About NetScaler CPX
Citrix NetScaler CPX is a container-based application delivery controller that can be provisioned on a Docker host. NetScaler CPX enables customers to leverage Docker engine capabilities and use NetScaler load balancing and traffic management features for container-based applications. You can deploy one or more NetScaler CPX instances as standalone instances on a Docker host.
A NetScaler CPX instance provides throughput of up to 1 Gbps.
http://docs.citrix.com/en-us/netscaler-cpx/11-1/about-netscaler-cpx.html
部署
安装docker
https://docs.docker.com/engine/installation/linux/centos/使用cpx的容器镜像生成cpx
从以下地址获取cpx的容器镜像cpx-11.1-48.10.gz
https://www.microloadbalancer.com/get-it-now执行以下操作
[root@netscaler ~]# docker load -i cpx-11.1-48.10.gz
[root@netscaler ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
cpx 11.1-48.10 9c5a5e94c333 5 months ago 605.4 MB
[root@netscaler ~]# docker run -dt -p 22 -p 80 -p 161/udp --ulimit core=-1 --privileged=true 9c5a5e94c333
786ccae5253fe35023ea18c10ade1b66780e28c558bee849fec700c18dd9dd58
[root@netscaler ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
786ccae5253f 9c5a5e94c333 "/bin/sh -c 'bash -C " 6 seconds ago Up 3 seconds 443/tcp, 0.0.0.0:32769->22/tcp, 0.0.0.0:32768->80/tcp, 0.0.0.0:32768->161/udp kickass_euclid
根据所给出的ssh端口登录cpx，默认登录口令为root/linux。
配置
进入cpx后，执行命令需要加载cpx的client脚本，cli_script.sh，即：
# cli_script.sh "show ns feature"开启ns的lb特性
root@786ccae5253f:~# cli_script.sh "enable ns feature LoadBalancing"
exec: enable ns feature LoadBalancing
Done
exec: show ns feature
Feature Acronym Status
------- ------- ------
1) Web Logging WL OFF
2) Surge Protection SP OFF
3) Load Balancing LB ON
4) Content Switching CS OFF
5) Cache Redirection CR OFF
6) Sure Connect SC OFF
7) Compression Control CMP OFF
8) Priority Queuing PQ OFF
9) SSL Offloading SSL ON
10) Global Server Load Balancing GSLB OFF
11) Http DoS Protection HDOSP OFF
12) Content Filtering CF OFF
13) Integrated Caching IC OFF
14) SSL VPN SSLVPN OFF
15) AAA AAA OFF
16) OSPF Routing OSPF OFF
17) RIP Routing RIP OFF
18) BGP Routing BGP OFF
19) Rewrite REWRITE OFF
20) IPv6 protocol translation IPv6PT OFF
21) Application Firewall AppFw OFF
22) Responder RESPONDER OFF
23) HTML Injection HTMLInjection OFF
24) NetScaler Push push OFF
25) AppFlow AppFlow OFF
26) CloudBridge CloudBridge OFF
27) ISIS Routing ISIS OFF
28) CallHome CH OFF
29) AppQoE AppQoE OFF
30) vPath vPath OFF
31) Content Accelerator ContentAccelerator OFF
32) RISE RISE OFF
33) Front End Optimization FEO OFF
34) Large Scale NAT LSN OFF
35) RDP Proxy RDPProxy OFF
36) Reputation Rep OFF
Done创建一个service
add service <name> <serverName> <serviceType> <port>serverName表示地址
serviceType有HTTP、SSL、FTP、TCP、SSL_TCP、UDP、SSL_BRIDGE、NNTP、DNS、ANY、SIP-UDP、DNS-TCP、RTSP、DHCPRA、DIAMETER、SSL_DIAMETER
示例：
add service Service-HTTP-1 192.0.2.5 HTTP 80创建一个virtual server
add lb vserver <name> <serviceType> <ip> <port>示例：
add lb vserver Vserver-LB-1 HTTP 10.102.29.60 80绑定virtual server与services
bind lb vserver <name> <serviceName>示例：
bind lb vserver Vserver-LB-1 Service-HTTP-1除了client，cpx还提供了可用于配置、使用的api，访问地址为：http://:<80_port>/nitro/v1/config，认证方式为nsroot/nsroo
举个栗子
本栗中，NetScaler CPX与Openstack结合，虽然并没有对应的cpx的driver，仅尝试与虚拟机手动绑定，使用cpx作两个虚拟机的ssh负载均衡器：
使用openstack创建两个虚拟机，ip地址分别为30.0.0.8、30.0.0.9
为这两个虚拟机绑定浮动ip
30.0.0.8 - 172.14.0.4
30.0.0.9 - 172.14.0.5- 在cpx中创建两个services
add service SERVER_A 172.14.0.4 TCP 22
add service SERVER_B 172.14.0.5 TCP 22- 创建一个ssh的lb
add lb vserver LB_SSH TCP 172.14.0.10 22- 绑定这个lb与两个虚拟机
bind lb vserver LB_SSH SERVER_A
bind lb vserver LB_SSH SERVER_B