I have an AWS NetScaler Gateway issue. Setting up 2 VPXes with dedicated IP spaces, so no HA between the 2. Using an AWS NLB to load balance in an active:passive configuration. We have it working with TCP by NOT using an SSL decrypting ALB. But we can't use UDP on our NLB because they don't support disabling client-ip preservation. As soon as that is enabled it breaks both TCP and UDP traffic. Does anyone have a method of using an NLB with Gateway for EDT and DTLS that works in AWS behind an NLB? I would prefer a flexible IP solution with no ALB or NLB but not allowed for this client deployment. Are we just stuck with TCP only?

I setup a similar environment in AWS, two separate Netscalers (no HA), but i put the URLs behind Route53 (aws service) using active/passive host records. The host records allow you monitor VIPs, if it sees one of the VIPs down on the active side, after a certain period of time, it will switch DNS to use the secondary.

Use NetScaler GSLB instead of AWS?