Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

cSRX Virtual Security Solution on Contrail vRouter

Before you deploy the cSRX Container Firewall as an advanced security service in the Contrail Networking cloud environment, ensure that you:

Deploying a cSRX POD with Kubernetes

Kubernetes is enhanced to support multiple interfaces all supported by a single Contrail Container Network Interface (CNI) (Network Provider). The cSRX container can be orchestrated on compute nodes and attached to multiple virtual networks. For a single cSRX container, those virtual networks are either attached for management purposes or used to collect traffic from vRouter. A cSRX POD can be deployed with a YAML template in Kubernetes.

To deploy a cSRX POD, see Host-Based Firewalls on a compute node.