Deployment Guide

Deploying Oracle Enterprise

Manager with NetScaler

Deployment Guide

This guide focuses on defining the process for deploying Oracle Enterprise
Manager with Citrix NetScaler

Citrix.com 1
Deploying Oracle Enterprise Manager with NetScaler Deployment Guide

Table of Contents

Introduction 3
Configuration 3
NetScaler features to be enabled 4
Steps for load balancing configuration 4
Solution Description 5
Quick Configuration Table 5
Configuring Load Balancing 7
Verification 11
Authentication 11
Configuring Optimization on NetScaler 12
HTTP Compression 12
Integrated Caching 14
Front End Optimization 18
Conclusion 20

Citrix.com | Deployment Guide | Deploying Oracle Enterprise Manager with NetScaler 2

Deploying Oracle Enterprise Manager with NetScaler Deployment Guide

Citrix NetScaler is a world-class product with the proven ability to load

balance, accelerate, optimize, and secure enterprise applications.

For several years, Citrix has completed certifications and provided

deployment guides for key enterprise applications. NetScaler’s rich
application delivery capabilities significantly enhance the performance
of these applications. With a comprehensive feature set, It provides
availability, scalability, optimization and security for Oracle OEM
deployments.

Introduction
This guide defines the process for deploying Oracle Enterprise Manager 12c with NetScaler.
Citrix NetScaler is a world class application delivery controller, with the proven ability to load balance, accelerate,
secure and optimize enterprise applications.

Oracle Enterprise Manager 12c is Oracle’s on-premises management platform, providing a single pane of glass
for managing all of a customer's Oracle deployments.

Configuration

Citrix.com | Deployment Guide | Deploying Oracle Enterprise Manager with NetScaler 3

Deploying Oracle Enterprise Manager with NetScaler Deployment Guide

Recommended Product Versions

Product Version

Oracle Enterprise Manager 12c

11.0 (Platinum License) – Load Balancing,

NetScaler VPX Compression, Caching and FEO
11.0 (Standard License) – Only Load Balancing

NetScaler features

The following NetScaler features are discussed in this deployment guide.

• Load balancing
• SSL offload
Other considerations
• Make sure you have installed, at a minimum, one license on the NetScaler appliance.
• Set the time zone and a NTP (Network Time Protocol) server, and check the date and time on the NetScaler
virtual appliance, as OEM Server server connections can be very sensitive to time differences.
• Configure your DNS settings properly: Note that for the purposes of certificate-based authentication, all
addressable hosts that are part of the network setup should have resolvable domain names, not just IP
addresses.

Citrix.com | Deployment Guide | Deploying Oracle Enterprise Manager with NetScaler 4

Deploying Oracle Enterprise Manager with NetScaler Deployment Guide

Solution Description
Configuring Load Balancing

A load balancing configuration consists of the definition of load balancing virtual servers (LB vServers), as well
as services that are bound to the LB vservers. A service is simply a combination of a server and a protocol (e.g.
HTTP, Port 80 or HTTPS, port 443).

Step 1 - Define the load balancing virtual servers (LB vservers)

Log into the NetScaler GUI. On the Configuration tab, navigate to Traffic Management>Load Balancing>Virtual
Servers. For this deployment exercise, we are load balancing two Oracle OEM Server instances. The following
load balancing virtual servers will be created as part of this configuration:

Virtual Server Name Details Port Protocol Persistence

vs_ccsc443 Secure Console 443 SSL Source IP

vs_ccscbip5443 Secure BI Publisher 5443 SSL Source IP

vs_ccuc80 Unsecure Console 80 HTTP Source IP

vs_ccucbip8080 Unsecure BI Publisher 8080 HTTP Source IP

vs_ccsu4900 Secure Upload 4900 SSL NA

vs_ccar4889 Agent Registration 4889 HTTP Cookie

vs_ccaom8081 Always-On Monitoring Secure Upload 8081 SSL NA

When defining a new LB vserver, you will be presented with the settings screen.

(The steps shown here are for an SSL vserver. Follow the same steps to configure the HTTP vservers as well,
only select port 80 as the port and HTTP as the protocol)

Citrix.com | Deployment Guide | Deploying Oracle Enterprise Manager with NetScaler 5

Deploying Oracle Enterprise Manager with NetScaler Deployment Guide

After clicking OK, you will see the Basic Settings screen for the LB vserver. Here, you may change settings such
as the session persistence method, authentication and load balancing methods. Set session persistence as per
the table above and the load balancing method to LEASTCONNECTION for all virtual servers.

For more information on these features, please refer to https://docs.citrix.com/en-us/netscaler/11.html

Citrix.com | Deployment Guide | Deploying Oracle Enterprise Manager with NetScaler 6

Deploying Oracle Enterprise Manager with NetScaler Deployment Guide

To enable an SSL-based LB vserver, you should add an SSL certificate and key pair. For this, you may use either a
self-signed certificate generated on the NetScaler appliance or a CA (Certificate Authority) signed one. The steps
for generating a self-signed certificate on the NetScaler are as follows –
1. Login to your NetScaler appliance via the Configuration Utility.
2. Select Traffic Management > SSL
3. On the right, under Tools, select Server Certificate Wizard.
4. Here, the wizard will lead you through the series of steps for generating the self signed certificate –
• Generate the private key
• Generate the CSR (Certificate Signing Request)
• Generate the Certificate (using the ns-root.cer NetScaler root certificate)
• Save the Certificate and Key pair

Alternatively, if a certificate and key pair is already available, the same can be added by navigating to
SSL>Certificates and clicking on the Add button. For more details refer to http://support.citrix.com/article/
CTX109260

To improve site security and achieve an A/A+ rating on the SSLLabs.com evaluation, refer to https://www.citrix.
com/blogs/2016/06/09/scoring-an-a-at-ssllabs-com-with-citrix-netscaler-2016-update/

Citrix.com | Deployment Guide | Deploying Oracle Enterprise Manager with NetScaler 7

Deploying Oracle Enterprise Manager with NetScaler Deployment Guide

Step 2 – Define LBVS server service group binding

Now click on the Load Balancing Virtual Server Service Binding tab in the Service and Service Groups section, or
alternatively, click on Services in the Traffic Management>Load Balancing subsection and then, click on the Add
button.

Every LB service is linked to a server; this can either be a new server or an existing server already defined in
the Servers subsection under Load Balancing. Service groups extend this by allowing the creation of a group of
services. An LB vserver can use a set of services or a service group.

Here, define the names for the services for each OEM server instance, the IP address (or choose from a list in the
case of an existing server) for the OEM server instances and the protocol they operate on as per the table below:

Service Name Details Port Protocol

vs_ccsc443 Secure Console 7802 SSL

vs_ccscbip5443 Secure BI Publisher 9803 SSL

vs_ccuc80 Unsecure Console 7788 HTTP

vs_ccucbip8080 Unsecure BI Publisher 9701 HTTP

vs_ccsu4900 Secure Upload 4903 SSL

vs_ccar4889 Agent Registration 3872 HTTP

vs_ccaom8081 Always-On Monitoring Secure Upload 8081 SSL

Recommended Best Practices:

- Name your server instances as per their role, not with the IP address (for example, the Oracle OEM
servers can be named OEM1 and OEM2)
- As there will be multiple items linked to each application (LB vservers, services, policies among others),
it is recommended that they be named appropriately for convenience. This will make using tools such as grep
with the CLI a lot easier.

Citrix.com | Deployment Guide | Deploying Oracle Enterprise Manager with NetScaler 8

Deploying Oracle Enterprise Manager with NetScaler Deployment Guide

Step 3 – Define Monitors

After defining services, the following monitors should be defined and bound to the appropriate services –

Service Name Details Type Interval Ti meout Monitor Expression Receive String

GET /em/consoleStatus.
Secure Con- jsp HTTP/1.1\r\nHost: Enterprise Manager
mon_ccsc https 5 16
sole \r\nConnection: Close Console is UP
\r\n\r\n

Secure BI GET /empbs/genwallet GenWallet Servlet

mon_ccscbip https 5 15
Publisher \r\n activated

GET /xmlpserver/ser-
Unsecure vices HTTP/1.1\r\nHost: And now... Some Ser-
mon_ccuc https 5 16
Console \r\nConnection: Close vices
\r\n\r\n
GET /em/consoleStatus.
Unsecure BI jsp HTTP/1.1\r\nHost: Enterprise Manager
mon_ccucbip http 5 16
Publisher \r\nConnection: Close Console is UP
\r\n\r\n

GET /empbs/genwallet GenWallet Servlet

mon_ccsu Secure Upload http 5 16
\r\n activated

GET /xmlpserver/ser-
Agent Regis- vices HTTP/1.1\r\nHost: And now... Some Ser-
mon_ccar http 5 16
tration \r\nConnection: Close vices
\r\n\r\n

Always-On
Http Receiver Servlet
mon_ccaom Monitoring https 60 181 GET /empbs/upload \r\n
active!
Secure Upload

Citrix.com | Deployment Guide | Deploying Oracle Enterprise Manager with NetScaler 9

Deploying Oracle Enterprise Manager with NetScaler Deployment Guide

You should enable Health Monitoring if you would like to have NetScaler poll the server periodically to verify its
health – it is recommended that this setting should not be disabled except for diagnostic purposes. This and
additional settings can be accessed by clicking on the More dropdown (as shown above). If Health Monitor-
ing is disabled, the appliance shows the server UP at all times. Bind these service groups to the appropriate LB
vservers and confirm that they have been bound correctly by checking the same in the LB vserver Basic Settings
screen. Add all the OEM Server servers to be load balanced and bind them to the load balancing virtual server.

Finally, the LB vservers created will be displayed on the configuration screen to the right in the same screen that
is obtained by accessing Traffic Management>Load Balancing>Virtual Servers.

This completes the load balancing configuration for Oracle Enterprise Manager.

Citrix.com | Deployment Guide | Deploying Oracle Enterprise Manager with NetScaler 10

Deploying Oracle Enterprise Manager with NetScaler Deployment Guide

Verification

The functioning solution can be verified with a default OEM Server installation by navigating to
https://<FQDN of LB vserver>:443. This will show the Oracle Enterprise Manager Secure Console login screen.

Citrix.com | Deployment Guide | Deploying Oracle Enterprise Manager with NetScaler 11

Deploying Oracle Enterprise Manager with NetScaler Deployment Guide

Conclusion
NetScaler enables highly available Oracle Enterprise Manager deployments with its load balancing capabilities,
allowing all the various management services provided by OEM to be load balanced and monitored.

With NetScaler, enterprises can not only enable high availability for their Oracle Enterprise Manager environments,
but also extend capabilities for security and optimized access. The policy engine used by NetScaler enables enter-
prises to deploy any specific use cases that they may require, making the NetScaler solution a flexible and robust
one that can meet all enterprise requirements.

To learn more about how NetScaler can bring these benefits to Oracle Enterprise Manager installations or address
other application delivery requirements, please visit http://www.citrix.com.

Enterprise Sales
North America | 800-424-8749
Worldwide | +1 408-790-8000

Locations
Corporate Headquarters | 851 Cypress Creek Road Fort Lauderdale, FL 33309 United States
Silicon Valley | 4988 Great America Parkway Santa Clara, CA 95054 United States

Copyright© 2016 Inc. All rights reserved. Citrix, the Citrix logo, and other marks appearing herein are property of
Citrix Systems, Inc. and/or one or more of its subsidiaries, and may be registered with the U.S. Patent and Trademark
Office and in other countries. All other marks are the property of their respective owner/s.

Citrix.com | Deployment Guide | Deploying Oracle Enterprise Manager with NetScaler 12