the Nutanix overlay subnet.
    • Do not use this IP address for any configuration that is shared across HA nodes (for example, VIP or SNIP).
    • You can use this IP address as an NetScaler IP (NSIP), since NSIP is node-specific and does not require failover.
    • Configure VIPs and SNIPs manually on the NetScaler appliance, not on the Nutanix interface.
    • Make sure to configure the appropriate VLAN settings on NetScaler for correct routing and communication.

    Using this approach avoids HA issues and ensures a clean separation between node-specific and shared IP configurations.

  • Is tagged VLAN supported with NetScaler VPX on Nutanix AHV?

    Yes, NetScaler VPX supports tagged VLAN provided AHV hypervisor has the configurations mentioned in VLAN for Guest VMs.

  • Is the nsapimgr command supported on Nutanix AHV?

    The nsapimgr command is supported on Nutanix AHV. However, the call options are limited to the following.

    Command 1 Command 2
    nsapimgr_wr.sh -ys call=ns_weak_sso_type_enable nsapimgr_wr.sh -ys call=ns_weak_sso_type_disable
    nsapimgr_wr.sh -ys call=ns_sso_ntlm_use_ntdomain nsapimgr_wr.sh -ys call=ns_sso_ntlm_dont_use_ntdomain
    nsapimgr_wr.sh -ys call=ns_sso_kcd_use_spn_host nsapimgr_wr.sh -ys call=ns_sso_kcd_dont_use_spn_host
    nsapimgr_wr.sh -ys call=ns_saml_redirect_for_artifact nsapimgr_wr.sh -ys call=ns_saml_post_for_artifact
    nsapimgr_wr.sh -ys call=ns_saml_enable_single_logout nsapimgr_wr.sh -ys call=ns_saml_disable_single_logout
    nsapimgr_wr.sh -ys call=ns_saml_enable_replay_protection nsapimgr_wr.sh -ys call=ns_saml_disable_replay_protection
    nsapimgr_wr.sh -ys call=ns_saml_enable_incl_ns_fix nsapimgr_wr.sh -ys call=ns_saml_disable_incl_ns_fix
    nsapimgr_wr.sh -ys call=ns_saml_enable_comma_sep_attr_res_no_encode nsapimgr_wr.sh -ys call=ns_saml_disable_comma_sep_attr_res_no_encode
    nsapimgr_wr.sh -ys call=ns_saml_enable_comma_sep_attr_res nsapimgr_wr.sh -ys call=ns_saml_disable_comma_sep_attr_res
    nsapimgr_wr.sh -ys call=ns_saml_dont_send_subject nsapimgr_wr.sh -ys call=ns_saml_send_subject
    nsapimgr_wr.sh -ys call=ns_saml_dont_send_session_index nsapimgr_wr.sh -ys call=ns_saml_send_session_index
    nsapimgr_wr.sh -ys call=ns_saml_dont_send_in_response nsapimgr_wr.sh -ys call=ns_saml_send_in_response
    nsapimgr_wr.sh -ys call=ns_saml_dont_send_full_metadata nsapimgr_wr.sh -ys call=ns_saml_send_full_metadata
    nsapimgr_wr.sh -ys call=ns_rba_login_enable_debug nsapimgr_wr.sh -ys call=ns_rba_login_disable_debug
    nsapimgr_wr.sh -ys call=ns_enable_schema_checks nsapimgr_wr.sh -ys call=ns_disable_schema_checks
    nsapimgr_wr.sh -ys call=ns_aaatm_drop_options_request nsapimgr_wr.sh -ys call=ns_aaatm_dont_drop_options_request
    nsapimgr_wr.sh -ys call=ns_aaatm_302_for_bearer nsapimgr_wr.sh -ys call=ns_aaatm_401_for_bearer
    nsapimgr_wr.sh -ys call=ns_aaa_enable_api_access nsapimgr_wr.sh -ys call=ns_aaa_disable_api_access
    nsapimgr_wr.sh -ys call=enable_webview_support nsapimgr_wr.sh -ys call=disable_webview_support
    nsapimgr_wr.sh -ys call=enable_rfweb_webview_support nsapimgr_wr.sh -ys call=disable_rfweb_webview_support
    nsapimgr_wr.sh -ys call=aaatm_disable_domain_cookie nsapimgr_wr.sh -ys call=aaatm_enable_domain_cookie
    nsapimgr_wr.sh -ys call=aaa_strip_domain nsapimgr_wr.sh -ys call=aaa_dont_strip_domain
    nsapimgr_wr.sh -ys arg1=<VAL> -ys call="ns_saml_set_deflate_size" nsapimgr_wr.sh -ys call=ns_saml_unset_deflate_size
    nsapimgr_wr.sh -ys arg1=<VAL> -ys call="ns_saml_send_binding" nsapimgr_wr.sh -ys call=ns_saml_dont_send_binding
    nsapimgr_wr.sh -ys arg1=<VAL> -ys call="ns_push_set_timeout" nsapimgr_wr.sh -ys arg1=<VAL> -ys call="ns_aaatm_cgitm_duration"
NetScaler VPX™ on Nutanix Acropolis Hypervisor - FAQs