Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Platform and Infrastructure

  • cSRX support on AWS (cSRX)—Starting in Junos OS Release 21.2R1, you can deploy cSRX Container Firewall in Amazon Web Services (AWS) Cloud using Amazon Elastic Kubernetes Services (Amazon EKS), which is a fully managed Kubernetes service.

    With cSRX, you can also set up automated service provisioning and orchestration, distributed and multitenant traffic security, centralized management with Juniper® Security Director (including dynamic policy and address update, remote log collections, security events monitoring), and scalable security services with small footprints.

    cSRX is available with 60 days free trial eval license (S-CSRX-A1 SKU). The eval license in cSRX expires after 60 days.

    You can purchase bring your own license (BYOL) from Juniper Networks or a Juniper Networks authorized reseller for using the software features on the cSRX. Use this license to customize your license, subscription, and support.

    [See cSRX Deployment Guide for AWS and Flex Software License for cSRX.]

  • Mellanox support (vSRX 3.0)—Starting in Junos OS Release 21.2R1, vSRX 3.0 instances that you deploy on VMware and kernel-based virtual machine (KVM) support the Mellanox ConnectX-4 and ConnectX-5 family adapters.

    [See vSRX Deployment for KVM.]

  • DPDK version upgrade (vSRX 3.0)—Starting in Junos OS Release 21.2R1, we've upgraded the Data Plane Development Kit (DPDK) from version 18.11 to version 20.11. The new version supports ICE Poll Mode Driver (PMD), which enables the physical Intel E810 series 100G NIC support on vSRX 3.0. .

    In this release, Junos FreeBSD 12.X is vSRX 3.0 VM’s guest OS. The Routing Engine and Packet Forwarding Engine run on Junos FreeBSD OS as one VM, and the Packet Forwarding Engine utilizes DPDK technologies such as DPDK ICE PMD and single-root I/O virtualization (SR-IOV).

    [See vSRX Deployment for KVM.]

  • Support for next-hop-based dynamic tunnels (cRPD)—Starting in Junos OS Release 21.2R1, you can configure next-hop-based dynamic IP tunnels in the Linux kernel to provide a private and secure path on a public network. By default, MPLS-over-UDP tunnel is preferred over GRE tunnels. We support the following dynamic tunnels:

    • GRE
    • MPLS over UDP

    [See Next-Hop-Based Dynamic Tunnels, Configuring Next-Hop-Based MPLS-Over-UDP Dynamic Tunnels, and Dynamic Tunnels Overview.]

  • EVPN over VXLAN encapsulation (cRPD)—Starting in Junos OS Release 21.2R1, we support the Layer 2 EVPN over VXLAN functionality.

    [See EVPN with VXLAN Data Plane Encapsulation and MAC-VRF L2 services.]

  • New MX10K-LC480 line card (MX10008 and MX10016) —Starting in Junos OS Release 21.2R1, we’ve a new MX10K-LC480 line card with 48 SFP/SFP+ ports. The MX10K-LC480 has two Packet Forwarding Engines, each providing a maximum bandwidth of up to 240 Gbps.

    You can configure the ports as 10-Gigabit Ethernet interfaces or 1-Gigabit Ethernet interfaces. By default, the ports are 10-Gigabit Ethernet interfaces.


    You must install the MX10K-LC480 line card in the MX10008 and MX10016 routers along with the front panel with filter.

    You can configure the speed at the PIC level or port level. Configure the port speed of the line card at the [[set chassis fpc <fpc> pic <number> pic-mode <mode>]] or [[set chassis fpc <fpc> pic <number> port <number>]] hierarchy.

    Benefits of MX10K-LC480 Line card

    • Low cost card
    • Interoperability with the existing JNP10K-LC1201 card

    For information about the software features support, see Protocols and Applications Supported by MX10K-LC480 for MX Series Routers.