Citrix XenDesktop Hardware & Licencing Solution Guide

Citrix XenDesktop
Hardware & Licencing
Solution Guide
Contents
Product Overview ........................................................................................................................................................................................3
Component descriptions ..........................................................................................................................................................................4
Components ..................................................................................................................................................................................................6
Software Pre-Requisites ............................................................................................................................................................................7
High Level Architecture.............................................................................................................................................................................8
Host and Storage Technologies.............................................................................................................................................................9
Desktop Virtualisation Assessment Service ......................................................................................................................................9
Application Virtualisation Services ................................................................................................................................................... 10
Installation & Configuration Estimates ........................................................................................................................................... 11
AppSense .................................................................................................................................................................................................... 12
The IGEL Universal Desktop ................................................................................................................................................................. 13
Product Overview
This guide is intended to simplify putting together provisional budgets for a XenDesktop solution, & will cover
software options, licencing & hardware requirements. This is not intended to be a comprehensive technical
guide or competitive analysis. PQR consultants have produced an excellent independent analysis of the major
technologies in this market (‘VDI Smackdown’) which is available from their website http://virtuall.eu/solutionsbased
XenDesktop, with its ‘Flexcast’ licencing bundle offers the full range of Citrix application virtualization
technologies. With application virtualization, IT can control data access, manage fewer desktop images,
eliminate system conflicts, and reduce application regression testing. Adding, updating and removing apps is
simple and self-service for users, enabling them to access applications instantly from anywhere, while getting a
high-definition user experience.
XenDesktop works with your existing hypervisor, storage and Microsoft infrastructures, enabling you to leverage
your current investments – while providing the flexibility to add or change to alternatives in the future. Whether
you use XenServer, Microsoft Hyper-V or VMware ESX or vSphere, XenDesktop supports them all and simplifies
management of networked storage using StorageLink technology. XenDesktop will also closely integrate with
Microsoft App-V and System Center for application and desktop management.
XenDesktop 5 Features & Editions
XenVault
HDX MediaStream
HDX RealTime
HDX Plug-n-Play
HDX™ user experience
HDX Broadcast
HDX Adaptive Orchestration
HDX 3D pro graphics
HDX WAN optimization
HDX SmartAccess
Hosted shared desktops
Beyond VDI with FlexCast™
Hosted VDI
Streamed VHD (virtual hard disk)
Local VM (virtual machine) with XenClient
Any Windows, web
or SaaS app
On-demand apps by XenApp (hosted or
streamed)
Self-service enterprise app store
Any hypervisor
Desktop Studio
Desktop Director
Service monitoring (EdgeSight)
Open, scalable, proven
XenApp server health monitoring
Server provisioning for XenDesktop
infrastructure
StorageLink™
Physical server provisioning
Profile management
Secure remote access
Data security and
access control
Advanced SmartAccess policy controls
Single sign-on
SmartAuditor
VDI
Edition
Enterprise
Platinum
Component descriptions
XenApp – Windows applications can be delivered via ‘application virtualisation’ (streaming to the VM or device),
or ‘session virtualisation’ (execution on the XenApp Server)
Delivery controller – Authenticates users, manages assembling the user’s desktop environment, and brokers
connections between the user and his virtual desktop.
Provisioning services – Enables virtual or physical desktops to be managed from a single golden image. Also
enables the simple, single image management of XenDesktop infrastructure servers.
Citrix EdgeSight - allows detailed monitoring of the virtual desktop hosting infrastructure, delivering real-time
and historical virtual machine information on CPU, memory, bandwidth and disk access. EdgeSight performance
monitoring can be used not only to analyze and troubleshoot issues, but also to warn IT Administrators in
advance when issues may arise.
Citrix Access Gateway – When users are connecting from home or anywhere outside the corporate firewall,
XenDesktop secures these connections via SSL by using Citrix Access Gateway technology. The Access Gateway is
a hardened appliance deployed in the corporate DMZ which allows SSL encrypted XenDesktop connections to
traverse the corporate firewall securely.
Branch Repeater – Customers may often use XenDesktop for desktop delivery to users who are not in the same
building as the datacenter and to remote locations such as branch offices, thus enabling remote desktop access.
Citrix Repeater technology can be employed between these locations to optimize user performance through
Quality of Service (QoS) management. Citrix Repeater is able to prioritize different parts of the user experience
so that, for example, user experience is not degraded in the branch location when one user chooses to send a
large file or print job over the network.
Citrix® Essentials for XenServer, featuring StorageLink - delivers deep integration with leading storage
platforms to reduce the cost and complexity of managing storage in XenServer environments. StorageLink
provides one-click access to native storage devices for simplified management through storage configuration
wizards that leverage existing storage array-based services. StorageLink supports all storage architectures,
including SMI-S based, to deliver faster virtual machine deployment and lower storage management TCO in
virtual environments.
Profile management - provides an easy, reliable, and high-performance way to manage user personalization
settings in virtualized or physical Windows environments. It requires minimal infrastructure and administration,
and provides users with fast logons and logoffs. Profile management is primarily intended as a profile solution
for XenApp servers, virtual desktops created with XenDesktop, and physical desktops. Citrix user profiles are
different from local, roaming, or mandatory Windows profiles.
Password Manager - increases your organization’s security with, strong password policy options & automated
password generation. It also interacts well with other programs, easing the user’s logon information storage
process as well as your maintenance of that process and information & reduces calls to the help desk through
user self-service features that enable users to change their own Windows password and unlock their account
Self-service Enterprise App Store - Citrix Receiver acts as a storefront where IT can easily advertise available
offline and online Windows and Web applications for easy download by users. Integration with Citrix Receiver
enables fast, zero-touch install and configuration.
XenVault Plug-in - provides protection for corporate data on user devices, particularly devices like laptop
computers regardless of whether the device is a member of the corporate domain. The plug-in creates a
password-protected area on the user device where data is encrypted and only corporate applications delivered
through the Citrix Receiver and Microsoft Application Virtualization (App-V) have access. The XenVault plug-in
enables you to lock, unlock, and delete the safe zone as necessary.
Machine Creation Services. A collection of services that work together to create virtual desktops from a master
desktop image on demand, optimizing storage utilization and providing a pristine virtual desktop to each user
every time they log on.
Desktop Studio. Enables you to configure and manage your XenDesktop deployment. Desktop Studio provides
various wizards to guide you through the process of setting up your environment, creating your desktops, and
assigning desktops to users.
Desktop Director. Enables level-1 and level-2 IT Support staff to monitor a XenDesktop deployment and
perform day-to-day maintenance tasks. You can also view and interact with a user's session, using Microsoft
Remote Assistance, to troubleshoot problems.
Components
Licensing
Named User Licensing
Express
VDI
Enterprise
Platinum
XenServer, Enterprise
Edition 4
XenServer, Enterprise
Edition 4
XenServer, Enterprise Edition 4
Platform License
Platform License
Universal License
Enterprise
Platinum
10 users
Device based licensing
Concurrent User Licensing
Component
Controller
Limited 1
XenServer
2
XenServer 3
Receiver
Desktop Studio
Machine Creation Services
Desktop Director
Workflow Studio
Profile management
StorageLink
Access Gateway
6
XenApp
XenVault
Provisioning services for
5
desktops
Provisioning services for servers
XenClient and Synchronizer
EdgeSight for Virtual Desktops
Branch Repeater
7
Single Sign-on
Note: Key components are listed only; this list is not comprehensive.
1.
2.
3.
4.
5.
6.
7.
Supports up to 10 users.
Included free in all editions of XenDesktop. XenDesktop VDI, Enterprise and Platinum also include XenServer, Enterprise Edition.
The new, free version of XenServer may be used for any server or desktop workload.
XenServer, when acquired as part of XenDesktop, can only be used to manage hosted desktops and Citrix-provided components included with
your XenDesktop license, such as the Controller, license and Web servers, and XenApp servers. You cannot use the XenServer included with
XenDesktop to host other server workloads, or servers used for XenApp purchased separately from XenDesktop. These restrictions also apply
to the provisioning services included with XenServer: you may use provisioning services for desktops and for server workloads that are part of
Citrix-provided XenDesktop infrastructure, including XenApp, but no other server workloads.
Streaming to VMs for VDI purposes is available in VDI, Enterprise, and Platinum; streaming to endpoints ("Streamed VHD") is available in
Enterprise and Platinum only.
Any Access Gateway device can now be used to support any XenDesktop Edition; for example, you can use Access Gateway Enterprise Edition
to provide ICA-only remote access to XenDesktop VDI or Enterprise.
A Branch Repeater appliance (for Citrix Branch Repeater, formerly known as "WANScaler") must be purchased separately.
Software Pre-Requisites
For Windows 7 or XP virtual machines
Microsoft VDA (Virtual Desktop Access) is a device-based subscription license and is available two ways:
1. VDA for Software Assurance (SA)
2. VDA
(included in SA)*
$100/year*
Note: It is important to know that VDA is mandatory for any virtual desktop infrastructure (VDI) deployment that
uses virtual copies of Windows, regardless of the underlying infrastructure provider.
For example, a company with 10 thin clients and 10 laptops (not covered under SA) accessing a VDI environment
requires a total of 20 Windows VDA licenses (20 x $100/year). However, if the same company has 10 thin clients
and 10 laptops covered under SA, it will require 10 VDA licenses (10 x $100/year) and 10 VDA for SA licenses (10
x $0/year).
For shared hosted desktops (Terminal Server)
Windows Server 2003/8 licence (Standard, Enterprise or Datacenter)
Microsoft RDS (Remote Desktop Services) CAL per device/user
Optional Microsoft Licences
Microsoft Virtual Desktop Infrastructure Standard Suite ($21 per device, per year)
Hyper-V Server 2008 R2
System Center Virtual Machine Manager
System Center Operations Manager 2007 R2
System Center Configuration Manager 2007 R2
Microsoft Desktop Optimization Pack (includes App-V, MED-V, etc).
Microsoft Virtual Desktop Infrastructure Premium Suite ($53 per device, per year)
Standard edition, plus RDS CAL
Source: http://www.microsoft.com/uk/windows/enterprise/solutions/virtualization/licensing.aspx
High Level Architecture
Server Role Specifications Configuration
Component
Hardware
Notes
Desktop Delivery Controller
4 x vCPU
8GB RAM
2 x 1GE NIC
Windows 2008 Standard & Enterprise Editions
Approx 1000 users/server
Desktop Host
Dual Quad Core
64GB RAM
2 x 1 GE NIC
Runs on XenServer, Vsphere or Hyper-V
Approx 60 virtual desktops (Windows 7, 1 vCPU, 1GB RAM)
Provisioning Server
Quad Core
Windows 2003 or 2008, all editions (Preferably physical for
larger deployments)
Approx 1000 users/server
Includes HA functionality
32GB RAM
4 x NIC
Infrastructure Servers
2 x vCPU
4-8 GB RAM
1 x NIC
DHCP, AD, licence server etc.
XenApp Servers
2 x vCPU
8GB RAM
2 x NIC
Approx 150 users/server
More detailed design recommendations can be found in the XenDesktop Design Handbook
https://community.citrix.com/kits/#/kit/1067009
Host and Storage Technologies
The following combinations of host and storage technology are supported:
Local Disks NFS
Block Storage Storage Link
1
Yes (R) Yes
Yes
5
Yes (R) Yes
No
3
No
XenServer Yes
ESX
Yes
Hyper-V
Yes
2
4
Yes (R)
No
(R) = Recommended protocol
Notes:
1. Virtual Hard Disk (VHD) on Logical Volume Manager (LVM) only; this is the default for XenServer 5.5 and 5.6. VMs
created in this deployment will not support XenMotion or dynamic placement. If you have multiple XenServers in
a pool just using local disks, Machine Creation Services will fail.
2. Suitable for private VMs only. VMs that use shared images will not work. Traditional PVS vDisks are required to
provide shared disk image VMs in this configuration.
3. Available if there is only a single Hyper-V server in the hosting unit.
4. Microsoft Cluster Shared Volumes are required.
5. No support for vMotion or Dynamic placement.
Desktop Virtualisation Assessment Service
For accurate hardware & storage sizing an infrastructure assessment exercise using a tool such as Liquidware
Labs Stratusphere (www.liquidwarelabs.com) is recommended. This will also allow you to categorize your users
& devices into ‘good & bad’ fits for virtualisation.
Sample report – Design Recommendations
Scope
Findings
VDI FIT
Recommendations
Design Baseline
Aggregate Data
Observed - High
Observed Average
Observed - Low
3400.00
2575.37
1002.00
99.63
4.11
0.00
Memory Used (MB)
4166.21
668.58
184.34
Page File Size (MB)
4004.41
660.47
142.73
Disk Used (GB)
4088.94
63.38
0.00
362.45
8.92
0.00
18687.00
67.11
2.00
3012.50
4.31
0.16
Minimum
Configuration
Recommended
Configuration
Conservative
Configuration
47
62
System Element
CPU Speed
CPU Used (%)
Disk IOPS
Network I/O (KB/s)
Network Latency
(ms)
VDI Configuration Baseline
Number of Cores
94
Memory Needed
144 GB
180 GB
216 GB
Storage Needed
15973 GB
20532 GB
22812 GB
** Based on XP
*** Configuration Baseline assumes 2.6Ghz processor cores
Application Virtualisation Services
To help define your Virtualisation strategy, you may need to understand if your applications will work under
your proposed new environment. ChangeBASE AOK http://www.changebase.com can automatically test all of
your applications for compatibility with Microsoft Vista, Windows 7, APP-V, Citrix XenApp, XenDesktop & SVS.
This can be done in a fraction of the time and cost that a traditional manual testing programme would take –
enabling you to make an informed choice as to the best fit environment for your applications. We will provide
you with a Red/Amber/Green report, backed up by the detailed analysis against each application. And then our
experienced packaging engineers will be able to remediate most of your applications – enabling them to work
as expected on your chosen platform.
Sample Report
Installation & Configuration Estimates
Description
Install and configure XenServer
Number of Days
0.5 day per host
Install and configure Desktop Delivery Controller
0.5 day per server
Install and configure Provisioning Server
0.5 day per server
Install and configure EdgeSight
1 day
Install and configure XenApp
1 day per PVS
image/server
Install and configure Password Manager
1 day
Create application definitions in Password Manager
1 day per 20
applications
Create virtual desktop image
1 day per image
Create application packages
1 day per 10
applications
Install and configure Access Gateway
1 day per appliance
NB. Days quoted are the bare minimum to complete the work and do not include contingency days, planning or
documentation.
AppSense
To fully maximize your savings and agility from Desktop virtualization, virtualization must be used across the
entire enterprise. This involves delivering desktops to the enterprise, utilizing multiple operating system
platforms, delivery methods such as streamed, published, local install, even support offline and roaming users,
across multiple site locations and user types, of different connecting devices.
In order to achieve maximum user adoption of the standard desktop in environments with disparate client
platforms and desktop delivery methods, it is essential that all user-specific elements of the desktop , not just
the user profile, are managed separately and added to the standard desktop when needed. This enables IT to
utilize multiple platforms and desktop delivery mechanisms such as streamed, virtualized, client-resident and
published, by having an infrastructure in place to manage the user environment for thousands of users.
Client Platform Support
Personalization settings can be shared across operating system boundaries without impacting the look and feel
of the applications being used.
Cross Delivery Mechanism Support
Personalization settings are synchronized and shared across different delivery mechanisms including Citrix
XenDesktop, Citrix XenApp, Citrix Streamed Applications, Microsoft Softgrid/App-V, VMware Thinstall or
Symantec Altiris Software Virtualization Solution.
Enterprise Framework
A multi-tier architecture is designed to support tens of thousands of users across multiple geographical sites. In
larger environments, users can be load balanced and personality settings stored on the database can be
replicated between sites to ensure continuous access to the latest user settings.
Secure Deployment of Configuration and Personalization Streaming
All data transfer and communications between the User Environment Management consoles and target
XenDesktop session are securely managed across HTTPS or HTTP protocols. A Watchdog agent automatically
audits and corrects any disrupted communication.
For complex environments consisting of either:- large scale, multi-delivery method, multi-O/S platform or multisite Citrix XenDesktop environments - Citrix recommend you consider user environment management.
Capability
Basic User Profile Management
Personalisation of complex environments
‘Follow me’ personality
Virtual Desktop configuration
Intelligent Self-Healing
Visibility & maintenance of the user
environment
Licensing
XenApp 32bit = per server
XenApp 64bit = per named user
XenDesktop 32/64bit = per named user
Citrix XenDesktop

X
X
X
X
X
Citrix XenDesktop + Appsense






The IGEL Universal Desktop
Igel’s Universal Desktop strategy is unique and enables organizations to deliver all their server-based
applications, anywhere, with the best user experience, security, ease of management, and lowest total cost of
ownership (TCO). The software, or firmware, embedded in every IGEL Universal Desktop is highly multifunctional and contains the industry’s largest collection of server-based protocols for connecting you to your
centralized applications. Igel offers; Linux, Windows Embedded Standard and Windows Embedded CE. You only
pay for what you need, with our Feature Packs; Entry, Standard and Advanced*. In addition, Igel provides a broad
range of hardware platforms to deliver the Universal firmware, with some models offering a modular design that
includes features such as wireless, additional legacy ports and an optional internal Smartcard reader. Each
Universal Desktop comes with IGEL’s Universal Management Suite; an extremely powerful yet easy to use
software application that allows you to remotely deploy and manage your thin client estate.
IGEL Universal Desktop Firmware Packages
Three Firmware Packages - Which one is the right one for me?
Entry – This Feature Pack is designed for customers wanting to access just server-based
Windows® applications using the Citrix® ICA or Microsoft® RDP protocols. The IGEL Linux and
Microsoft® Windows® Embedded Standard 2009 versions also have a Java SE Runtime
Environment.
Standard – This Feature Pack has all the features of the Entry Pack plus many more local tools
such as virtualization support, local web browser, PDF Reader, and terminal emulation. It also
supports remote access using a variety of VPN protocols and the ThinPrint client for enhanced
network printing.
Advanced – This Feature Pack is an extremely powerful collection of features that can connect
you to almost any application, media or peripheral. In addition to the Standard Pack it supports
more specialized features such as Media Player, Flash, VoIP, a native SAP GUI, NoMachine NX
and ThinLinc printing. For customers wanting to deploy the toughest server-based computing
applications such as Adobe® Flash® multi-media or peripheral control, that often do not work
well using standard Windows® protocols, the Advanced Pack on Microsoft® Windows®
Embedded Standard supports reverse publishing of applications. For advanced peripheral
support, the Advanced Pack also supports USB re-direction, so USB devices can connect
seamlessly to the server-based Windows® desktop.