Which mode on a Citrix ADC can a Citrix Administrator utilize to avoid asymmetrical packet flows and multiple route/ARP lookups?

MAC-based forwarding (MBF) is a specific operational mode on a Citrix ADC designed to enhance performance and ensure traffic symmetry. When MBF is enabled, the ADC caches the MAC address of the next-hop device for a given destination. For all subsequent packets in that session, the ADC uses the cached MAC address, thereby bypassing the need for repeated route and ARP lookups. This process significantly improves forwarding performance and is particularly effective in preventing asymmetrical packet flows, a common issue in deployments like Direct Server Return (DSR) or firewall load balancing, by forcing the return traffic through the same path.

B. Use Subnet IP (USNIP): USNIP mode ensures that servers have a routable return path to the ADC by using a Subnet IP as the source. It addresses routing but does not eliminate route/ARP lookups.
C. Layer 3: This is the default routing mode of the ADC. It is the environment where problems like asymmetrical flows and lookup overhead occur, not the solution to them.
D. Layer 2: In this mode, the ADC acts as a transparent bridge. While this can prevent asymmetry within a single broadcast domain, it is a fundamental network configuration, not a specific feature to optimize lookups.

1. Citrix Product Documentation. (2023). MAC-Based Forwarding. Citrix ADC 13.1.

Section: "MAC-Based Forwarding"

Quote/Content: "In MAC-based forwarding (MBF) mode

the Citrix ADC appliance remembers the MAC address of the next-hop router for the destination. It uses the stored MAC address for forwarding the subsequent requests and responses to the same destination. Using MBF avoids multiple route and ARP lookups

thereby improving the performance of the appliance. MBF is particularly useful in a DSR (Direct Server Return) deployment and in a firewall load balancing deployment

where it avoids asymmetrical packet flows."

2. Citrix Product Documentation. (2023). Layer 2 and Layer 3 Modes. Citrix ADC 13.1.

Section: "Layer 3 Mode"

Content: This section describes Layer 3 mode as the standard mode where the ADC routes packets between the server and client networks

which inherently involves route lookups. This confirms L3 mode is the context for the problem

not the solution.

3. Citrix Product Documentation. (2023). Use Subnet IP. Citrix ADC 13.1.

Section: "When to Use USNIP Mode"

Content: The documentation explains that USNIP is used to source-ip traffic to backend servers so they can route return traffic correctly. Its purpose is to enable communication

not to bypass the ADC's internal lookup process.