These release notes accompany Junos OS Release 20.1R1 for the cSRX Container Firewall, a containerized version of the SRX Series Services Gateway. They describe the new features, known behavior, and known and resolved problems in the software.
The cSRX Container Firewall is a containerized version of the SRX Series Services Gateway with a low memory footprint. cSRX provides advanced security services, including content security, AppSecure, and unified threat management in a container form factor.
By using a Docker container in a Linux server, the cSRX can substantially reduce overhead because each container shares the Linux host’s OS kernel. Regardless of how many containers a Linux server hosts, only one OS instance is in use. And because of the containers’ lightweight quality, a server can host many more container instances than it can virtual machines (VMs), yielding tremendous improvements in utilization. With its small footprint and Docker as a container management system, the cSRX Container Firewall enables agile, high-density security service deployment.