reference deployment

Citrix ADC VPX for Web Applications on AWS

All-in-one application delivery controller

This Quick Start automatically deploys Citrix Application Delivery Controller (ADC) VPX for high availability (HA) on the Amazon Web Services (AWS) Cloud.

Citrix ADC VPX provides advanced Layer 4 (L4) load balancing, Layer 7 (L7) traffic management, global server load balancing, server offload, application acceleration, application security, and other essential application delivery capabilities for business needs. 

This Quick Start is for users who want to build and test a proof of concept or to create a production-ready solution with a highly available deployment of Citrix ADC VPX as a front end for their web applications.

cisco logo

This Quick Start was developed by Citrix Systems in collaboration with AWS. Citrix Systems is an
AWS Partner.

AWS Service Catalog administrators can add this architecture to their own catalog.  

  •  What you'll build
  • The Quick Start sets up the following:

    • A virtual private cloud (VPC) that spans two Availability Zones, configured with two public and four private subnets, according to AWS best practices, to provide you with your own virtual network on AWS with a /16 Classless Inter-Domain Routing (CIDR) block (a network with 65,536 private IP addresses).*
    • Two instances of Citrix ADC VPX, one in each Availability Zone.
    • Three security groups, one for each network interface (Management, Client, Server), that act as virtual firewalls to control the traffic for their associated instances.
    • In the public subnets:
      • Managed network address translation (NAT) gateways to allow outbound internet access for resources in the private subnets.*
      • A Linux bastion host in an Auto Scaling group to allow inbound Secure Shell (SSH) access to Amazon Elastic Compute Cloud (Amazon EC2) instances in public and private subnets.*
      • An elastic network interface for Client (public).
      • An Elastic IP address attached to the virtual server IP (VIP) of the primary ADC VPX instance. 
    • In the private subnets, a network interface with a private IP address for the Management subnet (NSIP) and a network interface with a private IP address for the back-end Server subnet (SNIP).
    • An AWS Lambda function to handle Citrix ADC VPX high availability and load balancing configuration.
    • An AWS Identity and Access Management (IAM) role to securely control access to AWS services and resources for your users.

    * The template that deploys the Quick Start into an existing VPC skips the components marked by asterisks and prompts you for your existing VPC configuration.

  •  How to deploy
  • To deploy Citrix ADC VPX on AWS in about 15 minutes, follow the instructions in the deployment guide. The deployment process includes these steps:

    1. If you don't already have an AWS account, sign up at, and sign in to your account.
    2. Subscribe to a Citrix ADC VPX Amazon Machine Images (AMIs). For information about the different AMIs that are available, see the deployment guide.
    3. Launch the Quick Start. You can choose from two options:
    4. Test the deployment.

    Amazon may share user-deployment information with the AWS Partner that collaborated with AWS on the Quick Start.  

  •  Cost and licenses
  • You are responsible for the cost of the AWS services used while running this Quick Start reference deployment. There is no additional cost for using this Quick Start.

    The AWS CloudFormation templates for this Quick Start includes configuration parameters that you can customize. Some of these settings, such as instance type, will affect the cost of deployment. For cost estimates, see the pricing pages for each AWS service you will be using. Prices are subject to change.

    Tip     After you deploy the Quick Start, we recommend that you enable the AWS Cost and Usage Report to track costs associated with the Quick Start. This report delivers billing metrics to an Amazon Simple Storage Service (Amazon S3) bucket in your account. It provides cost estimates based on usage throughout each month, and finalizes the data at the end of the month. For more information about the report, see the AWS documentation.

    This Quick Start requires a subscription to a Citrix ADC VPX AMI. You can choose an AMI based on the licensing model, throughput, and bundling options.

    • License model: Pay as You Go (PAYG, for the production licenses) or Bring Your Own License (BYOL, for the Customer Licensed AMI)
    • Throughput: 10 Mbps, 200 Mbps, 1000 Mbps, 3 Gbps, or 5 Gbps
    • Bundle: Express, or Standard, Advanced, or Premium

    For more information about the different AMIs that are available, see the deployment guide.

    If you don’t want to purchase a license file at this time, the Quick Start, you can subscribe to the Citrix ADC VPX – Customer Licensed AMI, which allows 21 days of free usage and is available from AWS Marketplace. Additional pricing, terms, and conditions may apply.

    To upgrade to a production license, see the Licensing section on the Citrix website.