With the new licensing model, does Citrix provide the ability to update netscalers to larger bandwidth? Like 14020 to 14060? Or 8920 to 8950? We have the new Flex licensing, but can't allocate beyond the older base bandwidth limit. And newer hardware doesn't have that ceiling.

You will get a Zero Capacity license for the hardware and unlimited bandwidth to assign to it. What I have seen is that. In the blog I wrote about the new licensing there are links to how to migrate from current licenses to the new including the Zero Capacity license. https://www.ferroquesystems.com/resource/understanding-and-transitioning-to-netscaler-flexed-licensing/

Yeah, we did that. But it won't let us allocate more than 20 gb to our 8920.

Keep in mind however, the platform you are on won’t exceed the max bandwidth it could handle previously.

Ok. I know previously they had bump up that allowed you to unlock more bandwidth on the units, since it was a software limit, but guess you cant get those anymore.

You shouldn’t need it, as you have lots of bandwidth you can assign right?

Lots of BW. CPL customer.

@Jeff Riechers The bandwidth limit is defined by the model, so 8920 is 20GBps

Correct me if I am wrong, didn't they have a bandwidth bump license or upgrade you could do on the hardware to unlock more bandwidth? Or was it burned into the system itself at manufacture.

I think it's link to model, no problem with VPX however, I have a customer which put 500GBps on VPX/SDX, don't ask me why 😂

I have a very large customer who needed to up their 8920 to 8950. Physically, the appliances is identical. The BIOS on the machine knows no difference and yes, you used to be able to purchase a license only upgrade from 8920 to 8950. I reached out to Citrix a couple of months ago (November I believe) and was told that yes, in fact, if you move your appliance from Perpetual or pooled licensing to the Flex license it can be assigned 50gb of bandwidth. I will follow up with the NetScaler team that told me that and ask them about Jeff's problem because as far as I know, you change the physical appliance to point to the license server, you assign the Zero Capacity 8900 series license to the hardware, and you assign the amount of bandwidth you want to the appliance. The license looks like this:

Yeah, thats the one we applied on the NS, and it gave us the ability to talk to the license server. I will check more on my side.

You can even switch to this, but you still need to swap out the hard drives in order for the hardware to know it is an SDX and not an MPX.

image.png

Just saying you cannot allocate more than 19Gbps here

Yup. We switched it over to Flex, and won't go any higher.

You are trying to assign more based on your screenshot.

Correct, when you convert the hardware to flex it is supposed to remove the software limitation. We are trying to allocate more than the 20 GB limit similar to the bandwidth bump licenses you could do in the past to upgrade hardware to the next tier.

Is it a FIPS appliance?

Nope, standard 8920

Then, by this, an 8900 Z should be able to go to 30. https://docs.netscaler.com/en-us/netscaler-console-service/manage-licenses/mimimum-and-maximum-capacity-for-flexed-and-pooled-licensing.html

not a problem.

Thanks. Initial response is Yes, you should be able to assign more bandwidth so I sent your screenshot. Let's see what they say.

show ns license License status: Web Logging: YES Surge Protection: YES Load Balancing: YES Content Switching: YES Cache Redirection: YES Compression Control: YES Delta Compression: NO SSL Offloading: YES Global Server Load Balancing: YES GSLB Proximity: YES Dynamic Routing: YES Content Filtering: YES Content Accelerator: YES Integrated Caching: YES SSL VPN: YES (Maximum users = Unlimited) (Maximum ICA users = Unlimited) AAA: YES OSPF Routing: YES RIP Routing: YES BGP Routing: YES Rewrite: YES IPv6 protocol translation: YES Application Firewall: YES Responder: YES NetScaler Push: YES AppFlow: YES CloudBridge: YES ISIS Routing: YES Clustering: YES CallHome: YES AppQoE: YES Appflow for ICA: YES Front End Optimization: YES Large Scale NAT: YES RDP Proxy: YES Reputation: YES URL Filtering: NO Video Optimization: YES Forward Proxy: YES SSL Interception: YES Remote Content Inspection: YES Adaptive TCP: YES Connection Quality Analytics: YES Bot Management: YES API Gateway: YES Model Number ID: 8000 License Type: Platinum License Licensing mode: Pooled Days to expiration: 777 Done

Command Go Close

Model number 8000?

yup

That showed it is pooled platinum licensing so that’s good.Try “set ns capacity -unit <specify-mbps-or-gbps> -bandwidth <specify-amount-license-bandwidth> -edition <specify-license-edition>”

ERROR: Invalid argument [40, Bandwidth out of range, Minimum 2 Gbps, Maximum 19 Gbps]

That is weird. Can you share the log file? /var/log/license.log. And what version/build is it?

90507 (lmgrd) ----------------------------------------------- 90507 (lmgrd) Please Note: 90507 (lmgrd) 90507 (lmgrd) This log is intended for debug purposes only. 90507 (lmgrd) In order to capture accurate license 90507 (lmgrd) usage data into an organized repository, 90507 (lmgrd) please enable report logging. Use Flexera's 90507 (lmgrd) software license administration solution, 90507 (lmgrd) FlexNet Manager, to readily gain visibility 90507 (lmgrd) into license usage data and to create 90507 (lmgrd) insightful reports on critical information like 90507 (lmgrd) license availability and usage. FlexNet Manager 90507 (lmgrd) can be fully automated to run these reports on 90507 (lmgrd) schedule and can be used to track license 90507 (lmgrd) servers and usage across a heterogeneous 90507 (lmgrd) network of servers including Windows NT, Linux 90507 (lmgrd) and UNIX. 90507 (lmgrd) 90507 (lmgrd) ----------------------------------------------- 90507 (lmgrd) 90507 (lmgrd) 90507 (lmgrd) Server's System Date and Time: Wed Jan 29 2025 090507 EST 90507 (lmgrd) Changing message security level from -1 to 0 90507 (lmgrd) SLOG: Summary LOG statistics is enabled. 90507 (lmgrd) The license server manager (lmgrd) running as root: 90507 (lmgrd) This is a potential security problem 90507 (lmgrd) and is not recommended. 90507 (lmgrd) FlexNet Licensing (v11.19.6.0 build 293152 x64_f11) started on adc-m1-mpx-training-a () (1/29/2025) 90507 (lmgrd) Copyright (c) 1988-2024 Flexera. All Rights Reserved. 90507 (lmgrd) World Wide Web: http://www.flexerasoftware.com 90507 (lmgrd) License file(s): /nsconfig/license//10-MPX-ZeroTouch-FID_69070370_92c8_4a45_a117_a2247aadceb4.lic 90507 (lmgrd) lmgrd tcp-port 27000 90507 (lmgrd) (@lmgrd-SLOG@) =============================================== 90507 (lmgrd) (@lmgrd-SLOG@) === LMGRD === 90507 (lmgrd) (@lmgrd-SLOG@) Start-Date: Wed Jan 29 2025 090507 EST 90507 (lmgrd) (@lmgrd-SLOG@) PID: 83493 90507 (lmgrd) (@lmgrd-SLOG@) LMGRD Version: v11.19.6.0 build 293152 x64_f11 ( build 293152 (ipv4)) 90507 (lmgrd) (@lmgrd-SLOG@) 90507 (lmgrd) (@lmgrd-SLOG@) === Network Info === 90507 (lmgrd) (@lmgrd-SLOG@) Listening port: 27000 90507 (lmgrd) (@lmgrd-SLOG@) 90507 (lmgrd) (@lmgrd-SLOG@) === Startup Info === 90507 (lmgrd) (@lmgrd-SLOG@) Server Configuration: Single Server 90507 (lmgrd) (@lmgrd-SLOG@) Command-line options used at LS startup: -reuseaddr -l /var/log/license.log -c /nsconfig/license/ 90507 (lmgrd) (@lmgrd-SLOG@) License file(s) used: /nsconfig/license//10-MPX-ZeroTouch-FID_69070370_92c8_4a45_a117_a2247aadceb4.lic 90507 (lmgrd) (@lmgrd-SLOG@) =============================================== 90507 (lmgrd) Starting vendor daemons ... 90507 (lmgrd) Started CITRIX (internet tcp_port 29923 pid 83494) 90507 (CITRIX) FlexNet Licensing version v11.19.6.0 build 293152 x64_f11 90507 (CITRIX) SLOG: Summary LOG statistics is enabled. 90507 (CITRIX) SLOG: FNPLS-INTERNAL-CKPT5 90507 (CITRIX) SLOG: TPM Status: 0 90507 (CITRIX) SLOG: FNPLS-INTERNAL-CKPT6 90507 (CITRIX) Server started on adc-m1-mpx-training-a for: CNS_FIPS_SERVER 90507 (CITRIX) CNS_MPX-Z_SERVER 90507 (CITRIX) 90507 (CITRIX) Licenses are case sensitive for CITRIX 90507 (CITRIX) 90507 (CITRIX) EXTERNAL FILTERS are OFF 90507 (lmgrd) CITRIX using TCP-port 29923 90507 (CITRIX) Changing message security level from -1 to 0 90507 (CITRIX) SLOG: Statistics Log Frequency is 240 minute(s). 90507 (CITRIX) (@CITRIX-SLOG@) =============================================== 90507 (CITRIX) (@CITRIX-SLOG@) === Vendor Daemon === 90507 (CITRIX) (@CITRIX-SLOG@) Vendor daemon: CITRIX 90507 (CITRIX) (@CITRIX-SLOG@) Start-Date: Wed Jan 29 2025 090507 EST 90507 (CITRIX) (@CITRIX-SLOG@) PID: 83494 90507 (CITRIX) (@CITRIX-SLOG@) VD Version: v11.19.6.0 build 293152 x64_f11 ( build 293152 (ipv4)) 90507 (CITRIX) (@CITRIX-SLOG@) 90507 (CITRIX) (@CITRIX-SLOG@) === Startup/Restart Info === 90507 (CITRIX) (@CITRIX-SLOG@) Options file used: None 90507 (CITRIX) (@CITRIX-SLOG@) Is vendor daemon a CVD: No 90507 (CITRIX) (@CITRIX-SLOG@) Number of VD restarts since LS startup: 0 90507 (CITRIX) (@CITRIX-SLOG@) 90507 (CITRIX) (@CITRIX-SLOG@) === Network Info === 90507 (CITRIX) (@CITRIX-SLOG@) Listening port: 29923 90507 (CITRIX) (@CITRIX-SLOG@) Daemon select timeout (in seconds): 1 90507 (CITRIX) (@CITRIX-SLOG@) 90507 (CITRIX) (@CITRIX-SLOG@) === Host Info === 90507 (CITRIX) (@CITRIX-SLOG@) Host used in license file: adc-m1-mpx-training-a 90507 (CITRIX) (@CITRIX-SLOG@) HostID node-locked in license file: NA 90507 (CITRIX) (@CITRIX-SLOG@) HostID of the License Server: 0cc47a967bb3 90507 (CITRIX) (@CITRIX-SLOG@) Running on Hypervisor: Not determined - treat as Physical 90507 (CITRIX) (@CITRIX-SLOG@) =============================================== 90507 (CITRIX) Ecomms: Encrypted Communication disabled 90507 (CITRIX) TCP_NODELAY NOT enabled 90507 (CITRIX) Listener Thread: running 90507 (CITRIX) Starting diagnostics port listener thread (DPLT) 90507 (CITRIX) Starting diagnostics output thread (DRQT) 90507 (CITRIX) DPLT: running 90507 (CITRIX) DRQT: running 90507 (CITRIX) DPLT: waiting for logger to connect lmstat - Copyright (c) 1989-2024 Flexera. All Rights Reserved. Flexible License Manager status on Wed 1/29/2025 09:05 License server status: 27000@adc-m1-mpx-training-a License file(s) on adc-m1-mpx-training-a: /nsconfig/license//10-MPX-ZeroTouch-FID_69070370_92c8_4a45_a117_a2247aadceb4.lic: adc-m1-mpx-training-a: license server UP (MASTER) v11.19.6 Vendor daemon status (on adc-m1-mpx-training-a): CITRIX: UP v11.19.6 Feature usage info: Users of CNS_FIPS_SERVER: (Total of 10 licenses issued; Total of 0 licenses in use) Users of CNS_MPX-Z_SERVER: (Total of 10 licenses issued; Total of 0 licenses in use) 90510 (lmgrd) lmgrd will now shut down all the vendor daemons 90510 (lmgrd) Shutting down CITRIX pid=83494 because of signal 15 90510 (CITRIX) (@CITRIX-SLOG@) =============================================== 90510 (CITRIX) (@CITRIX-SLOG@) === Last 10 Client Requests Processing Time (in ms) === 90510 (CITRIX) (@CITRIX-SLOG@) Time: Wed Jan 29 2025 090510 EST 90510 (CITRIX) (@CITRIX-SLOG@) Request processing time, when, #concurrent clients, client info (user, node, FD) 90510 (CITRIX) (@CITRIX-SLOG@) 00000000 ms at Wed Jan 29 2025 090510 EST,#3,(root,adc-m1-mpx-training-a,38) 90510 (CITRIX) (@CITRIX-SLOG@) 00000000 ms at Wed Jan 29 2025 090510 EST,#3,(root,adc-m1-mpx-training-a,38) 90510 (CITRIX) (@CITRIX-SLOG@) 00000000 ms at Wed Jan 29 2025 090510 EST,#3,(root,adc-m1-mpx-training-a,38) 90510 (CITRIX) (@CITRIX-SLOG@) 00000000 ms at Wed Jan 29 2025 090510 EST,#3,(root,adc-m1-mpx-training-a,38) 90510 (CITRIX) (@CITRIX-SLOG@) 00000000 ms at Wed Jan 29 2025 090510 EST,#3,(root,adc-m1-mpx-training-a,38) 90510 (CITRIX) (@CITRIX-SLOG@) 00000000 ms at Wed Jan 29 2025 090510 EST,#3,( ,adc-m1-mpx-training-a,38) 90510 (CITRIX) (@CITRIX-SLOG@) 00000000 ms at Wed Jan 29 2025 090510 EST,#3,( ,adc-m1-mpx-training-a,38) 90510 (CITRIX) (@CITRIX-SLOG@) 00000001 ms at Wed Jan 29 2025 090510 EST,#3,( ,adc-m1-mpx-training-a,38) 90510 (CITRIX) (@CITRIX-SLOG@) 00000000 ms at Wed Jan 29 2025 090510 EST,#3,( ,adc-m1-mpx-training-a,38) 90510 (CITRIX) (@CITRIX-SLOG@) 00000000 ms at Wed Jan 29 2025 090510 EST,#3,( ,adc-m1-mpx-training-a,38) 90510 (CITRIX) (@CITRIX-SLOG@) 90510 (CITRIX) (@CITRIX-SLOG@) === Top 10 Peak Client Requests Processing Time (in ms) === 90510 (CITRIX) (@CITRIX-SLOG@) Time: Wed Jan 29 2025 090510 EST 90510 (CITRIX) (@CITRIX-SLOG@) Request processing time, when, #concurrent clients, client info (user, node, FD) 90510 (CITRIX) (@CITRIX-SLOG@) 00000001 ms at Wed Jan 29 2025 090510 EST,#3,( ,adc-m1-mpx-training-a,38) 90510 (CITRIX) (@CITRIX-SLOG@) 90510 (CITRIX) (@CITRIX-SLOG@) === Top 10 Peak In-house Operations time (in ms) === 90510 (CITRIX) (@CITRIX-SLOG@) NOTE: Peak times greater than 4 seconds get recorded. 90510 (CITRIX) (@CITRIX-SLOG@) Time: Wed Jan 29 2025 090510 EST 90510 (CITRIX) (@CITRIX-SLOG@) In-house operation time, when, #concurrent clients 90510 (CITRIX) (@CITRIX-SLOG@) 90510 (CITRIX) (@CITRIX-SLOG@) === Active Connections Info === 90510 (CITRIX) (@CITRIX-SLOG@) Peak active connections #3 attempted at Wed Jan 29 2025 090510 EST 90510 (CITRIX) (@CITRIX-SLOG@) 90510 (CITRIX) (@CITRIX-SLOG@) =============================================== 90510 (lmgrd) Shut down FlexNet CITRIX license server system on machine adc-m1-mpx-training-a 90510 (lmgrd) EXITING DUE TO SIGNAL 15 90510 (CITRIX) Shutdown requested. 90510 (CITRIX) daemon shutdown requested - shutting down

NetScaler Console on premises or Console Service?

On prem

Ty

Thank you sir, if anyone will figure this out, its you.

I am relaying. But, I am vested in the answer as I have a customer who may need to do the same.

show ns hardware

Platform: NSMPX-8000-10G-Z 4*CPU+32GB+6*E1K+2*IX+1*E1K+4*CVM 1620 675320 Manufactured on: 11/21/2016 CPU: 3400MHZ Host Id: 17334406 Serial no: A07HDCRKPK Encoded serial no: A07HDCRKPK Netscaler UUID: d929aa92-8b03-11ea-a031-00e0ed47544e BMC Revision: 3.56 Done

@Jeff Riechers based on the hardware, you have six 1 Gigabit Ethernet (GbE) ports, contributing a total of 6 Gbps bandwidth and two 10 Gigabit Ethernet (GbE) ports, adding another 20 Gbps. So I would assume it's not possible and will be useless to try to add more than 20

I think that is it! Didn't even notice that this unit only had 2 10gb sfp ports, the layout online showed 4 interfaces. Still doesn't explain why 19 is the limit. If we aggregated the 10gb and 6gb we still should be able to go to 26.

if all are connected probably, do you have all the network interfaces connected?

Yes, the online shows (4) 10gb. It also shows 8 core CPU so I am curious

Where do you see 4 10GB on 8000?

I was looking at 8900.

the model @Jeff Riechers shared only shows 2 10GB not 4, isn't it?

@Jeff Riechers do you have 8900 or 8000?

It was an 8920, when we switched to flex it says 8000.

ah ok

8900 series have 8cpu and (4) 10gb adapters.

it's weird that switching to flex show only 2 10Gbps in this case ...

It is also showing 4 cpu not 8.

Z Capacity is linked to type not model (SDX, MPX), no?

It could be the customer gave me the wrong model, they have lots of gear, could be this IS only an 8020. I will get back.

Can you please share the Z Capacity license?

They are CPL, we allocated like 200 GB

@Arnaud Pain that’s right, platform only.

@Jeff Riechers Can you share the Z capacity license? Thanks!

I am not at a computer. I think you can log in to Citrix Support and pull warranty and model info from the serial number. That should tell us. But, physically (4 cpu, 32gb RAM, two 10gb NICs) matches the 8200, 8400, 8600, 8800 series not the 8900.