This message was deleted.

Make sure you have a portforward set up if your ISP blocks ports or you can’t get the public ip on your NetScaler. Second, set up dynamic dns with a provider of choice, so the ip gets updated externally. Optionally set up a CNAME on a domain you own, pointing to the dynamic dns record.

I use a raspberry pi and have ssh port forwarding. Then create ssh tunnels to get to my devices. Works like a champ...

Use Cloudflare 😉

I had this setup for about a year, and it worked pretty good. I setup a dyndns provider on my router to update a host A record that was associated to a TLS cert bound on my Netscaler. In the end, I just switched to teamviewer , as I don't always have all my Citrix infra powered on / updated

Thanks Everyone.