Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

cSRX Pod Deployment on Contrail vRouter with Kubernetes

Before you deploy the cSRX Container Firewall as an advanced security service in the Contrail Networking cloud environment, ensure that you:

Kubernetes is enhanced to support multiple interfaces all supported by a single Contrail Container Network Interface (CNI) (Network Provider). The cSRX container can be orchestrated on compute nodes and attached to multiple virtual networks. For a single cSRX container, those virtual networks are either attached for management purposes or used to collect traffic from vRouter. A cSRX POD can be deployed with a YAML template in Kubernetes.

To deploy a cSRX POD, see Host-Based Firewalls on a compute node.