I've been using vSRXs for some time and have always stuck with the recommended version, which is currently 15.1X49-D180 on the Juniper website. I've known for a while there are quite a few newer major releases available - 17.x, 18.x, even 19.x. I've also just learned that there is an entirely new architecture, SRX 3.0, cutting out the QEMU/KVM abstraction that has historically caused us a bit of nested virtualization drama; https://www.juniper.net/documentation/en_US/vsrx/information-products/topic-collections/release-notes/19.1/topic-98044.html#jd0e101
I've spun up a vSRX 3.0 VM and it's boot time is notably quicker. I've also observed that the VM NIC MAC addresses are actually visible to the guest rather than abstracted now, which is nice.
Can anyone tell me why 15.1X49 is still the recommended version? Does anyone have experience with 3.0 or 19.1, and would recommend for or against using them?
The "recommended" release process is run by the JTAC organization. The process is not public, but what I have heard is this takes a wholistic approach that includes factors like:
minimum deploy base actually in use by customers (this insures a valid base of data for the analysis)
experience of types, levels and severity of TAC tickets by the version once the higher version is running on enough customers with statistically normal levels of tickets it becomes recommended
if you have used Junos for some time I'm sure you already know that should never, ever, never, never run the "latest release" - in contrast to others like Windows and Mac the lastest releases of Junos should actally be called beta releases based on the number of bugs they generally will have.
I must perform a new vSRX installation with version 20 to migrate a Cisco ASA and I have a doubt which of the two platforms I install, vSRX or vSRX 3.0.
According to the new version, what are the advantages or disadvantages?. I want to install vSRX 3.0 but I still don't know what I can lose with this choice.
- why 20?
- the KB provided a year ago still is good advise and meanwhere there is parity afai can tell
- https://kb.juniper.net/InfoCenter/index?page=content&id=KB28776#srx_series has a recommended version for vSRX3.0 meanwhile
Version 20 because is the last released of vSRX.
In the URL only 18 versions. Why are there no versions 19 and 20 recommended?
there is a difference between:
- "I must perform a new vSRX installation with version 20"
- I want "Version 20 because is the last released of vSRX"
Either you want latest and greatest, then you're free to pick whatever you want.
Or you can follow the (conservative) advise and pick the recommended version.