Prepare AWS environment
Architecture
The following diagram illustrates the infrastructure of how NetScaler managed application are provisioned during delivery of applications on AWS.
Important
Do not make manual changes to the infrastructure managed by the service. Doing so might interfere with the functioning of the service.
The service provisions the following elements in your AWS VPC:
-
Three subnets, one each for management network, client network, and server network.
-
NAT gateway that routes management (control plane) traffic from both NetScaler and the agent to the internet.
-
Route table that contains entries for enabling management traffic to go to the internet through the NAT gateway.
-
Agent instance that is a proxy for the service. An agent enables the service to communicate with one or multiple ADCs deployed in your VPC.
-
Security groups that are associated with the NetScaler instances and the agent. Security groups control inbound and outbound traffic.NoteOnly port 80 and port 443 are open.
-
NetScaler Autoscale cluster - A set of NetScaler instances that provide the NetScaler functionality. NetScaler instances receive traffic and distribute traffic to your application servers.
Notes
-
The service does not make any changes to the resources created by you in your VPC. It only provisions all the necessary infrastructure to deliver your applications. Provisioning includes cloud native infrastructure, such as network gateways, routing tables, subnets, security groups, NetScaler instances, and ADS service-agent instances.
Application traffic is distributed across multiple availability zones depending on the deployment of your application servers. The NetScaler cluster processes the traffic and selects an origin application server to handle the request, based on the configured load balancing settings. The origin application server might be in the same or a different availability zone.
The following diagram illustrates the traffic flow in your environment.
