Citrix桌面虚拟化高级架构及最佳实践

1、Citrix桌面虚拟化技术培训Citrix桌面虚拟化高级架构及最佳实践Citrix Infrastructure DesignHigh Level ArchitectureNG DistributionCitrix NC Project - Logical Overview桌面云系统设计方针 对于桌面云环境来说，桌面与基础架构需要保持实时的通讯，特别是桌面交付控制器（DDC）需要随时地了解桌面的状态（已注册，未注册，使用中等），大量的桌面数量会导致桌面交互控制器响应延迟，并导致未响应，根据Citrix的最佳实践，一个虚拟桌面场最多不要超过5000个虚拟桌面。因此建议用户按照最佳实践进行桌面云的

2、建设。架构部署基本原则 平台高可用性，避免单点故障 风险控制能力 具备灵活扩展能力 简单就是美 2016 Citrix | Confidential 双节点HA，N+1 可控制的逻辑单元 横向和纵向扩展 简化策略、模板、逻辑 2016 Citrix | Confidential模块内架构主机完整 - 功能独立，故障隔离每刀箱可承载一定数量的并发用户每Service Block可根据实际情况将用户控制在10000以内可灵活横向、纵向扩展服务模块包含以下虚机：5-6 * PVS服务器（物理或者虚拟）3-4 * 交付控制器3 * SQL服务器（高可用群集）1 * Session Recording（

3、可选组件，运维，开关策略可控）若干Windows 7虚拟桌面若干Windows Server 2008 R2/2012虚拟机风险分散平台设计原则 服务块（Service） 2016 Citrix | Confidential单数据中心内基础架构N 2016 Citrix | Confidential多数据中心灾备设计 用户资源展示StoreFront ResourceAggregation 用户数据同步/保护NAS镜像技术块级别用户接入逻辑GSLB 用户分流原则：以南北划分用户，接入不同数据中心 全局负载均衡：GSLBCitrix Best Practice部署前的注意事项XD/XA的部署必须

4、要有域环境，实施前需要了解域功能级别及林功能级别（部署虚拟桌面建议为不同的服务准备不同的启动账号，不建议直接使用Administrator部署）Windows模板/虚拟机必须要注意SID的冲突，会导致系统部署失败Windows虚拟机模板需要将需要完成补丁更新（安装镜像版本的选择）了解Windows的激活方式（MAK or KMS）Windows防火墙尽可能关闭（安装DDC或VDA前可以先开启，安装完毕后再进行关闭）准备好安装系统的镜像、补丁（最新的版本不一定稳定，部署过程中可能会出现未知报错）版本选择 Current Release Long Term ServiceRelease (LTSR

5、)LTSR Baseline ComponentsVersionNotesVDA for Desktop OS7.6.300Windows 10 not SupportedVDA for Server OS 7.6.300Delivery Controller7.6 U3Citrix Studio7.6 U3Citrix Director7.6.300Group Policy Management7.6.300Storefront3.0.1Provisioning Services7.6 U1Universal Print Server7.6.300Only Windows 2008 R2 S

6、P1/Windows 2012/Windows 2012 R2 SupportedSession Recording7.6.100Platinum Edition OnlyStoreFront最佳实践 性能瓶颈有可能是后端Controller/ZDC 不使用LB的XML 如果不需要订阅，禁用 Server Group服务器数量=5 VM配置：4vCPU、8G Store的web.configserverCommunicationAttempts=1communicationTimeout=180bypassDuration=5allFailedBypassDuration=0 RfW的web.

7、configmultiClickTimeout=12timeout=00:02:00120s Delivery Controller(7.X)Windows Registry Editor Version 5.00HKEY_LOCAL_MACHINESOFTWARECitrixDesktopServerXmlWpnbrRequestTimeoutMs=dword:0001d4c0NetScaler and Network 启用Surge Protection StoreFront MonitorIntervalTimeout 基础架构服务器网关同一数据区域网关下移简化防火墙规则NAS优化 Wi

8、n7/2008 R2SMB2.0 CIFSIdle time outOpp lockscifs.tcp_window_size 2096560PVS优化 ConfigurationStreaming Services PortsThreads per port NetworkDisableTaskOffload on both Target and Server SMBWindows 2008 R2 Provisioning ServerHKLMSYSTEMCurrentControlSetservicesLanmanWorkstationParameters“EnableOplocks” =

9、 dword:0 x00000001HKLMSYSTEMCurrentControlSetservicesmrxsmbParameters“OplocksDisabled” = dword:0 x00000000“CscEnabled” = dword:0 x00000001HKLMSYSTEMCurrentControlSetservicesLanmanServerParameters“autodisconnect” = dword:0 x0000ffff“Smb2” = dword:0 x00000001 SkipBootMenuHKEY_LOCAL_MACHINESOFTWARECitr

10、ixProvisioningServicesStreamProcessSkipBootMenu=dword:00000001防病毒 基本配置Enable Download RandomizationUse Active Scan instead of Full 排除列表Set real-time scanning to scan local drives only and not network drivesDisable scan on bootRemove any unnecessary antivirus related entries from the Run keyExclude t

11、he pagefile(s) from being scannedExclude IIS log files from being scannedExclude SF c:users and SF Debug files from being scannedExclude Windows event logs from being scanned更新补丁与KB更新补丁与KB更新补丁与KBKB示例-CTX122903InstructionsComplete the following steps to make a Storefront Web Site the default page wit

12、hin the IIS site:1.Copy the following text in a Notepad:Notes:- Replace /Citrix/StoreWeb to the correct path to your Stores Web Site, if required.- For HTTPS connection, use “https:/Citrix/StoreWeb” instead of using the syntax “/Citrix/StoreWeb”.2. Select File Save As and browse to the IIS folder, b

13、y default the C:inetpubwwwroot is the IIS folder.3. Select Save as type to All types.KB示例-CTX1229034. Type a file name with an html extension, and select SaveKB示例-CTX1229035. Open IIS Manager6.Select the SERVERNAME node (top-level) and double-click Default Document, as displayed in the following scr

14、een shotKB示例-CTX1229037.Click Add, and type the file name of the .html file provided in Step 4.KB示例-CTX1229038.Ensure the .html file is located at the top of the list, as displayed in the following screen shot:KB示例-CTX1229039.Open the command prompt and run the following command:参考内容StoreFront 3.0 S

15、calability/blogs/2015/09/16/storefront-3-0-scalability-2/NetScaler Surge Protection/article/CTX115684Long Term Service Release (LTSR)/en-us/xenapp-and-xendesktop/7-6/xad-whats-new/long-term-service-release.htmlComparing the Network Performance of Windows File Sharing Environments/us/media/tr-3869.pdfBest Practices for Configuring Provisioning Services Server on a Network/article/CTX117374PVS and CIFS/blogs/2010/11/05/provisioning-services-and-cifs-stores-tuning-for-performance/Citrix Consolidated List