$ cat "High-Load RDS & VDI Farms.md"

High-Load RDS & VDI Farms

We design, deploy, and maintain Remote Desktop Services (RDS) and VDI environments. We resolve slow logons, session freezes, storage IOPS bottlenecks, and stability issues across hundreds of concurrent users.

What We Do

  • Fault-Tolerant Architecture (RDS / VDI):

    • High Availability RD Connection Broker clustering backed by SQL Server.
    • Smart session load balancing, RemoteApp delivery, and browser access via RD Web Client (HTML5).
    • Hardened RD Gateway deployment (NLB / HAProxy) without exposing port 3389 directly to the internet.
    • Accurate hardware sizing (CPU, RAM, storage IOPS) designed for peak corporate workloads.

  • Fast Logons & Profile Management (FSLogix):

    • Migration from legacy Roaming Profiles and UPD to Microsoft FSLogix Profile Containers (VHDX).
    • Sub-second logons: profiles mount as virtual disks without pulling files over the network.
    • Reliable caching for Outlook (Cached Exchange Mode), Teams, OneDrive, and browsers.
    • Prevention of profile corruption, stuck sessions, and black screen issues.

  • 1C:Enterprise Optimization:

    • RDSH host tuning for both thick and thin 1C client workloads.
    • Storage I/O segregation: dedicated NVMe tiers for databases, temp directories, and profile containers.
    • Automated 1C client cache cleanup without resetting user window preferences.
    • Antivirus and security agent exclusions to eliminate disk latency spikes.

  • Security & Authentication:

    • Kerberos / NTLM pass-through Single Sign-On (SSO) in Active Directory.
    • Multi-Factor Authentication (2FA / MFA: TOTP, RADIUS, SMS) for external access.
    • Software restriction and execution control via AppLocker and GPO.
    • User environment sandboxing and restricted access to local host drives.

Technology Stack

  • Platforms: Windows Server RDS (2019 / 2022 / 2025), Citrix Virtual Apps and Desktops, VMware Horizon.
  • Profiles: Microsoft FSLogix (Profile & Office Containers).
  • Load Balancing & Gateways: RD Connection Broker (SQL HA), RD Gateway, HAProxy, Keepalived.
  • Security: Active Directory, Kerberos SSO, 2FA/MFA, AppLocker, GPO.
  • Monitoring: Zabbix, Prometheus, Grafana.

Deliverables

  1. Fast Logons: Sub-second logon times regardless of mailbox or profile size.
  2. High Availability: Host or broker failures do not interrupt business operations.
  3. Hardened Perimeter: No exposed RDP ports, unified SSO, and mandatory multi-factor authentication.
  4. Actionable Monitoring: Real-time visibility into session density, disk queues, and memory consumption.
Discuss Project