Skip to main content

Management

Management of SGA 4 Nodes and Clusters is on the Streaming Gateway page at either the Customer or Organization entity level. The SGA management functionality will depend on whether you have deployed the SGA Cluster using Frame (Automatic Deployment) or manually (Manual Deployment).

Automatic Deployment

With automatic deployment of an SGA Cluster, Frame is responsible for the lifecycle of all network resources and the SGA VMs. The Frame Accounts must have been created using Frame-managed networking in order for administrators to use Automatic Deployment of SGA. If a Frame account was created using customer-managed networking, then the administrator must manually deploy the SGA cluster and nodes following the instructions under Manual Deployment.

Create Cluster

  1. To create a new SGA cluster, go to the Frame Console and at the Frame Customer or Organization entity level, click on Streaming Gateways on the lefthand menu.
  2. Click on Create New Cluster in the upper right corner.

Create Streaming Gateway

Create Streaming Gateway
  1. Select “Automatic” (Frame creates all resources) and then click the Continue button.

  2. Complete the Create Streaming Gateway configuration form.

Create Streaming Gateway - Automated Deployment

Create Streaming Gateway - Automated Deployment
  • Name: Name of the SGA cluster. The name of each SGA node will be the SGA cluster name appended with a unique ID.
  • Cloud Provider: Select the cloud provider you wish to use for this SGA cluster.
  • Cloud Account: Select the Cloud Account where the public cloud resources for this cluster will be provisioned.
  • Region: Select the cloud region where the SGA cluster will reside.
  • Number of VMs: Specify the number of SGA nodes (VMs) to be provisioned.
  • Custom CIDR: Specify the CIDR range where the SGA nodes will be provisioned (default 172.16.0.0/24).
  1. Once the required field values have been specified, click on the Create button to create the SGA Cluster and the SGA Nodes. You can view the status of the SGA Cluster on the Streaming Gateways page.

After your SGA cluster and SGA nodes have been created, you can then reference the SGA Cluster when creating your Frame Account so that your newly created Frame account uses the SGA Cluster.

Delete Cluster

A SGA Cluster can be deleted only if there are no Frame Accounts attached to the cluster.

  1. To delete an SGA cluster, go to the Frame Console and at the Frame Customer or Organization entity level where the SGA Cluster is defined, click on Streaming Gateways on the lefthand menu.

  2. Click on the kebab menu to the right of the SGA Cluster and select Delete.

Delete SGA Cluster

Delete SGA Cluster
  1. You will be asked to confirm that you wish to delete the SGA cluster. Click Cancel or Delete.

Confirm SGA Cluster Deletion

Confirm SGA Cluster Deletion

For SGA 4 clusters that were automatically deployed, Frame Console will terminate the SGA Nodes and the related SGA network resources (subnets, VPC/VNET) in the infrastructure and then delete the SGA Cluster.

Add Node

Customer administrators can add another SGA 4 Node to their SGA Cluster at any time.

  1. For automatically deployed SGA Clusters, navigate to the Streaming Gateways page and locate the SGA Cluster you wish to add a new SGA Node.

SGA Cluster - Add Node

SGA Cluster - Add Node
  1. Click on + Add a Node. Frame will provision a new SGA VM and wait for the VM to register.

SGA Cluster - Add Node

SGA Cluster - Add Node
  1. The Status of the SGA Node will change from Pending registration to Available once the SGA Node registers.

Delete Node

Customer administrators can delete an existing SGA 4 Node from their SGA Cluster at any time, except when:

  • The SGA 4 node is powered on.
  • There is only one SGA 4 node left and there are one or more Frame accounts attached to the SGA Cluster.
  1. For automatically deployed SGA Clusters, navigate to the Streaming Gateways page and locate the SGA Cluster you wish to delete one of the existing SGA Nodes. Note that the SGA Node to be deleted must be powered off with status Unavailable.

SGA Cluster - Node List

SGA Cluster - Node List
  1. Click on the kebab menu for the powered off SGA node and select Delete.

SGA Cluster - Delete Node

SGA Cluster - Delete Node
  1. Confirm that you wish to delete the SGA Node by clicking on the Delete node button.

SGA Cluster - Confirm Node Deletion

SGA Cluster - Confirm Node Deletion
  1. Once the SGA Node is deleted, the SGA Node will be removed from the list of nodes for the SGA Cluster.

SGA Cluster - After Node Deleted

SGA Cluster - After Node Deleted

Power On Node

With automatically deployed SGA 4 Clusters, customer administrators can power on an existing automatically deployed SGA 4 Node, if the VM is powered off.

  1. Navigate to the Streaming Gateways page and locate the SGA Cluster containing one or more SGA Nodes you wish to power on.

SGA Cluster - Node List

SGA Cluster - Node List
  1. Click on the kebab menu and select Start.

SGA Cluster - Start Node

SGA Cluster - Start Node
  1. You will be asked to confirm that you wish to power on the SGA Node.

SGA Cluster - Confirm Start Node

SGA Cluster - Confirm Start Node

Power Off Node

With automatically deployed SGA 4 Clusters, customer administrators can power off an existing automatically deployed SGA 4 Node, if the VM is powered on.

  1. Navigate to the Streaming Gateways page and locate the SGA Cluster containing one or more SGA Nodes you wish to power off.

SGA Cluster - Node List

SGA Cluster - Node List
  1. Click on the kebab menu and select Stop.

SGA Cluster - Stop Node

SGA Cluster - Stop Node
  1. You will be asked to confirm that you wish to power off the SGA Node.

SGA Cluster - Confirm Stop Node

SGA Cluster - Confirm Stop Node

Reboot Node

With automatically deployed SGA 4 Clusters, customer administrators can reboot an existing automatically deployed SGA 4 Node.

  1. Navigate to the Streaming Gateways page and locate the SGA Cluster containing one or more SGA Nodes you wish to power off.

SGA Cluster - Node List

SGA Cluster - Node List
  1. Click on the kebab menu and select Reboot.

SGA Cluster - Reboot Node

SGA Cluster - Reboot Node
  1. You will be asked to confirm that you wish to reboot the SGA Node.

SGA Cluster - Confirm Reboot Node

SGA Cluster - Confirm Reboot Node

Manual Deployment

With manual deployment of an SGA Cluster, the customer is responsible for the lifecycle of all network resources and the SGA VMs. The Frame Accounts must have been created using customer-managed networking in order for administrators to use Manual Deployment of SGA. If a Frame account was created using Frame-managed networking, then the administrator must follow the instructions under Automatic Deployment of an SGA Cluster.

Create Cluster

  1. To create a new SGA cluster, go to the Frame Console and at the Frame Customer or Organization entity level, click on Streaming Gateways on the lefthand menu.
  2. Click on Create New Cluster in the upper right corner.

Create Streaming Gateway

Create Streaming Gateway
  1. Select “Manual” and then click the Continue button.

  2. Complete the Create Streaming Gateway configuration form.

Create Streaming Gateway - Manual Deployment

Create Streaming Gateway - Manual Deployment
  • Name: Name of the SGA cluster. The name of each SGA node will be the SGA cluster name appended with a unique ID.
  • Cloud Provider: Select the cloud provider you wish to use for this SGA cluster.
  • Cloud Account: Select the Cloud Account where the public cloud resources for this cluster will be provisioned.
  1. Frame Console will display the newly created SGA Cluster and one SGA Node entry. Notice that Frame Console provides the Activation Code for this first SGA Node. You will need this Activation Code to register the SGA Node you manually provision.

Create Streaming Gateway - Manual Deployment

Create Streaming Gateway - Manual Deployment

Once the SGA Cluster has at least one registered SGA Node, you can then reference the SGA cluster when creating new Frame accounts.

note

The Activation Code must be used within 30 minutes of creation. If the Activation Code expires, you may click on Generate new code on the SGA Node line to obtain a new Activation Code.

Delete Cluster

A SGA Cluster can be deleted only if there are no Frame Accounts attached to the cluster.

  1. To delete an SGA cluster, go to the Frame Console and at the Frame Customer or Organization entity level where the SGA Cluster is defined, click on Streaming Gateways on the lefthand menu.

  2. Click on the kebab menu to the right of the SGA Cluster and select Delete.

Delete SGA Cluster

Delete SGA Cluster
  1. You will be asked to confirm that you wish to delete the SGA cluster. Click Cancel or Delete.

Confirm SGA Cluster Deletion

Confirm SGA Cluster Deletion

If the SGA 4 cluster was manually deployed, Frame Console will delete the SGA Cluster in Frame Console. However, the customer is responsible for terminating the SGA Nodes and any related SGA network resources in their infrastructure.

Add Node

For customers who are manually deploying an SGA Cluster, you must manually provision and configure the SGA Nodes from within your infrastructure console.

Prerequisites

SGA 4 prerequisites are as follows:

  • Download the Frame SGA disk image from the Downloads Page for the hypervisor/infrastructure on which you wish to deploy the SGA.
  • Determine which data center or public cloud region where the SGA Nodes for the SGA Cluster will be provisioned. To minimize network latency for the best user experience, the SGA Nodes for an SGA Cluster and the associated Frame accounts using that SGA Cluster should be in the same data center or public cloud region.
  • Configure the firewall(s) and networking to support the required FRP8 protocols/ports from the Internet to the SGA Cluster and from the SGA Cluster to the workload network (e.g., VLAN or VNET/VPC and subnet) as well as from the workload network back to the Internet via the SGA Cluster.
  • Ensure each SGA VM will have a corresponding public IP address (in addition to its private IP address). The public IP address can be configured in a firewall or load balancer with network address translation (NAT) to the SGA VM private IP address.

Step 1: Provision the SGA Node

  1. To manually create an SGA Node, go to the Streaming Gateways page and find the Manually Deployed SGA Cluster that will have this new SGA Node. You may need to click on + Add a Node to add a new SGA Node to the SGA Cluster.

Manually Deployed SGA Cluster and Node

Manually Deployed SGA Cluster and Node
  1. Look for the Activation Code for that unregistered SGA Node and copy it. You may need to click on Generate new code. You may choose to:

    a. Enter this Activation Code via the serial console after you provision the SGA VM or

    b. Prepare an SGA VM cloud configuration file that will be used when you provision your SGA VM.

    For AHV, use the following SGA VM cloud configuration template.

    #cloud-config 

    runcmd:
    - set_sga_env SGA_CLOUD_PROVIDER nutanix

    For AWS, use the following SGA VM cloud configuration template.

    #cloud-config 

    runcmd:
    - set_sga_env SGA_CLOUD_PROVIDER Amazon

    For Azure, GCP, or IBM Cloud, there is no need for an SGA VM cloud configuration template.

    If you wish to add the Activation Code to an SGA VM cloud configuration template, replace <paste_activation_code_here> with the actual Activation Code value in the following template. For AHV and AWS, make sure to include the SGA_CLOUD_PROVIDER variable also.

    #cloud-config

    runcmd:
    - set_sga_env SGA_ACTIVATION_CODE <paste_activation_code_here>
note

You must enter the Activation Code into the unregistered SGA VM or provision the SGA VM using the SGA VM Cloud Configuration file within 30 minutes of the Activation Code being generated. Otherwise, you will need to generate a new Activation Code when the Activation Code expires.

The following instructions assume you have already identified the AHV VLAN that the SGA will be placed in. The VLAN containing the SGA Nodes will need to be “public” (have a route from/to the Internet) and will need network connectivity to the private VLAN where the workloads are placed.

  1. Create a new VM in Prism Central (or Prism Element), enter a name and set timezone to UTC.

    SGA VM Creation - VM Creation

    SGA VM Creation - VM Creation
Warning

The timezone must be set to UTC.

  1. Configure Compute Details: SGA VMs should have at least two (2) vCPUs and 4GB RAM. This configuration supports up to 500 concurrent user sessions. Click Save.

    SGA VM Creation - VM Configuration

    SGA VM Creation - VM Configuration
  2. Add the SGA disk image by clicking Attach Disk.

    SGA VM Creation - Attach Disk

    SGA VM Creation - Attach Disk
  3. Specify your Frame SGA disk image. Click Save.

    SGA VM Creation - Attach Disk

    SGA VM Creation - Attach Disk
  4. Under “Networks,” click Attach to Subnet to assign the appropriate VLAN to the new VM. You can set a static private IP address of the SGA VM at this point or use Option 4, as discussed below, once the VM has been provisioned.

    SGA VM Creation - Attach Subnet

    SGA VM Creation - Attach Subnet
  1. Click on "Legacy BIOS Mode" and click the "Confirm" button.

    SGA VM Creation - Legacy BIOS Mode

    SGA VM Creation - Legacy BIOS Mode
  2. Under Guest Customization, set Script Type to Cloud-init and enable the Custom Script option. Paste in the SGA VM Cloud Configuration file with the line set_sga_env SGA_CLOUD_PROVIDER nutanix. You may provide the Activation Code in the cloud confirmation file or use Option 1, as discussed below, once the VM has been provisioned.

    SGA VM Creation - Custom Script

    SGA VM Creation - Custom Script
  3. Select Next and then click Create VM on the final Review step.

    SGA VM Creation - Create VM

    SGA VM Creation - Create VM
  4. You should now be able to see the newly created VM in Prism.

    SGA VM Creation - SGA VM in Prism

    SGA VM Creation - SGA VM in Prism
  5. Power on the SGA VM. Connect to the SGA VM by clicking on the Launch console button near the top of the Prism dashboard to access the Virtual Network Console (VNC).

    SGA VM Console Access - AHV

    SGA VM Console Access - AHV

Step 2: SGA Configuration

This step is needed for any one or more of the following configuration requirements:

  • Specify the SGA Activation Code if it was not specified during the creation of the SGA VM.
  • Configure the public IP address of the SGA VM that users will use to reach this SGA Node if the SGA VM does not have the public IP address attached to the network interface of the SGA VM.
  • Configure the private IP address of the network interface (relay IP address) that is used for traffic to the workloads (if there is more than one network interface attached to the SGA VM).
  • Configure the SGA VM's static private IP address used to accept inbound traffic from the Internet and the DNS server(s) to resolve Frame control plane FQDN.
note

The public IP address configured in the SGA VM will be provided to the Frame control plane during SGA registration. Frame control plane provide this public IP address to users when users request access to their Frame desktops in Frame Accounts attached to the SGA Cluster.

  1. Once the SGA VM is powered up, connect to the serial console of the SGA VM through your infrastructure portal.

  2. Log in to the SGA VM using the default credentials (username: sga, password: difr).

SGA Configuration

SGA Configuration

You will see four configuration options:

  • Option 1: Enter your Activation Code that you copied from Frame Console after you verify in Frame Console that the Activation Code is still valid.
  • Option 2: Specify the public IP address for this SGA VM. This is the public IP address the users will use to connect to this SGA VM. A corresponding DNS record for the public IP address is not required.
  • Option 3: Specify the relay IP address for this SGA VM (optional). This is the private IP address that the SGA VM will use to relay traffic between the user and the workload VM. This option can be used when a customer manually deploys an SGA VM with two or more vNICs and needs one of the vNICs (with the specified Relay IP address) to serve as the network interface for forwarding and receiving FRP8 traffic to and from the workload VMs.
  • Option 4: Specify a static private IP address and the DNS server(s) to resolve Frame control plane FQDN.
  1. Depending your networking configuration, use the options in the following sequence:

    a. If the SGA VM was not provisioned with a private IP address and not configured to use DNS, use Option 4 first to set the private IP address and DNS configuration. Then reboot the SGA VM.

    b. Use Option 1 to specify the Activation Code (if the Activation Code was not provided in the SGA VM Cloud Configuration file at the time of SGA VM creation).

    c. Use Option 2 to configure the public IP address corresponding to this SGA VM.

    d. Use Option 3 if you have two or more NICs on the SGA VM and one of the NICs has been configured to forward traffic to the workload VMs.

  2. When you have completed configuring the SGA and verified the SGA VM is available in Step 3: SGA Verification, be sure to log out.

Step 3: SGA Verification

  1. Return to your Streaming Gateways page within the Frame Console. It may take a few minutes for the SGA Node to contact the Frame control plane and complete the registration process. Verify that the SGA Node is now available and has the expected public IP address.

Streaming Gateways - Registered SGA Node

Streaming Gateways - Registered SGA Node
  1. Repeat the Add Node process to create additional SGA Nodes for a highly available SGA Cluster.

Delete Node

Customer administrators can delete an existing SGA 4 Node from their SGA Cluster at any time, except when:

  • The SGA 4 node is powered on.
  • There is only one SGA 4 node left and there are one or more Frame accounts attached to the SGA Cluster.

Follow the procedure as described for Automatic Deployment, Delete Node. Once the SGA Node is deleted from the Frame control plane, go to your cloud provider infrastructure console and terminate the VM (and any related network resources).

Attach Frame Account

Prerequisites

Before attaching a Frame account to an SGA cluster, there are several prerequisites:

  1. Confirm there is no private IP address overlap between the network containing the SGA VMs and the network containing the workload VMs.
  2. For manually deployed SGA 4 clusters, confirm that the SGA 4 nodes have a network route to the network containing the workload VMs, as specified in the Network Requirements for Private Networking with SGA (Public Cloud) or Private Networking with SGA (AHV).
  3. Frame account must be configured for private networking or private networking with SGA 3.5. Attaching an SGA 4 Cluster to a Frame account that is already using SGA 3.5 will configure the Frame account to use the SGA 4 Cluster. The SGA 3.5 VMs are not impacted.
note

If the Frame account was created using a Frame-managed network and the SGA 4 Cluster was automatically deployed, then Frame control plane will automatically peer the SGA 4 network and Frame account network together. If the Frame account was created using customer-managed networking and the SGA 4 Cluster was manually deployed, the customer must configure all networking elements to allow bidirectional traffic between the SGA 4 nodes and the Frame account workload VMs.

Procedure

  1. Navigate to the Settings page of the Frame Account Dashboard.

  2. Click on the Networking tab and then Attach SGA 4.0.

    Streaming Gateways - Attach Frame Account

    Streaming Gateways - Attach Frame Account
  3. Specify the SGA cluster you wish to attach this Frame Account to from the list of SGA 4 clusters that have at least one available SGA 4 node will available.

    Streaming Gateways - Select SGA 4 Cluster

    Streaming Gateways - Select SGA 4 Cluster
  4. Click Attach to attach Frame account to the SGA 4 Cluster.

Detach Frame Account

  1. Navigate to the Settings page of the Frame Account Dashboard.

  2. Click on the Networking tab and then Detach SGA 4.0.

    Streaming Gateways - Detach Frame Account

    Streaming Gateways - Detach Frame Account
  3. Click Detach to detach the Frame account from the SGA 4 Cluster.

    Streaming Gateways - Confirm Detach of Frame Account

    Streaming Gateways - Confirm Detach of Frame Account

    :::note

    If your Frame account was attached to SGA 3.X before the Frame account was attached to SGA 4, the SGA 4 detach operation will revert the Frame account to use SGA 3.X, as the above figure illustrates. This can be used to rollback to SGA 3.X if necessary (until SGA 3.X is end of life).

    :::

Manual Assignment of Static IP Address

For customers who require their SGA VM to have a static private IP address (versus a DHCP-provided private IP address), administrators can login to the SGA VM via their cloud provider's serial console and run the SGA configuration utility. Alternatively, while inside the SGA VM, they can use the following procedure to configure the static IP address of the Ubuntu VM’s network interface and the DNS servers needed to resolve Frame control plane endpoints.

After connecting into the SGA 4 VM, execute the following steps at the Ubuntu command line:

  1. Create a netplan configuration file at /etc/netplan/99_config.yaml by executing:

    sudo vi /etc/netplan/00-installer-config.yaml 

    with the following YAML file template, modifying the template for the static private IP address of the SGA VM and the gateway private IP address:

    network:
    version: 2
    renderer: networkd
    ethernets:
    eth0:
    addresses:
    - 10.10.10.2/24 # Static private IP address of the SGA VM.
    routes:
    - to: default
    via: 10.10.10.1 # Private IP address of the gateway
    nameservers: # set DNS servers and search domains
    search: [mydomain, otherdomain]
    addresses: [10.10.10.1, 1.1.1.1]
  1. Execute sudo netplan apply to set the static private IP address.

  2. Execute sudo resolvectl dns ens3 8.8.8.8 8.8.4.4 1.1.1.1 to configure the DNS servers that will resolve domain names.

  3. Verify that your DNS configuration is configured as your network requires by running sudo resolvectl

Monitoring

You can monitor the availability of the SGA Nodes and Clusters in the Streaming Gateways page at the Customer or Organization entity levels. To monitor the CPU, memory, and bandwidth utilization of your SGA VMs, use the monitoring functionality provided by your infrastructure provider.

Adjust Your SGA VM Size

After you have created your SGA VM, you can adjust the size of the VM through the console of your infrastructure hosting your SGA VM. We do recommend the following procedure in your infrastructure console:

  1. Power off your SGA VM.
  2. Change the instance type to a smaller (or larger) instance type.
  3. Power on your SGA VM.
note

Since users will not be able to reach the workload VMs behind your SGA VM during the time that your SGA VM is unavailable, you will need to schedule a maintenance window to perform this operation if you only have one SGA VM or have more than one SGA VM in a high-availablity configuration.

Troubleshooting

Networking

You can verify that the SGA VM can reach the Frame control plane by using the following command within the SGA VM OS:

curl -v 'https://cch.console.nutanix.com/sga/verify' -H "Content-Type: application/json" -X POST -d '{"code":"dummy_code"}' 

This is useful if you encounter issues registering the SGA VM or if the SGA VM status is Unavailable in the Frame Console.

Services

If the SGA VM is not available in Frame Console, check the status of the SGA service.

sudo systemctl status sga.service - sga elixir app status 

If the SGA node is not accepting FRP8 sessions, check the status of the coturn service.

sudo systemctl status coturn.service - coturn status 

The logs for these two services can be viewed by executing one of the following commands:

sudo journalctl -fu coturn.service - follow the logs of coturn 
sudo journalctl -fu sga.service - follow the logs of sga elixir app