Configure SPDY Protocol on Citrix Netscaler ADC 10.1

Configuring SPDY protocol on Netscaler is pretty straightforward. Ensure that you have upgraded Netscaler device or virtual appliance to the latest version, currently 10.1. SPDY requires SSL, so an SSL Certificate should be obtained from a Certification Authority and you may want to SSL offload your website as well.

To configure SPDY, login to the console and goto System – Profiles, select the HTTP Profiles tab on the right pane. Press the Add button to create a new profile or select an existing one. For example let’s create a new profile called Http-SPDY profile. Check out all the needed options and finally the SPDY checkbox.

SPDY Profile

SPDY Profile

Press OK to save the new profile and goto Configuration – Traffic Management – SSL Offload – Virtual Servers. Double click your virtual server and select the Profiles tab.

Virtual Server HTTP Profile

Virtual Server HTTP Profile

At the SSL Profile option select the previously created profile. Press OK and you are done. Your website is now SPDY enabled.

Of course, in real world nothing is easy! For example, when your website uses Microsoft’s Windows Communication Foundation (WCF) architecture, you must create rewrite rules on your Netscaler to replace http requests to https. By enabling SPDY, the website gets into a redirection loop and the session shuts down!

Chrome Redirection Loop

Chrome Redirection Loop

Firefox Redirection Loop

Firefox Redirection Loop

I haven’t find a workaround for this problem. Any help is appreciated!

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s