Geneve flow infrastructure for Geneve tunnel packet processing. With this support, you can use vSRX 3.0 as a transit router or a tunnel endpoint device in various cloud deployments. For example, you can integrate vSRX 3.0 with Amazon Web Services (AWS) Gateway Load Balancer (GWLB) service that uses the Geneve protocol encapsulation for transparent routing of packets between GWLB and virtual appliances.
With this support, vSRX 3.0 can:
• De-encapsulate the received Geneve tunnel packets.
• Analyze Geneve header and option fields.
• Inspect the inner packet with security services.
• Encapsulate the original inner packet and forward the packet to the destination.