cSRX Pod Deployment on Contrail vRouter with Kubernetes

Before you deploy the cSRX Container Firewall as an advanced security service in the Contrail Networking cloud environment, ensure that you:

• Review Requirements to Deploy cSRX on Contrail vRouter for deploying a cSRX container in a compute node.

Kubernetes is enhanced to support multiple interfaces all supported by a single Contrail Container Network Interface (CNI) (Network Provider). The cSRX container can be orchestrated on compute nodes and attached to multiple virtual networks. For a single cSRX container, those virtual networks are either attached for management purposes or used to collect traffic from vRouter. A cSRX POD can be deployed with a YAML template in Kubernetes.

To deploy a cSRX POD, see Host-Based Firewalls on a compute node.