Flow-Based and Packet-Based Processing
-
Support for PowerMode IPsec (PMI) solution (SRX4100, SRX4200, SRX4600, SRX5400, SRX5600, SRX5800 with SPC3 cards, vSRX, and vSRX3.0) and GRE acceleration solution (SRX Series and NFX Series)—Starting in Junos OS Release 21.1R1, we support the PMI and GRE acceleration solutions to improve the software-defined WAN (SD-WAN) performance.
Table 1: Solutions and Details Solution
How to Enable?
PMI
Include the
power-mode-ipsec
andgre-performance-acceleration
statements at the[edit security flow]
hierarchy level.Note:PMI supports both IPsec and GRE. In this case, traffic flows through the PMI data path.
GRE acceleration
Include the
gre-performance-acceleration
statement at the[edit security flow]
hierarchy level.Note:By default,
gre-performance-acceleration
is turned off. In this case, traffic flows through the GRE acceleration data path.[See gre-performance-acceleration (Security Flow), flow (Security Flow), and show security flow status.]