App Orchestratin 2.6 Terminlgy in App Orchestratin 2.6 Last Updated: July 8, 2015 Page 1
Terminlgy Cntents Elements f App Orchestratin... 3 Dmains... 3 Multi-Datacenter Deplyments... 4 Delivery Sites... 4 Prvisining... 5 Tenancy and Offerings... 7 Islatin Methds... 7 Page 2
Terminlgy This dcument intrduces key cncepts and terminlgy fr App Orchestratin. Elements f App Orchestratin App Orchestratin prvides unified management f Citrix applicatin and desktp delivery technlgies in a multi-tenant envirnment, using multiple datacenters acrss multiple dmains. Terms used with this cncept: Prduct media flder The prduct media flder is part f the App Orchestratin DVD layut, and hsts the sftware fr App Orchestratin and any related prducts that yu have dwnladed and cpied int the flder. In App Orchestratin 2.6, the prduct media flder can be lcal t all machines, a prtable drive, a netwrk share f any kind, r any ther lcatin that is visible t all f yur machines. Citrix App Orchestratin Install Center The tl that installs App Orchestratin and related cmpnents frm the prduct media flder. App Orchestratin cnfiguratin server The App Orchestratin cnfiguratin server hsts the App Orchestratin engine and its web-based management cnsle. Machine Creatin Services (MCS) and an agent reside n the cnfiguratin server fr creating and managing virtual machines (VMs) in the virtualizatin infrastructure when yu use n-demand prvisining. App Orchestratin database server A server hsting the App Orchestratin cnfiguratin and lgging databases. In App Orchestratin, a cnfiguratin database crrespnds t each service deplyment, and the names f the database and service deplyment must match. During App Orchestratin cnfiguratin, if yu specify a service deplyment name that des nt exist n the database server, a cnfiguratin database f the same name is autmatically created. App Orchestratin web management cnsle A web cnsle used t manage App Orchestratin activities and mnitr the assciated wrkflws, such as creating Delivery Sites r adding Sessin Machines. Orchestratin service accunt The service accunt used by App Orchestratin fr such administrative tasks as accessing the App Orchestratin cnfiguratin database r lking up users and grups in the user dmain. App Orchestratin dmain agent An agent yu install n all dmains that are islated frm the App Orchestratin cnfiguratin server, t enable them t cmmunicate with App Orchestratin. Dmains A dmain cntains machines hsting tenants resurces, users, r bth. App Orchestratin supprts shared and private dmains, as well as multiple dmains acrss multiple frests. Terms used with this cncept: Shared resurce dmain A shared resurce dmain cntains machines that hst resurces fr multiple tenants. The default resurce dmain in App Orchestratin cnfiguratin is a shared resurce dmain cntaining the rt Active Directry Organizatin Unit (OU) where the cnfiguratin server and all Page 3
Terminlgy resurces that will be shared amng multiple tenants reside. If a dmain is assigned t a single tenant, it becmes a private resurce dmain. Private resurce dmain A private resurce dmain cntains machines hsting resurces fr a single tenant. Default user dmain - The default user dmain cntains App Orchestratin user accunts (such as the user accunt designated as the rchestratin service accunt) and any user accunts fr tenants using shared resurces. This can be the same as the shared resurce dmain, r yu can specify a different dmain. Multi-Datacenter Deplyments Multi-datacenter deplyments are used t supprt distributed gegraphic regins and fr failver. Terms used with this cncept: Datacenter A lgical cntainer fr Delivery Cntrllers, Sessin Machines, Delivery Sites, StreFrnt Server Grups, and cmpute resurces. Use a datacenter t represent resurces that have a lw latency, high bandwidth netwrk cnnectin. Typically, a datacenter cntains resurces in the same gegraphic lcatin, and multiple datacenters are cnnected by a WAN. Datacenter affinity The prcess f cnnecting users t datacenters thrugh their membership in user grups. Lcatin Grup - An Active Directry security grup. In App Orchestratin, these grups create cnnectins between users and datacenters. Based n the datacenter affinity f the user grup, a tenant s users can get applicatins and desktps frm different datacenters. Subscriptin grup A set f Active Directry security user grups that are members f a parent Lcatin Grup, and subdivide users accrding t the fferings they need. When yu create a subscriptin, yu specify which Active Directry grups can access that ffering. Fr mre infrmatin, refer t the dcument Deplying a Multi-Datacenter Envirnment in App Orchestratin 2.6. Delivery Sites Delivery Sites (XenDesktp sites r XenApp farms) prvisin desktps and applicatins t users thrugh App Orchestratin. Terms used with this cncept: Delivery cntrller A server-side cmpnent that is respnsible fr distributing desktps and applicatins t users, managing user access thrugh plicies, pwer managing desktps, and cntrlling rebt cycles fr servers. Delivery Site Tw r mre identically cnfigured Delivery Cntrllers plus the Sessin Machines, Delivery Grups, and ther cmpnents that deliver hsted applicatins and desktps t tenants and their users. Delivery Sites can be private r shared by multiple tenants. Page 4
Terminlgy Sessin Machine A virtual r physical machine that hsts desktp and applicatin sessins. It is the machine t which the user cnnects. Sessin Machine Catalg Cllectin f identically cnfigured virtual r physical machines that hst applicatins and desktps fr tenants users t access thrugh StreFrnt. Typically, the machines in a particular catalg are cnfigured using the same master image. When a machine is needed, App Orchestratin randmly selects ne frm the catalg. Single-user catalg A cllectin f Sessin Machines fr assigning t individual users. Users can persnalize the desktp, and install applicatins. The desktp envirnment remains unchanged between sessins, keeping the user s persnalized settings. Sessin Machines in this catalg typically run supprted versins f the Micrsft Windws perating system; hwever, App Orchestratin als prvides the ability fr yu t cnfigure a single-user desktp based n a supprted versin f Windws Server OS, as explained in the dcument Cnfiguring Enhanced Desktp Experience fr XenApp and XenDesktp in App Orchestratin 2.6. A Desktp OS catalg in XenDesktp crrespnds t a single-user catalg in App Orchestratin. Multi-user catalg A cllectin f Sessin Machines shared by a large number f users. Multi-user catalgs are designed t deply a set f standard desktps and applicatins t multiple users. Desktps and applicatins are allcated t users n a first-cme, first-serve basis. The desktp envirnment autmatically resets t the default cnfiguratin when users lg ff. Sessin Machines in this catalg run supprted versins f Windws Server. A Server OS catalg in XenDesktp typically crrespnds t a multi-user catalg in App Orchestratin. Prvisining App Orchestratin 2.6 can autmatically prvisin Sessin Machines n-demand, r yu can imprt externally created Sessin Machines int App Orchestratin. Terms used with this cncept: Cmpute resurces Prvide the virtualizatin infrastructure t autmatically prepare Sessin Machines n-demand. Cmpute resurces include Citrix CludPlatfrm, Citrix XenServer, Micrsft System Center Virtual Machine Manager, Micrsft Hyper-V, and VMware VSphere. External prvisining Machines yu create utside f App Orchestratin, with technlgies such as Citrix Prvisining Services r third-party prducts. When creating Sessin Machine Catalgs, yu can imprt these externally prvisined machines. On-demand prvisining (frmerly integrated prvisining) The facility in App Orchestratin that uses Machine Creatin Services (MCS) t autmatically prvisin Sessin Machines frm a Sessin Machine Catalg. Machine Creatin Services (MCS) A set f services that create VMs frm a master image n demand, ptimizing strage utilizatin and prviding a pristine virtual machine t users every time they lg n. Machine Creatin Services is fully integrated and administrated in Citrix Studi. Prvisining Services (PvS) A Citrix service that allws yu t create virtual r physical instances f desktp r server machines, which yu can imprt int App Orchestratin. Page 5
Terminlgy Instance cnfiguratin - Settings used t prvisin virtual machines. Page 6
Terminlgy Tenancy and Offerings XenDesktp and XenApp 7.6 integrate the clud service prvider cncept f tenancy, and use App Orchestratin t supprt multi-tenant envirnments. All, part, r nne f the envirnment can be in the clud. Terms used with this cncept: Tenant A tenant is the custmer f a service prvider. Tenants cntract with the prvider fr services such as clud infrastructure and hsted desktps & applicatins. Tenants subscribe t the fferings yu prvide thrugh XenDesktp r XenApp s they can make thse fferings available t their users. Offering A cntainer that helps service prviders define a set f applicatins, desktps, and resurces t prvide t tenants. Typically, an ffering is a hsted applicatin r desktp; hwever an ffering can cntain a single item, multiple items, r even ther fferings. Fr example, ne ffering might prvide a starter kit fr new emplyees, cntaining a desktp precnfigured with email, an editing applicatin, a spreadsheet applicatin, and a netwrk strage lcatin. Anther ffering might prvide the same spreadsheet applicatin by itself. Yu can design fferings fr cnsumptin by multiple tenants r by a single tenant. Offerings are designed fr the tenant s users t select as needed frm an applicatin stre. Subscriptin An assciatin between an ffering, a grup f users belnging t a tenant, and a cllectin f machines that hst a specific desktp r applicatin. Capacity The number f Sessin Machines that are allcated t fferings and the tenants wh access them. Yu can adjust capacity as needed t hst mre r fewer users r fferings. Aggregatin Aggregatin imprves and simplifies the user experience by presenting a single icn fr a hsted applicatin that in reality has multiple instances available in the stre, frm multiple Delivery Sites. Instead f cnfusing the user by presenting all instances f the applicatin individually, the display is aggregated int a single icn. Islatin Methds App Orchestratin prvides 4 methds fr islating tenants and resurces: Netwrk islatin - Allws an administratr t islate machines and their traffic t specific netwrks, such as a private netwrk dedicated t a specific tenant. Offering islatin (frmerly Delivery Grup islatin) - Allws an administratr t chse hw the Delivery Sites and Sessin Machines will be islated when a subscriptin is made t the ffering and a Delivery Grup is created. StreFrnt islatin - Allws an administratr t specify whether a tenant s users will access their fferings thrugh a shared r private stre, and using a shared r private StreFrnt Server Grup. NetScaler Gateway islatin - Allws an administratr t assign a specific set f NetScaler Gateway devices t a tenant. Fr mre details, refer t the dcument Islatin Methds in App Orchestratin 2.6. Page 7
Terminlgy Terms used with this cncept: Management netwrk A grup f cmpnents that cmmunicate t manage yur deplyment, including Delivery Cntrllers, Delivery Sites, Sessin Machines, and virtualizatin infrastructure. Shared cntrller management netwrk Cntains the shared Delivery Site, and is defined during the initial cnfiguratin f App Orchestratin. Shared Delivery Grup management netwrk Cntains the shared Sessin Machines, and is defined during the initial cnfiguratin f App Orchestratin. Private management netwrk Cntains private Sessin Machines, private Delivery Sites, and private StreFrnt server grups. This netwrk is dedicated t a single tenant, allwing the tenant t have the highest level f netwrk islatin and security. Delivery Grup A cntainer fr ne r mre machines used t deliver applicatins and desktps t a specific grup f users. A Delivery Grup is assciated with a specific Delivery Site and can be shared amng tenants r dedicated t a specific tenant, accrding t the islatin level f the subscriptins it is hsting. Shared Delivery Grup A Delivery Grup cntaining Delivery Cntrllers and Sessin Machines that are shared amng multiple tenants. The shared Delivery Site is cnnected t the shared cntrller management netwrk, and the shared Sessin Machines are cnnected t the shared Delivery Grup management netwrk. When a subscriptin is made t the ffering, hsted applicatins and desktps run n machines that serve the users f multiple tenants, and a shared Delivery Site brkers the cnnectins fr their users. This level f islatin is apprpriate fr tenants wh d nt require private machines. Private Delivery Grup A Delivery Grup cntaining Sessin Machines that are allcated nly t the subscribing tenant, but Delivery Cntrllers that are shared with ther tenants. The shared Delivery Sites are cnnected t the shared Delivery Cntrller management netwrk, while the private Sessin Machines are cnnected t the tenant s private management netwrk, r t the shared Delivery Grup management netwrk if the tenant has n private management netwrk. When a subscriptin is made t the ffering, hsted applicatins and desktps run n machines that nly the tenant s users can access, but their cnnectins are brkered by a shared Delivery Site. This level f islatin is apprpriate fr tenants wh nly require their Sessin Machines t be private. Private Delivery Site A cmpletely islated Delivery Site dedicated exclusively t a single tenant. When a subscriptin is made t the ffering, hsted applicatins and desktps run n machines that nly the tenant s users can access, and their cnnectins are brkered by a dedicated private Delivery Site. Bth the Sessin Machines and the Delivery Site are cnnected t the tenant's private management netwrk. If a tenant subscribes t a private ffering but des nt have a private management netwrk, the subscriptin will use machines in the shared Delivery Grup management netwrk and dedicate thse machines t that tenant, and a Delivery Site n the shared cntrller management netwrk will als be dedicated t the tenant. This level f islatin is apprpriate fr tenants wh require bth their Sessin Machines and their Delivery Sites t be private. Page 8
Terminlgy StreFrnt StreFrnt authenticates users t sites hsting resurces, and manages stres f desktps and applicatins that users access thrugh Citrix Receiver. StreFrnt Server Grup A cllectin f tw r mre servers with the same versin f StreFrnt installed. At least tw StreFrnt servers (a primary and a backup) are required in a deplyment t add tenants and make fferings available t users. Servers with different StreFrnt versins cannt reside in the same server grup. Shared StreFrnt Site A shared StreFrnt server grup hsting StreFrnt sites that are shared by multiple tenants. The StreFrnt server grup is cnnected t the shared cntrller management netwrk, and users frm multiple tenants lg n t StreFrnt using the same URL. This cnfiguratin is apprpriate fr tenants wh d nt require any frm f StreFrnt islatin within the datacenter. Private StreFrnt Site The StreFrnt server grup n the shared cntrller management netwrk is shared by multiple tenants, but hsts private StreFrnt sites that are each allcated t a single tenant. Each tenant s users lg n t a private StreFrnt site using a tenant-specific URL. This cnfiguratin is apprpriate fr tenants wh require an islated StreFrnt stre fr their users. Private StreFrnt Server Grup A cmpletely islated StreFrnt server grup dedicated exclusively t a single tenant. The tenant s users lg n t StreFrnt using a tenant-specific URL that pints t the tenant s private StreFrnt server grup n the tenant s private management netwrk, r if the tenant desn t have ne, n the shared cntrller management netwrk. Page 9