Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


VNFs Supported by the Cloud CPE Solution


The Cloud CPE solution supports the Juniper Networks and third-party VNFs listed in Table 1.

Table 1: VNFs Supported by Contrail Service Orchestration

VNF Name


Network Functions Supported

Deployment Model Support

Element Management System Support

Juniper Networks vSRX

vSRX KVM Appliance 15.1X49-D133

  • Network Address Translation (NAT)

  • Demonstration version of Deep Packet Inspection (DPI)

  • Firewall

  • Unified threat management (UTM)

  • Centralized deployment

  • Distributed deployment supports NAT, firewall, and UTM.

Element Management System (EMS) microservice, which is included with CSO

LxCIPtable (a free, third party VNF based on Linux IP tables


  • NAT

  • Firewall

Centralized deployment

EMS microservice

Cisco Cloud Services Router 1000V Series (CSR-1000V)



Centralized deployment

Junos Space Network Management Platform

Riverbed SteelHead


WAN optimization

Distributed deployment, NFX250 platform only

EMS microservice

You must upload VNFs to the Contrail Cloud Platform for the centralized deployment after you install the Cloud CPE solution. You upload the VNF images for the distributed deployment through Administration Portal or API calls.

You can use these VNFs in service chains and configure some settings for VNFs for a service chain in Network Service Designer. You can then view those configuration settings for a network service in Administration Portal. Customers can also configure some settings for the VNFs in their network services through Customer Portal. VNF configurations that customers specify in Customer Portal override VNF configurations that the person who designs network services specifies in Network Service Designer.