Merge branch 'current' of github.com:vyos/vyos-documentation into current

8 files changed, 487 insertions, 144 deletions

diff --git a/docs/_locale/pt/LC_MESSAGES/cli.mo b/docs/_locale/pt/LC_MESSAGES/cli.mo
index 2c519fba..206ed847 100644
--- a/docs/_locale/pt/LC_MESSAGES/cli.mo
+++ b/docs/_locale/pt/LC_MESSAGES/cli.mo
diff --git a/docs/_locale/pt/LC_MESSAGES/configuration.mo b/docs/_locale/pt/LC_MESSAGES/configuration.mo
index 4ddc5742..34c7846c 100644
--- a/docs/_locale/pt/LC_MESSAGES/configuration.mo
+++ b/docs/_locale/pt/LC_MESSAGES/configuration.mo
diff --git a/docs/_locale/pt/LC_MESSAGES/contributing.mo b/docs/_locale/pt/LC_MESSAGES/contributing.mo
index 22ccd3a9..3eabef9b 100644
--- a/docs/_locale/pt/LC_MESSAGES/contributing.mo
+++ b/docs/_locale/pt/LC_MESSAGES/contributing.mo
diff --git a/docs/_locale/pt/LC_MESSAGES/documentation.mo b/docs/_locale/pt/LC_MESSAGES/documentation.mo
index 33a908be..a5bbfec6 100644
--- a/docs/_locale/pt/LC_MESSAGES/documentation.mo
+++ b/docs/_locale/pt/LC_MESSAGES/documentation.mo
diff --git a/docs/_locale/pt/cli.pot b/docs/_locale/pt/cli.pot
index 12dda7c8..697d0fbb 100644
--- a/docs/_locale/pt/cli.pot
+++ b/docs/_locale/pt/cli.pot
@@ -28,23 +28,23 @@ msgstr "**Working configuration** is the one that is currently being modified in
 msgid "A VyOS system has three major types of configurations:"
 msgstr "A VyOS system has three major types of configurations:"
 
-#: ../../cli.rst:576
+#: ../../cli.rst:579
 msgid "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit."
 msgstr "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit."
 
-#: ../../cli.rst:690
+#: ../../cli.rst:693
 msgid "Access opmode from config mode"
 msgstr "Access opmode from config mode"
 
-#: ../../cli.rst:697
+#: ../../cli.rst:700
 msgid "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode."
 msgstr "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode."
 
-#: ../../cli.rst:651
+#: ../../cli.rst:654
 msgid "Add comment as an annotation to a configuration node."
 msgstr "Add comment as an annotation to a configuration node."
 
-#: ../../cli.rst:539
+#: ../../cli.rst:542
 msgid "All changes in the working config will thus be lost."
 msgstr "All changes in the working config will thus be lost."
 
@@ -52,7 +52,7 @@ msgstr "All changes in the working config will thus be lost."
 msgid "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them."
 msgstr "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them."
 
-#: ../../cli.rst:676
+#: ../../cli.rst:679
 msgid "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show <section>`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment."
 msgstr "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show <section>`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment."
 
@@ -72,11 +72,11 @@ msgstr "By default, the configuration is displayed in a hierarchy like the above
 msgid "Command Line Interface"
 msgstr "Command Line Interface"
 
-#: ../../cli.rst:701
+#: ../../cli.rst:704
 msgid "Command completion and syntax help with ``?`` and ``[tab]`` will also work."
 msgstr "Command completion and syntax help with ``?`` and ``[tab]`` will also work."
 
-#: ../../cli.rst:754
+#: ../../cli.rst:757
 msgid "Compare configurations"
 msgstr "Compare configurations"
 
@@ -92,11 +92,11 @@ msgstr "Configuration Overview"
 msgid "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered."
 msgstr "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered."
 
-#: ../../cli.rst:535
+#: ../../cli.rst:538
 msgid "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used."
 msgstr "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used."
 
-#: ../../cli.rst:583
+#: ../../cli.rst:586
 msgid "Copy a configuration element."
 msgstr "Copy a configuration element."
 
@@ -104,7 +104,7 @@ msgstr "Copy a configuration element."
 msgid "Editing the configuration"
 msgstr "Editing the configuration"
 
-#: ../../cli.rst:662
+#: ../../cli.rst:665
 msgid "Example:"
 msgstr "Example:"
 
@@ -124,11 +124,11 @@ msgstr "For example typing ``sh`` followed by the ``TAB`` key will complete to `
 msgid "Get a collection of all the set commands required which led to the running configuration."
 msgstr "Get a collection of all the set commands required which led to the running configuration."
 
-#: ../../cli.rst:933
+#: ../../cli.rst:936
 msgid "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config."
 msgstr "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config."
 
-#: ../../cli.rst:919
+#: ../../cli.rst:922
 msgid "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:"
 msgstr "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:"
 
@@ -140,15 +140,15 @@ msgstr "It is also possible to display all :cfgcmd:`set` commands within configu
 msgid "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`"
 msgstr "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`"
 
-#: ../../cli.rst:723
+#: ../../cli.rst:726
 msgid "Local Archive"
 msgstr "Local Archive"
 
-#: ../../cli.rst:714
+#: ../../cli.rst:717
 msgid "Managing configurations"
 msgstr "Managing configurations"
 
-#: ../../cli.rst:627
+#: ../../cli.rst:630
 msgid "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters."
 msgstr "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters."
 
@@ -164,31 +164,31 @@ msgstr "Operational mode allows for commands to perform operational system tasks
 msgid "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``."
 msgstr "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``."
 
-#: ../../cli.rst:850
+#: ../../cli.rst:853
 msgid "Remote Archive"
 msgstr "Remote Archive"
 
-#: ../../cli.rst:616
+#: ../../cli.rst:619
 msgid "Rename a configuration element."
 msgstr "Rename a configuration element."
 
-#: ../../cli.rst:917
+#: ../../cli.rst:920
 msgid "Restore Default"
 msgstr "Restore Default"
 
-#: ../../cli.rst:725
+#: ../../cli.rst:728
 msgid "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong."
 msgstr "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong."
 
-#: ../../cli.rst:828
+#: ../../cli.rst:831
 msgid "Rollback Changes"
 msgstr "Rollback Changes"
 
-#: ../../cli.rst:835
+#: ../../cli.rst:838
 msgid "Rollback to revision N (currently requires reboot)"
 msgstr "Rollback to revision N (currently requires reboot)"
 
-#: ../../cli.rst:884
+#: ../../cli.rst:887
 msgid "Saving and loading manually"
 msgstr "Saving and loading manually"
 
@@ -200,11 +200,11 @@ msgstr "See the configuration section of this document for more information on c
 msgid "Seeing and navigating the configuration"
 msgstr "Seeing and navigating the configuration"
 
-#: ../../cli.rst:810
+#: ../../cli.rst:813
 msgid "Show commit revision difference."
 msgstr "Show commit revision difference."
 
-#: ../../cli.rst:861
+#: ../../cli.rst:864
 msgid "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`"
 msgstr "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`"
 
@@ -228,15 +228,15 @@ msgstr "The :cfgcmd:`show` command within configuration mode will show the worki
 msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes."
 msgstr "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes."
 
-#: ../../cli.rst:653
+#: ../../cli.rst:656
 msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes."
 msgstr "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes."
 
-#: ../../cli.rst:784
+#: ../../cli.rst:787
 msgid "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M."
 msgstr "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M."
 
-#: ../../cli.rst:813
+#: ../../cli.rst:816
 msgid "The command above also lets you see the difference between two commits. By default the difference with the running config is shown."
 msgstr "The command above also lets you see the difference between two commits. By default the difference with the running config is shown."
 
@@ -252,11 +252,11 @@ msgstr "The configuration can be edited by the use of :cfgcmd:`set` and :cfgcmd:
 msgid "The current hierarchy level can be changed by the :cfgcmd:`edit` command."
 msgstr "The current hierarchy level can be changed by the :cfgcmd:`edit` command."
 
-#: ../../cli.rst:872
+#: ../../cli.rst:875
 msgid "The number of revisions don't affect the commit-archive."
 msgstr "The number of revisions don't affect the commit-archive."
 
-#: ../../cli.rst:930
+#: ../../cli.rst:933
 msgid "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too."
 msgstr "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too."
 
@@ -268,7 +268,7 @@ msgstr "These commands are also relative to the level you are inside and only re
 msgid "These two commands above are essentially the same, just executed from different levels in the hierarchy."
 msgstr "These two commands above are essentially the same, just executed from different levels in the hierarchy."
 
-#: ../../cli.rst:824
+#: ../../cli.rst:827
 msgid "This means four commits ago we did ``set system ipv6 disable-forwarding``."
 msgstr "This means four commits ago we did ``set system ipv6 disable-forwarding``."
 
@@ -280,7 +280,7 @@ msgstr "To delete a configuration entry use the :cfgcmd:`delete` command, this a
 msgid "To enter configuration mode use the ``configure`` command:"
 msgstr "To enter configuration mode use the ``configure`` command:"
 
-#: ../../cli.rst:658
+#: ../../cli.rst:661
 msgid "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text."
 msgstr "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text."
 
@@ -288,11 +288,11 @@ msgstr "To remove an existing comment from your current configuration, specify a
 msgid "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_."
 msgstr "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_."
 
-#: ../../cli.rst:895
+#: ../../cli.rst:898
 msgid "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address."
 msgstr "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address."
 
-#: ../../cli.rst:508
+#: ../../cli.rst:511
 msgid "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address."
 msgstr "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address."
 
@@ -300,15 +300,15 @@ msgstr "Use this command to preserve configuration changes upon reboot. By defau
 msgid "Use this command to set the value of a parameter or to create a new element."
 msgstr "Use this command to set the value of a parameter or to create a new element."
 
-#: ../../cli.rst:760
+#: ../../cli.rst:763
 msgid "Use this command to spot what the differences are between different configurations."
 msgstr "Use this command to spot what the differences are between different configurations."
 
-#: ../../cli.rst:552
+#: ../../cli.rst:555
 msgid "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes."
 msgstr "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes."
 
-#: ../../cli.rst:730
+#: ../../cli.rst:733
 msgid "View all existing revisions on the local system."
 msgstr "View all existing revisions on the local system."
 
@@ -324,7 +324,7 @@ msgstr "View the current active configuration in JSON format."
 msgid "View the current active configuration in readable JSON format."
 msgstr "View the current active configuration in readable JSON format."
 
-#: ../../cli.rst:852
+#: ../../cli.rst:855
 msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``."
 msgstr "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``."
 
@@ -332,11 +332,11 @@ msgstr "VyOS can upload the configuration to a remote location after each call t
 msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``."
 msgstr "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``."
 
-#: ../../cli.rst:716
+#: ../../cli.rst:719
 msgid "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons."
 msgstr "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons."
 
-#: ../../cli.rst:756
+#: ../../cli.rst:759
 msgid "VyOS lets you compare different configurations."
 msgstr "VyOS lets you compare different configurations."
 
@@ -348,7 +348,7 @@ msgstr "VyOS makes use of a unified configuration file for the entire system's c
 msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue  the ``confirm`` command in 10 minutes, your system will reboot into previous config revision."
 msgstr "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue  the ``confirm`` command in 10 minutes, your system will reboot into previous config revision."
 
-#: ../../cli.rst:558
+#: ../../cli.rst:561
 msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue  the ``confirm`` command in 10 minutes, your system will reboot into previous config revision."
 msgstr "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue  the ``confirm`` command in 10 minutes, your system will reboot into previous config revision."
 
@@ -360,7 +360,7 @@ msgstr "When entering the configuration mode you are navigating inside a tree st
 msgid "When going into configuration mode, prompt changes from ``$`` to ``#``."
 msgstr "When going into configuration mode, prompt changes from ``$`` to ``#``."
 
-#: ../../cli.rst:692
+#: ../../cli.rst:695
 msgid "When inside configuration mode you are not directly able to execute operational commands."
 msgstr "When inside configuration mode you are not directly able to execute operational commands."
 
@@ -368,7 +368,7 @@ msgstr "When inside configuration mode you are not directly able to execute oper
 msgid "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt."
 msgstr "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt."
 
-#: ../../cli.rst:889
+#: ../../cli.rst:892
 msgid "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:"
 msgstr "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:"
 
@@ -384,15 +384,15 @@ msgstr "You are now in a sublevel relative to ``interfaces ethernet eth0``, all
 msgid "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time."
 msgstr "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time."
 
-#: ../../cli.rst:618
+#: ../../cli.rst:621
 msgid "You can also rename config subtrees:"
 msgstr "You can also rename config subtrees:"
 
-#: ../../cli.rst:585
+#: ../../cli.rst:588
 msgid "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20."
 msgstr "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20."
 
-#: ../../cli.rst:830
+#: ../../cli.rst:833
 msgid "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot."
 msgstr "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot."
 
@@ -400,19 +400,23 @@ msgstr "You can rollback configuration changes using the rollback command. This
 msgid "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``."
 msgstr "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``."
 
-#: ../../cli.rst:747
+#: ../../cli.rst:504
+msgid "You can specify a commit message with :cfgcmd:`commit comment <message>`."
+msgstr "You can specify a commit message with :cfgcmd:`commit comment <message>`."
+
+#: ../../cli.rst:750
 msgid "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally."
 msgstr "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally."
 
-#: ../../cli.rst:886
+#: ../../cli.rst:889
 msgid "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files."
 msgstr "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files."
 
-#: ../../cli.rst:874
+#: ../../cli.rst:877
 msgid "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:"
 msgstr "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:"
 
-#: ../../cli.rst:927
+#: ../../cli.rst:930
 msgid "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active."
 msgstr "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active."
 
@@ -420,19 +424,19 @@ msgstr "You will be asked if you want to continue. If you accept, you will have
 msgid "``b`` will scroll back one page"
 msgstr "``b`` will scroll back one page"
 
-#: ../../cli.rst:866
+#: ../../cli.rst:869
 msgid "``ftp://<user>:<passwd>@<host>/<dir>``"
 msgstr "``ftp://<user>:<passwd>@<host>/<dir>``"
 
-#: ../../cli.rst:870
+#: ../../cli.rst:873
 msgid "``git+https://<user>:<passwd>@<host>/<path>``"
 msgstr "``git+https://<user>:<passwd>@<host>/<path>``"
 
-#: ../../cli.rst:864
+#: ../../cli.rst:867
 msgid "``http://<user>:<passwd>@<host>:/<dir>``"
 msgstr "``http://<user>:<passwd>@<host>:/<dir>``"
 
-#: ../../cli.rst:865
+#: ../../cli.rst:868
 msgid "``https://<user>:<passwd>@<host>:/<dir>``"
 msgstr "``https://<user>:<passwd>@<host>:/<dir>``"
 
@@ -448,11 +452,11 @@ msgstr "``q`` key can be used to cancel output"
 msgid "``return`` will scroll down one line"
 msgstr "``return`` will scroll down one line"
 
-#: ../../cli.rst:868
+#: ../../cli.rst:871
 msgid "``scp://<user>:<passwd>@<host>:/<dir>``"
 msgstr "``scp://<user>:<passwd>@<host>:/<dir>``"
 
-#: ../../cli.rst:867
+#: ../../cli.rst:870
 msgid "``sftp://<user>:<passwd>@<host>/<dir>``"
 msgstr "``sftp://<user>:<passwd>@<host>/<dir>``"
 
@@ -460,7 +464,7 @@ msgstr "``sftp://<user>:<passwd>@<host>/<dir>``"
 msgid "``space`` will scroll down one page"
 msgstr "``space`` will scroll down one page"
 
-#: ../../cli.rst:869
+#: ../../cli.rst:872
 msgid "``tftp://<host>/<dir>``"
 msgstr "``tftp://<host>/<dir>``"
 
diff --git a/docs/_locale/pt/configuration.pot b/docs/_locale/pt/configuration.pot
index 5e3bd81e..098a9f01 100644
--- a/docs/_locale/pt/configuration.pot
+++ b/docs/_locale/pt/configuration.pot
@@ -89,7 +89,7 @@ msgid "**Already-selected external check**"
 msgstr "**Already-selected external check**"
 
 #: ../../configuration/trafficpolicy/index.rst:547
-#: ../../configuration/trafficpolicy/index.rst:1181
+#: ../../configuration/trafficpolicy/index.rst:1249
 msgid "**Applies to:** Inbound traffic."
 msgstr "**Applies to:** Inbound traffic."
 
@@ -105,6 +105,7 @@ msgstr "**Applies to:** Outbound Traffic."
 #: ../../configuration/trafficpolicy/index.rst:916
 #: ../../configuration/trafficpolicy/index.rst:961
 #: ../../configuration/trafficpolicy/index.rst:1020
+#: ../../configuration/trafficpolicy/index.rst:1154
 msgid "**Applies to:** Outbound traffic."
 msgstr "**Applies to:** Outbound traffic."
 
@@ -437,6 +438,10 @@ msgstr "**Queueing discipline** Fair/Flow Queue CoDel."
 msgid "**Queueing discipline:** Deficit Round Robin."
 msgstr "**Queueing discipline:** Deficit Round Robin."
 
+#: ../../configuration/trafficpolicy/index.rst:1153
+msgid "**Queueing discipline:** Deficit mode."
+msgstr "**Queueing discipline:** Deficit mode."
+
 #: ../../configuration/trafficpolicy/index.rst:766
 msgid "**Queueing discipline:** Generalized Random Early Drop."
 msgstr "**Queueing discipline:** Generalized Random Early Drop."
@@ -580,6 +585,10 @@ msgstr "**VyOS Router:**"
 msgid "**Weight check**"
 msgstr "**Weight check**"
 
+#: ../../configuration/trafficpolicy/index.rst:1208
+msgid "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows."
+msgstr "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows."
+
 #: ../../_include/interface-dhcp-options.txt:74
 msgid "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24"
 msgstr "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24"
@@ -1511,7 +1520,7 @@ msgstr "ACME"
 msgid "ACME Directory Resource URI."
 msgstr "ACME Directory Resource URI."
 
-#: ../../configuration/service/https.rst:59
+#: ../../configuration/service/https.rst:63
 msgid "API"
 msgstr "API"
 
@@ -1964,7 +1973,7 @@ msgstr "Add the public CA certificate for the CA named `name` to the VyOS CLI."
 msgid "Adding a 2FA with an OTP-key"
 msgstr "Adding a 2FA with an OTP-key"
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:263
+#: ../../configuration/loadbalancing/reverse-proxy.rst:301
 msgid "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3."
 msgstr "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3."
 
@@ -2180,6 +2189,10 @@ msgstr "Allow access to sites in a domain without retrieving them from the Proxy
 msgid "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces."
 msgstr "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces."
 
+#: ../../configuration/service/https.rst:81
+msgid "Allow cross-origin requests from `<origin>`."
+msgstr "Allow cross-origin requests from `<origin>`."
+
 #: ../../configuration/service/dns.rst:456
 msgid "Allow explicit IPv6 address for the interface."
 msgstr "Allow explicit IPv6 address for the interface."
@@ -2431,7 +2444,7 @@ msgstr "Applying a Rule-Set to a Zone"
 msgid "Applying a Rule-Set to an Interface"
 msgstr "Applying a Rule-Set to an Interface"
 
-#: ../../configuration/trafficpolicy/index.rst:1150
+#: ../../configuration/trafficpolicy/index.rst:1218
 msgid "Applying a traffic policy"
 msgstr "Applying a traffic policy"
 
@@ -2691,7 +2704,7 @@ msgstr "Authentication"
 msgid "Authentication Advanced Options"
 msgstr "Authentication Advanced Options"
 
-#: ../../configuration/interfaces/ethernet.rst:99
+#: ../../configuration/interfaces/ethernet.rst:115
 msgid "Authentication (EAPoL)"
 msgstr "Authentication (EAPoL)"
 
@@ -2851,7 +2864,7 @@ msgstr "Babel is a modern routing protocol designed to be robust and efficient b
 msgid "Backend"
 msgstr "Backend"
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:299
+#: ../../configuration/loadbalancing/reverse-proxy.rst:339
 msgid "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA."
 msgstr "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA."
 
@@ -2863,10 +2876,14 @@ msgstr "Balance algorithms:"
 msgid "Balancing Rules"
 msgstr "Balancing Rules"
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:214
+#: ../../configuration/loadbalancing/reverse-proxy.rst:252
 msgid "Balancing based on domain name"
 msgstr "Balancing based on domain name"
 
+#: ../../configuration/loadbalancing/reverse-proxy.rst:365
+msgid "Balancing with HTTP health checks"
+msgstr "Balancing with HTTP health checks"
+
 #: ../../configuration/service/pppoe-server.rst:251
 msgid "Bandwidth Shaping"
 msgstr "Bandwidth Shaping"
@@ -2936,7 +2953,7 @@ msgstr "Because an aggregator cannot be active without at least one available li
 msgid "Because existing sessions do not automatically fail over to a new path, the session table can be flushed on each connection state change:"
 msgstr "Because existing sessions do not automatically fail over to a new path, the session table can be flushed on each connection state change:"
 
-#: ../../configuration/interfaces/ethernet.rst:70
+#: ../../configuration/interfaces/ethernet.rst:86
 msgid "Before enabling any hardware segmentation offload a corresponding software offload is required in GSO. Otherwise it becomes possible for a frame to be re-routed between devices and end up being unable to be transmitted."
 msgstr "Before enabling any hardware segmentation offload a corresponding software offload is required in GSO. Otherwise it becomes possible for a frame to be re-routed between devices and end up being unable to be transmitted."
 
@@ -3155,6 +3172,10 @@ msgstr "By using Pseudo-Ethernet interfaces there will be less system overhead c
 msgid "Bypassing the webproxy"
 msgstr "Bypassing the webproxy"
 
+#: ../../configuration/trafficpolicy/index.rst:1151
+msgid "CAKE"
+msgstr "CAKE"
+
 #: ../../configuration/pki/index.rst:172
 msgid "CA (Certificate Authority)"
 msgstr "CA (Certificate Authority)"
@@ -3797,10 +3818,14 @@ msgstr "Configure protocol used for communication to remote syslog host. This ca
 msgid "Configure proxy port if it does not listen to the default port 80."
 msgstr "Configure proxy port if it does not listen to the default port 80."
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:149
+#: ../../configuration/loadbalancing/reverse-proxy.rst:150
 msgid "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>"
 msgstr "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>"
 
+#: ../../configuration/loadbalancing/reverse-proxy.rst:155
+msgid "Configure requests to the backend server to use SSL encryption without validating server certificate"
+msgstr "Configure requests to the backend server to use SSL encryption without validating server certificate"
+
 #: ../../configuration/system/sflow.rst:16
 msgid "Configure sFlow agent IPv4 or IPv6 address"
 msgstr "Configure sFlow agent IPv4 or IPv6 address"
@@ -3853,7 +3878,7 @@ msgstr "Configure the discrete port under which the RADIUS server can be reached
 msgid "Configure the discrete port under which the TACACS server can be reached."
 msgstr "Configure the discrete port under which the TACACS server can be reached."
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:175
+#: ../../configuration/loadbalancing/reverse-proxy.rst:212
 msgid "Configure the load-balancing reverse-proxy service for HTTP."
 msgstr "Configure the load-balancing reverse-proxy service for HTTP."
 
@@ -4053,6 +4078,10 @@ msgstr "Create `<user>` for local authentication on this system. The users passw
 msgid "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet."
 msgstr "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet."
 
+#: ../../configuration/pki/index.rst:373
+msgid "Create a CA chain and leaf certificates"
+msgstr "Create a CA chain and leaf certificates"
+
 #: ../../configuration/interfaces/bridge.rst:199
 msgid "Create a basic bridge"
 msgstr "Create a basic bridge"
@@ -4636,6 +4665,10 @@ msgstr "Defines the maximum `<number>` of unanswered echo requests. Upon reachin
 msgid "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**."
 msgstr "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**."
 
+#: ../../configuration/trafficpolicy/index.rst:1213
+msgid "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100."
+msgstr "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100."
+
 #: ../../configuration/system/console.rst:21
 msgid "Defines the specified device as a system console. Available console devices can be (see completion helper):"
 msgstr "Defines the specified device as a system console. Available console devices can be (see completion helper):"
@@ -4856,6 +4889,10 @@ msgstr "Disabled by default - no kernel module loaded."
 msgid "Disables caching of peer information from forwarded NHRP Resolution Reply packets. This can be used to reduce memory consumption on big NBMA subnets."
 msgstr "Disables caching of peer information from forwarded NHRP Resolution Reply packets. This can be used to reduce memory consumption on big NBMA subnets."
 
+#: ../../configuration/trafficpolicy/index.rst:1173
+msgid "Disables flow isolation, all traffic passes through a single queue."
+msgstr "Disables flow isolation, all traffic passes through a single queue."
+
 #: ../../configuration/protocols/static.rst:99
 msgid "Disables interface-based IPv4 static route."
 msgstr "Disables interface-based IPv4 static route."
@@ -4974,10 +5011,14 @@ msgstr "Do not allow IPv6 nexthop tracking to resolve via the default route. Thi
 msgid "Do not assign a link-local IPv6 address to this interface."
 msgstr "Do not assign a link-local IPv6 address to this interface."
 
-#: ../../configuration/trafficpolicy/index.rst:1210
+#: ../../configuration/trafficpolicy/index.rst:1278
 msgid "Do not configure IFB as the first step. First create everything else of your traffic-policy, and then you can configure IFB. Otherwise you might get the ``RTNETLINK answer: File exists`` error, which can be solved with ``sudo ip link delete ifb0``."
 msgstr "Do not configure IFB as the first step. First create everything else of your traffic-policy, and then you can configure IFB. Otherwise you might get the ``RTNETLINK answer: File exists`` error, which can be solved with ``sudo ip link delete ifb0``."
 
+#: ../../configuration/service/https.rst:90
+msgid "Do not leave introspection enabled in production, it is a security risk."
+msgstr "Do not leave introspection enabled in production, it is a security risk."
+
 #: ../../configuration/protocols/bgp.rst:609
 msgid "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained."
 msgstr "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained."
@@ -5230,6 +5271,10 @@ msgstr "Enable BFD on a single BGP neighbor"
 msgid "Enable DHCP failover configuration for this address pool."
 msgstr "Enable DHCP failover configuration for this address pool."
 
+#: ../../configuration/service/https.rst:88
+msgid "Enable GraphQL Schema introspection."
+msgstr "Enable GraphQL Schema introspection."
+
 #: ../../configuration/interfaces/wireless.rst:178
 msgid "Enable HT-delayed Block Ack ``[DELAYED-BA]``"
 msgstr "Enable HT-delayed Block Ack ``[DELAYED-BA]``"
@@ -5440,6 +5485,10 @@ msgstr "Enabled on-demand PPPoE connections bring up the link only when traffic
 msgid "Enables Cisco style authentication on NHRP packets. This embeds the secret plaintext password to the outgoing NHRP packets. Incoming NHRP packets on this interface are discarded unless the secret password is present. Maximum length of the secret is 8 characters."
 msgstr "Enables Cisco style authentication on NHRP packets. This embeds the secret plaintext password to the outgoing NHRP packets. Incoming NHRP packets on this interface are discarded unless the secret password is present. Maximum length of the secret is 8 characters."
 
+#: ../../configuration/loadbalancing/reverse-proxy.rst:166
+msgid "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range."
+msgstr "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range."
+
 #: ../../configuration/vrf/index.rst:480
 msgid "Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN. If the value specified is auto, the label value is automatically assigned from a pool maintained."
 msgstr "Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN. If the value specified is auto, the label value is automatically assigned from a pool maintained."
@@ -5488,6 +5537,10 @@ msgstr "Enabling this function increases the risk of bandwidth saturation."
 msgid "Enforce strict path checking"
 msgstr "Enforce strict path checking"
 
+#: ../../configuration/service/https.rst:77
+msgid "Enforce strict path checking."
+msgstr "Enforce strict path checking."
+
 #: ../../configuration/interfaces/bonding.rst:31
 msgid "Enslave `<member>` interface to bond `<interface>`."
 msgstr "Enslave `<member>` interface to bond `<interface>`."
@@ -5747,7 +5800,7 @@ msgid "Example: to be appended is set to ``vyos.net`` and the URL received is ``
 msgstr "Example: to be appended is set to ``vyos.net`` and the URL received is ``www/foo.html``, the system will use the generated, final URL of ``www.vyos.net/foo.html``."
 
 #: ../../configuration/container/index.rst:216
-#: ../../configuration/service/https.rst:77
+#: ../../configuration/service/https.rst:110
 msgid "Example Configuration"
 msgstr "Example Configuration"
 
@@ -5789,7 +5842,8 @@ msgstr "Example synproxy"
 #: ../../configuration/interfaces/bridge.rst:196
 #: ../../configuration/interfaces/macsec.rst:153
 #: ../../configuration/interfaces/wireless.rst:541
-#: ../../configuration/loadbalancing/reverse-proxy.rst:190
+#: ../../configuration/loadbalancing/reverse-proxy.rst:227
+#: ../../configuration/pki/index.rst:370
 #: ../../configuration/policy/index.rst:46
 #: ../../configuration/protocols/bgp.rst:1118
 #: ../../configuration/protocols/isis.rst:336
@@ -6078,6 +6132,10 @@ msgstr "First, on both routers run the operational command \"generate pki key-pa
 msgid "First, one of the systems generate the key using the :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki>` command. Once generated, you will need to install this key on the local system, then copy and install this key to the remote router."
 msgstr "First, one of the systems generate the key using the :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki>` command. Once generated, you will need to install this key on the local system, then copy and install this key to the remote router."
 
+#: ../../configuration/pki/index.rst:393
+msgid "First, we create the root certificate authority."
+msgstr "First, we create the root certificate authority."
+
 #: ../../configuration/interfaces/openvpn.rst:176
 msgid "First, you need to generate a key by running ``run generate pki openvpn shared-secret install <name>`` from configuration mode. You can use any name, we will use ``s2s``."
 msgstr "First, you need to generate a key by running ``run generate pki openvpn shared-secret install <name>`` from configuration mode. You can use any name, we will use ``s2s``."
@@ -6138,6 +6196,30 @@ msgstr "Flow Export"
 msgid "Flow and packet-based balancing"
 msgstr "Flow and packet-based balancing"
 
+#: ../../configuration/trafficpolicy/index.rst:1196
+msgid "Flows are defined by source-destination host pairs."
+msgstr "Flows are defined by source-destination host pairs."
+
+#: ../../configuration/trafficpolicy/index.rst:1181
+msgid "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows."
+msgstr "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows."
+
+#: ../../configuration/trafficpolicy/index.rst:1186
+msgid "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows."
+msgstr "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows."
+
+#: ../../configuration/trafficpolicy/index.rst:1191
+msgid "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)."
+msgstr "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)."
+
+#: ../../configuration/trafficpolicy/index.rst:1177
+msgid "Flows are defined only by destination address."
+msgstr "Flows are defined only by destination address."
+
+#: ../../configuration/trafficpolicy/index.rst:1204
+msgid "Flows are defined only by source address."
+msgstr "Flows are defined only by source address."
+
 #: ../../configuration/system/flow-accounting.rst:10
 msgid "Flows can be exported via two different protocols: NetFlow (versions 5, 9 and 10/IPFIX) and sFlow. Additionally, you may save flows to an in-memory table internally in a router."
 msgstr "Flows can be exported via two different protocols: NetFlow (versions 5, 9 and 10/IPFIX) and sFlow. Additionally, you may save flows to an in-memory table internally in a router."
@@ -6341,7 +6423,7 @@ msgstr "For the :ref:`destination-nat66` rule, the destination address of the pa
 msgid "For the average user a serial console has no advantage over a console offered by a directly attached keyboard and screen. Serial consoles are much slower, taking up to a second to fill a 80 column by 24 line screen. Serial consoles generally only support non-proportional ASCII text, with limited support for languages other than English."
 msgstr "For the average user a serial console has no advantage over a console offered by a directly attached keyboard and screen. Serial consoles are much slower, taking up to a second to fill a 80 column by 24 line screen. Serial consoles generally only support non-proportional ASCII text, with limited support for languages other than English."
 
-#: ../../configuration/trafficpolicy/index.rst:1183
+#: ../../configuration/trafficpolicy/index.rst:1251
 msgid "For the ingress traffic of an interface, there is only one policy you can directly apply, a **Limiter** policy. You cannot apply a shaping policy directly to the ingress traffic of any interface because shaping only works for outbound traffic."
 msgstr "For the ingress traffic of an interface, there is only one policy you can directly apply, a **Limiter** policy. You cannot apply a shaping policy directly to the ingress traffic of any interface because shaping only works for outbound traffic."
 
@@ -6379,6 +6461,10 @@ msgstr "For transit traffic, which is received by the router and forwarded, base
 msgid "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``"
 msgstr "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``"
 
+#: ../../configuration/loadbalancing/reverse-proxy.rst:161
+msgid "For web application providing information about their state HTTP health checks can be used to determine their availability."
+msgstr "For web application providing information about their state HTTP health checks can be used to determine their availability."
+
 #: ../../configuration/protocols/ospf.rst:350
 msgid "Formally, a virtual link looks like a point-to-point network connecting two ABR from one area one of which physically connected to a backbone area. This pseudo-network is considered to belong to a backbone area."
 msgstr "Formally, a virtual link looks like a point-to-point network connecting two ABR from one area one of which physically connected to a backbone area. This pseudo-network is considered to belong to a backbone area."
@@ -6553,7 +6639,7 @@ msgstr "Given the following example we have one VyOS router acting as OpenVPN se
 msgid "Gloabal"
 msgstr "Gloabal"
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:153
+#: ../../configuration/loadbalancing/reverse-proxy.rst:190
 msgid "Global"
 msgstr "Global"
 
@@ -6577,7 +6663,7 @@ msgstr "Global Options Firewall Configuration"
 msgid "Global options"
 msgstr "Global options"
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:155
+#: ../../configuration/loadbalancing/reverse-proxy.rst:192
 msgid "Global parameters"
 msgstr "Global parameters"
 
@@ -6590,6 +6676,10 @@ msgstr "Global settings"
 msgid "Graceful Restart"
 msgstr "Graceful Restart"
 
+#: ../../configuration/service/https.rst:84
+msgid "GraphQL"
+msgstr "GraphQL"
+
 #: ../../configuration/highavailability/index.rst:236
 msgid "Gratuitous ARP"
 msgstr "Gratuitous ARP"
@@ -6627,6 +6717,10 @@ msgstr "HTTP basic authentication username"
 msgid "HTTP client"
 msgstr "HTTP client"
 
+#: ../../configuration/loadbalancing/reverse-proxy.rst:160
+msgid "HTTP health check"
+msgstr "HTTP health check"
+
 #: ../../configuration/interfaces/wireless.rst:137
 msgid "HT (High Throughput) capabilities (802.11n)"
 msgstr "HT (High Throughput) capabilities (802.11n)"
@@ -7859,6 +7953,10 @@ msgstr "In order to separate traffic, Fair Queue uses a classifier based on sour
 msgid "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands."
 msgstr "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands."
 
+#: ../../configuration/interfaces/ethernet.rst:111
+msgid "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled."
+msgstr "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled."
+
 #: ../../configuration/interfaces/ethernet.rst:95
 msgid "In order to use TSO/LRO with VMXNET3 adaters one must also enable the SG offloading option."
 msgstr "In order to use TSO/LRO with VMXNET3 adaters one must also enable the SG offloading option."
@@ -8480,6 +8578,10 @@ msgstr "LNS are often used to connect to a LAC (L2TP Access Concentrator)."
 msgid "Label Distribution Protocol"
 msgstr "Label Distribution Protocol"
 
+#: ../../configuration/pki/index.rst:447
+msgid "Lastly, we can create the leaf certificates that devices and users will utilise."
+msgstr "Lastly, we can create the leaf certificates that devices and users will utilise."
+
 #: ../../configuration/interfaces/l2tpv3.rst:11
 msgid "Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that can be used as an alternative protocol to :ref:`mpls` for encapsulation of multiprotocol Layer 2 communications traffic over IP networks. Like L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier requirements."
 msgstr "Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that can be used as an alternative protocol to :ref:`mpls` for encapsulation of multiprotocol Layer 2 communications traffic over IP networks. Like L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier requirements."
@@ -8520,7 +8622,7 @@ msgstr "Let SNMP daemon listen only on IP address 192.0.2.1"
 msgid "Lets assume the following topology:"
 msgstr "Lets assume the following topology:"
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:193
+#: ../../configuration/loadbalancing/reverse-proxy.rst:230
 msgid "Level 4 balancing"
 msgstr "Level 4 balancing"
 
@@ -8540,7 +8642,7 @@ msgstr "Lifetime is decremented by the number of seconds since the last RA - use
 msgid "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI."
 msgstr "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI."
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:165
+#: ../../configuration/loadbalancing/reverse-proxy.rst:202
 msgid "Limit allowed cipher algorithms used during SSL/TLS handshake"
 msgstr "Limit allowed cipher algorithms used during SSL/TLS handshake"
 
@@ -8552,7 +8654,7 @@ msgstr "Limit logins to `<limit>` per every ``rate-time`` seconds. Rate limit mu
 msgid "Limit logins to ``rate-limit`` attemps per every `<seconds>`. Rate time must be between 15 and 600 seconds."
 msgstr "Limit logins to ``rate-limit`` attemps per every `<seconds>`. Rate time must be between 15 and 600 seconds."
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:160
+#: ../../configuration/loadbalancing/reverse-proxy.rst:197
 msgid "Limit maximum number of connections"
 msgstr "Limit maximum number of connections"
 
@@ -9339,6 +9441,10 @@ msgid "Multiple VLAN to VNI mappings can be configured against the same SVD. Thi
 msgstr "Multiple VLAN to VNI mappings can be configured against the same SVD. This allows for a significant scaling of the number of VNIs since a separate VXLAN interface is no longer required for each VNI."
 
 #: ../../configuration/system/host-name.rst:68
+msgid "Multiple aliases can be specified per host-name."
+msgstr "Multiple aliases can be specified per host-name."
+
+#: ../../configuration/system/host-name.rst:68
 msgid "Multiple aliases can pe specified per host-name."
 msgstr "Multiple aliases can pe specified per host-name."
 
@@ -9859,7 +9965,7 @@ msgstr "Once a neighbor has been found, the entry is considered to be valid for
 msgid "Once a route is assessed a penalty, the penalty is decreased by half each time a predefined amount of time elapses (half-life-time). When the accumulated penalties fall below a predefined threshold (reuse-value), the route is unsuppressed and added back into the BGP routing table."
 msgstr "Once a route is assessed a penalty, the penalty is decreased by half each time a predefined amount of time elapses (half-life-time). When the accumulated penalties fall below a predefined threshold (reuse-value), the route is unsuppressed and added back into the BGP routing table."
 
-#: ../../configuration/trafficpolicy/index.rst:1152
+#: ../../configuration/trafficpolicy/index.rst:1220
 msgid "Once a traffic-policy is created, you can apply it to an interface:"
 msgstr "Once a traffic-policy is created, you can apply it to an interface:"
 
@@ -10039,7 +10145,7 @@ msgstr "Operating Modes"
 
 #: ../../configuration/interfaces/bonding.rst:512
 #: ../../configuration/interfaces/dummy.rst:51
-#: ../../configuration/interfaces/ethernet.rst:132
+#: ../../configuration/interfaces/ethernet.rst:148
 #: ../../configuration/interfaces/loopback.rst:41
 #: ../../configuration/interfaces/macsec.rst:106
 #: ../../configuration/interfaces/pppoe.rst:278
@@ -10417,6 +10523,10 @@ msgstr "Per default every packet is sampled (that is, the sampling rate is 1)."
 msgid "Per default the user session is being replaced if a second authentication request succeeds. Such session requests can be either denied or allowed entirely, which would allow multiple sessions for a user in the latter case. If it is denied, the second session is being rejected even if the authentication succeeds, the user has to terminate its first session and can then authentication again."
 msgstr "Per default the user session is being replaced if a second authentication request succeeds. Such session requests can be either denied or allowed entirely, which would allow multiple sessions for a user in the latter case. If it is denied, the second session is being rejected even if the authentication succeeds, the user has to terminate its first session and can then authentication again."
 
+#: ../../configuration/trafficpolicy/index.rst:1200
+msgid "Perform NAT lookup before applying flow-isolation rules."
+msgstr "Perform NAT lookup before applying flow-isolation rules."
+
 #: ../../configuration/system/option.rst:108
 msgid "Performance"
 msgstr "Performance"
@@ -10523,7 +10633,7 @@ msgstr "Port Groups"
 
 #: ../../configuration/interfaces/bonding.rst:282
 #: ../../configuration/interfaces/bridge.rst:188
-#: ../../configuration/interfaces/ethernet.rst:124
+#: ../../configuration/interfaces/ethernet.rst:140
 msgid "Port Mirror (SPAN)"
 msgstr "Port Mirror (SPAN)"
 
@@ -10809,7 +10919,7 @@ msgstr "Publish a port for the container."
 msgid "Pull a new image for container"
 msgstr "Pull a new image for container"
 
-#: ../../configuration/interfaces/ethernet.rst:117
+#: ../../configuration/interfaces/ethernet.rst:133
 #: ../../configuration/interfaces/virtual-ethernet.rst:39
 #: ../../configuration/interfaces/wireless.rst:408
 msgid "QinQ (802.1ad)"
@@ -11023,7 +11133,7 @@ msgstr "Recommended for larger installations."
 msgid "Record types"
 msgstr "Record types"
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:174
+#: ../../configuration/loadbalancing/reverse-proxy.rst:211
 msgid "Redirect HTTP to HTTPS"
 msgstr "Redirect HTTP to HTTPS"
 
@@ -11055,7 +11165,7 @@ msgstr "Redundancy and load sharing. There are multiple NAT66 devices at the edg
 msgid "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``"
 msgstr "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``"
 
-#: ../../configuration/interfaces/ethernet.rst:110
+#: ../../configuration/interfaces/ethernet.rst:126
 #: ../../configuration/interfaces/virtual-ethernet.rst:33
 #: ../../configuration/interfaces/wireless.rst:401
 msgid "Regular VLANs (802.1q)"
@@ -11402,11 +11512,11 @@ msgstr "Rule-Sets"
 msgid "Rule-set overview"
 msgstr "Rule-set overview"
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:220
+#: ../../configuration/loadbalancing/reverse-proxy.rst:258
 msgid "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``"
 msgstr "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``"
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:257
+#: ../../configuration/loadbalancing/reverse-proxy.rst:295
 msgid "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``."
 msgstr "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``."
 
@@ -11414,11 +11524,11 @@ msgstr "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` an
 msgid "Rule 110 is hit, so connection is accepted."
 msgstr "Rule 110 is hit, so connection is accepted."
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:260
+#: ../../configuration/loadbalancing/reverse-proxy.rst:298
 msgid "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``."
 msgstr "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``."
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:223
+#: ../../configuration/loadbalancing/reverse-proxy.rst:261
 msgid "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``"
 msgstr "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``"
 
@@ -11537,7 +11647,7 @@ msgstr "SSH was designed as a replacement for Telnet and for unsecured remote sh
 msgid "SSID to be used in IEEE 802.11 management frames"
 msgstr "SSID to be used in IEEE 802.11 management frames"
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:294
+#: ../../configuration/loadbalancing/reverse-proxy.rst:333
 msgid "SSL Bridging"
 msgstr "SSL Bridging"
 
@@ -11650,6 +11760,10 @@ msgstr "Scripting"
 msgid "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly."
 msgstr "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly."
 
+#: ../../configuration/pki/index.rst:411
+msgid "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates."
+msgstr "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates."
+
 #: ../../configuration/service/ipoe-server.rst:186
 #: ../../configuration/service/pppoe-server.rst:148
 #: ../../configuration/vpn/l2tp.rst:191
@@ -11857,6 +11971,10 @@ msgstr "Set Virtual Tunnel Interface"
 msgid "Set a container description"
 msgstr "Set a container description"
 
+#: ../../configuration/trafficpolicy/index.rst:1169
+msgid "Set a description for the shaper."
+msgstr "Set a description for the shaper."
+
 #: ../../configuration/system/conntrack.rst:113
 msgid "Set a destination and/or source address. Accepted input for ipv4:"
 msgstr "Set a destination and/or source address. Accepted input for ipv4:"
@@ -11877,7 +11995,7 @@ msgstr "Set a limit on the maximum number of concurrent logged-in users on the s
 msgid "Set a meaningful description."
 msgstr "Set a meaningful description."
 
-#: ../../configuration/service/https.rst:63
+#: ../../configuration/service/https.rst:67
 msgid "Set a named api key. Every key has the same, full permissions on the system."
 msgstr "Set a named api key. Every key has the same, full permissions on the system."
 
@@ -11904,7 +12022,7 @@ msgstr "Set action for the route-map policy."
 msgid "Set action to take on entries matching this rule."
 msgstr "Set action to take on entries matching this rule."
 
-#: ../../configuration/service/https.rst:79
+#: ../../configuration/service/https.rst:112
 msgid "Set an API-KEY is the minimal configuration to get a working API Endpoint."
 msgstr "Set an API-KEY is the minimal configuration to get a working API Endpoint."
 
@@ -12309,6 +12427,14 @@ msgstr "Set the address of the backend port"
 msgid "Set the address of the backend server to which the incoming traffic will be forwarded"
 msgstr "Set the address of the backend server to which the incoming traffic will be forwarded"
 
+#: ../../configuration/service/https.rst:94
+msgid "Set the authentication type for GraphQL, default option is key. Available options are:"
+msgstr "Set the authentication type for GraphQL, default option is key. Available options are:"
+
+#: ../../configuration/service/https.rst:106
+msgid "Set the byte length of the JWT secret. Default is 32."
+msgstr "Set the byte length of the JWT secret. Default is 32."
+
 #: ../../configuration/highavailability/index.rst:295
 msgid "Set the default VRRP version to use. This defaults to 2, but IPv6 instances will always use version 3."
 msgstr "Set the default VRRP version to use. This defaults to 2, but IPv6 instances will always use version 3."
@@ -12345,6 +12471,10 @@ msgstr "Set the global setting for invalid packets."
 msgid "Set the global setting for related connections."
 msgstr "Set the global setting for related connections."
 
+#: ../../configuration/service/https.rst:102
+msgid "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds."
+msgstr "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds."
+
 #: ../../configuration/service/https.rst:28
 msgid "Set the listen port of the local API, this has no effect on the webserver. The default is port 8080"
 msgstr "Set the listen port of the local API, this has no effect on the webserver. The default is port 8080"
@@ -12361,6 +12491,10 @@ msgstr "Set the maximum length of A-MPDU pre-EOF padding that the station can re
 msgid "Set the maximum number of TCP half-open connections."
 msgstr "Set the maximum number of TCP half-open connections."
 
+#: ../../configuration/service/https.rst:60
+msgid "Set the maximum request body size in megabytes. Default is 1MB."
+msgstr "Set the maximum request body size in megabytes. Default is 1MB."
+
 #: ../../_include/interface-eapol.txt:12
 msgid "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry used for authentication of the remote side. If an intermediate CA certificate is specified, then all parent CA certificates that exist in the PKI, such as the root CA or additional intermediate CAs, will automatically be used during certificate validation to ensure that the full chain of trust is available."
 msgstr "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry used for authentication of the remote side. If an intermediate CA certificate is specified, then all parent CA certificates that exist in the PKI, such as the root CA or additional intermediate CAs, will automatically be used during certificate validation to ensure that the full chain of trust is available."
@@ -12429,6 +12563,10 @@ msgstr "Set the routing table to forward packet with."
 msgid "Set the session id, which is a 32-bit integer value. Uniquely identifies the session being created. The value used must match the peer_session_id value being used at the peer."
 msgstr "Set the session id, which is a 32-bit integer value. Uniquely identifies the session being created. The value used must match the peer_session_id value being used at the peer."
 
+#: ../../configuration/trafficpolicy/index.rst:1164
+msgid "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth."
+msgstr "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth."
+
 #: ../../configuration/system/conntrack.rst:31
 msgid "Set the size of the hash table. The connection tracking hash table makes searching the connection tracking table faster. The hash table uses “buckets” to record entries in the connection tracking table."
 msgstr "Set the size of the hash table. The connection tracking hash table makes searching the connection tracking table faster. The hash table uses “buckets” to record entries in the connection tracking table."
@@ -12459,6 +12597,18 @@ msgstr "Set the window scale factor for TCP window scaling"
 msgid "Set window of concurrently valid codes."
 msgstr "Set window of concurrently valid codes."
 
+#: ../../configuration/loadbalancing/reverse-proxy.rst:172
+msgid "Sets the HTTP method to be used, can be either: option, get, post, put"
+msgstr "Sets the HTTP method to be used, can be either: option, get, post, put"
+
+#: ../../configuration/loadbalancing/reverse-proxy.rst:177
+msgid "Sets the endpoint to be used for health checks"
+msgstr "Sets the endpoint to be used for health checks"
+
+#: ../../configuration/loadbalancing/reverse-proxy.rst:182
+msgid "Sets the expected result condition for considering a server healthy. Some possible examples are:"
+msgstr "Sets the expected result condition for considering a server healthy. Some possible examples are:"
+
 #: ../../configuration/container/index.rst:16
 msgid "Sets the image name in the hub registry"
 msgstr "Sets the image name in the hub registry"
@@ -12683,7 +12833,7 @@ msgstr "Show a list of installed certificates"
 msgid "Show all BFD peers"
 msgstr "Show all BFD peers"
 
-#: ../../configuration/interfaces/ethernet.rst:210
+#: ../../configuration/interfaces/ethernet.rst:226
 msgid "Show available offloading functions on given `<interface>`"
 msgstr "Show available offloading functions on given `<interface>`"
 
@@ -12701,7 +12851,7 @@ msgstr "Show bridge `<name>` mdb displays the current multicast group membership
 
 #: ../../configuration/interfaces/bonding.rst:516
 #: ../../configuration/interfaces/dummy.rst:55
-#: ../../configuration/interfaces/ethernet.rst:136
+#: ../../configuration/interfaces/ethernet.rst:152
 #: ../../configuration/interfaces/loopback.rst:45
 #: ../../configuration/interfaces/virtual-ethernet.rst:59
 msgid "Show brief interface information."
@@ -12745,7 +12895,7 @@ msgstr "Show detailed information about the underlaying physical links on given
 
 #: ../../configuration/interfaces/bonding.rst:531
 #: ../../configuration/interfaces/dummy.rst:67
-#: ../../configuration/interfaces/ethernet.rst:150
+#: ../../configuration/interfaces/ethernet.rst:166
 #: ../../configuration/interfaces/pppoe.rst:282
 #: ../../configuration/interfaces/sstp-client.rst:121
 #: ../../configuration/interfaces/virtual-ethernet.rst:72
@@ -12777,7 +12927,7 @@ msgstr "Show general information about specific WireGuard interface"
 msgid "Show info about the Wireguard service. It also shows the latest handshake."
 msgstr "Show info about the Wireguard service. It also shows the latest handshake."
 
-#: ../../configuration/interfaces/ethernet.rst:169
+#: ../../configuration/interfaces/ethernet.rst:185
 msgid "Show information about physical `<interface>`"
 msgstr "Show information about physical `<interface>`"
 
@@ -12895,7 +13045,7 @@ msgstr "Show the logs of all firewall; show all ipv6 firewall logs; show all log
 msgid "Show the route"
 msgstr "Show the route"
 
-#: ../../configuration/interfaces/ethernet.rst:242
+#: ../../configuration/interfaces/ethernet.rst:258
 msgid "Show transceiver information from plugin modules, e.g SFP+, QSFP"
 msgstr "Show transceiver information from plugin modules, e.g SFP+, QSFP"
 
@@ -13475,7 +13625,7 @@ msgstr "Specify the identifier value of the site-level aggregator (SLA) on the i
 msgid "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer."
 msgstr "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer."
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:170
+#: ../../configuration/loadbalancing/reverse-proxy.rst:207
 msgid "Specify the minimum required TLS version 1.2 or 1.3"
 msgstr "Specify the minimum required TLS version 1.2 or 1.3"
 
@@ -13524,6 +13674,10 @@ msgid "Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety
 msgstr "Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety of uses, including speeding up a web server by caching repeated requests, caching web, DNS and other computer network lookups for a group of people sharing network resources, and aiding security by filtering traffic. Although primarily used for HTTP and FTP, Squid includes limited support for several other protocols including Internet Gopher, SSL,[6] TLS and HTTPS. Squid does not support the SOCKS protocol."
 
 #: ../../configuration/service/https.rst:56
+msgid "Start Webserver in given VRF."
+msgstr "Start Webserver in given VRF."
+
+#: ../../configuration/service/https.rst:56
 msgid "Start Webserver in given  VRF."
 msgstr "Start Webserver in given  VRF."
 
@@ -13843,7 +13997,7 @@ msgstr "Temporary disable this RADIUS server. It won't be queried."
 msgid "Temporary disable this TACACS server. It won't be queried."
 msgstr "Temporary disable this TACACS server. It won't be queried."
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:248
+#: ../../configuration/loadbalancing/reverse-proxy.rst:286
 msgid "Terminate SSL"
 msgstr "Terminate SSL"
 
@@ -13879,7 +14033,7 @@ msgstr "Testing and Validation"
 msgid "Thanks to this discovery, any subsequent traffic between PC4 and PC5 will not be using the multicast-address between the leaves as they both know behind which Leaf the PCs are connected. This saves traffic as less multicast packets sent reduces the load on the network, which improves scalability when more leaves are added."
 msgstr "Thanks to this discovery, any subsequent traffic between PC4 and PC5 will not be using the multicast-address between the leaves as they both know behind which Leaf the PCs are connected. This saves traffic as less multicast packets sent reduces the load on the network, which improves scalability when more leaves are added."
 
-#: ../../configuration/trafficpolicy/index.rst:1194
+#: ../../configuration/trafficpolicy/index.rst:1262
 msgid "That is how it is possible to do the so-called \"ingress shaping\"."
 msgstr "That is how it is possible to do the so-called \"ingress shaping\"."
 
@@ -13923,7 +14077,7 @@ msgstr "The DN and password to bind as while performing searches. As the passwor
 msgid "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short."
 msgstr "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short."
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:218
+#: ../../configuration/loadbalancing/reverse-proxy.rst:256
 msgid "The HTTP service listen on TCP port 80."
 msgstr "The HTTP service listen on TCP port 80."
 
@@ -14040,7 +14194,7 @@ msgstr "The ``address`` can be configured either on the VRRP interface or on not
 msgid "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``"
 msgstr "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``"
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:305
+#: ../../configuration/loadbalancing/reverse-proxy.rst:345
 msgid "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``"
 msgstr "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``"
 
@@ -14048,15 +14202,15 @@ msgstr "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HT
 msgid "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS."
 msgstr "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS."
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:251
+#: ../../configuration/loadbalancing/reverse-proxy.rst:289
 msgid "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS."
 msgstr "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS."
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:302
+#: ../../configuration/loadbalancing/reverse-proxy.rst:342
 msgid "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination."
 msgstr "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination."
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:254
+#: ../../configuration/loadbalancing/reverse-proxy.rst:292
 msgid "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination."
 msgstr "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination."
 
@@ -14121,7 +14275,7 @@ msgstr "The below referenced IP address `192.0.2.1` is used as example address r
 msgid "The bonding interface provides a method for aggregating multiple network interfaces into a single logical \"bonded\" interface, or LAG, or ether-channel, or port-channel. The behavior of the bonded interfaces depends upon the mode; generally speaking, modes provide either hot standby or load balancing services. Additionally, link integrity monitoring may be performed."
 msgstr "The bonding interface provides a method for aggregating multiple network interfaces into a single logical \"bonded\" interface, or LAG, or ether-channel, or port-channel. The behavior of the bonded interfaces depends upon the mode; generally speaking, modes provide either hot standby or load balancing services. Additionally, link integrity monitoring may be performed."
 
-#: ../../configuration/trafficpolicy/index.rst:1179
+#: ../../configuration/trafficpolicy/index.rst:1247
 msgid "The case of ingress shaping"
 msgstr "The case of ingress shaping"
 
@@ -14397,7 +14551,7 @@ msgstr "The following commands translate to \"--net host\" when the container is
 msgid "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:"
 msgstr "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:"
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:215
+#: ../../configuration/loadbalancing/reverse-proxy.rst:253
 msgid "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name."
 msgstr "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name."
 
@@ -14413,11 +14567,11 @@ msgstr "The following configuration on VyOS applies to all following 3rd party v
 msgid "The following configuration reverse-proxy terminate SSL."
 msgstr "The following configuration reverse-proxy terminate SSL."
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:249
+#: ../../configuration/loadbalancing/reverse-proxy.rst:287
 msgid "The following configuration terminates SSL on the router."
 msgstr "The following configuration terminates SSL on the router."
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:295
+#: ../../configuration/loadbalancing/reverse-proxy.rst:334
 msgid "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server."
 msgstr "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server."
 
@@ -14618,7 +14772,7 @@ msgstr "The most visible application of the protocol is for access to shell acco
 msgid "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface."
 msgstr "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface."
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:185
+#: ../../configuration/loadbalancing/reverse-proxy.rst:222
 msgid "The name of the service can be different, in this example it is only for convenience."
 msgstr "The name of the service can be different, in this example it is only for convenience."
 
@@ -16161,11 +16315,19 @@ msgstr "This commands creates a bridge that is used to bind traffic on eth1 vlan
 msgid "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`."
 msgstr "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`."
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:195
+#: ../../configuration/loadbalancing/reverse-proxy.rst:367
+msgid "This configuration enables HTTP health checks on backend servers."
+msgstr "This configuration enables HTTP health checks on backend servers."
+
+#: ../../configuration/loadbalancing/reverse-proxy.rst:232
 msgid "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm."
 msgstr "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm."
 
-#: ../../configuration/loadbalancing/reverse-proxy.rst:177
+#: ../../configuration/pki/index.rst:375
+msgid "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user."
+msgstr "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user."
+
+#: ../../configuration/loadbalancing/reverse-proxy.rst:214
 msgid "This configuration listen on port 80 and redirect incoming requests to HTTPS:"
 msgstr "This configuration listen on port 80 and redirect incoming requests to HTTPS:"
 
@@ -16665,7 +16827,7 @@ msgstr "This will show you a statistic of all rule-sets since the last boot."
 msgid "This will show you a summary of rule-sets and groups"
 msgstr "This will show you a summary of rule-sets and groups"
 
-#: ../../configuration/trafficpolicy/index.rst:1188
+#: ../../configuration/trafficpolicy/index.rst:1256
 msgid "This workaround lets you apply a shaping policy to the ingress traffic by first redirecting it to an in-between virtual interface (`Intermediate Functional Block`_). There, in that virtual interface, you will be able to apply any of the policies that work for outbound traffic, for instance, a shaping one."
 msgstr "This workaround lets you apply a shaping policy to the ingress traffic by first redirecting it to an in-between virtual interface (`Intermediate Functional Block`_). There, in that virtual interface, you will be able to apply any of the policies that work for outbound traffic, for instance, a shaping one."
 
@@ -16915,7 +17077,7 @@ msgstr "To enable RADIUS based authentication, the authentication mode needs to
 msgid "To enable bandwidth shaping via RADIUS, the option rate-limit needs to be enabled."
 msgstr "To enable bandwidth shaping via RADIUS, the option rate-limit needs to be enabled."
 
-#: ../../configuration/service/https.rst:68
+#: ../../configuration/service/https.rst:72
 msgid "To enable debug messages. Available via :opcmd:`show log` or :opcmd:`monitor log`"
 msgstr "To enable debug messages. Available via :opcmd:`show log` or :opcmd:`monitor log`"
 
@@ -17188,6 +17350,10 @@ msgstr "USB to serial converters will handle most of their work in software so y
 msgid "UUCP subsystem"
 msgstr "UUCP subsystem"
 
+#: ../../configuration/interfaces/ethernet.rst:73
+msgid "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/"
+msgstr "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/"
+
 #: ../../configuration/interfaces/vxlan.rst:102
 msgid "Unicast"
 msgstr "Unicast"
@@ -18192,7 +18358,7 @@ msgstr "VHT operating channel center frequency - center freq 2 (for use with the
 
 #: ../../configuration/interfaces/bonding.rst:275
 #: ../../configuration/interfaces/bridge.rst:123
-#: ../../configuration/interfaces/ethernet.rst:107
+#: ../../configuration/interfaces/ethernet.rst:123
 #: ../../configuration/interfaces/pseudo-ethernet.rst:63
 #: ../../configuration/interfaces/virtual-ethernet.rst:30
 #: ../../configuration/interfaces/wireless.rst:398
@@ -19264,7 +19430,7 @@ msgstr "You can now \"dial\" the peer with the follwoing command: ``sstpc --log-
 msgid "You can now SSH into your system using admin/admin as a default user supplied from the ``lfkeitel/tacacs_plus:latest`` container."
 msgstr "You can now SSH into your system using admin/admin as a default user supplied from the ``lfkeitel/tacacs_plus:latest`` container."
 
-#: ../../configuration/trafficpolicy/index.rst:1158
+#: ../../configuration/trafficpolicy/index.rst:1226
 msgid "You can only apply one policy per interface and direction, but you could reuse a policy on different interfaces and directions:"
 msgstr "You can only apply one policy per interface and direction, but you could reuse a policy on different interfaces and directions:"
 
@@ -19432,11 +19598,11 @@ msgstr ":abbr:`GENEVE (Generic Network Virtualization Encapsulation)` supports a
 msgid ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (or IPIP/IPsec, SIT/IPsec, or any other stateless tunnel protocol over IPsec) is the usual way to protect the traffic inside a tunnel."
 msgstr ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (or IPIP/IPsec, SIT/IPsec, or any other stateless tunnel protocol over IPsec) is the usual way to protect the traffic inside a tunnel."
 
-#: ../../configuration/interfaces/ethernet.rst:74
+#: ../../configuration/interfaces/ethernet.rst:90
 msgid ":abbr:`GRO (Generic receive offload)` is the complement to GSO. Ideally any frame assembled by GRO should be segmented to create an identical sequence of frames using GSO, and any sequence of frames segmented by GSO should be able to be reassembled back to the original by GRO. The only exception to this is IPv4 ID in the case that the DF bit is set for a given IP header. If the value of the IPv4 ID is not sequentially incrementing it will be altered so that it is when a frame assembled via GRO is segmented via GSO."
 msgstr ":abbr:`GRO (Generic receive offload)` is the complement to GSO. Ideally any frame assembled by GRO should be segmented to create an identical sequence of frames using GSO, and any sequence of frames segmented by GSO should be able to be reassembled back to the original by GRO. The only exception to this is IPv4 ID in the case that the DF bit is set for a given IP header. If the value of the IPv4 ID is not sequentially incrementing it will be altered so that it is when a frame assembled via GRO is segmented via GSO."
 
-#: ../../configuration/interfaces/ethernet.rst:64
+#: ../../configuration/interfaces/ethernet.rst:80
 msgid ":abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is meant to deal with cases where device drivers cannot perform the offloads described above. What occurs in GSO is that a given skbuff will have its data broken out over multiple skbuffs that have been resized to match the MSS provided via skb_shinfo()->gso_size."
 msgstr ":abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is meant to deal with cases where device drivers cannot perform the offloads described above. What occurs in GSO is that a given skbuff will have its data broken out over multiple skbuffs that have been resized to match the MSS provided via skb_shinfo()->gso_size."
 
@@ -19464,6 +19630,10 @@ msgstr ":abbr:`LDP (Label Distribution Protocol)` is a TCP based MPLS signaling
 msgid ":abbr:`LLDP (Link Layer Discovery Protocol)` is a vendor-neutral link layer protocol in the Internet Protocol Suite used by network devices for advertising their identity, capabilities, and neighbors on an IEEE 802 local area network, principally wired Ethernet. The protocol is formally referred to by the IEEE as Station and Media Access Control Connectivity Discovery specified in IEEE 802.1AB and IEEE 802.3-2012 section 6 clause 79."
 msgstr ":abbr:`LLDP (Link Layer Discovery Protocol)` is a vendor-neutral link layer protocol in the Internet Protocol Suite used by network devices for advertising their identity, capabilities, and neighbors on an IEEE 802 local area network, principally wired Ethernet. The protocol is formally referred to by the IEEE as Station and Media Access Control Connectivity Discovery specified in IEEE 802.1AB and IEEE 802.3-2012 section 6 clause 79."
 
+#: ../../configuration/interfaces/ethernet.rst:64
+msgid ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing."
+msgstr ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing."
+
 #: ../../configuration/interfaces/macsec.rst:74
 msgid ":abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys between individual peers."
 msgstr ":abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys between individual peers."
@@ -19528,7 +19698,7 @@ msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:`
 msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`."
 msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`."
 
-#: ../../configuration/interfaces/ethernet.rst:82
+#: ../../configuration/interfaces/ethernet.rst:98
 msgid ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:"
 msgstr ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:"
 
@@ -19724,6 +19894,10 @@ msgstr "`4. Add optional parameters`_"
 msgid "`<name>` must be identical on both sides!"
 msgstr "`<name>` must be identical on both sides!"
 
+#: ../../configuration/trafficpolicy/index.rst:1156
+msgid "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge."
+msgstr "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge."
+
 #: ../../configuration/pki/index.rst:204
 msgid "``$ tail -n +2 ca.key | head -n -1 | tr -d '\\n'``"
 msgstr "``$ tail -n +2 ca.key | head -n -1 | tr -d '\\n'``"
@@ -20292,6 +20466,10 @@ msgstr "``key-exchange`` which protocol should be used to initialize the connect
 msgid "``key`` - a private key, which will be used for authenticating local router on remote peer:"
 msgstr "``key`` - a private key, which will be used for authenticating local router on remote peer:"
 
+#: ../../configuration/service/https.rst:96
+msgid "``key`` use API keys configured in ``service https api keys``"
+msgstr "``key`` use API keys configured in ``service https api keys``"
+
 #: ../../configuration/system/option.rst:137
 msgid "``latency``: A server profile focused on lowering network latency. This profile favors performance over power savings by setting ``intel_pstate`` and ``min_perf_pct=100``."
 msgstr "``latency``: A server profile focused on lowering network latency. This profile favors performance over power savings by setting ``intel_pstate`` and ``min_perf_pct=100``."
@@ -20775,6 +20953,18 @@ msgstr "``static`` - Statically configured routes"
 msgid "``station`` - Connects to another access point"
 msgstr "``station`` - Connects to another access point"
 
+#: ../../configuration/loadbalancing/reverse-proxy.rst:185
+msgid "``status 200-399`` Expecting a non-failure response code"
+msgstr "``status 200-399`` Expecting a non-failure response code"
+
+#: ../../configuration/loadbalancing/reverse-proxy.rst:184
+msgid "``status 200`` Expecting a 200 response code"
+msgstr "``status 200`` Expecting a 200 response code"
+
+#: ../../configuration/loadbalancing/reverse-proxy.rst:186
+msgid "``string success`` Expecting the string `success` in the response body"
+msgstr "``string success`` Expecting the string `success` in the response body"
+
 #: ../../configuration/firewall/ipv4.rst:103
 #: ../../configuration/firewall/ipv6.rst:103
 msgid "``synproxy``: synproxy the packet."
@@ -20824,6 +21014,10 @@ msgstr "``throughput``: A server profile focused on improving network throughput
 msgid "``timeout`` keep-alive timeout in seconds <2-86400> (default 120) IKEv1 only"
 msgstr "``timeout`` keep-alive timeout in seconds <2-86400> (default 120) IKEv1 only"
 
+#: ../../configuration/service/https.rst:98
+msgid "``token`` use JWT tokens."
+msgstr "``token`` use JWT tokens."
+
 #: ../../configuration/interfaces/bonding.rst:80
 msgid "``transmit-load-balance`` - Adaptive transmit load balancing: channel bonding that does not require any special switch support."
 msgstr "``transmit-load-balance`` - Adaptive transmit load balancing: channel bonding that does not require any special switch support."
@@ -20888,6 +21082,22 @@ msgstr "``vnc`` - Virtual Network Control (VNC)"
 msgid "``vti`` - use a VTI interface for traffic encryption. Any traffic, which will be send to VTI interface will be encrypted and send to this peer. Using VTI makes IPSec configuration much flexible and easier in complex situation, and allows to dynamically add/delete remote networks, reachable via a peer, as in this mode router don't need to create additional SA/policy for each remote network:"
 msgstr "``vti`` - use a VTI interface for traffic encryption. Any traffic, which will be send to VTI interface will be encrypted and send to this peer. Using VTI makes IPSec configuration much flexible and easier in complex situation, and allows to dynamically add/delete remote networks, reachable via a peer, as in this mode router don't need to create additional SA/policy for each remote network:"
 
+#: ../../configuration/pki/index.rst:386
+msgid "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA."
+msgstr "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA."
+
+#: ../../configuration/pki/index.rst:383
+msgid "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA."
+msgstr "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA."
+
+#: ../../configuration/pki/index.rst:389
+msgid "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA."
+msgstr "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA."
+
+#: ../../configuration/pki/index.rst:381
+msgid "``vyos_root_ca`` is the root certificate authority."
+msgstr "``vyos_root_ca`` is the root certificate authority."
+
 #: ../../configuration/vpn/site2site_ipsec.rst:59
 msgid "``x509`` - options for x509 authentication mode:"
 msgstr "``x509`` - options for x509 authentication mode:"
@@ -21249,10 +21459,18 @@ msgstr "ip-forwarding"
 msgid "isisd"
 msgstr "isisd"
 
+#: ../../configuration/interfaces/ethernet.rst:106
+msgid "it can be used with any NIC"
+msgstr "it can be used with any NIC"
+
 #: ../../configuration/interfaces/ethernet.rst:90
 msgid "it can be used with any NIC,"
 msgstr "it can be used with any NIC,"
 
+#: ../../configuration/interfaces/ethernet.rst:108
+msgid "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)"
+msgstr "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)"
+
 #: ../../configuration/interfaces/ethernet.rst:92
 msgid "it does not increase hardware device interrupt rate (although it does introduce inter-processor interrupts (IPIs))."
 msgstr "it does not increase hardware device interrupt rate (although it does introduce inter-processor interrupts (IPIs))."
@@ -21647,6 +21865,10 @@ msgstr "slow: Request partner to transmit LACPDUs every 30 seconds"
 msgid "smtp-server"
 msgstr "smtp-server"
 
+#: ../../configuration/interfaces/ethernet.rst:107
+msgid "software filters can easily be added to hash over new protocols"
+msgstr "software filters can easily be added to hash over new protocols"
+
 #: ../../configuration/interfaces/ethernet.rst:91
 msgid "software filters can easily be added to hash over new protocols,"
 msgstr "software filters can easily be added to hash over new protocols,"
diff --git a/docs/_locale/pt/contributing.pot b/docs/_locale/pt/contributing.pot
index 6587eb08..d7f2ae4c 100644
--- a/docs/_locale/pt/contributing.pot
+++ b/docs/_locale/pt/contributing.pot
@@ -72,6 +72,18 @@ msgstr "A good approach for writing commit messages is actually to have a look a
 msgid "A number of flags can be set up to change the behaviour of VyOS at runtime. These flags can be toggled using either environment variables or creating files."
 msgstr "A number of flags can be set up to change the behaviour of VyOS at runtime. These flags can be toggled using either environment variables or creating files."
 
+#: ../../contributing/issues-features.rst:86
+msgid "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature."
+msgstr "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature."
+
+#: ../../contributing/issues-features.rst:42
+msgid "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed."
+msgstr "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed."
+
+#: ../../contributing/issues-features.rst:33
+msgid "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session."
+msgstr "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session."
+
 #: ../../contributing/development.rst:74
 msgid "A single, short, summary of the commit (recommended 50 characters or less, not exceeding 80 characters) containing a prefix of the changed component and the corresponding Phabricator_ reference e.g. ``snmp: T1111:`` or ``ethernet: T2222:`` - multiple components could be concatenated as in ``snmp: ethernet: T3333``"
 msgstr "A single, short, summary of the commit (recommended 50 characters or less, not exceeding 80 characters) containing a prefix of the changed component and the corresponding Phabricator_ reference e.g. ``snmp: T1111:`` or ``ethernet: T2222:`` - multiple components could be concatenated as in ``snmp: ethernet: T3333``"
@@ -93,7 +105,7 @@ msgstr "Acronyms also **must** be capitalized to visually distinguish them from
 msgid "Add file to Git index using ``git add myfile``, or for a whole directory: ``git add somedir/*``"
 msgstr "Add file to Git index using ``git add myfile``, or for a whole directory: ``git add somedir/*``"
 
-#: ../../contributing/testing.rst:100
+#: ../../contributing/testing.rst:103
 msgid "Add one or more IP addresses"
 msgstr "Add one or more IP addresses"
 
@@ -155,6 +167,14 @@ msgstr "Any \"modified\" package may refer to an altered version of e.g. vyos-1x
 msgid "Any packages in the packages directory will be added to the iso during build, replacing the upstream ones. Make sure you delete them (both the source directories and built deb packages) if you want to build an iso from purely upstream packages."
 msgstr "Any packages in the packages directory will be added to the iso during build, replacing the upstream ones. Make sure you delete them (both the source directories and built deb packages) if you want to build an iso from purely upstream packages."
 
+#: ../../contributing/issues-features.rst:100
+msgid "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?"
+msgstr "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?"
+
+#: ../../contributing/issues-features.rst:99
+msgid "Are there any limitations (hardware support, resource usage)?"
+msgstr "Are there any limitations (hardware support, resource usage)?"
+
 #: ../../contributing/testing.rst:57
 msgid "As Smoketests will alter the system configuration and you are logged in remote you may loose your connection to the system."
 msgstr "As Smoketests will alter the system configuration and you are logged in remote you may loose your connection to the system."
@@ -219,6 +239,10 @@ msgstr "Boot Timing"
 msgid "Bug Report/Issue"
 msgstr "Bug Report/Issue"
 
+#: ../../contributing/issues-features.rst:117
+msgid "Bug reports that lack reproducing procedures."
+msgstr "Bug reports that lack reproducing procedures."
+
 #: ../../contributing/build-vyos.rst:825
 msgid "Build"
 msgstr "Build"
@@ -303,7 +327,7 @@ msgstr "Command definitions are purely declarative, and cannot contain any logic
 msgid "Commit the changes by calling ``git commit``. Please use a meaningful commit headline (read above) and don't forget to reference the Phabricator_ ID."
 msgstr "Commit the changes by calling ``git commit``. Please use a meaningful commit headline (read above) and don't forget to reference the Phabricator_ ID."
 
-#: ../../contributing/testing.rst:152
+#: ../../contributing/testing.rst:155
 msgid "Config Load Tests"
 msgstr "Config Load Tests"
 
@@ -331,7 +355,7 @@ msgstr "Continuous Integration"
 msgid "Customize"
 msgstr "Customize"
 
-#: ../../contributing/testing.rst:101
+#: ../../contributing/testing.rst:104
 msgid "DHCP client and DHCPv6 prefix delegation"
 msgstr "DHCP client and DHCPv6 prefix delegation"
 
@@ -440,7 +464,7 @@ msgid "Every change set must be consistent (self containing)! Do not fix multipl
 msgstr "Every change set must be consistent (self containing)! Do not fix multiple bugs in a single commit. If you already worked on multiple fixes in the same file use `git add --patch` to only add the parts related to the one issue into your upcoming commit."
 
 #: ../../contributing/development.rst:412
-#: ../../contributing/testing.rst:66
+#: ../../contributing/testing.rst:69
 msgid "Example:"
 msgstr "Example:"
 
@@ -473,6 +497,14 @@ msgstr "FRR"
 msgid "Feature Request"
 msgstr "Feature Request"
 
+#: ../../contributing/issues-features.rst:72
+msgid "Feature Requests"
+msgstr "Feature Requests"
+
+#: ../../contributing/issues-features.rst:116
+msgid "Feature requests that do not include required information and need clarification."
+msgstr "Feature requests that do not include required information and need clarification."
+
 #: ../../contributing/build-vyos.rst:600
 msgid "Firmware"
 msgstr "Firmware"
@@ -578,11 +610,15 @@ msgstr "Horrible: \"Tcp connection timeout\""
 msgid "Horrible: \"frobnication algorithm.\""
 msgstr "Horrible: \"frobnication algorithm.\""
 
-#: ../../contributing/issues-features.rst:63
+#: ../../contributing/issues-features.rst:67
 msgid "How can we reproduce this Bug?"
 msgstr "How can we reproduce this Bug?"
 
-#: ../../contributing/testing.rst:103
+#: ../../contributing/issues-features.rst:98
+msgid "How you'd configure it by hand there?"
+msgstr "How you'd configure it by hand there?"
+
+#: ../../contributing/testing.rst:106
 msgid "IP and IPv6 options"
 msgstr "IP and IPv6 options"
 
@@ -606,14 +642,30 @@ msgstr "If a verb is essential, keep it. For example, in the help text of ``set
 msgid "If applicable a reference to a previous commit should be made linking those commits nicely when browsing the history: ``After commit abcd12ef (\"snmp: this is a headline\") a Python import statement is missing, throwing the following exception: ABCDEF``"
 msgstr "If applicable a reference to a previous commit should be made linking those commits nicely when browsing the history: ``After commit abcd12ef (\"snmp: this is a headline\") a Python import statement is missing, throwing the following exception: ABCDEF``"
 
+#: ../../contributing/issues-features.rst:46
+msgid "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable."
+msgstr "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable."
+
 #: ../../contributing/development.rst:64
 msgid "If there is no Phabricator_ reference in the commits of your pull request, we have to ask you to amend the commit message. Otherwise we will have to reject it."
 msgstr "If there is no Phabricator_ reference in the commits of your pull request, we have to ask you to amend the commit message. Otherwise we will have to reject it."
 
+#: ../../contributing/issues-features.rst:126
+msgid "If there is no response after further two weeks, the task will be automatically closed."
+msgstr "If there is no response after further two weeks, the task will be automatically closed."
+
+#: ../../contributing/issues-features.rst:124
+msgid "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply."
+msgstr "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply."
+
 #: ../../contributing/build-vyos.rst:739
 msgid "If you are brave enough to build yourself an ISO image containing any modified package from our GitHub organisation - this is the place to be."
 msgstr "If you are brave enough to build yourself an ISO image containing any modified package from our GitHub organisation - this is the place to be."
 
+#: ../../contributing/issues-features.rst:50
+msgid "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report."
+msgstr "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report."
+
 #: ../../contributing/build-vyos.rst:602
 msgid "If you upgrade your kernel or include new drivers you may need new firmware. Build a new ``vyos-linux-firmware`` package with the included helper scripts."
 msgstr "If you upgrade your kernel or include new drivers you may need new firmware. Build a new ``vyos-linux-firmware`` package with the included helper scripts."
@@ -626,7 +678,7 @@ msgstr "In a big system, such as VyOS, that is comprised of multiple components,
 msgid "In addition this also helps when browsing the GitHub codebase on a mobile device if you happen to be a crazy scientist."
 msgstr "In addition this also helps when browsing the GitHub codebase on a mobile device if you happen to be a crazy scientist."
 
-#: ../../contributing/issues-features.rst:56
+#: ../../contributing/issues-features.rst:60
 msgid "In order to open up a bug-report/feature request you need to create yourself an account on VyOS Phabricator_. On the left side of the specific project (VyOS 1.2 or VyOS 1.3) you will find quick-links for opening a bug-report/feature request."
 msgstr "In order to open up a bug-report/feature request you need to create yourself an account on VyOS Phabricator_. On the left side of the specific project (VyOS 1.2 or VyOS 1.3) you will find quick-links for opening a bug-report/feature request."
 
@@ -690,10 +742,14 @@ msgstr "Intel QAT"
 msgid "Inter QAT"
 msgstr "Inter QAT"
 
-#: ../../contributing/testing.rst:91
+#: ../../contributing/testing.rst:94
 msgid "Interface based tests"
 msgstr "Interface based tests"
 
+#: ../../contributing/issues-features.rst:96
+msgid "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?"
+msgstr "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?"
+
 #: ../../contributing/issues-features.rst:5
 msgid "Issues/Feature requests"
 msgstr "Issues/Feature requests"
@@ -706,6 +762,10 @@ msgstr "Issues or bugs are found in any software project. VyOS is not an excepti
 msgid "It's an Ada program and requires GNAT and gprbuild for building, dependencies are properly specified so just follow debuild's suggestions."
 msgstr "It's an Ada program and requires GNAT and gprbuild for building, dependencies are properly specified so just follow debuild's suggestions."
 
+#: ../../contributing/issues-features.rst:103
+msgid "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions."
+msgstr "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions."
+
 #: ../../contributing/debugging.rst:58
 msgid "It is also possible to set up the debugging using environment variables. In that case, the name will be (in uppercase) VYOS_FEATURE_DEBUG."
 msgstr "It is also possible to set up the debugging using environment variables. In that case, the name will be (in uppercase) VYOS_FEATURE_DEBUG."
@@ -762,7 +822,7 @@ msgstr "Linux Kernel"
 msgid "Live System"
 msgstr "Live System"
 
-#: ../../contributing/testing.rst:102
+#: ../../contributing/testing.rst:105
 msgid "MTU size"
 msgstr "MTU size"
 
@@ -770,11 +830,11 @@ msgstr "MTU size"
 msgid "Make your changes and save them. Do the following for all changes files to record them in your created Git commit:"
 msgstr "Make your changes and save them. Do the following for all changes files to record them in your created Git commit:"
 
-#: ../../contributing/testing.rst:61
+#: ../../contributing/testing.rst:64
 msgid "Manual Smoketest Run"
 msgstr "Manual Smoketest Run"
 
-#: ../../contributing/testing.rst:169
+#: ../../contributing/testing.rst:172
 msgid "Manual config load test"
 msgstr "Manual config load test"
 
@@ -851,7 +911,7 @@ msgstr "Now you are prepared with two new aliases ``vybld`` and ``vybld_crux`` t
 msgid "Old concept/syntax"
 msgstr "Old concept/syntax"
 
-#: ../../contributing/testing.rst:63
+#: ../../contributing/testing.rst:66
 msgid "On the other hand - as each test is contain in its own file - one can always execute a single Smoketest by hand by simply running the Python test scripts."
 msgstr "On the other hand - as each test is contain in its own file - one can always execute a single Smoketest by hand by simply running the Python test scripts."
 
@@ -863,7 +923,7 @@ msgstr "Once you have the required dependencies installed, you may proceed with
 msgid "Once you run ``show xyz`` and your condition is triggered you should be dropped into the python debugger:"
 msgstr "Once you run ``show xyz`` and your condition is triggered you should be dropped into the python debugger:"
 
-#: ../../contributing/testing.rst:171
+#: ../../contributing/testing.rst:174
 msgid "One is not bound to load all configurations one after another but can also load individual test configurations on his own."
 msgstr "One is not bound to load all configurations one after another but can also load individual test configurations on his own."
 
@@ -903,7 +963,7 @@ msgstr "Our code is split into several modules. VyOS is composed of multiple ind
 msgid "Our op mode scripts use the python-vici module, which is not included in Debian's build, and isn't quite easy to integrate in that build. For this reason we debianize that module by hand now, using this procedure:"
 msgstr "Our op mode scripts use the python-vici module, which is not included in Debian's build, and isn't quite easy to integrate in that build. For this reason we debianize that module by hand now, using this procedure:"
 
-#: ../../contributing/testing.rst:93
+#: ../../contributing/testing.rst:96
 msgid "Our smoketests not only test daemons and serives, but also check if what we configure for an interface works. Thus there is a common base classed named: ``base_interfaces_test.py`` which holds all the common code that an interface supports and is tested."
 msgstr "Our smoketests not only test daemons and serives, but also check if what we configure for an interface works. Thus there is a common base classed named: ``base_interfaces_test.py`` which holds all the common code that an interface supports and is tested."
 
@@ -936,11 +996,11 @@ msgstr "Please use the following template as good starting point when developing
 msgid "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface."
 msgstr "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface."
 
-#: ../../contributing/testing.rst:104
+#: ../../contributing/testing.rst:107
 msgid "Port description"
 msgstr "Port description"
 
-#: ../../contributing/testing.rst:105
+#: ../../contributing/testing.rst:108
 msgid "Port disable"
 msgstr "Port disable"
 
@@ -964,7 +1024,11 @@ msgstr "Prerequisites"
 msgid "Priorities"
 msgstr "Priorities"
 
-#: ../../contributing/issues-features.rst:61
+#: ../../contributing/issues-features.rst:91
+msgid "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required."
+msgstr "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required."
+
+#: ../../contributing/issues-features.rst:65
 msgid "Provide as much information as you can"
 msgstr "Provide as much information as you can"
 
@@ -996,7 +1060,7 @@ msgstr "Rationale: this seems to be the unwritten standard in network device CLI
 msgid "Recent versions use the ``vyos.frr`` framework. The Python class is located inside our ``vyos-1x:python/vyos/frr.py``. It comes with an embedded debugging/ (print style) debugger as vyos.ifconfig does."
 msgstr "Recent versions use the ``vyos.frr`` framework. The Python class is located inside our ``vyos-1x:python/vyos/frr.py``. It comes with an embedded debugging/ (print style) debugger as vyos.ifconfig does."
 
-#: ../../contributing/issues-features.rst:54
+#: ../../contributing/issues-features.rst:58
 msgid "Report a Bug"
 msgstr "Report a Bug"
 
@@ -1041,7 +1105,7 @@ msgstr "Some VyOS packages (namely vyos-1x) come with build-time tests which ver
 msgid "Some abbreviations are traditionally written in mixed case. Generally, if it contains words \"over\" or \"version\", the letter **should** be lowercase. If there's an accepted spelling (especially if defined by an RFC or another standard), it **must** be followed."
 msgstr "Some abbreviations are traditionally written in mixed case. Generally, if it contains words \"over\" or \"version\", the letter **should** be lowercase. If there's an accepted spelling (especially if defined by an RFC or another standard), it **must** be followed."
 
-#: ../../contributing/testing.rst:202
+#: ../../contributing/testing.rst:205
 msgid "Some of the configurations have preconditions which need to be met. Those most likely include generation of crypographic keys before the config can be applied - you will get a commit error otherwise. If you are interested how those preconditions are fulfilled check the vyos-build_ repository and the ``scripts/check-qemu-install`` file."
 msgstr "Some of the configurations have preconditions which need to be met. Those most likely include generation of crypographic keys before the config can be applied - you will get a commit error otherwise. If you are interested how those preconditions are fulfilled check the vyos-build_ repository and the ``scripts/check-qemu-install`` file."
 
@@ -1077,6 +1141,14 @@ msgstr "Suppose you want to make a change in the webproxy script but yet you do
 msgid "System Startup"
 msgstr "System Startup"
 
+#: ../../contributing/issues-features.rst:108
+msgid "Task auto-closing"
+msgstr "Task auto-closing"
+
+#: ../../contributing/issues-features.rst:118
+msgid "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)."
+msgstr "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)."
+
 #: ../../contributing/development.rst:214
 msgid "Template processor **should** be used for generating config files. Built-in string formatting **may** be used for simple line-oriented formats where every line is self-contained, such as iptables rules. Template processor **must** be used for structured, multi-line formats such as those used by ISC DHCPd."
 msgstr "Template processor **should** be used for generating config files. Built-in string formatting **may** be used for simple line-oriented formats where every line is self-contained, such as iptables rules. Template processor **must** be used for structured, multi-line formats such as those used by ISC DHCPd."
@@ -1137,11 +1209,15 @@ msgstr "The ``verify()`` function takes your internal representation of the conf
 msgid "The bash (or better vbash) completion in VyOS is defined in *templates*. Templates are text files (called ``node.def``) stored in a directory tree. The directory names define the command names, and template files define the command behaviour. Before VyOS 1.2 (crux) this files were created by hand. After a complex redesign process_ the new style template are automatically generated from a XML input file."
 msgstr "The bash (or better vbash) completion in VyOS is defined in *templates*. Templates are text files (called ``node.def``) stored in a directory tree. The directory names define the command names, and template files define the command behaviour. Before VyOS 1.2 (crux) this files were created by hand. After a complex redesign process_ the new style template are automatically generated from a XML input file."
 
+#: ../../contributing/issues-features.rst:39
+msgid "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be."
+msgstr "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be."
+
 #: ../../contributing/build-vyos.rst:116
 msgid "The build process needs to be built on a local file system, building on SMB or NFS shares will result in the container failing to build properly! VirtualBox Drive Share is also not an option as block device operations are not implemented and the drive is always mounted as \"nodev\""
 msgstr "The build process needs to be built on a local file system, building on SMB or NFS shares will result in the container failing to build properly! VirtualBox Drive Share is also not an option as block device operations are not implemented and the drive is always mounted as \"nodev\""
 
-#: ../../contributing/testing.rst:159
+#: ../../contributing/testing.rst:162
 msgid "The configurations are all derived from production systems and can not only act as a testcase but also as reference if one wants to enable a certain feature. The configurations can be found here: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs"
 msgstr "The configurations are all derived from production systems and can not only act as a testcase but also as reference if one wants to enable a certain feature. The configurations can be found here: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs"
 
@@ -1161,7 +1237,7 @@ msgstr "The default template processor for VyOS code is Jinja2_."
 msgid "The easiest way to compile your package is with the above mentioned :ref:`build_docker` container, it includes all required dependencies for all VyOS related packages."
 msgstr "The easiest way to compile your package is with the above mentioned :ref:`build_docker` container, it includes all required dependencies for all VyOS related packages."
 
-#: ../../contributing/testing.rst:164
+#: ../../contributing/testing.rst:167
 msgid "The entire test is controlled by the main wrapper script ``/usr/bin/vyos-configtest`` which behaves in the same way as the main smoketest script. It scans the folder for potential configuration files and issues a ``load`` command one after another."
 msgstr "The entire test is controlled by the main wrapper script ``/usr/bin/vyos-configtest`` which behaves in the same way as the main smoketest script. It scans the folder for potential configuration files and issues a ``load`` command one after another."
 
@@ -1201,7 +1277,7 @@ msgstr "The most obvious reasons could be:"
 msgid "The original repo is at https://github.com/dmbaturin/hvinfo"
 msgstr "The original repo is at https://github.com/dmbaturin/hvinfo"
 
-#: ../../contributing/testing.rst:154
+#: ../../contributing/testing.rst:157
 msgid "The other part of our tests are called \"config load tests\". The config load tests will load - one after another - arbitrary configuration files to test if the configuration migration scripts work as designed and that a given set of functionality still can be loaded with a fresh VyOS ISO image."
 msgstr "The other part of our tests are called \"config load tests\". The config load tests will load - one after another - arbitrary configuration files to test if the configuration migration scripts work as designed and that a given set of functionality still can be loaded with a fresh VyOS ISO image."
 
@@ -1265,6 +1341,10 @@ msgstr "There are extensions to e.g. VIM (xmllint) which will help you to get yo
 msgid "There are two flags available to aid in debugging configuration scripts. Since configuration loading issues will manifest during boot, the flags are passed as kernel boot parameters."
 msgstr "There are two flags available to aid in debugging configuration scripts. Since configuration loading issues will manifest during boot, the flags are passed as kernel boot parameters."
 
+#: ../../contributing/issues-features.rst:110
+msgid "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"."
+msgstr "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"."
+
 #: ../../contributing/build-vyos.rst:297
 msgid "This ISO can be customized with the following list of configure options. The full and current list can be generated with ``./build-vyos-image --help``:"
 msgstr "This ISO can be customized with the following list of configure options. The full and current list can be generated with ``./build-vyos-image --help``:"
@@ -1281,6 +1361,10 @@ msgstr "This chapter lists those exceptions and gives you a brief overview what
 msgid "This is done by utilizing the ``systemd-bootchart`` package which is now installed by default on the VyOS 1.3 (equuleus) branch. The configuration is also versioned so we get comparable results. ``systemd-bootchart`` is configured using this file: bootchart.conf_"
 msgstr "This is done by utilizing the ``systemd-bootchart`` package which is now installed by default on the VyOS 1.3 (equuleus) branch. The configuration is also versioned so we get comparable results. ``systemd-bootchart`` is configured using this file: bootchart.conf_"
 
+#: ../../contributing/issues-features.rst:122
+msgid "This is what will happen when a task is set to \"Needs reporter action\":"
+msgstr "This is what will happen when a task is set to \"Needs reporter action\":"
+
 #: ../../contributing/development.rst:132
 msgid "This means the file in question (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) is located in the ``vyatta-webproxy`` package which can be found here: https://github.com/vyos/vyatta-webproxy"
 msgstr "This means the file in question (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) is located in the ``vyatta-webproxy`` package which can be found here: https://github.com/vyos/vyatta-webproxy"
@@ -1305,11 +1389,11 @@ msgstr "This will guide you through the process of building a VyOS ISO using Doc
 msgid "This will guide you through the process of building a VyOS ISO using Docker_. This process has been tested on clean installs of Debian Jessie, Stretch, and Buster."
 msgstr "This will guide you through the process of building a VyOS ISO using Docker_. This process has been tested on clean installs of Debian Jessie, Stretch, and Buster."
 
-#: ../../contributing/testing.rst:148
+#: ../../contributing/testing.rst:151
 msgid "This will limit the `bond` interface test to only make use of `eth1` and `eth2` as member ports."
 msgstr "This will limit the `bond` interface test to only make use of `eth1` and `eth2` as member ports."
 
-#: ../../contributing/testing.rst:98
+#: ../../contributing/testing.rst:101
 msgid "Those common tests consists out of:"
 msgstr "Those common tests consists out of:"
 
@@ -1353,6 +1437,10 @@ msgstr "To enable boot time graphing change the Kernel commandline and add the f
 msgid "To enable debugging just run: ``$ touch /tmp/vyos.frr.debug``"
 msgstr "To enable debugging just run: ``$ touch /tmp/vyos.frr.debug``"
 
+#: ../../contributing/testing.rst:60
+msgid "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``."
+msgstr "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``."
+
 #: ../../contributing/development.rst:547
 msgid "To ensure uniform look and feel, and improve readability, we should follow a set of guidelines consistently."
 msgstr "To ensure uniform look and feel, and improve readability, we should follow a set of guidelines consistently."
@@ -1413,7 +1501,7 @@ msgstr "Useful commands are:"
 msgid "VIF (incl. VIF-S/VIF-C)"
 msgstr "VIF (incl. VIF-S/VIF-C)"
 
-#: ../../contributing/testing.rst:106
+#: ../../contributing/testing.rst:109
 msgid "VLANs (QinQ and regular 802.1q)"
 msgstr "VLANs (QinQ and regular 802.1q)"
 
@@ -1457,6 +1545,10 @@ msgstr "VyOS makes use of Jenkins_ as our Continuous Integration (CI) service. O
 msgid "We again make use of a helper script and some patches to make the build work. Just run the following command:"
 msgstr "We again make use of a helper script and some patches to make the build work. Just run the following command:"
 
+#: ../../contributing/issues-features.rst:114
+msgid "We assign that status to:"
+msgstr "We assign that status to:"
+
 #: ../../contributing/testing.rst:25
 msgid "We differentiate in two independent tests, which are both run in parallel by two separate QEmu instances which are launched via ``make test`` and ``make testc`` from within the vyos-build_ repository."
 msgstr "We differentiate in two independent tests, which are both run in parallel by two separate QEmu instances which are launched via ``make test`` and ``make testc`` from within the vyos-build_ repository."
@@ -1473,6 +1565,10 @@ msgstr "We now need to mount some required, volatile filesystems"
 msgid "We only accept bugfixes in packages other than https://github.com/vyos/vyos-1x as no new functionality should use the old style templates (``node.def`` and Perl/BASH code. Use the new style XML/Python interface instead."
 msgstr "We only accept bugfixes in packages other than https://github.com/vyos/vyos-1x as no new functionality should use the old style templates (``node.def`` and Perl/BASH code. Use the new style XML/Python interface instead."
 
+#: ../../contributing/issues-features.rst:128
+msgid "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!"
+msgstr "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!"
+
 #: ../../contributing/development.rst:87
 msgid "What/why/how something has been changed, makes everyone's life easier when working with `git bisect`"
 msgstr "What/why/how something has been changed, makes everyone's life easier when working with `git bisect`"
@@ -1517,7 +1613,7 @@ msgstr "When you are able to verify that it is actually a bug, spend some time t
 msgid "When you are working on interface configuration and you also wan't to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used."
 msgstr "When you are working on interface configuration and you also wan't to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used."
 
-#: ../../contributing/testing.rst:109
+#: ../../contributing/testing.rst:112
 msgid "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used."
 msgstr "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used."
 
@@ -1529,7 +1625,7 @@ msgstr "When you believe you have found a bug, it is always a good idea to verif
 msgid "When you wish to have a developer fix a bug that you found, helping them reproduce the issue is beneficial to everyone. Be sure to include information about the hardware you are using, commands that you were running, any other activities that you may have been doing at the time. This additional information can be very useful."
 msgstr "When you wish to have a developer fix a bug that you found, helping them reproduce the issue is beneficial to everyone. Be sure to include information about the hardware you are using, commands that you were running, any other activities that you may have been doing at the time. This additional information can be very useful."
 
-#: ../../contributing/issues-features.rst:62
+#: ../../contributing/issues-features.rst:66
 msgid "Which version of VyOS are you using? ``run show version``"
 msgstr "Which version of VyOS are you using? ``run show version``"
 
@@ -1574,6 +1670,10 @@ msgstr "You can type ``help`` to get an overview of the available commands, and
 msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project."
 msgstr "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project."
 
+#: ../../contributing/issues-features.rst:74
+msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project."
+msgstr "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project."
+
 #: ../../contributing/build-vyos.rst:470
 msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers"
 msgstr "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers"
@@ -1582,10 +1682,23 @@ msgstr "You have your own custom kernel `*.deb` packages in the `packages` folde
 msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, WireGuard, Intel QAT, Intel NIC"
 msgstr "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, WireGuard, Intel QAT, Intel NIC"
 
+#: ../../contributing/issues-features.rst:80
+msgid "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there."
+msgstr "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there."
+
+#: ../../contributing/issues-features.rst:84
+msgid "You must include at least the following:"
+msgstr "You must include at least the following:"
+
 #: ../../contributing/debugging.rst:166
 msgid "You shoudl now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task."
 msgstr "You shoudl now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task."
 
+#: ../../contributing/issues-features.rst:31
+#: ../../contributing/issues-features.rst:94
+msgid "You should include the following information:"
+msgstr "You should include the following information:"
+
 #: ../../contributing/debugging.rst:166
 msgid "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task."
 msgstr "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task."
@@ -1598,7 +1711,7 @@ msgstr "You then can proceed with cloning your fork or add a new remote to your
 msgid "Your configuration script or operation mode script which is also written in Python3 should have a line break on 80 characters. This seems to be a bit odd nowadays but as some people also work remotely or program using vi(m) this is a fair good standard which I hope we can rely on."
 msgstr "Your configuration script or operation mode script which is also written in Python3 should have a line break on 80 characters. This seems to be a bit odd nowadays but as some people also work remotely or program using vi(m) this is a fair good standard which I hope we can rely on."
 
-#: ../../contributing/testing.rst:107
+#: ../../contributing/testing.rst:110
 msgid "..."
 msgstr "..."
 
diff --git a/docs/_locale/pt/documentation.pot b/docs/_locale/pt/documentation.pot
index d8343839..2a96e024 100644
--- a/docs/_locale/pt/documentation.pot
+++ b/docs/_locale/pt/documentation.pot
@@ -177,6 +177,10 @@ msgid "If there some troubleshooting guides related to the commands. Explain it
 msgstr "If there some troubleshooting guides related to the commands. Explain it in the next optional part."
 
 #: ../../documentation.rst:448
+msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``"
+msgstr "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``"
+
+#: ../../documentation.rst:448
 msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin master``"
 msgstr "If you also want to update your fork on GitHub, use the following: ``$ git push origin master``"