diff options
Diffstat (limited to 'docs')
94 files changed, 3198 insertions, 876 deletions
diff --git a/docs/_include/vyos-1x b/docs/_include/vyos-1x -Subproject 8f778f989d8fed30eec0a95d5b1fbb67594c67d +Subproject f980f8b8010a9681c387d47c476254c89b0c4a2 diff --git a/docs/_locale/de/LC_MESSAGES/cli.mo b/docs/_locale/de/LC_MESSAGES/cli.mo Binary files differindex 458b4cbd..02f6fdee 100644 --- a/docs/_locale/de/LC_MESSAGES/cli.mo +++ b/docs/_locale/de/LC_MESSAGES/cli.mo diff --git a/docs/_locale/de/LC_MESSAGES/configuration.mo b/docs/_locale/de/LC_MESSAGES/configuration.mo Binary files differindex 0f5432f2..7318a633 100644 --- a/docs/_locale/de/LC_MESSAGES/configuration.mo +++ b/docs/_locale/de/LC_MESSAGES/configuration.mo diff --git a/docs/_locale/de/LC_MESSAGES/contributing.mo b/docs/_locale/de/LC_MESSAGES/contributing.mo Binary files differindex ed62e819..13fb0c19 100644 --- a/docs/_locale/de/LC_MESSAGES/contributing.mo +++ b/docs/_locale/de/LC_MESSAGES/contributing.mo diff --git a/docs/_locale/de/LC_MESSAGES/documentation.mo b/docs/_locale/de/LC_MESSAGES/documentation.mo Binary files differindex 5c8bb64e..e078ffb1 100644 --- a/docs/_locale/de/LC_MESSAGES/documentation.mo +++ b/docs/_locale/de/LC_MESSAGES/documentation.mo diff --git a/docs/_locale/de/cli.pot b/docs/_locale/de/cli.pot index 71b339f5..70bb4156 100644 --- a/docs/_locale/de/cli.pot +++ b/docs/_locale/de/cli.pot @@ -28,23 +28,23 @@ msgstr "**Working configuration** is the one that is currently being modified in msgid "A VyOS system has three major types of configurations:" msgstr "A VyOS system has three major types of configurations:" -#: ../../cli.rst:576 +#: ../../cli.rst:579 msgid "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit." msgstr "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit." -#: ../../cli.rst:690 +#: ../../cli.rst:693 msgid "Access opmode from config mode" msgstr "Access opmode from config mode" -#: ../../cli.rst:697 +#: ../../cli.rst:700 msgid "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode." msgstr "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode." -#: ../../cli.rst:651 +#: ../../cli.rst:654 msgid "Add comment as an annotation to a configuration node." msgstr "Add comment as an annotation to a configuration node." -#: ../../cli.rst:539 +#: ../../cli.rst:542 msgid "All changes in the working config will thus be lost." msgstr "All changes in the working config will thus be lost." @@ -52,7 +52,7 @@ msgstr "All changes in the working config will thus be lost." msgid "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them." msgstr "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them." -#: ../../cli.rst:676 +#: ../../cli.rst:679 msgid "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show <section>`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment." msgstr "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show <section>`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment." @@ -72,11 +72,11 @@ msgstr "By default, the configuration is displayed in a hierarchy like the above msgid "Command Line Interface" msgstr "Command Line Interface" -#: ../../cli.rst:701 +#: ../../cli.rst:704 msgid "Command completion and syntax help with ``?`` and ``[tab]`` will also work." msgstr "Command completion and syntax help with ``?`` and ``[tab]`` will also work." -#: ../../cli.rst:754 +#: ../../cli.rst:757 msgid "Compare configurations" msgstr "Compare configurations" @@ -92,11 +92,11 @@ msgstr "Configuration Overview" msgid "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered." msgstr "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered." -#: ../../cli.rst:535 +#: ../../cli.rst:538 msgid "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used." msgstr "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used." -#: ../../cli.rst:583 +#: ../../cli.rst:586 msgid "Copy a configuration element." msgstr "Copy a configuration element." @@ -104,7 +104,7 @@ msgstr "Copy a configuration element." msgid "Editing the configuration" msgstr "Editing the configuration" -#: ../../cli.rst:662 +#: ../../cli.rst:665 msgid "Example:" msgstr "Example:" @@ -124,11 +124,11 @@ msgstr "For example typing ``sh`` followed by the ``TAB`` key will complete to ` msgid "Get a collection of all the set commands required which led to the running configuration." msgstr "Get a collection of all the set commands required which led to the running configuration." -#: ../../cli.rst:933 +#: ../../cli.rst:936 msgid "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config." msgstr "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config." -#: ../../cli.rst:919 +#: ../../cli.rst:922 msgid "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:" msgstr "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:" @@ -140,15 +140,15 @@ msgstr "It is also possible to display all :cfgcmd:`set` commands within configu msgid "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`" msgstr "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`" -#: ../../cli.rst:723 +#: ../../cli.rst:726 msgid "Local Archive" msgstr "Local Archive" -#: ../../cli.rst:714 +#: ../../cli.rst:717 msgid "Managing configurations" msgstr "Managing configurations" -#: ../../cli.rst:627 +#: ../../cli.rst:630 msgid "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters." msgstr "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters." @@ -164,31 +164,31 @@ msgstr "Operational mode allows for commands to perform operational system tasks msgid "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``." msgstr "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``." -#: ../../cli.rst:850 +#: ../../cli.rst:853 msgid "Remote Archive" msgstr "Remote Archive" -#: ../../cli.rst:616 +#: ../../cli.rst:619 msgid "Rename a configuration element." msgstr "Rename a configuration element." -#: ../../cli.rst:917 +#: ../../cli.rst:920 msgid "Restore Default" msgstr "Restore Default" -#: ../../cli.rst:725 +#: ../../cli.rst:728 msgid "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong." msgstr "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong." -#: ../../cli.rst:828 +#: ../../cli.rst:831 msgid "Rollback Changes" msgstr "Rollback Changes" -#: ../../cli.rst:835 +#: ../../cli.rst:838 msgid "Rollback to revision N (currently requires reboot)" msgstr "Rollback to revision N (currently requires reboot)" -#: ../../cli.rst:884 +#: ../../cli.rst:887 msgid "Saving and loading manually" msgstr "Saving and loading manually" @@ -200,11 +200,11 @@ msgstr "See the configuration section of this document for more information on c msgid "Seeing and navigating the configuration" msgstr "Seeing and navigating the configuration" -#: ../../cli.rst:810 +#: ../../cli.rst:813 msgid "Show commit revision difference." msgstr "Show commit revision difference." -#: ../../cli.rst:861 +#: ../../cli.rst:864 msgid "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`" msgstr "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`" @@ -228,15 +228,15 @@ msgstr "The :cfgcmd:`show` command within configuration mode will show the worki msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes." msgstr "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes." -#: ../../cli.rst:653 +#: ../../cli.rst:656 msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes." msgstr "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes." -#: ../../cli.rst:784 +#: ../../cli.rst:787 msgid "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M." msgstr "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M." -#: ../../cli.rst:813 +#: ../../cli.rst:816 msgid "The command above also lets you see the difference between two commits. By default the difference with the running config is shown." msgstr "The command above also lets you see the difference between two commits. By default the difference with the running config is shown." @@ -252,11 +252,11 @@ msgstr "The configuration can be edited by the use of :cfgcmd:`set` and :cfgcmd: msgid "The current hierarchy level can be changed by the :cfgcmd:`edit` command." msgstr "The current hierarchy level can be changed by the :cfgcmd:`edit` command." -#: ../../cli.rst:872 +#: ../../cli.rst:875 msgid "The number of revisions don't affect the commit-archive." msgstr "The number of revisions don't affect the commit-archive." -#: ../../cli.rst:930 +#: ../../cli.rst:933 msgid "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too." msgstr "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too." @@ -268,7 +268,7 @@ msgstr "These commands are also relative to the level you are inside and only re msgid "These two commands above are essentially the same, just executed from different levels in the hierarchy." msgstr "These two commands above are essentially the same, just executed from different levels in the hierarchy." -#: ../../cli.rst:824 +#: ../../cli.rst:827 msgid "This means four commits ago we did ``set system ipv6 disable-forwarding``." msgstr "This means four commits ago we did ``set system ipv6 disable-forwarding``." @@ -280,7 +280,7 @@ msgstr "To delete a configuration entry use the :cfgcmd:`delete` command, this a msgid "To enter configuration mode use the ``configure`` command:" msgstr "To enter configuration mode use the ``configure`` command:" -#: ../../cli.rst:658 +#: ../../cli.rst:661 msgid "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text." msgstr "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text." @@ -288,11 +288,11 @@ msgstr "To remove an existing comment from your current configuration, specify a msgid "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_." msgstr "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_." -#: ../../cli.rst:895 +#: ../../cli.rst:898 msgid "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address." msgstr "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address." -#: ../../cli.rst:508 +#: ../../cli.rst:511 msgid "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address." msgstr "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address." @@ -300,15 +300,15 @@ msgstr "Use this command to preserve configuration changes upon reboot. By defau msgid "Use this command to set the value of a parameter or to create a new element." msgstr "Use this command to set the value of a parameter or to create a new element." -#: ../../cli.rst:760 +#: ../../cli.rst:763 msgid "Use this command to spot what the differences are between different configurations." msgstr "Use this command to spot what the differences are between different configurations." -#: ../../cli.rst:552 +#: ../../cli.rst:555 msgid "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes." msgstr "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes." -#: ../../cli.rst:730 +#: ../../cli.rst:733 msgid "View all existing revisions on the local system." msgstr "View all existing revisions on the local system." @@ -324,7 +324,7 @@ msgstr "View the current active configuration in JSON format." msgid "View the current active configuration in readable JSON format." msgstr "View the current active configuration in readable JSON format." -#: ../../cli.rst:852 +#: ../../cli.rst:855 msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." msgstr "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." @@ -332,11 +332,11 @@ msgstr "VyOS can upload the configuration to a remote location after each call t msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." msgstr "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." -#: ../../cli.rst:716 +#: ../../cli.rst:719 msgid "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons." msgstr "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons." -#: ../../cli.rst:756 +#: ../../cli.rst:759 msgid "VyOS lets you compare different configurations." msgstr "VyOS lets you compare different configurations." @@ -348,7 +348,7 @@ msgstr "VyOS makes use of a unified configuration file for the entire system's c msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." msgstr "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." -#: ../../cli.rst:558 +#: ../../cli.rst:561 msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." msgstr "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." @@ -360,7 +360,7 @@ msgstr "When entering the configuration mode you are navigating inside a tree st msgid "When going into configuration mode, prompt changes from ``$`` to ``#``." msgstr "When going into configuration mode, prompt changes from ``$`` to ``#``." -#: ../../cli.rst:692 +#: ../../cli.rst:695 msgid "When inside configuration mode you are not directly able to execute operational commands." msgstr "When inside configuration mode you are not directly able to execute operational commands." @@ -368,7 +368,7 @@ msgstr "When inside configuration mode you are not directly able to execute oper msgid "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt." msgstr "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt." -#: ../../cli.rst:889 +#: ../../cli.rst:892 msgid "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:" msgstr "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:" @@ -384,15 +384,15 @@ msgstr "You are now in a sublevel relative to ``interfaces ethernet eth0``, all msgid "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." msgstr "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." -#: ../../cli.rst:618 +#: ../../cli.rst:621 msgid "You can also rename config subtrees:" msgstr "You can also rename config subtrees:" -#: ../../cli.rst:585 +#: ../../cli.rst:588 msgid "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20." msgstr "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20." -#: ../../cli.rst:830 +#: ../../cli.rst:833 msgid "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot." msgstr "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot." @@ -400,19 +400,23 @@ msgstr "You can rollback configuration changes using the rollback command. This msgid "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``." msgstr "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``." -#: ../../cli.rst:747 +#: ../../cli.rst:504 +msgid "You can specify a commit message with :cfgcmd:`commit comment <message>`." +msgstr "You can specify a commit message with :cfgcmd:`commit comment <message>`." + +#: ../../cli.rst:750 msgid "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally." msgstr "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally." -#: ../../cli.rst:886 +#: ../../cli.rst:889 msgid "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files." msgstr "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files." -#: ../../cli.rst:874 +#: ../../cli.rst:877 msgid "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:" msgstr "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:" -#: ../../cli.rst:927 +#: ../../cli.rst:930 msgid "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active." msgstr "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active." @@ -420,19 +424,19 @@ msgstr "You will be asked if you want to continue. If you accept, you will have msgid "``b`` will scroll back one page" msgstr "``b`` will scroll back one page" -#: ../../cli.rst:866 +#: ../../cli.rst:869 msgid "``ftp://<user>:<passwd>@<host>/<dir>``" msgstr "``ftp://<user>:<passwd>@<host>/<dir>``" -#: ../../cli.rst:870 +#: ../../cli.rst:873 msgid "``git+https://<user>:<passwd>@<host>/<path>``" msgstr "``git+https://<user>:<passwd>@<host>/<path>``" -#: ../../cli.rst:864 +#: ../../cli.rst:867 msgid "``http://<user>:<passwd>@<host>:/<dir>``" msgstr "``http://<user>:<passwd>@<host>:/<dir>``" -#: ../../cli.rst:865 +#: ../../cli.rst:868 msgid "``https://<user>:<passwd>@<host>:/<dir>``" msgstr "``https://<user>:<passwd>@<host>:/<dir>``" @@ -448,11 +452,11 @@ msgstr "``q`` key can be used to cancel output" msgid "``return`` will scroll down one line" msgstr "``return`` will scroll down one line" -#: ../../cli.rst:868 +#: ../../cli.rst:871 msgid "``scp://<user>:<passwd>@<host>:/<dir>``" msgstr "``scp://<user>:<passwd>@<host>:/<dir>``" -#: ../../cli.rst:867 +#: ../../cli.rst:870 msgid "``sftp://<user>:<passwd>@<host>/<dir>``" msgstr "``sftp://<user>:<passwd>@<host>/<dir>``" @@ -460,7 +464,7 @@ msgstr "``sftp://<user>:<passwd>@<host>/<dir>``" msgid "``space`` will scroll down one page" msgstr "``space`` will scroll down one page" -#: ../../cli.rst:869 +#: ../../cli.rst:872 msgid "``tftp://<host>/<dir>``" msgstr "``tftp://<host>/<dir>``" diff --git a/docs/_locale/de/configuration.pot b/docs/_locale/de/configuration.pot index 15fcb065..f0ae9a1d 100644 --- a/docs/_locale/de/configuration.pot +++ b/docs/_locale/de/configuration.pot @@ -89,7 +89,7 @@ msgid "**Already-selected external check**" msgstr "**Already-selected external check**" #: ../../configuration/trafficpolicy/index.rst:547 -#: ../../configuration/trafficpolicy/index.rst:1181 +#: ../../configuration/trafficpolicy/index.rst:1249 msgid "**Applies to:** Inbound traffic." msgstr "**Applies to:** Inbound traffic." @@ -105,6 +105,7 @@ msgstr "**Applies to:** Outbound Traffic." #: ../../configuration/trafficpolicy/index.rst:916 #: ../../configuration/trafficpolicy/index.rst:961 #: ../../configuration/trafficpolicy/index.rst:1020 +#: ../../configuration/trafficpolicy/index.rst:1154 msgid "**Applies to:** Outbound traffic." msgstr "**Applies to:** Outbound traffic." @@ -437,6 +438,10 @@ msgstr "**Queueing discipline** Fair/Flow Queue CoDel." msgid "**Queueing discipline:** Deficit Round Robin." msgstr "**Queueing discipline:** Deficit Round Robin." +#: ../../configuration/trafficpolicy/index.rst:1153 +msgid "**Queueing discipline:** Deficit mode." +msgstr "**Queueing discipline:** Deficit mode." + #: ../../configuration/trafficpolicy/index.rst:766 msgid "**Queueing discipline:** Generalized Random Early Drop." msgstr "**Queueing discipline:** Generalized Random Early Drop." @@ -580,6 +585,10 @@ msgstr "**VyOS Router:**" msgid "**Weight check**" msgstr "**Weight check**" +#: ../../configuration/trafficpolicy/index.rst:1208 +msgid "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." +msgstr "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." + #: ../../_include/interface-dhcp-options.txt:74 msgid "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" msgstr "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" @@ -1511,7 +1520,7 @@ msgstr "ACME" msgid "ACME Directory Resource URI." msgstr "ACME Directory Resource URI." -#: ../../configuration/service/https.rst:59 +#: ../../configuration/service/https.rst:63 msgid "API" msgstr "API" @@ -1964,7 +1973,7 @@ msgstr "Add the public CA certificate for the CA named `name` to the VyOS CLI." msgid "Adding a 2FA with an OTP-key" msgstr "Adding a 2FA with an OTP-key" -#: ../../configuration/loadbalancing/reverse-proxy.rst:263 +#: ../../configuration/loadbalancing/reverse-proxy.rst:301 msgid "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." msgstr "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." @@ -2180,6 +2189,10 @@ msgstr "Allow access to sites in a domain without retrieving them from the Proxy msgid "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." msgstr "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." +#: ../../configuration/service/https.rst:81 +msgid "Allow cross-origin requests from `<origin>`." +msgstr "Allow cross-origin requests from `<origin>`." + #: ../../configuration/service/dns.rst:456 msgid "Allow explicit IPv6 address for the interface." msgstr "Allow explicit IPv6 address for the interface." @@ -2431,7 +2444,7 @@ msgstr "Applying a Rule-Set to a Zone" msgid "Applying a Rule-Set to an Interface" msgstr "Applying a Rule-Set to an Interface" -#: ../../configuration/trafficpolicy/index.rst:1150 +#: ../../configuration/trafficpolicy/index.rst:1218 msgid "Applying a traffic policy" msgstr "Applying a traffic policy" @@ -2691,7 +2704,7 @@ msgstr "Authentication" msgid "Authentication Advanced Options" msgstr "Authentication Advanced Options" -#: ../../configuration/interfaces/ethernet.rst:99 +#: ../../configuration/interfaces/ethernet.rst:115 msgid "Authentication (EAPoL)" msgstr "Authentication (EAPoL)" @@ -2851,7 +2864,7 @@ msgstr "Babel is a modern routing protocol designed to be robust and efficient b msgid "Backend" msgstr "Backend" -#: ../../configuration/loadbalancing/reverse-proxy.rst:299 +#: ../../configuration/loadbalancing/reverse-proxy.rst:339 msgid "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." msgstr "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." @@ -2863,10 +2876,14 @@ msgstr "Balance algorithms:" msgid "Balancing Rules" msgstr "Balancing Rules" -#: ../../configuration/loadbalancing/reverse-proxy.rst:214 +#: ../../configuration/loadbalancing/reverse-proxy.rst:252 msgid "Balancing based on domain name" msgstr "Balancing based on domain name" +#: ../../configuration/loadbalancing/reverse-proxy.rst:365 +msgid "Balancing with HTTP health checks" +msgstr "Balancing with HTTP health checks" + #: ../../configuration/service/pppoe-server.rst:251 msgid "Bandwidth Shaping" msgstr "Bandwidth Shaping" @@ -2936,7 +2953,7 @@ msgstr "Because an aggregator cannot be active without at least one available li msgid "Because existing sessions do not automatically fail over to a new path, the session table can be flushed on each connection state change:" msgstr "Because existing sessions do not automatically fail over to a new path, the session table can be flushed on each connection state change:" -#: ../../configuration/interfaces/ethernet.rst:70 +#: ../../configuration/interfaces/ethernet.rst:86 msgid "Before enabling any hardware segmentation offload a corresponding software offload is required in GSO. Otherwise it becomes possible for a frame to be re-routed between devices and end up being unable to be transmitted." msgstr "Before enabling any hardware segmentation offload a corresponding software offload is required in GSO. Otherwise it becomes possible for a frame to be re-routed between devices and end up being unable to be transmitted." @@ -3155,6 +3172,10 @@ msgstr "By using Pseudo-Ethernet interfaces there will be less system overhead c msgid "Bypassing the webproxy" msgstr "Bypassing the webproxy" +#: ../../configuration/trafficpolicy/index.rst:1151 +msgid "CAKE" +msgstr "CAKE" + #: ../../configuration/pki/index.rst:172 msgid "CA (Certificate Authority)" msgstr "CA (Certificate Authority)" @@ -3797,10 +3818,14 @@ msgstr "Configure protocol used for communication to remote syslog host. This ca msgid "Configure proxy port if it does not listen to the default port 80." msgstr "Configure proxy port if it does not listen to the default port 80." -#: ../../configuration/loadbalancing/reverse-proxy.rst:149 +#: ../../configuration/loadbalancing/reverse-proxy.rst:150 msgid "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>" msgstr "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>" +#: ../../configuration/loadbalancing/reverse-proxy.rst:155 +msgid "Configure requests to the backend server to use SSL encryption without validating server certificate" +msgstr "Configure requests to the backend server to use SSL encryption without validating server certificate" + #: ../../configuration/system/sflow.rst:16 msgid "Configure sFlow agent IPv4 or IPv6 address" msgstr "Configure sFlow agent IPv4 or IPv6 address" @@ -3853,7 +3878,7 @@ msgstr "Configure the discrete port under which the RADIUS server can be reached msgid "Configure the discrete port under which the TACACS server can be reached." msgstr "Configure the discrete port under which the TACACS server can be reached." -#: ../../configuration/loadbalancing/reverse-proxy.rst:175 +#: ../../configuration/loadbalancing/reverse-proxy.rst:212 msgid "Configure the load-balancing reverse-proxy service for HTTP." msgstr "Configure the load-balancing reverse-proxy service for HTTP." @@ -4053,6 +4078,10 @@ msgstr "Create `<user>` for local authentication on this system. The users passw msgid "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet." msgstr "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet." +#: ../../configuration/pki/index.rst:373 +msgid "Create a CA chain and leaf certificates" +msgstr "Create a CA chain and leaf certificates" + #: ../../configuration/interfaces/bridge.rst:199 msgid "Create a basic bridge" msgstr "Create a basic bridge" @@ -4636,6 +4665,10 @@ msgstr "Defines the maximum `<number>` of unanswered echo requests. Upon reachin msgid "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**." msgstr "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**." +#: ../../configuration/trafficpolicy/index.rst:1213 +msgid "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100." +msgstr "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100." + #: ../../configuration/system/console.rst:21 msgid "Defines the specified device as a system console. Available console devices can be (see completion helper):" msgstr "Defines the specified device as a system console. Available console devices can be (see completion helper):" @@ -4856,6 +4889,10 @@ msgstr "Disabled by default - no kernel module loaded." msgid "Disables caching of peer information from forwarded NHRP Resolution Reply packets. This can be used to reduce memory consumption on big NBMA subnets." msgstr "Disables caching of peer information from forwarded NHRP Resolution Reply packets. This can be used to reduce memory consumption on big NBMA subnets." +#: ../../configuration/trafficpolicy/index.rst:1173 +msgid "Disables flow isolation, all traffic passes through a single queue." +msgstr "Disables flow isolation, all traffic passes through a single queue." + #: ../../configuration/protocols/static.rst:99 msgid "Disables interface-based IPv4 static route." msgstr "Disables interface-based IPv4 static route." @@ -4974,10 +5011,14 @@ msgstr "Do not allow IPv6 nexthop tracking to resolve via the default route. Thi msgid "Do not assign a link-local IPv6 address to this interface." msgstr "Do not assign a link-local IPv6 address to this interface." -#: ../../configuration/trafficpolicy/index.rst:1210 +#: ../../configuration/trafficpolicy/index.rst:1278 msgid "Do not configure IFB as the first step. First create everything else of your traffic-policy, and then you can configure IFB. Otherwise you might get the ``RTNETLINK answer: File exists`` error, which can be solved with ``sudo ip link delete ifb0``." msgstr "Do not configure IFB as the first step. First create everything else of your traffic-policy, and then you can configure IFB. Otherwise you might get the ``RTNETLINK answer: File exists`` error, which can be solved with ``sudo ip link delete ifb0``." +#: ../../configuration/service/https.rst:90 +msgid "Do not leave introspection enabled in production, it is a security risk." +msgstr "Do not leave introspection enabled in production, it is a security risk." + #: ../../configuration/protocols/bgp.rst:609 msgid "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained." msgstr "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained." @@ -5230,6 +5271,10 @@ msgstr "Enable BFD on a single BGP neighbor" msgid "Enable DHCP failover configuration for this address pool." msgstr "Enable DHCP failover configuration for this address pool." +#: ../../configuration/service/https.rst:88 +msgid "Enable GraphQL Schema introspection." +msgstr "Enable GraphQL Schema introspection." + #: ../../configuration/interfaces/wireless.rst:178 msgid "Enable HT-delayed Block Ack ``[DELAYED-BA]``" msgstr "Enable HT-delayed Block Ack ``[DELAYED-BA]``" @@ -5440,6 +5485,10 @@ msgstr "Enabled on-demand PPPoE connections bring up the link only when traffic msgid "Enables Cisco style authentication on NHRP packets. This embeds the secret plaintext password to the outgoing NHRP packets. Incoming NHRP packets on this interface are discarded unless the secret password is present. Maximum length of the secret is 8 characters." msgstr "Enables Cisco style authentication on NHRP packets. This embeds the secret plaintext password to the outgoing NHRP packets. Incoming NHRP packets on this interface are discarded unless the secret password is present. Maximum length of the secret is 8 characters." +#: ../../configuration/loadbalancing/reverse-proxy.rst:166 +msgid "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range." +msgstr "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range." + #: ../../configuration/vrf/index.rst:480 msgid "Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN. If the value specified is auto, the label value is automatically assigned from a pool maintained." msgstr "Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN. If the value specified is auto, the label value is automatically assigned from a pool maintained." @@ -5488,6 +5537,10 @@ msgstr "Enabling this function increases the risk of bandwidth saturation." msgid "Enforce strict path checking" msgstr "Enforce strict path checking" +#: ../../configuration/service/https.rst:77 +msgid "Enforce strict path checking." +msgstr "Enforce strict path checking." + #: ../../configuration/interfaces/bonding.rst:31 msgid "Enslave `<member>` interface to bond `<interface>`." msgstr "Enslave `<member>` interface to bond `<interface>`." @@ -5747,7 +5800,7 @@ msgid "Example: to be appended is set to ``vyos.net`` and the URL received is `` msgstr "Example: to be appended is set to ``vyos.net`` and the URL received is ``www/foo.html``, the system will use the generated, final URL of ``www.vyos.net/foo.html``." #: ../../configuration/container/index.rst:216 -#: ../../configuration/service/https.rst:77 +#: ../../configuration/service/https.rst:110 msgid "Example Configuration" msgstr "Example Configuration" @@ -5789,7 +5842,8 @@ msgstr "Example synproxy" #: ../../configuration/interfaces/bridge.rst:196 #: ../../configuration/interfaces/macsec.rst:153 #: ../../configuration/interfaces/wireless.rst:541 -#: ../../configuration/loadbalancing/reverse-proxy.rst:190 +#: ../../configuration/loadbalancing/reverse-proxy.rst:227 +#: ../../configuration/pki/index.rst:370 #: ../../configuration/policy/index.rst:46 #: ../../configuration/protocols/bgp.rst:1118 #: ../../configuration/protocols/isis.rst:336 @@ -6078,6 +6132,10 @@ msgstr "First, on both routers run the operational command \"generate pki key-pa msgid "First, one of the systems generate the key using the :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki>` command. Once generated, you will need to install this key on the local system, then copy and install this key to the remote router." msgstr "First, one of the systems generate the key using the :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki>` command. Once generated, you will need to install this key on the local system, then copy and install this key to the remote router." +#: ../../configuration/pki/index.rst:393 +msgid "First, we create the root certificate authority." +msgstr "First, we create the root certificate authority." + #: ../../configuration/interfaces/openvpn.rst:176 msgid "First, you need to generate a key by running ``run generate pki openvpn shared-secret install <name>`` from configuration mode. You can use any name, we will use ``s2s``." msgstr "First, you need to generate a key by running ``run generate pki openvpn shared-secret install <name>`` from configuration mode. You can use any name, we will use ``s2s``." @@ -6138,6 +6196,30 @@ msgstr "Flow Export" msgid "Flow and packet-based balancing" msgstr "Flow and packet-based balancing" +#: ../../configuration/trafficpolicy/index.rst:1196 +msgid "Flows are defined by source-destination host pairs." +msgstr "Flows are defined by source-destination host pairs." + +#: ../../configuration/trafficpolicy/index.rst:1181 +msgid "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows." +msgstr "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows." + +#: ../../configuration/trafficpolicy/index.rst:1186 +msgid "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows." +msgstr "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows." + +#: ../../configuration/trafficpolicy/index.rst:1191 +msgid "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)." +msgstr "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)." + +#: ../../configuration/trafficpolicy/index.rst:1177 +msgid "Flows are defined only by destination address." +msgstr "Flows are defined only by destination address." + +#: ../../configuration/trafficpolicy/index.rst:1204 +msgid "Flows are defined only by source address." +msgstr "Flows are defined only by source address." + #: ../../configuration/system/flow-accounting.rst:10 msgid "Flows can be exported via two different protocols: NetFlow (versions 5, 9 and 10/IPFIX) and sFlow. Additionally, you may save flows to an in-memory table internally in a router." msgstr "Flows can be exported via two different protocols: NetFlow (versions 5, 9 and 10/IPFIX) and sFlow. Additionally, you may save flows to an in-memory table internally in a router." @@ -6341,7 +6423,7 @@ msgstr "For the :ref:`destination-nat66` rule, the destination address of the pa msgid "For the average user a serial console has no advantage over a console offered by a directly attached keyboard and screen. Serial consoles are much slower, taking up to a second to fill a 80 column by 24 line screen. Serial consoles generally only support non-proportional ASCII text, with limited support for languages other than English." msgstr "For the average user a serial console has no advantage over a console offered by a directly attached keyboard and screen. Serial consoles are much slower, taking up to a second to fill a 80 column by 24 line screen. Serial consoles generally only support non-proportional ASCII text, with limited support for languages other than English." -#: ../../configuration/trafficpolicy/index.rst:1183 +#: ../../configuration/trafficpolicy/index.rst:1251 msgid "For the ingress traffic of an interface, there is only one policy you can directly apply, a **Limiter** policy. You cannot apply a shaping policy directly to the ingress traffic of any interface because shaping only works for outbound traffic." msgstr "For the ingress traffic of an interface, there is only one policy you can directly apply, a **Limiter** policy. You cannot apply a shaping policy directly to the ingress traffic of any interface because shaping only works for outbound traffic." @@ -6379,6 +6461,10 @@ msgstr "For transit traffic, which is received by the router and forwarded, base msgid "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``" msgstr "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``" +#: ../../configuration/loadbalancing/reverse-proxy.rst:161 +msgid "For web application providing information about their state HTTP health checks can be used to determine their availability." +msgstr "For web application providing information about their state HTTP health checks can be used to determine their availability." + #: ../../configuration/protocols/ospf.rst:350 msgid "Formally, a virtual link looks like a point-to-point network connecting two ABR from one area one of which physically connected to a backbone area. This pseudo-network is considered to belong to a backbone area." msgstr "Formally, a virtual link looks like a point-to-point network connecting two ABR from one area one of which physically connected to a backbone area. This pseudo-network is considered to belong to a backbone area." @@ -6553,7 +6639,7 @@ msgstr "Given the following example we have one VyOS router acting as OpenVPN se msgid "Gloabal" msgstr "Gloabal" -#: ../../configuration/loadbalancing/reverse-proxy.rst:153 +#: ../../configuration/loadbalancing/reverse-proxy.rst:190 msgid "Global" msgstr "Global" @@ -6577,7 +6663,7 @@ msgstr "Global Options Firewall Configuration" msgid "Global options" msgstr "Global options" -#: ../../configuration/loadbalancing/reverse-proxy.rst:155 +#: ../../configuration/loadbalancing/reverse-proxy.rst:192 msgid "Global parameters" msgstr "Global parameters" @@ -6590,6 +6676,10 @@ msgstr "Global settings" msgid "Graceful Restart" msgstr "Graceful Restart" +#: ../../configuration/service/https.rst:84 +msgid "GraphQL" +msgstr "GraphQL" + #: ../../configuration/highavailability/index.rst:236 msgid "Gratuitous ARP" msgstr "Gratuitous ARP" @@ -6627,6 +6717,10 @@ msgstr "HTTP basic authentication username" msgid "HTTP client" msgstr "HTTP client" +#: ../../configuration/loadbalancing/reverse-proxy.rst:160 +msgid "HTTP health check" +msgstr "HTTP health check" + #: ../../configuration/interfaces/wireless.rst:137 msgid "HT (High Throughput) capabilities (802.11n)" msgstr "HT (High Throughput) capabilities (802.11n)" @@ -7859,6 +7953,10 @@ msgstr "In order to separate traffic, Fair Queue uses a classifier based on sour msgid "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands." msgstr "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands." +#: ../../configuration/interfaces/ethernet.rst:111 +msgid "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled." +msgstr "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled." + #: ../../configuration/interfaces/ethernet.rst:95 msgid "In order to use TSO/LRO with VMXNET3 adaters one must also enable the SG offloading option." msgstr "In order to use TSO/LRO with VMXNET3 adaters one must also enable the SG offloading option." @@ -8480,6 +8578,10 @@ msgstr "LNS are often used to connect to a LAC (L2TP Access Concentrator)." msgid "Label Distribution Protocol" msgstr "Label Distribution Protocol" +#: ../../configuration/pki/index.rst:447 +msgid "Lastly, we can create the leaf certificates that devices and users will utilise." +msgstr "Lastly, we can create the leaf certificates that devices and users will utilise." + #: ../../configuration/interfaces/l2tpv3.rst:11 msgid "Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that can be used as an alternative protocol to :ref:`mpls` for encapsulation of multiprotocol Layer 2 communications traffic over IP networks. Like L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier requirements." msgstr "Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that can be used as an alternative protocol to :ref:`mpls` for encapsulation of multiprotocol Layer 2 communications traffic over IP networks. Like L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier requirements." @@ -8520,7 +8622,7 @@ msgstr "Let SNMP daemon listen only on IP address 192.0.2.1" msgid "Lets assume the following topology:" msgstr "Lets assume the following topology:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:193 +#: ../../configuration/loadbalancing/reverse-proxy.rst:230 msgid "Level 4 balancing" msgstr "Level 4 balancing" @@ -8540,7 +8642,7 @@ msgstr "Lifetime is decremented by the number of seconds since the last RA - use msgid "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." msgstr "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." -#: ../../configuration/loadbalancing/reverse-proxy.rst:165 +#: ../../configuration/loadbalancing/reverse-proxy.rst:202 msgid "Limit allowed cipher algorithms used during SSL/TLS handshake" msgstr "Limit allowed cipher algorithms used during SSL/TLS handshake" @@ -8552,7 +8654,7 @@ msgstr "Limit logins to `<limit>` per every ``rate-time`` seconds. Rate limit mu msgid "Limit logins to ``rate-limit`` attemps per every `<seconds>`. Rate time must be between 15 and 600 seconds." msgstr "Limit logins to ``rate-limit`` attemps per every `<seconds>`. Rate time must be between 15 and 600 seconds." -#: ../../configuration/loadbalancing/reverse-proxy.rst:160 +#: ../../configuration/loadbalancing/reverse-proxy.rst:197 msgid "Limit maximum number of connections" msgstr "Limit maximum number of connections" @@ -9339,6 +9441,10 @@ msgid "Multiple VLAN to VNI mappings can be configured against the same SVD. Thi msgstr "Multiple VLAN to VNI mappings can be configured against the same SVD. This allows for a significant scaling of the number of VNIs since a separate VXLAN interface is no longer required for each VNI." #: ../../configuration/system/host-name.rst:68 +msgid "Multiple aliases can be specified per host-name." +msgstr "Multiple aliases can be specified per host-name." + +#: ../../configuration/system/host-name.rst:68 msgid "Multiple aliases can pe specified per host-name." msgstr "Multiple aliases can pe specified per host-name." @@ -9859,7 +9965,7 @@ msgstr "Once a neighbor has been found, the entry is considered to be valid for msgid "Once a route is assessed a penalty, the penalty is decreased by half each time a predefined amount of time elapses (half-life-time). When the accumulated penalties fall below a predefined threshold (reuse-value), the route is unsuppressed and added back into the BGP routing table." msgstr "Once a route is assessed a penalty, the penalty is decreased by half each time a predefined amount of time elapses (half-life-time). When the accumulated penalties fall below a predefined threshold (reuse-value), the route is unsuppressed and added back into the BGP routing table." -#: ../../configuration/trafficpolicy/index.rst:1152 +#: ../../configuration/trafficpolicy/index.rst:1220 msgid "Once a traffic-policy is created, you can apply it to an interface:" msgstr "Once a traffic-policy is created, you can apply it to an interface:" @@ -10039,7 +10145,7 @@ msgstr "Operating Modes" #: ../../configuration/interfaces/bonding.rst:512 #: ../../configuration/interfaces/dummy.rst:51 -#: ../../configuration/interfaces/ethernet.rst:132 +#: ../../configuration/interfaces/ethernet.rst:148 #: ../../configuration/interfaces/loopback.rst:41 #: ../../configuration/interfaces/macsec.rst:106 #: ../../configuration/interfaces/pppoe.rst:278 @@ -10417,6 +10523,10 @@ msgstr "Per default every packet is sampled (that is, the sampling rate is 1)." msgid "Per default the user session is being replaced if a second authentication request succeeds. Such session requests can be either denied or allowed entirely, which would allow multiple sessions for a user in the latter case. If it is denied, the second session is being rejected even if the authentication succeeds, the user has to terminate its first session and can then authentication again." msgstr "Per default the user session is being replaced if a second authentication request succeeds. Such session requests can be either denied or allowed entirely, which would allow multiple sessions for a user in the latter case. If it is denied, the second session is being rejected even if the authentication succeeds, the user has to terminate its first session and can then authentication again." +#: ../../configuration/trafficpolicy/index.rst:1200 +msgid "Perform NAT lookup before applying flow-isolation rules." +msgstr "Perform NAT lookup before applying flow-isolation rules." + #: ../../configuration/system/option.rst:108 msgid "Performance" msgstr "Performance" @@ -10523,7 +10633,7 @@ msgstr "Port Groups" #: ../../configuration/interfaces/bonding.rst:282 #: ../../configuration/interfaces/bridge.rst:188 -#: ../../configuration/interfaces/ethernet.rst:124 +#: ../../configuration/interfaces/ethernet.rst:140 msgid "Port Mirror (SPAN)" msgstr "Port Mirror (SPAN)" @@ -10809,7 +10919,7 @@ msgstr "Publish a port for the container." msgid "Pull a new image for container" msgstr "Pull a new image for container" -#: ../../configuration/interfaces/ethernet.rst:117 +#: ../../configuration/interfaces/ethernet.rst:133 #: ../../configuration/interfaces/virtual-ethernet.rst:39 #: ../../configuration/interfaces/wireless.rst:408 msgid "QinQ (802.1ad)" @@ -11023,7 +11133,7 @@ msgstr "Recommended for larger installations." msgid "Record types" msgstr "Record types" -#: ../../configuration/loadbalancing/reverse-proxy.rst:174 +#: ../../configuration/loadbalancing/reverse-proxy.rst:211 msgid "Redirect HTTP to HTTPS" msgstr "Redirect HTTP to HTTPS" @@ -11055,7 +11165,7 @@ msgstr "Redundancy and load sharing. There are multiple NAT66 devices at the edg msgid "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" msgstr "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" -#: ../../configuration/interfaces/ethernet.rst:110 +#: ../../configuration/interfaces/ethernet.rst:126 #: ../../configuration/interfaces/virtual-ethernet.rst:33 #: ../../configuration/interfaces/wireless.rst:401 msgid "Regular VLANs (802.1q)" @@ -11402,11 +11512,11 @@ msgstr "Rule-Sets" msgid "Rule-set overview" msgstr "Rule-set overview" -#: ../../configuration/loadbalancing/reverse-proxy.rst:220 +#: ../../configuration/loadbalancing/reverse-proxy.rst:258 msgid "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" msgstr "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" -#: ../../configuration/loadbalancing/reverse-proxy.rst:257 +#: ../../configuration/loadbalancing/reverse-proxy.rst:295 msgid "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." msgstr "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." @@ -11414,11 +11524,11 @@ msgstr "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` an msgid "Rule 110 is hit, so connection is accepted." msgstr "Rule 110 is hit, so connection is accepted." -#: ../../configuration/loadbalancing/reverse-proxy.rst:260 +#: ../../configuration/loadbalancing/reverse-proxy.rst:298 msgid "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." msgstr "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." -#: ../../configuration/loadbalancing/reverse-proxy.rst:223 +#: ../../configuration/loadbalancing/reverse-proxy.rst:261 msgid "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" msgstr "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" @@ -11537,7 +11647,7 @@ msgstr "SSH was designed as a replacement for Telnet and for unsecured remote sh msgid "SSID to be used in IEEE 802.11 management frames" msgstr "SSID to be used in IEEE 802.11 management frames" -#: ../../configuration/loadbalancing/reverse-proxy.rst:294 +#: ../../configuration/loadbalancing/reverse-proxy.rst:333 msgid "SSL Bridging" msgstr "SSL Bridging" @@ -11650,6 +11760,10 @@ msgstr "Scripting" msgid "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly." msgstr "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly." +#: ../../configuration/pki/index.rst:411 +msgid "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates." +msgstr "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates." + #: ../../configuration/service/ipoe-server.rst:186 #: ../../configuration/service/pppoe-server.rst:148 #: ../../configuration/vpn/l2tp.rst:191 @@ -11857,6 +11971,10 @@ msgstr "Set Virtual Tunnel Interface" msgid "Set a container description" msgstr "Set a container description" +#: ../../configuration/trafficpolicy/index.rst:1169 +msgid "Set a description for the shaper." +msgstr "Set a description for the shaper." + #: ../../configuration/system/conntrack.rst:113 msgid "Set a destination and/or source address. Accepted input for ipv4:" msgstr "Set a destination and/or source address. Accepted input for ipv4:" @@ -11877,7 +11995,7 @@ msgstr "Set a limit on the maximum number of concurrent logged-in users on the s msgid "Set a meaningful description." msgstr "Set a meaningful description." -#: ../../configuration/service/https.rst:63 +#: ../../configuration/service/https.rst:67 msgid "Set a named api key. Every key has the same, full permissions on the system." msgstr "Set a named api key. Every key has the same, full permissions on the system." @@ -11904,7 +12022,7 @@ msgstr "Set action for the route-map policy." msgid "Set action to take on entries matching this rule." msgstr "Set action to take on entries matching this rule." -#: ../../configuration/service/https.rst:79 +#: ../../configuration/service/https.rst:112 msgid "Set an API-KEY is the minimal configuration to get a working API Endpoint." msgstr "Set an API-KEY is the minimal configuration to get a working API Endpoint." @@ -12309,6 +12427,14 @@ msgstr "Set the address of the backend port" msgid "Set the address of the backend server to which the incoming traffic will be forwarded" msgstr "Set the address of the backend server to which the incoming traffic will be forwarded" +#: ../../configuration/service/https.rst:94 +msgid "Set the authentication type for GraphQL, default option is key. Available options are:" +msgstr "Set the authentication type for GraphQL, default option is key. Available options are:" + +#: ../../configuration/service/https.rst:106 +msgid "Set the byte length of the JWT secret. Default is 32." +msgstr "Set the byte length of the JWT secret. Default is 32." + #: ../../configuration/highavailability/index.rst:295 msgid "Set the default VRRP version to use. This defaults to 2, but IPv6 instances will always use version 3." msgstr "Set the default VRRP version to use. This defaults to 2, but IPv6 instances will always use version 3." @@ -12345,6 +12471,10 @@ msgstr "Set the global setting for invalid packets." msgid "Set the global setting for related connections." msgstr "Set the global setting for related connections." +#: ../../configuration/service/https.rst:102 +msgid "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds." +msgstr "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds." + #: ../../configuration/service/https.rst:28 msgid "Set the listen port of the local API, this has no effect on the webserver. The default is port 8080" msgstr "Set the listen port of the local API, this has no effect on the webserver. The default is port 8080" @@ -12361,6 +12491,10 @@ msgstr "Set the maximum length of A-MPDU pre-EOF padding that the station can re msgid "Set the maximum number of TCP half-open connections." msgstr "Set the maximum number of TCP half-open connections." +#: ../../configuration/service/https.rst:60 +msgid "Set the maximum request body size in megabytes. Default is 1MB." +msgstr "Set the maximum request body size in megabytes. Default is 1MB." + #: ../../_include/interface-eapol.txt:12 msgid "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry used for authentication of the remote side. If an intermediate CA certificate is specified, then all parent CA certificates that exist in the PKI, such as the root CA or additional intermediate CAs, will automatically be used during certificate validation to ensure that the full chain of trust is available." msgstr "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry used for authentication of the remote side. If an intermediate CA certificate is specified, then all parent CA certificates that exist in the PKI, such as the root CA or additional intermediate CAs, will automatically be used during certificate validation to ensure that the full chain of trust is available." @@ -12429,6 +12563,10 @@ msgstr "Set the routing table to forward packet with." msgid "Set the session id, which is a 32-bit integer value. Uniquely identifies the session being created. The value used must match the peer_session_id value being used at the peer." msgstr "Set the session id, which is a 32-bit integer value. Uniquely identifies the session being created. The value used must match the peer_session_id value being used at the peer." +#: ../../configuration/trafficpolicy/index.rst:1164 +msgid "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth." +msgstr "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth." + #: ../../configuration/system/conntrack.rst:31 msgid "Set the size of the hash table. The connection tracking hash table makes searching the connection tracking table faster. The hash table uses “buckets” to record entries in the connection tracking table." msgstr "Set the size of the hash table. The connection tracking hash table makes searching the connection tracking table faster. The hash table uses “buckets” to record entries in the connection tracking table." @@ -12459,6 +12597,18 @@ msgstr "Set the window scale factor for TCP window scaling" msgid "Set window of concurrently valid codes." msgstr "Set window of concurrently valid codes." +#: ../../configuration/loadbalancing/reverse-proxy.rst:172 +msgid "Sets the HTTP method to be used, can be either: option, get, post, put" +msgstr "Sets the HTTP method to be used, can be either: option, get, post, put" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:177 +msgid "Sets the endpoint to be used for health checks" +msgstr "Sets the endpoint to be used for health checks" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:182 +msgid "Sets the expected result condition for considering a server healthy. Some possible examples are:" +msgstr "Sets the expected result condition for considering a server healthy. Some possible examples are:" + #: ../../configuration/container/index.rst:16 msgid "Sets the image name in the hub registry" msgstr "Sets the image name in the hub registry" @@ -12683,7 +12833,7 @@ msgstr "Show a list of installed certificates" msgid "Show all BFD peers" msgstr "Show all BFD peers" -#: ../../configuration/interfaces/ethernet.rst:210 +#: ../../configuration/interfaces/ethernet.rst:226 msgid "Show available offloading functions on given `<interface>`" msgstr "Show available offloading functions on given `<interface>`" @@ -12701,7 +12851,7 @@ msgstr "Show bridge `<name>` mdb displays the current multicast group membership #: ../../configuration/interfaces/bonding.rst:516 #: ../../configuration/interfaces/dummy.rst:55 -#: ../../configuration/interfaces/ethernet.rst:136 +#: ../../configuration/interfaces/ethernet.rst:152 #: ../../configuration/interfaces/loopback.rst:45 #: ../../configuration/interfaces/virtual-ethernet.rst:59 msgid "Show brief interface information." @@ -12745,7 +12895,7 @@ msgstr "Show detailed information about the underlaying physical links on given #: ../../configuration/interfaces/bonding.rst:531 #: ../../configuration/interfaces/dummy.rst:67 -#: ../../configuration/interfaces/ethernet.rst:150 +#: ../../configuration/interfaces/ethernet.rst:166 #: ../../configuration/interfaces/pppoe.rst:282 #: ../../configuration/interfaces/sstp-client.rst:121 #: ../../configuration/interfaces/virtual-ethernet.rst:72 @@ -12777,7 +12927,7 @@ msgstr "Show general information about specific WireGuard interface" msgid "Show info about the Wireguard service. It also shows the latest handshake." msgstr "Show info about the Wireguard service. It also shows the latest handshake." -#: ../../configuration/interfaces/ethernet.rst:169 +#: ../../configuration/interfaces/ethernet.rst:185 msgid "Show information about physical `<interface>`" msgstr "Show information about physical `<interface>`" @@ -12895,7 +13045,7 @@ msgstr "Show the logs of all firewall; show all ipv6 firewall logs; show all log msgid "Show the route" msgstr "Show the route" -#: ../../configuration/interfaces/ethernet.rst:242 +#: ../../configuration/interfaces/ethernet.rst:258 msgid "Show transceiver information from plugin modules, e.g SFP+, QSFP" msgstr "Show transceiver information from plugin modules, e.g SFP+, QSFP" @@ -13475,7 +13625,7 @@ msgstr "Specify the identifier value of the site-level aggregator (SLA) on the i msgid "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." msgstr "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." -#: ../../configuration/loadbalancing/reverse-proxy.rst:170 +#: ../../configuration/loadbalancing/reverse-proxy.rst:207 msgid "Specify the minimum required TLS version 1.2 or 1.3" msgstr "Specify the minimum required TLS version 1.2 or 1.3" @@ -13524,6 +13674,10 @@ msgid "Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety msgstr "Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety of uses, including speeding up a web server by caching repeated requests, caching web, DNS and other computer network lookups for a group of people sharing network resources, and aiding security by filtering traffic. Although primarily used for HTTP and FTP, Squid includes limited support for several other protocols including Internet Gopher, SSL,[6] TLS and HTTPS. Squid does not support the SOCKS protocol." #: ../../configuration/service/https.rst:56 +msgid "Start Webserver in given VRF." +msgstr "Start Webserver in given VRF." + +#: ../../configuration/service/https.rst:56 msgid "Start Webserver in given VRF." msgstr "Start Webserver in given VRF." @@ -13843,7 +13997,7 @@ msgstr "Temporary disable this RADIUS server. It won't be queried." msgid "Temporary disable this TACACS server. It won't be queried." msgstr "Temporary disable this TACACS server. It won't be queried." -#: ../../configuration/loadbalancing/reverse-proxy.rst:248 +#: ../../configuration/loadbalancing/reverse-proxy.rst:286 msgid "Terminate SSL" msgstr "Terminate SSL" @@ -13879,7 +14033,7 @@ msgstr "Testing and Validation" msgid "Thanks to this discovery, any subsequent traffic between PC4 and PC5 will not be using the multicast-address between the leaves as they both know behind which Leaf the PCs are connected. This saves traffic as less multicast packets sent reduces the load on the network, which improves scalability when more leaves are added." msgstr "Thanks to this discovery, any subsequent traffic between PC4 and PC5 will not be using the multicast-address between the leaves as they both know behind which Leaf the PCs are connected. This saves traffic as less multicast packets sent reduces the load on the network, which improves scalability when more leaves are added." -#: ../../configuration/trafficpolicy/index.rst:1194 +#: ../../configuration/trafficpolicy/index.rst:1262 msgid "That is how it is possible to do the so-called \"ingress shaping\"." msgstr "That is how it is possible to do the so-called \"ingress shaping\"." @@ -13923,7 +14077,7 @@ msgstr "The DN and password to bind as while performing searches. As the passwor msgid "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." msgstr "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." -#: ../../configuration/loadbalancing/reverse-proxy.rst:218 +#: ../../configuration/loadbalancing/reverse-proxy.rst:256 msgid "The HTTP service listen on TCP port 80." msgstr "The HTTP service listen on TCP port 80." @@ -14040,7 +14194,7 @@ msgstr "The ``address`` can be configured either on the VRRP interface or on not msgid "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" msgstr "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" -#: ../../configuration/loadbalancing/reverse-proxy.rst:305 +#: ../../configuration/loadbalancing/reverse-proxy.rst:345 msgid "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" msgstr "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" @@ -14048,15 +14202,15 @@ msgstr "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HT msgid "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." msgstr "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." -#: ../../configuration/loadbalancing/reverse-proxy.rst:251 +#: ../../configuration/loadbalancing/reverse-proxy.rst:289 msgid "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." msgstr "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." -#: ../../configuration/loadbalancing/reverse-proxy.rst:302 +#: ../../configuration/loadbalancing/reverse-proxy.rst:342 msgid "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." msgstr "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." -#: ../../configuration/loadbalancing/reverse-proxy.rst:254 +#: ../../configuration/loadbalancing/reverse-proxy.rst:292 msgid "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." msgstr "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." @@ -14121,7 +14275,7 @@ msgstr "The below referenced IP address `192.0.2.1` is used as example address r msgid "The bonding interface provides a method for aggregating multiple network interfaces into a single logical \"bonded\" interface, or LAG, or ether-channel, or port-channel. The behavior of the bonded interfaces depends upon the mode; generally speaking, modes provide either hot standby or load balancing services. Additionally, link integrity monitoring may be performed." msgstr "The bonding interface provides a method for aggregating multiple network interfaces into a single logical \"bonded\" interface, or LAG, or ether-channel, or port-channel. The behavior of the bonded interfaces depends upon the mode; generally speaking, modes provide either hot standby or load balancing services. Additionally, link integrity monitoring may be performed." -#: ../../configuration/trafficpolicy/index.rst:1179 +#: ../../configuration/trafficpolicy/index.rst:1247 msgid "The case of ingress shaping" msgstr "The case of ingress shaping" @@ -14397,7 +14551,7 @@ msgstr "The following commands translate to \"--net host\" when the container is msgid "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" msgstr "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:215 +#: ../../configuration/loadbalancing/reverse-proxy.rst:253 msgid "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." msgstr "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." @@ -14413,11 +14567,11 @@ msgstr "The following configuration on VyOS applies to all following 3rd party v msgid "The following configuration reverse-proxy terminate SSL." msgstr "The following configuration reverse-proxy terminate SSL." -#: ../../configuration/loadbalancing/reverse-proxy.rst:249 +#: ../../configuration/loadbalancing/reverse-proxy.rst:287 msgid "The following configuration terminates SSL on the router." msgstr "The following configuration terminates SSL on the router." -#: ../../configuration/loadbalancing/reverse-proxy.rst:295 +#: ../../configuration/loadbalancing/reverse-proxy.rst:334 msgid "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." msgstr "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." @@ -14618,7 +14772,7 @@ msgstr "The most visible application of the protocol is for access to shell acco msgid "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." msgstr "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." -#: ../../configuration/loadbalancing/reverse-proxy.rst:185 +#: ../../configuration/loadbalancing/reverse-proxy.rst:222 msgid "The name of the service can be different, in this example it is only for convenience." msgstr "The name of the service can be different, in this example it is only for convenience." @@ -16161,11 +16315,19 @@ msgstr "This commands creates a bridge that is used to bind traffic on eth1 vlan msgid "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." msgstr "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." -#: ../../configuration/loadbalancing/reverse-proxy.rst:195 +#: ../../configuration/loadbalancing/reverse-proxy.rst:367 +msgid "This configuration enables HTTP health checks on backend servers." +msgstr "This configuration enables HTTP health checks on backend servers." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:232 msgid "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." msgstr "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." -#: ../../configuration/loadbalancing/reverse-proxy.rst:177 +#: ../../configuration/pki/index.rst:375 +msgid "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user." +msgstr "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:214 msgid "This configuration listen on port 80 and redirect incoming requests to HTTPS:" msgstr "This configuration listen on port 80 and redirect incoming requests to HTTPS:" @@ -16665,7 +16827,7 @@ msgstr "This will show you a statistic of all rule-sets since the last boot." msgid "This will show you a summary of rule-sets and groups" msgstr "This will show you a summary of rule-sets and groups" -#: ../../configuration/trafficpolicy/index.rst:1188 +#: ../../configuration/trafficpolicy/index.rst:1256 msgid "This workaround lets you apply a shaping policy to the ingress traffic by first redirecting it to an in-between virtual interface (`Intermediate Functional Block`_). There, in that virtual interface, you will be able to apply any of the policies that work for outbound traffic, for instance, a shaping one." msgstr "This workaround lets you apply a shaping policy to the ingress traffic by first redirecting it to an in-between virtual interface (`Intermediate Functional Block`_). There, in that virtual interface, you will be able to apply any of the policies that work for outbound traffic, for instance, a shaping one." @@ -16915,7 +17077,7 @@ msgstr "To enable RADIUS based authentication, the authentication mode needs to msgid "To enable bandwidth shaping via RADIUS, the option rate-limit needs to be enabled." msgstr "To enable bandwidth shaping via RADIUS, the option rate-limit needs to be enabled." -#: ../../configuration/service/https.rst:68 +#: ../../configuration/service/https.rst:72 msgid "To enable debug messages. Available via :opcmd:`show log` or :opcmd:`monitor log`" msgstr "To enable debug messages. Available via :opcmd:`show log` or :opcmd:`monitor log`" @@ -17188,6 +17350,10 @@ msgstr "USB to serial converters will handle most of their work in software so y msgid "UUCP subsystem" msgstr "UUCP subsystem" +#: ../../configuration/interfaces/ethernet.rst:73 +msgid "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/" +msgstr "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/" + #: ../../configuration/interfaces/vxlan.rst:102 msgid "Unicast" msgstr "Unicast" @@ -18192,7 +18358,7 @@ msgstr "VHT operating channel center frequency - center freq 2 (for use with the #: ../../configuration/interfaces/bonding.rst:275 #: ../../configuration/interfaces/bridge.rst:123 -#: ../../configuration/interfaces/ethernet.rst:107 +#: ../../configuration/interfaces/ethernet.rst:123 #: ../../configuration/interfaces/pseudo-ethernet.rst:63 #: ../../configuration/interfaces/virtual-ethernet.rst:30 #: ../../configuration/interfaces/wireless.rst:398 @@ -19264,7 +19430,7 @@ msgstr "You can now \"dial\" the peer with the follwoing command: ``sstpc --log- msgid "You can now SSH into your system using admin/admin as a default user supplied from the ``lfkeitel/tacacs_plus:latest`` container." msgstr "You can now SSH into your system using admin/admin as a default user supplied from the ``lfkeitel/tacacs_plus:latest`` container." -#: ../../configuration/trafficpolicy/index.rst:1158 +#: ../../configuration/trafficpolicy/index.rst:1226 msgid "You can only apply one policy per interface and direction, but you could reuse a policy on different interfaces and directions:" msgstr "You can only apply one policy per interface and direction, but you could reuse a policy on different interfaces and directions:" @@ -19432,11 +19598,11 @@ msgstr ":abbr:`GENEVE (Generic Network Virtualization Encapsulation)` supports a msgid ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (or IPIP/IPsec, SIT/IPsec, or any other stateless tunnel protocol over IPsec) is the usual way to protect the traffic inside a tunnel." msgstr ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (or IPIP/IPsec, SIT/IPsec, or any other stateless tunnel protocol over IPsec) is the usual way to protect the traffic inside a tunnel." -#: ../../configuration/interfaces/ethernet.rst:74 +#: ../../configuration/interfaces/ethernet.rst:90 msgid ":abbr:`GRO (Generic receive offload)` is the complement to GSO. Ideally any frame assembled by GRO should be segmented to create an identical sequence of frames using GSO, and any sequence of frames segmented by GSO should be able to be reassembled back to the original by GRO. The only exception to this is IPv4 ID in the case that the DF bit is set for a given IP header. If the value of the IPv4 ID is not sequentially incrementing it will be altered so that it is when a frame assembled via GRO is segmented via GSO." msgstr ":abbr:`GRO (Generic receive offload)` is the complement to GSO. Ideally any frame assembled by GRO should be segmented to create an identical sequence of frames using GSO, and any sequence of frames segmented by GSO should be able to be reassembled back to the original by GRO. The only exception to this is IPv4 ID in the case that the DF bit is set for a given IP header. If the value of the IPv4 ID is not sequentially incrementing it will be altered so that it is when a frame assembled via GRO is segmented via GSO." -#: ../../configuration/interfaces/ethernet.rst:64 +#: ../../configuration/interfaces/ethernet.rst:80 msgid ":abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is meant to deal with cases where device drivers cannot perform the offloads described above. What occurs in GSO is that a given skbuff will have its data broken out over multiple skbuffs that have been resized to match the MSS provided via skb_shinfo()->gso_size." msgstr ":abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is meant to deal with cases where device drivers cannot perform the offloads described above. What occurs in GSO is that a given skbuff will have its data broken out over multiple skbuffs that have been resized to match the MSS provided via skb_shinfo()->gso_size." @@ -19464,6 +19630,10 @@ msgstr ":abbr:`LDP (Label Distribution Protocol)` is a TCP based MPLS signaling msgid ":abbr:`LLDP (Link Layer Discovery Protocol)` is a vendor-neutral link layer protocol in the Internet Protocol Suite used by network devices for advertising their identity, capabilities, and neighbors on an IEEE 802 local area network, principally wired Ethernet. The protocol is formally referred to by the IEEE as Station and Media Access Control Connectivity Discovery specified in IEEE 802.1AB and IEEE 802.3-2012 section 6 clause 79." msgstr ":abbr:`LLDP (Link Layer Discovery Protocol)` is a vendor-neutral link layer protocol in the Internet Protocol Suite used by network devices for advertising their identity, capabilities, and neighbors on an IEEE 802 local area network, principally wired Ethernet. The protocol is formally referred to by the IEEE as Station and Media Access Control Connectivity Discovery specified in IEEE 802.1AB and IEEE 802.3-2012 section 6 clause 79." +#: ../../configuration/interfaces/ethernet.rst:64 +msgid ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing." +msgstr ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing." + #: ../../configuration/interfaces/macsec.rst:74 msgid ":abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys between individual peers." msgstr ":abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys between individual peers." @@ -19528,7 +19698,7 @@ msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:` msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." -#: ../../configuration/interfaces/ethernet.rst:82 +#: ../../configuration/interfaces/ethernet.rst:98 msgid ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" msgstr ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" @@ -19724,6 +19894,10 @@ msgstr "`4. Add optional parameters`_" msgid "`<name>` must be identical on both sides!" msgstr "`<name>` must be identical on both sides!" +#: ../../configuration/trafficpolicy/index.rst:1156 +msgid "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge." +msgstr "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge." + #: ../../configuration/pki/index.rst:204 msgid "``$ tail -n +2 ca.key | head -n -1 | tr -d '\\n'``" msgstr "``$ tail -n +2 ca.key | head -n -1 | tr -d '\\n'``" @@ -20292,6 +20466,10 @@ msgstr "``key-exchange`` which protocol should be used to initialize the connect msgid "``key`` - a private key, which will be used for authenticating local router on remote peer:" msgstr "``key`` - a private key, which will be used for authenticating local router on remote peer:" +#: ../../configuration/service/https.rst:96 +msgid "``key`` use API keys configured in ``service https api keys``" +msgstr "``key`` use API keys configured in ``service https api keys``" + #: ../../configuration/system/option.rst:137 msgid "``latency``: A server profile focused on lowering network latency. This profile favors performance over power savings by setting ``intel_pstate`` and ``min_perf_pct=100``." msgstr "``latency``: A server profile focused on lowering network latency. This profile favors performance over power savings by setting ``intel_pstate`` and ``min_perf_pct=100``." @@ -20775,6 +20953,18 @@ msgstr "``static`` - Statically configured routes" msgid "``station`` - Connects to another access point" msgstr "``station`` - Connects to another access point" +#: ../../configuration/loadbalancing/reverse-proxy.rst:185 +msgid "``status 200-399`` Expecting a non-failure response code" +msgstr "``status 200-399`` Expecting a non-failure response code" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:184 +msgid "``status 200`` Expecting a 200 response code" +msgstr "``status 200`` Expecting a 200 response code" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:186 +msgid "``string success`` Expecting the string `success` in the response body" +msgstr "``string success`` Expecting the string `success` in the response body" + #: ../../configuration/firewall/ipv4.rst:103 #: ../../configuration/firewall/ipv6.rst:103 msgid "``synproxy``: synproxy the packet." @@ -20824,6 +21014,10 @@ msgstr "``throughput``: A server profile focused on improving network throughput msgid "``timeout`` keep-alive timeout in seconds <2-86400> (default 120) IKEv1 only" msgstr "``timeout`` keep-alive timeout in seconds <2-86400> (default 120) IKEv1 only" +#: ../../configuration/service/https.rst:98 +msgid "``token`` use JWT tokens." +msgstr "``token`` use JWT tokens." + #: ../../configuration/interfaces/bonding.rst:80 msgid "``transmit-load-balance`` - Adaptive transmit load balancing: channel bonding that does not require any special switch support." msgstr "``transmit-load-balance`` - Adaptive transmit load balancing: channel bonding that does not require any special switch support." @@ -20888,6 +21082,22 @@ msgstr "``vnc`` - Virtual Network Control (VNC)" msgid "``vti`` - use a VTI interface for traffic encryption. Any traffic, which will be send to VTI interface will be encrypted and send to this peer. Using VTI makes IPSec configuration much flexible and easier in complex situation, and allows to dynamically add/delete remote networks, reachable via a peer, as in this mode router don't need to create additional SA/policy for each remote network:" msgstr "``vti`` - use a VTI interface for traffic encryption. Any traffic, which will be send to VTI interface will be encrypted and send to this peer. Using VTI makes IPSec configuration much flexible and easier in complex situation, and allows to dynamically add/delete remote networks, reachable via a peer, as in this mode router don't need to create additional SA/policy for each remote network:" +#: ../../configuration/pki/index.rst:386 +msgid "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA." +msgstr "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA." + +#: ../../configuration/pki/index.rst:383 +msgid "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA." +msgstr "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA." + +#: ../../configuration/pki/index.rst:389 +msgid "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA." +msgstr "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA." + +#: ../../configuration/pki/index.rst:381 +msgid "``vyos_root_ca`` is the root certificate authority." +msgstr "``vyos_root_ca`` is the root certificate authority." + #: ../../configuration/vpn/site2site_ipsec.rst:59 msgid "``x509`` - options for x509 authentication mode:" msgstr "``x509`` - options for x509 authentication mode:" @@ -21249,10 +21459,18 @@ msgstr "ip-forwarding" msgid "isisd" msgstr "isisd" +#: ../../configuration/interfaces/ethernet.rst:106 +msgid "it can be used with any NIC" +msgstr "it can be used with any NIC" + #: ../../configuration/interfaces/ethernet.rst:90 msgid "it can be used with any NIC," msgstr "it can be used with any NIC," +#: ../../configuration/interfaces/ethernet.rst:108 +msgid "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)" +msgstr "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)" + #: ../../configuration/interfaces/ethernet.rst:92 msgid "it does not increase hardware device interrupt rate (although it does introduce inter-processor interrupts (IPIs))." msgstr "it does not increase hardware device interrupt rate (although it does introduce inter-processor interrupts (IPIs))." @@ -21647,6 +21865,10 @@ msgstr "slow: Request partner to transmit LACPDUs every 30 seconds" msgid "smtp-server" msgstr "smtp-server" +#: ../../configuration/interfaces/ethernet.rst:107 +msgid "software filters can easily be added to hash over new protocols" +msgstr "software filters can easily be added to hash over new protocols" + #: ../../configuration/interfaces/ethernet.rst:91 msgid "software filters can easily be added to hash over new protocols," msgstr "software filters can easily be added to hash over new protocols," diff --git a/docs/_locale/de/contributing.pot b/docs/_locale/de/contributing.pot index 43e97407..9e7d1188 100644 --- a/docs/_locale/de/contributing.pot +++ b/docs/_locale/de/contributing.pot @@ -72,6 +72,18 @@ msgstr "Ein guter Ansatz fĂĽr das Schreiben von Commit-Nachrichten ist es, einen msgid "A number of flags can be set up to change the behaviour of VyOS at runtime. These flags can be toggled using either environment variables or creating files." msgstr "Eine Reihe von Flags kann eingerichtet werden, um das Verhalten von VyOS zur Laufzeit zu ändern. Diese Flags können entweder durch Umgebungsvariablen oder durch das Erstellen von Dateien umgeschaltet werden." +#: ../../contributing/issues-features.rst:86 +msgid "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature." +msgstr "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature." + +#: ../../contributing/issues-features.rst:42 +msgid "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed." +msgstr "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed." + +#: ../../contributing/issues-features.rst:33 +msgid "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session." +msgstr "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session." + #: ../../contributing/development.rst:74 msgid "A single, short, summary of the commit (recommended 50 characters or less, not exceeding 80 characters) containing a prefix of the changed component and the corresponding Phabricator_ reference e.g. ``snmp: T1111:`` or ``ethernet: T2222:`` - multiple components could be concatenated as in ``snmp: ethernet: T3333``" msgstr "Eine einzelne, kurze Zusammenfassung des Commits (empfohlen 50 Zeichen oder weniger, nicht mehr als 80 Zeichen), die ein Präfix der geänderten Komponente und die entsprechende Phabricator_ Referenz enthält, z.B. ``snmp: T1111:`` oder ``Ethernet: T2222:`` - mehrere Komponenten können verkettet werden, wie z.B. ``snmp: ethernet: T3333``" @@ -93,7 +105,7 @@ msgstr "Auch Akronyme **mĂĽssen** groĂź geschrieben werden, um sie optisch von n msgid "Add file to Git index using ``git add myfile``, or for a whole directory: ``git add somedir/*``" msgstr "HinzufĂĽgen einer Datei zum Git-Index mit ``git add myfile``, oder fĂĽr ein ganzes Verzeichnis: ``git add somedir/*``" -#: ../../contributing/testing.rst:100 +#: ../../contributing/testing.rst:103 msgid "Add one or more IP addresses" msgstr "Eine oder mehrere IP-Adressen hinzufĂĽgen" @@ -155,6 +167,14 @@ msgstr "Jedes \"modifizierte\" Paket kann sich auf eine geänderte Version von z msgid "Any packages in the packages directory will be added to the iso during build, replacing the upstream ones. Make sure you delete them (both the source directories and built deb packages) if you want to build an iso from purely upstream packages." msgstr "Alle Pakete im Paketverzeichnis werden während des Builds zur iso hinzugefĂĽgt und ersetzen die Upstream-Pakete. Stellen Sie sicher, dass Sie diese löschen (sowohl die Quellverzeichnisse als auch die erstellten deb-Pakete), wenn Sie eine Iso aus reinen Upstream-Paketen erstellen wollen." +#: ../../contributing/issues-features.rst:100 +msgid "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?" +msgstr "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?" + +#: ../../contributing/issues-features.rst:99 +msgid "Are there any limitations (hardware support, resource usage)?" +msgstr "Are there any limitations (hardware support, resource usage)?" + #: ../../contributing/testing.rst:57 msgid "As Smoketests will alter the system configuration and you are logged in remote you may loose your connection to the system." msgstr "Da Smoketests die Systemkonfiguration ändern und Sie aus der Ferne eingeloggt sind, kann es sein, dass Sie die Verbindung zum System verlieren." @@ -219,6 +239,10 @@ msgstr "Startzeitpunkt" msgid "Bug Report/Issue" msgstr "Fehlerbericht/Ereignis" +#: ../../contributing/issues-features.rst:117 +msgid "Bug reports that lack reproducing procedures." +msgstr "Bug reports that lack reproducing procedures." + #: ../../contributing/build-vyos.rst:825 msgid "Build" msgstr "Erstellen" @@ -303,7 +327,7 @@ msgstr "Befehlsdefinitionen sind rein deklarativ und können keine Logik enthalt msgid "Commit the changes by calling ``git commit``. Please use a meaningful commit headline (read above) and don't forget to reference the Phabricator_ ID." msgstr "Ăśbertragen Sie die Ă„nderungen durch den Aufruf von ``git commit``. Bitte verwenden Sie eine aussagekräftige Commit-Ăśberschrift (siehe oben) und vergessen Sie nicht, die Phabricator_ ID anzugeben." -#: ../../contributing/testing.rst:152 +#: ../../contributing/testing.rst:155 msgid "Config Load Tests" msgstr "Last Tests der Konfiguration" @@ -331,7 +355,7 @@ msgstr "Continuous Integration" msgid "Customize" msgstr "Anpassen" -#: ../../contributing/testing.rst:101 +#: ../../contributing/testing.rst:104 msgid "DHCP client and DHCPv6 prefix delegation" msgstr "DHCP-Client und DHCPv6-Präfix-Delegation" @@ -440,7 +464,7 @@ msgid "Every change set must be consistent (self containing)! Do not fix multipl msgstr "Jeder Ă„nderungssatz muss konsistent (in sich geschlossen) sein! Beheben Sie nicht mehrere Fehler in einem einzigen Commit. Wenn Sie bereits an mehreren Fehlerkorrekturen in derselben Datei gearbeitet haben, verwenden Sie `git add --patch`, um nur die Teile, die sich auf das eine Problem beziehen, in Ihren nächsten Commit aufzunehmen." #: ../../contributing/development.rst:412 -#: ../../contributing/testing.rst:66 +#: ../../contributing/testing.rst:69 msgid "Example:" msgstr "Example:" @@ -473,6 +497,14 @@ msgstr "FRR" msgid "Feature Request" msgstr "Feature Anfrage" +#: ../../contributing/issues-features.rst:72 +msgid "Feature Requests" +msgstr "Feature Requests" + +#: ../../contributing/issues-features.rst:116 +msgid "Feature requests that do not include required information and need clarification." +msgstr "Feature requests that do not include required information and need clarification." + #: ../../contributing/build-vyos.rst:600 msgid "Firmware" msgstr "Firmware" @@ -578,11 +610,15 @@ msgstr "Schrecklich: \"Tcp connection timeout\"" msgid "Horrible: \"frobnication algorithm.\"" msgstr "Schrecklich: \"frobnication algorithm.\"" -#: ../../contributing/issues-features.rst:63 +#: ../../contributing/issues-features.rst:67 msgid "How can we reproduce this Bug?" msgstr "Wie können wir diesen Fehler reproduzieren?" -#: ../../contributing/testing.rst:103 +#: ../../contributing/issues-features.rst:98 +msgid "How you'd configure it by hand there?" +msgstr "How you'd configure it by hand there?" + +#: ../../contributing/testing.rst:106 msgid "IP and IPv6 options" msgstr "IP- und IPv6-Optionen" @@ -606,14 +642,30 @@ msgstr "Wenn ein Verb wesentlich ist, behalten Sie es bei. Zum Beispiel ist im H msgid "If applicable a reference to a previous commit should be made linking those commits nicely when browsing the history: ``After commit abcd12ef (\"snmp: this is a headline\") a Python import statement is missing, throwing the following exception: ABCDEF``" msgstr "Falls zutreffend, sollte ein Verweis auf einen vorhergehenden Commit gemacht werden, der diese Commits beim Durchsuchen der History gut miteinander verbindet: ``Nach dem Commit abcd12ef (\"snmp: this is a headline\") fehlt eine Python-Import-Anweisung, die folgende Ausnahme auslöst: ABCDEF``" +#: ../../contributing/issues-features.rst:46 +msgid "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable." +msgstr "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable." + #: ../../contributing/development.rst:64 msgid "If there is no Phabricator_ reference in the commits of your pull request, we have to ask you to amend the commit message. Otherwise we will have to reject it." msgstr "Wenn in den Commits Ihres Pull-Requests keine Phabricator_ Referenz vorhanden ist, mĂĽssen wir Sie bitten, die Commit-Nachricht zu ändern. Andernfalls mĂĽssen wir sie ablehnen." +#: ../../contributing/issues-features.rst:126 +msgid "If there is no response after further two weeks, the task will be automatically closed." +msgstr "If there is no response after further two weeks, the task will be automatically closed." + +#: ../../contributing/issues-features.rst:124 +msgid "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply." +msgstr "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply." + #: ../../contributing/build-vyos.rst:739 msgid "If you are brave enough to build yourself an ISO image containing any modified package from our GitHub organisation - this is the place to be." msgstr "Wenn Sie mutig genug sind, sich ein ISO-Image zu erstellen, das ein beliebiges modifiziertes Paket aus unserer GitHub-Organisation enthält, sind Sie hier genau richtig." +#: ../../contributing/issues-features.rst:50 +msgid "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report." +msgstr "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report." + #: ../../contributing/build-vyos.rst:602 msgid "If you upgrade your kernel or include new drivers you may need new firmware. Build a new ``vyos-linux-firmware`` package with the included helper scripts." msgstr "Wenn Sie Ihren Kernel aktualisieren oder neue Treiber einbinden, benötigen Sie möglicherweise eine neue Firmware. Erstellen Sie ein neues ``vyos-linux-firmware`` Paket mit den enthaltenen Hilfsskripten." @@ -626,7 +678,7 @@ msgstr "In a big system, such as VyOS, that is comprised of multiple components, msgid "In addition this also helps when browsing the GitHub codebase on a mobile device if you happen to be a crazy scientist." msgstr "DarĂĽber hinaus hilft dies auch beim Durchsuchen der GitHub-Codebasis auf einem mobilen Gerät, wenn Sie ein verrĂĽckter Wissenschaftler sind." -#: ../../contributing/issues-features.rst:56 +#: ../../contributing/issues-features.rst:60 msgid "In order to open up a bug-report/feature request you need to create yourself an account on VyOS Phabricator_. On the left side of the specific project (VyOS 1.2 or VyOS 1.3) you will find quick-links for opening a bug-report/feature request." msgstr "In order to open up a bug-report/feature request you need to create yourself an account on VyOS Phabricator_. On the left side of the specific project (VyOS 1.2 or VyOS 1.3) you will find quick-links for opening a bug-report/feature request." @@ -690,10 +742,14 @@ msgstr "Intel QAT" msgid "Inter QAT" msgstr "Inter QAT" -#: ../../contributing/testing.rst:91 +#: ../../contributing/testing.rst:94 msgid "Interface based tests" msgstr "Interface based tests" +#: ../../contributing/issues-features.rst:96 +msgid "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?" +msgstr "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?" + #: ../../contributing/issues-features.rst:5 msgid "Issues/Feature requests" msgstr "Issues/Feature requests" @@ -706,6 +762,10 @@ msgstr "Issues or bugs are found in any software project. VyOS is not an excepti msgid "It's an Ada program and requires GNAT and gprbuild for building, dependencies are properly specified so just follow debuild's suggestions." msgstr "It's an Ada program and requires GNAT and gprbuild for building, dependencies are properly specified so just follow debuild's suggestions." +#: ../../contributing/issues-features.rst:103 +msgid "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions." +msgstr "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions." + #: ../../contributing/debugging.rst:58 msgid "It is also possible to set up the debugging using environment variables. In that case, the name will be (in uppercase) VYOS_FEATURE_DEBUG." msgstr "It is also possible to set up the debugging using environment variables. In that case, the name will be (in uppercase) VYOS_FEATURE_DEBUG." @@ -762,7 +822,7 @@ msgstr "Linux Kernel" msgid "Live System" msgstr "Live System" -#: ../../contributing/testing.rst:102 +#: ../../contributing/testing.rst:105 msgid "MTU size" msgstr "MTU size" @@ -770,11 +830,11 @@ msgstr "MTU size" msgid "Make your changes and save them. Do the following for all changes files to record them in your created Git commit:" msgstr "Make your changes and save them. Do the following for all changes files to record them in your created Git commit:" -#: ../../contributing/testing.rst:61 +#: ../../contributing/testing.rst:64 msgid "Manual Smoketest Run" msgstr "Manual Smoketest Run" -#: ../../contributing/testing.rst:169 +#: ../../contributing/testing.rst:172 msgid "Manual config load test" msgstr "Manual config load test" @@ -851,7 +911,7 @@ msgstr "Now you are prepared with two new aliases ``vybld`` and ``vybld_crux`` t msgid "Old concept/syntax" msgstr "Old concept/syntax" -#: ../../contributing/testing.rst:63 +#: ../../contributing/testing.rst:66 msgid "On the other hand - as each test is contain in its own file - one can always execute a single Smoketest by hand by simply running the Python test scripts." msgstr "On the other hand - as each test is contain in its own file - one can always execute a single Smoketest by hand by simply running the Python test scripts." @@ -863,7 +923,7 @@ msgstr "Once you have the required dependencies installed, you may proceed with msgid "Once you run ``show xyz`` and your condition is triggered you should be dropped into the python debugger:" msgstr "Once you run ``show xyz`` and your condition is triggered you should be dropped into the python debugger:" -#: ../../contributing/testing.rst:171 +#: ../../contributing/testing.rst:174 msgid "One is not bound to load all configurations one after another but can also load individual test configurations on his own." msgstr "One is not bound to load all configurations one after another but can also load individual test configurations on his own." @@ -903,7 +963,7 @@ msgstr "Our code is split into several modules. VyOS is composed of multiple ind msgid "Our op mode scripts use the python-vici module, which is not included in Debian's build, and isn't quite easy to integrate in that build. For this reason we debianize that module by hand now, using this procedure:" msgstr "Our op mode scripts use the python-vici module, which is not included in Debian's build, and isn't quite easy to integrate in that build. For this reason we debianize that module by hand now, using this procedure:" -#: ../../contributing/testing.rst:93 +#: ../../contributing/testing.rst:96 msgid "Our smoketests not only test daemons and serives, but also check if what we configure for an interface works. Thus there is a common base classed named: ``base_interfaces_test.py`` which holds all the common code that an interface supports and is tested." msgstr "Our smoketests not only test daemons and serives, but also check if what we configure for an interface works. Thus there is a common base classed named: ``base_interfaces_test.py`` which holds all the common code that an interface supports and is tested." @@ -936,11 +996,11 @@ msgstr "Please use the following template as good starting point when developing msgid "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface." msgstr "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface." -#: ../../contributing/testing.rst:104 +#: ../../contributing/testing.rst:107 msgid "Port description" msgstr "Port description" -#: ../../contributing/testing.rst:105 +#: ../../contributing/testing.rst:108 msgid "Port disable" msgstr "Port disable" @@ -964,7 +1024,11 @@ msgstr "Prerequisites" msgid "Priorities" msgstr "Priorities" -#: ../../contributing/issues-features.rst:61 +#: ../../contributing/issues-features.rst:91 +msgid "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required." +msgstr "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required." + +#: ../../contributing/issues-features.rst:65 msgid "Provide as much information as you can" msgstr "Provide as much information as you can" @@ -996,7 +1060,7 @@ msgstr "Rationale: this seems to be the unwritten standard in network device CLI msgid "Recent versions use the ``vyos.frr`` framework. The Python class is located inside our ``vyos-1x:python/vyos/frr.py``. It comes with an embedded debugging/ (print style) debugger as vyos.ifconfig does." msgstr "Recent versions use the ``vyos.frr`` framework. The Python class is located inside our ``vyos-1x:python/vyos/frr.py``. It comes with an embedded debugging/ (print style) debugger as vyos.ifconfig does." -#: ../../contributing/issues-features.rst:54 +#: ../../contributing/issues-features.rst:58 msgid "Report a Bug" msgstr "Report a Bug" @@ -1041,7 +1105,7 @@ msgstr "Some VyOS packages (namely vyos-1x) come with build-time tests which ver msgid "Some abbreviations are traditionally written in mixed case. Generally, if it contains words \"over\" or \"version\", the letter **should** be lowercase. If there's an accepted spelling (especially if defined by an RFC or another standard), it **must** be followed." msgstr "Some abbreviations are traditionally written in mixed case. Generally, if it contains words \"over\" or \"version\", the letter **should** be lowercase. If there's an accepted spelling (especially if defined by an RFC or another standard), it **must** be followed." -#: ../../contributing/testing.rst:202 +#: ../../contributing/testing.rst:205 msgid "Some of the configurations have preconditions which need to be met. Those most likely include generation of crypographic keys before the config can be applied - you will get a commit error otherwise. If you are interested how those preconditions are fulfilled check the vyos-build_ repository and the ``scripts/check-qemu-install`` file." msgstr "Some of the configurations have preconditions which need to be met. Those most likely include generation of crypographic keys before the config can be applied - you will get a commit error otherwise. If you are interested how those preconditions are fulfilled check the vyos-build_ repository and the ``scripts/check-qemu-install`` file." @@ -1077,6 +1141,14 @@ msgstr "Suppose you want to make a change in the webproxy script but yet you do msgid "System Startup" msgstr "System Startup" +#: ../../contributing/issues-features.rst:108 +msgid "Task auto-closing" +msgstr "Task auto-closing" + +#: ../../contributing/issues-features.rst:118 +msgid "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)." +msgstr "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)." + #: ../../contributing/development.rst:214 msgid "Template processor **should** be used for generating config files. Built-in string formatting **may** be used for simple line-oriented formats where every line is self-contained, such as iptables rules. Template processor **must** be used for structured, multi-line formats such as those used by ISC DHCPd." msgstr "Template processor **should** be used for generating config files. Built-in string formatting **may** be used for simple line-oriented formats where every line is self-contained, such as iptables rules. Template processor **must** be used for structured, multi-line formats such as those used by ISC DHCPd." @@ -1137,11 +1209,15 @@ msgstr "The ``verify()`` function takes your internal representation of the conf msgid "The bash (or better vbash) completion in VyOS is defined in *templates*. Templates are text files (called ``node.def``) stored in a directory tree. The directory names define the command names, and template files define the command behaviour. Before VyOS 1.2 (crux) this files were created by hand. After a complex redesign process_ the new style template are automatically generated from a XML input file." msgstr "The bash (or better vbash) completion in VyOS is defined in *templates*. Templates are text files (called ``node.def``) stored in a directory tree. The directory names define the command names, and template files define the command behaviour. Before VyOS 1.2 (crux) this files were created by hand. After a complex redesign process_ the new style template are automatically generated from a XML input file." +#: ../../contributing/issues-features.rst:39 +msgid "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be." +msgstr "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be." + #: ../../contributing/build-vyos.rst:116 msgid "The build process needs to be built on a local file system, building on SMB or NFS shares will result in the container failing to build properly! VirtualBox Drive Share is also not an option as block device operations are not implemented and the drive is always mounted as \"nodev\"" msgstr "The build process needs to be built on a local file system, building on SMB or NFS shares will result in the container failing to build properly! VirtualBox Drive Share is also not an option as block device operations are not implemented and the drive is always mounted as \"nodev\"" -#: ../../contributing/testing.rst:159 +#: ../../contributing/testing.rst:162 msgid "The configurations are all derived from production systems and can not only act as a testcase but also as reference if one wants to enable a certain feature. The configurations can be found here: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" msgstr "The configurations are all derived from production systems and can not only act as a testcase but also as reference if one wants to enable a certain feature. The configurations can be found here: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" @@ -1161,7 +1237,7 @@ msgstr "The default template processor for VyOS code is Jinja2_." msgid "The easiest way to compile your package is with the above mentioned :ref:`build_docker` container, it includes all required dependencies for all VyOS related packages." msgstr "The easiest way to compile your package is with the above mentioned :ref:`build_docker` container, it includes all required dependencies for all VyOS related packages." -#: ../../contributing/testing.rst:164 +#: ../../contributing/testing.rst:167 msgid "The entire test is controlled by the main wrapper script ``/usr/bin/vyos-configtest`` which behaves in the same way as the main smoketest script. It scans the folder for potential configuration files and issues a ``load`` command one after another." msgstr "The entire test is controlled by the main wrapper script ``/usr/bin/vyos-configtest`` which behaves in the same way as the main smoketest script. It scans the folder for potential configuration files and issues a ``load`` command one after another." @@ -1201,7 +1277,7 @@ msgstr "The most obvious reasons could be:" msgid "The original repo is at https://github.com/dmbaturin/hvinfo" msgstr "The original repo is at https://github.com/dmbaturin/hvinfo" -#: ../../contributing/testing.rst:154 +#: ../../contributing/testing.rst:157 msgid "The other part of our tests are called \"config load tests\". The config load tests will load - one after another - arbitrary configuration files to test if the configuration migration scripts work as designed and that a given set of functionality still can be loaded with a fresh VyOS ISO image." msgstr "The other part of our tests are called \"config load tests\". The config load tests will load - one after another - arbitrary configuration files to test if the configuration migration scripts work as designed and that a given set of functionality still can be loaded with a fresh VyOS ISO image." @@ -1265,6 +1341,10 @@ msgstr "There are extensions to e.g. VIM (xmllint) which will help you to get yo msgid "There are two flags available to aid in debugging configuration scripts. Since configuration loading issues will manifest during boot, the flags are passed as kernel boot parameters." msgstr "There are two flags available to aid in debugging configuration scripts. Since configuration loading issues will manifest during boot, the flags are passed as kernel boot parameters." +#: ../../contributing/issues-features.rst:110 +msgid "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"." +msgstr "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"." + #: ../../contributing/build-vyos.rst:297 msgid "This ISO can be customized with the following list of configure options. The full and current list can be generated with ``./build-vyos-image --help``:" msgstr "This ISO can be customized with the following list of configure options. The full and current list can be generated with ``./build-vyos-image --help``:" @@ -1281,6 +1361,10 @@ msgstr "This chapter lists those exceptions and gives you a brief overview what msgid "This is done by utilizing the ``systemd-bootchart`` package which is now installed by default on the VyOS 1.3 (equuleus) branch. The configuration is also versioned so we get comparable results. ``systemd-bootchart`` is configured using this file: bootchart.conf_" msgstr "This is done by utilizing the ``systemd-bootchart`` package which is now installed by default on the VyOS 1.3 (equuleus) branch. The configuration is also versioned so we get comparable results. ``systemd-bootchart`` is configured using this file: bootchart.conf_" +#: ../../contributing/issues-features.rst:122 +msgid "This is what will happen when a task is set to \"Needs reporter action\":" +msgstr "This is what will happen when a task is set to \"Needs reporter action\":" + #: ../../contributing/development.rst:132 msgid "This means the file in question (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) is located in the ``vyatta-webproxy`` package which can be found here: https://github.com/vyos/vyatta-webproxy" msgstr "This means the file in question (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) is located in the ``vyatta-webproxy`` package which can be found here: https://github.com/vyos/vyatta-webproxy" @@ -1305,11 +1389,11 @@ msgstr "This will guide you through the process of building a VyOS ISO using Doc msgid "This will guide you through the process of building a VyOS ISO using Docker_. This process has been tested on clean installs of Debian Jessie, Stretch, and Buster." msgstr "This will guide you through the process of building a VyOS ISO using Docker_. This process has been tested on clean installs of Debian Jessie, Stretch, and Buster." -#: ../../contributing/testing.rst:148 +#: ../../contributing/testing.rst:151 msgid "This will limit the `bond` interface test to only make use of `eth1` and `eth2` as member ports." msgstr "This will limit the `bond` interface test to only make use of `eth1` and `eth2` as member ports." -#: ../../contributing/testing.rst:98 +#: ../../contributing/testing.rst:101 msgid "Those common tests consists out of:" msgstr "Those common tests consists out of:" @@ -1353,6 +1437,10 @@ msgstr "To enable boot time graphing change the Kernel commandline and add the f msgid "To enable debugging just run: ``$ touch /tmp/vyos.frr.debug``" msgstr "To enable debugging just run: ``$ touch /tmp/vyos.frr.debug``" +#: ../../contributing/testing.rst:60 +msgid "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``." +msgstr "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``." + #: ../../contributing/development.rst:547 msgid "To ensure uniform look and feel, and improve readability, we should follow a set of guidelines consistently." msgstr "To ensure uniform look and feel, and improve readability, we should follow a set of guidelines consistently." @@ -1413,7 +1501,7 @@ msgstr "Useful commands are:" msgid "VIF (incl. VIF-S/VIF-C)" msgstr "VIF (incl. VIF-S/VIF-C)" -#: ../../contributing/testing.rst:106 +#: ../../contributing/testing.rst:109 msgid "VLANs (QinQ and regular 802.1q)" msgstr "VLANs (QinQ and regular 802.1q)" @@ -1457,6 +1545,10 @@ msgstr "VyOS makes use of Jenkins_ as our Continuous Integration (CI) service. O msgid "We again make use of a helper script and some patches to make the build work. Just run the following command:" msgstr "We again make use of a helper script and some patches to make the build work. Just run the following command:" +#: ../../contributing/issues-features.rst:114 +msgid "We assign that status to:" +msgstr "We assign that status to:" + #: ../../contributing/testing.rst:25 msgid "We differentiate in two independent tests, which are both run in parallel by two separate QEmu instances which are launched via ``make test`` and ``make testc`` from within the vyos-build_ repository." msgstr "We differentiate in two independent tests, which are both run in parallel by two separate QEmu instances which are launched via ``make test`` and ``make testc`` from within the vyos-build_ repository." @@ -1473,6 +1565,10 @@ msgstr "We now need to mount some required, volatile filesystems" msgid "We only accept bugfixes in packages other than https://github.com/vyos/vyos-1x as no new functionality should use the old style templates (``node.def`` and Perl/BASH code. Use the new style XML/Python interface instead." msgstr "We only accept bugfixes in packages other than https://github.com/vyos/vyos-1x as no new functionality should use the old style templates (``node.def`` and Perl/BASH code. Use the new style XML/Python interface instead." +#: ../../contributing/issues-features.rst:128 +msgid "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!" +msgstr "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!" + #: ../../contributing/development.rst:87 msgid "What/why/how something has been changed, makes everyone's life easier when working with `git bisect`" msgstr "What/why/how something has been changed, makes everyone's life easier when working with `git bisect`" @@ -1517,7 +1613,7 @@ msgstr "When you are able to verify that it is actually a bug, spend some time t msgid "When you are working on interface configuration and you also wan't to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." msgstr "When you are working on interface configuration and you also wan't to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." -#: ../../contributing/testing.rst:109 +#: ../../contributing/testing.rst:112 msgid "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." msgstr "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." @@ -1529,7 +1625,7 @@ msgstr "When you believe you have found a bug, it is always a good idea to verif msgid "When you wish to have a developer fix a bug that you found, helping them reproduce the issue is beneficial to everyone. Be sure to include information about the hardware you are using, commands that you were running, any other activities that you may have been doing at the time. This additional information can be very useful." msgstr "When you wish to have a developer fix a bug that you found, helping them reproduce the issue is beneficial to everyone. Be sure to include information about the hardware you are using, commands that you were running, any other activities that you may have been doing at the time. This additional information can be very useful." -#: ../../contributing/issues-features.rst:62 +#: ../../contributing/issues-features.rst:66 msgid "Which version of VyOS are you using? ``run show version``" msgstr "Which version of VyOS are you using? ``run show version``" @@ -1574,6 +1670,10 @@ msgstr "You can type ``help`` to get an overview of the available commands, and msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." msgstr "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." +#: ../../contributing/issues-features.rst:74 +msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." +msgstr "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." + #: ../../contributing/build-vyos.rst:470 msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers" msgstr "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers" @@ -1582,10 +1682,23 @@ msgstr "You have your own custom kernel `*.deb` packages in the `packages` folde msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, WireGuard, Intel QAT, Intel NIC" msgstr "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, WireGuard, Intel QAT, Intel NIC" +#: ../../contributing/issues-features.rst:80 +msgid "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there." +msgstr "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there." + +#: ../../contributing/issues-features.rst:84 +msgid "You must include at least the following:" +msgstr "You must include at least the following:" + #: ../../contributing/debugging.rst:166 msgid "You shoudl now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." msgstr "You shoudl now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." +#: ../../contributing/issues-features.rst:31 +#: ../../contributing/issues-features.rst:94 +msgid "You should include the following information:" +msgstr "You should include the following information:" + #: ../../contributing/debugging.rst:166 msgid "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." msgstr "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." @@ -1598,7 +1711,7 @@ msgstr "You then can proceed with cloning your fork or add a new remote to your msgid "Your configuration script or operation mode script which is also written in Python3 should have a line break on 80 characters. This seems to be a bit odd nowadays but as some people also work remotely or program using vi(m) this is a fair good standard which I hope we can rely on." msgstr "Your configuration script or operation mode script which is also written in Python3 should have a line break on 80 characters. This seems to be a bit odd nowadays but as some people also work remotely or program using vi(m) this is a fair good standard which I hope we can rely on." -#: ../../contributing/testing.rst:107 +#: ../../contributing/testing.rst:110 msgid "..." msgstr "..." diff --git a/docs/_locale/de/documentation.pot b/docs/_locale/de/documentation.pot index 27c45a75..42d57656 100644 --- a/docs/_locale/de/documentation.pot +++ b/docs/_locale/de/documentation.pot @@ -177,6 +177,10 @@ msgid "If there some troubleshooting guides related to the commands. Explain it msgstr "If there some troubleshooting guides related to the commands. Explain it in the next optional part." #: ../../documentation.rst:448 +msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``" +msgstr "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``" + +#: ../../documentation.rst:448 msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin master``" msgstr "If you also want to update your fork on GitHub, use the following: ``$ git push origin master``" diff --git a/docs/_locale/en/LC_MESSAGES/cli.mo b/docs/_locale/en/LC_MESSAGES/cli.mo Binary files differindex 907726f2..4a9800a8 100644 --- a/docs/_locale/en/LC_MESSAGES/cli.mo +++ b/docs/_locale/en/LC_MESSAGES/cli.mo diff --git a/docs/_locale/en/LC_MESSAGES/configuration.mo b/docs/_locale/en/LC_MESSAGES/configuration.mo Binary files differindex d43c6e6c..690b62d0 100644 --- a/docs/_locale/en/LC_MESSAGES/configuration.mo +++ b/docs/_locale/en/LC_MESSAGES/configuration.mo diff --git a/docs/_locale/en/LC_MESSAGES/contributing.mo b/docs/_locale/en/LC_MESSAGES/contributing.mo Binary files differindex e4cef782..36a82404 100644 --- a/docs/_locale/en/LC_MESSAGES/contributing.mo +++ b/docs/_locale/en/LC_MESSAGES/contributing.mo diff --git a/docs/_locale/en/LC_MESSAGES/documentation.mo b/docs/_locale/en/LC_MESSAGES/documentation.mo Binary files differindex 1ced609e..b404d64c 100644 --- a/docs/_locale/en/LC_MESSAGES/documentation.mo +++ b/docs/_locale/en/LC_MESSAGES/documentation.mo diff --git a/docs/_locale/es/LC_MESSAGES/cli.mo b/docs/_locale/es/LC_MESSAGES/cli.mo Binary files differindex 6f9a866d..c650bc45 100644 --- a/docs/_locale/es/LC_MESSAGES/cli.mo +++ b/docs/_locale/es/LC_MESSAGES/cli.mo diff --git a/docs/_locale/es/LC_MESSAGES/configuration.mo b/docs/_locale/es/LC_MESSAGES/configuration.mo Binary files differindex 953167c3..fd5da1d5 100644 --- a/docs/_locale/es/LC_MESSAGES/configuration.mo +++ b/docs/_locale/es/LC_MESSAGES/configuration.mo diff --git a/docs/_locale/es/LC_MESSAGES/contributing.mo b/docs/_locale/es/LC_MESSAGES/contributing.mo Binary files differindex dbd1a68a..cf0faaa8 100644 --- a/docs/_locale/es/LC_MESSAGES/contributing.mo +++ b/docs/_locale/es/LC_MESSAGES/contributing.mo diff --git a/docs/_locale/es/LC_MESSAGES/documentation.mo b/docs/_locale/es/LC_MESSAGES/documentation.mo Binary files differindex 1aaaddab..97ee8dba 100644 --- a/docs/_locale/es/LC_MESSAGES/documentation.mo +++ b/docs/_locale/es/LC_MESSAGES/documentation.mo diff --git a/docs/_locale/es/cli.pot b/docs/_locale/es/cli.pot index 57494692..1c4c9191 100644 --- a/docs/_locale/es/cli.pot +++ b/docs/_locale/es/cli.pot @@ -28,23 +28,23 @@ msgstr "**ConfiguraciĂłn de trabajo** es la que se está modificando actualmente msgid "A VyOS system has three major types of configurations:" msgstr "Un sistema VyOS tiene tres tipos principales de configuraciones:" -#: ../../cli.rst:576 +#: ../../cli.rst:579 msgid "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit." msgstr "Un reinicio porque no ingresaste ``confirm`` no te llevará necesariamente a la *configuraciĂłn guardada*, sino al punto anterior a la desafortunada confirmaciĂłn." -#: ../../cli.rst:690 +#: ../../cli.rst:693 msgid "Access opmode from config mode" msgstr "Acceder al modo de operaciĂłn desde el modo de configuraciĂłn" -#: ../../cli.rst:697 +#: ../../cli.rst:700 msgid "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode." msgstr "El acceso a estos comandos es posible mediante el uso del comando ``ejecutar [comando]``. Desde este mando tendrás acceso a todo lo accesible desde el modo operativo." -#: ../../cli.rst:651 +#: ../../cli.rst:654 msgid "Add comment as an annotation to a configuration node." msgstr "Agregue un comentario como una anotaciĂłn a un nodo de configuraciĂłn." -#: ../../cli.rst:539 +#: ../../cli.rst:542 msgid "All changes in the working config will thus be lost." msgstr "Todos los cambios en la configuraciĂłn de trabajo se perderán." @@ -52,7 +52,7 @@ msgstr "Todos los cambios en la configuraciĂłn de trabajo se perderán." msgid "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them." msgstr "Todos los comandos ejecutados aquĂ son relativos al nivel de configuraciĂłn que ha ingresado. Puede hacer todo desde el nivel superior, pero los comandos serán bastante largos al escribirlos manualmente." -#: ../../cli.rst:676 +#: ../../cli.rst:679 msgid "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show <section>`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment." msgstr "Una cosa importante a tener en cuenta es que dado que el comentario se agrega en la parte superior de la secciĂłn, no aparecerá si el `` mostrar<section> Se utiliza el comando ``. Con el ejemplo anterior, el comando `show firewall` volverĂa comenzando despuĂ©s de la lĂnea ``firewall {``, ocultando el comentario." @@ -72,11 +72,11 @@ msgstr "De forma predeterminada, la configuraciĂłn se muestra en una jerarquĂa msgid "Command Line Interface" msgstr "Interfaz de lĂnea de comandos" -#: ../../cli.rst:701 +#: ../../cli.rst:704 msgid "Command completion and syntax help with ``?`` and ``[tab]`` will also work." msgstr "La finalizaciĂłn de comandos y la ayuda de sintaxis con ``?`` y ``[tab]`` tambiĂ©n funcionarán." -#: ../../cli.rst:754 +#: ../../cli.rst:757 msgid "Compare configurations" msgstr "Comparar configuraciones" @@ -92,11 +92,11 @@ msgstr "DescripciĂłn general de la configuraciĂłn" msgid "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered." msgstr "Los comandos de configuraciĂłn se aplanan del árbol en comandos de 'una sola lĂnea' que se muestran en :opcmd:`mostrar comandos de configuraciĂłn` desde el modo de operaciĂłn. Los comandos son relativos al nivel en el que se ejecutan y toda la informaciĂłn redundante del nivel actual se elimina del comando ingresado." -#: ../../cli.rst:535 +#: ../../cli.rst:538 msgid "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used." msgstr "No se puede salir del modo de configuraciĂłn mientras existan cambios no confirmados. Para salir del modo de configuraciĂłn sin aplicar los cambios, se debe utilizar el comando :cfgcmd:`exit descartar`." -#: ../../cli.rst:583 +#: ../../cli.rst:586 msgid "Copy a configuration element." msgstr "Copie un elemento de configuraciĂłn." @@ -104,7 +104,7 @@ msgstr "Copie un elemento de configuraciĂłn." msgid "Editing the configuration" msgstr "Editando la configuraciĂłn" -#: ../../cli.rst:662 +#: ../../cli.rst:665 msgid "Example:" msgstr "Ejemplo:" @@ -124,11 +124,11 @@ msgstr "Por ejemplo, al escribir ``sh`` seguido de la tecla ``TAB`` se completar msgid "Get a collection of all the set commands required which led to the running configuration." msgstr "Obtenga una colecciĂłn de todos los comandos establecidos necesarios que condujeron a la configuraciĂłn en ejecuciĂłn." -#: ../../cli.rst:933 +#: ../../cli.rst:936 msgid "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config." msgstr "Si está conectado de forma remota, perderá su conexiĂłn. Es posible que desee copiar primero la configuraciĂłn, editarla para garantizar la conectividad y cargar la configuraciĂłn editada." -#: ../../cli.rst:919 +#: ../../cli.rst:922 msgid "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:" msgstr "En el caso de que desee eliminar completamente su configuraciĂłn y restaurar la predeterminada, puede ingresar el siguiente comando en el modo de configuraciĂłn:" @@ -140,15 +140,15 @@ msgstr "It is also possible to display all :cfgcmd:`set` commands within configu msgid "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`" msgstr "TambiĂ©n es posible mostrar todos los comandos `set` dentro del modo de configuraciĂłn usando :cfgcmd:`show | comandos`" -#: ../../cli.rst:723 +#: ../../cli.rst:726 msgid "Local Archive" msgstr "Archivo local" -#: ../../cli.rst:714 +#: ../../cli.rst:717 msgid "Managing configurations" msgstr "Administrar configuraciones" -#: ../../cli.rst:627 +#: ../../cli.rst:630 msgid "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters." msgstr "Tenga en cuenta que el comando ``mostrar`` respeta su nivel de ediciĂłn y desde este nivel puede ver el conjunto de reglas de firewall modificado con solo ``mostrar`` sin parámetros." @@ -164,31 +164,31 @@ msgstr "El modo operativo permite que los comandos realicen tareas operativas de msgid "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``." msgstr "Cambios rápidos de ``$`` a ``#``. Para salir del modo de configuraciĂłn, escriba ``exit``." -#: ../../cli.rst:850 +#: ../../cli.rst:853 msgid "Remote Archive" msgstr "Archivo remoto" -#: ../../cli.rst:616 +#: ../../cli.rst:619 msgid "Rename a configuration element." msgstr "Cambiar el nombre de un elemento de configuraciĂłn." -#: ../../cli.rst:917 +#: ../../cli.rst:920 msgid "Restore Default" msgstr "Restaurar predeterminado" -#: ../../cli.rst:725 +#: ../../cli.rst:728 msgid "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong." msgstr "Las revisiones se almacenan en el disco. Puede verlos, compararlos y revertirlos a cualquier revisiĂłn anterior si algo sale mal." -#: ../../cli.rst:828 +#: ../../cli.rst:831 msgid "Rollback Changes" msgstr "Cambios de reversiĂłn" -#: ../../cli.rst:835 +#: ../../cli.rst:838 msgid "Rollback to revision N (currently requires reboot)" msgstr "Retroceder a la revisiĂłn N (actualmente requiere reiniciar)" -#: ../../cli.rst:884 +#: ../../cli.rst:887 msgid "Saving and loading manually" msgstr "Guardar y cargar manualmente" @@ -200,11 +200,11 @@ msgstr "Consulte la secciĂłn de configuraciĂłn de este documento para obtener mĂ msgid "Seeing and navigating the configuration" msgstr "Ver y navegar por la configuraciĂłn" -#: ../../cli.rst:810 +#: ../../cli.rst:813 msgid "Show commit revision difference." msgstr "Mostrar diferencia de revisiĂłn de confirmaciĂłn." -#: ../../cli.rst:861 +#: ../../cli.rst:864 msgid "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`" msgstr "Especifique la ubicaciĂłn remota del archivo de confirmaciĂłn como cualquiera de los siguientes :abbr:`URI (Identificador uniforme de recursos)`" @@ -228,15 +228,15 @@ msgstr "El comando :cfgcmd:`show` dentro del modo de configuraciĂłn mostrará la msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes." msgstr "El comando ``comentario`` le permite insertar un comentario encima del ``<config node> `` secciĂłn de configuraciĂłn. Cuando se muestran, los comentarios se encierran con ``/*`` y ``*/`` como delimitadores de apertura/cierre. Los comentarios deben confirmarse, al igual que otros cambios de configuraciĂłn." -#: ../../cli.rst:653 +#: ../../cli.rst:656 msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes." msgstr "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes." -#: ../../cli.rst:784 +#: ../../cli.rst:787 msgid "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M." msgstr "El comando :cfgcmd:`compare` le permite comparar diferentes tipos de configuraciones. TambiĂ©n le permite comparar diferentes revisiones a travĂ©s del comando :cfgcmd:`compare NM`, donde N y M son nĂşmeros de revisiĂłn. La salida describirá cĂłmo es la configuraciĂłn N en comparaciĂłn con M indicando con un signo más (``+``) las partes adicionales que tiene N en comparaciĂłn con M, e indicando con un signo menos (``-``) las que faltan. las partes N fallan en comparaciĂłn con M." -#: ../../cli.rst:813 +#: ../../cli.rst:816 msgid "The command above also lets you see the difference between two commits. By default the difference with the running config is shown." msgstr "El comando anterior tambiĂ©n te permite ver la diferencia entre dos confirmaciones. De forma predeterminada, se muestra la diferencia con la configuraciĂłn en ejecuciĂłn." @@ -252,11 +252,11 @@ msgstr "La configuraciĂłn se puede editar mediante el uso de los comandos :cfgcm msgid "The current hierarchy level can be changed by the :cfgcmd:`edit` command." msgstr "El nivel de jerarquĂa actual se puede cambiar con el comando :cfgcmd:`edit`." -#: ../../cli.rst:872 +#: ../../cli.rst:875 msgid "The number of revisions don't affect the commit-archive." msgstr "El nĂşmero de revisiones no afecta el archivo de confirmaciĂłn." -#: ../../cli.rst:930 +#: ../../cli.rst:933 msgid "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too." msgstr "Entonces es posible que desee :cfgcmd:`save` para eliminar tambiĂ©n la configuraciĂłn guardada." @@ -268,7 +268,7 @@ msgstr "Estos comandos tambiĂ©n son relativos al nivel en el que se encuentra y msgid "These two commands above are essentially the same, just executed from different levels in the hierarchy." msgstr "Estos dos comandos anteriores son esencialmente los mismos, solo que se ejecutan desde diferentes niveles en la jerarquĂa." -#: ../../cli.rst:824 +#: ../../cli.rst:827 msgid "This means four commits ago we did ``set system ipv6 disable-forwarding``." msgstr "Esto significa que hace cuatro confirmaciones hicimos ``set system ipv6 disabled-forwarding``." @@ -280,7 +280,7 @@ msgstr "Para eliminar una entrada de configuraciĂłn, use el comando :cfgcmd:`del msgid "To enter configuration mode use the ``configure`` command:" msgstr "Para ingresar al modo de configuraciĂłn use el comando ``configure``:" -#: ../../cli.rst:658 +#: ../../cli.rst:661 msgid "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text." msgstr "Para eliminar un comentario existente de su configuraciĂłn actual, especifique una cadena vacĂa entre comillas dobles (``""``) como texto del comentario." @@ -288,11 +288,11 @@ msgstr "Para eliminar un comentario existente de su configuraciĂłn actual, espec msgid "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_." msgstr "Use los comandos ``mostrar configuraciĂłn | comando strip-private`` cuando desee ocultar datos privados. Es posible que desee hacerlo si desea compartir su configuraciĂłn en el `foro`_." -#: ../../cli.rst:895 +#: ../../cli.rst:898 msgid "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address." msgstr "Utilice este comando para cargar una configuraciĂłn que reemplazará la configuraciĂłn en ejecuciĂłn. Defina la ubicaciĂłn del archivo de configuraciĂłn que se va a cargar. Puede utilizar una ruta a un archivo local, una direcciĂłn SCP, una direcciĂłn SFTP, una direcciĂłn FTP, una direcciĂłn HTTP, una direcciĂłn HTTPS o una direcciĂłn TFTP." -#: ../../cli.rst:508 +#: ../../cli.rst:511 msgid "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address." msgstr "Utilice este comando para conservar los cambios de configuraciĂłn al reiniciar. De forma predeterminada, se almacena en */config/config.boot*. En caso de que desee almacenar el archivo de configuraciĂłn en otro lugar, puede agregar una ruta local, una direcciĂłn SCP, una direcciĂłn FTP o una direcciĂłn TFTP." @@ -300,15 +300,15 @@ msgstr "Utilice este comando para conservar los cambios de configuraciĂłn al rei msgid "Use this command to set the value of a parameter or to create a new element." msgstr "Utilice este comando para establecer el valor de un parámetro o para crear un nuevo elemento." -#: ../../cli.rst:760 +#: ../../cli.rst:763 msgid "Use this command to spot what the differences are between different configurations." msgstr "Use este comando para detectar cuáles son las diferencias entre las diferentes configuraciones." -#: ../../cli.rst:552 +#: ../../cli.rst:555 msgid "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes." msgstr "Utilice este comando para confirmar temporalmente sus cambios y establecer la cantidad de minutos disponibles para la validaciĂłn. Se debe ingresar ``confirmar`` dentro de esos minutos, de lo contrario, el sistema se reiniciará con la configuraciĂłn anterior. El valor predeterminado es 10 minutos." -#: ../../cli.rst:730 +#: ../../cli.rst:733 msgid "View all existing revisions on the local system." msgstr "Ver todas las revisiones existentes en el sistema local." @@ -324,7 +324,7 @@ msgstr "Ver la configuraciĂłn activa actual en formato JSON." msgid "View the current active configuration in readable JSON format." msgstr "Vea la configuraciĂłn activa actual en formato JSON legible." -#: ../../cli.rst:852 +#: ../../cli.rst:855 msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." msgstr "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." @@ -332,11 +332,11 @@ msgstr "VyOS can upload the configuration to a remote location after each call t msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." msgstr "VyOS puede cargar la configuraciĂłn en una ubicaciĂłn remota despuĂ©s de cada llamada a :cfgcmd:`commit`. Deberá establecer la ubicaciĂłn del archivo de confirmaciĂłn. Se admiten servidores TFTP, FTP, SCP y SFTP. Cada vez que un :cfgcmd:`commit` tiene Ă©xito, el archivo ``config.boot`` se copiará en los destinos definidos. El nombre de archivo utilizado en el host remoto será ``config.boot-hostname.YYYYMMDD_HHMMSS``." -#: ../../cli.rst:716 +#: ../../cli.rst:719 msgid "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons." msgstr "VyOS viene con un sistema de control de versiones integrado para la configuraciĂłn del sistema. Mantiene automáticamente una copia de seguridad de todas las configuraciones anteriores que se han comprometido en el sistema. Las configuraciones se versionan localmente para revertirlas, pero tambiĂ©n se pueden almacenar en un host remoto por razones de archivado/copia de seguridad." -#: ../../cli.rst:756 +#: ../../cli.rst:759 msgid "VyOS lets you compare different configurations." msgstr "VyOS le permite comparar diferentes configuraciones." @@ -348,7 +348,7 @@ msgstr "VyOS utiliza un archivo de configuraciĂłn unificado para la configuraciĂ msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." msgstr "ÂżQuĂ© pasa si estás haciendo algo peligroso? Suponga que desea configurar un firewall y no está seguro de que no haya errores que lo bloqueen del sistema. Puede usar la confirmaciĂłn confirmada. Si ejecuta el comando ``commit-confirm``, sus cambios se confirmarán, y si no ejecuta el comando ``confirm`` en 10 minutos, su sistema se reiniciará con la revisiĂłn de configuraciĂłn anterior." -#: ../../cli.rst:558 +#: ../../cli.rst:561 msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." msgstr "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." @@ -360,7 +360,7 @@ msgstr "Al ingresar al modo de configuraciĂłn, está navegando dentro de una est msgid "When going into configuration mode, prompt changes from ``$`` to ``#``." msgstr "Al ingresar al modo de configuraciĂłn, el aviso cambia de ``$`` a ``#``." -#: ../../cli.rst:692 +#: ../../cli.rst:695 msgid "When inside configuration mode you are not directly able to execute operational commands." msgstr "Cuando está dentro del modo de configuraciĂłn, no puede ejecutar directamente los comandos operativos." @@ -368,7 +368,7 @@ msgstr "Cuando está dentro del modo de configuraciĂłn, no puede ejecutar direct msgid "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt." msgstr "Cuando la salida de un comando da como resultado más lĂneas de las que se pueden mostrar en la pantalla de la terminal, la salida se pagina como lo indica un indicador ``:``." -#: ../../cli.rst:889 +#: ../../cli.rst:892 msgid "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:" msgstr "Al usar el comando save_, puede agregar una ubicaciĂłn especĂfica donde almacenar su archivo de configuraciĂłn. Y, cuando lo necesites, podrás cargarlo con el comando ``load``:" @@ -384,15 +384,15 @@ msgstr "Ahora se encuentra en un subnivel relativo a ``interfaces ethernet eth0` msgid "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." msgstr "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." -#: ../../cli.rst:618 +#: ../../cli.rst:621 msgid "You can also rename config subtrees:" msgstr "TambiĂ©n puede cambiar el nombre de los subárboles de configuraciĂłn:" -#: ../../cli.rst:585 +#: ../../cli.rst:588 msgid "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20." msgstr "Puede copiar y eliminar subárboles de configuraciĂłn. Suponga que configura un conjunto de reglas de cortafuegos ``FromWorld`` con una regla que permite el tráfico desde una subred especĂfica. Ahora desea configurar una regla similar, pero para una subred diferente. Cambie su nivel de ediciĂłn a ``nombre de firewall FromWorld`` y use ``copie la regla 10 a la regla 20``, luego modifique la regla 20." -#: ../../cli.rst:830 +#: ../../cli.rst:833 msgid "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot." msgstr "Puede revertir los cambios de configuraciĂłn mediante el comando de reversiĂłn. Esto aplicará la revisiĂłn seleccionada y activará un reinicio del sistema." @@ -400,19 +400,23 @@ msgstr "Puede revertir los cambios de configuraciĂłn mediante el comando de reve msgid "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``." msgstr "Puedes desplazarte hacia arriba con las teclas ``[Shift]+[PageUp]`` y desplazarte hacia abajo con ``[Shift]+[PageDown]``." -#: ../../cli.rst:747 +#: ../../cli.rst:504 +msgid "You can specify a commit message with :cfgcmd:`commit comment <message>`." +msgstr "You can specify a commit message with :cfgcmd:`commit comment <message>`." + +#: ../../cli.rst:750 msgid "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally." msgstr "Puede especificar el nĂşmero de revisiones almacenadas en el disco. N puede estar en el rango de 0 a 65535. Cuando el nĂşmero de revisiones supera el valor configurado, se elimina la revisiĂłn más antigua. La configuraciĂłn predeterminada para este valor es almacenar 100 revisiones localmente." -#: ../../cli.rst:886 +#: ../../cli.rst:889 msgid "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files." msgstr "Puede usar los comandos ``guardar`` y ``cargar`` si desea administrar manualmente archivos de configuraciĂłn especĂficos." -#: ../../cli.rst:874 +#: ../../cli.rst:877 msgid "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:" msgstr "Es posible que VyOS no permita la conexiĂłn segura porque no puede verificar la legitimidad del servidor remoto. Puede usar la soluciĂłn a continuaciĂłn para agregar rápidamente la huella digital SSH del host remoto a su archivo ``~/.ssh/known_hosts``:" -#: ../../cli.rst:927 +#: ../../cli.rst:930 msgid "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active." msgstr "Se le preguntará si desea continuar. Si acepta, deberá usar :cfgcmd:`commit` si desea activar los cambios." @@ -420,19 +424,19 @@ msgstr "Se le preguntará si desea continuar. Si acepta, deberá usar :cfgcmd:`c msgid "``b`` will scroll back one page" msgstr "``b`` retrocederá una página" -#: ../../cli.rst:866 +#: ../../cli.rst:869 msgid "``ftp://<user>:<passwd>@<host>/<dir>``" msgstr "``ftp://<user> :<passwd> @<host> /<dir> ``" -#: ../../cli.rst:870 +#: ../../cli.rst:873 msgid "``git+https://<user>:<passwd>@<host>/<path>``" msgstr "``git+https://<user>:<passwd>@<host>/<path>``" -#: ../../cli.rst:864 +#: ../../cli.rst:867 msgid "``http://<user>:<passwd>@<host>:/<dir>``" msgstr "``http://<user>:<passwd>@<host>:/<dir>``" -#: ../../cli.rst:865 +#: ../../cli.rst:868 msgid "``https://<user>:<passwd>@<host>:/<dir>``" msgstr "``https://<user>:<passwd>@<host>:/<dir>``" @@ -448,11 +452,11 @@ msgstr "La tecla ``q`` se puede utilizar para cancelar la salida" msgid "``return`` will scroll down one line" msgstr "``return`` se desplazará una lĂnea hacia abajo" -#: ../../cli.rst:868 +#: ../../cli.rst:871 msgid "``scp://<user>:<passwd>@<host>:/<dir>``" msgstr "``scp://<user> :<passwd> @<host> :/<dir> ``" -#: ../../cli.rst:867 +#: ../../cli.rst:870 msgid "``sftp://<user>:<passwd>@<host>/<dir>``" msgstr "``sftp://<user> :<passwd> @<host> /<dir> ``" @@ -460,7 +464,7 @@ msgstr "``sftp://<user> :<passwd> @<host> /<dir> ``" msgid "``space`` will scroll down one page" msgstr "``espacio`` se desplazará hacia abajo una página" -#: ../../cli.rst:869 +#: ../../cli.rst:872 msgid "``tftp://<host>/<dir>``" msgstr "``tftp://<host> /<dir> ``" diff --git a/docs/_locale/es/configuration.pot b/docs/_locale/es/configuration.pot index 47e842e1..b7b3a78a 100644 --- a/docs/_locale/es/configuration.pot +++ b/docs/_locale/es/configuration.pot @@ -89,7 +89,7 @@ msgid "**Already-selected external check**" msgstr "**ComprobaciĂłn externa ya seleccionada**" #: ../../configuration/trafficpolicy/index.rst:547 -#: ../../configuration/trafficpolicy/index.rst:1181 +#: ../../configuration/trafficpolicy/index.rst:1249 msgid "**Applies to:** Inbound traffic." msgstr "**Se aplica a:** Tráfico entrante." @@ -105,6 +105,7 @@ msgstr "**Se aplica a:** Tráfico saliente." #: ../../configuration/trafficpolicy/index.rst:916 #: ../../configuration/trafficpolicy/index.rst:961 #: ../../configuration/trafficpolicy/index.rst:1020 +#: ../../configuration/trafficpolicy/index.rst:1154 msgid "**Applies to:** Outbound traffic." msgstr "**Se aplica a:** Tráfico saliente." @@ -437,6 +438,10 @@ msgstr "**Disciplina de colas** Fair/Flow Queue CoDel." msgid "**Queueing discipline:** Deficit Round Robin." msgstr "**Disciplina de colas:** DĂ©ficit Round Robin." +#: ../../configuration/trafficpolicy/index.rst:1153 +msgid "**Queueing discipline:** Deficit mode." +msgstr "**Queueing discipline:** Deficit mode." + #: ../../configuration/trafficpolicy/index.rst:766 msgid "**Queueing discipline:** Generalized Random Early Drop." msgstr "**Disciplina de colas:** Descenso anticipado aleatorio generalizado." @@ -580,6 +585,10 @@ msgstr "**Enrutador VyOS:**" msgid "**Weight check**" msgstr "**ComprobaciĂłn de peso**" +#: ../../configuration/trafficpolicy/index.rst:1208 +msgid "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." +msgstr "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." + #: ../../_include/interface-dhcp-options.txt:74 msgid "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" msgstr "**direcciĂłn** se puede especificar varias veces, por ejemplo, 192.168.100.1 y/o 192.168.100.0/24" @@ -1511,7 +1520,7 @@ msgstr "ACME" msgid "ACME Directory Resource URI." msgstr "ACME Directory Resource URI." -#: ../../configuration/service/https.rst:59 +#: ../../configuration/service/https.rst:63 msgid "API" msgstr "API" @@ -1964,7 +1973,7 @@ msgstr "Agregue el certificado de CA pĂşblico para la CA denominada "nombre msgid "Adding a 2FA with an OTP-key" msgstr "Agregar un 2FA con una clave OTP" -#: ../../configuration/loadbalancing/reverse-proxy.rst:263 +#: ../../configuration/loadbalancing/reverse-proxy.rst:301 msgid "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." msgstr "Se establecen parámetros globales adicionales, incluido el lĂmite de nĂşmero máximo de conexiones de 4000 y una versiĂłn mĂnima de TLS de 1.3." @@ -2180,6 +2189,10 @@ msgstr "Permita el acceso a los sitios de un dominio sin recuperarlos de la memo msgid "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." msgstr "Permita que bgp negocie la capacidad de prĂłximo salto extendido con su par. Si está interconectando una direcciĂłn local de enlace IPv6, esta capacidad se activa automáticamente. Si está interconectando una direcciĂłn global IPv6, al activar este comando permitirá que BGP instale rutas IPv4 con nexthops IPv6 si no tiene IPv4 configurado en las interfaces." +#: ../../configuration/service/https.rst:81 +msgid "Allow cross-origin requests from `<origin>`." +msgstr "Allow cross-origin requests from `<origin>`." + #: ../../configuration/service/dns.rst:456 msgid "Allow explicit IPv6 address for the interface." msgstr "Permita una direcciĂłn IPv6 explĂcita para la interfaz." @@ -2431,7 +2444,7 @@ msgstr "Aplicar un conjunto de reglas a una zona" msgid "Applying a Rule-Set to an Interface" msgstr "Aplicar un conjunto de reglas a una interfaz" -#: ../../configuration/trafficpolicy/index.rst:1150 +#: ../../configuration/trafficpolicy/index.rst:1218 msgid "Applying a traffic policy" msgstr "Aplicar una polĂtica de tráfico" @@ -2691,7 +2704,7 @@ msgstr "AutenticaciĂłn" msgid "Authentication Advanced Options" msgstr "Authentication Advanced Options" -#: ../../configuration/interfaces/ethernet.rst:99 +#: ../../configuration/interfaces/ethernet.rst:115 msgid "Authentication (EAPoL)" msgstr "AutenticaciĂłn (EAPoL)" @@ -2851,7 +2864,7 @@ msgstr "Babel es un protocolo de enrutamiento moderno diseñado para ser robusto msgid "Backend" msgstr "back-end" -#: ../../configuration/loadbalancing/reverse-proxy.rst:299 +#: ../../configuration/loadbalancing/reverse-proxy.rst:339 msgid "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." msgstr "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." @@ -2863,10 +2876,14 @@ msgstr "Algoritmos de equilibrio:" msgid "Balancing Rules" msgstr "Reglas de equilibrio" -#: ../../configuration/loadbalancing/reverse-proxy.rst:214 +#: ../../configuration/loadbalancing/reverse-proxy.rst:252 msgid "Balancing based on domain name" msgstr "Equilibrio basado en el nombre de dominio" +#: ../../configuration/loadbalancing/reverse-proxy.rst:365 +msgid "Balancing with HTTP health checks" +msgstr "Balancing with HTTP health checks" + #: ../../configuration/service/pppoe-server.rst:251 msgid "Bandwidth Shaping" msgstr "ConformaciĂłn de ancho de banda" @@ -2936,7 +2953,7 @@ msgstr "Debido a que un agregador no puede estar activo sin al menos un enlace d msgid "Because existing sessions do not automatically fail over to a new path, the session table can be flushed on each connection state change:" msgstr "Debido a que las sesiones existentes no conmutan por error automáticamente a una nueva ruta, la tabla de sesiĂłn se puede vaciar en cada cambio de estado de conexiĂłn:" -#: ../../configuration/interfaces/ethernet.rst:70 +#: ../../configuration/interfaces/ethernet.rst:86 msgid "Before enabling any hardware segmentation offload a corresponding software offload is required in GSO. Otherwise it becomes possible for a frame to be re-routed between devices and end up being unable to be transmitted." msgstr "Antes de habilitar cualquier descarga de segmentaciĂłn de hardware, se requiere una descarga de software correspondiente en GSO. De lo contrario, es posible que una trama se redirija entre dispositivos y termine sin poder transmitirse." @@ -3155,6 +3172,10 @@ msgstr "Mediante el uso de interfaces Pseudo-Ethernet, habrá menos sobrecarga d msgid "Bypassing the webproxy" msgstr "Omitir el webproxy" +#: ../../configuration/trafficpolicy/index.rst:1151 +msgid "CAKE" +msgstr "CAKE" + #: ../../configuration/pki/index.rst:172 msgid "CA (Certificate Authority)" msgstr "CA (autoridad de certificaciĂłn)" @@ -3797,10 +3818,14 @@ msgstr "Configure el protocolo utilizado para la comunicaciĂłn con el host de sy msgid "Configure proxy port if it does not listen to the default port 80." msgstr "Configure el puerto proxy si no escucha el puerto predeterminado 80." -#: ../../configuration/loadbalancing/reverse-proxy.rst:149 +#: ../../configuration/loadbalancing/reverse-proxy.rst:150 msgid "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>" msgstr "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>" +#: ../../configuration/loadbalancing/reverse-proxy.rst:155 +msgid "Configure requests to the backend server to use SSL encryption without validating server certificate" +msgstr "Configure requests to the backend server to use SSL encryption without validating server certificate" + #: ../../configuration/system/sflow.rst:16 msgid "Configure sFlow agent IPv4 or IPv6 address" msgstr "Configurar la direcciĂłn IPv4 o IPv6 del agente sFlow" @@ -3853,7 +3878,7 @@ msgstr "Configure el puerto discreto bajo el cual se puede acceder al servidor R msgid "Configure the discrete port under which the TACACS server can be reached." msgstr "Configure el puerto discreto bajo el cual se puede acceder al servidor TACACS." -#: ../../configuration/loadbalancing/reverse-proxy.rst:175 +#: ../../configuration/loadbalancing/reverse-proxy.rst:212 msgid "Configure the load-balancing reverse-proxy service for HTTP." msgstr "Configure el servicio de proxy inverso de equilibrio de carga para HTTP." @@ -4053,6 +4078,10 @@ msgstr "Crear `<user> ` para la autenticaciĂłn local en este sistema. La contras msgid "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet." msgstr "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet." +#: ../../configuration/pki/index.rst:373 +msgid "Create a CA chain and leaf certificates" +msgstr "Create a CA chain and leaf certificates" + #: ../../configuration/interfaces/bridge.rst:199 msgid "Create a basic bridge" msgstr "Crear un puente básico" @@ -4636,6 +4665,10 @@ msgstr "Define el máximo `<number> ` de solicitudes de eco no respondidas. Al l msgid "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**." msgstr "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**." +#: ../../configuration/trafficpolicy/index.rst:1213 +msgid "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100." +msgstr "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100." + #: ../../configuration/system/console.rst:21 msgid "Defines the specified device as a system console. Available console devices can be (see completion helper):" msgstr "Define el dispositivo especificado como una consola del sistema. Los dispositivos de consola disponibles pueden ser (consulte el asistente de finalizaciĂłn):" @@ -4856,6 +4889,10 @@ msgstr "Deshabilitado de forma predeterminada: no se ha cargado ningĂşn mĂłdulo msgid "Disables caching of peer information from forwarded NHRP Resolution Reply packets. This can be used to reduce memory consumption on big NBMA subnets." msgstr "Deshabilita el almacenamiento en cachĂ© de la informaciĂłn de pares de los paquetes de respuesta de resoluciĂłn NHRP reenviados. Esto se puede usar para reducir el consumo de memoria en grandes subredes NBMA." +#: ../../configuration/trafficpolicy/index.rst:1173 +msgid "Disables flow isolation, all traffic passes through a single queue." +msgstr "Disables flow isolation, all traffic passes through a single queue." + #: ../../configuration/protocols/static.rst:99 msgid "Disables interface-based IPv4 static route." msgstr "Deshabilita la ruta estática IPv4 basada en la interfaz." @@ -4974,10 +5011,14 @@ msgstr "Do not allow IPv6 nexthop tracking to resolve via the default route. Thi msgid "Do not assign a link-local IPv6 address to this interface." msgstr "No asigne una direcciĂłn IPv6 de enlace local a esta interfaz." -#: ../../configuration/trafficpolicy/index.rst:1210 +#: ../../configuration/trafficpolicy/index.rst:1278 msgid "Do not configure IFB as the first step. First create everything else of your traffic-policy, and then you can configure IFB. Otherwise you might get the ``RTNETLINK answer: File exists`` error, which can be solved with ``sudo ip link delete ifb0``." msgstr "No configure IFB como primer paso. Primero cree todo lo demás de su polĂtica de tráfico y luego puede configurar IFB. De lo contrario, es posible que obtenga el error ``RTNETLINK respuesta: el archivo existe``, que se puede resolver con ``sudo ip link delete ifb0``." +#: ../../configuration/service/https.rst:90 +msgid "Do not leave introspection enabled in production, it is a security risk." +msgstr "Do not leave introspection enabled in production, it is a security risk." + #: ../../configuration/protocols/bgp.rst:609 msgid "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained." msgstr "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained." @@ -5230,6 +5271,10 @@ msgstr "Habilite BFD en un Ăşnico vecino BGP" msgid "Enable DHCP failover configuration for this address pool." msgstr "Habilite la configuraciĂłn de conmutaciĂłn por error de DHCP para este conjunto de direcciones." +#: ../../configuration/service/https.rst:88 +msgid "Enable GraphQL Schema introspection." +msgstr "Enable GraphQL Schema introspection." + #: ../../configuration/interfaces/wireless.rst:178 msgid "Enable HT-delayed Block Ack ``[DELAYED-BA]``" msgstr "Habilitar reconocimiento de bloque retardado HT ``[DELAYED-BA]``" @@ -5440,6 +5485,10 @@ msgstr "Las conexiones PPPoE bajo demanda habilitadas abren el enlace solo cuand msgid "Enables Cisco style authentication on NHRP packets. This embeds the secret plaintext password to the outgoing NHRP packets. Incoming NHRP packets on this interface are discarded unless the secret password is present. Maximum length of the secret is 8 characters." msgstr "Habilita la autenticaciĂłn estilo Cisco en paquetes NHRP. Esto incrusta la contraseña secreta de texto sin formato en los paquetes NHRP salientes. Los paquetes NHRP entrantes en esta interfaz se descartan a menos que estĂ© presente la contraseña secreta. La longitud máxima del secreto es de 8 caracteres." +#: ../../configuration/loadbalancing/reverse-proxy.rst:166 +msgid "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range." +msgstr "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range." + #: ../../configuration/vrf/index.rst:480 msgid "Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN. If the value specified is auto, the label value is automatically assigned from a pool maintained." msgstr "Permite adjuntar una etiqueta MPLS a una ruta exportada desde el VRF de unidifusiĂłn actual a VPN. Si el valor especificado es automático, el valor de la etiqueta se asigna automáticamente desde un grupo mantenido." @@ -5488,6 +5537,10 @@ msgstr "Habilitar esta funciĂłn aumenta el riesgo de saturaciĂłn del ancho de ba msgid "Enforce strict path checking" msgstr "Hacer cumplir la verificaciĂłn de ruta estricta" +#: ../../configuration/service/https.rst:77 +msgid "Enforce strict path checking." +msgstr "Enforce strict path checking." + #: ../../configuration/interfaces/bonding.rst:31 msgid "Enslave `<member>` interface to bond `<interface>`." msgstr "Esclavizar `<member> `interfaz para enlazar`<interface> `." @@ -5747,7 +5800,7 @@ msgid "Example: to be appended is set to ``vyos.net`` and the URL received is `` msgstr "Ejemplo: para agregar se establece en ``vyos.net`` y la URL recibida es ``www/foo.html``, el sistema usará la URL final generada de ``www.vyos.net/foo. html``." #: ../../configuration/container/index.rst:216 -#: ../../configuration/service/https.rst:77 +#: ../../configuration/service/https.rst:110 msgid "Example Configuration" msgstr "ConfiguraciĂłn de ejemplo" @@ -5789,7 +5842,8 @@ msgstr "Example synproxy" #: ../../configuration/interfaces/bridge.rst:196 #: ../../configuration/interfaces/macsec.rst:153 #: ../../configuration/interfaces/wireless.rst:541 -#: ../../configuration/loadbalancing/reverse-proxy.rst:190 +#: ../../configuration/loadbalancing/reverse-proxy.rst:227 +#: ../../configuration/pki/index.rst:370 #: ../../configuration/policy/index.rst:46 #: ../../configuration/protocols/bgp.rst:1118 #: ../../configuration/protocols/isis.rst:336 @@ -6078,6 +6132,10 @@ msgstr "Primero, en ambos enrutadores ejecute el comando operativo "generar msgid "First, one of the systems generate the key using the :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki>` command. Once generated, you will need to install this key on the local system, then copy and install this key to the remote router." msgstr "Primero, uno de los sistemas genera la clave usando :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki> `comando. Una vez generada, deberá instalar esta clave en el sistema local, luego copiar e instalar esta clave en el enrutador remoto." +#: ../../configuration/pki/index.rst:393 +msgid "First, we create the root certificate authority." +msgstr "First, we create the root certificate authority." + #: ../../configuration/interfaces/openvpn.rst:176 msgid "First, you need to generate a key by running ``run generate pki openvpn shared-secret install <name>`` from configuration mode. You can use any name, we will use ``s2s``." msgstr "First, you need to generate a key by running ``run generate pki openvpn shared-secret install <name>`` from configuration mode. You can use any name, we will use ``s2s``." @@ -6138,6 +6196,30 @@ msgstr "ExportaciĂłn de flujo" msgid "Flow and packet-based balancing" msgstr "Equilibrio basado en flujo y paquetes" +#: ../../configuration/trafficpolicy/index.rst:1196 +msgid "Flows are defined by source-destination host pairs." +msgstr "Flows are defined by source-destination host pairs." + +#: ../../configuration/trafficpolicy/index.rst:1181 +msgid "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows." +msgstr "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows." + +#: ../../configuration/trafficpolicy/index.rst:1186 +msgid "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows." +msgstr "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows." + +#: ../../configuration/trafficpolicy/index.rst:1191 +msgid "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)." +msgstr "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)." + +#: ../../configuration/trafficpolicy/index.rst:1177 +msgid "Flows are defined only by destination address." +msgstr "Flows are defined only by destination address." + +#: ../../configuration/trafficpolicy/index.rst:1204 +msgid "Flows are defined only by source address." +msgstr "Flows are defined only by source address." + #: ../../configuration/system/flow-accounting.rst:10 msgid "Flows can be exported via two different protocols: NetFlow (versions 5, 9 and 10/IPFIX) and sFlow. Additionally, you may save flows to an in-memory table internally in a router." msgstr "Los flujos se pueden exportar a travĂ©s de dos protocolos diferentes: NetFlow (versiones 5, 9 y 10/IPFIX) y sFlow. Además, puede guardar flujos en una tabla en memoria internamente en un enrutador." @@ -6341,7 +6423,7 @@ msgstr "Para la regla :ref:`destination-nat66`, la direcciĂłn de destino del paq msgid "For the average user a serial console has no advantage over a console offered by a directly attached keyboard and screen. Serial consoles are much slower, taking up to a second to fill a 80 column by 24 line screen. Serial consoles generally only support non-proportional ASCII text, with limited support for languages other than English." msgstr "Para el usuario promedio, una consola en serie no tiene ninguna ventaja sobre una consola que ofrece un teclado y una pantalla conectados directamente. Las consolas en serie son mucho más lentas y tardan hasta un segundo en llenar una pantalla de 80 columnas por 24 lĂneas. Las consolas seriales generalmente solo admiten texto ASCII no proporcional, con soporte limitado para idiomas distintos del inglĂ©s." -#: ../../configuration/trafficpolicy/index.rst:1183 +#: ../../configuration/trafficpolicy/index.rst:1251 msgid "For the ingress traffic of an interface, there is only one policy you can directly apply, a **Limiter** policy. You cannot apply a shaping policy directly to the ingress traffic of any interface because shaping only works for outbound traffic." msgstr "Para el tráfico de entrada de una interfaz, solo hay una polĂtica que puede aplicar directamente, una polĂtica **Limitadora**. No puede aplicar una polĂtica de configuraciĂłn directamente al tráfico de entrada de ninguna interfaz porque la configuraciĂłn solo funciona para el tráfico saliente." @@ -6379,6 +6461,10 @@ msgstr "For transit traffic, which is received by the router and forwarded, base msgid "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``" msgstr "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``" +#: ../../configuration/loadbalancing/reverse-proxy.rst:161 +msgid "For web application providing information about their state HTTP health checks can be used to determine their availability." +msgstr "For web application providing information about their state HTTP health checks can be used to determine their availability." + #: ../../configuration/protocols/ospf.rst:350 msgid "Formally, a virtual link looks like a point-to-point network connecting two ABR from one area one of which physically connected to a backbone area. This pseudo-network is considered to belong to a backbone area." msgstr "Formalmente, un enlace virtual parece una red punto a punto que conecta dos ABR de un área, una de las cuales está conectada fĂsicamente a un área de red troncal. Se considera que esta pseudo-red pertenece a un área de red troncal." @@ -6553,7 +6639,7 @@ msgstr "Dado el siguiente ejemplo, tenemos un enrutador VyOS que actĂşa como ser msgid "Gloabal" msgstr "global" -#: ../../configuration/loadbalancing/reverse-proxy.rst:153 +#: ../../configuration/loadbalancing/reverse-proxy.rst:190 msgid "Global" msgstr "Global" @@ -6577,7 +6663,7 @@ msgstr "Global Options Firewall Configuration" msgid "Global options" msgstr "Opciones globales" -#: ../../configuration/loadbalancing/reverse-proxy.rst:155 +#: ../../configuration/loadbalancing/reverse-proxy.rst:192 msgid "Global parameters" msgstr "Parámetros globales" @@ -6590,6 +6676,10 @@ msgstr "ajustes globales" msgid "Graceful Restart" msgstr "Reinicio elegante" +#: ../../configuration/service/https.rst:84 +msgid "GraphQL" +msgstr "GraphQL" + #: ../../configuration/highavailability/index.rst:236 msgid "Gratuitous ARP" msgstr "ARP gratuito" @@ -6627,6 +6717,10 @@ msgstr "Nombre de usuario de autenticaciĂłn básica HTTP" msgid "HTTP client" msgstr "cliente HTTP" +#: ../../configuration/loadbalancing/reverse-proxy.rst:160 +msgid "HTTP health check" +msgstr "HTTP health check" + #: ../../configuration/interfaces/wireless.rst:137 msgid "HT (High Throughput) capabilities (802.11n)" msgstr "Capacidades HT (alto rendimiento) (802.11n)" @@ -7859,6 +7953,10 @@ msgstr "Para separar el tráfico, Fair Queue utiliza un clasificador basado en l msgid "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands." msgstr "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands." +#: ../../configuration/interfaces/ethernet.rst:111 +msgid "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled." +msgstr "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled." + #: ../../configuration/interfaces/ethernet.rst:95 msgid "In order to use TSO/LRO with VMXNET3 adaters one must also enable the SG offloading option." msgstr "Para usar TSO/LRO con adaptadores VMXNET3, tambiĂ©n se debe habilitar la opciĂłn de descarga SG." @@ -8480,6 +8578,10 @@ msgstr "Los LNS se utilizan a menudo para conectarse a un LAC (concentrador de a msgid "Label Distribution Protocol" msgstr "Protocolo de distribuciĂłn de etiquetas" +#: ../../configuration/pki/index.rst:447 +msgid "Lastly, we can create the leaf certificates that devices and users will utilise." +msgstr "Lastly, we can create the leaf certificates that devices and users will utilise." + #: ../../configuration/interfaces/l2tpv3.rst:11 msgid "Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that can be used as an alternative protocol to :ref:`mpls` for encapsulation of multiprotocol Layer 2 communications traffic over IP networks. Like L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier requirements." msgstr "Layer 2 Tunneling Protocol Version 3 es un estándar IETF relacionado con L2TP que se puede utilizar como un protocolo alternativo a :ref:`mpls` para la encapsulaciĂłn del tráfico de comunicaciones multiprotocolo de Capa 2 a travĂ©s de redes IP. Al igual que L2TP, L2TPv3 proporciona un servicio de pseudocable, pero está escalado para adaptarse a los requisitos del operador." @@ -8520,7 +8622,7 @@ msgstr "Deje que el demonio SNMP escuche solo en la direcciĂłn IP 192.0.2.1" msgid "Lets assume the following topology:" msgstr "Supongamos la siguiente topologĂa:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:193 +#: ../../configuration/loadbalancing/reverse-proxy.rst:230 msgid "Level 4 balancing" msgstr "Equilibrio de nivel 4" @@ -8540,7 +8642,7 @@ msgstr "La vida Ăştil se reduce segĂşn la cantidad de segundos desde el Ăşltimo msgid "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." msgstr "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." -#: ../../configuration/loadbalancing/reverse-proxy.rst:165 +#: ../../configuration/loadbalancing/reverse-proxy.rst:202 msgid "Limit allowed cipher algorithms used during SSL/TLS handshake" msgstr "Limite los algoritmos de cifrado permitidos utilizados durante el protocolo de enlace SSL/TLS" @@ -8552,7 +8654,7 @@ msgstr "Limite los inicios de sesiĂłn a `<limit> ` por cada ``rate-time`` segund msgid "Limit logins to ``rate-limit`` attemps per every `<seconds>`. Rate time must be between 15 and 600 seconds." msgstr "Limite los inicios de sesiĂłn a ``rate-limit`` intentos por cada `<seconds> `. El tiempo de tasa debe estar entre 15 y 600 segundos." -#: ../../configuration/loadbalancing/reverse-proxy.rst:160 +#: ../../configuration/loadbalancing/reverse-proxy.rst:197 msgid "Limit maximum number of connections" msgstr "Limite el nĂşmero máximo de conexiones" @@ -9339,6 +9441,10 @@ msgid "Multiple VLAN to VNI mappings can be configured against the same SVD. Thi msgstr "Multiple VLAN to VNI mappings can be configured against the same SVD. This allows for a significant scaling of the number of VNIs since a separate VXLAN interface is no longer required for each VNI." #: ../../configuration/system/host-name.rst:68 +msgid "Multiple aliases can be specified per host-name." +msgstr "Multiple aliases can be specified per host-name." + +#: ../../configuration/system/host-name.rst:68 msgid "Multiple aliases can pe specified per host-name." msgstr "Se pueden especificar varios alias por nombre de host." @@ -9859,7 +9965,7 @@ msgstr "Una vez que se ha encontrado un vecino, la entrada se considera válida msgid "Once a route is assessed a penalty, the penalty is decreased by half each time a predefined amount of time elapses (half-life-time). When the accumulated penalties fall below a predefined threshold (reuse-value), the route is unsuppressed and added back into the BGP routing table." msgstr "Una vez que se impone una penalizaciĂłn a una ruta, la penalizaciĂłn se reduce a la mitad cada vez que transcurre una cantidad de tiempo predefinida (tiempo de vida media). Cuando las penalizaciones acumuladas caen por debajo de un umbral predefinido (valor de reutilizaciĂłn), la ruta se desactiva y se vuelve a agregar a la tabla de enrutamiento BGP." -#: ../../configuration/trafficpolicy/index.rst:1152 +#: ../../configuration/trafficpolicy/index.rst:1220 msgid "Once a traffic-policy is created, you can apply it to an interface:" msgstr "Una vez que se crea una polĂtica de tráfico, puede aplicarla a una interfaz:" @@ -10039,7 +10145,7 @@ msgstr "Modos de funcionamiento" #: ../../configuration/interfaces/bonding.rst:512 #: ../../configuration/interfaces/dummy.rst:51 -#: ../../configuration/interfaces/ethernet.rst:132 +#: ../../configuration/interfaces/ethernet.rst:148 #: ../../configuration/interfaces/loopback.rst:41 #: ../../configuration/interfaces/macsec.rst:106 #: ../../configuration/interfaces/pppoe.rst:278 @@ -10417,6 +10523,10 @@ msgstr "De forma predeterminada, se muestrean todos los paquetes (es decir, la t msgid "Per default the user session is being replaced if a second authentication request succeeds. Such session requests can be either denied or allowed entirely, which would allow multiple sessions for a user in the latter case. If it is denied, the second session is being rejected even if the authentication succeeds, the user has to terminate its first session and can then authentication again." msgstr "De manera predeterminada, la sesiĂłn de usuario se reemplaza si una segunda solicitud de autenticaciĂłn tiene Ă©xito. Dichas solicitudes de sesiĂłn se pueden denegar o permitir por completo, lo que permitirĂa mĂşltiples sesiones para un usuario en el Ăşltimo caso. Si se deniega, la segunda sesiĂłn se rechaza incluso si la autenticaciĂłn tiene Ă©xito, el usuario debe finalizar su primera sesiĂłn y luego puede volver a autenticarse." +#: ../../configuration/trafficpolicy/index.rst:1200 +msgid "Perform NAT lookup before applying flow-isolation rules." +msgstr "Perform NAT lookup before applying flow-isolation rules." + #: ../../configuration/system/option.rst:108 msgid "Performance" msgstr "Rendimiento" @@ -10523,7 +10633,7 @@ msgstr "Grupos de puertos" #: ../../configuration/interfaces/bonding.rst:282 #: ../../configuration/interfaces/bridge.rst:188 -#: ../../configuration/interfaces/ethernet.rst:124 +#: ../../configuration/interfaces/ethernet.rst:140 msgid "Port Mirror (SPAN)" msgstr "Espejo de puerto (SPAN)" @@ -10809,7 +10919,7 @@ msgstr "Publique un puerto para el contenedor." msgid "Pull a new image for container" msgstr "Obtener una nueva imagen para el contenedor" -#: ../../configuration/interfaces/ethernet.rst:117 +#: ../../configuration/interfaces/ethernet.rst:133 #: ../../configuration/interfaces/virtual-ethernet.rst:39 #: ../../configuration/interfaces/wireless.rst:408 msgid "QinQ (802.1ad)" @@ -11023,7 +11133,7 @@ msgstr "Recomendado para instalaciones más grandes." msgid "Record types" msgstr "Record types" -#: ../../configuration/loadbalancing/reverse-proxy.rst:174 +#: ../../configuration/loadbalancing/reverse-proxy.rst:211 msgid "Redirect HTTP to HTTPS" msgstr "Redirigir HTTP a HTTPS" @@ -11055,7 +11165,7 @@ msgstr "Redundancia y carga compartida. Hay varios dispositivos NAT66 en el bord msgid "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" msgstr "Registre el registro DNS ``example.vyos.io`` en el servidor DNS ``ns1.vyos.io``" -#: ../../configuration/interfaces/ethernet.rst:110 +#: ../../configuration/interfaces/ethernet.rst:126 #: ../../configuration/interfaces/virtual-ethernet.rst:33 #: ../../configuration/interfaces/wireless.rst:401 msgid "Regular VLANs (802.1q)" @@ -11402,11 +11512,11 @@ msgstr "Conjuntos de reglas" msgid "Rule-set overview" msgstr "DescripciĂłn general del conjunto de reglas" -#: ../../configuration/loadbalancing/reverse-proxy.rst:220 +#: ../../configuration/loadbalancing/reverse-proxy.rst:258 msgid "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" msgstr "La regla 10 hace coincidir las solicitudes con el nombre de dominio ``node1.example.com`` reenvĂa al backend ``bk-api-01``" -#: ../../configuration/loadbalancing/reverse-proxy.rst:257 +#: ../../configuration/loadbalancing/reverse-proxy.rst:295 msgid "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." msgstr "La regla 10 hace coincidir las solicitudes con la ruta URL exacta ``/.well-known/xxx`` y redirige a la ubicaciĂłn ``/certs/``." @@ -11414,11 +11524,11 @@ msgstr "La regla 10 hace coincidir las solicitudes con la ruta URL exacta ``/.we msgid "Rule 110 is hit, so connection is accepted." msgstr "Rule 110 is hit, so connection is accepted." -#: ../../configuration/loadbalancing/reverse-proxy.rst:260 +#: ../../configuration/loadbalancing/reverse-proxy.rst:298 msgid "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." msgstr "La regla 20 coincide con las solicitudes con rutas URL que terminan en ``/mail`` o la ruta exacta ``/email/bar`` redirige a la ubicaciĂłn ``/postfix/``." -#: ../../configuration/loadbalancing/reverse-proxy.rst:223 +#: ../../configuration/loadbalancing/reverse-proxy.rst:261 msgid "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" msgstr "La regla 20 hace coincidir las solicitudes con el nombre de dominio ``node2.example.com`` reenvĂa al backend ``bk-api-02``" @@ -11537,7 +11647,7 @@ msgstr "SSH se diseñó como reemplazo de Telnet y de los protocolos de shell re msgid "SSID to be used in IEEE 802.11 management frames" msgstr "SSID que se utilizará en tramas de administraciĂłn IEEE 802.11" -#: ../../configuration/loadbalancing/reverse-proxy.rst:294 +#: ../../configuration/loadbalancing/reverse-proxy.rst:333 msgid "SSL Bridging" msgstr "SSL Bridging" @@ -11650,6 +11760,10 @@ msgstr "secuencias de comandos" msgid "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly." msgstr "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly." +#: ../../configuration/pki/index.rst:411 +msgid "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates." +msgstr "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates." + #: ../../configuration/service/ipoe-server.rst:186 #: ../../configuration/service/pppoe-server.rst:148 #: ../../configuration/vpn/l2tp.rst:191 @@ -11857,6 +11971,10 @@ msgstr "Establecer interfaz de tĂşnel virtual" msgid "Set a container description" msgstr "Establecer una descripciĂłn de contenedor" +#: ../../configuration/trafficpolicy/index.rst:1169 +msgid "Set a description for the shaper." +msgstr "Set a description for the shaper." + #: ../../configuration/system/conntrack.rst:113 msgid "Set a destination and/or source address. Accepted input for ipv4:" msgstr "Set a destination and/or source address. Accepted input for ipv4:" @@ -11877,7 +11995,7 @@ msgstr "Establezca un lĂmite en el nĂşmero máximo de usuarios conectados simul msgid "Set a meaningful description." msgstr "Establezca una descripciĂłn significativa." -#: ../../configuration/service/https.rst:63 +#: ../../configuration/service/https.rst:67 msgid "Set a named api key. Every key has the same, full permissions on the system." msgstr "Establezca una clave API con nombre. Cada clave tiene los mismos permisos completos en el sistema." @@ -11904,7 +12022,7 @@ msgstr "Establezca la acciĂłn para la polĂtica del mapa de rutas." msgid "Set action to take on entries matching this rule." msgstr "Establezca la acciĂłn a realizar en las entradas que coincidan con esta regla." -#: ../../configuration/service/https.rst:79 +#: ../../configuration/service/https.rst:112 msgid "Set an API-KEY is the minimal configuration to get a working API Endpoint." msgstr "Establecer una API-KEY es la configuraciĂłn mĂnima para obtener un punto final de API que funcione." @@ -12309,6 +12427,14 @@ msgstr "Establecer la direcciĂłn del puerto backend" msgid "Set the address of the backend server to which the incoming traffic will be forwarded" msgstr "Establezca la direcciĂłn del servidor backend al que se reenviará el tráfico entrante" +#: ../../configuration/service/https.rst:94 +msgid "Set the authentication type for GraphQL, default option is key. Available options are:" +msgstr "Set the authentication type for GraphQL, default option is key. Available options are:" + +#: ../../configuration/service/https.rst:106 +msgid "Set the byte length of the JWT secret. Default is 32." +msgstr "Set the byte length of the JWT secret. Default is 32." + #: ../../configuration/highavailability/index.rst:295 msgid "Set the default VRRP version to use. This defaults to 2, but IPv6 instances will always use version 3." msgstr "Establezca la versiĂłn de VRRP predeterminada que se utilizará. El valor predeterminado es 2, pero las instancias de IPv6 siempre usarán la versiĂłn 3." @@ -12345,6 +12471,10 @@ msgstr "Establezca la configuraciĂłn global para paquetes no válidos." msgid "Set the global setting for related connections." msgstr "Establezca la configuraciĂłn global para las conexiones relacionadas." +#: ../../configuration/service/https.rst:102 +msgid "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds." +msgstr "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds." + #: ../../configuration/service/https.rst:28 msgid "Set the listen port of the local API, this has no effect on the webserver. The default is port 8080" msgstr "Configure el puerto de escucha de la API local, esto no tiene ningĂşn efecto en el servidor web. El valor predeterminado es el puerto 8080" @@ -12361,6 +12491,10 @@ msgstr "Establezca la longitud máxima de relleno A-MPDU pre-EOF que la estaciĂł msgid "Set the maximum number of TCP half-open connections." msgstr "Establezca el nĂşmero máximo de conexiones TCP semiabiertas." +#: ../../configuration/service/https.rst:60 +msgid "Set the maximum request body size in megabytes. Default is 1MB." +msgstr "Set the maximum request body size in megabytes. Default is 1MB." + #: ../../_include/interface-eapol.txt:12 msgid "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry used for authentication of the remote side. If an intermediate CA certificate is specified, then all parent CA certificates that exist in the PKI, such as the root CA or additional intermediate CAs, will automatically be used during certificate validation to ensure that the full chain of trust is available." msgstr "Establezca el nombre de la entrada PKI SSL :abbr:`CA (Autoridad de certificaciĂłn)` utilizada para la autenticaciĂłn del lado remoto. Si se especifica un certificado de CA intermedio, todos los certificados de CA principales que existen en la PKI, como la CA raĂz o las CA intermedias adicionales, se utilizarán automáticamente durante la validaciĂłn del certificado para garantizar que la cadena de confianza completa estĂ© disponible." @@ -12429,6 +12563,10 @@ msgstr "Configure la tabla de enrutamiento para reenviar paquetes." msgid "Set the session id, which is a 32-bit integer value. Uniquely identifies the session being created. The value used must match the peer_session_id value being used at the peer." msgstr "Establezca la identificaciĂłn de la sesiĂłn, que es un valor entero de 32 bits. Identifica de forma Ăşnica la sesiĂłn que se está creando. El valor utilizado debe coincidir con el valor peer_session_id que se utiliza en el par." +#: ../../configuration/trafficpolicy/index.rst:1164 +msgid "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth." +msgstr "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth." + #: ../../configuration/system/conntrack.rst:31 msgid "Set the size of the hash table. The connection tracking hash table makes searching the connection tracking table faster. The hash table uses “buckets” to record entries in the connection tracking table." msgstr "Establece el tamaño de la tabla hash. La tabla hash de seguimiento de conexiones hace que la bĂşsqueda en la tabla de seguimiento de conexiones sea más rápida. La tabla hash utiliza "cubos" para registrar entradas en la tabla de seguimiento de conexiones." @@ -12459,6 +12597,18 @@ msgstr "Set the window scale factor for TCP window scaling" msgid "Set window of concurrently valid codes." msgstr "Establecer ventana de cĂłdigos válidos concurrentemente." +#: ../../configuration/loadbalancing/reverse-proxy.rst:172 +msgid "Sets the HTTP method to be used, can be either: option, get, post, put" +msgstr "Sets the HTTP method to be used, can be either: option, get, post, put" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:177 +msgid "Sets the endpoint to be used for health checks" +msgstr "Sets the endpoint to be used for health checks" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:182 +msgid "Sets the expected result condition for considering a server healthy. Some possible examples are:" +msgstr "Sets the expected result condition for considering a server healthy. Some possible examples are:" + #: ../../configuration/container/index.rst:16 msgid "Sets the image name in the hub registry" msgstr "Establece el nombre de la imagen en el registro del concentrador" @@ -12683,7 +12833,7 @@ msgstr "Mostrar una lista de certificados instalados" msgid "Show all BFD peers" msgstr "Mostrar todos los compañeros de BFD" -#: ../../configuration/interfaces/ethernet.rst:210 +#: ../../configuration/interfaces/ethernet.rst:226 msgid "Show available offloading functions on given `<interface>`" msgstr "Mostrar las funciones de descarga disponibles en ` dado<interface> `" @@ -12701,7 +12851,7 @@ msgstr "Mostrar puente `<name> ` mdb muestra la tabla actual de miembros del gru #: ../../configuration/interfaces/bonding.rst:516 #: ../../configuration/interfaces/dummy.rst:55 -#: ../../configuration/interfaces/ethernet.rst:136 +#: ../../configuration/interfaces/ethernet.rst:152 #: ../../configuration/interfaces/loopback.rst:45 #: ../../configuration/interfaces/virtual-ethernet.rst:59 msgid "Show brief interface information." @@ -12745,7 +12895,7 @@ msgstr "Mostrar informaciĂłn detallada sobre los enlaces fĂsicos subyacentes en #: ../../configuration/interfaces/bonding.rst:531 #: ../../configuration/interfaces/dummy.rst:67 -#: ../../configuration/interfaces/ethernet.rst:150 +#: ../../configuration/interfaces/ethernet.rst:166 #: ../../configuration/interfaces/pppoe.rst:282 #: ../../configuration/interfaces/sstp-client.rst:121 #: ../../configuration/interfaces/virtual-ethernet.rst:72 @@ -12777,7 +12927,7 @@ msgstr "Mostrar informaciĂłn general sobre la interfaz especĂfica de WireGuard" msgid "Show info about the Wireguard service. It also shows the latest handshake." msgstr "Mostrar informaciĂłn sobre el servicio Wireguard. TambiĂ©n muestra el Ăşltimo apretĂłn de manos." -#: ../../configuration/interfaces/ethernet.rst:169 +#: ../../configuration/interfaces/ethernet.rst:185 msgid "Show information about physical `<interface>`" msgstr "Mostrar informaciĂłn sobre el ` fĂsico<interface> `" @@ -12895,7 +13045,7 @@ msgstr "Show the logs of all firewall; show all ipv6 firewall logs; show all log msgid "Show the route" msgstr "mostrar la ruta" -#: ../../configuration/interfaces/ethernet.rst:242 +#: ../../configuration/interfaces/ethernet.rst:258 msgid "Show transceiver information from plugin modules, e.g SFP+, QSFP" msgstr "Mostrar informaciĂłn del transceptor de los mĂłdulos de complemento, por ejemplo, SFP+, QSFP" @@ -13475,7 +13625,7 @@ msgstr "Especifique el valor del identificador del agregador de nivel de sitio ( msgid "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." msgstr "Especifique la direcciĂłn de la interfaz utilizada localmente en la interfaz a la que se ha delegado el prefijo. El ID debe ser un entero decimal." -#: ../../configuration/loadbalancing/reverse-proxy.rst:170 +#: ../../configuration/loadbalancing/reverse-proxy.rst:207 msgid "Specify the minimum required TLS version 1.2 or 1.3" msgstr "Especifique la versiĂłn mĂnima requerida de TLS 1.2 o 1.3" @@ -13524,6 +13674,10 @@ msgid "Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety msgstr "Squid_ es un proxy web HTTP de almacenamiento en cachĂ© y reenvĂo. Tiene una amplia variedad de usos, incluida la aceleraciĂłn de un servidor web al almacenar en cachĂ© solicitudes repetidas, almacenar en cachĂ© web, DNS y otras bĂşsquedas de redes informáticas para un grupo de personas que comparten recursos de red y ayudar a la seguridad al filtrar el tráfico. Aunque se usa principalmente para HTTP y FTP, Squid incluye soporte limitado para varios otros protocolos, incluidos Internet Gopher, SSL, [6] TLS y HTTPS. Squid no es compatible con el protocolo SOCKS." #: ../../configuration/service/https.rst:56 +msgid "Start Webserver in given VRF." +msgstr "Start Webserver in given VRF." + +#: ../../configuration/service/https.rst:56 msgid "Start Webserver in given VRF." msgstr "Start Webserver in given VRF." @@ -13843,7 +13997,7 @@ msgstr "Deshabilite temporalmente este servidor RADIUS. No será consultado." msgid "Temporary disable this TACACS server. It won't be queried." msgstr "Deshabilite temporalmente este servidor TACACS. No será consultado." -#: ../../configuration/loadbalancing/reverse-proxy.rst:248 +#: ../../configuration/loadbalancing/reverse-proxy.rst:286 msgid "Terminate SSL" msgstr "Terminar SSL" @@ -13879,7 +14033,7 @@ msgstr "Pruebas y ValidaciĂłn" msgid "Thanks to this discovery, any subsequent traffic between PC4 and PC5 will not be using the multicast-address between the leaves as they both know behind which Leaf the PCs are connected. This saves traffic as less multicast packets sent reduces the load on the network, which improves scalability when more leaves are added." msgstr "Gracias a este descubrimiento, cualquier tráfico posterior entre PC4 y PC5 no utilizará la direcciĂłn de multidifusiĂłn entre las hojas, ya que ambas saben detrás de quĂ© hoja están conectadas las PC. Esto ahorra tráfico, ya que se envĂan menos paquetes de multidifusiĂłn y se reduce la carga en la red, lo que mejora la escalabilidad cuando se agregan más hojas." -#: ../../configuration/trafficpolicy/index.rst:1194 +#: ../../configuration/trafficpolicy/index.rst:1262 msgid "That is how it is possible to do the so-called \"ingress shaping\"." msgstr "AsĂ es como es posible hacer el llamado "formado de entrada"." @@ -13923,7 +14077,7 @@ msgstr "El DN y la contraseña para enlazar mientras se realizan bĂşsquedas. Com msgid "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." msgstr "La polĂtica FQ-CoDel distribuye el tráfico en 1024 colas FIFO e intenta brindar un buen servicio entre todas ellas. TambiĂ©n trata de mantener corta la longitud de todas las colas." -#: ../../configuration/loadbalancing/reverse-proxy.rst:218 +#: ../../configuration/loadbalancing/reverse-proxy.rst:256 msgid "The HTTP service listen on TCP port 80." msgstr "El servicio HTTP escucha en el puerto TCP 80." @@ -14040,7 +14194,7 @@ msgstr "La ``direcciĂłn`` se puede configurar en la interfaz VRRP o no en la int msgid "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" msgstr "El parámetro ``direcciĂłn`` puede ser una direcciĂłn IPv4 o IPv6, pero no puede mezclar IPv4 e IPv6 en el mismo grupo, y deberá crear grupos con diferentes VRID especialmente para IPv4 e IPv6. Si desea utilizar la direcciĂłn IPv4 + IPv6, puede utilizar la opciĂłn ``direcciĂłn-excluida``" -#: ../../configuration/loadbalancing/reverse-proxy.rst:305 +#: ../../configuration/loadbalancing/reverse-proxy.rst:345 msgid "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" msgstr "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" @@ -14048,15 +14202,15 @@ msgstr "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HT msgid "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." msgstr "El servicio ``http`` se reduce en el puerto 80 y fuerza los redireccionamientos de HTTP a HTTPS." -#: ../../configuration/loadbalancing/reverse-proxy.rst:251 +#: ../../configuration/loadbalancing/reverse-proxy.rst:289 msgid "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." msgstr "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." -#: ../../configuration/loadbalancing/reverse-proxy.rst:302 +#: ../../configuration/loadbalancing/reverse-proxy.rst:342 msgid "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." msgstr "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." -#: ../../configuration/loadbalancing/reverse-proxy.rst:254 +#: ../../configuration/loadbalancing/reverse-proxy.rst:292 msgid "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." msgstr "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." @@ -14121,7 +14275,7 @@ msgstr "La direcciĂłn IP a la que se hace referencia a continuaciĂłn `192.0.2.1` msgid "The bonding interface provides a method for aggregating multiple network interfaces into a single logical \"bonded\" interface, or LAG, or ether-channel, or port-channel. The behavior of the bonded interfaces depends upon the mode; generally speaking, modes provide either hot standby or load balancing services. Additionally, link integrity monitoring may be performed." msgstr "La interfaz de vinculaciĂłn proporciona un mĂ©todo para agregar mĂşltiples interfaces de red en una Ăşnica interfaz lĂłgica "vinculada", o LAG, o ether-channel, o port-channel. El comportamiento de las interfaces vinculadas depende del modo; en tĂ©rminos generales, los modos proporcionan servicios de equilibrio de carga o de espera activa. Además, se puede realizar la supervisiĂłn de la integridad del enlace." -#: ../../configuration/trafficpolicy/index.rst:1179 +#: ../../configuration/trafficpolicy/index.rst:1247 msgid "The case of ingress shaping" msgstr "El caso de la conformaciĂłn de ingreso" @@ -14397,7 +14551,7 @@ msgstr "Los siguientes comandos se traducen a "--net host" cuando se c msgid "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" msgstr "Se requerirĂan los siguientes comandos para establecer opciones para un protocolo de enrutamiento dinámico dado dentro de un vrf dado:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:215 +#: ../../configuration/loadbalancing/reverse-proxy.rst:253 msgid "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." msgstr "La siguiente configuraciĂłn demuestra cĂłmo usar VyOS para lograr un equilibrio de carga basado en el nombre de dominio." @@ -14413,11 +14567,11 @@ msgstr "La siguiente configuraciĂłn en VyOS se aplica a todos los siguientes pro msgid "The following configuration reverse-proxy terminate SSL." msgstr "La siguiente configuraciĂłn de proxy inverso termina SSL." -#: ../../configuration/loadbalancing/reverse-proxy.rst:249 +#: ../../configuration/loadbalancing/reverse-proxy.rst:287 msgid "The following configuration terminates SSL on the router." msgstr "The following configuration terminates SSL on the router." -#: ../../configuration/loadbalancing/reverse-proxy.rst:295 +#: ../../configuration/loadbalancing/reverse-proxy.rst:334 msgid "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." msgstr "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." @@ -14618,7 +14772,7 @@ msgstr "La aplicaciĂłn más visible del protocolo es para el acceso a cuentas sh msgid "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." msgstr "El grupo de multidifusiĂłn utilizado por todas las hojas para esta extensiĂłn de vlan. Tiene que ser igual en todas las hojas que tenga esta interfaz." -#: ../../configuration/loadbalancing/reverse-proxy.rst:185 +#: ../../configuration/loadbalancing/reverse-proxy.rst:222 msgid "The name of the service can be different, in this example it is only for convenience." msgstr "El nombre del servicio puede ser diferente, en este ejemplo es solo por conveniencia." @@ -16161,11 +16315,19 @@ msgstr "Este comando crea un puente que se usa para vincular el tráfico en eth1 msgid "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." msgstr "Este comando especifica la máquina de estados finitos (FSM) destinada a controlar el tiempo de ejecuciĂłn de los cálculos SPF en respuesta a eventos IGP. El proceso descrito en :rfc:`8405`." -#: ../../configuration/loadbalancing/reverse-proxy.rst:195 +#: ../../configuration/loadbalancing/reverse-proxy.rst:367 +msgid "This configuration enables HTTP health checks on backend servers." +msgstr "This configuration enables HTTP health checks on backend servers." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:232 msgid "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." msgstr "Esta configuraciĂłn habilita el proxy inverso TCP para el servicio "my-tcp-api". Las conexiones TCP entrantes en el puerto 8888 se equilibrarán en la carga de los servidores backend (srv01 y srv02) mediante el algoritmo de equilibrio de carga por turnos." -#: ../../configuration/loadbalancing/reverse-proxy.rst:177 +#: ../../configuration/pki/index.rst:375 +msgid "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user." +msgstr "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:214 msgid "This configuration listen on port 80 and redirect incoming requests to HTTPS:" msgstr "Esta configuraciĂłn escucha en el puerto 80 y redirige las solicitudes entrantes a HTTPS:" @@ -16665,7 +16827,7 @@ msgstr "Esto le mostrará una estadĂstica de todos los conjuntos de reglas desd msgid "This will show you a summary of rule-sets and groups" msgstr "Esto le mostrará un resumen de conjuntos de reglas y grupos." -#: ../../configuration/trafficpolicy/index.rst:1188 +#: ../../configuration/trafficpolicy/index.rst:1256 msgid "This workaround lets you apply a shaping policy to the ingress traffic by first redirecting it to an in-between virtual interface (`Intermediate Functional Block`_). There, in that virtual interface, you will be able to apply any of the policies that work for outbound traffic, for instance, a shaping one." msgstr "Esta soluciĂłn le permite aplicar una polĂtica de modelado al tráfico de entrada al redirigirlo primero a una interfaz virtual intermedia ("Bloque funcional intermedio"_). AllĂ, en esa interfaz virtual, podrá aplicar cualquiera de las polĂticas que funcionan para el tráfico saliente, por ejemplo, una de configuraciĂłn." @@ -16915,7 +17077,7 @@ msgstr "Para habilitar la autenticaciĂłn basada en RADIUS, el modo de autenticac msgid "To enable bandwidth shaping via RADIUS, the option rate-limit needs to be enabled." msgstr "Para habilitar la configuraciĂłn del ancho de banda a travĂ©s de RADIUS, la opciĂłn de lĂmite de velocidad debe estar habilitada." -#: ../../configuration/service/https.rst:68 +#: ../../configuration/service/https.rst:72 msgid "To enable debug messages. Available via :opcmd:`show log` or :opcmd:`monitor log`" msgstr "Para habilitar los mensajes de depuraciĂłn. Disponible a travĂ©s de :opcmd:`show log` o :opcmd:`monitor log`" @@ -17188,6 +17350,10 @@ msgstr "Los convertidores de USB a serie manejarán la mayor parte de su trabajo msgid "UUCP subsystem" msgstr "subsistema UUCP" +#: ../../configuration/interfaces/ethernet.rst:73 +msgid "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/" +msgstr "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/" + #: ../../configuration/interfaces/vxlan.rst:102 msgid "Unicast" msgstr "unidifusiĂłn" @@ -18192,7 +18358,7 @@ msgstr "Frecuencia central del canal operativo VHT - frecuencia central 2 (para #: ../../configuration/interfaces/bonding.rst:275 #: ../../configuration/interfaces/bridge.rst:123 -#: ../../configuration/interfaces/ethernet.rst:107 +#: ../../configuration/interfaces/ethernet.rst:123 #: ../../configuration/interfaces/pseudo-ethernet.rst:63 #: ../../configuration/interfaces/virtual-ethernet.rst:30 #: ../../configuration/interfaces/wireless.rst:398 @@ -19264,7 +19430,7 @@ msgstr "Ahora puede "marcar" al interlocutor con el siguiente comando: msgid "You can now SSH into your system using admin/admin as a default user supplied from the ``lfkeitel/tacacs_plus:latest`` container." msgstr "Ahora puede usar SSH en su sistema usando admin/admin como un usuario predeterminado suministrado desde el contenedor ``lfkeitel/tacacs_plus:latest``." -#: ../../configuration/trafficpolicy/index.rst:1158 +#: ../../configuration/trafficpolicy/index.rst:1226 msgid "You can only apply one policy per interface and direction, but you could reuse a policy on different interfaces and directions:" msgstr "Solo puede aplicar una polĂtica por interfaz y direcciĂłn, pero puede reutilizar una polĂtica en diferentes interfaces y direcciones:" @@ -19432,11 +19598,11 @@ msgstr ":abbr:`GENEVE (encapsulaciĂłn de virtualizaciĂłn de red genĂ©rica)` admi msgid ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (or IPIP/IPsec, SIT/IPsec, or any other stateless tunnel protocol over IPsec) is the usual way to protect the traffic inside a tunnel." msgstr ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (o IPIP/IPsec, SIT/IPsec, o cualquier otro protocolo de tĂşnel sin estado sobre IPsec) es la forma habitual de proteger el tráfico dentro de un tĂşnel." -#: ../../configuration/interfaces/ethernet.rst:74 +#: ../../configuration/interfaces/ethernet.rst:90 msgid ":abbr:`GRO (Generic receive offload)` is the complement to GSO. Ideally any frame assembled by GRO should be segmented to create an identical sequence of frames using GSO, and any sequence of frames segmented by GSO should be able to be reassembled back to the original by GRO. The only exception to this is IPv4 ID in the case that the DF bit is set for a given IP header. If the value of the IPv4 ID is not sequentially incrementing it will be altered so that it is when a frame assembled via GRO is segmented via GSO." msgstr ":abbr:`GRO (Descarga de recepciĂłn genĂ©rica)` es el complemento de GSO. Idealmente, cualquier cuadro ensamblado por GRO debe segmentarse para crear una secuencia idĂ©ntica de cuadros usando GSO, y cualquier secuencia de cuadros segmentados por GSO debe poder volver a ensamblarse al original por GRO. La Ăşnica excepciĂłn a esto es la ID de IPv4 en el caso de que el bit DF estĂ© configurado para un encabezado IP determinado. Si el valor de la ID de IPv4 no se incrementa secuencialmente, se modificará para que sea asĂ cuando una trama ensamblada a travĂ©s de GRO se segmente a travĂ©s de GSO." -#: ../../configuration/interfaces/ethernet.rst:64 +#: ../../configuration/interfaces/ethernet.rst:80 msgid ":abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is meant to deal with cases where device drivers cannot perform the offloads described above. What occurs in GSO is that a given skbuff will have its data broken out over multiple skbuffs that have been resized to match the MSS provided via skb_shinfo()->gso_size." msgstr ":abbr:`GSO (descarga de segmentaciĂłn genĂ©rica)` es una descarga de software pura que está destinada a tratar los casos en los que los controladores de dispositivos no pueden realizar las descargas descritas anteriormente. Lo que ocurre en GSO es que un skbuff determinado tendrá sus datos desglosados en mĂşltiples skbuffs que se han redimensionado para que coincidan con el MSS proporcionado a travĂ©s de skb_shinfo()->gso_size." @@ -19464,6 +19630,10 @@ msgstr ":abbr:`LDP (protocolo de distribuciĂłn de etiquetas)` es un protocolo de msgid ":abbr:`LLDP (Link Layer Discovery Protocol)` is a vendor-neutral link layer protocol in the Internet Protocol Suite used by network devices for advertising their identity, capabilities, and neighbors on an IEEE 802 local area network, principally wired Ethernet. The protocol is formally referred to by the IEEE as Station and Media Access Control Connectivity Discovery specified in IEEE 802.1AB and IEEE 802.3-2012 section 6 clause 79." msgstr ":abbr:`LLDP (Protocolo de descubrimiento de capa de enlace)` es un protocolo de capa de enlace independiente del proveedor en el conjunto de protocolos de Internet que utilizan los dispositivos de red para anunciar su identidad, capacidades y vecinos en una red de área local IEEE 802, principalmente Ethernet cableada. El IEEE se refiere formalmente al protocolo como Descubrimiento de conectividad de control de acceso a estaciones y medios especificado en IEEE 802.1AB e IEEE 802.3-2012, secciĂłn 6, cláusula 79." +#: ../../configuration/interfaces/ethernet.rst:64 +msgid ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing." +msgstr ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing." + #: ../../configuration/interfaces/macsec.rst:74 msgid ":abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys between individual peers." msgstr ":abbr:`MKA (protocolo de acuerdo de clave MACsec)` se utiliza para sincronizar claves entre pares individuales." @@ -19528,7 +19698,7 @@ msgstr ":abbr:`RPKI (Infraestructura de clave pĂşblica de recursos)` es un marco msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." -#: ../../configuration/interfaces/ethernet.rst:82 +#: ../../configuration/interfaces/ethernet.rst:98 msgid ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" msgstr ":abbr:`RPS (Receive Packet Steering)` es lĂłgicamente una implementaciĂłn de software de :abbr:`RSS (Receive Side Scaling)`. Al estar en el software, necesariamente se llama más adelante en la ruta de datos. Mientras que RSS selecciona la cola y, por lo tanto, la CPU que ejecutará el controlador de interrupciones de hardware, RPS selecciona la CPU para realizar el procesamiento del protocolo por encima del controlador de interrupciones. Esto se logra colocando el paquete en la cola de trabajos pendientes de la CPU deseada y activando la CPU para su procesamiento. RPS tiene algunas ventajas sobre RSS:" @@ -19724,6 +19894,10 @@ msgstr "`4. Añadir parámetros opcionales`_" msgid "`<name>` must be identical on both sides!" msgstr "`<name> ` debe ser idĂ©ntico en ambos lados!" +#: ../../configuration/trafficpolicy/index.rst:1156 +msgid "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge." +msgstr "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge." + #: ../../configuration/pki/index.rst:204 msgid "``$ tail -n +2 ca.key | head -n -1 | tr -d '\\n'``" msgstr "``$ cola -n +2 ca.clave | cabeza -n -1 | tr -d '\\n'``" @@ -20292,6 +20466,10 @@ msgstr "``intercambio de claves`` quĂ© protocolo debe usarse para inicializar la msgid "``key`` - a private key, which will be used for authenticating local router on remote peer:" msgstr "``clave``: una clave privada, que se utilizará para autenticar el enrutador local en el par remoto:" +#: ../../configuration/service/https.rst:96 +msgid "``key`` use API keys configured in ``service https api keys``" +msgstr "``key`` use API keys configured in ``service https api keys``" + #: ../../configuration/system/option.rst:137 msgid "``latency``: A server profile focused on lowering network latency. This profile favors performance over power savings by setting ``intel_pstate`` and ``min_perf_pct=100``." msgstr "``latency``: un perfil de servidor centrado en reducir la latencia de la red. Este perfil favorece el rendimiento sobre el ahorro de energĂa configurando ``intel_pstate`` y ``min_perf_pct=100``." @@ -20775,6 +20953,18 @@ msgstr "``static`` - Rutas configuradas estáticamente" msgid "``station`` - Connects to another access point" msgstr "``estaciĂłn`` - Se conecta a otro punto de acceso" +#: ../../configuration/loadbalancing/reverse-proxy.rst:185 +msgid "``status 200-399`` Expecting a non-failure response code" +msgstr "``status 200-399`` Expecting a non-failure response code" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:184 +msgid "``status 200`` Expecting a 200 response code" +msgstr "``status 200`` Expecting a 200 response code" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:186 +msgid "``string success`` Expecting the string `success` in the response body" +msgstr "``string success`` Expecting the string `success` in the response body" + #: ../../configuration/firewall/ipv4.rst:103 #: ../../configuration/firewall/ipv6.rst:103 msgid "``synproxy``: synproxy the packet." @@ -20824,6 +21014,10 @@ msgstr "``rendimiento``: un perfil de servidor centrado en mejorar el rendimient msgid "``timeout`` keep-alive timeout in seconds <2-86400> (default 120) IKEv1 only" msgstr "``timeout`` tiempo de espera de actividad en segundos <2-86400> (predeterminado 120) solo IKEv1" +#: ../../configuration/service/https.rst:98 +msgid "``token`` use JWT tokens." +msgstr "``token`` use JWT tokens." + #: ../../configuration/interfaces/bonding.rst:80 msgid "``transmit-load-balance`` - Adaptive transmit load balancing: channel bonding that does not require any special switch support." msgstr "``transmit-load-balance`` - Equilibrio de carga de transmisiĂłn adaptable: vinculaciĂłn de canales que no requiere ningĂşn soporte de conmutador especial." @@ -20888,6 +21082,22 @@ msgstr "``vnc`` - Control de red virtual (VNC)" msgid "``vti`` - use a VTI interface for traffic encryption. Any traffic, which will be send to VTI interface will be encrypted and send to this peer. Using VTI makes IPSec configuration much flexible and easier in complex situation, and allows to dynamically add/delete remote networks, reachable via a peer, as in this mode router don't need to create additional SA/policy for each remote network:" msgstr "``vti``: utiliza una interfaz VTI para el cifrado del tráfico. Cualquier tráfico que se envĂe a la interfaz VTI se cifrará y se enviará a este par. El uso de VTI hace que la configuraciĂłn de IPSec sea mucho más flexible y fácil en situaciones complejas, y permite agregar/eliminar dinámicamente redes remotas, accesibles a travĂ©s de un par, ya que en este modo el enrutador no necesita crear SA/polĂtica adicional para cada red remota:" +#: ../../configuration/pki/index.rst:386 +msgid "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA." +msgstr "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA." + +#: ../../configuration/pki/index.rst:383 +msgid "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA." +msgstr "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA." + +#: ../../configuration/pki/index.rst:389 +msgid "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA." +msgstr "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA." + +#: ../../configuration/pki/index.rst:381 +msgid "``vyos_root_ca`` is the root certificate authority." +msgstr "``vyos_root_ca`` is the root certificate authority." + #: ../../configuration/vpn/site2site_ipsec.rst:59 msgid "``x509`` - options for x509 authentication mode:" msgstr "``x509`` - opciones para el modo de autenticaciĂłn x509:" @@ -21249,10 +21459,18 @@ msgstr "reenvĂo de ip" msgid "isisd" msgstr "isisd" +#: ../../configuration/interfaces/ethernet.rst:106 +msgid "it can be used with any NIC" +msgstr "it can be used with any NIC" + #: ../../configuration/interfaces/ethernet.rst:90 msgid "it can be used with any NIC," msgstr "se puede usar con cualquier NIC," +#: ../../configuration/interfaces/ethernet.rst:108 +msgid "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)" +msgstr "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)" + #: ../../configuration/interfaces/ethernet.rst:92 msgid "it does not increase hardware device interrupt rate (although it does introduce inter-processor interrupts (IPIs))." msgstr "no aumenta la tasa de interrupciĂłn del dispositivo de hardware (aunque sĂ introduce interrupciones entre procesadores (IPI))." @@ -21647,6 +21865,10 @@ msgstr "lento: solicite al socio que transmita LACPDU cada 30 segundos" msgid "smtp-server" msgstr "servidor SMTP" +#: ../../configuration/interfaces/ethernet.rst:107 +msgid "software filters can easily be added to hash over new protocols" +msgstr "software filters can easily be added to hash over new protocols" + #: ../../configuration/interfaces/ethernet.rst:91 msgid "software filters can easily be added to hash over new protocols," msgstr "Los filtros de software se pueden agregar fácilmente al hash sobre nuevos protocolos," diff --git a/docs/_locale/es/contributing.pot b/docs/_locale/es/contributing.pot index cbea3424..606d81e2 100644 --- a/docs/_locale/es/contributing.pot +++ b/docs/_locale/es/contributing.pot @@ -72,6 +72,18 @@ msgstr "Un buen mĂ©todo para escribir mensajes de confirmaciĂłn es echar un vist msgid "A number of flags can be set up to change the behaviour of VyOS at runtime. These flags can be toggled using either environment variables or creating files." msgstr "Se pueden configurar varios indicadores para cambiar el comportamiento de VyOS en tiempo de ejecuciĂłn. Estas banderas se pueden alternar usando variables de entorno o creando archivos." +#: ../../contributing/issues-features.rst:86 +msgid "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature." +msgstr "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature." + +#: ../../contributing/issues-features.rst:42 +msgid "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed." +msgstr "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed." + +#: ../../contributing/issues-features.rst:33 +msgid "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session." +msgstr "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session." + #: ../../contributing/development.rst:74 msgid "A single, short, summary of the commit (recommended 50 characters or less, not exceeding 80 characters) containing a prefix of the changed component and the corresponding Phabricator_ reference e.g. ``snmp: T1111:`` or ``ethernet: T2222:`` - multiple components could be concatenated as in ``snmp: ethernet: T3333``" msgstr "Un resumen Ăşnico y breve de la confirmaciĂłn (se recomiendan 50 caracteres o menos, sin exceder los 80 caracteres) que contenga un prefijo del componente cambiado y la referencia de Phabricator_ correspondiente, por ejemplo, ``snmp: T1111:`` o ``ethernet: T2222:` ` - se pueden concatenar mĂşltiples componentes como en ``snmp: ethernet: T3333``" @@ -93,7 +105,7 @@ msgstr "Los acrĂłnimos tambiĂ©n **deben** escribirse en mayĂşscula para distingu msgid "Add file to Git index using ``git add myfile``, or for a whole directory: ``git add somedir/*``" msgstr "Agregue un archivo al Ăndice de Git usando ``git add myfile``, o para un directorio completo: ``git add somedir/*``" -#: ../../contributing/testing.rst:100 +#: ../../contributing/testing.rst:103 msgid "Add one or more IP addresses" msgstr "Agregar una o más direcciones IP" @@ -155,6 +167,14 @@ msgstr "Cualquier paquete "modificado" puede hacer referencia a una ve msgid "Any packages in the packages directory will be added to the iso during build, replacing the upstream ones. Make sure you delete them (both the source directories and built deb packages) if you want to build an iso from purely upstream packages." msgstr "Cualquier paquete en el directorio de paquetes se agregará a la iso durante la compilaciĂłn, reemplazando a los anteriores. AsegĂşrese de eliminarlos (tanto los directorios de origen como los paquetes deb creados) si desea crear una iso a partir de paquetes puramente ascendentes." +#: ../../contributing/issues-features.rst:100 +msgid "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?" +msgstr "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?" + +#: ../../contributing/issues-features.rst:99 +msgid "Are there any limitations (hardware support, resource usage)?" +msgstr "Are there any limitations (hardware support, resource usage)?" + #: ../../contributing/testing.rst:57 msgid "As Smoketests will alter the system configuration and you are logged in remote you may loose your connection to the system." msgstr "Como Smoketests alterará la configuraciĂłn del sistema y usted está conectado de forma remota, puede perder su conexiĂłn con el sistema." @@ -219,6 +239,10 @@ msgstr "TemporizaciĂłn de arranque" msgid "Bug Report/Issue" msgstr "Informe de error/problema" +#: ../../contributing/issues-features.rst:117 +msgid "Bug reports that lack reproducing procedures." +msgstr "Bug reports that lack reproducing procedures." + #: ../../contributing/build-vyos.rst:825 msgid "Build" msgstr "Construir" @@ -303,7 +327,7 @@ msgstr "Las definiciones de comandos son puramente declarativas y no pueden cont msgid "Commit the changes by calling ``git commit``. Please use a meaningful commit headline (read above) and don't forget to reference the Phabricator_ ID." msgstr "Confirma los cambios llamando a ``git commit``. Utilice un tĂtulo de compromiso significativo (lea arriba) y no olvide hacer referencia al ID de Phabricator_." -#: ../../contributing/testing.rst:152 +#: ../../contributing/testing.rst:155 msgid "Config Load Tests" msgstr "Pruebas de carga de configuraciĂłn" @@ -331,7 +355,7 @@ msgstr "IntegraciĂłn continua" msgid "Customize" msgstr "personalizar" -#: ../../contributing/testing.rst:101 +#: ../../contributing/testing.rst:104 msgid "DHCP client and DHCPv6 prefix delegation" msgstr "Cliente DHCP y delegaciĂłn de prefijos DHCPv6" @@ -440,7 +464,7 @@ msgid "Every change set must be consistent (self containing)! Do not fix multipl msgstr "¡Cada conjunto de cambios debe ser consistente (autocontenido)! No corrija varios errores en una sola confirmaciĂłn. Si ya trabajĂł en varias correcciones en el mismo archivo, use `git add --patch` para agregar solo las partes relacionadas con el problema en su prĂłxima confirmaciĂłn." #: ../../contributing/development.rst:412 -#: ../../contributing/testing.rst:66 +#: ../../contributing/testing.rst:69 msgid "Example:" msgstr "Ejemplo:" @@ -473,6 +497,14 @@ msgstr "FRR" msgid "Feature Request" msgstr "Solicitud de funciĂłn" +#: ../../contributing/issues-features.rst:72 +msgid "Feature Requests" +msgstr "Feature Requests" + +#: ../../contributing/issues-features.rst:116 +msgid "Feature requests that do not include required information and need clarification." +msgstr "Feature requests that do not include required information and need clarification." + #: ../../contributing/build-vyos.rst:600 msgid "Firmware" msgstr "firmware" @@ -578,11 +610,15 @@ msgstr "Horrible: "Tiempo de espera de conexiĂłn TCP"" msgid "Horrible: \"frobnication algorithm.\"" msgstr "Horrible: "algoritmo de frobnicaciĂłn"." -#: ../../contributing/issues-features.rst:63 +#: ../../contributing/issues-features.rst:67 msgid "How can we reproduce this Bug?" msgstr "ÂżCĂłmo podemos reproducir este Bug?" -#: ../../contributing/testing.rst:103 +#: ../../contributing/issues-features.rst:98 +msgid "How you'd configure it by hand there?" +msgstr "How you'd configure it by hand there?" + +#: ../../contributing/testing.rst:106 msgid "IP and IPv6 options" msgstr "Opciones de IP e IPv6" @@ -606,14 +642,30 @@ msgstr "Si un verbo es esencial, mantenlo. Por ejemplo, en el texto de ayuda de msgid "If applicable a reference to a previous commit should be made linking those commits nicely when browsing the history: ``After commit abcd12ef (\"snmp: this is a headline\") a Python import statement is missing, throwing the following exception: ABCDEF``" msgstr "Si corresponde, se debe hacer una referencia a una confirmaciĂłn anterior que vincule bien esas confirmaciones al navegar por el historial: ``DespuĂ©s de confirmar abcd12ef ("snmp: este es un titular"), falta una declaraciĂłn de importaciĂłn de Python, arrojando la siguiente excepciĂłn: ABCDEF``" +#: ../../contributing/issues-features.rst:46 +msgid "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable." +msgstr "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable." + #: ../../contributing/development.rst:64 msgid "If there is no Phabricator_ reference in the commits of your pull request, we have to ask you to amend the commit message. Otherwise we will have to reject it." msgstr "Si no hay una referencia de Phabricator_ en las confirmaciones de su solicitud de extracciĂłn, debemos pedirle que modifique el mensaje de confirmaciĂłn. De lo contrario tendremos que rechazarlo." +#: ../../contributing/issues-features.rst:126 +msgid "If there is no response after further two weeks, the task will be automatically closed." +msgstr "If there is no response after further two weeks, the task will be automatically closed." + +#: ../../contributing/issues-features.rst:124 +msgid "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply." +msgstr "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply." + #: ../../contributing/build-vyos.rst:739 msgid "If you are brave enough to build yourself an ISO image containing any modified package from our GitHub organisation - this is the place to be." msgstr "Si es lo suficientemente valiente como para crear una imagen ISO que contenga cualquier paquete modificado de nuestra organizaciĂłn GitHub, este es el lugar para estar." +#: ../../contributing/issues-features.rst:50 +msgid "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report." +msgstr "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report." + #: ../../contributing/build-vyos.rst:602 msgid "If you upgrade your kernel or include new drivers you may need new firmware. Build a new ``vyos-linux-firmware`` package with the included helper scripts." msgstr "Si actualiza su kernel o incluye nuevos controladores, es posible que necesite un nuevo firmware. Cree un nuevo paquete ``vyos-linux-firmware`` con los scripts auxiliares incluidos." @@ -626,7 +678,7 @@ msgstr "En un gran sistema, como VyOS, que se compone de mĂşltiples componentes, msgid "In addition this also helps when browsing the GitHub codebase on a mobile device if you happen to be a crazy scientist." msgstr "Además, esto tambiĂ©n ayuda al navegar por el cĂłdigo base de GitHub en un dispositivo mĂłvil si eres un cientĂfico loco." -#: ../../contributing/issues-features.rst:56 +#: ../../contributing/issues-features.rst:60 msgid "In order to open up a bug-report/feature request you need to create yourself an account on VyOS Phabricator_. On the left side of the specific project (VyOS 1.2 or VyOS 1.3) you will find quick-links for opening a bug-report/feature request." msgstr "Para abrir un informe de error/solicitud de funciones, debe crear una cuenta en VyOS Phabricator_. En el lado izquierdo del proyecto especĂfico (VyOS 1.2 o VyOS 1.3) encontrará enlaces rápidos para abrir un informe de error/solicitud de funciones." @@ -690,10 +742,14 @@ msgstr "QAT de Intel" msgid "Inter QAT" msgstr "Inter QAT" -#: ../../contributing/testing.rst:91 +#: ../../contributing/testing.rst:94 msgid "Interface based tests" msgstr "Pruebas basadas en interfaz" +#: ../../contributing/issues-features.rst:96 +msgid "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?" +msgstr "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?" + #: ../../contributing/issues-features.rst:5 msgid "Issues/Feature requests" msgstr "Problemas/solicitudes de funciones" @@ -706,6 +762,10 @@ msgstr "Se encuentran problemas o errores en cualquier proyecto de software. VyO msgid "It's an Ada program and requires GNAT and gprbuild for building, dependencies are properly specified so just follow debuild's suggestions." msgstr "Es un programa Ada y requiere GNAT y gprbuild para compilar, las dependencias se especifican correctamente, asĂ que solo siga las sugerencias de debuild." +#: ../../contributing/issues-features.rst:103 +msgid "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions." +msgstr "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions." + #: ../../contributing/debugging.rst:58 msgid "It is also possible to set up the debugging using environment variables. In that case, the name will be (in uppercase) VYOS_FEATURE_DEBUG." msgstr "TambiĂ©n es posible configurar la depuraciĂłn utilizando variables de entorno. En ese caso, el nombre será (en mayĂşsculas) VYOS_FEATURE_DEBUG." @@ -762,7 +822,7 @@ msgstr "NĂşcleo de Linux" msgid "Live System" msgstr "Sistema en vivo" -#: ../../contributing/testing.rst:102 +#: ../../contributing/testing.rst:105 msgid "MTU size" msgstr "Tamaño de la PERSONA" @@ -770,11 +830,11 @@ msgstr "Tamaño de la PERSONA" msgid "Make your changes and save them. Do the following for all changes files to record them in your created Git commit:" msgstr "Realice sus cambios y guárdelos. Haga lo siguiente para todos los archivos de cambios para registrarlos en su confirmaciĂłn de Git creada:" -#: ../../contributing/testing.rst:61 +#: ../../contributing/testing.rst:64 msgid "Manual Smoketest Run" msgstr "EjecuciĂłn manual de prueba de humo" -#: ../../contributing/testing.rst:169 +#: ../../contributing/testing.rst:172 msgid "Manual config load test" msgstr "Prueba de carga de configuraciĂłn manual" @@ -851,7 +911,7 @@ msgstr "Ahora está preparado con dos nuevos alias ``vybld`` y ``vybld_crux`` pa msgid "Old concept/syntax" msgstr "Viejo concepto/sintaxis" -#: ../../contributing/testing.rst:63 +#: ../../contributing/testing.rst:66 msgid "On the other hand - as each test is contain in its own file - one can always execute a single Smoketest by hand by simply running the Python test scripts." msgstr "Por otro lado, como cada prueba está contenida en su propio archivo, siempre se puede ejecutar una sola prueba de humo a mano simplemente ejecutando los scripts de prueba de Python." @@ -863,7 +923,7 @@ msgstr "Una vez que haya instalado las dependencias requeridas, puede continuar msgid "Once you run ``show xyz`` and your condition is triggered you should be dropped into the python debugger:" msgstr "Una vez que ejecutes ``show xyz`` y tu condiciĂłn se active, deberĂas ingresar al depurador de python:" -#: ../../contributing/testing.rst:171 +#: ../../contributing/testing.rst:174 msgid "One is not bound to load all configurations one after another but can also load individual test configurations on his own." msgstr "Uno no está obligado a cargar todas las configuraciones una tras otra, sino que tambiĂ©n puede cargar configuraciones de prueba individuales por su cuenta." @@ -903,7 +963,7 @@ msgstr "Nuestro cĂłdigo se divide en varios mĂłdulos. VyOS se compone de varios msgid "Our op mode scripts use the python-vici module, which is not included in Debian's build, and isn't quite easy to integrate in that build. For this reason we debianize that module by hand now, using this procedure:" msgstr "Nuestros scripts de modo operativo utilizan el mĂłdulo python-vici, que no está incluido en la compilaciĂłn de Debian y no es muy fácil de integrar en esa compilaciĂłn. Por esta razĂłn, debianizamos ese mĂłdulo a mano ahora, usando este procedimiento:" -#: ../../contributing/testing.rst:93 +#: ../../contributing/testing.rst:96 msgid "Our smoketests not only test daemons and serives, but also check if what we configure for an interface works. Thus there is a common base classed named: ``base_interfaces_test.py`` which holds all the common code that an interface supports and is tested." msgstr "Nuestras pruebas de humo no solo prueban demonios y servicios, sino que tambiĂ©n verifican si lo que configuramos para una interfaz funciona. Por lo tanto, existe una base comĂşn clasificada denominada: ``base_interfaces_test.py`` que contiene todo el cĂłdigo comĂşn que admite una interfaz y se prueba." @@ -936,11 +996,11 @@ msgstr "Utilice la siguiente plantilla como un buen punto de partida cuando desa msgid "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface." msgstr "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface." -#: ../../contributing/testing.rst:104 +#: ../../contributing/testing.rst:107 msgid "Port description" msgstr "DescripciĂłn del puerto" -#: ../../contributing/testing.rst:105 +#: ../../contributing/testing.rst:108 msgid "Port disable" msgstr "Deshabilitar puerto" @@ -964,7 +1024,11 @@ msgstr "requisitos previos" msgid "Priorities" msgstr "Prioridades" -#: ../../contributing/issues-features.rst:61 +#: ../../contributing/issues-features.rst:91 +msgid "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required." +msgstr "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required." + +#: ../../contributing/issues-features.rst:65 msgid "Provide as much information as you can" msgstr "Proporcione tanta informaciĂłn como pueda" @@ -996,7 +1060,7 @@ msgstr "JustificaciĂłn: este parece ser el estándar no escrito en las CLI de di msgid "Recent versions use the ``vyos.frr`` framework. The Python class is located inside our ``vyos-1x:python/vyos/frr.py``. It comes with an embedded debugging/ (print style) debugger as vyos.ifconfig does." msgstr "Las versiones recientes usan el framework ``vyos.frr``. La clase Python se encuentra dentro de nuestro ``vyos-1x:python/vyos/frr.py``. Viene con un depurador integrado de depuraciĂłn/(estilo de impresiĂłn) como lo hace vyos.ifconfig." -#: ../../contributing/issues-features.rst:54 +#: ../../contributing/issues-features.rst:58 msgid "Report a Bug" msgstr "Reportar un error" @@ -1041,7 +1105,7 @@ msgstr "Algunos paquetes de VyOS (a saber, vyos-1x) vienen con pruebas de tiempo msgid "Some abbreviations are traditionally written in mixed case. Generally, if it contains words \"over\" or \"version\", the letter **should** be lowercase. If there's an accepted spelling (especially if defined by an RFC or another standard), it **must** be followed." msgstr "Algunas abreviaturas se escriben tradicionalmente en mayĂşsculas y minĂşsculas. Generalmente, si contiene palabras "over" o "version", la letra **debe** estar en minĂşscula. Si hay una ortografĂa aceptada (especialmente si está definida por un RFC u otro estándar), **debe** seguirse." -#: ../../contributing/testing.rst:202 +#: ../../contributing/testing.rst:205 msgid "Some of the configurations have preconditions which need to be met. Those most likely include generation of crypographic keys before the config can be applied - you will get a commit error otherwise. If you are interested how those preconditions are fulfilled check the vyos-build_ repository and the ``scripts/check-qemu-install`` file." msgstr "Algunas de las configuraciones tienen condiciones previas que deben cumplirse. Lo más probable es que incluyan la generaciĂłn de claves criptográficas antes de que se pueda aplicar la configuraciĂłn; de lo contrario, obtendrá un error de confirmaciĂłn. Si está interesado en cĂłmo se cumplen esas condiciones previas, consulte el repositorio vyos-build_ y el archivo ``scripts/check-qemu-install``." @@ -1077,6 +1141,14 @@ msgstr "Suponga que desea realizar un cambio en la secuencia de comandos webprox msgid "System Startup" msgstr "Puesta en marcha del sistema" +#: ../../contributing/issues-features.rst:108 +msgid "Task auto-closing" +msgstr "Task auto-closing" + +#: ../../contributing/issues-features.rst:118 +msgid "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)." +msgstr "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)." + #: ../../contributing/development.rst:214 msgid "Template processor **should** be used for generating config files. Built-in string formatting **may** be used for simple line-oriented formats where every line is self-contained, such as iptables rules. Template processor **must** be used for structured, multi-line formats such as those used by ISC DHCPd." msgstr "El procesador de plantillas **debe** usarse para generar archivos de configuraciĂłn. El formato de cadena incorporado **puede** usarse para formatos simples orientados a lĂneas donde cada lĂnea es independiente, como las reglas de iptables. El procesador de plantillas **debe** usarse para formatos estructurados de varias lĂneas, como los que usa ISC DHCPd." @@ -1137,11 +1209,15 @@ msgstr "La funciĂłn ``verify()`` toma su representaciĂłn interna de la configura msgid "The bash (or better vbash) completion in VyOS is defined in *templates*. Templates are text files (called ``node.def``) stored in a directory tree. The directory names define the command names, and template files define the command behaviour. Before VyOS 1.2 (crux) this files were created by hand. After a complex redesign process_ the new style template are automatically generated from a XML input file." msgstr "La finalizaciĂłn de bash (o mejor vbash) en VyOS se define en *templates*. Las plantillas son archivos de texto (llamados ``node.def``) almacenados en un árbol de directorios. Los nombres de los directorios definen los nombres de los comandos y los archivos de plantilla definen el comportamiento de los comandos. Antes de VyOS 1.2 (crux), estos archivos se creaban a mano. DespuĂ©s de un complejo proceso de rediseño, la nueva plantilla de estilo se genera automáticamente a partir de un archivo de entrada XML." +#: ../../contributing/issues-features.rst:39 +msgid "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be." +msgstr "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be." + #: ../../contributing/build-vyos.rst:116 msgid "The build process needs to be built on a local file system, building on SMB or NFS shares will result in the container failing to build properly! VirtualBox Drive Share is also not an option as block device operations are not implemented and the drive is always mounted as \"nodev\"" msgstr "El proceso de compilaciĂłn debe crearse en un sistema de archivos local; la compilaciĂłn en recursos compartidos SMB o NFS hará que el contenedor no se compile correctamente. VirtualBox Drive Share tampoco es una opciĂłn, ya que las operaciones de dispositivos de bloque no están implementadas y la unidad siempre se monta como "nodev"" -#: ../../contributing/testing.rst:159 +#: ../../contributing/testing.rst:162 msgid "The configurations are all derived from production systems and can not only act as a testcase but also as reference if one wants to enable a certain feature. The configurations can be found here: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" msgstr "Todas las configuraciones se derivan de los sistemas de producciĂłn y no solo pueden actuar como un caso de prueba, sino tambiĂ©n como referencia si se desea habilitar una caracterĂstica determinada. Las configuraciones se pueden encontrar aquĂ: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" @@ -1161,7 +1237,7 @@ msgstr "El procesador de plantillas predeterminado para el cĂłdigo VyOS es Jinja msgid "The easiest way to compile your package is with the above mentioned :ref:`build_docker` container, it includes all required dependencies for all VyOS related packages." msgstr "La forma más fácil de compilar su paquete es con el contenedor :ref:`build_docker` mencionado anteriormente, que incluye todas las dependencias requeridas para todos los paquetes relacionados con VyOS." -#: ../../contributing/testing.rst:164 +#: ../../contributing/testing.rst:167 msgid "The entire test is controlled by the main wrapper script ``/usr/bin/vyos-configtest`` which behaves in the same way as the main smoketest script. It scans the folder for potential configuration files and issues a ``load`` command one after another." msgstr "Toda la prueba está controlada por la secuencia de comandos contenedora principal ``/usr/bin/vyos-configtest`` que se comporta de la misma manera que la secuencia de comandos principal de smoketest. Escanea la carpeta en busca de posibles archivos de configuraciĂłn y emite un comando de ``cargar`` uno tras otro." @@ -1201,7 +1277,7 @@ msgstr "Las razones más obvias podrĂan ser:" msgid "The original repo is at https://github.com/dmbaturin/hvinfo" msgstr "El repositorio original está en https://github.com/dmbaturin/hvinfo" -#: ../../contributing/testing.rst:154 +#: ../../contributing/testing.rst:157 msgid "The other part of our tests are called \"config load tests\". The config load tests will load - one after another - arbitrary configuration files to test if the configuration migration scripts work as designed and that a given set of functionality still can be loaded with a fresh VyOS ISO image." msgstr "La otra parte de nuestras pruebas se llama "pruebas de carga de configuraciĂłn". Las pruebas de carga de configuraciĂłn cargarán, uno tras otro, archivos de configuraciĂłn arbitrarios para probar si los scripts de migraciĂłn de configuraciĂłn funcionan segĂşn lo diseñado y si un conjunto determinado de funcionalidad aĂşn se puede cargar con una nueva imagen ISO de VyOS." @@ -1265,6 +1341,10 @@ msgstr "Hay extensiones para, por ejemplo, VIM (xmllint) que le ayudarán a obte msgid "There are two flags available to aid in debugging configuration scripts. Since configuration loading issues will manifest during boot, the flags are passed as kernel boot parameters." msgstr "Hay dos banderas disponibles para ayudar en la depuraciĂłn de scripts de configuraciĂłn. Dado que los problemas de carga de la configuraciĂłn se manifestarán durante el arranque, los indicadores se pasan como parámetros de arranque del kernel." +#: ../../contributing/issues-features.rst:110 +msgid "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"." +msgstr "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"." + #: ../../contributing/build-vyos.rst:297 msgid "This ISO can be customized with the following list of configure options. The full and current list can be generated with ``./build-vyos-image --help``:" msgstr "Esta ISO se puede personalizar con la siguiente lista de opciones de configuraciĂłn. La lista completa y actual se puede generar con ``./build-vyos-image --help``:" @@ -1281,6 +1361,10 @@ msgstr "Este capĂtulo enumera esas excepciones y le brinda una breve descripciĂ msgid "This is done by utilizing the ``systemd-bootchart`` package which is now installed by default on the VyOS 1.3 (equuleus) branch. The configuration is also versioned so we get comparable results. ``systemd-bootchart`` is configured using this file: bootchart.conf_" msgstr "Esto se hace utilizando el paquete ``systemd-bootchart`` que ahora está instalado de forma predeterminada en la rama VyOS 1.3 (equuleus). La configuraciĂłn tambiĂ©n está versionada, por lo que obtenemos resultados comparables. ``systemd-bootchart`` se configura usando este archivo: bootchart.conf_" +#: ../../contributing/issues-features.rst:122 +msgid "This is what will happen when a task is set to \"Needs reporter action\":" +msgstr "This is what will happen when a task is set to \"Needs reporter action\":" + #: ../../contributing/development.rst:132 msgid "This means the file in question (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) is located in the ``vyatta-webproxy`` package which can be found here: https://github.com/vyos/vyatta-webproxy" msgstr "Esto significa que el archivo en cuestiĂłn (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) se encuentra en el paquete ``vyatta-webproxy`` que se puede encontrar aquĂ: https://github. com/vyos/vyatta-webproxy" @@ -1305,11 +1389,11 @@ msgstr "This will guide you through the process of building a VyOS ISO using Doc msgid "This will guide you through the process of building a VyOS ISO using Docker_. This process has been tested on clean installs of Debian Jessie, Stretch, and Buster." msgstr "Esto lo guiará a travĂ©s del proceso de creaciĂłn de una imagen ISO de VyOS con Docker_. Este proceso ha sido probado en instalaciones limpias de Debian Jessie, Stretch y Buster." -#: ../../contributing/testing.rst:148 +#: ../../contributing/testing.rst:151 msgid "This will limit the `bond` interface test to only make use of `eth1` and `eth2` as member ports." msgstr "Esto limitará la prueba de interfaz `bond` para usar solo `eth1` y `eth2` como puertos miembro." -#: ../../contributing/testing.rst:98 +#: ../../contributing/testing.rst:101 msgid "Those common tests consists out of:" msgstr "Esas pruebas comunes consisten en:" @@ -1353,6 +1437,10 @@ msgstr "Para habilitar la representaciĂłn gráfica del tiempo de arranque, cambi msgid "To enable debugging just run: ``$ touch /tmp/vyos.frr.debug``" msgstr "Para habilitar la depuraciĂłn simplemente ejecute: ``$ touch /tmp/vyos.frr.debug``" +#: ../../contributing/testing.rst:60 +msgid "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``." +msgstr "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``." + #: ../../contributing/development.rst:547 msgid "To ensure uniform look and feel, and improve readability, we should follow a set of guidelines consistently." msgstr "Para garantizar una apariencia uniforme y mejorar la legibilidad, debemos seguir un conjunto de pautas de manera constante." @@ -1413,7 +1501,7 @@ msgstr "Los comandos Ăştiles son:" msgid "VIF (incl. VIF-S/VIF-C)" msgstr "VIF (incl. VIF-S/VIF-C)" -#: ../../contributing/testing.rst:106 +#: ../../contributing/testing.rst:109 msgid "VLANs (QinQ and regular 802.1q)" msgstr "VLAN (QinQ y 802.1q regular)" @@ -1457,6 +1545,10 @@ msgstr "VyOS utiliza Jenkins_ como nuestro servicio de integraciĂłn continua (CI msgid "We again make use of a helper script and some patches to make the build work. Just run the following command:" msgstr "Nuevamente hacemos uso de un script de ayuda y algunos parches para que la compilaciĂłn funcione. Simplemente ejecute el siguiente comando:" +#: ../../contributing/issues-features.rst:114 +msgid "We assign that status to:" +msgstr "We assign that status to:" + #: ../../contributing/testing.rst:25 msgid "We differentiate in two independent tests, which are both run in parallel by two separate QEmu instances which are launched via ``make test`` and ``make testc`` from within the vyos-build_ repository." msgstr "Nos diferenciamos en dos pruebas independientes, ambas ejecutadas en paralelo por dos instancias QEmu separadas que se inician a travĂ©s de ``make test`` y ``make testc`` desde el repositorio vyos-build_." @@ -1473,6 +1565,10 @@ msgstr "Ahora necesitamos montar algunos sistemas de archivos volátiles requeri msgid "We only accept bugfixes in packages other than https://github.com/vyos/vyos-1x as no new functionality should use the old style templates (``node.def`` and Perl/BASH code. Use the new style XML/Python interface instead." msgstr "Solo aceptamos correcciones de errores en paquetes que no sean https://github.com/vyos/vyos-1x, ya que ninguna funcionalidad nueva debe usar las plantillas de estilo antiguo (``node.def`` y el cĂłdigo Perl/BASH. Use el nuevo estilo XML /Python en su lugar." +#: ../../contributing/issues-features.rst:128 +msgid "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!" +msgstr "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!" + #: ../../contributing/development.rst:87 msgid "What/why/how something has been changed, makes everyone's life easier when working with `git bisect`" msgstr "QuĂ©/por quĂ©/cĂłmo se ha cambiado algo hace que la vida de todos sea más fácil cuando se trabaja con `git bisect`" @@ -1517,7 +1613,7 @@ msgstr "Cuando pueda verificar que en realidad se trata de un error, dedique alg msgid "When you are working on interface configuration and you also wan't to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." msgstr "Cuando está trabajando en la configuraciĂłn de la interfaz y tampoco quiere probar si las pruebas de humo pasan, normalmente perderĂa la conexiĂłn SSH remota a su :abbr:`DUT (Dispositivo bajo prueba)`. Para manejar este problema, algunas de las pruebas basadas en interfaz se pueden llamar con una variable de entorno de antemano para limitar la cantidad de interfaces utilizadas en la prueba. De forma predeterminada, se utilizan todas las interfaces, por ejemplo, todas las interfaces Ethernet." -#: ../../contributing/testing.rst:109 +#: ../../contributing/testing.rst:112 msgid "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." msgstr "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." @@ -1529,7 +1625,7 @@ msgstr "Cuando crea que ha encontrado un error, siempre es una buena idea verifi msgid "When you wish to have a developer fix a bug that you found, helping them reproduce the issue is beneficial to everyone. Be sure to include information about the hardware you are using, commands that you were running, any other activities that you may have been doing at the time. This additional information can be very useful." msgstr "Cuando desea que un desarrollador corrija un error que encontrĂł, ayudarlos a reproducir el problema es beneficioso para todos. AsegĂşrese de incluir informaciĂłn sobre el hardware que está utilizando, los comandos que estaba ejecutando y cualquier otra actividad que haya estado realizando en ese momento. Esta informaciĂłn adicional puede ser muy Ăştil." -#: ../../contributing/issues-features.rst:62 +#: ../../contributing/issues-features.rst:66 msgid "Which version of VyOS are you using? ``run show version``" msgstr "ÂżQuĂ© versiĂłn de VyOS estás usando? ``ejecutar versiĂłn show``" @@ -1574,6 +1670,10 @@ msgstr "Puede escribir ``ayuda`` para obtener una descripciĂłn general de los co msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." msgstr "ÂżTiene una idea de cĂłmo mejorar VyOS o necesita una funciĂłn especĂfica de la que se beneficiarĂan todos los usuarios de VyOS? Para enviar una solicitud de funciĂłn, busque Phabricator_ si ya hay una solicitud pendiente. Puede mejorarlo o, si no encuentra uno, crear uno nuevo usando el enlace rápido en el lado izquierdo debajo del proyecto especĂfico." +#: ../../contributing/issues-features.rst:74 +msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." +msgstr "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." + #: ../../contributing/build-vyos.rst:470 msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers" msgstr "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers" @@ -1582,10 +1682,23 @@ msgstr "You have your own custom kernel `*.deb` packages in the `packages` folde msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, WireGuard, Intel QAT, Intel NIC" msgstr "Tiene sus propios paquetes `*.deb` de kernel personalizados en la carpeta `packages` pero olvidĂł crear todos los mĂłdulos fuera del árbol necesarios como Accel-PPP, WireGuard, Intel QAT, Intel NIC" +#: ../../contributing/issues-features.rst:80 +msgid "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there." +msgstr "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there." + +#: ../../contributing/issues-features.rst:84 +msgid "You must include at least the following:" +msgstr "You must include at least the following:" + #: ../../contributing/debugging.rst:166 msgid "You shoudl now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." msgstr "Ahora deberĂa ver un seguimiento de Python que nos ayudará a manejar el problema, adjĂşntelo a la tarea Phabricator_." +#: ../../contributing/issues-features.rst:31 +#: ../../contributing/issues-features.rst:94 +msgid "You should include the following information:" +msgstr "You should include the following information:" + #: ../../contributing/debugging.rst:166 msgid "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." msgstr "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." @@ -1598,7 +1711,7 @@ msgstr "Luego puede continuar con la clonaciĂłn de su bifurcaciĂłn o agregar un msgid "Your configuration script or operation mode script which is also written in Python3 should have a line break on 80 characters. This seems to be a bit odd nowadays but as some people also work remotely or program using vi(m) this is a fair good standard which I hope we can rely on." msgstr "Su secuencia de comandos de configuraciĂłn o secuencia de comandos de modo de operaciĂłn, que tambiĂ©n está escrita en Python3, debe tener un salto de lĂnea de 80 caracteres. Esto parece un poco extraño hoy en dĂa, pero como algunas personas tambiĂ©n trabajan de forma remota o programan usando vi(m), este es un buen estándar en el que espero podamos confiar." -#: ../../contributing/testing.rst:107 +#: ../../contributing/testing.rst:110 msgid "..." msgstr "..." diff --git a/docs/_locale/es/documentation.pot b/docs/_locale/es/documentation.pot index 5f3845c2..e4c20974 100644 --- a/docs/_locale/es/documentation.pot +++ b/docs/_locale/es/documentation.pot @@ -177,6 +177,10 @@ msgid "If there some troubleshooting guides related to the commands. Explain it msgstr "Si hay algunas guĂas de soluciĂłn de problemas relacionadas con los comandos. ExplĂcalo en la siguiente parte opcional." #: ../../documentation.rst:448 +msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``" +msgstr "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``" + +#: ../../documentation.rst:448 msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin master``" msgstr "Si tambiĂ©n desea actualizar su bifurcaciĂłn en GitHub, use lo siguiente: ``$ git push origin master``" diff --git a/docs/_locale/ja/LC_MESSAGES/cli.mo b/docs/_locale/ja/LC_MESSAGES/cli.mo Binary files differindex 13bdb5b1..2f10af5f 100644 --- a/docs/_locale/ja/LC_MESSAGES/cli.mo +++ b/docs/_locale/ja/LC_MESSAGES/cli.mo diff --git a/docs/_locale/ja/LC_MESSAGES/configuration.mo b/docs/_locale/ja/LC_MESSAGES/configuration.mo Binary files differindex cc731ee9..04847737 100644 --- a/docs/_locale/ja/LC_MESSAGES/configuration.mo +++ b/docs/_locale/ja/LC_MESSAGES/configuration.mo diff --git a/docs/_locale/ja/LC_MESSAGES/contributing.mo b/docs/_locale/ja/LC_MESSAGES/contributing.mo Binary files differindex eda663e7..341fabc9 100644 --- a/docs/_locale/ja/LC_MESSAGES/contributing.mo +++ b/docs/_locale/ja/LC_MESSAGES/contributing.mo diff --git a/docs/_locale/ja/LC_MESSAGES/documentation.mo b/docs/_locale/ja/LC_MESSAGES/documentation.mo Binary files differindex 0379e81a..e4e815cd 100644 --- a/docs/_locale/ja/LC_MESSAGES/documentation.mo +++ b/docs/_locale/ja/LC_MESSAGES/documentation.mo diff --git a/docs/_locale/ja/cli.pot b/docs/_locale/ja/cli.pot index 5c4bfdac..66a82fac 100644 --- a/docs/_locale/ja/cli.pot +++ b/docs/_locale/ja/cli.pot @@ -28,23 +28,23 @@ msgstr "**Working configuration** is the one that is currently being modified in msgid "A VyOS system has three major types of configurations:" msgstr "A VyOS system has three major types of configurations:" -#: ../../cli.rst:576 +#: ../../cli.rst:579 msgid "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit." msgstr "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit." -#: ../../cli.rst:690 +#: ../../cli.rst:693 msgid "Access opmode from config mode" msgstr "Access opmode from config mode" -#: ../../cli.rst:697 +#: ../../cli.rst:700 msgid "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode." msgstr "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode." -#: ../../cli.rst:651 +#: ../../cli.rst:654 msgid "Add comment as an annotation to a configuration node." msgstr "Add comment as an annotation to a configuration node." -#: ../../cli.rst:539 +#: ../../cli.rst:542 msgid "All changes in the working config will thus be lost." msgstr "All changes in the working config will thus be lost." @@ -52,7 +52,7 @@ msgstr "All changes in the working config will thus be lost." msgid "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them." msgstr "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them." -#: ../../cli.rst:676 +#: ../../cli.rst:679 msgid "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show <section>`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment." msgstr "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show <section>`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment." @@ -72,11 +72,11 @@ msgstr "By default, the configuration is displayed in a hierarchy like the above msgid "Command Line Interface" msgstr "Command Line Interface" -#: ../../cli.rst:701 +#: ../../cli.rst:704 msgid "Command completion and syntax help with ``?`` and ``[tab]`` will also work." msgstr "Command completion and syntax help with ``?`` and ``[tab]`` will also work." -#: ../../cli.rst:754 +#: ../../cli.rst:757 msgid "Compare configurations" msgstr "Compare configurations" @@ -92,11 +92,11 @@ msgstr "Configuration Overview" msgid "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered." msgstr "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered." -#: ../../cli.rst:535 +#: ../../cli.rst:538 msgid "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used." msgstr "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used." -#: ../../cli.rst:583 +#: ../../cli.rst:586 msgid "Copy a configuration element." msgstr "Copy a configuration element." @@ -104,7 +104,7 @@ msgstr "Copy a configuration element." msgid "Editing the configuration" msgstr "Editing the configuration" -#: ../../cli.rst:662 +#: ../../cli.rst:665 msgid "Example:" msgstr "Example:" @@ -124,11 +124,11 @@ msgstr "For example typing ``sh`` followed by the ``TAB`` key will complete to ` msgid "Get a collection of all the set commands required which led to the running configuration." msgstr "Get a collection of all the set commands required which led to the running configuration." -#: ../../cli.rst:933 +#: ../../cli.rst:936 msgid "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config." msgstr "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config." -#: ../../cli.rst:919 +#: ../../cli.rst:922 msgid "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:" msgstr "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:" @@ -140,15 +140,15 @@ msgstr "It is also possible to display all :cfgcmd:`set` commands within configu msgid "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`" msgstr "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`" -#: ../../cli.rst:723 +#: ../../cli.rst:726 msgid "Local Archive" msgstr "Local Archive" -#: ../../cli.rst:714 +#: ../../cli.rst:717 msgid "Managing configurations" msgstr "Managing configurations" -#: ../../cli.rst:627 +#: ../../cli.rst:630 msgid "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters." msgstr "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters." @@ -164,31 +164,31 @@ msgstr "Operational mode allows for commands to perform operational system tasks msgid "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``." msgstr "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``." -#: ../../cli.rst:850 +#: ../../cli.rst:853 msgid "Remote Archive" msgstr "Remote Archive" -#: ../../cli.rst:616 +#: ../../cli.rst:619 msgid "Rename a configuration element." msgstr "Rename a configuration element." -#: ../../cli.rst:917 +#: ../../cli.rst:920 msgid "Restore Default" msgstr "Restore Default" -#: ../../cli.rst:725 +#: ../../cli.rst:728 msgid "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong." msgstr "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong." -#: ../../cli.rst:828 +#: ../../cli.rst:831 msgid "Rollback Changes" msgstr "Rollback Changes" -#: ../../cli.rst:835 +#: ../../cli.rst:838 msgid "Rollback to revision N (currently requires reboot)" msgstr "Rollback to revision N (currently requires reboot)" -#: ../../cli.rst:884 +#: ../../cli.rst:887 msgid "Saving and loading manually" msgstr "Saving and loading manually" @@ -200,11 +200,11 @@ msgstr "See the configuration section of this document for more information on c msgid "Seeing and navigating the configuration" msgstr "Seeing and navigating the configuration" -#: ../../cli.rst:810 +#: ../../cli.rst:813 msgid "Show commit revision difference." msgstr "Show commit revision difference." -#: ../../cli.rst:861 +#: ../../cli.rst:864 msgid "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`" msgstr "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`" @@ -228,15 +228,15 @@ msgstr "The :cfgcmd:`show` command within configuration mode will show the worki msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes." msgstr "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes." -#: ../../cli.rst:653 +#: ../../cli.rst:656 msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes." msgstr "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes." -#: ../../cli.rst:784 +#: ../../cli.rst:787 msgid "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M." msgstr "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M." -#: ../../cli.rst:813 +#: ../../cli.rst:816 msgid "The command above also lets you see the difference between two commits. By default the difference with the running config is shown." msgstr "The command above also lets you see the difference between two commits. By default the difference with the running config is shown." @@ -252,11 +252,11 @@ msgstr "The configuration can be edited by the use of :cfgcmd:`set` and :cfgcmd: msgid "The current hierarchy level can be changed by the :cfgcmd:`edit` command." msgstr "The current hierarchy level can be changed by the :cfgcmd:`edit` command." -#: ../../cli.rst:872 +#: ../../cli.rst:875 msgid "The number of revisions don't affect the commit-archive." msgstr "The number of revisions don't affect the commit-archive." -#: ../../cli.rst:930 +#: ../../cli.rst:933 msgid "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too." msgstr "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too." @@ -268,7 +268,7 @@ msgstr "These commands are also relative to the level you are inside and only re msgid "These two commands above are essentially the same, just executed from different levels in the hierarchy." msgstr "These two commands above are essentially the same, just executed from different levels in the hierarchy." -#: ../../cli.rst:824 +#: ../../cli.rst:827 msgid "This means four commits ago we did ``set system ipv6 disable-forwarding``." msgstr "This means four commits ago we did ``set system ipv6 disable-forwarding``." @@ -280,7 +280,7 @@ msgstr "To delete a configuration entry use the :cfgcmd:`delete` command, this a msgid "To enter configuration mode use the ``configure`` command:" msgstr "To enter configuration mode use the ``configure`` command:" -#: ../../cli.rst:658 +#: ../../cli.rst:661 msgid "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text." msgstr "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text." @@ -288,11 +288,11 @@ msgstr "To remove an existing comment from your current configuration, specify a msgid "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_." msgstr "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_." -#: ../../cli.rst:895 +#: ../../cli.rst:898 msgid "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address." msgstr "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address." -#: ../../cli.rst:508 +#: ../../cli.rst:511 msgid "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address." msgstr "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address." @@ -300,15 +300,15 @@ msgstr "Use this command to preserve configuration changes upon reboot. By defau msgid "Use this command to set the value of a parameter or to create a new element." msgstr "Use this command to set the value of a parameter or to create a new element." -#: ../../cli.rst:760 +#: ../../cli.rst:763 msgid "Use this command to spot what the differences are between different configurations." msgstr "Use this command to spot what the differences are between different configurations." -#: ../../cli.rst:552 +#: ../../cli.rst:555 msgid "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes." msgstr "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes." -#: ../../cli.rst:730 +#: ../../cli.rst:733 msgid "View all existing revisions on the local system." msgstr "View all existing revisions on the local system." @@ -324,7 +324,7 @@ msgstr "View the current active configuration in JSON format." msgid "View the current active configuration in readable JSON format." msgstr "View the current active configuration in readable JSON format." -#: ../../cli.rst:852 +#: ../../cli.rst:855 msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." msgstr "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." @@ -332,11 +332,11 @@ msgstr "VyOS can upload the configuration to a remote location after each call t msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." msgstr "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." -#: ../../cli.rst:716 +#: ../../cli.rst:719 msgid "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons." msgstr "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons." -#: ../../cli.rst:756 +#: ../../cli.rst:759 msgid "VyOS lets you compare different configurations." msgstr "VyOS lets you compare different configurations." @@ -348,7 +348,7 @@ msgstr "VyOS makes use of a unified configuration file for the entire system's c msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." msgstr "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." -#: ../../cli.rst:558 +#: ../../cli.rst:561 msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." msgstr "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." @@ -360,7 +360,7 @@ msgstr "When entering the configuration mode you are navigating inside a tree st msgid "When going into configuration mode, prompt changes from ``$`` to ``#``." msgstr "When going into configuration mode, prompt changes from ``$`` to ``#``." -#: ../../cli.rst:692 +#: ../../cli.rst:695 msgid "When inside configuration mode you are not directly able to execute operational commands." msgstr "When inside configuration mode you are not directly able to execute operational commands." @@ -368,7 +368,7 @@ msgstr "When inside configuration mode you are not directly able to execute oper msgid "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt." msgstr "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt." -#: ../../cli.rst:889 +#: ../../cli.rst:892 msgid "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:" msgstr "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:" @@ -384,15 +384,15 @@ msgstr "You are now in a sublevel relative to ``interfaces ethernet eth0``, all msgid "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." msgstr "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." -#: ../../cli.rst:618 +#: ../../cli.rst:621 msgid "You can also rename config subtrees:" msgstr "You can also rename config subtrees:" -#: ../../cli.rst:585 +#: ../../cli.rst:588 msgid "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20." msgstr "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20." -#: ../../cli.rst:830 +#: ../../cli.rst:833 msgid "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot." msgstr "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot." @@ -400,19 +400,23 @@ msgstr "You can rollback configuration changes using the rollback command. This msgid "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``." msgstr "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``." -#: ../../cli.rst:747 +#: ../../cli.rst:504 +msgid "You can specify a commit message with :cfgcmd:`commit comment <message>`." +msgstr "You can specify a commit message with :cfgcmd:`commit comment <message>`." + +#: ../../cli.rst:750 msgid "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally." msgstr "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally." -#: ../../cli.rst:886 +#: ../../cli.rst:889 msgid "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files." msgstr "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files." -#: ../../cli.rst:874 +#: ../../cli.rst:877 msgid "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:" msgstr "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:" -#: ../../cli.rst:927 +#: ../../cli.rst:930 msgid "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active." msgstr "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active." @@ -420,19 +424,19 @@ msgstr "You will be asked if you want to continue. If you accept, you will have msgid "``b`` will scroll back one page" msgstr "``b`` will scroll back one page" -#: ../../cli.rst:866 +#: ../../cli.rst:869 msgid "``ftp://<user>:<passwd>@<host>/<dir>``" msgstr "``ftp://<user>:<passwd>@<host>/<dir>``" -#: ../../cli.rst:870 +#: ../../cli.rst:873 msgid "``git+https://<user>:<passwd>@<host>/<path>``" msgstr "``git+https://<user>:<passwd>@<host>/<path>``" -#: ../../cli.rst:864 +#: ../../cli.rst:867 msgid "``http://<user>:<passwd>@<host>:/<dir>``" msgstr "``http://<user>:<passwd>@<host>:/<dir>``" -#: ../../cli.rst:865 +#: ../../cli.rst:868 msgid "``https://<user>:<passwd>@<host>:/<dir>``" msgstr "``https://<user>:<passwd>@<host>:/<dir>``" @@ -448,11 +452,11 @@ msgstr "``q`` key can be used to cancel output" msgid "``return`` will scroll down one line" msgstr "``return`` will scroll down one line" -#: ../../cli.rst:868 +#: ../../cli.rst:871 msgid "``scp://<user>:<passwd>@<host>:/<dir>``" msgstr "``scp://<user>:<passwd>@<host>:/<dir>``" -#: ../../cli.rst:867 +#: ../../cli.rst:870 msgid "``sftp://<user>:<passwd>@<host>/<dir>``" msgstr "``sftp://<user>:<passwd>@<host>/<dir>``" @@ -460,7 +464,7 @@ msgstr "``sftp://<user>:<passwd>@<host>/<dir>``" msgid "``space`` will scroll down one page" msgstr "``space`` will scroll down one page" -#: ../../cli.rst:869 +#: ../../cli.rst:872 msgid "``tftp://<host>/<dir>``" msgstr "``tftp://<host>/<dir>``" diff --git a/docs/_locale/ja/configuration.pot b/docs/_locale/ja/configuration.pot index 9341a397..3518562b 100644 --- a/docs/_locale/ja/configuration.pot +++ b/docs/_locale/ja/configuration.pot @@ -89,7 +89,7 @@ msgid "**Already-selected external check**" msgstr "**Already-selected external check**" #: ../../configuration/trafficpolicy/index.rst:547 -#: ../../configuration/trafficpolicy/index.rst:1181 +#: ../../configuration/trafficpolicy/index.rst:1249 msgid "**Applies to:** Inbound traffic." msgstr "**Applies to:** Inbound traffic." @@ -105,6 +105,7 @@ msgstr "**Applies to:** Outbound Traffic." #: ../../configuration/trafficpolicy/index.rst:916 #: ../../configuration/trafficpolicy/index.rst:961 #: ../../configuration/trafficpolicy/index.rst:1020 +#: ../../configuration/trafficpolicy/index.rst:1154 msgid "**Applies to:** Outbound traffic." msgstr "**Applies to:** Outbound traffic." @@ -437,6 +438,10 @@ msgstr "**Queueing discipline** Fair/Flow Queue CoDel." msgid "**Queueing discipline:** Deficit Round Robin." msgstr "**Queueing discipline:** Deficit Round Robin." +#: ../../configuration/trafficpolicy/index.rst:1153 +msgid "**Queueing discipline:** Deficit mode." +msgstr "**Queueing discipline:** Deficit mode." + #: ../../configuration/trafficpolicy/index.rst:766 msgid "**Queueing discipline:** Generalized Random Early Drop." msgstr "**Queueing discipline:** Generalized Random Early Drop." @@ -580,6 +585,10 @@ msgstr "**VyOS Router:**" msgid "**Weight check**" msgstr "**Weight check**" +#: ../../configuration/trafficpolicy/index.rst:1208 +msgid "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." +msgstr "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." + #: ../../_include/interface-dhcp-options.txt:74 msgid "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" msgstr "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" @@ -1511,7 +1520,7 @@ msgstr "ACME" msgid "ACME Directory Resource URI." msgstr "ACME Directory Resource URI." -#: ../../configuration/service/https.rst:59 +#: ../../configuration/service/https.rst:63 msgid "API" msgstr "API" @@ -1964,7 +1973,7 @@ msgstr "Add the public CA certificate for the CA named `name` to the VyOS CLI." msgid "Adding a 2FA with an OTP-key" msgstr "Adding a 2FA with an OTP-key" -#: ../../configuration/loadbalancing/reverse-proxy.rst:263 +#: ../../configuration/loadbalancing/reverse-proxy.rst:301 msgid "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." msgstr "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." @@ -2180,6 +2189,10 @@ msgstr "Allow access to sites in a domain without retrieving them from the Proxy msgid "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." msgstr "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." +#: ../../configuration/service/https.rst:81 +msgid "Allow cross-origin requests from `<origin>`." +msgstr "Allow cross-origin requests from `<origin>`." + #: ../../configuration/service/dns.rst:456 msgid "Allow explicit IPv6 address for the interface." msgstr "Allow explicit IPv6 address for the interface." @@ -2431,7 +2444,7 @@ msgstr "Applying a Rule-Set to a Zone" msgid "Applying a Rule-Set to an Interface" msgstr "Applying a Rule-Set to an Interface" -#: ../../configuration/trafficpolicy/index.rst:1150 +#: ../../configuration/trafficpolicy/index.rst:1218 msgid "Applying a traffic policy" msgstr "Applying a traffic policy" @@ -2691,7 +2704,7 @@ msgstr "Authentication" msgid "Authentication Advanced Options" msgstr "Authentication Advanced Options" -#: ../../configuration/interfaces/ethernet.rst:99 +#: ../../configuration/interfaces/ethernet.rst:115 msgid "Authentication (EAPoL)" msgstr "Authentication (EAPoL)" @@ -2851,7 +2864,7 @@ msgstr "Babel is a modern routing protocol designed to be robust and efficient b msgid "Backend" msgstr "Backend" -#: ../../configuration/loadbalancing/reverse-proxy.rst:299 +#: ../../configuration/loadbalancing/reverse-proxy.rst:339 msgid "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." msgstr "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." @@ -2863,10 +2876,14 @@ msgstr "Balance algorithms:" msgid "Balancing Rules" msgstr "Balancing Rules" -#: ../../configuration/loadbalancing/reverse-proxy.rst:214 +#: ../../configuration/loadbalancing/reverse-proxy.rst:252 msgid "Balancing based on domain name" msgstr "Balancing based on domain name" +#: ../../configuration/loadbalancing/reverse-proxy.rst:365 +msgid "Balancing with HTTP health checks" +msgstr "Balancing with HTTP health checks" + #: ../../configuration/service/pppoe-server.rst:251 msgid "Bandwidth Shaping" msgstr "Bandwidth Shaping" @@ -2936,7 +2953,7 @@ msgstr "Because an aggregator cannot be active without at least one available li msgid "Because existing sessions do not automatically fail over to a new path, the session table can be flushed on each connection state change:" msgstr "Because existing sessions do not automatically fail over to a new path, the session table can be flushed on each connection state change:" -#: ../../configuration/interfaces/ethernet.rst:70 +#: ../../configuration/interfaces/ethernet.rst:86 msgid "Before enabling any hardware segmentation offload a corresponding software offload is required in GSO. Otherwise it becomes possible for a frame to be re-routed between devices and end up being unable to be transmitted." msgstr "Before enabling any hardware segmentation offload a corresponding software offload is required in GSO. Otherwise it becomes possible for a frame to be re-routed between devices and end up being unable to be transmitted." @@ -3155,6 +3172,10 @@ msgstr "By using Pseudo-Ethernet interfaces there will be less system overhead c msgid "Bypassing the webproxy" msgstr "Bypassing the webproxy" +#: ../../configuration/trafficpolicy/index.rst:1151 +msgid "CAKE" +msgstr "CAKE" + #: ../../configuration/pki/index.rst:172 msgid "CA (Certificate Authority)" msgstr "CA (Certificate Authority)" @@ -3797,10 +3818,14 @@ msgstr "Configure protocol used for communication to remote syslog host. This ca msgid "Configure proxy port if it does not listen to the default port 80." msgstr "Configure proxy port if it does not listen to the default port 80." -#: ../../configuration/loadbalancing/reverse-proxy.rst:149 +#: ../../configuration/loadbalancing/reverse-proxy.rst:150 msgid "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>" msgstr "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>" +#: ../../configuration/loadbalancing/reverse-proxy.rst:155 +msgid "Configure requests to the backend server to use SSL encryption without validating server certificate" +msgstr "Configure requests to the backend server to use SSL encryption without validating server certificate" + #: ../../configuration/system/sflow.rst:16 msgid "Configure sFlow agent IPv4 or IPv6 address" msgstr "Configure sFlow agent IPv4 or IPv6 address" @@ -3853,7 +3878,7 @@ msgstr "Configure the discrete port under which the RADIUS server can be reached msgid "Configure the discrete port under which the TACACS server can be reached." msgstr "Configure the discrete port under which the TACACS server can be reached." -#: ../../configuration/loadbalancing/reverse-proxy.rst:175 +#: ../../configuration/loadbalancing/reverse-proxy.rst:212 msgid "Configure the load-balancing reverse-proxy service for HTTP." msgstr "Configure the load-balancing reverse-proxy service for HTTP." @@ -4053,6 +4078,10 @@ msgstr "Create `<user>` for local authentication on this system. The users passw msgid "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet." msgstr "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet." +#: ../../configuration/pki/index.rst:373 +msgid "Create a CA chain and leaf certificates" +msgstr "Create a CA chain and leaf certificates" + #: ../../configuration/interfaces/bridge.rst:199 msgid "Create a basic bridge" msgstr "Create a basic bridge" @@ -4636,6 +4665,10 @@ msgstr "Defines the maximum `<number>` of unanswered echo requests. Upon reachin msgid "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**." msgstr "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**." +#: ../../configuration/trafficpolicy/index.rst:1213 +msgid "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100." +msgstr "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100." + #: ../../configuration/system/console.rst:21 msgid "Defines the specified device as a system console. Available console devices can be (see completion helper):" msgstr "Defines the specified device as a system console. Available console devices can be (see completion helper):" @@ -4856,6 +4889,10 @@ msgstr "Disabled by default - no kernel module loaded." msgid "Disables caching of peer information from forwarded NHRP Resolution Reply packets. This can be used to reduce memory consumption on big NBMA subnets." msgstr "Disables caching of peer information from forwarded NHRP Resolution Reply packets. This can be used to reduce memory consumption on big NBMA subnets." +#: ../../configuration/trafficpolicy/index.rst:1173 +msgid "Disables flow isolation, all traffic passes through a single queue." +msgstr "Disables flow isolation, all traffic passes through a single queue." + #: ../../configuration/protocols/static.rst:99 msgid "Disables interface-based IPv4 static route." msgstr "Disables interface-based IPv4 static route." @@ -4974,10 +5011,14 @@ msgstr "Do not allow IPv6 nexthop tracking to resolve via the default route. Thi msgid "Do not assign a link-local IPv6 address to this interface." msgstr "Do not assign a link-local IPv6 address to this interface." -#: ../../configuration/trafficpolicy/index.rst:1210 +#: ../../configuration/trafficpolicy/index.rst:1278 msgid "Do not configure IFB as the first step. First create everything else of your traffic-policy, and then you can configure IFB. Otherwise you might get the ``RTNETLINK answer: File exists`` error, which can be solved with ``sudo ip link delete ifb0``." msgstr "Do not configure IFB as the first step. First create everything else of your traffic-policy, and then you can configure IFB. Otherwise you might get the ``RTNETLINK answer: File exists`` error, which can be solved with ``sudo ip link delete ifb0``." +#: ../../configuration/service/https.rst:90 +msgid "Do not leave introspection enabled in production, it is a security risk." +msgstr "Do not leave introspection enabled in production, it is a security risk." + #: ../../configuration/protocols/bgp.rst:609 msgid "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained." msgstr "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained." @@ -5230,6 +5271,10 @@ msgstr "Enable BFD on a single BGP neighbor" msgid "Enable DHCP failover configuration for this address pool." msgstr "Enable DHCP failover configuration for this address pool." +#: ../../configuration/service/https.rst:88 +msgid "Enable GraphQL Schema introspection." +msgstr "Enable GraphQL Schema introspection." + #: ../../configuration/interfaces/wireless.rst:178 msgid "Enable HT-delayed Block Ack ``[DELAYED-BA]``" msgstr "Enable HT-delayed Block Ack ``[DELAYED-BA]``" @@ -5440,6 +5485,10 @@ msgstr "Enabled on-demand PPPoE connections bring up the link only when traffic msgid "Enables Cisco style authentication on NHRP packets. This embeds the secret plaintext password to the outgoing NHRP packets. Incoming NHRP packets on this interface are discarded unless the secret password is present. Maximum length of the secret is 8 characters." msgstr "Enables Cisco style authentication on NHRP packets. This embeds the secret plaintext password to the outgoing NHRP packets. Incoming NHRP packets on this interface are discarded unless the secret password is present. Maximum length of the secret is 8 characters." +#: ../../configuration/loadbalancing/reverse-proxy.rst:166 +msgid "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range." +msgstr "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range." + #: ../../configuration/vrf/index.rst:480 msgid "Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN. If the value specified is auto, the label value is automatically assigned from a pool maintained." msgstr "Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN. If the value specified is auto, the label value is automatically assigned from a pool maintained." @@ -5488,6 +5537,10 @@ msgstr "Enabling this function increases the risk of bandwidth saturation." msgid "Enforce strict path checking" msgstr "Enforce strict path checking" +#: ../../configuration/service/https.rst:77 +msgid "Enforce strict path checking." +msgstr "Enforce strict path checking." + #: ../../configuration/interfaces/bonding.rst:31 msgid "Enslave `<member>` interface to bond `<interface>`." msgstr "Enslave `<member>` interface to bond `<interface>`." @@ -5747,7 +5800,7 @@ msgid "Example: to be appended is set to ``vyos.net`` and the URL received is `` msgstr "Example: to be appended is set to ``vyos.net`` and the URL received is ``www/foo.html``, the system will use the generated, final URL of ``www.vyos.net/foo.html``." #: ../../configuration/container/index.rst:216 -#: ../../configuration/service/https.rst:77 +#: ../../configuration/service/https.rst:110 msgid "Example Configuration" msgstr "Example Configuration" @@ -5789,7 +5842,8 @@ msgstr "Example synproxy" #: ../../configuration/interfaces/bridge.rst:196 #: ../../configuration/interfaces/macsec.rst:153 #: ../../configuration/interfaces/wireless.rst:541 -#: ../../configuration/loadbalancing/reverse-proxy.rst:190 +#: ../../configuration/loadbalancing/reverse-proxy.rst:227 +#: ../../configuration/pki/index.rst:370 #: ../../configuration/policy/index.rst:46 #: ../../configuration/protocols/bgp.rst:1118 #: ../../configuration/protocols/isis.rst:336 @@ -6078,6 +6132,10 @@ msgstr "First, on both routers run the operational command \"generate pki key-pa msgid "First, one of the systems generate the key using the :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki>` command. Once generated, you will need to install this key on the local system, then copy and install this key to the remote router." msgstr "First, one of the systems generate the key using the :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki>` command. Once generated, you will need to install this key on the local system, then copy and install this key to the remote router." +#: ../../configuration/pki/index.rst:393 +msgid "First, we create the root certificate authority." +msgstr "First, we create the root certificate authority." + #: ../../configuration/interfaces/openvpn.rst:176 msgid "First, you need to generate a key by running ``run generate pki openvpn shared-secret install <name>`` from configuration mode. You can use any name, we will use ``s2s``." msgstr "First, you need to generate a key by running ``run generate pki openvpn shared-secret install <name>`` from configuration mode. You can use any name, we will use ``s2s``." @@ -6138,6 +6196,30 @@ msgstr "Flow Export" msgid "Flow and packet-based balancing" msgstr "Flow and packet-based balancing" +#: ../../configuration/trafficpolicy/index.rst:1196 +msgid "Flows are defined by source-destination host pairs." +msgstr "Flows are defined by source-destination host pairs." + +#: ../../configuration/trafficpolicy/index.rst:1181 +msgid "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows." +msgstr "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows." + +#: ../../configuration/trafficpolicy/index.rst:1186 +msgid "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows." +msgstr "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows." + +#: ../../configuration/trafficpolicy/index.rst:1191 +msgid "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)." +msgstr "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)." + +#: ../../configuration/trafficpolicy/index.rst:1177 +msgid "Flows are defined only by destination address." +msgstr "Flows are defined only by destination address." + +#: ../../configuration/trafficpolicy/index.rst:1204 +msgid "Flows are defined only by source address." +msgstr "Flows are defined only by source address." + #: ../../configuration/system/flow-accounting.rst:10 msgid "Flows can be exported via two different protocols: NetFlow (versions 5, 9 and 10/IPFIX) and sFlow. Additionally, you may save flows to an in-memory table internally in a router." msgstr "Flows can be exported via two different protocols: NetFlow (versions 5, 9 and 10/IPFIX) and sFlow. Additionally, you may save flows to an in-memory table internally in a router." @@ -6341,7 +6423,7 @@ msgstr "For the :ref:`destination-nat66` rule, the destination address of the pa msgid "For the average user a serial console has no advantage over a console offered by a directly attached keyboard and screen. Serial consoles are much slower, taking up to a second to fill a 80 column by 24 line screen. Serial consoles generally only support non-proportional ASCII text, with limited support for languages other than English." msgstr "For the average user a serial console has no advantage over a console offered by a directly attached keyboard and screen. Serial consoles are much slower, taking up to a second to fill a 80 column by 24 line screen. Serial consoles generally only support non-proportional ASCII text, with limited support for languages other than English." -#: ../../configuration/trafficpolicy/index.rst:1183 +#: ../../configuration/trafficpolicy/index.rst:1251 msgid "For the ingress traffic of an interface, there is only one policy you can directly apply, a **Limiter** policy. You cannot apply a shaping policy directly to the ingress traffic of any interface because shaping only works for outbound traffic." msgstr "For the ingress traffic of an interface, there is only one policy you can directly apply, a **Limiter** policy. You cannot apply a shaping policy directly to the ingress traffic of any interface because shaping only works for outbound traffic." @@ -6379,6 +6461,10 @@ msgstr "For transit traffic, which is received by the router and forwarded, base msgid "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``" msgstr "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``" +#: ../../configuration/loadbalancing/reverse-proxy.rst:161 +msgid "For web application providing information about their state HTTP health checks can be used to determine their availability." +msgstr "For web application providing information about their state HTTP health checks can be used to determine their availability." + #: ../../configuration/protocols/ospf.rst:350 msgid "Formally, a virtual link looks like a point-to-point network connecting two ABR from one area one of which physically connected to a backbone area. This pseudo-network is considered to belong to a backbone area." msgstr "Formally, a virtual link looks like a point-to-point network connecting two ABR from one area one of which physically connected to a backbone area. This pseudo-network is considered to belong to a backbone area." @@ -6553,7 +6639,7 @@ msgstr "Given the following example we have one VyOS router acting as OpenVPN se msgid "Gloabal" msgstr "Gloabal" -#: ../../configuration/loadbalancing/reverse-proxy.rst:153 +#: ../../configuration/loadbalancing/reverse-proxy.rst:190 msgid "Global" msgstr "Global" @@ -6577,7 +6663,7 @@ msgstr "Global Options Firewall Configuration" msgid "Global options" msgstr "Global options" -#: ../../configuration/loadbalancing/reverse-proxy.rst:155 +#: ../../configuration/loadbalancing/reverse-proxy.rst:192 msgid "Global parameters" msgstr "Global parameters" @@ -6590,6 +6676,10 @@ msgstr "Global settings" msgid "Graceful Restart" msgstr "Graceful Restart" +#: ../../configuration/service/https.rst:84 +msgid "GraphQL" +msgstr "GraphQL" + #: ../../configuration/highavailability/index.rst:236 msgid "Gratuitous ARP" msgstr "Gratuitous ARP" @@ -6627,6 +6717,10 @@ msgstr "HTTP basic authentication username" msgid "HTTP client" msgstr "HTTP client" +#: ../../configuration/loadbalancing/reverse-proxy.rst:160 +msgid "HTTP health check" +msgstr "HTTP health check" + #: ../../configuration/interfaces/wireless.rst:137 msgid "HT (High Throughput) capabilities (802.11n)" msgstr "HT (High Throughput) capabilities (802.11n)" @@ -7859,6 +7953,10 @@ msgstr "In order to separate traffic, Fair Queue uses a classifier based on sour msgid "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands." msgstr "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands." +#: ../../configuration/interfaces/ethernet.rst:111 +msgid "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled." +msgstr "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled." + #: ../../configuration/interfaces/ethernet.rst:95 msgid "In order to use TSO/LRO with VMXNET3 adaters one must also enable the SG offloading option." msgstr "In order to use TSO/LRO with VMXNET3 adaters one must also enable the SG offloading option." @@ -8480,6 +8578,10 @@ msgstr "LNS are often used to connect to a LAC (L2TP Access Concentrator)." msgid "Label Distribution Protocol" msgstr "Label Distribution Protocol" +#: ../../configuration/pki/index.rst:447 +msgid "Lastly, we can create the leaf certificates that devices and users will utilise." +msgstr "Lastly, we can create the leaf certificates that devices and users will utilise." + #: ../../configuration/interfaces/l2tpv3.rst:11 msgid "Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that can be used as an alternative protocol to :ref:`mpls` for encapsulation of multiprotocol Layer 2 communications traffic over IP networks. Like L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier requirements." msgstr "Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that can be used as an alternative protocol to :ref:`mpls` for encapsulation of multiprotocol Layer 2 communications traffic over IP networks. Like L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier requirements." @@ -8520,7 +8622,7 @@ msgstr "Let SNMP daemon listen only on IP address 192.0.2.1" msgid "Lets assume the following topology:" msgstr "Lets assume the following topology:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:193 +#: ../../configuration/loadbalancing/reverse-proxy.rst:230 msgid "Level 4 balancing" msgstr "Level 4 balancing" @@ -8540,7 +8642,7 @@ msgstr "Lifetime is decremented by the number of seconds since the last RA - use msgid "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." msgstr "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." -#: ../../configuration/loadbalancing/reverse-proxy.rst:165 +#: ../../configuration/loadbalancing/reverse-proxy.rst:202 msgid "Limit allowed cipher algorithms used during SSL/TLS handshake" msgstr "Limit allowed cipher algorithms used during SSL/TLS handshake" @@ -8552,7 +8654,7 @@ msgstr "Limit logins to `<limit>` per every ``rate-time`` seconds. Rate limit mu msgid "Limit logins to ``rate-limit`` attemps per every `<seconds>`. Rate time must be between 15 and 600 seconds." msgstr "Limit logins to ``rate-limit`` attemps per every `<seconds>`. Rate time must be between 15 and 600 seconds." -#: ../../configuration/loadbalancing/reverse-proxy.rst:160 +#: ../../configuration/loadbalancing/reverse-proxy.rst:197 msgid "Limit maximum number of connections" msgstr "Limit maximum number of connections" @@ -9339,6 +9441,10 @@ msgid "Multiple VLAN to VNI mappings can be configured against the same SVD. Thi msgstr "Multiple VLAN to VNI mappings can be configured against the same SVD. This allows for a significant scaling of the number of VNIs since a separate VXLAN interface is no longer required for each VNI." #: ../../configuration/system/host-name.rst:68 +msgid "Multiple aliases can be specified per host-name." +msgstr "Multiple aliases can be specified per host-name." + +#: ../../configuration/system/host-name.rst:68 msgid "Multiple aliases can pe specified per host-name." msgstr "Multiple aliases can pe specified per host-name." @@ -9859,7 +9965,7 @@ msgstr "Once a neighbor has been found, the entry is considered to be valid for msgid "Once a route is assessed a penalty, the penalty is decreased by half each time a predefined amount of time elapses (half-life-time). When the accumulated penalties fall below a predefined threshold (reuse-value), the route is unsuppressed and added back into the BGP routing table." msgstr "Once a route is assessed a penalty, the penalty is decreased by half each time a predefined amount of time elapses (half-life-time). When the accumulated penalties fall below a predefined threshold (reuse-value), the route is unsuppressed and added back into the BGP routing table." -#: ../../configuration/trafficpolicy/index.rst:1152 +#: ../../configuration/trafficpolicy/index.rst:1220 msgid "Once a traffic-policy is created, you can apply it to an interface:" msgstr "Once a traffic-policy is created, you can apply it to an interface:" @@ -10039,7 +10145,7 @@ msgstr "Operating Modes" #: ../../configuration/interfaces/bonding.rst:512 #: ../../configuration/interfaces/dummy.rst:51 -#: ../../configuration/interfaces/ethernet.rst:132 +#: ../../configuration/interfaces/ethernet.rst:148 #: ../../configuration/interfaces/loopback.rst:41 #: ../../configuration/interfaces/macsec.rst:106 #: ../../configuration/interfaces/pppoe.rst:278 @@ -10417,6 +10523,10 @@ msgstr "Per default every packet is sampled (that is, the sampling rate is 1)." msgid "Per default the user session is being replaced if a second authentication request succeeds. Such session requests can be either denied or allowed entirely, which would allow multiple sessions for a user in the latter case. If it is denied, the second session is being rejected even if the authentication succeeds, the user has to terminate its first session and can then authentication again." msgstr "Per default the user session is being replaced if a second authentication request succeeds. Such session requests can be either denied or allowed entirely, which would allow multiple sessions for a user in the latter case. If it is denied, the second session is being rejected even if the authentication succeeds, the user has to terminate its first session and can then authentication again." +#: ../../configuration/trafficpolicy/index.rst:1200 +msgid "Perform NAT lookup before applying flow-isolation rules." +msgstr "Perform NAT lookup before applying flow-isolation rules." + #: ../../configuration/system/option.rst:108 msgid "Performance" msgstr "Performance" @@ -10523,7 +10633,7 @@ msgstr "Port Groups" #: ../../configuration/interfaces/bonding.rst:282 #: ../../configuration/interfaces/bridge.rst:188 -#: ../../configuration/interfaces/ethernet.rst:124 +#: ../../configuration/interfaces/ethernet.rst:140 msgid "Port Mirror (SPAN)" msgstr "Port Mirror (SPAN)" @@ -10809,7 +10919,7 @@ msgstr "Publish a port for the container." msgid "Pull a new image for container" msgstr "Pull a new image for container" -#: ../../configuration/interfaces/ethernet.rst:117 +#: ../../configuration/interfaces/ethernet.rst:133 #: ../../configuration/interfaces/virtual-ethernet.rst:39 #: ../../configuration/interfaces/wireless.rst:408 msgid "QinQ (802.1ad)" @@ -11023,7 +11133,7 @@ msgstr "Recommended for larger installations." msgid "Record types" msgstr "Record types" -#: ../../configuration/loadbalancing/reverse-proxy.rst:174 +#: ../../configuration/loadbalancing/reverse-proxy.rst:211 msgid "Redirect HTTP to HTTPS" msgstr "Redirect HTTP to HTTPS" @@ -11055,7 +11165,7 @@ msgstr "Redundancy and load sharing. There are multiple NAT66 devices at the edg msgid "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" msgstr "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" -#: ../../configuration/interfaces/ethernet.rst:110 +#: ../../configuration/interfaces/ethernet.rst:126 #: ../../configuration/interfaces/virtual-ethernet.rst:33 #: ../../configuration/interfaces/wireless.rst:401 msgid "Regular VLANs (802.1q)" @@ -11402,11 +11512,11 @@ msgstr "Rule-Sets" msgid "Rule-set overview" msgstr "Rule-set overview" -#: ../../configuration/loadbalancing/reverse-proxy.rst:220 +#: ../../configuration/loadbalancing/reverse-proxy.rst:258 msgid "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" msgstr "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" -#: ../../configuration/loadbalancing/reverse-proxy.rst:257 +#: ../../configuration/loadbalancing/reverse-proxy.rst:295 msgid "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." msgstr "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." @@ -11414,11 +11524,11 @@ msgstr "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` an msgid "Rule 110 is hit, so connection is accepted." msgstr "Rule 110 is hit, so connection is accepted." -#: ../../configuration/loadbalancing/reverse-proxy.rst:260 +#: ../../configuration/loadbalancing/reverse-proxy.rst:298 msgid "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." msgstr "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." -#: ../../configuration/loadbalancing/reverse-proxy.rst:223 +#: ../../configuration/loadbalancing/reverse-proxy.rst:261 msgid "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" msgstr "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" @@ -11537,7 +11647,7 @@ msgstr "SSH was designed as a replacement for Telnet and for unsecured remote sh msgid "SSID to be used in IEEE 802.11 management frames" msgstr "SSID to be used in IEEE 802.11 management frames" -#: ../../configuration/loadbalancing/reverse-proxy.rst:294 +#: ../../configuration/loadbalancing/reverse-proxy.rst:333 msgid "SSL Bridging" msgstr "SSL Bridging" @@ -11650,6 +11760,10 @@ msgstr "Scripting" msgid "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly." msgstr "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly." +#: ../../configuration/pki/index.rst:411 +msgid "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates." +msgstr "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates." + #: ../../configuration/service/ipoe-server.rst:186 #: ../../configuration/service/pppoe-server.rst:148 #: ../../configuration/vpn/l2tp.rst:191 @@ -11857,6 +11971,10 @@ msgstr "Set Virtual Tunnel Interface" msgid "Set a container description" msgstr "Set a container description" +#: ../../configuration/trafficpolicy/index.rst:1169 +msgid "Set a description for the shaper." +msgstr "Set a description for the shaper." + #: ../../configuration/system/conntrack.rst:113 msgid "Set a destination and/or source address. Accepted input for ipv4:" msgstr "Set a destination and/or source address. Accepted input for ipv4:" @@ -11877,7 +11995,7 @@ msgstr "Set a limit on the maximum number of concurrent logged-in users on the s msgid "Set a meaningful description." msgstr "Set a meaningful description." -#: ../../configuration/service/https.rst:63 +#: ../../configuration/service/https.rst:67 msgid "Set a named api key. Every key has the same, full permissions on the system." msgstr "Set a named api key. Every key has the same, full permissions on the system." @@ -11904,7 +12022,7 @@ msgstr "Set action for the route-map policy." msgid "Set action to take on entries matching this rule." msgstr "Set action to take on entries matching this rule." -#: ../../configuration/service/https.rst:79 +#: ../../configuration/service/https.rst:112 msgid "Set an API-KEY is the minimal configuration to get a working API Endpoint." msgstr "Set an API-KEY is the minimal configuration to get a working API Endpoint." @@ -12309,6 +12427,14 @@ msgstr "Set the address of the backend port" msgid "Set the address of the backend server to which the incoming traffic will be forwarded" msgstr "Set the address of the backend server to which the incoming traffic will be forwarded" +#: ../../configuration/service/https.rst:94 +msgid "Set the authentication type for GraphQL, default option is key. Available options are:" +msgstr "Set the authentication type for GraphQL, default option is key. Available options are:" + +#: ../../configuration/service/https.rst:106 +msgid "Set the byte length of the JWT secret. Default is 32." +msgstr "Set the byte length of the JWT secret. Default is 32." + #: ../../configuration/highavailability/index.rst:295 msgid "Set the default VRRP version to use. This defaults to 2, but IPv6 instances will always use version 3." msgstr "Set the default VRRP version to use. This defaults to 2, but IPv6 instances will always use version 3." @@ -12345,6 +12471,10 @@ msgstr "Set the global setting for invalid packets." msgid "Set the global setting for related connections." msgstr "Set the global setting for related connections." +#: ../../configuration/service/https.rst:102 +msgid "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds." +msgstr "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds." + #: ../../configuration/service/https.rst:28 msgid "Set the listen port of the local API, this has no effect on the webserver. The default is port 8080" msgstr "Set the listen port of the local API, this has no effect on the webserver. The default is port 8080" @@ -12361,6 +12491,10 @@ msgstr "Set the maximum length of A-MPDU pre-EOF padding that the station can re msgid "Set the maximum number of TCP half-open connections." msgstr "Set the maximum number of TCP half-open connections." +#: ../../configuration/service/https.rst:60 +msgid "Set the maximum request body size in megabytes. Default is 1MB." +msgstr "Set the maximum request body size in megabytes. Default is 1MB." + #: ../../_include/interface-eapol.txt:12 msgid "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry used for authentication of the remote side. If an intermediate CA certificate is specified, then all parent CA certificates that exist in the PKI, such as the root CA or additional intermediate CAs, will automatically be used during certificate validation to ensure that the full chain of trust is available." msgstr "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry used for authentication of the remote side. If an intermediate CA certificate is specified, then all parent CA certificates that exist in the PKI, such as the root CA or additional intermediate CAs, will automatically be used during certificate validation to ensure that the full chain of trust is available." @@ -12429,6 +12563,10 @@ msgstr "Set the routing table to forward packet with." msgid "Set the session id, which is a 32-bit integer value. Uniquely identifies the session being created. The value used must match the peer_session_id value being used at the peer." msgstr "Set the session id, which is a 32-bit integer value. Uniquely identifies the session being created. The value used must match the peer_session_id value being used at the peer." +#: ../../configuration/trafficpolicy/index.rst:1164 +msgid "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth." +msgstr "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth." + #: ../../configuration/system/conntrack.rst:31 msgid "Set the size of the hash table. The connection tracking hash table makes searching the connection tracking table faster. The hash table uses “buckets” to record entries in the connection tracking table." msgstr "Set the size of the hash table. The connection tracking hash table makes searching the connection tracking table faster. The hash table uses “buckets” to record entries in the connection tracking table." @@ -12459,6 +12597,18 @@ msgstr "Set the window scale factor for TCP window scaling" msgid "Set window of concurrently valid codes." msgstr "Set window of concurrently valid codes." +#: ../../configuration/loadbalancing/reverse-proxy.rst:172 +msgid "Sets the HTTP method to be used, can be either: option, get, post, put" +msgstr "Sets the HTTP method to be used, can be either: option, get, post, put" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:177 +msgid "Sets the endpoint to be used for health checks" +msgstr "Sets the endpoint to be used for health checks" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:182 +msgid "Sets the expected result condition for considering a server healthy. Some possible examples are:" +msgstr "Sets the expected result condition for considering a server healthy. Some possible examples are:" + #: ../../configuration/container/index.rst:16 msgid "Sets the image name in the hub registry" msgstr "Sets the image name in the hub registry" @@ -12683,7 +12833,7 @@ msgstr "Show a list of installed certificates" msgid "Show all BFD peers" msgstr "Show all BFD peers" -#: ../../configuration/interfaces/ethernet.rst:210 +#: ../../configuration/interfaces/ethernet.rst:226 msgid "Show available offloading functions on given `<interface>`" msgstr "Show available offloading functions on given `<interface>`" @@ -12701,7 +12851,7 @@ msgstr "Show bridge `<name>` mdb displays the current multicast group membership #: ../../configuration/interfaces/bonding.rst:516 #: ../../configuration/interfaces/dummy.rst:55 -#: ../../configuration/interfaces/ethernet.rst:136 +#: ../../configuration/interfaces/ethernet.rst:152 #: ../../configuration/interfaces/loopback.rst:45 #: ../../configuration/interfaces/virtual-ethernet.rst:59 msgid "Show brief interface information." @@ -12745,7 +12895,7 @@ msgstr "Show detailed information about the underlaying physical links on given #: ../../configuration/interfaces/bonding.rst:531 #: ../../configuration/interfaces/dummy.rst:67 -#: ../../configuration/interfaces/ethernet.rst:150 +#: ../../configuration/interfaces/ethernet.rst:166 #: ../../configuration/interfaces/pppoe.rst:282 #: ../../configuration/interfaces/sstp-client.rst:121 #: ../../configuration/interfaces/virtual-ethernet.rst:72 @@ -12777,7 +12927,7 @@ msgstr "Show general information about specific WireGuard interface" msgid "Show info about the Wireguard service. It also shows the latest handshake." msgstr "Show info about the Wireguard service. It also shows the latest handshake." -#: ../../configuration/interfaces/ethernet.rst:169 +#: ../../configuration/interfaces/ethernet.rst:185 msgid "Show information about physical `<interface>`" msgstr "Show information about physical `<interface>`" @@ -12895,7 +13045,7 @@ msgstr "Show the logs of all firewall; show all ipv6 firewall logs; show all log msgid "Show the route" msgstr "Show the route" -#: ../../configuration/interfaces/ethernet.rst:242 +#: ../../configuration/interfaces/ethernet.rst:258 msgid "Show transceiver information from plugin modules, e.g SFP+, QSFP" msgstr "Show transceiver information from plugin modules, e.g SFP+, QSFP" @@ -13475,7 +13625,7 @@ msgstr "Specify the identifier value of the site-level aggregator (SLA) on the i msgid "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." msgstr "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." -#: ../../configuration/loadbalancing/reverse-proxy.rst:170 +#: ../../configuration/loadbalancing/reverse-proxy.rst:207 msgid "Specify the minimum required TLS version 1.2 or 1.3" msgstr "Specify the minimum required TLS version 1.2 or 1.3" @@ -13524,6 +13674,10 @@ msgid "Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety msgstr "Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety of uses, including speeding up a web server by caching repeated requests, caching web, DNS and other computer network lookups for a group of people sharing network resources, and aiding security by filtering traffic. Although primarily used for HTTP and FTP, Squid includes limited support for several other protocols including Internet Gopher, SSL,[6] TLS and HTTPS. Squid does not support the SOCKS protocol." #: ../../configuration/service/https.rst:56 +msgid "Start Webserver in given VRF." +msgstr "Start Webserver in given VRF." + +#: ../../configuration/service/https.rst:56 msgid "Start Webserver in given VRF." msgstr "Start Webserver in given VRF." @@ -13843,7 +13997,7 @@ msgstr "Temporary disable this RADIUS server. It won't be queried." msgid "Temporary disable this TACACS server. It won't be queried." msgstr "Temporary disable this TACACS server. It won't be queried." -#: ../../configuration/loadbalancing/reverse-proxy.rst:248 +#: ../../configuration/loadbalancing/reverse-proxy.rst:286 msgid "Terminate SSL" msgstr "Terminate SSL" @@ -13879,7 +14033,7 @@ msgstr "Testing and Validation" msgid "Thanks to this discovery, any subsequent traffic between PC4 and PC5 will not be using the multicast-address between the leaves as they both know behind which Leaf the PCs are connected. This saves traffic as less multicast packets sent reduces the load on the network, which improves scalability when more leaves are added." msgstr "Thanks to this discovery, any subsequent traffic between PC4 and PC5 will not be using the multicast-address between the leaves as they both know behind which Leaf the PCs are connected. This saves traffic as less multicast packets sent reduces the load on the network, which improves scalability when more leaves are added." -#: ../../configuration/trafficpolicy/index.rst:1194 +#: ../../configuration/trafficpolicy/index.rst:1262 msgid "That is how it is possible to do the so-called \"ingress shaping\"." msgstr "That is how it is possible to do the so-called \"ingress shaping\"." @@ -13923,7 +14077,7 @@ msgstr "The DN and password to bind as while performing searches. As the passwor msgid "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." msgstr "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." -#: ../../configuration/loadbalancing/reverse-proxy.rst:218 +#: ../../configuration/loadbalancing/reverse-proxy.rst:256 msgid "The HTTP service listen on TCP port 80." msgstr "The HTTP service listen on TCP port 80." @@ -14040,7 +14194,7 @@ msgstr "The ``address`` can be configured either on the VRRP interface or on not msgid "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" msgstr "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" -#: ../../configuration/loadbalancing/reverse-proxy.rst:305 +#: ../../configuration/loadbalancing/reverse-proxy.rst:345 msgid "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" msgstr "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" @@ -14048,15 +14202,15 @@ msgstr "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HT msgid "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." msgstr "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." -#: ../../configuration/loadbalancing/reverse-proxy.rst:251 +#: ../../configuration/loadbalancing/reverse-proxy.rst:289 msgid "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." msgstr "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." -#: ../../configuration/loadbalancing/reverse-proxy.rst:302 +#: ../../configuration/loadbalancing/reverse-proxy.rst:342 msgid "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." msgstr "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." -#: ../../configuration/loadbalancing/reverse-proxy.rst:254 +#: ../../configuration/loadbalancing/reverse-proxy.rst:292 msgid "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." msgstr "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." @@ -14121,7 +14275,7 @@ msgstr "The below referenced IP address `192.0.2.1` is used as example address r msgid "The bonding interface provides a method for aggregating multiple network interfaces into a single logical \"bonded\" interface, or LAG, or ether-channel, or port-channel. The behavior of the bonded interfaces depends upon the mode; generally speaking, modes provide either hot standby or load balancing services. Additionally, link integrity monitoring may be performed." msgstr "The bonding interface provides a method for aggregating multiple network interfaces into a single logical \"bonded\" interface, or LAG, or ether-channel, or port-channel. The behavior of the bonded interfaces depends upon the mode; generally speaking, modes provide either hot standby or load balancing services. Additionally, link integrity monitoring may be performed." -#: ../../configuration/trafficpolicy/index.rst:1179 +#: ../../configuration/trafficpolicy/index.rst:1247 msgid "The case of ingress shaping" msgstr "The case of ingress shaping" @@ -14397,7 +14551,7 @@ msgstr "The following commands translate to \"--net host\" when the container is msgid "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" msgstr "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:215 +#: ../../configuration/loadbalancing/reverse-proxy.rst:253 msgid "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." msgstr "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." @@ -14413,11 +14567,11 @@ msgstr "The following configuration on VyOS applies to all following 3rd party v msgid "The following configuration reverse-proxy terminate SSL." msgstr "The following configuration reverse-proxy terminate SSL." -#: ../../configuration/loadbalancing/reverse-proxy.rst:249 +#: ../../configuration/loadbalancing/reverse-proxy.rst:287 msgid "The following configuration terminates SSL on the router." msgstr "The following configuration terminates SSL on the router." -#: ../../configuration/loadbalancing/reverse-proxy.rst:295 +#: ../../configuration/loadbalancing/reverse-proxy.rst:334 msgid "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." msgstr "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." @@ -14618,7 +14772,7 @@ msgstr "The most visible application of the protocol is for access to shell acco msgid "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." msgstr "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." -#: ../../configuration/loadbalancing/reverse-proxy.rst:185 +#: ../../configuration/loadbalancing/reverse-proxy.rst:222 msgid "The name of the service can be different, in this example it is only for convenience." msgstr "The name of the service can be different, in this example it is only for convenience." @@ -16161,11 +16315,19 @@ msgstr "This commands creates a bridge that is used to bind traffic on eth1 vlan msgid "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." msgstr "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." -#: ../../configuration/loadbalancing/reverse-proxy.rst:195 +#: ../../configuration/loadbalancing/reverse-proxy.rst:367 +msgid "This configuration enables HTTP health checks on backend servers." +msgstr "This configuration enables HTTP health checks on backend servers." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:232 msgid "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." msgstr "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." -#: ../../configuration/loadbalancing/reverse-proxy.rst:177 +#: ../../configuration/pki/index.rst:375 +msgid "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user." +msgstr "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:214 msgid "This configuration listen on port 80 and redirect incoming requests to HTTPS:" msgstr "This configuration listen on port 80 and redirect incoming requests to HTTPS:" @@ -16665,7 +16827,7 @@ msgstr "This will show you a statistic of all rule-sets since the last boot." msgid "This will show you a summary of rule-sets and groups" msgstr "This will show you a summary of rule-sets and groups" -#: ../../configuration/trafficpolicy/index.rst:1188 +#: ../../configuration/trafficpolicy/index.rst:1256 msgid "This workaround lets you apply a shaping policy to the ingress traffic by first redirecting it to an in-between virtual interface (`Intermediate Functional Block`_). There, in that virtual interface, you will be able to apply any of the policies that work for outbound traffic, for instance, a shaping one." msgstr "This workaround lets you apply a shaping policy to the ingress traffic by first redirecting it to an in-between virtual interface (`Intermediate Functional Block`_). There, in that virtual interface, you will be able to apply any of the policies that work for outbound traffic, for instance, a shaping one." @@ -16915,7 +17077,7 @@ msgstr "To enable RADIUS based authentication, the authentication mode needs to msgid "To enable bandwidth shaping via RADIUS, the option rate-limit needs to be enabled." msgstr "To enable bandwidth shaping via RADIUS, the option rate-limit needs to be enabled." -#: ../../configuration/service/https.rst:68 +#: ../../configuration/service/https.rst:72 msgid "To enable debug messages. Available via :opcmd:`show log` or :opcmd:`monitor log`" msgstr "To enable debug messages. Available via :opcmd:`show log` or :opcmd:`monitor log`" @@ -17188,6 +17350,10 @@ msgstr "USB to serial converters will handle most of their work in software so y msgid "UUCP subsystem" msgstr "UUCP subsystem" +#: ../../configuration/interfaces/ethernet.rst:73 +msgid "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/" +msgstr "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/" + #: ../../configuration/interfaces/vxlan.rst:102 msgid "Unicast" msgstr "Unicast" @@ -18192,7 +18358,7 @@ msgstr "VHT operating channel center frequency - center freq 2 (for use with the #: ../../configuration/interfaces/bonding.rst:275 #: ../../configuration/interfaces/bridge.rst:123 -#: ../../configuration/interfaces/ethernet.rst:107 +#: ../../configuration/interfaces/ethernet.rst:123 #: ../../configuration/interfaces/pseudo-ethernet.rst:63 #: ../../configuration/interfaces/virtual-ethernet.rst:30 #: ../../configuration/interfaces/wireless.rst:398 @@ -19264,7 +19430,7 @@ msgstr "You can now \"dial\" the peer with the follwoing command: ``sstpc --log- msgid "You can now SSH into your system using admin/admin as a default user supplied from the ``lfkeitel/tacacs_plus:latest`` container." msgstr "You can now SSH into your system using admin/admin as a default user supplied from the ``lfkeitel/tacacs_plus:latest`` container." -#: ../../configuration/trafficpolicy/index.rst:1158 +#: ../../configuration/trafficpolicy/index.rst:1226 msgid "You can only apply one policy per interface and direction, but you could reuse a policy on different interfaces and directions:" msgstr "You can only apply one policy per interface and direction, but you could reuse a policy on different interfaces and directions:" @@ -19432,11 +19598,11 @@ msgstr ":abbr:`GENEVE (Generic Network Virtualization Encapsulation)` supports a msgid ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (or IPIP/IPsec, SIT/IPsec, or any other stateless tunnel protocol over IPsec) is the usual way to protect the traffic inside a tunnel." msgstr ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (or IPIP/IPsec, SIT/IPsec, or any other stateless tunnel protocol over IPsec) is the usual way to protect the traffic inside a tunnel." -#: ../../configuration/interfaces/ethernet.rst:74 +#: ../../configuration/interfaces/ethernet.rst:90 msgid ":abbr:`GRO (Generic receive offload)` is the complement to GSO. Ideally any frame assembled by GRO should be segmented to create an identical sequence of frames using GSO, and any sequence of frames segmented by GSO should be able to be reassembled back to the original by GRO. The only exception to this is IPv4 ID in the case that the DF bit is set for a given IP header. If the value of the IPv4 ID is not sequentially incrementing it will be altered so that it is when a frame assembled via GRO is segmented via GSO." msgstr ":abbr:`GRO (Generic receive offload)` is the complement to GSO. Ideally any frame assembled by GRO should be segmented to create an identical sequence of frames using GSO, and any sequence of frames segmented by GSO should be able to be reassembled back to the original by GRO. The only exception to this is IPv4 ID in the case that the DF bit is set for a given IP header. If the value of the IPv4 ID is not sequentially incrementing it will be altered so that it is when a frame assembled via GRO is segmented via GSO." -#: ../../configuration/interfaces/ethernet.rst:64 +#: ../../configuration/interfaces/ethernet.rst:80 msgid ":abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is meant to deal with cases where device drivers cannot perform the offloads described above. What occurs in GSO is that a given skbuff will have its data broken out over multiple skbuffs that have been resized to match the MSS provided via skb_shinfo()->gso_size." msgstr ":abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is meant to deal with cases where device drivers cannot perform the offloads described above. What occurs in GSO is that a given skbuff will have its data broken out over multiple skbuffs that have been resized to match the MSS provided via skb_shinfo()->gso_size." @@ -19464,6 +19630,10 @@ msgstr ":abbr:`LDP (Label Distribution Protocol)` is a TCP based MPLS signaling msgid ":abbr:`LLDP (Link Layer Discovery Protocol)` is a vendor-neutral link layer protocol in the Internet Protocol Suite used by network devices for advertising their identity, capabilities, and neighbors on an IEEE 802 local area network, principally wired Ethernet. The protocol is formally referred to by the IEEE as Station and Media Access Control Connectivity Discovery specified in IEEE 802.1AB and IEEE 802.3-2012 section 6 clause 79." msgstr ":abbr:`LLDP (Link Layer Discovery Protocol)` is a vendor-neutral link layer protocol in the Internet Protocol Suite used by network devices for advertising their identity, capabilities, and neighbors on an IEEE 802 local area network, principally wired Ethernet. The protocol is formally referred to by the IEEE as Station and Media Access Control Connectivity Discovery specified in IEEE 802.1AB and IEEE 802.3-2012 section 6 clause 79." +#: ../../configuration/interfaces/ethernet.rst:64 +msgid ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing." +msgstr ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing." + #: ../../configuration/interfaces/macsec.rst:74 msgid ":abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys between individual peers." msgstr ":abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys between individual peers." @@ -19528,7 +19698,7 @@ msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:` msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." -#: ../../configuration/interfaces/ethernet.rst:82 +#: ../../configuration/interfaces/ethernet.rst:98 msgid ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" msgstr ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" @@ -19724,6 +19894,10 @@ msgstr "`4. Add optional parameters`_" msgid "`<name>` must be identical on both sides!" msgstr "`<name>` must be identical on both sides!" +#: ../../configuration/trafficpolicy/index.rst:1156 +msgid "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge." +msgstr "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge." + #: ../../configuration/pki/index.rst:204 msgid "``$ tail -n +2 ca.key | head -n -1 | tr -d '\\n'``" msgstr "``$ tail -n +2 ca.key | head -n -1 | tr -d '\\n'``" @@ -20292,6 +20466,10 @@ msgstr "``key-exchange`` which protocol should be used to initialize the connect msgid "``key`` - a private key, which will be used for authenticating local router on remote peer:" msgstr "``key`` - a private key, which will be used for authenticating local router on remote peer:" +#: ../../configuration/service/https.rst:96 +msgid "``key`` use API keys configured in ``service https api keys``" +msgstr "``key`` use API keys configured in ``service https api keys``" + #: ../../configuration/system/option.rst:137 msgid "``latency``: A server profile focused on lowering network latency. This profile favors performance over power savings by setting ``intel_pstate`` and ``min_perf_pct=100``." msgstr "``latency``: A server profile focused on lowering network latency. This profile favors performance over power savings by setting ``intel_pstate`` and ``min_perf_pct=100``." @@ -20775,6 +20953,18 @@ msgstr "``static`` - Statically configured routes" msgid "``station`` - Connects to another access point" msgstr "``station`` - Connects to another access point" +#: ../../configuration/loadbalancing/reverse-proxy.rst:185 +msgid "``status 200-399`` Expecting a non-failure response code" +msgstr "``status 200-399`` Expecting a non-failure response code" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:184 +msgid "``status 200`` Expecting a 200 response code" +msgstr "``status 200`` Expecting a 200 response code" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:186 +msgid "``string success`` Expecting the string `success` in the response body" +msgstr "``string success`` Expecting the string `success` in the response body" + #: ../../configuration/firewall/ipv4.rst:103 #: ../../configuration/firewall/ipv6.rst:103 msgid "``synproxy``: synproxy the packet." @@ -20824,6 +21014,10 @@ msgstr "``throughput``: A server profile focused on improving network throughput msgid "``timeout`` keep-alive timeout in seconds <2-86400> (default 120) IKEv1 only" msgstr "``timeout`` keep-alive timeout in seconds <2-86400> (default 120) IKEv1 only" +#: ../../configuration/service/https.rst:98 +msgid "``token`` use JWT tokens." +msgstr "``token`` use JWT tokens." + #: ../../configuration/interfaces/bonding.rst:80 msgid "``transmit-load-balance`` - Adaptive transmit load balancing: channel bonding that does not require any special switch support." msgstr "``transmit-load-balance`` - Adaptive transmit load balancing: channel bonding that does not require any special switch support." @@ -20888,6 +21082,22 @@ msgstr "``vnc`` - Virtual Network Control (VNC)" msgid "``vti`` - use a VTI interface for traffic encryption. Any traffic, which will be send to VTI interface will be encrypted and send to this peer. Using VTI makes IPSec configuration much flexible and easier in complex situation, and allows to dynamically add/delete remote networks, reachable via a peer, as in this mode router don't need to create additional SA/policy for each remote network:" msgstr "``vti`` - use a VTI interface for traffic encryption. Any traffic, which will be send to VTI interface will be encrypted and send to this peer. Using VTI makes IPSec configuration much flexible and easier in complex situation, and allows to dynamically add/delete remote networks, reachable via a peer, as in this mode router don't need to create additional SA/policy for each remote network:" +#: ../../configuration/pki/index.rst:386 +msgid "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA." +msgstr "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA." + +#: ../../configuration/pki/index.rst:383 +msgid "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA." +msgstr "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA." + +#: ../../configuration/pki/index.rst:389 +msgid "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA." +msgstr "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA." + +#: ../../configuration/pki/index.rst:381 +msgid "``vyos_root_ca`` is the root certificate authority." +msgstr "``vyos_root_ca`` is the root certificate authority." + #: ../../configuration/vpn/site2site_ipsec.rst:59 msgid "``x509`` - options for x509 authentication mode:" msgstr "``x509`` - options for x509 authentication mode:" @@ -21249,10 +21459,18 @@ msgstr "ip-forwarding" msgid "isisd" msgstr "isisd" +#: ../../configuration/interfaces/ethernet.rst:106 +msgid "it can be used with any NIC" +msgstr "it can be used with any NIC" + #: ../../configuration/interfaces/ethernet.rst:90 msgid "it can be used with any NIC," msgstr "it can be used with any NIC," +#: ../../configuration/interfaces/ethernet.rst:108 +msgid "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)" +msgstr "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)" + #: ../../configuration/interfaces/ethernet.rst:92 msgid "it does not increase hardware device interrupt rate (although it does introduce inter-processor interrupts (IPIs))." msgstr "it does not increase hardware device interrupt rate (although it does introduce inter-processor interrupts (IPIs))." @@ -21647,6 +21865,10 @@ msgstr "slow: Request partner to transmit LACPDUs every 30 seconds" msgid "smtp-server" msgstr "smtp-server" +#: ../../configuration/interfaces/ethernet.rst:107 +msgid "software filters can easily be added to hash over new protocols" +msgstr "software filters can easily be added to hash over new protocols" + #: ../../configuration/interfaces/ethernet.rst:91 msgid "software filters can easily be added to hash over new protocols," msgstr "software filters can easily be added to hash over new protocols," diff --git a/docs/_locale/ja/contributing.pot b/docs/_locale/ja/contributing.pot index f7fb379e..19630864 100644 --- a/docs/_locale/ja/contributing.pot +++ b/docs/_locale/ja/contributing.pot @@ -72,6 +72,18 @@ msgstr "A good approach for writing commit messages is actually to have a look a msgid "A number of flags can be set up to change the behaviour of VyOS at runtime. These flags can be toggled using either environment variables or creating files." msgstr "A number of flags can be set up to change the behaviour of VyOS at runtime. These flags can be toggled using either environment variables or creating files." +#: ../../contributing/issues-features.rst:86 +msgid "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature." +msgstr "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature." + +#: ../../contributing/issues-features.rst:42 +msgid "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed." +msgstr "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed." + +#: ../../contributing/issues-features.rst:33 +msgid "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session." +msgstr "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session." + #: ../../contributing/development.rst:74 msgid "A single, short, summary of the commit (recommended 50 characters or less, not exceeding 80 characters) containing a prefix of the changed component and the corresponding Phabricator_ reference e.g. ``snmp: T1111:`` or ``ethernet: T2222:`` - multiple components could be concatenated as in ``snmp: ethernet: T3333``" msgstr "A single, short, summary of the commit (recommended 50 characters or less, not exceeding 80 characters) containing a prefix of the changed component and the corresponding Phabricator_ reference e.g. ``snmp: T1111:`` or ``ethernet: T2222:`` - multiple components could be concatenated as in ``snmp: ethernet: T3333``" @@ -93,7 +105,7 @@ msgstr "Acronyms also **must** be capitalized to visually distinguish them from msgid "Add file to Git index using ``git add myfile``, or for a whole directory: ``git add somedir/*``" msgstr "Add file to Git index using ``git add myfile``, or for a whole directory: ``git add somedir/*``" -#: ../../contributing/testing.rst:100 +#: ../../contributing/testing.rst:103 msgid "Add one or more IP addresses" msgstr "Add one or more IP addresses" @@ -155,6 +167,14 @@ msgstr "Any \"modified\" package may refer to an altered version of e.g. vyos-1x msgid "Any packages in the packages directory will be added to the iso during build, replacing the upstream ones. Make sure you delete them (both the source directories and built deb packages) if you want to build an iso from purely upstream packages." msgstr "Any packages in the packages directory will be added to the iso during build, replacing the upstream ones. Make sure you delete them (both the source directories and built deb packages) if you want to build an iso from purely upstream packages." +#: ../../contributing/issues-features.rst:100 +msgid "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?" +msgstr "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?" + +#: ../../contributing/issues-features.rst:99 +msgid "Are there any limitations (hardware support, resource usage)?" +msgstr "Are there any limitations (hardware support, resource usage)?" + #: ../../contributing/testing.rst:57 msgid "As Smoketests will alter the system configuration and you are logged in remote you may loose your connection to the system." msgstr "As Smoketests will alter the system configuration and you are logged in remote you may loose your connection to the system." @@ -219,6 +239,10 @@ msgstr "Boot Timing" msgid "Bug Report/Issue" msgstr "Bug Report/Issue" +#: ../../contributing/issues-features.rst:117 +msgid "Bug reports that lack reproducing procedures." +msgstr "Bug reports that lack reproducing procedures." + #: ../../contributing/build-vyos.rst:825 msgid "Build" msgstr "Build" @@ -303,7 +327,7 @@ msgstr "Command definitions are purely declarative, and cannot contain any logic msgid "Commit the changes by calling ``git commit``. Please use a meaningful commit headline (read above) and don't forget to reference the Phabricator_ ID." msgstr "Commit the changes by calling ``git commit``. Please use a meaningful commit headline (read above) and don't forget to reference the Phabricator_ ID." -#: ../../contributing/testing.rst:152 +#: ../../contributing/testing.rst:155 msgid "Config Load Tests" msgstr "Config Load Tests" @@ -331,7 +355,7 @@ msgstr "Continuous Integration" msgid "Customize" msgstr "Customize" -#: ../../contributing/testing.rst:101 +#: ../../contributing/testing.rst:104 msgid "DHCP client and DHCPv6 prefix delegation" msgstr "DHCP client and DHCPv6 prefix delegation" @@ -440,7 +464,7 @@ msgid "Every change set must be consistent (self containing)! Do not fix multipl msgstr "Every change set must be consistent (self containing)! Do not fix multiple bugs in a single commit. If you already worked on multiple fixes in the same file use `git add --patch` to only add the parts related to the one issue into your upcoming commit." #: ../../contributing/development.rst:412 -#: ../../contributing/testing.rst:66 +#: ../../contributing/testing.rst:69 msgid "Example:" msgstr "Example:" @@ -473,6 +497,14 @@ msgstr "FRR" msgid "Feature Request" msgstr "Feature Request" +#: ../../contributing/issues-features.rst:72 +msgid "Feature Requests" +msgstr "Feature Requests" + +#: ../../contributing/issues-features.rst:116 +msgid "Feature requests that do not include required information and need clarification." +msgstr "Feature requests that do not include required information and need clarification." + #: ../../contributing/build-vyos.rst:600 msgid "Firmware" msgstr "Firmware" @@ -578,11 +610,15 @@ msgstr "Horrible: \"Tcp connection timeout\"" msgid "Horrible: \"frobnication algorithm.\"" msgstr "Horrible: \"frobnication algorithm.\"" -#: ../../contributing/issues-features.rst:63 +#: ../../contributing/issues-features.rst:67 msgid "How can we reproduce this Bug?" msgstr "How can we reproduce this Bug?" -#: ../../contributing/testing.rst:103 +#: ../../contributing/issues-features.rst:98 +msgid "How you'd configure it by hand there?" +msgstr "How you'd configure it by hand there?" + +#: ../../contributing/testing.rst:106 msgid "IP and IPv6 options" msgstr "IP and IPv6 options" @@ -606,14 +642,30 @@ msgstr "If a verb is essential, keep it. For example, in the help text of ``set msgid "If applicable a reference to a previous commit should be made linking those commits nicely when browsing the history: ``After commit abcd12ef (\"snmp: this is a headline\") a Python import statement is missing, throwing the following exception: ABCDEF``" msgstr "If applicable a reference to a previous commit should be made linking those commits nicely when browsing the history: ``After commit abcd12ef (\"snmp: this is a headline\") a Python import statement is missing, throwing the following exception: ABCDEF``" +#: ../../contributing/issues-features.rst:46 +msgid "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable." +msgstr "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable." + #: ../../contributing/development.rst:64 msgid "If there is no Phabricator_ reference in the commits of your pull request, we have to ask you to amend the commit message. Otherwise we will have to reject it." msgstr "If there is no Phabricator_ reference in the commits of your pull request, we have to ask you to amend the commit message. Otherwise we will have to reject it." +#: ../../contributing/issues-features.rst:126 +msgid "If there is no response after further two weeks, the task will be automatically closed." +msgstr "If there is no response after further two weeks, the task will be automatically closed." + +#: ../../contributing/issues-features.rst:124 +msgid "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply." +msgstr "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply." + #: ../../contributing/build-vyos.rst:739 msgid "If you are brave enough to build yourself an ISO image containing any modified package from our GitHub organisation - this is the place to be." msgstr "If you are brave enough to build yourself an ISO image containing any modified package from our GitHub organisation - this is the place to be." +#: ../../contributing/issues-features.rst:50 +msgid "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report." +msgstr "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report." + #: ../../contributing/build-vyos.rst:602 msgid "If you upgrade your kernel or include new drivers you may need new firmware. Build a new ``vyos-linux-firmware`` package with the included helper scripts." msgstr "If you upgrade your kernel or include new drivers you may need new firmware. Build a new ``vyos-linux-firmware`` package with the included helper scripts." @@ -626,7 +678,7 @@ msgstr "In a big system, such as VyOS, that is comprised of multiple components, msgid "In addition this also helps when browsing the GitHub codebase on a mobile device if you happen to be a crazy scientist." msgstr "In addition this also helps when browsing the GitHub codebase on a mobile device if you happen to be a crazy scientist." -#: ../../contributing/issues-features.rst:56 +#: ../../contributing/issues-features.rst:60 msgid "In order to open up a bug-report/feature request you need to create yourself an account on VyOS Phabricator_. On the left side of the specific project (VyOS 1.2 or VyOS 1.3) you will find quick-links for opening a bug-report/feature request." msgstr "In order to open up a bug-report/feature request you need to create yourself an account on VyOS Phabricator_. On the left side of the specific project (VyOS 1.2 or VyOS 1.3) you will find quick-links for opening a bug-report/feature request." @@ -690,10 +742,14 @@ msgstr "Intel QAT" msgid "Inter QAT" msgstr "Inter QAT" -#: ../../contributing/testing.rst:91 +#: ../../contributing/testing.rst:94 msgid "Interface based tests" msgstr "Interface based tests" +#: ../../contributing/issues-features.rst:96 +msgid "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?" +msgstr "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?" + #: ../../contributing/issues-features.rst:5 msgid "Issues/Feature requests" msgstr "Issues/Feature requests" @@ -706,6 +762,10 @@ msgstr "Issues or bugs are found in any software project. VyOS is not an excepti msgid "It's an Ada program and requires GNAT and gprbuild for building, dependencies are properly specified so just follow debuild's suggestions." msgstr "It's an Ada program and requires GNAT and gprbuild for building, dependencies are properly specified so just follow debuild's suggestions." +#: ../../contributing/issues-features.rst:103 +msgid "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions." +msgstr "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions." + #: ../../contributing/debugging.rst:58 msgid "It is also possible to set up the debugging using environment variables. In that case, the name will be (in uppercase) VYOS_FEATURE_DEBUG." msgstr "It is also possible to set up the debugging using environment variables. In that case, the name will be (in uppercase) VYOS_FEATURE_DEBUG." @@ -762,7 +822,7 @@ msgstr "Linux Kernel" msgid "Live System" msgstr "Live System" -#: ../../contributing/testing.rst:102 +#: ../../contributing/testing.rst:105 msgid "MTU size" msgstr "MTU size" @@ -770,11 +830,11 @@ msgstr "MTU size" msgid "Make your changes and save them. Do the following for all changes files to record them in your created Git commit:" msgstr "Make your changes and save them. Do the following for all changes files to record them in your created Git commit:" -#: ../../contributing/testing.rst:61 +#: ../../contributing/testing.rst:64 msgid "Manual Smoketest Run" msgstr "Manual Smoketest Run" -#: ../../contributing/testing.rst:169 +#: ../../contributing/testing.rst:172 msgid "Manual config load test" msgstr "Manual config load test" @@ -851,7 +911,7 @@ msgstr "Now you are prepared with two new aliases ``vybld`` and ``vybld_crux`` t msgid "Old concept/syntax" msgstr "Old concept/syntax" -#: ../../contributing/testing.rst:63 +#: ../../contributing/testing.rst:66 msgid "On the other hand - as each test is contain in its own file - one can always execute a single Smoketest by hand by simply running the Python test scripts." msgstr "On the other hand - as each test is contain in its own file - one can always execute a single Smoketest by hand by simply running the Python test scripts." @@ -863,7 +923,7 @@ msgstr "Once you have the required dependencies installed, you may proceed with msgid "Once you run ``show xyz`` and your condition is triggered you should be dropped into the python debugger:" msgstr "Once you run ``show xyz`` and your condition is triggered you should be dropped into the python debugger:" -#: ../../contributing/testing.rst:171 +#: ../../contributing/testing.rst:174 msgid "One is not bound to load all configurations one after another but can also load individual test configurations on his own." msgstr "One is not bound to load all configurations one after another but can also load individual test configurations on his own." @@ -903,7 +963,7 @@ msgstr "Our code is split into several modules. VyOS is composed of multiple ind msgid "Our op mode scripts use the python-vici module, which is not included in Debian's build, and isn't quite easy to integrate in that build. For this reason we debianize that module by hand now, using this procedure:" msgstr "Our op mode scripts use the python-vici module, which is not included in Debian's build, and isn't quite easy to integrate in that build. For this reason we debianize that module by hand now, using this procedure:" -#: ../../contributing/testing.rst:93 +#: ../../contributing/testing.rst:96 msgid "Our smoketests not only test daemons and serives, but also check if what we configure for an interface works. Thus there is a common base classed named: ``base_interfaces_test.py`` which holds all the common code that an interface supports and is tested." msgstr "Our smoketests not only test daemons and serives, but also check if what we configure for an interface works. Thus there is a common base classed named: ``base_interfaces_test.py`` which holds all the common code that an interface supports and is tested." @@ -936,11 +996,11 @@ msgstr "Please use the following template as good starting point when developing msgid "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface." msgstr "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface." -#: ../../contributing/testing.rst:104 +#: ../../contributing/testing.rst:107 msgid "Port description" msgstr "Port description" -#: ../../contributing/testing.rst:105 +#: ../../contributing/testing.rst:108 msgid "Port disable" msgstr "Port disable" @@ -964,7 +1024,11 @@ msgstr "Prerequisites" msgid "Priorities" msgstr "Priorities" -#: ../../contributing/issues-features.rst:61 +#: ../../contributing/issues-features.rst:91 +msgid "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required." +msgstr "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required." + +#: ../../contributing/issues-features.rst:65 msgid "Provide as much information as you can" msgstr "Provide as much information as you can" @@ -996,7 +1060,7 @@ msgstr "Rationale: this seems to be the unwritten standard in network device CLI msgid "Recent versions use the ``vyos.frr`` framework. The Python class is located inside our ``vyos-1x:python/vyos/frr.py``. It comes with an embedded debugging/ (print style) debugger as vyos.ifconfig does." msgstr "Recent versions use the ``vyos.frr`` framework. The Python class is located inside our ``vyos-1x:python/vyos/frr.py``. It comes with an embedded debugging/ (print style) debugger as vyos.ifconfig does." -#: ../../contributing/issues-features.rst:54 +#: ../../contributing/issues-features.rst:58 msgid "Report a Bug" msgstr "Report a Bug" @@ -1041,7 +1105,7 @@ msgstr "Some VyOS packages (namely vyos-1x) come with build-time tests which ver msgid "Some abbreviations are traditionally written in mixed case. Generally, if it contains words \"over\" or \"version\", the letter **should** be lowercase. If there's an accepted spelling (especially if defined by an RFC or another standard), it **must** be followed." msgstr "Some abbreviations are traditionally written in mixed case. Generally, if it contains words \"over\" or \"version\", the letter **should** be lowercase. If there's an accepted spelling (especially if defined by an RFC or another standard), it **must** be followed." -#: ../../contributing/testing.rst:202 +#: ../../contributing/testing.rst:205 msgid "Some of the configurations have preconditions which need to be met. Those most likely include generation of crypographic keys before the config can be applied - you will get a commit error otherwise. If you are interested how those preconditions are fulfilled check the vyos-build_ repository and the ``scripts/check-qemu-install`` file." msgstr "Some of the configurations have preconditions which need to be met. Those most likely include generation of crypographic keys before the config can be applied - you will get a commit error otherwise. If you are interested how those preconditions are fulfilled check the vyos-build_ repository and the ``scripts/check-qemu-install`` file." @@ -1077,6 +1141,14 @@ msgstr "Suppose you want to make a change in the webproxy script but yet you do msgid "System Startup" msgstr "System Startup" +#: ../../contributing/issues-features.rst:108 +msgid "Task auto-closing" +msgstr "Task auto-closing" + +#: ../../contributing/issues-features.rst:118 +msgid "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)." +msgstr "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)." + #: ../../contributing/development.rst:214 msgid "Template processor **should** be used for generating config files. Built-in string formatting **may** be used for simple line-oriented formats where every line is self-contained, such as iptables rules. Template processor **must** be used for structured, multi-line formats such as those used by ISC DHCPd." msgstr "Template processor **should** be used for generating config files. Built-in string formatting **may** be used for simple line-oriented formats where every line is self-contained, such as iptables rules. Template processor **must** be used for structured, multi-line formats such as those used by ISC DHCPd." @@ -1137,11 +1209,15 @@ msgstr "The ``verify()`` function takes your internal representation of the conf msgid "The bash (or better vbash) completion in VyOS is defined in *templates*. Templates are text files (called ``node.def``) stored in a directory tree. The directory names define the command names, and template files define the command behaviour. Before VyOS 1.2 (crux) this files were created by hand. After a complex redesign process_ the new style template are automatically generated from a XML input file." msgstr "The bash (or better vbash) completion in VyOS is defined in *templates*. Templates are text files (called ``node.def``) stored in a directory tree. The directory names define the command names, and template files define the command behaviour. Before VyOS 1.2 (crux) this files were created by hand. After a complex redesign process_ the new style template are automatically generated from a XML input file." +#: ../../contributing/issues-features.rst:39 +msgid "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be." +msgstr "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be." + #: ../../contributing/build-vyos.rst:116 msgid "The build process needs to be built on a local file system, building on SMB or NFS shares will result in the container failing to build properly! VirtualBox Drive Share is also not an option as block device operations are not implemented and the drive is always mounted as \"nodev\"" msgstr "The build process needs to be built on a local file system, building on SMB or NFS shares will result in the container failing to build properly! VirtualBox Drive Share is also not an option as block device operations are not implemented and the drive is always mounted as \"nodev\"" -#: ../../contributing/testing.rst:159 +#: ../../contributing/testing.rst:162 msgid "The configurations are all derived from production systems and can not only act as a testcase but also as reference if one wants to enable a certain feature. The configurations can be found here: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" msgstr "The configurations are all derived from production systems and can not only act as a testcase but also as reference if one wants to enable a certain feature. The configurations can be found here: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" @@ -1161,7 +1237,7 @@ msgstr "The default template processor for VyOS code is Jinja2_." msgid "The easiest way to compile your package is with the above mentioned :ref:`build_docker` container, it includes all required dependencies for all VyOS related packages." msgstr "The easiest way to compile your package is with the above mentioned :ref:`build_docker` container, it includes all required dependencies for all VyOS related packages." -#: ../../contributing/testing.rst:164 +#: ../../contributing/testing.rst:167 msgid "The entire test is controlled by the main wrapper script ``/usr/bin/vyos-configtest`` which behaves in the same way as the main smoketest script. It scans the folder for potential configuration files and issues a ``load`` command one after another." msgstr "The entire test is controlled by the main wrapper script ``/usr/bin/vyos-configtest`` which behaves in the same way as the main smoketest script. It scans the folder for potential configuration files and issues a ``load`` command one after another." @@ -1201,7 +1277,7 @@ msgstr "The most obvious reasons could be:" msgid "The original repo is at https://github.com/dmbaturin/hvinfo" msgstr "The original repo is at https://github.com/dmbaturin/hvinfo" -#: ../../contributing/testing.rst:154 +#: ../../contributing/testing.rst:157 msgid "The other part of our tests are called \"config load tests\". The config load tests will load - one after another - arbitrary configuration files to test if the configuration migration scripts work as designed and that a given set of functionality still can be loaded with a fresh VyOS ISO image." msgstr "The other part of our tests are called \"config load tests\". The config load tests will load - one after another - arbitrary configuration files to test if the configuration migration scripts work as designed and that a given set of functionality still can be loaded with a fresh VyOS ISO image." @@ -1265,6 +1341,10 @@ msgstr "There are extensions to e.g. VIM (xmllint) which will help you to get yo msgid "There are two flags available to aid in debugging configuration scripts. Since configuration loading issues will manifest during boot, the flags are passed as kernel boot parameters." msgstr "There are two flags available to aid in debugging configuration scripts. Since configuration loading issues will manifest during boot, the flags are passed as kernel boot parameters." +#: ../../contributing/issues-features.rst:110 +msgid "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"." +msgstr "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"." + #: ../../contributing/build-vyos.rst:297 msgid "This ISO can be customized with the following list of configure options. The full and current list can be generated with ``./build-vyos-image --help``:" msgstr "This ISO can be customized with the following list of configure options. The full and current list can be generated with ``./build-vyos-image --help``:" @@ -1281,6 +1361,10 @@ msgstr "This chapter lists those exceptions and gives you a brief overview what msgid "This is done by utilizing the ``systemd-bootchart`` package which is now installed by default on the VyOS 1.3 (equuleus) branch. The configuration is also versioned so we get comparable results. ``systemd-bootchart`` is configured using this file: bootchart.conf_" msgstr "This is done by utilizing the ``systemd-bootchart`` package which is now installed by default on the VyOS 1.3 (equuleus) branch. The configuration is also versioned so we get comparable results. ``systemd-bootchart`` is configured using this file: bootchart.conf_" +#: ../../contributing/issues-features.rst:122 +msgid "This is what will happen when a task is set to \"Needs reporter action\":" +msgstr "This is what will happen when a task is set to \"Needs reporter action\":" + #: ../../contributing/development.rst:132 msgid "This means the file in question (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) is located in the ``vyatta-webproxy`` package which can be found here: https://github.com/vyos/vyatta-webproxy" msgstr "This means the file in question (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) is located in the ``vyatta-webproxy`` package which can be found here: https://github.com/vyos/vyatta-webproxy" @@ -1305,11 +1389,11 @@ msgstr "This will guide you through the process of building a VyOS ISO using Doc msgid "This will guide you through the process of building a VyOS ISO using Docker_. This process has been tested on clean installs of Debian Jessie, Stretch, and Buster." msgstr "This will guide you through the process of building a VyOS ISO using Docker_. This process has been tested on clean installs of Debian Jessie, Stretch, and Buster." -#: ../../contributing/testing.rst:148 +#: ../../contributing/testing.rst:151 msgid "This will limit the `bond` interface test to only make use of `eth1` and `eth2` as member ports." msgstr "This will limit the `bond` interface test to only make use of `eth1` and `eth2` as member ports." -#: ../../contributing/testing.rst:98 +#: ../../contributing/testing.rst:101 msgid "Those common tests consists out of:" msgstr "Those common tests consists out of:" @@ -1353,6 +1437,10 @@ msgstr "To enable boot time graphing change the Kernel commandline and add the f msgid "To enable debugging just run: ``$ touch /tmp/vyos.frr.debug``" msgstr "To enable debugging just run: ``$ touch /tmp/vyos.frr.debug``" +#: ../../contributing/testing.rst:60 +msgid "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``." +msgstr "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``." + #: ../../contributing/development.rst:547 msgid "To ensure uniform look and feel, and improve readability, we should follow a set of guidelines consistently." msgstr "To ensure uniform look and feel, and improve readability, we should follow a set of guidelines consistently." @@ -1413,7 +1501,7 @@ msgstr "Useful commands are:" msgid "VIF (incl. VIF-S/VIF-C)" msgstr "VIF (incl. VIF-S/VIF-C)" -#: ../../contributing/testing.rst:106 +#: ../../contributing/testing.rst:109 msgid "VLANs (QinQ and regular 802.1q)" msgstr "VLANs (QinQ and regular 802.1q)" @@ -1457,6 +1545,10 @@ msgstr "VyOS makes use of Jenkins_ as our Continuous Integration (CI) service. O msgid "We again make use of a helper script and some patches to make the build work. Just run the following command:" msgstr "We again make use of a helper script and some patches to make the build work. Just run the following command:" +#: ../../contributing/issues-features.rst:114 +msgid "We assign that status to:" +msgstr "We assign that status to:" + #: ../../contributing/testing.rst:25 msgid "We differentiate in two independent tests, which are both run in parallel by two separate QEmu instances which are launched via ``make test`` and ``make testc`` from within the vyos-build_ repository." msgstr "We differentiate in two independent tests, which are both run in parallel by two separate QEmu instances which are launched via ``make test`` and ``make testc`` from within the vyos-build_ repository." @@ -1473,6 +1565,10 @@ msgstr "We now need to mount some required, volatile filesystems" msgid "We only accept bugfixes in packages other than https://github.com/vyos/vyos-1x as no new functionality should use the old style templates (``node.def`` and Perl/BASH code. Use the new style XML/Python interface instead." msgstr "We only accept bugfixes in packages other than https://github.com/vyos/vyos-1x as no new functionality should use the old style templates (``node.def`` and Perl/BASH code. Use the new style XML/Python interface instead." +#: ../../contributing/issues-features.rst:128 +msgid "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!" +msgstr "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!" + #: ../../contributing/development.rst:87 msgid "What/why/how something has been changed, makes everyone's life easier when working with `git bisect`" msgstr "What/why/how something has been changed, makes everyone's life easier when working with `git bisect`" @@ -1517,7 +1613,7 @@ msgstr "When you are able to verify that it is actually a bug, spend some time t msgid "When you are working on interface configuration and you also wan't to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." msgstr "When you are working on interface configuration and you also wan't to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." -#: ../../contributing/testing.rst:109 +#: ../../contributing/testing.rst:112 msgid "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." msgstr "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." @@ -1529,7 +1625,7 @@ msgstr "When you believe you have found a bug, it is always a good idea to verif msgid "When you wish to have a developer fix a bug that you found, helping them reproduce the issue is beneficial to everyone. Be sure to include information about the hardware you are using, commands that you were running, any other activities that you may have been doing at the time. This additional information can be very useful." msgstr "When you wish to have a developer fix a bug that you found, helping them reproduce the issue is beneficial to everyone. Be sure to include information about the hardware you are using, commands that you were running, any other activities that you may have been doing at the time. This additional information can be very useful." -#: ../../contributing/issues-features.rst:62 +#: ../../contributing/issues-features.rst:66 msgid "Which version of VyOS are you using? ``run show version``" msgstr "Which version of VyOS are you using? ``run show version``" @@ -1574,6 +1670,10 @@ msgstr "You can type ``help`` to get an overview of the available commands, and msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." msgstr "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." +#: ../../contributing/issues-features.rst:74 +msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." +msgstr "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." + #: ../../contributing/build-vyos.rst:470 msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers" msgstr "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers" @@ -1582,10 +1682,23 @@ msgstr "You have your own custom kernel `*.deb` packages in the `packages` folde msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, WireGuard, Intel QAT, Intel NIC" msgstr "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, WireGuard, Intel QAT, Intel NIC" +#: ../../contributing/issues-features.rst:80 +msgid "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there." +msgstr "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there." + +#: ../../contributing/issues-features.rst:84 +msgid "You must include at least the following:" +msgstr "You must include at least the following:" + #: ../../contributing/debugging.rst:166 msgid "You shoudl now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." msgstr "You shoudl now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." +#: ../../contributing/issues-features.rst:31 +#: ../../contributing/issues-features.rst:94 +msgid "You should include the following information:" +msgstr "You should include the following information:" + #: ../../contributing/debugging.rst:166 msgid "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." msgstr "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." @@ -1598,7 +1711,7 @@ msgstr "You then can proceed with cloning your fork or add a new remote to your msgid "Your configuration script or operation mode script which is also written in Python3 should have a line break on 80 characters. This seems to be a bit odd nowadays but as some people also work remotely or program using vi(m) this is a fair good standard which I hope we can rely on." msgstr "Your configuration script or operation mode script which is also written in Python3 should have a line break on 80 characters. This seems to be a bit odd nowadays but as some people also work remotely or program using vi(m) this is a fair good standard which I hope we can rely on." -#: ../../contributing/testing.rst:107 +#: ../../contributing/testing.rst:110 msgid "..." msgstr "..." diff --git a/docs/_locale/ja/documentation.pot b/docs/_locale/ja/documentation.pot index 073e9254..1074c5fd 100644 --- a/docs/_locale/ja/documentation.pot +++ b/docs/_locale/ja/documentation.pot @@ -177,6 +177,10 @@ msgid "If there some troubleshooting guides related to the commands. Explain it msgstr "If there some troubleshooting guides related to the commands. Explain it in the next optional part." #: ../../documentation.rst:448 +msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``" +msgstr "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``" + +#: ../../documentation.rst:448 msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin master``" msgstr "If you also want to update your fork on GitHub, use the following: ``$ git push origin master``" diff --git a/docs/_locale/pt/LC_MESSAGES/cli.mo b/docs/_locale/pt/LC_MESSAGES/cli.mo Binary files differindex 2c519fba..206ed847 100644 --- a/docs/_locale/pt/LC_MESSAGES/cli.mo +++ b/docs/_locale/pt/LC_MESSAGES/cli.mo diff --git a/docs/_locale/pt/LC_MESSAGES/configuration.mo b/docs/_locale/pt/LC_MESSAGES/configuration.mo Binary files differindex 4ddc5742..34c7846c 100644 --- a/docs/_locale/pt/LC_MESSAGES/configuration.mo +++ b/docs/_locale/pt/LC_MESSAGES/configuration.mo diff --git a/docs/_locale/pt/LC_MESSAGES/contributing.mo b/docs/_locale/pt/LC_MESSAGES/contributing.mo Binary files differindex 22ccd3a9..3eabef9b 100644 --- a/docs/_locale/pt/LC_MESSAGES/contributing.mo +++ b/docs/_locale/pt/LC_MESSAGES/contributing.mo diff --git a/docs/_locale/pt/LC_MESSAGES/documentation.mo b/docs/_locale/pt/LC_MESSAGES/documentation.mo Binary files differindex 33a908be..a5bbfec6 100644 --- a/docs/_locale/pt/LC_MESSAGES/documentation.mo +++ b/docs/_locale/pt/LC_MESSAGES/documentation.mo diff --git a/docs/_locale/pt/cli.pot b/docs/_locale/pt/cli.pot index 12dda7c8..697d0fbb 100644 --- a/docs/_locale/pt/cli.pot +++ b/docs/_locale/pt/cli.pot @@ -28,23 +28,23 @@ msgstr "**Working configuration** is the one that is currently being modified in msgid "A VyOS system has three major types of configurations:" msgstr "A VyOS system has three major types of configurations:" -#: ../../cli.rst:576 +#: ../../cli.rst:579 msgid "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit." msgstr "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit." -#: ../../cli.rst:690 +#: ../../cli.rst:693 msgid "Access opmode from config mode" msgstr "Access opmode from config mode" -#: ../../cli.rst:697 +#: ../../cli.rst:700 msgid "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode." msgstr "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode." -#: ../../cli.rst:651 +#: ../../cli.rst:654 msgid "Add comment as an annotation to a configuration node." msgstr "Add comment as an annotation to a configuration node." -#: ../../cli.rst:539 +#: ../../cli.rst:542 msgid "All changes in the working config will thus be lost." msgstr "All changes in the working config will thus be lost." @@ -52,7 +52,7 @@ msgstr "All changes in the working config will thus be lost." msgid "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them." msgstr "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them." -#: ../../cli.rst:676 +#: ../../cli.rst:679 msgid "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show <section>`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment." msgstr "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show <section>`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment." @@ -72,11 +72,11 @@ msgstr "By default, the configuration is displayed in a hierarchy like the above msgid "Command Line Interface" msgstr "Command Line Interface" -#: ../../cli.rst:701 +#: ../../cli.rst:704 msgid "Command completion and syntax help with ``?`` and ``[tab]`` will also work." msgstr "Command completion and syntax help with ``?`` and ``[tab]`` will also work." -#: ../../cli.rst:754 +#: ../../cli.rst:757 msgid "Compare configurations" msgstr "Compare configurations" @@ -92,11 +92,11 @@ msgstr "Configuration Overview" msgid "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered." msgstr "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered." -#: ../../cli.rst:535 +#: ../../cli.rst:538 msgid "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used." msgstr "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used." -#: ../../cli.rst:583 +#: ../../cli.rst:586 msgid "Copy a configuration element." msgstr "Copy a configuration element." @@ -104,7 +104,7 @@ msgstr "Copy a configuration element." msgid "Editing the configuration" msgstr "Editing the configuration" -#: ../../cli.rst:662 +#: ../../cli.rst:665 msgid "Example:" msgstr "Example:" @@ -124,11 +124,11 @@ msgstr "For example typing ``sh`` followed by the ``TAB`` key will complete to ` msgid "Get a collection of all the set commands required which led to the running configuration." msgstr "Get a collection of all the set commands required which led to the running configuration." -#: ../../cli.rst:933 +#: ../../cli.rst:936 msgid "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config." msgstr "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config." -#: ../../cli.rst:919 +#: ../../cli.rst:922 msgid "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:" msgstr "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:" @@ -140,15 +140,15 @@ msgstr "It is also possible to display all :cfgcmd:`set` commands within configu msgid "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`" msgstr "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`" -#: ../../cli.rst:723 +#: ../../cli.rst:726 msgid "Local Archive" msgstr "Local Archive" -#: ../../cli.rst:714 +#: ../../cli.rst:717 msgid "Managing configurations" msgstr "Managing configurations" -#: ../../cli.rst:627 +#: ../../cli.rst:630 msgid "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters." msgstr "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters." @@ -164,31 +164,31 @@ msgstr "Operational mode allows for commands to perform operational system tasks msgid "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``." msgstr "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``." -#: ../../cli.rst:850 +#: ../../cli.rst:853 msgid "Remote Archive" msgstr "Remote Archive" -#: ../../cli.rst:616 +#: ../../cli.rst:619 msgid "Rename a configuration element." msgstr "Rename a configuration element." -#: ../../cli.rst:917 +#: ../../cli.rst:920 msgid "Restore Default" msgstr "Restore Default" -#: ../../cli.rst:725 +#: ../../cli.rst:728 msgid "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong." msgstr "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong." -#: ../../cli.rst:828 +#: ../../cli.rst:831 msgid "Rollback Changes" msgstr "Rollback Changes" -#: ../../cli.rst:835 +#: ../../cli.rst:838 msgid "Rollback to revision N (currently requires reboot)" msgstr "Rollback to revision N (currently requires reboot)" -#: ../../cli.rst:884 +#: ../../cli.rst:887 msgid "Saving and loading manually" msgstr "Saving and loading manually" @@ -200,11 +200,11 @@ msgstr "See the configuration section of this document for more information on c msgid "Seeing and navigating the configuration" msgstr "Seeing and navigating the configuration" -#: ../../cli.rst:810 +#: ../../cli.rst:813 msgid "Show commit revision difference." msgstr "Show commit revision difference." -#: ../../cli.rst:861 +#: ../../cli.rst:864 msgid "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`" msgstr "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`" @@ -228,15 +228,15 @@ msgstr "The :cfgcmd:`show` command within configuration mode will show the worki msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes." msgstr "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes." -#: ../../cli.rst:653 +#: ../../cli.rst:656 msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes." msgstr "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes." -#: ../../cli.rst:784 +#: ../../cli.rst:787 msgid "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M." msgstr "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M." -#: ../../cli.rst:813 +#: ../../cli.rst:816 msgid "The command above also lets you see the difference between two commits. By default the difference with the running config is shown." msgstr "The command above also lets you see the difference between two commits. By default the difference with the running config is shown." @@ -252,11 +252,11 @@ msgstr "The configuration can be edited by the use of :cfgcmd:`set` and :cfgcmd: msgid "The current hierarchy level can be changed by the :cfgcmd:`edit` command." msgstr "The current hierarchy level can be changed by the :cfgcmd:`edit` command." -#: ../../cli.rst:872 +#: ../../cli.rst:875 msgid "The number of revisions don't affect the commit-archive." msgstr "The number of revisions don't affect the commit-archive." -#: ../../cli.rst:930 +#: ../../cli.rst:933 msgid "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too." msgstr "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too." @@ -268,7 +268,7 @@ msgstr "These commands are also relative to the level you are inside and only re msgid "These two commands above are essentially the same, just executed from different levels in the hierarchy." msgstr "These two commands above are essentially the same, just executed from different levels in the hierarchy." -#: ../../cli.rst:824 +#: ../../cli.rst:827 msgid "This means four commits ago we did ``set system ipv6 disable-forwarding``." msgstr "This means four commits ago we did ``set system ipv6 disable-forwarding``." @@ -280,7 +280,7 @@ msgstr "To delete a configuration entry use the :cfgcmd:`delete` command, this a msgid "To enter configuration mode use the ``configure`` command:" msgstr "To enter configuration mode use the ``configure`` command:" -#: ../../cli.rst:658 +#: ../../cli.rst:661 msgid "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text." msgstr "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text." @@ -288,11 +288,11 @@ msgstr "To remove an existing comment from your current configuration, specify a msgid "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_." msgstr "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_." -#: ../../cli.rst:895 +#: ../../cli.rst:898 msgid "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address." msgstr "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address." -#: ../../cli.rst:508 +#: ../../cli.rst:511 msgid "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address." msgstr "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address." @@ -300,15 +300,15 @@ msgstr "Use this command to preserve configuration changes upon reboot. By defau msgid "Use this command to set the value of a parameter or to create a new element." msgstr "Use this command to set the value of a parameter or to create a new element." -#: ../../cli.rst:760 +#: ../../cli.rst:763 msgid "Use this command to spot what the differences are between different configurations." msgstr "Use this command to spot what the differences are between different configurations." -#: ../../cli.rst:552 +#: ../../cli.rst:555 msgid "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes." msgstr "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes." -#: ../../cli.rst:730 +#: ../../cli.rst:733 msgid "View all existing revisions on the local system." msgstr "View all existing revisions on the local system." @@ -324,7 +324,7 @@ msgstr "View the current active configuration in JSON format." msgid "View the current active configuration in readable JSON format." msgstr "View the current active configuration in readable JSON format." -#: ../../cli.rst:852 +#: ../../cli.rst:855 msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." msgstr "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." @@ -332,11 +332,11 @@ msgstr "VyOS can upload the configuration to a remote location after each call t msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." msgstr "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." -#: ../../cli.rst:716 +#: ../../cli.rst:719 msgid "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons." msgstr "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons." -#: ../../cli.rst:756 +#: ../../cli.rst:759 msgid "VyOS lets you compare different configurations." msgstr "VyOS lets you compare different configurations." @@ -348,7 +348,7 @@ msgstr "VyOS makes use of a unified configuration file for the entire system's c msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." msgstr "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." -#: ../../cli.rst:558 +#: ../../cli.rst:561 msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." msgstr "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." @@ -360,7 +360,7 @@ msgstr "When entering the configuration mode you are navigating inside a tree st msgid "When going into configuration mode, prompt changes from ``$`` to ``#``." msgstr "When going into configuration mode, prompt changes from ``$`` to ``#``." -#: ../../cli.rst:692 +#: ../../cli.rst:695 msgid "When inside configuration mode you are not directly able to execute operational commands." msgstr "When inside configuration mode you are not directly able to execute operational commands." @@ -368,7 +368,7 @@ msgstr "When inside configuration mode you are not directly able to execute oper msgid "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt." msgstr "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt." -#: ../../cli.rst:889 +#: ../../cli.rst:892 msgid "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:" msgstr "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:" @@ -384,15 +384,15 @@ msgstr "You are now in a sublevel relative to ``interfaces ethernet eth0``, all msgid "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." msgstr "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." -#: ../../cli.rst:618 +#: ../../cli.rst:621 msgid "You can also rename config subtrees:" msgstr "You can also rename config subtrees:" -#: ../../cli.rst:585 +#: ../../cli.rst:588 msgid "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20." msgstr "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20." -#: ../../cli.rst:830 +#: ../../cli.rst:833 msgid "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot." msgstr "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot." @@ -400,19 +400,23 @@ msgstr "You can rollback configuration changes using the rollback command. This msgid "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``." msgstr "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``." -#: ../../cli.rst:747 +#: ../../cli.rst:504 +msgid "You can specify a commit message with :cfgcmd:`commit comment <message>`." +msgstr "You can specify a commit message with :cfgcmd:`commit comment <message>`." + +#: ../../cli.rst:750 msgid "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally." msgstr "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally." -#: ../../cli.rst:886 +#: ../../cli.rst:889 msgid "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files." msgstr "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files." -#: ../../cli.rst:874 +#: ../../cli.rst:877 msgid "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:" msgstr "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:" -#: ../../cli.rst:927 +#: ../../cli.rst:930 msgid "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active." msgstr "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active." @@ -420,19 +424,19 @@ msgstr "You will be asked if you want to continue. If you accept, you will have msgid "``b`` will scroll back one page" msgstr "``b`` will scroll back one page" -#: ../../cli.rst:866 +#: ../../cli.rst:869 msgid "``ftp://<user>:<passwd>@<host>/<dir>``" msgstr "``ftp://<user>:<passwd>@<host>/<dir>``" -#: ../../cli.rst:870 +#: ../../cli.rst:873 msgid "``git+https://<user>:<passwd>@<host>/<path>``" msgstr "``git+https://<user>:<passwd>@<host>/<path>``" -#: ../../cli.rst:864 +#: ../../cli.rst:867 msgid "``http://<user>:<passwd>@<host>:/<dir>``" msgstr "``http://<user>:<passwd>@<host>:/<dir>``" -#: ../../cli.rst:865 +#: ../../cli.rst:868 msgid "``https://<user>:<passwd>@<host>:/<dir>``" msgstr "``https://<user>:<passwd>@<host>:/<dir>``" @@ -448,11 +452,11 @@ msgstr "``q`` key can be used to cancel output" msgid "``return`` will scroll down one line" msgstr "``return`` will scroll down one line" -#: ../../cli.rst:868 +#: ../../cli.rst:871 msgid "``scp://<user>:<passwd>@<host>:/<dir>``" msgstr "``scp://<user>:<passwd>@<host>:/<dir>``" -#: ../../cli.rst:867 +#: ../../cli.rst:870 msgid "``sftp://<user>:<passwd>@<host>/<dir>``" msgstr "``sftp://<user>:<passwd>@<host>/<dir>``" @@ -460,7 +464,7 @@ msgstr "``sftp://<user>:<passwd>@<host>/<dir>``" msgid "``space`` will scroll down one page" msgstr "``space`` will scroll down one page" -#: ../../cli.rst:869 +#: ../../cli.rst:872 msgid "``tftp://<host>/<dir>``" msgstr "``tftp://<host>/<dir>``" diff --git a/docs/_locale/pt/configuration.pot b/docs/_locale/pt/configuration.pot index 5e3bd81e..098a9f01 100644 --- a/docs/_locale/pt/configuration.pot +++ b/docs/_locale/pt/configuration.pot @@ -89,7 +89,7 @@ msgid "**Already-selected external check**" msgstr "**Already-selected external check**" #: ../../configuration/trafficpolicy/index.rst:547 -#: ../../configuration/trafficpolicy/index.rst:1181 +#: ../../configuration/trafficpolicy/index.rst:1249 msgid "**Applies to:** Inbound traffic." msgstr "**Applies to:** Inbound traffic." @@ -105,6 +105,7 @@ msgstr "**Applies to:** Outbound Traffic." #: ../../configuration/trafficpolicy/index.rst:916 #: ../../configuration/trafficpolicy/index.rst:961 #: ../../configuration/trafficpolicy/index.rst:1020 +#: ../../configuration/trafficpolicy/index.rst:1154 msgid "**Applies to:** Outbound traffic." msgstr "**Applies to:** Outbound traffic." @@ -437,6 +438,10 @@ msgstr "**Queueing discipline** Fair/Flow Queue CoDel." msgid "**Queueing discipline:** Deficit Round Robin." msgstr "**Queueing discipline:** Deficit Round Robin." +#: ../../configuration/trafficpolicy/index.rst:1153 +msgid "**Queueing discipline:** Deficit mode." +msgstr "**Queueing discipline:** Deficit mode." + #: ../../configuration/trafficpolicy/index.rst:766 msgid "**Queueing discipline:** Generalized Random Early Drop." msgstr "**Queueing discipline:** Generalized Random Early Drop." @@ -580,6 +585,10 @@ msgstr "**VyOS Router:**" msgid "**Weight check**" msgstr "**Weight check**" +#: ../../configuration/trafficpolicy/index.rst:1208 +msgid "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." +msgstr "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." + #: ../../_include/interface-dhcp-options.txt:74 msgid "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" msgstr "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" @@ -1511,7 +1520,7 @@ msgstr "ACME" msgid "ACME Directory Resource URI." msgstr "ACME Directory Resource URI." -#: ../../configuration/service/https.rst:59 +#: ../../configuration/service/https.rst:63 msgid "API" msgstr "API" @@ -1964,7 +1973,7 @@ msgstr "Add the public CA certificate for the CA named `name` to the VyOS CLI." msgid "Adding a 2FA with an OTP-key" msgstr "Adding a 2FA with an OTP-key" -#: ../../configuration/loadbalancing/reverse-proxy.rst:263 +#: ../../configuration/loadbalancing/reverse-proxy.rst:301 msgid "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." msgstr "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." @@ -2180,6 +2189,10 @@ msgstr "Allow access to sites in a domain without retrieving them from the Proxy msgid "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." msgstr "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." +#: ../../configuration/service/https.rst:81 +msgid "Allow cross-origin requests from `<origin>`." +msgstr "Allow cross-origin requests from `<origin>`." + #: ../../configuration/service/dns.rst:456 msgid "Allow explicit IPv6 address for the interface." msgstr "Allow explicit IPv6 address for the interface." @@ -2431,7 +2444,7 @@ msgstr "Applying a Rule-Set to a Zone" msgid "Applying a Rule-Set to an Interface" msgstr "Applying a Rule-Set to an Interface" -#: ../../configuration/trafficpolicy/index.rst:1150 +#: ../../configuration/trafficpolicy/index.rst:1218 msgid "Applying a traffic policy" msgstr "Applying a traffic policy" @@ -2691,7 +2704,7 @@ msgstr "Authentication" msgid "Authentication Advanced Options" msgstr "Authentication Advanced Options" -#: ../../configuration/interfaces/ethernet.rst:99 +#: ../../configuration/interfaces/ethernet.rst:115 msgid "Authentication (EAPoL)" msgstr "Authentication (EAPoL)" @@ -2851,7 +2864,7 @@ msgstr "Babel is a modern routing protocol designed to be robust and efficient b msgid "Backend" msgstr "Backend" -#: ../../configuration/loadbalancing/reverse-proxy.rst:299 +#: ../../configuration/loadbalancing/reverse-proxy.rst:339 msgid "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." msgstr "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." @@ -2863,10 +2876,14 @@ msgstr "Balance algorithms:" msgid "Balancing Rules" msgstr "Balancing Rules" -#: ../../configuration/loadbalancing/reverse-proxy.rst:214 +#: ../../configuration/loadbalancing/reverse-proxy.rst:252 msgid "Balancing based on domain name" msgstr "Balancing based on domain name" +#: ../../configuration/loadbalancing/reverse-proxy.rst:365 +msgid "Balancing with HTTP health checks" +msgstr "Balancing with HTTP health checks" + #: ../../configuration/service/pppoe-server.rst:251 msgid "Bandwidth Shaping" msgstr "Bandwidth Shaping" @@ -2936,7 +2953,7 @@ msgstr "Because an aggregator cannot be active without at least one available li msgid "Because existing sessions do not automatically fail over to a new path, the session table can be flushed on each connection state change:" msgstr "Because existing sessions do not automatically fail over to a new path, the session table can be flushed on each connection state change:" -#: ../../configuration/interfaces/ethernet.rst:70 +#: ../../configuration/interfaces/ethernet.rst:86 msgid "Before enabling any hardware segmentation offload a corresponding software offload is required in GSO. Otherwise it becomes possible for a frame to be re-routed between devices and end up being unable to be transmitted." msgstr "Before enabling any hardware segmentation offload a corresponding software offload is required in GSO. Otherwise it becomes possible for a frame to be re-routed between devices and end up being unable to be transmitted." @@ -3155,6 +3172,10 @@ msgstr "By using Pseudo-Ethernet interfaces there will be less system overhead c msgid "Bypassing the webproxy" msgstr "Bypassing the webproxy" +#: ../../configuration/trafficpolicy/index.rst:1151 +msgid "CAKE" +msgstr "CAKE" + #: ../../configuration/pki/index.rst:172 msgid "CA (Certificate Authority)" msgstr "CA (Certificate Authority)" @@ -3797,10 +3818,14 @@ msgstr "Configure protocol used for communication to remote syslog host. This ca msgid "Configure proxy port if it does not listen to the default port 80." msgstr "Configure proxy port if it does not listen to the default port 80." -#: ../../configuration/loadbalancing/reverse-proxy.rst:149 +#: ../../configuration/loadbalancing/reverse-proxy.rst:150 msgid "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>" msgstr "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>" +#: ../../configuration/loadbalancing/reverse-proxy.rst:155 +msgid "Configure requests to the backend server to use SSL encryption without validating server certificate" +msgstr "Configure requests to the backend server to use SSL encryption without validating server certificate" + #: ../../configuration/system/sflow.rst:16 msgid "Configure sFlow agent IPv4 or IPv6 address" msgstr "Configure sFlow agent IPv4 or IPv6 address" @@ -3853,7 +3878,7 @@ msgstr "Configure the discrete port under which the RADIUS server can be reached msgid "Configure the discrete port under which the TACACS server can be reached." msgstr "Configure the discrete port under which the TACACS server can be reached." -#: ../../configuration/loadbalancing/reverse-proxy.rst:175 +#: ../../configuration/loadbalancing/reverse-proxy.rst:212 msgid "Configure the load-balancing reverse-proxy service for HTTP." msgstr "Configure the load-balancing reverse-proxy service for HTTP." @@ -4053,6 +4078,10 @@ msgstr "Create `<user>` for local authentication on this system. The users passw msgid "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet." msgstr "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet." +#: ../../configuration/pki/index.rst:373 +msgid "Create a CA chain and leaf certificates" +msgstr "Create a CA chain and leaf certificates" + #: ../../configuration/interfaces/bridge.rst:199 msgid "Create a basic bridge" msgstr "Create a basic bridge" @@ -4636,6 +4665,10 @@ msgstr "Defines the maximum `<number>` of unanswered echo requests. Upon reachin msgid "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**." msgstr "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**." +#: ../../configuration/trafficpolicy/index.rst:1213 +msgid "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100." +msgstr "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100." + #: ../../configuration/system/console.rst:21 msgid "Defines the specified device as a system console. Available console devices can be (see completion helper):" msgstr "Defines the specified device as a system console. Available console devices can be (see completion helper):" @@ -4856,6 +4889,10 @@ msgstr "Disabled by default - no kernel module loaded." msgid "Disables caching of peer information from forwarded NHRP Resolution Reply packets. This can be used to reduce memory consumption on big NBMA subnets." msgstr "Disables caching of peer information from forwarded NHRP Resolution Reply packets. This can be used to reduce memory consumption on big NBMA subnets." +#: ../../configuration/trafficpolicy/index.rst:1173 +msgid "Disables flow isolation, all traffic passes through a single queue." +msgstr "Disables flow isolation, all traffic passes through a single queue." + #: ../../configuration/protocols/static.rst:99 msgid "Disables interface-based IPv4 static route." msgstr "Disables interface-based IPv4 static route." @@ -4974,10 +5011,14 @@ msgstr "Do not allow IPv6 nexthop tracking to resolve via the default route. Thi msgid "Do not assign a link-local IPv6 address to this interface." msgstr "Do not assign a link-local IPv6 address to this interface." -#: ../../configuration/trafficpolicy/index.rst:1210 +#: ../../configuration/trafficpolicy/index.rst:1278 msgid "Do not configure IFB as the first step. First create everything else of your traffic-policy, and then you can configure IFB. Otherwise you might get the ``RTNETLINK answer: File exists`` error, which can be solved with ``sudo ip link delete ifb0``." msgstr "Do not configure IFB as the first step. First create everything else of your traffic-policy, and then you can configure IFB. Otherwise you might get the ``RTNETLINK answer: File exists`` error, which can be solved with ``sudo ip link delete ifb0``." +#: ../../configuration/service/https.rst:90 +msgid "Do not leave introspection enabled in production, it is a security risk." +msgstr "Do not leave introspection enabled in production, it is a security risk." + #: ../../configuration/protocols/bgp.rst:609 msgid "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained." msgstr "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained." @@ -5230,6 +5271,10 @@ msgstr "Enable BFD on a single BGP neighbor" msgid "Enable DHCP failover configuration for this address pool." msgstr "Enable DHCP failover configuration for this address pool." +#: ../../configuration/service/https.rst:88 +msgid "Enable GraphQL Schema introspection." +msgstr "Enable GraphQL Schema introspection." + #: ../../configuration/interfaces/wireless.rst:178 msgid "Enable HT-delayed Block Ack ``[DELAYED-BA]``" msgstr "Enable HT-delayed Block Ack ``[DELAYED-BA]``" @@ -5440,6 +5485,10 @@ msgstr "Enabled on-demand PPPoE connections bring up the link only when traffic msgid "Enables Cisco style authentication on NHRP packets. This embeds the secret plaintext password to the outgoing NHRP packets. Incoming NHRP packets on this interface are discarded unless the secret password is present. Maximum length of the secret is 8 characters." msgstr "Enables Cisco style authentication on NHRP packets. This embeds the secret plaintext password to the outgoing NHRP packets. Incoming NHRP packets on this interface are discarded unless the secret password is present. Maximum length of the secret is 8 characters." +#: ../../configuration/loadbalancing/reverse-proxy.rst:166 +msgid "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range." +msgstr "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range." + #: ../../configuration/vrf/index.rst:480 msgid "Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN. If the value specified is auto, the label value is automatically assigned from a pool maintained." msgstr "Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN. If the value specified is auto, the label value is automatically assigned from a pool maintained." @@ -5488,6 +5537,10 @@ msgstr "Enabling this function increases the risk of bandwidth saturation." msgid "Enforce strict path checking" msgstr "Enforce strict path checking" +#: ../../configuration/service/https.rst:77 +msgid "Enforce strict path checking." +msgstr "Enforce strict path checking." + #: ../../configuration/interfaces/bonding.rst:31 msgid "Enslave `<member>` interface to bond `<interface>`." msgstr "Enslave `<member>` interface to bond `<interface>`." @@ -5747,7 +5800,7 @@ msgid "Example: to be appended is set to ``vyos.net`` and the URL received is `` msgstr "Example: to be appended is set to ``vyos.net`` and the URL received is ``www/foo.html``, the system will use the generated, final URL of ``www.vyos.net/foo.html``." #: ../../configuration/container/index.rst:216 -#: ../../configuration/service/https.rst:77 +#: ../../configuration/service/https.rst:110 msgid "Example Configuration" msgstr "Example Configuration" @@ -5789,7 +5842,8 @@ msgstr "Example synproxy" #: ../../configuration/interfaces/bridge.rst:196 #: ../../configuration/interfaces/macsec.rst:153 #: ../../configuration/interfaces/wireless.rst:541 -#: ../../configuration/loadbalancing/reverse-proxy.rst:190 +#: ../../configuration/loadbalancing/reverse-proxy.rst:227 +#: ../../configuration/pki/index.rst:370 #: ../../configuration/policy/index.rst:46 #: ../../configuration/protocols/bgp.rst:1118 #: ../../configuration/protocols/isis.rst:336 @@ -6078,6 +6132,10 @@ msgstr "First, on both routers run the operational command \"generate pki key-pa msgid "First, one of the systems generate the key using the :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki>` command. Once generated, you will need to install this key on the local system, then copy and install this key to the remote router." msgstr "First, one of the systems generate the key using the :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki>` command. Once generated, you will need to install this key on the local system, then copy and install this key to the remote router." +#: ../../configuration/pki/index.rst:393 +msgid "First, we create the root certificate authority." +msgstr "First, we create the root certificate authority." + #: ../../configuration/interfaces/openvpn.rst:176 msgid "First, you need to generate a key by running ``run generate pki openvpn shared-secret install <name>`` from configuration mode. You can use any name, we will use ``s2s``." msgstr "First, you need to generate a key by running ``run generate pki openvpn shared-secret install <name>`` from configuration mode. You can use any name, we will use ``s2s``." @@ -6138,6 +6196,30 @@ msgstr "Flow Export" msgid "Flow and packet-based balancing" msgstr "Flow and packet-based balancing" +#: ../../configuration/trafficpolicy/index.rst:1196 +msgid "Flows are defined by source-destination host pairs." +msgstr "Flows are defined by source-destination host pairs." + +#: ../../configuration/trafficpolicy/index.rst:1181 +msgid "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows." +msgstr "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows." + +#: ../../configuration/trafficpolicy/index.rst:1186 +msgid "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows." +msgstr "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows." + +#: ../../configuration/trafficpolicy/index.rst:1191 +msgid "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)." +msgstr "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)." + +#: ../../configuration/trafficpolicy/index.rst:1177 +msgid "Flows are defined only by destination address." +msgstr "Flows are defined only by destination address." + +#: ../../configuration/trafficpolicy/index.rst:1204 +msgid "Flows are defined only by source address." +msgstr "Flows are defined only by source address." + #: ../../configuration/system/flow-accounting.rst:10 msgid "Flows can be exported via two different protocols: NetFlow (versions 5, 9 and 10/IPFIX) and sFlow. Additionally, you may save flows to an in-memory table internally in a router." msgstr "Flows can be exported via two different protocols: NetFlow (versions 5, 9 and 10/IPFIX) and sFlow. Additionally, you may save flows to an in-memory table internally in a router." @@ -6341,7 +6423,7 @@ msgstr "For the :ref:`destination-nat66` rule, the destination address of the pa msgid "For the average user a serial console has no advantage over a console offered by a directly attached keyboard and screen. Serial consoles are much slower, taking up to a second to fill a 80 column by 24 line screen. Serial consoles generally only support non-proportional ASCII text, with limited support for languages other than English." msgstr "For the average user a serial console has no advantage over a console offered by a directly attached keyboard and screen. Serial consoles are much slower, taking up to a second to fill a 80 column by 24 line screen. Serial consoles generally only support non-proportional ASCII text, with limited support for languages other than English." -#: ../../configuration/trafficpolicy/index.rst:1183 +#: ../../configuration/trafficpolicy/index.rst:1251 msgid "For the ingress traffic of an interface, there is only one policy you can directly apply, a **Limiter** policy. You cannot apply a shaping policy directly to the ingress traffic of any interface because shaping only works for outbound traffic." msgstr "For the ingress traffic of an interface, there is only one policy you can directly apply, a **Limiter** policy. You cannot apply a shaping policy directly to the ingress traffic of any interface because shaping only works for outbound traffic." @@ -6379,6 +6461,10 @@ msgstr "For transit traffic, which is received by the router and forwarded, base msgid "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``" msgstr "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``" +#: ../../configuration/loadbalancing/reverse-proxy.rst:161 +msgid "For web application providing information about their state HTTP health checks can be used to determine their availability." +msgstr "For web application providing information about their state HTTP health checks can be used to determine their availability." + #: ../../configuration/protocols/ospf.rst:350 msgid "Formally, a virtual link looks like a point-to-point network connecting two ABR from one area one of which physically connected to a backbone area. This pseudo-network is considered to belong to a backbone area." msgstr "Formally, a virtual link looks like a point-to-point network connecting two ABR from one area one of which physically connected to a backbone area. This pseudo-network is considered to belong to a backbone area." @@ -6553,7 +6639,7 @@ msgstr "Given the following example we have one VyOS router acting as OpenVPN se msgid "Gloabal" msgstr "Gloabal" -#: ../../configuration/loadbalancing/reverse-proxy.rst:153 +#: ../../configuration/loadbalancing/reverse-proxy.rst:190 msgid "Global" msgstr "Global" @@ -6577,7 +6663,7 @@ msgstr "Global Options Firewall Configuration" msgid "Global options" msgstr "Global options" -#: ../../configuration/loadbalancing/reverse-proxy.rst:155 +#: ../../configuration/loadbalancing/reverse-proxy.rst:192 msgid "Global parameters" msgstr "Global parameters" @@ -6590,6 +6676,10 @@ msgstr "Global settings" msgid "Graceful Restart" msgstr "Graceful Restart" +#: ../../configuration/service/https.rst:84 +msgid "GraphQL" +msgstr "GraphQL" + #: ../../configuration/highavailability/index.rst:236 msgid "Gratuitous ARP" msgstr "Gratuitous ARP" @@ -6627,6 +6717,10 @@ msgstr "HTTP basic authentication username" msgid "HTTP client" msgstr "HTTP client" +#: ../../configuration/loadbalancing/reverse-proxy.rst:160 +msgid "HTTP health check" +msgstr "HTTP health check" + #: ../../configuration/interfaces/wireless.rst:137 msgid "HT (High Throughput) capabilities (802.11n)" msgstr "HT (High Throughput) capabilities (802.11n)" @@ -7859,6 +7953,10 @@ msgstr "In order to separate traffic, Fair Queue uses a classifier based on sour msgid "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands." msgstr "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands." +#: ../../configuration/interfaces/ethernet.rst:111 +msgid "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled." +msgstr "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled." + #: ../../configuration/interfaces/ethernet.rst:95 msgid "In order to use TSO/LRO with VMXNET3 adaters one must also enable the SG offloading option." msgstr "In order to use TSO/LRO with VMXNET3 adaters one must also enable the SG offloading option." @@ -8480,6 +8578,10 @@ msgstr "LNS are often used to connect to a LAC (L2TP Access Concentrator)." msgid "Label Distribution Protocol" msgstr "Label Distribution Protocol" +#: ../../configuration/pki/index.rst:447 +msgid "Lastly, we can create the leaf certificates that devices and users will utilise." +msgstr "Lastly, we can create the leaf certificates that devices and users will utilise." + #: ../../configuration/interfaces/l2tpv3.rst:11 msgid "Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that can be used as an alternative protocol to :ref:`mpls` for encapsulation of multiprotocol Layer 2 communications traffic over IP networks. Like L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier requirements." msgstr "Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that can be used as an alternative protocol to :ref:`mpls` for encapsulation of multiprotocol Layer 2 communications traffic over IP networks. Like L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier requirements." @@ -8520,7 +8622,7 @@ msgstr "Let SNMP daemon listen only on IP address 192.0.2.1" msgid "Lets assume the following topology:" msgstr "Lets assume the following topology:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:193 +#: ../../configuration/loadbalancing/reverse-proxy.rst:230 msgid "Level 4 balancing" msgstr "Level 4 balancing" @@ -8540,7 +8642,7 @@ msgstr "Lifetime is decremented by the number of seconds since the last RA - use msgid "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." msgstr "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." -#: ../../configuration/loadbalancing/reverse-proxy.rst:165 +#: ../../configuration/loadbalancing/reverse-proxy.rst:202 msgid "Limit allowed cipher algorithms used during SSL/TLS handshake" msgstr "Limit allowed cipher algorithms used during SSL/TLS handshake" @@ -8552,7 +8654,7 @@ msgstr "Limit logins to `<limit>` per every ``rate-time`` seconds. Rate limit mu msgid "Limit logins to ``rate-limit`` attemps per every `<seconds>`. Rate time must be between 15 and 600 seconds." msgstr "Limit logins to ``rate-limit`` attemps per every `<seconds>`. Rate time must be between 15 and 600 seconds." -#: ../../configuration/loadbalancing/reverse-proxy.rst:160 +#: ../../configuration/loadbalancing/reverse-proxy.rst:197 msgid "Limit maximum number of connections" msgstr "Limit maximum number of connections" @@ -9339,6 +9441,10 @@ msgid "Multiple VLAN to VNI mappings can be configured against the same SVD. Thi msgstr "Multiple VLAN to VNI mappings can be configured against the same SVD. This allows for a significant scaling of the number of VNIs since a separate VXLAN interface is no longer required for each VNI." #: ../../configuration/system/host-name.rst:68 +msgid "Multiple aliases can be specified per host-name." +msgstr "Multiple aliases can be specified per host-name." + +#: ../../configuration/system/host-name.rst:68 msgid "Multiple aliases can pe specified per host-name." msgstr "Multiple aliases can pe specified per host-name." @@ -9859,7 +9965,7 @@ msgstr "Once a neighbor has been found, the entry is considered to be valid for msgid "Once a route is assessed a penalty, the penalty is decreased by half each time a predefined amount of time elapses (half-life-time). When the accumulated penalties fall below a predefined threshold (reuse-value), the route is unsuppressed and added back into the BGP routing table." msgstr "Once a route is assessed a penalty, the penalty is decreased by half each time a predefined amount of time elapses (half-life-time). When the accumulated penalties fall below a predefined threshold (reuse-value), the route is unsuppressed and added back into the BGP routing table." -#: ../../configuration/trafficpolicy/index.rst:1152 +#: ../../configuration/trafficpolicy/index.rst:1220 msgid "Once a traffic-policy is created, you can apply it to an interface:" msgstr "Once a traffic-policy is created, you can apply it to an interface:" @@ -10039,7 +10145,7 @@ msgstr "Operating Modes" #: ../../configuration/interfaces/bonding.rst:512 #: ../../configuration/interfaces/dummy.rst:51 -#: ../../configuration/interfaces/ethernet.rst:132 +#: ../../configuration/interfaces/ethernet.rst:148 #: ../../configuration/interfaces/loopback.rst:41 #: ../../configuration/interfaces/macsec.rst:106 #: ../../configuration/interfaces/pppoe.rst:278 @@ -10417,6 +10523,10 @@ msgstr "Per default every packet is sampled (that is, the sampling rate is 1)." msgid "Per default the user session is being replaced if a second authentication request succeeds. Such session requests can be either denied or allowed entirely, which would allow multiple sessions for a user in the latter case. If it is denied, the second session is being rejected even if the authentication succeeds, the user has to terminate its first session and can then authentication again." msgstr "Per default the user session is being replaced if a second authentication request succeeds. Such session requests can be either denied or allowed entirely, which would allow multiple sessions for a user in the latter case. If it is denied, the second session is being rejected even if the authentication succeeds, the user has to terminate its first session and can then authentication again." +#: ../../configuration/trafficpolicy/index.rst:1200 +msgid "Perform NAT lookup before applying flow-isolation rules." +msgstr "Perform NAT lookup before applying flow-isolation rules." + #: ../../configuration/system/option.rst:108 msgid "Performance" msgstr "Performance" @@ -10523,7 +10633,7 @@ msgstr "Port Groups" #: ../../configuration/interfaces/bonding.rst:282 #: ../../configuration/interfaces/bridge.rst:188 -#: ../../configuration/interfaces/ethernet.rst:124 +#: ../../configuration/interfaces/ethernet.rst:140 msgid "Port Mirror (SPAN)" msgstr "Port Mirror (SPAN)" @@ -10809,7 +10919,7 @@ msgstr "Publish a port for the container." msgid "Pull a new image for container" msgstr "Pull a new image for container" -#: ../../configuration/interfaces/ethernet.rst:117 +#: ../../configuration/interfaces/ethernet.rst:133 #: ../../configuration/interfaces/virtual-ethernet.rst:39 #: ../../configuration/interfaces/wireless.rst:408 msgid "QinQ (802.1ad)" @@ -11023,7 +11133,7 @@ msgstr "Recommended for larger installations." msgid "Record types" msgstr "Record types" -#: ../../configuration/loadbalancing/reverse-proxy.rst:174 +#: ../../configuration/loadbalancing/reverse-proxy.rst:211 msgid "Redirect HTTP to HTTPS" msgstr "Redirect HTTP to HTTPS" @@ -11055,7 +11165,7 @@ msgstr "Redundancy and load sharing. There are multiple NAT66 devices at the edg msgid "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" msgstr "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" -#: ../../configuration/interfaces/ethernet.rst:110 +#: ../../configuration/interfaces/ethernet.rst:126 #: ../../configuration/interfaces/virtual-ethernet.rst:33 #: ../../configuration/interfaces/wireless.rst:401 msgid "Regular VLANs (802.1q)" @@ -11402,11 +11512,11 @@ msgstr "Rule-Sets" msgid "Rule-set overview" msgstr "Rule-set overview" -#: ../../configuration/loadbalancing/reverse-proxy.rst:220 +#: ../../configuration/loadbalancing/reverse-proxy.rst:258 msgid "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" msgstr "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" -#: ../../configuration/loadbalancing/reverse-proxy.rst:257 +#: ../../configuration/loadbalancing/reverse-proxy.rst:295 msgid "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." msgstr "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." @@ -11414,11 +11524,11 @@ msgstr "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` an msgid "Rule 110 is hit, so connection is accepted." msgstr "Rule 110 is hit, so connection is accepted." -#: ../../configuration/loadbalancing/reverse-proxy.rst:260 +#: ../../configuration/loadbalancing/reverse-proxy.rst:298 msgid "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." msgstr "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." -#: ../../configuration/loadbalancing/reverse-proxy.rst:223 +#: ../../configuration/loadbalancing/reverse-proxy.rst:261 msgid "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" msgstr "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" @@ -11537,7 +11647,7 @@ msgstr "SSH was designed as a replacement for Telnet and for unsecured remote sh msgid "SSID to be used in IEEE 802.11 management frames" msgstr "SSID to be used in IEEE 802.11 management frames" -#: ../../configuration/loadbalancing/reverse-proxy.rst:294 +#: ../../configuration/loadbalancing/reverse-proxy.rst:333 msgid "SSL Bridging" msgstr "SSL Bridging" @@ -11650,6 +11760,10 @@ msgstr "Scripting" msgid "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly." msgstr "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly." +#: ../../configuration/pki/index.rst:411 +msgid "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates." +msgstr "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates." + #: ../../configuration/service/ipoe-server.rst:186 #: ../../configuration/service/pppoe-server.rst:148 #: ../../configuration/vpn/l2tp.rst:191 @@ -11857,6 +11971,10 @@ msgstr "Set Virtual Tunnel Interface" msgid "Set a container description" msgstr "Set a container description" +#: ../../configuration/trafficpolicy/index.rst:1169 +msgid "Set a description for the shaper." +msgstr "Set a description for the shaper." + #: ../../configuration/system/conntrack.rst:113 msgid "Set a destination and/or source address. Accepted input for ipv4:" msgstr "Set a destination and/or source address. Accepted input for ipv4:" @@ -11877,7 +11995,7 @@ msgstr "Set a limit on the maximum number of concurrent logged-in users on the s msgid "Set a meaningful description." msgstr "Set a meaningful description." -#: ../../configuration/service/https.rst:63 +#: ../../configuration/service/https.rst:67 msgid "Set a named api key. Every key has the same, full permissions on the system." msgstr "Set a named api key. Every key has the same, full permissions on the system." @@ -11904,7 +12022,7 @@ msgstr "Set action for the route-map policy." msgid "Set action to take on entries matching this rule." msgstr "Set action to take on entries matching this rule." -#: ../../configuration/service/https.rst:79 +#: ../../configuration/service/https.rst:112 msgid "Set an API-KEY is the minimal configuration to get a working API Endpoint." msgstr "Set an API-KEY is the minimal configuration to get a working API Endpoint." @@ -12309,6 +12427,14 @@ msgstr "Set the address of the backend port" msgid "Set the address of the backend server to which the incoming traffic will be forwarded" msgstr "Set the address of the backend server to which the incoming traffic will be forwarded" +#: ../../configuration/service/https.rst:94 +msgid "Set the authentication type for GraphQL, default option is key. Available options are:" +msgstr "Set the authentication type for GraphQL, default option is key. Available options are:" + +#: ../../configuration/service/https.rst:106 +msgid "Set the byte length of the JWT secret. Default is 32." +msgstr "Set the byte length of the JWT secret. Default is 32." + #: ../../configuration/highavailability/index.rst:295 msgid "Set the default VRRP version to use. This defaults to 2, but IPv6 instances will always use version 3." msgstr "Set the default VRRP version to use. This defaults to 2, but IPv6 instances will always use version 3." @@ -12345,6 +12471,10 @@ msgstr "Set the global setting for invalid packets." msgid "Set the global setting for related connections." msgstr "Set the global setting for related connections." +#: ../../configuration/service/https.rst:102 +msgid "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds." +msgstr "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds." + #: ../../configuration/service/https.rst:28 msgid "Set the listen port of the local API, this has no effect on the webserver. The default is port 8080" msgstr "Set the listen port of the local API, this has no effect on the webserver. The default is port 8080" @@ -12361,6 +12491,10 @@ msgstr "Set the maximum length of A-MPDU pre-EOF padding that the station can re msgid "Set the maximum number of TCP half-open connections." msgstr "Set the maximum number of TCP half-open connections." +#: ../../configuration/service/https.rst:60 +msgid "Set the maximum request body size in megabytes. Default is 1MB." +msgstr "Set the maximum request body size in megabytes. Default is 1MB." + #: ../../_include/interface-eapol.txt:12 msgid "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry used for authentication of the remote side. If an intermediate CA certificate is specified, then all parent CA certificates that exist in the PKI, such as the root CA or additional intermediate CAs, will automatically be used during certificate validation to ensure that the full chain of trust is available." msgstr "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry used for authentication of the remote side. If an intermediate CA certificate is specified, then all parent CA certificates that exist in the PKI, such as the root CA or additional intermediate CAs, will automatically be used during certificate validation to ensure that the full chain of trust is available." @@ -12429,6 +12563,10 @@ msgstr "Set the routing table to forward packet with." msgid "Set the session id, which is a 32-bit integer value. Uniquely identifies the session being created. The value used must match the peer_session_id value being used at the peer." msgstr "Set the session id, which is a 32-bit integer value. Uniquely identifies the session being created. The value used must match the peer_session_id value being used at the peer." +#: ../../configuration/trafficpolicy/index.rst:1164 +msgid "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth." +msgstr "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth." + #: ../../configuration/system/conntrack.rst:31 msgid "Set the size of the hash table. The connection tracking hash table makes searching the connection tracking table faster. The hash table uses “buckets” to record entries in the connection tracking table." msgstr "Set the size of the hash table. The connection tracking hash table makes searching the connection tracking table faster. The hash table uses “buckets” to record entries in the connection tracking table." @@ -12459,6 +12597,18 @@ msgstr "Set the window scale factor for TCP window scaling" msgid "Set window of concurrently valid codes." msgstr "Set window of concurrently valid codes." +#: ../../configuration/loadbalancing/reverse-proxy.rst:172 +msgid "Sets the HTTP method to be used, can be either: option, get, post, put" +msgstr "Sets the HTTP method to be used, can be either: option, get, post, put" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:177 +msgid "Sets the endpoint to be used for health checks" +msgstr "Sets the endpoint to be used for health checks" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:182 +msgid "Sets the expected result condition for considering a server healthy. Some possible examples are:" +msgstr "Sets the expected result condition for considering a server healthy. Some possible examples are:" + #: ../../configuration/container/index.rst:16 msgid "Sets the image name in the hub registry" msgstr "Sets the image name in the hub registry" @@ -12683,7 +12833,7 @@ msgstr "Show a list of installed certificates" msgid "Show all BFD peers" msgstr "Show all BFD peers" -#: ../../configuration/interfaces/ethernet.rst:210 +#: ../../configuration/interfaces/ethernet.rst:226 msgid "Show available offloading functions on given `<interface>`" msgstr "Show available offloading functions on given `<interface>`" @@ -12701,7 +12851,7 @@ msgstr "Show bridge `<name>` mdb displays the current multicast group membership #: ../../configuration/interfaces/bonding.rst:516 #: ../../configuration/interfaces/dummy.rst:55 -#: ../../configuration/interfaces/ethernet.rst:136 +#: ../../configuration/interfaces/ethernet.rst:152 #: ../../configuration/interfaces/loopback.rst:45 #: ../../configuration/interfaces/virtual-ethernet.rst:59 msgid "Show brief interface information." @@ -12745,7 +12895,7 @@ msgstr "Show detailed information about the underlaying physical links on given #: ../../configuration/interfaces/bonding.rst:531 #: ../../configuration/interfaces/dummy.rst:67 -#: ../../configuration/interfaces/ethernet.rst:150 +#: ../../configuration/interfaces/ethernet.rst:166 #: ../../configuration/interfaces/pppoe.rst:282 #: ../../configuration/interfaces/sstp-client.rst:121 #: ../../configuration/interfaces/virtual-ethernet.rst:72 @@ -12777,7 +12927,7 @@ msgstr "Show general information about specific WireGuard interface" msgid "Show info about the Wireguard service. It also shows the latest handshake." msgstr "Show info about the Wireguard service. It also shows the latest handshake." -#: ../../configuration/interfaces/ethernet.rst:169 +#: ../../configuration/interfaces/ethernet.rst:185 msgid "Show information about physical `<interface>`" msgstr "Show information about physical `<interface>`" @@ -12895,7 +13045,7 @@ msgstr "Show the logs of all firewall; show all ipv6 firewall logs; show all log msgid "Show the route" msgstr "Show the route" -#: ../../configuration/interfaces/ethernet.rst:242 +#: ../../configuration/interfaces/ethernet.rst:258 msgid "Show transceiver information from plugin modules, e.g SFP+, QSFP" msgstr "Show transceiver information from plugin modules, e.g SFP+, QSFP" @@ -13475,7 +13625,7 @@ msgstr "Specify the identifier value of the site-level aggregator (SLA) on the i msgid "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." msgstr "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." -#: ../../configuration/loadbalancing/reverse-proxy.rst:170 +#: ../../configuration/loadbalancing/reverse-proxy.rst:207 msgid "Specify the minimum required TLS version 1.2 or 1.3" msgstr "Specify the minimum required TLS version 1.2 or 1.3" @@ -13524,6 +13674,10 @@ msgid "Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety msgstr "Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety of uses, including speeding up a web server by caching repeated requests, caching web, DNS and other computer network lookups for a group of people sharing network resources, and aiding security by filtering traffic. Although primarily used for HTTP and FTP, Squid includes limited support for several other protocols including Internet Gopher, SSL,[6] TLS and HTTPS. Squid does not support the SOCKS protocol." #: ../../configuration/service/https.rst:56 +msgid "Start Webserver in given VRF." +msgstr "Start Webserver in given VRF." + +#: ../../configuration/service/https.rst:56 msgid "Start Webserver in given VRF." msgstr "Start Webserver in given VRF." @@ -13843,7 +13997,7 @@ msgstr "Temporary disable this RADIUS server. It won't be queried." msgid "Temporary disable this TACACS server. It won't be queried." msgstr "Temporary disable this TACACS server. It won't be queried." -#: ../../configuration/loadbalancing/reverse-proxy.rst:248 +#: ../../configuration/loadbalancing/reverse-proxy.rst:286 msgid "Terminate SSL" msgstr "Terminate SSL" @@ -13879,7 +14033,7 @@ msgstr "Testing and Validation" msgid "Thanks to this discovery, any subsequent traffic between PC4 and PC5 will not be using the multicast-address between the leaves as they both know behind which Leaf the PCs are connected. This saves traffic as less multicast packets sent reduces the load on the network, which improves scalability when more leaves are added." msgstr "Thanks to this discovery, any subsequent traffic between PC4 and PC5 will not be using the multicast-address between the leaves as they both know behind which Leaf the PCs are connected. This saves traffic as less multicast packets sent reduces the load on the network, which improves scalability when more leaves are added." -#: ../../configuration/trafficpolicy/index.rst:1194 +#: ../../configuration/trafficpolicy/index.rst:1262 msgid "That is how it is possible to do the so-called \"ingress shaping\"." msgstr "That is how it is possible to do the so-called \"ingress shaping\"." @@ -13923,7 +14077,7 @@ msgstr "The DN and password to bind as while performing searches. As the passwor msgid "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." msgstr "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." -#: ../../configuration/loadbalancing/reverse-proxy.rst:218 +#: ../../configuration/loadbalancing/reverse-proxy.rst:256 msgid "The HTTP service listen on TCP port 80." msgstr "The HTTP service listen on TCP port 80." @@ -14040,7 +14194,7 @@ msgstr "The ``address`` can be configured either on the VRRP interface or on not msgid "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" msgstr "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" -#: ../../configuration/loadbalancing/reverse-proxy.rst:305 +#: ../../configuration/loadbalancing/reverse-proxy.rst:345 msgid "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" msgstr "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" @@ -14048,15 +14202,15 @@ msgstr "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HT msgid "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." msgstr "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." -#: ../../configuration/loadbalancing/reverse-proxy.rst:251 +#: ../../configuration/loadbalancing/reverse-proxy.rst:289 msgid "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." msgstr "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." -#: ../../configuration/loadbalancing/reverse-proxy.rst:302 +#: ../../configuration/loadbalancing/reverse-proxy.rst:342 msgid "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." msgstr "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." -#: ../../configuration/loadbalancing/reverse-proxy.rst:254 +#: ../../configuration/loadbalancing/reverse-proxy.rst:292 msgid "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." msgstr "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." @@ -14121,7 +14275,7 @@ msgstr "The below referenced IP address `192.0.2.1` is used as example address r msgid "The bonding interface provides a method for aggregating multiple network interfaces into a single logical \"bonded\" interface, or LAG, or ether-channel, or port-channel. The behavior of the bonded interfaces depends upon the mode; generally speaking, modes provide either hot standby or load balancing services. Additionally, link integrity monitoring may be performed." msgstr "The bonding interface provides a method for aggregating multiple network interfaces into a single logical \"bonded\" interface, or LAG, or ether-channel, or port-channel. The behavior of the bonded interfaces depends upon the mode; generally speaking, modes provide either hot standby or load balancing services. Additionally, link integrity monitoring may be performed." -#: ../../configuration/trafficpolicy/index.rst:1179 +#: ../../configuration/trafficpolicy/index.rst:1247 msgid "The case of ingress shaping" msgstr "The case of ingress shaping" @@ -14397,7 +14551,7 @@ msgstr "The following commands translate to \"--net host\" when the container is msgid "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" msgstr "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:215 +#: ../../configuration/loadbalancing/reverse-proxy.rst:253 msgid "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." msgstr "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." @@ -14413,11 +14567,11 @@ msgstr "The following configuration on VyOS applies to all following 3rd party v msgid "The following configuration reverse-proxy terminate SSL." msgstr "The following configuration reverse-proxy terminate SSL." -#: ../../configuration/loadbalancing/reverse-proxy.rst:249 +#: ../../configuration/loadbalancing/reverse-proxy.rst:287 msgid "The following configuration terminates SSL on the router." msgstr "The following configuration terminates SSL on the router." -#: ../../configuration/loadbalancing/reverse-proxy.rst:295 +#: ../../configuration/loadbalancing/reverse-proxy.rst:334 msgid "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." msgstr "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." @@ -14618,7 +14772,7 @@ msgstr "The most visible application of the protocol is for access to shell acco msgid "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." msgstr "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." -#: ../../configuration/loadbalancing/reverse-proxy.rst:185 +#: ../../configuration/loadbalancing/reverse-proxy.rst:222 msgid "The name of the service can be different, in this example it is only for convenience." msgstr "The name of the service can be different, in this example it is only for convenience." @@ -16161,11 +16315,19 @@ msgstr "This commands creates a bridge that is used to bind traffic on eth1 vlan msgid "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." msgstr "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." -#: ../../configuration/loadbalancing/reverse-proxy.rst:195 +#: ../../configuration/loadbalancing/reverse-proxy.rst:367 +msgid "This configuration enables HTTP health checks on backend servers." +msgstr "This configuration enables HTTP health checks on backend servers." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:232 msgid "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." msgstr "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." -#: ../../configuration/loadbalancing/reverse-proxy.rst:177 +#: ../../configuration/pki/index.rst:375 +msgid "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user." +msgstr "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:214 msgid "This configuration listen on port 80 and redirect incoming requests to HTTPS:" msgstr "This configuration listen on port 80 and redirect incoming requests to HTTPS:" @@ -16665,7 +16827,7 @@ msgstr "This will show you a statistic of all rule-sets since the last boot." msgid "This will show you a summary of rule-sets and groups" msgstr "This will show you a summary of rule-sets and groups" -#: ../../configuration/trafficpolicy/index.rst:1188 +#: ../../configuration/trafficpolicy/index.rst:1256 msgid "This workaround lets you apply a shaping policy to the ingress traffic by first redirecting it to an in-between virtual interface (`Intermediate Functional Block`_). There, in that virtual interface, you will be able to apply any of the policies that work for outbound traffic, for instance, a shaping one." msgstr "This workaround lets you apply a shaping policy to the ingress traffic by first redirecting it to an in-between virtual interface (`Intermediate Functional Block`_). There, in that virtual interface, you will be able to apply any of the policies that work for outbound traffic, for instance, a shaping one." @@ -16915,7 +17077,7 @@ msgstr "To enable RADIUS based authentication, the authentication mode needs to msgid "To enable bandwidth shaping via RADIUS, the option rate-limit needs to be enabled." msgstr "To enable bandwidth shaping via RADIUS, the option rate-limit needs to be enabled." -#: ../../configuration/service/https.rst:68 +#: ../../configuration/service/https.rst:72 msgid "To enable debug messages. Available via :opcmd:`show log` or :opcmd:`monitor log`" msgstr "To enable debug messages. Available via :opcmd:`show log` or :opcmd:`monitor log`" @@ -17188,6 +17350,10 @@ msgstr "USB to serial converters will handle most of their work in software so y msgid "UUCP subsystem" msgstr "UUCP subsystem" +#: ../../configuration/interfaces/ethernet.rst:73 +msgid "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/" +msgstr "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/" + #: ../../configuration/interfaces/vxlan.rst:102 msgid "Unicast" msgstr "Unicast" @@ -18192,7 +18358,7 @@ msgstr "VHT operating channel center frequency - center freq 2 (for use with the #: ../../configuration/interfaces/bonding.rst:275 #: ../../configuration/interfaces/bridge.rst:123 -#: ../../configuration/interfaces/ethernet.rst:107 +#: ../../configuration/interfaces/ethernet.rst:123 #: ../../configuration/interfaces/pseudo-ethernet.rst:63 #: ../../configuration/interfaces/virtual-ethernet.rst:30 #: ../../configuration/interfaces/wireless.rst:398 @@ -19264,7 +19430,7 @@ msgstr "You can now \"dial\" the peer with the follwoing command: ``sstpc --log- msgid "You can now SSH into your system using admin/admin as a default user supplied from the ``lfkeitel/tacacs_plus:latest`` container." msgstr "You can now SSH into your system using admin/admin as a default user supplied from the ``lfkeitel/tacacs_plus:latest`` container." -#: ../../configuration/trafficpolicy/index.rst:1158 +#: ../../configuration/trafficpolicy/index.rst:1226 msgid "You can only apply one policy per interface and direction, but you could reuse a policy on different interfaces and directions:" msgstr "You can only apply one policy per interface and direction, but you could reuse a policy on different interfaces and directions:" @@ -19432,11 +19598,11 @@ msgstr ":abbr:`GENEVE (Generic Network Virtualization Encapsulation)` supports a msgid ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (or IPIP/IPsec, SIT/IPsec, or any other stateless tunnel protocol over IPsec) is the usual way to protect the traffic inside a tunnel." msgstr ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (or IPIP/IPsec, SIT/IPsec, or any other stateless tunnel protocol over IPsec) is the usual way to protect the traffic inside a tunnel." -#: ../../configuration/interfaces/ethernet.rst:74 +#: ../../configuration/interfaces/ethernet.rst:90 msgid ":abbr:`GRO (Generic receive offload)` is the complement to GSO. Ideally any frame assembled by GRO should be segmented to create an identical sequence of frames using GSO, and any sequence of frames segmented by GSO should be able to be reassembled back to the original by GRO. The only exception to this is IPv4 ID in the case that the DF bit is set for a given IP header. If the value of the IPv4 ID is not sequentially incrementing it will be altered so that it is when a frame assembled via GRO is segmented via GSO." msgstr ":abbr:`GRO (Generic receive offload)` is the complement to GSO. Ideally any frame assembled by GRO should be segmented to create an identical sequence of frames using GSO, and any sequence of frames segmented by GSO should be able to be reassembled back to the original by GRO. The only exception to this is IPv4 ID in the case that the DF bit is set for a given IP header. If the value of the IPv4 ID is not sequentially incrementing it will be altered so that it is when a frame assembled via GRO is segmented via GSO." -#: ../../configuration/interfaces/ethernet.rst:64 +#: ../../configuration/interfaces/ethernet.rst:80 msgid ":abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is meant to deal with cases where device drivers cannot perform the offloads described above. What occurs in GSO is that a given skbuff will have its data broken out over multiple skbuffs that have been resized to match the MSS provided via skb_shinfo()->gso_size." msgstr ":abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is meant to deal with cases where device drivers cannot perform the offloads described above. What occurs in GSO is that a given skbuff will have its data broken out over multiple skbuffs that have been resized to match the MSS provided via skb_shinfo()->gso_size." @@ -19464,6 +19630,10 @@ msgstr ":abbr:`LDP (Label Distribution Protocol)` is a TCP based MPLS signaling msgid ":abbr:`LLDP (Link Layer Discovery Protocol)` is a vendor-neutral link layer protocol in the Internet Protocol Suite used by network devices for advertising their identity, capabilities, and neighbors on an IEEE 802 local area network, principally wired Ethernet. The protocol is formally referred to by the IEEE as Station and Media Access Control Connectivity Discovery specified in IEEE 802.1AB and IEEE 802.3-2012 section 6 clause 79." msgstr ":abbr:`LLDP (Link Layer Discovery Protocol)` is a vendor-neutral link layer protocol in the Internet Protocol Suite used by network devices for advertising their identity, capabilities, and neighbors on an IEEE 802 local area network, principally wired Ethernet. The protocol is formally referred to by the IEEE as Station and Media Access Control Connectivity Discovery specified in IEEE 802.1AB and IEEE 802.3-2012 section 6 clause 79." +#: ../../configuration/interfaces/ethernet.rst:64 +msgid ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing." +msgstr ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing." + #: ../../configuration/interfaces/macsec.rst:74 msgid ":abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys between individual peers." msgstr ":abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys between individual peers." @@ -19528,7 +19698,7 @@ msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:` msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." -#: ../../configuration/interfaces/ethernet.rst:82 +#: ../../configuration/interfaces/ethernet.rst:98 msgid ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" msgstr ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" @@ -19724,6 +19894,10 @@ msgstr "`4. Add optional parameters`_" msgid "`<name>` must be identical on both sides!" msgstr "`<name>` must be identical on both sides!" +#: ../../configuration/trafficpolicy/index.rst:1156 +msgid "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge." +msgstr "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge." + #: ../../configuration/pki/index.rst:204 msgid "``$ tail -n +2 ca.key | head -n -1 | tr -d '\\n'``" msgstr "``$ tail -n +2 ca.key | head -n -1 | tr -d '\\n'``" @@ -20292,6 +20466,10 @@ msgstr "``key-exchange`` which protocol should be used to initialize the connect msgid "``key`` - a private key, which will be used for authenticating local router on remote peer:" msgstr "``key`` - a private key, which will be used for authenticating local router on remote peer:" +#: ../../configuration/service/https.rst:96 +msgid "``key`` use API keys configured in ``service https api keys``" +msgstr "``key`` use API keys configured in ``service https api keys``" + #: ../../configuration/system/option.rst:137 msgid "``latency``: A server profile focused on lowering network latency. This profile favors performance over power savings by setting ``intel_pstate`` and ``min_perf_pct=100``." msgstr "``latency``: A server profile focused on lowering network latency. This profile favors performance over power savings by setting ``intel_pstate`` and ``min_perf_pct=100``." @@ -20775,6 +20953,18 @@ msgstr "``static`` - Statically configured routes" msgid "``station`` - Connects to another access point" msgstr "``station`` - Connects to another access point" +#: ../../configuration/loadbalancing/reverse-proxy.rst:185 +msgid "``status 200-399`` Expecting a non-failure response code" +msgstr "``status 200-399`` Expecting a non-failure response code" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:184 +msgid "``status 200`` Expecting a 200 response code" +msgstr "``status 200`` Expecting a 200 response code" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:186 +msgid "``string success`` Expecting the string `success` in the response body" +msgstr "``string success`` Expecting the string `success` in the response body" + #: ../../configuration/firewall/ipv4.rst:103 #: ../../configuration/firewall/ipv6.rst:103 msgid "``synproxy``: synproxy the packet." @@ -20824,6 +21014,10 @@ msgstr "``throughput``: A server profile focused on improving network throughput msgid "``timeout`` keep-alive timeout in seconds <2-86400> (default 120) IKEv1 only" msgstr "``timeout`` keep-alive timeout in seconds <2-86400> (default 120) IKEv1 only" +#: ../../configuration/service/https.rst:98 +msgid "``token`` use JWT tokens." +msgstr "``token`` use JWT tokens." + #: ../../configuration/interfaces/bonding.rst:80 msgid "``transmit-load-balance`` - Adaptive transmit load balancing: channel bonding that does not require any special switch support." msgstr "``transmit-load-balance`` - Adaptive transmit load balancing: channel bonding that does not require any special switch support." @@ -20888,6 +21082,22 @@ msgstr "``vnc`` - Virtual Network Control (VNC)" msgid "``vti`` - use a VTI interface for traffic encryption. Any traffic, which will be send to VTI interface will be encrypted and send to this peer. Using VTI makes IPSec configuration much flexible and easier in complex situation, and allows to dynamically add/delete remote networks, reachable via a peer, as in this mode router don't need to create additional SA/policy for each remote network:" msgstr "``vti`` - use a VTI interface for traffic encryption. Any traffic, which will be send to VTI interface will be encrypted and send to this peer. Using VTI makes IPSec configuration much flexible and easier in complex situation, and allows to dynamically add/delete remote networks, reachable via a peer, as in this mode router don't need to create additional SA/policy for each remote network:" +#: ../../configuration/pki/index.rst:386 +msgid "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA." +msgstr "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA." + +#: ../../configuration/pki/index.rst:383 +msgid "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA." +msgstr "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA." + +#: ../../configuration/pki/index.rst:389 +msgid "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA." +msgstr "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA." + +#: ../../configuration/pki/index.rst:381 +msgid "``vyos_root_ca`` is the root certificate authority." +msgstr "``vyos_root_ca`` is the root certificate authority." + #: ../../configuration/vpn/site2site_ipsec.rst:59 msgid "``x509`` - options for x509 authentication mode:" msgstr "``x509`` - options for x509 authentication mode:" @@ -21249,10 +21459,18 @@ msgstr "ip-forwarding" msgid "isisd" msgstr "isisd" +#: ../../configuration/interfaces/ethernet.rst:106 +msgid "it can be used with any NIC" +msgstr "it can be used with any NIC" + #: ../../configuration/interfaces/ethernet.rst:90 msgid "it can be used with any NIC," msgstr "it can be used with any NIC," +#: ../../configuration/interfaces/ethernet.rst:108 +msgid "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)" +msgstr "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)" + #: ../../configuration/interfaces/ethernet.rst:92 msgid "it does not increase hardware device interrupt rate (although it does introduce inter-processor interrupts (IPIs))." msgstr "it does not increase hardware device interrupt rate (although it does introduce inter-processor interrupts (IPIs))." @@ -21647,6 +21865,10 @@ msgstr "slow: Request partner to transmit LACPDUs every 30 seconds" msgid "smtp-server" msgstr "smtp-server" +#: ../../configuration/interfaces/ethernet.rst:107 +msgid "software filters can easily be added to hash over new protocols" +msgstr "software filters can easily be added to hash over new protocols" + #: ../../configuration/interfaces/ethernet.rst:91 msgid "software filters can easily be added to hash over new protocols," msgstr "software filters can easily be added to hash over new protocols," diff --git a/docs/_locale/pt/contributing.pot b/docs/_locale/pt/contributing.pot index 6587eb08..d7f2ae4c 100644 --- a/docs/_locale/pt/contributing.pot +++ b/docs/_locale/pt/contributing.pot @@ -72,6 +72,18 @@ msgstr "A good approach for writing commit messages is actually to have a look a msgid "A number of flags can be set up to change the behaviour of VyOS at runtime. These flags can be toggled using either environment variables or creating files." msgstr "A number of flags can be set up to change the behaviour of VyOS at runtime. These flags can be toggled using either environment variables or creating files." +#: ../../contributing/issues-features.rst:86 +msgid "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature." +msgstr "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature." + +#: ../../contributing/issues-features.rst:42 +msgid "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed." +msgstr "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed." + +#: ../../contributing/issues-features.rst:33 +msgid "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session." +msgstr "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session." + #: ../../contributing/development.rst:74 msgid "A single, short, summary of the commit (recommended 50 characters or less, not exceeding 80 characters) containing a prefix of the changed component and the corresponding Phabricator_ reference e.g. ``snmp: T1111:`` or ``ethernet: T2222:`` - multiple components could be concatenated as in ``snmp: ethernet: T3333``" msgstr "A single, short, summary of the commit (recommended 50 characters or less, not exceeding 80 characters) containing a prefix of the changed component and the corresponding Phabricator_ reference e.g. ``snmp: T1111:`` or ``ethernet: T2222:`` - multiple components could be concatenated as in ``snmp: ethernet: T3333``" @@ -93,7 +105,7 @@ msgstr "Acronyms also **must** be capitalized to visually distinguish them from msgid "Add file to Git index using ``git add myfile``, or for a whole directory: ``git add somedir/*``" msgstr "Add file to Git index using ``git add myfile``, or for a whole directory: ``git add somedir/*``" -#: ../../contributing/testing.rst:100 +#: ../../contributing/testing.rst:103 msgid "Add one or more IP addresses" msgstr "Add one or more IP addresses" @@ -155,6 +167,14 @@ msgstr "Any \"modified\" package may refer to an altered version of e.g. vyos-1x msgid "Any packages in the packages directory will be added to the iso during build, replacing the upstream ones. Make sure you delete them (both the source directories and built deb packages) if you want to build an iso from purely upstream packages." msgstr "Any packages in the packages directory will be added to the iso during build, replacing the upstream ones. Make sure you delete them (both the source directories and built deb packages) if you want to build an iso from purely upstream packages." +#: ../../contributing/issues-features.rst:100 +msgid "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?" +msgstr "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?" + +#: ../../contributing/issues-features.rst:99 +msgid "Are there any limitations (hardware support, resource usage)?" +msgstr "Are there any limitations (hardware support, resource usage)?" + #: ../../contributing/testing.rst:57 msgid "As Smoketests will alter the system configuration and you are logged in remote you may loose your connection to the system." msgstr "As Smoketests will alter the system configuration and you are logged in remote you may loose your connection to the system." @@ -219,6 +239,10 @@ msgstr "Boot Timing" msgid "Bug Report/Issue" msgstr "Bug Report/Issue" +#: ../../contributing/issues-features.rst:117 +msgid "Bug reports that lack reproducing procedures." +msgstr "Bug reports that lack reproducing procedures." + #: ../../contributing/build-vyos.rst:825 msgid "Build" msgstr "Build" @@ -303,7 +327,7 @@ msgstr "Command definitions are purely declarative, and cannot contain any logic msgid "Commit the changes by calling ``git commit``. Please use a meaningful commit headline (read above) and don't forget to reference the Phabricator_ ID." msgstr "Commit the changes by calling ``git commit``. Please use a meaningful commit headline (read above) and don't forget to reference the Phabricator_ ID." -#: ../../contributing/testing.rst:152 +#: ../../contributing/testing.rst:155 msgid "Config Load Tests" msgstr "Config Load Tests" @@ -331,7 +355,7 @@ msgstr "Continuous Integration" msgid "Customize" msgstr "Customize" -#: ../../contributing/testing.rst:101 +#: ../../contributing/testing.rst:104 msgid "DHCP client and DHCPv6 prefix delegation" msgstr "DHCP client and DHCPv6 prefix delegation" @@ -440,7 +464,7 @@ msgid "Every change set must be consistent (self containing)! Do not fix multipl msgstr "Every change set must be consistent (self containing)! Do not fix multiple bugs in a single commit. If you already worked on multiple fixes in the same file use `git add --patch` to only add the parts related to the one issue into your upcoming commit." #: ../../contributing/development.rst:412 -#: ../../contributing/testing.rst:66 +#: ../../contributing/testing.rst:69 msgid "Example:" msgstr "Example:" @@ -473,6 +497,14 @@ msgstr "FRR" msgid "Feature Request" msgstr "Feature Request" +#: ../../contributing/issues-features.rst:72 +msgid "Feature Requests" +msgstr "Feature Requests" + +#: ../../contributing/issues-features.rst:116 +msgid "Feature requests that do not include required information and need clarification." +msgstr "Feature requests that do not include required information and need clarification." + #: ../../contributing/build-vyos.rst:600 msgid "Firmware" msgstr "Firmware" @@ -578,11 +610,15 @@ msgstr "Horrible: \"Tcp connection timeout\"" msgid "Horrible: \"frobnication algorithm.\"" msgstr "Horrible: \"frobnication algorithm.\"" -#: ../../contributing/issues-features.rst:63 +#: ../../contributing/issues-features.rst:67 msgid "How can we reproduce this Bug?" msgstr "How can we reproduce this Bug?" -#: ../../contributing/testing.rst:103 +#: ../../contributing/issues-features.rst:98 +msgid "How you'd configure it by hand there?" +msgstr "How you'd configure it by hand there?" + +#: ../../contributing/testing.rst:106 msgid "IP and IPv6 options" msgstr "IP and IPv6 options" @@ -606,14 +642,30 @@ msgstr "If a verb is essential, keep it. For example, in the help text of ``set msgid "If applicable a reference to a previous commit should be made linking those commits nicely when browsing the history: ``After commit abcd12ef (\"snmp: this is a headline\") a Python import statement is missing, throwing the following exception: ABCDEF``" msgstr "If applicable a reference to a previous commit should be made linking those commits nicely when browsing the history: ``After commit abcd12ef (\"snmp: this is a headline\") a Python import statement is missing, throwing the following exception: ABCDEF``" +#: ../../contributing/issues-features.rst:46 +msgid "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable." +msgstr "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable." + #: ../../contributing/development.rst:64 msgid "If there is no Phabricator_ reference in the commits of your pull request, we have to ask you to amend the commit message. Otherwise we will have to reject it." msgstr "If there is no Phabricator_ reference in the commits of your pull request, we have to ask you to amend the commit message. Otherwise we will have to reject it." +#: ../../contributing/issues-features.rst:126 +msgid "If there is no response after further two weeks, the task will be automatically closed." +msgstr "If there is no response after further two weeks, the task will be automatically closed." + +#: ../../contributing/issues-features.rst:124 +msgid "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply." +msgstr "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply." + #: ../../contributing/build-vyos.rst:739 msgid "If you are brave enough to build yourself an ISO image containing any modified package from our GitHub organisation - this is the place to be." msgstr "If you are brave enough to build yourself an ISO image containing any modified package from our GitHub organisation - this is the place to be." +#: ../../contributing/issues-features.rst:50 +msgid "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report." +msgstr "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report." + #: ../../contributing/build-vyos.rst:602 msgid "If you upgrade your kernel or include new drivers you may need new firmware. Build a new ``vyos-linux-firmware`` package with the included helper scripts." msgstr "If you upgrade your kernel or include new drivers you may need new firmware. Build a new ``vyos-linux-firmware`` package with the included helper scripts." @@ -626,7 +678,7 @@ msgstr "In a big system, such as VyOS, that is comprised of multiple components, msgid "In addition this also helps when browsing the GitHub codebase on a mobile device if you happen to be a crazy scientist." msgstr "In addition this also helps when browsing the GitHub codebase on a mobile device if you happen to be a crazy scientist." -#: ../../contributing/issues-features.rst:56 +#: ../../contributing/issues-features.rst:60 msgid "In order to open up a bug-report/feature request you need to create yourself an account on VyOS Phabricator_. On the left side of the specific project (VyOS 1.2 or VyOS 1.3) you will find quick-links for opening a bug-report/feature request." msgstr "In order to open up a bug-report/feature request you need to create yourself an account on VyOS Phabricator_. On the left side of the specific project (VyOS 1.2 or VyOS 1.3) you will find quick-links for opening a bug-report/feature request." @@ -690,10 +742,14 @@ msgstr "Intel QAT" msgid "Inter QAT" msgstr "Inter QAT" -#: ../../contributing/testing.rst:91 +#: ../../contributing/testing.rst:94 msgid "Interface based tests" msgstr "Interface based tests" +#: ../../contributing/issues-features.rst:96 +msgid "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?" +msgstr "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?" + #: ../../contributing/issues-features.rst:5 msgid "Issues/Feature requests" msgstr "Issues/Feature requests" @@ -706,6 +762,10 @@ msgstr "Issues or bugs are found in any software project. VyOS is not an excepti msgid "It's an Ada program and requires GNAT and gprbuild for building, dependencies are properly specified so just follow debuild's suggestions." msgstr "It's an Ada program and requires GNAT and gprbuild for building, dependencies are properly specified so just follow debuild's suggestions." +#: ../../contributing/issues-features.rst:103 +msgid "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions." +msgstr "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions." + #: ../../contributing/debugging.rst:58 msgid "It is also possible to set up the debugging using environment variables. In that case, the name will be (in uppercase) VYOS_FEATURE_DEBUG." msgstr "It is also possible to set up the debugging using environment variables. In that case, the name will be (in uppercase) VYOS_FEATURE_DEBUG." @@ -762,7 +822,7 @@ msgstr "Linux Kernel" msgid "Live System" msgstr "Live System" -#: ../../contributing/testing.rst:102 +#: ../../contributing/testing.rst:105 msgid "MTU size" msgstr "MTU size" @@ -770,11 +830,11 @@ msgstr "MTU size" msgid "Make your changes and save them. Do the following for all changes files to record them in your created Git commit:" msgstr "Make your changes and save them. Do the following for all changes files to record them in your created Git commit:" -#: ../../contributing/testing.rst:61 +#: ../../contributing/testing.rst:64 msgid "Manual Smoketest Run" msgstr "Manual Smoketest Run" -#: ../../contributing/testing.rst:169 +#: ../../contributing/testing.rst:172 msgid "Manual config load test" msgstr "Manual config load test" @@ -851,7 +911,7 @@ msgstr "Now you are prepared with two new aliases ``vybld`` and ``vybld_crux`` t msgid "Old concept/syntax" msgstr "Old concept/syntax" -#: ../../contributing/testing.rst:63 +#: ../../contributing/testing.rst:66 msgid "On the other hand - as each test is contain in its own file - one can always execute a single Smoketest by hand by simply running the Python test scripts." msgstr "On the other hand - as each test is contain in its own file - one can always execute a single Smoketest by hand by simply running the Python test scripts." @@ -863,7 +923,7 @@ msgstr "Once you have the required dependencies installed, you may proceed with msgid "Once you run ``show xyz`` and your condition is triggered you should be dropped into the python debugger:" msgstr "Once you run ``show xyz`` and your condition is triggered you should be dropped into the python debugger:" -#: ../../contributing/testing.rst:171 +#: ../../contributing/testing.rst:174 msgid "One is not bound to load all configurations one after another but can also load individual test configurations on his own." msgstr "One is not bound to load all configurations one after another but can also load individual test configurations on his own." @@ -903,7 +963,7 @@ msgstr "Our code is split into several modules. VyOS is composed of multiple ind msgid "Our op mode scripts use the python-vici module, which is not included in Debian's build, and isn't quite easy to integrate in that build. For this reason we debianize that module by hand now, using this procedure:" msgstr "Our op mode scripts use the python-vici module, which is not included in Debian's build, and isn't quite easy to integrate in that build. For this reason we debianize that module by hand now, using this procedure:" -#: ../../contributing/testing.rst:93 +#: ../../contributing/testing.rst:96 msgid "Our smoketests not only test daemons and serives, but also check if what we configure for an interface works. Thus there is a common base classed named: ``base_interfaces_test.py`` which holds all the common code that an interface supports and is tested." msgstr "Our smoketests not only test daemons and serives, but also check if what we configure for an interface works. Thus there is a common base classed named: ``base_interfaces_test.py`` which holds all the common code that an interface supports and is tested." @@ -936,11 +996,11 @@ msgstr "Please use the following template as good starting point when developing msgid "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface." msgstr "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface." -#: ../../contributing/testing.rst:104 +#: ../../contributing/testing.rst:107 msgid "Port description" msgstr "Port description" -#: ../../contributing/testing.rst:105 +#: ../../contributing/testing.rst:108 msgid "Port disable" msgstr "Port disable" @@ -964,7 +1024,11 @@ msgstr "Prerequisites" msgid "Priorities" msgstr "Priorities" -#: ../../contributing/issues-features.rst:61 +#: ../../contributing/issues-features.rst:91 +msgid "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required." +msgstr "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required." + +#: ../../contributing/issues-features.rst:65 msgid "Provide as much information as you can" msgstr "Provide as much information as you can" @@ -996,7 +1060,7 @@ msgstr "Rationale: this seems to be the unwritten standard in network device CLI msgid "Recent versions use the ``vyos.frr`` framework. The Python class is located inside our ``vyos-1x:python/vyos/frr.py``. It comes with an embedded debugging/ (print style) debugger as vyos.ifconfig does." msgstr "Recent versions use the ``vyos.frr`` framework. The Python class is located inside our ``vyos-1x:python/vyos/frr.py``. It comes with an embedded debugging/ (print style) debugger as vyos.ifconfig does." -#: ../../contributing/issues-features.rst:54 +#: ../../contributing/issues-features.rst:58 msgid "Report a Bug" msgstr "Report a Bug" @@ -1041,7 +1105,7 @@ msgstr "Some VyOS packages (namely vyos-1x) come with build-time tests which ver msgid "Some abbreviations are traditionally written in mixed case. Generally, if it contains words \"over\" or \"version\", the letter **should** be lowercase. If there's an accepted spelling (especially if defined by an RFC or another standard), it **must** be followed." msgstr "Some abbreviations are traditionally written in mixed case. Generally, if it contains words \"over\" or \"version\", the letter **should** be lowercase. If there's an accepted spelling (especially if defined by an RFC or another standard), it **must** be followed." -#: ../../contributing/testing.rst:202 +#: ../../contributing/testing.rst:205 msgid "Some of the configurations have preconditions which need to be met. Those most likely include generation of crypographic keys before the config can be applied - you will get a commit error otherwise. If you are interested how those preconditions are fulfilled check the vyos-build_ repository and the ``scripts/check-qemu-install`` file." msgstr "Some of the configurations have preconditions which need to be met. Those most likely include generation of crypographic keys before the config can be applied - you will get a commit error otherwise. If you are interested how those preconditions are fulfilled check the vyos-build_ repository and the ``scripts/check-qemu-install`` file." @@ -1077,6 +1141,14 @@ msgstr "Suppose you want to make a change in the webproxy script but yet you do msgid "System Startup" msgstr "System Startup" +#: ../../contributing/issues-features.rst:108 +msgid "Task auto-closing" +msgstr "Task auto-closing" + +#: ../../contributing/issues-features.rst:118 +msgid "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)." +msgstr "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)." + #: ../../contributing/development.rst:214 msgid "Template processor **should** be used for generating config files. Built-in string formatting **may** be used for simple line-oriented formats where every line is self-contained, such as iptables rules. Template processor **must** be used for structured, multi-line formats such as those used by ISC DHCPd." msgstr "Template processor **should** be used for generating config files. Built-in string formatting **may** be used for simple line-oriented formats where every line is self-contained, such as iptables rules. Template processor **must** be used for structured, multi-line formats such as those used by ISC DHCPd." @@ -1137,11 +1209,15 @@ msgstr "The ``verify()`` function takes your internal representation of the conf msgid "The bash (or better vbash) completion in VyOS is defined in *templates*. Templates are text files (called ``node.def``) stored in a directory tree. The directory names define the command names, and template files define the command behaviour. Before VyOS 1.2 (crux) this files were created by hand. After a complex redesign process_ the new style template are automatically generated from a XML input file." msgstr "The bash (or better vbash) completion in VyOS is defined in *templates*. Templates are text files (called ``node.def``) stored in a directory tree. The directory names define the command names, and template files define the command behaviour. Before VyOS 1.2 (crux) this files were created by hand. After a complex redesign process_ the new style template are automatically generated from a XML input file." +#: ../../contributing/issues-features.rst:39 +msgid "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be." +msgstr "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be." + #: ../../contributing/build-vyos.rst:116 msgid "The build process needs to be built on a local file system, building on SMB or NFS shares will result in the container failing to build properly! VirtualBox Drive Share is also not an option as block device operations are not implemented and the drive is always mounted as \"nodev\"" msgstr "The build process needs to be built on a local file system, building on SMB or NFS shares will result in the container failing to build properly! VirtualBox Drive Share is also not an option as block device operations are not implemented and the drive is always mounted as \"nodev\"" -#: ../../contributing/testing.rst:159 +#: ../../contributing/testing.rst:162 msgid "The configurations are all derived from production systems and can not only act as a testcase but also as reference if one wants to enable a certain feature. The configurations can be found here: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" msgstr "The configurations are all derived from production systems and can not only act as a testcase but also as reference if one wants to enable a certain feature. The configurations can be found here: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" @@ -1161,7 +1237,7 @@ msgstr "The default template processor for VyOS code is Jinja2_." msgid "The easiest way to compile your package is with the above mentioned :ref:`build_docker` container, it includes all required dependencies for all VyOS related packages." msgstr "The easiest way to compile your package is with the above mentioned :ref:`build_docker` container, it includes all required dependencies for all VyOS related packages." -#: ../../contributing/testing.rst:164 +#: ../../contributing/testing.rst:167 msgid "The entire test is controlled by the main wrapper script ``/usr/bin/vyos-configtest`` which behaves in the same way as the main smoketest script. It scans the folder for potential configuration files and issues a ``load`` command one after another." msgstr "The entire test is controlled by the main wrapper script ``/usr/bin/vyos-configtest`` which behaves in the same way as the main smoketest script. It scans the folder for potential configuration files and issues a ``load`` command one after another." @@ -1201,7 +1277,7 @@ msgstr "The most obvious reasons could be:" msgid "The original repo is at https://github.com/dmbaturin/hvinfo" msgstr "The original repo is at https://github.com/dmbaturin/hvinfo" -#: ../../contributing/testing.rst:154 +#: ../../contributing/testing.rst:157 msgid "The other part of our tests are called \"config load tests\". The config load tests will load - one after another - arbitrary configuration files to test if the configuration migration scripts work as designed and that a given set of functionality still can be loaded with a fresh VyOS ISO image." msgstr "The other part of our tests are called \"config load tests\". The config load tests will load - one after another - arbitrary configuration files to test if the configuration migration scripts work as designed and that a given set of functionality still can be loaded with a fresh VyOS ISO image." @@ -1265,6 +1341,10 @@ msgstr "There are extensions to e.g. VIM (xmllint) which will help you to get yo msgid "There are two flags available to aid in debugging configuration scripts. Since configuration loading issues will manifest during boot, the flags are passed as kernel boot parameters." msgstr "There are two flags available to aid in debugging configuration scripts. Since configuration loading issues will manifest during boot, the flags are passed as kernel boot parameters." +#: ../../contributing/issues-features.rst:110 +msgid "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"." +msgstr "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"." + #: ../../contributing/build-vyos.rst:297 msgid "This ISO can be customized with the following list of configure options. The full and current list can be generated with ``./build-vyos-image --help``:" msgstr "This ISO can be customized with the following list of configure options. The full and current list can be generated with ``./build-vyos-image --help``:" @@ -1281,6 +1361,10 @@ msgstr "This chapter lists those exceptions and gives you a brief overview what msgid "This is done by utilizing the ``systemd-bootchart`` package which is now installed by default on the VyOS 1.3 (equuleus) branch. The configuration is also versioned so we get comparable results. ``systemd-bootchart`` is configured using this file: bootchart.conf_" msgstr "This is done by utilizing the ``systemd-bootchart`` package which is now installed by default on the VyOS 1.3 (equuleus) branch. The configuration is also versioned so we get comparable results. ``systemd-bootchart`` is configured using this file: bootchart.conf_" +#: ../../contributing/issues-features.rst:122 +msgid "This is what will happen when a task is set to \"Needs reporter action\":" +msgstr "This is what will happen when a task is set to \"Needs reporter action\":" + #: ../../contributing/development.rst:132 msgid "This means the file in question (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) is located in the ``vyatta-webproxy`` package which can be found here: https://github.com/vyos/vyatta-webproxy" msgstr "This means the file in question (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) is located in the ``vyatta-webproxy`` package which can be found here: https://github.com/vyos/vyatta-webproxy" @@ -1305,11 +1389,11 @@ msgstr "This will guide you through the process of building a VyOS ISO using Doc msgid "This will guide you through the process of building a VyOS ISO using Docker_. This process has been tested on clean installs of Debian Jessie, Stretch, and Buster." msgstr "This will guide you through the process of building a VyOS ISO using Docker_. This process has been tested on clean installs of Debian Jessie, Stretch, and Buster." -#: ../../contributing/testing.rst:148 +#: ../../contributing/testing.rst:151 msgid "This will limit the `bond` interface test to only make use of `eth1` and `eth2` as member ports." msgstr "This will limit the `bond` interface test to only make use of `eth1` and `eth2` as member ports." -#: ../../contributing/testing.rst:98 +#: ../../contributing/testing.rst:101 msgid "Those common tests consists out of:" msgstr "Those common tests consists out of:" @@ -1353,6 +1437,10 @@ msgstr "To enable boot time graphing change the Kernel commandline and add the f msgid "To enable debugging just run: ``$ touch /tmp/vyos.frr.debug``" msgstr "To enable debugging just run: ``$ touch /tmp/vyos.frr.debug``" +#: ../../contributing/testing.rst:60 +msgid "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``." +msgstr "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``." + #: ../../contributing/development.rst:547 msgid "To ensure uniform look and feel, and improve readability, we should follow a set of guidelines consistently." msgstr "To ensure uniform look and feel, and improve readability, we should follow a set of guidelines consistently." @@ -1413,7 +1501,7 @@ msgstr "Useful commands are:" msgid "VIF (incl. VIF-S/VIF-C)" msgstr "VIF (incl. VIF-S/VIF-C)" -#: ../../contributing/testing.rst:106 +#: ../../contributing/testing.rst:109 msgid "VLANs (QinQ and regular 802.1q)" msgstr "VLANs (QinQ and regular 802.1q)" @@ -1457,6 +1545,10 @@ msgstr "VyOS makes use of Jenkins_ as our Continuous Integration (CI) service. O msgid "We again make use of a helper script and some patches to make the build work. Just run the following command:" msgstr "We again make use of a helper script and some patches to make the build work. Just run the following command:" +#: ../../contributing/issues-features.rst:114 +msgid "We assign that status to:" +msgstr "We assign that status to:" + #: ../../contributing/testing.rst:25 msgid "We differentiate in two independent tests, which are both run in parallel by two separate QEmu instances which are launched via ``make test`` and ``make testc`` from within the vyos-build_ repository." msgstr "We differentiate in two independent tests, which are both run in parallel by two separate QEmu instances which are launched via ``make test`` and ``make testc`` from within the vyos-build_ repository." @@ -1473,6 +1565,10 @@ msgstr "We now need to mount some required, volatile filesystems" msgid "We only accept bugfixes in packages other than https://github.com/vyos/vyos-1x as no new functionality should use the old style templates (``node.def`` and Perl/BASH code. Use the new style XML/Python interface instead." msgstr "We only accept bugfixes in packages other than https://github.com/vyos/vyos-1x as no new functionality should use the old style templates (``node.def`` and Perl/BASH code. Use the new style XML/Python interface instead." +#: ../../contributing/issues-features.rst:128 +msgid "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!" +msgstr "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!" + #: ../../contributing/development.rst:87 msgid "What/why/how something has been changed, makes everyone's life easier when working with `git bisect`" msgstr "What/why/how something has been changed, makes everyone's life easier when working with `git bisect`" @@ -1517,7 +1613,7 @@ msgstr "When you are able to verify that it is actually a bug, spend some time t msgid "When you are working on interface configuration and you also wan't to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." msgstr "When you are working on interface configuration and you also wan't to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." -#: ../../contributing/testing.rst:109 +#: ../../contributing/testing.rst:112 msgid "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." msgstr "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." @@ -1529,7 +1625,7 @@ msgstr "When you believe you have found a bug, it is always a good idea to verif msgid "When you wish to have a developer fix a bug that you found, helping them reproduce the issue is beneficial to everyone. Be sure to include information about the hardware you are using, commands that you were running, any other activities that you may have been doing at the time. This additional information can be very useful." msgstr "When you wish to have a developer fix a bug that you found, helping them reproduce the issue is beneficial to everyone. Be sure to include information about the hardware you are using, commands that you were running, any other activities that you may have been doing at the time. This additional information can be very useful." -#: ../../contributing/issues-features.rst:62 +#: ../../contributing/issues-features.rst:66 msgid "Which version of VyOS are you using? ``run show version``" msgstr "Which version of VyOS are you using? ``run show version``" @@ -1574,6 +1670,10 @@ msgstr "You can type ``help`` to get an overview of the available commands, and msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." msgstr "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." +#: ../../contributing/issues-features.rst:74 +msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." +msgstr "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." + #: ../../contributing/build-vyos.rst:470 msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers" msgstr "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers" @@ -1582,10 +1682,23 @@ msgstr "You have your own custom kernel `*.deb` packages in the `packages` folde msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, WireGuard, Intel QAT, Intel NIC" msgstr "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, WireGuard, Intel QAT, Intel NIC" +#: ../../contributing/issues-features.rst:80 +msgid "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there." +msgstr "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there." + +#: ../../contributing/issues-features.rst:84 +msgid "You must include at least the following:" +msgstr "You must include at least the following:" + #: ../../contributing/debugging.rst:166 msgid "You shoudl now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." msgstr "You shoudl now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." +#: ../../contributing/issues-features.rst:31 +#: ../../contributing/issues-features.rst:94 +msgid "You should include the following information:" +msgstr "You should include the following information:" + #: ../../contributing/debugging.rst:166 msgid "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." msgstr "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." @@ -1598,7 +1711,7 @@ msgstr "You then can proceed with cloning your fork or add a new remote to your msgid "Your configuration script or operation mode script which is also written in Python3 should have a line break on 80 characters. This seems to be a bit odd nowadays but as some people also work remotely or program using vi(m) this is a fair good standard which I hope we can rely on." msgstr "Your configuration script or operation mode script which is also written in Python3 should have a line break on 80 characters. This seems to be a bit odd nowadays but as some people also work remotely or program using vi(m) this is a fair good standard which I hope we can rely on." -#: ../../contributing/testing.rst:107 +#: ../../contributing/testing.rst:110 msgid "..." msgstr "..." diff --git a/docs/_locale/pt/documentation.pot b/docs/_locale/pt/documentation.pot index d8343839..2a96e024 100644 --- a/docs/_locale/pt/documentation.pot +++ b/docs/_locale/pt/documentation.pot @@ -177,6 +177,10 @@ msgid "If there some troubleshooting guides related to the commands. Explain it msgstr "If there some troubleshooting guides related to the commands. Explain it in the next optional part." #: ../../documentation.rst:448 +msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``" +msgstr "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``" + +#: ../../documentation.rst:448 msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin master``" msgstr "If you also want to update your fork on GitHub, use the following: ``$ git push origin master``" diff --git a/docs/_locale/uk/LC_MESSAGES/cli.mo b/docs/_locale/uk/LC_MESSAGES/cli.mo Binary files differindex 69e3c1c2..ea88e77e 100644 --- a/docs/_locale/uk/LC_MESSAGES/cli.mo +++ b/docs/_locale/uk/LC_MESSAGES/cli.mo diff --git a/docs/_locale/uk/LC_MESSAGES/configuration.mo b/docs/_locale/uk/LC_MESSAGES/configuration.mo Binary files differindex 90d9d678..81074aef 100644 --- a/docs/_locale/uk/LC_MESSAGES/configuration.mo +++ b/docs/_locale/uk/LC_MESSAGES/configuration.mo diff --git a/docs/_locale/uk/LC_MESSAGES/contributing.mo b/docs/_locale/uk/LC_MESSAGES/contributing.mo Binary files differindex 3ab75ede..274a2f5d 100644 --- a/docs/_locale/uk/LC_MESSAGES/contributing.mo +++ b/docs/_locale/uk/LC_MESSAGES/contributing.mo diff --git a/docs/_locale/uk/LC_MESSAGES/documentation.mo b/docs/_locale/uk/LC_MESSAGES/documentation.mo Binary files differindex 59a0bbb2..eaf825f8 100644 --- a/docs/_locale/uk/LC_MESSAGES/documentation.mo +++ b/docs/_locale/uk/LC_MESSAGES/documentation.mo diff --git a/docs/_locale/uk/cli.pot b/docs/_locale/uk/cli.pot index f264adae..d2d2418b 100644 --- a/docs/_locale/uk/cli.pot +++ b/docs/_locale/uk/cli.pot @@ -28,23 +28,23 @@ msgstr "**Робоча конфігŃрація** – це конфігŃŃ€Đ°Ń†Ń msgid "A VyOS system has three major types of configurations:" msgstr "СиŃтема VyOS ĐĽĐ°Ń” три ĐľŃновні типи конфігŃрацій:" -#: ../../cli.rst:576 +#: ../../cli.rst:579 msgid "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit." msgstr "Перезавантаження через те, що ви не ввели ``confirm``, не обов’язково переведе Đ˛Đ°Ń Đ´Đľ *збереженої конфігŃрації*, Đ° Đ´Đľ точки перед невдалим комітом." -#: ../../cli.rst:690 +#: ../../cli.rst:693 msgid "Access opmode from config mode" msgstr "ДоŃŃ‚ŃĐż Đ´Đľ opmode Đ· Ń€ĐµĐ¶Đ¸ĐĽŃ ĐşĐľĐ˝Ń„Ń–ĐłŃрації" -#: ../../cli.rst:697 +#: ../../cli.rst:700 msgid "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode." msgstr "ДоŃŃ‚ŃĐż Đ´Đľ цих команд можливий Đ·Đ° допомогою команди ``run [command]``. Đ—Đ° допомогою цієї команди ви матимете Đ´ĐľŃŃ‚ŃĐż Đ´Đľ вŃього, Đ´ĐľŃŃ‚Ńпного Đ· робочого режимŃ." -#: ../../cli.rst:651 +#: ../../cli.rst:654 msgid "Add comment as an annotation to a configuration node." msgstr "Додайте коментар ŃŹĐş анотацію Đ´Đľ вŃзла конфігŃрації." -#: ../../cli.rst:539 +#: ../../cli.rst:542 msgid "All changes in the working config will thus be lost." msgstr "Таким чином, ŃŃŃ– зміни в робочій конфігŃрації бŃде втрачено." @@ -52,7 +52,7 @@ msgstr "Таким чином, ŃŃŃ– зміни в робочій ĐşĐľĐ˝Ń„Ń–ĐłŃ msgid "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them." msgstr "ĐŁŃŃ– команди, що виконŃŃŽŃ‚ŃŚŃŃŹ Ń‚ŃŃ‚, відноŃŃŹŃ‚ŃŚŃŃŹ Đ´Đľ рівня конфігŃрації, який ви ввели. Ви можете робити вŃе Đ· верхнього рівня, але команди бŃĐ´ŃŃ‚ŃŚ Đ´ĐľŃить довгими, якщо Ń—Ń… вводити врŃчнŃ." -#: ../../cli.rst:676 +#: ../../cli.rst:679 msgid "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show <section>`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment." msgstr "Важливо Đ·Đ°Ńважити, що ĐľŃкільки коментар додаєтьŃŃŹ вгорі розділŃ, він не відображатиметьŃŃŹ, якщо ``показати<section> `` викориŃтовŃєтьŃŃŹ команда. ĐŁ Đ˝Đ°Đ˛ĐµĐ´ĐµĐ˝ĐľĐĽŃ Đ˛Đ¸Ń‰Đµ прикладі команда `show firewall` повертатиметьŃŃŹ піŃля рядка ``firewall {``, приховŃючи коментар." @@ -72,11 +72,11 @@ msgstr "Đ—Đ° замовчŃванням конфігŃрація відобраРmsgid "Command Line Interface" msgstr "Đ†Đ˝Ń‚ĐµŃ€Ń„ĐµĐąŃ ĐşĐľĐĽĐ°Đ˝Đ´Đ˝ĐľĐłĐľ рядка" -#: ../../cli.rst:701 +#: ../../cli.rst:704 msgid "Command completion and syntax help with ``?`` and ``[tab]`` will also work." msgstr "Доповнення команд Ń– ŃинтакŃична довідка Đ· ``?`` Ń– ``[tab]`` також працюватимŃŃ‚ŃŚ." -#: ../../cli.rst:754 +#: ../../cli.rst:757 msgid "Compare configurations" msgstr "Порівняйте конфігŃрації" @@ -92,11 +92,11 @@ msgstr "Огляд конфігŃрації" msgid "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered." msgstr "Команди конфігŃрації зведені Đ· дерева в команди «одного рядка», показані в :opcmd:`показати команди конфігŃрації` Đ· Ń€ĐµĐ¶Đ¸ĐĽŃ Ń€ĐľĐ±ĐľŃ‚Đ¸. Команди відноŃŃŹŃ‚ŃŚŃŃŹ Đ´Đľ рівня, на ŃŹĐşĐľĐĽŃ Đ˛ĐľĐ˝Đ¸ виконŃŃŽŃ‚ŃŚŃŃŹ, Ń– вŃŃŹ зайва інформація Đ· поточного рівня видаляєтьŃŃŹ Đ· введеної команди." -#: ../../cli.rst:535 +#: ../../cli.rst:538 msgid "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used." msgstr "Неможливо вийти Đ· Ń€ĐµĐ¶Đ¸ĐĽŃ ĐşĐľĐ˝Ń„Ń–ĐłŃрації, поки Ń–ŃĐ˝ŃŃŽŃ‚ŃŚ незафікŃовані зміни. Щоб вийти Đ· Ń€ĐµĐ¶Đ¸ĐĽŃ Đ˝Đ°Đ»Đ°ŃŃ‚Ńвання без Đ·Đ°ŃŃ‚ĐľŃŃвання Đ·ĐĽŃ–Đ˝, необхідно викориŃтати ĐşĐľĐĽĐ°Đ˝Đ´Ń :cfgcmd:`exit discard`." -#: ../../cli.rst:583 +#: ../../cli.rst:586 msgid "Copy a configuration element." msgstr "Скопіюйте елемент конфігŃрації." @@ -104,7 +104,7 @@ msgstr "Скопіюйте елемент конфігŃрації." msgid "Editing the configuration" msgstr "РедагŃвання конфігŃрації" -#: ../../cli.rst:662 +#: ../../cli.rst:665 msgid "Example:" msgstr "приклад:" @@ -124,11 +124,11 @@ msgstr "Наприклад, введення ``sh`` Ń– клавіŃĐ° ``TAB`` Đż msgid "Get a collection of all the set commands required which led to the running configuration." msgstr "Отримайте Đ·Đ±Ń–Ń€ĐşŃ Đ˛ŃŃ–Ń… необхідних команд, які призвели Đ´Đľ Đ·Đ°ĐżŃщеної конфігŃрації." -#: ../../cli.rst:933 +#: ../../cli.rst:936 msgid "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config." msgstr "Якщо ви підключені віддалено, ви втратите з’єднання. Ви можете ŃĐżĐľŃ‡Đ°Ń‚ĐşŃ Ńкопіювати конфігŃрацію, відредагŃвати Ń—Ń—, щоб забезпечити з’єднання, Ń– завантажити Đ˛Ń–Đ´Ń€ĐµĐ´Đ°ĐłĐľĐ˛Đ°Đ˝Ń ĐşĐľĐ˝Ń„Ń–ĐłŃрацію." -#: ../../cli.rst:919 +#: ../../cli.rst:922 msgid "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:" msgstr "Якщо ви хочете повніŃŃ‚ŃŽ видалити конфігŃрацію Ń‚Đ° відновити ŃтандартнŃ, ви можете ввеŃти Ń‚Đ°ĐşŃ ĐşĐľĐĽĐ°Đ˝Đ´Ń Đ˛ режимі конфігŃрації:" @@ -140,15 +140,15 @@ msgstr "It is also possible to display all :cfgcmd:`set` commands within configu msgid "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`" msgstr "Також можна відобразити вŃŃ– команди `set` в режимі конфігŃрації Đ·Đ° допомогою :cfgcmd:`show | команди`" -#: ../../cli.rst:723 +#: ../../cli.rst:726 msgid "Local Archive" msgstr "МіŃцевий архів" -#: ../../cli.rst:714 +#: ../../cli.rst:717 msgid "Managing configurations" msgstr "КерŃвання конфігŃраціями" -#: ../../cli.rst:627 +#: ../../cli.rst:630 msgid "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters." msgstr "Đ—Đ°Ńважте, що команда ``show`` поважає Đ˛Đ°Ń Ń€Ń–Đ˛ĐµĐ˝ŃŚ редагŃвання, Ń– на Ń†ŃŚĐľĐĽŃ Ń€Ń–Đ˛Đ˝Ń– ви можете переглядати змінений набір правил брандмаŃера лиŃе Đ·Đ° допомогою ``show`` без параметрів." @@ -164,31 +164,31 @@ msgstr "Оперативний режим дозволяє командам ви msgid "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``." msgstr "Підказка змінюєтьŃŃŹ Đ· ``$`` на ``#``. Щоб вийти Đ· Ń€ĐµĐ¶Đ¸ĐĽŃ Đ˝Đ°Đ»Đ°ŃŃ‚Ńвання, введіть ``вихід``." -#: ../../cli.rst:850 +#: ../../cli.rst:853 msgid "Remote Archive" msgstr "Віддалений архів" -#: ../../cli.rst:616 +#: ../../cli.rst:619 msgid "Rename a configuration element." msgstr "ПерейменŃвати елемент конфігŃрації." -#: ../../cli.rst:917 +#: ../../cli.rst:920 msgid "Restore Default" msgstr "Відновити значення Đ·Đ° замовчŃванням" -#: ../../cli.rst:725 +#: ../../cli.rst:728 msgid "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong." msgstr "Ревізії зберігаютьŃŃŹ на диŃĐşŃ. Ви можете переглядати, порівнювати Ń‚Đ° повертати Ń—Ń… Đ´Đľ бŃĐ´ŃŚ-яких попередніх верŃŃ–Đą, якщо щоŃŃŚ піде не Ń‚Đ°Đş." -#: ../../cli.rst:828 +#: ../../cli.rst:831 msgid "Rollback Changes" msgstr "Відкат Đ·ĐĽŃ–Đ˝" -#: ../../cli.rst:835 +#: ../../cli.rst:838 msgid "Rollback to revision N (currently requires reboot)" msgstr "Відкат Đ´Đľ верŃŃ–Ń— N (наразі вимагає перезавантаження)" -#: ../../cli.rst:884 +#: ../../cli.rst:887 msgid "Saving and loading manually" msgstr "Збереження Ń‚Đ° завантаження врŃчнŃ" @@ -200,11 +200,11 @@ msgstr "ДивітьŃŃŹ розділ конфігŃрації цього док msgid "Seeing and navigating the configuration" msgstr "Перегляд конфігŃрації Ń‚Đ° навігація" -#: ../../cli.rst:810 +#: ../../cli.rst:813 msgid "Show commit revision difference." msgstr "Показати різницю в редакції Ń„Ń–ĐşŃації." -#: ../../cli.rst:861 +#: ../../cli.rst:864 msgid "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`" msgstr "Укажіть віддалене розтаŃŃвання Đ°Ń€Ń…Ń–Đ˛Ń ĐşĐľĐĽŃ–Ń‚Ń–Đ˛ ŃŹĐş бŃĐ´ŃŚ-яке Đ· наведених нижче :abbr:`URI (Ńніфікований ідентифікатор реŃŃŃ€ŃŃ)`" @@ -228,15 +228,15 @@ msgstr "Команда :cfgcmd:`show` Ń Ń€ĐµĐ¶Đ¸ĐĽŃ– конфігŃрації Đ msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes." msgstr "Команда ``comment`` дозволяє вŃтавити коментар над ``<config node> `` розділ конфігŃрації. Коли відображаютьŃŃŹ, коментарі обмежŃŃŽŃ‚ŃŚŃŃŹ ``/*`` Ń– ``*/`` ŃŹĐş розділювачі відкриття/закриття. Коментарі потрібно Đ·Đ°Ń„Ń–ĐşŃŃвати, ŃŹĐş Ń– Ń–Đ˝ŃŃ– зміни конфігŃрації." -#: ../../cli.rst:653 +#: ../../cli.rst:656 msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes." msgstr "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes." -#: ../../cli.rst:784 +#: ../../cli.rst:787 msgid "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M." msgstr "Команда :cfgcmd:`compare` дозволяє порівнювати різні типи конфігŃрацій. Це також дозволяє порівнювати різні верŃŃ–Ń— Đ·Đ° допомогою команди :cfgcmd:`compare NM`, де N Ń– M Ń” номерами верŃŃ–Đą. Вихідні дані опиŃŃватимŃŃ‚ŃŚ конфігŃрацію N Ń ĐżĐľŃ€Ń–Đ˛Đ˝ŃŹĐ˝Đ˝Ń– Đ· M, вказŃючи знаком ĐżĐ»ŃŽŃ (``+``) додаткові чаŃтини, які N ĐĽĐ°Ń” порівняно Đ· M, Ń– вказŃючи знаком ĐĽŃ–Đ˝ŃŃ (``-``) недоліки чаŃтини N відŃŃтні в порівнянні Đ· M." -#: ../../cli.rst:813 +#: ../../cli.rst:816 msgid "The command above also lets you see the difference between two commits. By default the difference with the running config is shown." msgstr "Наведена вище команда також дозволяє побачити різницю між двома комітами. Đ—Đ° Ńмовчанням показано різницю Đ· поточною конфігŃрацією." @@ -252,11 +252,11 @@ msgstr "КонфігŃрацію можна редагŃвати Đ·Đ° допом msgid "The current hierarchy level can be changed by the :cfgcmd:`edit` command." msgstr "Поточний рівень ієрархії можна змінити командою :cfgcmd:`edit`." -#: ../../cli.rst:872 +#: ../../cli.rst:875 msgid "The number of revisions don't affect the commit-archive." msgstr "КількіŃŃ‚ŃŚ редагŃвань не впливає на архів комітів." -#: ../../cli.rst:930 +#: ../../cli.rst:933 msgid "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too." msgstr "Тоді ви можете :cfgcmd:`зберегти`, щоб також видалити Đ·Đ±ĐµŃ€ĐµĐ¶ĐµĐ˝Ń ĐşĐľĐ˝Ń„Ń–ĐłŃрацію." @@ -268,7 +268,7 @@ msgstr "Ці команди також пов’язані Đ· рівнем, на msgid "These two commands above are essentially the same, just executed from different levels in the hierarchy." msgstr "Ці дві наведені вище команди по ŃŃŃ‚Ń– однакові, проŃŃ‚Đľ виконŃŃŽŃ‚ŃŚŃŃŹ Đ· різних рівнів ієрархії." -#: ../../cli.rst:824 +#: ../../cli.rst:827 msgid "This means four commits ago we did ``set system ipv6 disable-forwarding``." msgstr "Це означає, що чотири коміти Ń‚ĐľĐĽŃ ĐĽĐ¸ зробили ``налаŃŃ‚Ńвання ŃиŃтемного ipv6 disable-forwarding``." @@ -280,7 +280,7 @@ msgstr "Щоб видалити Đ·Đ°ĐżĐ¸Ń ĐşĐľĐ˝Ń„Ń–ĐłŃрації, ŃĐşĐľŃ€Đ¸Ń msgid "To enter configuration mode use the ``configure`` command:" msgstr "Щоб Ńвійти в режим налаŃŃ‚Ńвання, викориŃтовŃйте ĐşĐľĐĽĐ°Đ˝Đ´Ń ``configure``:" -#: ../../cli.rst:658 +#: ../../cli.rst:661 msgid "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text." msgstr "Щоб видалити наявний коментар Ń–Đ· ваŃої поточної конфігŃрації, Ńкажіть порожній рядок Ń ĐżĐľĐ´Đ˛Ń–ĐąĐ˝Đ¸Ń… лапках (``""``) ŃŹĐş текŃŃ‚ коментаря." @@ -288,11 +288,11 @@ msgstr "Щоб видалити наявний коментар Ń–Đ· ваŃої msgid "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_." msgstr "ВикориŃтовŃйте ``показати команди конфігŃрації | strip-private``, коли ви хочете приховати ĐľŃобиŃŃ‚Ń– дані. Ви можете зробити це, якщо хочете поділитиŃŃŹ Ńвоєю конфігŃрацією на `форŃĐĽŃ–`_." -#: ../../cli.rst:895 +#: ../../cli.rst:898 msgid "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address." msgstr "ВикориŃтовŃйте цю командŃ, щоб завантажити конфігŃрацію, яка замінить ĐżĐľŃ‚ĐľŃ‡Đ˝Ń ĐşĐľĐ˝Ń„Ń–ĐłŃрацію. Визначте розтаŃŃвання Ń„Đ°ĐąĐ»Ń ĐşĐľĐ˝Ń„Ń–ĐłŃрації, який потрібно завантажити. Ви можете викориŃтовŃвати Ńлях Đ´Đľ локального файлŃ, адреŃŃ SCP, адреŃŃ SFTP, адреŃŃ FTP, адреŃŃ HTTP, адреŃŃ HTTPS або адреŃŃ TFTP." -#: ../../cli.rst:508 +#: ../../cli.rst:511 msgid "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address." msgstr "ВикориŃтовŃйте цю командŃ, щоб зберегти зміни конфігŃрації піŃля перезавантаження. Đ—Đ° замовчŃванням він зберігаєтьŃŃŹ в */config/config.boot*. Якщо ви хочете зберегти файл конфігŃрації в Ń–Đ˝ŃĐľĐĽŃ ĐĽŃ–Ńці, ви можете додати локальний Ńлях, адреŃŃ SCP, адреŃŃ FTP або адреŃŃ TFTP." @@ -300,15 +300,15 @@ msgstr "ВикориŃтовŃйте цю командŃ, щоб зберегтРmsgid "Use this command to set the value of a parameter or to create a new element." msgstr "ВикориŃтовŃйте цю командŃ, щоб вŃтановити значення параметра або Ńтворити новий елемент." -#: ../../cli.rst:760 +#: ../../cli.rst:763 msgid "Use this command to spot what the differences are between different configurations." msgstr "ВикориŃтовŃйте цю командŃ, щоб визначити відмінноŃŃ‚Ń– між різними конфігŃраціями." -#: ../../cli.rst:552 +#: ../../cli.rst:555 msgid "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes." msgstr "ВикориŃтовŃйте цю командŃ, щоб тимчаŃово Đ·Đ°Ń„Ń–ĐşŃŃвати зміни Ń‚Đ° вŃтановити кількіŃŃ‚ŃŚ хвилин, Đ´ĐľŃŃ‚Ńпних для перевірки. ``confirm`` необхідно ввеŃти протягом цих хвилин, інакŃе ŃиŃтема перезавантажитьŃŃŹ Đ´Đľ попередньої конфігŃрації. Стандартне значення Ńтановить 10 хвилин." -#: ../../cli.rst:730 +#: ../../cli.rst:733 msgid "View all existing revisions on the local system." msgstr "ПереглянŃти вŃŃ– Ń–ŃĐ˝Ńючі верŃŃ–Ń— в локальній ŃиŃтемі." @@ -324,7 +324,7 @@ msgstr "Перегляньте ĐżĐľŃ‚ĐľŃ‡Đ˝Ń Đ°ĐşŃ‚Đ¸Đ˛Đ˝Ń ĐşĐľĐ˝Ń„Ń–ĐłŃŃ€Đ°Ń msgid "View the current active configuration in readable JSON format." msgstr "Перегляньте ĐżĐľŃ‚ĐľŃ‡Đ˝Ń Đ°ĐşŃ‚Đ¸Đ˛Đ˝Ń ĐşĐľĐ˝Ń„Ń–ĐłŃрацію в Ń‡Đ¸Ń‚Đ°Đ±ĐµĐ»ŃŚĐ˝ĐľĐĽŃ Ń„ĐľŃ€ĐĽĐ°Ń‚Ń– JSON." -#: ../../cli.rst:852 +#: ../../cli.rst:855 msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." msgstr "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." @@ -332,11 +332,11 @@ msgstr "VyOS can upload the configuration to a remote location after each call t msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." msgstr "VyOS може завантажити конфігŃрацію Ń Đ˛Ń–Đ´Đ´Đ°Đ»ĐµĐ˝Đµ ĐĽŃ–Ńце піŃля кожного Đ˛Đ¸ĐşĐ»Đ¸ĐşŃ :cfgcmd:`commit`. Đ’Đ°ĐĽ потрібно бŃде вŃтановити розтаŃŃвання Đ°Ń€Ń…Ń–Đ˛Ń ĐşĐľĐĽŃ–Ń‚Ń–Đ˛. ПідтримŃŃŽŃ‚ŃŚŃŃŹ Ńервери TFTP, FTP, SCP Ń– SFTP. Кожного разŃ, коли :cfgcmd:`commit` Ń” ŃŃпіŃним, файл ``config.boot`` бŃде Ńкопійовано Đ´Đľ визначеного ĐĽŃ–Ńця призначення. Ім’я файлŃ, що викориŃтовŃєтьŃŃŹ на Đ˛Ń–Đ´Đ´Đ°Đ»ĐµĐ˝ĐľĐĽŃ Ń…ĐľŃŃ‚Ń–, бŃде ``config.boot-hostname.YYYYMMDD_HHMMSS``." -#: ../../cli.rst:716 +#: ../../cli.rst:719 msgid "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons." msgstr "VyOS поŃтавляєтьŃŃŹ Đ· інтегрованою ŃиŃтемою керŃвання верŃіями для конфігŃрації ŃиŃтеми. Đ’Ń–Đ˝ автоматично підтримŃŃ” Ń€ĐµĐ·ĐµŃ€Đ˛Đ˝Ń ĐşĐľĐżŃ–ŃŽ кожної попередньої конфігŃрації, яка бŃла Đ·Đ°Ń„Ń–ĐşŃована в ŃиŃтемі. КонфігŃрації керŃŃŽŃ‚ŃŚŃŃŹ локальними верŃіями для відкотŃ, але Ń—Ń… також можна зберігати на Đ˛Ń–Đ´Đ´Đ°Đ»ĐµĐ˝ĐľĐĽŃ Ń…ĐľŃŃ‚Ń– для архівŃвання/резервного копіювання." -#: ../../cli.rst:756 +#: ../../cli.rst:759 msgid "VyOS lets you compare different configurations." msgstr "VyOS дозволяє порівнювати різні конфігŃрації." @@ -348,7 +348,7 @@ msgstr "VyOS викориŃтовŃŃ” Ńніфікований файл конф msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." msgstr "Рякщо ви робите щоŃŃŚ небезпечне? ПрипŃŃŃ‚Ń–ĐĽĐľ, що ви хочете налаŃŃ‚Ńвати брандмаŃер Ń– не впевнені, що немає помилок, які заблокŃŃŽŃ‚ŃŚ Đ˛Đ°Ń Ń Đ˛Đ°ŃŃ–Đą ŃиŃтемі. Ви можете викориŃтовŃвати ĐżŃ–Đ´Ń‚Đ˛ĐµŃ€Đ´Đ¶ĐµĐ˝Ń Ń„Ń–ĐşŃацію. Якщо ви введете ĐşĐľĐĽĐ°Đ˝Đ´Ń ``commit-confirm``, ваŃŃ– зміни бŃде Đ·Đ°Ń„Ń–ĐşŃовано, Ń– якщо ви не введете ĐşĐľĐĽĐ°Đ˝Đ´Ń ``confirm`` протягом 10 хвилин, ваŃĐ° ŃиŃтема перезавантажитьŃŃŹ Đ´Đľ попередньої верŃŃ–Ń— конфігŃрації." -#: ../../cli.rst:558 +#: ../../cli.rst:561 msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." msgstr "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." @@ -360,7 +360,7 @@ msgstr "Під Ń‡Đ°Ń Đ˛Ń…ĐľĐ´Ń Đ˛ режим конфігŃрації ви пРmsgid "When going into configuration mode, prompt changes from ``$`` to ``#``." msgstr "Під Ń‡Đ°Ń ĐżĐµŃ€ĐµŃ…ĐľĐ´Ń Đ˛ режим налаŃŃ‚Ńвання підказка змінюєтьŃŃŹ Đ· ``$`` на ``#``." -#: ../../cli.rst:692 +#: ../../cli.rst:695 msgid "When inside configuration mode you are not directly able to execute operational commands." msgstr "ĐŁ режимі конфігŃрації ви не можете безпоŃередньо виконŃвати робочі команди." @@ -368,7 +368,7 @@ msgstr "ĐŁ режимі конфігŃрації ви не можете безп msgid "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt." msgstr "Якщо вихід команди призводить Đ´Đľ більŃої кількоŃŃ‚Ń– рядків, ніж може бŃти відображено на екрані терміналŃ, резŃльтат розбиваєтьŃŃŹ на Ńторінки, ŃŹĐş вказŃŃ” підказка ``:``." -#: ../../cli.rst:889 +#: ../../cli.rst:892 msgid "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:" msgstr "ВикориŃтовŃючи ĐşĐľĐĽĐ°Đ˝Đ´Ń save_, ви можете додати конкретне ĐĽŃ–Ńце для збереження Ń„Đ°ĐąĐ»Ń ĐşĐľĐ˝Ń„Ń–ĐłŃрації. І Đ·Đ° потреби ви зможете завантажити його Đ·Đ° допомогою команди ``load``:" @@ -384,15 +384,15 @@ msgstr "Тепер ви перебŃваєте на підрівні Đ˛Ń–Đ´Đ˝ĐľŃ msgid "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." msgstr "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." -#: ../../cli.rst:618 +#: ../../cli.rst:621 msgid "You can also rename config subtrees:" msgstr "Ви також можете перейменŃвати піддерева конфігŃрації:" -#: ../../cli.rst:585 +#: ../../cli.rst:588 msgid "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20." msgstr "Ви можете копіювати Ń‚Đ° видаляти піддерева конфігŃрації. ПрипŃŃŃ‚Ń–ĐĽĐľ, ви вŃтановили набір правил брандмаŃера ``FromWorld`` Đ· одним правилом, яке дозволяє трафік Ń–Đ· певної підмережі. Тепер ви хочете налаŃŃ‚Ńвати подібне правило, але для Ń–Đ˝Ńої підмережі. Змініть рівень редагŃвання на ``назва брандмаŃера FromWorld`` Ń– викориŃтовŃйте ``копіювати правило 10 Đ´Đľ правила 20``, Đ° потім змініть правило 20." -#: ../../cli.rst:830 +#: ../../cli.rst:833 msgid "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot." msgstr "Ви можете ŃкаŃŃвати зміни конфігŃрації Đ·Đ° допомогою команди rollback. Це Đ·Đ°ŃŃ‚ĐľŃŃŃ” Đ˛Đ¸Đ±Ń€Đ°Đ˝Ń Đ˛ĐµŃ€ŃŃ–ŃŽ Ń‚Đ° ініціює перезавантаження ŃиŃтеми." @@ -400,19 +400,23 @@ msgstr "Ви можете ŃкаŃŃвати зміни конфігŃрації msgid "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``." msgstr "Ви можете прокрŃчŃвати Đ˛ĐłĐľŃ€Ń Đ·Đ° допомогою ĐşĐ»Đ°Đ˛Ń–Ń ``[Shift]+[PageUp]`` Ń– прокрŃчŃвати вниз Đ·Đ° допомогою ``[Shift]+[PageDown]``." -#: ../../cli.rst:747 +#: ../../cli.rst:504 +msgid "You can specify a commit message with :cfgcmd:`commit comment <message>`." +msgstr "You can specify a commit message with :cfgcmd:`commit comment <message>`." + +#: ../../cli.rst:750 msgid "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally." msgstr "Ви можете вказати кількіŃŃ‚ŃŚ верŃŃ–Đą, що зберігаютьŃŃŹ на диŃĐşŃ. N може бŃти в діапазоні від 0 Đ´Đľ 65535. Коли кількіŃŃ‚ŃŚ верŃŃ–Đą перевищŃŃ” вŃтановлене значення, найŃтаріŃĐ° верŃŃ–ŃŹ видаляєтьŃŃŹ. Đ—Đ° замовчŃванням це значення зберігає 100 редакцій локально." -#: ../../cli.rst:886 +#: ../../cli.rst:889 msgid "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files." msgstr "Ви можете викориŃтовŃвати команди ``save`` Ń– ``load``, якщо ви хочете врŃŃ‡Đ˝Ń ĐşĐµŃ€Ńвати певними конфігŃраційними файлами." -#: ../../cli.rst:874 +#: ../../cli.rst:877 msgid "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:" msgstr "Ви можете виявити, що VyOS не дозволяє безпечне з’єднання, ĐľŃкільки не може перевірити легітимніŃŃ‚ŃŚ віддаленого Ńервера. Щоб Ńвидко додати відбиток SSH віддаленого Ń…ĐľŃŃ‚Đ° Đ´Đľ ваŃого Ń„Đ°ĐąĐ»Ń ``~/.ssh/known_hosts``, ви можете ŃкориŃтатиŃŃŹ наведеним нижче обхідним Ńляхом:" -#: ../../cli.rst:927 +#: ../../cli.rst:930 msgid "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active." msgstr "Đ’Đ°Ń Đ·Đ°ĐżĐ¸Ń‚Đ°ŃŽŃ‚ŃŚ, чи хочете ви продовжити. Якщо ви приймаєте, вам доведетьŃŃŹ викориŃтовŃвати :cfgcmd:`commit`, якщо ви хочете зробити зміни активними." @@ -420,19 +424,19 @@ msgstr "Đ’Đ°Ń Đ·Đ°ĐżĐ¸Ń‚Đ°ŃŽŃ‚ŃŚ, чи хочете ви продовжити. msgid "``b`` will scroll back one page" msgstr "``b`` прокрŃтить на ĐľĐ´Đ˝Ń ŃŃ‚ĐľŃ€Ń–Đ˝ĐşŃ Đ˝Đ°Đ·Đ°Đ´" -#: ../../cli.rst:866 +#: ../../cli.rst:869 msgid "``ftp://<user>:<passwd>@<host>/<dir>``" msgstr "``ftp://<user> :<passwd> @<host> /<dir> ``" -#: ../../cli.rst:870 +#: ../../cli.rst:873 msgid "``git+https://<user>:<passwd>@<host>/<path>``" msgstr "``git+https://<user>:<passwd>@<host>/<path>``" -#: ../../cli.rst:864 +#: ../../cli.rst:867 msgid "``http://<user>:<passwd>@<host>:/<dir>``" msgstr "``http://<user>:<passwd>@<host>:/<dir>``" -#: ../../cli.rst:865 +#: ../../cli.rst:868 msgid "``https://<user>:<passwd>@<host>:/<dir>``" msgstr "``https://<user>:<passwd>@<host>:/<dir>``" @@ -448,11 +452,11 @@ msgstr "Для ŃкаŃŃвання Đ˛Đ¸Đ˛ĐľĐ´Ń ĐĽĐľĐ¶Đ˝Đ° викориŃтов msgid "``return`` will scroll down one line" msgstr "``return`` прокрŃтить на один рядок вниз" -#: ../../cli.rst:868 +#: ../../cli.rst:871 msgid "``scp://<user>:<passwd>@<host>:/<dir>``" msgstr "``scp://<user> :<passwd> @<host> :/<dir> ``" -#: ../../cli.rst:867 +#: ../../cli.rst:870 msgid "``sftp://<user>:<passwd>@<host>/<dir>``" msgstr "``sftp://<user> :<passwd> @<host> /<dir> ``" @@ -460,7 +464,7 @@ msgstr "``sftp://<user> :<passwd> @<host> /<dir> ``" msgid "``space`` will scroll down one page" msgstr "``пробіл`` прокрŃтить на ĐľĐ´Đ˝Ń ŃŃ‚ĐľŃ€Ń–Đ˝ĐşŃ Đ˛Đ˝Đ¸Đ·" -#: ../../cli.rst:869 +#: ../../cli.rst:872 msgid "``tftp://<host>/<dir>``" msgstr "``tftp://<host> /<dir> ``" diff --git a/docs/_locale/uk/configuration.pot b/docs/_locale/uk/configuration.pot index 766adc4c..3f9e7bd2 100644 --- a/docs/_locale/uk/configuration.pot +++ b/docs/_locale/uk/configuration.pot @@ -89,7 +89,7 @@ msgid "**Already-selected external check**" msgstr "**Вже вибраний зовніŃній чек**" #: ../../configuration/trafficpolicy/index.rst:547 -#: ../../configuration/trafficpolicy/index.rst:1181 +#: ../../configuration/trafficpolicy/index.rst:1249 msgid "**Applies to:** Inbound traffic." msgstr "**Đ—Đ°ŃŃ‚ĐľŃовŃєтьŃŃŹ Đ´Đľ:** Вхідного трафікŃ." @@ -105,6 +105,7 @@ msgstr "**Đ—Đ°ŃŃ‚ĐľŃовŃєтьŃŃŹ Đ´Đľ:** вихідного Ń‚Ń€Đ°Ń„Ń–ĐşŃ #: ../../configuration/trafficpolicy/index.rst:916 #: ../../configuration/trafficpolicy/index.rst:961 #: ../../configuration/trafficpolicy/index.rst:1020 +#: ../../configuration/trafficpolicy/index.rst:1154 msgid "**Applies to:** Outbound traffic." msgstr "**Đ—Đ°ŃŃ‚ĐľŃовŃєтьŃŃŹ Đ´Đľ:** вихідного трафікŃ." @@ -437,6 +438,10 @@ msgstr "**ДиŃципліна черги** Fair/Flow Queue CoDel." msgid "**Queueing discipline:** Deficit Round Robin." msgstr "**ДиŃципліна Ńтояння в черзі:** Дефіцитна крŃгова ŃиŃтема." +#: ../../configuration/trafficpolicy/index.rst:1153 +msgid "**Queueing discipline:** Deficit mode." +msgstr "**Queueing discipline:** Deficit mode." + #: ../../configuration/trafficpolicy/index.rst:766 msgid "**Queueing discipline:** Generalized Random Early Drop." msgstr "**ДиŃципліна черги: ** Узагальнене випадкове раннє Ńкидання." @@ -580,6 +585,10 @@ msgstr "**МарŃŃ€Ńтизатор VyOS:**" msgid "**Weight check**" msgstr "**Перевірка ваги**" +#: ../../configuration/trafficpolicy/index.rst:1208 +msgid "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." +msgstr "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." + #: ../../_include/interface-dhcp-options.txt:74 msgid "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" msgstr "**адреŃŃ** можна вказати кілька разів, наприклад 192.168.100.1 Ń‚Đ°/або 192.168.100.0/24" @@ -1511,7 +1520,7 @@ msgstr "ACME" msgid "ACME Directory Resource URI." msgstr "ACME Directory Resource URI." -#: ../../configuration/service/https.rst:59 +#: ../../configuration/service/https.rst:63 msgid "API" msgstr "API" @@ -1964,7 +1973,7 @@ msgstr "Додайте загальнодоŃŃ‚Ńпний Ńертифікат Đ msgid "Adding a 2FA with an OTP-key" msgstr "Додавання 2FA Đ· OTP-ключем" -#: ../../configuration/loadbalancing/reverse-proxy.rst:263 +#: ../../configuration/loadbalancing/reverse-proxy.rst:301 msgid "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." msgstr "Đ’ŃтановлюютьŃŃŹ додаткові глобальні параметри, включаючи обмеження на ĐĽĐ°ĐşŃĐ¸ĐĽĐ°Đ»ŃŚĐ˝Ń ĐşŃ–Đ»ŃŚĐşŃ–ŃŃ‚ŃŚ з’єднань Ń 4000 Ń– ĐĽŃ–Đ˝Ń–ĐĽĐ°Đ»ŃŚĐ˝Ń Đ˛ĐµŃ€ŃŃ–ŃŽ TLS 1.3." @@ -2180,6 +2189,10 @@ msgstr "Дозволити Đ´ĐľŃŃ‚ŃĐż Đ´Đľ Ńайтів Ń Đ´ĐľĐĽĐµĐ˝Ń– без msgid "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." msgstr "Дозволити bgp ŃзгоджŃвати можливоŃŃ‚Ń– extended-nexthop Đ·Ń– Ńвоїм партнером. Якщо ви переглядаєте Đ»ĐľĐşĐ°Đ»ŃŚĐ˝Ń Đ°Đ´Ń€ĐµŃŃ IPv6 Link-Local, ця можливіŃŃ‚ŃŚ вмикаєтьŃŃŹ автоматично. Якщо ви переглядаєте через ĐłĐ»ĐľĐ±Đ°Đ»ŃŚĐ˝Ń Đ°Đ´Ń€ĐµŃŃ IPv6, Ńвімкнення цієї команди дозволить BGP Ń–Đ˝Ńталювати ĐĽĐ°Ń€ŃŃ€Ńти IPv4 Ń–Đ· IPv6 nexthops, якщо IPv4 не налаŃтовано на інтерфейŃĐ°Ń…." +#: ../../configuration/service/https.rst:81 +msgid "Allow cross-origin requests from `<origin>`." +msgstr "Allow cross-origin requests from `<origin>`." + #: ../../configuration/service/dns.rst:456 msgid "Allow explicit IPv6 address for the interface." msgstr "Дозволити ŃŹĐ˛Đ˝Ń Đ°Đ´Ń€ĐµŃŃ IPv6 для інтерфейŃŃ." @@ -2431,7 +2444,7 @@ msgstr "Đ—Đ°ŃŃ‚ĐľŃŃвання Đ˝Đ°Đ±ĐľŃ€Ń ĐżŃ€Đ°Đ˛Đ¸Đ» Đ´Đľ зони" msgid "Applying a Rule-Set to an Interface" msgstr "Đ—Đ°ŃŃ‚ĐľŃŃвання Đ˝Đ°Đ±ĐľŃ€Ń ĐżŃ€Đ°Đ˛Đ¸Đ» Đ´Đľ інтерфейŃŃ" -#: ../../configuration/trafficpolicy/index.rst:1150 +#: ../../configuration/trafficpolicy/index.rst:1218 msgid "Applying a traffic policy" msgstr "Đ—Đ°ŃŃ‚ĐľŃŃвання політики дорожнього Ń€ŃŃ…Ń" @@ -2691,7 +2704,7 @@ msgstr "ĐŃтентифікація" msgid "Authentication Advanced Options" msgstr "Authentication Advanced Options" -#: ../../configuration/interfaces/ethernet.rst:99 +#: ../../configuration/interfaces/ethernet.rst:115 msgid "Authentication (EAPoL)" msgstr "Đвтентифікація (EAPoL)" @@ -2851,7 +2864,7 @@ msgstr "Babel — це ŃŃчаŃний протокол ĐĽĐ°Ń€ŃŃ€ŃŃ‚Đ¸Đ·Đ°Ń†Ń msgid "Backend" msgstr "Backend" -#: ../../configuration/loadbalancing/reverse-proxy.rst:299 +#: ../../configuration/loadbalancing/reverse-proxy.rst:339 msgid "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." msgstr "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." @@ -2863,10 +2876,14 @@ msgstr "Đлгоритми баланŃŃ:" msgid "Balancing Rules" msgstr "Правила баланŃŃвання" -#: ../../configuration/loadbalancing/reverse-proxy.rst:214 +#: ../../configuration/loadbalancing/reverse-proxy.rst:252 msgid "Balancing based on domain name" msgstr "БаланŃŃвання на ĐľŃнові доменного імені" +#: ../../configuration/loadbalancing/reverse-proxy.rst:365 +msgid "Balancing with HTTP health checks" +msgstr "Balancing with HTTP health checks" + #: ../../configuration/service/pppoe-server.rst:251 msgid "Bandwidth Shaping" msgstr "ФормŃвання пропŃŃкної здатноŃŃ‚Ń–" @@ -2936,7 +2953,7 @@ msgstr "ĐžŃкільки агрегатор не може бŃти активнРmsgid "Because existing sessions do not automatically fail over to a new path, the session table can be flushed on each connection state change:" msgstr "ĐžŃкільки наявні ŃеанŃи не переходять автоматично на новий Ńлях, таблицю ŃеанŃів можна Ńкидати під Ń‡Đ°Ń ĐşĐľĐ¶Đ˝ĐľŃ— зміни ŃŃ‚Đ°Đ˝Ń Đ·â€™Ń”Đ´Đ˝Đ°Đ˝Đ˝ŃŹ:" -#: ../../configuration/interfaces/ethernet.rst:70 +#: ../../configuration/interfaces/ethernet.rst:86 msgid "Before enabling any hardware segmentation offload a corresponding software offload is required in GSO. Otherwise it becomes possible for a frame to be re-routed between devices and end up being unable to be transmitted." msgstr "ĐźĐµŃ€Ń Đ˝Ń–Đ¶ ŃвімкнŃти бŃĐ´ŃŚ-яке розвантаження Ńегментації апаратного забезпечення, Ń GSO потрібне відповідне розвантаження програмного забезпечення. ІнакŃе ŃŃ‚Đ°Ń” можливим перенаправлення ĐşĐ°Đ´Ń€Ń ĐĽŃ–Đ¶ приŃтроями Ń‚Đ° його передача бŃде неможливою." @@ -3155,6 +3172,10 @@ msgstr "ВикориŃтовŃючи інтерфейŃи Pseudo-Ethernet, ŃĐ¸Ń msgid "Bypassing the webproxy" msgstr "Обхід webproxy" +#: ../../configuration/trafficpolicy/index.rst:1151 +msgid "CAKE" +msgstr "CAKE" + #: ../../configuration/pki/index.rst:172 msgid "CA (Certificate Authority)" msgstr "CA (Центр Ńертифікації)" @@ -3797,10 +3818,14 @@ msgstr "НалаŃŃ‚Ńвати протокол, який викориŃŃ‚ĐľĐ˛Ń msgid "Configure proxy port if it does not listen to the default port 80." msgstr "НалаŃŃ‚Ńйте прокŃŃ–-порт, якщо він не ŃĐ»ŃŃ…Đ°Ń” порт Đ·Đ° замовчŃванням 80." -#: ../../configuration/loadbalancing/reverse-proxy.rst:149 +#: ../../configuration/loadbalancing/reverse-proxy.rst:150 msgid "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>" msgstr "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>" +#: ../../configuration/loadbalancing/reverse-proxy.rst:155 +msgid "Configure requests to the backend server to use SSL encryption without validating server certificate" +msgstr "Configure requests to the backend server to use SSL encryption without validating server certificate" + #: ../../configuration/system/sflow.rst:16 msgid "Configure sFlow agent IPv4 or IPv6 address" msgstr "НалаŃŃ‚Ńйте адреŃŃ Đ°ĐłĐµĐ˝Ń‚Đ° sFlow IPv4 або IPv6" @@ -3853,7 +3878,7 @@ msgstr "НалаŃŃ‚Ńйте диŃкретний порт, через який msgid "Configure the discrete port under which the TACACS server can be reached." msgstr "НалаŃŃ‚Ńйте диŃкретний порт, через який можна отримати Đ´ĐľŃŃ‚ŃĐż Đ´Đľ Ńервера TACACS." -#: ../../configuration/loadbalancing/reverse-proxy.rst:175 +#: ../../configuration/loadbalancing/reverse-proxy.rst:212 msgid "Configure the load-balancing reverse-proxy service for HTTP." msgstr "НалаŃŃ‚Ńйте ŃĐ»ŃĐ¶Đ±Ń Đ·Đ˛ĐľŃ€ĐľŃ‚Đ˝ĐľĐłĐľ прокŃŃ–-Ńервера баланŃŃвання навантаження для HTTP." @@ -4053,6 +4078,10 @@ msgstr "Створити `<user> ` для локальної автентифіРmsgid "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet." msgstr "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet." +#: ../../configuration/pki/index.rst:373 +msgid "Create a CA chain and leaf certificates" +msgstr "Create a CA chain and leaf certificates" + #: ../../configuration/interfaces/bridge.rst:199 msgid "Create a basic bridge" msgstr "Створіть базовий ĐĽŃ–ŃŃ‚" @@ -4636,6 +4665,10 @@ msgstr "Визначає ĐĽĐ°ĐşŃимŃĐĽ `<number> ` ехо-запитів бе msgid "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**." msgstr "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**." +#: ../../configuration/trafficpolicy/index.rst:1213 +msgid "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100." +msgstr "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100." + #: ../../configuration/system/console.rst:21 msgid "Defines the specified device as a system console. Available console devices can be (see completion helper):" msgstr "Визначає вказаний приŃтрій ŃŹĐş ŃиŃŃ‚ĐµĐĽĐ˝Ń ĐşĐľĐ˝Ńоль. ДоŃŃ‚Ńпні конŃольні приŃтрої (див. помічник заверŃення):" @@ -4856,6 +4889,10 @@ msgstr "Вимкнено Đ·Đ° замовчŃванням – модŃль ŃŹĐ´Ń€ msgid "Disables caching of peer information from forwarded NHRP Resolution Reply packets. This can be used to reduce memory consumption on big NBMA subnets." msgstr "Вимикає кеŃŃвання однорангової інформації Đ· переŃланих пакетів відповіді NHRP Resolution Reply. Це можна викориŃтовŃвати для зменŃення Ńпоживання пам’яті Ń Đ˛ĐµĐ»Đ¸ĐşĐ¸Ń… підмережах NBMA." +#: ../../configuration/trafficpolicy/index.rst:1173 +msgid "Disables flow isolation, all traffic passes through a single queue." +msgstr "Disables flow isolation, all traffic passes through a single queue." + #: ../../configuration/protocols/static.rst:99 msgid "Disables interface-based IPv4 static route." msgstr "Вимикає Ńтатичний ĐĽĐ°Ń€ŃŃ€ŃŃ‚ IPv4 на ĐľŃнові інтерфейŃŃ." @@ -4974,10 +5011,14 @@ msgstr "Do not allow IPv6 nexthop tracking to resolve via the default route. Thi msgid "Do not assign a link-local IPv6 address to this interface." msgstr "Не призначайте Đ»ĐľĐşĐ°Đ»ŃŚĐ˝Ń IPv6-адреŃŃ Đ´Đ»ŃŹ цього інтерфейŃŃ." -#: ../../configuration/trafficpolicy/index.rst:1210 +#: ../../configuration/trafficpolicy/index.rst:1278 msgid "Do not configure IFB as the first step. First create everything else of your traffic-policy, and then you can configure IFB. Otherwise you might get the ``RTNETLINK answer: File exists`` error, which can be solved with ``sudo ip link delete ifb0``." msgstr "Не налаŃтовŃйте IFB ŃŹĐş перŃий крок. ĐˇĐżĐľŃ‡Đ°Ń‚ĐşŃ Ńтворіть ŃŃе Ń–Đ˝Ńе Ń Ńвоїй політиці трафікŃ, Đ° потім можете налаŃŃ‚Ńвати IFB. ІнакŃе ви можете отримати ĐżĐľĐĽĐ¸Đ»ĐşŃ ``RTNETLINK answer: File exists``, ŃŹĐşŃ ĐĽĐľĐ¶Đ˝Đ° виріŃити Đ·Đ° допомогою ``sudo ip link delete ifb0``." +#: ../../configuration/service/https.rst:90 +msgid "Do not leave introspection enabled in production, it is a security risk." +msgstr "Do not leave introspection enabled in production, it is a security risk." + #: ../../configuration/protocols/bgp.rst:609 msgid "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained." msgstr "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained." @@ -5230,6 +5271,10 @@ msgstr "Увімкніть BFD на ĐľĐ´Đ˝ĐľĐĽŃ ŃŃŃŃ–Đ´Đ˝ŃŚĐľĐĽŃ BGP" msgid "Enable DHCP failover configuration for this address pool." msgstr "Увімкніть конфігŃрацію відмов DHCP для цього ĐżŃĐ»Ń Đ°Đ´Ń€ĐµŃ." +#: ../../configuration/service/https.rst:88 +msgid "Enable GraphQL Schema introspection." +msgstr "Enable GraphQL Schema introspection." + #: ../../configuration/interfaces/wireless.rst:178 msgid "Enable HT-delayed Block Ack ``[DELAYED-BA]``" msgstr "УвімкнŃти HT-Delayed Block Ack ``[DELAYED-BA]``" @@ -5440,6 +5485,10 @@ msgstr "Увімкнені з’єднання PPPoE на Đ˛Đ¸ĐĽĐľĐłŃ Đ˛Đ¸ĐşĐ»Đ msgid "Enables Cisco style authentication on NHRP packets. This embeds the secret plaintext password to the outgoing NHRP packets. Incoming NHRP packets on this interface are discarded unless the secret password is present. Maximum length of the secret is 8 characters." msgstr "Вмикає автентифікацію в Ńтилі Cisco для пакетів NHRP. Це вбŃдовŃŃ” Ńекретний відкритий пароль Ń Đ˛Đ¸Ń…Ń–Đ´Đ˝Ń– пакети NHRP. Вхідні пакети NHRP на Ń†ŃŚĐľĐĽŃ Ń–Đ˝Ń‚ĐµŃ€Ń„ĐµĐąŃŃ– відхиляютьŃŃŹ, якщо немає Ńекретного пароля. МакŃимальна довжина ŃĐµĐşŃ€ĐµŃ‚Ń â€“ 8 Ńимволів." +#: ../../configuration/loadbalancing/reverse-proxy.rst:166 +msgid "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range." +msgstr "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range." + #: ../../configuration/vrf/index.rst:480 msgid "Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN. If the value specified is auto, the label value is automatically assigned from a pool maintained." msgstr "Дозволяє додавати ĐĽŃ–Ń‚ĐşŃ MPLS Đ´Đľ ĐĽĐ°Ń€ŃŃ€ŃŃ‚Ń, екŃпортованого Đ· поточного одноадреŃного VRF Đ´Đľ VPN. Якщо вказано значення auto, значення мітки автоматично призначаєтьŃŃŹ Đ· ĐżŃĐ»Ń, який підтримŃєтьŃŃŹ." @@ -5488,6 +5537,10 @@ msgstr "Увімкнення цієї Ń„Ńнкції збільŃŃŃ” ризик msgid "Enforce strict path checking" msgstr "Забезпечити ŃŃĐ˛ĐľŃ€Ń ĐżĐµŃ€ĐµĐ˛Ń–Ń€ĐşŃ ŃляхŃ" +#: ../../configuration/service/https.rst:77 +msgid "Enforce strict path checking." +msgstr "Enforce strict path checking." + #: ../../configuration/interfaces/bonding.rst:31 msgid "Enslave `<member>` interface to bond `<interface>`." msgstr "Поневолити`<member> `Ń–Đ˝Ń‚ĐµŃ€Ń„ĐµĐąŃ Đ´Đ»ŃŹ облігації`<interface> `." @@ -5747,7 +5800,7 @@ msgid "Example: to be appended is set to ``vyos.net`` and the URL received is `` msgstr "Приклад: для додавання вŃтановлено значення ``vyos.net``, Đ° отримана URL-адреŃĐ° ``www/foo.html``, ŃиŃтема викориŃтовŃватиме Đ·ĐłĐµĐ˝ĐµŃ€ĐľĐ˛Đ°Đ˝Ń ĐşŃ–Đ˝Ń†ĐµĐ˛Ń URL-адреŃŃ ``www.vyos.net/foo``. html``." #: ../../configuration/container/index.rst:216 -#: ../../configuration/service/https.rst:77 +#: ../../configuration/service/https.rst:110 msgid "Example Configuration" msgstr "Приклад конфігŃрації" @@ -5789,7 +5842,8 @@ msgstr "Example synproxy" #: ../../configuration/interfaces/bridge.rst:196 #: ../../configuration/interfaces/macsec.rst:153 #: ../../configuration/interfaces/wireless.rst:541 -#: ../../configuration/loadbalancing/reverse-proxy.rst:190 +#: ../../configuration/loadbalancing/reverse-proxy.rst:227 +#: ../../configuration/pki/index.rst:370 #: ../../configuration/policy/index.rst:46 #: ../../configuration/protocols/bgp.rst:1118 #: ../../configuration/protocols/isis.rst:336 @@ -6078,6 +6132,10 @@ msgstr "ĐˇĐżĐľŃ‡Đ°Ń‚ĐşŃ Đ˝Đ° обох ĐĽĐ°Ń€ŃŃ€Ńтизаторах викон msgid "First, one of the systems generate the key using the :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki>` command. Once generated, you will need to install this key on the local system, then copy and install this key to the remote router." msgstr "ĐˇĐżĐľŃ‡Đ°Ń‚ĐşŃ ĐľĐ´Đ˝Đ° Ń–Đ· ŃиŃтем генерŃŃ” ключ Đ·Đ° допомогою :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki> ` команда. ПіŃля Ńтворення вам потрібно бŃде вŃтановити цей ключ Ń Đ»ĐľĐşĐ°Đ»ŃŚĐ˝Ń–Đą ŃиŃтемі, Đ° потім Ńкопіювати Ń‚Đ° вŃтановити цей ключ на віддалений ĐĽĐ°Ń€ŃŃ€Ńтизатор." +#: ../../configuration/pki/index.rst:393 +msgid "First, we create the root certificate authority." +msgstr "First, we create the root certificate authority." + #: ../../configuration/interfaces/openvpn.rst:176 msgid "First, you need to generate a key by running ``run generate pki openvpn shared-secret install <name>`` from configuration mode. You can use any name, we will use ``s2s``." msgstr "First, you need to generate a key by running ``run generate pki openvpn shared-secret install <name>`` from configuration mode. You can use any name, we will use ``s2s``." @@ -6138,6 +6196,30 @@ msgstr "Đ•ĐşŃпорт потокŃ" msgid "Flow and packet-based balancing" msgstr "БаланŃŃвання потоків Ń– пакетів" +#: ../../configuration/trafficpolicy/index.rst:1196 +msgid "Flows are defined by source-destination host pairs." +msgstr "Flows are defined by source-destination host pairs." + +#: ../../configuration/trafficpolicy/index.rst:1181 +msgid "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows." +msgstr "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows." + +#: ../../configuration/trafficpolicy/index.rst:1186 +msgid "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows." +msgstr "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows." + +#: ../../configuration/trafficpolicy/index.rst:1191 +msgid "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)." +msgstr "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)." + +#: ../../configuration/trafficpolicy/index.rst:1177 +msgid "Flows are defined only by destination address." +msgstr "Flows are defined only by destination address." + +#: ../../configuration/trafficpolicy/index.rst:1204 +msgid "Flows are defined only by source address." +msgstr "Flows are defined only by source address." + #: ../../configuration/system/flow-accounting.rst:10 msgid "Flows can be exported via two different protocols: NetFlow (versions 5, 9 and 10/IPFIX) and sFlow. Additionally, you may save flows to an in-memory table internally in a router." msgstr "Потоки можна екŃпортŃвати Đ·Đ° допомогою двох різних протоколів: NetFlow (верŃŃ–Ń— 5, 9 Ń– 10/IPFIX) Ń– sFlow. Крім того, ви можете зберігати потоки Ń Đ˛Đ˝ŃтріŃній таблиці в пам’яті ĐĽĐ°Ń€ŃŃ€Ńтизатора." @@ -6341,7 +6423,7 @@ msgstr "Для правила :ref:`destination-nat66` адреŃĐ° призна msgid "For the average user a serial console has no advantage over a console offered by a directly attached keyboard and screen. Serial consoles are much slower, taking up to a second to fill a 80 column by 24 line screen. Serial consoles generally only support non-proportional ASCII text, with limited support for languages other than English." msgstr "Для звичайного кориŃŃ‚Ńвача поŃлідовна конŃоль не ĐĽĐ°Ń” переваг перед конŃоллю, що пропонŃєтьŃŃŹ безпоŃередньо підключеною клавіатŃрою Ń‚Đ° екраном. ПоŃлідовні конŃолі набагато повільніŃŃ–, Ń—ĐĽ потрібна Đ´Đľ ŃекŃнди, щоб заповнити екран Ń–Đ· 80 Ńтовпців на 24 рядки. ПоŃлідовні конŃолі зазвичай підтримŃŃŽŃ‚ŃŚ лиŃе непропорційний текŃŃ‚ ASCII Đ· обмеженою підтримкою Ń–Đ˝Ńих мов, крім англійŃької." -#: ../../configuration/trafficpolicy/index.rst:1183 +#: ../../configuration/trafficpolicy/index.rst:1251 msgid "For the ingress traffic of an interface, there is only one policy you can directly apply, a **Limiter** policy. You cannot apply a shaping policy directly to the ingress traffic of any interface because shaping only works for outbound traffic." msgstr "Для вхідного Ń‚Ń€Đ°Ń„Ń–ĐşŃ Ń–Đ˝Ń‚ĐµŃ€Ń„ĐµĐąŃŃ Ń–ŃĐ˝ŃŃ” лиŃе одна політика, ŃŹĐşŃ ĐĽĐľĐ¶Đ˝Đ° Đ·Đ°ŃŃ‚ĐľŃŃвати безпоŃередньо, політика **Limiter**. Ви не можете Đ·Đ°ŃŃ‚ĐľŃŃвати ĐżĐľĐ»Ń–Ń‚Đ¸ĐşŃ Ń„ĐľŃ€ĐĽŃвання безпоŃередньо Đ´Đľ вхідного Ń‚Ń€Đ°Ń„Ń–ĐşŃ Đ±ŃĐ´ŃŚ-якого інтерфейŃŃ, ĐľŃкільки формŃвання працює лиŃе для вихідного трафікŃ." @@ -6379,6 +6461,10 @@ msgstr "For transit traffic, which is received by the router and forwarded, base msgid "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``" msgstr "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``" +#: ../../configuration/loadbalancing/reverse-proxy.rst:161 +msgid "For web application providing information about their state HTTP health checks can be used to determine their availability." +msgstr "For web application providing information about their state HTTP health checks can be used to determine their availability." + #: ../../configuration/protocols/ospf.rst:350 msgid "Formally, a virtual link looks like a point-to-point network connecting two ABR from one area one of which physically connected to a backbone area. This pseudo-network is considered to belong to a backbone area." msgstr "Формально віртŃальне з’єднання виглядає ŃŹĐş мережа «точка-точка», що з’єднŃŃ” два ABR Đ· однієї облаŃŃ‚Ń–, одна Đ· яких фізично з’єднана Đ· магіŃтральною облаŃŃ‚ŃŽ. ВважаєтьŃŃŹ, що ця ĐżŃевдомережа належить Đ´Đľ магіŃтральної облаŃŃ‚Ń–." @@ -6553,7 +6639,7 @@ msgstr "ĐŁ Đ˝Đ°Đ˛ĐµĐ´ĐµĐ˝ĐľĐĽŃ Đ˝Đ¸Đ¶Ń‡Đµ прикладі ми маємо од msgid "Gloabal" msgstr "Глобальний" -#: ../../configuration/loadbalancing/reverse-proxy.rst:153 +#: ../../configuration/loadbalancing/reverse-proxy.rst:190 msgid "Global" msgstr "Global" @@ -6577,7 +6663,7 @@ msgstr "Global Options Firewall Configuration" msgid "Global options" msgstr "Глобальні опції" -#: ../../configuration/loadbalancing/reverse-proxy.rst:155 +#: ../../configuration/loadbalancing/reverse-proxy.rst:192 msgid "Global parameters" msgstr "Глобальні параметри" @@ -6590,6 +6676,10 @@ msgstr "Глобальні налаŃŃ‚Ńвання" msgid "Graceful Restart" msgstr "Витончений перезапŃŃĐş" +#: ../../configuration/service/https.rst:84 +msgid "GraphQL" +msgstr "GraphQL" + #: ../../configuration/highavailability/index.rst:236 msgid "Gratuitous ARP" msgstr "Безоплатний ARP" @@ -6627,6 +6717,10 @@ msgstr "Ім'ŃŹ кориŃŃ‚Ńвача базової автентифіка msgid "HTTP client" msgstr "HTTP клієнт" +#: ../../configuration/loadbalancing/reverse-proxy.rst:160 +msgid "HTTP health check" +msgstr "HTTP health check" + #: ../../configuration/interfaces/wireless.rst:137 msgid "HT (High Throughput) capabilities (802.11n)" msgstr "МожливоŃŃ‚Ń– HT (High Throughput) (802.11n)" @@ -7859,6 +7953,10 @@ msgstr "Щоб розділити трафік, Fair Queue викориŃŃ‚ĐľĐ˛Ń msgid "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands." msgstr "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands." +#: ../../configuration/interfaces/ethernet.rst:111 +msgid "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled." +msgstr "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled." + #: ../../configuration/interfaces/ethernet.rst:95 msgid "In order to use TSO/LRO with VMXNET3 adaters one must also enable the SG offloading option." msgstr "Щоб викориŃтовŃвати TSO/LRO Đ· адатерами VMXNET3, потрібно також ŃвімкнŃти опцію розвантаження SG." @@ -8480,6 +8578,10 @@ msgstr "LNS чаŃŃ‚Đľ викориŃтовŃŃŽŃ‚ŃŚŃŃŹ для підключеРmsgid "Label Distribution Protocol" msgstr "Протокол Ń€ĐľĐ·ĐżĐľĐ´Ń–Đ»Ń ĐµŃ‚Đ¸ĐşĐµŃ‚ĐľĐş" +#: ../../configuration/pki/index.rst:447 +msgid "Lastly, we can create the leaf certificates that devices and users will utilise." +msgstr "Lastly, we can create the leaf certificates that devices and users will utilise." + #: ../../configuration/interfaces/l2tpv3.rst:11 msgid "Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that can be used as an alternative protocol to :ref:`mpls` for encapsulation of multiprotocol Layer 2 communications traffic over IP networks. Like L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier requirements." msgstr "Layer 2 Tunneling Protocol Version 3 — це Ńтандарт IETF, пов’язаний Ń–Đ· L2TP, який можна викориŃтовŃвати ŃŹĐş альтернативний протокол Đ´Đľ :ref:`mpls` для інкапŃŃляції багатопротокольного Ń‚Ń€Đ°Ń„Ń–ĐşŃ Đ·Đ˛â€™ŃŹĐ·ĐşŃ Ń€Ń–Đ˛Đ˝ŃŹ 2 через IP-мережі. ĐŻĐş Ń– L2TP, L2TPv3 надає поŃĐ»ŃĐłŃ ĐżŃевдодротового зв’язкŃ, але ĐĽĐ°ŃŃтабŃєтьŃŃŹ відповідно Đ´Đľ вимог оператора." @@ -8520,7 +8622,7 @@ msgstr "Дозвольте Đ´ĐµĐĽĐľĐ˝Ń SNMP ŃĐ»Ńхати лиŃе IP-адре msgid "Lets assume the following topology:" msgstr "ПрипŃŃтимо Ń‚Đ°ĐşŃ Ń‚ĐľĐżĐľĐ»ĐľĐłŃ–ŃŽ:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:193 +#: ../../configuration/loadbalancing/reverse-proxy.rst:230 msgid "Level 4 balancing" msgstr "4 рівень баланŃŃвання" @@ -8540,7 +8642,7 @@ msgstr "ТриваліŃŃ‚ŃŚ життя зменŃŃєтьŃŃŹ на кількі msgid "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." msgstr "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." -#: ../../configuration/loadbalancing/reverse-proxy.rst:165 +#: ../../configuration/loadbalancing/reverse-proxy.rst:202 msgid "Limit allowed cipher algorithms used during SSL/TLS handshake" msgstr "Обмеження дозволених алгоритмів ŃифрŃвання, які викориŃтовŃŃŽŃ‚ŃŚŃŃŹ під Ń‡Đ°Ń Ń€ŃкоŃтиŃкання SSL/TLS" @@ -8552,7 +8654,7 @@ msgstr "Обмежити вхід Đ´Đľ `<limit> ` Đ·Đ° ĐşĐľĐ¶Đ˝Ń ŃекŃĐ˝Đ´Ń msgid "Limit logins to ``rate-limit`` attemps per every `<seconds>`. Rate time must be between 15 and 600 seconds." msgstr "Обмежити вхід Đ´Đľ ``рейт-ліміт`` Ńпроб Đ·Đ° ĐşĐľĐ¶Đ˝Ń `<seconds> `. Đ§Đ°Ń Ńтавки ĐĽĐ°Ń” Ńтановити від 15 Đ´Đľ 600 ŃекŃнд." -#: ../../configuration/loadbalancing/reverse-proxy.rst:160 +#: ../../configuration/loadbalancing/reverse-proxy.rst:197 msgid "Limit maximum number of connections" msgstr "Обмежити ĐĽĐ°ĐşŃĐ¸ĐĽĐ°Đ»ŃŚĐ˝Ń ĐşŃ–Đ»ŃŚĐşŃ–ŃŃ‚ŃŚ підключень" @@ -9339,6 +9441,10 @@ msgid "Multiple VLAN to VNI mappings can be configured against the same SVD. Thi msgstr "Multiple VLAN to VNI mappings can be configured against the same SVD. This allows for a significant scaling of the number of VNIs since a separate VXLAN interface is no longer required for each VNI." #: ../../configuration/system/host-name.rst:68 +msgid "Multiple aliases can be specified per host-name." +msgstr "Multiple aliases can be specified per host-name." + +#: ../../configuration/system/host-name.rst:68 msgid "Multiple aliases can pe specified per host-name." msgstr "Для кожного імені Ń…ĐľŃŃ‚Đ° можна вказати кілька ĐżŃевдонімів." @@ -9859,7 +9965,7 @@ msgstr "ПіŃля того, ŃŹĐş ŃŃŃŃ–Đ´ знайдено, Đ·Đ°ĐżĐ¸Ń Đ˛Đ˛Đ° msgid "Once a route is assessed a penalty, the penalty is decreased by half each time a predefined amount of time elapses (half-life-time). When the accumulated penalties fall below a predefined threshold (reuse-value), the route is unsuppressed and added back into the BGP routing table." msgstr "Щойно ĐĽĐ°Ń€ŃŃ€ŃŃ‚ отримŃŃ” Ńтраф, Ńтраф зменŃŃєтьŃŃŹ вдвічі кожного разŃ, коли Ńпливає заздалегідь визначений проміжок чаŃŃ (період напіврозпадŃ). Коли накопичені Ńтрафні Ńанкції падають нижче попередньо визначеного ĐżĐľŃ€ĐľĐłŃ (значення повторного викориŃтання), ĐĽĐ°Ń€ŃŃ€ŃŃ‚ не пригнічŃєтьŃŃŹ Ń‚Đ° додаєтьŃŃŹ назад Ń Ń‚Đ°Đ±Đ»Đ¸Ń†ŃŽ ĐĽĐ°Ń€ŃŃ€Ńтизації BGP." -#: ../../configuration/trafficpolicy/index.rst:1152 +#: ../../configuration/trafficpolicy/index.rst:1220 msgid "Once a traffic-policy is created, you can apply it to an interface:" msgstr "ПіŃля Ńтворення політики Ń‚Ń€Đ°Ń„Ń–ĐşŃ Đ˛Đ¸ можете Đ·Đ°ŃŃ‚ĐľŃŃвати Ń—Ń— Đ´Đľ інтерфейŃŃ:" @@ -10039,7 +10145,7 @@ msgstr "Режими роботи" #: ../../configuration/interfaces/bonding.rst:512 #: ../../configuration/interfaces/dummy.rst:51 -#: ../../configuration/interfaces/ethernet.rst:132 +#: ../../configuration/interfaces/ethernet.rst:148 #: ../../configuration/interfaces/loopback.rst:41 #: ../../configuration/interfaces/macsec.rst:106 #: ../../configuration/interfaces/pppoe.rst:278 @@ -10417,6 +10523,10 @@ msgstr "Đ—Đ° замовчŃванням відбираєтьŃŃŹ кожен па msgid "Per default the user session is being replaced if a second authentication request succeeds. Such session requests can be either denied or allowed entirely, which would allow multiple sessions for a user in the latter case. If it is denied, the second session is being rejected even if the authentication succeeds, the user has to terminate its first session and can then authentication again." msgstr "Đ—Đ° замовчŃванням ŃĐµĐ°Đ˝Ń ĐşĐľŃ€Đ¸ŃŃ‚Ńвача замінюєтьŃŃŹ, якщо Đ´Ń€Ńгий запит на автентифікацію вдаєтьŃŃŹ. Такі запити на ŃĐµĐ°Đ˝Ń ĐĽĐľĐ¶Đ˝Đ° відхилити або повніŃŃ‚ŃŽ дозволити, що в ĐľŃŃ‚Đ°Đ˝Đ˝ŃŚĐľĐĽŃ Đ˛Đ¸ĐżĐ°Đ´ĐşŃ Đ´ĐľĐ·Đ˛ĐľĐ»Đ¸Ń‚ŃŚ кориŃŃ‚ŃĐ˛Đ°Ń‡Ń ĐşŃ–Đ»ŃŚĐşĐ° ŃеанŃів. Якщо його відхилено, Đ´Ń€Ńгий ŃĐµĐ°Đ˝Ń Đ˛Ń–Đ´Ń…Đ¸Đ»ŃŹŃ”Ń‚ŃŚŃŃŹ, навіть якщо автентифікація пройŃла ŃŃпіŃно, кориŃŃ‚Ńвач ĐĽĐ°Ń” припинити Ńвій перŃий ŃĐµĐ°Đ˝Ń Ń– може Đ·Đ˝ĐľĐ˛Ń ĐżŃ€ĐľĐąŃ‚Đ¸ автентифікацію." +#: ../../configuration/trafficpolicy/index.rst:1200 +msgid "Perform NAT lookup before applying flow-isolation rules." +msgstr "Perform NAT lookup before applying flow-isolation rules." + #: ../../configuration/system/option.rst:108 msgid "Performance" msgstr "ПродŃктивніŃŃ‚ŃŚ" @@ -10523,7 +10633,7 @@ msgstr "Đ“Ń€Ńпи портів" #: ../../configuration/interfaces/bonding.rst:282 #: ../../configuration/interfaces/bridge.rst:188 -#: ../../configuration/interfaces/ethernet.rst:124 +#: ../../configuration/interfaces/ethernet.rst:140 msgid "Port Mirror (SPAN)" msgstr "Дзеркало ĐżĐľŃ€Ń‚Ń (SPAN)" @@ -10809,7 +10919,7 @@ msgstr "ОпŃблікŃйте порт для контейнера." msgid "Pull a new image for container" msgstr "Витягніть нове зображення для контейнера" -#: ../../configuration/interfaces/ethernet.rst:117 +#: ../../configuration/interfaces/ethernet.rst:133 #: ../../configuration/interfaces/virtual-ethernet.rst:39 #: ../../configuration/interfaces/wireless.rst:408 msgid "QinQ (802.1ad)" @@ -11023,7 +11133,7 @@ msgstr "РекомендŃєтьŃŃŹ для великих ŃŃтановок." msgid "Record types" msgstr "Record types" -#: ../../configuration/loadbalancing/reverse-proxy.rst:174 +#: ../../configuration/loadbalancing/reverse-proxy.rst:211 msgid "Redirect HTTP to HTTPS" msgstr "Перенаправлення HTTP на HTTPS" @@ -11055,7 +11165,7 @@ msgstr "РезервŃвання Ń‚Đ° розподіл навантаження. msgid "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" msgstr "ЗареєŃŃ‚Ń€Ńвати DNS-Đ·Đ°ĐżĐ¸Ń ``example.vyos.io`` на DNS-Ńервері ``ns1.vyos.io``" -#: ../../configuration/interfaces/ethernet.rst:110 +#: ../../configuration/interfaces/ethernet.rst:126 #: ../../configuration/interfaces/virtual-ethernet.rst:33 #: ../../configuration/interfaces/wireless.rst:401 msgid "Regular VLANs (802.1q)" @@ -11402,11 +11512,11 @@ msgstr "Набори правил" msgid "Rule-set overview" msgstr "Огляд Đ˝Đ°Đ±ĐľŃ€Ń ĐżŃ€Đ°Đ˛Đ¸Đ»" -#: ../../configuration/loadbalancing/reverse-proxy.rst:220 +#: ../../configuration/loadbalancing/reverse-proxy.rst:258 msgid "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" msgstr "Правило 10 Đ·Ń–Ńтавляє запити Đ· доменним іменем `` node1.example.com ``, які переŃилають Đ´Đľ Ńерверної чаŃтини `` bk-api-01``" -#: ../../configuration/loadbalancing/reverse-proxy.rst:257 +#: ../../configuration/loadbalancing/reverse-proxy.rst:295 msgid "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." msgstr "Правило 10 Đ·Ń–Ńтавляє запити Đ· точним URL-Ńляхом ``/.well-known/xxx`` Ń– переŃпрямовŃŃ” Đ´Đľ розтаŃŃвання ``/certs/``." @@ -11414,11 +11524,11 @@ msgstr "Правило 10 Đ·Ń–Ńтавляє запити Đ· точним URL-Ń msgid "Rule 110 is hit, so connection is accepted." msgstr "Rule 110 is hit, so connection is accepted." -#: ../../configuration/loadbalancing/reverse-proxy.rst:260 +#: ../../configuration/loadbalancing/reverse-proxy.rst:298 msgid "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." msgstr "Правило 20 Đ·Ń–Ńтавляє запити Đ· URL-Ńляхами, що закінчŃŃŽŃ‚ŃŚŃŃŹ на ``/mail`` або точним Ńляхом ``/email/bar``, перенаправляють Đ´Đľ розтаŃŃвання ``/postfix/``." -#: ../../configuration/loadbalancing/reverse-proxy.rst:223 +#: ../../configuration/loadbalancing/reverse-proxy.rst:261 msgid "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" msgstr "Правило 20 Đ·Ń–Ńтавляє запити Đ· доменним іменем ``node2.example.com``, які переŃилають на ŃĐµŃ€Đ˛ĐµŃ€Đ˝Ń Ń‡Đ°ŃŃ‚Đ¸Đ˝Ń ``bk-api-02``" @@ -11537,7 +11647,7 @@ msgstr "SSH бŃв розроблений ŃŹĐş заміна Telnet Ń– незах msgid "SSID to be used in IEEE 802.11 management frames" msgstr "SSID для викориŃтання в кадрах керŃвання IEEE 802.11" -#: ../../configuration/loadbalancing/reverse-proxy.rst:294 +#: ../../configuration/loadbalancing/reverse-proxy.rst:333 msgid "SSL Bridging" msgstr "SSL Bridging" @@ -11650,6 +11760,10 @@ msgstr "Сценарії" msgid "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly." msgstr "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly." +#: ../../configuration/pki/index.rst:411 +msgid "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates." +msgstr "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates." + #: ../../configuration/service/ipoe-server.rst:186 #: ../../configuration/service/pppoe-server.rst:148 #: ../../configuration/vpn/l2tp.rst:191 @@ -11857,6 +11971,10 @@ msgstr "НалаŃŃ‚Ńвати Ń–Đ˝Ń‚ĐµŃ€Ń„ĐµĐąŃ Đ˛Ń–Ń€Ń‚Ńального Ń‚ŃĐ msgid "Set a container description" msgstr "Đ’Ńтановіть ĐľĐżĐ¸Ń ĐşĐľĐ˝Ń‚ĐµĐąĐ˝ĐµŃ€Đ°" +#: ../../configuration/trafficpolicy/index.rst:1169 +msgid "Set a description for the shaper." +msgstr "Set a description for the shaper." + #: ../../configuration/system/conntrack.rst:113 msgid "Set a destination and/or source address. Accepted input for ipv4:" msgstr "Set a destination and/or source address. Accepted input for ipv4:" @@ -11877,7 +11995,7 @@ msgstr "Đ’Ńтановіть обмеження на ĐĽĐ°ĐşŃĐ¸ĐĽĐ°Đ»ŃŚĐ˝Ń ĐşŃ– msgid "Set a meaningful description." msgstr "Складіть Đ·ĐĽŃ–Ńтовний опиŃ." -#: ../../configuration/service/https.rst:63 +#: ../../configuration/service/https.rst:67 msgid "Set a named api key. Every key has the same, full permissions on the system." msgstr "ĐŁŃтановіть іменований ключ API. Кожен ключ ĐĽĐ°Ń” однакові повні дозволи в ŃиŃтемі." @@ -11904,7 +12022,7 @@ msgstr "Đ’Ńтановіть Đ´Ń–ŃŽ для політики ĐĽĐ°Ń€ŃŃ€Ńтної msgid "Set action to take on entries matching this rule." msgstr "Đ’Ńтановіть Đ´Ń–ŃŽ для запиŃів, які відповідають Ń†ŃŚĐľĐĽŃ ĐżŃ€Đ°Đ˛Đ¸Đ»Ń." -#: ../../configuration/service/https.rst:79 +#: ../../configuration/service/https.rst:112 msgid "Set an API-KEY is the minimal configuration to get a working API Endpoint." msgstr "Đ’Ńтановлення API-KEY Ń” мінімальною конфігŃрацією для отримання робочої кінцевої точки API." @@ -12309,6 +12427,14 @@ msgstr "Đ’Ńтановіть адреŃŃ Đ˛Đ˝ŃтріŃнього портŃ" msgid "Set the address of the backend server to which the incoming traffic will be forwarded" msgstr "Đ’Ńтановіть адреŃŃ Đ˛Đ˝ŃтріŃнього Ńервера, на який бŃде перенаправлятиŃŃŹ вхідний трафік" +#: ../../configuration/service/https.rst:94 +msgid "Set the authentication type for GraphQL, default option is key. Available options are:" +msgstr "Set the authentication type for GraphQL, default option is key. Available options are:" + +#: ../../configuration/service/https.rst:106 +msgid "Set the byte length of the JWT secret. Default is 32." +msgstr "Set the byte length of the JWT secret. Default is 32." + #: ../../configuration/highavailability/index.rst:295 msgid "Set the default VRRP version to use. This defaults to 2, but IPv6 instances will always use version 3." msgstr "Đ’Ńтановіть ŃŃ‚Đ°Đ˝Đ´Đ°Ń€Ń‚Đ˝Ń Đ˛ĐµŃ€ŃŃ–ŃŽ VRRP для викориŃтання. Đ—Đ° Ńмовчанням це значення 2, але екземпляри IPv6 завжди викориŃтовŃватимŃŃ‚ŃŚ верŃŃ–ŃŽ 3." @@ -12345,6 +12471,10 @@ msgstr "ĐŁŃтановіть глобальне налаŃŃ‚Ńвання для msgid "Set the global setting for related connections." msgstr "ĐŁŃтановіть глобальне налаŃŃ‚Ńвання для пов’язаних з’єднань." +#: ../../configuration/service/https.rst:102 +msgid "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds." +msgstr "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds." + #: ../../configuration/service/https.rst:28 msgid "Set the listen port of the local API, this has no effect on the webserver. The default is port 8080" msgstr "Đ’Ńтановіть порт проŃĐ»ŃховŃвання локального API, це не впливає на веб-Ńервер. Типовим Ń” порт 8080" @@ -12361,6 +12491,10 @@ msgstr "Đ’Ńтановіть ĐĽĐ°ĐşŃĐ¸ĐĽĐ°Đ»ŃŚĐ˝Ń Đ´ĐľĐ˛Đ¶Đ¸Đ˝Ń Đ·Đ°ĐżĐľĐ˛Đ˝Đ msgid "Set the maximum number of TCP half-open connections." msgstr "Đ’Ńтановіть ĐĽĐ°ĐşŃĐ¸ĐĽĐ°Đ»ŃŚĐ˝Ń ĐşŃ–Đ»ŃŚĐşŃ–ŃŃ‚ŃŚ напіввідкритих підключень TCP." +#: ../../configuration/service/https.rst:60 +msgid "Set the maximum request body size in megabytes. Default is 1MB." +msgstr "Set the maximum request body size in megabytes. Default is 1MB." + #: ../../_include/interface-eapol.txt:12 msgid "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry used for authentication of the remote side. If an intermediate CA certificate is specified, then all parent CA certificates that exist in the PKI, such as the root CA or additional intermediate CAs, will automatically be used during certificate validation to ensure that the full chain of trust is available." msgstr "Đ’Ńтановіть ім’я запиŃŃ SSL :abbr:`CA (Certificate Authority)` PKI, який викориŃтовŃєтьŃŃŹ для автентифікації віддаленої Ńторони. Якщо вказано проміжний Ńертифікат ЦС, ŃŃŃ– батьківŃькі Ńертифікати ЦС, які Ń–ŃĐ˝ŃŃŽŃ‚ŃŚ Ń PKI, наприклад кореневий ЦС або додаткові проміжні ЦС, автоматично викориŃтовŃватимŃŃ‚ŃŚŃŃŹ під Ń‡Đ°Ń ĐżĐµŃ€ĐµĐ˛Ń–Ń€ĐşĐ¸ Ńертифіката, щоб забезпечити Đ´ĐľŃŃ‚ŃпніŃŃ‚ŃŚ повного ланцюжка довіри." @@ -12429,6 +12563,10 @@ msgstr "НалаŃŃ‚Ńйте таблицю ĐĽĐ°Ń€ŃŃ€Ńтизації для Đż msgid "Set the session id, which is a 32-bit integer value. Uniquely identifies the session being created. The value used must match the peer_session_id value being used at the peer." msgstr "ĐŁŃтановіть ідентифікатор ŃеанŃŃ, який Ń” 32-розрядним цілим значенням. Унікально ідентифікŃŃ” Ńтворюваний ŃеанŃ. ВикориŃтане значення ĐĽĐ°Ń” відповідати значенню peer_session_id, яке викориŃтовŃєтьŃŃŹ на ĐľĐ´Đ˝ĐľŃ€Đ°Đ˝ĐłĐľĐ˛ĐľĐĽŃ ĐżŃ€Đ¸Ńтрої." +#: ../../configuration/trafficpolicy/index.rst:1164 +msgid "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth." +msgstr "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth." + #: ../../configuration/system/conntrack.rst:31 msgid "Set the size of the hash table. The connection tracking hash table makes searching the connection tracking table faster. The hash table uses “buckets” to record entries in the connection tracking table." msgstr "Đ’Ńтановити розмір хеŃ-таблиці. ХеŃ-таблиця відŃтеження з’єднань приŃвидŃŃŃ” поŃŃĐş Ń Ń‚Đ°Đ±Đ»Đ¸Ń†Ń– відŃтеження з’єднань. ХеŃ-таблиця викориŃтовŃŃ” «відра» для запиŃŃ Đ·Đ°ĐżĐ¸Ńів Ń Ń‚Đ°Đ±Đ»Đ¸Ń†ŃŽ відŃтеження з’єднань." @@ -12459,6 +12597,18 @@ msgstr "Set the window scale factor for TCP window scaling" msgid "Set window of concurrently valid codes." msgstr "Đ’Ńтановити вікно одночаŃно Đ´Ń–ĐąŃних кодів." +#: ../../configuration/loadbalancing/reverse-proxy.rst:172 +msgid "Sets the HTTP method to be used, can be either: option, get, post, put" +msgstr "Sets the HTTP method to be used, can be either: option, get, post, put" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:177 +msgid "Sets the endpoint to be used for health checks" +msgstr "Sets the endpoint to be used for health checks" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:182 +msgid "Sets the expected result condition for considering a server healthy. Some possible examples are:" +msgstr "Sets the expected result condition for considering a server healthy. Some possible examples are:" + #: ../../configuration/container/index.rst:16 msgid "Sets the image name in the hub registry" msgstr "Đ’Ńтановлює Đ˝Đ°Đ·Đ˛Ń Đ·ĐľĐ±Ń€Đ°Đ¶ĐµĐ˝Đ˝ŃŹ в реєŃтрі концентратора" @@ -12683,7 +12833,7 @@ msgstr "Показати ŃпиŃок вŃтановлених ŃертифікРmsgid "Show all BFD peers" msgstr "Показати вŃŃ– аналоги BFD" -#: ../../configuration/interfaces/ethernet.rst:210 +#: ../../configuration/interfaces/ethernet.rst:226 msgid "Show available offloading functions on given `<interface>`" msgstr "Показати Đ´ĐľŃŃ‚Ńпні Ń„Ńнкції розвантаження для даного `<interface> `" @@ -12701,7 +12851,7 @@ msgstr "Показати ĐĽŃ–ŃŃ‚ `<name> ` mdb відображає поточР#: ../../configuration/interfaces/bonding.rst:516 #: ../../configuration/interfaces/dummy.rst:55 -#: ../../configuration/interfaces/ethernet.rst:136 +#: ../../configuration/interfaces/ethernet.rst:152 #: ../../configuration/interfaces/loopback.rst:45 #: ../../configuration/interfaces/virtual-ethernet.rst:59 msgid "Show brief interface information." @@ -12745,7 +12895,7 @@ msgstr "Показати Đ´ĐµŃ‚Đ°Đ»ŃŚĐ˝Ń Ń–Đ˝Ń„ĐľŃ€ĐĽĐ°Ń†Ń–ŃŽ про базов #: ../../configuration/interfaces/bonding.rst:531 #: ../../configuration/interfaces/dummy.rst:67 -#: ../../configuration/interfaces/ethernet.rst:150 +#: ../../configuration/interfaces/ethernet.rst:166 #: ../../configuration/interfaces/pppoe.rst:282 #: ../../configuration/interfaces/sstp-client.rst:121 #: ../../configuration/interfaces/virtual-ethernet.rst:72 @@ -12777,7 +12927,7 @@ msgstr "Показати Đ·Đ°ĐłĐ°Đ»ŃŚĐ˝Ń Ń–Đ˝Ń„ĐľŃ€ĐĽĐ°Ń†Ń–ŃŽ про конкр msgid "Show info about the Wireguard service. It also shows the latest handshake." msgstr "Показати інформацію про ŃĐ»ŃĐ¶Đ±Ń Wireguard. Đ’Ń–Đ˝ також показŃŃ” ĐľŃтаннє Ń€ŃкоŃтиŃкання." -#: ../../configuration/interfaces/ethernet.rst:169 +#: ../../configuration/interfaces/ethernet.rst:185 msgid "Show information about physical `<interface>`" msgstr "Показати інформацію про фізичний `<interface> `" @@ -12895,7 +13045,7 @@ msgstr "Show the logs of all firewall; show all ipv6 firewall logs; show all log msgid "Show the route" msgstr "Показати ĐĽĐ°Ń€ŃŃ€ŃŃ‚" -#: ../../configuration/interfaces/ethernet.rst:242 +#: ../../configuration/interfaces/ethernet.rst:258 msgid "Show transceiver information from plugin modules, e.g SFP+, QSFP" msgstr "Показати інформацію про транŃивер Ń–Đ· модŃлів плагінів, наприклад SFP+, QSFP" @@ -13475,7 +13625,7 @@ msgstr "Укажіть значення ідентифікатора агрегРmsgid "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." msgstr "Укажіть адреŃŃ Ń–Đ˝Ń‚ĐµŃ€Ń„ĐµĐąŃŃ, яка викориŃтовŃєтьŃŃŹ локально на інтерфейŃŃ–, ŃŹĐşĐľĐĽŃ Đ±Ńло делеговано префікŃ. ID ĐĽĐ°Ń” бŃти деŃятковим цілим чиŃлом." -#: ../../configuration/loadbalancing/reverse-proxy.rst:170 +#: ../../configuration/loadbalancing/reverse-proxy.rst:207 msgid "Specify the minimum required TLS version 1.2 or 1.3" msgstr "Укажіть мінімально Đ˝ĐµĐľĐ±Ń…Ń–Đ´Đ˝Ń Đ˛ĐµŃ€ŃŃ–ŃŽ TLS 1.2 або 1.3" @@ -13524,6 +13674,10 @@ msgid "Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety msgstr "Squid_ — веб-прокŃŃ– HTTP, що кеŃŃŃ” Ń‚Đ° переŃилає. Đ’Ń–Đ˝ ĐĽĐ°Ń” Ńирокий Ńпектр Đ·Đ°ŃŃ‚ĐľŃŃвань, включаючи приŃкорення веб-Ńервера Ńляхом кеŃŃвання повторюваних запитів, кеŃŃвання поŃŃĐşŃ Đ˛ Інтернеті, DNS Ń‚Đ° Ń–Đ˝Ńих комп’ютерних мережах для грŃпи людей, які Ńпільно викориŃтовŃŃŽŃ‚ŃŚ мережеві реŃŃŃ€Ńи, Đ° також Ńприяння безпеці Ńляхом фільтрації трафікŃ. Хоча в ĐľŃĐ˝ĐľĐ˛Đ˝ĐľĐĽŃ Đ˛Đ¸ĐşĐľŃ€Đ¸ŃтовŃєтьŃŃŹ для HTTP Ń– FTP, Squid включає ĐľĐ±ĐĽĐµĐ¶ĐµĐ˝Ń ĐżŃ–Đ´Ń‚Ń€Đ¸ĐĽĐşŃ ĐşŃ–Đ»ŃŚĐşĐľŃ… Ń–Đ˝Ńих протоколів, включаючи Internet Gopher, SSL, [6] TLS Ń– HTTPS. Squid не підтримŃŃ” протокол SOCKS." #: ../../configuration/service/https.rst:56 +msgid "Start Webserver in given VRF." +msgstr "Start Webserver in given VRF." + +#: ../../configuration/service/https.rst:56 msgid "Start Webserver in given VRF." msgstr "Start Webserver in given VRF." @@ -13843,7 +13997,7 @@ msgstr "ТимчаŃово вимкніть цей Ńервер RADIUS. Його msgid "Temporary disable this TACACS server. It won't be queried." msgstr "ТимчаŃово вимкніть цей Ńервер TACACS. Його не запитŃватимŃŃ‚ŃŚ." -#: ../../configuration/loadbalancing/reverse-proxy.rst:248 +#: ../../configuration/loadbalancing/reverse-proxy.rst:286 msgid "Terminate SSL" msgstr "ЗаверŃити SSL" @@ -13879,7 +14033,7 @@ msgstr "ТеŃŃ‚Ńвання Ń‚Đ° валідація" msgid "Thanks to this discovery, any subsequent traffic between PC4 and PC5 will not be using the multicast-address between the leaves as they both know behind which Leaf the PCs are connected. This saves traffic as less multicast packets sent reduces the load on the network, which improves scalability when more leaves are added." msgstr "Завдяки Ń†ŃŚĐľĐĽŃ Đ˛Ń–Đ´ĐşŃ€Đ¸Ń‚Ń‚ŃŽ бŃĐ´ŃŚ-який подальŃий трафік між PC4 Ń– PC5 не викориŃтовŃватиме багатоадреŃĐ˝Ń Đ°Đ´Ń€ĐµŃŃ ĐĽŃ–Đ¶ лиŃтами, ĐľŃкільки вони обидва знають, Đ·Đ° яким лиŃтом підключені ПК. Це економить трафік, ĐľŃкільки менŃе надіŃланих багатоадреŃних пакетів зменŃŃŃ” навантаження на мережŃ, що покращŃŃ” ĐĽĐ°ŃŃтабованіŃŃ‚ŃŚ, коли додаєтьŃŃŹ більŃе лиŃтів." -#: ../../configuration/trafficpolicy/index.rst:1194 +#: ../../configuration/trafficpolicy/index.rst:1262 msgid "That is how it is possible to do the so-called \"ingress shaping\"." msgstr "Таким чином можна зробити Ń‚Đ°Đş зване «вхідне формŃвання»." @@ -13923,7 +14077,7 @@ msgstr "DN Ń– пароль для прив’язки під Ń‡Đ°Ń Đ˛Đ¸ĐşĐľĐ˝Đ° msgid "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." msgstr "Політика FQ-CoDel розподіляє трафік Ń 1024 черги FIFO Ń‚Đ° намагаєтьŃŃŹ забезпечити якіŃне обŃĐ»ŃговŃвання між ŃŃŃ–ĐĽĐ° ними. Đ’Ń–Đ˝ також намагаєтьŃŃŹ зберегти ĐşĐľŃ€ĐľŃ‚ĐşŃ Đ´ĐľĐ˛Đ¶Đ¸Đ˝Ń Đ˛ŃŃ–Ń… черг." -#: ../../configuration/loadbalancing/reverse-proxy.rst:218 +#: ../../configuration/loadbalancing/reverse-proxy.rst:256 msgid "The HTTP service listen on TCP port 80." msgstr "СлŃжба HTTP ŃĐ»ŃŃ…Đ°Ń” TCP-порт 80." @@ -14040,7 +14194,7 @@ msgstr "``ĐдреŃŃ`` можна налаŃŃ‚Ńвати ŃŹĐş на Ń–Đ˝Ń‚ĐµŃ€Ń msgid "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" msgstr "Параметр ``address`` може бŃти ŃŹĐş адреŃою IPv4, Ń‚Đ°Đş Ń– IPv6, але ви не можете Đ·ĐĽŃ–ŃŃвати IPv4 Ń– IPv6 в одній грŃпі, Ń– вам потрібно бŃде Ńтворити грŃпи Đ· різними VRID Ńпеціально для IPv4 Ń– IPv6. Якщо ви хочете викориŃтовŃвати адреŃŃ IPv4 + IPv6, ви можете ŃкориŃтатиŃŃŹ опцією ``excluded-address``" -#: ../../configuration/loadbalancing/reverse-proxy.rst:305 +#: ../../configuration/loadbalancing/reverse-proxy.rst:345 msgid "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" msgstr "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" @@ -14048,15 +14202,15 @@ msgstr "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HT msgid "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." msgstr "СлŃжба ``http`` зменŃŃєтьŃŃŹ на ĐżĐľŃ€Ń‚Ń 80 Ń– примŃŃово перенаправляє Đ· HTTP на HTTPS." -#: ../../configuration/loadbalancing/reverse-proxy.rst:251 +#: ../../configuration/loadbalancing/reverse-proxy.rst:289 msgid "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." msgstr "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." -#: ../../configuration/loadbalancing/reverse-proxy.rst:302 +#: ../../configuration/loadbalancing/reverse-proxy.rst:342 msgid "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." msgstr "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." -#: ../../configuration/loadbalancing/reverse-proxy.rst:254 +#: ../../configuration/loadbalancing/reverse-proxy.rst:292 msgid "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." msgstr "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." @@ -14121,7 +14275,7 @@ msgstr "Наведена нижче IP-адреŃĐ° `192.0.2.1` викориŃŃ‚ msgid "The bonding interface provides a method for aggregating multiple network interfaces into a single logical \"bonded\" interface, or LAG, or ether-channel, or port-channel. The behavior of the bonded interfaces depends upon the mode; generally speaking, modes provide either hot standby or load balancing services. Additionally, link integrity monitoring may be performed." msgstr "Đ†Đ˝Ń‚ĐµŃ€Ń„ĐµĐąŃ Đ·Đ˛â€™ŃŹĐ·Ńвання надає метод для об’єднання кількох мережевих інтерфейŃів в один логічний «зв’язаний» інтерфейŃ, або LAG, або ether-channel, або port-channel. Поведінка з’єднаних інтерфейŃів залежить від режимŃ; загалом, режими забезпечŃŃŽŃ‚ŃŚ або гаряче очікŃвання, або поŃĐ»Ńги баланŃŃвання навантаження. Крім того, може Đ·Đ´Ń–ĐąŃнюватиŃŃŹ моніторинг ціліŃноŃŃ‚Ń– поŃилання." -#: ../../configuration/trafficpolicy/index.rst:1179 +#: ../../configuration/trafficpolicy/index.rst:1247 msgid "The case of ingress shaping" msgstr "Випадок вхідного формŃвання" @@ -14397,7 +14551,7 @@ msgstr "НаŃŃ‚Ńпні команди перетворюютьŃŃŹ на " msgid "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" msgstr "Для вŃтановлення параметрів для даного ĐżŃ€ĐľŃ‚ĐľĐşĐľĐ»Ń Đ´Đ¸Đ˝Đ°ĐĽŃ–Ń‡Đ˝ĐľŃ— ĐĽĐ°Ń€ŃŃ€Ńтизації в Đ´Đ°Đ˝ĐľĐĽŃ vrf знадоблятьŃŃŹ наŃŃ‚Ńпні команди:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:215 +#: ../../configuration/loadbalancing/reverse-proxy.rst:253 msgid "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." msgstr "НаŃŃ‚Ńпна конфігŃрація демонŃŃ‚Ń€ŃŃ”, ŃŹĐş викориŃтовŃвати VyOS для Đ´ĐľŃягнення баланŃŃвання навантаження на ĐľŃнові доменного імені." @@ -14413,11 +14567,11 @@ msgstr "НаŃŃ‚Ńпна конфігŃрація на VyOS Đ·Đ°ŃŃ‚ĐľŃовŃŃ” msgid "The following configuration reverse-proxy terminate SSL." msgstr "НаŃŃ‚Ńпна конфігŃрація зворотного прокŃŃ– заверŃŃŃ” SSL." -#: ../../configuration/loadbalancing/reverse-proxy.rst:249 +#: ../../configuration/loadbalancing/reverse-proxy.rst:287 msgid "The following configuration terminates SSL on the router." msgstr "The following configuration terminates SSL on the router." -#: ../../configuration/loadbalancing/reverse-proxy.rst:295 +#: ../../configuration/loadbalancing/reverse-proxy.rst:334 msgid "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." msgstr "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." @@ -14618,7 +14772,7 @@ msgstr "НайпомітніŃим Đ·Đ°ŃŃ‚ĐľŃŃванням ĐżŃ€ĐľŃ‚ĐľĐşĐľĐ»Ń msgid "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." msgstr "БагатоадреŃна грŃпа, яка викориŃтовŃєтьŃŃŹ вŃŃ–ĐĽĐ°, залиŃĐ°Ń” це розŃирення vlan. Має бŃти однаковим на вŃŃ–Ń… лиŃŃ‚Đ°Ń…, які ĐĽĐ°ŃŽŃ‚ŃŚ цей інтерфейŃ." -#: ../../configuration/loadbalancing/reverse-proxy.rst:185 +#: ../../configuration/loadbalancing/reverse-proxy.rst:222 msgid "The name of the service can be different, in this example it is only for convenience." msgstr "Назва поŃĐ»Ńги може бŃти різною, в Đ´Đ°Đ˝ĐľĐĽŃ ĐżŃ€Đ¸ĐşĐ»Đ°Đ´Ń– лиŃе для Đ·Ń€ŃчноŃŃ‚Ń–." @@ -16161,11 +16315,19 @@ msgstr "Ці команди Ńтворюють ĐĽŃ–ŃŃ‚, який Đ˛Đ¸ĐşĐľŃ€Đ¸Ń msgid "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." msgstr "Ці команди вказŃŃŽŃ‚ŃŚ кінцевий автомат (FSM), призначений для керŃвання чаŃом виконання обчиŃлень SPF Ń Đ˛Ń–Đ´ĐżĐľĐ˛Ń–Đ´ŃŚ на події IGP. ПроцеŃ, опиŃаний Ń :rfc:`8405`." -#: ../../configuration/loadbalancing/reverse-proxy.rst:195 +#: ../../configuration/loadbalancing/reverse-proxy.rst:367 +msgid "This configuration enables HTTP health checks on backend servers." +msgstr "This configuration enables HTTP health checks on backend servers." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:232 msgid "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." msgstr "Ця конфігŃрація вмикає зворотний прокŃŃ– TCP для ŃĐ»Ńжби "my-tcp-api". Вхідні TCP-з’єднання на порт 8888 розподілятимŃŃ‚ŃŚ навантаження між внŃтріŃніми Ńерверами (srv01 Ń– srv02) Đ·Đ° допомогою циклічного Đ°Đ»ĐłĐľŃ€Đ¸Ń‚ĐĽŃ Đ±Đ°Đ»Đ°Đ˝ŃŃвання навантаження." -#: ../../configuration/loadbalancing/reverse-proxy.rst:177 +#: ../../configuration/pki/index.rst:375 +msgid "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user." +msgstr "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:214 msgid "This configuration listen on port 80 and redirect incoming requests to HTTPS:" msgstr "Ця конфігŃрація проŃĐ»ŃховŃŃ” порт 80 Ń– перенаправляє вхідні запити на HTTPS:" @@ -16665,7 +16827,7 @@ msgstr "Це покаже вам ŃтатиŃŃ‚Đ¸ĐşŃ Đ˛ŃŃ–Ń… наборів Đż msgid "This will show you a summary of rule-sets and groups" msgstr "Це покаже вам підŃŃмок наборів правил Ń– грŃĐż" -#: ../../configuration/trafficpolicy/index.rst:1188 +#: ../../configuration/trafficpolicy/index.rst:1256 msgid "This workaround lets you apply a shaping policy to the ingress traffic by first redirecting it to an in-between virtual interface (`Intermediate Functional Block`_). There, in that virtual interface, you will be able to apply any of the policies that work for outbound traffic, for instance, a shaping one." msgstr "Це обхідне ріŃення Đ´Đ°Ń” Đ·ĐĽĐľĐłŃ Đ·Đ°ŃŃ‚ĐľŃŃвати ĐżĐľĐ»Ń–Ń‚Đ¸ĐşŃ Ń„ĐľŃ€ĐĽŃвання Đ´Đľ вхідного трафікŃ, ŃперŃŃ ĐżĐµŃ€ĐµĐ˝Đ°ĐżŃ€Đ°Đ˛Đ»ŃŹŃŽŃ‡Đ¸ його на проміжний віртŃальний Ń–Đ˝Ń‚ĐµŃ€Ń„ĐµĐąŃ (`Проміжний Ń„Ńнкціональний блок`_). Там, Ń Ń†ŃŚĐľĐĽŃ Đ˛Ń–Ń€Ń‚ŃĐ°Đ»ŃŚĐ˝ĐľĐĽŃ Ń–Đ˝Ń‚ĐµŃ€Ń„ĐµĐąŃŃ–, ви зможете Đ·Đ°ŃŃ‚ĐľŃŃвати бŃĐ´ŃŚ-ŃŹĐşŃ ĐżĐľĐ»Ń–Ń‚Đ¸ĐşŃ, яка працює для вихідного трафікŃ, наприклад, ĐżĐľĐ»Ń–Ń‚Đ¸ĐşŃ Ń„ĐľŃ€ĐĽŃвання." @@ -16915,7 +17077,7 @@ msgstr "Щоб ŃвімкнŃти автентифікацію на ĐľŃнові msgid "To enable bandwidth shaping via RADIUS, the option rate-limit needs to be enabled." msgstr "Щоб ŃвімкнŃти формŃвання пропŃŃкної здатноŃŃ‚Ń– через RADIUS, потрібно ввімкнŃти опцію обмеження ŃвидкоŃŃ‚Ń–." -#: ../../configuration/service/https.rst:68 +#: ../../configuration/service/https.rst:72 msgid "To enable debug messages. Available via :opcmd:`show log` or :opcmd:`monitor log`" msgstr "Щоб ŃвімкнŃти повідомлення про налагодження. ДоŃŃ‚Ńпно через :opcmd:`show log` або :opcmd:`monitor log`" @@ -17188,6 +17350,10 @@ msgstr "Перетворювачі USB на поŃлідовний порт ви msgid "UUCP subsystem" msgstr "ПідŃиŃтема UUCP" +#: ../../configuration/interfaces/ethernet.rst:73 +msgid "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/" +msgstr "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/" + #: ../../configuration/interfaces/vxlan.rst:102 msgid "Unicast" msgstr "ОдноадреŃний" @@ -18192,7 +18358,7 @@ msgstr "Центральна чаŃтота робочого ĐşĐ°Đ˝Đ°Đ»Ń VHT - #: ../../configuration/interfaces/bonding.rst:275 #: ../../configuration/interfaces/bridge.rst:123 -#: ../../configuration/interfaces/ethernet.rst:107 +#: ../../configuration/interfaces/ethernet.rst:123 #: ../../configuration/interfaces/pseudo-ethernet.rst:63 #: ../../configuration/interfaces/virtual-ethernet.rst:30 #: ../../configuration/interfaces/wireless.rst:398 @@ -19264,7 +19430,7 @@ msgstr "Тепер ви можете «набрати» вŃзла Đ·Đ° допо msgid "You can now SSH into your system using admin/admin as a default user supplied from the ``lfkeitel/tacacs_plus:latest`` container." msgstr "Тепер ви можете підключатиŃŃŹ Đ´Đľ ваŃої ŃиŃтеми через SSH, викориŃтовŃючи admin/admin ŃŹĐş кориŃŃ‚Ńвача Đ·Đ° замовчŃванням, який надаєтьŃŃŹ Đ· контейнера ``lfkeitel/tacacs_plus:latest``." -#: ../../configuration/trafficpolicy/index.rst:1158 +#: ../../configuration/trafficpolicy/index.rst:1226 msgid "You can only apply one policy per interface and direction, but you could reuse a policy on different interfaces and directions:" msgstr "Ви можете Đ·Đ°ŃŃ‚ĐľŃŃвати лиŃе ĐľĐ´Đ˝Ń ĐżĐľĐ»Ń–Ń‚Đ¸ĐşŃ Đ´Đ»ŃŹ кожного інтерфейŃŃ Ń‚Đ° напрямкŃ, але ви можете повторно викориŃтовŃвати ĐżĐľĐ»Ń–Ń‚Đ¸ĐşŃ Đ´Đ»ŃŹ різних інтерфейŃів Ń‚Đ° напрямків:" @@ -19432,11 +19598,11 @@ msgstr ":abbr:`GENEVE (Generic Network Virtualization Encapsulation)` підтр msgid ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (or IPIP/IPsec, SIT/IPsec, or any other stateless tunnel protocol over IPsec) is the usual way to protect the traffic inside a tunnel." msgstr ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (або IPIP/IPsec, SIT/IPsec або бŃĐ´ŃŚ-який Ń–Đ˝Ńий Ń‚Ńнельний протокол без збереження ŃŃ‚Đ°Đ˝Ń Ń‡ĐµŃ€ĐµĐ· IPsec) — це звичайний ŃпоŃіб захиŃŃ‚Ń Ń‚Ń€Đ°Ń„Ń–ĐşŃ Đ˛Ńередині Ń‚Ńнелю." -#: ../../configuration/interfaces/ethernet.rst:74 +#: ../../configuration/interfaces/ethernet.rst:90 msgid ":abbr:`GRO (Generic receive offload)` is the complement to GSO. Ideally any frame assembled by GRO should be segmented to create an identical sequence of frames using GSO, and any sequence of frames segmented by GSO should be able to be reassembled back to the original by GRO. The only exception to this is IPv4 ID in the case that the DF bit is set for a given IP header. If the value of the IPv4 ID is not sequentially incrementing it will be altered so that it is when a frame assembled via GRO is segmented via GSO." msgstr ":abbr:`GRO (Generic receive offload)` Ń” доповненням Đ´Đľ GSO. Đ’ ідеалі бŃĐ´ŃŚ-який кадр, зібраний Đ·Đ° допомогою GRO, повинен бŃти Ńегментований для Ńтворення ідентичної поŃлідовноŃŃ‚Ń– кадрів Đ·Đ° допомогою GSO, Đ° бŃĐ´ŃŚ-яка поŃлідовніŃŃ‚ŃŚ кадрів, Ńегментована Đ·Đ° допомогою GSO, повинна мати можливіŃŃ‚ŃŚ повторно зібратиŃŃŹ Đ´Đľ ĐľŃ€Đ¸ĐłŃ–Đ˝Đ°Đ»Ń Đ·Đ° допомогою GRO. Єдиним винятком Ń–Đ· цього Ń” ідентифікатор IPv4 Ń Đ˛Đ¸ĐżĐ°Đ´ĐşŃ, якщо біт DF вŃтановлено для певного IP-заголовка. Якщо значення ідентифікатора IPv4 не збільŃŃєтьŃŃŹ поŃлідовно, воно бŃде змінено таким чином, коли кадр, зібраний через GRO, ŃегментŃєтьŃŃŹ через GSO." -#: ../../configuration/interfaces/ethernet.rst:64 +#: ../../configuration/interfaces/ethernet.rst:80 msgid ":abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is meant to deal with cases where device drivers cannot perform the offloads described above. What occurs in GSO is that a given skbuff will have its data broken out over multiple skbuffs that have been resized to match the MSS provided via skb_shinfo()->gso_size." msgstr ":abbr:`GSO (Generic Segmentation Offload)` — це чиŃте програмне розвантаження, призначене для виріŃення випадків, коли драйвери приŃтроїв не можŃŃ‚ŃŚ виконŃвати опиŃані вище розвантаження. Đ©Đľ відбŃваєтьŃŃŹ в GSO, Ń‚Đ°Đş це те, що даний skbuff матиме Ńвої дані, розбиті на кілька skbuff, розмір яких бŃло змінено відповідно Đ´Đľ MSS, наданого через skb_shinfo()->gso_size." @@ -19464,6 +19630,10 @@ msgstr ":abbr:`LDP (Label Distribution Protocol)` — це протокол Ńи msgid ":abbr:`LLDP (Link Layer Discovery Protocol)` is a vendor-neutral link layer protocol in the Internet Protocol Suite used by network devices for advertising their identity, capabilities, and neighbors on an IEEE 802 local area network, principally wired Ethernet. The protocol is formally referred to by the IEEE as Station and Media Access Control Connectivity Discovery specified in IEEE 802.1AB and IEEE 802.3-2012 section 6 clause 79." msgstr ":abbr:`LLDP (Link Layer Discovery Protocol)` — це протокол рівня зв’язкŃ, який не залежить від поŃтачальника, Ń ĐżĐ°ĐşĐµŃ‚Ń– Інтернет-протоколів, який викориŃтовŃєтьŃŃŹ мережевими приŃтроями для реклами Ńвоєї ідентичноŃŃ‚Ń–, можливоŃтей Ń– ŃŃŃідів Ń Đ»ĐľĐşĐ°Đ»ŃŚĐ˝Ń–Đą мережі IEEE 802, головним чином Đ´Ń€ĐľŃ‚ĐľĐ˛ĐľĐĽŃ Ethernet. Протокол офіційно називаєтьŃŃŹ IEEE ŃŹĐş Station and Media Access Control Connectivity Discovery, визначений Ń IEEE 802.1AB Ń‚Đ° IEEE 802.3-2012, розділ 6, ĐżŃнкт 79." +#: ../../configuration/interfaces/ethernet.rst:64 +msgid ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing." +msgstr ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing." + #: ../../configuration/interfaces/macsec.rst:74 msgid ":abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys between individual peers." msgstr ":abbr:`MKA (протокол Ńзгодження ключів MACsec)` викориŃтовŃєтьŃŃŹ для Ńинхронізації ключів між окремими вŃзлами." @@ -19528,7 +19698,7 @@ msgstr ":abbr:`RPKI (інфраŃŃ‚Ń€ŃктŃра відкритих ключіРmsgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." -#: ../../configuration/interfaces/ethernet.rst:82 +#: ../../configuration/interfaces/ethernet.rst:98 msgid ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" msgstr ":abbr:`RPS (Receive Packet Steering)` Ń” логічно програмною реалізацією :abbr:`RSS (Receive Side Scaling)`. ПеребŃваючи в ĐżŃ€ĐľĐłŃ€Đ°ĐĽĐ˝ĐľĐĽŃ Đ·Đ°Đ±ĐµĐ·ĐżĐµŃ‡ĐµĐ˝Đ˝Ń–, він обов'язково викликаєтьŃŃŹ пізніŃе в ŃĐ»ŃŹŃ…Ń Đ´Đ°Đ˝Đ¸Ń…. ĐŁ той Ń‡Đ°Ń ŃŹĐş RSS вибирає Ń‡ĐµŃ€ĐłŃ Ń–, отже, ЦП, який Đ·Đ°ĐżŃŃкатиме обробник апаратних переривань, RPS вибирає ЦП для виконання обробки ĐżŃ€ĐľŃ‚ĐľĐşĐľĐ»Ń Đ˝Đ°Đ´ обробником переривань. Це Đ´ĐľŃягаєтьŃŃŹ Ńляхом розміщення пакета в черзі резервŃвання потрібного ЦП Ń– пробŃдження ЦП для обробки. RPS ĐĽĐ°Ń” деякі переваги перед RSS:" @@ -19724,6 +19894,10 @@ msgstr "`4. Додайте додаткові параметри`_" msgid "`<name>` must be identical on both sides!" msgstr "`<name> ` повинні бŃти однаковими Đ· обох Ńторін!" +#: ../../configuration/trafficpolicy/index.rst:1156 +msgid "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge." +msgstr "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge." + #: ../../configuration/pki/index.rst:204 msgid "``$ tail -n +2 ca.key | head -n -1 | tr -d '\\n'``" msgstr "``$ tail -n +2 ca.key | голова -n -1 | tr -d '\\n'``" @@ -20292,6 +20466,10 @@ msgstr "``обмін ключами``, який протокол Ńлід вик msgid "``key`` - a private key, which will be used for authenticating local router on remote peer:" msgstr "``key`` - приватний ключ, який бŃде викориŃтовŃватиŃŃŹ для автентифікації локального ĐĽĐ°Ń€ŃŃ€Ńтизатора на Đ˛Ń–Đ´Đ´Đ°Đ»ĐµĐ˝ĐľĐĽŃ ĐżŃ–Ń€Ń–:" +#: ../../configuration/service/https.rst:96 +msgid "``key`` use API keys configured in ``service https api keys``" +msgstr "``key`` use API keys configured in ``service https api keys``" + #: ../../configuration/system/option.rst:137 msgid "``latency``: A server profile focused on lowering network latency. This profile favors performance over power savings by setting ``intel_pstate`` and ``min_perf_pct=100``." msgstr "``latency``: профіль Ńервера, Ńпрямований на зниження затримки мережі. Цей профіль надає ĐżĐµŃ€ĐµĐ˛Đ°ĐłŃ ĐżŃ€ĐľĐ´ŃктивноŃŃ‚Ń–, Đ° не енергозбереженню, вŃтановлюючи ``intel_pstate`` Ń– ``min_perf_pct=100``." @@ -20775,6 +20953,18 @@ msgstr "``static`` - Статично налаŃтовані ĐĽĐ°Ń€ŃŃ€Ńти" msgid "``station`` - Connects to another access point" msgstr "``Ńтанція`` - ПідключаєтьŃŃŹ Đ´Đľ Ń–Đ˝Ńої точки Đ´ĐľŃŃ‚ŃĐżŃ" +#: ../../configuration/loadbalancing/reverse-proxy.rst:185 +msgid "``status 200-399`` Expecting a non-failure response code" +msgstr "``status 200-399`` Expecting a non-failure response code" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:184 +msgid "``status 200`` Expecting a 200 response code" +msgstr "``status 200`` Expecting a 200 response code" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:186 +msgid "``string success`` Expecting the string `success` in the response body" +msgstr "``string success`` Expecting the string `success` in the response body" + #: ../../configuration/firewall/ipv4.rst:103 #: ../../configuration/firewall/ipv6.rst:103 msgid "``synproxy``: synproxy the packet." @@ -20824,6 +21014,10 @@ msgstr "``пропŃŃкна здатніŃŃ‚ŃŚ``: профіль Ńервера msgid "``timeout`` keep-alive timeout in seconds <2-86400> (default 120) IKEv1 only" msgstr "``timeout`` тайм-Đ°ŃŃ‚ підтримки активноŃŃ‚Ń– в ŃекŃндах <2-86400> (Đ·Đ° замовчŃванням 120) ЛиŃе IKEv1" +#: ../../configuration/service/https.rst:98 +msgid "``token`` use JWT tokens." +msgstr "``token`` use JWT tokens." + #: ../../configuration/interfaces/bonding.rst:80 msgid "``transmit-load-balance`` - Adaptive transmit load balancing: channel bonding that does not require any special switch support." msgstr "``transmit-load-balance`` – адаптивне вирівнювання навантаження передавання: зв’язŃвання каналів, яке не потребŃŃ” Ńпеціальної підтримки комŃтатора." @@ -20888,6 +21082,22 @@ msgstr "``vnc`` - керŃвання віртŃальною мережею (VNC) msgid "``vti`` - use a VTI interface for traffic encryption. Any traffic, which will be send to VTI interface will be encrypted and send to this peer. Using VTI makes IPSec configuration much flexible and easier in complex situation, and allows to dynamically add/delete remote networks, reachable via a peer, as in this mode router don't need to create additional SA/policy for each remote network:" msgstr "``vti`` - викориŃтовŃвати Ń–Đ˝Ń‚ĐµŃ€Ń„ĐµĐąŃ VTI для ŃифрŃвання трафікŃ. Đ‘ŃĐ´ŃŚ-який трафік, який надŃилатиметьŃŃŹ Đ´Đľ інтерфейŃŃ VTI, бŃде Đ·Đ°Ńифровано Ń‚Đ° надŃилатиметьŃŃŹ Ń†ŃŚĐľĐĽŃ Đ˛ŃĐ·Đ»Ń. ВикориŃтання VTI робить конфігŃрацію IPSec набагато гнŃчкою Ń‚Đ° проŃŃ‚Ń–Ńою в Ńкладних ŃитŃаціях, Đ° також дозволяє динамічно додавати/видаляти віддалені мережі, Đ´ĐľŃŃ‚Ńпні через одноранговий приŃтрій, ĐľŃкільки в Ń†ŃŚĐľĐĽŃ Ń€ĐµĐ¶Đ¸ĐĽŃ– ĐĽĐ°Ń€ŃŃ€ŃŃ‚Đ¸Đ·Đ°Ń‚ĐľŃ€Ń Đ˝Đµ потрібно Ńтворювати додаткові SA/політики для кожної віддаленої мережі:" +#: ../../configuration/pki/index.rst:386 +msgid "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA." +msgstr "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA." + +#: ../../configuration/pki/index.rst:383 +msgid "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA." +msgstr "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA." + +#: ../../configuration/pki/index.rst:389 +msgid "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA." +msgstr "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA." + +#: ../../configuration/pki/index.rst:381 +msgid "``vyos_root_ca`` is the root certificate authority." +msgstr "``vyos_root_ca`` is the root certificate authority." + #: ../../configuration/vpn/site2site_ipsec.rst:59 msgid "``x509`` - options for x509 authentication mode:" msgstr "``x509`` - параметри Ń€ĐµĐ¶Đ¸ĐĽŃ Đ°Ńтентифікації x509:" @@ -21249,10 +21459,18 @@ msgstr "ip-переадреŃація" msgid "isisd" msgstr "isisd" +#: ../../configuration/interfaces/ethernet.rst:106 +msgid "it can be used with any NIC" +msgstr "it can be used with any NIC" + #: ../../configuration/interfaces/ethernet.rst:90 msgid "it can be used with any NIC," msgstr "його можна викориŃтовŃвати Đ· бŃĐ´ŃŚ-якою мережевою карткою," +#: ../../configuration/interfaces/ethernet.rst:108 +msgid "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)" +msgstr "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)" + #: ../../configuration/interfaces/ethernet.rst:92 msgid "it does not increase hardware device interrupt rate (although it does introduce inter-processor interrupts (IPIs))." msgstr "це не збільŃŃŃ” чаŃŃ‚ĐľŃ‚Ń ĐżĐµŃ€ĐµŃ€Đ¸Đ˛Đ°Đ˝ŃŚ апаратного приŃтрою (хоча вводить міжпроцеŃорні переривання (IPI))." @@ -21647,6 +21865,10 @@ msgstr "повільно: попроŃŃ–Ń‚ŃŚ партнера передават msgid "smtp-server" msgstr "smtp-Ńервер" +#: ../../configuration/interfaces/ethernet.rst:107 +msgid "software filters can easily be added to hash over new protocols" +msgstr "software filters can easily be added to hash over new protocols" + #: ../../configuration/interfaces/ethernet.rst:91 msgid "software filters can easily be added to hash over new protocols," msgstr "програмні фільтри можна легко додати Đ´Đľ хеŃŃвання нових протоколів," diff --git a/docs/_locale/uk/contributing.pot b/docs/_locale/uk/contributing.pot index b510f5a3..efd84cce 100644 --- a/docs/_locale/uk/contributing.pot +++ b/docs/_locale/uk/contributing.pot @@ -72,6 +72,18 @@ msgstr "ХороŃим підходом для напиŃання повідом msgid "A number of flags can be set up to change the behaviour of VyOS at runtime. These flags can be toggled using either environment variables or creating files." msgstr "Для зміни поведінки VyOS під Ń‡Đ°Ń Đ˛Đ¸ĐşĐľĐ˝Đ°Đ˝Đ˝ŃŹ можна вŃтановити ряд прапорців. Ці прапорці можна перемикати Đ·Đ° допомогою змінних Ńередовища або Ńтворення файлів." +#: ../../contributing/issues-features.rst:86 +msgid "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature." +msgstr "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature." + +#: ../../contributing/issues-features.rst:42 +msgid "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed." +msgstr "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed." + +#: ../../contributing/issues-features.rst:33 +msgid "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session." +msgstr "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session." + #: ../../contributing/development.rst:74 msgid "A single, short, summary of the commit (recommended 50 characters or less, not exceeding 80 characters) containing a prefix of the changed component and the corresponding Phabricator_ reference e.g. ``snmp: T1111:`` or ``ethernet: T2222:`` - multiple components could be concatenated as in ``snmp: ethernet: T3333``" msgstr "Єдиний короткий підŃŃмок ĐşĐľĐĽŃ–Ń‚Ń (рекомендовано 50 Ńимволів або менŃе, не більŃе 80 Ńимволів), що ĐĽŃ–Ńтить ĐżŃ€ĐµŃ„Ń–ĐşŃ Đ·ĐĽŃ–Đ˝ĐµĐ˝ĐľĐłĐľ компонента Ń‚Đ° відповідне поŃилання Phabricator_, наприклад ``snmp: T1111:`` або ``ethernet: T2222:` ` - кілька компонентів можŃŃ‚ŃŚ бŃти об'єднані, ŃŹĐş Ń ``snmp: ethernet: T3333``" @@ -93,7 +105,7 @@ msgstr "Đкроніми також **повинні** пиŃати Đ· велиРmsgid "Add file to Git index using ``git add myfile``, or for a whole directory: ``git add somedir/*``" msgstr "Додайте файл Đ´Đľ індекŃŃ Git Đ·Đ° допомогою ``git add myfile`` або для цілого каталогŃ: ``git add somedir/*``" -#: ../../contributing/testing.rst:100 +#: ../../contributing/testing.rst:103 msgid "Add one or more IP addresses" msgstr "Додайте ĐľĐ´Đ˝Ń Đ°Đ±Đľ кілька IP-адреŃ" @@ -155,6 +167,14 @@ msgstr "Đ‘ŃĐ´ŃŚ-який «модифікований» пакет може ŃŃ msgid "Any packages in the packages directory will be added to the iso during build, replacing the upstream ones. Make sure you delete them (both the source directories and built deb packages) if you want to build an iso from purely upstream packages." msgstr "Đ‘ŃĐ´ŃŚ-які пакŃнки в каталозі пакетів бŃде додано Đ´Đľ iso під Ń‡Đ°Ń Đ·Đ±Ń–Ń€ĐşĐ¸, замінивŃи вихідні. ПереконайтеŃŃŹ, що ви видалили Ń—Ń… (ŃŹĐş вихідні каталоги, Ń‚Đ°Đş Ń– зібрані пакŃнки deb), якщо ви хочете зібрати iso Đ· чиŃтих пакетів." +#: ../../contributing/issues-features.rst:100 +msgid "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?" +msgstr "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?" + +#: ../../contributing/issues-features.rst:99 +msgid "Are there any limitations (hardware support, resource usage)?" +msgstr "Are there any limitations (hardware support, resource usage)?" + #: ../../contributing/testing.rst:57 msgid "As Smoketests will alter the system configuration and you are logged in remote you may loose your connection to the system." msgstr "ĐžŃкільки Smoketests змінить конфігŃрацію ŃиŃтеми, Đ° ви ввійŃли в ŃиŃŃ‚ĐµĐĽŃ Đ˛Ń–Đ´Đ´Đ°Đ»ĐµĐ˝Đľ, ви можете втратити підключення Đ´Đľ ŃиŃтеми." @@ -219,6 +239,10 @@ msgstr "Đ§Đ°Ń Đ·Đ°Đ˛Đ°Đ˝Ń‚Đ°Đ¶ĐµĐ˝Đ˝ŃŹ" msgid "Bug Report/Issue" msgstr "Повідомлення про помилкŃ/проблема" +#: ../../contributing/issues-features.rst:117 +msgid "Bug reports that lack reproducing procedures." +msgstr "Bug reports that lack reproducing procedures." + #: ../../contributing/build-vyos.rst:825 msgid "Build" msgstr "Đ‘ŃĐ´Ńвати" @@ -303,7 +327,7 @@ msgstr "Визначення команд Ń” ŃŃŃ‚Đľ декларативним msgid "Commit the changes by calling ``git commit``. Please use a meaningful commit headline (read above) and don't forget to reference the Phabricator_ ID." msgstr "Đ—Đ°Ń„Ń–ĐşŃŃйте зміни, викликавŃи ``git commit``. Đ‘ŃĐ´ŃŚ лаŃка, викориŃтовŃйте Đ·ĐĽŃ–Ńтовний заголовок ĐşĐľĐĽŃ–Ń‚Ń (прочитайте вище) Ń– не забŃдьте вказати поŃилання на Phabricator_ ID." -#: ../../contributing/testing.rst:152 +#: ../../contributing/testing.rst:155 msgid "Config Load Tests" msgstr "ТеŃти навантаження конфігŃрації" @@ -331,7 +355,7 @@ msgstr "Безперервна інтеграція" msgid "Customize" msgstr "НалаŃŃ‚Ńвати" -#: ../../contributing/testing.rst:101 +#: ../../contributing/testing.rst:104 msgid "DHCP client and DHCPv6 prefix delegation" msgstr "Клієнт DHCP Ń– делегŃвання префікŃĐ° DHCPv6" @@ -440,7 +464,7 @@ msgid "Every change set must be consistent (self containing)! Do not fix multipl msgstr "Кожен набір Đ·ĐĽŃ–Đ˝ ĐĽĐ°Ń” бŃти Ńзгодженим (ŃамовміŃним)! Не виправляйте кілька помилок в ĐľĐ´Đ˝ĐľĐĽŃ ĐşĐľĐĽŃ–Ń‚Ń–. Якщо ви вже працювали над кількома виправленнями в ĐľĐ´Đ˝ĐľĐĽŃ Ń„Đ°ĐąĐ»Ń–, ŃкориŃтайтеŃŃŹ `git add --patch`, щоб додати лиŃе чаŃтини, пов’язані Đ· однією проблемою, Ń Đ˛Đ°Ń ĐĽĐ°ĐąĐ±Ńтній комміт." #: ../../contributing/development.rst:412 -#: ../../contributing/testing.rst:66 +#: ../../contributing/testing.rst:69 msgid "Example:" msgstr "приклад:" @@ -473,6 +497,14 @@ msgstr "FRR" msgid "Feature Request" msgstr "Запит на Ń„Ńнкцію" +#: ../../contributing/issues-features.rst:72 +msgid "Feature Requests" +msgstr "Feature Requests" + +#: ../../contributing/issues-features.rst:116 +msgid "Feature requests that do not include required information and need clarification." +msgstr "Feature requests that do not include required information and need clarification." + #: ../../contributing/build-vyos.rst:600 msgid "Firmware" msgstr "ПроŃивка" @@ -578,11 +610,15 @@ msgstr "Жахливо: "Тайм-Đ°ŃŃ‚ підключення TCP"" msgid "Horrible: \"frobnication algorithm.\"" msgstr "Жахливо: "алгоритм фробнікації"." -#: ../../contributing/issues-features.rst:63 +#: ../../contributing/issues-features.rst:67 msgid "How can we reproduce this Bug?" msgstr "ĐŻĐş ми можемо відтворити цю помилкŃ?" -#: ../../contributing/testing.rst:103 +#: ../../contributing/issues-features.rst:98 +msgid "How you'd configure it by hand there?" +msgstr "How you'd configure it by hand there?" + +#: ../../contributing/testing.rst:106 msgid "IP and IPv6 options" msgstr "Варіанти IP Ń‚Đ° IPv6" @@ -606,14 +642,30 @@ msgstr "Якщо Đ´Ń–Ń”Ńлово важливе, збережіть його. Đ msgid "If applicable a reference to a previous commit should be made linking those commits nicely when browsing the history: ``After commit abcd12ef (\"snmp: this is a headline\") a Python import statement is missing, throwing the following exception: ABCDEF``" msgstr "Якщо Đ·Đ°ŃŃ‚ĐľŃовно, ĐĽĐ°Ń” бŃти зроблено поŃилання на попередній комміт, який гарно зв’язŃŃ” ці коміти під Ń‡Đ°Ń ĐżĐµŃ€ĐµĐłĐ»ŃŹĐ´Ń Ń–Ńторії: ``ПіŃля Ń„Ń–ĐşŃації abcd12ef ("snmp: це заголовок") відŃŃтній оператор Ń–ĐĽĐżĐľŃ€Ń‚Ń Python, викликаючи такий виняток: ABCDEF``" +#: ../../contributing/issues-features.rst:46 +msgid "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable." +msgstr "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable." + #: ../../contributing/development.rst:64 msgid "If there is no Phabricator_ reference in the commits of your pull request, we have to ask you to amend the commit message. Otherwise we will have to reject it." msgstr "Якщо Ń ĐşĐľĐĽŃ–Ń‚Đ°Ń… ваŃого Đ·Đ°ĐżĐ¸Ń‚Ń Đ˝Đ° отримання відŃŃтнє поŃилання Phabricator_, ми маємо попроŃити Đ˛Đ°Ń Đ·ĐĽŃ–Đ˝Đ¸Ń‚Đ¸ повідомлення комітŃ. ІнакŃе нам доведетьŃŃŹ його відхилити." +#: ../../contributing/issues-features.rst:126 +msgid "If there is no response after further two weeks, the task will be automatically closed." +msgstr "If there is no response after further two weeks, the task will be automatically closed." + +#: ../../contributing/issues-features.rst:124 +msgid "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply." +msgstr "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply." + #: ../../contributing/build-vyos.rst:739 msgid "If you are brave enough to build yourself an ISO image containing any modified package from our GitHub organisation - this is the place to be." msgstr "Якщо Ń Đ˛Đ°Ń Đ´ĐľŃтатньо ŃміливоŃŃ‚Ń–, щоб ŃĐ°ĐĽĐľŃтійно Ńтворити образ ISO, який ĐĽŃ–Ńтить бŃĐ´ŃŚ-який модифікований пакет від наŃої організації GitHub – це те ĐĽŃ–Ńце, щоб бŃти." +#: ../../contributing/issues-features.rst:50 +msgid "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report." +msgstr "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report." + #: ../../contributing/build-vyos.rst:602 msgid "If you upgrade your kernel or include new drivers you may need new firmware. Build a new ``vyos-linux-firmware`` package with the included helper scripts." msgstr "Якщо ви оновлюєте ядро або додаєте нові драйвери, вам може знадобитиŃŃŹ нове мікропрограмне забезпечення. Створіть новий пакет ``vyos-linux-firmware`` Ń–Đ· доданими допоміжними Ńценаріями." @@ -626,7 +678,7 @@ msgstr "ĐŁ великій ŃиŃтемі, такій ŃŹĐş VyOS, яка ŃклаРmsgid "In addition this also helps when browsing the GitHub codebase on a mobile device if you happen to be a crazy scientist." msgstr "Крім того, це також допоможе під Ń‡Đ°Ń ĐżĐµŃ€ĐµĐłĐ»ŃŹĐ´Ń ĐşĐľĐ´ĐľĐ˛ĐľŃ— бази GitHub на ĐĽĐľĐ±Ń–Đ»ŃŚĐ˝ĐľĐĽŃ ĐżŃ€Đ¸Ńтрої, якщо ви випадково божевільний Ńчений." -#: ../../contributing/issues-features.rst:56 +#: ../../contributing/issues-features.rst:60 msgid "In order to open up a bug-report/feature request you need to create yourself an account on VyOS Phabricator_. On the left side of the specific project (VyOS 1.2 or VyOS 1.3) you will find quick-links for opening a bug-report/feature request." msgstr "Щоб відкрити звіт про помилкŃ/запит на Ń„Ńнкцію, вам потрібно Ńтворити обліковий Đ·Đ°ĐżĐ¸Ń Đ˝Đ° VyOS Phabricator_. ĐŁ лівій чаŃтині конкретного ĐżŃ€ĐľĐµĐşŃ‚Ń (VyOS 1.2 або VyOS 1.3) ви знайдете Ńвидкі поŃилання для відкриття Đ·Đ˛Ń–Ń‚Ń ĐżŃ€Đľ помилкŃ/Đ·Đ°ĐżĐ¸Ń‚Ń Ń„Ńнкції." @@ -690,10 +742,14 @@ msgstr "Intel QAT" msgid "Inter QAT" msgstr "Inter QAT" -#: ../../contributing/testing.rst:91 +#: ../../contributing/testing.rst:94 msgid "Interface based tests" msgstr "ТеŃти на ĐľŃнові інтерфейŃŃ" +#: ../../contributing/issues-features.rst:96 +msgid "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?" +msgstr "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?" + #: ../../contributing/issues-features.rst:5 msgid "Issues/Feature requests" msgstr "Проблеми/запити на Ń„Ńнкції" @@ -706,6 +762,10 @@ msgstr "Проблеми чи помилки можна знайти в бŃĐ´ŃŚ msgid "It's an Ada program and requires GNAT and gprbuild for building, dependencies are properly specified so just follow debuild's suggestions." msgstr "Це програма на Ada, для Ńтворення якої потрібні GNAT Ń– gprbuild, залежноŃŃ‚Ń– вказані належним чином, Ń‚ĐľĐĽŃ ĐżŃ€ĐľŃŃ‚Đľ дотримŃйтеŃŃŹ порад debuild." +#: ../../contributing/issues-features.rst:103 +msgid "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions." +msgstr "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions." + #: ../../contributing/debugging.rst:58 msgid "It is also possible to set up the debugging using environment variables. In that case, the name will be (in uppercase) VYOS_FEATURE_DEBUG." msgstr "Також можна налаŃŃ‚Ńвати налагодження Đ·Đ° допомогою змінних Ńередовища. ĐŁ Ń‚Đ°ĐşĐľĐĽŃ Đ˛Đ¸ĐżĐ°Đ´ĐşŃ Ń–ĐĽâ€™ŃŹ бŃде (Ń Đ˛ĐµŃ€Ń…Đ˝ŃŚĐľĐĽŃ Ń€ĐµĐłŃ–Ńтрі) VYOS_FEATURE_DEBUG." @@ -762,7 +822,7 @@ msgstr "Ядро Linux" msgid "Live System" msgstr "Жива ŃиŃтема" -#: ../../contributing/testing.rst:102 +#: ../../contributing/testing.rst:105 msgid "MTU size" msgstr "Розмір PERSON" @@ -770,11 +830,11 @@ msgstr "Розмір PERSON" msgid "Make your changes and save them. Do the following for all changes files to record them in your created Git commit:" msgstr "ВнеŃŃ–Ń‚ŃŚ зміни Ń‚Đ° збережіть Ń—Ń…. Зробіть наŃŃ‚Ńпне для вŃŃ–Ń… файлів Đ·ĐĽŃ–Đ˝, щоб запиŃати Ń—Ń… Ń Ńтворений комміт Git:" -#: ../../contributing/testing.rst:61 +#: ../../contributing/testing.rst:64 msgid "Manual Smoketest Run" msgstr "Đ Ńчний Đ·Đ°ĐżŃŃĐş Smoketest" -#: ../../contributing/testing.rst:169 +#: ../../contributing/testing.rst:172 msgid "Manual config load test" msgstr "НавантажŃвальний теŃŃ‚ конфігŃрації врŃчнŃ" @@ -851,7 +911,7 @@ msgstr "Тепер Ń Đ˛Đ°Ń Ń” два нові ĐżŃевдоніми ``vybld`` Ń msgid "Old concept/syntax" msgstr "Стара концепція/ŃинтакŃиŃ" -#: ../../contributing/testing.rst:63 +#: ../../contributing/testing.rst:66 msgid "On the other hand - as each test is contain in its own file - one can always execute a single Smoketest by hand by simply running the Python test scripts." msgstr "Đ— Ń–Đ˝Ńого бокŃ, ĐľŃкільки кожен теŃŃ‚ ĐĽŃ–ŃтитьŃŃŹ в ĐľĐşŃ€ĐµĐĽĐľĐĽŃ Ń„Đ°ĐąĐ»Ń–, можна завжди виконати один Smoketest врŃчнŃ, проŃŃ‚Đľ Đ·Đ°ĐżŃŃтивŃи теŃтові Ńценарії Python." @@ -863,7 +923,7 @@ msgstr "ПіŃля вŃтановлення необхідних Đ·Đ°Đ»ĐµĐ¶Đ˝ĐľŃ msgid "Once you run ``show xyz`` and your condition is triggered you should be dropped into the python debugger:" msgstr "Щойно ви Đ·Đ°ĐżŃŃтите ``show xyz`` Ń– ваŃĐ° Ńмова Ńпрацює, ви повинні перейти Đ´Đľ налагоджŃвача python:" -#: ../../contributing/testing.rst:171 +#: ../../contributing/testing.rst:174 msgid "One is not bound to load all configurations one after another but can also load individual test configurations on his own." msgstr "Людина не зобов’язана завантажŃвати вŃŃ– конфігŃрації ĐľĐ´Đ˝Ń Đ·Đ° одною, але також може завантажŃвати окремі теŃтові конфігŃрації ŃĐ°ĐĽĐľŃтійно." @@ -903,7 +963,7 @@ msgstr "ĐťĐ°Ń ĐşĐľĐ´ розбитий на кілька модŃлів. VyOS Ń msgid "Our op mode scripts use the python-vici module, which is not included in Debian's build, and isn't quite easy to integrate in that build. For this reason we debianize that module by hand now, using this procedure:" msgstr "НаŃŃ– Ńценарії операційного Ń€ĐµĐ¶Đ¸ĐĽŃ Đ˛Đ¸ĐşĐľŃ€Đ¸ŃтовŃŃŽŃ‚ŃŚ модŃль python-vici, який не входить Đ´Đľ збірки Debian, Ń– його нелегко інтегрŃвати в цю збіркŃ. Đ— цієї причини ми зараз дебіанізŃємо цей модŃль врŃчнŃ, викориŃтовŃючи цю процедŃŃ€Ń:" -#: ../../contributing/testing.rst:93 +#: ../../contributing/testing.rst:96 msgid "Our smoketests not only test daemons and serives, but also check if what we configure for an interface works. Thus there is a common base classed named: ``base_interfaces_test.py`` which holds all the common code that an interface supports and is tested." msgstr "НаŃŃ– smoketests не лиŃе перевіряють демони Ń‚Đ° Ńервери, Đ° Đą перевіряють, чи працює те, що ми налаŃŃ‚Ńвали для інтерфейŃŃ. Таким чином, Ń–ŃĐ˝ŃŃ” загальний базовий ĐşĐ»Đ°Ń ĐżŃ–Đ´ назвою: ``base_interfaces_test.py``, який ĐĽŃ–Ńтить ŃвеŃŃŚ загальний код, який підтримŃŃ” Ń– теŃŃ‚ŃєтьŃŃŹ інтерфейŃом." @@ -936,11 +996,11 @@ msgstr "Đ‘ŃĐ´ŃŚ лаŃка, викориŃтовŃйте наŃŃ‚Ńпний ŃĐ msgid "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface." msgstr "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface." -#: ../../contributing/testing.rst:104 +#: ../../contributing/testing.rst:107 msgid "Port description" msgstr "ĐžĐżĐ¸Ń ĐżĐľŃ€Ń‚Ń" -#: ../../contributing/testing.rst:105 +#: ../../contributing/testing.rst:108 msgid "Port disable" msgstr "ВимкнŃти порт" @@ -964,7 +1024,11 @@ msgstr "передŃмови" msgid "Priorities" msgstr "Пріоритети" -#: ../../contributing/issues-features.rst:61 +#: ../../contributing/issues-features.rst:91 +msgid "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required." +msgstr "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required." + +#: ../../contributing/issues-features.rst:65 msgid "Provide as much information as you can" msgstr "Надайте якомога більŃе інформації" @@ -996,7 +1060,7 @@ msgstr "ОбґрŃнтŃвання: це здаєтьŃŃŹ непиŃаним ŃŃ msgid "Recent versions use the ``vyos.frr`` framework. The Python class is located inside our ``vyos-1x:python/vyos/frr.py``. It comes with an embedded debugging/ (print style) debugger as vyos.ifconfig does." msgstr "Đ’ ĐľŃтанніх верŃŃ–ŃŹŃ… викориŃтовŃєтьŃŃŹ ŃŃ‚Ń€ŃктŃра ``vyos.frr``. ĐšĐ»Đ°Ń Python знаходитьŃŃŹ вŃередині наŃого ``vyos-1x:python/vyos/frr.py``. Đ’Ń–Đ˝ поŃтачаєтьŃŃŹ Ń–Đ· вбŃдованим налагоджŃвачем налагодження/(Ńтиль Đ´Ń€ŃĐşŃ), ŃŹĐş це робить vyos.ifconfig." -#: ../../contributing/issues-features.rst:54 +#: ../../contributing/issues-features.rst:58 msgid "Report a Bug" msgstr "Повідомити про помилкŃ" @@ -1041,7 +1105,7 @@ msgstr "Деякі пакŃнки VyOS (Đ° Ńаме vyos-1x) поŃŃ‚Đ°Ń‡Đ°ŃŽŃ‚Ń msgid "Some abbreviations are traditionally written in mixed case. Generally, if it contains words \"over\" or \"version\", the letter **should** be lowercase. If there's an accepted spelling (especially if defined by an RFC or another standard), it **must** be followed." msgstr "Деякі абревіатŃри традиційно пиŃŃŃ‚ŃŚŃŃŹ Ń Đ·ĐĽŃ–ŃĐ°Đ˝ĐľĐĽŃ Ń€ĐµĐłŃ–Ńтрі. ĐŻĐş правило, якщо він ĐĽŃ–Ńтить Ńлова «над» або «верŃія», літера **повинна** бŃти малою. Якщо Ń–ŃĐ˝ŃŃ” прийнятний варіант напиŃання (ĐľŃобливо якщо він визначений RFC або Ń–Đ˝Ńим Ńтандартом), його **необхідно** дотримŃватиŃŃŹ." -#: ../../contributing/testing.rst:202 +#: ../../contributing/testing.rst:205 msgid "Some of the configurations have preconditions which need to be met. Those most likely include generation of crypographic keys before the config can be applied - you will get a commit error otherwise. If you are interested how those preconditions are fulfilled check the vyos-build_ repository and the ``scripts/check-qemu-install`` file." msgstr "Деякі Đ· конфігŃрацій ĐĽĐ°ŃŽŃ‚ŃŚ попередні Ńмови, які необхідно виконати. Вони, ŃвидŃе Đ·Đ° вŃе, включають генерацію крипографічних ключів перед Đ·Đ°ŃŃ‚ĐľŃŃванням конфігŃрації - інакŃе ви отримаєте ĐżĐľĐĽĐ¸Đ»ĐşŃ Ń„Ń–ĐşŃації. Якщо Đ˛Đ°Ń Ń†Ń–ĐşĐ°Đ˛Đ¸Ń‚ŃŚ, ŃŹĐş виконŃŃŽŃ‚ŃŚŃŃŹ ці попередні Ńмови, перевірте репозиторій vyos-build_ Ń– файл ``scripts/check-qemu-install``." @@ -1077,6 +1141,14 @@ msgstr "ПрипŃŃŃ‚Ń–ĐĽĐľ, ви хочете внеŃти зміни в ŃцРmsgid "System Startup" msgstr "Đ—Đ°ĐżŃŃĐş ŃиŃтеми" +#: ../../contributing/issues-features.rst:108 +msgid "Task auto-closing" +msgstr "Task auto-closing" + +#: ../../contributing/issues-features.rst:118 +msgid "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)." +msgstr "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)." + #: ../../contributing/development.rst:214 msgid "Template processor **should** be used for generating config files. Built-in string formatting **may** be used for simple line-oriented formats where every line is self-contained, such as iptables rules. Template processor **must** be used for structured, multi-line formats such as those used by ISC DHCPd." msgstr "ПроцеŃор ŃĐ°Đ±Đ»ĐľĐ˝Ń **потрібно** викориŃтовŃвати для Ńтворення конфігŃраційних файлів. ВбŃдоване форматŃвання рядків **може** викориŃтовŃватиŃŃŹ для проŃтих рядково-орієнтованих форматів, де кожен рядок ŃамодоŃтатній, наприклад, правила iptables. ПроцеŃор Ńаблонів **ĐĽĐ°Ń”** викориŃтовŃватиŃŃŹ для ŃŃ‚Ń€ŃктŃрованих багаторядкових форматів, таких ŃŹĐş Ń‚Ń–, що викориŃтовŃŃŽŃ‚ŃŚŃŃŹ ISC DHCPd." @@ -1137,11 +1209,15 @@ msgstr "ФŃнкція ``verify()`` бере ваŃе внŃтріŃнє преРmsgid "The bash (or better vbash) completion in VyOS is defined in *templates*. Templates are text files (called ``node.def``) stored in a directory tree. The directory names define the command names, and template files define the command behaviour. Before VyOS 1.2 (crux) this files were created by hand. After a complex redesign process_ the new style template are automatically generated from a XML input file." msgstr "ЗаверŃення bash (або краще vbash) Ń VyOS визначено в *Ńаблонах*. Шаблони — це текŃтові файли (Ń‚Đ°Đş звані ``node.def``), що зберігаютьŃŃŹ в дереві каталогів. Імена каталогів визначають імена команд, Đ° файли Ńаблонів визначають ĐżĐľĐ˛ĐµĐ´Ń–Đ˝ĐşŃ ĐşĐľĐĽĐ°Đ˝Đ´. До VyOS 1.2 (crux) ці файли ŃтворювалиŃŃŹ врŃчнŃ. ПіŃля Ńкладного процеŃŃ Ń€ĐµĐ´Đ¸Đ·Đ°ĐąĐ˝Ń_ новий Ńаблон Ńтилю автоматично генерŃєтьŃŃŹ Đ· вхідного Ń„Đ°ĐąĐ»Ń XML." +#: ../../contributing/issues-features.rst:39 +msgid "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be." +msgstr "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be." + #: ../../contributing/build-vyos.rst:116 msgid "The build process needs to be built on a local file system, building on SMB or NFS shares will result in the container failing to build properly! VirtualBox Drive Share is also not an option as block device operations are not implemented and the drive is always mounted as \"nodev\"" msgstr "ĐźŃ€ĐľŃ†ĐµŃ Đ·Đ±Ń–Ń€ĐşĐ¸ ĐĽĐ°Ń” бŃти побŃдований на локальній файловій ŃиŃтемі, збірка на Ńпільних реŃŃŃ€ŃĐ°Ń… SMB або NFS призведе Đ´Đľ того, що контейнер не збиратиметьŃŃŹ належним чином! VirtualBox Drive Share також не Đ´ĐľŃŃ‚Ńпний, ĐľŃкільки операції Đ· блоковими приŃтроями не реалізовані, Đ° диŃĐş завжди монтŃєтьŃŃŹ ŃŹĐş "nodev"" -#: ../../contributing/testing.rst:159 +#: ../../contributing/testing.rst:162 msgid "The configurations are all derived from production systems and can not only act as a testcase but also as reference if one wants to enable a certain feature. The configurations can be found here: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" msgstr "ĐŁŃŃ– конфігŃрації походять від виробничих ŃиŃтем Ń– можŃŃ‚ŃŚ виŃŃ‚Ńпати не лиŃе ŃŹĐş теŃтовий приклад, але Đą ŃŹĐş поŃилання, якщо потрібно ввімкнŃти ĐżĐµĐ˛Đ˝Ń Ń„Ńнкцію. КонфігŃрації можна знайти Ń‚ŃŃ‚: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" @@ -1161,7 +1237,7 @@ msgstr "Типовим процеŃором Ńаблонів для ĐşĐľĐ´Ń VyO msgid "The easiest way to compile your package is with the above mentioned :ref:`build_docker` container, it includes all required dependencies for all VyOS related packages." msgstr "НайпроŃŃ‚Ń–Ńий ŃпоŃіб Ńкомпілювати Đ˛Đ°Ń ĐżĐ°ĐşŃнок — Đ·Đ° допомогою згаданого вище контейнера :ref:`build_docker`, він ĐĽŃ–Ńтить ŃŃŃ– необхідні залежноŃŃ‚Ń– для вŃŃ–Ń… пакетів, пов’язаних Đ· VyOS." -#: ../../contributing/testing.rst:164 +#: ../../contributing/testing.rst:167 msgid "The entire test is controlled by the main wrapper script ``/usr/bin/vyos-configtest`` which behaves in the same way as the main smoketest script. It scans the folder for potential configuration files and issues a ``load`` command one after another." msgstr "ВеŃŃŚ теŃŃ‚ контролюєтьŃŃŹ ĐľŃновним Ńценарієм оболонки ``/usr/bin/vyos-configtest``, який поводитьŃŃŹ Ń‚Đ°Đş ŃĐ°ĐĽĐľ, ŃŹĐş Ń– ĐľŃновний Ńценарій smoketest. Đ’Ń–Đ˝ ŃканŃŃ” ĐżĐ°ĐżĐşŃ Đ˝Đ° наявніŃŃ‚ŃŚ потенційних файлів конфігŃрації Ń‚Đ° видає ĐşĐľĐĽĐ°Đ˝Đ´Ń ``load`` ĐľĐ´Đ˝Ń Đ·Đ° одною." @@ -1201,7 +1277,7 @@ msgstr "ĐťĐ°ĐąĐ±Ń–Đ»ŃŚŃ ĐľŃ‡ĐµĐ˛Đ¸Đ´Đ˝Đ¸ĐĽĐ¸ причинами можŃŃ‚ŃŚ б msgid "The original repo is at https://github.com/dmbaturin/hvinfo" msgstr "Оригінальне репо Ń” на https://github.com/dmbaturin/hvinfo" -#: ../../contributing/testing.rst:154 +#: ../../contributing/testing.rst:157 msgid "The other part of our tests are called \"config load tests\". The config load tests will load - one after another - arbitrary configuration files to test if the configuration migration scripts work as designed and that a given set of functionality still can be loaded with a fresh VyOS ISO image." msgstr "ІнŃĐ° чаŃтина наŃих теŃтів називаєтьŃŃŹ «навантажŃвальні теŃти конфігŃрації». ТеŃти завантаження конфігŃрації завантажŃватимŃŃ‚ŃŚ — один Đ·Đ° одним — довільні файли конфігŃрації, щоб перевірити, чи Ńценарії міграції конфігŃрації працюють належним чином Ń– чи можна завантажити певний набір Ń„Ńнкціональних можливоŃтей Đ·Đ° допомогою Ńвіжого ISO-ĐľĐ±Ń€Đ°Đ·Ń VyOS." @@ -1265,6 +1341,10 @@ msgstr "ІŃĐ˝ŃŃŽŃ‚ŃŚ розŃирення, наприклад, для VIM (xml msgid "There are two flags available to aid in debugging configuration scripts. Since configuration loading issues will manifest during boot, the flags are passed as kernel boot parameters." msgstr "Đ„ два прапорці, які допомагають Ń Đ˝Đ°Đ»Đ°ĐłĐľĐ´Đ¶ĐµĐ˝Đ˝Ń– Ńценаріїв конфігŃрації. ĐžŃкільки проблеми Ń–Đ· завантаженням конфігŃрації виявлятимŃŃ‚ŃŚŃŃŹ під Ń‡Đ°Ń Đ·Đ°Đ˛Đ°Đ˝Ń‚Đ°Đ¶ĐµĐ˝Đ˝ŃŹ, прапорці передаютьŃŃŹ ŃŹĐş параметри завантаження ядра." +#: ../../contributing/issues-features.rst:110 +msgid "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"." +msgstr "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"." + #: ../../contributing/build-vyos.rst:297 msgid "This ISO can be customized with the following list of configure options. The full and current list can be generated with ``./build-vyos-image --help``:" msgstr "Цей ISO можна налаŃŃ‚Ńвати Đ·Đ° допомогою наŃŃ‚Ńпного ŃпиŃĐşŃ ĐżĐ°Ń€Đ°ĐĽĐµŃ‚Ń€Ń–Đ˛ конфігŃрації. Повний Ń– поточний ŃпиŃок можна Ńтворити Đ·Đ° допомогою ``./build-vyos-image --help``:" @@ -1281,6 +1361,10 @@ msgstr "ĐŁ Ń†ŃŚĐľĐĽŃ Ń€ĐľĐ·Đ´Ń–Đ»Ń– перераховано ці виняткРmsgid "This is done by utilizing the ``systemd-bootchart`` package which is now installed by default on the VyOS 1.3 (equuleus) branch. The configuration is also versioned so we get comparable results. ``systemd-bootchart`` is configured using this file: bootchart.conf_" msgstr "Це робитьŃŃŹ Đ·Đ° допомогою пакета ``systemd-bootchart``, який тепер вŃтановлено Đ·Đ° замовчŃванням Ń ĐłŃ–Đ»Ń†Ń– VyOS 1.3 (equuleus). КонфігŃрація також ĐĽĐ°Ń” верŃŃ–Ń—, Ń‚ĐľĐĽŃ ĐĽĐ¸ отримŃємо порівняльні резŃльтати. ``systemd-bootchart`` налаŃтовŃєтьŃŃŹ Đ·Đ° допомогою цього файлŃ: bootchart.conf_" +#: ../../contributing/issues-features.rst:122 +msgid "This is what will happen when a task is set to \"Needs reporter action\":" +msgstr "This is what will happen when a task is set to \"Needs reporter action\":" + #: ../../contributing/development.rst:132 msgid "This means the file in question (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) is located in the ``vyatta-webproxy`` package which can be found here: https://github.com/vyos/vyatta-webproxy" msgstr "Це означає, що відповідний файл (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) знаходитьŃŃŹ в пакеті ``vyatta-webproxy``, який можна знайти Ń‚ŃŃ‚: https://github. com/vyos/vyatta-webproxy" @@ -1305,11 +1389,11 @@ msgstr "This will guide you through the process of building a VyOS ISO using Doc msgid "This will guide you through the process of building a VyOS ISO using Docker_. This process has been tested on clean installs of Debian Jessie, Stretch, and Buster." msgstr "Це проведе Đ˛Đ°Ń Ń‡ĐµŃ€ĐµĐ· ĐżŃ€ĐľŃ†ĐµŃ Ńтворення VyOS ISO Đ·Đ° допомогою Docker_. Цей ĐżŃ€ĐľŃ†ĐµŃ ĐżĐµŃ€ĐµĐ˛Ń–Ń€ĐµĐ˝Đľ на чиŃтих Ń–Đ˝Ńталяціях Debian Jessie, Stretch Ń– Buster." -#: ../../contributing/testing.rst:148 +#: ../../contributing/testing.rst:151 msgid "This will limit the `bond` interface test to only make use of `eth1` and `eth2` as member ports." msgstr "Це обмежить теŃŃ‚ інтерфейŃŃ `bond` лиŃе викориŃтанням `eth1` Ń– `eth2` ŃŹĐş членŃьких портів." -#: ../../contributing/testing.rst:98 +#: ../../contributing/testing.rst:101 msgid "Those common tests consists out of:" msgstr "Ці загальні теŃти ŃкладаютьŃŃŹ Đ·:" @@ -1353,6 +1437,10 @@ msgstr "Щоб ŃвімкнŃти графік чаŃŃ Đ·Đ°Đ˛Đ°Đ˝Ń‚Đ°Đ¶ĐµĐ˝Đ˝ŃŹ msgid "To enable debugging just run: ``$ touch /tmp/vyos.frr.debug``" msgstr "Щоб ŃвімкнŃти налагодження, проŃŃ‚Đľ Đ·Đ°ĐżŃŃŃ‚Ń–Ń‚ŃŚ: ``$ touch /tmp/vyos.frr.debug``" +#: ../../contributing/testing.rst:60 +msgid "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``." +msgstr "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``." + #: ../../contributing/development.rst:547 msgid "To ensure uniform look and feel, and improve readability, we should follow a set of guidelines consistently." msgstr "Щоб забезпечити єдиний вигляд Ń– відчŃŃ‚Ń‚ŃŹ, Đ° також покращити читабельніŃŃ‚ŃŚ, ми повинні поŃлідовно дотримŃватиŃŃŹ Đ˝Đ°Đ±ĐľŃ€Ń Đ˛ĐşĐ°Đ·Ń–Đ˛ĐľĐş." @@ -1413,7 +1501,7 @@ msgstr "КориŃні команди:" msgid "VIF (incl. VIF-S/VIF-C)" msgstr "VIF (включаючи VIF-S/VIF-C)" -#: ../../contributing/testing.rst:106 +#: ../../contributing/testing.rst:109 msgid "VLANs (QinQ and regular 802.1q)" msgstr "VLAN (QinQ Ń– звичайний 802.1q)" @@ -1457,6 +1545,10 @@ msgstr "VyOS викориŃтовŃŃ” Jenkins_ ŃŹĐş ŃĐ»ŃĐ¶Đ±Ń ĐżĐľŃтійнРmsgid "We again make use of a helper script and some patches to make the build work. Just run the following command:" msgstr "Ми Đ·Đ˝ĐľĐ˛Ń Đ˛Đ¸ĐşĐľŃ€Đ¸ŃтовŃємо допоміжний Ńценарій Ń– деякі патчі, щоб збірка працювала. ПроŃŃ‚Đľ Đ·Đ°ĐżŃŃŃ‚Ń–Ń‚ŃŚ Ń‚Đ°ĐşŃ ĐşĐľĐĽĐ°Đ˝Đ´Ń:" +#: ../../contributing/issues-features.rst:114 +msgid "We assign that status to:" +msgstr "We assign that status to:" + #: ../../contributing/testing.rst:25 msgid "We differentiate in two independent tests, which are both run in parallel by two separate QEmu instances which are launched via ``make test`` and ``make testc`` from within the vyos-build_ repository." msgstr "Ми розрізняємо два незалежні теŃти, які виконŃŃŽŃ‚ŃŚŃŃŹ паралельно двома окремими екземплярами QEmu, які Đ·Đ°ĐżŃŃкаютьŃŃŹ через ``make test`` Ń– ``make testc`` Đ·Ń– Ńховища vyos-build_." @@ -1473,6 +1565,10 @@ msgstr "Тепер нам потрібно змонтŃвати деякі неРmsgid "We only accept bugfixes in packages other than https://github.com/vyos/vyos-1x as no new functionality should use the old style templates (``node.def`` and Perl/BASH code. Use the new style XML/Python interface instead." msgstr "Ми приймаємо лиŃе виправлення помилок Ń ĐżĐ°ĐşĐµŃ‚Đ°Ń…, відмінних від https://github.com/vyos/vyos-1x, ĐľŃкільки жодна нова Ń„ŃнкціональніŃŃ‚ŃŚ не повинна викориŃтовŃвати Ńтарі Ńаблони Ńтилю (``node.def`` Ń– код Perl/BASH. ВикориŃтовŃйте новий Ńтиль XML НатоміŃŃ‚ŃŚ Ń–Đ˝Ń‚ĐµŃ€Ń„ĐµĐąŃ /Python." +#: ../../contributing/issues-features.rst:128 +msgid "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!" +msgstr "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!" + #: ../../contributing/development.rst:87 msgid "What/why/how something has been changed, makes everyone's life easier when working with `git bisect`" msgstr "Đ©Đľ/чомŃ/ŃŹĐş щоŃŃŚ бŃло змінено, полегŃŃŃ” життя кожного під Ń‡Đ°Ń Ń€ĐľĐ±ĐľŃ‚Đ¸ Đ· `git bisect`" @@ -1517,7 +1613,7 @@ msgstr "Коли ви зможете переконатиŃŃŹ, що це ŃпрРmsgid "When you are working on interface configuration and you also wan't to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." msgstr "Коли ви працюєте над конфігŃрацією інтерфейŃŃ Ń– не бажаєте перевіряти, чи пройŃли теŃти Smoketests, ви зазвичай втрачаєте віддалене SSH-з’єднання Đ· ваŃим :abbr:`DUT (Device Under Test)`. Щоб виріŃити цю проблемŃ, деякі Đ· теŃтів на ĐľŃнові інтерфейŃŃ ĐĽĐľĐ¶Đ˝Đ° заздалегідь викликати Đ·Ń– змінною Ńередовища, щоб обмежити кількіŃŃ‚ŃŚ інтерфейŃів, які викориŃтовŃŃŽŃ‚ŃŚŃŃŹ в теŃŃ‚Ń–. Đ—Đ° замовчŃванням викориŃтовŃŃŽŃ‚ŃŚŃŃŹ вŃŃ– інтерфейŃи, наприклад, ŃŃŃ– інтерфейŃи Ethernet." -#: ../../contributing/testing.rst:109 +#: ../../contributing/testing.rst:112 msgid "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." msgstr "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." @@ -1529,7 +1625,7 @@ msgstr "Якщо ви вважаєте, що знайŃли помилкŃ, Đ·Đ° msgid "When you wish to have a developer fix a bug that you found, helping them reproduce the issue is beneficial to everyone. Be sure to include information about the hardware you are using, commands that you were running, any other activities that you may have been doing at the time. This additional information can be very useful." msgstr "Якщо ви хочете, щоб розробник виправив помилкŃ, ŃŹĐşŃ Đ˛Đ¸ знайŃли, допомога ĐąĐľĐĽŃ Đ˛Ń–Đ´Ń‚Đ˛ĐľŃ€Đ¸Ń‚Đ¸ ĐżŃ€ĐľĐ±Đ»ĐµĐĽŃ Đ±Ńде кориŃною для вŃŃ–Ń…. Обов’язково вкажіть інформацію про апаратне забезпечення, яке ви викориŃтовŃєте, команди, які ви Đ·Đ°ĐżŃŃкали, бŃĐ´ŃŚ-які Ń–Đ˝ŃŃ– Đ´Ń–Ń—, які ви, можливо, виконŃвали в той чаŃ. Ця додаткова інформація може бŃти Đ´Ńже кориŃною." -#: ../../contributing/issues-features.rst:62 +#: ../../contributing/issues-features.rst:66 msgid "Which version of VyOS are you using? ``run show version``" msgstr "ĐŻĐşŃ Đ˛ĐµŃ€ŃŃ–ŃŽ VyOS ви викориŃтовŃєте? ``виконати ĐżĐľĐşĐ°Đ·ĐľĐ˛Ń Đ˛ĐµŃ€ŃŃ–ŃŽ``" @@ -1574,6 +1670,10 @@ msgstr "Ви можете ввеŃти ``help``, щоб отримати ĐľĐłĐ»Ń msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." msgstr "ĐŁ Đ˛Đ°Ń Ń” Ńявлення про те, ŃŹĐş покращити VyOS, або вам потрібна конкретна Ń„Ńнкція, яка бŃде кориŃною для вŃŃ–Ń… кориŃŃ‚Ńвачів VyOS? Щоб надіŃлати запит на Ń„Ńнкцію, виконайте поŃŃĐş Phabricator_, якщо запит Ńже очікŃŃ” на розгляд. Ви можете покращити його або, якщо не знайдете, Ńтворити новий, ŃкориŃтавŃиŃŃŚ Ńвидким поŃиланням ліворŃч під конкретним проектом." +#: ../../contributing/issues-features.rst:74 +msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." +msgstr "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." + #: ../../contributing/build-vyos.rst:470 msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers" msgstr "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers" @@ -1582,10 +1682,23 @@ msgstr "You have your own custom kernel `*.deb` packages in the `packages` folde msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, WireGuard, Intel QAT, Intel NIC" msgstr "ĐŁ Đ˛Đ°Ń Ń” влаŃні пакети ядра `*.deb` Ń ĐżĐ°ĐżŃ†Ń– `packages`, але ви забŃли про Ńтворення вŃŃ–Ń… необхідних позадеревних модŃлів, таких ŃŹĐş Accel-PPP, WireGuard, Intel QAT, Intel NIC" +#: ../../contributing/issues-features.rst:80 +msgid "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there." +msgstr "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there." + +#: ../../contributing/issues-features.rst:84 +msgid "You must include at least the following:" +msgstr "You must include at least the following:" + #: ../../contributing/debugging.rst:166 msgid "You shoudl now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." msgstr "Тепер ви повинні побачити зворотне траŃŃвання Python, яке допоможе нам виріŃити цю проблемŃ. Додайте його Đ´Đľ завдання Phabricator_." +#: ../../contributing/issues-features.rst:31 +#: ../../contributing/issues-features.rst:94 +msgid "You should include the following information:" +msgstr "You should include the following information:" + #: ../../contributing/debugging.rst:166 msgid "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." msgstr "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." @@ -1598,7 +1711,7 @@ msgstr "Потім ви можете продовжити клонŃвання Ń msgid "Your configuration script or operation mode script which is also written in Python3 should have a line break on 80 characters. This seems to be a bit odd nowadays but as some people also work remotely or program using vi(m) this is a fair good standard which I hope we can rely on." msgstr "Đ’Đ°Ń Ńценарій конфігŃрації або Ńценарій Ń€ĐµĐ¶Đ¸ĐĽŃ Ń€ĐľĐ±ĐľŃ‚Đ¸, який також напиŃаний на Python3, повинен мати розрив рядка на 80 Ńимволів. Сьогодні це здаєтьŃŃŹ трохи дивним, але ĐľŃкільки деякі люди також працюють віддалено або програмŃŃŽŃ‚ŃŚ Đ·Đ° допомогою vi(m), це Đ´ĐľŃить хороŃий Ńтандарт, на який, ŃŹ ŃподіваюŃŃŹ, ми можемо поклаŃтиŃŃŹ." -#: ../../contributing/testing.rst:107 +#: ../../contributing/testing.rst:110 msgid "..." msgstr "..." diff --git a/docs/_locale/uk/documentation.pot b/docs/_locale/uk/documentation.pot index 5dc3912a..6593a4b4 100644 --- a/docs/_locale/uk/documentation.pot +++ b/docs/_locale/uk/documentation.pot @@ -177,6 +177,10 @@ msgid "If there some troubleshooting guides related to the commands. Explain it msgstr "Якщо Ń” деякі поŃібники Đ· ŃŃŃнення неŃправноŃтей, пов’язані Đ· командами. ПояŃніть це в наŃŃ‚Ńпній додатковій чаŃтині." #: ../../documentation.rst:448 +msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``" +msgstr "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``" + +#: ../../documentation.rst:448 msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin master``" msgstr "Якщо ви також хочете оновити Ńвій форк на GitHub, викориŃтовŃйте наŃŃ‚Ńпне: ``$ git push origin master``" diff --git a/docs/changelog/1.3.rst b/docs/changelog/1.3.rst index becdd4b3..dc1b4620 100644 --- a/docs/changelog/1.3.rst +++ b/docs/changelog/1.3.rst @@ -8,6 +8,24 @@ _ext/releasenotes.py +2024-04-25 +========== + +* :vytask:`T6249` ``(default): ISO builder fails because of changed buster-backport repository`` + + +2024-04-23 +========== + +* :vytask:`T6261` ``(default): Typo in op_mode connect_disconnect print statement for check_ppp_running`` + + +2024-04-17 +========== + +* :vytask:`T6243` ``(bug): Update vyos-http-api-tools for package idna security advisory`` + + 2024-04-12 ========== diff --git a/docs/changelog/1.4.rst b/docs/changelog/1.4.rst index ed68ae8a..0ad129e1 100644 --- a/docs/changelog/1.4.rst +++ b/docs/changelog/1.4.rst @@ -8,6 +8,76 @@ _ext/releasenotes.py +2024-04-25 +========== + +* :vytask:`T6263` ``(bug): Multicast: Could not commit multicast config with multicast join group using source-address`` +* :vytask:`T5833` ``(bug): Not all AFIs compatible with VRF`` + + +2024-04-24 +========== + +* :vytask:`T6255` ``(bug): Static table description should not contain white-space`` +* :vytask:`T6226` ``(feature): add HAPROXY `tcp-request content accept` related block to load-balancing reverse proxy config`` +* :vytask:`T6109` ``(bug): remote syslog do not get all the logs`` +* :vytask:`T6217` ``(feature): VRRP contrack-sync script change name of the logger`` +* :vytask:`T6244` ``(feature): Spacing of "Show System Uptime" hard to parse`` + + +2024-04-23 +========== + +* :vytask:`T6260` ``(bug): image-tools: remove failed image directory if 'No space left on device' error`` +* :vytask:`T6261` ``(default): Typo in op_mode connect_disconnect print statement for check_ppp_running`` +* :vytask:`T6237` ``(feature): IPSec remote access VPN: ability to set EAP ID of clients`` + + +2024-04-22 +========== + +* :vytask:`T5996` ``(bug): unescape backslashes for config save, compare commands`` +* :vytask:`T6103` ``(bug): DHCP-server bootfile-name double slash syntax weird behaviour`` +* :vytask:`T6080` ``(default): Default NTP server settings`` +* :vytask:`T5986` ``(bug): Container: Error on commit when environment variable value contains \n line break`` + + +2024-04-21 +========== + +* :vytask:`T6191` ``(bug): Policy Route TCP-MSS Behavior Different from 1.3.x`` +* :vytask:`T5535` ``(feature): disable-directed-broadcast should be moved to firewall global-options`` + + +2024-04-20 +========== + +* :vytask:`T6252` ``(bug): gre tunnel - doesn't allow configure jumbo frame more than 8024`` + + +2024-04-19 +========== + +* :vytask:`T6221` ``(bug): Enabling VRF breaks connectivity`` +* :vytask:`T6035` ``(bug): QoS policy shaper queue-type random-detect requires limit avpkt`` +* :vytask:`T6246` ``(feature): Enable basic haproxy http-check configuration options`` +* :vytask:`T6242` ``(feature): Loadbalancer reverse-proxy: SSL backend skip CA certificate verification`` + + +2024-04-17 +========== + +* :vytask:`T6168` ``(bug): add system image does not set default boot to current console type in compatibility mode`` +* :vytask:`T6243` ``(bug): Update vyos-http-api-tools for package idna security advisory`` +* :vytask:`T6154` ``(enhancment): Installer should ask for password twice`` +* :vytask:`T5966` ``(default): Adjust dynamic dns configuration address subpath to be more intuitive and other op-mode adjustments`` +* :vytask:`T5723` ``(default): mdns repeater: Always reload systemd daemon before applying changes`` +* :vytask:`T5722` ``(bug): Failing to add route in failover if gateway not in the same interface network`` +* :vytask:`T5612` ``(default): Miscellaneous improvements and fixes for dynamic DNS configuration`` +* :vytask:`T5574` ``(default): Support per-service cache management for dynamic dns providers`` +* :vytask:`T5360` ``(bug): ddclient generating abuse`` + + 2024-04-15 ========== diff --git a/docs/changelog/1.5.rst b/docs/changelog/1.5.rst index aaa88c90..94d7b9ab 100644 --- a/docs/changelog/1.5.rst +++ b/docs/changelog/1.5.rst @@ -8,6 +8,79 @@ _ext/releasenotes.py +2024-04-26 +========== + +* :vytask:`T6259` ``(feature): PKI: Support RFC822 (email) names in SAN`` + + +2024-04-25 +========== + +* :vytask:`T6263` ``(bug): Multicast: Could not commit multicast config with multicast join group using source-address`` +* :vytask:`T5833` ``(bug): Not all AFIs compatible with VRF`` + + +2024-04-24 +========== + +* :vytask:`T6255` ``(bug): Static table description should not contain white-space`` +* :vytask:`T6226` ``(feature): add HAPROXY `tcp-request content accept` related block to load-balancing reverse proxy config`` +* :vytask:`T6109` ``(bug): remote syslog do not get all the logs`` +* :vytask:`T6262` ``(default): Update the boot splash for VyOS 1.5 ISO`` +* :vytask:`T6217` ``(feature): VRRP contrack-sync script change name of the logger`` +* :vytask:`T6244` ``(feature): Spacing of "Show System Uptime" hard to parse`` + + +2024-04-23 +========== + +* :vytask:`T6260` ``(bug): image-tools: remove failed image directory if 'No space left on device' error`` +* :vytask:`T6261` ``(default): Typo in op_mode connect_disconnect print statement for check_ppp_running`` +* :vytask:`T6237` ``(feature): IPSec remote access VPN: ability to set EAP ID of clients`` + + +2024-04-22 +========== + +* :vytask:`T5996` ``(bug): unescape backslashes for config save, compare commands`` + + +2024-04-21 +========== + +* :vytask:`T6191` ``(bug): Policy Route TCP-MSS Behavior Different from 1.3.x`` +* :vytask:`T5535` ``(feature): disable-directed-broadcast should be moved to firewall global-options`` + + +2024-04-20 +========== + +* :vytask:`T6252` ``(bug): gre tunnel - doesn't allow configure jumbo frame more than 8024`` + + +2024-04-19 +========== + +* :vytask:`T6221` ``(bug): Enabling VRF breaks connectivity`` +* :vytask:`T6035` ``(bug): QoS policy shaper queue-type random-detect requires limit avpkt`` +* :vytask:`T6246` ``(feature): Enable basic haproxy http-check configuration options`` +* :vytask:`T6242` ``(feature): Loadbalancer reverse-proxy: SSL backend skip CA certificate verification`` + + +2024-04-17 +========== + +* :vytask:`T6168` ``(bug): add system image does not set default boot to current console type in compatibility mode`` +* :vytask:`T6243` ``(bug): Update vyos-http-api-tools for package idna security advisory`` +* :vytask:`T6154` ``(enhancment): Installer should ask for password twice`` +* :vytask:`T5966` ``(default): Adjust dynamic dns configuration address subpath to be more intuitive and other op-mode adjustments`` +* :vytask:`T5723` ``(default): mdns repeater: Always reload systemd daemon before applying changes`` +* :vytask:`T5722` ``(bug): Failing to add route in failover if gateway not in the same interface network`` +* :vytask:`T5612` ``(default): Miscellaneous improvements and fixes for dynamic DNS configuration`` +* :vytask:`T5574` ``(default): Support per-service cache management for dynamic dns providers`` + + 2024-04-16 ========== @@ -63,7 +136,6 @@ * :vytask:`T6106` ``(bug): Valid commit error for route-reflector-client option defined in peer-group`` * :vytask:`T5750` ``(bug): Upgrade from 1.3.4 to 1.4 Rolling fails QoS`` * :vytask:`T5740` ``(bug): Generate wiregurad keys via HTTP-API fails`` -* :vytask:`T6206` ``(bug): L2tp smoketest fails if vyos-configd is running`` * :vytask:`T5858` ``(bug): Show conntrack statistics formatting is all over the place`` diff --git a/docs/cli.rst b/docs/cli.rst index 41b4b9e0..79501c66 100644 --- a/docs/cli.rst +++ b/docs/cli.rst @@ -501,6 +501,9 @@ different levels in the hierarchy. Warning: configuration changes have not been saved. vyos@vyos:~$ +.. hint:: You can specify a commit message with + :cfgcmd:`commit comment <message>`. + .. _save: .. cfgcmd:: save @@ -869,6 +872,9 @@ be ``config.boot-hostname.YYYYMMDD_HHMMSS``. * ``tftp://<host>/<dir>`` * ``git+https://<user>:<passwd>@<host>/<path>`` + Since username and password are part of the URI, they need to be + properly url encoded if containing special characters. + .. note:: The number of revisions don't affect the commit-archive. .. note:: You may find VyOS not allowing the secure connection because diff --git a/docs/configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst b/docs/configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst index e42d3567..6666399d 100644 --- a/docs/configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst +++ b/docs/configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst @@ -7,9 +7,9 @@ OpenVPN with LDAP | Testdate: 2023-05-11 | Version: 1.4-rolling-202305100734 -This LAB show how to uwe OpenVPN with a Active Directory authentication backend. +This LAB shows how to use OpenVPN with a Active Directory authentication method. -The Topology are consists of: +Topology consists of: * Windows Server 2019 with a running Active Directory * VyOS as a OpenVPN Server * VyOS as Client @@ -20,7 +20,7 @@ The Topology are consists of: Active Directory on Windows server ================================== -The Lab asume a full running Active Directory on the Windows Server. +The lab assumes a full running Active Directory on the Windows Server. Here are some PowerShell commands to quickly add a Test Active Directory. .. code-block:: powershell @@ -36,7 +36,7 @@ Here are some PowerShell commands to quickly add a Test Active Directory. New-ADUser user01 -AccountPassword(Read-Host -AsSecureString "Input Password") -Enabled $true -Configuration VyOS as OpenVPN Server +Configure VyOS as OpenVPN Server ==================================== In this example OpenVPN will be setup with a client certificate and username / password authentication. @@ -53,7 +53,7 @@ Please look :ref:`here <configuration/pki/index:pki>` for more information. Now generate all required certificates on the ovpn-server: -first the PCA +First the CA .. code-block:: none @@ -249,11 +249,27 @@ save the output to a file and import it in nearly all openvpn clients. </key> +Configure VyOS as client +------------------------ + +.. code-block:: none + + set interfaces openvpn vtun10 authentication username 'user01' + set interfaces openvpn vtun10 authentication password '$ecret' + set interfaces openvpn vtun10 encryption cipher 'aes256' + set interfaces openvpn vtun10 hash 'sha512' + set interfaces openvpn vtun10 mode 'client' + set interfaces openvpn vtun10 persistent-tunnel + set interfaces openvpn vtun10 protocol 'udp' + set interfaces openvpn vtun10 remote-host '198.51.100.254' + set interfaces openvpn vtun10 remote-port '1194' + set interfaces openvpn vtun10 tls ca-certificate 'OVPN-CA' + set interfaces openvpn vtun10 tls certificate 'CLIENT' Monitoring ========== -If the client is connect successfully you can check the output with +If the client is connected successfully you can check the status .. code-block:: none diff --git a/docs/configexamples/autotest/tunnelbroker/_include/vyos-wan_tun0.conf b/docs/configexamples/autotest/tunnelbroker/_include/vyos-wan_tun0.conf index 03889ffd..ab70ccc5 100644 --- a/docs/configexamples/autotest/tunnelbroker/_include/vyos-wan_tun0.conf +++ b/docs/configexamples/autotest/tunnelbroker/_include/vyos-wan_tun0.conf @@ -1,8 +1,8 @@ -set interfaces tunnel tun0 address '2001:470:6c:779::2/64' #Tunnelbroker Client IPv6 Address +set interfaces tunnel tun0 address '2001:470:6c:779::2/64' #Tunnelbroker Client IPv6 address set interfaces tunnel tun0 description 'HE.NET IPv6 Tunnel' set interfaces tunnel tun0 encapsulation 'sit' -set interfaces tunnel tun0 remote '216.66.86.114' #Tunnelbroker Server IPv4 Address -set interfaces tunnel tun0 source-address '172.29.129.60' # Tunnelbroker Client IPv4 Address or if there is NAT the current WAN interface address +set interfaces tunnel tun0 remote '216.66.86.114' #Tunnelbroker Server IPv4 address +set interfaces tunnel tun0 source-address '172.29.129.60' # Tunnelbroker Client IPv4 address. See note below set protocols static route6 ::/0 interface tun0 @@ -10,4 +10,4 @@ set interface ethernet eth2 address '2001:470:6d:778::1/64' # Tunnelbroker Route set service router-advert interface eth2 name-server '2001:470:20::2' set service router-advert interface eth2 prefix 2001:470:6d:778::/64 # Tunnelbroker Routed /64 prefix -set system name-server 2001:470:20::2 #Tunnelbroker DNS Server
\ No newline at end of file +set system name-server 2001:470:20::2 #Tunnelbroker DNS Server diff --git a/docs/configexamples/autotest/tunnelbroker/tunnelbroker.rst b/docs/configexamples/autotest/tunnelbroker/tunnelbroker.rst index 96c2e1af..5bfcb642 100644 --- a/docs/configexamples/autotest/tunnelbroker/tunnelbroker.rst +++ b/docs/configexamples/autotest/tunnelbroker/tunnelbroker.rst @@ -48,7 +48,15 @@ Now we are able to setup the tunnel interface. :language: none :lines: 1-5 -Setup the ipv6 default route to the tunnel interface +.. note:: The `source-address` is the Tunnelbroker client IPv4 + address or if there is NAT the current WAN interface address. + + If `source-address` is dynamic, the tunnel will cease working once + the address changes. To avoid having to manually update + `source-address` each time the dynamic IP changes, an address of + '0.0.0.0' can be specified. + +Setup the IPv6 default route to the tunnel interface .. literalinclude:: _include/vyos-wan_tun0.conf :language: none @@ -204,4 +212,5 @@ instead of `set firewall name NAME`, you would use `set firewall ipv6-name NAME`. Similarly, to attach the firewall, you would use `set interfaces ethernet eth0 -firewall in ipv6-name` or `et firewall zone LOCAL from WAN firewall ipv6-name`.
\ No newline at end of file +firewall in ipv6-name` or `set firewall zone LOCAL from WAN firewall +ipv6-name`. diff --git a/docs/configexamples/policy-based-ipsec-and-firewall.rst b/docs/configexamples/policy-based-ipsec-and-firewall.rst index 2337c1ac..8dc07de6 100644 --- a/docs/configexamples/policy-based-ipsec-and-firewall.rst +++ b/docs/configexamples/policy-based-ipsec-and-firewall.rst @@ -13,7 +13,7 @@ configuration is done only on one router. Network Topology and requirements ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ -This configuration example and the requirments consists of: +This configuration example and the requirements consists of: - Two VyOS routers with public IP address. @@ -37,7 +37,7 @@ This configuration example and the requirments consists of: - Allow all new connections from local subnets. - - Allow connections from LANs to LANs throught the tunnel. + - Allow connections from LANs to LANs through the tunnel. .. image:: /_static/images/policy-based-ipsec-and-firewall.png diff --git a/docs/configexamples/wan-load-balancing.rst b/docs/configexamples/wan-load-balancing.rst index ace9a981..0952cfe5 100644 --- a/docs/configexamples/wan-load-balancing.rst +++ b/docs/configexamples/wan-load-balancing.rst @@ -69,7 +69,7 @@ Example 2: Failover based on interface weights This example uses the failover mode. -.. _wan:example2_overwiew: +.. _wan:example2_overview: Overview ^^^^^^^^ @@ -98,7 +98,7 @@ The previous example used the failover command to send traffic through eth1 if eth0 fails. In this example, failover functionality is provided by rule order. -.. _wan:example3_overwiew: +.. _wan:example3_overview: Overview ^^^^^^^^ @@ -129,7 +129,7 @@ traffic. It is assumed for this example that eth1 is connected to a slower connection than eth0 and should prioritize VoIP traffic. -.. _wan:example4_overwiew: +.. _wan:example4_overview: Overview ^^^^^^^^ diff --git a/docs/configexamples/zone-policy.rst b/docs/configexamples/zone-policy.rst index 08db13b9..95648e7a 100644 --- a/docs/configexamples/zone-policy.rst +++ b/docs/configexamples/zone-policy.rst @@ -6,7 +6,7 @@ Zone-Policy example ------------------- .. note:: Starting from VyOS 1.4-rolling-202308040557, a new firewall - structure can be found on all vyos instalations, and zone based firewall is + structure can be found on all vyos installations, and zone based firewall is no longer supported. Documentation for most of the new firewall CLI can be found in the `firewall <https://docs.vyos.io/en/latest/configuration/firewall/general.html>`_ @@ -145,7 +145,7 @@ To add logging to the default rule, do: .. code-block:: none - set firewall name <ruleSet> enable-default-log + set firewall name <ruleSet> default-log By default, iptables does not allow traffic for established sessions to @@ -251,7 +251,7 @@ Since we have 4 zones, we need to setup the following rulesets. Dmz-local Even if the two zones will never communicate, it is a good idea to -create the zone-pair-direction rulesets and set enable-default-log. This +create the zone-pair-direction rulesets and set default-log. This will allow you to log attempts to access the networks. Without it, you will never see the connection attempts. @@ -261,7 +261,7 @@ This is an example of the three base rules. name wan-lan { default-action drop - enable-default-log + default-log rule 1 { action accept state { @@ -285,7 +285,7 @@ Here is an example of an IPv6 DMZ-WAN ruleset. ipv6-name dmz-wan-6 { default-action drop - enable-default-log + default-log rule 1 { action accept state { diff --git a/docs/configuration/container/index.rst b/docs/configuration/container/index.rst index 988b425b..e5a470bc 100644 --- a/docs/configuration/container/index.rst +++ b/docs/configuration/container/index.rst @@ -125,7 +125,7 @@ Configuration - **net-bind-service**: Bind a socket to privileged ports (port numbers less than 1024) - **net-raw**: Permission to create raw network sockets - **setpcap**: Capability sets (from bounded or inherited set) - - **sys-admin**: Administation operations (quotactl, mount, sethostname, setdomainame) + - **sys-admin**: Administration operations (quotactl, mount, sethostname, setdomainame) - **sys-time**: Permission to set system clock .. cfgcmd:: set container name <name> disable diff --git a/docs/configuration/firewall/bridge.rst b/docs/configuration/firewall/bridge.rst index 9fb019c5..f84fd456 100644 --- a/docs/configuration/firewall/bridge.rst +++ b/docs/configuration/firewall/bridge.rst @@ -13,7 +13,7 @@ Overview ******** In this section there's useful information of all firewall configuration that -can be done regarding bridge, and appropiate op-mode commands. +can be done regarding bridge, and appropriate op-mode commands. Configuration commands covered in this section: .. cfgcmd:: set firewall bridge ... @@ -37,13 +37,13 @@ for this layer is shown next: .. figure:: /_static/images/firewall-bridge-packet-flow.png -For traffic that needs to be forwared internally by the bridge, base chain is +For traffic that needs to be forwarded internally by the bridge, base chain is is **forward**, and it's base command for filtering is ``set firewall bridge -forward filter ...``, which happens in stage 4, highlightened with red color. +forward filter ...``, which happens in stage 4, highlighted with red color. Custom bridge firewall chains can be create with command ``set firewall bridge name <name> ...``. In order to use such custom chain, a rule with action jump, -and the appropiate target should be defined in a base chain. +and the appropriate target should be defined in a base chain. .. note:: **Layer 3 bridge**: When an IP address is assigned to the bridge interface, and if traffic @@ -137,7 +137,7 @@ not match any rule in it's chain. For base chains, possible options for .. cfgcmd:: set firewall bridge name <name> default-jump-target <text> - To be used only when ``defult-action`` is set to ``jump``. Use this + To be used only when ``default-action`` is set to ``jump``. Use this command to specify jump target for default rule. .. note:: **Important note about default-actions:** @@ -157,8 +157,8 @@ log options can be defined. Enable logging for the matched packet. If this configuration command is not present, then log is not enabled. -.. cfgcmd:: set firewall bridge forward filter enable-default-log -.. cfgcmd:: set firewall bridge name <name> enable-default-log +.. cfgcmd:: set firewall bridge forward filter default-log +.. cfgcmd:: set firewall bridge name <name> default-log Use this command to enable the logging of the default action on the specified chain. @@ -236,9 +236,9 @@ There are a lot of matching criteria against which the packet can be tested. .. cfgcmd:: set firewall bridge name <name> rule <1-999999> inbound-interface name <iface> - Match based on inbound interface. Wilcard ``*`` can be used. + Match based on inbound interface. Wildcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching - criteria is also supportd. For example ``!eth2`` + criteria is also supported. For example ``!eth2`` .. cfgcmd:: set firewall bridge forward filter rule <1-999999> inbound-interface group <iface_group> @@ -246,16 +246,16 @@ There are a lot of matching criteria against which the packet can be tested. inbound-interface group <iface_group> Match based on inbound interface group. Prepending character ``!`` for - inverted matching criteria is also supportd. For example ``!IFACE_GROUP`` + inverted matching criteria is also supported. For example ``!IFACE_GROUP`` .. cfgcmd:: set firewall bridge forward filter rule <1-999999> outbound-interface name <iface> .. cfgcmd:: set firewall bridge name <name> rule <1-999999> outbound-interface name <iface> - Match based on outbound interface. Wilcard ``*`` can be used. + Match based on outbound interface. Wildcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching - criteria is also supportd. For example ``!eth2`` + criteria is also supported. For example ``!eth2`` .. cfgcmd:: set firewall bridge forward filter rule <1-999999> outbound-interface group <iface_group> @@ -263,7 +263,7 @@ There are a lot of matching criteria against which the packet can be tested. outbound-interface group <iface_group> Match based on outbound interface group. Prepending character ``!`` for - inverted matching criteria is also supportd. For example ``!IFACE_GROUP`` + inverted matching criteria is also supported. For example ``!IFACE_GROUP`` .. cfgcmd:: set firewall bridge forward filter rule <1-999999> vlan id <0-4096> @@ -288,7 +288,7 @@ Rule-set overview In this section you can find all useful firewall op-mode commands. -General commands for firewall configuration, counter and statiscits: +General commands for firewall configuration, counter and statistics: .. opcmd:: show firewall .. opcmd:: show firewall summary @@ -325,7 +325,7 @@ Configuration example: .. code-block:: none set firewall bridge forward filter default-action 'drop' - set firewall bridge forward filter enable-default-log + set firewall bridge forward filter default-log set firewall bridge forward filter rule 10 action 'continue' set firewall bridge forward filter rule 10 inbound-interface name 'eth2' set firewall bridge forward filter rule 10 vlan id '22' @@ -341,7 +341,7 @@ Configuration example: set firewall bridge forward filter rule 40 destination mac-address '66:55:44:33:22:11' set firewall bridge forward filter rule 40 source mac-address '11:22:33:44:55:66' set firewall bridge name TEST default-action 'accept' - set firewall bridge name TEST enable-default-log + set firewall bridge name TEST default-log set firewall bridge name TEST rule 10 action 'continue' set firewall bridge name TEST rule 10 log set firewall bridge name TEST rule 10 vlan priority '0' diff --git a/docs/configuration/firewall/flowtables.rst b/docs/configuration/firewall/flowtables.rst index bc7b9212..adecb26a 100644 --- a/docs/configuration/firewall/flowtables.rst +++ b/docs/configuration/firewall/flowtables.rst @@ -99,20 +99,20 @@ Creating rules for using flow tables: Configuration Example ********************* -Things to be considred in this setup: +Things to be considered in this setup: * Two interfaces are going to be used in the flowtables: eth0 and eth1 - * Minumum firewall ruleset is provided, which includes some filtering rules, - and appropiate rules for using flowtable offload capabilities. + * Minimum firewall ruleset is provided, which includes some filtering rules, + and appropriate rules for using flowtable offload capabilities. As described, first packet will be evaluated by all the firewall path, so -desired connection should be explicitely accepted. Same thing should be taken +desired connection should be explicitly accepted. Same thing should be taken into account for traffic in reverse order. In most cases state policies are used in order to accept connection in reverse patch. -We will only accept traffic comming from interface eth0, protocol tcp and -destination port 1122. All other traffic traspassing the router should be +We will only accept traffic coming from interface eth0, protocol tcp and +destination port 1122. All other traffic trespassing the router should be blocked. Commands @@ -152,7 +152,7 @@ Analysis on what happens for desired connection: 4. Once answer from server 192.0.2.100 is seen in opposite direction, connection state will be triggered to **established**, so this reply is - accepted in rule 10. + accepted in rule 20. 5. Second packet for this connection is received by the router. Since connection state is **established**, then rule 10 is hit, and a new entry diff --git a/docs/configuration/firewall/index.rst b/docs/configuration/firewall/index.rst index 44e0cd20..1d904901 100644 --- a/docs/configuration/firewall/index.rst +++ b/docs/configuration/firewall/index.rst @@ -24,7 +24,7 @@ firewall are covered below: where the packet was received is part of a bridge, or not. If the interface where the packet was received isn't part of a bridge, then -packetis processed at the **IP Layer**: +packet is processed at the **IP Layer**: * **Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in VyOS configuration. Order @@ -65,7 +65,7 @@ packetis processed at the **IP Layer**: * **Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, - such as NTP, or a response to traffic received externaly through + such as NTP, or a response to traffic received externally through **input** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in: @@ -84,7 +84,7 @@ If the interface where the packet was received is part of a bridge, then the packet is processed at the **Bridge Layer**, which contains a basic setup for bridge filtering: - * **Forward (Bridge)**: stage where traffic that is trespasing through the + * **Forward (Bridge)**: stage where traffic that is trespassing through the bridge is filtered and controlled: * ``set firewall bridge forward filter ...``. diff --git a/docs/configuration/firewall/ipv4.rst b/docs/configuration/firewall/ipv4.rst index ff739418..a9459f00 100644 --- a/docs/configuration/firewall/ipv4.rst +++ b/docs/configuration/firewall/ipv4.rst @@ -11,7 +11,7 @@ Overview ******** In this section there's useful information of all firewall configuration that -can be done regarding IPv4, and appropiate op-mode commands. +can be done regarding IPv4, and appropriate op-mode commands. Configuration commands covered in this section: .. cfgcmd:: set firewall ipv4 ... @@ -41,12 +41,12 @@ next: Where firewall base chain to configure firewall filtering rules for transit traffic is ``set firewall ipv4 forward filter ...``, which happens in stage 5, -highlightened with red color. +highlighted with red color. For traffic towards the router itself, base chain is **input**, while traffic originated by the router, base chain is **output**. A new simplified packet flow diagram is shown next, which shows the path -for traffic destinated to the router itself, and traffic generated by the +for traffic destined to the router itself, and traffic generated by the router (starting from circle number 6): .. figure:: /_static/images/firewall-input-packet-flow.png @@ -64,7 +64,7 @@ output filter ...`` Custom firewall chains can be created, with commands ``set firewall ipv4 name <name> ...``. In order to use -such custom chain, a rule with **action jump**, and the appropiate **target** +such custom chain, a rule with **action jump**, and the appropriate **target** should be defined in a base chain. ********************* @@ -184,7 +184,7 @@ not match any rule in it's chain. For base chains, possible options for .. cfgcmd:: set firewall ipv4 name <name> default-jump-target <text> - To be used only when ``defult-action`` is set to ``jump``. Use this + To be used only when ``default-action`` is set to ``jump``. Use this command to specify jump target for default rule. .. note:: **Important note about default-actions:** @@ -206,10 +206,10 @@ log options can be defined. Enable logging for the matched packet. If this configuration command is not present, then log is not enabled. -.. cfgcmd:: set firewall ipv4 forward filter enable-default-log -.. cfgcmd:: set firewall ipv4 input filter enable-default-log -.. cfgcmd:: set firewall ipv4 output filter enable-default-log -.. cfgcmd:: set firewall ipv4 name <name> enable-default-log +.. cfgcmd:: set firewall ipv4 forward filter default-log +.. cfgcmd:: set firewall ipv4 input filter default-log +.. cfgcmd:: set firewall ipv4 output filter default-log +.. cfgcmd:: set firewall ipv4 name <name> default-log Use this command to enable the logging of the default action on the specified chain. @@ -683,9 +683,9 @@ geoip) to keep database and rules updated. .. cfgcmd:: set firewall ipv4 name <name> rule <1-999999> inbound-interface name <iface> - Match based on inbound interface. Wilcard ``*`` can be used. + Match based on inbound interface. Wildcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching - criteria is also supportd. For example ``!eth2`` + criteria is also supported. For example ``!eth2`` .. cfgcmd:: set firewall ipv4 forward filter rule <1-999999> inbound-interface group <iface_group> @@ -695,7 +695,7 @@ geoip) to keep database and rules updated. inbound-interface group <iface_group> Match based on inbound interface group. Prepending character ``!`` for - inverted matching criteria is also supportd. For example ``!IFACE_GROUP`` + inverted matching criteria is also supported. For example ``!IFACE_GROUP`` .. cfgcmd:: set firewall ipv4 forward filter rule <1-999999> outbound-interface name <iface> @@ -704,9 +704,9 @@ geoip) to keep database and rules updated. .. cfgcmd:: set firewall ipv4 name <name> rule <1-999999> outbound-interface name <iface> - Match based on outbound interface. Wilcard ``*`` can be used. + Match based on outbound interface. Wildcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching - criteria is also supportd. For example ``!eth2`` + criteria is also supported. For example ``!eth2`` .. cfgcmd:: set firewall ipv4 forward filter rule <1-999999> outbound-interface group <iface_group> @@ -716,7 +716,7 @@ geoip) to keep database and rules updated. outbound-interface group <iface_group> Match based on outbound interface group. Prepending character ``!`` for - inverted matching criteria is also supportd. For example ``!IFACE_GROUP`` + inverted matching criteria is also supported. For example ``!IFACE_GROUP`` .. cfgcmd:: set firewall ipv4 forward filter rule <1-999999> ipsec [match-ipsec | match-none] diff --git a/docs/configuration/firewall/ipv6.rst b/docs/configuration/firewall/ipv6.rst index 0aa8a137..4b695f74 100644 --- a/docs/configuration/firewall/ipv6.rst +++ b/docs/configuration/firewall/ipv6.rst @@ -11,7 +11,7 @@ Overview ******** In this section there's useful information of all firewall configuration that -can be done regarding IPv6, and appropiate op-mode commands. +can be done regarding IPv6, and appropriate op-mode commands. Configuration commands covered in this section: .. cfgcmd:: set firewall ipv6 ... @@ -41,12 +41,12 @@ next: Where firewall base chain to configure firewall filtering rules for transit traffic is ``set firewall ipv6 forward filter ...``, which happens in stage 5, -highlightened with red color. +highlighted with red color. For traffic towards the router itself, base chain is **input**, while traffic originated by the router, base chain is **output**. A new simplified packet flow diagram is shown next, which shows the path -for traffic destinated to the router itself, and traffic generated by the +for traffic destined to the router itself, and traffic generated by the router (starting from circle number 6): .. figure:: /_static/images/firewall-input-packet-flow.png @@ -64,7 +64,7 @@ output filter ...`` Custom firewall chains can be created, with commands ``set firewall ipv6 name <name> ...``. In order to use -such custom chain, a rule with **action jump**, and the appropiate **target** +such custom chain, a rule with **action jump**, and the appropriate **target** should be defined in a base chain. ****************************** @@ -184,7 +184,7 @@ not match any rule in it's chain. For base chains, possible options for .. cfgcmd:: set firewall ipv6 name <name> default-jump-target <text> - To be used only when ``defult-action`` is set to ``jump``. Use this + To be used only when ``default-action`` is set to ``jump``. Use this command to specify jump target for default rule. .. note:: **Important note about default-actions:** @@ -206,10 +206,10 @@ log options can be defined. Enable logging for the matched packet. If this configuration command is not present, then log is not enabled. -.. cfgcmd:: set firewall ipv6 forward filter enable-default-log -.. cfgcmd:: set firewall ipv6 input filter enable-default-log -.. cfgcmd:: set firewall ipv6 output filter enable-default-log -.. cfgcmd:: set firewall ipv6 name <name> enable-default-log +.. cfgcmd:: set firewall ipv6 forward filter default-log +.. cfgcmd:: set firewall ipv6 input filter default-log +.. cfgcmd:: set firewall ipv6 output filter default-log +.. cfgcmd:: set firewall ipv6 name <name> default-log Use this command to enable the logging of the default action on the specified chain. @@ -670,9 +670,9 @@ geoip) to keep database and rules updated. .. cfgcmd:: set firewall ipv6 name <name> rule <1-999999> inbound-interface name <iface> - Match based on inbound interface. Wilcard ``*`` can be used. + Match based on inbound interface. Wildcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching - criteria is also supportd. For example ``!eth2`` + criteria is also supported. For example ``!eth2`` .. cfgcmd:: set firewall ipv6 forward filter rule <1-999999> inbound-interface group <iface_group> @@ -682,7 +682,7 @@ geoip) to keep database and rules updated. inbound-interface group <iface_group> Match based on inbound interface group. Prepending character ``!`` for - inverted matching criteria is also supportd. For example ``!IFACE_GROUP`` + inverted matching criteria is also supported. For example ``!IFACE_GROUP`` .. cfgcmd:: set firewall ipv6 forward filter rule <1-999999> outbound-interface name <iface> @@ -691,9 +691,9 @@ geoip) to keep database and rules updated. .. cfgcmd:: set firewall ipv6 name <name> rule <1-999999> outbound-interface name <iface> - Match based on outbound interface. Wilcard ``*`` can be used. + Match based on outbound interface. Wildcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching - criteria is also supportd. For example ``!eth2`` + criteria is also supported. For example ``!eth2`` .. cfgcmd:: set firewall ipv6 forward filter rule <1-999999> outbound-interface group <iface_group> @@ -703,7 +703,7 @@ geoip) to keep database and rules updated. outbound-interface group <iface_group> Match based on outbound interface group. Prepending character ``!`` for - inverted matching criteria is also supportd. For example ``!IFACE_GROUP`` + inverted matching criteria is also supported. For example ``!IFACE_GROUP`` .. cfgcmd:: set firewall ipv6 forward filter rule <1-999999> ipsec [match-ipsec | match-none] @@ -1177,7 +1177,7 @@ Example Partial Config } name INP-ETH1 { default-action drop - enable-default-log + default-log rule 10 { action accept protocol tcp_udp diff --git a/docs/configuration/firewall/zone.rst b/docs/configuration/firewall/zone.rst index 059b029d..f71ad8c1 100644 --- a/docs/configuration/firewall/zone.rst +++ b/docs/configuration/firewall/zone.rst @@ -11,7 +11,7 @@ Overview ******** .. note:: Starting from VyOS 1.4-rolling-202308040557, a new firewall - structure can be found on all vyos instalations. Zone based firewall was + structure can be found on all VyOS installations. Zone based firewall was removed in that version, but re introduced in VyOS 1.4 and 1.5. All versions built after 2023-10-22 has this feature. Documentation for most of the new firewall CLI can be diff --git a/docs/configuration/interfaces/ethernet.rst b/docs/configuration/interfaces/ethernet.rst index bbf52112..a1151fd4 100644 --- a/docs/configuration/interfaces/ethernet.rst +++ b/docs/configuration/interfaces/ethernet.rst @@ -61,6 +61,22 @@ Offloading Enable different types of hardware offloading on the given NIC. + :abbr:`LRO (Large Receive Offload)` is a technique designed to boost the + efficiency of how your computer's network interface card (NIC) processes + incoming network traffic. Typically, network data arrives in smaller chunks + called packets. Processing each packet individually consumes CPU (central + processing unit) resources. Lots of small packets can lead to a performance + bottleneck. Instead of handing the CPU each packet as it comes in, LRO + instructs the NIC to combine multiple incoming packets into a single, larger + packet. This larger packet is then passed to the CPU for processing. + + .. note:: Under some circumstances, LRO is known to modify the packet headers + of forwarded traffic, which breaks the end-to-end principle of computer + networking. LRO is also only able to offload TCP segments encapsulated in + IPv4 packets. Due to these limitations, it is recommended to use GRO + (Generic Receive Offload) where possible. More information on the + limitations of LRO can be found here: https://lwn.net/Articles/358910/ + :abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is meant to deal with cases where device drivers cannot perform the offloads described above. What occurs in GSO is that a given skbuff will have its data @@ -87,13 +103,13 @@ Offloading placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS: - - it can be used with any NIC, - - software filters can easily be added to hash over new protocols, - - it does not increase hardware device interrupt rate (although it does - introduce inter-processor interrupts (IPIs)). + - it can be used with any NIC + - software filters can easily be added to hash over new protocols + - it does not increase hardware device interrupt rate, although it does + introduce inter-processor interrupts (IPIs) - .. note:: In order to use TSO/LRO with VMXNET3 adaters one must also enable - the SG offloading option. + .. note:: In order to use TSO/LRO with VMXNET3 adapters, the SG offloading + option must also be enabled. Authentication (EAPoL) ---------------------- diff --git a/docs/configuration/loadbalancing/reverse-proxy.rst b/docs/configuration/loadbalancing/reverse-proxy.rst index 3d462821..970e084e 100644 --- a/docs/configuration/loadbalancing/reverse-proxy.rst +++ b/docs/configuration/loadbalancing/reverse-proxy.rst @@ -144,7 +144,8 @@ Backend Send a Proxy Protocol version 2 header (binary format) -.. cfgcmd:: set load-balancing reverse-proxy backend <name> ssl ca-certificate <ca-certificate> +.. cfgcmd:: set load-balancing reverse-proxy backend <name> ssl + ca-certificate <ca-certificate> Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate> @@ -154,6 +155,37 @@ Backend Configure requests to the backend server to use SSL encryption without validating server certificate + +HTTP health check +^^^^^^^^^^^^^^^^^ +For web application providing information about their state HTTP health +checks can be used to determine their availability. + +.. cfgcmd:: set load-balancing reverse-proxy backend <name> http-check + + Enables HTTP health checks using OPTION HTTP requests against '/' and + expecting a successful response code in the 200-399 range. + +.. cfgcmd:: set load-balancing reverse-proxy backend <name> http-check + method <method> + + Sets the HTTP method to be used, can be either: option, get, post, put + +.. cfgcmd:: set load-balancing reverse-proxy backend <name> http-check + uri <path> + + Sets the endpoint to be used for health checks + +.. cfgcmd:: set load-balancing reverse-proxy backend <name> http-check + expect <condition> + + Sets the expected result condition for considering a server healthy. + Some possible examples are: + * ``status 200`` Expecting a 200 response code + * ``status 200-399`` Expecting a non-failure response code + * ``string success`` Expecting the string `success` in the response body + + Global ------- @@ -215,6 +247,7 @@ servers (srv01 and srv02) using the round-robin load-balancing algorithm. set load-balancing reverse-proxy backend bk-01 server srv02 address '192.0.2.12' set load-balancing reverse-proxy backend bk-01 server srv02 port '8882' + Balancing based on domain name ------------------------------ The following configuration demonstrates how to use VyOS @@ -295,20 +328,22 @@ connection limit of 4000 and a minimum TLS version of 1.3. set load-balancing reverse-proxy global-parameters max-connections '4000' set load-balancing reverse-proxy global-parameters tls-version-min '1.3' + SSL Bridging ------------- -The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends -to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to +The following configuration terminates incoming HTTPS traffic on the router, +then re-encrypts the traffic and sends to the backend server via HTTPS. +This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server. -Backend service certificates are checked against the certificate authority specified in the configuration, which -could be an internal CA. +Backend service certificates are checked against the certificate authority +specified in the configuration, which could be an internal CA. The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination. -The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend -server has a valid certificate trusted by CA ``cacert`` +The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS +and checks backend server has a valid certificate trusted by CA ``cacert`` .. code-block:: none @@ -325,3 +360,29 @@ server has a valid certificate trusted by CA ``cacert`` set load-balancing reverse-proxy backend bk-bridge-ssl server sr01 address '192.0.2.23' set load-balancing reverse-proxy backend bk-bridge-ssl server sr01 port '443' + +Balancing with HTTP health checks +--------------------------------- + +This configuration enables HTTP health checks on backend servers. + +.. code-block:: none + + set load-balancing reverse-proxy service my-tcp-api backend 'bk-01' + set load-balancing reverse-proxy service my-tcp-api mode 'tcp' + set load-balancing reverse-proxy service my-tcp-api port '8888' + + set load-balancing reverse-proxy backend bk-01 balance 'round-robin' + set load-balancing reverse-proxy backend bk-01 mode 'tcp' + + set load-balancing reverse-proxy backend bk-01 http-check method 'get' + set load-balancing reverse-proxy backend bk-01 http-check uri '/health' + set load-balancing reverse-proxy backend bk-01 http-check expect 'status 200' + + set load-balancing reverse-proxy backend bk-01 server srv01 address '192.0.2.11' + set load-balancing reverse-proxy backend bk-01 server srv01 port '8881' + set load-balancing reverse-proxy backend bk-01 server srv01 check + set load-balancing reverse-proxy backend bk-01 server srv02 address '192.0.2.12' + set load-balancing reverse-proxy backend bk-01 server srv02 port '8882' + set load-balancing reverse-proxy backend bk-01 server srv02 check + diff --git a/docs/configuration/pki/index.rst b/docs/configuration/pki/index.rst index 8fd6fbe8..0ead198f 100644 --- a/docs/configuration/pki/index.rst +++ b/docs/configuration/pki/index.rst @@ -8,7 +8,7 @@ PKI ### -VyOS 1.4 changed the way in how encrytion keys or certificates are stored on the +VyOS 1.4 changed the way in how encryption keys or certificates are stored on the system. In the pre VyOS 1.4 era, certificates got stored under /config and every service referenced a file. That made copying a running configuration from system A to system B a bit harder, as you had to copy the files and their permissions @@ -120,12 +120,12 @@ OpenVPN .. opcmd:: generate pki openvpn shared-secret - Genearate a new OpenVPN shared secret. The generated secret is the output to + Generate a new OpenVPN shared secret. The generated secret is the output to the console. .. opcmd:: generate pki openvpn shared-secret install <name> - Genearate a new OpenVPN shared secret. The generated secret is the output to + Generate a new OpenVPN shared secret. The generated secret is the output to the console. .. include:: pki_cli_import_help.txt @@ -163,7 +163,7 @@ WireGuard the output from op-mode into configuration mode. ``peer`` is used for the VyOS CLI command to identify the WireGuard peer where - this secred is to be used. + this secret is to be used. Key usage (CLI) =============== @@ -365,3 +365,124 @@ also to display them. .. opcmd:: renew certbot Manually trigger certificate renewal. This will be done twice a day. + +Examples +======== + +Create a CA chain and leaf certificates +------------------------------------- + +This configuration generates & installs into the VyOS PKI system a root +certificate authority, alongside two intermediary certificate authorities for +client & server certificates. These CAs are then used to generate a server +certificate for the router, and a client certificate for a user. + + +* ``vyos_root_ca`` is the root certificate authority. + +* ``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, + which are signed by the root CA. + +* ``vyos_cert`` is a leaf server certificate used to identify the VyOS router, + signed by the server intermediary CA. + +* ``vyos_example_user`` is a leaf client certificate used to identify a user, + signed by client intermediary CA. + + +First, we create the root certificate authority. + +.. code-block:: none + + [edit] + vyos@vyos# run generate pki ca install vyos_root_ca + Enter private key type: [rsa, dsa, ec] (Default: rsa) rsa + Enter private key bits: (Default: 2048) 2048 + Enter country code: (Default: GB) GB + Enter state: (Default: Some-State) Some-State + Enter locality: (Default: Some-City) Some-City + Enter organization name: (Default: VyOS) VyOS + Enter common name: (Default: vyos.io) VyOS Root CA + Enter how many days certificate will be valid: (Default: 1825) 1825 + Note: If you plan to use the generated key on this router, do not encrypt the private key. + Do you want to encrypt the private key with a passphrase? [y/N] n + 2 value(s) installed. Use "compare" to see the pending changes, and "commit" to apply. + +Secondly, we create the intermediary certificate authorities, which are used to +sign the leaf certificates. + +.. code-block:: none + + [edit] + vyos@vyos# run generate pki ca sign vyos_root_ca install vyos_server_ca + Do you already have a certificate request? [y/N] n + Enter private key type: [rsa, dsa, ec] (Default: rsa) rsa + Enter private key bits: (Default: 2048) 2048 + Enter country code: (Default: GB) GB + Enter state: (Default: Some-State) Some-State + Enter locality: (Default: Some-City) Some-City + Enter organization name: (Default: VyOS) VyOS + Enter common name: (Default: vyos.io) VyOS Intermediary Server CA + Enter how many days certificate will be valid: (Default: 1825) 1095 + Note: If you plan to use the generated key on this router, do not encrypt the private key. + Do you want to encrypt the private key with a passphrase? [y/N] n + 2 value(s) installed. Use "compare" to see the pending changes, and "commit" to apply. + + + [edit] + vyos@vyos# run generate pki ca sign vyos_root_ca install vyos_client_ca + Do you already have a certificate request? [y/N] n + Enter private key type: [rsa, dsa, ec] (Default: rsa) rsa + Enter private key bits: (Default: 2048) 2048 + Enter country code: (Default: GB) GB + Enter state: (Default: Some-State) Some-State + Enter locality: (Default: Some-City) Some-City + Enter organization name: (Default: VyOS) VyOS + Enter common name: (Default: vyos.io) VyOS Intermediary Client CA + Enter how many days certificate will be valid: (Default: 1825) 1095 + Note: If you plan to use the generated key on this router, do not encrypt the private key. + Do you want to encrypt the private key with a passphrase? [y/N] n + 2 value(s) installed. Use "compare" to see the pending changes, and "commit" to apply. + +Lastly, we can create the leaf certificates that devices and users will utilise. + +.. code-block:: none + + [edit] + vyos@vyos# run generate pki certificate sign vyos_server_ca install vyos_cert + Do you already have a certificate request? [y/N] n + Enter private key type: [rsa, dsa, ec] (Default: rsa) rsa + Enter private key bits: (Default: 2048) 2048 + Enter country code: (Default: GB) GB + Enter state: (Default: Some-State) Some-State + Enter locality: (Default: Some-City) Some-City + Enter organization name: (Default: VyOS) VyOS + Enter common name: (Default: vyos.io) vyos.net + Do you want to configure Subject Alternative Names? [y/N] y + Enter alternative names in a comma separate list, example: ipv4:1.1.1.1,ipv6:fe80::1,dns:vyos.net + Enter Subject Alternative Names: dns:vyos.net,dns:www.vyos.net + Enter how many days certificate will be valid: (Default: 365) 365 + Enter certificate type: (client, server) (Default: server) server + Note: If you plan to use the generated key on this router, do not encrypt the private key. + Do you want to encrypt the private key with a passphrase? [y/N] n + 2 value(s) installed. Use "compare" to see the pending changes, and "commit" to apply. + + + [edit] + vyos@vyos# run generate pki certificate sign vyos_client_ca install vyos_example_user + Do you already have a certificate request? [y/N] n + Enter private key type: [rsa, dsa, ec] (Default: rsa) rsa + Enter private key bits: (Default: 2048) 2048 + Enter country code: (Default: GB) GB + Enter state: (Default: Some-State) Some-State + Enter locality: (Default: Some-City) Some-City + Enter organization name: (Default: VyOS) VyOS + Enter common name: (Default: vyos.io) Example User + Do you want to configure Subject Alternative Names? [y/N] y + Enter alternative names in a comma separate list, example: ipv4:1.1.1.1,ipv6:fe80::1,dns:vyos.net,rfc822:user@vyos.net + Enter Subject Alternative Names: rfc822:example.user@vyos.net + Enter how many days certificate will be valid: (Default: 365) 365 + Enter certificate type: (client, server) (Default: server) client + Note: If you plan to use the generated key on this router, do not encrypt the private key. + Do you want to encrypt the private key with a passphrase? [y/N] n + 2 value(s) installed. Use "compare" to see the pending changes, and "commit" to apply. diff --git a/docs/configuration/policy/route.rst b/docs/configuration/policy/route.rst index 1a85ffc6..45975774 100644 --- a/docs/configuration/policy/route.rst +++ b/docs/configuration/policy/route.rst @@ -19,8 +19,8 @@ from 1 - 999999, at the first match the action of the rule will be executed. Provide a rule-set description. -.. cfgcmd:: set policy route <name> enable-default-log -.. cfgcmd:: set policy route6 <name> enable-default-log +.. cfgcmd:: set policy route <name> default-log +.. cfgcmd:: set policy route6 <name> default-log Option to log packets hitting default-action. @@ -271,4 +271,4 @@ setting a different routing table. .. cfgcmd:: set policy route <name> rule <n> set tcp-mss <500-1460> .. cfgcmd:: set policy route6 <name> rule <n> set tcp-mss <500-1460> - Set packet modifications: Explicitly set TCP Maximum segment size value.
\ No newline at end of file + Set packet modifications: Explicitly set TCP Maximum segment size value. diff --git a/docs/configuration/protocols/isis.rst b/docs/configuration/protocols/isis.rst index 1f779d0a..9b954965 100644 --- a/docs/configuration/protocols/isis.rst +++ b/docs/configuration/protocols/isis.rst @@ -12,7 +12,7 @@ interior gateway protocol (IGP) which is described in ISO10589, algorithm to create a database of the network’s topology, and from that database to determine the best (that is, lowest cost) path to a destination. The intermediate systems (the name for routers) exchange topology -information with their directly conencted neighbors. IS-IS runs directly on +information with their directly connected neighbors. IS-IS runs directly on the data link layer (Layer 2). IS-IS addresses are called :abbr:`NETs (Network Entity Titles)` and can be 8 to 20 bytes long, but are generally 10 bytes long. The tree database that is created with IS-IS is @@ -39,7 +39,7 @@ occur within IS-IS when it comes to said duplication. .. cfgcmd:: set protocols isis net <network-entity-title> - This commad sets network entity title (NET) provided in ISO format. + This command sets network entity title (NET) provided in ISO format. Here is an example :abbr:`NET (Network Entity Title)` value: @@ -52,9 +52,9 @@ occur within IS-IS when it comes to said duplication. * :abbr:`AFI (Address family authority identifier)` - ``49`` The AFI value 49 is what IS-IS uses for private addressing. - * Area identifier: ``0001`` IS-IS area number (numberical area ``1``) + * Area identifier: ``0001`` IS-IS area number (numerical area ``1``) - * System identifier: ``1921.6800.1002`` - for system idetifiers we recommend + * System identifier: ``1921.6800.1002`` - for system identifiers we recommend to use IP address or MAC address of the router itself. The way to construct this is to keep all of the zeroes of the router IP address, and then change the periods from being every three numbers to every four numbers. The diff --git a/docs/configuration/service/broadcast-relay.rst b/docs/configuration/service/broadcast-relay.rst index b6e2bed7..f64bb208 100644 --- a/docs/configuration/service/broadcast-relay.rst +++ b/docs/configuration/service/broadcast-relay.rst @@ -20,7 +20,7 @@ Configuration .. cfgcmd:: set service broadcast-relay id <n> description <description> A description can be added for each and every unique relay ID. This is - useful to distinguish between multiple different ports/appliactions. + useful to distinguish between multiple different ports/applications. .. cfgcmd:: set service broadcast-relay id <n> interface <interface> @@ -35,7 +35,7 @@ Configuration .. cfgcmd:: set service broadcast-relay id <n> port <port> - The UDP port number used by your apllication. It is mandatory for this kind + The UDP port number used by your application. It is mandatory for this kind of operation. .. cfgcmd:: set service broadcast-relay id <n> disable diff --git a/docs/configuration/service/config-sync.rst b/docs/configuration/service/config-sync.rst new file mode 100644 index 00000000..d0449a78 --- /dev/null +++ b/docs/configuration/service/config-sync.rst @@ -0,0 +1,114 @@ +.. _config-sync: + +########### +Config Sync +########### + +Configuration synchronization (config sync) is a feature of VyOS that +permits synchronization of the configuration of one VyOS router to +another in a network. + +The main benefit to configuration synchronization is that it eliminates having +to manually replicate configuration changes made on the primary router to the +secondary (replica) router. + +The writing of the configuration to the secondary router is performed through +the VyOS HTTP API. The user can specify which portion(s) of the configuration will +be synchronized and the mode to use - whether to replace or add. + +To prevent issues with divergent configurations between the pair of routers, +synchronization is strictly unidirectional from primary to replica. Both +routers should be online and run the same version of VyOS. + +Configuration +------------- + +.. cfgcmd:: set service config-sync secondary + <address|key|timeout|port> + + Specify the address, API key, timeout and port of the secondary router. + You need to enable and configure the HTTP API service on the secondary + router for config sync to operate. + +.. cfgcmd:: set service config-sync section <section> + + Specify the section of the configuration to synchronize. If more than one + section is to be synchronized, repeat the command to add additional + sections as required. + +.. cfgcmd:: set service config-sync mode <load|set> + + Two options are available for `mode`: either `load` and replace or `set` + the configuration section. + +.. code-block:: none + + Supported options for <section> include: + firewall + interfaces <interface> + nat + nat66 + pki + policy + protocols <protocol> + qos <interface|policy> + service <service> + system <conntrack| + flow-accounting|option|sflow|static-host-mapping|sysctl|time-zone> + vpn + vrf + +Example +------- +* Synchronize the time-zone and OSPF configuration from Router A to Router B +* The address of Router B is 10.0.20.112 and the port used is 8443 + +Configure the HTTP API service on Router B + +.. code-block:: none + + set service https listen-address '10.0.20.112' + set service https port '8443' + set service https api keys id KID key 'foo' + +Configure the config-sync service on Router A + +.. code-block:: none + + set service config-sync mode 'load' + set service config-sync secondary address '10.0.20.112' + set service config-sync secondary port '8443' + set service config-sync secondary key 'foo' + set service config-sync section protocols 'ospf' + set service config-sync section system 'time-zone' + +Make config-sync relevant changes to Router A's configuration + +.. code-block:: none + + vyos@vyos-A# set system time-zone 'America/Los_Angeles' + vyos@vyos-A# commit + INFO:vyos_config_sync:Config synchronization: Mode=load, + Secondary=10.0.20.112 + vyos@vyos-A# save + + vyos@vyos-A# set protocols ospf area 0 network '10.0.48.0/30' + vyos@vyos-A# commit + INFO:vyos_config_sync:Config synchronization: Mode=load, + Secondary=10.0.20.112 + yos@vyos-A# save + +Verify configuration changes have been replicated to Router B + +.. code-block:: none + + vyos@vyos-B:~$ show configuration commands | match time-zone + set system time-zone 'America/Los_Angeles' + + vyos@vyos-B:~$ show configuration commands | match ospf + set protocols ospf area 0 network '10.0.48.0/30' + +Known issues +------------ +Configuration resynchronization. With the current implementation of `service +config-sync`, the secondary node must be online. diff --git a/docs/configuration/service/conntrack-sync.rst b/docs/configuration/service/conntrack-sync.rst index db23c92f..232db1a8 100644 --- a/docs/configuration/service/conntrack-sync.rst +++ b/docs/configuration/service/conntrack-sync.rst @@ -29,7 +29,7 @@ will be mandatorily defragmented. It is possible to use either Multicast or Unicast to sync conntrack traffic. Most examples below show Multicast, but unicast can be specified by using the -"peer" keywork after the specificed interface, as in the following example: +"peer" keywork after the specified interface, as in the following example: :cfgcmd:`set service conntrack-sync interface eth0 peer 192.168.0.250` @@ -204,7 +204,7 @@ Now configure conntrack-sync service on ``router1`` **and** ``router2`` .. code-block:: none - set high-availablilty vrrp group internal virtual-address ... etc ... + set high-availability vrrp group internal virtual-address ... etc ... set high-availability vrrp sync-group syncgrp member 'internal' set service conntrack-sync accept-protocol 'tcp' set service conntrack-sync accept-protocol 'udp' diff --git a/docs/configuration/service/https.rst b/docs/configuration/service/https.rst index 973c5355..af397456 100644 --- a/docs/configuration/service/https.rst +++ b/docs/configuration/service/https.rst @@ -53,7 +53,11 @@ Configuration .. cfgcmd:: set service https vrf <name> - Start Webserver in given VRF. + Start Webserver in given VRF. + +.. cfgcmd:: set service https request-body-size-limit <size> + + Set the maximum request body size in megabytes. Default is 1MB. API === @@ -70,7 +74,36 @@ API .. cfgcmd:: set service https api strict - Enforce strict path checking + Enforce strict path checking. + +.. cfgcmd:: set service https api cors allow-origin <origin> + + Allow cross-origin requests from `<origin>`. + +GraphQL +======= + +.. cfgcmd:: set service https api graphql introspection + + Enable GraphQL Schema introspection. + +.. note:: Do not leave introspection enabled in production, it is a security risk. + +.. cfgcmd:: set service https api graphql authentication type <key | token> + + Set the authentication type for GraphQL, default option is key. Available options are: + + * ``key`` use API keys configured in ``service https api keys`` + + * ``token`` use JWT tokens. + +.. cfgcmd:: set service https api graphql authentication expiration + + Set the lifetime for JWT tokens in seconds. Default is 3600 seconds. + +.. cfgcmd:: set service https api graphql authentication secret-length + + Set the byte length of the JWT secret. Default is 32. ********************* Example Configuration diff --git a/docs/configuration/service/ids.rst b/docs/configuration/service/ids.rst index 3e508d50..8a64467f 100644 --- a/docs/configuration/service/ids.rst +++ b/docs/configuration/service/ids.rst @@ -33,7 +33,7 @@ Configuration Configure direction for processing traffic. .. cfgcmd:: set service ids ddos-protection exclude-network <x.x.x.x/x> -.. cfgcmd:: set service ids ddos-protection exlude-network <h:h:h:h:h:h:h:h/x> +.. cfgcmd:: set service ids ddos-protection exclude-network <h:h:h:h:h:h:h:h/x> Specify IPv4 and/or IPv6 networks which are going to be excluded. @@ -56,7 +56,7 @@ Configuration .. cfgcmd:: set service ids ddos-protection sflow port <1-65535> - Configure port number to be used for sflow conection. Default port is 6343. + Configure port number to be used for sflow connection. Default port is 6343. .. cfgcmd:: set service ids ddos-protection threshold general [fps | mbps | pps] <0-4294967294> @@ -96,7 +96,7 @@ In this simplified scenario, main things to be considered are: * Interface **eth0** used to connect to upstream. Since we are analyzing attacks to and from our internal network, two types -of attacks can be identified, and differents actions are needed: +of attacks can be identified, and different actions are needed: * External attack: an attack from the internet towards an internal IP is identify. In this case, all connections towards such IP will be diff --git a/docs/configuration/service/index.rst b/docs/configuration/service/index.rst index 56ce55eb..abb77ef4 100644 --- a/docs/configuration/service/index.rst +++ b/docs/configuration/service/index.rst @@ -8,6 +8,7 @@ Service :includehidden: broadcast-relay + config-sync conntrack-sync console-server dhcp-relay diff --git a/docs/configuration/service/ipoe-server.rst b/docs/configuration/service/ipoe-server.rst index 64048552..ef06bcd5 100644 --- a/docs/configuration/service/ipoe-server.rst +++ b/docs/configuration/service/ipoe-server.rst @@ -26,13 +26,13 @@ functionality as PPPoE, but in a less robust manner. Configuring IPoE Server *********************** -IPoE can be configure on different interfaces, it will depend on each specific -situation which interface will provide IPoE to clients. The clients mac address +IPoE can be configured on different interfaces, it will depend on each specific +situation which interface will provide IPoE to clients. The client's mac address and the incoming interface is being used as control parameter, to authenticate a client. The example configuration below will assign an IP to the client on the incoming -interface eth2 with the client mac address 08:00:27:2f:d8:06. Other DHCP +interface eth1 with the client mac address 00:50:79:66:68:00. Other DHCP discovery requests will be ignored, unless the client mac has been enabled in the configuration. @@ -85,12 +85,11 @@ the configuration. .. cfgcmd:: set service ipoe-server interface <interface> mode <l2 | l3> - Set authentication backend. The configured authentication backend is used - for all queries. + Specifies the client connectivity mode. * **l2**: It means that clients are on same network where interface is.**(default)** - * **local**: It means that client are behind some router. + * **l3**: It means that client are behind some router. .. cfgcmd:: set service ipoe-server interface <interface> network <shared | vlan> @@ -279,7 +278,7 @@ IPv6 .. code-block:: none set service ipoe-server client-ipv6-pool IPv6-POOL delegate '2001:db8:8003::/48' delegation-prefix '56' - set service ipoe-server client-ipv6-pool IPV6-POOL prefix '2001:db8:8002::/48' mask '64' + set service ipoe-server client-ipv6-pool IPv6-POOL prefix '2001:db8:8002::/48' mask '64' set service ipoe-server default-ipv6-pool IPv6-POOL ********* @@ -434,7 +433,7 @@ Toubleshooting .. code-block:: none - vyos@vyos:~$sudo journalctl -u accel-ppp@ipoe -b 0 + vyos@vyos:~$ show log ipoe-server Feb 27 14:29:27 vyos accel-ipoe[2262]: eth1.100:: recv [DHCPv4 Discover xid=55df9228 chaddr=0c:98:bd:b8:00:01 <Message-Type Discover> <Request-IP 192.168.0.3> <Host-Name vyos> <Request-List Subnet,Broadcast,Router,DNS,Classless-Route,Domain-Name,MTU>] Feb 27 14:29:27 vyos accel-ipoe[2262]: eth1.100:eth1.100: eth1.100: authentication succeeded @@ -447,4 +446,4 @@ Toubleshooting .. include:: /_include/common-references.txt .. _dictionary: https://github.com/accel-ppp/accel-ppp/blob/master/accel-pppd/radius/dict/dictionary.rfc6911 -.. _`ACCEL-PPP attribute`: https://github.com/accel-ppp/accel-ppp/blob/master/accel-pppd/radius/dict/dictionary.accel
\ No newline at end of file +.. _`ACCEL-PPP attribute`: https://github.com/accel-ppp/accel-ppp/blob/master/accel-pppd/radius/dict/dictionary.accel diff --git a/docs/configuration/service/ntp.rst b/docs/configuration/service/ntp.rst index e7ee392b..266376cf 100644 --- a/docs/configuration/service/ntp.rst +++ b/docs/configuration/service/ntp.rst @@ -46,9 +46,9 @@ Configuration There are 3 default NTP server set. You are able to change them. - * ``0.pool.ntp.org`` - * ``1.pool.ntp.org`` - * ``2.pool.ntp.org`` + * ``time1.vyos.net`` + * ``time2.vyos.net`` + * ``time3.vyos.net`` .. cfgcmd:: set service ntp server <address> <noselect | nts | pool | prefer> @@ -85,7 +85,7 @@ Configuration .. cfgcmd:: set service ntp leap-second [ignore|smear|system|timezone] - Define how to handle leaf-seonds. + Define how to handle leap-seconds. * `ignore`: No correction is applied to the clock for the leap second. The clock will be corrected later in normal operation when new measurements are diff --git a/docs/configuration/service/pppoe-server.rst b/docs/configuration/service/pppoe-server.rst index 99b3fbb5..d9a16036 100644 --- a/docs/configuration/service/pppoe-server.rst +++ b/docs/configuration/service/pppoe-server.rst @@ -24,7 +24,6 @@ Configuring PPPoE Server set service pppoe-server authentication local-users username test password 'test' set service pppoe-server client-ip-pool PPPOE-POOL range 192.168.255.2-192.168.255.254 set service pppoe-server default-pool 'PPPOE-POOL' - set service pppoe-server outside-address 192.0.2.2 set service pppoe-server gateway-address 192.168.255.1 set service pppoe-server interface eth0 @@ -374,7 +373,7 @@ IPv6 set service pppoe-server ppp-options ipv6 allow set service pppoe-server client-ipv6-pool IPv6-POOL delegate '2001:db8:8003::/48' delegation-prefix '56' - set service pppoe-server client-ipv6-pool IPV6-POOL prefix '2001:db8:8002::/48' mask '64' + set service pppoe-server client-ipv6-pool IPv6-POOL prefix '2001:db8:8002::/48' mask '64' set service pppoe-server default-ipv6-pool IPv6-POOL IPv6 Advanced Options diff --git a/docs/configuration/service/router-advert.rst b/docs/configuration/service/router-advert.rst index ca558b6a..8f984b10 100644 --- a/docs/configuration/service/router-advert.rst +++ b/docs/configuration/service/router-advert.rst @@ -38,7 +38,7 @@ Configuration "Cur Hop Limit", "hop-limit", "Hop count field of the outgoing RA packets" """Managed address configuration"" flag", "managed-flag", "Tell hosts to use the administered stateful protocol (i.e. DHCP) for autoconfiguration" """Other configuration"" flag", "other-config-flag", "Tell hosts to use the administered (stateful) protocol (i.e. DHCP) for autoconfiguration of other (non-address) information" - "MTU","link-mtu","Link MTU value placed in RAs, exluded in RAs if unset" + "MTU","link-mtu","Link MTU value placed in RAs, excluded in RAs if unset" "Router Lifetime","default-lifetime","Lifetime associated with the default router in units of seconds" "Reachable Time","reachable-time","Time, in milliseconds, that a node assumes a neighbor is reachable after having received a reachability confirmation" "Retransmit Timer","retrans-timer","Time in milliseconds between retransmitted Neighbor Solicitation messages" diff --git a/docs/configuration/service/salt-minion.rst b/docs/configuration/service/salt-minion.rst index aa747c36..8638246b 100644 --- a/docs/configuration/service/salt-minion.rst +++ b/docs/configuration/service/salt-minion.rst @@ -17,7 +17,7 @@ Requirements ************ To use the Salt-Minion, a running Salt-Master is required. You can find more -in the `Salt Poject Documentaion +in the `Salt Project Documentation <https://docs.saltproject.io/en/latest/contents.html>`_ ************* diff --git a/docs/configuration/system/conntrack.rst b/docs/configuration/system/conntrack.rst index 6ed5fef7..1401e02e 100644 --- a/docs/configuration/system/conntrack.rst +++ b/docs/configuration/system/conntrack.rst @@ -94,7 +94,7 @@ states. .. cfgcmd:: set system conntrack timeout udp stream <1-21474836> :defaultvalue: - Set the timeout in secounds for a protocol or state. + Set the timeout in seconds for a protocol or state. You can also define custom timeout values to apply to a specific subset of connections, based on a packet and flow selector. To do this, you need to @@ -172,7 +172,7 @@ create a rule defining the packet and flow selector. .. cfgcmd:: set system conntrack timeout custom [ipv4 | ipv6] rule <1-999999> protocol udp unreplied <1-21474836> - Set the timeout in secounds for a protocol or state in a custom rule. + Set the timeout in seconds for a protocol or state in a custom rule. Conntrack ignore rules ====================== diff --git a/docs/configuration/system/flow-accounting.rst b/docs/configuration/system/flow-accounting.rst index 8d46b178..30d6fc4d 100644 --- a/docs/configuration/system/flow-accounting.rst +++ b/docs/configuration/system/flow-accounting.rst @@ -50,7 +50,7 @@ interface, the interface must be configured for flow accounting. Configure and enable collection of flow information for the interface identified by `<interface>`. - You can configure multiple interfaces which whould participate in flow + You can configure multiple interfaces which would participate in flow accounting. .. note:: Will be recorded only packets/flows on **incoming** direction in diff --git a/docs/configuration/system/host-name.rst b/docs/configuration/system/host-name.rst index d062fc62..4d1567bf 100644 --- a/docs/configuration/system/host-name.rst +++ b/docs/configuration/system/host-name.rst @@ -65,4 +65,4 @@ This section shows how to statically map an IP address to a hostname for local Thus the address configured as :cfgcmd:`set system static-host-mapping host-name <hostname> inet <address>` can be reached via multiple names. - Multiple aliases can pe specified per host-name. + Multiple aliases can be specified per host-name. diff --git a/docs/configuration/system/ip.rst b/docs/configuration/system/ip.rst index 279630e2..a422388f 100644 --- a/docs/configuration/system/ip.rst +++ b/docs/configuration/system/ip.rst @@ -30,7 +30,7 @@ System configuration commands Zebra/Kernel route filtering ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ -Zebra supports prefix-lists and Route Mapss to match routes received from +Zebra supports prefix-lists and Route Maps to match routes received from other FRR components. The permit/deny facilities provided by these commands can be used to filter which routes zebra will install in the kernel. @@ -48,7 +48,7 @@ Nexthop Tracking Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if -you do not wan't to e.g. allow BGP to peer across the default route. +you do not want to e.g. allow BGP to peer across the default route. .. cfgcmd:: set system ip nht no-resolve-via-default diff --git a/docs/configuration/system/ipv6.rst b/docs/configuration/system/ipv6.rst index d8d3c4c9..cde7a2aa 100644 --- a/docs/configuration/system/ipv6.rst +++ b/docs/configuration/system/ipv6.rst @@ -26,7 +26,7 @@ System configuration commands Zebra/Kernel route filtering ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ -Zebra supports prefix-lists and Route Mapss to match routes received from +Zebra supports prefix-lists and Route Maps to match routes received from other FRR components. The permit/deny facilities provided by these commands can be used to filter which routes zebra will install in the kernel. @@ -44,7 +44,7 @@ Nexthop Tracking Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if -you do not wan't to e.g. allow BGP to peer across the default route. +you do not want to e.g. allow BGP to peer across the default route. .. cfgcmd:: set system ipv6 nht no-resolve-via-default diff --git a/docs/configuration/system/option.rst b/docs/configuration/system/option.rst index 02c889dd..44c66186 100644 --- a/docs/configuration/system/option.rst +++ b/docs/configuration/system/option.rst @@ -88,7 +88,7 @@ Keyboard Layout *************** When starting a VyOS live system (the installation CD) the configured keyboard -layout defaults to US. As this might not suite everyones use case you can adjust +layout defaults to US. As this might not suite everyone's use case you can adjust the used keyboard layout on the system console. .. cfgcmd:: set system option keyboard-layout <us | fr | de | fi | no | dk> diff --git a/docs/configuration/system/sflow.rst b/docs/configuration/system/sflow.rst index c2cf5a80..0c8bf03b 100644 --- a/docs/configuration/system/sflow.rst +++ b/docs/configuration/system/sflow.rst @@ -29,7 +29,7 @@ Configuration Configure and enable collection of flow information for the interface identified by <interface>. - You can configure multiple interfaces which whould participate in sflow accounting. + You can configure multiple interfaces which would participate in sflow accounting. .. cfgcmd:: set system sflow polling <sec> diff --git a/docs/configuration/system/syslog.rst b/docs/configuration/system/syslog.rst index 8755d905..cc7ac676 100644 --- a/docs/configuration/system/syslog.rst +++ b/docs/configuration/system/syslog.rst @@ -45,7 +45,7 @@ Custom File .. cfgcmd:: set system syslog file <filename> archive file <number> - Syslog uses logrotate to rotate logiles after a number of gives bytes. + Syslog uses logrotate to rotate logfiles after a number of gives bytes. We keep as many as `<number>` rotated file before they are deleted on the system. @@ -200,7 +200,7 @@ Display Logs .. opcmd:: show log [all | authorization | cluster | conntrack-sync | ...] Display log files of given category on the console. Use tab completion to get - a list of available categories. Thos categories could be: all, authorization, + a list of available categories. Those categories could be: all, authorization, cluster, conntrack-sync, dhcp, directory, dns, file, firewall, https, image lldp, nat, openvpn, snmp, tail, vpn, vrrp diff --git a/docs/configuration/system/task-scheduler.rst b/docs/configuration/system/task-scheduler.rst index 382da39f..4a754ba3 100644 --- a/docs/configuration/system/task-scheduler.rst +++ b/docs/configuration/system/task-scheduler.rst @@ -7,7 +7,7 @@ Task Scheduler The task scheduler allows you to execute tasks on a given schedule. It makes use of UNIX cron_. -.. note:: All scripts excecuted this way are executed as root user - this may +.. note:: All scripts executed this way are executed as root user - this may be dangerous. Together with :ref:`command-scripting` this can be used for automating (re-)configuration. diff --git a/docs/configuration/trafficpolicy/index.rst b/docs/configuration/trafficpolicy/index.rst index 3463592f..f99c2a66 100644 --- a/docs/configuration/trafficpolicy/index.rst +++ b/docs/configuration/trafficpolicy/index.rst @@ -368,7 +368,7 @@ are to be sent, they could get dropped when trying to get enqueued at the tail. This can happen if the queue has still not been able to release enough packets from its head. -This is the policy that requieres the lowest resources for the same +This is the policy that requires the lowest resources for the same amount of traffic. But **very likely you do not need it as you cannot get much from it. Sometimes it is used just to enable logging.** @@ -504,7 +504,7 @@ and increase `interval` to something around 150 ms. the number of sub-queues (default: 1024) into which packets are classified. -.. cfgcmd:: set qos policy fq-codel <policy name> interval <miliseconds> +.. cfgcmd:: set qos policy fq-codel <policy name> interval <milliseconds> Use this command to configure an fq-codel policy, set its name and the time period used by the control loop of CoDel to detect when a @@ -518,7 +518,7 @@ and increase `interval` to something around 150 ms. define a hard limit on the real queue size. When this limit is reached, new packets are dropped (default: 10240 packets). -.. cfgcmd:: set qos policy fq-codel <policy-name> target <miliseconds> +.. cfgcmd:: set qos policy fq-codel <policy-name> target <milliseconds> Use this command to configure an fq-codel policy, set its name, and define the acceptable minimum standing/persistent queue delay. This @@ -710,7 +710,7 @@ continuously, packets from lower priority classes will only be transmitted after traffic volume from higher priority classes decreases. -.. note:: In Priority Queue we do not define clases with a meaningless +.. note:: In Priority Queue we do not define classes with a meaningless class ID number but with a class priority number (1-7). The lower the number, the higher the priority. @@ -912,7 +912,7 @@ In principle, values must be Rate Control ------------ -| **Queueing discipline:** Tocken Bucket Filter. +| **Queueing discipline:** Token Bucket Filter. | **Applies to:** Outbound traffic. Rate-Control is a classless policy that limits the packet flow to a set @@ -1145,6 +1145,74 @@ A simple example of Shaper using priorities. set qos policy shaper MY-HTB default priority '7' set qos policy shaper MY-HTB default queue-type 'fair-queue' +.. _CAKE: + +CAKE +------ + +| **Queueing discipline:** Deficit mode. +| **Applies to:** Outbound traffic. + +`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management +system, implemented as a queue discipline (qdisc) for the Linux kernel. It is +designed to replace and improve upon the complex hierarchy of simple qdiscs +presently required to effectively tackle the bufferbloat problem at the network +edge. + +.. cfgcmd:: set qos policy cake <text> bandwidth <value> + + Set the shaper bandwidth, either as an explicit bitrate or a percentage + of the interface bandwidth. + +.. cfgcmd:: set qos policy cake <text> description + + Set a description for the shaper. + +.. cfgcmd:: set qos policy cake <text> flow-isolation blind + + Disables flow isolation, all traffic passes through a single queue. + +.. cfgcmd:: set qos policy cake <text> flow-isolation dst-host + + Flows are defined only by destination address. + +.. cfgcmd:: set qos policy cake <text> flow-isolation dual-dst-host + + Flows are defined by the 5-tuple. Fairness is applied first over destination + addresses, then over individual flows. + +.. cfgcmd:: set qos policy cake <text> flow-isolation dual-src-host + + Flows are defined by the 5-tuple. Fairness is applied first over source + addresses, then over individual flows. + +.. cfgcmd:: set qos policy cake <text> flow-isolation flow + + Flows are defined by the entire 5-tuple (source IP address, source port, + destination IP address, destination port, transport protocol). + +.. cfgcmd:: set qos policy cake <text> flow-isolation host + + Flows are defined by source-destination host pairs. + +.. cfgcmd:: set qos policy cake <text> flow-isolation nat + + Perform NAT lookup before applying flow-isolation rules. + +.. cfgcmd:: set qos policy cake <text> flow-isolation src-host + + Flows are defined only by source address. + +.. cfgcmd:: set qos policy cake <text> flow-isolation triple-isolate + + **(Default)** Flows are defined by the 5-tuple, fairness is applied over source and + destination addresses and also over individual flows. + +.. cfgcmd:: set qos policy cake <text> rtt + + Defines the round-trip time used for active queue management (AQM) in + milliseconds. The default value is 100. + Applying a traffic policy ========================= @@ -1220,5 +1288,6 @@ That is how it is possible to do the so-called "ingress shaping". .. _tocken bucket: https://en.wikipedia.org/wiki/Token_bucket .. _HFSC: https://en.wikipedia.org/wiki/Hierarchical_fair-service_curve .. _Intermediate Functional Block: https://www.linuxfoundation.org/collaborate/workgroups/networking/ifb +.. _Common Applications Kept Enhanced: https://www.bufferbloat.net/projects/codel/wiki/Cake/ .. start_vyoslinter diff --git a/docs/configuration/vpn/l2tp.rst b/docs/configuration/vpn/l2tp.rst index f0c60ec1..b64c91a9 100644 --- a/docs/configuration/vpn/l2tp.rst +++ b/docs/configuration/vpn/l2tp.rst @@ -318,7 +318,7 @@ IPv6 set vpn l2tp remote-access ppp-options ipv6 allow set vpn l2tp remote-access client-ipv6-pool IPv6-POOL delegate '2001:db8:8003::/48' delegation-prefix '56' - set vpn l2tp remote-access client-ipv6-pool IPV6-POOL prefix '2001:db8:8002::/48' mask '64' + set vpn l2tp remote-access client-ipv6-pool IPv6-POOL prefix '2001:db8:8002::/48' mask '64' set vpn l2tp remote-access default-ipv6-pool IPv6-POOL IPv6 Advanced Options diff --git a/docs/configuration/vpn/pptp.rst b/docs/configuration/vpn/pptp.rst index 2a5e7731..5220929f 100644 --- a/docs/configuration/vpn/pptp.rst +++ b/docs/configuration/vpn/pptp.rst @@ -242,7 +242,7 @@ IPv6 set vpn pptp remote-access ppp-options ipv6 allow set vpn pptp remote-access client-ipv6-pool IPv6-POOL delegate '2001:db8:8003::/48' delegation-prefix '56' - set vpn pptp remote-access client-ipv6-pool IPV6-POOL prefix '2001:db8:8002::/48' mask '64' + set vpn pptp remote-access client-ipv6-pool IPv6-POOL prefix '2001:db8:8002::/48' mask '64' set vpn pptp remote-access default-ipv6-pool IPv6-POOL IPv6 Advanced Options diff --git a/docs/configuration/vpn/sstp.rst b/docs/configuration/vpn/sstp.rst index 3749eb7b..cc942ee5 100644 --- a/docs/configuration/vpn/sstp.rst +++ b/docs/configuration/vpn/sstp.rst @@ -276,7 +276,7 @@ IPv6 set vpn sstp ppp-options ipv6 allow set vpn sstp client-ipv6-pool IPv6-POOL delegate '2001:db8:8003::/48' delegation-prefix '56' - set vpn sstp client-ipv6-pool IPV6-POOL prefix '2001:db8:8002::/48' mask '64' + set vpn sstp client-ipv6-pool IPv6-POOL prefix '2001:db8:8002::/48' mask '64' set vpn sstp default-ipv6-pool IPv6-POOL IPv6 Advanced Options diff --git a/docs/configuration/vrf/index.rst b/docs/configuration/vrf/index.rst index 67eba886..0d6b895f 100644 --- a/docs/configuration/vrf/index.rst +++ b/docs/configuration/vrf/index.rst @@ -43,7 +43,7 @@ then enslaved to a VRF device. Zebra/Kernel route filtering ---------------------------- -Zebra supports prefix-lists and Route Mapss to match routes received from +Zebra supports prefix-lists and Route Maps to match routes received from other FRR components. The permit/deny facilities provided by these commands can be used to filter which routes zebra will install in the kernel. @@ -72,7 +72,7 @@ Nexthop Tracking Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if -you do not wan't to e.g. allow BGP to peer across the default route. +you do not want to e.g. allow BGP to peer across the default route. .. cfgcmd:: set vrf name <name> ip nht no-resolve-via-default diff --git a/docs/contributing/testing.rst b/docs/contributing/testing.rst index 78860c06..f5d3db52 100644 --- a/docs/contributing/testing.rst +++ b/docs/contributing/testing.rst @@ -57,6 +57,9 @@ The script only searches for executable "test-cases" under .. note:: As Smoketests will alter the system configuration and you are logged in remote you may loose your connection to the system. +.. note:: To enable smoketest debugging (print of the CLI set commands used) + you can run: ``touch /tmp/vyos.smoketest.debug``. + Manual Smoketest Run -------------------- diff --git a/docs/operation/raid.rst b/docs/operation/raid.rst index 30407718..642a7332 100644 --- a/docs/operation/raid.rst +++ b/docs/operation/raid.rst @@ -24,7 +24,7 @@ The VyOS implementation of RAID 1 allows the following: * The ability to replace a failed disk and initiate re-mirroring * The ability to monitor the status of remirroring -.. _raid_instalation: +.. _raid_installation: Installation Implications ========================= |