Slashdot Mirror


Using VMWare and Citrix in Tandem?

Dysfnctnl85 asks: "As a follow up to the previous discussion 'Alternatives to Citrix Remote Computing?', I've hit another brick wall in my quest to enhance the way my company does remote computing. Right now I've setup Windows Server 2003 Enterprise x64 R2 on two 64-bit machines with 16gb of RAM each. Before I can setup Presentation Server 4, I need to install the Novell client to allow access to our NetWare servers. After doing some research on Google, and hopping forums on the Novell Support boards, I've determined that Novell has no plans to release a 64-bit client for any Microsoft OS until Vista launches." Has anyone managed to get VMWare, Citrix and 64-bit Windows working together? "Now I'm sure there are other companies out there in a similar situation (as noted on the forums and Google Groups), so I then decided to look into the virtualization market to see if I can still make my dream happen. I've been emailing my Citrix rep who in turn has been speaking with a Citrix engineer who is currently training with VMWare, coincidentally. I'm wondering if anyone has successfully ran a VMWare + Citrix solution in order to fully take advantage of dual 64bit procs, a Windows 64-bit OS, and 16GB of RAM. I was thinking of running 2 Citrix Servers within VMWare to handle maybe 8GB, effectively making 4 public Citrix servers, but I'm not sure what the best solution would be."

76 comments

  1. D'oh! by sharkey · · Score: 2, Interesting

    I feel for you, buddy. I've been at the "Oh shit!" stage of realizing during implementation that I missed something $REALLY_IMPORTANT in planning myself.

    I am also hoping for some interesting and informative answers, since I am currently investigating using Windows Enterprise x64 to do a Terminal Services environment within MS Virtual Server using the "free" licensing of the virtual OSes. (My $ORK_PLACE steps on your neck for buying a 6-pack of Coke when on the road, penny-pinching *EXPLETIVE DELETED*.)

    --

    --
    "Outlook not so good." That magic 8-ball knows everything! I'll ask about Exchange Server next.
    1. Re:D'oh! by Anonymous Coward · · Score: 0

      Haha owned. Mmm Enterprise x64 costs much more than a 6-pack of coke unfortunately for you.

    2. Re:D'oh! by Anonymous Coward · · Score: 0
      Just chill. Your workplace gets what it pays for (in both $$ and respect from you).

      When my workplace squeezed budgets and became penny pinching, at that point we stopped splurging for "luxuries" like Windows and focused on just getting tools that we needed to get our jobs done.

      99% of your users/machines really don't need Enterpriex64. Heck, 90% don't need Windows at all.
      100% of your machines do not need Terminal Services nor Citrix for remote adminstration. With a little bit of Reading The Fine Manuals, you can do everything you need to with VNC and/or SSH and/or plenty of other perfectly fine packages out there.

      It might not be as easy; and your Microsoft Rep may not buy you as fine lunches anymore; bit if you read the manuals right it'll work fine and be more secure and give you more funcationality no matter how penny-pinching your organization is

  2. Huh? by obeythefist · · Score: 3, Insightful

    The problem seems to be Novell drivers, not anything else. Try running it without Novell connectivity first.

    --
    I am government man, come from the government. The government has sent me. -- G.I.R.
    1. Re:Huh? by parasonic · · Score: 1

      The problem seems to be Novell drivers, not anything else. Try running it without Novell connectivity first.

      Let me start by saying that I'm Dysfnctnl85's coworker. With our company's infrastructure, we *have* to have Novell access for the clients. We are using it primarily for NDPS and our NFS. All of the users' files are stored on Novell shares with a great deal of permissions settings, so there's no way of getting around needing Novell, short of migrating to another network architecture.

    2. Re:Huh? by AngryElmo · · Score: 1

      Have you looked at configuring CIFS support on the Netware servers and using the iPrint client (which replaces the need for the novell client although it utilises the NDPS backend). I cannot tell you how well (if at all) the iprint client would work in a 64bit environment, but if used as passthru devices within the session it may not be a big deal...

    3. Re:Huh? by Dysfnctnl85 · · Score: 1

      In order to run CIFS, we would need to upgrade from NetWare 5.x to 6.x, and even then the *way* users would connect to our file servers would be different. Also, CIFS does not support login scripts -- something that is essential to our environment.

      I've been told by Novell support personnel that in order to make something "like" login scripts work in CIFS, we would also need to upgrade ZenWorks to the latest version. And even then it's not the same as our existing architecture.

      In other words, according to Novell, even to get something kind of like we have now, just to get a Windows 64-bit OS to work with Novell, we would have to spend six figures! Hah! The most expensive NetWare client evar.

    4. Re:Huh? by nullllun · · Score: 1

      Is upgrading to Netware 6.5 totally out of the question?

      If not what about upgrading to 6.5, enabling CIFS and using windows to run a script to map drives?

      I mean you could just make a .bat file with a bunch of net use statements to map the drives once CIFS is going.

    5. Re:Huh? by parasonic · · Score: 1

      Yes it is. Not only do we not want to add another six-digit figure to this year's budget, but with how things are going with Novell--especially with this little issue--they're going to have a harder time selling us the next rev of their product. If they had just a little more business sense, we might actually stay with them. It just takes the little action of keeping the customers happy. How big of a deal is it to push out a 64-bit client?

    6. Re:Huh? by AngryElmo · · Score: 1

      Sorry - I made the obviously false assumption that you were running 6.5 or greater seeing as 6.0 and previous is EOL'd... Methinks you've got interesting times ahead..

    7. Re:Huh? by Anonymous Coward · · Score: 0

      NetWare doesn't have "shares", moron.

    8. Re:Huh? by obeythefist · · Score: 1

      I see the importance of compatibility with the environment, but the "Ask slashdot" question was more along the lines of "Citrix and VMWare don't work together", which is a little misleading. I work for a sizeable, you could say world leading resource company, and we use Citrix and VMWare in our development environments on a daily basis. No Novell stuff. Maybe that was just the editor who posted the story.

      Now I know the integrated MS client for Novell is awful, but does that work at all? Or would it be possible to "gateway" the Novell access through another system?

      --
      I am government man, come from the government. The government has sent me. -- G.I.R.
  3. An easy solution is... by SirTalon42 · · Score: 2, Insightful

    You could always run a 32 bit OS on the servers (at least till novell releases the 64bit client). If theres nothing you need specifically from the 64bit-ness you won't really be losing anything really (though I don't really know what hardware or software you plan on running).

    1. Re:An easy solution is... by logik3x · · Score: 2, Insightful

      ram? wouldn't the limit be 4 gig if not in 64bit mode?

    2. Re:An easy solution is... by Anonymous Coward · · Score: 0

      Only per process. Intel 32 bit CPUs support up to (IIRC) 64 GB of RAM through paging. The limit for a single process is 4 GB, but that may not be an issue, depending on what's being run on the system.

    3. Re:An easy solution is... by njvic · · Score: 1

      If he sticks with Windows Enterprise Edition (either 32 or 64 bit), he won't have the 4GB limit.

    4. Re:An easy solution is... by Bert64 · · Score: 1

      He'l lose performance, running in 32bit mode you have to use nasty paging hacks to access 16GB of ram, and i believe theres a 2GB or 4GB limit per process (which might not matter).
      Also you lose access to the extra registers available in 64bit mode...
      Finally if he's using AMD cpus, then no 32bit version of windows supports NUMA properly (not sure if the 64bit versions do)

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
  4. We're doing it! by axp_bofh · · Score: 4, Informative

    I'll try to get technical details tomorrow from the Citrix team (I'm on the VMS end of things), but we're a large healthcare system running a moderately large Citrix farm (~100 servers) for our clinical systems. We've got 4 DL-585's (IIRC) running 2k3 and six VMWare Citrix instances per server in production. User loading is about 20-25 users / "server". Once we got through some initial headaches, it's been quite solid. One very nice thing is that if a "server" gets bollixed up, we don't go through the usual Ghost re-imaging process to restore the server, but just copy over the VM disk image again.

    1. Re:We're doing it! by TCM · · Score: 1

      "Copy over the disk image again"? Don't VMware's server products support snapshots and incremental disk writes which you could simply discard?

      --
      Of course it runs NetBSD. BTC: 1NT7QvbetmANwaMzhpVL6
    2. Re:We're doing it! by tadheckaman · · Score: 1

      Yes, but that impacts performance and not recommended running all the time. Of couse you could turn the 'snapshot' on in realtime, do whatever you want (upgrade/install software), and then commmit those changes. But running in snapshot mode all the time, especially on a terminal server, is not recommended, and once that snapshot gets a certain size, it can take HOURS to commit when the time comes.

      --
      My potato gun was confiscated by the United Nations. They said I wasn't allowed to have weapons of mash destruction.
    3. Re:We're doing it! by projektsilence · · Score: 1

      Also, running in redo mode, snapshots typically can eat up a LOT of space very quickly because it saves the entire delta of everything that goes on, file deletes, changes, everything.

  5. VMWare Server works fine on x64 by windex · · Score: 1

    At least, it did under XP Professional x64 w/ IIS installed, back when I was using that.

    It runs under WoW64, but seems to work fine. I did it for months without incident.

    VMWare supports x64.. but not by providing x64 binaries, just by insuring their code runs under Windows on Windows.

    <3 your f*cked up penny pinching configuration.. I used to work for a company like that, and it sucks.

    1. Re:VMWare Server works fine on x64 by Jaruzel · · Score: 2, Interesting
      VMWare supports x64.. but not by providing x64 binaries, just by insuring their code runs under Windows on Windows.


      Elaborating on the Parent further, WMWare Workstation (5.5.1 if anyones keeping track, not tried Server or had the luck to get grubby with ESX) does run as a 32-bit process on x64 Windows, BUT on x64 it allows you to also have x64 Guest OSs, whereas if you run it on a 32 bit host OS, you are (obviously) restricted to to 32-bit only Guest OSs.

      The thing I don't get is, how can a 32-bit Application (VMWare), host 64-bit Operating Systems?

      Anyway, I have x64 Windows (Svr 2003 SP1), VMWare, and Citrix hosted in a 32-bit Guest OS . It all runs quite happily, albeit slightly sluggish.

      -Jar.

      --
      Together, We Can Make Slashdot Better. I Do NOT Mod ACs. - Check Me Out
    2. Re:VMWare Server works fine on x64 by windex · · Score: 1

      The 32 bit version also allows you to run 64-bit OS'es, you're basically running 64 native, 32 emulated, 64 emulated when you run 64 bit OSes on a 64bit OS hosting vmware. :)

      It just emulates the x86-64 instruction set and uses longer 32bit operations to acheive the 64bit functionality.

    3. Re:VMWare Server works fine on x64 by Anonymous Coward · · Score: 0

      uh no, we definitely do not, and will not ever, support this

  6. Is Netware needed? by mkiwi · · Score: 3, Interesting
    So you want to run Citrix as your front end. That is a pretty good choice.

    The main question is what are you running behind Citrix. Citrix itself does very little but present a screen to a virtual server. My experience has been that the thing behind Citrix- Netware in your case -is the thing that causes the most problems. Definately consider switching to an A/D setup if you have not already started migrating users from Netware to A/D. With A/D and cool projects like OpenLDAP you can do some pretty neat web based things with Java or PHP. (I have not checked in to other languages as of yet) When your company asks you to implement a fully customizable web portal using IIS (eek!) that accesses all this information, PHP is a good ally to have.

    1. Re:Is Netware needed? by misleb · · Score: 1

      Nothing wrong with Novell's eDirectory/NDS. It is generally considered better than A/D and has the LDAP compatability layer.

      Anyway, sounds like they are pretty set on Netware for now. I think he made that pretty clear.

      -matthew

      --
      "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
    2. Re:Is Netware needed? by mverwijs · · Score: 1

      Definately consider switching to an A/D setup if you have not already started migrating users from Netware to A/D.

      Your use of the word "Netware" implies you're mixing up Novell Netware (the operating system) with Novell eDirectory (the directory service).

      With A/D and cool projects like OpenLDAP you can do some pretty neat web based things with Java or PHP.

      ...where as this is not possible with Novell eDirectory? I'm doing some pretty neat things with Bash and Novell eDirectory. Haven't tried it with PHP, but I'd be hard pressed to believe that this is not possible. A webportal based around Novell eDirectory should be peachy. Switching from a solid setup of Novell to AD (Active Disaster) is the last thing I would ever ever do.

      OpenLDAP however.... (but that would be because of my open source zealotery ;-))

      Ps: we're running Citrix and Novell without a problem. Various webservices authenticate to the eDir (via LDAP interface) and all works like a charm. Think Apache mod-ldap-userdir, RequestTracker, KnowledgeTree DMS and subversion. I'd be at a loss without eDir.

    3. Re:Is Netware needed? by Bert64 · · Score: 2, Insightful

      In terms of security, A/D is actually a lot more of a headache than Novell's offering...
      But your right, the biggest issue with citrix is the applications behind it, many windows programs are simply not designed with security or multiuser usage in mind, there are often ways to execute arbitrary code and very little protection against excessive resource utilisation, create a corrupt word document, load it up on a shared citrix server and watch the calls to support go through the roof.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    4. Re:Is Netware needed? by Anonymous Coward · · Score: 0

      No offense but I know I will get flammed but why in the heck are you paying out the nose for NDS and Win Licenses/Cal's?
      No reason to complicate the infrastructure. If you say "NDS is better" is not a good answer. Beta was
      better than VHS. A smart IT department will make there infrastructure simple. Why manage Citrix/Windows/NDS.
      Drop NDS and go AD. We did, and it is a lot less hassle. AD does what we need without having complexity.
      I am not fond of MS and hate their tax and would rather have Linux/UNIX everywhere but save your self the headache
      and get rid of Novell.

  7. Take This Into Consideration by consolidatedbord · · Score: 4, Informative

    Citrix is a virtual computing environment. Users are given virtual workspaces on top of their own workspace. You're wanting to put two virtual workspace servers, inside of an already virtual environment. Doubling up layers of something aren't always a good thing. Think double nat'ing - yeah, you can access resources on the other side of your double nat, but it will always cause problems eventually.

    I was working with someone who wanted to do this very same thing recently and the answer from both myself, and Citrix was "no, what the hell is wrong with you." :-P I was also working with a Citrix engineer about a month ago who was testing out the same very thing you are talking about (stress tested to be a production environment not just "oh yeah, it boots, connects, NEXT") and his findings were basically "yes, it is possible, is it worth it? will it continue to work well? will performance be maintained?" The answers were all no. This was tested on both 32 and 64-bit environments all with large ammounts of RAM.

    --
    while true ; do echo this is my sig; done
    1. Re:Take This Into Consideration by pyite · · Score: 1

      I can't say who I work for, aside from the fact that it's financial services, but something is wrong. With regards to "I was also working with a Citrix engineer about a month ago who was testing out the same very thing you are talking about," it seems your engineer is unaware of the solutions Citrix is supporting with some of its biggest and best clients.

      --

      "Nature doesn't care how smart you are. You can still be wrong." - Richard Feynman

    2. Re:Take This Into Consideration by consolidatedbord · · Score: 1

      Just because something is supported doesn't mean it's best practice, or even good practice. Citrix is really good about supporting a lot of things. Their mentality is "you paid for our product, we'll help you get it to work as best we can." But again, that doesn't always mean it's the best way to go... or even a good way...

      --
      while true ; do echo this is my sig; done
    3. Re:Take This Into Consideration by bzipitidoo · · Score: 1

      I'm not a guru on this, but once tried VMWare 3.2 with Citrix on basic 32 bit x86s a few years back. Never did get it working well. Possibly would have better luck now, with all the improvements. Yeah, it wasn't the greatest idea, but that's the sort of stuff you're told to check out when the ruling paradigm is paranoia over security. If prompting for a password increases security, making users go thru 2 or more password prompts is even more secure, right?

      AMD and Intel's websites don't make it easy to learn about Pacifica (or Silverdale?) and Vanderpool, their respective virtualization efforts. This year, they are supposedly available. Looks like we'll need something like XenSource or hypervisor software to utilize the hardware support. Makes VMWare's current methods obsolete, which I'm guessing is one reason why VMWare suddenly offered a freebie, VMWare Server.

      For the things I tried to do, such as try out obscure microkernel OSes, VMWare was no good. Then there were the people who wanted VMWare to run graphics intensive stuff like Flight Simulator, or VoIP with processor and network intensive high quality audio codecs. Moving the virtualization to hardware won't help with things that are inherently single user, but perhaps the obscure OSes will work within this improved virtualization without any problem.

      --
      Intellectual Property is a monopolistic, selfish, and defective concept. It is "tyranny over the mind of man"
  8. Horrible. by 222 · · Score: 2, Informative

    I currently have a duel 3.4 64 bit Xeon box / 8GB RAM running VMware server beta and it's really not worth persuing. Any qualified Citrix consultant would tell you the same...I'm almost certain Citrix themselves don't recomment a setup like this.
    I know this because I'm an avid fan of VMware, and inquired myself... (I'm also currently upgrading to PS4).

    If you want to use VMware, get ESX...At least you can retain some performance, and VMotion offers nice flexibity. (At a price, though!)
    It's not to say that VMware can't play a role in a Citrix rollout...It's a fine testing platform, and also a solid choice for Installation Manager...but aside from that you're wasting your time.

    After speaking with a couple of Citrix consultants, I've used VMware exactly as I've described, and it's worked out fairly well. Virtualization is godsend, but not fit for *every* problem... yet ;)

    1. Re:Horrible. by InsaneGeek · · Score: 1

      It all depends, there are lots and lots of installations of Citrix inside VMware, it's a relatively common action. The main reason behind it is the memory address limitations of 32bit windows, you can create as many citrix instances as you want for no cost (each windows server is an additional cost, but in the grand scheme of citrix it's a minor cost). As for the 64bit windows + citrix I don't know how things play (I'm not really a windows guy but I know enough from being involved in their projects).

      And if you decide to use vmware + citrix, you paid a bunch for citrix pay a little more and get ESX it's miles ahead of GSX which is still ahead of the Server Beta product.

    2. Re:Horrible. by 222 · · Score: 1

      It's not a memory issue. Hell, most of my VM's even come close to capping their potential limit.

      As far as VM Citrix setups go, I'd love to see how that worked.... but as you said ESX is better. Comparing the ROI on Citrix VS ESX isn't an easy task, though... and while GSX may be better, I still fail to believe that it can provide a responsive Citrix config.

      I'm not refusing to believe, though... I'd just like to see it. I've been the primary pusher of VM's (the DR aspect alone is enough to give me a gumby) at my place of employment. It's just not that responsive. I can't see users actually working in an enviornmet like that...

    3. Re:Horrible. by InsaneGeek · · Score: 1

      Actually it is a memory issue, with win32 you have to start doing tricks to address higher memory space (/3 /4 /pae each having their drawbacks and problems with citrix & terminal services). Citrix+32bit tends to top out and adding more cpu gives you hardly any benefits because you've run out of addressable kernel memory space. It's been used for this purpose for a number of years now.

    4. Re:Horrible. by 222 · · Score: 1

      I was more so referencing Citrix VM performance being unacceptable, and that memory availability was far less of an issue than virtualization itself; at least without using ESX.

  9. Citrix on Vmware by Anonymous Coward · · Score: 0

    I have not tried Citrix on Vmware but have Citrix running on M$ Virtual Server with no problems. Yes I know Virtual Server is a bit slow but the users didn't notice the swap over to a virtual Server.

    The host Server is running a 64bit Version of 2k3R2 and the guest is 2k3R2 32 bit. 4gb Ram.
    The host does have 2 other Virtual servers also running on it.
    lp.

  10. Remove the 64-bit variable. by mnmn · · Score: 1

    You have no reason to go 64-bit in the corporate right now. Its still not there yet. You have almost nothing to gain from going 64-bit.

    So whats the problem again?

    --
    "Give orange me give eat orange me eat orange give me eat orange give me you." -Nim Chimpsky
    1. Re:Remove the 64-bit variable. by Dysfnctnl85 · · Score: 1

      We have every reason to, purely from a terminal services perspective. The ability to address more than 8GB of RAM is almost a requirement for a decent terminal services environment. On top of that, Citrix supports 64-bit now and the performance advantageous are ridiculous.

  11. We do this where I work by illumin8 · · Score: 3, Informative

    We have about 10 Citrix Servers running on a VMware ESX 2.5.3 system on HP BladeCenter (AMD Opterons). It works pretty well overall. We found out that you definitely need the SMP upgrade component so each Citrix instance can access two physical processors. VMware ESX 2.5.3 only supports 3600 MB max memory per guest OS and only 32-bit guest OS's, however, VMware ESX 3 just came out and it now supports 64-bit guests, with up to 16GB of RAM each, and up to 4 processors each (physical processors, not just virtual).

    The benefits of ESX server are pretty great. Secure remote console. Remote power. Ability to clone your VMs (with VirtualCenter, or a free perl script). Ability to migrate a running VM to a different server without shutting it down (google vmotion). The benefits of running virtualized are even greater than maximizing the use of hardware. Manageability is a big plus to going virtual.

    Anyway, in your situation, I would recommend installing ESX server on your two big boxes, and using many smaller 4GB 32-bit Citrix servers. Citrix will automatically load balance your apps among your server farm, and ESX will let you load about 4-5 Citrix servers on a single physical box/blade.

    Also, get some shared storage (SAN, or even SCSI disk shelf attached to both servers) so you can use Vmotion to migrate VMs around. Imagine how cool it is when you need to do a hardware upgrade or fix a bad component to just migrate the VMs off, do your maintenance, then migrate them back on, without scheduling downtime or the users even noticing. I've even run a countinuous ping to a VM, done a migration from one blade to another, and watched it never miss a single ping. It dumps the contents of memory across a gigabit ethernet connection to the other node, then somehow points it at the shared disk drive on storage, never missing a beat/ping...

    As always, YMMV.

    --
    "When the president does it, that means it's not illegal." - Richard M. Nixon
    1. Re:We do this where I work by Bert64 · · Score: 1

      Was there any additional latency on a couple of the ping responses?

      Your solution also works around a common problem - resource utilisation and general user fuckups, each user can only crash one of the smaller virtual boxes instead of the whole system.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    2. Re:We do this where I work by illumin8 · · Score: 1

      Was there any additional latency on a couple of the ping responses?

      Yes, I have to admit that one or two of the ping responses is a little delayed during the final cutover. It first does the memory copy across gigabit, which takes about 30 seconds, then when the receiving server is ready, there is a final cutover where the VM is killed on one server and started up on the other. That is when I saw latency jump from 0.1 ms up to a couple hundred ms for a couple pings.

      --
      "When the president does it, that means it's not illegal." - Richard M. Nixon
    3. Re:We do this where I work by PFactor · · Score: 1

      I just finished the ESX class. One of the labs was on VMotion, so I used that lab to try to "trick" VMotion into sucking.

      My laptop ----> MS terminal svcs to VM1
      My laptop ----> ping VM1

      VM1 ----> ping VM2
      VM1 ----> ping my laptop
      VM1 ----> terminal session to VM2

      VM2 ----> ping VM1

      When I did the Vmotion, I dropped one packet from my laptop to VM1. The other continuous pings didn't drop a single packet. The terminal session from my laptop to VM1 hitched for a half-second (I had grabbed a window w/ the mouse and was moving it around to see if I noticed any sort of delay).

      Those 2 things were the sum total of noticeable effects of the Vmotion. /me was impressed.

      --
      Don't believe anything I say. I crash test crack pipes for a living.
    4. Re:We do this where I work by GoRK · · Score: 1

      Wow I can't even get it to hang up for 1/2 second :) Probably whatever switches were between you and the ESX servers took longer to update their forwarding tables than mine did...

    5. Re:We do this where I work by PFactor · · Score: 1

      Well to be fair, the boxes were DL360's with only 4GB ram and another "team" was doing a Vmotion at the same time I did my testing.

      There was 1 switch connecting all the servers together - an HP Procurve (and not a high end one, from what I understand)

      --
      Don't believe anything I say. I crash test crack pipes for a living.
  12. Cost considerations, plus more thoughts... by ejoe_mac · · Score: 3, Interesting

    First off decide of you really need Citrix or not. There are a few things it does well, mostly on a management / printing basis. Take a look at some sort of SSL Presentation box (F5 Firepass / etc) to do your presentation. Using basic Termainal Services works fine for some situations.

    Now Microsoft is allowing 4 free instances of their OS when you're running on Windows 2003 R3 Enterprise/Advanced, and using Virtual Server 2005 R2. I know it's a MS hot dog next to VMWare's Prime Rib, but when $$ matters there is compromise to be had.

    I've used ESX for Win2003 std Terminal Server - due to the users each mapping 4 printers back each (yea Windows Server with 35 people connected, each bringing 4 printers - didn't work well). There's a check box in ESX for "Citrix Workload".

    In a perfect situation, I'd use Citrix to publish applications. I'd create 1-3 VM's on each server for each application published (5 apps = 5-15 VM's per server). Use Citrix to balance the load across those servers (or an external appliance). This would allow for a fairly consistant load across the servers without any additional features. If you're in it for the money, create 2 VM's per task and use the new Vitual Infrastructure 3 DRS feature to allow automatic VMotion if a single server gets overloaded.

    Something to think about, but remember using a Vitrual platform has so many advantages to strictly hardware I'd overlook the Citrix people saying "no". Rebuilding a server in 3 short mouse clicks is just too amazing.

  13. new version of VMWare ESX by Anonymous Coward · · Score: 0

    I was recently at a VMWare User Group meeting where the company rep was talking about the new version of ESX Server (the version of VMWare that runs on the bare metal - eg, their own tweaked OS, although I'm guessing that's probably Linux - instead of being a client app).

    The rep made a point of saying that ver. 3 has made great performance improvements in a number of areas, and specifically mentioned Citrix.

    So, if you haven't already, you should look at ESX Server 3 (and some of their management tools, the demo was very slick). It hasn't been out very long, but if you're a VMWare user, the improvements are worth it.

    1. Re:new version of VMWare ESX by Michael+Hunt · · Score: 1

      VMWare ESX's 'vmkernel' isn't linux, it's based on something called SimOS, which came outta Stanford Uni (if memory serves, the VMware founders were Stanford alumnae). As I understand it, it boots a linux kernel to initialise the hardware, and then loads vmkernel 'under' this linux kernel, so that the linux installation (in the management VM) just becomes another ESX guest, albeit one with more privileges than the other guests. It's kind of like the way Xen works, with a privileged domain (domain 0) handling management, but which is still really nothing more than another guest.

  14. I know it is being done by Anonymous Coward · · Score: 0

    One of our customers has a completely virtualized environment. Everything is published through Citrix or Terminal server, and all of it is running on Windows running in VM provided by Microsoft and VMWare both. Everything is 2003 and XP VM's 64-bit or otherwise as the need arises for them. It is a hospital managed by just a couple of people. The best part is they can restart 10-15 seconds behind an error I guess for recovery. Pretty cool stuff, it can be done so good luck.

  15. More Information by Dysfnctnl85 · · Score: 1

    The situation I'm in has more to do with our existing infrastructure than anything else. Terminal Services environments such as Citrix require large amounts of RAM, and moving to 64-bit allowed us to put as much RAM as we wanted in some new boxes. Now, the question is whether or not to change our existing architecture completely. Users are *accustomed* to running Citrix and published apps now, and this is the most important thing for us to consider in our new implementation. Sure, there may be overall better ways to do things, but what will have the smallest effect on how our end users are accustomed to doing things?

    Per the previous Ask Slashdot, we have 3 main offices and because of the architecture of our accounting system, they are required to run the published application to do essentially anything related to their job.

    The "oh sh!t" moment occurred when I realized how big of a hurdle Novell would present (and for reasons that are beyond my comprehension). All of our file servers run NetWare, and to make a terminal services environment work, we need users to be able to connect to all of their files the same way they connect to them now. For this reason, it is not an option to upgrade to NetWare 6.x.

    Now, thinking futher down the road, I would like to see my company leave Novell. Maybe they'll pull the proverbial rabbit out of the hat and make the NetWare -> Linux transition worthwhile in an enterprise environment like ours, but right now it's not an option.

    I've downloaded the trial version of VMWare ESX and plan on getting it running today (hopefully), but I understand that there would be complications running two virtual environments. Is it likely that Citrix is not even needed? If it's not blatantly obvious, I have little experience with VMWare, but we were actually going to install it on one of our X4200s and compare it to a strictly Citrix environment to see what the performance differences would be.

    1. Re:More Information by PFactor · · Score: 1

      We have a similar situation - Novell file servers + Citrix servers + Netware client = 'teh suck'. In our case, we want to provide users access to their home drives, department drives, and a large mail archive storage cluster (all on Netware). As an aside, we're ditching Novell as fast as possible. Which isn't very fast. More like glacial. Anyway...

      Dealing with the netware client was a pain and CSNW sucks for more than 1 server (users keep having to enter their -fairly long - context and tree) in an NDS tree as large as ours.

      I proposed using a series of linux boxen to 'translate' Novell volumes into Samba shares that would be accessible without the Netware client. We didn't use the idea because we like pain and suffering. Maybe it will benefit you, though.

      I would be VERY interested in the results of your testing w/ VMware and Citrix. We are about to embark on a similar mission...

      --
      Don't believe anything I say. I crash test crack pipes for a living.
    2. Re:More Information by Anonymous Coward · · Score: 0

      This would be a clunky way to do it, but you could set up a couple 2000 servers running the Gateway for Netware service, set up shares on the gateway boxes, and have the terminal services/citrix environment map drives to the gateway boxes.

    3. Re:More Information by TheOtherKiwi · · Score: 1
      Quote:
      The "oh sh!t" moment occurred when I realized how big of a hurdle Novell would present (and for reasons that are beyond my comprehension). All of our file servers run NetWare, and to make a terminal services environment work, we need users to be able to connect to all of their files the same way they connect to them now. For this reason, it is not an option to upgrade to NetWare 6.x.
      What do you mean? "We need users to connect the same way?" I've never heard users demand anything like "I must map my drive using legacy software or else!", perhaps you should consult with your users to establish the real reason, educate them! Perhaps a crappy legacy app behaves this way, upgrade it! You have effectively explained why you should upgrade to a later version of NetWare. You won't, so you are stuck with a workaround...it's self-inflicted. This upgrade provides a clear roadmap to Linux but...
      Now, thinking futher down the road, I would like to see my company leave Novell. Maybe they'll pull the proverbial rabbit out of the hat and make the NetWare -> Linux transition worthwhile in an enterprise environment like ours, but right now it's not an option.
      Leave Novell AND go to Linux? Um, maybe you missed a press release but Novell, is Linux nowadays, or perhaps you prefer Redhat...then see how seemless the transition is...not.
      Seek the advice of your vendor (or nearest support organisation with a brain), you will have to pay for this advice. No, it is not free. Upgrade if necessary, (seems like it is), use supported versions of software and levergae this support to get a good solutions for your users. Prepare your users for a no-impact transition. Communicate often, do not fear change so easily, it rubs off on your users.
      --

      -- Sig meltdown immine...
  16. Have you considered other options? by tgd · · Score: 1

    VMWare + Citrix presents an interesting new way of looking at providing remote access, but IMO it hooks VMWare's very strong wagon to Citrix' aging horse. IT Administrators tend to like Citrix because it gives them an easy way of centrally managing their remote users, but non-LAN-connected users hate Citrix because of the reduced graphics quality and poor performance over slow links.

    There are some other interesting solutions out there that use virtualization concepts to provide better end user experiences. (Thats not my site, or anyone I know, in case anyone thinks I'm trying to boost my blog -- I have no idea who it is, I just ran across that the other day).

    Anyway, its an interesting concept...

    1. Re:Have you considered other options? by afidel · · Score: 1

      There's no remote access solution that beats Citrix, period. Email and files are too big to drag across dialup in most organizations today, and no remote acess protocol that I have seen is better than ICA over high latency, low bandwidth links (NX is close). Even most web based corporate apps are heavier on bandwidth requirements than a Citrix session. If you can point me to something that you think works better than Citrix I'd be interested, but skeptical.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    2. Re:Have you considered other options? by GoRK · · Score: 1

      There is a pretty good size market for an ICA layer for regular desktop versions of Windows. If I could install XP desktops into VM's on a central server running VMware ESX and export them to users (on terminals or repurposed pc's) via ICA you could sell it to me in less than ONE SECOND -- particularly if you want to go ahead and support multiple monitors...

    3. Re:Have you considered other options? by tadheckaman · · Score: 1

      http://www.vmware.com/solutions/desktop/vdi.html

      I believe this is using some sort of citrix management, but not sure about the protocol, probably still RDP.

      --
      My potato gun was confiscated by the United Nations. They said I wasn't allowed to have weapons of mash destruction.
    4. Re:Have you considered other options? by GoRK · · Score: 1

      Well I guess I'll know more tomorrow when I have a conference call set up with their engineers about what we would need in order to deploy that product here. I am pretty positive it doesnt use ICA or even ship with any special management tools. From what I know so far this VDI thing is not so much of a product but more of a concept that "Hey! Don't forget that XP has an RDP server in it!" Multi-monitor support is our biggest hang up; other than that it's just a very easy way to manage a bunch of desktops without the hassle of Citrix.

      As for the multiple monitor support, at least it is possible to use rdesktop or MS RDP 6 client to export the desktop as one huge screen that spans monitors. (The RDP5 client lacks a large enough video buffer) Then you can run software helpers to manage windows so that things like maximize and window placement behave correctly. Apparently in Vista this will be less of an issue as RDP 6 addresses many of the concerns with multiple monitors.

    5. Re:Have you considered other options? by tadheckaman · · Score: 1

      The dual monitor would be nice, I've been doing it for years with a virtual XP running on an ESX host, and running rdesktop at a really high resolution to span monitors, but it isnt perfect. Plus there isnt any dual monitor thin clients.

      I was watching a sales webinar a few weeks ago, and VDI seemed like a Citrix farm running XP machines. I dont remember if they are using the ICA protocol, if it did that would be awesome.

      --
      My potato gun was confiscated by the United Nations. They said I wasn't allowed to have weapons of mash destruction.
  17. He wants 64-bit because his system is RAM-bound by PFactor · · Score: 1

    If you are memory bound, adding more memory is the best way to increase capacity and/or performance.

    Win2K3 Std 32-bit supports 4GB RAM, which is fine unless you need more than 4GB.
    Win2K3 Enterprise 32-bit supports like 32GB, but you'd have to pony up for the new OS (cost = cost of RAM + cost of Win2K3)
    Win2K3 Std 64-bit supports 6GB RAM (cost = cost of RAM)

    Moving to 64-bit allows more memory usage without paying a larger M$ tax.

    Test it, though. Then, test some more.

    --
    Don't believe anything I say. I crash test crack pipes for a living.
  18. VMware cleans up Citrix by DanMc · · Score: 1
    I was thinking of running 2 Citrix Servers within VMWare to handle maybe 8GB, effectively making 4 public Citrix servers, but I'm not sure what the best solution would be."

    There's a lot of overlap between VMware and Citrix to be honest. People usually have multiple citrix servers in a farm for 2 reasons. First is to handle large loads. Second is to have a testbed and make it easier for your admins. (I'm assuming you're not virtualizing to do something specialized like training classes or simulate geographically separate sites...)

    In your case, based on what you've told us, the only reason I can see VMize your citrix servers is making your testbed alongside production. (The MAIN reason people do Citrix in VMware is because their citrix system is already established, and the large citrix farms can be reduced and virtualized on more powerful modern hardware to further reduce maintenance. But you've got a new install here, and all options are open.)

    Spend a little time asking yourself what those novell desktop apps do. Can they be delivered without client32? Novell is constantly pushing to pull off the desktop and into server stacks, but keeps faltering. There's enough tools to do it if you want to, but they're harder to use than the deskside tools that integrate with windows... And everyone constantly sees issues like you are where Novell lags behind Microsoft's changes to windows. (In the past I do think Microsoft did this intentionally) It sounds like you were surprised or maybe hit politically with a "we don't do it any other way!"

    1. Re:VMware cleans up Citrix by Dysfnctnl85 · · Score: 1
      Spend a little time asking yourself what those novell desktop apps do. Can they be delivered without client32? Novell is constantly pushing to pull off the desktop and into server stacks, but keeps faltering. There's enough tools to do it if you want to, but they're harder to use than the deskside tools that integrate with windows... And everyone constantly sees issues like you are where Novell lags behind Microsoft's changes to windows. (In the past I do think Microsoft did this intentionally) It sounds like you were surprised or maybe hit politically with a "we don't do it any other way!"
      We need users to have access to NetWare shares. That's the whole problem here.

      I was in fact surprised by Novell's utter disregard for x64 Windows users; maybe their decline in market share is for a reason...
    2. Re:VMware cleans up Citrix by Anonymous Coward · · Score: 0

      They have a reason. According to a Novell person, "XP64" (64 bit windows as it stands now) is a partial implementation. There are a number of low level function calls that Client32 *has to have*, which are not available in XP64. Novell would essentially find itself in the business of writing Microsoft's stack themselves to make it work.

      Microsoft also reccomended they develop for Vista 64 bit, rather than XP 64 bit.

      I know it doesn't help your situation, but at least it's an explanation.

    3. Re:VMware cleans up Citrix by PFactor · · Score: 1

      As an added bonus, if you have a Citrix server in a VM, disaster recovery is tons easier.

      DR w/out VMWare:

      1) Acquire new hardware
      2) Build base OS
      3) Service packs, reboot
      4) Hotfixes, reboot
      5) More hotfixes, reboot
      6) etc, reboot
      7) Use your build documentation to implement all the OS hacks needed to get that last bit of performance out of the box
      8) Install Presentation Server
      9) Citrix hotfixes, reboot
      10) More Citrix hotfixes, reboot
      11) Install your app
      12) Add any tweaks/updates to the app
      13) test and go into prod

      DR with VMware:
      1) Restore the vitual disk and VM config file
      2) Build an ESX host server (~30 minutes)
      3) Add the restored VM to the ESX host's console (if you're using virtual center its even easier)
      4) Turn on the VM and you're done

      * all of this assumes your DR location has all the necessary infrastructure like a directory service and your Citrix farm infrastructure is operational or has already been recovered

      --
      Don't believe anything I say. I crash test crack pipes for a living.
    4. Re:VMware cleans up Citrix by DanMc · · Score: 1
      That's what I thought. I wrote the first reponse this morning and I admit I didn't go read your previous AskSlashdot about VMware in general. I see what kind of environment you're running now. You're dealing with the typical "legacy can't be touched" problem. If you're still on older Netware (please tell me it's not IPX based too) you're going to keep hitting problems.

      You might attack the problem on two fronts. Virtualize your Netware servers on VMware & Virtualize the client access to the finance app through Citrix. Forget the logistics and hardware layout for a moment. All I'm proposing is that when you control the backend Netware unbundled from the existing hardware, and you control the client access to the applications via citris, you can stop dealing with distributed Windows desktop configs. Q:"My Desktop can't access the finance app!" A:"Log on to citrix. It works there!" When you wall off the legacy apps and control access to them on both sides, you have the power to do something like slice off one of those netware volumes, move it to a Windows share, and repoint your citrix servers to it.

      I hope it's that simple, but it's probably not. I'm willing to bet there's a lot of desktop Win32's out there accessing the Novell servers as well, and you'll have to figure out how to deal with those when you move the data somewhere, and your various apps might have internal pointers to particular shares with Novell UNCs or whatever they call those vol:folder\ things.

  19. We do this now by sanjacguy · · Score: 1

    We have a small citrix farm, with 4 real servers running the software, and one VMWare virtual server on another computer. As we only have 150 employees, load balancing isn't necessary. We've found that this will work with the version of Citrix we use (Metaframe Server XP) and the free beta VMWare. However, you will see significant performance degredation on users on the VM machine. This probably comes from VMWare running on top of the OS in the beta release. When you get the full paid for version of VMWare, it's my understanding the system will run in between the OS and the hardware, so performance should increase. Only problem is, I'd like to see if it would be feasible to actually run a regular version of VMWare to see if it's worth it. What we have found is that having a 'fail-over Citrix Server' never hurts. We're currently getting an off site location up and running for fail over purposes, and plan to run failover VMWare citrix servers up there off one or two machines. If your options are having a enterprise critical resource run slow or not run at all, better to have it run slow on a virtual machine when your IT HQ connection goes down. As always, YMMV. One point though that I've seen - Citrix isn't a virutal machine. It's allowing multiple users on a single machine. Only difference between it and Windows XP is that windows XP machines will lock out the current user. If you put a shortcut in the C:\documents and settings\all users\desktop folder, it'll show up on the desktop of everyone who logs into the computer, whether connecting via citrix or using the console to log in directly. It's a remote user set up.

  20. Layer 7+ would help. by jd · · Score: 1
    At the moment, it's impossible to identify Citrix streams except in the generic sense of being Citrix. And even then, documentation is inconsistant. (TCP port 1494 is well-known, but there are also vague references to UDP port 1604, but what this does seems to be unknown.)


    Why is this important? Because Citrix is a network hog. Running multiple Citrix instances via VMWare is going to seriously kill the network card - if not the network - unless you can isolate the traffic of greatest interest. Since these are different instances, you can't even rely on the built-in Citrix controls to give meaningful information or bounds.


    At present, Linux' netfilter is capable of tagging by the contents of the payload, but I have been unable to find any work on how to use this to get the best from Citrix. The only information I have found was a program for finding what Citrix apps were being published - and that was under a security advisory! You'd have thought something like that would be circulated as a utility, but noooooo...


    Has anyone here done much with QoS'ing Citrix or analyzing their protocols?

    --
    It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
    1. Re:Layer 7+ would help. by Dysfnctnl85 · · Score: 1

      First of all, Citrix maybe uses 200k/s bursts and uses on average 18-20k/s. But, the VMWare servers will have 4 NICs anyways, so even if it WAS an issue, it's not. But it isn't. So yeah.

    2. Re:Layer 7+ would help. by narf · · Score: 2, Informative

      Port 1604 is unknown? Hardly. It's the older-style ICA browsing service, used by the Citrix ICA client to find server and application lists. Modern Citrix deployments should be at least using HTTP or Secure Gateway instead of using the UDP browsing (which can be very unreliable ... imagine that).

      And I can attest that at least one commercial product (PacketShaper by Packeteer) can identify individual published applications and apply shaping policies accordingly.

      And a network hog? ICA is a pretty dang light protocol. It's fairly sensative to latency and packet loss, but calling it a bandwidth hog isn't really fair or correct. We serve about 270 concurrent Citrix sessions, and it consumes (on average) about 1MBps of bandwidth, rarely spiking over 2MBps.

      There's plenty I don't like about Citrix MetaFrame, but managability sure isn't one of them. Unless you're talking about the CMC. That fucker can go to hell.

  21. Novell client? by Anonymous Coward · · Score: 0

    If you're just looking for a Novell client, isn't the MS Client for Netware provided for x64 platforms? Of course, it would run IPX only and you'd probably need to adjust your search drive mappings as it behaves differently than Novell's.

  22. You are the weakest link. by Anonymous Coward · · Score: 0

    ...Goodbye!

  23. Re:Is Netware needed? - WTF??????? by Anonymous Coward · · Score: 0

    You know, usually I just ignore crap on here...but your post is waaaaay over the top.

    My first reaction was you were trolling for laughs. I guess I'm the only one who thinks that the typical 'when all you have is a hammer, everything looks like a nail' response is hilarious.

    Your response is so generic, that it's laughable.

    Ah yes...so you want to . That's a pretty good choice.
    Definately start to switch your entire infrastructure, (which you've had no problems with), to something that I've heard about. (Though you've made no indication that you're a web-developer at all) when your company asks you to create a web portal, is a good ally to have.

    eh...why bother?