F5 BIG-IP Local Traffic Manager (LTM) vs. NetScaler

There was a need to have the DR environment to be available actively but not to send the traffic unless the production is down The F5 BIG-IP Local Traffic Manager (LTM) priority feature helped achieving it. It was well suited in handling the HTTP headers using polices and iRules. It was less appropriate from the application security perspective in the current version. But after attending the AppWorld 2024, I see a lot of ways to protect the network and the application with several features.

Incentivized

Citrix NetScaler is suited to any environment where hardware load-balancing, application delivery or SSL offloading is a requirement. It's a product that can be used to manipulate traffic flows in a multitude of different ways and its only limit is the protocol, application and imagination of the administrator. It's not a product that includes helpful wizards to guide the admin through each process gracefully. While it is a fairly intuitive product to use, it's not for someone who is not initiated into the ways of networking and network protocols and communication. Nor is this a product that would lend itself solely for the usage of single usage scenarios where small traffic flows would be expected (although if desired the VPX product would probably suffice in that specific scenario depending on the environment)

Incentivized

• Sure. It does load balancing fantastically. I mean, it's an industry standard product for that. We also use it for TLS offload for applications. Those are the two main use cases for that. We do also use some of the I rules for traffic filtering. We've used that in some of the external facing services. It does a really nice job with that. It's a little bit complicated sometimes and some of the Cipher Suite stuff is interesting.

Incentivized

• The GUI interface is fairly easy to learn making ramp-up time faster than some similar products.
• It is used by thousands of companies around the globe so finding free support on Google is usually quite easy.
• The virtual implementation version of the product runs on a Linux-based hypervisor install so no additional licensing is needed for the OS.
• When used in conjunction with a Citrix Web front/Storefront, the integration is very tight making the passing of packets very quick.
• Even in the lesser VPX versions, there is the ability to have a cluster of Netscalers to allow for uptime capability.

Incentivized

• Some of the stuff you have to dive into the CLI to really use, I'm going to reach back to the previous employer for this. So I had a much greater degree of involvement with it at that point in time for, I was the crypto guy at the company and I had to design all the cipher suites that we actually implemented on our front end banking products. So in order to do that, I had to dive into it, download all the Cipher suites, figure out the actual order of operation for them, how they were selected because I wanted to design the Cipher Suites to actually provide a specific customer experience for the types of connections that our customers were likely to initiate. Getting at that information was a giant PITA. It was poorly documented at the time. I'm not sure if it's documented any better now. Every time the software changed or got upgraded, made your version, I'd have to do it all over again because the upgrades to the stack, which looked like it was based on open SSL, but it was heavily modified with a different syntax. Oh yay. That's fun too. So I had to write giant documents describing all of the ciphers that I was designing for this because it just kept changing all the time. So I didn't care for that aspect of it. Traffic management does a great job for that.

Incentivized

• At times it seems like there is a flurry of firmware updates needed to remediate security vulnerabilities which creates some overhead.
• Out of the box automation using ADM is a bit lacking
• Nit picking but occasionally there are minor config changes that need to be done via CLI or GUI but nothing significant.

Incentivized

F5 has always been one of the best products we have in the data center. We had few issues with the BUG and Code upgrades but the main use cases for F5 was always top notch. From High availability to Globally load balancing applications across multiple data centers and muti cloud environments.

Incentivized

F5 BIG-IP Local Traffic Manager is a very good product. It is used in our company widely. So far we are very happy with the product. Esspecially on the load balancing and TLS encryption and Traffic redirecting based on HTTP path and http query. iRules is very easy to use as well.

Incentivized

I gave the NetScaler a 7 here because the system once configured and deployed is very easy to use. However, if you did not deploy the system and do not have the fundamental background knowledge then you will have trouble using the product in general. Overall it is a great product and service but does typically require professional services to be deployed.

Incentivized

Good after sales support if one purchased direct support from F5.

Incentivized

Overall, our organization's experience with Citrix support is that support can be hit or miss. Oftentimes it takes multiple attempts and much longer than desirable to obtain a viable solution for issues experienced with their products. It would be great to see Citrix invest time, effort, and almighty dollars into improving their support and bug fix process across the board.

Incentivized

Easy to implement if one had attended F5 Training for Local Traffic Manager (LTM).

Incentivized

Obviously NetScaler, because we had that functionality, we just turned it on. We were only using it for our Citrix farms and we migrated all of our F5 uses over to the NetScalers. So simply because that was, other than buying the product, which the actual NetScaler themselves were cheap. I mean it cost us like $60,000 for all of them for the hardware. We were already licensed for it, so it was a no-brainer. We didn't have a choice. Definitely a superior product. A lot more functionality, particularly in corner cases where you might need to make some specific traffic tweaks. I would say that the NetScaler doesn't do nearly as good a job with that traffic filtering. You only really get URI filtering with NetScaler. You don't have the flexibility, the eye rolls or the complexity of the eye rolls, so that's a negative too.

Incentivized

Netscaler has more features than F5 BIG-IP APM product and easier to manage with friendlier user interface for network admins. It was more cost efficient as well and if you have a Citrix XenApp and XenDesktop environment, it is more compatible with those products as well. Our annual maintenance cost is lower as well.

Incentivized

• We use these for 600+ applications and we are able to manage all of them remotely and provide security across every application in one single platform.
• We are able to provide an amazing customer experience load balancing across multiple nodes and this increases traffic on our websites and ultimately increases orders and traffic.

Incentivized

• Features - There are many features to be used that we haven't quite gotten to.
• Licensing - The need for licensing is one of those necessary evils.
• Reporting - It gave our management team the requested graphs and statistics on usage.

Incentivized