IE public websites poor performance

[netcracker]

Hi Community

we are building a new View Infrastructure and we are struggling with one last issue.

first up our setup

Domain controller is Windows 2008

Proxy ISA-6 & Squid 3

Vm view 5.1.1

Windows-7 linked clones dedicated pool with persistent disk

2Gb, 2 vcpu

IE - 8 sub version is 8.0.7600.16385

The issue is that IE-8 is stalling when browsing public sites. Web pages get displayed eventually  but sometimes take 3-4 minutes.

However Chrome works fine at the same time same sites work like a charm.

I know you may think then why not using chrome. (we have few sites which are IE dependent)

Steps taken so far

Build fresh image (still the same issue)

No resource bottleneck

tried different security authentication methods NTLM/LM

tried different versions of java

tried different flash player

bypassed proxy in Vm client

updated IE-8 to IE-9

Still the same lag.

tried IE protected mode and various security combinations.

Chrome, firefox works absolutely fine.

In squid using IE if I tail logs then few requests are denied and then eventually page comes up.

Tried ISA6 also same story.

Whereas in Chrome works brilliantly.

Can someone please suggest something or if any one facing the same issue.

Thanks

[marcdrinkwater]

Interesting.

How is your proxy configured?  Is it via a pac file.

Is it all external sites that exhibit this problem?  If you go from one  website to another does it still take a long time?

Have you configured IEAK or anything in group policy relating to IE?

[swapd]

Hi,

Does this issue happen with any website/applicantion or only with java or flash pages?

Have you tried to Thinapp your IE?

Cheers,

Elcio

[netcracker]

Hi  Marc,

Yeah just because of this last issue complete project has been delayed.

I have been pushing proxy settings through group policy and exclusion for intranet sites.

If I bypass proxy then it works fine.

Chrome pulls all the settings from IE then why chrome works not IE

I played a lot with IE security, NTLM auth nothing worked so far.

When I tail i get TCP_DENIED/407 (5-6 packets of deny then TCP_HIT/200)

Whereas in Chrome no TCP-Denied.

Btw: I'm thinking to try IE-9. I will keep posted

Thanks,

[netcracker]

Hi Elcoi,

This is happening with most of the sites.

I have tried many versions of Java & flash. Same issue.

Haven't tried thinapp IE. We have a 200+ users in standard desktop environment and it's working fine.

I build new PC with same versions didn't get this problem.

I feel it's auth issue some where.

meanwhile I'll thinapp IE-9 if helps. I'll keep posted

Thanks, 

[marcdrinkwater · Accepted solution]

I don't think Thinapping IE is the answer here.  It's not strictly 'legal' for a start, and lots of people are using IE without this problem.

if it works fine with your proxy disabled then its clearly your proxy config.

Try running a Procmon trace

[netcracker]

Hi guys,

Problem is fixed and all happy.

It was an issue with the base image and NTLM authentication itself.

All good.

Thanks for your help lovely community.

Btw: Marc drink some water

Also,

One more suggestion if one can make

Recently N/w guy restarted switch and broke connection b/w hosts and persistent disk.

Persistent is :- NAS storage and I'm running Microsoft iSCSI software target to get to host

linked clones (dedicated assignment), replica, vswap & disposable is living in Fusion IO.

persistent disk includes large PST files and roaming user data.

hosts couldn't restore iSCSI upon switch restart.

Anyways, restarted MSFT and all worked fine.

All VDI sessions were hung and we had to manually restart all the clones through vSphere.

Question is:-

With the current configuration what can be done to improve the environment and break dependency on persistent disk.

Meanwhile, we are already considering SAN for linked clones and persistent data.

PST is  not that important in an our environment and we can resync in an event of loss.

How about if we keep persistent data in IO Fusion also and clear catch upon user log off and redirect PST through GPO to shared location (may be persistent disk).

can we this way we can break dependency upon persistent disk and create non dedicated assignment.

Thanks,

Matt

[Linjo]

If you have poort performance in IE you could try this: Internet Options > Advanced > Accelerated graphics --> Use software rendering

// Linjo