close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

JDM Components for CSDS

date_range 11-Dec-24

Learn about Junos Device Manger (JDM) components, and their requirements in Connected Security Distributed Services (CSDS) architecture.

In Connected Security Distributed Services (CSDS) solution, Junos Device Manager (JDM) performs services layer orchestration of vSRX Virtual Firewalls on baremetal servers running Ubuntu Operating System (OS). JDM interacts with the libvirtd process for virtual machine (VM) lifecycle management.

JDM Infrastructure

Figure 1 illustrates the JDM infrastructure for CSDS architecture.

Figure 1: JDM Infrastructure for CSDS

Table 1 lists the components in JDM infrastructure.

Table 1: Components in JDM Infrastructure
JDM Component	Description
Ubuntu Host Server	It's a baremetal server for hosting JDM container and vSRX Virtual Firewalls spawned by JDM.
JDM Package	You install the software package on baremetal Ubuntu host server for running the JDM software.
JDM Processes	JDM container runs the following processes to carry out key tasks: mgd—Helps JDM to present a Junos like CLI and configuration commit model. jdmd—Interfaces with libvirtd, and handles VM lifecycle management. jnud—Provides unified user experience by running in either satellite or controller modes.
JDM Container	It's a Linux Container (LXC) that runs in the host server to perform vSRX orchestration.
vSRX Image	It's an image used to spawn vSRX Virtual Firewalls.
vSRX Virtual Firewalls	They run in Ubuntu host server and play the role of CSDS services layer components for running security services.

Host Software Requirements for CSDS

The host that runs Ubuntu OS is a baremetal server with specifications outlined in this section.

Table 2 lists the software requirement specifications for host server for running JDM container and vSRX Virtual Firewalls.

Table 2: Host Software Specifications
Software Components	Specifications
OS support	Ubuntu 22.04.4 LTS Ensure that you contact your vendor partner for the update and troubleshooting support of the host OS.
qemu-system-x86	6.2.0 (Debian 1:6.2+dfsg-2ubuntu6.16)
libvirt-daemon-system	8.0.0-1ubuntu7.8
bridge-utils	1.7-1ubuntu3
xml2	0.5-4build1 for amd64
libvirt-clients	8.0.0-1ubuntu7.8
Hyperthreading	Enabled in BIOS

Host Hardware Requirements for CSDS

You can use the baremetal servers litsed in Table 3. The table lists the hardware requirement specifications of the host for running JDM container and vSRX Virtual Firewalls. Additionally, the host also has a management interface. You have the option to utilize multiple baremetal servers simultaneously. Each host server runs the JDM, and the JDM actively spawns vSRX Virtual Firewalls on the host.

Table 3: Host Hardware Specifications
Server Profile	Intel Xeon Gold 6438N 2 GHz	Intel Platinum 8571N 2.4 GHz	AMD EPYC 8534P 2.3 GHz	AMD EPYC 9554P 3.10 GHz	AMD EPYC 9754 2.25 GHz
Cores	32	52	64	64	128
NUMA nodes	1	1	8	1	8
Cores/NUMA	32	52	8	64	16
Memory GB	256	256	512	512	1024
Management NICs	NetXtreme-E Series BCM57504	NetXtreme-E Series BCM57504	NetXtreme-E Series BCM57504	Intel Ethernet Server Adapter I210	NetXtreme-E Series BCM57504
Data NICs	2 x 200 G Mellanox ConnectX Adapter	2 x 200 G Mellanox ConnectX Adapter	2 x 200 G Mellanox ConnectX Adapter	2 x 200 G Mellanox ConnectX Adapter	400 G or 4 x 100 G Mellanox ConnectX Adapter
Storage Size TB	1	1	2	1	2
vSRX Virtual Firewalls support	1 vSRX Virtual Firewall utilizing 31 cores and 128 GB RAM	1 vSRX Virtual Firewall utilizing 51 cores and 128 GB RAM	7 vSRX Virtual Firewalls utilizing 9 cores and 64 GB RAM	7 vSRX Virtual Firewalls utilizing 9 cores and 64 GB RAM	7 vSRX Virtual Firewalls utilizing 18 cores and 128 GB RAM

You must ensure that the hardware profile matches the specifications, including the processor's model and network cards, to prevent JDM installation failure. You can also use the following minimum supported hardware requirements:

Processor—3rd Generation Intel Xeon processor and above, or 4th Generation AMD processor and above
Network adapter—MT2910 Family (ConnectX-7), or MT2892 Family (ConnectX-6 Dx)

CSDS Services Plane Resource Distribution in the Host

The vSRX Virtual Firewalls support listed in Table 3 is based on the CSDS services plane resource distribution. Based on the server hardware specification, the system allocates compute, storage and network resources for JDM container and vSRX Series Virtual Firewalls.

See Table 4, Table 5, Table 6, Table 7, and Table 8 to see the CSDS services plane resource distribution for the host server, JDM, and vSRX Virtual Firewalls. When JDM spawns the vSRX Virtual Firewalls, you'll notice the resource allocation is based on the following tables.

Table 4: CSDS Services Plane Resource Distribution on Intel Gold Processor
Feature	Host	JDM	vSRX1
Cores	0	0	1 to 31
NUMA	0	0	0
Memory GB	32	2 (Shared with host)	224
Network	-	-	2 x 200 GB
Storage GB	128	5 (Shared with host)	896 GB

Table 5: CSDS Services Plane Resource Distribution on Intel Platinum Processor
Feature	Host	JDM	vSRX1
Cores	0	0	1 to 51
NUMA	0	0	0
Memory GB	32	2 (Shared with host)	224
Network	-	-	2 x 200 GB
Storage GB	128	5 (Shared with host)	896 GB

Table 6: CSDS Services Plane Resource Distribution on AMD EPYC 8534P Processor
Feature	Host	JDM	vSRX1	vSRX2	vSRX3	vSRX4	vSRX5	vSRX6	vSRX7	Total
Cores	0	0	1, 8 to 15	2, 16 to 23	3, 24 to 31	4, 32 to 39	5, 40 to 47	6, 48 to 55	7, 56 to 63	64
NUMA	0	0	1	2	3	4	5	6	7	-
Memory GB	64	2	64	64	64	64	64	64	64	512
Network	-	-	2 VFs	2 VFs	2 VFs	2 VFs	2 VFs	2 VFs	2 VFs	-
Storage GB	144	5	272	272	272	272	272	272	272	2048

Table 7: CSDS Services Plane Resource Distribution on AMD EPYC 9554P Processor
Feature	Host	JDM	vSRX1	vSRX2	vSRX3	vSRX4	vSRX5	vSRX6	vSRX7	Total
Cores	0	0	1, 8 to 15	2, 16 to 23	3, 24 to 31	4, 32 to 39	5, 40 to 47	6, 48 to 55	7, 56 to 63	64
NUMA	0	0	0	0	0	0	0	0	0	-
Memory GB	64	2	64	64	64	64	64	64	64	512
Network	-	-	2 VFs	2 VFs	2 VFs	2 VFs	2 VFs	2 VFs	2 VFs	-
Storage GB	128	5	128	128	128	128	128	128	128	1024

Table 8: CSDS Services Plane Resource Distribution on AMD EPYC 9754 Processor
Feature	Host	JDM	vSRX1	vSRX2	vSRX3	vSRX4	vSRX5	vSRX6	vSRX7	Total
Cores	0, 1	0, 1	2-3, 16-31	4-5, 32-47	6-7, 48-63	8-9, 64-79	10-11, 80-95	12-13, 96-111	14-15, 112-127	128
NUMA	0	0	1	2	3	4	5	6	7	-
Memory GB	128	2	128	128	128	128	128	128	128	1024
Network	-	-	2 VFs	2 VFs	2 VFs	2 VFs	2 VFs	2 VFs	2 VFs	-
Storage GB	144	5	272	272	272	272	272	272	272	2048

arrow_backward PREVIOUS Junos Device Manager for CSDS

NEXT arrow_forward Understand vSRX Orchestration with JDM for CSDS

Connected Security Distributed Services Architecture Deployment Guide

ON THIS PAGE

JDM Components for CSDS

JDM Infrastructure

Host Software Requirements for CSDS

Host Hardware Requirements for CSDS

CSDS Services Plane Resource Distribution in the Host

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Connected Security Distributed Services Architecture Deployment Guide

ON THIS PAGE

JDM Components for CSDS

JDM Infrastructure

Host Software Requirements for CSDS

Host Hardware Requirements for CSDS

CSDS Services Plane Resource Distribution in the Host

Related Documentation

Stay in touch