Wednesday, July 4, 2018

NGINX/HAProxy vs. F5 BIG-IP/Citrix Netscaler

Our F5 and Netscaler supports are ending soon and I'm wondering about NGINX and HAProxy options instead of renewing... even with enterprise level support they'd be a lot cheaper. How about feature wise, is there anything that I couldn't do with those softwares?

Currently we're using those hardware appliances for Citrix VDI (+FAS), SSL VPN (we could switch to Fortigate's SSL VPN) and we're using F5's APM module to do SAML/ADFS authentications for applications.

F5 has those iApps that configure a huge amount of stuff (Citrix VDI, Exchange, ADFS, Lync, Sharepoint have their own "apps"). I'm wondering if it's possible to do all the required configs with the NGINX/HAProxy? Or do I even need anything special to load balance those ICA/ADFS/whatever? (Of course according to Citrix or F5 they're a must:)

Bandwidth wise we're not using that much. If those "more complicated" setups would be impossible to do on "software", we could probably live with 200Mbps license for F5/Netscaler and have the "common load balancing" on NGINX/HAProxy.

Thanks for any ideas!



No comments:

Post a Comment