Citrix ADC (now NetScaler) vs Linux Virtual Server

Citrix ADC, now NetScaler, is an application delivery and security platform for high-performance traffic management, application and API protection, and end-to-end observability. Its delivery features include load balancing, intelligent traffic management, SSL/TLS offloading, dynamic scaling, Kubernetes ingress, and multi-cluster routing. Security capabilities include a web application firewall, API protection, and bot mitigation. Management options cover ADC monitoring, infrastructure as code, intent-based configuration, Next-Gen API, and NITRO APIs. NetScaler is available as a virtual machine (VPX), container (CPX), bare-metal deployment (BLX), or single-tenant (MPX) and multi-tenant (SDX) hardware. A common code base and single management plane support management across hybrid and multi-cloud environments. Listed integrations include AWS, Microsoft, Google, IBM, Oracle, Kubernetes, Terraform, Ansible, Rancher, Splunk, Prometheus, Grafana, and Elastic. The Platform License has unlimited throughput; the Universal Hybrid Multi-Cloud License includes 1,000 Gbps; Fixed-Capacity defines instance counts. Prices are available on request.

Linux Virtual Server (LVS) turns a cluster of real Linux servers into one virtual server for users. Its IPVS component performs layer 4 balancing in the Linux kernel, directing TCP and UDP requests sent to a virtual service IP toward servers behind it. Supported forwarding methods are NAT, FULLNAT, tunneling, and direct routing. The project lists web, cache, mail, FTP, media, and VoIP services as applications. Capacity can be changed by adding or removing cluster nodes. Failure detection can identify node or daemon problems and reconfigure the system for availability. Keepalived checks server-pool state at layers 3, 4, and 5 and tells the kernel to remove a failed server. KTCPVS supplies application-level balancing but is under development. LVS is free GPL-licensed software for Linux and self-hosted use. Administration uses ipvsadm, with documentation for configurations, scheduling, high availability, and DoS defense.