A great use of inline layers in R80.10 to restrict the ports specific applications might allow.
Another great tip from Tomer Sole
If you're considering using VSX, this is a good thread to help you decide if it's the right approach or not.
If you're on the bleeding edge, take note of this issue.
If you have Cisco VXLAN in your network and have MDS, you might have an issue with ARP. Turns out to be a Cisco bug of sorts.