Changing the Size of a cSRX Container Firewall Container
Based on your specific cSRX Container Firewall deployment requirements, scale requirements, and resource availability, you can scale the performance and capacity of a cSRX Container Firewall instance by specifying a specific size (small, middle, or large). Each cSRX Container Firewall size has certain characteristics and can be applicable to certain deployments. By default, the cSRX Container Firewall container launches using the large size configuration.
Table 1 compares the scale requirements of a cSRX Container Firewall instance depending on the specified size.
Specification |
cSRX Container Firewall: Small Size |
cSRX Container Firewall: Middle Size |
cSRX Container Firewall: Large Size (Default) |
---|---|---|---|
Physical Memory Overhead |
256M |
1G |
4G |
Number of Flow Sessions |
8K |
64K |
512K |
To assign a specific size for a cSRX Container Firewall instance, include the
CSRX_SIZE
environment variable in the docker run
command.
For example, to launch a cSRX Container Firewall instance using the middle size configuration to scale performance and capacity:
root@csrx-ubuntu3:~/csrx# docker run
-d --privileged --network=mgt_bridge -e CSRX_SIZE="middle" --name=<csrx-container-name> <csrx-image-name>