Flow-Based and Packet-Based Processing
-
Express Path+ for Layer 2 secure-wire traffic (SRX4600, SRX5400, SRX5600, and SRX5800)—Starting in Junos OS Release 21.4R1, we've added support for Express Path+ to secure-wire interfaces. This support allows the SRX device to automatically accelerate the flow traversing secure-wire interfaces with their network processor, increasing throughput and decreasing latency.
[See Express Path.]
-
Support for MPLS Layer 3 VPN in flow mode (vSRX 3.0) —Starting in Junos OS Release 21.4R1, we support MPLS Layer 3 VPN in flow mode. We also support IP unicast packet processing. Thus, IP unicast packets de-encapsulated from MPLS enter the flow processing when you enable
set security forwarding-options family mpls mode flow-based
.[See Flow Management in SRX Series Devices Using VRF Routing Instance.]
-
Support for fat flow (SRX4100, SRX4200, SRX4600, SRX5400, SRX5600, SRX5800, and vSRX 3.0)—Starting in Junos OS Release 21.4R1, we support fat flow technology to improve the firewall and NAT throughput value up to 10 times of the current value.