In this release, Pulse Secure Traffic Manager offers increased UDP performance, as well as additional functions to help with IPv6 geolocation and GLB workload. Highlights include:
UDP Performance Improvements - Traffic Manager is now able to take advantage of the Linux kernel socket option SO_REUSEPORT to improve performance when load balancing UDP traffic. In addition, new configuration options are available to customize UDP behavior. See the release notes for more details.
TrafficScript support for IPv6 Geolocation APIs - Traffic Manager now includes both IPv4 and IPv6 geolocation data, and applications can now access both IPv4 and IPv6 geolocation data in TrafficScript with a single call. Previous releases included only the IPv4 data, and required IPv6 data to be loaded separately. Example usage is the same for both IPv4 and IPv6:
$ip = request.getRemoteIP();
$country = geo.getCountry($ip);
Access to TimeZone information - From this release, Traffic Manager has an additional geolocation API function geo.getTimeZone(IP), which uses the built-in geolocation database to return the IANA text format for the timezone corresponding to the given IP. In addition, a new systems function sys.tztime.format(format, timezone, unixtime) can be used to render the time in the current timezone, for example:
$str = sys.tztime.format(format, getTimeZone($ip));
Setting GLB workloads via Monitor Scripts - Traffic Manager uses the TrafficScript function glb.service.getLocationLoad() to inspect the workload at a given location, but this must be set by an external monitor. In this release, Traffic Manager supports a simplified method to set the GLB workload by eating from stdout. In this way, a monitor script can emit a workload via stdout, which will be read directly by Traffic Manager and used for GLB weighting. The monitor script can set the workload by printing the numeric workload value to stdout, such as:
For more information, please refer to the release notes, available on the download portal. A complete set of user documentation is also available on http://pulsesecure.net/vadc-docs including getting started guides, installation, configuration and API reference documentation.
In this release, Pulse Secure Virtual Traffic Manager has more enhancements for closer integration with Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS), including support for simpler session persistence of RADIUS.
In this release, Pulse Secure Virtual Traffic Manager has additional tools to help with intelligent load balancing of Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS). In addition, new global settings for Session Persistence allow for simpler workload management with timeout of unused session entries in the persistence cache table.
Intelligent LB for PCS/PPS - Traffic Manager now supports intelligent load-balancing for Pulse Connect Secure VPN gateways and Pulse Policy Secure network access control. This capability uses a new built-in service discovery plugin to discover PCS/PPS cluster nodes, and can optimize the license usage across cluster nodes by directing new sessions based on available license capacity. Session Persistence Timeouts - Closer control over the persistence cache in Traffic Manager makes it easier to redistribute workload following node reconfiguration or failure, by providing all session persistence entries with an optional lifetime. After an entry expires it is deleted from the persistence cache: a global timeout value can be set for each of the three persistence methods, Source IP, J2EE and Universal persistence. Note that the timeout value is measured since last use, rather than first use: new SNMP monitors are also available to help track session expiry. Long-Term Support release - For customers who prefer longer support cycles to support their operational model, Pulse Secure is identifying Pulse vTM 19.2 as an LTS (Long Term Support) release. As a result, support for Pulse vTM 19.2 will be available for three years after the release date. For more information, please refer to the release notes, available on the download portal. A complete set of user documentation is also available on http://pulsesecure.net/vadc-docs including getting started guides, installation, configuration and API reference documentation.
In this release, Pulse Secure Services Director offers the capability to deploy Application Templates to automate configuration of clusters. In addition, Services Director supports a new secure websockets connection for more robust management of Traffic Manager instances in Kubernetes and NAT-enabled networks.
In this release, Pulse Secure Virtual Traffic Manager adds a new Wizard to speed up deployment of Optimal Gateway Selection for closer integration with Pulse Connect Secure. Other new features add support for Kubernetes Helm Charts, container networking and more.