From Debug Club

NET20DC USB2.0 Debug Cable

 デバッグホスト(Windows Vista x86) デバッグターゲット(Windows Vista x86)間で
USB2.0経由でのカーネルアタッチができる

 [事前確認とお願い事項]
NET20DC USB2.0 Debug Cableを使用して、USB2.0にてVistaのカーネルデバッグを行うにはターゲット側に

以下の制約があります。事前に確認をさせていただければと存じます。

--
EHCI(Enhanced Host Controler Interface)をサポートしているUSB2.0のコントローラが必要。
Intel EHCIコントローラが実装されている場合には、port1上でのUSBカーネルデバッグをサポートしているとのことです。
http://www.microsoft.com/japan/whdc/connect/usb/USBFAQ_intermed.mspx
--

Intel ICH8 Family USB2 Enhance Host Controller - 2836のport 1上でカーネルアタッチできることを確認しております。
複数のEHCIコントローラが実装されている場合、EHCIコントローラのport1を確認する必要がございます。

 DDKサンプルプログラム(usbview.exe)

As the Cloud evolves, critical technology enhancements will also have to evolve to meet the challenge regarding mass delivery of applications or applications/software as a service.

In phase II, Enterprises will continue to expand the use of Cloud Computing through their own Private Clouds and the continuing extension of data centers to the larger cloud providers.  This will require Cloud providers to enhance their storage and application delivery models and provide a seamless provisioning scheme for both server farm management and end user subscriptions.  Citrix is aiding this evolution by providing a testing ground for service providers and enterprises alike to begin proof of concept work for Cloud integration.

During this phase, Tier 1 managed service providers (MSPs) will also enter the space using the Tier 2 MSPs as proving grounds through white label offerings.  Tier 2 MSPs will need the ability to provide multitenancy by managing multiple server farms both on premise and off.  Tier 2 MSPs will also have to grapple with the integration of back office billing to the large service provider Operations (OSS) and Billing (BSS) systems.

Deutsche Telekom through its Managed Services group, T-Systems, has already begun to develop this market approach.  Note that the Cloud will be used in this phase to continue expansive growth of existing data centers and not to displace them entirely either in the MSP or the Enterprise.  As with Phase I, the Cloud Bridge is the essential component to provide integration between the Cloud Center and Enterprise or MSP data centers.

NetScreen, NS-5GT

 TCP Syn-Check

http://www.cisco.com/web/about/ac123/ac147/archived_issues/ipj_9-4/syn_flooding_attacks.html \\

○NetScreenでのTCPのsyn-checkの設定手順の詳細

１．Telnetでnetscreenにログオン。
（ユーザ、パスワードはWebコンソールのログオンで使用しているもの）

２．ログオン後、以下コマンドを入力しEnterを押下。
有効にする場合
set flow tcp-syn-check

無効にする場合(現在はこの状態です。)
unset flow tcp-syn-check

３．２を実行後、設定を保存するために以下コマンドを入力しEnterを押下。
save

以上でtcpのsyn‐checkの設定を有効、無効に設定できます。
※この設定はWebコンソールからでは設定できませんので、
　ご注意ください。

○NetScreen上のセッションテーブルの情報を確認する場合

以下コマンドを入力すると確認できます。
get session

NetScreen上のセッションテーブルの情報を削除する場合は、
以下コマンドを入力すると確認できます。
clear session
 

> ------------------------------------------------------
> 通常TCPのセッションはSYN->SYN-ACK->ACKというフローで生成されます。
> SYN Check機能が有効な場合は、このフローに則ってSYN始まりでない新
> 規セッションは不正なものとみなし破棄します。
> このため、SYNでないものを不正に送りつけるようなアタックやネットワ
> ーク構成上の問題等に対するセキュリティとして有効です。
>
> NetScreenに関していうと、古いバージョンではデフォルト無効となって
> ましたが、OS5.1よりデフォルト有効となりました。
> 但し、無効の状態からアップグレードした場合は既存の設定が引き継が
> れます。
>
> 現状、FWとしてはデフォルト有効な機器が多いかと思いますが、一般的
> なルータではデフォルト無効かと思います。
> ------------------------------------------------------
>

Juniperの技術情報
http://kb.juniper.net/index?page=content&id=KB4444&actp=LIST
 

同じ質問が多いので、参考にしてください。

[現象]

仮想デスクトップ上のIEで以下のURLを表示すると、Webブラウザがチラツクといった現象が発生しました。

[解決方法]

 マイクロソフト社の技術情報に次のものがございますので、参考にしていただければと存じます。

ターミナル サービス クライアント セッションで、アニメーション コンテンツを
含む Web ページを Internet Explorer で表示すると画面がちらつくことがある
 http://support.microsoft.com/kb/271246\\

個人的には、他に回避策がないのか？と思ったりもしますが、

さらに個人的にActiveXが。。。なもので

NSのPlugin派でした、、、すみません。

Is that using .net 3.5 wpa extensions?　- Not sure for me...

Citrix has been holding a series of webinars called the "VDI Expert Series".

At the beginning of June we hosted a VDI Expert Series Webinar featuring two XenDesktop Customers: Todd Ericson of First Flight Financial Credit Union and Michael Love of Borland-Groover Clinic. You can view a recording of the webinar on-demand here. During the webinar we had many more questions than we could answer. Todd and Michael generously offered to answer as many of these questions as they could offline. Here are the results:

Questions & Answers:

Q: What kind of hardware are you running your XenDesktop VDI's on and how many instances are you running on that hardware?

FFFCU: We are running Sunfire x2200's (AMD) and Supermicro (Intel). All our machines are dual-socket and quad-core.

BGC: Our Hypervisors are utilizing dual quad core AMD CPUs with 64 GB of RAM; scalable to 128 GB of RAM. WE run 30-35 VMs per Hypervisor.

Q: Have you found thin clients a viable option for Desktop Steaming?

FFFCU: Yes, Thin Clients are viable for use as a streamed desktop.

Q: How many XP VMs are you running per host?

FFFCU: 25-50 Virtual Desktops per host

BGC: We have two XenServer pools. One pool hosts virtualized servers. The second pool hosts virtualized desktops only.

Q: Can XenApp streaming app support high resolution on VDI at (1900X1200)?

FFFCU: Yes, and it can do multiple monitors as well.

Citrix Note: Our HDX technologies continue to include many enhancements to ensure a high-definition user experience - screen resolutions and multiple monitor support are just some of the areas we continue to develop.

Q: Please talk about Storage optimization and how it optimizes the use of storage for individual desktops?

FFFCU: Provisioned Desktops only use one disk worth of space per type of image, no matter how many machines run from it.

Q: Do you allow your VM's to run for the user continuously or force an idle timeout?

FFFCU: Both methods work. We do not use idle timers but we reboot all workstations at least once per week.

BGC: We force reboots of VMs on a weekly basis. This is to ensure users receive the most up-to-date image.

Q: Do you need separate desktop pools for images that differ only by RAM size?

FFFCU: Yes and no - Yes you need different provisioning pools but they can both use the same disk image.

Q: Do you shutdown VM's when user logs off, and if so, how long does a connection request take if spinning up the VM. Also, do you use unique SID in AD for each VM?

FFFCU: The DDC handles all of the AD SID issues.

BGC: We do force shutdowns when a user logs off. Depending upon the idle pool count requirements another VM may spin up in its place. The idle pool count determines how many VMs you have waiting for a connection. If no idle VMs are available then the connection attempt will take substantially longer as the VM must boot up from a cold state (POST). VMs are created through Provisioning Server, which takes care of creating unique SIDs.

Q: Does any one have experience with the performance while running PACS in a medical environment?

BGC: Not yet, though we do run PACS software, which we'll be utilizing shortly in XenDesktop.

Citrix Note: We have many customers running PACS on XenApp with excellent results and early POCs with XenDesktop have shown exemplary results for a variety of users across various networks.

Q: For credit unions using Symitar, hostnames of the PC's dictate what resources should be available to that PC - how has Todd Erickson been able to cater to that for his credit union?

FFFCU: This is Symitar specific - VDI works as long as the hostnames stay the same.

Q: For Borland-Groover, if you don't have Anti-Virus running on the virtual desktop how do you secure the gold image used to stream the virtual desktops?

BGC: We currently utilize AV on the virtual desktops. It has taken some tweaking as you don't want the AV performing full system scans. Prior to deploying AV on the VMs we ran a scan of the gold image before deploying.

Q: How do you patch the "thick" dedicated VM? Do you leave them running all the time?

FFFCU: Thick VM's are managed exactly like real PC's. If you leave them on you can push updates to them, if you turn them off you probably want them to pull the updates in. Both methods work.

Q: How effective do the virtual desktops work across a WAN? Can you centralize the XenDesktop servers to central datacenters?

FFFCU: Virtual desktops work best when centralized. The bandwidth requirements are exactly the same as for XenApp (so 5-10 users per 128K of bandwidth, depends on many factors).

BGC: Extremely effective. We provide XenDesktop access to over a dozen remote locations from North to South Florida. Our entire XenDesktop infrastructure (Delivery Controllers, Provisioning Servers, XenServers) are housed in a central datacenter. This is the benefit of using Provisioning Server to stream to XenServer.

Citrix Note: Citrix HDX includes a broad set of technologies designed to enable a high-definition user experience for virtual desktops and applications. HDX Broadcast optimizes the reliability and performance of hosted virtual desktops and applications in a VDI environment over any network, enabling high definition user experience when accessed on the corporate network or from outside the corporate network for remote desktop access.

Q: I am a bit confused about the "Master Image" portion, as well as "streaming". How does this take place so that machines have different names, making them recognizable by AD?

BGC: The master image is a single .vhd file stored on local or network storage. Provisioning Server is leveraged to create multiple AD accounts at a single time, each with unique names and SIDs. Provisioning Server is then able to stream each of those accounts to the hypervisor utilizing the master image.

Q: Mike, Can you comment on your experience with Dragon NaturallySpeaking in your XenDesktop environment?

BGC: Dragon works well for the most part. We've had one issue that we're still working on. Dragon requires two methods of training: user audio and mic audio. The user audio files are unique to the user and can be stored in the user's home drive, so the user only has to go through training once. The mic training, however, is unique to a combination of the microphone, user and computer. We are working through several possible solutions at the moment, including assigning particular VMs to physicians.

Q: To both, Are you running the AMD or the Intel processors, and for the Citrix group, what was the technical name or requirement for the processor to have?

FFFCU: We use both.

BGC: Our XenServers utilize AMD processors.

Q: What solutions do you have to use when you are managing remote users peripheral hardware and printers on customer's site?

FFFCU: Citrix Profile manager works well, but there are many other solutions. Look for XenApp printing solutions and they will work with XenDesktop.

Q: Using this virtualization with laptops, how is the users experience when not connected to the network? Is the user able to maintain their desktop and re-sync when returned to the network?

FFFCU: There is no way currently to check out a desktop. I hear this is coming but we have not seen it or been able to test it.

BGC: You can stream an operating system from Provisioning Server to a client using PXE, though the client is not able to disconnect from the network while continuing to work.               

Citrix Note: With the release of Citrix XenClient, a Type 1 hypervisor, you will be able to allow users to roam offline and still retain their corporate -based desktop image. This will allow them to re-sync when re-connected to their network.

Q: What EMR software was Borland-Groover using and did you notice that there were any issues with the EMR software or with any others using XenApp or any other Citrix solution?

BGC: We are utilizing Nextgen for EMR and EPM. It has worked well under XenApp and XenDesktop. The only issue we've had is the result of using 32 bit hardware and operating system for XenApp.

Q: What extra administration tools are required to leverage VMware instead of XenServer for pushing out your images? We currently use VMware for imaging and will probably keep that environment moving forward.

FFFCU: No extra tools are needed. XenDesktop supports both platforms with no issue.

Q: What is bandwidth requirement for XenDesktop VDI solution to work on WAN?

FFFCU: My experience is 5-10 users per 128K of bandwidth - many factors can impact that number.

Q: What is the maximum resolution supported?

FFFCU: I am using 1680x1050 dual monitors with no issue.

Q: What pros does XenDesktop have over VMware View; both are very similar.

FFFCU: Supports physical machines as well as a bunch of other features.

Citrix Note: Citrix XenDesktop excels versus VMware View in key categories:

-         Best end user experience (over both WAN and LAN),

-         Offers a complete enterprise-class solution without 3^rd party bolt-on requirements,

-         Field-proven single-image management,

-         An open architecture platform that doesn't lock you into a single VM infrastructure.

 For more details, please visit -->this webpage.

Q: What type of WAN connections are in place? Is latency a problem?

FFFCU: Wan speeds of 256K - T1 speeds - We do bandwidth shape our sites to insure a good user end experience.

BGC: Our remote offices have MPLS links ranging from 3Mbps to 4.5Mbps. Latency is not an issue for us.

Q: What version of CSG and WI do they use?

FFFCU: We use CSG 2000 and WI 5.

Q: With the non-volatile images is it possible to not use Ant-Virus software?

FFFCU: Yes - and this is probably going to end up being best practice.

BGC: It is possible and we weren't up until recently. We are currently testing Symantec Endpoint Protection concern being that it is still possible for a VM to become infected with malware, such as a self-propagating worm, that will remain resident until the user logs off.

Q: Is anybody running something like Cisco IP Communicator or softphone through their VDI or XenApp?

FFFCU: Yes - IP Communicator does work. Sometimes a bit tricky on the microphone

Q: How do you replicate images periodically to your DRP site? Any tool to automate this?

FFFCU: Depending on your back end storage solution, there are many options. There are also independent replication solutions that can be used. We do replicate all of the data offsite.

BGC: We aren't yet doing this, though the images are flat .vhd files, so even a basic Robocopy task would work.

Q: What are the best practice guidelines for apps/users VDI is NOT adequate for, e.g. apps which require a lot of (RAM/CPU) resources?

FFFCU: We use XenApp for all high demand apps. I imagine that there is always the option to use a local desktop

BGC: You can scale VMs, so giving a particular desktop group more RAM over another is possible. If you want to shy away from VDI completely yet still offer remote access you can install the XenDesktop Agent directly on the user's workstation.

Q: What version of Secure Gateway and Web Interface are you running with XenApp?

BGC: We are using Web Interface 5.1 with Citrix Access Gateways.

Q: How did you handle bloat in the user profiles?

FFFCU: Roaming profiles work OK and the new Citrix Profiles work well. Best thing you can do is redirect all of the main items to the users' home share; this usually solves the profile issue.

BGC: We use a combination of profile redirection and Citrix's Profile Manager. With profile redirection we can point Desktop items, Internet Favorites, My Documents and Application data to the user's home drive. With Profile Manager we can better control what folders within a user's profile are propagated to the network upon logoff.

Q: Are you using Provisioning Server and virtual disks?

FFFCU: Yes

BGC: We are using Provisioning Server to stream VMs from a single .vhd file.

I thought I would share some useful links that I tend to end up emailing around. Also a couple links to a some really useful tools for User Profile Manager (brought to you by our friends at Sepago).

First is a migration tool that enables customers to migrate from the sepagoPROFILE profile format to User Profile Manager v2 format. It also lets customers migrate from the Tech Preview version of User Profile Manager (as both the Tech Preview and sepagoPROFILE releases were based on a mandatory profile). Details and the tool are here: http://blogs.sepago.de/tools/category/citrix-user-profile-manager-migration-tool/

Next is a tool that helps prune your profiles of old or unwanted data. One of the biggest challenges with Windows profiles is removing unwanted items. All those registry settings or APPDATA files after an application is removed or just no longer used. Or perhaps some settings were captured unintentially and now you want to get them out of all your users' profiles. Let me introduce you to the ProfileNurse (stop your smirking) – full details and the tool can be found here: http://blogs.sepago.de/tools/category/profilenurse/.

While ultimately we will like to see this capability as part of the product, for now this nice tool helps fill this gap. Available operations in ProfileNurse include:
*Creating and deleting registry keys and values
*Altering registry values
*Deleting files or folders
*Copying files or folders into user profiles

And here is the basket of other links I've found useful:

General
http://www.citrix.com/upm Main Page with links to downloads (downloads are actually under XD and XA product sections)
https://www.citrix.com/English/ss/downloads/results.asp?productID=186 XA download page (Under Components and Evals)
https://www.citrix.com/English/ss/downloads/results.asp?productID=163057 XD download page (Under Components and Evals)
http://forums.citrix.com/category.jspa?categoryID=163 Support Forum

Product Docs
http://support.citrix.com/article/ctx118943 Admin Guide
http://support.citrix.com/article/ctx119791 Technical FAQ
http://support.citrix.com/article/ctx119747 Licensing FAQ
http://support.citrix.com/article/ctx119466 Logon/Logoff Chart
http://support.citrix.com/article/ctx119039 Cross Platform Considerations FAQ
http://support.citrix.com/article/ctx119038 Troubleshooting FAQ
http://support.citrix.com/article/ctx118944 Group Policy Template Reference
http://support.citrix.com/article/ctx119186 Using with XenDesktop
http://support.citrix.com/proddocs/topic/xenapp/upm-xa-wrapper.html Using with XenApp

Best Practices
http://support.citrix.com/article/CTX119036 Best Practices
http://support.citrix.com/article/ctx120285 User Profile Best Practices (XenApp 5)
http://support.citrix.com/article/CTX110351 User Profile Best Practices (CPS 4.5 and prior)
http://support.citrix.com/article/CTX114884 - Password Manager Best Practices

Overview
http://community.citrix.com/x/AoEAAg (overview and insight on UPM)
http://community.citrix.com/x/OIENAg Last Write Wins
http://community.citrix.com/x/A4AaAg Profile Bloat
http://community.citrix.com/x/SIOZAg UPM and Office Settings
http://community.citrix.com/x/HYXuAg Improve logon speed?
http://community.citrix.com/x/AwBeAw Differences from Tech Preview and v2
http://community.citrix.com/x/8ICsAw Using GPOs
http://community.citrix.com/x/3IGiAw Quick Setup Guide

Sepago
http://blogs.sepago.de/tools/category/adm2html/ - ADM to HTML
http://blogs.sepago.de/helge/2009/01/23/citrix-user-profile-manager-released-user-store-design-recommendations/ - User Store
http://www.sepago.de/citrix/upmwhitepaper.html Sepago White Paper
http://blogs.sepago.de/helge/2009/02/25/citrix-user-profile-manager-how-registry-exclusion-lists-can-mess-up-group-policy-processing/

Microsoft Office:
http://technet.microsoft.com/en-us/library/cc768089.aspx - Configure Outlook settings
http://office.microsoft.com/download/afile.aspx?AssetID=AM102105061033 - Outlook 2007 setup automation
http://office.microsoft.com/en-us/ork2003/HA011402061033.aspx - Office installation recommendations
http://support.microsoft.com/kb/926805/en-us - Office 2007 Toolbar settings
http://office.microsoft.com/en-us/ork2003/HA011402691033.aspx - Recommended strategies for Outlook roaming

Microsoft Profiles
http://technet.microsoft.com/en-us/library/cc784484.aspx - Best Practices for Roaming Profiles
http://technet2.microsoft.com/windowsserver/en/library/fd81008e-269a-4155-b81a-752242bec9ff1033.mspx?mfr=true - User Profiles Overview in User Data and Settings Management
http://technet2.microsoft.com/windowsserver/en/library/fd81008e-269a-4155-b81a-752242bec9ff1033.mspx?mfr=true - Folder Redirection Overview
http://blogs.technet.com/neilcar/pages/247903.aspx - SMB/CIFS Performance Over WAN Links
 
Microsoft
http://msdn.microsoft.com/en-gb/library/ms675090.aspx AD Attributes
http://technet.microsoft.com/en-us/sysinternals/bb963907.aspx - AD Explorer

The Citrix Receiver desktop plug-in or Desktop Receiver (both used with XenDesktop) allow scaling the remote desktop to any viewable size. HDX MediaStream for Flash supports this scaled mode as well. The Flash content can be scaled to the appropriate size with minimal impact on performance. It even allows you to play videos in scaled mode without affecting the frames per second. Check this feature in action below:

It's easy to see how HDX MediaStream for Flash makes it easier for IT to choose XenApp and XenDesktop for application management and desktop delivery while preserving the experience that users are accustomed to. Stay tuned for more in my "Did you know" series on HDX MediaStream for Flash.

More of my blog posts on HDX MediaStream for Flash:

HDX MediaStream for Flash Tech Preview
Window-less Mode support in HDX MediaStream for Flash
Volume Synchronization in HDX MediaStream for Flash
Windows Scaling Support in HDX MediaStream for Flash
Multiple Tab Support and Diagnostics with HDX MediaStream for Flash

Join me and my friends on twitter - Juan Rivera, Derek Thorslund, XenApp Team, XenDesktop Team

An update to User Profile Manager was released a few weeks ago (v2.0.1). This contains fixes and improvements for some known issues such as:

• Support for the user variables %USERNAME% and %USEROMAIN%. This enables explicit paths to be defined for users when supporting multiple domains
• Profiles are now migrated properly when defined by the GPO "Set path fopr S Roaming User Proifle"
• Addressed the issue of unresponsive logons in certain cases with cloned images or provisioned shared images
• Resolved the issue with default registry exclusions and the conflict it created with Windows caching of group policies

The full details are here: http://support.citrix.com/article/CTX120967

The documentation when using with XenApp is located here: http://support.citrix.com/proddocs/topic/xenapp5fp-w2k3/upm-xa-wrapper-v2.html

And the documentation when using with XenDesktop is located here: http://support.citrix.com/proddocs/topic/xendesktop/upm-xd-wrapper.html

This updated install package completely replaces the previously posted package (and thus the old one is no longer available). You may run this install on existing deployments and it will upgrade your service. As well as use it for a fresh install. BUT defintely upgrade any existing installs before rolling out this new version since you do not want to mix the versions in your deployment (and thus have some services that recognize variables like %USERNAME% and some that do not). I assure you it would not be a very pleasant experience. The UserProfileManager.exe binary version is 2.0.1.48.

The ADM template was updated but it was just helper text updates. Basically calling out items like the added support for %USERNAME% and %USERDOMAIN%. So you do not need to update the ADM template unless you want to read the new helper text or just enjoy updating ADM templates. Or you can just open up the ADM file in your favorite text editor and scroll to the end and read it there.

On a side note here are some links to the main page, support forum and XenApp/XenDesktop download site (you need to be logged on to MyCitrix to see the downloads – and it is the same download so pick either product and look in the in the Evaluations and Components sections). And yes, the official name for this is Profile management which you will see reflected in the next release.

Main Page http://www.citrix.com/upm
XA download page https://www.citrix.com/English/ss/downloads/results.asp?productID=186
XD download page https://www.citrix.com/English/ss/downloads/results.asp?productID=163057
Support Forum http://forums.citrix.com/category.jspa?categoryID=163

明日からInterop Tokyo 2009のXen Technology 2009というブースで、仮想化関連技術・製品の展示や紹介をします。

特にCitrixの展示ブースでご覧になれるものは、仮想環境における下記のような技術です。

• アプリケーション仮想化: XenApp
• デスクトップ仮想化: XenDesktop
• サーバ仮想化: XenServer
• 電源管理
• 3D CADアプリケーション
• Flushの再生
• VoIPアプリケーション
• パフォーマンステスト
• パフォーマンス監視
• スマートカードを使用した認証

その他にも、弊社のパートナーから色々な技術・製品が展示されますので、時間があるかたはぜひともご来場いただければとおもいます。

また、ShowNetとよばれるInterop Tokyo 2009のNetworkで、NetScalerとXenDesktopが使用されています。NetScalerは、ServerのロードバランシングやIPv4からIPv6への変換などをおこなっています。また、Interop会場内に設置されたHPのシンクライアント端末からXenDesktopで配信されるDesktopに接続することができます。

Mobile Intel ® 965 Express Chipset Family

Think Pad  (一部Hitachi社製ブレード)に搭載されているIntel 965 グラフィックチップセットをVDA

（Windows Vista）で利用する場合
http://www.hitachi.co.jp/products/bladesymphony/product/blade.html

切断処理が正しく行われずに、再接続ができないことがあります。

 CTX118769

 KBの回避策にてVGAに変更しインストールした結果、同様にlocal display driverが

Citrix Systems Inc. Display Driver (vdtw30.dll) となる現象が確認されています。

[解決方法]

XenDesktop 2.1 の場合、最新のHotfixを適応します。

XenDesktop 3.0の場合、FeaturePack1を適応します。

 注意:

Intel 915GM についても同様かもしれませんが、現時点、検証までには至っておりません。

http://support.citrix.com/article/ctx121009

仮想デスクトップセッションへの再接続によって、サーバーで致命的な例外が発生し、
停止コード0xEAでvdtw30.dllによりブルースクリーンが表示されました。
[#201438]
 

Cloud Networking is secure and robust

You can create a complete end-to-end network from one cloud network, running on XenServer, through a VPN to another network in a different cloud. All servers and hosts communicate securely over SSL VPN. Amazon Machine Images are secured by the Amazon infrastructure using security groups.

The proof of concept speaks for itself. Between the Softlayer cloud and the Amazon EC2 cloud is running a site-to-site SSL VPN using Vyatta. All of the images in this architecture are running on XenServer. This proof of concept gives rise to many networking architectures for cloud computing.

The reason for using Vyatta site-to-site SSL VPN between the Softlayer and Amazon EC2 clouds is there needs to be a secure network between the two for the transfer of data. The Vyatta AMI (Amazon Machine Image) can also function as a complete router, firewall and DNS cache. The Vyatta SSL VPN router provides security with scalability. Suppose I wanted to separate the Vyatta SSL VPN from a Vyatta OSPF router, I would just launch another instance of the Vyatta AMI.

As you can see from the network diagram and video, complete routing from the Softlayer cloud to the Amazon cloud network is seamless, without having to buy any proprietary hardware. In fact, it is very low cost compared to traditional network solutions. Virtualized networking is here, it is fast, secure and cheap.

A CloudBurst happens when Citrix Workflow Studio determines that one of the devices in the Softlayer Cloud has reached a high watermark. WFS then instructs the NetScaler VPX to start sending traffic to the Cloud - CloudBurst.

To get your own cloud, go here

Configurations used

Vyatta SSL VPN (V1) - Datacenter Configuration
Vyatta SSL VPN (V2) - Cloud Configuration
XenApp VPN Client - Cloud Configuration

Links for this solution

Vyatta for XenServer - go here
Amazon EC2 - go here
XenServer is Free! - go here
XenApp - go here
Workflow Studio - go here
XenApp VPN Client - go here
Dell Server - go here
IP Addresses - go here

Watch This

Read more news like this.

Its powerful AppExpert!

XenDesktop PoolManager

「Current」「SwitchingOn」「SwitchingOff」「Off」
については、弊社Communityより、次のとおりです。以下を添付いたします。
http://forums.citrix.com/message.jspa?messageID=1338319

Idle pool: Current: aaa Target: bbb SwitchingOn: ccc SwitchingOff:ddd

    * aaa The current number of machines appearing as Free in the AMC
    * bbb The current idle pool level (as set in the AMC taking into account business hours)
    * ccc The number of machines that are On, but have not yet become "Free"
    * ddd The number of machines that are being shutdown

    * aaa AMC 上にアイドルとして表示される現在のマシンの数
    * bbb 現在のアイドルプールレベル (AMC で稼働時間に設定されている)
    * ccc 電源がONで、まだアイドルになっていないマシンの数
    * ddd シャットダウンされているマシンの数

○Windows XP

○Windows Vista

http://www.citrix.com/ready/list/products?partnerKey=hewlett-packard

[現象]
XenDesktop2.1 の Citrix Virtual Desktop Agent, Version 2.1.2335 を
Windows XP がインストールされ、グラフィックカード ATI Radeon Xpress 1270　
を搭載のHP社 Blade bc2000 にインストールする場合、
デフォルトのグラフィックドライバー（バージョン　8.351.0.0）では、
エンドポイントマシンから仮想マシン（Virtual Desktop Agent）へ
正しく接続できないことが確認されています。
また、ハードウェアアクセラレータを無し、ライトコンバインを無効にすることで
回避されます。

[解決策]
ハードウェアアクセラレータを有効にし利用するためには、次の技術情報にもあるように
　「Citrix ICA could not configure Thinwire and switch to the remote ICA display」
　というエラーメッセージが表示される
　http://support.citrix.com/article/CTX120018
仮想デスクトップコンピュータ上のグラフィックアダプタで、ベンダーのWebサイトから入手した最新のドライバを使用します。

弊社では、AMD社より、ATI Radeon Xpress 1270 バージョン 8.413.0.0 を
入手し、VDA へインストールし動作確認しております。

なお、最新のグラフィックドライバーの詳細については、ATI Radeonの製造元である
AMD社、またはbc2000の製造元であるHP社へご確認ください。

XenDesktop 3.0 についても同様に、ハードウェアアクセラレータを有効にし利用するためには、
ATI Radeon Xpress 1270 の最新のドライバを利用する必要がございます。

[現象]

VistaがインストールされているHP BladePC 2000、2500へ接続できない

 [原因]

 現時点での、VDA のディスプレイドライバー（特にVista向け）では、
最新のドライバーに対応できていないものがございます。
（弊社サイトで紹介のHDXテクノロジーにて、随時対応予定）
したがって、VDA インストール後にATIの最新のドライバーを更新されましたので、
接続できなくなっている可能性があります。

ATIドライバーは最新でかまいませんので、この状態より、
いったん、VDAをアンインストールし、
下記の１．標準VGA ドライバーに設定 - つまり、ATIのドライバーを利用しない後、
VDA を再インストールの確認を行っていただければと存じます。

[解決策]

1. VDA の再インストール
Vista 環境でVDA（仮想デスクトップ）をインストールする際、
標準のVGA ドライバに設定する必要がございましたが、
最新のディスプレイドライバ(ver.8.432.0.0)をインストールにより、
標準VGAドライバがATIドライバへ変更されたことも考えられます。
いったん、弊社VDA をアンインストール後、標準VGA ドライバにて
VDA の再インストールを行ってください。

VDA をインストールする際に、WDDMドライバの互換性がないとの
メッセージが表示され、インストールすることができません。
この現象を回避するためには、VDAを実行しているコンピュータに
Microsoftの標準VGAドライバをインストールします。

2. SessionImageSizeの値の設定

詳細は以下を参照ください。
XenDesktopでのWindows Vistaディスプレイドライバモデル（WDDM）対応グラフィックカード関連の問題
http://support.citrix.com/article/ctx119570

上記記述の技術情報が、レジストリSessionImageSizeの値の設定についての解決方法に
更新されております。こちらの動作についても、ご確認いただければと存じます。
[解決方法]
注：レジストリエディタの使用を誤ると、深刻な問題が発生する可能性があり、Windowsの再インストールが必要になることがあります。レジストリエディタは自己の責任と判断の範囲でご使用ください。
VDAのレジストリに以下の値を設定します。
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session
Manager\Memory Management] "SessionImageSize"=dword:00000020
SessionImageSizeのデフォルト値は環境によって異なり、新しいビデオドライバをインストールすることで変更される可能性があります。

VMware has released a series of KB articles outlining the requirements and best practices for installing vSphere, upgrading to vSphere, and upgrading ESX 3.0 virtual machines to ESX 4.0 hardware.  (Quoting them.)

So I'm guessing this should simplify the process, right? I know there were a few bumps in the update process for XenServer 5.0 Update 3 until we fleshed out the directions to be explicit about HA. Surely they've learned from this, and simplified their update process.

So let's see how they've focused on ease-of-use...

 4. If a SAN is connected to the ESX Server, detach the fiber before continuing with the upgrade.

 Walking from machine to machine in your data center pulling fiber connections, and reconnecting them after the upgrade?  Now that's automation.  That's ease-of-use.

Mid May I presented a methodology to successfully migrate physical PCs to a virtual desktop environment delivered by Citrix XenDesktop. The key area of focus was thereby around the planning and performing of a migration.

During this TechTalk, not all questions could be answered and therefore, I would like to share the related information below. In case you miss a question not being answered or have further questions, please use the comments field and I will get back to you.

Since many of the attendees asked for the presentation, you can download it from here.

I hope the migration methodology provides guidance during a transition from physical PCs to virtual desktops and don't skip the planning phase since this will ensure a successful migration.

Tarkan

Follow me on Twitter: http://twitter.com/TarkanK

Questions & Answers

Q: What is the best practice for implementing XenApp to deliver applications? A physical or virtual server?

This is a good question. In the past, we followed a best practice "never ever" virtualize a Terminal Server or XenApp server since real-time work was impacted. However, virtualization of workloads made so much progress that this is negligible compared to the benefits you can gain with it. Therefore, if you have a virtualization infrastructure based on XenServer, I would recommend using virtual machines to provide XenApp since you will benefit from the XenApp specific optimizations on XenServer as well as have a more dynamic server management rather than being dependent on a physical machine. Other benefits are definitely around hardware savings, power and cooling costs (even though you will have probably a bigger box for the virtualization infrastructure).

Q: From the application delivery perspective, the slides suggest that streaming is the primary (and recommended) method. Hosted seems to be a secondary method. Why is it *not* recommended to put the "Core" (Office, Adobe Reader, etc.) applications installed on the Virtual Desktop?

The easiest way of delivering apps is probably by installing them into the virtual desktop and you are good to go. There is nothing against this approach. Using this approach for core applications such as Microsoft Office, Adobe Reader is definitely doable; especially considering the fact of Microsoft Office 2007 updates being integrated into the Microsoft Windows Update mechanism simplifies the Office update process.

However, reasons for primarily recommending streaming as the choice for even core apps is mainly driven by the following points:

• Allows virtual desktops being slimmer, especially if hosted apps are used, increasing the number of concurrent virtual machines on a virtualization host.
• Central delivery of applications to virtual desktops, physical desktops, and XenApp servers.
• Simplifies virtual desktop OS maintenance and upgrades

The key for a successful app delivery strategy is that it needs to meet your requirements for app criticality, app type, update frequency, resource usage, and compatibility. Considering these areas may even lead to an app delivery solution leveraging all three methods. My coworker Daniel Feller already created a blog Simplifying Application Delivery into the Virtual Desktop that gives some insights as well.

Q: What is the tested maximum number of Windows XP virtual desktops in a single XenDesktop farm?

We are conducting regular tests based on the latest XenDesktop release version to verify scalability of a XenDesktop farm. However, bear in mind the fact that XenDesktop is a collection of components that interact with each other and each components scalability such as Desktop Delivery Controller, Provisioning services, and virtualization infrastructure may impact the overall architecture. The most recent test results (that were shared during the Citrix Synergy session "iForum221 - Advanced strategies for virtual desktop scalability") simulated a XenDesktop farm with a 9 am logon storm scenario. In this scenario, the XenDesktop farm could easily handle 4,500 logons to virtual desktops within 15 minutes and the peak CPU utilization was at 60% and memory at 2 GB (used hardware specs: dual quad-core, 1.8 GHz, 16 GB RAM). Once the Desktop Delivery Controller brokered a connection, it is not very active. Therefore, the next stop for scalability to look for is Provisioning services and the virtualization infrastructure. In this case factors such as used server hardware or virtual server configuration impacts the scalability and the virtual desktop type (user, OS, workload).

Q: Migrating from physical desktops to virtual desktops, how do you calculate how many users you can get on a server?

This is exactly the point, where the assessment as part of the planning phase is important to have. Therefore, you should assess the following:

• Target virtual desktop OS type - Windows XP, Windows Vista, or Windows 7
• Desktop hardware requirements (CPU, memory, network) to apply the right configuration to virtual machines
• Storage space

Based on this information and the target server hardware running the virtualization infrastructure will allow you a better sizing estimate. Better is to run a scalability test on at least a single server.

Q: Where would you start the migration process for a company with 200 users and 7 different departments?

As part of the migration planning, one action item is definitely to define the migration process. To do so, there are some factors influencing this process, which is not solely depending on the number of users or departments:

• Hardware refresh requirement
• OS upgrade requirement
• User groups
• Maintenance schedules

This should allow the prioritization of where to start and how to sequence the migration process.

Q: Users will want their music files (currently stored on desktop). We have cheap disk but it's only available as NFS (putting this on the SAN is not an option due to expense of storage and low business value of the MP3s). Any idea how we could make this work, maybe by dynamically creating an NFS mount for each user, say an E drive?

One key benefit of XenDesktop is the user experience provided by HDX (High-Definition user eXperience). Leveraging this capability allows mapping of USB drives or local drives of an endpoint into a virtual desktop running in the datacenter. This provides users' access to their files, in this case MP3s and therefore, IT does not need to handle this. However, IT should consider related security measurements and the impact on LAN/WAN usage if users have large files to copy.

Q: Can you share a base image disk among multiple desktops?

This is the key benefit of Provisioning services to provide a vDisk to be shared by multiple desktops. These are the available vDisk types:

• Standard Mode - read only OS image and shareable with multiple desktops
• Private Mode - read/write OS image and is assigned to a single desktop (not shareable)

Q: Is there some type of sysprep or utility that needs to be run every time the vDisk is opened up? Does Provisioning Server handle this and dynamically provide a Windows hostname when a Virtual Desktop is booted up?

Provisioning services does not require sysprep to allow sharing of a single vDisk by multiple virtual desktops. Once the "golden" image has been created, Provisioning services takes care about computer accounts and the computer account passwords within the Active Directory. This is also the reason, why Provisioning services should be setup with domain administrator rights. A more comprehensive overview of this process is described in the Provisioning services Administrator's Guide - section "Managing Domains and Active Directory Integration".

Q: If the master image gets updated on Saturday after all users have logout, will there be any delay in OS delivery when the users come in next Monday?

If the master image has been updated on Saturday and you know how many logons you have simultaneously on Monday, you can adjust the setting "Idle Pool" of a Desktop Group. This Desktop Group setting allows you to configure how many idle desktops (booted and waiting at the Windows logon screen) you want in your pool at certain times of the day. You can also configure a peak period to cover the time at which most users will be logging on to their desktops. This period starts at the beginning of your business day.

Q: How do you manage (add/delete) applications on the golden image? Is there a tool to do this?

Due to the fact that the golden image is a read only OS image and this golden image needs to be started in Private Mode (read/write). If the OS or applications need to be updated in the golden image, the best approach is:

1. Take a copy of the file and rename it to reflect a newer version
2. In Provisioning services, change the newer version of the golden image into Private Mode
3. Assign this golden image to a virtual machine and boot from it
4. Apply required changes and updates
5. Shutdown virtual machine
6. In Provisioning services, change the updated golden image into Standard Mode and assign it to the virtual machines

There is also a way to automate the assignment if the Provisioning services option "Automatic Updates" is selected and versioning of golden images is used.

Q: Is there a way to have two (2) different DHCP´s with only one XenDesktop farm?

Sure, however the DHCP scopes should not conflict in order to avoid duplicate IP addresses. As part of a redundant DHCP solution this would be Microsoft best practice called split scope DHCP.

Q: How is a dual monitor connected?

There is no requirement for any specific configuration on the endpoint device to support dual or multiple monitors for a virtual desktop. Multiple monitors are detected on endpoint device and virtual desktop is displayed across all monitors. A single virtual desktop can span up to 8 monitors in a rectangular shape (e.g. 1x8, 2x4), where each monitor must have the same resolution.

Q: How do I solve the road warrior without Internet? Is there a checkout feature available today or being planned?

At the current stage XenDesktop does not have a feature to support offline usage of virtual desktops. However, the showcased XenClient during Citrix Synergy will provide this capability in the near future. This is being developed as Project Independence.

With HDX MediaStream for Flash, the flash content is rendered on the client device while the player is rendered on the server side. This makes application management easy for administrators but poses some challenges for our engineers when it comes to preserving the "like-local" user experience. One such challenges is what happens when the user changes their volume locally.

We found a way to synchronize the volume of the Flash player on the client with the volume settings on the server. When the desktop is muted, the Flash player running on the client will be muted as well. HDX MediaStream for Flash even allows granular volume control by synchronizing the individual volume setting for each browser window with the Flash player instances on that particular browser. That means you can have a different volume setting for each browser running on the server and have the Flash players on the client respect each browser's volume setting.

It's easy to see how HDX MediaStream for Flash makes it easier for IT to choose XenApp and XenDesktop for application management and desktop delivery while preserving the experience that users are accustomed to. Stay tuned for more in my "Did you know" series on HDX MediaStream for Flash.

More of my blog posts on HDX MediaStream for Flash:

HDX MediaStream for Flash Tech Preview
Window-less Mode support in HDX MediaStream for Flash
Volume Synchronization in HDX MediaStream for Flash
Windows Scaling Support in HDX MediaStream for Flash
Multiple Tab Support and Diagnostics with HDX MediaStream for Flash

Join me and my friends on twitter - Juan Rivera, Derek Thorslund, XenApp Team, XenDesktop Team

I thought I would let you know about a little gotcha that I bumped into this issue yesterday.

So you are using Citrix User Profile Manager (a.k.a Profile management), you have installed it on machines running on VMware, (possibly in your XenDesktop or XenApp set up) probably because no-one has told you that you can get XenServer for free! 

You have your User profile Manager GPO settings to delete the cached local profiles when the user logs off, only they won't.....

...read on.

I had VMware tools installed on my XenApp server running on ESX 3.5 (I have some on XenServers too, I have make this clear before the XenPolice come and get me...)

I had installed the tools using the complete install. Little did I know that with a roaming profile of any variety this can cause issues. The "Shared Folders" option in VMware tools put a little file in your users profile, which gets locked by a running process. Consequently if you have a GPO set up to delete the users profile at log off, the system can't because of this pesky little file, namely;

C:\Documents and Settings\userid\Application Data\VMware\hgfs.dat

Your Profile management log (C:\Windows\system32\LogFiles\User Profile Manager\UserProfilemanager.log) will probably have an entry in it like the following: (if you have all the log options enabled in your GPO that is!)

2009-06-03;11:44:31.456;ERROR;PCNAME;johncarthy4;3;3640;DeleteDirectory: Deleting the directory <C:\Documents and Settings\johncarthy4\Local Settings\Application Data\VMware> failed with: The directory is not empty. 

Here's the quick fix:

1. If its XenApp log all your users off the server, preferably politely, send a warning message or if your feeling particularly ruthless a quick "session reset" will surely get them ranting at the helpdesk...

2. Login as an Administrator go to Control Panel - Add remove Programs.

3. Find VMware Tools and choose the "change" option.

4. Change the "shared folders" to "This feature will not be available".

5. Click "next", Click "Modify" and click "finish".

6. Restart the server / PC and now it's a good time to clean up those half deleted profiles.

7. Its best to use the My Computer - Properties - Advanced - User Profiles and select the remnant profiles and delete from here, this way you will always see any issue as Windows will kindly inform you of any difficulties by means of an error message...

Now I also found this to be the case on an XP vm that I had running on the same VMware server. The bizarre thing is that even if you click over the tools icon next to the clock, and check the settings, it said that the shared folder option was disabled, herein lies the difference, you will still see this issue even if the system is set to use Shared Folders, you just have to make sure it isnt installed at all.

Here's the other slightly longer fix:

1. Download XenServer.

2. Install your VM's on that.

3. Install Profile manager.

I hope this helps some of you. 

Are you using Wyse V class thin clients? Then I think you'll be interested in this new Tech Preview release from Wyse.

TCX Flash Redirection is a complementary solution to HDX MediaStream for Flash that enables users of Wyse thin clients to experience improved Flash performance. How does it compare with HDX MediaStream for Flash? Whereas HDX MediaStream for Flash is currently just for Windows-based PCs and thin clients, TCX Flash Redirection supports Wyse Thin OS (WTOS) 6.3.0.

TCX Flash Redirection doesn't actually redirect the native Flash media stream to the client; the Flash Player still runs server-side. So I wouldn't expect any substantial improvement in server scalability. But the resulting images are "redirected" over a separate virtual channel, allowing for greater control of frame rate and compression, thereby delivering an improved user experience. Also, TCX Flash Redirection works together with TCX Rich Sound to provide high quality audio.

You can see TCX Flash Redirection in action on YouTube at www.youtube.com/watch?v=M4rPs84-FgY.

The solution works both with XenDesktop (Windows XP Pro and Vista VMs) and with XenApp (Windows Server 2003).

Here's some early feedback from a customer in Australia: "I am using [Wyse] V10L 6.3.0 on Citrix [XenApp] PS 4.5 and the Flash stuff is GREAT!"

Param Desai, Director of Product Management at Wyse, informs me that the Tech Preview is publicly available for customers via Wyse systems engineers and sales managers. So try it out and let us know what you think!

Derek Thorslund
Product Strategist, HDX Multimedia Virtualization

It has been a few weeks since we released the trial for HDX MediaStream for Flash and I would like to share a few tips about this feature as well as highlight some of the capabilities in the trial release. First on the list is Window-less Mode.

Windowless mode allows web pages to overlay HTML content over the Flash player. This is important in certain scenarios like navigation menus that show on top of the flash player. Without windowless support, those sites would not be very usable. Here is an example of MSNBC.com with and without windowless support:

Flash content in windowed mode	Flash content in windowless mode

Notice how the Flash ad on the left side covers part of the navigation menu while the one in the right does not. Flash in windowless mode allows the browser to do this. HDX MediaStream for Flash supports this mode even though the Flash player is rendered on the client while the browser is rendered on the server. Logic would dictate that since Citrix HDX renders the flash on the client device, any flash would always show up on top of any content in the browser. But not so. Here at Citrix, we've figured out how to retain this functionality so that users get a seamless experience.

It's easy to see how HDX MediaStream for Flash makes it easier for IT to choose XenApp and XenDesktop for application management and desktop delivery while preserving the experience that users are accustomed to. Stay tuned for more in my "Did you know" series on HDX MediaStream for Flash.

More of my blog posts on HDX MediaStream for Flash:

HDX MediaStream for Flash Tech Preview
Window-less Mode support in HDX MediaStream for Flash
Volume Synchronization in HDX MediaStream for Flash
Windows Scaling Support in HDX MediaStream for Flash
Multiple Tab Support and Diagnostics with HDX MediaStream for Flash

Follow me and my friends on twitter - Juan Rivera, Derek Thorslund, XenApp Team, XenDesktop Team

Microsoft, Intel & Citrix: Dynamics of Enterprise Virtualization

An interactive discussion led by Doug Brown

--------------------------------------------------------------------------------------

Attend this lively discussion with virtualization experts David Greschler, Iddo Kadim & Simon Crosby on the dynamics of enterprise virtualization. Register here.