Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Requirements for Deploying cSRX Container Firewall Container on Contrail vRouter

This topic discusses the requirements for integrating cSRX Container Firewall into Contrail cluster.

Contrail Requirements

Table 1 lists the supported platforms and server requirements.

Table 1: Supported Platforms and Server Requirements

Component

Specification

Release

Contrail Networking

  

2005

Ubuntu

  

14.04 and newer

CentOS

  

6.5 and newer

Redhat

  

7.0 and newer

vCPU

2 CPU cores

  

Memory

8 GB

  

Disk space

40 GB

  

Network Interfaces

2 Revenue Interfaces

  

cSRX Container Firewall Container Interfaces

Table 2 lists the cSRX Container Firewall container interfaces.

Table 2: cSRX Container Firewall Container Interfaces

Interfaces

Purpose

Created By

eth0

Management Interface

Orchestrator

eth1

ge-0/0/0

Orchestrator

eth2

ge-0/0/1

Orchestrator

lo

Loopback

Docker Engine

cSRX Container Firewall Basic Configuration Settings

The cSRX Container Firewall container requires the following basic configuration settings:

  • Interfaces must be bound to security zones.

  • Policies must be configured between zones to permit or deny traffic.