CloudBridge Virtual WAN 9.0.0 Release Notes These release notes describe the enhancements and known issues in Citrix CloudBridge SDWAN software release 9.0. Page 1
Copyright and Trademark Notice CITRIX SYSTEMS, INC., 2016. ALL RIGHTS RESERVED. NO PART OF THIS DOCUMENT MAY BE REPRODUCED OR TRANSMITTED IN ANY FORM OR BY ANY MEANS OR USED TO MAKE DERIVATIVE WORK (SUCH AS TRANSLATION, TRANSFORMATION, OR ADAPTATION) WITHOUT THE EXPRESS WRITTEN PERMISSION OF CITRIX SYSTEMS, INC. Citrix, Citrix Systems, CloudBridge, Citrix Repeater, Branch Repeater, WANScaler, NetScaler, XenServer, Orbital Data, Orbital 5500, Orbital 6500, Orbital 6800, TotalTransport, AutoOptimizer Engine, and Adaptive Rate Control are trademarks of Citrix Systems. Citrix Systems assumes no responsibility for errors in this document, and retains the right to make changes at any time, without notice. Portions licensed under the Apache License, Version 2.0 http://www.apache.org/licenses/license-2.0. Portions licensed under the Gnu Public License, http://www.gnu.org/copyleft/gpl.html, including xmlrpc++, glibc, rpmlibs, beecrypt, Wireshark. Portions licensed under the Gnu Public License with product-specific clauses, including the Linux kernel (http://www.kernel.org/pub/linux/kernel/copying), libstdc++, and libgcc. Portions are free software with vendor-specific licensing, including zlib (http://www.gzip.org/zlib/zlib_license.html), netsnmp (http://www.netsnmp.org/about/license.html), openssl (http://www.openssl.org/source/license.html), krb5- libs (http:/ /web.mit.edu/kerberos/krb5-1.3/krb5-1.3.6/doc/krb5-install.html), tcp_wrappers (ftp://ftp.porcupine.org/pub/ security/tcp_wrappers_license), bzip2-libs (http:// sources.redhat.com/bzip2/), popt (http://directory.fsf.org/libs/ COPYING.DOC). Elfutils-libelf is licensed under the OSL 1.0 license, http://www.opensource.org JPGraph licensed under the terms given in http://www.aditus.nu/jpgraph/ proversion.php. LZS licensed from Hifn corporation, http://www.hifn.com. Iperf licensed under the terms given in http://dast.nlanr.net/projects/iperf/ ui_license.html. This product includes PHP, freely available from http://www.php.net/. Page 2
Contents Contents... 3 What's New in Release 9.0.0... 4 Limitations... 5 Known Issues in 9.0.0... 6 Licensing... 6 Install & Configuration Guide... 7 Upgrade procedure from CloudBridge 8.1.0 to 9.0.0... 7 1. Upgrade 8.1.0 appliances with working VW Configuration... 8 2. Upgrade 8.1.0 new appliances with factory shipped 8.1.0... 9 Compatibility... 10 Supported CloudBridge Virtual WAN Models... 10 Supported Browsers... 10 Software Packages for the CloudBridge Virtual WAN... 11 Virtual WAN Software (Only)... 11 Virtual WAN Center (Centeralized Management System)... 11 System Upgrade Bundle... 11 CloudBridge Virtual WAN VM OS Upgrade... 11 Page 3
CloudBridge Virtual WAN These release notes describe the Citrix CloudBridge 9.0.0 software release which is focused on the Virtual WAN Standard Edition and Virtual WAN Enterprise Edition. The CloudBridge Virtual WAN software aggregates the bandwidth of multiple WAN links. Each packet is routed to the most appropriate WAN link based on real-time network conditions and the application requirement. The Virtual WAN software is fault tolerant and can intelligently route traffic around degraded or failed WAN links in sub-second timeframes to preserve user productivity. For latencysensitive traffic like VoIP and XenApp, the Virtual WAN can deliver a higher end user experience by duplicating packets across WAN links to preserve session quality in the face of high packet loss or failed links. Traffic is secured through optional 256-bit AES encryption to preserve data privacy. All hardware appliances are equipped with fail-to-wire interfaces to allow pass-through of traffic in the event of hardware failure. These appliances can also be deployed in a high availability configuration for maximum uptime. With the CloudBridge 9.0.0 software release Citrix is introducing the Enterprise Edition for the branch, combines Virtual WAN and WAN Optimization technologies together in one product. In addition, the 9.0.0 software release supports a new high end Virtual WAN appliance, the CloudBridge 5100-VW. For more information about the CloudBridge Virtual WAN and CloudBridge Enterprise Edition, see the CloudBridge Virtual WAN Administration Guide. What's New in Release 9.0.0 In addition to introducing the Enterprise Edition, CloudBridge Release 9.0.0 includes many new features and substantial improvements for Virtual WAN Edition. 1. WAN Optimization. This feature is available only on CloudBridge 1000 and CloudBridge 2000 appliances with the Enterprise Edition. It provides: ICA Optimization Supports the high-quality delivery of Apps and Desktops with Citrix XenApp amd XenDesktop CIFS/SMB2/SMB3/MAPI Acceleration Accelerates file- and email-based operations based on Microsoft protocols and applications including the Microsoft Office suite TCP Flow Control Page 4
TCP flow control and congestion management optimization to accelerate WAN traffic Fast Recovery from lossy transmission situations Application Visibility Export of AppFlow records for application insights through Citrix NetScaler Insight Center 2. New high-end CloudBridge-5100 platform supporting Virtual WAN Edition. 3. Metered Links, which enable: Usage based Alerting Email alerts on reaching or exceeding user defined byte count thresholds Link of Last Resort Use designated links only when other non-metered links are down or degraded Reduced Overhead Conserve bandwidth by lowering path quality assessment frequency 4. IPSec tunneling for Virtual Paths, with the following benefits: Use of well known, widely adopted encryption protocols to secure virtual path traffic Packet level confidentiality and authentication Resilient IPSec Tunneling to prevent the need for tunnel reinitiation as long as one WAN link is up 5. Path State Configurability (Virtual WAN & Enterprise Edition) ), offering new options for configuring the sensitivity of the state of a WAN link 6. LAN-side GRE tunnels to facilitate deployments of CloudBridge virtual appliances for AWS 7. Forward SSH authentication notices to a remote syslog server when syslog is enabled 8. More detailed information on why path state has transitioned from GOOD to BAD 9. User-generated SSL certificates on appliances. Users can now upload SSL certificates for the appliance s IP address (signed by the appropriate Certificate Authority) through the GUI. 10. Private MPLS WAN Link definition that allows users to define MPLS queues for a single WAN Link, eliminating the need to create a separate WAN Link, with its own Virtual IP (VIP) address, for each MPLS queue. This capability is included in both the Virtual WAN & Enterprise Edition. Limitations Enterprise Edition appliances are designed for branch-side deployment only. Enterprise Edition appliances cannot be joined to Active Directory Domains. To accelerate file or Microsoft Exchange servers in a branch, a standalone WAN Optimization deployment is required. Secure peering, needed for WAN optimization of signed SMB or encrypted MAPI traffic. This is only supported on data path IPs and will not work over the management IPs. Page 5
Automatic Secure peering of an Enterprise Edition appliance from a standalone WAN Optimization appliance requires that the datacenter side WAN Optimization appliance is running release 7.4.x or later. Virtual WAN Enterprise Edition does not support WAN optimization of SSL traffic. Known Issues in 9.0.0 Issue ID 621692: After you run and complete the 'Change Management' process for the first time, the active package is not shown. Click again on Activate Staged to complete the activation process. Issue ID 636110: During change management for changing an IPsec profile from IPSEC AES-256/SHA-256 to AES-128/SHA1 in a multi-site (over 100) network, the UI shows the message Unable to obtain system data because the system is busy. Click Refresh on your browser to retry. Change management process is completed and functional after a few minutes. Issue ID 608355 : When XEN private networks are used for CloudBridge VW VPX along with CloudBridge WAN Optimization VPX, the Checksum.SendForceSW parameter available through support.html page on WAN Opt UI must be turned off. Issue ID 580103: In Virtual WAN Center, events raised for WAN PATH objects are visible in the Event Viewer, but are not available for email or syslog notifications. Issue ID 637155: A Disk usage for the active OS partition is at n% message appears when multiple attempts are made to upload a single bundle (upg) package during the upgrade process is still in progress. The recommended workaround is to wait about 20 minutes for the upgrade process to complete. Licensing CloudBridge 8.x introduced a new set of licenses specific to the Virtual WAN solution. Earlier CloudBridge licenses, including those compatible with release 7.x, are not supported with the CloudBridge Virtual WAN release. The existing process to obtain CloudBridge licenses remains consistent with the CloudBridge 8.0.x release. Once obtained, the licenses can be consumed and activated through the appliance s web interface. The following table lists all the licenses that support the CloudBridge 9.0.0 release: S.No Platform Edition License Model 1 Virtual WAN VPX V10VW V20VW V50VW V100VW 2 Virtual WAN 400 400VW-010 400VW-020 400VW-050 3 Virtual WAN 1000 1000VW-020 Page 6
Enterprise 1000 Virtual WAN 2000 4 Enterprise 2000 5 Virtual WAN 4000 6 Virtual WAN 5100 1000VW-050 1000VW-100 1000EE-020 1000EE-050 1000EE-100 2000VW-100 2000VW-200 2000EE-100 2000EE-200 2000EE-250 4000VW-300 4000VW-500 4000VW-1000 4000VW-2000 5100VW-1000 5100VW-2000 5100VW-3000 VPX models allows 10, 20, 50 and 100 Mbps bandwidth licenses. At least two 2.1 Ghz CPUs are required in order to support the VPX instances. Install & Configuration Guide Please refer to the CloudBridge Virtual WAN Administration Guide for more details related to the supported appliance models, features and configuration aspects of the Citrix Virtual WAN solution. CloudBridge WAN Optimization appliance on data center side should be running with 7.4.4 build, for secure peering functionality to work with VW-EE appliance. DHCP Server should be configured in your network for Virtual WAN Center, to acquire an IP address. NTP and Date/Time should be synced properly across VW MCN and VW Center. Upgrade procedure from CloudBridge 8.1.0 to 9.0.0 There are two main scenarios 1. Upgrade existing appliances with working VW Configuration 2. Upgrade new appliances with factory shipped 8.1.0 Appliances shipped with 8.0.x image are not supported to upgrade to enterprise edition. Page 7
1. Upgrade 8.1.0 appliances with working VW Configuration Pre-requisites: 1. To change existing appliance to Enterprise Edition (CB1000-EE or CB2000-EE), appliances are required to have 8.1.0 as a base image. 2. Have a working VW configuration (Virtual paths are already established from MCN to branch sites) Upgrade Steps: 1. Branch Site: On the branch site Virtual WAN appliance, use Single bundle upgrade package (CB-VW-PKG -9.0.0.319.UPG) a. Navigate to Configuration > System Maintenance -> Update Software -> Update Operating System Software b. Click on the Choose File button and provide the CB-VW-PKG 9.0.0.319.UPG file c. Click on Upload and Upgrade d. Allow the appliance approximately 20 minutes to run through the upgrade procedure Do not unplug the appliance during this process. Run a continuous ping to the management IP to identify when the box has completed the upgrade process. When the management IP becomes responsive, you can refresh the browser. Note: VW VPX configured as branch site does not require Single bundle upgrade. 2. MCN: On the MCN Virtual WAN appliance, use Single bundle upgrade package (CB-VW-PKG -9.0.0.319.UPG) e. Navigate to Configuration > System Maintenance -> Update Software -> Update Operating System Software f. Click on Choose File option to provide the CB-VW-PKG - 9.0.0.319.UPG file g. Click on Upload and Upgrade This step may take about 20 minutes to complete. Do not unplug the appliance during this process. Run a continuous ping to the management IP to identify when the box has completed the reboot. h. The UI should automatically redirect to the Change Preparation step of the Change Management process. i. Click on Overview (that is present in Change Management ) j. It would redirect the request to the VW UI, for admin login credentials k. In Change Preparation -> Click on Next l. Wait while the system is Preparing packages for transfer m. Once complete, in Appliance Staging -> Click on Stage Appliances n. In Activation -> Click on Activate Staged o. Then click Done Page 8
3. Verify the VW version changed to 9.0.0.319 (on both MCN and branch site) and the Virtual path is established. (It might take about a minutes, for the licenses to get activated). Refresh the browser, and validate for proper licensing, if you see any anomalies. Important Notes: 1. Warning banner that mentions about Disk Usage for Active OS Partition can be ignored 2. Intermittent SSO Session might be timed out, when accessing the WAN Optimization node Workaround: Please re-login and continue. 2. Upgrade 8.1.0 new appliances with factory shipped 8.1.0 1. Choose which device needs to be MCN. Promote the device as MCN (Configuration -> Appliance Settings - > Administrator Interface -> Miscellaneous -> Switch Console). Download applicable cb-vw_<appliance-model>_9.0.0.319.tar.gz file for the MCN device. Example: CloudBridge 1000 VW is chosen to be MCN. Download cb-vw_cb1000_9.0.0.319.tar.gz. Upgrade this appliance using the downloaded package above (System Maintenance -> Update Software -> Re-image Virtual WAN Appliance software -> Click on Browse option to provide the cb-vw_cb1000_9.0.0.319.tar.gz file - > Click on Upload ). Select Accept and Click on Install to proceed. 2. Create a new Virtual WAN Network Configuration file (using Configuration -> Virtual WAN -> Configuration Editor). Export the configuration to Change Management. Do not perform Change Management workflow in this step. 3. Perform single bundle update on this MCN device and all other devices. For non- MCN device if the appliance model is VPX, then skip this step. Download CB-VW-PKG-9.0.0.319.upg file. Install the downloaded upg file (System Maintenance -> Update Software -> Update Operating System Software ) on both MCN and non-mcn device. On non-mcn device, the Update software UI would show the status as Software Update Preparing for install Please wait for 20 Minutes. Do not unplug the appliance during this process. Run a continuous ping to the management IP to identify whether the box has completed rebooted (ping should fail initially and after 20 minutes, it should succeed). 4. Install VW license on the MCN device. 5. Perform MCN Change management After the installation completes, perform change management workflow on the MCN. Download active packages for all the VW devices. After you run and complete the 'Change Management' process for the first time, the active package is not shown. Click again on Activate Staged to complete the activation process. 6. Install the VW/VW-EE License on all non-mcn devices 7. For each non-mcn device, upload the corresponding packages that were downloaded in step 5 and perform local change management work flow. Page 9
8. Enable Virtual WAN Service on MCN and non-mcn devices. Compatibility The CloudBridge Virtual WAN release requires that all appliances on the Virtual WAN network have the same software release. Appliances running earlier CloudBridge software versions will not be able to establish a Virtual Path connection to the appliance running CloudBridge release 9.0.0. Supported CloudBridge Virtual WAN Models Citrix CloudBridge Virtual WAN 9.0.0 supports the following CloudBridge Virtual WAN appliance models: o CloudBridge 400 o CloudBridge 1000 o CloudBridge 2000 o CloudBridge 4000 o CloudBridge 5100 Citrix CloudBridge Enterprise Edition 9.0.0 supports the following CloudBridge appliance models: o CloudBridge 1000 o CloudBridge 2000 Following VPX platforms are supported in 9.0.0. o XenServer (6.5 SP1) o ESXi (5.5, 6.0) CB-VW VPX models can be used on UCS-E blades using any of these VPX platforms. Supported Browsers The CloudBridge 9.0.0 release supports the following browsers and versions: o o o Microsoft Internet Explorer 10+ (Recommeded version 11.x) Mozilla Firefox 35.0+ (Recommeded version 43.x) Google Chrome 40.0+ (Recommeded version 49.x) Supported browsers must have cookies enabled, and JavaScript installed and enabled. Page 10
Software Packages for the CloudBridge Virtual WAN The release has three sets of files: the CloudBridge Virtual WAN software, the CloudBridge Virtual WAN upgrade bundle, and the CloudBridge Virtual WAN virtual machine. Appliances are shipped from the factory with release 8.1.0 pre-installed. To upgrade them to release 9.0.0 using the single bundle or software packages. On a CloudBridge 1000 or 2000 appliance, the software edition (Virtual WAN standard or Enterprise Edition) is determined by the license that is on the appliance when the software is installed. Virtual WAN Software (Only) CloudBridge 400-VW CloudBridge 1000-VW CloudBridge 2000-VW CloudBridge 4000-VW CloudBridge 5100-VW CloudBridge VPX-VW cb-vw_cb400_9.0.0.319.tar.gz cb-vw_cb1000_9.0.0.319.tar.gz cb-vw_cb2000_9.0.0.319.tar.gz cb-vw_cb4000_9.0.0.319.tar.gz cb-vw_cb5100_9.0.0.319.tar.gz cb-vw_cbvpx_9.0.0.319.tar.gz Virtual WAN Center (Centeralized Management System) CloudBridge VWC cb-vwc_9.0.0.319-vmware.ova System Upgrade Bundle This package updates all the virtual machines in the system except the Virtual WAN virtual machine. The same upgrade bundle is used for all CloudBridge VW models: CB-VW-PKG-9.0.0.319.upg CloudBridge Virtual WAN VM OS Upgrade This partition update is used for all CloudBridge VW models: cb-vw_sdx-9.0.0.319_os_partition_update_45.img Page 11