SRX Services Gateway
Reply
Trusted Expert
Trusted Expert
jtb
Posts: 309
Registered: ‎08-26-2009
0

SRX for branch office vs SRX for data center - SRX Series Services Gateway architecture

hello,

 

with SRX for Data Center (1400/3x00/5x00) we have clear data-plane vs control-plane separation. There are SPC/NPC/IO cards/etc ...

 

How is it in case of branch office models ? From SRX100 to SRX650; what features are HW accelerated/offloaded to dedicated hardware component  (crypto...); similar to J series forwarding done with real time software thread ? How many CPUs/cores are in SRX650 ?

 

jtb 

Juniper Employee
vairavan subramanian
Posts: 18
Registered: ‎11-15-2010

Re: SRX for branch office vs SRX for data center - SRX Series Services Gateway architecture

On all SRX Branch platforms (SRX 100 to SRX 650) there is a clear separation of control plane and data plane functionality.

 

All Branch platforms run on multicore processors. On all platforms one core is used for control plane functinality and the rest of the cores for data plane.

 

For eg on an SRX650 1 core is used for control plane and 11 cores are used for data plane.

 

There is no separate crypto accelerator on any of the Branch platforms. The Network processors on each of these platforms have inbuilt crypto acceleration.

 

However all platforms (HM models on srx210 and srx240) except the SRX100 have a special REGEX hardware accelerator used for UTM (express AV) and IDP.

 

Trusted Expert
Trusted Expert
jtb
Posts: 309
Registered: ‎08-26-2009
0

Re: SRX for branch office vs SRX for data center - SRX Series Services Gateway architecture

hello,

 

good & fast answer !  multicore processors == Network processors in your answer ? REGEX hardware accelerator - is it one function of network processor or dedicated component ?

 

Sorry, used to play with HW some time ago, just curious. Now only left with IS-IS/MPLS and all that boring software staff :smileywink:

jtb

Juniper Employee
vairavan subramanian
Posts: 18
Registered: ‎11-15-2010
0

Re: SRX for branch office vs SRX for data center - SRX Series Services Gateway architecture

crypto acceleration is built into the network processor.

the regex accelerator (PME - pattern matching engine) is a separate hardware piece(dedicated component).

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.