Netscaler SDX 8920 resource allocation

[Anandh Chandrabose1709158945]

Hi Folks,

 

In previous SDX hardware(11000) we had physical ssl chips that we can assign to the VPX instances.

With newer SDX(8920) and 12.1 we cannot see that option

 

Does that mean 8920 doesn’t come with physical ssl chips for decryption and only have ACU and SCU

 

How can we calculate the requirements we need to provide to each VPX instance.

 

Also how do we calculate how much resources we need to provide to the VPX in terms of memory , CPU , bandwidth, can this be calculated so that we size our VPX instances in a better manner.

 

Thanks in advance.

 

[Diego Oliveira]

Hi

Check if the following article helps. I found useful.

https://docs.citrix.com/en-us/sdx/12-1/crypto-management.html

https://www.citrix.com/blogs/2015/10/14/netscaler-sdx-instance-resource-assignment-guide/?_ga=2.257330443.1286050288.1551011115-1695843190.1550665128

https://support.citrix.com/article/CTX139485?_ga=2.257330443.1286050288.1551011115-1695843190.1550665128

[Valeri Bonchev]

Hello, 

To answer your question about  physical  SSL chips:

 

The 59xx/89xx series MPX does not have SSL hardware. These platforms are Intel Coleto Chip based. 

 

"The Intel Coleto Creek SSL chipset uses SR-IOV pass-thru support to achieve isolation as well. However, the Intel Coleto Creek chipset does not have cores, rather it has crypto engines. As a result, allocation of SSL is done using Crypto Capacity Management. With the Coleto Creek chipset, there are 32 virtual functions (VF) assigned per chip."

 

Thanks,

Val 

[Chuck Snyder]

Is there a best practice or rule of thumb of how many ACUs and SCUs to allocate per core or ssl sessions?

 

15120 50G