Our organization is looking to switch from Citrix NetScaler load balancers to something more affordable because the renewal costs have been climbing. Has anyone made the leap away from NetScaler? If so, what did you choose as a replacement and how's it been working out? We're mainly using them for load balancing and reverse proxy for our applications, Global Server Load Balancing (GSLB), and SSL/TLS termination/offload. Any recommendations, experiences, or things to watch out for would be really helpful!
8 Answers
Honestly, like VMware, NetScaler pricing has just skyrocketed. These days, most folks have moved to Azure Virtual Desktop (AVD) for app publishing. It cuts down on managing all the complex configurations and just leaves you with a VPN to Azure and some Virtual Desktops—much cheaper.
Kemp load balancers have worked well for me. Another option is Cloudflare, which can even do this for free.
We've been using the Kemp Loadmaster and it's been rock solid for us. Our setup is straightforward, so we haven't faced any outages linked to it. I can't really comment on its pricing compared to NetScaler, though.
Totally agree! We have a Kemp Loadmaster for load balancing and SSL/TLS offloading, while still using a Netscaler for ICA Proxy. It's way cheaper than the Netscaler.
Just a heads up, avoid Riverbed. They have a terrible reputation.
I've been curious about F5's options in this space. I haven't tried it, but I've heard they're good. There's also Relianoid (formerly Zevenet) which I used before—pretty basic but got the job done.
F5 is solid! Their products are great and can be managed with Infrastructure as Code. Just keep in mind that they announced a breach recently, which might affect their reliability.
I love how some people here are tossing out replacements like AVD instead of just load balancers, haha. But seriously, Cloudflare's tunneling tech seems promising.
If you're using Office 365 and Entra, check out the Entra app proxy. It can publish your internal apps as enterprise ones and comes with conditional access and MFA in the P1 plan. If you need more than just basic web apps, Entra private access can cover every port for a decent price.
From what I gather, AVD is a good solution—expensive, but still a solid choice overall.
Exactly! You shift from maintenance to actually providing IT services.