From cd705fbfb581172bbe2ac3366712088e53775ea4 Mon Sep 17 00:00:00 2001 From: rebortg <24626486+rebortg@users.noreply.github.com> Date: Mon, 15 Apr 2024 06:02:35 +0000 Subject: Github: update translations --- docs/_locale/de/LC_MESSAGES/configexamples.mo | Bin 129499 -> 131703 bytes docs/_locale/de/LC_MESSAGES/configuration.mo | Bin 1222203 -> 1234233 bytes docs/_locale/de/LC_MESSAGES/contributing.mo | Bin 116865 -> 116864 bytes docs/_locale/de/configexamples.pot | 60 + docs/_locale/de/configuration.pot | 400 +- docs/_locale/de/contributing.pot | 2 +- docs/_locale/en/LC_MESSAGES/configexamples.mo | Bin 129488 -> 131692 bytes docs/_locale/en/LC_MESSAGES/configuration.mo | Bin 1222164 -> 1234194 bytes docs/_locale/es/LC_MESSAGES/configexamples.mo | Bin 137304 -> 139508 bytes docs/_locale/es/LC_MESSAGES/configuration.mo | Bin 1302534 -> 1314564 bytes docs/_locale/es/configexamples.pot | 60 + docs/_locale/es/configuration.pot | 400 +- docs/_locale/ja/LC_MESSAGES/configexamples.mo | Bin 129475 -> 131679 bytes docs/_locale/ja/LC_MESSAGES/configuration.mo | Bin 1222151 -> 1234181 bytes docs/_locale/ja/configexamples.pot | 60 + docs/_locale/ja/configuration.pot | 400 +- docs/_locale/pt/LC_MESSAGES/configexamples.mo | Bin 129496 -> 131700 bytes docs/_locale/pt/LC_MESSAGES/configuration.mo | Bin 1222172 -> 1234202 bytes docs/_locale/pt/configexamples.pot | 60 + docs/_locale/pt/configuration.pot | 400 +- docs/_locale/uk/404.pot | 10 +- docs/_locale/uk/LC_MESSAGES/404.mo | Bin 1275 -> 1454 bytes docs/_locale/uk/LC_MESSAGES/automation.mo | Bin 67511 -> 80225 bytes docs/_locale/uk/LC_MESSAGES/cli.mo | Bin 32625 -> 43191 bytes docs/_locale/uk/LC_MESSAGES/configexamples.mo | Bin 129565 -> 175229 bytes docs/_locale/uk/LC_MESSAGES/configuration.mo | Bin 1222241 -> 1631838 bytes docs/_locale/uk/LC_MESSAGES/contributing.mo | Bin 114603 -> 151720 bytes docs/_locale/uk/LC_MESSAGES/copyright.mo | Bin 2055 -> 2710 bytes docs/_locale/uk/LC_MESSAGES/documentation.mo | Bin 26775 -> 34715 bytes docs/_locale/uk/LC_MESSAGES/index.mo | Bin 3929 -> 4783 bytes docs/_locale/uk/LC_MESSAGES/installation.mo | Bin 103501 -> 140114 bytes docs/_locale/uk/LC_MESSAGES/introducing.mo | Bin 14213 -> 18655 bytes docs/_locale/uk/LC_MESSAGES/operation.mo | Bin 19849 -> 26874 bytes docs/_locale/uk/LC_MESSAGES/quick-start.mo | Bin 23681 -> 26414 bytes docs/_locale/uk/LC_MESSAGES/troubleshooting.mo | Bin 12387 -> 16552 bytes docs/_locale/uk/automation.pot | 386 +- docs/_locale/uk/cli.pot | 214 +- docs/_locale/uk/configexamples.pot | 1184 ++-- docs/_locale/uk/configuration.pot | 8642 ++++++++++++------------ docs/_locale/uk/contributing.pot | 794 +-- docs/_locale/uk/copyright.pot | 10 +- docs/_locale/uk/documentation.pot | 186 +- docs/_locale/uk/index.pot | 38 +- docs/_locale/uk/installation.pot | 910 +-- docs/_locale/uk/introducing.pot | 70 +- docs/_locale/uk/operation.pot | 150 +- docs/_locale/uk/quick-start.pot | 72 +- docs/_locale/uk/troubleshooting.pot | 140 +- 48 files changed, 7944 insertions(+), 6704 deletions(-) (limited to 'docs/_locale') diff --git a/docs/_locale/de/LC_MESSAGES/configexamples.mo b/docs/_locale/de/LC_MESSAGES/configexamples.mo index d0746d0d..a4fde59a 100644 Binary files a/docs/_locale/de/LC_MESSAGES/configexamples.mo and b/docs/_locale/de/LC_MESSAGES/configexamples.mo differ diff --git a/docs/_locale/de/LC_MESSAGES/configuration.mo b/docs/_locale/de/LC_MESSAGES/configuration.mo index a841cbee..0f5432f2 100644 Binary files a/docs/_locale/de/LC_MESSAGES/configuration.mo and b/docs/_locale/de/LC_MESSAGES/configuration.mo differ diff --git a/docs/_locale/de/LC_MESSAGES/contributing.mo b/docs/_locale/de/LC_MESSAGES/contributing.mo index 1acfd8cb..ed62e819 100644 Binary files a/docs/_locale/de/LC_MESSAGES/contributing.mo and b/docs/_locale/de/LC_MESSAGES/contributing.mo differ diff --git a/docs/_locale/de/configexamples.pot b/docs/_locale/de/configexamples.pot index 23ff7ae0..94068912 100644 --- a/docs/_locale/de/configexamples.pot +++ b/docs/_locale/de/configexamples.pot @@ -318,6 +318,14 @@ msgstr "Active Directory on Windows server" msgid "Add (temporary) default route" msgstr "Add (temporary) default route" +#: ../../configexamples/ansible.rst:99 +msgid "Add a simple playbook with the tasks for each router:" +msgstr "Add a simple playbook with the tasks for each router:" + +#: ../../configexamples/ansible.rst:73 +msgid "Add all the VyOS hosts:" +msgstr "Add all the VyOS hosts:" + #: ../../configexamples/ansible.rst:73 msgid "Add all the hosts of VyOS:" msgstr "Add all the hosts of VyOS:" @@ -350,6 +358,10 @@ msgstr "After all is done and commit, let's take a look if the Wireguard interfa msgid "After configured all the VRFs involved in this topology we take a deeper look at both BGP and Routing table for the VRF LAN1" msgstr "After configured all the VRFs involved in this topology we take a deeper look at both BGP and Routing table for the VRF LAN1" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 +msgid "After some testing, we can check IPSec status, and counter on every tunnel:" +msgstr "After some testing, we can check IPSec status, and counter on every tunnel:" + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 msgid "After some testing, we can check ipsec status, and counter on every tunnel:" msgstr "After some testing, we can check ipsec status, and counter on every tunnel:" @@ -378,6 +390,14 @@ msgstr "All traffic coming in through eth2 is balanced between eth0 and eth1 on msgid "Allow DHCPv6 packets for router" msgstr "Allow DHCPv6 packets for router" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:34 +msgid "Allow DNS requests only only for local networks." +msgstr "Allow DNS requests only only for local networks." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:36 +msgid "Allow ICMP on all interfaces." +msgstr "Allow ICMP on all interfaces." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:32 msgid "Allow access to the router only from trusted networks." msgstr "Allow access to the router only from trusted networks." @@ -571,6 +591,10 @@ msgstr "Basic Firewall" msgid "Basic Setup (via console)" msgstr "Basic Setup (via console)" +#: ../../configexamples/ansible.rst:64 +msgid "Basic configuration of ansible.cfg:" +msgstr "Basic configuration of ansible.cfg:" + #: ../../configexamples/ansible.rst:64 msgid "Basik configuration of the ansible.cfg:" msgstr "Basik configuration of the ansible.cfg:" @@ -664,6 +688,10 @@ msgstr "Client" msgid "Client configuration" msgstr "Client configuration" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 +msgid "Communication between private subnets should be done through IPSec tunnel without NAT." +msgstr "Communication between private subnets should be done through IPSec tunnel without NAT." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 msgid "Communication between private subnets should be done through ipsec tunnel without nat." msgstr "Communication between private subnets should be done through ipsec tunnel without nat." @@ -1012,6 +1040,10 @@ msgstr "For home network users, most of time ISP only provides /64 prefix, hence msgid "For redundant / active-active configurations see :ref:`examples-azure-vpn-dual-bgp`" msgstr "For redundant / active-active configurations see :ref:`examples-azure-vpn-dual-bgp`" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 +msgid "For simplicity, configuration and tests are done only using IPv4, and firewall configuration is done only on one router." +msgstr "For simplicity, configuration and tests are done only using IPv4, and firewall configuration is done only on one router." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 msgid "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." msgstr "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." @@ -1217,6 +1249,10 @@ msgstr "In the end, you'll get a powerful instrument for monitoring the VyOS sys msgid "In the end, you will end up with something like this config. I took out everything but the Firewall, Interfaces, and zone-policy sections. It is long enough as is." msgstr "In the end, you will end up with something like this config. I took out everything but the Firewall, Interfaces, and zone-policy sections. It is long enough as is." +#: ../../configexamples/ansible.rst:216 +msgid "In the next chapter of the example, we'll use Ansible with jinja2 templates and variables." +msgstr "In the next chapter of the example, we'll use Ansible with jinja2 templates and variables." + #: ../../configexamples/ansible.rst:216 msgid "In the next chapter of the example, we'll use the Ansible with jinja2 templates and variables." msgstr "In the next chapter of the example, we'll use the Ansible with jinja2 templates and variables." @@ -1277,6 +1313,14 @@ msgstr "Information about Ethernet Virtual Private Networks" msgid "Information about prefix-sid and label-operation from VyOS" msgstr "Information about prefix-sid and label-operation from VyOS" +#: ../../configexamples/ansible.rst:37 +msgid "Install Ansible:" +msgstr "Install Ansible:" + +#: ../../configexamples/ansible.rst:44 +msgid "Install Paramiko:" +msgstr "Install Paramiko:" + #: ../../configexamples/ansible.rst:37 msgid "Install the Ansible:" msgstr "Install the Ansible:" @@ -1418,6 +1462,10 @@ msgstr "Let’s check IPv4 routing and MPLS information on provider nodes (same msgid "Let’s say we have a requirement to have multiple networks." msgstr "Let’s say we have a requirement to have multiple networks." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 +msgid "Local subnets should be able to reach internet using source NAT." +msgstr "Local subnets should be able to reach internet using source NAT." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 msgid "Local subnets should be able to reach internet using source nat." msgstr "Local subnets should be able to reach internet using source nat." @@ -1731,6 +1779,10 @@ msgstr "Prerequisites" msgid "Priorities" msgstr "Priorities" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 +msgid "Protect the router on 'WAN' interface, allowing only IPSec connections and SSH access from trusted IPs." +msgstr "Protect the router on 'WAN' interface, allowing only IPSec connections and SSH access from trusted IPs." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 msgid "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." msgstr "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." @@ -2162,6 +2214,10 @@ msgstr "This accomplishes a few things:" msgid "This chapter contains various configuration examples:" msgstr "This chapter contains various configuration examples:" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 +msgid "This configuration example and the requirments consists of:" +msgstr "This configuration example and the requirments consists of:" + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 msgid "This configuration example and the requirments consists on:" msgstr "This configuration example and the requirments consists on:" @@ -2210,6 +2266,10 @@ msgstr "This guide shows an example of a route-based IKEv2 site-to-site VPN to A msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:7 +msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configuration." +msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configuration." + #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:10 msgid "This guide walks through the setup of https://www.tunnelbroker.net/ for an IPv6 Tunnel." msgstr "This guide walks through the setup of https://www.tunnelbroker.net/ for an IPv6 Tunnel." diff --git a/docs/_locale/de/configuration.pot b/docs/_locale/de/configuration.pot index 9b1596cb..15fcb065 100644 --- a/docs/_locale/de/configuration.pot +++ b/docs/_locale/de/configuration.pot @@ -802,6 +802,14 @@ msgstr "**local side - commands**" msgid "**log-fail** In this mode, the recursor will attempt to validate all data it retrieves from authoritative servers, regardless of the client's DNSSEC desires, and will log the validation result. This mode can be used to determine the extra load and amount of possibly bogus answers before turning on full-blown validation. Responses to client queries are the same as with process." msgstr "**log-fail** In this mode, the recursor will attempt to validate all data it retrieves from authoritative servers, regardless of the client's DNSSEC desires, and will log the validation result. This mode can be used to determine the extra load and amount of possibly bogus answers before turning on full-blown validation. Responses to client queries are the same as with process." +#: ../../configuration/service/dns.rst:197 +msgid "**lookup-a** A Flag." +msgstr "**lookup-a** A Flag." + +#: ../../configuration/service/dns.rst:199 +msgid "**lookup-srv** S flag." +msgstr "**lookup-srv** S flag." + #: ../../configuration/protocols/isis.rst:100 msgid "**narrow** - Use old style of TLVs with narrow metric." msgstr "**narrow** - Use old style of TLVs with narrow metric." @@ -839,6 +847,10 @@ msgstr "**off** In this mode, no DNSSEC processing takes place. The recursor wil msgid "**on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)" msgstr "**on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)" +#: ../../configuration/service/dns.rst:201 +msgid "**order** Rule order. Requires ``." +msgstr "**order** Rule order. Requires ``." + #: ../../configuration/nat/nat44.rst:149 msgid "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." msgstr "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." @@ -872,6 +884,10 @@ msgstr "**prefer** - ask client for mppe, if it rejects don't fail" msgid "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" msgstr "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" +#: ../../configuration/service/dns.rst:203 +msgid "**preference** Rule preference. Requires ``. Defaults to 0 if not set." +msgstr "**preference** Rule preference. Requires ``. Defaults to 0 if not set." + #: ../../configuration/service/dns.rst:77 msgid "**process** When dnssec is set to process the behavior is similar to process-no-validate. However, the recursor will try to validate the data if at least one of the DO or AD bits is set in the query; in that case, it will set the AD-bit in the response when the data is validated successfully, or send SERVFAIL when the validation comes up bogus." msgstr "**process** When dnssec is set to process the behavior is similar to process-no-validate. However, the recursor will try to validate the data if at least one of the DO or AD bits is set in the query; in that case, it will set the AD-bit in the response when the data is validated successfully, or send SERVFAIL when the validation comes up bogus." @@ -884,6 +900,10 @@ msgstr "**process-no-validate** In this mode the recursor acts as a \"security a msgid "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." msgstr "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." +#: ../../configuration/service/dns.rst:205 +msgid "**protocol-specific** P flag." +msgstr "**protocol-specific** P flag." + #: ../../configuration/service/ipoe-server.rst:63 #: ../../configuration/service/pppoe-server.rst:41 #: ../../configuration/vpn/l2tp.rst:29 @@ -903,6 +923,10 @@ msgstr "**radius**: All authentication queries are handled by a configured RADIU msgid "**random** - Random interface identifier for IPv6" msgstr "**random** - Random interface identifier for IPv6" +#: ../../configuration/service/dns.rst:207 +msgid "**regexp** Regular expression. Requires ``." +msgstr "**regexp** Regular expression. Requires ``." + #: ../../configuration/interfaces/wireguard.rst:190 msgid "**remote side - commands**" msgstr "**remote side - commands**" @@ -915,6 +939,10 @@ msgstr "**replace**: Terminate first session when second is authorized **(defaul msgid "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." msgstr "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." +#: ../../configuration/service/dns.rst:209 +msgid "**replacement** Replacement DNS name." +msgstr "**replacement** Replacement DNS name." + #: ../../configuration/service/pppoe-server.rst:472 #: ../../configuration/vpn/l2tp.rst:426 #: ../../configuration/vpn/pptp.rst:350 @@ -936,10 +964,18 @@ msgstr "**require** - Require IPv6 negotiation" msgid "**require** - ask client for mppe, if it rejects drop connection" msgstr "**require** - ask client for mppe, if it rejects drop connection" +#: ../../configuration/service/dns.rst:211 +msgid "**resolve-uri** U flag." +msgstr "**resolve-uri** U flag." + #: ../../configuration/vpn/site2site_ipsec.rst:319 msgid "**right**" msgstr "**right**" +#: ../../configuration/service/dns.rst:213 +msgid "**service** Service type. Requires ``." +msgstr "**service** Service type. Requires ``." + #: ../../configuration/container/index.rst:127 msgid "**setpcap**: Capability sets (from bounded or inherited set)" msgstr "**setpcap**: Capability sets (from bounded or inherited set)" @@ -1503,6 +1539,10 @@ msgstr "A *bit* is written as **bit**," msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described in :rfc:`8210`." msgstr "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described in :rfc:`8210`." +#: ../../configuration/protocols/rpki.rst:21 +msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." +msgstr "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." + #: ../../configuration/protocols/bgp.rst:951 msgid "A BGP confederation divides our AS into sub-ASes to reduce the number of required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but between these sub-ASes we use something that looks like EBGP but behaves like IBGP (called confederation BGP). Confederation mechanism is described in :rfc:`5065`" msgstr "A BGP confederation divides our AS into sub-ASes to reduce the number of required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but between these sub-ASes we use something that looks like EBGP but behaves like IBGP (called confederation BGP). Confederation mechanism is described in :rfc:`5065`" @@ -1531,7 +1571,7 @@ msgstr "A VRF device is created with an associated route table. Network interfac msgid "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." msgstr "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." -#: ../../configuration/service/dns.rst:149 +#: ../../configuration/service/dns.rst:243 msgid "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." msgstr "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." @@ -1624,6 +1664,10 @@ msgstr "A human readable description what this certificate is about." msgid "A lookback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." msgstr "A lookback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." +#: ../../configuration/interfaces/loopback.rst:17 +msgid "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." +msgstr "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." + #: ../../configuration/service/snmp.rst:42 msgid "A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers." msgstr "A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers." @@ -1920,7 +1964,7 @@ msgstr "Add the public CA certificate for the CA named `name` to the VyOS CLI." msgid "Adding a 2FA with an OTP-key" msgstr "Adding a 2FA with an OTP-key" -#: ../../configuration/loadbalancing/reverse-proxy.rst:260 +#: ../../configuration/loadbalancing/reverse-proxy.rst:263 msgid "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." msgstr "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." @@ -2052,7 +2096,7 @@ msgstr "Algorithm" msgid "Aliases" msgstr "Aliases" -#: ../../configuration/service/dns.rst:154 +#: ../../configuration/service/dns.rst:248 msgid "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" msgstr "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" @@ -2080,7 +2124,7 @@ msgstr "All interfaces used for the DHCP relay must be configured. This includes msgid "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." msgstr "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." -#: ../../configuration/service/dns.rst:156 +#: ../../configuration/service/dns.rst:250 msgid "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" msgstr "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" @@ -2136,7 +2180,7 @@ msgstr "Allow access to sites in a domain without retrieving them from the Proxy msgid "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." msgstr "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." -#: ../../configuration/service/dns.rst:362 +#: ../../configuration/service/dns.rst:456 msgid "Allow explicit IPv6 address for the interface." msgstr "Allow explicit IPv6 address for the interface." @@ -2679,6 +2723,10 @@ msgstr "Authentication token" msgid "Authentication – to verify that the message is from a valid source." msgstr "Authentication – to verify that the message is from a valid source." +#: ../../configuration/service/dns.rst:147 +msgid "Authoritative zones" +msgstr "Authoritative zones" + #: ../../configuration/service/monitoring.rst:92 msgid "Authorization token" msgstr "Authorization token" @@ -2803,6 +2851,10 @@ msgstr "Babel is a modern routing protocol designed to be robust and efficient b msgid "Backend" msgstr "Backend" +#: ../../configuration/loadbalancing/reverse-proxy.rst:299 +msgid "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." +msgstr "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." + #: ../../configuration/loadbalancing/reverse-proxy.rst:108 msgid "Balance algorithms:" msgstr "Balance algorithms:" @@ -2811,7 +2863,7 @@ msgstr "Balance algorithms:" msgid "Balancing Rules" msgstr "Balancing Rules" -#: ../../configuration/loadbalancing/reverse-proxy.rst:211 +#: ../../configuration/loadbalancing/reverse-proxy.rst:214 msgid "Balancing based on domain name" msgstr "Balancing based on domain name" @@ -2892,6 +2944,10 @@ msgstr "Before enabling any hardware segmentation offload a corresponding softwa msgid "Before you are able to apply a rule-set to a zone you have to create the zones first." msgstr "Before you are able to apply a rule-set to a zone you have to create the zones first." +#: ../../configuration/service/dns.rst:169 +msgid "Below are a list of record types available to be configured within VyOS. Some records support special `` keywords:" +msgstr "Below are a list of record types available to be configured within VyOS. Some records support special `` keywords:" + #: ../../configuration/vpn/site2site_ipsec.rst:425 msgid "Below flow-chart could be a quick reference for the close-action combination depending on how the peer is configured." msgstr "Below flow-chart could be a quick reference for the close-action combination depending on how the peer is configured." @@ -3037,11 +3093,11 @@ msgstr "By default, VyOS does not advertise a default route (0.0.0.0/0) even if msgid "By default, a new token is generated every 30 seconds by the mobile application. In order to compensate for possible time-skew between the client and the server, an extra token before and after the current time is allowed. This allows for a time skew of up to 30 seconds between authentication server and client." msgstr "By default, a new token is generated every 30 seconds by the mobile application. In order to compensate for possible time-skew between the client and the server, an extra token before and after the current time is allowed. This allows for a time skew of up to 30 seconds between authentication server and client." -#: ../../configuration/service/dns.rst:401 +#: ../../configuration/service/dns.rst:495 msgid "By default, ddclient_ will update a dynamic dns record using the IP address directly attached to the interface. If your VyOS instance is behind NAT, your record will be updated to point to your internal IP." msgstr "By default, ddclient_ will update a dynamic dns record using the IP address directly attached to the interface. If your VyOS instance is behind NAT, your record will be updated to point to your internal IP." -#: ../../configuration/protocols/rpki.rst:91 +#: ../../configuration/protocols/rpki.rst:89 msgid "By default, enabling RPKI does not change best path selection. In particular, invalid prefixes will still be considered during best path selection. However, the router can be configured to ignore all invalid prefixes." msgstr "By default, enabling RPKI does not change best path selection. In particular, invalid prefixes will still be considered during best path selection. However, the router can be configured to ignore all invalid prefixes." @@ -3372,7 +3428,7 @@ msgstr "Confidentiality – Encryption of packets to prevent snooping by an unau #: ../../configuration/protocols/isis.rst:28 #: ../../configuration/protocols/ospf.rst:22 #: ../../configuration/protocols/ospf.rst:1076 -#: ../../configuration/protocols/rpki.rst:104 +#: ../../configuration/protocols/rpki.rst:102 #: ../../configuration/service/broadcast-relay.rst:18 #: ../../configuration/service/conntrack-sync.rst:38 #: ../../configuration/service/console-server.rst:21 @@ -3381,7 +3437,7 @@ msgstr "Confidentiality – Encryption of packets to prevent snooping by an unau #: ../../configuration/service/dhcp-server.rst:22 #: ../../configuration/service/dhcp-server.rst:569 #: ../../configuration/service/dns.rst:8 -#: ../../configuration/service/dns.rst:214 +#: ../../configuration/service/dns.rst:308 #: ../../configuration/service/https.rst:14 #: ../../configuration/service/ids.rst:20 #: ../../configuration/service/lldp.rst:36 @@ -3480,11 +3536,11 @@ msgstr "Configure" msgid "Configure BFD" msgstr "Configure BFD" -#: ../../configuration/service/dns.rst:245 +#: ../../configuration/service/dns.rst:339 msgid "Configure DNS `` which should be updated. This can be set multiple times." msgstr "Configure DNS `` which should be updated. This can be set multiple times." -#: ../../configuration/service/dns.rst:241 +#: ../../configuration/service/dns.rst:335 msgid "Configure DNS `` to be updated." msgstr "Configure DNS `` to be updated." @@ -3550,7 +3606,7 @@ msgstr "Configure `` which is shown after user has logged in to the sys msgid "Configure `` which is shown during SSH connect and before a user is logged in." msgstr "Configure `` which is shown during SSH connect and before a user is logged in." -#: ../../configuration/service/dns.rst:346 +#: ../../configuration/service/dns.rst:440 msgid "Configure `` used when authenticating the update request for DynDNS service identified by ``." msgstr "Configure `` used when authenticating the update request for DynDNS service identified by ``." @@ -3558,7 +3614,7 @@ msgstr "Configure `` used when authenticating the update request for D msgid "Configure `` used when authenticating the update request for DynDNS service identified by ``." msgstr "Configure `` used when authenticating the update request for DynDNS service identified by ``." -#: ../../configuration/service/dns.rst:341 +#: ../../configuration/service/dns.rst:435 msgid "Configure `` used when authenticating the update request for DynDNS service identified by ``." msgstr "Configure `` used when authenticating the update request for DynDNS service identified by ``." @@ -3705,7 +3761,7 @@ msgstr "Configure one or more attributes to the given NTP server." msgid "Configure one or more servers for synchronisation. Server name can be either an IP address or :abbr:`FQDN (Fully Qualified Domain Name)`." msgstr "Configure one or more servers for synchronisation. Server name can be either an IP address or :abbr:`FQDN (Fully Qualified Domain Name)`." -#: ../../configuration/service/dns.rst:249 +#: ../../configuration/service/dns.rst:343 msgid "Configure optional TTL value on the given resource record. This defaults to 600 seconds." msgstr "Configure optional TTL value on the given resource record. This defaults to 600 seconds." @@ -3741,6 +3797,10 @@ msgstr "Configure protocol used for communication to remote syslog host. This ca msgid "Configure proxy port if it does not listen to the default port 80." msgstr "Configure proxy port if it does not listen to the default port 80." +#: ../../configuration/loadbalancing/reverse-proxy.rst:149 +msgid "Configure requests to the backend server to use SSL encryption and authenticate backend against " +msgstr "Configure requests to the backend server to use SSL encryption and authenticate backend against " + #: ../../configuration/system/sflow.rst:16 msgid "Configure sFlow agent IPv4 or IPv6 address" msgstr "Configure sFlow agent IPv4 or IPv6 address" @@ -3773,7 +3833,7 @@ msgstr "Configure the A-side router for NPTv6 using the prefixes above:" msgid "Configure the B-side router for NPTv6 using the prefixes above:" msgstr "Configure the B-side router for NPTv6 using the prefixes above:" -#: ../../configuration/service/dns.rst:236 +#: ../../configuration/service/dns.rst:330 msgid "Configure the DNS `` IP/FQDN used when updating this dynamic assignment." msgstr "Configure the DNS `` IP/FQDN used when updating this dynamic assignment." @@ -3793,7 +3853,7 @@ msgstr "Configure the discrete port under which the RADIUS server can be reached msgid "Configure the discrete port under which the TACACS server can be reached." msgstr "Configure the discrete port under which the TACACS server can be reached." -#: ../../configuration/loadbalancing/reverse-proxy.rst:172 +#: ../../configuration/loadbalancing/reverse-proxy.rst:175 msgid "Configure the load-balancing reverse-proxy service for HTTP." msgstr "Configure the load-balancing reverse-proxy service for HTTP." @@ -3894,7 +3954,7 @@ msgstr "Connections to the RPKI caching server can not only be established by HT msgid "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH you first need to create yoursels an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." msgstr "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH you first need to create yoursels an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." -#: ../../configuration/protocols/rpki.rst:143 +#: ../../configuration/protocols/rpki.rst:141 msgid "Connections to the RPKI caching server can not only be established by TCP using the RTR protocol but you can also rely on a secure SSH session to the server. This provides transport integrity and confidentiality and it is a good idea if your validation software supports it. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." msgstr "Connections to the RPKI caching server can not only be established by TCP using the RTR protocol but you can also rely on a secure SSH session to the server. This provides transport integrity and confidentiality and it is a good idea if your validation software supports it. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." @@ -4093,8 +4153,8 @@ msgstr "Create new VRF instance with ``. The name is used when placing ind msgid "Create new :rfc:`2136` DNS update configuration which will update the IP address assigned to `` on the service you configured under ``." msgstr "Create new :rfc:`2136` DNS update configuration which will update the IP address assigned to `` on the service you configured under ``." -#: ../../configuration/service/dns.rst:221 -#: ../../configuration/service/dns.rst:326 +#: ../../configuration/service/dns.rst:315 +#: ../../configuration/service/dns.rst:420 msgid "Create new dynamic DNS update configuration which will update the IP address assigned to `` on the service you configured under ``." msgstr "Create new dynamic DNS update configuration which will update the IP address assigned to `` on the service you configured under ``." @@ -4507,7 +4567,7 @@ msgstr "Define number of packets to queue inside the kernel before sending them msgid "Define operation mode of High Availability feature. Default value if command is not specified is `active-active`" msgstr "Define operation mode of High Availability feature. Default value if command is not specified is `active-active`" -#: ../../configuration/protocols/rpki.rst:108 +#: ../../configuration/protocols/rpki.rst:106 msgid "Define the time interval to update the local cache" msgstr "Define the time interval to update the local cache" @@ -4523,7 +4583,7 @@ msgstr "Define type of offload to be used by the flowtable: ``hardware`` or ``so msgid "Define used ethertype of bridge interface." msgstr "Define used ethertype of bridge interface." -#: ../../configuration/protocols/rpki.rst:128 +#: ../../configuration/protocols/rpki.rst:126 msgid "Defined the IPv4, IPv6 or FQDN and port number of the caching RPKI caching instance which is used." msgstr "Defined the IPv4, IPv6 or FQDN and port number of the caching RPKI caching instance which is used." @@ -4744,6 +4804,10 @@ msgstr "Disable dhcpv6-relay service." msgid "Disable given ``. It will be placed in administratively down (``A/D``) state." msgstr "Disable given ``. It will be placed in administratively down (``A/D``) state." +#: ../../configuration/service/dns.rst:153 +msgid "Disable hosting authoritative zone for `` without deleting from configuration." +msgstr "Disable hosting authoritative zone for `` without deleting from configuration." + #: ../../configuration/protocols/bgp.rst:628 msgid "Disable immediate session reset if peer's connected link goes down." msgstr "Disable immediate session reset if peer's connected link goes down." @@ -4756,6 +4820,10 @@ msgstr "Disable password based authentication. Login via SSH keys only. This har msgid "Disable sending and receiving PIM control packets on the interface." msgstr "Disable sending and receiving PIM control packets on the interface." +#: ../../configuration/service/dns.rst:159 +msgid "Disable specific record without deleting it from configuration." +msgstr "Disable specific record without deleting it from configuration." + #: ../../configuration/service/ssh.rst:64 msgid "Disable the host validation through reverse DNS lookups - can speedup login time when reverse lookup is not possible." msgstr "Disable the host validation through reverse DNS lookups - can speedup login time when reverse lookup is not possible." @@ -5034,7 +5102,7 @@ msgstr "During profile import, the user is asked to enter its IPSec credentials msgid "Dynamic-protection" msgstr "Dynamic-protection" -#: ../../configuration/service/dns.rst:199 +#: ../../configuration/service/dns.rst:293 msgid "Dynamic DNS" msgstr "Dynamic DNS" @@ -5535,14 +5603,14 @@ msgstr "Every connection/remote-access pool we configure also needs a pool where #: ../../configuration/protocols/failover.rst:63 #: ../../configuration/protocols/igmp-proxy.rst:61 #: ../../configuration/protocols/pim.rst:217 -#: ../../configuration/protocols/rpki.rst:168 +#: ../../configuration/protocols/rpki.rst:166 #: ../../configuration/service/broadcast-relay.rst:55 #: ../../configuration/service/conntrack-sync.rst:195 #: ../../configuration/service/dhcp-relay.rst:85 #: ../../configuration/service/dhcp-relay.rst:174 #: ../../configuration/service/dhcp-server.rst:418 -#: ../../configuration/service/dns.rst:147 -#: ../../configuration/service/dns.rst:260 +#: ../../configuration/service/dns.rst:241 +#: ../../configuration/service/dns.rst:354 #: ../../configuration/service/eventhandler.rst:83 #: ../../configuration/service/ids.rst:82 #: ../../configuration/service/mdns.rst:50 @@ -5586,7 +5654,7 @@ msgstr "Example, from radius-server send command for disconnect client with user #: ../../configuration/protocols/static.rst:67 #: ../../configuration/protocols/static.rst:135 #: ../../configuration/protocols/static.rst:207 -#: ../../configuration/service/dns.rst:366 +#: ../../configuration/service/dns.rst:460 #: ../../configuration/service/monitoring.rst:69 #: ../../configuration/service/monitoring.rst:98 #: ../../configuration/service/ssh.rst:165 @@ -5683,7 +5751,7 @@ msgstr "Example: to be appended is set to ``vyos.net`` and the URL received is ` msgid "Example Configuration" msgstr "Example Configuration" -#: ../../configuration/service/dns.rst:384 +#: ../../configuration/service/dns.rst:478 msgid "Example IPv6 only:" msgstr "Example IPv6 only:" @@ -5721,7 +5789,7 @@ msgstr "Example synproxy" #: ../../configuration/interfaces/bridge.rst:196 #: ../../configuration/interfaces/macsec.rst:153 #: ../../configuration/interfaces/wireless.rst:541 -#: ../../configuration/loadbalancing/reverse-proxy.rst:187 +#: ../../configuration/loadbalancing/reverse-proxy.rst:190 #: ../../configuration/policy/index.rst:46 #: ../../configuration/protocols/bgp.rst:1118 #: ../../configuration/protocols/isis.rst:336 @@ -5849,6 +5917,10 @@ msgstr "Failover mechanism to use for conntrack-sync." msgid "Failover routes are manually configured routes, but they install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target will be available." msgstr "Failover routes are manually configured routes, but they install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target will be available." +#: ../../configuration/protocols/failover.rst:5 +msgid "Failover routes are manually configured routes, but they only install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target becomes available." +msgstr "Failover routes are manually configured routes, but they only install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target becomes available." + #: ../../configuration/trafficpolicy/index.rst:384 msgid "Fair Queue" msgstr "Fair Queue" @@ -5869,7 +5941,7 @@ msgstr "FastNetMon" msgid "FastNetMon is a high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AF_PACKET (port mirror). It can detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second and perform a configurable action to handle that event, such as calling a custom script." msgstr "FastNetMon is a high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AF_PACKET (port mirror). It can detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second and perform a configurable action to handle that event, such as calling a custom script." -#: ../../configuration/protocols/rpki.rst:78 +#: ../../configuration/protocols/rpki.rst:76 msgid "Features of the Current Implementation" msgstr "Features of the Current Implementation" @@ -5877,7 +5949,7 @@ msgstr "Features of the Current Implementation" msgid "Field" msgstr "Field" -#: ../../configuration/service/dns.rst:231 +#: ../../configuration/service/dns.rst:325 msgid "File identified by `` containing the TSIG authentication key for RFC2136 nsupdate on remote DNS server." msgstr "File identified by `` containing the TSIG authentication key for RFC2136 nsupdate on remote DNS server." @@ -6038,6 +6110,10 @@ msgstr "First the OTP keys must be generated and sent to the user and to the con msgid "First we need to specify the basic settings. 1194/UDP is the default. The ``persistent-tunnel`` option is recommended, it prevents the TUN/TAP device from closing on connection resets or daemon reloads." msgstr "First we need to specify the basic settings. 1194/UDP is the default. The ``persistent-tunnel`` option is recommended, it prevents the TUN/TAP device from closing on connection resets or daemon reloads." +#: ../../configuration/protocols/rpki.rst:40 +msgid "First you will need to deploy an RPKI validator for your routers to use. NLnet Labs provides a collection of software_ you can compare and settle on one. Once your server is running you can start validating announcements." +msgstr "First you will need to deploy an RPKI validator for your routers to use. NLnet Labs provides a collection of software_ you can compare and settle on one. Once your server is running you can start validating announcements." + #: ../../configuration/protocols/rpki.rst:41 msgid "First you will need to deploy an RPKI validator for your routers to use. The RIPE NCC helpfully provide `some instructions`_ to get you started with several different options. Once your server is running you can start validating announcements." msgstr "First you will need to deploy an RPKI validator for your routers to use. The RIPE NCC helpfully provide `some instructions`_ to get you started with several different options. Once your server is running you can start validating announcements." @@ -6461,7 +6537,7 @@ msgstr "Get detailed information about LLDP neighbors." msgid "Get the DHCPv6-PD prefixes from both routers:" msgstr "Get the DHCPv6-PD prefixes from both routers:" -#: ../../configuration/protocols/rpki.rst:39 +#: ../../configuration/protocols/rpki.rst:38 msgid "Getting started" msgstr "Getting started" @@ -6477,6 +6553,10 @@ msgstr "Given the following example we have one VyOS router acting as OpenVPN se msgid "Gloabal" msgstr "Gloabal" +#: ../../configuration/loadbalancing/reverse-proxy.rst:153 +msgid "Global" +msgstr "Global" + #: ../../configuration/service/ipoe-server.rst:352 #: ../../configuration/service/pppoe-server.rst:518 #: ../../configuration/vpn/l2tp.rst:472 @@ -6497,7 +6577,7 @@ msgstr "Global Options Firewall Configuration" msgid "Global options" msgstr "Global options" -#: ../../configuration/loadbalancing/reverse-proxy.rst:152 +#: ../../configuration/loadbalancing/reverse-proxy.rst:155 msgid "Global parameters" msgstr "Global parameters" @@ -6534,7 +6614,7 @@ msgstr "HTTP-API" msgid "HTTP API" msgstr "HTTP API" -#: ../../configuration/service/dns.rst:317 +#: ../../configuration/service/dns.rst:411 msgid "HTTP based services" msgstr "HTTP based services" @@ -6611,7 +6691,7 @@ msgstr "Here is a second example of a dual-stack tunnel over IPv6 between a VyOS msgid "Here is an example :abbr:`NET (Network Entity Title)` value:" msgstr "Here is an example :abbr:`NET (Network Entity Title)` value:" -#: ../../configuration/protocols/rpki.rst:179 +#: ../../configuration/protocols/rpki.rst:177 msgid "Here is an example route-map to apply to routes learned at import. In this filter we reject prefixes with the state `invalid`, and set a higher `local-preference` if the prefix is RPKI `valid` rather than merely `notfound`." msgstr "Here is an example route-map to apply to routes learned at import. In this filter we reject prefixes with the state `invalid`, and set a higher `local-preference` if the prefix is RPKI `valid` rather than merely `notfound`." @@ -7227,7 +7307,7 @@ msgstr "If making use of multiple tunnels, OpenVPN must have a way to distinguis msgid "If multi-pathing is enabled, then check whether the routes not yet distinguished in preference may be considered equal. If :cfgcmd:`bgp bestpath as-path multipath-relax` is set, all such routes are considered equal, otherwise routes received via iBGP with identical AS_PATHs or routes received from eBGP neighbours in the same AS are considered equal." msgstr "If multi-pathing is enabled, then check whether the routes not yet distinguished in preference may be considered equal. If :cfgcmd:`bgp bestpath as-path multipath-relax` is set, all such routes are considered equal, otherwise routes received via iBGP with identical AS_PATHs or routes received from eBGP neighbours in the same AS are considered equal." -#: ../../configuration/protocols/rpki.rst:86 +#: ../../configuration/protocols/rpki.rst:84 msgid "If no connection to an RPKI cache server can be established after a pre-defined timeout, the router will process routes without prefix origin validation. It still will try to establish a connection to an RPKI cache server in the background." msgstr "If no connection to an RPKI cache server can be established after a pre-defined timeout, the router will process routes without prefix origin validation. It still will try to establish a connection to an RPKI cache server in the background." @@ -7439,10 +7519,14 @@ msgstr "If you are a hacker or want to try on your own we support passing raw Op msgid "If you are configuring a VRF for management purposes, there is currently no way to force system DNS traffic via a specific VRF." msgstr "If you are configuring a VRF for management purposes, there is currently no way to force system DNS traffic via a specific VRF." -#: ../../configuration/protocols/rpki.rst:30 +#: ../../configuration/protocols/rpki.rst:29 msgid "If you are new to these routing security technologies then there is an `excellent guide to RPKI`_ by NLnet Labs which will get you up to speed very quickly. Their documentation explains everything from what RPKI is to deploying it in production. It also has some `help and operational guidance`_ including \"What can I do about my route having an Invalid state?\"" msgstr "If you are new to these routing security technologies then there is an `excellent guide to RPKI`_ by NLnet Labs which will get you up to speed very quickly. Their documentation explains everything from what RPKI is to deploying it in production. It also has some `help and operational guidance`_ including \"What can I do about my route having an Invalid state?\"" +#: ../../configuration/protocols/rpki.rst:62 +msgid "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC, or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." +msgstr "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC, or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." + #: ../../configuration/protocols/rpki.rst:64 msgid "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." msgstr "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." @@ -7609,7 +7693,7 @@ msgstr "Import the private key of the certificate to the VyOS CLI. This should n msgid "Import the public CA certificate from the defined file to VyOS CLI." msgstr "Import the public CA certificate from the defined file to VyOS CLI." -#: ../../configuration/protocols/rpki.rst:46 +#: ../../configuration/protocols/rpki.rst:44 msgid "Imported prefixes during the validation may have values:" msgstr "Imported prefixes during the validation may have values:" @@ -7653,7 +7737,7 @@ msgstr "In a minimal configuration, the following must be provided:" msgid "In a multiple VLAN header context, out of convenience the term \"VLAN tag\" or just \"tag\" for short is often used in place of \"802.1q_ VLAN header\". QinQ allows multiple VLAN tags in an Ethernet frame; together these tags constitute a tag stack. When used in the context of an Ethernet frame, a QinQ frame is a frame that has 2 VLAN 802.1q_ headers (double-tagged)." msgstr "In a multiple VLAN header context, out of convenience the term \"VLAN tag\" or just \"tag\" for short is often used in place of \"802.1q_ VLAN header\". QinQ allows multiple VLAN tags in an Ethernet frame; together these tags constitute a tag stack. When used in the context of an Ethernet frame, a QinQ frame is a frame that has 2 VLAN 802.1q_ headers (double-tagged)." -#: ../../configuration/protocols/rpki.rst:80 +#: ../../configuration/protocols/rpki.rst:78 msgid "In a nutshell, the current implementation provides the following features:" msgstr "In a nutshell, the current implementation provides the following features:" @@ -7919,7 +8003,7 @@ msgstr "In this example we will use the most complicated case: a setup where eac msgid "In this method, the DSL Modem/Router connects to the ISP for you with your credentials preprogrammed into the device. This gives you an :rfc:`1918` address, such as ``192.168.1.0/24`` by default." msgstr "In this method, the DSL Modem/Router connects to the ISP for you with your credentials preprogrammed into the device. This gives you an :rfc:`1918` address, such as ``192.168.1.0/24`` by default." -#: ../../configuration/service/dns.rst:152 +#: ../../configuration/service/dns.rst:246 msgid "In this scenario:" msgstr "In this scenario:" @@ -8436,7 +8520,7 @@ msgstr "Let SNMP daemon listen only on IP address 192.0.2.1" msgid "Lets assume the following topology:" msgstr "Lets assume the following topology:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:190 +#: ../../configuration/loadbalancing/reverse-proxy.rst:193 msgid "Level 4 balancing" msgstr "Level 4 balancing" @@ -8456,7 +8540,7 @@ msgstr "Lifetime is decremented by the number of seconds since the last RA - use msgid "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." msgstr "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." -#: ../../configuration/loadbalancing/reverse-proxy.rst:162 +#: ../../configuration/loadbalancing/reverse-proxy.rst:165 msgid "Limit allowed cipher algorithms used during SSL/TLS handshake" msgstr "Limit allowed cipher algorithms used during SSL/TLS handshake" @@ -8468,7 +8552,7 @@ msgstr "Limit logins to `` per every ``rate-time`` seconds. Rate limit mu msgid "Limit logins to ``rate-limit`` attemps per every ``. Rate time must be between 15 and 600 seconds." msgstr "Limit logins to ``rate-limit`` attemps per every ``. Rate time must be between 15 and 600 seconds." -#: ../../configuration/loadbalancing/reverse-proxy.rst:157 +#: ../../configuration/loadbalancing/reverse-proxy.rst:160 msgid "Limit maximum number of connections" msgstr "Limit maximum number of connections" @@ -8540,6 +8624,10 @@ msgstr "Lists VRFs that have been created" msgid "Load-balancing" msgstr "Load-balancing" +#: ../../configuration/loadbalancing/reverse-proxy.rst:100 +msgid "Load-balancing algorithms to be used for distributed requests among the available servers" +msgstr "Load-balancing algorithms to be used for distributed requests among the available servers" + #: ../../configuration/loadbalancing/reverse-proxy.rst:100 msgid "Load-balancing algorithms to be used for distributind requests among the vailable servers" msgstr "Load-balancing algorithms to be used for distributind requests among the vailable servers" @@ -8609,11 +8697,11 @@ msgstr "Local User Account" msgid "Local path that includes the known hosts file." msgstr "Local path that includes the known hosts file." -#: ../../configuration/protocols/rpki.rst:157 +#: ../../configuration/protocols/rpki.rst:155 msgid "Local path that includes the private key file of the router." msgstr "Local path that includes the private key file of the router." -#: ../../configuration/protocols/rpki.rst:161 +#: ../../configuration/protocols/rpki.rst:159 msgid "Local path that includes the public key file of the router." msgstr "Local path that includes the public key file of the router." @@ -9238,7 +9326,7 @@ msgstr "Multicast receivers will talk MLD to their local router, so, besides hav msgid "Multiple DNS servers can be defined." msgstr "Multiple DNS servers can be defined." -#: ../../configuration/protocols/rpki.rst:135 +#: ../../configuration/protocols/rpki.rst:133 msgid "Multiple RPKI caching instances can be supplied and they need a preference in which their result sets are used." msgstr "Multiple RPKI caching instances can be supplied and they need a preference in which their result sets are used." @@ -9275,7 +9363,7 @@ msgstr "Multiple networks/client IP addresses can be configured." msgid "Multiple servers can be specified." msgstr "Multiple servers can be specified." -#: ../../configuration/service/dns.rst:380 +#: ../../configuration/service/dns.rst:474 msgid "Multiple services can be used per interface. Just specify as many services per interface as you like!" msgstr "Multiple services can be used per interface. Just specify as many services per interface as you like!" @@ -9543,6 +9631,10 @@ msgstr "Nexthop Tracking" msgid "Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if you do not wan't to e.g. allow BGP to peer across the default route." msgstr "Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if you do not wan't to e.g. allow BGP to peer across the default route." +#: ../../configuration/protocols/rpki.rst:57 +msgid "No ROA exists which covers that prefix. Unfortunately this is the case for about 40%-50% of the prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2024." +msgstr "No ROA exists which covers that prefix. Unfortunately this is the case for about 40%-50% of the prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2024." + #: ../../configuration/protocols/rpki.rst:59 msgid "No ROA exists which covers that prefix. Unfortunately this is the case for about 80% of the IPv4 prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2020" msgstr "No ROA exists which covers that prefix. Unfortunately this is the case for about 80% of the IPv4 prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2020" @@ -9815,6 +9907,10 @@ msgstr "Once you have an Ethernet device connected, i.e. `eth0`, then you can co msgid "Once you have setup your SSTP server there comes the time to do some basic testing. The Linux client used for testing is called sstpc_. sstpc_ requires a PPP configuration/peer file." msgstr "Once you have setup your SSTP server there comes the time to do some basic testing. The Linux client used for testing is called sstpc_. sstpc_ requires a PPP configuration/peer file." +#: ../../configuration/protocols/rpki.rst:193 +msgid "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using Cloudflare's test_ website. Keep in mind that in order for this to work, you need to have no default routes or anything else that would still send traffic to RPKI-invalid destinations." +msgstr "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using Cloudflare's test_ website. Keep in mind that in order for this to work, you need to have no default routes or anything else that would still send traffic to RPKI-invalid destinations." + #: ../../configuration/protocols/rpki.rst:195 msgid "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using the `RIPE Labs RPKI Test`_ experimental tool." msgstr "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using the `RIPE Labs RPKI Test`_ experimental tool." @@ -9958,7 +10054,7 @@ msgstr "Operating Modes" #: ../../configuration/service/console-server.rst:76 #: ../../configuration/service/dhcp-relay.rst:124 #: ../../configuration/service/dhcp-relay.rst:201 -#: ../../configuration/service/dns.rst:182 +#: ../../configuration/service/dns.rst:276 #: ../../configuration/service/lldp.rst:71 #: ../../configuration/service/mdns.rst:79 #: ../../configuration/service/ssh.rst:145 @@ -10257,7 +10353,7 @@ msgstr "PPTP-Server" msgid "Packet-based balancing can lead to a better balance across interfaces when out of order packets are no issue. Per-packet-based balancing can be set for a balancing rule with:" msgstr "Packet-based balancing can lead to a better balance across interfaces when out of order packets are no issue. Per-packet-based balancing can be set for a balancing rule with:" -#: ../../configuration/protocols/rpki.rst:71 +#: ../../configuration/protocols/rpki.rst:69 msgid "Particularly large networks may wish to run their own RPKI certificate authority and publication server instead of publishing ROAs via their RIR. This is a subject far beyond the scope of VyOS' documentation. Consider reading about Krill_ if this is a rabbit hole you need or especially want to dive down." msgstr "Particularly large networks may wish to run their own RPKI certificate authority and publication server instead of publishing ROAs via their RIR. This is a subject far beyond the scope of VyOS' documentation. Consider reading about Krill_ if this is a rabbit hole you need or especially want to dive down." @@ -10923,7 +11019,11 @@ msgstr "Received RADIUS attributes have a higher priority than parameters define msgid "Recommended for larger installations." msgstr "Recommended for larger installations." -#: ../../configuration/loadbalancing/reverse-proxy.rst:171 +#: ../../configuration/service/dns.rst:167 +msgid "Record types" +msgstr "Record types" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:174 msgid "Redirect HTTP to HTTPS" msgstr "Redirect HTTP to HTTPS" @@ -10951,7 +11051,7 @@ msgstr "Redistribution Configuration" msgid "Redundancy and load sharing. There are multiple NAT66 devices at the edge of an IPv6 network to another IPv6 network. The path through the NAT66 device to another IPv6 network forms an equivalent route, and traffic can be load-shared on these NAT66 devices. In this case, you can configure the same source address translation rules on these NAT66 devices, so that any NAT66 device can handle IPv6 traffic between different sites." msgstr "Redundancy and load sharing. There are multiple NAT66 devices at the edge of an IPv6 network to another IPv6 network. The path through the NAT66 device to another IPv6 network forms an equivalent route, and traffic can be load-shared on these NAT66 devices. In this case, you can configure the same source address translation rules on these NAT66 devices, so that any NAT66 device can handle IPv6 traffic between different sites." -#: ../../configuration/service/dns.rst:262 +#: ../../configuration/service/dns.rst:356 msgid "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" msgstr "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" @@ -11102,7 +11202,7 @@ msgstr "Reset OpenVPN" msgid "Reset commands" msgstr "Reset commands" -#: ../../configuration/service/dns.rst:186 +#: ../../configuration/service/dns.rst:280 msgid "Resets the local DNS forwarding cache database. You can reset the cache for all entries or only for entries to a specific domain." msgstr "Resets the local DNS forwarding cache database. You can reset the cache for all entries or only for entries to a specific domain." @@ -11138,7 +11238,7 @@ msgstr "Restart the IGMP proxy process." msgid "Restart the SSH daemon process, the current session is not affected, only the background daemon is restarted." msgstr "Restart the SSH daemon process, the current session is not affected, only the background daemon is restarted." -#: ../../configuration/service/dns.rst:191 +#: ../../configuration/service/dns.rst:285 msgid "Restarts the DNS recursor process. This also invalidates the local DNS forwarding cache." msgstr "Restarts the DNS recursor process. This also invalidates the local DNS forwarding cache." @@ -11232,7 +11332,7 @@ msgstr "Route filter can be applied using a route-map:" msgid "Route map is a powerfull command, that gives network administrators a very useful and flexible tool for traffic manipulation." msgstr "Route map is a powerfull command, that gives network administrators a very useful and flexible tool for traffic manipulation." -#: ../../configuration/protocols/rpki.rst:95 +#: ../../configuration/protocols/rpki.rst:93 msgid "Route maps can be configured to match a specific RPKI validation state. This allows the creation of local policies, which handle BGP routes based on the outcome of the Prefix Origin Validation." msgstr "Route maps can be configured to match a specific RPKI validation state. This allows the creation of local policies, which handle BGP routes based on the outcome of the Prefix Origin Validation." @@ -11302,11 +11402,11 @@ msgstr "Rule-Sets" msgid "Rule-set overview" msgstr "Rule-set overview" -#: ../../configuration/loadbalancing/reverse-proxy.rst:217 +#: ../../configuration/loadbalancing/reverse-proxy.rst:220 msgid "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" msgstr "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" -#: ../../configuration/loadbalancing/reverse-proxy.rst:254 +#: ../../configuration/loadbalancing/reverse-proxy.rst:257 msgid "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." msgstr "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." @@ -11314,11 +11414,11 @@ msgstr "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` an msgid "Rule 110 is hit, so connection is accepted." msgstr "Rule 110 is hit, so connection is accepted." -#: ../../configuration/loadbalancing/reverse-proxy.rst:257 +#: ../../configuration/loadbalancing/reverse-proxy.rst:260 msgid "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." msgstr "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." -#: ../../configuration/loadbalancing/reverse-proxy.rst:220 +#: ../../configuration/loadbalancing/reverse-proxy.rst:223 msgid "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" msgstr "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" @@ -11340,7 +11440,7 @@ msgstr "Rules allow to control and route incoming traffic to specific backend ba msgid "Rules will be created for both :ref:`source-nat` and :ref:`destination-nat`." msgstr "Rules will be created for both :ref:`source-nat` and :ref:`destination-nat`." -#: ../../configuration/service/dns.rst:399 +#: ../../configuration/service/dns.rst:493 msgid "Running Behind NAT" msgstr "Running Behind NAT" @@ -11404,7 +11504,7 @@ msgstr "SNMPv3 (version 3 of the SNMP protocol) introduced a whole slew of new s msgid "SPAN port mirroring can copy the inbound/outbound traffic of the interface to the specified interface, usually the interface can be connected to some special equipment, such as behavior control system, intrusion detection system and traffic collector, and can copy all related traffic from this port. The benefit of mirroring the traffic is that the application is isolated from the source traffic and so application processing does not affect the traffic or the system performance." msgstr "SPAN port mirroring can copy the inbound/outbound traffic of the interface to the specified interface, usually the interface can be connected to some special equipment, such as behavior control system, intrusion detection system and traffic collector, and can copy all related traffic from this port. The benefit of mirroring the traffic is that the application is isolated from the source traffic and so application processing does not affect the traffic or the system performance." -#: ../../configuration/protocols/rpki.rst:141 +#: ../../configuration/protocols/rpki.rst:139 #: ../../configuration/service/ssh.rst:5 msgid "SSH" msgstr "SSH" @@ -11425,7 +11525,7 @@ msgstr "SSH client" msgid "SSH provides a secure channel over an unsecured network in a client-server architecture, connecting an SSH client application with an SSH server. Common applications include remote command-line login and remote command execution, but any network service can be secured with SSH. The protocol specification distinguishes between two major versions, referred to as SSH-1 and SSH-2." msgstr "SSH provides a secure channel over an unsecured network in a client-server architecture, connecting an SSH client application with an SSH server. Common applications include remote command-line login and remote command execution, but any network service can be secured with SSH. The protocol specification distinguishes between two major versions, referred to as SSH-1 and SSH-2." -#: ../../configuration/protocols/rpki.rst:153 +#: ../../configuration/protocols/rpki.rst:151 msgid "SSH username to establish an SSH connection to the cache server." msgstr "SSH username to establish an SSH connection to the cache server." @@ -11437,6 +11537,10 @@ msgstr "SSH was designed as a replacement for Telnet and for unsecured remote sh msgid "SSID to be used in IEEE 802.11 management frames" msgstr "SSID to be used in IEEE 802.11 management frames" +#: ../../configuration/loadbalancing/reverse-proxy.rst:294 +msgid "SSL Bridging" +msgstr "SSL Bridging" + #: ../../configuration/vpn/openconnect.rst:24 msgid "SSL Certificates" msgstr "SSL Certificates" @@ -11732,12 +11836,16 @@ msgstr "Set SNAT rule 30 to only NAT packets arriving from the 203.0.113.0/24 ne msgid "Set SSL certeficate for service " msgstr "Set SSL certeficate for service " +#: ../../configuration/loadbalancing/reverse-proxy.rst:46 +msgid "Set SSL certificate for service " +msgstr "Set SSL certificate for service " + #: ../../configuration/firewall/ipv4.rst:941 #: ../../configuration/firewall/ipv6.rst:927 msgid "Set TCP-MSS (maximum segment size) for the connection" msgstr "Set TCP-MSS (maximum segment size) for the connection" -#: ../../configuration/service/dns.rst:264 +#: ../../configuration/service/dns.rst:358 msgid "Set TTL to 300 seconds" msgstr "Set TTL to 300 seconds" @@ -11800,6 +11908,42 @@ msgstr "Set action to take on entries matching this rule." msgid "Set an API-KEY is the minimal configuration to get a working API Endpoint." msgstr "Set an API-KEY is the minimal configuration to get a working API Endpoint." +#: ../../configuration/service/dns.rst:184 +msgid "Set an :abbr:`AAAA (IPv6 Address)` record. Supports ``@`` and ``any`` keywords." +msgstr "Set an :abbr:`AAAA (IPv6 Address)` record. Supports ``@`` and ``any`` keywords." + +#: ../../configuration/service/dns.rst:179 +msgid "Set an :abbr:`A (Address)` record. Supports ``@`` and ``any`` keywords." +msgstr "Set an :abbr:`A (Address)` record. Supports ``@`` and ``any`` keywords." + +#: ../../configuration/service/dns.rst:189 +msgid "Set an :abbr:`CNAME (Canonical name)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`CNAME (Canonical name)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:194 +msgid "Set an :abbr:`NAPTR (Naming authority pointer)` record. Supports ``@`` keyword. NAPTR records support the following options:" +msgstr "Set an :abbr:`NAPTR (Naming authority pointer)` record. Supports ``@`` keyword. NAPTR records support the following options:" + +#: ../../configuration/service/dns.rst:218 +msgid "Set an :abbr:`NS (Nameserver)` record." +msgstr "Set an :abbr:`NS (Nameserver)` record." + +#: ../../configuration/service/dns.rst:223 +msgid "Set an :abbr:`PTR (Pointer record)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`PTR (Pointer record)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:228 +msgid "Set an :abbr:`SPF (Sender policy framework)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`SPF (Sender policy framework)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:233 +msgid "Set an :abbr:`SRV (Service)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`SRV (Service)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:238 +msgid "Set an :abbr:`TXT (Text)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`TXT (Text)` record. Supports ``@`` keyword." + #: ../../configuration/service/ipoe-server.rst:60 #: ../../configuration/service/ipoe-server.rst:88 #: ../../configuration/service/pppoe-server.rst:38 @@ -11829,8 +11973,8 @@ msgstr "Set delay for second set of gratuitous ARPs after transition to MASTER." msgid "Set description." msgstr "Set description." -#: ../../configuration/service/dns.rst:227 -#: ../../configuration/service/dns.rst:332 +#: ../../configuration/service/dns.rst:321 +#: ../../configuration/service/dns.rst:426 msgid "Set description `` for dynamic DNS service being configured." msgstr "Set description `` for dynamic DNS service being configured." @@ -12149,6 +12293,10 @@ msgstr "Set the :abbr:`DR (Designated Router)` Priority for the interface. This msgid "Set the :abbr:`MRU (Maximum Receive Unit)` to `mru`. PPPd will ask the peer to send packets of no more than `mru` bytes. The value of `mru` must be between 128 and 16384." msgstr "Set the :abbr:`MRU (Maximum Receive Unit)` to `mru`. PPPd will ask the peer to send packets of no more than `mru` bytes. The value of `mru` must be between 128 and 16384." +#: ../../configuration/service/dns.rst:164 +msgid "Set the :abbr:`TTL (Time-to-live)` for the record in seconds. Default is 300 seconds." +msgstr "Set the :abbr:`TTL (Time-to-live)` for the record in seconds. Default is 300 seconds." + #: ../../configuration/service/ssh.rst:106 msgid "Set the ``sshd`` log level. The default is ``info``." msgstr "Set the ``sshd`` log level. The default is ``info``." @@ -12237,11 +12385,11 @@ msgstr "Set the number of TCP maximum retransmit attempts." msgid "Set the number of health check failures before an interface is marked as unavailable, range for number is 1 to 10, default 1. Or set the number of successful health checks before an interface is added back to the interface pool, range for number is 1 to 10, default 1." msgstr "Set the number of health check failures before an interface is marked as unavailable, range for number is 1 to 10, default 1. Or set the number of successful health checks before an interface is added back to the interface pool, range for number is 1 to 10, default 1." -#: ../../configuration/protocols/rpki.rst:121 +#: ../../configuration/protocols/rpki.rst:119 msgid "Set the number of seconds the router waits until retrying to connect to the cache server." msgstr "Set the number of seconds the router waits until retrying to connect to the cache server." -#: ../../configuration/protocols/rpki.rst:114 +#: ../../configuration/protocols/rpki.rst:112 msgid "Set the number of seconds the router waits until the router expires the cache." msgstr "Set the number of seconds the router waits until the router expires the cache." @@ -12388,7 +12536,7 @@ msgstr "Setup the `` in seconds when querying the RADIUS server." msgid "Setup the `` in seconds when querying the TACACS server." msgstr "Setup the `` in seconds when querying the TACACS server." -#: ../../configuration/service/dns.rst:336 +#: ../../configuration/service/dns.rst:430 msgid "Setup the dynamic DNS hostname `` associated with the DynDNS provider identified by ``." msgstr "Setup the dynamic DNS hostname `` associated with the DynDNS provider identified by ``." @@ -13281,7 +13429,7 @@ msgstr "Specify an alternate AS for this BGP process when interacting with the s msgid "Specify an alternate TCP port where the ldap server is listening if other than the default LDAP port 389." msgstr "Specify an alternate TCP port where the ldap server is listening if other than the default LDAP port 389." -#: ../../configuration/service/dns.rst:254 +#: ../../configuration/service/dns.rst:348 msgid "Specify interval in seconds to wait between Dynamic DNS updates. The default is 300 seconds." msgstr "Specify interval in seconds to wait between Dynamic DNS updates. The default is 300 seconds." @@ -13327,7 +13475,7 @@ msgstr "Specify the identifier value of the site-level aggregator (SLA) on the i msgid "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." msgstr "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." -#: ../../configuration/loadbalancing/reverse-proxy.rst:167 +#: ../../configuration/loadbalancing/reverse-proxy.rst:170 msgid "Specify the minimum required TLS version 1.2 or 1.3" msgstr "Specify the minimum required TLS version 1.2 or 1.3" @@ -13695,7 +13843,7 @@ msgstr "Temporary disable this RADIUS server. It won't be queried." msgid "Temporary disable this TACACS server. It won't be queried." msgstr "Temporary disable this TACACS server. It won't be queried." -#: ../../configuration/loadbalancing/reverse-proxy.rst:245 +#: ../../configuration/loadbalancing/reverse-proxy.rst:248 msgid "Terminate SSL" msgstr "Terminate SSL" @@ -13747,7 +13895,7 @@ msgstr "The ARP monitor works by periodically checking the slave devices to dete msgid "The ASP has documented their IPSec requirements:" msgstr "The ASP has documented their IPSec requirements:" -#: ../../configuration/protocols/rpki.rst:82 +#: ../../configuration/protocols/rpki.rst:80 msgid "The BGP router can connect to one or more RPKI cache servers to receive validated prefix to origin AS mappings. Advanced failover can be implemented by server sockets with different preference values." msgstr "The BGP router can connect to one or more RPKI cache servers to receive validated prefix to origin AS mappings. Advanced failover can be implemented by server sockets with different preference values." @@ -13775,7 +13923,7 @@ msgstr "The DN and password to bind as while performing searches. As the passwor msgid "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." msgstr "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." -#: ../../configuration/loadbalancing/reverse-proxy.rst:215 +#: ../../configuration/loadbalancing/reverse-proxy.rst:218 msgid "The HTTP service listen on TCP port 80." msgstr "The HTTP service listen on TCP port 80." @@ -13827,19 +13975,23 @@ msgstr "The UDP port number used by your apllication. It is mandatory for this k msgid "The VXLAN specification was originally created by VMware, Arista Networks and Cisco. Other backers of the VXLAN technology include Huawei, Broadcom, Citrix, Pica8, Big Switch Networks, Cumulus Networks, Dell EMC, Ericsson, Mellanox, FreeBSD, OpenBSD, Red Hat, Joyent, and Juniper Networks." msgstr "The VXLAN specification was originally created by VMware, Arista Networks and Cisco. Other backers of the VXLAN technology include Huawei, Broadcom, Citrix, Pica8, Big Switch Networks, Cumulus Networks, Dell EMC, Ericsson, Mellanox, FreeBSD, OpenBSD, Red Hat, Joyent, and Juniper Networks." +#: ../../configuration/service/dns.rst:149 +msgid "The VyOS DNS forwarder can also be configured to host authoritative records for a domain." +msgstr "The VyOS DNS forwarder can also be configured to host authoritative records for a domain." + #: ../../configuration/service/dns.rst:14 msgid "The VyOS DNS forwarder does not require an upstream DNS server. It can serve as a full recursive DNS server - but it can also forward queries to configurable upstream DNS servers. By not configuring any upstream DNS servers you also avoid being tracked by the provider of your upstream DNS server." msgstr "The VyOS DNS forwarder does not require an upstream DNS server. It can serve as a full recursive DNS server - but it can also forward queries to configurable upstream DNS servers. By not configuring any upstream DNS servers you also avoid being tracked by the provider of your upstream DNS server." -#: ../../configuration/service/dns.rst:160 +#: ../../configuration/service/dns.rst:254 msgid "The VyOS DNS forwarder will only accept lookup requests from the LAN subnets - 192.168.1.0/24 and 2001:db8::/64" msgstr "The VyOS DNS forwarder will only accept lookup requests from the LAN subnets - 192.168.1.0/24 and 2001:db8::/64" -#: ../../configuration/service/dns.rst:158 +#: ../../configuration/service/dns.rst:252 msgid "The VyOS DNS forwarder will only listen for requests on the eth1 (LAN) interface addresses - 192.168.1.254 for IPv4 and 2001:db8::ffff for IPv6" msgstr "The VyOS DNS forwarder will only listen for requests on the eth1 (LAN) interface addresses - 192.168.1.254 for IPv4 and 2001:db8::ffff for IPv6" -#: ../../configuration/service/dns.rst:162 +#: ../../configuration/service/dns.rst:256 msgid "The VyOS DNS forwarder will pass reverse lookups for 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa zones to upstream server." msgstr "The VyOS DNS forwarder will pass reverse lookups for 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa zones to upstream server." @@ -13888,10 +14040,26 @@ msgstr "The ``address`` can be configured either on the VRRP interface or on not msgid "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" msgstr "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" +#: ../../configuration/loadbalancing/reverse-proxy.rst:305 +msgid "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" +msgstr "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" + #: ../../configuration/loadbalancing/reverse-proxy.rst:248 msgid "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." msgstr "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." +#: ../../configuration/loadbalancing/reverse-proxy.rst:251 +msgid "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." +msgstr "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:302 +msgid "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." +msgstr "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:254 +msgid "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." +msgstr "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." + #: ../../configuration/loadbalancing/reverse-proxy.rst:251 msgid "The ``https`` service listens on port 443 with backend `bk-default` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." msgstr "The ``https`` service listens on port 443 with backend `bk-default` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." @@ -14071,7 +14239,7 @@ msgstr "The default value corresponds to 64." msgid "The default value is 0. This will cause the carrier to be asserted (for 802.3ad mode) whenever there is an active aggregator, regardless of the number of available links in that aggregator." msgstr "The default value is 0. This will cause the carrier to be asserted (for 802.3ad mode) whenever there is an active aggregator, regardless of the number of available links in that aggregator." -#: ../../configuration/protocols/rpki.rst:110 +#: ../../configuration/protocols/rpki.rst:108 msgid "The default value is 300 seconds." msgstr "The default value is 300 seconds." @@ -14083,11 +14251,11 @@ msgstr "The default value is 3." msgid "The default value is 3 packets." msgstr "The default value is 3 packets." -#: ../../configuration/protocols/rpki.rst:124 +#: ../../configuration/protocols/rpki.rst:122 msgid "The default value is 600 seconds." msgstr "The default value is 600 seconds." -#: ../../configuration/protocols/rpki.rst:117 +#: ../../configuration/protocols/rpki.rst:115 msgid "The default value is 7200 seconds." msgstr "The default value is 7200 seconds." @@ -14229,7 +14397,7 @@ msgstr "The following commands translate to \"--net host\" when the container is msgid "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" msgstr "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:212 +#: ../../configuration/loadbalancing/reverse-proxy.rst:215 msgid "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." msgstr "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." @@ -14245,6 +14413,14 @@ msgstr "The following configuration on VyOS applies to all following 3rd party v msgid "The following configuration reverse-proxy terminate SSL." msgstr "The following configuration reverse-proxy terminate SSL." +#: ../../configuration/loadbalancing/reverse-proxy.rst:249 +msgid "The following configuration terminates SSL on the router." +msgstr "The following configuration terminates SSL on the router." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:295 +msgid "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." +msgstr "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." + #: ../../configuration/interfaces/pppoe.rst:383 msgid "The following configuration will assign a /64 prefix out of a /56 delegation to eth0. The IPv6 address assigned to eth0 will be ::ffff/64. If you do not know the prefix size delegated to you, start with sla-len 0." msgstr "The following configuration will assign a /64 prefix out of a /56 delegation to eth0. The IPv6 address assigned to eth0 will be ::ffff/64. If you do not know the prefix size delegated to you, start with sla-len 0." @@ -14442,7 +14618,7 @@ msgstr "The most visible application of the protocol is for access to shell acco msgid "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." msgstr "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." -#: ../../configuration/loadbalancing/reverse-proxy.rst:182 +#: ../../configuration/loadbalancing/reverse-proxy.rst:185 msgid "The name of the service can be different, in this example it is only for convenience." msgstr "The name of the service can be different, in this example it is only for convenience." @@ -14522,11 +14698,11 @@ msgstr "The popular Unix/Linux ``dig`` tool sets the AD-bit in the query. This m msgid "The pre-shared key mode is deprecated and will be removed from future OpenVPN versions, so VyOS will have to remove support for that option as well. The reason is that using pre-shared keys is significantly less secure than using TLS." msgstr "The pre-shared key mode is deprecated and will be removed from future OpenVPN versions, so VyOS will have to remove support for that option as well. The reason is that using pre-shared keys is significantly less secure than using TLS." -#: ../../configuration/protocols/rpki.rst:49 +#: ../../configuration/protocols/rpki.rst:47 msgid "The prefix and ASN that originated it match a signed ROA. These are probably trustworthy route announcements." msgstr "The prefix and ASN that originated it match a signed ROA. These are probably trustworthy route announcements." -#: ../../configuration/protocols/rpki.rst:53 +#: ../../configuration/protocols/rpki.rst:51 msgid "The prefix or prefix length and ASN that originated it doesn't match any existing ROA. This could be the result of a prefix hijack, or merely a misconfiguration, but should probably be treated as untrustworthy route announcements." msgstr "The prefix or prefix length and ASN that originated it doesn't match any existing ROA. This could be the result of a prefix hijack, or merely a misconfiguration, but should probably be treated as untrustworthy route announcements." @@ -15985,11 +16161,11 @@ msgstr "This commands creates a bridge that is used to bind traffic on eth1 vlan msgid "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." msgstr "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." -#: ../../configuration/loadbalancing/reverse-proxy.rst:192 +#: ../../configuration/loadbalancing/reverse-proxy.rst:195 msgid "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." msgstr "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." -#: ../../configuration/loadbalancing/reverse-proxy.rst:174 +#: ../../configuration/loadbalancing/reverse-proxy.rst:177 msgid "This configuration listen on port 80 and redirect incoming requests to HTTPS:" msgstr "This configuration listen on port 80 and redirect incoming requests to HTTPS:" @@ -16164,8 +16340,8 @@ msgstr "This is a mandatory command. Sets the full path to the script. The scrip msgid "This is a mandatory option" msgstr "This is a mandatory option" -#: ../../configuration/protocols/rpki.rst:131 -#: ../../configuration/protocols/rpki.rst:138 +#: ../../configuration/protocols/rpki.rst:129 +#: ../../configuration/protocols/rpki.rst:136 msgid "This is a mandatory setting." msgstr "This is a mandatory setting." @@ -16455,7 +16631,7 @@ msgstr "This will configure a static ARP entry always resolving `
` to ` msgid "This will match TCP traffic with source port 80." msgstr "This will match TCP traffic with source port 80." -#: ../../configuration/service/dns.rst:295 +#: ../../configuration/service/dns.rst:389 msgid "This will render the following ddclient_ configuration entry:" msgstr "This will render the following ddclient_ configuration entry:" @@ -16832,7 +17008,7 @@ msgstr "To use a RADIUS server for authentication and bandwidth-shaping, the fol msgid "To use a radius server, you need to switch to authentication mode RADIUS and then configure it." msgstr "To use a radius server, you need to switch to authentication mode RADIUS and then configure it." -#: ../../configuration/service/dns.rst:321 +#: ../../configuration/service/dns.rst:415 msgid "To use such a service, one must define a login, password, one or multiple hostnames, protocol and server." msgstr "To use such a service, one must define a login, password, one or multiple hostnames, protocol and server." @@ -17057,7 +17233,7 @@ msgstr "Update geoip database" msgid "Updates" msgstr "Updates" -#: ../../configuration/protocols/rpki.rst:99 +#: ../../configuration/protocols/rpki.rst:97 msgid "Updates from the RPKI cache servers are directly applied and path selection is updated accordingly. (Soft reconfiguration must be enabled for this to work)." msgstr "Updates from the RPKI cache servers are directly applied and path selection is updated accordingly. (Soft reconfiguration must be enabled for this to work)." @@ -17162,7 +17338,7 @@ msgstr "Use an automatically generated self-signed certificate" msgid "Use any local address, configured on any interface if this is not set." msgstr "Use any local address, configured on any interface if this is not set." -#: ../../configuration/service/dns.rst:263 +#: ../../configuration/service/dns.rst:357 msgid "Use auth key file at ``/config/auth/my.key``" msgstr "Use auth key file at ``/config/auth/my.key``" @@ -17170,11 +17346,11 @@ msgstr "Use auth key file at ``/config/auth/my.key``" msgid "Use certificate from PKI subsystem" msgstr "Use certificate from PKI subsystem" -#: ../../configuration/service/dns.rst:410 +#: ../../configuration/service/dns.rst:504 msgid "Use configured `` to determine your IP address. ddclient_ will load `` and tries to extract your IP address from the response." msgstr "Use configured `` to determine your IP address. ddclient_ will load `` and tries to extract your IP address from the response." -#: ../../configuration/service/dns.rst:368 +#: ../../configuration/service/dns.rst:462 msgid "Use deSEC (dedyn.io) as your preferred provider:" msgstr "Use deSEC (dedyn.io) as your preferred provider:" @@ -18323,11 +18499,11 @@ msgstr "VyOS facilitates IPv6 Multicast by supporting **PIMv6** and **MLD**." msgid "VyOS includes the FastNetMon Community Edition." msgstr "VyOS includes the FastNetMon Community Edition." -#: ../../configuration/service/dns.rst:201 +#: ../../configuration/service/dns.rst:295 msgid "VyOS is able to update a remote DNS record when an interface gets a new IP address. In order to do so, VyOS includes ddclient_, a Perl script written for this only one purpose." msgstr "VyOS is able to update a remote DNS record when an interface gets a new IP address. In order to do so, VyOS includes ddclient_, a Perl script written for this only one purpose." -#: ../../configuration/service/dns.rst:319 +#: ../../configuration/service/dns.rst:413 msgid "VyOS is also able to use any service relying on protocols supported by ddclient." msgstr "VyOS is also able to use any service relying on protocols supported by ddclient." @@ -18536,7 +18712,7 @@ msgstr "We can't support all displays from the beginning. If your display type i msgid "We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let's Encrypt an open certificate authority launched by the EFF, Mozilla, and others and deploys it to a web server." msgstr "We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let's Encrypt an open certificate authority launched by the EFF, Mozilla, and others and deploys it to a web server." -#: ../../configuration/protocols/rpki.rst:170 +#: ../../configuration/protocols/rpki.rst:168 msgid "We can build route-maps for import based on these states. Here is a simple RPKI configuration, where `routinator` is the RPKI-validating \"cache\" server with ip `192.0.2.1`:" msgstr "We can build route-maps for import based on these states. Here is a simple RPKI configuration, where `routinator` is the RPKI-validating \"cache\" server with ip `192.0.2.1`:" @@ -18620,11 +18796,11 @@ msgstr "When PIM receives a register packet the source of the packet will be com msgid "When VRFs are used it is not only mandatory to create a VRF but also the VRF itself needs to be assigned to an interface." msgstr "When VRFs are used it is not only mandatory to create a VRF but also the VRF itself needs to be assigned to an interface." -#: ../../configuration/service/dns.rst:351 +#: ../../configuration/service/dns.rst:445 msgid "When a ``custom`` DynDNS provider is used, the protocol used for communicating to the provider must be specified under ``. See the embedded completion helper when entering above command for available protocols." msgstr "When a ``custom`` DynDNS provider is used, the protocol used for communicating to the provider must be specified under ``. See the embedded completion helper when entering above command for available protocols." -#: ../../configuration/service/dns.rst:357 +#: ../../configuration/service/dns.rst:451 msgid "When a ``custom`` DynDNS provider is used the `` where update requests are being sent to must be specified." msgstr "When a ``custom`` DynDNS provider is used the `` where update requests are being sent to must be specified." @@ -18797,7 +18973,7 @@ msgstr "When using NAT for a large number of host systems it recommended that a msgid "When using SSH, known-hosts-file, private-key-file and public-key-file are mandatory options." msgstr "When using SSH, known-hosts-file, private-key-file and public-key-file are mandatory options." -#: ../../configuration/protocols/rpki.rst:163 +#: ../../configuration/protocols/rpki.rst:161 msgid "When using SSH, private-key-file and public-key-file are mandatory options." msgstr "When using SSH, private-key-file and public-key-file are mandatory options." @@ -19008,7 +19184,7 @@ msgstr "You can also configure the time interval for preemption with the \"preem msgid "You can also define custom timeout values to apply to a specific subset of connections, based on a packet and flow selector. To do this, you need to create a rule defining the packet and flow selector." msgstr "You can also define custom timeout values to apply to a specific subset of connections, based on a packet and flow selector. To do this, you need to create a rule defining the packet and flow selector." -#: ../../configuration/service/dns.rst:312 +#: ../../configuration/service/dns.rst:406 msgid "You can also keep different DNS zone updated. Just create a new config node: ``set service dns dynamic interface rfc2136 ``" msgstr "You can also keep different DNS zone updated. Just create a new config node: ``set service dns dynamic interface rfc2136 ``" @@ -19348,6 +19524,10 @@ msgstr ":abbr:`RIP (Routing Information Protocol)` is a widely deployed interior msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:`PKI (Public Key Infrastructure)` designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:`PKI (Public Key Infrastructure)` designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." +#: ../../configuration/protocols/rpki.rst:14 +msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." +msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." + #: ../../configuration/interfaces/ethernet.rst:82 msgid ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" msgstr ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" @@ -19512,7 +19692,7 @@ msgstr ":ref:`routing-static`: ``set vrf name protocols static ...``" msgid ":rfc:`2131` states: The client MAY choose to explicitly provide the identifier through the 'client identifier' option. If the client supplies a 'client identifier', the client MUST use the same 'client identifier' in all subsequent messages, and the server MUST use that identifier to identify the client." msgstr ":rfc:`2131` states: The client MAY choose to explicitly provide the identifier through the 'client identifier' option. If the client supplies a 'client identifier', the client MUST use the same 'client identifier' in all subsequent messages, and the server MUST use that identifier to identify the client." -#: ../../configuration/service/dns.rst:217 +#: ../../configuration/service/dns.rst:311 msgid ":rfc:`2136` Based" msgstr ":rfc:`2136` Based" @@ -19664,6 +19844,10 @@ msgstr "``9600`` - 9600 bps" msgid "``< dh-group >`` defines a Diffie-Hellman group for PFS;" msgstr "``< dh-group >`` defines a Diffie-Hellman group for PFS;" +#: ../../configuration/service/dns.rst:172 +msgid "``@`` Use @ as record name to set the record for the root domain." +msgstr "``@`` Use @ as record name to set the record for the root domain." + #: ../../configuration/protocols/segment-routing.rst:41 msgid "``Known limitations:``" msgstr "``Known limitations:``" @@ -19734,6 +19918,10 @@ msgstr "``all-available`` all checking target addresses must be available to pas msgid "``any-available`` any of the checking target addresses must be available to pass this check" msgstr "``any-available`` any of the checking target addresses must be available to pass this check" +#: ../../configuration/service/dns.rst:174 +msgid "``any`` Use any as record name to configure the record as a wildcard." +msgstr "``any`` Use any as record name to configure the record as a wildcard." + #: ../../configuration/vpn/site2site_ipsec.rst:388 msgid "``authentication local-id/remote-id`` - IKE identification is used for validation of VPN peer devices during IKE negotiation. If you do not configure local/remote-identity, the device uses the IPv4 or IPv6 address that corresponds to the local/remote peer by default. In certain network setups (like ipsec interface with dynamic address, or behind the NAT ), the IKE ID received from the peer does not match the IKE gateway configured on the device. This can lead to a Phase 1 validation failure. So, make sure to configure the local/remote id explicitly and ensure that the IKE ID is the same as the remote-identity configured on the peer device." msgstr "``authentication local-id/remote-id`` - IKE identification is used for validation of VPN peer devices during IKE negotiation. If you do not configure local/remote-identity, the device uses the IPv4 or IPv6 address that corresponds to the local/remote peer by default. In certain network setups (like ipsec interface with dynamic address, or behind the NAT ), the IKE ID received from the peer does not match the IKE gateway configured on the device. This can lead to a Phase 1 validation failure. So, make sure to configure the local/remote id explicitly and ensure that the IKE ID is the same as the remote-identity configured on the peer device." @@ -20855,7 +21043,7 @@ msgstr "cron" msgid "daemon" msgstr "daemon" -#: ../../configuration/service/dns.rst:405 +#: ../../configuration/service/dns.rst:499 msgid "ddclient_ has another way to determine the WAN IP address. This is controlled by:" msgstr "ddclient_ has another way to determine the WAN IP address. This is controlled by:" @@ -20863,11 +21051,11 @@ msgstr "ddclient_ has another way to determine the WAN IP address. This is contr msgid "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other similar website. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." msgstr "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other similar website. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." -#: ../../configuration/service/dns.rst:205 +#: ../../configuration/service/dns.rst:299 msgid "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other such service provider. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." msgstr "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other such service provider. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." -#: ../../configuration/service/dns.rst:415 +#: ../../configuration/service/dns.rst:509 msgid "ddclient_ will skip any address located before the string set in ``." msgstr "ddclient_ will skip any address located before the string set in ``." @@ -21044,7 +21232,7 @@ msgstr "info" msgid "interval" msgstr "interval" -#: ../../configuration/protocols/rpki.rst:56 +#: ../../configuration/protocols/rpki.rst:54 msgid "invalid" msgstr "invalid" @@ -21276,7 +21464,7 @@ msgstr "no-autonomous-flag" msgid "no-on-link-flag" msgstr "no-on-link-flag" -#: ../../configuration/protocols/rpki.rst:61 +#: ../../configuration/protocols/rpki.rst:59 msgid "notfound" msgstr "notfound" @@ -21549,7 +21737,7 @@ msgstr "user" msgid "uucp" msgstr "uucp" -#: ../../configuration/protocols/rpki.rst:50 +#: ../../configuration/protocols/rpki.rst:48 msgid "valid" msgstr "valid" diff --git a/docs/_locale/de/contributing.pot b/docs/_locale/de/contributing.pot index 706fcbfb..43e97407 100644 --- a/docs/_locale/de/contributing.pot +++ b/docs/_locale/de/contributing.pot @@ -442,7 +442,7 @@ msgstr "Jeder Änderungssatz muss konsistent (in sich geschlossen) sein! Beheben #: ../../contributing/development.rst:412 #: ../../contributing/testing.rst:66 msgid "Example:" -msgstr "Beispiel:" +msgstr "Example:" #: ../../contributing/development.rst:559 #: ../../contributing/development.rst:571 diff --git a/docs/_locale/en/LC_MESSAGES/configexamples.mo b/docs/_locale/en/LC_MESSAGES/configexamples.mo index a1d1f74d..259708b2 100644 Binary files a/docs/_locale/en/LC_MESSAGES/configexamples.mo and b/docs/_locale/en/LC_MESSAGES/configexamples.mo differ diff --git a/docs/_locale/en/LC_MESSAGES/configuration.mo b/docs/_locale/en/LC_MESSAGES/configuration.mo index 4c3377f1..d43c6e6c 100644 Binary files a/docs/_locale/en/LC_MESSAGES/configuration.mo and b/docs/_locale/en/LC_MESSAGES/configuration.mo differ diff --git a/docs/_locale/es/LC_MESSAGES/configexamples.mo b/docs/_locale/es/LC_MESSAGES/configexamples.mo index f8b2b3b2..f3c00d5f 100644 Binary files a/docs/_locale/es/LC_MESSAGES/configexamples.mo and b/docs/_locale/es/LC_MESSAGES/configexamples.mo differ diff --git a/docs/_locale/es/LC_MESSAGES/configuration.mo b/docs/_locale/es/LC_MESSAGES/configuration.mo index be9a1360..953167c3 100644 Binary files a/docs/_locale/es/LC_MESSAGES/configuration.mo and b/docs/_locale/es/LC_MESSAGES/configuration.mo differ diff --git a/docs/_locale/es/configexamples.pot b/docs/_locale/es/configexamples.pot index 1aa4020f..c1bdffc0 100644 --- a/docs/_locale/es/configexamples.pot +++ b/docs/_locale/es/configexamples.pot @@ -318,6 +318,14 @@ msgstr "Directorio activo en el servidor de Windows" msgid "Add (temporary) default route" msgstr "Agregar ruta predeterminada (temporal)" +#: ../../configexamples/ansible.rst:99 +msgid "Add a simple playbook with the tasks for each router:" +msgstr "Add a simple playbook with the tasks for each router:" + +#: ../../configexamples/ansible.rst:73 +msgid "Add all the VyOS hosts:" +msgstr "Add all the VyOS hosts:" + #: ../../configexamples/ansible.rst:73 msgid "Add all the hosts of VyOS:" msgstr "Add all the hosts of VyOS:" @@ -350,6 +358,10 @@ msgstr "Después de que todo esté hecho y confirmado, echemos un vistazo si la msgid "After configured all the VRFs involved in this topology we take a deeper look at both BGP and Routing table for the VRF LAN1" msgstr "Después de configurar todos los VRF involucrados en esta topología, echamos un vistazo más profundo tanto a BGP como a la tabla de enrutamiento para VRF LAN1." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 +msgid "After some testing, we can check IPSec status, and counter on every tunnel:" +msgstr "After some testing, we can check IPSec status, and counter on every tunnel:" + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 msgid "After some testing, we can check ipsec status, and counter on every tunnel:" msgstr "After some testing, we can check ipsec status, and counter on every tunnel:" @@ -378,6 +390,14 @@ msgstr "Todo el tráfico que ingresa a través de eth2 se equilibra entre eth0 y msgid "Allow DHCPv6 packets for router" msgstr "Permitir paquetes DHCPv6 para el enrutador" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:34 +msgid "Allow DNS requests only only for local networks." +msgstr "Allow DNS requests only only for local networks." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:36 +msgid "Allow ICMP on all interfaces." +msgstr "Allow ICMP on all interfaces." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:32 msgid "Allow access to the router only from trusted networks." msgstr "Allow access to the router only from trusted networks." @@ -571,6 +591,10 @@ msgstr "Cortafuegos básico" msgid "Basic Setup (via console)" msgstr "Configuración básica (a través de la consola)" +#: ../../configexamples/ansible.rst:64 +msgid "Basic configuration of ansible.cfg:" +msgstr "Basic configuration of ansible.cfg:" + #: ../../configexamples/ansible.rst:64 msgid "Basik configuration of the ansible.cfg:" msgstr "Basik configuration of the ansible.cfg:" @@ -664,6 +688,10 @@ msgstr "Client" msgid "Client configuration" msgstr "Configuración del cliente" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 +msgid "Communication between private subnets should be done through IPSec tunnel without NAT." +msgstr "Communication between private subnets should be done through IPSec tunnel without NAT." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 msgid "Communication between private subnets should be done through ipsec tunnel without nat." msgstr "Communication between private subnets should be done through ipsec tunnel without nat." @@ -1012,6 +1040,10 @@ msgstr "Para los usuarios de redes domésticas, la mayoría de las veces el ISP msgid "For redundant / active-active configurations see :ref:`examples-azure-vpn-dual-bgp`" msgstr "Para configuraciones redundantes/activo-activo, consulte :ref:`examples-azure-vpn-dual-bgp`" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 +msgid "For simplicity, configuration and tests are done only using IPv4, and firewall configuration is done only on one router." +msgstr "For simplicity, configuration and tests are done only using IPv4, and firewall configuration is done only on one router." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 msgid "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." msgstr "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." @@ -1217,6 +1249,10 @@ msgstr "Al final, obtendrá un poderoso instrumento para monitorear los sistemas msgid "In the end, you will end up with something like this config. I took out everything but the Firewall, Interfaces, and zone-policy sections. It is long enough as is." msgstr "Al final, terminará con algo como esta configuración. Eliminé todo excepto las secciones Firewall, Interfaces y zone-policy. Es lo suficientemente largo como está." +#: ../../configexamples/ansible.rst:216 +msgid "In the next chapter of the example, we'll use Ansible with jinja2 templates and variables." +msgstr "In the next chapter of the example, we'll use Ansible with jinja2 templates and variables." + #: ../../configexamples/ansible.rst:216 msgid "In the next chapter of the example, we'll use the Ansible with jinja2 templates and variables." msgstr "In the next chapter of the example, we'll use the Ansible with jinja2 templates and variables." @@ -1277,6 +1313,14 @@ msgstr "Información sobre Redes Privadas Virtuales Ethernet" msgid "Information about prefix-sid and label-operation from VyOS" msgstr "Información sobre prefijo-sid y etiqueta-operación de VyOS" +#: ../../configexamples/ansible.rst:37 +msgid "Install Ansible:" +msgstr "Install Ansible:" + +#: ../../configexamples/ansible.rst:44 +msgid "Install Paramiko:" +msgstr "Install Paramiko:" + #: ../../configexamples/ansible.rst:37 msgid "Install the Ansible:" msgstr "Install the Ansible:" @@ -1418,6 +1462,10 @@ msgstr "Verifiquemos el enrutamiento IPv4 y la información de MPLS en los nodos msgid "Let’s say we have a requirement to have multiple networks." msgstr "Digamos que tenemos un requisito para tener varias redes." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 +msgid "Local subnets should be able to reach internet using source NAT." +msgstr "Local subnets should be able to reach internet using source NAT." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 msgid "Local subnets should be able to reach internet using source nat." msgstr "Local subnets should be able to reach internet using source nat." @@ -1731,6 +1779,10 @@ msgstr "requisitos previos" msgid "Priorities" msgstr "Prioridades" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 +msgid "Protect the router on 'WAN' interface, allowing only IPSec connections and SSH access from trusted IPs." +msgstr "Protect the router on 'WAN' interface, allowing only IPSec connections and SSH access from trusted IPs." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 msgid "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." msgstr "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." @@ -2162,6 +2214,10 @@ msgstr "Esto logra algunas cosas:" msgid "This chapter contains various configuration examples:" msgstr "Este capítulo contiene varios ejemplos de configuración:" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 +msgid "This configuration example and the requirments consists of:" +msgstr "This configuration example and the requirments consists of:" + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 msgid "This configuration example and the requirments consists on:" msgstr "This configuration example and the requirments consists on:" @@ -2210,6 +2266,10 @@ msgstr "Esta guía muestra un ejemplo de una VPN de sitio a sitio IKEv2 basada e msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:7 +msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configuration." +msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configuration." + #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:10 msgid "This guide walks through the setup of https://www.tunnelbroker.net/ for an IPv6 Tunnel." msgstr "Esta guía recorre la configuración de https://www.tunnelbroker.net/ para un túnel IPv6." diff --git a/docs/_locale/es/configuration.pot b/docs/_locale/es/configuration.pot index 585d7b3a..47e842e1 100644 --- a/docs/_locale/es/configuration.pot +++ b/docs/_locale/es/configuration.pot @@ -802,6 +802,14 @@ msgstr "**lado local - comandos**" msgid "**log-fail** In this mode, the recursor will attempt to validate all data it retrieves from authoritative servers, regardless of the client's DNSSEC desires, and will log the validation result. This mode can be used to determine the extra load and amount of possibly bogus answers before turning on full-blown validation. Responses to client queries are the same as with process." msgstr "**log-fail** En este modo, el recursor intentará validar todos los datos que recupera de los servidores autorizados, independientemente de los deseos de DNSSEC del cliente, y registrará el resultado de la validación. Este modo se puede usar para determinar la carga adicional y la cantidad de respuestas posiblemente falsas antes de activar la validación completa. Las respuestas a las consultas de los clientes son las mismas que con el proceso." +#: ../../configuration/service/dns.rst:197 +msgid "**lookup-a** A Flag." +msgstr "**lookup-a** A Flag." + +#: ../../configuration/service/dns.rst:199 +msgid "**lookup-srv** S flag." +msgstr "**lookup-srv** S flag." + #: ../../configuration/protocols/isis.rst:100 msgid "**narrow** - Use old style of TLVs with narrow metric." msgstr "**estrecho**: use el estilo antiguo de TLV con métrica estrecha." @@ -839,6 +847,10 @@ msgstr "**apagado** En este modo, no se lleva a cabo ningún procesamiento de DN msgid "**on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)" msgstr "**en caso de error**: reiniciar los contenedores cuando salen con un código de salida distinto de cero, reintentando indefinidamente (predeterminado)" +#: ../../configuration/service/dns.rst:201 +msgid "**order** Rule order. Requires ``." +msgstr "**order** Rule order. Requires ``." + #: ../../configuration/nat/nat44.rst:149 msgid "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." msgstr "**interfaz de salida** - aplicable solo a :ref:`source-nat`. Configura la interfaz que se utiliza para el tráfico externo al que se aplica esta regla de traducción." @@ -872,6 +884,10 @@ msgstr "**preferir** - preguntar al cliente por mppe, si lo rechaza no fallar" msgid "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" msgstr "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" +#: ../../configuration/service/dns.rst:203 +msgid "**preference** Rule preference. Requires ``. Defaults to 0 if not set." +msgstr "**preference** Rule preference. Requires ``. Defaults to 0 if not set." + #: ../../configuration/service/dns.rst:77 msgid "**process** When dnssec is set to process the behavior is similar to process-no-validate. However, the recursor will try to validate the data if at least one of the DO or AD bits is set in the query; in that case, it will set the AD-bit in the response when the data is validated successfully, or send SERVFAIL when the validation comes up bogus." msgstr "**proceso** Cuando dnssec está configurado para procesar, el comportamiento es similar a procesar sin validar. Sin embargo, el recursor intentará validar los datos si al menos uno de los bits DO o AD está configurado en la consulta; en ese caso, establecerá el bit AD en la respuesta cuando los datos se validen con éxito, o enviará SERVFAIL cuando la validación resulte falsa." @@ -884,6 +900,10 @@ msgstr "**procesar sin validar** En este modo, el recursor actúa como un servid msgid "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." msgstr "**protocolo**: especifique a qué tipos de protocolos se aplica esta regla de traducción. Solo los paquetes que coinciden con el protocolo especificado reciben NAT. Por defecto, esto se aplica a `todos` los protocolos." +#: ../../configuration/service/dns.rst:205 +msgid "**protocol-specific** P flag." +msgstr "**protocol-specific** P flag." + #: ../../configuration/service/ipoe-server.rst:63 #: ../../configuration/service/pppoe-server.rst:41 #: ../../configuration/vpn/l2tp.rst:29 @@ -903,6 +923,10 @@ msgstr "**radius**: Todas las consultas de autenticación son manejadas por un s msgid "**random** - Random interface identifier for IPv6" msgstr "**random** - Random interface identifier for IPv6" +#: ../../configuration/service/dns.rst:207 +msgid "**regexp** Regular expression. Requires ``." +msgstr "**regexp** Regular expression. Requires ``." + #: ../../configuration/interfaces/wireguard.rst:190 msgid "**remote side - commands**" msgstr "**lado remoto - comandos**" @@ -915,6 +939,10 @@ msgstr "**replace**: Terminate first session when second is authorized **(defaul msgid "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." msgstr "**reemplazar:** la información de retransmisión que ya está presente en un paquete se elimina y se reemplaza con el propio conjunto de información de retransmisión del enrutador." +#: ../../configuration/service/dns.rst:209 +msgid "**replacement** Replacement DNS name." +msgstr "**replacement** Replacement DNS name." + #: ../../configuration/service/pppoe-server.rst:472 #: ../../configuration/vpn/l2tp.rst:426 #: ../../configuration/vpn/pptp.rst:350 @@ -936,10 +964,18 @@ msgstr "**require** - Require IPv6 negotiation" msgid "**require** - ask client for mppe, if it rejects drop connection" msgstr "**requerir**: solicitar al cliente mppe, si rechaza la conexión de caída" +#: ../../configuration/service/dns.rst:211 +msgid "**resolve-uri** U flag." +msgstr "**resolve-uri** U flag." + #: ../../configuration/vpn/site2site_ipsec.rst:319 msgid "**right**" msgstr "**bien**" +#: ../../configuration/service/dns.rst:213 +msgid "**service** Service type. Requires ``." +msgstr "**service** Service type. Requires ``." + #: ../../configuration/container/index.rst:127 msgid "**setpcap**: Capability sets (from bounded or inherited set)" msgstr "**setpcap**: conjuntos de capacidades (del conjunto acotado o heredado)" @@ -1503,6 +1539,10 @@ msgstr "Un *bit* se escribe como **bit**," msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described in :rfc:`8210`." msgstr "Un enrutador que habla BGP como VyOS puede recuperar información de ROA del "software de usuario de confianza" RPKI (a menudo llamado simplemente "servidor RPKI" o "validador RPKI") mediante el uso del protocolo :abbr:`RTR (RPKI to Router)`. Hay varias implementaciones de código abierto para elegir, como Routinator_ de NLNetLabs (escrito en Rust), GoRTR_ y OctoRPKI_ de Cloudflare (escrito en Go) y RPKI Validator_ de RIPE NCC (escrito en Java). El protocolo RTR se describe en :rfc:`8210`." +#: ../../configuration/protocols/rpki.rst:21 +msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." +msgstr "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." + #: ../../configuration/protocols/bgp.rst:951 msgid "A BGP confederation divides our AS into sub-ASes to reduce the number of required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but between these sub-ASes we use something that looks like EBGP but behaves like IBGP (called confederation BGP). Confederation mechanism is described in :rfc:`5065`" msgstr "Una confederación BGP divide nuestro AS en sub-AS para reducir la cantidad de interconexiones IBGP requeridas. Dentro de un sub-AS aún requerimos IBGP de malla completa, pero entre estos sub-AS usamos algo que se parece a EBGP pero se comporta como IBGP (llamado BGP de confederación). El mecanismo de confederación se describe en :rfc:`5065`" @@ -1531,7 +1571,7 @@ msgstr "Se crea un dispositivo VRF con una tabla de rutas asociada. Luego, las i msgid "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." msgstr "Un túnel VyOS GRE puede transportar tráfico IPv4 e IPv6 y también se puede crear sobre IPv4 (gre) o IPv6 (ip6gre)." -#: ../../configuration/service/dns.rst:149 +#: ../../configuration/service/dns.rst:243 msgid "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." msgstr "Se requiere un enrutador VyOS con dos interfaces, eth0 (WAN) y eth1 (LAN), para implementar una configuración de DNS de horizonte dividido para example.com." @@ -1624,6 +1664,10 @@ msgstr "Una descripción legible por humanos de qué se trata este certificado." msgid "A lookback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." msgstr "Una interfaz de búsqueda siempre está activa, por lo que podría usarse para administrar el tráfico o como origen/destino para y :abbr:`IGP (Protocolo de puerta de enlace interior)` como :ref:`routing-bgp` para que su enlace BGP interno no dependa en los estados del enlace físico y se pueden elegir múltiples rutas hacia el destino. Siempre se debe preferir una interfaz :ref:`dummy-interface` a una interfaz :ref:`loopback-interface`." +#: ../../configuration/interfaces/loopback.rst:17 +msgid "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." +msgstr "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." + #: ../../configuration/service/snmp.rst:42 msgid "A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers." msgstr "Un dispositivo administrado es un nodo de red que implementa una interfaz SNMP que permite el acceso unidireccional (solo lectura) o bidireccional (lectura y escritura) a información específica del nodo. Los dispositivos administrados intercambian información específica del nodo con los NMS. A veces llamados elementos de red, los dispositivos administrados pueden ser cualquier tipo de dispositivo, incluidos, entre otros, enrutadores, servidores de acceso, conmutadores, módems de cable, puentes, concentradores, teléfonos IP, cámaras de video IP, hosts informáticos e impresoras." @@ -1920,7 +1964,7 @@ msgstr "Agregue el certificado de CA público para la CA denominada "nombre msgid "Adding a 2FA with an OTP-key" msgstr "Agregar un 2FA con una clave OTP" -#: ../../configuration/loadbalancing/reverse-proxy.rst:260 +#: ../../configuration/loadbalancing/reverse-proxy.rst:263 msgid "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." msgstr "Se establecen parámetros globales adicionales, incluido el límite de número máximo de conexiones de 4000 y una versión mínima de TLS de 1.3." @@ -2052,7 +2096,7 @@ msgstr "Algoritmo" msgid "Aliases" msgstr "Alias" -#: ../../configuration/service/dns.rst:154 +#: ../../configuration/service/dns.rst:248 msgid "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" msgstr "Todas las solicitudes de DNS para ejemplo.com deben reenviarse a un servidor DNS en 192.0.2.254 y 2001:db8:cafe::1" @@ -2080,7 +2124,7 @@ msgstr "Todas las interfaces utilizadas para el relé DHCP deben configurarse. E msgid "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." msgstr "Todos los elementos de un grupo de sincronización deben configurarse de manera similar. Si un grupo de VRRP se configura con un retraso o una prioridad de prioridad diferente, se produciría un ciclo de transición sin fin." -#: ../../configuration/service/dns.rst:156 +#: ../../configuration/service/dns.rst:250 msgid "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" msgstr "Todas las demás solicitudes de DNS se reenviarán a un conjunto diferente de servidores DNS en 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff y 2001:db8::2:ffff" @@ -2136,7 +2180,7 @@ msgstr "Permita el acceso a los sitios de un dominio sin recuperarlos de la memo msgid "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." msgstr "Permita que bgp negocie la capacidad de próximo salto extendido con su par. Si está interconectando una dirección local de enlace IPv6, esta capacidad se activa automáticamente. Si está interconectando una dirección global IPv6, al activar este comando permitirá que BGP instale rutas IPv4 con nexthops IPv6 si no tiene IPv4 configurado en las interfaces." -#: ../../configuration/service/dns.rst:362 +#: ../../configuration/service/dns.rst:456 msgid "Allow explicit IPv6 address for the interface." msgstr "Permita una dirección IPv6 explícita para la interfaz." @@ -2679,6 +2723,10 @@ msgstr "token de autenticación" msgid "Authentication – to verify that the message is from a valid source." msgstr "Autenticación: para verificar que el mensaje proviene de una fuente válida." +#: ../../configuration/service/dns.rst:147 +msgid "Authoritative zones" +msgstr "Authoritative zones" + #: ../../configuration/service/monitoring.rst:92 msgid "Authorization token" msgstr "token de autorización" @@ -2803,6 +2851,10 @@ msgstr "Babel es un protocolo de enrutamiento moderno diseñado para ser robusto msgid "Backend" msgstr "back-end" +#: ../../configuration/loadbalancing/reverse-proxy.rst:299 +msgid "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." +msgstr "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." + #: ../../configuration/loadbalancing/reverse-proxy.rst:108 msgid "Balance algorithms:" msgstr "Algoritmos de equilibrio:" @@ -2811,7 +2863,7 @@ msgstr "Algoritmos de equilibrio:" msgid "Balancing Rules" msgstr "Reglas de equilibrio" -#: ../../configuration/loadbalancing/reverse-proxy.rst:211 +#: ../../configuration/loadbalancing/reverse-proxy.rst:214 msgid "Balancing based on domain name" msgstr "Equilibrio basado en el nombre de dominio" @@ -2892,6 +2944,10 @@ msgstr "Antes de habilitar cualquier descarga de segmentación de hardware, se r msgid "Before you are able to apply a rule-set to a zone you have to create the zones first." msgstr "Antes de poder aplicar un conjunto de reglas a una zona, primero debe crear las zonas." +#: ../../configuration/service/dns.rst:169 +msgid "Below are a list of record types available to be configured within VyOS. Some records support special `` keywords:" +msgstr "Below are a list of record types available to be configured within VyOS. Some records support special `` keywords:" + #: ../../configuration/vpn/site2site_ipsec.rst:425 msgid "Below flow-chart could be a quick reference for the close-action combination depending on how the peer is configured." msgstr "El siguiente diagrama de flujo podría ser una referencia rápida para la combinación de acción de cierre, según cómo esté configurado el par." @@ -3037,11 +3093,11 @@ msgstr "De forma predeterminada, VyOS no anuncia una ruta predeterminada (0.0.0. msgid "By default, a new token is generated every 30 seconds by the mobile application. In order to compensate for possible time-skew between the client and the server, an extra token before and after the current time is allowed. This allows for a time skew of up to 30 seconds between authentication server and client." msgstr "De forma predeterminada, la aplicación móvil genera un nuevo token cada 30 segundos. Para compensar el posible desfase temporal entre el cliente y el servidor, se permite un token adicional antes y después de la hora actual. Esto permite un sesgo de tiempo de hasta 30 segundos entre el servidor de autenticación y el cliente." -#: ../../configuration/service/dns.rst:401 +#: ../../configuration/service/dns.rst:495 msgid "By default, ddclient_ will update a dynamic dns record using the IP address directly attached to the interface. If your VyOS instance is behind NAT, your record will be updated to point to your internal IP." msgstr "De manera predeterminada, ddclient_ actualizará un registro dns dinámico usando la dirección IP directamente adjunta a la interfaz. Si su instancia de VyOS está detrás de NAT, su registro se actualizará para apuntar a su IP interna." -#: ../../configuration/protocols/rpki.rst:91 +#: ../../configuration/protocols/rpki.rst:89 msgid "By default, enabling RPKI does not change best path selection. In particular, invalid prefixes will still be considered during best path selection. However, the router can be configured to ignore all invalid prefixes." msgstr "De manera predeterminada, habilitar RPKI no cambia la selección de la mejor ruta. En particular, los prefijos no válidos aún se considerarán durante la selección de la mejor ruta. Sin embargo, el enrutador se puede configurar para ignorar todos los prefijos no válidos." @@ -3372,7 +3428,7 @@ msgstr "Confidencialidad: cifrado de paquetes para evitar la intromisión de una #: ../../configuration/protocols/isis.rst:28 #: ../../configuration/protocols/ospf.rst:22 #: ../../configuration/protocols/ospf.rst:1076 -#: ../../configuration/protocols/rpki.rst:104 +#: ../../configuration/protocols/rpki.rst:102 #: ../../configuration/service/broadcast-relay.rst:18 #: ../../configuration/service/conntrack-sync.rst:38 #: ../../configuration/service/console-server.rst:21 @@ -3381,7 +3437,7 @@ msgstr "Confidencialidad: cifrado de paquetes para evitar la intromisión de una #: ../../configuration/service/dhcp-server.rst:22 #: ../../configuration/service/dhcp-server.rst:569 #: ../../configuration/service/dns.rst:8 -#: ../../configuration/service/dns.rst:214 +#: ../../configuration/service/dns.rst:308 #: ../../configuration/service/https.rst:14 #: ../../configuration/service/ids.rst:20 #: ../../configuration/service/lldp.rst:36 @@ -3480,11 +3536,11 @@ msgstr "Configurar" msgid "Configure BFD" msgstr "Configurar BFD" -#: ../../configuration/service/dns.rst:245 +#: ../../configuration/service/dns.rst:339 msgid "Configure DNS `` which should be updated. This can be set multiple times." msgstr "Configurar DNS ` ` que debe ser actualizado. Esto se puede configurar varias veces." -#: ../../configuration/service/dns.rst:241 +#: ../../configuration/service/dns.rst:335 msgid "Configure DNS `` to be updated." msgstr "Configurar DNS ` ` para ser actualizado." @@ -3550,7 +3606,7 @@ msgstr "Configurar ` ` que se muestra después de que el usuario haya i msgid "Configure `` which is shown during SSH connect and before a user is logged in." msgstr "Configurar ` ` que se muestra durante la conexión SSH y antes de que un usuario inicie sesión." -#: ../../configuration/service/dns.rst:346 +#: ../../configuration/service/dns.rst:440 msgid "Configure `` used when authenticating the update request for DynDNS service identified by ``." msgstr "Configure `` used when authenticating the update request for DynDNS service identified by ``." @@ -3558,7 +3614,7 @@ msgstr "Configure `` used when authenticating the update request for D msgid "Configure `` used when authenticating the update request for DynDNS service identified by ``." msgstr "Configurar ` ` utilizado al autenticar la solicitud de actualización para el servicio DynDNS identificado por ` `." -#: ../../configuration/service/dns.rst:341 +#: ../../configuration/service/dns.rst:435 msgid "Configure `` used when authenticating the update request for DynDNS service identified by ``." msgstr "Configure `` used when authenticating the update request for DynDNS service identified by ``." @@ -3705,7 +3761,7 @@ msgstr "Configure uno o más atributos para el servidor NTP dado." msgid "Configure one or more servers for synchronisation. Server name can be either an IP address or :abbr:`FQDN (Fully Qualified Domain Name)`." msgstr "Configure uno o más servidores para la sincronización. El nombre del servidor puede ser una dirección IP o :abbr:`FQDN (Nombre de dominio completo)`." -#: ../../configuration/service/dns.rst:249 +#: ../../configuration/service/dns.rst:343 msgid "Configure optional TTL value on the given resource record. This defaults to 600 seconds." msgstr "Configure el valor TTL opcional en el registro de recursos dado. Esto por defecto es de 600 segundos." @@ -3741,6 +3797,10 @@ msgstr "Configure el protocolo utilizado para la comunicación con el host de sy msgid "Configure proxy port if it does not listen to the default port 80." msgstr "Configure el puerto proxy si no escucha el puerto predeterminado 80." +#: ../../configuration/loadbalancing/reverse-proxy.rst:149 +msgid "Configure requests to the backend server to use SSL encryption and authenticate backend against " +msgstr "Configure requests to the backend server to use SSL encryption and authenticate backend against " + #: ../../configuration/system/sflow.rst:16 msgid "Configure sFlow agent IPv4 or IPv6 address" msgstr "Configurar la dirección IPv4 o IPv6 del agente sFlow" @@ -3773,7 +3833,7 @@ msgstr "Configure the A-side router for NPTv6 using the prefixes above:" msgid "Configure the B-side router for NPTv6 using the prefixes above:" msgstr "Configure the B-side router for NPTv6 using the prefixes above:" -#: ../../configuration/service/dns.rst:236 +#: ../../configuration/service/dns.rst:330 msgid "Configure the DNS `` IP/FQDN used when updating this dynamic assignment." msgstr "Configurar el DNS ` ` IP/FQDN utilizado al actualizar esta asignación dinámica." @@ -3793,7 +3853,7 @@ msgstr "Configure el puerto discreto bajo el cual se puede acceder al servidor R msgid "Configure the discrete port under which the TACACS server can be reached." msgstr "Configure el puerto discreto bajo el cual se puede acceder al servidor TACACS." -#: ../../configuration/loadbalancing/reverse-proxy.rst:172 +#: ../../configuration/loadbalancing/reverse-proxy.rst:175 msgid "Configure the load-balancing reverse-proxy service for HTTP." msgstr "Configure el servicio de proxy inverso de equilibrio de carga para HTTP." @@ -3894,7 +3954,7 @@ msgstr "Connections to the RPKI caching server can not only be established by HT msgid "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH you first need to create yoursels an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." msgstr "Las conexiones al servidor de almacenamiento en caché RPKI no solo pueden establecerse mediante HTTP/TLS, sino que también puede confiar en una sesión SSH segura con el servidor. Para habilitar SSH, primero debe crear usted mismo un par de claves de cliente SSH usando ``generate ssh client-key /config/auth/id_rsa_rpki``. Una vez que se crea su clave, puede configurar la conexión." -#: ../../configuration/protocols/rpki.rst:143 +#: ../../configuration/protocols/rpki.rst:141 msgid "Connections to the RPKI caching server can not only be established by TCP using the RTR protocol but you can also rely on a secure SSH session to the server. This provides transport integrity and confidentiality and it is a good idea if your validation software supports it. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." msgstr "Connections to the RPKI caching server can not only be established by TCP using the RTR protocol but you can also rely on a secure SSH session to the server. This provides transport integrity and confidentiality and it is a good idea if your validation software supports it. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." @@ -4093,8 +4153,8 @@ msgstr "Crea una nueva instancia VRF con ` `. El nombre se utiliza al colo msgid "Create new :rfc:`2136` DNS update configuration which will update the IP address assigned to `` on the service you configured under ``." msgstr "Cree una nueva configuración de actualización de DNS :rfc:`2136` que actualizará la dirección IP asignada a ` ` en el servicio que configuró en ` `." -#: ../../configuration/service/dns.rst:221 -#: ../../configuration/service/dns.rst:326 +#: ../../configuration/service/dns.rst:315 +#: ../../configuration/service/dns.rst:420 msgid "Create new dynamic DNS update configuration which will update the IP address assigned to `` on the service you configured under ``." msgstr "Create new dynamic DNS update configuration which will update the IP address assigned to `` on the service you configured under ``." @@ -4507,7 +4567,7 @@ msgstr "Defina la cantidad de paquetes para poner en cola dentro del kernel ante msgid "Define operation mode of High Availability feature. Default value if command is not specified is `active-active`" msgstr "Define operation mode of High Availability feature. Default value if command is not specified is `active-active`" -#: ../../configuration/protocols/rpki.rst:108 +#: ../../configuration/protocols/rpki.rst:106 msgid "Define the time interval to update the local cache" msgstr "Definir el intervalo de tiempo para actualizar el caché local" @@ -4523,7 +4583,7 @@ msgstr "Define type of offload to be used by the flowtable: ``hardware`` or ``so msgid "Define used ethertype of bridge interface." msgstr "Define used ethertype of bridge interface." -#: ../../configuration/protocols/rpki.rst:128 +#: ../../configuration/protocols/rpki.rst:126 msgid "Defined the IPv4, IPv6 or FQDN and port number of the caching RPKI caching instance which is used." msgstr "Definió el IPv4, IPv6 o FQDN y el número de puerto de la instancia de almacenamiento en caché RPKI de almacenamiento en caché que se utiliza." @@ -4744,6 +4804,10 @@ msgstr "Deshabilite el servicio de retransmisión dhcpv6." msgid "Disable given ``. It will be placed in administratively down (``A/D``) state." msgstr "Deshabilitar dado ` `. Se colocará en estado administrativamente inactivo (``A/D``)." +#: ../../configuration/service/dns.rst:153 +msgid "Disable hosting authoritative zone for `` without deleting from configuration." +msgstr "Disable hosting authoritative zone for `` without deleting from configuration." + #: ../../configuration/protocols/bgp.rst:628 msgid "Disable immediate session reset if peer's connected link goes down." msgstr "Deshabilite el restablecimiento inmediato de la sesión si el enlace conectado del compañero se cae." @@ -4756,6 +4820,10 @@ msgstr "Deshabilite la autenticación basada en contraseña. Inicie sesión solo msgid "Disable sending and receiving PIM control packets on the interface." msgstr "Disable sending and receiving PIM control packets on the interface." +#: ../../configuration/service/dns.rst:159 +msgid "Disable specific record without deleting it from configuration." +msgstr "Disable specific record without deleting it from configuration." + #: ../../configuration/service/ssh.rst:64 msgid "Disable the host validation through reverse DNS lookups - can speedup login time when reverse lookup is not possible." msgstr "Deshabilite la validación del host a través de búsquedas DNS inversas: puede acelerar el tiempo de inicio de sesión cuando no es posible la búsqueda inversa." @@ -5034,7 +5102,7 @@ msgstr "During profile import, the user is asked to enter its IPSec credentials msgid "Dynamic-protection" msgstr "Protección dinámica" -#: ../../configuration/service/dns.rst:199 +#: ../../configuration/service/dns.rst:293 msgid "Dynamic DNS" msgstr "DNS Dinámico" @@ -5535,14 +5603,14 @@ msgstr "Every connection/remote-access pool we configure also needs a pool where #: ../../configuration/protocols/failover.rst:63 #: ../../configuration/protocols/igmp-proxy.rst:61 #: ../../configuration/protocols/pim.rst:217 -#: ../../configuration/protocols/rpki.rst:168 +#: ../../configuration/protocols/rpki.rst:166 #: ../../configuration/service/broadcast-relay.rst:55 #: ../../configuration/service/conntrack-sync.rst:195 #: ../../configuration/service/dhcp-relay.rst:85 #: ../../configuration/service/dhcp-relay.rst:174 #: ../../configuration/service/dhcp-server.rst:418 -#: ../../configuration/service/dns.rst:147 -#: ../../configuration/service/dns.rst:260 +#: ../../configuration/service/dns.rst:241 +#: ../../configuration/service/dns.rst:354 #: ../../configuration/service/eventhandler.rst:83 #: ../../configuration/service/ids.rst:82 #: ../../configuration/service/mdns.rst:50 @@ -5586,7 +5654,7 @@ msgstr "Ejemplo, desde el comando de envío del servidor de radio para desconect #: ../../configuration/protocols/static.rst:67 #: ../../configuration/protocols/static.rst:135 #: ../../configuration/protocols/static.rst:207 -#: ../../configuration/service/dns.rst:366 +#: ../../configuration/service/dns.rst:460 #: ../../configuration/service/monitoring.rst:69 #: ../../configuration/service/monitoring.rst:98 #: ../../configuration/service/ssh.rst:165 @@ -5683,7 +5751,7 @@ msgstr "Ejemplo: para agregar se establece en ``vyos.net`` y la URL recibida es msgid "Example Configuration" msgstr "Configuración de ejemplo" -#: ../../configuration/service/dns.rst:384 +#: ../../configuration/service/dns.rst:478 msgid "Example IPv6 only:" msgstr "Ejemplo de solo IPv6:" @@ -5721,7 +5789,7 @@ msgstr "Example synproxy" #: ../../configuration/interfaces/bridge.rst:196 #: ../../configuration/interfaces/macsec.rst:153 #: ../../configuration/interfaces/wireless.rst:541 -#: ../../configuration/loadbalancing/reverse-proxy.rst:187 +#: ../../configuration/loadbalancing/reverse-proxy.rst:190 #: ../../configuration/policy/index.rst:46 #: ../../configuration/protocols/bgp.rst:1118 #: ../../configuration/protocols/isis.rst:336 @@ -5849,6 +5917,10 @@ msgstr "Mecanismo de conmutación por error que se utilizará para conntrack-syn msgid "Failover routes are manually configured routes, but they install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target will be available." msgstr "Las rutas de conmutación por error son rutas configuradas manualmente, pero se instalan en la tabla de enrutamiento si el objetivo de verificación de estado está activo. Si el destino no está activo, la ruta se elimina de la tabla de enrutamiento hasta que el destino esté disponible." +#: ../../configuration/protocols/failover.rst:5 +msgid "Failover routes are manually configured routes, but they only install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target becomes available." +msgstr "Failover routes are manually configured routes, but they only install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target becomes available." + #: ../../configuration/trafficpolicy/index.rst:384 msgid "Fair Queue" msgstr "Cola justa" @@ -5869,7 +5941,7 @@ msgstr "FastNetMon" msgid "FastNetMon is a high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AF_PACKET (port mirror). It can detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second and perform a configurable action to handle that event, such as calling a custom script." msgstr "FastNetMon is a high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AF_PACKET (port mirror). It can detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second and perform a configurable action to handle that event, such as calling a custom script." -#: ../../configuration/protocols/rpki.rst:78 +#: ../../configuration/protocols/rpki.rst:76 msgid "Features of the Current Implementation" msgstr "Características de la implementación actual" @@ -5877,7 +5949,7 @@ msgstr "Características de la implementación actual" msgid "Field" msgstr "Campo" -#: ../../configuration/service/dns.rst:231 +#: ../../configuration/service/dns.rst:325 msgid "File identified by `` containing the TSIG authentication key for RFC2136 nsupdate on remote DNS server." msgstr "File identified by `` containing the TSIG authentication key for RFC2136 nsupdate on remote DNS server." @@ -6038,6 +6110,10 @@ msgstr "Primero se deben generar las claves OTP y enviarlas al usuario y a la co msgid "First we need to specify the basic settings. 1194/UDP is the default. The ``persistent-tunnel`` option is recommended, it prevents the TUN/TAP device from closing on connection resets or daemon reloads." msgstr "Primero necesitamos especificar la configuración básica. 1194/UDP es el predeterminado. Se recomienda la opción ``persistent-tunnel``, que evita que el dispositivo TUN/TAP se cierre al reiniciar la conexión o recargar el daemon." +#: ../../configuration/protocols/rpki.rst:40 +msgid "First you will need to deploy an RPKI validator for your routers to use. NLnet Labs provides a collection of software_ you can compare and settle on one. Once your server is running you can start validating announcements." +msgstr "First you will need to deploy an RPKI validator for your routers to use. NLnet Labs provides a collection of software_ you can compare and settle on one. Once your server is running you can start validating announcements." + #: ../../configuration/protocols/rpki.rst:41 msgid "First you will need to deploy an RPKI validator for your routers to use. The RIPE NCC helpfully provide `some instructions`_ to get you started with several different options. Once your server is running you can start validating announcements." msgstr "Primero deberá implementar un validador RPKI para que lo usen sus enrutadores. El RIPE NCC proporciona útilmente `algunas instrucciones`_ para que pueda comenzar con varias opciones diferentes. Una vez que su servidor esté funcionando, puede comenzar a validar los anuncios." @@ -6461,7 +6537,7 @@ msgstr "Obtenga información detallada sobre los vecinos LLDP." msgid "Get the DHCPv6-PD prefixes from both routers:" msgstr "Get the DHCPv6-PD prefixes from both routers:" -#: ../../configuration/protocols/rpki.rst:39 +#: ../../configuration/protocols/rpki.rst:38 msgid "Getting started" msgstr "Empezando" @@ -6477,6 +6553,10 @@ msgstr "Dado el siguiente ejemplo, tenemos un enrutador VyOS que actúa como ser msgid "Gloabal" msgstr "global" +#: ../../configuration/loadbalancing/reverse-proxy.rst:153 +msgid "Global" +msgstr "Global" + #: ../../configuration/service/ipoe-server.rst:352 #: ../../configuration/service/pppoe-server.rst:518 #: ../../configuration/vpn/l2tp.rst:472 @@ -6497,7 +6577,7 @@ msgstr "Global Options Firewall Configuration" msgid "Global options" msgstr "Opciones globales" -#: ../../configuration/loadbalancing/reverse-proxy.rst:152 +#: ../../configuration/loadbalancing/reverse-proxy.rst:155 msgid "Global parameters" msgstr "Parámetros globales" @@ -6534,7 +6614,7 @@ msgstr "HTTP-API" msgid "HTTP API" msgstr "HTTP API" -#: ../../configuration/service/dns.rst:317 +#: ../../configuration/service/dns.rst:411 msgid "HTTP based services" msgstr "Servicios basados en HTTP" @@ -6611,7 +6691,7 @@ msgstr "Aquí hay un segundo ejemplo de un túnel de doble pila sobre IPv6 entre msgid "Here is an example :abbr:`NET (Network Entity Title)` value:" msgstr "Aquí hay un ejemplo de valor :abbr:`NET (Título de entidad de red)`:" -#: ../../configuration/protocols/rpki.rst:179 +#: ../../configuration/protocols/rpki.rst:177 msgid "Here is an example route-map to apply to routes learned at import. In this filter we reject prefixes with the state `invalid`, and set a higher `local-preference` if the prefix is RPKI `valid` rather than merely `notfound`." msgstr "Aquí hay un mapa de ruta de ejemplo para aplicar a las rutas aprendidas en la importación. En este filtro, rechazamos los prefijos con el estado "no válido" y establecemos una "preferencia local" más alta si el prefijo es RPKI "válido" en lugar de simplemente "no encontrado"." @@ -7227,7 +7307,7 @@ msgstr "Si utiliza múltiples túneles, OpenVPN debe tener una forma de distingu msgid "If multi-pathing is enabled, then check whether the routes not yet distinguished in preference may be considered equal. If :cfgcmd:`bgp bestpath as-path multipath-relax` is set, all such routes are considered equal, otherwise routes received via iBGP with identical AS_PATHs or routes received from eBGP neighbours in the same AS are considered equal." msgstr "Si la ruta múltiple está habilitada, verifique si las rutas que aún no se han distinguido en preferencia pueden considerarse iguales. Si se establece :cfgcmd:`bgp bestpath as-path multipath-relax`, todas esas rutas se consideran iguales; de lo contrario, las rutas recibidas a través de iBGP con AS_PATH idénticos o las rutas recibidas de vecinos eBGP en el mismo AS se consideran iguales." -#: ../../configuration/protocols/rpki.rst:86 +#: ../../configuration/protocols/rpki.rst:84 msgid "If no connection to an RPKI cache server can be established after a pre-defined timeout, the router will process routes without prefix origin validation. It still will try to establish a connection to an RPKI cache server in the background." msgstr "Si no se puede establecer una conexión con un servidor de caché RPKI después de un tiempo de espera predefinido, el enrutador procesará rutas sin validación de origen de prefijo. Todavía intentará establecer una conexión con un servidor de caché RPKI en segundo plano." @@ -7439,10 +7519,14 @@ msgstr "Si es un hacker o quiere intentarlo por su cuenta, admitimos pasar las o msgid "If you are configuring a VRF for management purposes, there is currently no way to force system DNS traffic via a specific VRF." msgstr "Si está configurando un VRF con fines de administración, actualmente no hay forma de forzar el tráfico DNS del sistema a través de un VRF específico." -#: ../../configuration/protocols/rpki.rst:30 +#: ../../configuration/protocols/rpki.rst:29 msgid "If you are new to these routing security technologies then there is an `excellent guide to RPKI`_ by NLnet Labs which will get you up to speed very quickly. Their documentation explains everything from what RPKI is to deploying it in production. It also has some `help and operational guidance`_ including \"What can I do about my route having an Invalid state?\"" msgstr "Si es nuevo en estas tecnologías de seguridad de enrutamiento, existe una `excelente guía de RPKI`_ de NLnet Labs que lo pondrá al día rápidamente. Su documentación explica todo, desde lo que es RPKI hasta su implementación en producción. También tiene algo de `ayuda y guía operativa`_ que incluye "¿Qué puedo hacer si mi ruta tiene un estado Inválido?"" +#: ../../configuration/protocols/rpki.rst:62 +msgid "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC, or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." +msgstr "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC, or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." + #: ../../configuration/protocols/rpki.rst:64 msgid "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." msgstr "Si usted es responsable de las direcciones globales asignadas a su red, asegúrese de que sus prefijos tengan ROA asociados para evitar que RPKI no los encuentre. Para la mayoría de los ASN, esto implicará la publicación de ROA a través de su :abbr:`RIR (Registro Regional de Internet)` (RIPE NCC, APNIC, ARIN, LACNIC o AFRINIC), y es algo que se recomienda hacer cada vez que planee anunciar direcciones en el DFZ." @@ -7609,7 +7693,7 @@ msgstr "Import the private key of the certificate to the VyOS CLI. This should n msgid "Import the public CA certificate from the defined file to VyOS CLI." msgstr "Import the public CA certificate from the defined file to VyOS CLI." -#: ../../configuration/protocols/rpki.rst:46 +#: ../../configuration/protocols/rpki.rst:44 msgid "Imported prefixes during the validation may have values:" msgstr "Los prefijos importados durante la validación pueden tener valores:" @@ -7653,7 +7737,7 @@ msgstr "En una configuración mínima, se debe proporcionar lo siguiente:" msgid "In a multiple VLAN header context, out of convenience the term \"VLAN tag\" or just \"tag\" for short is often used in place of \"802.1q_ VLAN header\". QinQ allows multiple VLAN tags in an Ethernet frame; together these tags constitute a tag stack. When used in the context of an Ethernet frame, a QinQ frame is a frame that has 2 VLAN 802.1q_ headers (double-tagged)." msgstr "En un contexto de encabezado de VLAN múltiple, por conveniencia, el término "etiqueta de VLAN" o simplemente "etiqueta" para abreviar se usa a menudo en lugar de "802.1q_ encabezado de VLAN". QinQ permite múltiples etiquetas VLAN en un marco de Ethernet; juntas, estas etiquetas constituyen una pila de etiquetas. Cuando se usa en el contexto de una trama Ethernet, una trama QinQ es una trama que tiene 2 encabezados VLAN 802.1q_ (doble etiqueta)." -#: ../../configuration/protocols/rpki.rst:80 +#: ../../configuration/protocols/rpki.rst:78 msgid "In a nutshell, the current implementation provides the following features:" msgstr "En pocas palabras, la implementación actual proporciona las siguientes características:" @@ -7919,7 +8003,7 @@ msgstr "En este ejemplo, usaremos el caso más complicado: una configuración en msgid "In this method, the DSL Modem/Router connects to the ISP for you with your credentials preprogrammed into the device. This gives you an :rfc:`1918` address, such as ``192.168.1.0/24`` by default." msgstr "En este método, el módem/enrutador DSL se conecta al ISP por usted con sus credenciales preprogramadas en el dispositivo. Esto le da una dirección :rfc:`1918`, como ``192.168.1.0/24`` por defecto." -#: ../../configuration/service/dns.rst:152 +#: ../../configuration/service/dns.rst:246 msgid "In this scenario:" msgstr "En este escenario:" @@ -8436,7 +8520,7 @@ msgstr "Deje que el demonio SNMP escuche solo en la dirección IP 192.0.2.1" msgid "Lets assume the following topology:" msgstr "Supongamos la siguiente topología:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:190 +#: ../../configuration/loadbalancing/reverse-proxy.rst:193 msgid "Level 4 balancing" msgstr "Equilibrio de nivel 4" @@ -8456,7 +8540,7 @@ msgstr "La vida útil se reduce según la cantidad de segundos desde el último msgid "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." msgstr "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." -#: ../../configuration/loadbalancing/reverse-proxy.rst:162 +#: ../../configuration/loadbalancing/reverse-proxy.rst:165 msgid "Limit allowed cipher algorithms used during SSL/TLS handshake" msgstr "Limite los algoritmos de cifrado permitidos utilizados durante el protocolo de enlace SSL/TLS" @@ -8468,7 +8552,7 @@ msgstr "Limite los inicios de sesión a ` ` por cada ``rate-time`` segund msgid "Limit logins to ``rate-limit`` attemps per every ``. Rate time must be between 15 and 600 seconds." msgstr "Limite los inicios de sesión a ``rate-limit`` intentos por cada ` `. El tiempo de tasa debe estar entre 15 y 600 segundos." -#: ../../configuration/loadbalancing/reverse-proxy.rst:157 +#: ../../configuration/loadbalancing/reverse-proxy.rst:160 msgid "Limit maximum number of connections" msgstr "Limite el número máximo de conexiones" @@ -8540,6 +8624,10 @@ msgstr "Enumera los VRF que se han creado" msgid "Load-balancing" msgstr "Balanceo de carga" +#: ../../configuration/loadbalancing/reverse-proxy.rst:100 +msgid "Load-balancing algorithms to be used for distributed requests among the available servers" +msgstr "Load-balancing algorithms to be used for distributed requests among the available servers" + #: ../../configuration/loadbalancing/reverse-proxy.rst:100 msgid "Load-balancing algorithms to be used for distributind requests among the vailable servers" msgstr "Algoritmos de equilibrio de carga que se utilizarán para distribuir solicitudes entre los servidores disponibles" @@ -8609,11 +8697,11 @@ msgstr "Cuenta de usuario local" msgid "Local path that includes the known hosts file." msgstr "Ruta local que incluye el archivo de hosts conocidos." -#: ../../configuration/protocols/rpki.rst:157 +#: ../../configuration/protocols/rpki.rst:155 msgid "Local path that includes the private key file of the router." msgstr "Ruta local que incluye el archivo de clave privada del enrutador." -#: ../../configuration/protocols/rpki.rst:161 +#: ../../configuration/protocols/rpki.rst:159 msgid "Local path that includes the public key file of the router." msgstr "Ruta local que incluye el archivo de clave pública del enrutador." @@ -9238,7 +9326,7 @@ msgstr "Multicast receivers will talk MLD to their local router, so, besides hav msgid "Multiple DNS servers can be defined." msgstr "Se pueden definir varios servidores DNS." -#: ../../configuration/protocols/rpki.rst:135 +#: ../../configuration/protocols/rpki.rst:133 msgid "Multiple RPKI caching instances can be supplied and they need a preference in which their result sets are used." msgstr "Se pueden proporcionar múltiples instancias de almacenamiento en caché de RPKI y necesitan una preferencia en la que se utilizan sus conjuntos de resultados." @@ -9275,7 +9363,7 @@ msgstr "Se pueden configurar múltiples redes/direcciones IP de clientes." msgid "Multiple servers can be specified." msgstr "Se pueden especificar varios servidores." -#: ../../configuration/service/dns.rst:380 +#: ../../configuration/service/dns.rst:474 msgid "Multiple services can be used per interface. Just specify as many services per interface as you like!" msgstr "Se pueden utilizar múltiples servicios por interfaz. ¡Simplemente especifique tantos servicios por interfaz como desee!" @@ -9543,6 +9631,10 @@ msgstr "Nexthop Tracking" msgid "Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if you do not wan't to e.g. allow BGP to peer across the default route." msgstr "Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if you do not wan't to e.g. allow BGP to peer across the default route." +#: ../../configuration/protocols/rpki.rst:57 +msgid "No ROA exists which covers that prefix. Unfortunately this is the case for about 40%-50% of the prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2024." +msgstr "No ROA exists which covers that prefix. Unfortunately this is the case for about 40%-50% of the prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2024." + #: ../../configuration/protocols/rpki.rst:59 msgid "No ROA exists which covers that prefix. Unfortunately this is the case for about 80% of the IPv4 prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2020" msgstr "No existe ROA que cubra ese prefijo. Desafortunadamente, este es el caso de aproximadamente el 80% de los prefijos IPv4 que se anunciaron en :abbr:`DFZ (zona libre por defecto)` a principios de 2020." @@ -9815,6 +9907,10 @@ msgstr "Una vez que tenga un dispositivo Ethernet conectado, es decir, `eth0`, p msgid "Once you have setup your SSTP server there comes the time to do some basic testing. The Linux client used for testing is called sstpc_. sstpc_ requires a PPP configuration/peer file." msgstr "Una vez que haya configurado su servidor SSTP, llega el momento de realizar algunas pruebas básicas. El cliente de Linux utilizado para las pruebas se llama sstpc_. sstpc_ requiere un archivo de configuración/par de PPP." +#: ../../configuration/protocols/rpki.rst:193 +msgid "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using Cloudflare's test_ website. Keep in mind that in order for this to work, you need to have no default routes or anything else that would still send traffic to RPKI-invalid destinations." +msgstr "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using Cloudflare's test_ website. Keep in mind that in order for this to work, you need to have no default routes or anything else that would still send traffic to RPKI-invalid destinations." + #: ../../configuration/protocols/rpki.rst:195 msgid "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using the `RIPE Labs RPKI Test`_ experimental tool." msgstr "Una vez que sus enrutadores estén configurados para rechazar prefijos no válidos para RPKI, puede probar si la configuración funciona correctamente utilizando la herramienta experimental `RIPE Labs RPKI Test`_." @@ -9958,7 +10054,7 @@ msgstr "Modos de funcionamiento" #: ../../configuration/service/console-server.rst:76 #: ../../configuration/service/dhcp-relay.rst:124 #: ../../configuration/service/dhcp-relay.rst:201 -#: ../../configuration/service/dns.rst:182 +#: ../../configuration/service/dns.rst:276 #: ../../configuration/service/lldp.rst:71 #: ../../configuration/service/mdns.rst:79 #: ../../configuration/service/ssh.rst:145 @@ -10257,7 +10353,7 @@ msgstr "Servidor PPTP" msgid "Packet-based balancing can lead to a better balance across interfaces when out of order packets are no issue. Per-packet-based balancing can be set for a balancing rule with:" msgstr "El equilibrio basado en paquetes puede conducir a un mejor equilibrio entre las interfaces cuando los paquetes fuera de servicio no son un problema. El equilibrio basado en paquetes se puede configurar para una regla de equilibrio con:" -#: ../../configuration/protocols/rpki.rst:71 +#: ../../configuration/protocols/rpki.rst:69 msgid "Particularly large networks may wish to run their own RPKI certificate authority and publication server instead of publishing ROAs via their RIR. This is a subject far beyond the scope of VyOS' documentation. Consider reading about Krill_ if this is a rabbit hole you need or especially want to dive down." msgstr "Es posible que las redes particularmente grandes deseen ejecutar su propia autoridad de certificación RPKI y servidor de publicación en lugar de publicar ROA a través de su RIR. Este es un tema mucho más allá del alcance de la documentación de VyOS. Considere leer sobre Krill_ si este es un agujero de conejo que necesita o si desea sumergirse especialmente." @@ -10923,7 +11019,11 @@ msgstr "Los atributos de RADIUS recibidos tienen una prioridad más alta que los msgid "Recommended for larger installations." msgstr "Recomendado para instalaciones más grandes." -#: ../../configuration/loadbalancing/reverse-proxy.rst:171 +#: ../../configuration/service/dns.rst:167 +msgid "Record types" +msgstr "Record types" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:174 msgid "Redirect HTTP to HTTPS" msgstr "Redirigir HTTP a HTTPS" @@ -10951,7 +11051,7 @@ msgstr "Configuración de redistribución" msgid "Redundancy and load sharing. There are multiple NAT66 devices at the edge of an IPv6 network to another IPv6 network. The path through the NAT66 device to another IPv6 network forms an equivalent route, and traffic can be load-shared on these NAT66 devices. In this case, you can configure the same source address translation rules on these NAT66 devices, so that any NAT66 device can handle IPv6 traffic between different sites." msgstr "Redundancia y carga compartida. Hay varios dispositivos NAT66 en el borde de una red IPv6 a otra red IPv6. La ruta a través del dispositivo NAT66 a otra red IPv6 forma una ruta equivalente y el tráfico se puede compartir en carga en estos dispositivos NAT66. En este caso, puede configurar las mismas reglas de traducción de direcciones de origen en estos dispositivos NAT66, de modo que cualquier dispositivo NAT66 pueda manejar el tráfico IPv6 entre diferentes sitios." -#: ../../configuration/service/dns.rst:262 +#: ../../configuration/service/dns.rst:356 msgid "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" msgstr "Registre el registro DNS ``example.vyos.io`` en el servidor DNS ``ns1.vyos.io``" @@ -11102,7 +11202,7 @@ msgstr "Restablecer OpenVPN" msgid "Reset commands" msgstr "Restablecer comandos" -#: ../../configuration/service/dns.rst:186 +#: ../../configuration/service/dns.rst:280 msgid "Resets the local DNS forwarding cache database. You can reset the cache for all entries or only for entries to a specific domain." msgstr "Restablece la base de datos de caché de reenvío de DNS local. Puede restablecer la memoria caché para todas las entradas o solo para las entradas de un dominio específico." @@ -11138,7 +11238,7 @@ msgstr "Reinicie el proceso de proxy IGMP." msgid "Restart the SSH daemon process, the current session is not affected, only the background daemon is restarted." msgstr "Reinicie el proceso del demonio SSH, la sesión actual no se ve afectada, solo se reinicia el demonio en segundo plano." -#: ../../configuration/service/dns.rst:191 +#: ../../configuration/service/dns.rst:285 msgid "Restarts the DNS recursor process. This also invalidates the local DNS forwarding cache." msgstr "Reinicia el proceso de recurso de DNS. Esto también invalida el caché de reenvío de DNS local." @@ -11232,7 +11332,7 @@ msgstr "El filtro de ruta se puede aplicar usando un mapa de ruta:" msgid "Route map is a powerfull command, that gives network administrators a very useful and flexible tool for traffic manipulation." msgstr "El mapa de rutas es un comando poderoso que brinda a los administradores de red una herramienta muy útil y flexible para la manipulación del tráfico." -#: ../../configuration/protocols/rpki.rst:95 +#: ../../configuration/protocols/rpki.rst:93 msgid "Route maps can be configured to match a specific RPKI validation state. This allows the creation of local policies, which handle BGP routes based on the outcome of the Prefix Origin Validation." msgstr "Los mapas de ruta se pueden configurar para que coincidan con un estado de validación de RPKI específico. Esto permite la creación de políticas locales, que manejan las rutas BGP en función del resultado de la validación del origen del prefijo." @@ -11302,11 +11402,11 @@ msgstr "Conjuntos de reglas" msgid "Rule-set overview" msgstr "Descripción general del conjunto de reglas" -#: ../../configuration/loadbalancing/reverse-proxy.rst:217 +#: ../../configuration/loadbalancing/reverse-proxy.rst:220 msgid "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" msgstr "La regla 10 hace coincidir las solicitudes con el nombre de dominio ``node1.example.com`` reenvía al backend ``bk-api-01``" -#: ../../configuration/loadbalancing/reverse-proxy.rst:254 +#: ../../configuration/loadbalancing/reverse-proxy.rst:257 msgid "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." msgstr "La regla 10 hace coincidir las solicitudes con la ruta URL exacta ``/.well-known/xxx`` y redirige a la ubicación ``/certs/``." @@ -11314,11 +11414,11 @@ msgstr "La regla 10 hace coincidir las solicitudes con la ruta URL exacta ``/.we msgid "Rule 110 is hit, so connection is accepted." msgstr "Rule 110 is hit, so connection is accepted." -#: ../../configuration/loadbalancing/reverse-proxy.rst:257 +#: ../../configuration/loadbalancing/reverse-proxy.rst:260 msgid "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." msgstr "La regla 20 coincide con las solicitudes con rutas URL que terminan en ``/mail`` o la ruta exacta ``/email/bar`` redirige a la ubicación ``/postfix/``." -#: ../../configuration/loadbalancing/reverse-proxy.rst:220 +#: ../../configuration/loadbalancing/reverse-proxy.rst:223 msgid "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" msgstr "La regla 20 hace coincidir las solicitudes con el nombre de dominio ``node2.example.com`` reenvía al backend ``bk-api-02``" @@ -11340,7 +11440,7 @@ msgstr "Las reglas permiten controlar y enrutar el tráfico entrante a un backen msgid "Rules will be created for both :ref:`source-nat` and :ref:`destination-nat`." msgstr "Se crearán reglas para :ref:`source-nat` y :ref:`destination-nat`." -#: ../../configuration/service/dns.rst:399 +#: ../../configuration/service/dns.rst:493 msgid "Running Behind NAT" msgstr "Correr detrás de NAT" @@ -11404,7 +11504,7 @@ msgstr "SNMPv3 (versión 3 del protocolo SNMP) introdujo una gran cantidad de nu msgid "SPAN port mirroring can copy the inbound/outbound traffic of the interface to the specified interface, usually the interface can be connected to some special equipment, such as behavior control system, intrusion detection system and traffic collector, and can copy all related traffic from this port. The benefit of mirroring the traffic is that the application is isolated from the source traffic and so application processing does not affect the traffic or the system performance." msgstr "La duplicación del puerto SPAN puede copiar el tráfico entrante/saliente de la interfaz a la interfaz especificada; normalmente la interfaz se puede conectar a algún equipo especial, como un sistema de control de comportamiento, un sistema de detección de intrusiones y un recolector de tráfico, y puede copiar todo el tráfico relacionado desde este puerto. El beneficio de duplicar el tráfico es que la aplicación está aislada del tráfico de origen y, por lo tanto, el procesamiento de la aplicación no afecta el tráfico ni el rendimiento del sistema." -#: ../../configuration/protocols/rpki.rst:141 +#: ../../configuration/protocols/rpki.rst:139 #: ../../configuration/service/ssh.rst:5 msgid "SSH" msgstr "SSH" @@ -11425,7 +11525,7 @@ msgstr "cliente SSH" msgid "SSH provides a secure channel over an unsecured network in a client-server architecture, connecting an SSH client application with an SSH server. Common applications include remote command-line login and remote command execution, but any network service can be secured with SSH. The protocol specification distinguishes between two major versions, referred to as SSH-1 and SSH-2." msgstr "SSH proporciona un canal seguro a través de una red no segura en una arquitectura cliente-servidor, conectando una aplicación de cliente SSH con un servidor SSH. Las aplicaciones comunes incluyen inicio de sesión de línea de comandos remotos y ejecución de comandos remotos, pero cualquier servicio de red puede protegerse con SSH. La especificación del protocolo distingue entre dos versiones principales, denominadas SSH-1 y SSH-2." -#: ../../configuration/protocols/rpki.rst:153 +#: ../../configuration/protocols/rpki.rst:151 msgid "SSH username to establish an SSH connection to the cache server." msgstr "Nombre de usuario SSH para establecer una conexión SSH con el servidor de caché." @@ -11437,6 +11537,10 @@ msgstr "SSH se diseñó como reemplazo de Telnet y de los protocolos de shell re msgid "SSID to be used in IEEE 802.11 management frames" msgstr "SSID que se utilizará en tramas de administración IEEE 802.11" +#: ../../configuration/loadbalancing/reverse-proxy.rst:294 +msgid "SSL Bridging" +msgstr "SSL Bridging" + #: ../../configuration/vpn/openconnect.rst:24 msgid "SSL Certificates" msgstr "Certificados SSL" @@ -11732,12 +11836,16 @@ msgstr "Establezca la regla SNAT 30 para que solo lleguen paquetes NAT de la red msgid "Set SSL certeficate for service " msgstr "Establecer certificado SSL para servicio" +#: ../../configuration/loadbalancing/reverse-proxy.rst:46 +msgid "Set SSL certificate for service " +msgstr "Set SSL certificate for service " + #: ../../configuration/firewall/ipv4.rst:941 #: ../../configuration/firewall/ipv6.rst:927 msgid "Set TCP-MSS (maximum segment size) for the connection" msgstr "Set TCP-MSS (maximum segment size) for the connection" -#: ../../configuration/service/dns.rst:264 +#: ../../configuration/service/dns.rst:358 msgid "Set TTL to 300 seconds" msgstr "Establecer TTL a 300 segundos" @@ -11800,6 +11908,42 @@ msgstr "Establezca la acción a realizar en las entradas que coincidan con esta msgid "Set an API-KEY is the minimal configuration to get a working API Endpoint." msgstr "Establecer una API-KEY es la configuración mínima para obtener un punto final de API que funcione." +#: ../../configuration/service/dns.rst:184 +msgid "Set an :abbr:`AAAA (IPv6 Address)` record. Supports ``@`` and ``any`` keywords." +msgstr "Set an :abbr:`AAAA (IPv6 Address)` record. Supports ``@`` and ``any`` keywords." + +#: ../../configuration/service/dns.rst:179 +msgid "Set an :abbr:`A (Address)` record. Supports ``@`` and ``any`` keywords." +msgstr "Set an :abbr:`A (Address)` record. Supports ``@`` and ``any`` keywords." + +#: ../../configuration/service/dns.rst:189 +msgid "Set an :abbr:`CNAME (Canonical name)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`CNAME (Canonical name)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:194 +msgid "Set an :abbr:`NAPTR (Naming authority pointer)` record. Supports ``@`` keyword. NAPTR records support the following options:" +msgstr "Set an :abbr:`NAPTR (Naming authority pointer)` record. Supports ``@`` keyword. NAPTR records support the following options:" + +#: ../../configuration/service/dns.rst:218 +msgid "Set an :abbr:`NS (Nameserver)` record." +msgstr "Set an :abbr:`NS (Nameserver)` record." + +#: ../../configuration/service/dns.rst:223 +msgid "Set an :abbr:`PTR (Pointer record)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`PTR (Pointer record)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:228 +msgid "Set an :abbr:`SPF (Sender policy framework)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`SPF (Sender policy framework)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:233 +msgid "Set an :abbr:`SRV (Service)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`SRV (Service)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:238 +msgid "Set an :abbr:`TXT (Text)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`TXT (Text)` record. Supports ``@`` keyword." + #: ../../configuration/service/ipoe-server.rst:60 #: ../../configuration/service/ipoe-server.rst:88 #: ../../configuration/service/pppoe-server.rst:38 @@ -11829,8 +11973,8 @@ msgstr "Establezca la demora para el segundo conjunto de ARP gratuitos después msgid "Set description." msgstr "Set description." -#: ../../configuration/service/dns.rst:227 -#: ../../configuration/service/dns.rst:332 +#: ../../configuration/service/dns.rst:321 +#: ../../configuration/service/dns.rst:426 msgid "Set description `` for dynamic DNS service being configured." msgstr "Set description `` for dynamic DNS service being configured." @@ -12149,6 +12293,10 @@ msgstr "Set the :abbr:`DR (Designated Router)` Priority for the interface. This msgid "Set the :abbr:`MRU (Maximum Receive Unit)` to `mru`. PPPd will ask the peer to send packets of no more than `mru` bytes. The value of `mru` must be between 128 and 16384." msgstr "Set the :abbr:`MRU (Maximum Receive Unit)` to `mru`. PPPd will ask the peer to send packets of no more than `mru` bytes. The value of `mru` must be between 128 and 16384." +#: ../../configuration/service/dns.rst:164 +msgid "Set the :abbr:`TTL (Time-to-live)` for the record in seconds. Default is 300 seconds." +msgstr "Set the :abbr:`TTL (Time-to-live)` for the record in seconds. Default is 300 seconds." + #: ../../configuration/service/ssh.rst:106 msgid "Set the ``sshd`` log level. The default is ``info``." msgstr "Establezca el nivel de registro ``sshd``. El valor predeterminado es ``info``." @@ -12237,11 +12385,11 @@ msgstr "Establezca el número máximo de intentos de retransmisión de TCP." msgid "Set the number of health check failures before an interface is marked as unavailable, range for number is 1 to 10, default 1. Or set the number of successful health checks before an interface is added back to the interface pool, range for number is 1 to 10, default 1." msgstr "Establezca la cantidad de fallas de verificación de estado antes de que una interfaz se marque como no disponible, el rango de número es 1 a 10, predeterminado 1. O establezca la cantidad de verificaciones de estado exitosas antes de que una interfaz se vuelva a agregar al grupo de interfaces, el rango de número es 1 a 10, por defecto 1." -#: ../../configuration/protocols/rpki.rst:121 +#: ../../configuration/protocols/rpki.rst:119 msgid "Set the number of seconds the router waits until retrying to connect to the cache server." msgstr "Set the number of seconds the router waits until retrying to connect to the cache server." -#: ../../configuration/protocols/rpki.rst:114 +#: ../../configuration/protocols/rpki.rst:112 msgid "Set the number of seconds the router waits until the router expires the cache." msgstr "Set the number of seconds the router waits until the router expires the cache." @@ -12388,7 +12536,7 @@ msgstr "Configure el ` ` en segundos al consultar el servidor RADIUS." msgid "Setup the `` in seconds when querying the TACACS server." msgstr "Configure el ` ` en segundos al consultar el servidor TACACS." -#: ../../configuration/service/dns.rst:336 +#: ../../configuration/service/dns.rst:430 msgid "Setup the dynamic DNS hostname `` associated with the DynDNS provider identified by ``." msgstr "Setup the dynamic DNS hostname `` associated with the DynDNS provider identified by ``." @@ -13281,7 +13429,7 @@ msgstr "Especifique un AS alternativo para este proceso BGP al interactuar con e msgid "Specify an alternate TCP port where the ldap server is listening if other than the default LDAP port 389." msgstr "Especifique un puerto TCP alternativo en el que escuche el servidor ldap si no es el puerto LDAP predeterminado 389." -#: ../../configuration/service/dns.rst:254 +#: ../../configuration/service/dns.rst:348 msgid "Specify interval in seconds to wait between Dynamic DNS updates. The default is 300 seconds." msgstr "Specify interval in seconds to wait between Dynamic DNS updates. The default is 300 seconds." @@ -13327,7 +13475,7 @@ msgstr "Especifique el valor del identificador del agregador de nivel de sitio ( msgid "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." msgstr "Especifique la dirección de la interfaz utilizada localmente en la interfaz a la que se ha delegado el prefijo. El ID debe ser un entero decimal." -#: ../../configuration/loadbalancing/reverse-proxy.rst:167 +#: ../../configuration/loadbalancing/reverse-proxy.rst:170 msgid "Specify the minimum required TLS version 1.2 or 1.3" msgstr "Especifique la versión mínima requerida de TLS 1.2 o 1.3" @@ -13695,7 +13843,7 @@ msgstr "Deshabilite temporalmente este servidor RADIUS. No será consultado." msgid "Temporary disable this TACACS server. It won't be queried." msgstr "Deshabilite temporalmente este servidor TACACS. No será consultado." -#: ../../configuration/loadbalancing/reverse-proxy.rst:245 +#: ../../configuration/loadbalancing/reverse-proxy.rst:248 msgid "Terminate SSL" msgstr "Terminar SSL" @@ -13747,7 +13895,7 @@ msgstr "El monitor ARP funciona comprobando periódicamente los dispositivos esc msgid "The ASP has documented their IPSec requirements:" msgstr "El ASP ha documentado sus requisitos de IPSec:" -#: ../../configuration/protocols/rpki.rst:82 +#: ../../configuration/protocols/rpki.rst:80 msgid "The BGP router can connect to one or more RPKI cache servers to receive validated prefix to origin AS mappings. Advanced failover can be implemented by server sockets with different preference values." msgstr "El enrutador BGP puede conectarse a uno o más servidores de caché RPKI para recibir el prefijo validado para las asignaciones AS de origen. La conmutación por error avanzada se puede implementar mediante sockets de servidor con diferentes valores de preferencia." @@ -13775,7 +13923,7 @@ msgstr "El DN y la contraseña para enlazar mientras se realizan búsquedas. Com msgid "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." msgstr "La política FQ-CoDel distribuye el tráfico en 1024 colas FIFO e intenta brindar un buen servicio entre todas ellas. También trata de mantener corta la longitud de todas las colas." -#: ../../configuration/loadbalancing/reverse-proxy.rst:215 +#: ../../configuration/loadbalancing/reverse-proxy.rst:218 msgid "The HTTP service listen on TCP port 80." msgstr "El servicio HTTP escucha en el puerto TCP 80." @@ -13827,19 +13975,23 @@ msgstr "El número de puerto UDP utilizado por su aplicación. Es obligatorio pa msgid "The VXLAN specification was originally created by VMware, Arista Networks and Cisco. Other backers of the VXLAN technology include Huawei, Broadcom, Citrix, Pica8, Big Switch Networks, Cumulus Networks, Dell EMC, Ericsson, Mellanox, FreeBSD, OpenBSD, Red Hat, Joyent, and Juniper Networks." msgstr "La especificación VXLAN fue creada originalmente por VMware, Arista Networks y Cisco. Otros patrocinadores de la tecnología VXLAN incluyen Huawei, Broadcom, Citrix, Pica8, Big Switch Networks, Cumulus Networks, Dell EMC, Ericsson, Mellanox, FreeBSD, OpenBSD, Red Hat, Joyent y Juniper Networks." +#: ../../configuration/service/dns.rst:149 +msgid "The VyOS DNS forwarder can also be configured to host authoritative records for a domain." +msgstr "The VyOS DNS forwarder can also be configured to host authoritative records for a domain." + #: ../../configuration/service/dns.rst:14 msgid "The VyOS DNS forwarder does not require an upstream DNS server. It can serve as a full recursive DNS server - but it can also forward queries to configurable upstream DNS servers. By not configuring any upstream DNS servers you also avoid being tracked by the provider of your upstream DNS server." msgstr "El reenviador DNS de VyOS no requiere un servidor DNS ascendente. Puede servir como un servidor DNS recursivo completo, pero también puede reenviar consultas a servidores DNS ascendentes configurables. Al no configurar ningún servidor DNS ascendente, también evita que el proveedor de su servidor DNS ascendente lo rastree." -#: ../../configuration/service/dns.rst:160 +#: ../../configuration/service/dns.rst:254 msgid "The VyOS DNS forwarder will only accept lookup requests from the LAN subnets - 192.168.1.0/24 and 2001:db8::/64" msgstr "El reenviador de DNS de VyOS solo aceptará solicitudes de búsqueda de las subredes LAN: 192.168.1.0/24 y 2001:db8::/64" -#: ../../configuration/service/dns.rst:158 +#: ../../configuration/service/dns.rst:252 msgid "The VyOS DNS forwarder will only listen for requests on the eth1 (LAN) interface addresses - 192.168.1.254 for IPv4 and 2001:db8::ffff for IPv6" msgstr "El reenviador de DNS de VyOS solo escuchará solicitudes en las direcciones de interfaz eth1 (LAN): 192.168.1.254 para IPv4 y 2001:db8::ffff para IPv6" -#: ../../configuration/service/dns.rst:162 +#: ../../configuration/service/dns.rst:256 msgid "The VyOS DNS forwarder will pass reverse lookups for 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa zones to upstream server." msgstr "El reenviador de DNS de VyOS pasará búsquedas inversas para las zonas 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa al servidor ascendente." @@ -13888,10 +14040,26 @@ msgstr "La ``dirección`` se puede configurar en la interfaz VRRP o no en la int msgid "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" msgstr "El parámetro ``dirección`` puede ser una dirección IPv4 o IPv6, pero no puede mezclar IPv4 e IPv6 en el mismo grupo, y deberá crear grupos con diferentes VRID especialmente para IPv4 e IPv6. Si desea utilizar la dirección IPv4 + IPv6, puede utilizar la opción ``dirección-excluida``" +#: ../../configuration/loadbalancing/reverse-proxy.rst:305 +msgid "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" +msgstr "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" + #: ../../configuration/loadbalancing/reverse-proxy.rst:248 msgid "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." msgstr "El servicio ``http`` se reduce en el puerto 80 y fuerza los redireccionamientos de HTTP a HTTPS." +#: ../../configuration/loadbalancing/reverse-proxy.rst:251 +msgid "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." +msgstr "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:302 +msgid "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." +msgstr "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:254 +msgid "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." +msgstr "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." + #: ../../configuration/loadbalancing/reverse-proxy.rst:251 msgid "The ``https`` service listens on port 443 with backend `bk-default` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." msgstr "El servicio ``https`` escucha en el puerto 443 con el backend `bk-default` para manejar el tráfico HTTPS. Utiliza un certificado llamado ``cert`` para la terminación de SSL." @@ -14071,7 +14239,7 @@ msgstr "El valor por defecto corresponde a 64." msgid "The default value is 0. This will cause the carrier to be asserted (for 802.3ad mode) whenever there is an active aggregator, regardless of the number of available links in that aggregator." msgstr "El valor predeterminado es 0. Esto hará que se afirme el operador (para el modo 802.3ad) siempre que haya un agregador activo, independientemente de la cantidad de enlaces disponibles en ese agregador." -#: ../../configuration/protocols/rpki.rst:110 +#: ../../configuration/protocols/rpki.rst:108 msgid "The default value is 300 seconds." msgstr "El valor predeterminado es 300 segundos." @@ -14083,11 +14251,11 @@ msgstr "The default value is 3." msgid "The default value is 3 packets." msgstr "The default value is 3 packets." -#: ../../configuration/protocols/rpki.rst:124 +#: ../../configuration/protocols/rpki.rst:122 msgid "The default value is 600 seconds." msgstr "The default value is 600 seconds." -#: ../../configuration/protocols/rpki.rst:117 +#: ../../configuration/protocols/rpki.rst:115 msgid "The default value is 7200 seconds." msgstr "The default value is 7200 seconds." @@ -14229,7 +14397,7 @@ msgstr "Los siguientes comandos se traducen a "--net host" cuando se c msgid "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" msgstr "Se requerirían los siguientes comandos para establecer opciones para un protocolo de enrutamiento dinámico dado dentro de un vrf dado:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:212 +#: ../../configuration/loadbalancing/reverse-proxy.rst:215 msgid "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." msgstr "La siguiente configuración demuestra cómo usar VyOS para lograr un equilibrio de carga basado en el nombre de dominio." @@ -14245,6 +14413,14 @@ msgstr "La siguiente configuración en VyOS se aplica a todos los siguientes pro msgid "The following configuration reverse-proxy terminate SSL." msgstr "La siguiente configuración de proxy inverso termina SSL." +#: ../../configuration/loadbalancing/reverse-proxy.rst:249 +msgid "The following configuration terminates SSL on the router." +msgstr "The following configuration terminates SSL on the router." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:295 +msgid "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." +msgstr "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." + #: ../../configuration/interfaces/pppoe.rst:383 msgid "The following configuration will assign a /64 prefix out of a /56 delegation to eth0. The IPv6 address assigned to eth0 will be ::ffff/64. If you do not know the prefix size delegated to you, start with sla-len 0." msgstr "La siguiente configuración asignará un prefijo /64 de una delegación /56 a eth0. La dirección IPv6 asignada a eth0 será ::ffff/64. Si no conoce el tamaño del prefijo que se le delegó, comience con sla-len 0." @@ -14442,7 +14618,7 @@ msgstr "La aplicación más visible del protocolo es para el acceso a cuentas sh msgid "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." msgstr "El grupo de multidifusión utilizado por todas las hojas para esta extensión de vlan. Tiene que ser igual en todas las hojas que tenga esta interfaz." -#: ../../configuration/loadbalancing/reverse-proxy.rst:182 +#: ../../configuration/loadbalancing/reverse-proxy.rst:185 msgid "The name of the service can be different, in this example it is only for convenience." msgstr "El nombre del servicio puede ser diferente, en este ejemplo es solo por conveniencia." @@ -14522,11 +14698,11 @@ msgstr "La popular herramienta ``dig`` de Unix/Linux establece el bit AD en la c msgid "The pre-shared key mode is deprecated and will be removed from future OpenVPN versions, so VyOS will have to remove support for that option as well. The reason is that using pre-shared keys is significantly less secure than using TLS." msgstr "The pre-shared key mode is deprecated and will be removed from future OpenVPN versions, so VyOS will have to remove support for that option as well. The reason is that using pre-shared keys is significantly less secure than using TLS." -#: ../../configuration/protocols/rpki.rst:49 +#: ../../configuration/protocols/rpki.rst:47 msgid "The prefix and ASN that originated it match a signed ROA. These are probably trustworthy route announcements." msgstr "El prefijo y el ASN que lo originaron coinciden con un ROA firmado. Estos son probablemente anuncios de ruta confiables." -#: ../../configuration/protocols/rpki.rst:53 +#: ../../configuration/protocols/rpki.rst:51 msgid "The prefix or prefix length and ASN that originated it doesn't match any existing ROA. This could be the result of a prefix hijack, or merely a misconfiguration, but should probably be treated as untrustworthy route announcements." msgstr "El prefijo o la longitud del prefijo y el ASN que lo originó no coincide con ningún ROA existente. Esto podría ser el resultado de un secuestro de prefijo, o simplemente una configuración incorrecta, pero probablemente debería tratarse como anuncios de ruta no confiables." @@ -15985,11 +16161,11 @@ msgstr "Este comando crea un puente que se usa para vincular el tráfico en eth1 msgid "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." msgstr "Este comando especifica la máquina de estados finitos (FSM) destinada a controlar el tiempo de ejecución de los cálculos SPF en respuesta a eventos IGP. El proceso descrito en :rfc:`8405`." -#: ../../configuration/loadbalancing/reverse-proxy.rst:192 +#: ../../configuration/loadbalancing/reverse-proxy.rst:195 msgid "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." msgstr "Esta configuración habilita el proxy inverso TCP para el servicio "my-tcp-api". Las conexiones TCP entrantes en el puerto 8888 se equilibrarán en la carga de los servidores backend (srv01 y srv02) mediante el algoritmo de equilibrio de carga por turnos." -#: ../../configuration/loadbalancing/reverse-proxy.rst:174 +#: ../../configuration/loadbalancing/reverse-proxy.rst:177 msgid "This configuration listen on port 80 and redirect incoming requests to HTTPS:" msgstr "Esta configuración escucha en el puerto 80 y redirige las solicitudes entrantes a HTTPS:" @@ -16164,8 +16340,8 @@ msgstr "Este es un comando obligatorio. Establece la ruta completa al script. El msgid "This is a mandatory option" msgstr "This is a mandatory option" -#: ../../configuration/protocols/rpki.rst:131 -#: ../../configuration/protocols/rpki.rst:138 +#: ../../configuration/protocols/rpki.rst:129 +#: ../../configuration/protocols/rpki.rst:136 msgid "This is a mandatory setting." msgstr "Esta es una configuración obligatoria." @@ -16455,7 +16631,7 @@ msgstr "Esto configurará una entrada ARP estática siempre resolviendo `` to determine your IP address. ddclient_ will load `` and tries to extract your IP address from the response." msgstr "Usar configurado ` ` para determinar su dirección IP. ddclient_ cargará ` ` e intenta extraer su dirección IP de la respuesta." -#: ../../configuration/service/dns.rst:368 +#: ../../configuration/service/dns.rst:462 msgid "Use deSEC (dedyn.io) as your preferred provider:" msgstr "Use deSEC (dedyn.io) as your preferred provider:" @@ -18323,11 +18499,11 @@ msgstr "VyOS facilitates IPv6 Multicast by supporting **PIMv6** and **MLD**." msgid "VyOS includes the FastNetMon Community Edition." msgstr "VyOS includes the FastNetMon Community Edition." -#: ../../configuration/service/dns.rst:201 +#: ../../configuration/service/dns.rst:295 msgid "VyOS is able to update a remote DNS record when an interface gets a new IP address. In order to do so, VyOS includes ddclient_, a Perl script written for this only one purpose." msgstr "VyOS puede actualizar un registro DNS remoto cuando una interfaz obtiene una nueva dirección IP. Para hacerlo, VyOS incluye ddclient_, un script de Perl escrito para este único propósito." -#: ../../configuration/service/dns.rst:319 +#: ../../configuration/service/dns.rst:413 msgid "VyOS is also able to use any service relying on protocols supported by ddclient." msgstr "VyOS también puede usar cualquier servicio que dependa de los protocolos compatibles con ddclient." @@ -18536,7 +18712,7 @@ msgstr "No podemos admitir todas las pantallas desde el principio. Si falta su t msgid "We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let's Encrypt an open certificate authority launched by the EFF, Mozilla, and others and deploys it to a web server." msgstr "También podemos crear los certificados usando Cerbort, que es un cliente fácil de usar que obtiene un certificado de Let's Encrypt, una autoridad de certificación abierta lanzada por EFF, Mozilla y otros, y lo implementa en un servidor web." -#: ../../configuration/protocols/rpki.rst:170 +#: ../../configuration/protocols/rpki.rst:168 msgid "We can build route-maps for import based on these states. Here is a simple RPKI configuration, where `routinator` is the RPKI-validating \"cache\" server with ip `192.0.2.1`:" msgstr "Podemos construir mapas de ruta para importar basados en estos estados. Aquí hay una configuración simple de RPKI, donde `routinator` es el servidor de "caché" de validación de RPKI con ip `192.0.2.1`:" @@ -18620,11 +18796,11 @@ msgstr "When PIM receives a register packet the source of the packet will be com msgid "When VRFs are used it is not only mandatory to create a VRF but also the VRF itself needs to be assigned to an interface." msgstr "Cuando se utilizan VRF, no solo es obligatorio crear un VRF, sino que también es necesario asignar el VRF a una interfaz." -#: ../../configuration/service/dns.rst:351 +#: ../../configuration/service/dns.rst:445 msgid "When a ``custom`` DynDNS provider is used, the protocol used for communicating to the provider must be specified under ``. See the embedded completion helper when entering above command for available protocols." msgstr "When a ``custom`` DynDNS provider is used, the protocol used for communicating to the provider must be specified under ``. See the embedded completion helper when entering above command for available protocols." -#: ../../configuration/service/dns.rst:357 +#: ../../configuration/service/dns.rst:451 msgid "When a ``custom`` DynDNS provider is used the `` where update requests are being sent to must be specified." msgstr "Cuando se utiliza un proveedor DynDNS ``personalizado``, el ` ` Debe especificarse a dónde se envían las solicitudes de actualización." @@ -18797,7 +18973,7 @@ msgstr "Cuando se usa NAT para una gran cantidad de sistemas host, se recomienda msgid "When using SSH, known-hosts-file, private-key-file and public-key-file are mandatory options." msgstr "Cuando se utiliza SSH, el archivo de hosts conocidos, el archivo de clave privada y el archivo de clave pública son opciones obligatorias." -#: ../../configuration/protocols/rpki.rst:163 +#: ../../configuration/protocols/rpki.rst:161 msgid "When using SSH, private-key-file and public-key-file are mandatory options." msgstr "When using SSH, private-key-file and public-key-file are mandatory options." @@ -19008,7 +19184,7 @@ msgstr "También puede configurar el intervalo de tiempo para la preferencia con msgid "You can also define custom timeout values to apply to a specific subset of connections, based on a packet and flow selector. To do this, you need to create a rule defining the packet and flow selector." msgstr "También puede definir valores de tiempo de espera personalizados para aplicar a un subconjunto específico de conexiones, según un paquete y un selector de flujo. Para hacer esto, debe crear una regla que defina el paquete y el selector de flujo." -#: ../../configuration/service/dns.rst:312 +#: ../../configuration/service/dns.rst:406 msgid "You can also keep different DNS zone updated. Just create a new config node: ``set service dns dynamic interface rfc2136 ``" msgstr "También puede mantener actualizadas diferentes zonas DNS. Simplemente cree un nuevo nodo de configuración: `` establezca la interfaz dinámica de dns del servicio rfc2136 ``" @@ -19348,6 +19524,10 @@ msgstr ":abbr:`RIP (Protocolo de información de enrutamiento)` es un protocolo msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:`PKI (Public Key Infrastructure)` designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." msgstr ":abbr:`RPKI (Infraestructura de clave pública de recursos)` es un marco :abbr:`PKI (Infraestructura de clave pública)` diseñado para asegurar la infraestructura de enrutamiento de Internet. Asocia los anuncios de ruta BGP con el :abbr:`ASN (Número de sistema autónomo)` de origen correcto que los enrutadores BGP pueden usar para verificar cada ruta con la correspondiente :abbr:`ROA (Autorización de origen de ruta)` para verificar su validez. RPKI se describe en :rfc:`6480`." +#: ../../configuration/protocols/rpki.rst:14 +msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." +msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." + #: ../../configuration/interfaces/ethernet.rst:82 msgid ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" msgstr ":abbr:`RPS (Receive Packet Steering)` es lógicamente una implementación de software de :abbr:`RSS (Receive Side Scaling)`. Al estar en el software, necesariamente se llama más adelante en la ruta de datos. Mientras que RSS selecciona la cola y, por lo tanto, la CPU que ejecutará el controlador de interrupciones de hardware, RPS selecciona la CPU para realizar el procesamiento del protocolo por encima del controlador de interrupciones. Esto se logra colocando el paquete en la cola de trabajos pendientes de la CPU deseada y activando la CPU para su procesamiento. RPS tiene algunas ventajas sobre RSS:" @@ -19512,7 +19692,7 @@ msgstr ":ref:`routing-static`: ``establecer nombre vrf protocolos estátic msgid ":rfc:`2131` states: The client MAY choose to explicitly provide the identifier through the 'client identifier' option. If the client supplies a 'client identifier', the client MUST use the same 'client identifier' in all subsequent messages, and the server MUST use that identifier to identify the client." msgstr ":rfc:`2131` estados: El cliente PUEDE optar por proporcionar explícitamente el identificador a través de la opción 'identificador de cliente'. Si el cliente proporciona un 'identificador de cliente', el cliente DEBE usar el mismo 'identificador de cliente' en todos los mensajes subsiguientes, y el servidor DEBE usar ese identificador para identificar al cliente." -#: ../../configuration/service/dns.rst:217 +#: ../../configuration/service/dns.rst:311 msgid ":rfc:`2136` Based" msgstr ":rfc:`2136` Basado" @@ -19664,6 +19844,10 @@ msgstr "``9600`` - 9600 bps" msgid "``< dh-group >`` defines a Diffie-Hellman group for PFS;" msgstr "``< dh-group >`` define un grupo Diffie-Hellman para PFS;" +#: ../../configuration/service/dns.rst:172 +msgid "``@`` Use @ as record name to set the record for the root domain." +msgstr "``@`` Use @ as record name to set the record for the root domain." + #: ../../configuration/protocols/segment-routing.rst:41 msgid "``Known limitations:``" msgstr "``Limitaciones conocidas:``" @@ -19734,6 +19918,10 @@ msgstr "``todas disponibles`` todas las direcciones de destino de verificación msgid "``any-available`` any of the checking target addresses must be available to pass this check" msgstr "``cualquiera disponible`` cualquiera de las direcciones de destino de verificación debe estar disponible para pasar esta verificación" +#: ../../configuration/service/dns.rst:174 +msgid "``any`` Use any as record name to configure the record as a wildcard." +msgstr "``any`` Use any as record name to configure the record as a wildcard." + #: ../../configuration/vpn/site2site_ipsec.rst:388 msgid "``authentication local-id/remote-id`` - IKE identification is used for validation of VPN peer devices during IKE negotiation. If you do not configure local/remote-identity, the device uses the IPv4 or IPv6 address that corresponds to the local/remote peer by default. In certain network setups (like ipsec interface with dynamic address, or behind the NAT ), the IKE ID received from the peer does not match the IKE gateway configured on the device. This can lead to a Phase 1 validation failure. So, make sure to configure the local/remote id explicitly and ensure that the IKE ID is the same as the remote-identity configured on the peer device." msgstr "``authentication local-id/remote-id``: la identificación de IKE se utiliza para la validación de los dispositivos del mismo nivel de VPN durante la negociación de IKE. Si no configura la identidad local/remota, el dispositivo utiliza la dirección IPv4 o IPv6 que corresponde al par local/remoto de forma predeterminada. En ciertas configuraciones de red (como la interfaz ipsec con dirección dinámica o detrás de NAT), la ID de IKE recibida del par no coincide con la puerta de enlace IKE configurada en el dispositivo. Esto puede conducir a una falla de validación de Fase 1. Por lo tanto, asegúrese de configurar la identificación local/remota explícitamente y asegúrese de que la identificación IKE sea la misma que la identidad remota configurada en el dispositivo par." @@ -20855,7 +21043,7 @@ msgstr "cron" msgid "daemon" msgstr "demonio" -#: ../../configuration/service/dns.rst:405 +#: ../../configuration/service/dns.rst:499 msgid "ddclient_ has another way to determine the WAN IP address. This is controlled by:" msgstr "ddclient_ tiene otra forma de determinar la dirección IP de WAN. Esto es controlado por:" @@ -20863,11 +21051,11 @@ msgstr "ddclient_ tiene otra forma de determinar la dirección IP de WAN. Esto e msgid "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other similar website. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." msgstr "ddclient_ utiliza dos métodos para actualizar un registro DNS. El primero enviará actualizaciones directamente al demonio DNS, de conformidad con :rfc:`2136`. El segundo implica un servicio de terceros, como DynDNS.com o cualquier otro sitio web similar. Este método utiliza solicitudes HTTP para transmitir la nueva dirección IP. Puede configurar ambos en VyOS." -#: ../../configuration/service/dns.rst:205 +#: ../../configuration/service/dns.rst:299 msgid "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other such service provider. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." msgstr "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other such service provider. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." -#: ../../configuration/service/dns.rst:415 +#: ../../configuration/service/dns.rst:509 msgid "ddclient_ will skip any address located before the string set in ``." msgstr "ddclient_ omitirá cualquier dirección ubicada antes de la cadena establecida en ` `." @@ -21044,7 +21232,7 @@ msgstr "información" msgid "interval" msgstr "Intervalo" -#: ../../configuration/protocols/rpki.rst:56 +#: ../../configuration/protocols/rpki.rst:54 msgid "invalid" msgstr "INVÁLIDO" @@ -21276,7 +21464,7 @@ msgstr "sin-bandera-autonoma" msgid "no-on-link-flag" msgstr "no-on-link-flag" -#: ../../configuration/protocols/rpki.rst:61 +#: ../../configuration/protocols/rpki.rst:59 msgid "notfound" msgstr "Extraviado" @@ -21549,7 +21737,7 @@ msgstr "usuario" msgid "uucp" msgstr "uucp" -#: ../../configuration/protocols/rpki.rst:50 +#: ../../configuration/protocols/rpki.rst:48 msgid "valid" msgstr "Válido" diff --git a/docs/_locale/ja/LC_MESSAGES/configexamples.mo b/docs/_locale/ja/LC_MESSAGES/configexamples.mo index e8a681c2..0ecc0ca9 100644 Binary files a/docs/_locale/ja/LC_MESSAGES/configexamples.mo and b/docs/_locale/ja/LC_MESSAGES/configexamples.mo differ diff --git a/docs/_locale/ja/LC_MESSAGES/configuration.mo b/docs/_locale/ja/LC_MESSAGES/configuration.mo index 8abe3b97..cc731ee9 100644 Binary files a/docs/_locale/ja/LC_MESSAGES/configuration.mo and b/docs/_locale/ja/LC_MESSAGES/configuration.mo differ diff --git a/docs/_locale/ja/configexamples.pot b/docs/_locale/ja/configexamples.pot index 5d62c8dc..b9bec753 100644 --- a/docs/_locale/ja/configexamples.pot +++ b/docs/_locale/ja/configexamples.pot @@ -318,6 +318,14 @@ msgstr "Active Directory on Windows server" msgid "Add (temporary) default route" msgstr "Add (temporary) default route" +#: ../../configexamples/ansible.rst:99 +msgid "Add a simple playbook with the tasks for each router:" +msgstr "Add a simple playbook with the tasks for each router:" + +#: ../../configexamples/ansible.rst:73 +msgid "Add all the VyOS hosts:" +msgstr "Add all the VyOS hosts:" + #: ../../configexamples/ansible.rst:73 msgid "Add all the hosts of VyOS:" msgstr "Add all the hosts of VyOS:" @@ -350,6 +358,10 @@ msgstr "After all is done and commit, let's take a look if the Wireguard interfa msgid "After configured all the VRFs involved in this topology we take a deeper look at both BGP and Routing table for the VRF LAN1" msgstr "After configured all the VRFs involved in this topology we take a deeper look at both BGP and Routing table for the VRF LAN1" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 +msgid "After some testing, we can check IPSec status, and counter on every tunnel:" +msgstr "After some testing, we can check IPSec status, and counter on every tunnel:" + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 msgid "After some testing, we can check ipsec status, and counter on every tunnel:" msgstr "After some testing, we can check ipsec status, and counter on every tunnel:" @@ -378,6 +390,14 @@ msgstr "All traffic coming in through eth2 is balanced between eth0 and eth1 on msgid "Allow DHCPv6 packets for router" msgstr "Allow DHCPv6 packets for router" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:34 +msgid "Allow DNS requests only only for local networks." +msgstr "Allow DNS requests only only for local networks." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:36 +msgid "Allow ICMP on all interfaces." +msgstr "Allow ICMP on all interfaces." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:32 msgid "Allow access to the router only from trusted networks." msgstr "Allow access to the router only from trusted networks." @@ -571,6 +591,10 @@ msgstr "Basic Firewall" msgid "Basic Setup (via console)" msgstr "Basic Setup (via console)" +#: ../../configexamples/ansible.rst:64 +msgid "Basic configuration of ansible.cfg:" +msgstr "Basic configuration of ansible.cfg:" + #: ../../configexamples/ansible.rst:64 msgid "Basik configuration of the ansible.cfg:" msgstr "Basik configuration of the ansible.cfg:" @@ -664,6 +688,10 @@ msgstr "Client" msgid "Client configuration" msgstr "Client configuration" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 +msgid "Communication between private subnets should be done through IPSec tunnel without NAT." +msgstr "Communication between private subnets should be done through IPSec tunnel without NAT." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 msgid "Communication between private subnets should be done through ipsec tunnel without nat." msgstr "Communication between private subnets should be done through ipsec tunnel without nat." @@ -1012,6 +1040,10 @@ msgstr "For home network users, most of time ISP only provides /64 prefix, hence msgid "For redundant / active-active configurations see :ref:`examples-azure-vpn-dual-bgp`" msgstr "For redundant / active-active configurations see :ref:`examples-azure-vpn-dual-bgp`" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 +msgid "For simplicity, configuration and tests are done only using IPv4, and firewall configuration is done only on one router." +msgstr "For simplicity, configuration and tests are done only using IPv4, and firewall configuration is done only on one router." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 msgid "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." msgstr "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." @@ -1217,6 +1249,10 @@ msgstr "In the end, you'll get a powerful instrument for monitoring the VyOS sys msgid "In the end, you will end up with something like this config. I took out everything but the Firewall, Interfaces, and zone-policy sections. It is long enough as is." msgstr "In the end, you will end up with something like this config. I took out everything but the Firewall, Interfaces, and zone-policy sections. It is long enough as is." +#: ../../configexamples/ansible.rst:216 +msgid "In the next chapter of the example, we'll use Ansible with jinja2 templates and variables." +msgstr "In the next chapter of the example, we'll use Ansible with jinja2 templates and variables." + #: ../../configexamples/ansible.rst:216 msgid "In the next chapter of the example, we'll use the Ansible with jinja2 templates and variables." msgstr "In the next chapter of the example, we'll use the Ansible with jinja2 templates and variables." @@ -1277,6 +1313,14 @@ msgstr "Information about Ethernet Virtual Private Networks" msgid "Information about prefix-sid and label-operation from VyOS" msgstr "Information about prefix-sid and label-operation from VyOS" +#: ../../configexamples/ansible.rst:37 +msgid "Install Ansible:" +msgstr "Install Ansible:" + +#: ../../configexamples/ansible.rst:44 +msgid "Install Paramiko:" +msgstr "Install Paramiko:" + #: ../../configexamples/ansible.rst:37 msgid "Install the Ansible:" msgstr "Install the Ansible:" @@ -1418,6 +1462,10 @@ msgstr "Let’s check IPv4 routing and MPLS information on provider nodes (same msgid "Let’s say we have a requirement to have multiple networks." msgstr "Let’s say we have a requirement to have multiple networks." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 +msgid "Local subnets should be able to reach internet using source NAT." +msgstr "Local subnets should be able to reach internet using source NAT." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 msgid "Local subnets should be able to reach internet using source nat." msgstr "Local subnets should be able to reach internet using source nat." @@ -1731,6 +1779,10 @@ msgstr "Prerequisites" msgid "Priorities" msgstr "Priorities" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 +msgid "Protect the router on 'WAN' interface, allowing only IPSec connections and SSH access from trusted IPs." +msgstr "Protect the router on 'WAN' interface, allowing only IPSec connections and SSH access from trusted IPs." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 msgid "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." msgstr "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." @@ -2162,6 +2214,10 @@ msgstr "This accomplishes a few things:" msgid "This chapter contains various configuration examples:" msgstr "This chapter contains various configuration examples:" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 +msgid "This configuration example and the requirments consists of:" +msgstr "This configuration example and the requirments consists of:" + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 msgid "This configuration example and the requirments consists on:" msgstr "This configuration example and the requirments consists on:" @@ -2210,6 +2266,10 @@ msgstr "This guide shows an example of a route-based IKEv2 site-to-site VPN to A msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:7 +msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configuration." +msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configuration." + #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:10 msgid "This guide walks through the setup of https://www.tunnelbroker.net/ for an IPv6 Tunnel." msgstr "This guide walks through the setup of https://www.tunnelbroker.net/ for an IPv6 Tunnel." diff --git a/docs/_locale/ja/configuration.pot b/docs/_locale/ja/configuration.pot index 1de8f1dc..9341a397 100644 --- a/docs/_locale/ja/configuration.pot +++ b/docs/_locale/ja/configuration.pot @@ -802,6 +802,14 @@ msgstr "**local side - commands**" msgid "**log-fail** In this mode, the recursor will attempt to validate all data it retrieves from authoritative servers, regardless of the client's DNSSEC desires, and will log the validation result. This mode can be used to determine the extra load and amount of possibly bogus answers before turning on full-blown validation. Responses to client queries are the same as with process." msgstr "**log-fail** In this mode, the recursor will attempt to validate all data it retrieves from authoritative servers, regardless of the client's DNSSEC desires, and will log the validation result. This mode can be used to determine the extra load and amount of possibly bogus answers before turning on full-blown validation. Responses to client queries are the same as with process." +#: ../../configuration/service/dns.rst:197 +msgid "**lookup-a** A Flag." +msgstr "**lookup-a** A Flag." + +#: ../../configuration/service/dns.rst:199 +msgid "**lookup-srv** S flag." +msgstr "**lookup-srv** S flag." + #: ../../configuration/protocols/isis.rst:100 msgid "**narrow** - Use old style of TLVs with narrow metric." msgstr "**narrow** - Use old style of TLVs with narrow metric." @@ -839,6 +847,10 @@ msgstr "**off** In this mode, no DNSSEC processing takes place. The recursor wil msgid "**on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)" msgstr "**on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)" +#: ../../configuration/service/dns.rst:201 +msgid "**order** Rule order. Requires ``." +msgstr "**order** Rule order. Requires ``." + #: ../../configuration/nat/nat44.rst:149 msgid "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." msgstr "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." @@ -872,6 +884,10 @@ msgstr "**prefer** - ask client for mppe, if it rejects don't fail" msgid "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" msgstr "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" +#: ../../configuration/service/dns.rst:203 +msgid "**preference** Rule preference. Requires ``. Defaults to 0 if not set." +msgstr "**preference** Rule preference. Requires ``. Defaults to 0 if not set." + #: ../../configuration/service/dns.rst:77 msgid "**process** When dnssec is set to process the behavior is similar to process-no-validate. However, the recursor will try to validate the data if at least one of the DO or AD bits is set in the query; in that case, it will set the AD-bit in the response when the data is validated successfully, or send SERVFAIL when the validation comes up bogus." msgstr "**process** When dnssec is set to process the behavior is similar to process-no-validate. However, the recursor will try to validate the data if at least one of the DO or AD bits is set in the query; in that case, it will set the AD-bit in the response when the data is validated successfully, or send SERVFAIL when the validation comes up bogus." @@ -884,6 +900,10 @@ msgstr "**process-no-validate** In this mode the recursor acts as a \"security a msgid "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." msgstr "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." +#: ../../configuration/service/dns.rst:205 +msgid "**protocol-specific** P flag." +msgstr "**protocol-specific** P flag." + #: ../../configuration/service/ipoe-server.rst:63 #: ../../configuration/service/pppoe-server.rst:41 #: ../../configuration/vpn/l2tp.rst:29 @@ -903,6 +923,10 @@ msgstr "**radius**: All authentication queries are handled by a configured RADIU msgid "**random** - Random interface identifier for IPv6" msgstr "**random** - Random interface identifier for IPv6" +#: ../../configuration/service/dns.rst:207 +msgid "**regexp** Regular expression. Requires ``." +msgstr "**regexp** Regular expression. Requires ``." + #: ../../configuration/interfaces/wireguard.rst:190 msgid "**remote side - commands**" msgstr "**remote side - commands**" @@ -915,6 +939,10 @@ msgstr "**replace**: Terminate first session when second is authorized **(defaul msgid "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." msgstr "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." +#: ../../configuration/service/dns.rst:209 +msgid "**replacement** Replacement DNS name." +msgstr "**replacement** Replacement DNS name." + #: ../../configuration/service/pppoe-server.rst:472 #: ../../configuration/vpn/l2tp.rst:426 #: ../../configuration/vpn/pptp.rst:350 @@ -936,10 +964,18 @@ msgstr "**require** - Require IPv6 negotiation" msgid "**require** - ask client for mppe, if it rejects drop connection" msgstr "**require** - ask client for mppe, if it rejects drop connection" +#: ../../configuration/service/dns.rst:211 +msgid "**resolve-uri** U flag." +msgstr "**resolve-uri** U flag." + #: ../../configuration/vpn/site2site_ipsec.rst:319 msgid "**right**" msgstr "**right**" +#: ../../configuration/service/dns.rst:213 +msgid "**service** Service type. Requires ``." +msgstr "**service** Service type. Requires ``." + #: ../../configuration/container/index.rst:127 msgid "**setpcap**: Capability sets (from bounded or inherited set)" msgstr "**setpcap**: Capability sets (from bounded or inherited set)" @@ -1503,6 +1539,10 @@ msgstr "A *bit* is written as **bit**," msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described in :rfc:`8210`." msgstr "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described in :rfc:`8210`." +#: ../../configuration/protocols/rpki.rst:21 +msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." +msgstr "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." + #: ../../configuration/protocols/bgp.rst:951 msgid "A BGP confederation divides our AS into sub-ASes to reduce the number of required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but between these sub-ASes we use something that looks like EBGP but behaves like IBGP (called confederation BGP). Confederation mechanism is described in :rfc:`5065`" msgstr "A BGP confederation divides our AS into sub-ASes to reduce the number of required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but between these sub-ASes we use something that looks like EBGP but behaves like IBGP (called confederation BGP). Confederation mechanism is described in :rfc:`5065`" @@ -1531,7 +1571,7 @@ msgstr "A VRF device is created with an associated route table. Network interfac msgid "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." msgstr "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." -#: ../../configuration/service/dns.rst:149 +#: ../../configuration/service/dns.rst:243 msgid "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." msgstr "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." @@ -1624,6 +1664,10 @@ msgstr "A human readable description what this certificate is about." msgid "A lookback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." msgstr "A lookback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." +#: ../../configuration/interfaces/loopback.rst:17 +msgid "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." +msgstr "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." + #: ../../configuration/service/snmp.rst:42 msgid "A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers." msgstr "A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers." @@ -1920,7 +1964,7 @@ msgstr "Add the public CA certificate for the CA named `name` to the VyOS CLI." msgid "Adding a 2FA with an OTP-key" msgstr "Adding a 2FA with an OTP-key" -#: ../../configuration/loadbalancing/reverse-proxy.rst:260 +#: ../../configuration/loadbalancing/reverse-proxy.rst:263 msgid "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." msgstr "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." @@ -2052,7 +2096,7 @@ msgstr "Algorithm" msgid "Aliases" msgstr "Aliases" -#: ../../configuration/service/dns.rst:154 +#: ../../configuration/service/dns.rst:248 msgid "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" msgstr "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" @@ -2080,7 +2124,7 @@ msgstr "All interfaces used for the DHCP relay must be configured. This includes msgid "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." msgstr "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." -#: ../../configuration/service/dns.rst:156 +#: ../../configuration/service/dns.rst:250 msgid "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" msgstr "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" @@ -2136,7 +2180,7 @@ msgstr "Allow access to sites in a domain without retrieving them from the Proxy msgid "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." msgstr "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." -#: ../../configuration/service/dns.rst:362 +#: ../../configuration/service/dns.rst:456 msgid "Allow explicit IPv6 address for the interface." msgstr "Allow explicit IPv6 address for the interface." @@ -2679,6 +2723,10 @@ msgstr "Authentication token" msgid "Authentication – to verify that the message is from a valid source." msgstr "Authentication – to verify that the message is from a valid source." +#: ../../configuration/service/dns.rst:147 +msgid "Authoritative zones" +msgstr "Authoritative zones" + #: ../../configuration/service/monitoring.rst:92 msgid "Authorization token" msgstr "Authorization token" @@ -2803,6 +2851,10 @@ msgstr "Babel is a modern routing protocol designed to be robust and efficient b msgid "Backend" msgstr "Backend" +#: ../../configuration/loadbalancing/reverse-proxy.rst:299 +msgid "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." +msgstr "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." + #: ../../configuration/loadbalancing/reverse-proxy.rst:108 msgid "Balance algorithms:" msgstr "Balance algorithms:" @@ -2811,7 +2863,7 @@ msgstr "Balance algorithms:" msgid "Balancing Rules" msgstr "Balancing Rules" -#: ../../configuration/loadbalancing/reverse-proxy.rst:211 +#: ../../configuration/loadbalancing/reverse-proxy.rst:214 msgid "Balancing based on domain name" msgstr "Balancing based on domain name" @@ -2892,6 +2944,10 @@ msgstr "Before enabling any hardware segmentation offload a corresponding softwa msgid "Before you are able to apply a rule-set to a zone you have to create the zones first." msgstr "Before you are able to apply a rule-set to a zone you have to create the zones first." +#: ../../configuration/service/dns.rst:169 +msgid "Below are a list of record types available to be configured within VyOS. Some records support special `` keywords:" +msgstr "Below are a list of record types available to be configured within VyOS. Some records support special `` keywords:" + #: ../../configuration/vpn/site2site_ipsec.rst:425 msgid "Below flow-chart could be a quick reference for the close-action combination depending on how the peer is configured." msgstr "Below flow-chart could be a quick reference for the close-action combination depending on how the peer is configured." @@ -3037,11 +3093,11 @@ msgstr "By default, VyOS does not advertise a default route (0.0.0.0/0) even if msgid "By default, a new token is generated every 30 seconds by the mobile application. In order to compensate for possible time-skew between the client and the server, an extra token before and after the current time is allowed. This allows for a time skew of up to 30 seconds between authentication server and client." msgstr "By default, a new token is generated every 30 seconds by the mobile application. In order to compensate for possible time-skew between the client and the server, an extra token before and after the current time is allowed. This allows for a time skew of up to 30 seconds between authentication server and client." -#: ../../configuration/service/dns.rst:401 +#: ../../configuration/service/dns.rst:495 msgid "By default, ddclient_ will update a dynamic dns record using the IP address directly attached to the interface. If your VyOS instance is behind NAT, your record will be updated to point to your internal IP." msgstr "By default, ddclient_ will update a dynamic dns record using the IP address directly attached to the interface. If your VyOS instance is behind NAT, your record will be updated to point to your internal IP." -#: ../../configuration/protocols/rpki.rst:91 +#: ../../configuration/protocols/rpki.rst:89 msgid "By default, enabling RPKI does not change best path selection. In particular, invalid prefixes will still be considered during best path selection. However, the router can be configured to ignore all invalid prefixes." msgstr "By default, enabling RPKI does not change best path selection. In particular, invalid prefixes will still be considered during best path selection. However, the router can be configured to ignore all invalid prefixes." @@ -3372,7 +3428,7 @@ msgstr "Confidentiality – Encryption of packets to prevent snooping by an unau #: ../../configuration/protocols/isis.rst:28 #: ../../configuration/protocols/ospf.rst:22 #: ../../configuration/protocols/ospf.rst:1076 -#: ../../configuration/protocols/rpki.rst:104 +#: ../../configuration/protocols/rpki.rst:102 #: ../../configuration/service/broadcast-relay.rst:18 #: ../../configuration/service/conntrack-sync.rst:38 #: ../../configuration/service/console-server.rst:21 @@ -3381,7 +3437,7 @@ msgstr "Confidentiality – Encryption of packets to prevent snooping by an unau #: ../../configuration/service/dhcp-server.rst:22 #: ../../configuration/service/dhcp-server.rst:569 #: ../../configuration/service/dns.rst:8 -#: ../../configuration/service/dns.rst:214 +#: ../../configuration/service/dns.rst:308 #: ../../configuration/service/https.rst:14 #: ../../configuration/service/ids.rst:20 #: ../../configuration/service/lldp.rst:36 @@ -3480,11 +3536,11 @@ msgstr "Configure" msgid "Configure BFD" msgstr "Configure BFD" -#: ../../configuration/service/dns.rst:245 +#: ../../configuration/service/dns.rst:339 msgid "Configure DNS `` which should be updated. This can be set multiple times." msgstr "Configure DNS `` which should be updated. This can be set multiple times." -#: ../../configuration/service/dns.rst:241 +#: ../../configuration/service/dns.rst:335 msgid "Configure DNS `` to be updated." msgstr "Configure DNS `` to be updated." @@ -3550,7 +3606,7 @@ msgstr "Configure `` which is shown after user has logged in to the sys msgid "Configure `` which is shown during SSH connect and before a user is logged in." msgstr "Configure `` which is shown during SSH connect and before a user is logged in." -#: ../../configuration/service/dns.rst:346 +#: ../../configuration/service/dns.rst:440 msgid "Configure `` used when authenticating the update request for DynDNS service identified by ``." msgstr "Configure `` used when authenticating the update request for DynDNS service identified by ``." @@ -3558,7 +3614,7 @@ msgstr "Configure `` used when authenticating the update request for D msgid "Configure `` used when authenticating the update request for DynDNS service identified by ``." msgstr "Configure `` used when authenticating the update request for DynDNS service identified by ``." -#: ../../configuration/service/dns.rst:341 +#: ../../configuration/service/dns.rst:435 msgid "Configure `` used when authenticating the update request for DynDNS service identified by ``." msgstr "Configure `` used when authenticating the update request for DynDNS service identified by ``." @@ -3705,7 +3761,7 @@ msgstr "Configure one or more attributes to the given NTP server." msgid "Configure one or more servers for synchronisation. Server name can be either an IP address or :abbr:`FQDN (Fully Qualified Domain Name)`." msgstr "Configure one or more servers for synchronisation. Server name can be either an IP address or :abbr:`FQDN (Fully Qualified Domain Name)`." -#: ../../configuration/service/dns.rst:249 +#: ../../configuration/service/dns.rst:343 msgid "Configure optional TTL value on the given resource record. This defaults to 600 seconds." msgstr "Configure optional TTL value on the given resource record. This defaults to 600 seconds." @@ -3741,6 +3797,10 @@ msgstr "Configure protocol used for communication to remote syslog host. This ca msgid "Configure proxy port if it does not listen to the default port 80." msgstr "Configure proxy port if it does not listen to the default port 80." +#: ../../configuration/loadbalancing/reverse-proxy.rst:149 +msgid "Configure requests to the backend server to use SSL encryption and authenticate backend against " +msgstr "Configure requests to the backend server to use SSL encryption and authenticate backend against " + #: ../../configuration/system/sflow.rst:16 msgid "Configure sFlow agent IPv4 or IPv6 address" msgstr "Configure sFlow agent IPv4 or IPv6 address" @@ -3773,7 +3833,7 @@ msgstr "Configure the A-side router for NPTv6 using the prefixes above:" msgid "Configure the B-side router for NPTv6 using the prefixes above:" msgstr "Configure the B-side router for NPTv6 using the prefixes above:" -#: ../../configuration/service/dns.rst:236 +#: ../../configuration/service/dns.rst:330 msgid "Configure the DNS `` IP/FQDN used when updating this dynamic assignment." msgstr "Configure the DNS `` IP/FQDN used when updating this dynamic assignment." @@ -3793,7 +3853,7 @@ msgstr "Configure the discrete port under which the RADIUS server can be reached msgid "Configure the discrete port under which the TACACS server can be reached." msgstr "Configure the discrete port under which the TACACS server can be reached." -#: ../../configuration/loadbalancing/reverse-proxy.rst:172 +#: ../../configuration/loadbalancing/reverse-proxy.rst:175 msgid "Configure the load-balancing reverse-proxy service for HTTP." msgstr "Configure the load-balancing reverse-proxy service for HTTP." @@ -3894,7 +3954,7 @@ msgstr "Connections to the RPKI caching server can not only be established by HT msgid "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH you first need to create yoursels an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." msgstr "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH you first need to create yoursels an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." -#: ../../configuration/protocols/rpki.rst:143 +#: ../../configuration/protocols/rpki.rst:141 msgid "Connections to the RPKI caching server can not only be established by TCP using the RTR protocol but you can also rely on a secure SSH session to the server. This provides transport integrity and confidentiality and it is a good idea if your validation software supports it. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." msgstr "Connections to the RPKI caching server can not only be established by TCP using the RTR protocol but you can also rely on a secure SSH session to the server. This provides transport integrity and confidentiality and it is a good idea if your validation software supports it. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." @@ -4093,8 +4153,8 @@ msgstr "Create new VRF instance with ``. The name is used when placing ind msgid "Create new :rfc:`2136` DNS update configuration which will update the IP address assigned to `` on the service you configured under ``." msgstr "Create new :rfc:`2136` DNS update configuration which will update the IP address assigned to `` on the service you configured under ``." -#: ../../configuration/service/dns.rst:221 -#: ../../configuration/service/dns.rst:326 +#: ../../configuration/service/dns.rst:315 +#: ../../configuration/service/dns.rst:420 msgid "Create new dynamic DNS update configuration which will update the IP address assigned to `` on the service you configured under ``." msgstr "Create new dynamic DNS update configuration which will update the IP address assigned to `` on the service you configured under ``." @@ -4507,7 +4567,7 @@ msgstr "Define number of packets to queue inside the kernel before sending them msgid "Define operation mode of High Availability feature. Default value if command is not specified is `active-active`" msgstr "Define operation mode of High Availability feature. Default value if command is not specified is `active-active`" -#: ../../configuration/protocols/rpki.rst:108 +#: ../../configuration/protocols/rpki.rst:106 msgid "Define the time interval to update the local cache" msgstr "Define the time interval to update the local cache" @@ -4523,7 +4583,7 @@ msgstr "Define type of offload to be used by the flowtable: ``hardware`` or ``so msgid "Define used ethertype of bridge interface." msgstr "Define used ethertype of bridge interface." -#: ../../configuration/protocols/rpki.rst:128 +#: ../../configuration/protocols/rpki.rst:126 msgid "Defined the IPv4, IPv6 or FQDN and port number of the caching RPKI caching instance which is used." msgstr "Defined the IPv4, IPv6 or FQDN and port number of the caching RPKI caching instance which is used." @@ -4744,6 +4804,10 @@ msgstr "Disable dhcpv6-relay service." msgid "Disable given ``. It will be placed in administratively down (``A/D``) state." msgstr "Disable given ``. It will be placed in administratively down (``A/D``) state." +#: ../../configuration/service/dns.rst:153 +msgid "Disable hosting authoritative zone for `` without deleting from configuration." +msgstr "Disable hosting authoritative zone for `` without deleting from configuration." + #: ../../configuration/protocols/bgp.rst:628 msgid "Disable immediate session reset if peer's connected link goes down." msgstr "Disable immediate session reset if peer's connected link goes down." @@ -4756,6 +4820,10 @@ msgstr "Disable password based authentication. Login via SSH keys only. This har msgid "Disable sending and receiving PIM control packets on the interface." msgstr "Disable sending and receiving PIM control packets on the interface." +#: ../../configuration/service/dns.rst:159 +msgid "Disable specific record without deleting it from configuration." +msgstr "Disable specific record without deleting it from configuration." + #: ../../configuration/service/ssh.rst:64 msgid "Disable the host validation through reverse DNS lookups - can speedup login time when reverse lookup is not possible." msgstr "Disable the host validation through reverse DNS lookups - can speedup login time when reverse lookup is not possible." @@ -5034,7 +5102,7 @@ msgstr "During profile import, the user is asked to enter its IPSec credentials msgid "Dynamic-protection" msgstr "Dynamic-protection" -#: ../../configuration/service/dns.rst:199 +#: ../../configuration/service/dns.rst:293 msgid "Dynamic DNS" msgstr "Dynamic DNS" @@ -5535,14 +5603,14 @@ msgstr "Every connection/remote-access pool we configure also needs a pool where #: ../../configuration/protocols/failover.rst:63 #: ../../configuration/protocols/igmp-proxy.rst:61 #: ../../configuration/protocols/pim.rst:217 -#: ../../configuration/protocols/rpki.rst:168 +#: ../../configuration/protocols/rpki.rst:166 #: ../../configuration/service/broadcast-relay.rst:55 #: ../../configuration/service/conntrack-sync.rst:195 #: ../../configuration/service/dhcp-relay.rst:85 #: ../../configuration/service/dhcp-relay.rst:174 #: ../../configuration/service/dhcp-server.rst:418 -#: ../../configuration/service/dns.rst:147 -#: ../../configuration/service/dns.rst:260 +#: ../../configuration/service/dns.rst:241 +#: ../../configuration/service/dns.rst:354 #: ../../configuration/service/eventhandler.rst:83 #: ../../configuration/service/ids.rst:82 #: ../../configuration/service/mdns.rst:50 @@ -5586,7 +5654,7 @@ msgstr "Example, from radius-server send command for disconnect client with user #: ../../configuration/protocols/static.rst:67 #: ../../configuration/protocols/static.rst:135 #: ../../configuration/protocols/static.rst:207 -#: ../../configuration/service/dns.rst:366 +#: ../../configuration/service/dns.rst:460 #: ../../configuration/service/monitoring.rst:69 #: ../../configuration/service/monitoring.rst:98 #: ../../configuration/service/ssh.rst:165 @@ -5683,7 +5751,7 @@ msgstr "Example: to be appended is set to ``vyos.net`` and the URL received is ` msgid "Example Configuration" msgstr "Example Configuration" -#: ../../configuration/service/dns.rst:384 +#: ../../configuration/service/dns.rst:478 msgid "Example IPv6 only:" msgstr "Example IPv6 only:" @@ -5721,7 +5789,7 @@ msgstr "Example synproxy" #: ../../configuration/interfaces/bridge.rst:196 #: ../../configuration/interfaces/macsec.rst:153 #: ../../configuration/interfaces/wireless.rst:541 -#: ../../configuration/loadbalancing/reverse-proxy.rst:187 +#: ../../configuration/loadbalancing/reverse-proxy.rst:190 #: ../../configuration/policy/index.rst:46 #: ../../configuration/protocols/bgp.rst:1118 #: ../../configuration/protocols/isis.rst:336 @@ -5849,6 +5917,10 @@ msgstr "Failover mechanism to use for conntrack-sync." msgid "Failover routes are manually configured routes, but they install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target will be available." msgstr "Failover routes are manually configured routes, but they install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target will be available." +#: ../../configuration/protocols/failover.rst:5 +msgid "Failover routes are manually configured routes, but they only install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target becomes available." +msgstr "Failover routes are manually configured routes, but they only install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target becomes available." + #: ../../configuration/trafficpolicy/index.rst:384 msgid "Fair Queue" msgstr "Fair Queue" @@ -5869,7 +5941,7 @@ msgstr "FastNetMon" msgid "FastNetMon is a high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AF_PACKET (port mirror). It can detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second and perform a configurable action to handle that event, such as calling a custom script." msgstr "FastNetMon is a high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AF_PACKET (port mirror). It can detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second and perform a configurable action to handle that event, such as calling a custom script." -#: ../../configuration/protocols/rpki.rst:78 +#: ../../configuration/protocols/rpki.rst:76 msgid "Features of the Current Implementation" msgstr "Features of the Current Implementation" @@ -5877,7 +5949,7 @@ msgstr "Features of the Current Implementation" msgid "Field" msgstr "Field" -#: ../../configuration/service/dns.rst:231 +#: ../../configuration/service/dns.rst:325 msgid "File identified by `` containing the TSIG authentication key for RFC2136 nsupdate on remote DNS server." msgstr "File identified by `` containing the TSIG authentication key for RFC2136 nsupdate on remote DNS server." @@ -6038,6 +6110,10 @@ msgstr "First the OTP keys must be generated and sent to the user and to the con msgid "First we need to specify the basic settings. 1194/UDP is the default. The ``persistent-tunnel`` option is recommended, it prevents the TUN/TAP device from closing on connection resets or daemon reloads." msgstr "First we need to specify the basic settings. 1194/UDP is the default. The ``persistent-tunnel`` option is recommended, it prevents the TUN/TAP device from closing on connection resets or daemon reloads." +#: ../../configuration/protocols/rpki.rst:40 +msgid "First you will need to deploy an RPKI validator for your routers to use. NLnet Labs provides a collection of software_ you can compare and settle on one. Once your server is running you can start validating announcements." +msgstr "First you will need to deploy an RPKI validator for your routers to use. NLnet Labs provides a collection of software_ you can compare and settle on one. Once your server is running you can start validating announcements." + #: ../../configuration/protocols/rpki.rst:41 msgid "First you will need to deploy an RPKI validator for your routers to use. The RIPE NCC helpfully provide `some instructions`_ to get you started with several different options. Once your server is running you can start validating announcements." msgstr "First you will need to deploy an RPKI validator for your routers to use. The RIPE NCC helpfully provide `some instructions`_ to get you started with several different options. Once your server is running you can start validating announcements." @@ -6461,7 +6537,7 @@ msgstr "Get detailed information about LLDP neighbors." msgid "Get the DHCPv6-PD prefixes from both routers:" msgstr "Get the DHCPv6-PD prefixes from both routers:" -#: ../../configuration/protocols/rpki.rst:39 +#: ../../configuration/protocols/rpki.rst:38 msgid "Getting started" msgstr "Getting started" @@ -6477,6 +6553,10 @@ msgstr "Given the following example we have one VyOS router acting as OpenVPN se msgid "Gloabal" msgstr "Gloabal" +#: ../../configuration/loadbalancing/reverse-proxy.rst:153 +msgid "Global" +msgstr "Global" + #: ../../configuration/service/ipoe-server.rst:352 #: ../../configuration/service/pppoe-server.rst:518 #: ../../configuration/vpn/l2tp.rst:472 @@ -6497,7 +6577,7 @@ msgstr "Global Options Firewall Configuration" msgid "Global options" msgstr "Global options" -#: ../../configuration/loadbalancing/reverse-proxy.rst:152 +#: ../../configuration/loadbalancing/reverse-proxy.rst:155 msgid "Global parameters" msgstr "Global parameters" @@ -6534,7 +6614,7 @@ msgstr "HTTP-API" msgid "HTTP API" msgstr "HTTP API" -#: ../../configuration/service/dns.rst:317 +#: ../../configuration/service/dns.rst:411 msgid "HTTP based services" msgstr "HTTP based services" @@ -6611,7 +6691,7 @@ msgstr "Here is a second example of a dual-stack tunnel over IPv6 between a VyOS msgid "Here is an example :abbr:`NET (Network Entity Title)` value:" msgstr "Here is an example :abbr:`NET (Network Entity Title)` value:" -#: ../../configuration/protocols/rpki.rst:179 +#: ../../configuration/protocols/rpki.rst:177 msgid "Here is an example route-map to apply to routes learned at import. In this filter we reject prefixes with the state `invalid`, and set a higher `local-preference` if the prefix is RPKI `valid` rather than merely `notfound`." msgstr "Here is an example route-map to apply to routes learned at import. In this filter we reject prefixes with the state `invalid`, and set a higher `local-preference` if the prefix is RPKI `valid` rather than merely `notfound`." @@ -7227,7 +7307,7 @@ msgstr "If making use of multiple tunnels, OpenVPN must have a way to distinguis msgid "If multi-pathing is enabled, then check whether the routes not yet distinguished in preference may be considered equal. If :cfgcmd:`bgp bestpath as-path multipath-relax` is set, all such routes are considered equal, otherwise routes received via iBGP with identical AS_PATHs or routes received from eBGP neighbours in the same AS are considered equal." msgstr "If multi-pathing is enabled, then check whether the routes not yet distinguished in preference may be considered equal. If :cfgcmd:`bgp bestpath as-path multipath-relax` is set, all such routes are considered equal, otherwise routes received via iBGP with identical AS_PATHs or routes received from eBGP neighbours in the same AS are considered equal." -#: ../../configuration/protocols/rpki.rst:86 +#: ../../configuration/protocols/rpki.rst:84 msgid "If no connection to an RPKI cache server can be established after a pre-defined timeout, the router will process routes without prefix origin validation. It still will try to establish a connection to an RPKI cache server in the background." msgstr "If no connection to an RPKI cache server can be established after a pre-defined timeout, the router will process routes without prefix origin validation. It still will try to establish a connection to an RPKI cache server in the background." @@ -7439,10 +7519,14 @@ msgstr "If you are a hacker or want to try on your own we support passing raw Op msgid "If you are configuring a VRF for management purposes, there is currently no way to force system DNS traffic via a specific VRF." msgstr "If you are configuring a VRF for management purposes, there is currently no way to force system DNS traffic via a specific VRF." -#: ../../configuration/protocols/rpki.rst:30 +#: ../../configuration/protocols/rpki.rst:29 msgid "If you are new to these routing security technologies then there is an `excellent guide to RPKI`_ by NLnet Labs which will get you up to speed very quickly. Their documentation explains everything from what RPKI is to deploying it in production. It also has some `help and operational guidance`_ including \"What can I do about my route having an Invalid state?\"" msgstr "If you are new to these routing security technologies then there is an `excellent guide to RPKI`_ by NLnet Labs which will get you up to speed very quickly. Their documentation explains everything from what RPKI is to deploying it in production. It also has some `help and operational guidance`_ including \"What can I do about my route having an Invalid state?\"" +#: ../../configuration/protocols/rpki.rst:62 +msgid "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC, or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." +msgstr "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC, or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." + #: ../../configuration/protocols/rpki.rst:64 msgid "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." msgstr "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." @@ -7609,7 +7693,7 @@ msgstr "Import the private key of the certificate to the VyOS CLI. This should n msgid "Import the public CA certificate from the defined file to VyOS CLI." msgstr "Import the public CA certificate from the defined file to VyOS CLI." -#: ../../configuration/protocols/rpki.rst:46 +#: ../../configuration/protocols/rpki.rst:44 msgid "Imported prefixes during the validation may have values:" msgstr "Imported prefixes during the validation may have values:" @@ -7653,7 +7737,7 @@ msgstr "In a minimal configuration, the following must be provided:" msgid "In a multiple VLAN header context, out of convenience the term \"VLAN tag\" or just \"tag\" for short is often used in place of \"802.1q_ VLAN header\". QinQ allows multiple VLAN tags in an Ethernet frame; together these tags constitute a tag stack. When used in the context of an Ethernet frame, a QinQ frame is a frame that has 2 VLAN 802.1q_ headers (double-tagged)." msgstr "In a multiple VLAN header context, out of convenience the term \"VLAN tag\" or just \"tag\" for short is often used in place of \"802.1q_ VLAN header\". QinQ allows multiple VLAN tags in an Ethernet frame; together these tags constitute a tag stack. When used in the context of an Ethernet frame, a QinQ frame is a frame that has 2 VLAN 802.1q_ headers (double-tagged)." -#: ../../configuration/protocols/rpki.rst:80 +#: ../../configuration/protocols/rpki.rst:78 msgid "In a nutshell, the current implementation provides the following features:" msgstr "In a nutshell, the current implementation provides the following features:" @@ -7919,7 +8003,7 @@ msgstr "In this example we will use the most complicated case: a setup where eac msgid "In this method, the DSL Modem/Router connects to the ISP for you with your credentials preprogrammed into the device. This gives you an :rfc:`1918` address, such as ``192.168.1.0/24`` by default." msgstr "In this method, the DSL Modem/Router connects to the ISP for you with your credentials preprogrammed into the device. This gives you an :rfc:`1918` address, such as ``192.168.1.0/24`` by default." -#: ../../configuration/service/dns.rst:152 +#: ../../configuration/service/dns.rst:246 msgid "In this scenario:" msgstr "In this scenario:" @@ -8436,7 +8520,7 @@ msgstr "Let SNMP daemon listen only on IP address 192.0.2.1" msgid "Lets assume the following topology:" msgstr "Lets assume the following topology:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:190 +#: ../../configuration/loadbalancing/reverse-proxy.rst:193 msgid "Level 4 balancing" msgstr "Level 4 balancing" @@ -8456,7 +8540,7 @@ msgstr "Lifetime is decremented by the number of seconds since the last RA - use msgid "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." msgstr "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." -#: ../../configuration/loadbalancing/reverse-proxy.rst:162 +#: ../../configuration/loadbalancing/reverse-proxy.rst:165 msgid "Limit allowed cipher algorithms used during SSL/TLS handshake" msgstr "Limit allowed cipher algorithms used during SSL/TLS handshake" @@ -8468,7 +8552,7 @@ msgstr "Limit logins to `` per every ``rate-time`` seconds. Rate limit mu msgid "Limit logins to ``rate-limit`` attemps per every ``. Rate time must be between 15 and 600 seconds." msgstr "Limit logins to ``rate-limit`` attemps per every ``. Rate time must be between 15 and 600 seconds." -#: ../../configuration/loadbalancing/reverse-proxy.rst:157 +#: ../../configuration/loadbalancing/reverse-proxy.rst:160 msgid "Limit maximum number of connections" msgstr "Limit maximum number of connections" @@ -8540,6 +8624,10 @@ msgstr "Lists VRFs that have been created" msgid "Load-balancing" msgstr "Load-balancing" +#: ../../configuration/loadbalancing/reverse-proxy.rst:100 +msgid "Load-balancing algorithms to be used for distributed requests among the available servers" +msgstr "Load-balancing algorithms to be used for distributed requests among the available servers" + #: ../../configuration/loadbalancing/reverse-proxy.rst:100 msgid "Load-balancing algorithms to be used for distributind requests among the vailable servers" msgstr "Load-balancing algorithms to be used for distributind requests among the vailable servers" @@ -8609,11 +8697,11 @@ msgstr "Local User Account" msgid "Local path that includes the known hosts file." msgstr "Local path that includes the known hosts file." -#: ../../configuration/protocols/rpki.rst:157 +#: ../../configuration/protocols/rpki.rst:155 msgid "Local path that includes the private key file of the router." msgstr "Local path that includes the private key file of the router." -#: ../../configuration/protocols/rpki.rst:161 +#: ../../configuration/protocols/rpki.rst:159 msgid "Local path that includes the public key file of the router." msgstr "Local path that includes the public key file of the router." @@ -9238,7 +9326,7 @@ msgstr "Multicast receivers will talk MLD to their local router, so, besides hav msgid "Multiple DNS servers can be defined." msgstr "Multiple DNS servers can be defined." -#: ../../configuration/protocols/rpki.rst:135 +#: ../../configuration/protocols/rpki.rst:133 msgid "Multiple RPKI caching instances can be supplied and they need a preference in which their result sets are used." msgstr "Multiple RPKI caching instances can be supplied and they need a preference in which their result sets are used." @@ -9275,7 +9363,7 @@ msgstr "Multiple networks/client IP addresses can be configured." msgid "Multiple servers can be specified." msgstr "Multiple servers can be specified." -#: ../../configuration/service/dns.rst:380 +#: ../../configuration/service/dns.rst:474 msgid "Multiple services can be used per interface. Just specify as many services per interface as you like!" msgstr "Multiple services can be used per interface. Just specify as many services per interface as you like!" @@ -9543,6 +9631,10 @@ msgstr "Nexthop Tracking" msgid "Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if you do not wan't to e.g. allow BGP to peer across the default route." msgstr "Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if you do not wan't to e.g. allow BGP to peer across the default route." +#: ../../configuration/protocols/rpki.rst:57 +msgid "No ROA exists which covers that prefix. Unfortunately this is the case for about 40%-50% of the prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2024." +msgstr "No ROA exists which covers that prefix. Unfortunately this is the case for about 40%-50% of the prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2024." + #: ../../configuration/protocols/rpki.rst:59 msgid "No ROA exists which covers that prefix. Unfortunately this is the case for about 80% of the IPv4 prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2020" msgstr "No ROA exists which covers that prefix. Unfortunately this is the case for about 80% of the IPv4 prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2020" @@ -9815,6 +9907,10 @@ msgstr "Once you have an Ethernet device connected, i.e. `eth0`, then you can co msgid "Once you have setup your SSTP server there comes the time to do some basic testing. The Linux client used for testing is called sstpc_. sstpc_ requires a PPP configuration/peer file." msgstr "Once you have setup your SSTP server there comes the time to do some basic testing. The Linux client used for testing is called sstpc_. sstpc_ requires a PPP configuration/peer file." +#: ../../configuration/protocols/rpki.rst:193 +msgid "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using Cloudflare's test_ website. Keep in mind that in order for this to work, you need to have no default routes or anything else that would still send traffic to RPKI-invalid destinations." +msgstr "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using Cloudflare's test_ website. Keep in mind that in order for this to work, you need to have no default routes or anything else that would still send traffic to RPKI-invalid destinations." + #: ../../configuration/protocols/rpki.rst:195 msgid "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using the `RIPE Labs RPKI Test`_ experimental tool." msgstr "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using the `RIPE Labs RPKI Test`_ experimental tool." @@ -9958,7 +10054,7 @@ msgstr "Operating Modes" #: ../../configuration/service/console-server.rst:76 #: ../../configuration/service/dhcp-relay.rst:124 #: ../../configuration/service/dhcp-relay.rst:201 -#: ../../configuration/service/dns.rst:182 +#: ../../configuration/service/dns.rst:276 #: ../../configuration/service/lldp.rst:71 #: ../../configuration/service/mdns.rst:79 #: ../../configuration/service/ssh.rst:145 @@ -10257,7 +10353,7 @@ msgstr "PPTP-Server" msgid "Packet-based balancing can lead to a better balance across interfaces when out of order packets are no issue. Per-packet-based balancing can be set for a balancing rule with:" msgstr "Packet-based balancing can lead to a better balance across interfaces when out of order packets are no issue. Per-packet-based balancing can be set for a balancing rule with:" -#: ../../configuration/protocols/rpki.rst:71 +#: ../../configuration/protocols/rpki.rst:69 msgid "Particularly large networks may wish to run their own RPKI certificate authority and publication server instead of publishing ROAs via their RIR. This is a subject far beyond the scope of VyOS' documentation. Consider reading about Krill_ if this is a rabbit hole you need or especially want to dive down." msgstr "Particularly large networks may wish to run their own RPKI certificate authority and publication server instead of publishing ROAs via their RIR. This is a subject far beyond the scope of VyOS' documentation. Consider reading about Krill_ if this is a rabbit hole you need or especially want to dive down." @@ -10923,7 +11019,11 @@ msgstr "Received RADIUS attributes have a higher priority than parameters define msgid "Recommended for larger installations." msgstr "Recommended for larger installations." -#: ../../configuration/loadbalancing/reverse-proxy.rst:171 +#: ../../configuration/service/dns.rst:167 +msgid "Record types" +msgstr "Record types" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:174 msgid "Redirect HTTP to HTTPS" msgstr "Redirect HTTP to HTTPS" @@ -10951,7 +11051,7 @@ msgstr "Redistribution Configuration" msgid "Redundancy and load sharing. There are multiple NAT66 devices at the edge of an IPv6 network to another IPv6 network. The path through the NAT66 device to another IPv6 network forms an equivalent route, and traffic can be load-shared on these NAT66 devices. In this case, you can configure the same source address translation rules on these NAT66 devices, so that any NAT66 device can handle IPv6 traffic between different sites." msgstr "Redundancy and load sharing. There are multiple NAT66 devices at the edge of an IPv6 network to another IPv6 network. The path through the NAT66 device to another IPv6 network forms an equivalent route, and traffic can be load-shared on these NAT66 devices. In this case, you can configure the same source address translation rules on these NAT66 devices, so that any NAT66 device can handle IPv6 traffic between different sites." -#: ../../configuration/service/dns.rst:262 +#: ../../configuration/service/dns.rst:356 msgid "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" msgstr "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" @@ -11102,7 +11202,7 @@ msgstr "Reset OpenVPN" msgid "Reset commands" msgstr "Reset commands" -#: ../../configuration/service/dns.rst:186 +#: ../../configuration/service/dns.rst:280 msgid "Resets the local DNS forwarding cache database. You can reset the cache for all entries or only for entries to a specific domain." msgstr "Resets the local DNS forwarding cache database. You can reset the cache for all entries or only for entries to a specific domain." @@ -11138,7 +11238,7 @@ msgstr "Restart the IGMP proxy process." msgid "Restart the SSH daemon process, the current session is not affected, only the background daemon is restarted." msgstr "Restart the SSH daemon process, the current session is not affected, only the background daemon is restarted." -#: ../../configuration/service/dns.rst:191 +#: ../../configuration/service/dns.rst:285 msgid "Restarts the DNS recursor process. This also invalidates the local DNS forwarding cache." msgstr "Restarts the DNS recursor process. This also invalidates the local DNS forwarding cache." @@ -11232,7 +11332,7 @@ msgstr "Route filter can be applied using a route-map:" msgid "Route map is a powerfull command, that gives network administrators a very useful and flexible tool for traffic manipulation." msgstr "Route map is a powerfull command, that gives network administrators a very useful and flexible tool for traffic manipulation." -#: ../../configuration/protocols/rpki.rst:95 +#: ../../configuration/protocols/rpki.rst:93 msgid "Route maps can be configured to match a specific RPKI validation state. This allows the creation of local policies, which handle BGP routes based on the outcome of the Prefix Origin Validation." msgstr "Route maps can be configured to match a specific RPKI validation state. This allows the creation of local policies, which handle BGP routes based on the outcome of the Prefix Origin Validation." @@ -11302,11 +11402,11 @@ msgstr "Rule-Sets" msgid "Rule-set overview" msgstr "Rule-set overview" -#: ../../configuration/loadbalancing/reverse-proxy.rst:217 +#: ../../configuration/loadbalancing/reverse-proxy.rst:220 msgid "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" msgstr "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" -#: ../../configuration/loadbalancing/reverse-proxy.rst:254 +#: ../../configuration/loadbalancing/reverse-proxy.rst:257 msgid "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." msgstr "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." @@ -11314,11 +11414,11 @@ msgstr "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` an msgid "Rule 110 is hit, so connection is accepted." msgstr "Rule 110 is hit, so connection is accepted." -#: ../../configuration/loadbalancing/reverse-proxy.rst:257 +#: ../../configuration/loadbalancing/reverse-proxy.rst:260 msgid "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." msgstr "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." -#: ../../configuration/loadbalancing/reverse-proxy.rst:220 +#: ../../configuration/loadbalancing/reverse-proxy.rst:223 msgid "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" msgstr "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" @@ -11340,7 +11440,7 @@ msgstr "Rules allow to control and route incoming traffic to specific backend ba msgid "Rules will be created for both :ref:`source-nat` and :ref:`destination-nat`." msgstr "Rules will be created for both :ref:`source-nat` and :ref:`destination-nat`." -#: ../../configuration/service/dns.rst:399 +#: ../../configuration/service/dns.rst:493 msgid "Running Behind NAT" msgstr "Running Behind NAT" @@ -11404,7 +11504,7 @@ msgstr "SNMPv3 (version 3 of the SNMP protocol) introduced a whole slew of new s msgid "SPAN port mirroring can copy the inbound/outbound traffic of the interface to the specified interface, usually the interface can be connected to some special equipment, such as behavior control system, intrusion detection system and traffic collector, and can copy all related traffic from this port. The benefit of mirroring the traffic is that the application is isolated from the source traffic and so application processing does not affect the traffic or the system performance." msgstr "SPAN port mirroring can copy the inbound/outbound traffic of the interface to the specified interface, usually the interface can be connected to some special equipment, such as behavior control system, intrusion detection system and traffic collector, and can copy all related traffic from this port. The benefit of mirroring the traffic is that the application is isolated from the source traffic and so application processing does not affect the traffic or the system performance." -#: ../../configuration/protocols/rpki.rst:141 +#: ../../configuration/protocols/rpki.rst:139 #: ../../configuration/service/ssh.rst:5 msgid "SSH" msgstr "SSH" @@ -11425,7 +11525,7 @@ msgstr "SSH client" msgid "SSH provides a secure channel over an unsecured network in a client-server architecture, connecting an SSH client application with an SSH server. Common applications include remote command-line login and remote command execution, but any network service can be secured with SSH. The protocol specification distinguishes between two major versions, referred to as SSH-1 and SSH-2." msgstr "SSH provides a secure channel over an unsecured network in a client-server architecture, connecting an SSH client application with an SSH server. Common applications include remote command-line login and remote command execution, but any network service can be secured with SSH. The protocol specification distinguishes between two major versions, referred to as SSH-1 and SSH-2." -#: ../../configuration/protocols/rpki.rst:153 +#: ../../configuration/protocols/rpki.rst:151 msgid "SSH username to establish an SSH connection to the cache server." msgstr "SSH username to establish an SSH connection to the cache server." @@ -11437,6 +11537,10 @@ msgstr "SSH was designed as a replacement for Telnet and for unsecured remote sh msgid "SSID to be used in IEEE 802.11 management frames" msgstr "SSID to be used in IEEE 802.11 management frames" +#: ../../configuration/loadbalancing/reverse-proxy.rst:294 +msgid "SSL Bridging" +msgstr "SSL Bridging" + #: ../../configuration/vpn/openconnect.rst:24 msgid "SSL Certificates" msgstr "SSL Certificates" @@ -11732,12 +11836,16 @@ msgstr "Set SNAT rule 30 to only NAT packets arriving from the 203.0.113.0/24 ne msgid "Set SSL certeficate for service " msgstr "Set SSL certeficate for service " +#: ../../configuration/loadbalancing/reverse-proxy.rst:46 +msgid "Set SSL certificate for service " +msgstr "Set SSL certificate for service " + #: ../../configuration/firewall/ipv4.rst:941 #: ../../configuration/firewall/ipv6.rst:927 msgid "Set TCP-MSS (maximum segment size) for the connection" msgstr "Set TCP-MSS (maximum segment size) for the connection" -#: ../../configuration/service/dns.rst:264 +#: ../../configuration/service/dns.rst:358 msgid "Set TTL to 300 seconds" msgstr "Set TTL to 300 seconds" @@ -11800,6 +11908,42 @@ msgstr "Set action to take on entries matching this rule." msgid "Set an API-KEY is the minimal configuration to get a working API Endpoint." msgstr "Set an API-KEY is the minimal configuration to get a working API Endpoint." +#: ../../configuration/service/dns.rst:184 +msgid "Set an :abbr:`AAAA (IPv6 Address)` record. Supports ``@`` and ``any`` keywords." +msgstr "Set an :abbr:`AAAA (IPv6 Address)` record. Supports ``@`` and ``any`` keywords." + +#: ../../configuration/service/dns.rst:179 +msgid "Set an :abbr:`A (Address)` record. Supports ``@`` and ``any`` keywords." +msgstr "Set an :abbr:`A (Address)` record. Supports ``@`` and ``any`` keywords." + +#: ../../configuration/service/dns.rst:189 +msgid "Set an :abbr:`CNAME (Canonical name)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`CNAME (Canonical name)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:194 +msgid "Set an :abbr:`NAPTR (Naming authority pointer)` record. Supports ``@`` keyword. NAPTR records support the following options:" +msgstr "Set an :abbr:`NAPTR (Naming authority pointer)` record. Supports ``@`` keyword. NAPTR records support the following options:" + +#: ../../configuration/service/dns.rst:218 +msgid "Set an :abbr:`NS (Nameserver)` record." +msgstr "Set an :abbr:`NS (Nameserver)` record." + +#: ../../configuration/service/dns.rst:223 +msgid "Set an :abbr:`PTR (Pointer record)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`PTR (Pointer record)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:228 +msgid "Set an :abbr:`SPF (Sender policy framework)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`SPF (Sender policy framework)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:233 +msgid "Set an :abbr:`SRV (Service)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`SRV (Service)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:238 +msgid "Set an :abbr:`TXT (Text)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`TXT (Text)` record. Supports ``@`` keyword." + #: ../../configuration/service/ipoe-server.rst:60 #: ../../configuration/service/ipoe-server.rst:88 #: ../../configuration/service/pppoe-server.rst:38 @@ -11829,8 +11973,8 @@ msgstr "Set delay for second set of gratuitous ARPs after transition to MASTER." msgid "Set description." msgstr "Set description." -#: ../../configuration/service/dns.rst:227 -#: ../../configuration/service/dns.rst:332 +#: ../../configuration/service/dns.rst:321 +#: ../../configuration/service/dns.rst:426 msgid "Set description `` for dynamic DNS service being configured." msgstr "Set description `` for dynamic DNS service being configured." @@ -12149,6 +12293,10 @@ msgstr "Set the :abbr:`DR (Designated Router)` Priority for the interface. This msgid "Set the :abbr:`MRU (Maximum Receive Unit)` to `mru`. PPPd will ask the peer to send packets of no more than `mru` bytes. The value of `mru` must be between 128 and 16384." msgstr "Set the :abbr:`MRU (Maximum Receive Unit)` to `mru`. PPPd will ask the peer to send packets of no more than `mru` bytes. The value of `mru` must be between 128 and 16384." +#: ../../configuration/service/dns.rst:164 +msgid "Set the :abbr:`TTL (Time-to-live)` for the record in seconds. Default is 300 seconds." +msgstr "Set the :abbr:`TTL (Time-to-live)` for the record in seconds. Default is 300 seconds." + #: ../../configuration/service/ssh.rst:106 msgid "Set the ``sshd`` log level. The default is ``info``." msgstr "Set the ``sshd`` log level. The default is ``info``." @@ -12237,11 +12385,11 @@ msgstr "Set the number of TCP maximum retransmit attempts." msgid "Set the number of health check failures before an interface is marked as unavailable, range for number is 1 to 10, default 1. Or set the number of successful health checks before an interface is added back to the interface pool, range for number is 1 to 10, default 1." msgstr "Set the number of health check failures before an interface is marked as unavailable, range for number is 1 to 10, default 1. Or set the number of successful health checks before an interface is added back to the interface pool, range for number is 1 to 10, default 1." -#: ../../configuration/protocols/rpki.rst:121 +#: ../../configuration/protocols/rpki.rst:119 msgid "Set the number of seconds the router waits until retrying to connect to the cache server." msgstr "Set the number of seconds the router waits until retrying to connect to the cache server." -#: ../../configuration/protocols/rpki.rst:114 +#: ../../configuration/protocols/rpki.rst:112 msgid "Set the number of seconds the router waits until the router expires the cache." msgstr "Set the number of seconds the router waits until the router expires the cache." @@ -12388,7 +12536,7 @@ msgstr "Setup the `` in seconds when querying the RADIUS server." msgid "Setup the `` in seconds when querying the TACACS server." msgstr "Setup the `` in seconds when querying the TACACS server." -#: ../../configuration/service/dns.rst:336 +#: ../../configuration/service/dns.rst:430 msgid "Setup the dynamic DNS hostname `` associated with the DynDNS provider identified by ``." msgstr "Setup the dynamic DNS hostname `` associated with the DynDNS provider identified by ``." @@ -13281,7 +13429,7 @@ msgstr "Specify an alternate AS for this BGP process when interacting with the s msgid "Specify an alternate TCP port where the ldap server is listening if other than the default LDAP port 389." msgstr "Specify an alternate TCP port where the ldap server is listening if other than the default LDAP port 389." -#: ../../configuration/service/dns.rst:254 +#: ../../configuration/service/dns.rst:348 msgid "Specify interval in seconds to wait between Dynamic DNS updates. The default is 300 seconds." msgstr "Specify interval in seconds to wait between Dynamic DNS updates. The default is 300 seconds." @@ -13327,7 +13475,7 @@ msgstr "Specify the identifier value of the site-level aggregator (SLA) on the i msgid "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." msgstr "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." -#: ../../configuration/loadbalancing/reverse-proxy.rst:167 +#: ../../configuration/loadbalancing/reverse-proxy.rst:170 msgid "Specify the minimum required TLS version 1.2 or 1.3" msgstr "Specify the minimum required TLS version 1.2 or 1.3" @@ -13695,7 +13843,7 @@ msgstr "Temporary disable this RADIUS server. It won't be queried." msgid "Temporary disable this TACACS server. It won't be queried." msgstr "Temporary disable this TACACS server. It won't be queried." -#: ../../configuration/loadbalancing/reverse-proxy.rst:245 +#: ../../configuration/loadbalancing/reverse-proxy.rst:248 msgid "Terminate SSL" msgstr "Terminate SSL" @@ -13747,7 +13895,7 @@ msgstr "The ARP monitor works by periodically checking the slave devices to dete msgid "The ASP has documented their IPSec requirements:" msgstr "The ASP has documented their IPSec requirements:" -#: ../../configuration/protocols/rpki.rst:82 +#: ../../configuration/protocols/rpki.rst:80 msgid "The BGP router can connect to one or more RPKI cache servers to receive validated prefix to origin AS mappings. Advanced failover can be implemented by server sockets with different preference values." msgstr "The BGP router can connect to one or more RPKI cache servers to receive validated prefix to origin AS mappings. Advanced failover can be implemented by server sockets with different preference values." @@ -13775,7 +13923,7 @@ msgstr "The DN and password to bind as while performing searches. As the passwor msgid "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." msgstr "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." -#: ../../configuration/loadbalancing/reverse-proxy.rst:215 +#: ../../configuration/loadbalancing/reverse-proxy.rst:218 msgid "The HTTP service listen on TCP port 80." msgstr "The HTTP service listen on TCP port 80." @@ -13827,19 +13975,23 @@ msgstr "The UDP port number used by your apllication. It is mandatory for this k msgid "The VXLAN specification was originally created by VMware, Arista Networks and Cisco. Other backers of the VXLAN technology include Huawei, Broadcom, Citrix, Pica8, Big Switch Networks, Cumulus Networks, Dell EMC, Ericsson, Mellanox, FreeBSD, OpenBSD, Red Hat, Joyent, and Juniper Networks." msgstr "The VXLAN specification was originally created by VMware, Arista Networks and Cisco. Other backers of the VXLAN technology include Huawei, Broadcom, Citrix, Pica8, Big Switch Networks, Cumulus Networks, Dell EMC, Ericsson, Mellanox, FreeBSD, OpenBSD, Red Hat, Joyent, and Juniper Networks." +#: ../../configuration/service/dns.rst:149 +msgid "The VyOS DNS forwarder can also be configured to host authoritative records for a domain." +msgstr "The VyOS DNS forwarder can also be configured to host authoritative records for a domain." + #: ../../configuration/service/dns.rst:14 msgid "The VyOS DNS forwarder does not require an upstream DNS server. It can serve as a full recursive DNS server - but it can also forward queries to configurable upstream DNS servers. By not configuring any upstream DNS servers you also avoid being tracked by the provider of your upstream DNS server." msgstr "The VyOS DNS forwarder does not require an upstream DNS server. It can serve as a full recursive DNS server - but it can also forward queries to configurable upstream DNS servers. By not configuring any upstream DNS servers you also avoid being tracked by the provider of your upstream DNS server." -#: ../../configuration/service/dns.rst:160 +#: ../../configuration/service/dns.rst:254 msgid "The VyOS DNS forwarder will only accept lookup requests from the LAN subnets - 192.168.1.0/24 and 2001:db8::/64" msgstr "The VyOS DNS forwarder will only accept lookup requests from the LAN subnets - 192.168.1.0/24 and 2001:db8::/64" -#: ../../configuration/service/dns.rst:158 +#: ../../configuration/service/dns.rst:252 msgid "The VyOS DNS forwarder will only listen for requests on the eth1 (LAN) interface addresses - 192.168.1.254 for IPv4 and 2001:db8::ffff for IPv6" msgstr "The VyOS DNS forwarder will only listen for requests on the eth1 (LAN) interface addresses - 192.168.1.254 for IPv4 and 2001:db8::ffff for IPv6" -#: ../../configuration/service/dns.rst:162 +#: ../../configuration/service/dns.rst:256 msgid "The VyOS DNS forwarder will pass reverse lookups for 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa zones to upstream server." msgstr "The VyOS DNS forwarder will pass reverse lookups for 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa zones to upstream server." @@ -13888,10 +14040,26 @@ msgstr "The ``address`` can be configured either on the VRRP interface or on not msgid "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" msgstr "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" +#: ../../configuration/loadbalancing/reverse-proxy.rst:305 +msgid "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" +msgstr "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" + #: ../../configuration/loadbalancing/reverse-proxy.rst:248 msgid "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." msgstr "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." +#: ../../configuration/loadbalancing/reverse-proxy.rst:251 +msgid "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." +msgstr "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:302 +msgid "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." +msgstr "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:254 +msgid "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." +msgstr "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." + #: ../../configuration/loadbalancing/reverse-proxy.rst:251 msgid "The ``https`` service listens on port 443 with backend `bk-default` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." msgstr "The ``https`` service listens on port 443 with backend `bk-default` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." @@ -14071,7 +14239,7 @@ msgstr "The default value corresponds to 64." msgid "The default value is 0. This will cause the carrier to be asserted (for 802.3ad mode) whenever there is an active aggregator, regardless of the number of available links in that aggregator." msgstr "The default value is 0. This will cause the carrier to be asserted (for 802.3ad mode) whenever there is an active aggregator, regardless of the number of available links in that aggregator." -#: ../../configuration/protocols/rpki.rst:110 +#: ../../configuration/protocols/rpki.rst:108 msgid "The default value is 300 seconds." msgstr "The default value is 300 seconds." @@ -14083,11 +14251,11 @@ msgstr "The default value is 3." msgid "The default value is 3 packets." msgstr "The default value is 3 packets." -#: ../../configuration/protocols/rpki.rst:124 +#: ../../configuration/protocols/rpki.rst:122 msgid "The default value is 600 seconds." msgstr "The default value is 600 seconds." -#: ../../configuration/protocols/rpki.rst:117 +#: ../../configuration/protocols/rpki.rst:115 msgid "The default value is 7200 seconds." msgstr "The default value is 7200 seconds." @@ -14229,7 +14397,7 @@ msgstr "The following commands translate to \"--net host\" when the container is msgid "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" msgstr "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:212 +#: ../../configuration/loadbalancing/reverse-proxy.rst:215 msgid "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." msgstr "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." @@ -14245,6 +14413,14 @@ msgstr "The following configuration on VyOS applies to all following 3rd party v msgid "The following configuration reverse-proxy terminate SSL." msgstr "The following configuration reverse-proxy terminate SSL." +#: ../../configuration/loadbalancing/reverse-proxy.rst:249 +msgid "The following configuration terminates SSL on the router." +msgstr "The following configuration terminates SSL on the router." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:295 +msgid "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." +msgstr "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." + #: ../../configuration/interfaces/pppoe.rst:383 msgid "The following configuration will assign a /64 prefix out of a /56 delegation to eth0. The IPv6 address assigned to eth0 will be ::ffff/64. If you do not know the prefix size delegated to you, start with sla-len 0." msgstr "The following configuration will assign a /64 prefix out of a /56 delegation to eth0. The IPv6 address assigned to eth0 will be ::ffff/64. If you do not know the prefix size delegated to you, start with sla-len 0." @@ -14442,7 +14618,7 @@ msgstr "The most visible application of the protocol is for access to shell acco msgid "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." msgstr "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." -#: ../../configuration/loadbalancing/reverse-proxy.rst:182 +#: ../../configuration/loadbalancing/reverse-proxy.rst:185 msgid "The name of the service can be different, in this example it is only for convenience." msgstr "The name of the service can be different, in this example it is only for convenience." @@ -14522,11 +14698,11 @@ msgstr "The popular Unix/Linux ``dig`` tool sets the AD-bit in the query. This m msgid "The pre-shared key mode is deprecated and will be removed from future OpenVPN versions, so VyOS will have to remove support for that option as well. The reason is that using pre-shared keys is significantly less secure than using TLS." msgstr "The pre-shared key mode is deprecated and will be removed from future OpenVPN versions, so VyOS will have to remove support for that option as well. The reason is that using pre-shared keys is significantly less secure than using TLS." -#: ../../configuration/protocols/rpki.rst:49 +#: ../../configuration/protocols/rpki.rst:47 msgid "The prefix and ASN that originated it match a signed ROA. These are probably trustworthy route announcements." msgstr "The prefix and ASN that originated it match a signed ROA. These are probably trustworthy route announcements." -#: ../../configuration/protocols/rpki.rst:53 +#: ../../configuration/protocols/rpki.rst:51 msgid "The prefix or prefix length and ASN that originated it doesn't match any existing ROA. This could be the result of a prefix hijack, or merely a misconfiguration, but should probably be treated as untrustworthy route announcements." msgstr "The prefix or prefix length and ASN that originated it doesn't match any existing ROA. This could be the result of a prefix hijack, or merely a misconfiguration, but should probably be treated as untrustworthy route announcements." @@ -15985,11 +16161,11 @@ msgstr "This commands creates a bridge that is used to bind traffic on eth1 vlan msgid "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." msgstr "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." -#: ../../configuration/loadbalancing/reverse-proxy.rst:192 +#: ../../configuration/loadbalancing/reverse-proxy.rst:195 msgid "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." msgstr "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." -#: ../../configuration/loadbalancing/reverse-proxy.rst:174 +#: ../../configuration/loadbalancing/reverse-proxy.rst:177 msgid "This configuration listen on port 80 and redirect incoming requests to HTTPS:" msgstr "This configuration listen on port 80 and redirect incoming requests to HTTPS:" @@ -16164,8 +16340,8 @@ msgstr "This is a mandatory command. Sets the full path to the script. The scrip msgid "This is a mandatory option" msgstr "This is a mandatory option" -#: ../../configuration/protocols/rpki.rst:131 -#: ../../configuration/protocols/rpki.rst:138 +#: ../../configuration/protocols/rpki.rst:129 +#: ../../configuration/protocols/rpki.rst:136 msgid "This is a mandatory setting." msgstr "This is a mandatory setting." @@ -16455,7 +16631,7 @@ msgstr "This will configure a static ARP entry always resolving `
` to ` msgid "This will match TCP traffic with source port 80." msgstr "This will match TCP traffic with source port 80." -#: ../../configuration/service/dns.rst:295 +#: ../../configuration/service/dns.rst:389 msgid "This will render the following ddclient_ configuration entry:" msgstr "This will render the following ddclient_ configuration entry:" @@ -16832,7 +17008,7 @@ msgstr "To use a RADIUS server for authentication and bandwidth-shaping, the fol msgid "To use a radius server, you need to switch to authentication mode RADIUS and then configure it." msgstr "To use a radius server, you need to switch to authentication mode RADIUS and then configure it." -#: ../../configuration/service/dns.rst:321 +#: ../../configuration/service/dns.rst:415 msgid "To use such a service, one must define a login, password, one or multiple hostnames, protocol and server." msgstr "To use such a service, one must define a login, password, one or multiple hostnames, protocol and server." @@ -17057,7 +17233,7 @@ msgstr "Update geoip database" msgid "Updates" msgstr "Updates" -#: ../../configuration/protocols/rpki.rst:99 +#: ../../configuration/protocols/rpki.rst:97 msgid "Updates from the RPKI cache servers are directly applied and path selection is updated accordingly. (Soft reconfiguration must be enabled for this to work)." msgstr "Updates from the RPKI cache servers are directly applied and path selection is updated accordingly. (Soft reconfiguration must be enabled for this to work)." @@ -17162,7 +17338,7 @@ msgstr "Use an automatically generated self-signed certificate" msgid "Use any local address, configured on any interface if this is not set." msgstr "Use any local address, configured on any interface if this is not set." -#: ../../configuration/service/dns.rst:263 +#: ../../configuration/service/dns.rst:357 msgid "Use auth key file at ``/config/auth/my.key``" msgstr "Use auth key file at ``/config/auth/my.key``" @@ -17170,11 +17346,11 @@ msgstr "Use auth key file at ``/config/auth/my.key``" msgid "Use certificate from PKI subsystem" msgstr "Use certificate from PKI subsystem" -#: ../../configuration/service/dns.rst:410 +#: ../../configuration/service/dns.rst:504 msgid "Use configured `` to determine your IP address. ddclient_ will load `` and tries to extract your IP address from the response." msgstr "Use configured `` to determine your IP address. ddclient_ will load `` and tries to extract your IP address from the response." -#: ../../configuration/service/dns.rst:368 +#: ../../configuration/service/dns.rst:462 msgid "Use deSEC (dedyn.io) as your preferred provider:" msgstr "Use deSEC (dedyn.io) as your preferred provider:" @@ -18323,11 +18499,11 @@ msgstr "VyOS facilitates IPv6 Multicast by supporting **PIMv6** and **MLD**." msgid "VyOS includes the FastNetMon Community Edition." msgstr "VyOS includes the FastNetMon Community Edition." -#: ../../configuration/service/dns.rst:201 +#: ../../configuration/service/dns.rst:295 msgid "VyOS is able to update a remote DNS record when an interface gets a new IP address. In order to do so, VyOS includes ddclient_, a Perl script written for this only one purpose." msgstr "VyOS is able to update a remote DNS record when an interface gets a new IP address. In order to do so, VyOS includes ddclient_, a Perl script written for this only one purpose." -#: ../../configuration/service/dns.rst:319 +#: ../../configuration/service/dns.rst:413 msgid "VyOS is also able to use any service relying on protocols supported by ddclient." msgstr "VyOS is also able to use any service relying on protocols supported by ddclient." @@ -18536,7 +18712,7 @@ msgstr "We can't support all displays from the beginning. If your display type i msgid "We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let's Encrypt an open certificate authority launched by the EFF, Mozilla, and others and deploys it to a web server." msgstr "We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let's Encrypt an open certificate authority launched by the EFF, Mozilla, and others and deploys it to a web server." -#: ../../configuration/protocols/rpki.rst:170 +#: ../../configuration/protocols/rpki.rst:168 msgid "We can build route-maps for import based on these states. Here is a simple RPKI configuration, where `routinator` is the RPKI-validating \"cache\" server with ip `192.0.2.1`:" msgstr "We can build route-maps for import based on these states. Here is a simple RPKI configuration, where `routinator` is the RPKI-validating \"cache\" server with ip `192.0.2.1`:" @@ -18620,11 +18796,11 @@ msgstr "When PIM receives a register packet the source of the packet will be com msgid "When VRFs are used it is not only mandatory to create a VRF but also the VRF itself needs to be assigned to an interface." msgstr "When VRFs are used it is not only mandatory to create a VRF but also the VRF itself needs to be assigned to an interface." -#: ../../configuration/service/dns.rst:351 +#: ../../configuration/service/dns.rst:445 msgid "When a ``custom`` DynDNS provider is used, the protocol used for communicating to the provider must be specified under ``. See the embedded completion helper when entering above command for available protocols." msgstr "When a ``custom`` DynDNS provider is used, the protocol used for communicating to the provider must be specified under ``. See the embedded completion helper when entering above command for available protocols." -#: ../../configuration/service/dns.rst:357 +#: ../../configuration/service/dns.rst:451 msgid "When a ``custom`` DynDNS provider is used the `` where update requests are being sent to must be specified." msgstr "When a ``custom`` DynDNS provider is used the `` where update requests are being sent to must be specified." @@ -18797,7 +18973,7 @@ msgstr "When using NAT for a large number of host systems it recommended that a msgid "When using SSH, known-hosts-file, private-key-file and public-key-file are mandatory options." msgstr "When using SSH, known-hosts-file, private-key-file and public-key-file are mandatory options." -#: ../../configuration/protocols/rpki.rst:163 +#: ../../configuration/protocols/rpki.rst:161 msgid "When using SSH, private-key-file and public-key-file are mandatory options." msgstr "When using SSH, private-key-file and public-key-file are mandatory options." @@ -19008,7 +19184,7 @@ msgstr "You can also configure the time interval for preemption with the \"preem msgid "You can also define custom timeout values to apply to a specific subset of connections, based on a packet and flow selector. To do this, you need to create a rule defining the packet and flow selector." msgstr "You can also define custom timeout values to apply to a specific subset of connections, based on a packet and flow selector. To do this, you need to create a rule defining the packet and flow selector." -#: ../../configuration/service/dns.rst:312 +#: ../../configuration/service/dns.rst:406 msgid "You can also keep different DNS zone updated. Just create a new config node: ``set service dns dynamic interface rfc2136 ``" msgstr "You can also keep different DNS zone updated. Just create a new config node: ``set service dns dynamic interface rfc2136 ``" @@ -19348,6 +19524,10 @@ msgstr ":abbr:`RIP (Routing Information Protocol)` is a widely deployed interior msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:`PKI (Public Key Infrastructure)` designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:`PKI (Public Key Infrastructure)` designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." +#: ../../configuration/protocols/rpki.rst:14 +msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." +msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." + #: ../../configuration/interfaces/ethernet.rst:82 msgid ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" msgstr ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" @@ -19512,7 +19692,7 @@ msgstr ":ref:`routing-static`: ``set vrf name protocols static ...``" msgid ":rfc:`2131` states: The client MAY choose to explicitly provide the identifier through the 'client identifier' option. If the client supplies a 'client identifier', the client MUST use the same 'client identifier' in all subsequent messages, and the server MUST use that identifier to identify the client." msgstr ":rfc:`2131` states: The client MAY choose to explicitly provide the identifier through the 'client identifier' option. If the client supplies a 'client identifier', the client MUST use the same 'client identifier' in all subsequent messages, and the server MUST use that identifier to identify the client." -#: ../../configuration/service/dns.rst:217 +#: ../../configuration/service/dns.rst:311 msgid ":rfc:`2136` Based" msgstr ":rfc:`2136` Based" @@ -19664,6 +19844,10 @@ msgstr "``9600`` - 9600 bps" msgid "``< dh-group >`` defines a Diffie-Hellman group for PFS;" msgstr "``< dh-group >`` defines a Diffie-Hellman group for PFS;" +#: ../../configuration/service/dns.rst:172 +msgid "``@`` Use @ as record name to set the record for the root domain." +msgstr "``@`` Use @ as record name to set the record for the root domain." + #: ../../configuration/protocols/segment-routing.rst:41 msgid "``Known limitations:``" msgstr "``Known limitations:``" @@ -19734,6 +19918,10 @@ msgstr "``all-available`` all checking target addresses must be available to pas msgid "``any-available`` any of the checking target addresses must be available to pass this check" msgstr "``any-available`` any of the checking target addresses must be available to pass this check" +#: ../../configuration/service/dns.rst:174 +msgid "``any`` Use any as record name to configure the record as a wildcard." +msgstr "``any`` Use any as record name to configure the record as a wildcard." + #: ../../configuration/vpn/site2site_ipsec.rst:388 msgid "``authentication local-id/remote-id`` - IKE identification is used for validation of VPN peer devices during IKE negotiation. If you do not configure local/remote-identity, the device uses the IPv4 or IPv6 address that corresponds to the local/remote peer by default. In certain network setups (like ipsec interface with dynamic address, or behind the NAT ), the IKE ID received from the peer does not match the IKE gateway configured on the device. This can lead to a Phase 1 validation failure. So, make sure to configure the local/remote id explicitly and ensure that the IKE ID is the same as the remote-identity configured on the peer device." msgstr "``authentication local-id/remote-id`` - IKE identification is used for validation of VPN peer devices during IKE negotiation. If you do not configure local/remote-identity, the device uses the IPv4 or IPv6 address that corresponds to the local/remote peer by default. In certain network setups (like ipsec interface with dynamic address, or behind the NAT ), the IKE ID received from the peer does not match the IKE gateway configured on the device. This can lead to a Phase 1 validation failure. So, make sure to configure the local/remote id explicitly and ensure that the IKE ID is the same as the remote-identity configured on the peer device." @@ -20855,7 +21043,7 @@ msgstr "cron" msgid "daemon" msgstr "daemon" -#: ../../configuration/service/dns.rst:405 +#: ../../configuration/service/dns.rst:499 msgid "ddclient_ has another way to determine the WAN IP address. This is controlled by:" msgstr "ddclient_ has another way to determine the WAN IP address. This is controlled by:" @@ -20863,11 +21051,11 @@ msgstr "ddclient_ has another way to determine the WAN IP address. This is contr msgid "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other similar website. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." msgstr "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other similar website. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." -#: ../../configuration/service/dns.rst:205 +#: ../../configuration/service/dns.rst:299 msgid "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other such service provider. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." msgstr "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other such service provider. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." -#: ../../configuration/service/dns.rst:415 +#: ../../configuration/service/dns.rst:509 msgid "ddclient_ will skip any address located before the string set in ``." msgstr "ddclient_ will skip any address located before the string set in ``." @@ -21044,7 +21232,7 @@ msgstr "info" msgid "interval" msgstr "interval" -#: ../../configuration/protocols/rpki.rst:56 +#: ../../configuration/protocols/rpki.rst:54 msgid "invalid" msgstr "invalid" @@ -21276,7 +21464,7 @@ msgstr "no-autonomous-flag" msgid "no-on-link-flag" msgstr "no-on-link-flag" -#: ../../configuration/protocols/rpki.rst:61 +#: ../../configuration/protocols/rpki.rst:59 msgid "notfound" msgstr "notfound" @@ -21549,7 +21737,7 @@ msgstr "user" msgid "uucp" msgstr "uucp" -#: ../../configuration/protocols/rpki.rst:50 +#: ../../configuration/protocols/rpki.rst:48 msgid "valid" msgstr "valid" diff --git a/docs/_locale/pt/LC_MESSAGES/configexamples.mo b/docs/_locale/pt/LC_MESSAGES/configexamples.mo index 04dee701..0d14b40f 100644 Binary files a/docs/_locale/pt/LC_MESSAGES/configexamples.mo and b/docs/_locale/pt/LC_MESSAGES/configexamples.mo differ diff --git a/docs/_locale/pt/LC_MESSAGES/configuration.mo b/docs/_locale/pt/LC_MESSAGES/configuration.mo index 8e628119..4ddc5742 100644 Binary files a/docs/_locale/pt/LC_MESSAGES/configuration.mo and b/docs/_locale/pt/LC_MESSAGES/configuration.mo differ diff --git a/docs/_locale/pt/configexamples.pot b/docs/_locale/pt/configexamples.pot index a7861ab7..95276db0 100644 --- a/docs/_locale/pt/configexamples.pot +++ b/docs/_locale/pt/configexamples.pot @@ -318,6 +318,14 @@ msgstr "Active Directory on Windows server" msgid "Add (temporary) default route" msgstr "Add (temporary) default route" +#: ../../configexamples/ansible.rst:99 +msgid "Add a simple playbook with the tasks for each router:" +msgstr "Add a simple playbook with the tasks for each router:" + +#: ../../configexamples/ansible.rst:73 +msgid "Add all the VyOS hosts:" +msgstr "Add all the VyOS hosts:" + #: ../../configexamples/ansible.rst:73 msgid "Add all the hosts of VyOS:" msgstr "Add all the hosts of VyOS:" @@ -350,6 +358,10 @@ msgstr "After all is done and commit, let's take a look if the Wireguard interfa msgid "After configured all the VRFs involved in this topology we take a deeper look at both BGP and Routing table for the VRF LAN1" msgstr "After configured all the VRFs involved in this topology we take a deeper look at both BGP and Routing table for the VRF LAN1" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 +msgid "After some testing, we can check IPSec status, and counter on every tunnel:" +msgstr "After some testing, we can check IPSec status, and counter on every tunnel:" + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 msgid "After some testing, we can check ipsec status, and counter on every tunnel:" msgstr "After some testing, we can check ipsec status, and counter on every tunnel:" @@ -378,6 +390,14 @@ msgstr "All traffic coming in through eth2 is balanced between eth0 and eth1 on msgid "Allow DHCPv6 packets for router" msgstr "Allow DHCPv6 packets for router" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:34 +msgid "Allow DNS requests only only for local networks." +msgstr "Allow DNS requests only only for local networks." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:36 +msgid "Allow ICMP on all interfaces." +msgstr "Allow ICMP on all interfaces." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:32 msgid "Allow access to the router only from trusted networks." msgstr "Allow access to the router only from trusted networks." @@ -571,6 +591,10 @@ msgstr "Basic Firewall" msgid "Basic Setup (via console)" msgstr "Basic Setup (via console)" +#: ../../configexamples/ansible.rst:64 +msgid "Basic configuration of ansible.cfg:" +msgstr "Basic configuration of ansible.cfg:" + #: ../../configexamples/ansible.rst:64 msgid "Basik configuration of the ansible.cfg:" msgstr "Basik configuration of the ansible.cfg:" @@ -664,6 +688,10 @@ msgstr "Client" msgid "Client configuration" msgstr "Client configuration" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 +msgid "Communication between private subnets should be done through IPSec tunnel without NAT." +msgstr "Communication between private subnets should be done through IPSec tunnel without NAT." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 msgid "Communication between private subnets should be done through ipsec tunnel without nat." msgstr "Communication between private subnets should be done through ipsec tunnel without nat." @@ -1012,6 +1040,10 @@ msgstr "For home network users, most of time ISP only provides /64 prefix, hence msgid "For redundant / active-active configurations see :ref:`examples-azure-vpn-dual-bgp`" msgstr "For redundant / active-active configurations see :ref:`examples-azure-vpn-dual-bgp`" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 +msgid "For simplicity, configuration and tests are done only using IPv4, and firewall configuration is done only on one router." +msgstr "For simplicity, configuration and tests are done only using IPv4, and firewall configuration is done only on one router." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 msgid "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." msgstr "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." @@ -1217,6 +1249,10 @@ msgstr "In the end, you'll get a powerful instrument for monitoring the VyOS sys msgid "In the end, you will end up with something like this config. I took out everything but the Firewall, Interfaces, and zone-policy sections. It is long enough as is." msgstr "In the end, you will end up with something like this config. I took out everything but the Firewall, Interfaces, and zone-policy sections. It is long enough as is." +#: ../../configexamples/ansible.rst:216 +msgid "In the next chapter of the example, we'll use Ansible with jinja2 templates and variables." +msgstr "In the next chapter of the example, we'll use Ansible with jinja2 templates and variables." + #: ../../configexamples/ansible.rst:216 msgid "In the next chapter of the example, we'll use the Ansible with jinja2 templates and variables." msgstr "In the next chapter of the example, we'll use the Ansible with jinja2 templates and variables." @@ -1277,6 +1313,14 @@ msgstr "Information about Ethernet Virtual Private Networks" msgid "Information about prefix-sid and label-operation from VyOS" msgstr "Information about prefix-sid and label-operation from VyOS" +#: ../../configexamples/ansible.rst:37 +msgid "Install Ansible:" +msgstr "Install Ansible:" + +#: ../../configexamples/ansible.rst:44 +msgid "Install Paramiko:" +msgstr "Install Paramiko:" + #: ../../configexamples/ansible.rst:37 msgid "Install the Ansible:" msgstr "Install the Ansible:" @@ -1418,6 +1462,10 @@ msgstr "Let’s check IPv4 routing and MPLS information on provider nodes (same msgid "Let’s say we have a requirement to have multiple networks." msgstr "Let’s say we have a requirement to have multiple networks." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 +msgid "Local subnets should be able to reach internet using source NAT." +msgstr "Local subnets should be able to reach internet using source NAT." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 msgid "Local subnets should be able to reach internet using source nat." msgstr "Local subnets should be able to reach internet using source nat." @@ -1731,6 +1779,10 @@ msgstr "Prerequisites" msgid "Priorities" msgstr "Priorities" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 +msgid "Protect the router on 'WAN' interface, allowing only IPSec connections and SSH access from trusted IPs." +msgstr "Protect the router on 'WAN' interface, allowing only IPSec connections and SSH access from trusted IPs." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 msgid "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." msgstr "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." @@ -2162,6 +2214,10 @@ msgstr "This accomplishes a few things:" msgid "This chapter contains various configuration examples:" msgstr "This chapter contains various configuration examples:" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 +msgid "This configuration example and the requirments consists of:" +msgstr "This configuration example and the requirments consists of:" + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 msgid "This configuration example and the requirments consists on:" msgstr "This configuration example and the requirments consists on:" @@ -2210,6 +2266,10 @@ msgstr "This guide shows an example of a route-based IKEv2 site-to-site VPN to A msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:7 +msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configuration." +msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configuration." + #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:10 msgid "This guide walks through the setup of https://www.tunnelbroker.net/ for an IPv6 Tunnel." msgstr "This guide walks through the setup of https://www.tunnelbroker.net/ for an IPv6 Tunnel." diff --git a/docs/_locale/pt/configuration.pot b/docs/_locale/pt/configuration.pot index 9d4de791..5e3bd81e 100644 --- a/docs/_locale/pt/configuration.pot +++ b/docs/_locale/pt/configuration.pot @@ -802,6 +802,14 @@ msgstr "**local side - commands**" msgid "**log-fail** In this mode, the recursor will attempt to validate all data it retrieves from authoritative servers, regardless of the client's DNSSEC desires, and will log the validation result. This mode can be used to determine the extra load and amount of possibly bogus answers before turning on full-blown validation. Responses to client queries are the same as with process." msgstr "**log-fail** In this mode, the recursor will attempt to validate all data it retrieves from authoritative servers, regardless of the client's DNSSEC desires, and will log the validation result. This mode can be used to determine the extra load and amount of possibly bogus answers before turning on full-blown validation. Responses to client queries are the same as with process." +#: ../../configuration/service/dns.rst:197 +msgid "**lookup-a** A Flag." +msgstr "**lookup-a** A Flag." + +#: ../../configuration/service/dns.rst:199 +msgid "**lookup-srv** S flag." +msgstr "**lookup-srv** S flag." + #: ../../configuration/protocols/isis.rst:100 msgid "**narrow** - Use old style of TLVs with narrow metric." msgstr "**narrow** - Use old style of TLVs with narrow metric." @@ -839,6 +847,10 @@ msgstr "**off** In this mode, no DNSSEC processing takes place. The recursor wil msgid "**on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)" msgstr "**on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)" +#: ../../configuration/service/dns.rst:201 +msgid "**order** Rule order. Requires ``." +msgstr "**order** Rule order. Requires ``." + #: ../../configuration/nat/nat44.rst:149 msgid "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." msgstr "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." @@ -872,6 +884,10 @@ msgstr "**prefer** - ask client for mppe, if it rejects don't fail" msgid "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" msgstr "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" +#: ../../configuration/service/dns.rst:203 +msgid "**preference** Rule preference. Requires ``. Defaults to 0 if not set." +msgstr "**preference** Rule preference. Requires ``. Defaults to 0 if not set." + #: ../../configuration/service/dns.rst:77 msgid "**process** When dnssec is set to process the behavior is similar to process-no-validate. However, the recursor will try to validate the data if at least one of the DO or AD bits is set in the query; in that case, it will set the AD-bit in the response when the data is validated successfully, or send SERVFAIL when the validation comes up bogus." msgstr "**process** When dnssec is set to process the behavior is similar to process-no-validate. However, the recursor will try to validate the data if at least one of the DO or AD bits is set in the query; in that case, it will set the AD-bit in the response when the data is validated successfully, or send SERVFAIL when the validation comes up bogus." @@ -884,6 +900,10 @@ msgstr "**process-no-validate** In this mode the recursor acts as a \"security a msgid "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." msgstr "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." +#: ../../configuration/service/dns.rst:205 +msgid "**protocol-specific** P flag." +msgstr "**protocol-specific** P flag." + #: ../../configuration/service/ipoe-server.rst:63 #: ../../configuration/service/pppoe-server.rst:41 #: ../../configuration/vpn/l2tp.rst:29 @@ -903,6 +923,10 @@ msgstr "**radius**: All authentication queries are handled by a configured RADIU msgid "**random** - Random interface identifier for IPv6" msgstr "**random** - Random interface identifier for IPv6" +#: ../../configuration/service/dns.rst:207 +msgid "**regexp** Regular expression. Requires ``." +msgstr "**regexp** Regular expression. Requires ``." + #: ../../configuration/interfaces/wireguard.rst:190 msgid "**remote side - commands**" msgstr "**remote side - commands**" @@ -915,6 +939,10 @@ msgstr "**replace**: Terminate first session when second is authorized **(defaul msgid "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." msgstr "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." +#: ../../configuration/service/dns.rst:209 +msgid "**replacement** Replacement DNS name." +msgstr "**replacement** Replacement DNS name." + #: ../../configuration/service/pppoe-server.rst:472 #: ../../configuration/vpn/l2tp.rst:426 #: ../../configuration/vpn/pptp.rst:350 @@ -936,10 +964,18 @@ msgstr "**require** - Require IPv6 negotiation" msgid "**require** - ask client for mppe, if it rejects drop connection" msgstr "**require** - ask client for mppe, if it rejects drop connection" +#: ../../configuration/service/dns.rst:211 +msgid "**resolve-uri** U flag." +msgstr "**resolve-uri** U flag." + #: ../../configuration/vpn/site2site_ipsec.rst:319 msgid "**right**" msgstr "**right**" +#: ../../configuration/service/dns.rst:213 +msgid "**service** Service type. Requires ``." +msgstr "**service** Service type. Requires ``." + #: ../../configuration/container/index.rst:127 msgid "**setpcap**: Capability sets (from bounded or inherited set)" msgstr "**setpcap**: Capability sets (from bounded or inherited set)" @@ -1503,6 +1539,10 @@ msgstr "A *bit* is written as **bit**," msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described in :rfc:`8210`." msgstr "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described in :rfc:`8210`." +#: ../../configuration/protocols/rpki.rst:21 +msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." +msgstr "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." + #: ../../configuration/protocols/bgp.rst:951 msgid "A BGP confederation divides our AS into sub-ASes to reduce the number of required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but between these sub-ASes we use something that looks like EBGP but behaves like IBGP (called confederation BGP). Confederation mechanism is described in :rfc:`5065`" msgstr "A BGP confederation divides our AS into sub-ASes to reduce the number of required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but between these sub-ASes we use something that looks like EBGP but behaves like IBGP (called confederation BGP). Confederation mechanism is described in :rfc:`5065`" @@ -1531,7 +1571,7 @@ msgstr "A VRF device is created with an associated route table. Network interfac msgid "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." msgstr "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." -#: ../../configuration/service/dns.rst:149 +#: ../../configuration/service/dns.rst:243 msgid "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." msgstr "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." @@ -1624,6 +1664,10 @@ msgstr "A human readable description what this certificate is about." msgid "A lookback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." msgstr "A lookback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." +#: ../../configuration/interfaces/loopback.rst:17 +msgid "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." +msgstr "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." + #: ../../configuration/service/snmp.rst:42 msgid "A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers." msgstr "A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers." @@ -1920,7 +1964,7 @@ msgstr "Add the public CA certificate for the CA named `name` to the VyOS CLI." msgid "Adding a 2FA with an OTP-key" msgstr "Adding a 2FA with an OTP-key" -#: ../../configuration/loadbalancing/reverse-proxy.rst:260 +#: ../../configuration/loadbalancing/reverse-proxy.rst:263 msgid "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." msgstr "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." @@ -2052,7 +2096,7 @@ msgstr "Algorithm" msgid "Aliases" msgstr "Aliases" -#: ../../configuration/service/dns.rst:154 +#: ../../configuration/service/dns.rst:248 msgid "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" msgstr "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" @@ -2080,7 +2124,7 @@ msgstr "All interfaces used for the DHCP relay must be configured. This includes msgid "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." msgstr "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." -#: ../../configuration/service/dns.rst:156 +#: ../../configuration/service/dns.rst:250 msgid "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" msgstr "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" @@ -2136,7 +2180,7 @@ msgstr "Allow access to sites in a domain without retrieving them from the Proxy msgid "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." msgstr "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." -#: ../../configuration/service/dns.rst:362 +#: ../../configuration/service/dns.rst:456 msgid "Allow explicit IPv6 address for the interface." msgstr "Allow explicit IPv6 address for the interface." @@ -2679,6 +2723,10 @@ msgstr "Authentication token" msgid "Authentication – to verify that the message is from a valid source." msgstr "Authentication – to verify that the message is from a valid source." +#: ../../configuration/service/dns.rst:147 +msgid "Authoritative zones" +msgstr "Authoritative zones" + #: ../../configuration/service/monitoring.rst:92 msgid "Authorization token" msgstr "Authorization token" @@ -2803,6 +2851,10 @@ msgstr "Babel is a modern routing protocol designed to be robust and efficient b msgid "Backend" msgstr "Backend" +#: ../../configuration/loadbalancing/reverse-proxy.rst:299 +msgid "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." +msgstr "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." + #: ../../configuration/loadbalancing/reverse-proxy.rst:108 msgid "Balance algorithms:" msgstr "Balance algorithms:" @@ -2811,7 +2863,7 @@ msgstr "Balance algorithms:" msgid "Balancing Rules" msgstr "Balancing Rules" -#: ../../configuration/loadbalancing/reverse-proxy.rst:211 +#: ../../configuration/loadbalancing/reverse-proxy.rst:214 msgid "Balancing based on domain name" msgstr "Balancing based on domain name" @@ -2892,6 +2944,10 @@ msgstr "Before enabling any hardware segmentation offload a corresponding softwa msgid "Before you are able to apply a rule-set to a zone you have to create the zones first." msgstr "Before you are able to apply a rule-set to a zone you have to create the zones first." +#: ../../configuration/service/dns.rst:169 +msgid "Below are a list of record types available to be configured within VyOS. Some records support special `` keywords:" +msgstr "Below are a list of record types available to be configured within VyOS. Some records support special `` keywords:" + #: ../../configuration/vpn/site2site_ipsec.rst:425 msgid "Below flow-chart could be a quick reference for the close-action combination depending on how the peer is configured." msgstr "Below flow-chart could be a quick reference for the close-action combination depending on how the peer is configured." @@ -3037,11 +3093,11 @@ msgstr "By default, VyOS does not advertise a default route (0.0.0.0/0) even if msgid "By default, a new token is generated every 30 seconds by the mobile application. In order to compensate for possible time-skew between the client and the server, an extra token before and after the current time is allowed. This allows for a time skew of up to 30 seconds between authentication server and client." msgstr "By default, a new token is generated every 30 seconds by the mobile application. In order to compensate for possible time-skew between the client and the server, an extra token before and after the current time is allowed. This allows for a time skew of up to 30 seconds between authentication server and client." -#: ../../configuration/service/dns.rst:401 +#: ../../configuration/service/dns.rst:495 msgid "By default, ddclient_ will update a dynamic dns record using the IP address directly attached to the interface. If your VyOS instance is behind NAT, your record will be updated to point to your internal IP." msgstr "By default, ddclient_ will update a dynamic dns record using the IP address directly attached to the interface. If your VyOS instance is behind NAT, your record will be updated to point to your internal IP." -#: ../../configuration/protocols/rpki.rst:91 +#: ../../configuration/protocols/rpki.rst:89 msgid "By default, enabling RPKI does not change best path selection. In particular, invalid prefixes will still be considered during best path selection. However, the router can be configured to ignore all invalid prefixes." msgstr "By default, enabling RPKI does not change best path selection. In particular, invalid prefixes will still be considered during best path selection. However, the router can be configured to ignore all invalid prefixes." @@ -3372,7 +3428,7 @@ msgstr "Confidentiality – Encryption of packets to prevent snooping by an unau #: ../../configuration/protocols/isis.rst:28 #: ../../configuration/protocols/ospf.rst:22 #: ../../configuration/protocols/ospf.rst:1076 -#: ../../configuration/protocols/rpki.rst:104 +#: ../../configuration/protocols/rpki.rst:102 #: ../../configuration/service/broadcast-relay.rst:18 #: ../../configuration/service/conntrack-sync.rst:38 #: ../../configuration/service/console-server.rst:21 @@ -3381,7 +3437,7 @@ msgstr "Confidentiality – Encryption of packets to prevent snooping by an unau #: ../../configuration/service/dhcp-server.rst:22 #: ../../configuration/service/dhcp-server.rst:569 #: ../../configuration/service/dns.rst:8 -#: ../../configuration/service/dns.rst:214 +#: ../../configuration/service/dns.rst:308 #: ../../configuration/service/https.rst:14 #: ../../configuration/service/ids.rst:20 #: ../../configuration/service/lldp.rst:36 @@ -3480,11 +3536,11 @@ msgstr "Configure" msgid "Configure BFD" msgstr "Configure BFD" -#: ../../configuration/service/dns.rst:245 +#: ../../configuration/service/dns.rst:339 msgid "Configure DNS `` which should be updated. This can be set multiple times." msgstr "Configure DNS `` which should be updated. This can be set multiple times." -#: ../../configuration/service/dns.rst:241 +#: ../../configuration/service/dns.rst:335 msgid "Configure DNS `` to be updated." msgstr "Configure DNS `` to be updated." @@ -3550,7 +3606,7 @@ msgstr "Configure `` which is shown after user has logged in to the sys msgid "Configure `` which is shown during SSH connect and before a user is logged in." msgstr "Configure `` which is shown during SSH connect and before a user is logged in." -#: ../../configuration/service/dns.rst:346 +#: ../../configuration/service/dns.rst:440 msgid "Configure `` used when authenticating the update request for DynDNS service identified by ``." msgstr "Configure `` used when authenticating the update request for DynDNS service identified by ``." @@ -3558,7 +3614,7 @@ msgstr "Configure `` used when authenticating the update request for D msgid "Configure `` used when authenticating the update request for DynDNS service identified by ``." msgstr "Configure `` used when authenticating the update request for DynDNS service identified by ``." -#: ../../configuration/service/dns.rst:341 +#: ../../configuration/service/dns.rst:435 msgid "Configure `` used when authenticating the update request for DynDNS service identified by ``." msgstr "Configure `` used when authenticating the update request for DynDNS service identified by ``." @@ -3705,7 +3761,7 @@ msgstr "Configure one or more attributes to the given NTP server." msgid "Configure one or more servers for synchronisation. Server name can be either an IP address or :abbr:`FQDN (Fully Qualified Domain Name)`." msgstr "Configure one or more servers for synchronisation. Server name can be either an IP address or :abbr:`FQDN (Fully Qualified Domain Name)`." -#: ../../configuration/service/dns.rst:249 +#: ../../configuration/service/dns.rst:343 msgid "Configure optional TTL value on the given resource record. This defaults to 600 seconds." msgstr "Configure optional TTL value on the given resource record. This defaults to 600 seconds." @@ -3741,6 +3797,10 @@ msgstr "Configure protocol used for communication to remote syslog host. This ca msgid "Configure proxy port if it does not listen to the default port 80." msgstr "Configure proxy port if it does not listen to the default port 80." +#: ../../configuration/loadbalancing/reverse-proxy.rst:149 +msgid "Configure requests to the backend server to use SSL encryption and authenticate backend against " +msgstr "Configure requests to the backend server to use SSL encryption and authenticate backend against " + #: ../../configuration/system/sflow.rst:16 msgid "Configure sFlow agent IPv4 or IPv6 address" msgstr "Configure sFlow agent IPv4 or IPv6 address" @@ -3773,7 +3833,7 @@ msgstr "Configure the A-side router for NPTv6 using the prefixes above:" msgid "Configure the B-side router for NPTv6 using the prefixes above:" msgstr "Configure the B-side router for NPTv6 using the prefixes above:" -#: ../../configuration/service/dns.rst:236 +#: ../../configuration/service/dns.rst:330 msgid "Configure the DNS `` IP/FQDN used when updating this dynamic assignment." msgstr "Configure the DNS `` IP/FQDN used when updating this dynamic assignment." @@ -3793,7 +3853,7 @@ msgstr "Configure the discrete port under which the RADIUS server can be reached msgid "Configure the discrete port under which the TACACS server can be reached." msgstr "Configure the discrete port under which the TACACS server can be reached." -#: ../../configuration/loadbalancing/reverse-proxy.rst:172 +#: ../../configuration/loadbalancing/reverse-proxy.rst:175 msgid "Configure the load-balancing reverse-proxy service for HTTP." msgstr "Configure the load-balancing reverse-proxy service for HTTP." @@ -3894,7 +3954,7 @@ msgstr "Connections to the RPKI caching server can not only be established by HT msgid "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH you first need to create yoursels an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." msgstr "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH you first need to create yoursels an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." -#: ../../configuration/protocols/rpki.rst:143 +#: ../../configuration/protocols/rpki.rst:141 msgid "Connections to the RPKI caching server can not only be established by TCP using the RTR protocol but you can also rely on a secure SSH session to the server. This provides transport integrity and confidentiality and it is a good idea if your validation software supports it. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." msgstr "Connections to the RPKI caching server can not only be established by TCP using the RTR protocol but you can also rely on a secure SSH session to the server. This provides transport integrity and confidentiality and it is a good idea if your validation software supports it. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." @@ -4093,8 +4153,8 @@ msgstr "Create new VRF instance with ``. The name is used when placing ind msgid "Create new :rfc:`2136` DNS update configuration which will update the IP address assigned to `` on the service you configured under ``." msgstr "Create new :rfc:`2136` DNS update configuration which will update the IP address assigned to `` on the service you configured under ``." -#: ../../configuration/service/dns.rst:221 -#: ../../configuration/service/dns.rst:326 +#: ../../configuration/service/dns.rst:315 +#: ../../configuration/service/dns.rst:420 msgid "Create new dynamic DNS update configuration which will update the IP address assigned to `` on the service you configured under ``." msgstr "Create new dynamic DNS update configuration which will update the IP address assigned to `` on the service you configured under ``." @@ -4507,7 +4567,7 @@ msgstr "Define number of packets to queue inside the kernel before sending them msgid "Define operation mode of High Availability feature. Default value if command is not specified is `active-active`" msgstr "Define operation mode of High Availability feature. Default value if command is not specified is `active-active`" -#: ../../configuration/protocols/rpki.rst:108 +#: ../../configuration/protocols/rpki.rst:106 msgid "Define the time interval to update the local cache" msgstr "Define the time interval to update the local cache" @@ -4523,7 +4583,7 @@ msgstr "Define type of offload to be used by the flowtable: ``hardware`` or ``so msgid "Define used ethertype of bridge interface." msgstr "Define used ethertype of bridge interface." -#: ../../configuration/protocols/rpki.rst:128 +#: ../../configuration/protocols/rpki.rst:126 msgid "Defined the IPv4, IPv6 or FQDN and port number of the caching RPKI caching instance which is used." msgstr "Defined the IPv4, IPv6 or FQDN and port number of the caching RPKI caching instance which is used." @@ -4744,6 +4804,10 @@ msgstr "Disable dhcpv6-relay service." msgid "Disable given ``. It will be placed in administratively down (``A/D``) state." msgstr "Disable given ``. It will be placed in administratively down (``A/D``) state." +#: ../../configuration/service/dns.rst:153 +msgid "Disable hosting authoritative zone for `` without deleting from configuration." +msgstr "Disable hosting authoritative zone for `` without deleting from configuration." + #: ../../configuration/protocols/bgp.rst:628 msgid "Disable immediate session reset if peer's connected link goes down." msgstr "Disable immediate session reset if peer's connected link goes down." @@ -4756,6 +4820,10 @@ msgstr "Disable password based authentication. Login via SSH keys only. This har msgid "Disable sending and receiving PIM control packets on the interface." msgstr "Disable sending and receiving PIM control packets on the interface." +#: ../../configuration/service/dns.rst:159 +msgid "Disable specific record without deleting it from configuration." +msgstr "Disable specific record without deleting it from configuration." + #: ../../configuration/service/ssh.rst:64 msgid "Disable the host validation through reverse DNS lookups - can speedup login time when reverse lookup is not possible." msgstr "Disable the host validation through reverse DNS lookups - can speedup login time when reverse lookup is not possible." @@ -5034,7 +5102,7 @@ msgstr "During profile import, the user is asked to enter its IPSec credentials msgid "Dynamic-protection" msgstr "Dynamic-protection" -#: ../../configuration/service/dns.rst:199 +#: ../../configuration/service/dns.rst:293 msgid "Dynamic DNS" msgstr "Dynamic DNS" @@ -5535,14 +5603,14 @@ msgstr "Every connection/remote-access pool we configure also needs a pool where #: ../../configuration/protocols/failover.rst:63 #: ../../configuration/protocols/igmp-proxy.rst:61 #: ../../configuration/protocols/pim.rst:217 -#: ../../configuration/protocols/rpki.rst:168 +#: ../../configuration/protocols/rpki.rst:166 #: ../../configuration/service/broadcast-relay.rst:55 #: ../../configuration/service/conntrack-sync.rst:195 #: ../../configuration/service/dhcp-relay.rst:85 #: ../../configuration/service/dhcp-relay.rst:174 #: ../../configuration/service/dhcp-server.rst:418 -#: ../../configuration/service/dns.rst:147 -#: ../../configuration/service/dns.rst:260 +#: ../../configuration/service/dns.rst:241 +#: ../../configuration/service/dns.rst:354 #: ../../configuration/service/eventhandler.rst:83 #: ../../configuration/service/ids.rst:82 #: ../../configuration/service/mdns.rst:50 @@ -5586,7 +5654,7 @@ msgstr "Example, from radius-server send command for disconnect client with user #: ../../configuration/protocols/static.rst:67 #: ../../configuration/protocols/static.rst:135 #: ../../configuration/protocols/static.rst:207 -#: ../../configuration/service/dns.rst:366 +#: ../../configuration/service/dns.rst:460 #: ../../configuration/service/monitoring.rst:69 #: ../../configuration/service/monitoring.rst:98 #: ../../configuration/service/ssh.rst:165 @@ -5683,7 +5751,7 @@ msgstr "Example: to be appended is set to ``vyos.net`` and the URL received is ` msgid "Example Configuration" msgstr "Example Configuration" -#: ../../configuration/service/dns.rst:384 +#: ../../configuration/service/dns.rst:478 msgid "Example IPv6 only:" msgstr "Example IPv6 only:" @@ -5721,7 +5789,7 @@ msgstr "Example synproxy" #: ../../configuration/interfaces/bridge.rst:196 #: ../../configuration/interfaces/macsec.rst:153 #: ../../configuration/interfaces/wireless.rst:541 -#: ../../configuration/loadbalancing/reverse-proxy.rst:187 +#: ../../configuration/loadbalancing/reverse-proxy.rst:190 #: ../../configuration/policy/index.rst:46 #: ../../configuration/protocols/bgp.rst:1118 #: ../../configuration/protocols/isis.rst:336 @@ -5849,6 +5917,10 @@ msgstr "Failover mechanism to use for conntrack-sync." msgid "Failover routes are manually configured routes, but they install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target will be available." msgstr "Failover routes are manually configured routes, but they install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target will be available." +#: ../../configuration/protocols/failover.rst:5 +msgid "Failover routes are manually configured routes, but they only install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target becomes available." +msgstr "Failover routes are manually configured routes, but they only install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target becomes available." + #: ../../configuration/trafficpolicy/index.rst:384 msgid "Fair Queue" msgstr "Fair Queue" @@ -5869,7 +5941,7 @@ msgstr "FastNetMon" msgid "FastNetMon is a high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AF_PACKET (port mirror). It can detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second and perform a configurable action to handle that event, such as calling a custom script." msgstr "FastNetMon is a high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AF_PACKET (port mirror). It can detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second and perform a configurable action to handle that event, such as calling a custom script." -#: ../../configuration/protocols/rpki.rst:78 +#: ../../configuration/protocols/rpki.rst:76 msgid "Features of the Current Implementation" msgstr "Features of the Current Implementation" @@ -5877,7 +5949,7 @@ msgstr "Features of the Current Implementation" msgid "Field" msgstr "Field" -#: ../../configuration/service/dns.rst:231 +#: ../../configuration/service/dns.rst:325 msgid "File identified by `` containing the TSIG authentication key for RFC2136 nsupdate on remote DNS server." msgstr "File identified by `` containing the TSIG authentication key for RFC2136 nsupdate on remote DNS server." @@ -6038,6 +6110,10 @@ msgstr "First the OTP keys must be generated and sent to the user and to the con msgid "First we need to specify the basic settings. 1194/UDP is the default. The ``persistent-tunnel`` option is recommended, it prevents the TUN/TAP device from closing on connection resets or daemon reloads." msgstr "First we need to specify the basic settings. 1194/UDP is the default. The ``persistent-tunnel`` option is recommended, it prevents the TUN/TAP device from closing on connection resets or daemon reloads." +#: ../../configuration/protocols/rpki.rst:40 +msgid "First you will need to deploy an RPKI validator for your routers to use. NLnet Labs provides a collection of software_ you can compare and settle on one. Once your server is running you can start validating announcements." +msgstr "First you will need to deploy an RPKI validator for your routers to use. NLnet Labs provides a collection of software_ you can compare and settle on one. Once your server is running you can start validating announcements." + #: ../../configuration/protocols/rpki.rst:41 msgid "First you will need to deploy an RPKI validator for your routers to use. The RIPE NCC helpfully provide `some instructions`_ to get you started with several different options. Once your server is running you can start validating announcements." msgstr "First you will need to deploy an RPKI validator for your routers to use. The RIPE NCC helpfully provide `some instructions`_ to get you started with several different options. Once your server is running you can start validating announcements." @@ -6461,7 +6537,7 @@ msgstr "Get detailed information about LLDP neighbors." msgid "Get the DHCPv6-PD prefixes from both routers:" msgstr "Get the DHCPv6-PD prefixes from both routers:" -#: ../../configuration/protocols/rpki.rst:39 +#: ../../configuration/protocols/rpki.rst:38 msgid "Getting started" msgstr "Getting started" @@ -6477,6 +6553,10 @@ msgstr "Given the following example we have one VyOS router acting as OpenVPN se msgid "Gloabal" msgstr "Gloabal" +#: ../../configuration/loadbalancing/reverse-proxy.rst:153 +msgid "Global" +msgstr "Global" + #: ../../configuration/service/ipoe-server.rst:352 #: ../../configuration/service/pppoe-server.rst:518 #: ../../configuration/vpn/l2tp.rst:472 @@ -6497,7 +6577,7 @@ msgstr "Global Options Firewall Configuration" msgid "Global options" msgstr "Global options" -#: ../../configuration/loadbalancing/reverse-proxy.rst:152 +#: ../../configuration/loadbalancing/reverse-proxy.rst:155 msgid "Global parameters" msgstr "Global parameters" @@ -6534,7 +6614,7 @@ msgstr "HTTP-API" msgid "HTTP API" msgstr "HTTP API" -#: ../../configuration/service/dns.rst:317 +#: ../../configuration/service/dns.rst:411 msgid "HTTP based services" msgstr "HTTP based services" @@ -6611,7 +6691,7 @@ msgstr "Here is a second example of a dual-stack tunnel over IPv6 between a VyOS msgid "Here is an example :abbr:`NET (Network Entity Title)` value:" msgstr "Here is an example :abbr:`NET (Network Entity Title)` value:" -#: ../../configuration/protocols/rpki.rst:179 +#: ../../configuration/protocols/rpki.rst:177 msgid "Here is an example route-map to apply to routes learned at import. In this filter we reject prefixes with the state `invalid`, and set a higher `local-preference` if the prefix is RPKI `valid` rather than merely `notfound`." msgstr "Here is an example route-map to apply to routes learned at import. In this filter we reject prefixes with the state `invalid`, and set a higher `local-preference` if the prefix is RPKI `valid` rather than merely `notfound`." @@ -7227,7 +7307,7 @@ msgstr "If making use of multiple tunnels, OpenVPN must have a way to distinguis msgid "If multi-pathing is enabled, then check whether the routes not yet distinguished in preference may be considered equal. If :cfgcmd:`bgp bestpath as-path multipath-relax` is set, all such routes are considered equal, otherwise routes received via iBGP with identical AS_PATHs or routes received from eBGP neighbours in the same AS are considered equal." msgstr "If multi-pathing is enabled, then check whether the routes not yet distinguished in preference may be considered equal. If :cfgcmd:`bgp bestpath as-path multipath-relax` is set, all such routes are considered equal, otherwise routes received via iBGP with identical AS_PATHs or routes received from eBGP neighbours in the same AS are considered equal." -#: ../../configuration/protocols/rpki.rst:86 +#: ../../configuration/protocols/rpki.rst:84 msgid "If no connection to an RPKI cache server can be established after a pre-defined timeout, the router will process routes without prefix origin validation. It still will try to establish a connection to an RPKI cache server in the background." msgstr "If no connection to an RPKI cache server can be established after a pre-defined timeout, the router will process routes without prefix origin validation. It still will try to establish a connection to an RPKI cache server in the background." @@ -7439,10 +7519,14 @@ msgstr "If you are a hacker or want to try on your own we support passing raw Op msgid "If you are configuring a VRF for management purposes, there is currently no way to force system DNS traffic via a specific VRF." msgstr "If you are configuring a VRF for management purposes, there is currently no way to force system DNS traffic via a specific VRF." -#: ../../configuration/protocols/rpki.rst:30 +#: ../../configuration/protocols/rpki.rst:29 msgid "If you are new to these routing security technologies then there is an `excellent guide to RPKI`_ by NLnet Labs which will get you up to speed very quickly. Their documentation explains everything from what RPKI is to deploying it in production. It also has some `help and operational guidance`_ including \"What can I do about my route having an Invalid state?\"" msgstr "If you are new to these routing security technologies then there is an `excellent guide to RPKI`_ by NLnet Labs which will get you up to speed very quickly. Their documentation explains everything from what RPKI is to deploying it in production. It also has some `help and operational guidance`_ including \"What can I do about my route having an Invalid state?\"" +#: ../../configuration/protocols/rpki.rst:62 +msgid "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC, or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." +msgstr "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC, or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." + #: ../../configuration/protocols/rpki.rst:64 msgid "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." msgstr "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." @@ -7609,7 +7693,7 @@ msgstr "Import the private key of the certificate to the VyOS CLI. This should n msgid "Import the public CA certificate from the defined file to VyOS CLI." msgstr "Import the public CA certificate from the defined file to VyOS CLI." -#: ../../configuration/protocols/rpki.rst:46 +#: ../../configuration/protocols/rpki.rst:44 msgid "Imported prefixes during the validation may have values:" msgstr "Imported prefixes during the validation may have values:" @@ -7653,7 +7737,7 @@ msgstr "In a minimal configuration, the following must be provided:" msgid "In a multiple VLAN header context, out of convenience the term \"VLAN tag\" or just \"tag\" for short is often used in place of \"802.1q_ VLAN header\". QinQ allows multiple VLAN tags in an Ethernet frame; together these tags constitute a tag stack. When used in the context of an Ethernet frame, a QinQ frame is a frame that has 2 VLAN 802.1q_ headers (double-tagged)." msgstr "In a multiple VLAN header context, out of convenience the term \"VLAN tag\" or just \"tag\" for short is often used in place of \"802.1q_ VLAN header\". QinQ allows multiple VLAN tags in an Ethernet frame; together these tags constitute a tag stack. When used in the context of an Ethernet frame, a QinQ frame is a frame that has 2 VLAN 802.1q_ headers (double-tagged)." -#: ../../configuration/protocols/rpki.rst:80 +#: ../../configuration/protocols/rpki.rst:78 msgid "In a nutshell, the current implementation provides the following features:" msgstr "In a nutshell, the current implementation provides the following features:" @@ -7919,7 +8003,7 @@ msgstr "In this example we will use the most complicated case: a setup where eac msgid "In this method, the DSL Modem/Router connects to the ISP for you with your credentials preprogrammed into the device. This gives you an :rfc:`1918` address, such as ``192.168.1.0/24`` by default." msgstr "In this method, the DSL Modem/Router connects to the ISP for you with your credentials preprogrammed into the device. This gives you an :rfc:`1918` address, such as ``192.168.1.0/24`` by default." -#: ../../configuration/service/dns.rst:152 +#: ../../configuration/service/dns.rst:246 msgid "In this scenario:" msgstr "In this scenario:" @@ -8436,7 +8520,7 @@ msgstr "Let SNMP daemon listen only on IP address 192.0.2.1" msgid "Lets assume the following topology:" msgstr "Lets assume the following topology:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:190 +#: ../../configuration/loadbalancing/reverse-proxy.rst:193 msgid "Level 4 balancing" msgstr "Level 4 balancing" @@ -8456,7 +8540,7 @@ msgstr "Lifetime is decremented by the number of seconds since the last RA - use msgid "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." msgstr "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." -#: ../../configuration/loadbalancing/reverse-proxy.rst:162 +#: ../../configuration/loadbalancing/reverse-proxy.rst:165 msgid "Limit allowed cipher algorithms used during SSL/TLS handshake" msgstr "Limit allowed cipher algorithms used during SSL/TLS handshake" @@ -8468,7 +8552,7 @@ msgstr "Limit logins to `` per every ``rate-time`` seconds. Rate limit mu msgid "Limit logins to ``rate-limit`` attemps per every ``. Rate time must be between 15 and 600 seconds." msgstr "Limit logins to ``rate-limit`` attemps per every ``. Rate time must be between 15 and 600 seconds." -#: ../../configuration/loadbalancing/reverse-proxy.rst:157 +#: ../../configuration/loadbalancing/reverse-proxy.rst:160 msgid "Limit maximum number of connections" msgstr "Limit maximum number of connections" @@ -8540,6 +8624,10 @@ msgstr "Lists VRFs that have been created" msgid "Load-balancing" msgstr "Load-balancing" +#: ../../configuration/loadbalancing/reverse-proxy.rst:100 +msgid "Load-balancing algorithms to be used for distributed requests among the available servers" +msgstr "Load-balancing algorithms to be used for distributed requests among the available servers" + #: ../../configuration/loadbalancing/reverse-proxy.rst:100 msgid "Load-balancing algorithms to be used for distributind requests among the vailable servers" msgstr "Load-balancing algorithms to be used for distributind requests among the vailable servers" @@ -8609,11 +8697,11 @@ msgstr "Local User Account" msgid "Local path that includes the known hosts file." msgstr "Local path that includes the known hosts file." -#: ../../configuration/protocols/rpki.rst:157 +#: ../../configuration/protocols/rpki.rst:155 msgid "Local path that includes the private key file of the router." msgstr "Local path that includes the private key file of the router." -#: ../../configuration/protocols/rpki.rst:161 +#: ../../configuration/protocols/rpki.rst:159 msgid "Local path that includes the public key file of the router." msgstr "Local path that includes the public key file of the router." @@ -9238,7 +9326,7 @@ msgstr "Multicast receivers will talk MLD to their local router, so, besides hav msgid "Multiple DNS servers can be defined." msgstr "Multiple DNS servers can be defined." -#: ../../configuration/protocols/rpki.rst:135 +#: ../../configuration/protocols/rpki.rst:133 msgid "Multiple RPKI caching instances can be supplied and they need a preference in which their result sets are used." msgstr "Multiple RPKI caching instances can be supplied and they need a preference in which their result sets are used." @@ -9275,7 +9363,7 @@ msgstr "Multiple networks/client IP addresses can be configured." msgid "Multiple servers can be specified." msgstr "Multiple servers can be specified." -#: ../../configuration/service/dns.rst:380 +#: ../../configuration/service/dns.rst:474 msgid "Multiple services can be used per interface. Just specify as many services per interface as you like!" msgstr "Multiple services can be used per interface. Just specify as many services per interface as you like!" @@ -9543,6 +9631,10 @@ msgstr "Nexthop Tracking" msgid "Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if you do not wan't to e.g. allow BGP to peer across the default route." msgstr "Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if you do not wan't to e.g. allow BGP to peer across the default route." +#: ../../configuration/protocols/rpki.rst:57 +msgid "No ROA exists which covers that prefix. Unfortunately this is the case for about 40%-50% of the prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2024." +msgstr "No ROA exists which covers that prefix. Unfortunately this is the case for about 40%-50% of the prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2024." + #: ../../configuration/protocols/rpki.rst:59 msgid "No ROA exists which covers that prefix. Unfortunately this is the case for about 80% of the IPv4 prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2020" msgstr "No ROA exists which covers that prefix. Unfortunately this is the case for about 80% of the IPv4 prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2020" @@ -9815,6 +9907,10 @@ msgstr "Once you have an Ethernet device connected, i.e. `eth0`, then you can co msgid "Once you have setup your SSTP server there comes the time to do some basic testing. The Linux client used for testing is called sstpc_. sstpc_ requires a PPP configuration/peer file." msgstr "Once you have setup your SSTP server there comes the time to do some basic testing. The Linux client used for testing is called sstpc_. sstpc_ requires a PPP configuration/peer file." +#: ../../configuration/protocols/rpki.rst:193 +msgid "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using Cloudflare's test_ website. Keep in mind that in order for this to work, you need to have no default routes or anything else that would still send traffic to RPKI-invalid destinations." +msgstr "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using Cloudflare's test_ website. Keep in mind that in order for this to work, you need to have no default routes or anything else that would still send traffic to RPKI-invalid destinations." + #: ../../configuration/protocols/rpki.rst:195 msgid "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using the `RIPE Labs RPKI Test`_ experimental tool." msgstr "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using the `RIPE Labs RPKI Test`_ experimental tool." @@ -9958,7 +10054,7 @@ msgstr "Operating Modes" #: ../../configuration/service/console-server.rst:76 #: ../../configuration/service/dhcp-relay.rst:124 #: ../../configuration/service/dhcp-relay.rst:201 -#: ../../configuration/service/dns.rst:182 +#: ../../configuration/service/dns.rst:276 #: ../../configuration/service/lldp.rst:71 #: ../../configuration/service/mdns.rst:79 #: ../../configuration/service/ssh.rst:145 @@ -10257,7 +10353,7 @@ msgstr "PPTP-Server" msgid "Packet-based balancing can lead to a better balance across interfaces when out of order packets are no issue. Per-packet-based balancing can be set for a balancing rule with:" msgstr "Packet-based balancing can lead to a better balance across interfaces when out of order packets are no issue. Per-packet-based balancing can be set for a balancing rule with:" -#: ../../configuration/protocols/rpki.rst:71 +#: ../../configuration/protocols/rpki.rst:69 msgid "Particularly large networks may wish to run their own RPKI certificate authority and publication server instead of publishing ROAs via their RIR. This is a subject far beyond the scope of VyOS' documentation. Consider reading about Krill_ if this is a rabbit hole you need or especially want to dive down." msgstr "Particularly large networks may wish to run their own RPKI certificate authority and publication server instead of publishing ROAs via their RIR. This is a subject far beyond the scope of VyOS' documentation. Consider reading about Krill_ if this is a rabbit hole you need or especially want to dive down." @@ -10923,7 +11019,11 @@ msgstr "Received RADIUS attributes have a higher priority than parameters define msgid "Recommended for larger installations." msgstr "Recommended for larger installations." -#: ../../configuration/loadbalancing/reverse-proxy.rst:171 +#: ../../configuration/service/dns.rst:167 +msgid "Record types" +msgstr "Record types" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:174 msgid "Redirect HTTP to HTTPS" msgstr "Redirect HTTP to HTTPS" @@ -10951,7 +11051,7 @@ msgstr "Redistribution Configuration" msgid "Redundancy and load sharing. There are multiple NAT66 devices at the edge of an IPv6 network to another IPv6 network. The path through the NAT66 device to another IPv6 network forms an equivalent route, and traffic can be load-shared on these NAT66 devices. In this case, you can configure the same source address translation rules on these NAT66 devices, so that any NAT66 device can handle IPv6 traffic between different sites." msgstr "Redundancy and load sharing. There are multiple NAT66 devices at the edge of an IPv6 network to another IPv6 network. The path through the NAT66 device to another IPv6 network forms an equivalent route, and traffic can be load-shared on these NAT66 devices. In this case, you can configure the same source address translation rules on these NAT66 devices, so that any NAT66 device can handle IPv6 traffic between different sites." -#: ../../configuration/service/dns.rst:262 +#: ../../configuration/service/dns.rst:356 msgid "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" msgstr "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" @@ -11102,7 +11202,7 @@ msgstr "Reset OpenVPN" msgid "Reset commands" msgstr "Reset commands" -#: ../../configuration/service/dns.rst:186 +#: ../../configuration/service/dns.rst:280 msgid "Resets the local DNS forwarding cache database. You can reset the cache for all entries or only for entries to a specific domain." msgstr "Resets the local DNS forwarding cache database. You can reset the cache for all entries or only for entries to a specific domain." @@ -11138,7 +11238,7 @@ msgstr "Restart the IGMP proxy process." msgid "Restart the SSH daemon process, the current session is not affected, only the background daemon is restarted." msgstr "Restart the SSH daemon process, the current session is not affected, only the background daemon is restarted." -#: ../../configuration/service/dns.rst:191 +#: ../../configuration/service/dns.rst:285 msgid "Restarts the DNS recursor process. This also invalidates the local DNS forwarding cache." msgstr "Restarts the DNS recursor process. This also invalidates the local DNS forwarding cache." @@ -11232,7 +11332,7 @@ msgstr "Route filter can be applied using a route-map:" msgid "Route map is a powerfull command, that gives network administrators a very useful and flexible tool for traffic manipulation." msgstr "Route map is a powerfull command, that gives network administrators a very useful and flexible tool for traffic manipulation." -#: ../../configuration/protocols/rpki.rst:95 +#: ../../configuration/protocols/rpki.rst:93 msgid "Route maps can be configured to match a specific RPKI validation state. This allows the creation of local policies, which handle BGP routes based on the outcome of the Prefix Origin Validation." msgstr "Route maps can be configured to match a specific RPKI validation state. This allows the creation of local policies, which handle BGP routes based on the outcome of the Prefix Origin Validation." @@ -11302,11 +11402,11 @@ msgstr "Rule-Sets" msgid "Rule-set overview" msgstr "Rule-set overview" -#: ../../configuration/loadbalancing/reverse-proxy.rst:217 +#: ../../configuration/loadbalancing/reverse-proxy.rst:220 msgid "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" msgstr "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" -#: ../../configuration/loadbalancing/reverse-proxy.rst:254 +#: ../../configuration/loadbalancing/reverse-proxy.rst:257 msgid "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." msgstr "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." @@ -11314,11 +11414,11 @@ msgstr "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` an msgid "Rule 110 is hit, so connection is accepted." msgstr "Rule 110 is hit, so connection is accepted." -#: ../../configuration/loadbalancing/reverse-proxy.rst:257 +#: ../../configuration/loadbalancing/reverse-proxy.rst:260 msgid "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." msgstr "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." -#: ../../configuration/loadbalancing/reverse-proxy.rst:220 +#: ../../configuration/loadbalancing/reverse-proxy.rst:223 msgid "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" msgstr "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" @@ -11340,7 +11440,7 @@ msgstr "Rules allow to control and route incoming traffic to specific backend ba msgid "Rules will be created for both :ref:`source-nat` and :ref:`destination-nat`." msgstr "Rules will be created for both :ref:`source-nat` and :ref:`destination-nat`." -#: ../../configuration/service/dns.rst:399 +#: ../../configuration/service/dns.rst:493 msgid "Running Behind NAT" msgstr "Running Behind NAT" @@ -11404,7 +11504,7 @@ msgstr "SNMPv3 (version 3 of the SNMP protocol) introduced a whole slew of new s msgid "SPAN port mirroring can copy the inbound/outbound traffic of the interface to the specified interface, usually the interface can be connected to some special equipment, such as behavior control system, intrusion detection system and traffic collector, and can copy all related traffic from this port. The benefit of mirroring the traffic is that the application is isolated from the source traffic and so application processing does not affect the traffic or the system performance." msgstr "SPAN port mirroring can copy the inbound/outbound traffic of the interface to the specified interface, usually the interface can be connected to some special equipment, such as behavior control system, intrusion detection system and traffic collector, and can copy all related traffic from this port. The benefit of mirroring the traffic is that the application is isolated from the source traffic and so application processing does not affect the traffic or the system performance." -#: ../../configuration/protocols/rpki.rst:141 +#: ../../configuration/protocols/rpki.rst:139 #: ../../configuration/service/ssh.rst:5 msgid "SSH" msgstr "SSH" @@ -11425,7 +11525,7 @@ msgstr "SSH client" msgid "SSH provides a secure channel over an unsecured network in a client-server architecture, connecting an SSH client application with an SSH server. Common applications include remote command-line login and remote command execution, but any network service can be secured with SSH. The protocol specification distinguishes between two major versions, referred to as SSH-1 and SSH-2." msgstr "SSH provides a secure channel over an unsecured network in a client-server architecture, connecting an SSH client application with an SSH server. Common applications include remote command-line login and remote command execution, but any network service can be secured with SSH. The protocol specification distinguishes between two major versions, referred to as SSH-1 and SSH-2." -#: ../../configuration/protocols/rpki.rst:153 +#: ../../configuration/protocols/rpki.rst:151 msgid "SSH username to establish an SSH connection to the cache server." msgstr "SSH username to establish an SSH connection to the cache server." @@ -11437,6 +11537,10 @@ msgstr "SSH was designed as a replacement for Telnet and for unsecured remote sh msgid "SSID to be used in IEEE 802.11 management frames" msgstr "SSID to be used in IEEE 802.11 management frames" +#: ../../configuration/loadbalancing/reverse-proxy.rst:294 +msgid "SSL Bridging" +msgstr "SSL Bridging" + #: ../../configuration/vpn/openconnect.rst:24 msgid "SSL Certificates" msgstr "SSL Certificates" @@ -11732,12 +11836,16 @@ msgstr "Set SNAT rule 30 to only NAT packets arriving from the 203.0.113.0/24 ne msgid "Set SSL certeficate for service " msgstr "Set SSL certeficate for service " +#: ../../configuration/loadbalancing/reverse-proxy.rst:46 +msgid "Set SSL certificate for service " +msgstr "Set SSL certificate for service " + #: ../../configuration/firewall/ipv4.rst:941 #: ../../configuration/firewall/ipv6.rst:927 msgid "Set TCP-MSS (maximum segment size) for the connection" msgstr "Set TCP-MSS (maximum segment size) for the connection" -#: ../../configuration/service/dns.rst:264 +#: ../../configuration/service/dns.rst:358 msgid "Set TTL to 300 seconds" msgstr "Set TTL to 300 seconds" @@ -11800,6 +11908,42 @@ msgstr "Set action to take on entries matching this rule." msgid "Set an API-KEY is the minimal configuration to get a working API Endpoint." msgstr "Set an API-KEY is the minimal configuration to get a working API Endpoint." +#: ../../configuration/service/dns.rst:184 +msgid "Set an :abbr:`AAAA (IPv6 Address)` record. Supports ``@`` and ``any`` keywords." +msgstr "Set an :abbr:`AAAA (IPv6 Address)` record. Supports ``@`` and ``any`` keywords." + +#: ../../configuration/service/dns.rst:179 +msgid "Set an :abbr:`A (Address)` record. Supports ``@`` and ``any`` keywords." +msgstr "Set an :abbr:`A (Address)` record. Supports ``@`` and ``any`` keywords." + +#: ../../configuration/service/dns.rst:189 +msgid "Set an :abbr:`CNAME (Canonical name)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`CNAME (Canonical name)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:194 +msgid "Set an :abbr:`NAPTR (Naming authority pointer)` record. Supports ``@`` keyword. NAPTR records support the following options:" +msgstr "Set an :abbr:`NAPTR (Naming authority pointer)` record. Supports ``@`` keyword. NAPTR records support the following options:" + +#: ../../configuration/service/dns.rst:218 +msgid "Set an :abbr:`NS (Nameserver)` record." +msgstr "Set an :abbr:`NS (Nameserver)` record." + +#: ../../configuration/service/dns.rst:223 +msgid "Set an :abbr:`PTR (Pointer record)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`PTR (Pointer record)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:228 +msgid "Set an :abbr:`SPF (Sender policy framework)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`SPF (Sender policy framework)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:233 +msgid "Set an :abbr:`SRV (Service)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`SRV (Service)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:238 +msgid "Set an :abbr:`TXT (Text)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`TXT (Text)` record. Supports ``@`` keyword." + #: ../../configuration/service/ipoe-server.rst:60 #: ../../configuration/service/ipoe-server.rst:88 #: ../../configuration/service/pppoe-server.rst:38 @@ -11829,8 +11973,8 @@ msgstr "Set delay for second set of gratuitous ARPs after transition to MASTER." msgid "Set description." msgstr "Set description." -#: ../../configuration/service/dns.rst:227 -#: ../../configuration/service/dns.rst:332 +#: ../../configuration/service/dns.rst:321 +#: ../../configuration/service/dns.rst:426 msgid "Set description `` for dynamic DNS service being configured." msgstr "Set description `` for dynamic DNS service being configured." @@ -12149,6 +12293,10 @@ msgstr "Set the :abbr:`DR (Designated Router)` Priority for the interface. This msgid "Set the :abbr:`MRU (Maximum Receive Unit)` to `mru`. PPPd will ask the peer to send packets of no more than `mru` bytes. The value of `mru` must be between 128 and 16384." msgstr "Set the :abbr:`MRU (Maximum Receive Unit)` to `mru`. PPPd will ask the peer to send packets of no more than `mru` bytes. The value of `mru` must be between 128 and 16384." +#: ../../configuration/service/dns.rst:164 +msgid "Set the :abbr:`TTL (Time-to-live)` for the record in seconds. Default is 300 seconds." +msgstr "Set the :abbr:`TTL (Time-to-live)` for the record in seconds. Default is 300 seconds." + #: ../../configuration/service/ssh.rst:106 msgid "Set the ``sshd`` log level. The default is ``info``." msgstr "Set the ``sshd`` log level. The default is ``info``." @@ -12237,11 +12385,11 @@ msgstr "Set the number of TCP maximum retransmit attempts." msgid "Set the number of health check failures before an interface is marked as unavailable, range for number is 1 to 10, default 1. Or set the number of successful health checks before an interface is added back to the interface pool, range for number is 1 to 10, default 1." msgstr "Set the number of health check failures before an interface is marked as unavailable, range for number is 1 to 10, default 1. Or set the number of successful health checks before an interface is added back to the interface pool, range for number is 1 to 10, default 1." -#: ../../configuration/protocols/rpki.rst:121 +#: ../../configuration/protocols/rpki.rst:119 msgid "Set the number of seconds the router waits until retrying to connect to the cache server." msgstr "Set the number of seconds the router waits until retrying to connect to the cache server." -#: ../../configuration/protocols/rpki.rst:114 +#: ../../configuration/protocols/rpki.rst:112 msgid "Set the number of seconds the router waits until the router expires the cache." msgstr "Set the number of seconds the router waits until the router expires the cache." @@ -12388,7 +12536,7 @@ msgstr "Setup the `` in seconds when querying the RADIUS server." msgid "Setup the `` in seconds when querying the TACACS server." msgstr "Setup the `` in seconds when querying the TACACS server." -#: ../../configuration/service/dns.rst:336 +#: ../../configuration/service/dns.rst:430 msgid "Setup the dynamic DNS hostname `` associated with the DynDNS provider identified by ``." msgstr "Setup the dynamic DNS hostname `` associated with the DynDNS provider identified by ``." @@ -13281,7 +13429,7 @@ msgstr "Specify an alternate AS for this BGP process when interacting with the s msgid "Specify an alternate TCP port where the ldap server is listening if other than the default LDAP port 389." msgstr "Specify an alternate TCP port where the ldap server is listening if other than the default LDAP port 389." -#: ../../configuration/service/dns.rst:254 +#: ../../configuration/service/dns.rst:348 msgid "Specify interval in seconds to wait between Dynamic DNS updates. The default is 300 seconds." msgstr "Specify interval in seconds to wait between Dynamic DNS updates. The default is 300 seconds." @@ -13327,7 +13475,7 @@ msgstr "Specify the identifier value of the site-level aggregator (SLA) on the i msgid "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." msgstr "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." -#: ../../configuration/loadbalancing/reverse-proxy.rst:167 +#: ../../configuration/loadbalancing/reverse-proxy.rst:170 msgid "Specify the minimum required TLS version 1.2 or 1.3" msgstr "Specify the minimum required TLS version 1.2 or 1.3" @@ -13695,7 +13843,7 @@ msgstr "Temporary disable this RADIUS server. It won't be queried." msgid "Temporary disable this TACACS server. It won't be queried." msgstr "Temporary disable this TACACS server. It won't be queried." -#: ../../configuration/loadbalancing/reverse-proxy.rst:245 +#: ../../configuration/loadbalancing/reverse-proxy.rst:248 msgid "Terminate SSL" msgstr "Terminate SSL" @@ -13747,7 +13895,7 @@ msgstr "The ARP monitor works by periodically checking the slave devices to dete msgid "The ASP has documented their IPSec requirements:" msgstr "The ASP has documented their IPSec requirements:" -#: ../../configuration/protocols/rpki.rst:82 +#: ../../configuration/protocols/rpki.rst:80 msgid "The BGP router can connect to one or more RPKI cache servers to receive validated prefix to origin AS mappings. Advanced failover can be implemented by server sockets with different preference values." msgstr "The BGP router can connect to one or more RPKI cache servers to receive validated prefix to origin AS mappings. Advanced failover can be implemented by server sockets with different preference values." @@ -13775,7 +13923,7 @@ msgstr "The DN and password to bind as while performing searches. As the passwor msgid "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." msgstr "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." -#: ../../configuration/loadbalancing/reverse-proxy.rst:215 +#: ../../configuration/loadbalancing/reverse-proxy.rst:218 msgid "The HTTP service listen on TCP port 80." msgstr "The HTTP service listen on TCP port 80." @@ -13827,19 +13975,23 @@ msgstr "The UDP port number used by your apllication. It is mandatory for this k msgid "The VXLAN specification was originally created by VMware, Arista Networks and Cisco. Other backers of the VXLAN technology include Huawei, Broadcom, Citrix, Pica8, Big Switch Networks, Cumulus Networks, Dell EMC, Ericsson, Mellanox, FreeBSD, OpenBSD, Red Hat, Joyent, and Juniper Networks." msgstr "The VXLAN specification was originally created by VMware, Arista Networks and Cisco. Other backers of the VXLAN technology include Huawei, Broadcom, Citrix, Pica8, Big Switch Networks, Cumulus Networks, Dell EMC, Ericsson, Mellanox, FreeBSD, OpenBSD, Red Hat, Joyent, and Juniper Networks." +#: ../../configuration/service/dns.rst:149 +msgid "The VyOS DNS forwarder can also be configured to host authoritative records for a domain." +msgstr "The VyOS DNS forwarder can also be configured to host authoritative records for a domain." + #: ../../configuration/service/dns.rst:14 msgid "The VyOS DNS forwarder does not require an upstream DNS server. It can serve as a full recursive DNS server - but it can also forward queries to configurable upstream DNS servers. By not configuring any upstream DNS servers you also avoid being tracked by the provider of your upstream DNS server." msgstr "The VyOS DNS forwarder does not require an upstream DNS server. It can serve as a full recursive DNS server - but it can also forward queries to configurable upstream DNS servers. By not configuring any upstream DNS servers you also avoid being tracked by the provider of your upstream DNS server." -#: ../../configuration/service/dns.rst:160 +#: ../../configuration/service/dns.rst:254 msgid "The VyOS DNS forwarder will only accept lookup requests from the LAN subnets - 192.168.1.0/24 and 2001:db8::/64" msgstr "The VyOS DNS forwarder will only accept lookup requests from the LAN subnets - 192.168.1.0/24 and 2001:db8::/64" -#: ../../configuration/service/dns.rst:158 +#: ../../configuration/service/dns.rst:252 msgid "The VyOS DNS forwarder will only listen for requests on the eth1 (LAN) interface addresses - 192.168.1.254 for IPv4 and 2001:db8::ffff for IPv6" msgstr "The VyOS DNS forwarder will only listen for requests on the eth1 (LAN) interface addresses - 192.168.1.254 for IPv4 and 2001:db8::ffff for IPv6" -#: ../../configuration/service/dns.rst:162 +#: ../../configuration/service/dns.rst:256 msgid "The VyOS DNS forwarder will pass reverse lookups for 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa zones to upstream server." msgstr "The VyOS DNS forwarder will pass reverse lookups for 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa zones to upstream server." @@ -13888,10 +14040,26 @@ msgstr "The ``address`` can be configured either on the VRRP interface or on not msgid "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" msgstr "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" +#: ../../configuration/loadbalancing/reverse-proxy.rst:305 +msgid "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" +msgstr "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" + #: ../../configuration/loadbalancing/reverse-proxy.rst:248 msgid "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." msgstr "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." +#: ../../configuration/loadbalancing/reverse-proxy.rst:251 +msgid "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." +msgstr "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:302 +msgid "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." +msgstr "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:254 +msgid "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." +msgstr "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." + #: ../../configuration/loadbalancing/reverse-proxy.rst:251 msgid "The ``https`` service listens on port 443 with backend `bk-default` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." msgstr "The ``https`` service listens on port 443 with backend `bk-default` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." @@ -14071,7 +14239,7 @@ msgstr "The default value corresponds to 64." msgid "The default value is 0. This will cause the carrier to be asserted (for 802.3ad mode) whenever there is an active aggregator, regardless of the number of available links in that aggregator." msgstr "The default value is 0. This will cause the carrier to be asserted (for 802.3ad mode) whenever there is an active aggregator, regardless of the number of available links in that aggregator." -#: ../../configuration/protocols/rpki.rst:110 +#: ../../configuration/protocols/rpki.rst:108 msgid "The default value is 300 seconds." msgstr "The default value is 300 seconds." @@ -14083,11 +14251,11 @@ msgstr "The default value is 3." msgid "The default value is 3 packets." msgstr "The default value is 3 packets." -#: ../../configuration/protocols/rpki.rst:124 +#: ../../configuration/protocols/rpki.rst:122 msgid "The default value is 600 seconds." msgstr "The default value is 600 seconds." -#: ../../configuration/protocols/rpki.rst:117 +#: ../../configuration/protocols/rpki.rst:115 msgid "The default value is 7200 seconds." msgstr "The default value is 7200 seconds." @@ -14229,7 +14397,7 @@ msgstr "The following commands translate to \"--net host\" when the container is msgid "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" msgstr "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:212 +#: ../../configuration/loadbalancing/reverse-proxy.rst:215 msgid "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." msgstr "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." @@ -14245,6 +14413,14 @@ msgstr "The following configuration on VyOS applies to all following 3rd party v msgid "The following configuration reverse-proxy terminate SSL." msgstr "The following configuration reverse-proxy terminate SSL." +#: ../../configuration/loadbalancing/reverse-proxy.rst:249 +msgid "The following configuration terminates SSL on the router." +msgstr "The following configuration terminates SSL on the router." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:295 +msgid "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." +msgstr "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." + #: ../../configuration/interfaces/pppoe.rst:383 msgid "The following configuration will assign a /64 prefix out of a /56 delegation to eth0. The IPv6 address assigned to eth0 will be ::ffff/64. If you do not know the prefix size delegated to you, start with sla-len 0." msgstr "The following configuration will assign a /64 prefix out of a /56 delegation to eth0. The IPv6 address assigned to eth0 will be ::ffff/64. If you do not know the prefix size delegated to you, start with sla-len 0." @@ -14442,7 +14618,7 @@ msgstr "The most visible application of the protocol is for access to shell acco msgid "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." msgstr "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." -#: ../../configuration/loadbalancing/reverse-proxy.rst:182 +#: ../../configuration/loadbalancing/reverse-proxy.rst:185 msgid "The name of the service can be different, in this example it is only for convenience." msgstr "The name of the service can be different, in this example it is only for convenience." @@ -14522,11 +14698,11 @@ msgstr "The popular Unix/Linux ``dig`` tool sets the AD-bit in the query. This m msgid "The pre-shared key mode is deprecated and will be removed from future OpenVPN versions, so VyOS will have to remove support for that option as well. The reason is that using pre-shared keys is significantly less secure than using TLS." msgstr "The pre-shared key mode is deprecated and will be removed from future OpenVPN versions, so VyOS will have to remove support for that option as well. The reason is that using pre-shared keys is significantly less secure than using TLS." -#: ../../configuration/protocols/rpki.rst:49 +#: ../../configuration/protocols/rpki.rst:47 msgid "The prefix and ASN that originated it match a signed ROA. These are probably trustworthy route announcements." msgstr "The prefix and ASN that originated it match a signed ROA. These are probably trustworthy route announcements." -#: ../../configuration/protocols/rpki.rst:53 +#: ../../configuration/protocols/rpki.rst:51 msgid "The prefix or prefix length and ASN that originated it doesn't match any existing ROA. This could be the result of a prefix hijack, or merely a misconfiguration, but should probably be treated as untrustworthy route announcements." msgstr "The prefix or prefix length and ASN that originated it doesn't match any existing ROA. This could be the result of a prefix hijack, or merely a misconfiguration, but should probably be treated as untrustworthy route announcements." @@ -15985,11 +16161,11 @@ msgstr "This commands creates a bridge that is used to bind traffic on eth1 vlan msgid "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." msgstr "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." -#: ../../configuration/loadbalancing/reverse-proxy.rst:192 +#: ../../configuration/loadbalancing/reverse-proxy.rst:195 msgid "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." msgstr "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." -#: ../../configuration/loadbalancing/reverse-proxy.rst:174 +#: ../../configuration/loadbalancing/reverse-proxy.rst:177 msgid "This configuration listen on port 80 and redirect incoming requests to HTTPS:" msgstr "This configuration listen on port 80 and redirect incoming requests to HTTPS:" @@ -16164,8 +16340,8 @@ msgstr "This is a mandatory command. Sets the full path to the script. The scrip msgid "This is a mandatory option" msgstr "This is a mandatory option" -#: ../../configuration/protocols/rpki.rst:131 -#: ../../configuration/protocols/rpki.rst:138 +#: ../../configuration/protocols/rpki.rst:129 +#: ../../configuration/protocols/rpki.rst:136 msgid "This is a mandatory setting." msgstr "This is a mandatory setting." @@ -16455,7 +16631,7 @@ msgstr "This will configure a static ARP entry always resolving `
` to ` msgid "This will match TCP traffic with source port 80." msgstr "This will match TCP traffic with source port 80." -#: ../../configuration/service/dns.rst:295 +#: ../../configuration/service/dns.rst:389 msgid "This will render the following ddclient_ configuration entry:" msgstr "This will render the following ddclient_ configuration entry:" @@ -16832,7 +17008,7 @@ msgstr "To use a RADIUS server for authentication and bandwidth-shaping, the fol msgid "To use a radius server, you need to switch to authentication mode RADIUS and then configure it." msgstr "To use a radius server, you need to switch to authentication mode RADIUS and then configure it." -#: ../../configuration/service/dns.rst:321 +#: ../../configuration/service/dns.rst:415 msgid "To use such a service, one must define a login, password, one or multiple hostnames, protocol and server." msgstr "To use such a service, one must define a login, password, one or multiple hostnames, protocol and server." @@ -17057,7 +17233,7 @@ msgstr "Update geoip database" msgid "Updates" msgstr "Updates" -#: ../../configuration/protocols/rpki.rst:99 +#: ../../configuration/protocols/rpki.rst:97 msgid "Updates from the RPKI cache servers are directly applied and path selection is updated accordingly. (Soft reconfiguration must be enabled for this to work)." msgstr "Updates from the RPKI cache servers are directly applied and path selection is updated accordingly. (Soft reconfiguration must be enabled for this to work)." @@ -17162,7 +17338,7 @@ msgstr "Use an automatically generated self-signed certificate" msgid "Use any local address, configured on any interface if this is not set." msgstr "Use any local address, configured on any interface if this is not set." -#: ../../configuration/service/dns.rst:263 +#: ../../configuration/service/dns.rst:357 msgid "Use auth key file at ``/config/auth/my.key``" msgstr "Use auth key file at ``/config/auth/my.key``" @@ -17170,11 +17346,11 @@ msgstr "Use auth key file at ``/config/auth/my.key``" msgid "Use certificate from PKI subsystem" msgstr "Use certificate from PKI subsystem" -#: ../../configuration/service/dns.rst:410 +#: ../../configuration/service/dns.rst:504 msgid "Use configured `` to determine your IP address. ddclient_ will load `` and tries to extract your IP address from the response." msgstr "Use configured `` to determine your IP address. ddclient_ will load `` and tries to extract your IP address from the response." -#: ../../configuration/service/dns.rst:368 +#: ../../configuration/service/dns.rst:462 msgid "Use deSEC (dedyn.io) as your preferred provider:" msgstr "Use deSEC (dedyn.io) as your preferred provider:" @@ -18323,11 +18499,11 @@ msgstr "VyOS facilitates IPv6 Multicast by supporting **PIMv6** and **MLD**." msgid "VyOS includes the FastNetMon Community Edition." msgstr "VyOS includes the FastNetMon Community Edition." -#: ../../configuration/service/dns.rst:201 +#: ../../configuration/service/dns.rst:295 msgid "VyOS is able to update a remote DNS record when an interface gets a new IP address. In order to do so, VyOS includes ddclient_, a Perl script written for this only one purpose." msgstr "VyOS is able to update a remote DNS record when an interface gets a new IP address. In order to do so, VyOS includes ddclient_, a Perl script written for this only one purpose." -#: ../../configuration/service/dns.rst:319 +#: ../../configuration/service/dns.rst:413 msgid "VyOS is also able to use any service relying on protocols supported by ddclient." msgstr "VyOS is also able to use any service relying on protocols supported by ddclient." @@ -18536,7 +18712,7 @@ msgstr "We can't support all displays from the beginning. If your display type i msgid "We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let's Encrypt an open certificate authority launched by the EFF, Mozilla, and others and deploys it to a web server." msgstr "We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let's Encrypt an open certificate authority launched by the EFF, Mozilla, and others and deploys it to a web server." -#: ../../configuration/protocols/rpki.rst:170 +#: ../../configuration/protocols/rpki.rst:168 msgid "We can build route-maps for import based on these states. Here is a simple RPKI configuration, where `routinator` is the RPKI-validating \"cache\" server with ip `192.0.2.1`:" msgstr "We can build route-maps for import based on these states. Here is a simple RPKI configuration, where `routinator` is the RPKI-validating \"cache\" server with ip `192.0.2.1`:" @@ -18620,11 +18796,11 @@ msgstr "When PIM receives a register packet the source of the packet will be com msgid "When VRFs are used it is not only mandatory to create a VRF but also the VRF itself needs to be assigned to an interface." msgstr "When VRFs are used it is not only mandatory to create a VRF but also the VRF itself needs to be assigned to an interface." -#: ../../configuration/service/dns.rst:351 +#: ../../configuration/service/dns.rst:445 msgid "When a ``custom`` DynDNS provider is used, the protocol used for communicating to the provider must be specified under ``. See the embedded completion helper when entering above command for available protocols." msgstr "When a ``custom`` DynDNS provider is used, the protocol used for communicating to the provider must be specified under ``. See the embedded completion helper when entering above command for available protocols." -#: ../../configuration/service/dns.rst:357 +#: ../../configuration/service/dns.rst:451 msgid "When a ``custom`` DynDNS provider is used the `` where update requests are being sent to must be specified." msgstr "When a ``custom`` DynDNS provider is used the `` where update requests are being sent to must be specified." @@ -18797,7 +18973,7 @@ msgstr "When using NAT for a large number of host systems it recommended that a msgid "When using SSH, known-hosts-file, private-key-file and public-key-file are mandatory options." msgstr "When using SSH, known-hosts-file, private-key-file and public-key-file are mandatory options." -#: ../../configuration/protocols/rpki.rst:163 +#: ../../configuration/protocols/rpki.rst:161 msgid "When using SSH, private-key-file and public-key-file are mandatory options." msgstr "When using SSH, private-key-file and public-key-file are mandatory options." @@ -19008,7 +19184,7 @@ msgstr "You can also configure the time interval for preemption with the \"preem msgid "You can also define custom timeout values to apply to a specific subset of connections, based on a packet and flow selector. To do this, you need to create a rule defining the packet and flow selector." msgstr "You can also define custom timeout values to apply to a specific subset of connections, based on a packet and flow selector. To do this, you need to create a rule defining the packet and flow selector." -#: ../../configuration/service/dns.rst:312 +#: ../../configuration/service/dns.rst:406 msgid "You can also keep different DNS zone updated. Just create a new config node: ``set service dns dynamic interface rfc2136 ``" msgstr "You can also keep different DNS zone updated. Just create a new config node: ``set service dns dynamic interface rfc2136 ``" @@ -19348,6 +19524,10 @@ msgstr ":abbr:`RIP (Routing Information Protocol)` is a widely deployed interior msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:`PKI (Public Key Infrastructure)` designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:`PKI (Public Key Infrastructure)` designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." +#: ../../configuration/protocols/rpki.rst:14 +msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." +msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." + #: ../../configuration/interfaces/ethernet.rst:82 msgid ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" msgstr ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" @@ -19512,7 +19692,7 @@ msgstr ":ref:`routing-static`: ``set vrf name protocols static ...``" msgid ":rfc:`2131` states: The client MAY choose to explicitly provide the identifier through the 'client identifier' option. If the client supplies a 'client identifier', the client MUST use the same 'client identifier' in all subsequent messages, and the server MUST use that identifier to identify the client." msgstr ":rfc:`2131` states: The client MAY choose to explicitly provide the identifier through the 'client identifier' option. If the client supplies a 'client identifier', the client MUST use the same 'client identifier' in all subsequent messages, and the server MUST use that identifier to identify the client." -#: ../../configuration/service/dns.rst:217 +#: ../../configuration/service/dns.rst:311 msgid ":rfc:`2136` Based" msgstr ":rfc:`2136` Based" @@ -19664,6 +19844,10 @@ msgstr "``9600`` - 9600 bps" msgid "``< dh-group >`` defines a Diffie-Hellman group for PFS;" msgstr "``< dh-group >`` defines a Diffie-Hellman group for PFS;" +#: ../../configuration/service/dns.rst:172 +msgid "``@`` Use @ as record name to set the record for the root domain." +msgstr "``@`` Use @ as record name to set the record for the root domain." + #: ../../configuration/protocols/segment-routing.rst:41 msgid "``Known limitations:``" msgstr "``Known limitations:``" @@ -19734,6 +19918,10 @@ msgstr "``all-available`` all checking target addresses must be available to pas msgid "``any-available`` any of the checking target addresses must be available to pass this check" msgstr "``any-available`` any of the checking target addresses must be available to pass this check" +#: ../../configuration/service/dns.rst:174 +msgid "``any`` Use any as record name to configure the record as a wildcard." +msgstr "``any`` Use any as record name to configure the record as a wildcard." + #: ../../configuration/vpn/site2site_ipsec.rst:388 msgid "``authentication local-id/remote-id`` - IKE identification is used for validation of VPN peer devices during IKE negotiation. If you do not configure local/remote-identity, the device uses the IPv4 or IPv6 address that corresponds to the local/remote peer by default. In certain network setups (like ipsec interface with dynamic address, or behind the NAT ), the IKE ID received from the peer does not match the IKE gateway configured on the device. This can lead to a Phase 1 validation failure. So, make sure to configure the local/remote id explicitly and ensure that the IKE ID is the same as the remote-identity configured on the peer device." msgstr "``authentication local-id/remote-id`` - IKE identification is used for validation of VPN peer devices during IKE negotiation. If you do not configure local/remote-identity, the device uses the IPv4 or IPv6 address that corresponds to the local/remote peer by default. In certain network setups (like ipsec interface with dynamic address, or behind the NAT ), the IKE ID received from the peer does not match the IKE gateway configured on the device. This can lead to a Phase 1 validation failure. So, make sure to configure the local/remote id explicitly and ensure that the IKE ID is the same as the remote-identity configured on the peer device." @@ -20855,7 +21043,7 @@ msgstr "cron" msgid "daemon" msgstr "daemon" -#: ../../configuration/service/dns.rst:405 +#: ../../configuration/service/dns.rst:499 msgid "ddclient_ has another way to determine the WAN IP address. This is controlled by:" msgstr "ddclient_ has another way to determine the WAN IP address. This is controlled by:" @@ -20863,11 +21051,11 @@ msgstr "ddclient_ has another way to determine the WAN IP address. This is contr msgid "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other similar website. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." msgstr "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other similar website. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." -#: ../../configuration/service/dns.rst:205 +#: ../../configuration/service/dns.rst:299 msgid "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other such service provider. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." msgstr "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other such service provider. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." -#: ../../configuration/service/dns.rst:415 +#: ../../configuration/service/dns.rst:509 msgid "ddclient_ will skip any address located before the string set in ``." msgstr "ddclient_ will skip any address located before the string set in ``." @@ -21044,7 +21232,7 @@ msgstr "info" msgid "interval" msgstr "interval" -#: ../../configuration/protocols/rpki.rst:56 +#: ../../configuration/protocols/rpki.rst:54 msgid "invalid" msgstr "invalid" @@ -21276,7 +21464,7 @@ msgstr "no-autonomous-flag" msgid "no-on-link-flag" msgstr "no-on-link-flag" -#: ../../configuration/protocols/rpki.rst:61 +#: ../../configuration/protocols/rpki.rst:59 msgid "notfound" msgstr "notfound" @@ -21549,7 +21737,7 @@ msgstr "user" msgid "uucp" msgstr "uucp" -#: ../../configuration/protocols/rpki.rst:50 +#: ../../configuration/protocols/rpki.rst:48 msgid "valid" msgstr "valid" diff --git a/docs/_locale/uk/404.pot b/docs/_locale/uk/404.pot index ba0c5417..296b5ad0 100644 --- a/docs/_locale/uk/404.pot +++ b/docs/_locale/uk/404.pot @@ -10,19 +10,19 @@ msgstr "" #: ../../404.rst:4 msgid "Page Not Found" -msgstr "Page Not Found" +msgstr "Сторінку не знайдено" #: ../../404.rst:6 msgid "Sorry, We could not find a page. Try using the search box or go to the release homepage:" -msgstr "Sorry, We could not find a page. Try using the search box or go to the release homepage:" +msgstr "Вибачте, не вдалося знайти сторінку. Спробуйте скористатися вікном пошуку або перейдіть на домашню сторінку випуску:" #: ../../404.rst:9 msgid "`1.2.x (crux) `_" -msgstr "`1.2.x (crux) `_" +msgstr "`1.2.x (суть) `_" #: ../../404.rst:10 msgid "`1.3.x (equuleus) `_" -msgstr "`1.3.x (equuleus) `_" +msgstr "`1.3.x (дорівнює) `_" #: ../../404.rst:11 msgid "`1.4.x (sagitta) `_" @@ -34,4 +34,4 @@ msgstr "`rolling release (circinus) `_" #: ../../404.rst:11 msgid "`rolling release (sagitta) `_" -msgstr "`rolling release (sagitta) `_" +msgstr "`прокатний випуск (sagitta) `_" diff --git a/docs/_locale/uk/LC_MESSAGES/404.mo b/docs/_locale/uk/LC_MESSAGES/404.mo index 931cdcbb..ef44cca9 100644 Binary files a/docs/_locale/uk/LC_MESSAGES/404.mo and b/docs/_locale/uk/LC_MESSAGES/404.mo differ diff --git a/docs/_locale/uk/LC_MESSAGES/automation.mo b/docs/_locale/uk/LC_MESSAGES/automation.mo index f01c48d8..d0d1031e 100644 Binary files a/docs/_locale/uk/LC_MESSAGES/automation.mo and b/docs/_locale/uk/LC_MESSAGES/automation.mo differ diff --git a/docs/_locale/uk/LC_MESSAGES/cli.mo b/docs/_locale/uk/LC_MESSAGES/cli.mo index ae3dffb7..69e3c1c2 100644 Binary files a/docs/_locale/uk/LC_MESSAGES/cli.mo and b/docs/_locale/uk/LC_MESSAGES/cli.mo differ diff --git a/docs/_locale/uk/LC_MESSAGES/configexamples.mo b/docs/_locale/uk/LC_MESSAGES/configexamples.mo index 11b0bd11..1659ac29 100644 Binary files a/docs/_locale/uk/LC_MESSAGES/configexamples.mo and b/docs/_locale/uk/LC_MESSAGES/configexamples.mo differ diff --git a/docs/_locale/uk/LC_MESSAGES/configuration.mo b/docs/_locale/uk/LC_MESSAGES/configuration.mo index 33f1c902..90d9d678 100644 Binary files a/docs/_locale/uk/LC_MESSAGES/configuration.mo and b/docs/_locale/uk/LC_MESSAGES/configuration.mo differ diff --git a/docs/_locale/uk/LC_MESSAGES/contributing.mo b/docs/_locale/uk/LC_MESSAGES/contributing.mo index ed247a8e..3ab75ede 100644 Binary files a/docs/_locale/uk/LC_MESSAGES/contributing.mo and b/docs/_locale/uk/LC_MESSAGES/contributing.mo differ diff --git a/docs/_locale/uk/LC_MESSAGES/copyright.mo b/docs/_locale/uk/LC_MESSAGES/copyright.mo index 3cacba1d..7e821cf6 100644 Binary files a/docs/_locale/uk/LC_MESSAGES/copyright.mo and b/docs/_locale/uk/LC_MESSAGES/copyright.mo differ diff --git a/docs/_locale/uk/LC_MESSAGES/documentation.mo b/docs/_locale/uk/LC_MESSAGES/documentation.mo index 267b3f0a..59a0bbb2 100644 Binary files a/docs/_locale/uk/LC_MESSAGES/documentation.mo and b/docs/_locale/uk/LC_MESSAGES/documentation.mo differ diff --git a/docs/_locale/uk/LC_MESSAGES/index.mo b/docs/_locale/uk/LC_MESSAGES/index.mo index fee8c817..bba78648 100644 Binary files a/docs/_locale/uk/LC_MESSAGES/index.mo and b/docs/_locale/uk/LC_MESSAGES/index.mo differ diff --git a/docs/_locale/uk/LC_MESSAGES/installation.mo b/docs/_locale/uk/LC_MESSAGES/installation.mo index 3780988a..e782757c 100644 Binary files a/docs/_locale/uk/LC_MESSAGES/installation.mo and b/docs/_locale/uk/LC_MESSAGES/installation.mo differ diff --git a/docs/_locale/uk/LC_MESSAGES/introducing.mo b/docs/_locale/uk/LC_MESSAGES/introducing.mo index 7f4a2a31..8985a77e 100644 Binary files a/docs/_locale/uk/LC_MESSAGES/introducing.mo and b/docs/_locale/uk/LC_MESSAGES/introducing.mo differ diff --git a/docs/_locale/uk/LC_MESSAGES/operation.mo b/docs/_locale/uk/LC_MESSAGES/operation.mo index e00b53b3..05105a32 100644 Binary files a/docs/_locale/uk/LC_MESSAGES/operation.mo and b/docs/_locale/uk/LC_MESSAGES/operation.mo differ diff --git a/docs/_locale/uk/LC_MESSAGES/quick-start.mo b/docs/_locale/uk/LC_MESSAGES/quick-start.mo index fd868211..bc6caea0 100644 Binary files a/docs/_locale/uk/LC_MESSAGES/quick-start.mo and b/docs/_locale/uk/LC_MESSAGES/quick-start.mo differ diff --git a/docs/_locale/uk/LC_MESSAGES/troubleshooting.mo b/docs/_locale/uk/LC_MESSAGES/troubleshooting.mo index 46d22286..cde66849 100644 Binary files a/docs/_locale/uk/LC_MESSAGES/troubleshooting.mo and b/docs/_locale/uk/LC_MESSAGES/troubleshooting.mo differ diff --git a/docs/_locale/uk/automation.pot b/docs/_locale/uk/automation.pot index 1f0bffb9..96148754 100644 --- a/docs/_locale/uk/automation.pot +++ b/docs/_locale/uk/automation.pot @@ -55,43 +55,43 @@ msgstr "**NOTE**: be careful while copying and pasting previous commands. Double #: ../../automation/cloud-init.rst:363 msgid "**NOTE**: be carefull while copying and pasting previous commands. Doble quotes may need to be corrected." -msgstr "**NOTE**: be carefull while copying and pasting previous commands. Doble quotes may need to be corrected." +msgstr "**ПРИМІТКА**: будьте обережні під час копіювання та вставлення попередніх команд. Подвійні лапки, можливо, потрібно буде виправити." #: ../../automation/cloud-init.rst:308 msgid "**meta-data**: empty file (required)." -msgstr "**meta-data**: empty file (required)." +msgstr "**мета-дані**: порожній файл (обов’язково)." #: ../../automation/cloud-init.rst:303 msgid "**network-config**: file that will indicate to avoid dhcp client on first interface." -msgstr "**network-config**: file that will indicate to avoid dhcp client on first interface." +msgstr "**network-config**: файл, який вказуватиме на уникнення клієнта dhcp на першому інтерфейсі." #: ../../automation/cloud-init.rst:336 msgid "**network-config** file only has configuration that disables the automatic dhcp client on first interface." -msgstr "**network-config** file only has configuration that disables the automatic dhcp client on first interface." +msgstr "Файл **network-config** містить лише конфігурацію, яка вимикає автоматичний клієнт dhcp на першому інтерфейсі." #: ../../automation/cloud-init.rst:306 msgid "**user-data**: includes vyos-commands." -msgstr "**user-data**: includes vyos-commands." +msgstr "**користувацькі дані**: включає vyos-команди." #: ../../automation/cloud-init.rst:317 msgid "**user-data** file must start with ``#cloud-config`` and contains vyos-commands. For example:" -msgstr "**user-data** file must start with ``#cloud-config`` and contains vyos-commands. For example:" +msgstr "Файл **user-data** має починатися з ``#cloud-config`` і містити vyos-команди. Наприклад:" #: ../../automation/vyos-api.rst:355 msgid "/config-file" -msgstr "/config-file" +msgstr "/конфігураційний файл" #: ../../automation/vyos-api.rst:298 msgid "/configure" -msgstr "/configure" +msgstr "/налаштувати" #: ../../automation/vyos-api.rst:278 msgid "/generate" -msgstr "/generate" +msgstr "/генерувати" #: ../../automation/vyos-api.rst:216 msgid "/image" -msgstr "/image" +msgstr "/зображення" #: ../../automation/vyos-api.rst:197 msgid "/poweroff" @@ -103,15 +103,15 @@ msgstr "/reboot" #: ../../automation/vyos-api.rst:161 msgid "/reset" -msgstr "/reset" +msgstr "/скинути" #: ../../automation/vyos-api.rst:44 msgid "/retrieve" -msgstr "/retrieve" +msgstr "/ отримати" #: ../../automation/vyos-api.rst:254 msgid "/show" -msgstr "/show" +msgstr "/показати" #: ../../automation/vyos-terraform.rst:993 msgid "1.1 Collect all data in to file \"terraform.tfvars\" and create resources fo example \"terraform\"" @@ -360,7 +360,7 @@ msgstr "4 Copy all files into your Ansible project \"/root/vsphereterraform/\" ( #: ../../automation/vyos-api.rst:41 msgid "API Endpoints" -msgstr "API Endpoints" +msgstr "Кінцеві точки API" #: ../../automation/terraform/terraformAWS.rst:26 msgid "AWS" @@ -376,23 +376,23 @@ msgstr "A VyOS qcow image with cloud-init options is needed. This can be obtaine #: ../../automation/cloud-init.rst:270 msgid "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After clonning the repo, edit the file **qemu.yml** and comment the **download-iso** role." -msgstr "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After clonning the repo, edit the file **qemu.yml** and comment the **download-iso** role." +msgstr "Потрібен образ qcow VyOS із параметрами хмарної ініціалізації. Це можна отримати за допомогою репозиторію `vyos-vm-images`_. Після клонування репо відредагуйте файл **qemu.yml** і закоментуйте роль **download-iso**." #: ../../automation/cloud-init.rst:64 msgid "A cloud-config document is written in YAML. The file must begin with ``#cloud-config`` line. The only supported top-level keys are ``vyos_config_commands`` and ``write_files``. The use of these keys is described in the following two sections." -msgstr "A cloud-config document is written in YAML. The file must begin with ``#cloud-config`` line. The only supported top-level keys are ``vyos_config_commands`` and ``write_files``. The use of these keys is described in the following two sections." +msgstr "Документ хмарної конфігурації написаний на YAML. Файл має починатися з рядка ``#cloud-config``. Єдиними підтримуваними ключами верхнього рівня є ``vyos_config_commands`` і ``write_files``. Використання цих ключів описано в наступних двох розділах." #: ../../automation/command-scripting.rst:159 msgid "A simple example is shown below, where the ops command executed in the post-hook script is \"show interfaces\"." -msgstr "A simple example is shown below, where the ops command executed in the post-hook script is \"show interfaces\"." +msgstr "Нижче наведено простий приклад, де команда ops, що виконується в сценарії після перехоплення, є «показати інтерфейси»." #: ../../automation/cloud-init.rst:83 msgid "A single-quote symbol is not allowed inside command or value." -msgstr "A single-quote symbol is not allowed inside command or value." +msgstr "Символ одинарних лапок не дозволяється всередині команди чи значення." #: ../../automation/vyos-salt.rst:32 msgid "Accept minion key" -msgstr "Accept minion key" +msgstr "Прийняти ключ міньйона" #: ../../automation/terraform/terraformAWS.rst:255 msgid "After executing all the commands you will have your VyOS instance on the AWS cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" @@ -416,7 +416,7 @@ msgstr "After the ``vyos_config_commands`` are executed, cloud-init will automat #: ../../automation/vyos-api.rst:15 msgid "All endpoints only listen on HTTP POST requests and the API KEY must set as ``key`` in the formdata." -msgstr "All endpoints only listen on HTTP POST requests and the API KEY must set as ``key`` in the formdata." +msgstr "Усі кінцеві точки прослуховують лише запити HTTP POST, і API KEY має бути встановлено як ``key`` у даних форми." #: ../../automation/terraform/terraformAWS.rst:539 #: ../../automation/terraform/terraformAZ.rst:484 @@ -427,7 +427,7 @@ msgstr "All files about the article can be found here_" #: ../../automation/cloud-init.rst:119 msgid "All of these can be overridden using the configuration in user-data." -msgstr "All of these can be overridden using the configuration in user-data." +msgstr "Усе це можна змінити за допомогою конфігурації в даних користувача." #: ../../automation/terraform/terraformAWS.rst:267 msgid "Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group." @@ -435,7 +435,7 @@ msgstr "Also, increase the time in the file instance.yml from 300 sec to 500 sec #: ../../automation/cloud-init.rst:259 msgid "Also, this lab considers:" -msgstr "Also, this lab considers:" +msgstr "Також ця лабораторія розглядає:" #: ../../automation/terraform/terraformAWS.rst:74 #: ../../automation/terraform/terraformAZ.rst:51 @@ -443,20 +443,20 @@ msgstr "Also, this lab considers:" #: ../../automation/terraform/terraformvSphere.rst:50 #: ../../automation/vyos-ansible.rst:6 msgid "Ansible" -msgstr "Ansible" +msgstr "Ансібль" #: ../../automation/command-scripting.rst:181 #: ../../automation/command-scripting.rst:200 msgid "Any modifications were done to work around unfixed bugs and implement enhancements that are not complete in the VyOS system can be placed here." -msgstr "Any modifications were done to work around unfixed bugs and implement enhancements that are not complete in the VyOS system can be placed here." +msgstr "Тут можна розмістити будь-які зміни, внесені для усунення невиправлених помилок і впровадження вдосконалень, які не завершені в системі VyOS." #: ../../automation/vyos-salt.rst:55 msgid "At this step we can get some op-mode information from VyOS nodes:" -msgstr "At this step we can get some op-mode information from VyOS nodes:" +msgstr "На цьому кроці ми можемо отримати деяку інформацію про робочий режим від вузлів VyOS:" #: ../../automation/vyos-api.rst:13 msgid "Authentication" -msgstr "Authentication" +msgstr "Аутентифікація" #: ../../automation/terraform/terraformAZ.rst:19 msgid "Azure" @@ -469,27 +469,27 @@ msgstr "Azure_terraform_ansible_single_vyos_instance" #: ../../automation/cloud-init.rst:244 msgid "Before starting, please refer to cloud-init `network-config-docs`_ in order to know how to import user and network configurations." -msgstr "Before starting, please refer to cloud-init `network-config-docs`_ in order to know how to import user and network configurations." +msgstr "Перш ніж почати, зверніться до `network-config-docs`_ cloud-init, щоб дізнатися, як імпортувати конфігурації користувача та мережі." #: ../../automation/vyos-api.rst:18 msgid "Below see one example for curl and one for python. The rest of the documentation is reduced to curl." -msgstr "Below see one example for curl and one for python. The rest of the documentation is reduced to curl." +msgstr "Нижче див. один приклад для curl і один для python. Решта документації зводиться до curl." #: ../../automation/vyos-salt.rst:20 msgid "Check salt-keys on the salt master" -msgstr "Check salt-keys on the salt master" +msgstr "Перевірте ключі солі на соляному майстрі" #: ../../automation/vyos-salt.rst:161 msgid "Check that proxy minion is alive:" -msgstr "Check that proxy minion is alive:" +msgstr "Переконайтеся, що проксі-міньйон живий:" #: ../../automation/vyos-salt.rst:45 msgid "Check that salt master can communicate with minions" -msgstr "Check that salt master can communicate with minions" +msgstr "Перевірте, чи майстер солі може спілкуватися з міньйонами" #: ../../automation/cloud-init.rst:47 msgid "Cloud-config modules" -msgstr "Cloud-config modules" +msgstr "Модулі хмарної конфігурації" #: ../../automation/cloud-init.rst:423 msgid "Cloud-init `network-config-docs`_." @@ -497,40 +497,40 @@ msgstr "Cloud-init `network-config-docs`_." #: ../../automation/cloud-init.rst:242 msgid "Cloud-init on Proxmox" -msgstr "Cloud-init on Proxmox" +msgstr "Cloud-init на Proxmox" #: ../../automation/cloud-init.rst:9 msgid "Cloud and virtualized instances of VyOS are initialized using the industry-standard cloud-init. Via cloud-init, the system performs tasks such as injecting SSH keys and configuring the network. In addition, the user can supply a custom configuration at the time of instance launch." -msgstr "Cloud and virtualized instances of VyOS are initialized using the industry-standard cloud-init. Via cloud-init, the system performs tasks such as injecting SSH keys and configuring the network. In addition, the user can supply a custom configuration at the time of instance launch." +msgstr "Хмарні та віртуалізовані екземпляри VyOS ініціалізуються за допомогою галузевого стандарту cloud-init. Через хмарну ініціалізацію система виконує такі завдання, як введення ключів SSH і налаштування мережі. Крім того, користувач може надати спеціальну конфігурацію під час запуску екземпляра." #: ../../automation/cloud-init.rst:124 msgid "Command Execution at Initial Boot" -msgstr "Command Execution at Initial Boot" +msgstr "Виконання команди під час початкового завантаження" #: ../../automation/command-scripting.rst:6 msgid "Command Scripting" -msgstr "Command Scripting" +msgstr "Командний сценарій" #: ../../automation/cloud-init.rst:359 msgid "Command for generating ``seed.iso``" -msgstr "Command for generating ``seed.iso``" +msgstr "Команда для створення ``seed.iso``" #: ../../automation/cloud-init.rst:79 msgid "Commands requirements:" -msgstr "Commands requirements:" +msgstr "Вимоги до команд:" #: ../../automation/cloud-init.rst:16 msgid "Config Sources" -msgstr "Config Sources" +msgstr "Джерела конфігурації" #: ../../automation/vyos-napalm.rst:85 #: ../../automation/vyos-salt.rst:104 msgid "Configuration" -msgstr "Configuration" +msgstr "Конфігурація" #: ../../automation/command-scripting.rst:23 msgid "Configuration commands are executed just like from a normal config session. For example, if you want to disable a BGP peer on VRRP transition to backup:" -msgstr "Configuration commands are executed just like from a normal config session. For example, if you want to disable a BGP peer on VRRP transition to backup:" +msgstr "Команди конфігурації виконуються так само, як під час звичайного сеансу конфігурації. Наприклад, якщо ви хочете вимкнути вузол BGP для переходу VRRP до резервного копіювання:" #: ../../automation/vyos-pyvyos.rst:102 msgid "Configure, then Delete Object" @@ -566,31 +566,31 @@ msgstr "Content" #: ../../automation/vyos-napalm.rst:89 msgid "Content of commands.conf" -msgstr "Content of commands.conf" +msgstr "Вміст commands.conf" #: ../../automation/cloud-init.rst:340 msgid "Content of network-config file:" -msgstr "Content of network-config file:" +msgstr "Вміст файлу конфігурації мережі:" #: ../../automation/cloud-init.rst:354 msgid "Create seed.iso" -msgstr "Create seed.iso" +msgstr "Створіть seed.iso" #: ../../automation/cloud-init.rst:193 msgid "Create text files named user-data and meta-data. On linux-based systems, the mkisofs utility can be used to create the seed ISO. The following syntax will add these files to the ISO 9660 file system." -msgstr "Create text files named user-data and meta-data. On linux-based systems, the mkisofs utility can be used to create the seed ISO. The following syntax will add these files to the ISO 9660 file system." +msgstr "Створіть текстові файли з іменами user-data і meta-data. У системах на базі Linux утиліту mkisofs можна використовувати для створення початкового ISO. Наступний синтаксис додасть ці файли до файлової системи ISO 9660." #: ../../automation/cloud-init.rst:371 msgid "Creating the VM" -msgstr "Creating the VM" +msgstr "Створення ВМ" #: ../../automation/command-scripting.rst:156 msgid "Custom scripts are not executed with root privileges (Use sudo inside if this is necessary)." -msgstr "Custom scripts are not executed with root privileges (Use sudo inside if this is necessary)." +msgstr "Користувальницькі сценарії не виконуються з привілеями root (використовуйте sudo всередині, якщо це необхідно)." #: ../../automation/cloud-init.rst:117 msgid "DHCP on first Ethernet interface if no network configuration is provided." -msgstr "DHCP on first Ethernet interface if no network configuration is provided." +msgstr "DHCP на першому інтерфейсі Ethernet, якщо конфігурація мережі не надається." #: ../../automation/terraform/terraformAWS.rst:6 msgid "Deploying VyOS in the AWS cloud" @@ -622,35 +622,35 @@ msgstr "Deploying vyos in the Vsphere infrastructia" #: ../../automation/vyos-netmiko.rst:12 msgid "Example" -msgstr "Example" +msgstr "приклад" #: ../../automation/vyos-salt.rst:185 msgid "Example of configuration:" -msgstr "Example of configuration:" +msgstr "Приклад конфігурації:" #: ../../automation/vyos-salt.rst:199 msgid "Example of configuration commands from the file \"/srv/salt/states/commands.txt\"" -msgstr "Example of configuration commands from the file \"/srv/salt/states/commands.txt\"" +msgstr "Приклад команд налаштування з файлу "/srv/salt/states/commands.txt"" #: ../../automation/vyos-salt.rst:173 msgid "Example of op-mode:" -msgstr "Example of op-mode:" +msgstr "Приклад операційного режиму:" #: ../../automation/vyos-salt.rst:171 msgid "Examples" -msgstr "Examples" +msgstr "Приклади" #: ../../automation/command-scripting.rst:102 msgid "Executing Configuration Scripts" -msgstr "Executing Configuration Scripts" +msgstr "Виконання сценаріїв конфігурації" #: ../../automation/command-scripting.rst:138 msgid "Executing pre-hooks/post-hooks Scripts" -msgstr "Executing pre-hooks/post-hooks Scripts" +msgstr "Виконання сценаріїв до/пост-хуків" #: ../../automation/vyos-ansible.rst:24 msgid "File contents" -msgstr "File contents" +msgstr "Вміст файлу" #: ../../automation/terraform/terraformAWS.rst:476 msgid "File contents of Ansible for AWS" @@ -686,7 +686,7 @@ msgstr "File contents of Terrafom for vSphere" #: ../../automation/cloud-init.rst:287 msgid "File generated with previous command: ``/tmp/vyos-1.3.0-cloud-init-10G-qemu.qcow2``" -msgstr "File generated with previous command: ``/tmp/vyos-1.3.0-cloud-init-10G-qemu.qcow2``" +msgstr "Файл, створений попередньою командою: ``/tmp/vyos-1.3.0-cloud-init-10G-qemu.qcow2``" #: ../../automation/cloud-init.rst:350 msgid "Finally, file **meta-data** has no content, but it's required." @@ -694,15 +694,15 @@ msgstr "Finally, file **meta-data** has no content, but it's required." #: ../../automation/cloud-init.rst:347 msgid "Finaly, file **meta-data** has no content, but it's required." -msgstr "Finaly, file **meta-data** has no content, but it's required." +msgstr "Нарешті, файл **meta-data** не має вмісту, але він є обов’язковим." #: ../../automation/command-scripting.rst:212 msgid "For configuration/upgrade management issues, modification of this script should be the last option. Always try to find solutions based on CLI commands first." -msgstr "For configuration/upgrade management issues, modification of this script should be the last option. Always try to find solutions based on CLI commands first." +msgstr "У разі проблем із керуванням конфігурацією/оновленням змінення цього сценарію має бути останнім варіантом. Завжди намагайтеся спочатку знайти рішення на основі команд CLI." #: ../../automation/vyos-api.rst:9 msgid "For configuration and enabling the API see :ref:`http-api`" -msgstr "For configuration and enabling the API see :ref:`http-api`" +msgstr "Для налаштування та ввімкнення API див. :ref:`http-api`" #: ../../automation/vyos-api.rst:130 msgid "For example, check an existing path:" @@ -710,15 +710,15 @@ msgstr "For example, check an existing path:" #: ../../automation/vyos-api.rst:109 msgid "For example, get the addresses of a ``dum0`` interface." -msgstr "For example, get the addresses of a ``dum0`` interface." +msgstr "Наприклад, отримати адреси інтерфейсу ``dum0``." #: ../../automation/vyos-api.rst:258 msgid "For example, show which images are installed." -msgstr "For example, show which images are installed." +msgstr "Наприклад, показати, які образи встановлені." #: ../../automation/cloud-init.rst:217 msgid "For more information on the NoCloud data source, visit its `page `_ in the cloud-init documentation." -msgstr "For more information on the NoCloud data source, visit its `page `_ in the cloud-init documentation." +msgstr "Щоб дізнатися більше про джерело даних NoCloud, відвідайте його сторінку `_ у документації cloud-init." #: ../../automation/cloud-init.rst:221 msgid "For more information on the NoCloud data source, visit its page `nocloud`_ in the cloud-init documentation." @@ -726,7 +726,7 @@ msgstr "For more information on the NoCloud data source, visit its page `nocloud #: ../../automation/cloud-init.rst:414 msgid "From cli or GUI, power on VM, and after it boots, verify configuration" -msgstr "From cli or GUI, power on VM, and after it boots, verify configuration" +msgstr "З кліпу або GUI увімкніть віртуальну машину та після її завантаження перевірте конфігурацію" #: ../../automation/terraform/terraformvyos.rst:26 msgid "General commands that we will use for running Terraform scripts" @@ -738,7 +738,7 @@ msgstr "Generate Object" #: ../../automation/cloud-init.rst:271 msgid "Generate qcow image" -msgstr "Generate qcow image" +msgstr "Створити зображення qcow" #: ../../automation/vyos-pyvyos.rst:32 msgid "Getting Started" @@ -746,11 +746,11 @@ msgstr "Getting Started" #: ../../automation/command-scripting.rst:82 msgid "Here is a simple example:" -msgstr "Here is a simple example:" +msgstr "Ось простий приклад:" #: ../../automation/cloud-init.rst:95 msgid "Here is an example cloud-config that appends configuration at the time of first boot." -msgstr "Here is an example cloud-config that appends configuration at the time of first boot." +msgstr "Ось приклад хмарної конфігурації, яка додає конфігурацію під час першого завантаження." #: ../../automation/terraform/terraformAWS.rst:23 msgid "How to create a single instance and install your configuration using Terraform+Ansible+AWS Step by step:" @@ -774,27 +774,27 @@ msgstr "How to create a single instance and install your configuration using Ter #: ../../automation/cloud-init.rst:380 msgid "ISO files storage: ``local`` volume is used for ``.iso`` file storage. In this scenario ``local`` volume type is set to **directory**, abd attached to ``/var/lib/vz``." -msgstr "ISO files storage: ``local`` volume is used for ``.iso`` file storage. In this scenario ``local`` volume type is set to **directory**, abd attached to ``/var/lib/vz``." +msgstr "Зберігання файлів ISO: для зберігання файлів ``.iso`` використовується локальний том. У цьому сценарії тип тома ``локальний`` встановлено на **каталог**, а також приєднаний до ``/var/lib/vz``." #: ../../automation/cloud-init.rst:82 msgid "If command ends in a value, it must be inside single quotes." -msgstr "If command ends in a value, it must be inside single quotes." +msgstr "Якщо команда закінчується значенням, воно має бути в одинарних лапках." #: ../../automation/cloud-init.rst:253 msgid "If no networking configuration is provided, then dhcp client is going to be enabled on first interface. Bare in mind that this configuration will be inyected at an OS level, so don't expect to find dhcp client configuration on vyos cli. Because of this behavior, in next example lab we will disable dhcp-client configuration on eth0." -msgstr "If no networking configuration is provided, then dhcp client is going to be enabled on first interface. Bare in mind that this configuration will be inyected at an OS level, so don't expect to find dhcp client configuration on vyos cli. Because of this behavior, in next example lab we will disable dhcp-client configuration on eth0." +msgstr "Якщо конфігурація мережі не надається, клієнт dhcp буде ввімкнено на першому інтерфейсі. Майте на увазі, що цю конфігурацію буде введено на рівні ОС, тому не очікуйте знайти конфігурацію клієнта dhcp у vyos cli. Через таку поведінку в наступному прикладі лабораторної роботи ми вимкнемо конфігурацію dhcp-клієнта на eth0." #: ../../automation/cloud-init.rst:228 msgid "If you encounter problems, verify that the cloud-config document contains valid YAML. Online resources such as https://www.yamllint.com/ provide a simple tool for validating YAML." -msgstr "If you encounter problems, verify that the cloud-config document contains valid YAML. Online resources such as https://www.yamllint.com/ provide a simple tool for validating YAML." +msgstr "Якщо у вас виникли проблеми, переконайтеся, що документ конфігурації хмари містить дійсний YAML. Інтернет-ресурси, такі як https://www.yamllint.com/, надають простий інструмент для перевірки YAML." #: ../../automation/cloud-init.rst:157 msgid "If you need to gather information from linux commands to configure VyOS, you can execute commands and then configure VyOS in the same script." -msgstr "If you need to gather information from linux commands to configure VyOS, you can execute commands and then configure VyOS in the same script." +msgstr "Якщо вам потрібно зібрати інформацію з команд Linux для налаштування VyOS, ви можете виконати команди, а потім налаштувати VyOS у тому самому сценарії." #: ../../automation/command-scripting.rst:79 msgid "If you want to script the configs in a language other than bash you can have your script output commands and then source them in a bash script." -msgstr "If you want to script the configs in a language other than bash you can have your script output commands and then source them in a bash script." +msgstr "Якщо ви бажаєте створити сценарій конфігурацій мовою, відмінною від bash, ви можете налаштувати команди виводу сценарію, а потім створити їх у сценарії bash." #: ../../automation/vyos-pyvyos.rst:35 msgid "Importing and Disabling Warnings for verify=False" @@ -802,11 +802,11 @@ msgstr "Importing and Disabling Warnings for verify=False" #: ../../automation/cloud-init.rst:301 msgid "In Proxmox server three files are going to be used for this setup:" -msgstr "In Proxmox server three files are going to be used for this setup:" +msgstr "На сервері Proxmox для цього налаштування використовуватимуться три файли:" #: ../../automation/cloud-init.rst:49 msgid "In VyOS, by default, enables only two modules:" -msgstr "In VyOS, by default, enables only two modules:" +msgstr "У VyOS за замовчуванням включено лише два модулі:" #: ../../automation/terraform/terraformAWS.rst:17 msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the AWS cloud and make provisioning using Ansible." @@ -826,15 +826,15 @@ msgstr "In this case, we'll create the necessary files for Terraform and Ansible #: ../../automation/cloud-init.rst:310 msgid "In this lab, all files are located in ``/tmp/``. So, before going on, lets move to that directory:" -msgstr "In this lab, all files are located in ``/tmp/``. So, before going on, lets move to that directory:" +msgstr "У цій лабораторії всі файли знаходяться в папці ``/tmp/``. Отже, перш ніж продовжити, давайте перейдемо до цього каталогу:" #: ../../automation/cloud-init.rst:277 msgid "In this lab, we are using 1.3.0 VyOS version and setting a disk of 10G. Download VyOS .iso file and save it as ``/tmp/vyos.iso``. Command used for generating qcow image:" -msgstr "In this lab, we are using 1.3.0 VyOS version and setting a disk of 10G. Download VyOS .iso file and save it as ``/tmp/vyos.iso``. Command used for generating qcow image:" +msgstr "У цій лабораторії ми використовуємо версію VyOS 1.3.0 і встановлюємо диск 10G. Завантажте файл VyOS .iso та збережіть його як ``/tmp/vyos.iso``. Команда, яка використовується для створення зображення qcow:" #: ../../automation/cloud-init.rst:72 msgid "Initial Configuration" -msgstr "Initial Configuration" +msgstr "Початкова конфігурація" #: ../../automation/vyos-pyvyos.rst:55 msgid "Initializing a VyDevice Object" @@ -842,11 +842,11 @@ msgstr "Initializing a VyDevice Object" #: ../../automation/cloud-init.rst:184 msgid "Injecting configuration data is not limited to cloud platforms. Users can employ the NoCloud data source to inject user-data and meta-data on virtualization platforms such as VMware, Hyper-V and KVM." -msgstr "Injecting configuration data is not limited to cloud platforms. Users can employ the NoCloud data source to inject user-data and meta-data on virtualization platforms such as VMware, Hyper-V and KVM." +msgstr "Впровадження конфігураційних даних не обмежується хмарними платформами. Користувачі можуть використовувати джерело даних NoCloud для введення даних користувача та метаданих на такі платформи віртуалізації, як VMware, Hyper-V і KVM." #: ../../automation/vyos-napalm.rst:11 msgid "Install ``napalm-vyos`` module" -msgstr "Install ``napalm-vyos`` module" +msgstr "Встановити модуль ``napalm-vyos''" #: ../../automation/vyos-pyvyos.rst:23 msgid "Installation" @@ -854,11 +854,11 @@ msgstr "Installation" #: ../../automation/vyos-salt.rst:98 msgid "It is possible to configure VyOS via netmiko_ proxy module. It requires a minion with installed packet ``python3-netmiko`` module who has a connection to VyOS nodes. Salt-minion have to communicate with salt master" -msgstr "It is possible to configure VyOS via netmiko_ proxy module. It requires a minion with installed packet ``python3-netmiko`` module who has a connection to VyOS nodes. Salt-minion have to communicate with salt master" +msgstr "Налаштувати VyOS можна через модуль netmiko_ proxy. Для цього потрібен міньйон із встановленим пакетним модулем ``python3-netmiko``, який має підключення до вузлів VyOS. Сіль-міньйон повинен спілкуватися з соляним майстром" #: ../../automation/cloud-init.rst:36 msgid "Major cloud providers offer a means of providing user-data at the time of instance launch. It can be provided as plain text or as base64-encoded text, depending on cloud provider. Also, it can be compressed using gzip, which makes sense with a long configuration commands list, because of the hard limit to ~16384 bytes for the whole user-data." -msgstr "Major cloud providers offer a means of providing user-data at the time of instance launch. It can be provided as plain text or as base64-encoded text, depending on cloud provider. Also, it can be compressed using gzip, which makes sense with a long configuration commands list, because of the hard limit to ~16384 bytes for the whole user-data." +msgstr "Основні хмарні постачальники пропонують засоби надання даних користувача під час запуску екземпляра. Його можна надати як звичайний текст або як текст у кодуванні base64, залежно від постачальника хмари. Крім того, його можна стиснути за допомогою gzip, що має сенс із довгим списком команд конфігурації через жорстке обмеження до ~16384 байтів для всіх даних користувача." #: ../../automation/terraform/terraformAWS.rst:282 #: ../../automation/terraform/terraformGoogle.rst:359 @@ -871,15 +871,15 @@ msgstr "Make sure that you have opened access to the instance in the security gr #: ../../automation/cloud-init.rst:20 msgid "Metadata - Metadata is sourced by the cloud platform or hypervisor. In some clouds, there is implemented as an HTTP endpoint at ``http://169.254.169.254``." -msgstr "Metadata - Metadata is sourced by the cloud platform or hypervisor. In some clouds, there is implemented as an HTTP endpoint at ``http://169.254.169.254``." +msgstr "Метадані – джерелом метаданих є хмарна платформа або гіпервізор. У деяких хмарах реалізовано як кінцеву точку HTTP за адресою ``http://169.254.169.254``." #: ../../automation/cloud-init.rst:247 msgid "Most important keys that needs to be considered:" -msgstr "Most important keys that needs to be considered:" +msgstr "Найважливіші ключі, які необхідно враховувати:" #: ../../automation/vyos-napalm.rst:6 msgid "Napalm" -msgstr "Napalm" +msgstr "Напалм" #: ../../automation/terraform/terraformvyos.rst:13 msgid "Need to install_ Terraform" @@ -891,20 +891,20 @@ msgstr "Netmiko" #: ../../automation/vyos-salt.rst:96 msgid "Netmiko-proxy" -msgstr "Netmiko-proxy" +msgstr "Netmiko-проксі" #: ../../automation/terraform/terraformAWS.rst:-1 #: ../../automation/terraform/terraformGoogle.rst:-1 msgid "Network Topology Diagram" -msgstr "Network Topology Diagram" +msgstr "Схема топології мережі" #: ../../automation/cloud-init.rst:24 msgid "Network configuration - This config source informs the system about the network settings like IP addresses, routes, DNS. Available only in several cloud and virtualization platforms." -msgstr "Network configuration - This config source informs the system about the network settings like IP addresses, routes, DNS. Available only in several cloud and virtualization platforms." +msgstr "Конфігурація мережі. Це джерело конфігурації інформує систему про параметри мережі, такі як IP-адреси, маршрути, DNS. Доступно лише на кількох хмарних платформах і платформах віртуалізації." #: ../../automation/cloud-init.rst:251 msgid "Networking configurations shouldn't be passed in user-data file." -msgstr "Networking configurations shouldn't be passed in user-data file." +msgstr "Конфігурації мережі не слід передавати у файлі даних користувача." #: ../../automation/cloud-init.rst:182 msgid "NoCloud" @@ -913,68 +913,68 @@ msgstr "NoCloud" #: ../../automation/index.rst:6 #: ../../automation/terraform/index.rst:6 msgid "Nornir" -msgstr "Nornir" +msgstr "Відьми" #: ../../automation/cloud-init.rst:135 msgid "Note that the /opt/vyatta/etc/config is used instead of the /config/scripts directory referenced in the :ref:`command-scripting` section of the documentation because the /config/script directory isn't mounted when the ``write_files`` module executes." -msgstr "Note that the /opt/vyatta/etc/config is used instead of the /config/scripts directory referenced in the :ref:`command-scripting` section of the documentation because the /config/script directory isn't mounted when the ``write_files`` module executes." +msgstr "Зверніть увагу, що /opt/vyatta/etc/config використовується замість каталогу /config/scripts, зазначеного в розділі :ref:`command-scripting` документації, оскільки каталог /config/script не монтується, коли ` Виконується модуль `write_files``." #: ../../automation/cloud-init.rst:373 msgid "Notes for this particular example, that may need to be modified in other setups:" -msgstr "Notes for this particular example, that may need to be modified in other setups:" +msgstr "Примітки для цього конкретного прикладу, які, можливо, потрібно буде змінити в інших налаштуваннях:" #: ../../automation/cloud-init.rst:290 msgid "Now, that file needs to be copied to proxmox server:" -msgstr "Now, that file needs to be copied to proxmox server:" +msgstr "Тепер цей файл потрібно скопіювати на сервер proxmox:" #: ../../automation/command-scripting.rst:108 msgid "On VyOS this will cause the following problem: After modifying the configuration via script like this once, it is not possible to manually modify the config anymore:" -msgstr "On VyOS this will cause the following problem: After modifying the configuration via script like this once, it is not possible to manually modify the config anymore:" +msgstr "У VyOS це спричинить наступну проблему: після зміни конфігурації за допомогою сценарію, подібного до цього, більше неможливо змінити конфігурацію вручну:" #: ../../automation/cloud-init.rst:393 msgid "On proxmox server:" -msgstr "On proxmox server:" +msgstr "На сервері proxmox:" #: ../../automation/cloud-init.rst:356 msgid "Once the three files were created, it's time to generate the ``seed.iso`` image, which needs to be mounted to the new VM as a cd." -msgstr "Once the three files were created, it's time to generate the ``seed.iso`` image, which needs to be mounted to the new VM as a cd." +msgstr "Після створення трьох файлів настав час створити образ ``seed.iso``, який потрібно підключити до нової віртуальної машини як компакт-диск." #: ../../automation/cloud-init.rst:81 msgid "One command per line." -msgstr "One command per line." +msgstr "Одна команда на рядок." #: ../../automation/vyos-napalm.rst:21 msgid "Op-mode" -msgstr "Op-mode" +msgstr "По-моді" #: ../../automation/command-scripting.rst:77 msgid "Other script languages" -msgstr "Other script languages" +msgstr "Інші скриптові мови" #: ../../automation/vyos-napalm.rst:129 #: ../../automation/vyos-netmiko.rst:47 msgid "Output" -msgstr "Output" +msgstr "Вихідні дані" #: ../../automation/vyos-napalm.rst:48 msgid "Output op-mode" -msgstr "Output op-mode" +msgstr "Вихідний оп-режим" #: ../../_include/need_improvement.txt:13 msgid "Please take a look at the Contributing Guide for our :ref:`documentation`." -msgstr "Please take a look at the Contributing Guide for our :ref:`documentation`." +msgstr "Будь ласка, перегляньте Посібник зі сприяння для нашої :ref:`документації`." #: ../../automation/command-scripting.rst:195 msgid "Postconfig on boot" -msgstr "Postconfig on boot" +msgstr "Postconfig під час завантаження" #: ../../automation/cloud-init.rst:412 msgid "Power on VM and verifications" -msgstr "Power on VM and verifications" +msgstr "Увімкніть віртуальну машину та перевірки" #: ../../automation/command-scripting.rst:176 msgid "Preconfig on boot" -msgstr "Preconfig on boot" +msgstr "Попереднє налаштування під час завантаження" #: ../../automation/terraform/terraformAWS.rst:21 msgid "Preparation steps for deploying VyOS on AWS" @@ -994,11 +994,11 @@ msgstr "Preparation steps for deploying VyOS on vSphere" #: ../../automation/cloud-init.rst:299 msgid "Prepare cloud-init files" -msgstr "Prepare cloud-init files" +msgstr "Підготуйте файли хмарної ініціалізації" #: ../../automation/cloud-init.rst:261 msgid "Proxmox IP address: **192.168.0.253/24**" -msgstr "Proxmox IP address: **192.168.0.253/24**" +msgstr "IP-адреса Proxmox: **192.168.0.253/24**" #: ../../automation/cloud-init.rst:425 msgid "Proxmox `Cloud-init-Support`_." @@ -1014,11 +1014,11 @@ msgstr "PyVyOS is a Python library for interacting with VyOS devices via their A #: ../../automation/cloud-init.rst:419 msgid "References" -msgstr "References" +msgstr "Список літератури" #: ../../automation/cloud-init.rst:266 msgid "Remove default dhcp client on first interface, and load other configuration during first boot, using cloud-init." -msgstr "Remove default dhcp client on first interface, and load other configuration during first boot, using cloud-init." +msgstr "Видаліть клієнт dhcp за замовчуванням на першому інтерфейсі та завантажте іншу конфігурацію під час першого завантаження за допомогою cloud-init." #: ../../automation/vyos-pyvyos.rst:140 msgid "Reset Object" @@ -1030,47 +1030,47 @@ msgstr "Run Terraform" #: ../../automation/vyos-ansible.rst:80 msgid "Run ansible" -msgstr "Run ansible" +msgstr "Запустіть ansible" #: ../../automation/command-scripting.rst:50 msgid "Run commands remotely" -msgstr "Run commands remotely" +msgstr "Виконуйте команди віддалено" #: ../../automation/command-scripting.rst:21 msgid "Run configuration commands" -msgstr "Run configuration commands" +msgstr "Виконайте команди конфігурації" #: ../../automation/command-scripting.rst:37 msgid "Run operational commands" -msgstr "Run operational commands" +msgstr "Виконуйте оперативні команди" #: ../../automation/cloud-init.rst:115 msgid "SSH is configured on port 22." -msgstr "SSH is configured on port 22." +msgstr "SSH налаштовано на порт 22." #: ../../automation/vyos-salt.rst:8 msgid "Salt" -msgstr "Salt" +msgstr "сіль" #: ../../automation/vyos-salt.rst:106 msgid "Salt master configuration:" -msgstr "Salt master configuration:" +msgstr "Конфігурація Salt Master:" #: ../../automation/vyos-api.rst:377 msgid "Save a running configuration to a file." -msgstr "Save a running configuration to a file." +msgstr "Збережіть запущену конфігурацію у файл." #: ../../automation/vyos-api.rst:359 msgid "Save a running configuration to the startup configuration. When you don't specify the file when saving, it saves to ``/config/config.boot``." -msgstr "Save a running configuration to the startup configuration. When you don't specify the file when saving, it saves to ``/config/config.boot``." +msgstr "Збережіть поточну конфігурацію в початковій конфігурації. Якщо ви не вказуєте файл під час збереження, він зберігається в ``/config/config.boot``." #: ../../automation/vyos-napalm.rst:99 msgid "Script vyos-napalm.py" -msgstr "Script vyos-napalm.py" +msgstr "Скрипт vyos-napalm.py" #: ../../automation/command-scripting.rst:152 msgid "Scripts are run in alphabetical order. Their names must consist entirely of ASCII upper- and lower-case letters,ASCII digits, ASCII underscores, and ASCII minus-hyphens.No other characters are allowed." -msgstr "Scripts are run in alphabetical order. Their names must consist entirely of ASCII upper- and lower-case letters,ASCII digits, ASCII underscores, and ASCII minus-hyphens.No other characters are allowed." +msgstr "Сценарії виконуються в алфавітному порядку. Їхні назви мають повністю складатися з великих і малих літер ASCII, цифр ASCII, символів підкреслення ASCII і мінус-дефісів ASCII. Інші символи не допускаються." #: ../../automation/vyos-pyvyos.rst:123 msgid "Show Object" @@ -1078,7 +1078,7 @@ msgstr "Show Object" #: ../../automation/command-scripting.rst:52 msgid "Sometimes you simply wan't to execute a bunch of op-mode commands via SSH on a remote VyOS system." -msgstr "Sometimes you simply wan't to execute a bunch of op-mode commands via SSH on a remote VyOS system." +msgstr "Іноді ви просто не хочете виконувати купу команд операційного режиму через SSH на віддаленій системі VyOS." #: ../../automation/command-scripting.rst:52 msgid "Sometimes you simply want to execute a bunch of op-mode commands via SSH on a remote VyOS system." @@ -1117,15 +1117,15 @@ msgstr "Start creating an AWS instance and check the result" #: ../../automation/cloud-init.rst:263 msgid "Storaged used: volume local, which is mounted on directory **/var/lib/vz**, and contains all type of content, including snippets." -msgstr "Storaged used: volume local, which is mounted on directory **/var/lib/vz**, and contains all type of content, including snippets." +msgstr "Використовується: локальний том, який монтується в каталозі **/var/lib/vz** і містить усі типи вмісту, включаючи фрагменти." #: ../../automation/vyos-salt.rst:119 msgid "Structure of /srv/salt:" -msgstr "Structure of /srv/salt:" +msgstr "Структура /srv/salt:" #: ../../automation/vyos-ansible.rst:11 msgid "Structure of files" -msgstr "Structure of files" +msgstr "Структура файлів" #: ../../automation/vyos-terraform.rst:166 #: ../../automation/vyos-terraform.rst:624 @@ -1176,7 +1176,7 @@ msgstr "Structure of files in the standard Terraform project:" #: ../../automation/cloud-init.rst:111 msgid "System Defaults/Fallbacks" -msgstr "System Defaults/Fallbacks" +msgstr "Системні параметри за замовчуванням/запасні варіанти" #: ../../automation/terraform/terraformAWS.rst:51 #: ../../automation/terraform/terraformAZ.rst:23 @@ -1195,7 +1195,7 @@ msgstr "Terraform for VyOS" #: ../../automation/vyos-api.rst:334 msgid "The API pushes every request to a session and commit it. But some of VyOS components like DHCP and PPPoE Servers, IPSec, VXLAN, and other tunnels require full configuration for commit. The endpoint will process multiple commands when you pass them as a list to the ``data`` field." -msgstr "The API pushes every request to a session and commit it. But some of VyOS components like DHCP and PPPoE Servers, IPSec, VXLAN, and other tunnels require full configuration for commit. The endpoint will process multiple commands when you pass them as a list to the ``data`` field." +msgstr "API надсилає кожен запит до сеансу та фіксує його. Але деякі компоненти VyOS, такі як сервери DHCP і PPPoE, IPSec, VXLAN та інші тунелі, вимагають повної конфігурації для фіксації. Кінцева точка оброблятиме кілька команд, якщо ви передасте їх як список у поле ``data``." #: ../../automation/terraform/terraformGoogle.rst:41 msgid "The .JSON file download automaticly after creating and will look like:" @@ -1203,92 +1203,92 @@ msgstr "The .JSON file download automaticly after creating and will look like:" #: ../../automation/command-scripting.rst:197 msgid "The ``/config/scripts/vyos-postconfig-bootup.script`` script is called on boot after the VyOS configuration is fully applied." -msgstr "The ``/config/scripts/vyos-postconfig-bootup.script`` script is called on boot after the VyOS configuration is fully applied." +msgstr "Сценарій ``/config/scripts/vyos-postconfig-bootup.script`` викликається під час завантаження після повного застосування конфігурації VyOS." #: ../../automation/command-scripting.rst:178 msgid "The ``/config/scripts/vyos-preconfig-bootup.script`` script is called on boot before the VyOS configuration during boot process." -msgstr "The ``/config/scripts/vyos-preconfig-bootup.script`` script is called on boot before the VyOS configuration during boot process." +msgstr "Сценарій ``/config/scripts/vyos-preconfig-bootup.script`` викликається під час завантаження перед налаштуванням VyOS під час процесу завантаження." #: ../../automation/vyos-api.rst:256 msgid "The ``/show`` endpoint is to show everything in the operational mode." -msgstr "The ``/show`` endpoint is to show everything in the operational mode." +msgstr "Кінцева точка ``/show`` має показати все в робочому режимі." #: ../../automation/vyos-api.rst:280 msgid "The ``generate`` endpoint run a ``generate`` command." -msgstr "The ``generate`` endpoint run a ``generate`` command." +msgstr "Кінцева точка ``generate`` виконує команду ``generate``." #: ../../automation/vyos-api.rst:163 msgid "The ``reset`` endpoint run a ``reset`` command." -msgstr "The ``reset`` endpoint run a ``reset`` command." +msgstr "Кінцева точка ``reset`` виконує команду ``reset``." #: ../../automation/cloud-init.rst:85 msgid "The commands list produced by the ``show configuration commands`` command on a VyOS router should comply with all the requirements, so it is easy to get a proper commands list by copying it from another router." -msgstr "The commands list produced by the ``show configuration commands`` command on a VyOS router should comply with all the requirements, so it is easy to get a proper commands list by copying it from another router." +msgstr "Список команд, створений командою ``show configuration commands`` на маршрутизаторі VyOS, має відповідати всім вимогам, тому можна легко отримати правильний список команд, скопіювавши його з іншого маршрутизатора." #: ../../automation/cloud-init.rst:89 msgid "The configuration specified in the cloud-config document overwrites default configuration values and values configured via Metadata." -msgstr "The configuration specified in the cloud-config document overwrites default configuration values and values configured via Metadata." +msgstr "Конфігурація, указана в документі cloud-config, замінює значення конфігурації за замовчуванням і значення, налаштовані за допомогою метаданих." #: ../../automation/command-scripting.rst:142 msgid "The default directories where your custom Scripts should be located are:" -msgstr "The default directories where your custom Scripts should be located are:" +msgstr "Каталоги за замовчуванням, у яких мають розташовуватися ваші власні сценарії:" #: ../../automation/command-scripting.rst:184 #: ../../automation/command-scripting.rst:203 msgid "The default file looks like this:" -msgstr "The default file looks like this:" +msgstr "Файл за замовчуванням виглядає так:" #: ../../automation/cloud-init.rst:42 msgid "The easiest way to configure the system via user-data is the Cloud-config syntax described below." -msgstr "The easiest way to configure the system via user-data is the Cloud-config syntax described below." +msgstr "Найпростішим способом налаштування системи за допомогою даних користувача є синтаксис Cloud-config, описаний нижче." #: ../../automation/vyos-api.rst:357 msgid "The endpoint ``/config-file`` is to save or load a configuration." -msgstr "The endpoint ``/config-file`` is to save or load a configuration." +msgstr "Кінцева точка ``/config-file`` призначена для збереження або завантаження конфігурації." #: ../../automation/cloud-init.rst:160 msgid "The following example sets the hostname based on the instance identifier obtained from the EC2 metadata service." -msgstr "The following example sets the hostname based on the instance identifier obtained from the EC2 metadata service." +msgstr "У наступному прикладі ім’я хоста встановлюється на основі ідентифікатора екземпляра, отриманого від служби метаданих EC2." #: ../../automation/cloud-init.rst:140 msgid "The following example shows how to execute commands after the initial configuration." -msgstr "The following example shows how to execute commands after the initial configuration." +msgstr "У наступному прикладі показано, як виконувати команди після початкової конфігурації." #: ../../automation/cloud-init.rst:75 msgid "The key used to designate a VyOS configuration is ``vyos_config_commands``. What follows is VyOS configuration using the \"set-style\" syntax. Both \"set\" and \"delete\" commands are supported." -msgstr "The key used to designate a VyOS configuration is ``vyos_config_commands``. What follows is VyOS configuration using the \"set-style\" syntax. Both \"set\" and \"delete\" commands are supported." +msgstr "Ключ, який використовується для позначення конфігурації VyOS, це ``vyos_config_commands``. Далі йде конфігурація VyOS за допомогою синтаксису "set-style". Підтримуються команди «встановити» і «видалити»." #: ../../automation/cloud-init.rst:201 msgid "The seed.iso file can be attached to the virtual machine. As an example, the method with KVM to attach the ISO as a CD drive follows." -msgstr "The seed.iso file can be attached to the virtual machine. As an example, the method with KVM to attach the ISO as a CD drive follows." +msgstr "Файл seed.iso можна приєднати до віртуальної машини. Як приклад, наведено спосіб за допомогою KVM для приєднання ISO як компакт-диска." #: ../../automation/command-scripting.rst:104 msgid "There is a pitfall when working with configuration scripts. It is tempting to call configuration scripts with \"sudo\" (i.e., temporary root permissions), because that's the common way on most Linux platforms to call system commands." -msgstr "There is a pitfall when working with configuration scripts. It is tempting to call configuration scripts with \"sudo\" (i.e., temporary root permissions), because that's the common way on most Linux platforms to call system commands." +msgstr "Під час роботи зі скриптами конфігурації є підводний камінь. Виникає спокуса викликати сценарії конфігурації за допомогою "sudo" (тобто тимчасових кореневих прав), оскільки це поширений спосіб виклику системних команд на більшості платформ Linux." #: ../../automation/cloud-init.rst:113 msgid "These are the VyOS defaults and fallbacks." -msgstr "These are the VyOS defaults and fallbacks." +msgstr "Це стандартні та резервні параметри VyOS." #: ../../_include/need_improvement.txt:11 msgid "This section needs improvements, examples and explanations." -msgstr "This section needs improvements, examples and explanations." +msgstr "Цей розділ потребує вдосконалень, прикладів і пояснень." #: ../../automation/command-scripting.rst:118 msgid "This will result in the following error message: ``Set failed`` If this happens, a reboot is required to be able to edit the config manually again." -msgstr "This will result in the following error message: ``Set failed`` If this happens, a reboot is required to be able to edit the config manually again." +msgstr "Це призведе до такого повідомлення про помилку: ``Налаштування не вдалось`` Якщо це станеться, потрібно перезавантажити систему, щоб мати можливість знову редагувати конфігурацію вручну." #: ../../automation/vyos-api.rst:393 msgid "To Load a configuration file." -msgstr "To Load a configuration file." +msgstr "Щоб завантажити файл конфігурації." #: ../../automation/vyos-api.rst:218 msgid "To add or delete an image, use the ``/image`` endpoint." -msgstr "To add or delete an image, use the ``/image`` endpoint." +msgstr "Щоб додати або видалити зображення, використовуйте кінцеву точку ``/image``." #: ../../automation/command-scripting.rst:121 msgid "To avoid these problems, the proper way is to call a script with the ``vyattacfg`` group, e.g., by using the ``sg`` (switch group) command:" -msgstr "To avoid these problems, the proper way is to call a script with the ``vyattacfg`` group, e.g., by using the ``sg`` (switch group) command:" +msgstr "Щоб уникнути цих проблем, правильним способом є виклик сценарію з групою ``vyattacfg``, наприклад, за допомогою команди ``sg`` (перемикання групи):" #: ../../automation/vyos-api.rst:128 msgid "To check existence of a configuration path, use the ``exists`` operation." @@ -1296,11 +1296,11 @@ msgstr "To check existence of a configuration path, use the ``exists`` operation #: ../../automation/vyos-api.rst:48 msgid "To get the whole configuration, pass an empty list to the ``path`` field" -msgstr "To get the whole configuration, pass an empty list to the ``path`` field" +msgstr "Щоб отримати повну конфігурацію, передайте порожній список у поле ``path``" #: ../../automation/command-scripting.rst:11 msgid "To include VyOS specific functions and aliases you need to ``source /opt/vyatta/etc/functions/script-template`` files at the top of your script." -msgstr "To include VyOS specific functions and aliases you need to ``source /opt/vyatta/etc/functions/script-template`` files at the top of your script." +msgstr "Щоб включити специфічні функції та псевдоніми VyOS, вам потрібно розмістити файли /opt/vyatta/etc/functions/script-template`` у верхній частині сценарію." #: ../../automation/vyos-api.rst:181 msgid "To initiate a reboot use the ``reboot`` endpoint." @@ -1308,11 +1308,11 @@ msgstr "To initiate a reboot use the ``reboot`` endpoint." #: ../../automation/command-scripting.rst:128 msgid "To make sure that a script is not accidentally called without the ``vyattacfg`` group, the script can be safeguarded like this:" -msgstr "To make sure that a script is not accidentally called without the ``vyattacfg`` group, the script can be safeguarded like this:" +msgstr "Щоб переконатися, що сценарій випадково не викликається без групи ``vyattacfg``, сценарій можна захистити таким чином:" #: ../../automation/vyos-api.rst:79 msgid "To only get a part of the configuration, for example ``system syslog``." -msgstr "To only get a part of the configuration, for example ``system syslog``." +msgstr "Щоб отримати лише частину конфігурації, наприклад ``system syslog``." #: ../../automation/vyos-api.rst:199 msgid "To power off the system use the ``poweroff`` endpoint." @@ -1322,7 +1322,7 @@ msgstr "To power off the system use the ``poweroff`` endpoint." #: ../../automation/terraform/terraformAWS.rst:264 #: ../../automation/terraform/terraformGoogle.rst:342 msgid "Troubleshooting" -msgstr "Troubleshooting" +msgstr "Вирішення проблем" #: ../../automation/terraform/terraformAWS.rst:91 #: ../../automation/terraform/terraformAZ.rst:66 @@ -1333,11 +1333,11 @@ msgstr "Type the commands on your Terrafom instance:" #: ../../automation/command-scripting.rst:39 msgid "Unlike a normal configuration session, all operational commands must be prepended with ``run``, even if you haven't created a session with configure." -msgstr "Unlike a normal configuration session, all operational commands must be prepended with ``run``, even if you haven't created a session with configure." +msgstr "На відміну від звичайного сеансу конфігурації, перед усіма робочими командами має бути ``виконати``, навіть якщо ви не створили сеанс за допомогою configure." #: ../../automation/cloud-init.rst:34 msgid "User-data" -msgstr "User-data" +msgstr "Дані користувача" #: ../../automation/cloud-init.rst:28 msgid "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." @@ -1345,7 +1345,7 @@ msgstr "User-data - User-data is specified by the user. This config source offer #: ../../automation/cloud-init.rst:28 msgid "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." -msgstr "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." +msgstr "Дані користувача - дані користувача вказуються користувачем. Це джерело конфігурації пропонує можливість вставляти будь-які команди конфігурації CLI в конфігурацію перед першим завантаженням." #: ../../automation/vyos-pyvyos.rst:43 msgid "Using API Response Class" @@ -1361,15 +1361,15 @@ msgstr "Using pyvyos" #: ../../automation/cloud-init.rst:376 msgid "VM ID: in this example, VM ID used is 555." -msgstr "VM ID: in this example, VM ID used is 555." +msgstr "Ідентифікатор віртуальної машини: у цьому прикладі використовується ідентифікатор віртуальної машини 555." #: ../../automation/cloud-init.rst:384 msgid "VM Resources: these parameters can be modified as needed." -msgstr "VM Resources: these parameters can be modified as needed." +msgstr "Ресурси VM: ці параметри можна змінювати за потреби." #: ../../automation/cloud-init.rst:378 msgid "VM Storage: ``local`` volume is used." -msgstr "VM Storage: ``local`` volume is used." +msgstr "Сховище VM: використовується ``локальний`` том." #: ../../automation/vyos-terraform.rst:991 msgid "Vsphere" @@ -1377,11 +1377,11 @@ msgstr "Vsphere" #: ../../automation/vyos-api.rst:7 msgid "VyOS API" -msgstr "VyOS API" +msgstr "API VyOS" #: ../../automation/index.rst:3 msgid "VyOS Automation" -msgstr "VyOS Automation" +msgstr "Автоматизація VyOS" #: ../../automation/terraform/index.rst:3 msgid "VyOS Terraform" @@ -1393,27 +1393,27 @@ msgstr "VyOS `cloud-init-docs`_." #: ../../automation/cloud-init.rst:7 msgid "VyOS cloud-init" -msgstr "VyOS cloud-init" +msgstr "Хмарна ініціалізація VyOS" #: ../../automation/cloud-init.rst:249 msgid "VyOS configuration commands are defined in user-data file." -msgstr "VyOS configuration commands are defined in user-data file." +msgstr "Команди конфігурації VyOS визначені у файлі даних користувача." #: ../../automation/command-scripting.rst:140 msgid "VyOS has the ability to run custom scripts before and after each commit" -msgstr "VyOS has the ability to run custom scripts before and after each commit" +msgstr "VyOS має можливість запускати власні сценарії до і після кожного коміту" #: ../../automation/cloud-init.rst:18 msgid "VyOS support three types of config sources." -msgstr "VyOS support three types of config sources." +msgstr "VyOS підтримує три типи джерел конфігурації." #: ../../automation/vyos-ansible.rst:8 msgid "VyOS supports configuration via ansible. Need to install ``ansible`` and ``python3-paramiko`` module" -msgstr "VyOS supports configuration via ansible. Need to install ``ansible`` and ``python3-paramiko`` module" +msgstr "VyOS підтримує налаштування через ansible. Необхідно встановити модуль ``ansible`` і ``python3-paramiko``" #: ../../automation/vyos-netmiko.rst:8 msgid "VyOS supports configuration via netmiko_. It requires to install ``python3-netmiko`` module." -msgstr "VyOS supports configuration via netmiko_. It requires to install ``python3-netmiko`` module." +msgstr "VyOS підтримує налаштування через netmiko_. Для цього потрібно встановити модуль ``python3-netmiko``." #: ../../automation/vyos-terraform.rst:8 msgid "VyOS supports develop infrastructia via Terraform and provisioning via ansible. Need to install ``Terraform``" @@ -1429,35 +1429,35 @@ msgstr "VyOS supports development infrastructure via Terraform and provisioning #: ../../automation/command-scripting.rst:8 msgid "VyOS supports executing configuration and operational commands non-interactively from shell scripts." -msgstr "VyOS supports executing configuration and operational commands non-interactively from shell scripts." +msgstr "VyOS підтримує виконання конфігураційних і операційних команд неінтерактивно зі сценаріїв оболонки." #: ../../automation/vyos-salt.rst:10 msgid "VyOS supports op-mode and configuration via salt_." -msgstr "VyOS supports op-mode and configuration via salt_." +msgstr "VyOS підтримує робочий режим і налаштування через salt_." #: ../../automation/vyos-napalm.rst:8 msgid "VyOS supports some napalm_ functions for configuration and op-mode. It requires more tests." -msgstr "VyOS supports some napalm_ functions for configuration and op-mode. It requires more tests." +msgstr "VyOS підтримує деякі функції napalm_ для налаштування та робочого режиму. Це вимагає додаткових тестів." #: ../../automation/cloud-init.rst:126 msgid "VyOS supports the execution of operational commands and linux commands at initial boot. This is accomplished using ``write_files`` to certain files in the /opt/vyatta/etc/config/scripts directory. Commands specified in opt/vyatta/etc/config/scripts/vyos-preconfig-bootup.script are executed prior to configuration. The /opt/vyatta/etc/config/scripts/vyos-postconfig-bootup.script file contains commands to be executed after configuration. In both cases, commands are executed as the root user." -msgstr "VyOS supports the execution of operational commands and linux commands at initial boot. This is accomplished using ``write_files`` to certain files in the /opt/vyatta/etc/config/scripts directory. Commands specified in opt/vyatta/etc/config/scripts/vyos-preconfig-bootup.script are executed prior to configuration. The /opt/vyatta/etc/config/scripts/vyos-postconfig-bootup.script file contains commands to be executed after configuration. In both cases, commands are executed as the root user." +msgstr "VyOS підтримує виконання операційних команд і команд Linux під час початкового завантаження. Це досягається за допомогою ``write_files`` до певних файлів у каталозі /opt/vyatta/etc/config/scripts. Команди, указані в opt/vyatta/etc/config/scripts/vyos-preconfig-bootup.script, виконуються до налаштування. Файл /opt/vyatta/etc/config/scripts/vyos-postconfig-bootup.script містить команди, які потрібно виконати після налаштування. В обох випадках команди виконуються від імені користувача root." #: ../../automation/vyos-napalm.rst:87 msgid "We need 2 files, commands.conf and script itself." -msgstr "We need 2 files, commands.conf and script itself." +msgstr "Нам потрібні 2 файли, commands.conf і сам скрипт." #: ../../automation/cloud-init.rst:188 msgid "While other methods exist, the most straightforward method for using the NoCloud data source is creating a seed ISO and attaching it to the virtual machine as a CD drive. The volume must be formatted as a vfat or ISO 9660 file system with the label \"cidata\" or \"CIDATA\"." -msgstr "While other methods exist, the most straightforward method for using the NoCloud data source is creating a seed ISO and attaching it to the virtual machine as a CD drive. The volume must be formatted as a vfat or ISO 9660 file system with the label \"cidata\" or \"CIDATA\"." +msgstr "Хоча існують інші методи, найпростішим методом використання джерела даних NoCloud є створення початкового ISO та підключення його до віртуальної машини як компакт-диска. Том має бути відформатований як файлова система vfat або ISO 9660 із міткою «cidata» або «CIDATA»." #: ../../automation/command-scripting.rst:63 msgid "Will return:" -msgstr "Will return:" +msgstr "Повернеться:" #: ../../automation/vyos-api.rst:46 msgid "With the ``retrieve`` endpoint you get parts or the whole configuration." -msgstr "With the ``retrieve`` endpoint you get parts or the whole configuration." +msgstr "За допомогою кінцевої точки ``retrieve`` ви отримуєте частини або всю конфігурацію." #: ../../automation/terraform/terraformAWS.rst:8 msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." @@ -1489,11 +1489,11 @@ msgstr "With the help of terraforms, you can quickly deploy Vyos-based infrastru #: ../../automation/vyos-salt.rst:12 msgid "Without proxy it requires VyOS minion configuration and support op-mode data:" -msgstr "Without proxy it requires VyOS minion configuration and support op-mode data:" +msgstr "Без проксі-сервера потрібна конфігурація допоміжного VyOS і підтримка даних операційного режиму:" #: ../../automation/vyos-salt.rst:12 msgid "Without proxy it requires VyOS minion configuration and supports op-mode data:" -msgstr "Without proxy it requires VyOS minion configuration and supports op-mode data:" +msgstr "Без проксі-сервера він вимагає конфігурації допоміжного VyOS і підтримує дані в робочому режимі:" #: ../../automation/vyos-pyvyos.rst:17 msgid "You can install PyVyOS using pip:" @@ -1505,31 +1505,31 @@ msgstr "You can install pyvyos using pip:" #: ../../automation/vyos-api.rst:300 msgid "You can pass a ``set``, ``delete`` or ``comment`` command to the ``/configure`` endpoint." -msgstr "You can pass a ``set``, ``delete`` or ``comment`` command to the ``/configure`` endpoint." +msgstr "Ви можете передати команду ``set``, ``delete`` або ``comment`` до кінцевої точки ``/configure``." #: ../../automation/vyos-api.rst:319 msgid "``delete`` a single command" -msgstr "``delete`` a single command" +msgstr "``видалити`` одну команду" #: ../../automation/cloud-init.rst:386 msgid "``seed.iso`` was previously created in directory ``/tmp/``. It's necessary to move it to ``/var/lib/vz/template/iso``" -msgstr "``seed.iso`` was previously created in directory ``/tmp/``. It's necessary to move it to ``/var/lib/vz/template/iso``" +msgstr "``seed.iso`` було раніше створено в каталозі ``/tmp/``. Його необхідно перемістити в ``/var/lib/vz/template/iso``" #: ../../automation/vyos-api.rst:303 msgid "``set`` a single command" -msgstr "``set`` a single command" +msgstr "``встановити`` одну команду" #: ../../automation/cloud-init.rst:56 msgid "``vyos_userdata`` - the module accepts a list of CLI configuration commands in a ``vyos_config_commands`` section, which gives an easy way to configure the system during deployment." -msgstr "``vyos_userdata`` - the module accepts a list of CLI configuration commands in a ``vyos_config_commands`` section, which gives an easy way to configure the system during deployment." +msgstr "``vyos_userdata`` - модуль приймає список команд конфігурації CLI в розділі ``vyos_config_commands``, що дає простий спосіб налаштувати систему під час розгортання." #: ../../automation/cloud-init.rst:116 msgid "``vyos``/``vyos`` credentials if no others specified by data source." -msgstr "``vyos``/``vyos`` credentials if no others specified by data source." +msgstr "Облікові дані ``vyos''/``vyos'', якщо джерело даних не вказує інші." #: ../../automation/cloud-init.rst:51 msgid "``write_files`` - this module allows to insert any files into the filesystem before the first boot, for example, pre-generated encryption keys, certificates, or even a whole ``config.boot`` file. The format is described in the cloudinit documentation `Cloud-init-write_files`_." -msgstr "``write_files`` - this module allows to insert any files into the filesystem before the first boot, for example, pre-generated encryption keys, certificates, or even a whole ``config.boot`` file. The format is described in the cloudinit documentation `Cloud-init-write_files`_." +msgstr "``write_files`` - цей модуль дозволяє вставляти будь-які файли у файлову систему перед першим завантаженням, наприклад, попередньо згенеровані ключі шифрування, сертифікати або навіть цілий файл ``config.boot``. Формат описано в документації cloudinit `Cloud-init-write_files`_." #: ../../automation/vyos-pyvyos.rst:12 msgid "`pyvyos Documentation on Read the Docs `_ provides detailed instructions on the installation, configuration, and operation of the pyvyos library." @@ -1545,7 +1545,7 @@ msgstr "`pyvyos on PyPI `_ for easy installati #: ../../automation/vyos-api.rst:220 msgid "add an image" -msgstr "add an image" +msgstr "Додайте зображення" #: ../../automation/terraform/terraformAWS.rst:560 msgid "all" @@ -1561,11 +1561,11 @@ msgstr "ansible.cfg" #: ../../automation/cloud-init.rst:62 msgid "cloud-config file format" -msgstr "cloud-config file format" +msgstr "формат файлу хмарної конфігурації" #: ../../automation/cloud-init.rst:232 msgid "cloud-init logs to /var/log/cloud-init.log. This file can be helpful in determining why the configuration varies from what you expect. You can fetch the most important data filtering output for ``vyos`` keyword:" -msgstr "cloud-init logs to /var/log/cloud-init.log. This file can be helpful in determining why the configuration varies from what you expect. You can fetch the most important data filtering output for ``vyos`` keyword:" +msgstr "cloud-init веде журнал до /var/log/cloud-init.log. Цей файл може допомогти визначити, чому конфігурація відрізняється від вашої очікуваної. Ви можете отримати найважливіші результати фільтрації даних за ключовим словом ``vyos``:" #: ../../automation/vyos-salt.rst:153 msgid "commands.txt" @@ -1573,7 +1573,7 @@ msgstr "commands.txt" #: ../../automation/vyos-api.rst:237 msgid "delete an image, for example ``1.3-rolling-202006070117``" -msgstr "delete an image, for example ``1.3-rolling-202006070117``" +msgstr "видалити зображення, наприклад ``1.3-rolling-202006070117``" #: ../../automation/terraform/terraformGoogle.rst:19 msgid "google cloud" @@ -1588,15 +1588,15 @@ msgstr "group_vars/all" #: ../../automation/vyos-ansible.rst:42 msgid "hosts" -msgstr "hosts" +msgstr "господарі" #: ../../automation/vyos-ansible.rst:35 msgid "id_rsa_docker.pub. Needs to declare only public key exactly." -msgstr "id_rsa_docker.pub. Needs to declare only public key exactly." +msgstr "id_rsa_docker.pub. Необхідно точно оголосити лише відкритий ключ." #: ../../automation/vyos-api.rst:106 msgid "if you just want the Value of a multi-valued node, use the ``returnValues`` operation." -msgstr "if you just want the Value of a multi-valued node, use the ``returnValues`` operation." +msgstr "якщо вам просто потрібно значення багатозначного вузла, скористайтеся операцією ``returnValues``." #: ../../automation/terraform/terraformAWS.rst:495 #: ../../automation/terraform/terraformAZ.rst:438 @@ -1636,12 +1636,12 @@ msgstr "pyvyos is a Python library designed for interacting with VyOS devices th #: ../../automation/vyos-salt.rst:141 msgid "r11-proxy.sls Includes parameters for connecting to salt-proxy minion" -msgstr "r11-proxy.sls Includes parameters for connecting to salt-proxy minion" +msgstr "r11-proxy.sls Містить параметри для підключення до міньйона salt-proxy" #: ../../automation/index.rst:7 #: ../../automation/terraform/index.rst:7 msgid "startup scripts" -msgstr "startup scripts" +msgstr "скрипти запуску" #: ../../automation/terraform/terraformAWS.rst:452 #: ../../automation/terraform/terraformAZ.rst:405 diff --git a/docs/_locale/uk/cli.pot b/docs/_locale/uk/cli.pot index 270a6758..f264adae 100644 --- a/docs/_locale/uk/cli.pot +++ b/docs/_locale/uk/cli.pot @@ -10,127 +10,127 @@ msgstr "" #: ../../cli.rst:115 msgid "**Active** or **running configuration** is the system configuration that is loaded and currently active (used by VyOS). Any change in the configuration will have to be committed to belong to the active/running configuration." -msgstr "**Active** or **running configuration** is the system configuration that is loaded and currently active (used by VyOS). Any change in the configuration will have to be committed to belong to the active/running configuration." +msgstr "**Активна** або **запущена конфігурація** – це конфігурація системи, яка завантажена та наразі активна (використовується VyOS). Будь-яка зміна в конфігурації повинна бути закріплена для належності до активної/працюючої конфігурації." #: ../../cli.rst:382 msgid "**Example:**" -msgstr "**Example:**" +msgstr "**Приклад:**" #: ../../cli.rst:126 msgid "**Saved configuration** is the one saved to a file using the :cfgcmd:`save` command. It allows you to keep safe a configuration for future uses. There can be multiple configuration files. The default or \"boot\" configuration is saved and loaded from the file ``/config/config.boot``." -msgstr "**Saved configuration** is the one saved to a file using the :cfgcmd:`save` command. It allows you to keep safe a configuration for future uses. There can be multiple configuration files. The default or \"boot\" configuration is saved and loaded from the file ``/config/config.boot``." +msgstr "**Збережена конфігурація** – це конфігурація, збережена у файл за допомогою команди :cfgcmd:`save`. Це дозволяє зберегти конфігурацію для подальшого використання. Файлів конфігурації може бути декілька. Стандартна або "завантажувальна" конфігурація зберігається та завантажується з файлу ``/config/config.boot``." #: ../../cli.rst:120 msgid "**Working configuration** is the one that is currently being modified in configuration mode. Changes made to the working configuration do not go into effect until the changes are committed with the :cfgcmd:`commit` command. At which time the working configuration will become the active or running configuration." -msgstr "**Working configuration** is the one that is currently being modified in configuration mode. Changes made to the working configuration do not go into effect until the changes are committed with the :cfgcmd:`commit` command. At which time the working configuration will become the active or running configuration." +msgstr "**Робоча конфігурація** – це конфігурація, яка зараз змінюється в режимі конфігурації. Зміни, внесені до робочої конфігурації, не набудуть чинності, доки зміни не будуть зафіксовані за допомогою команди :cfgcmd:`commit`. У цей час робоча конфігурація стане активною або запущеною конфігурацією." #: ../../cli.rst:113 msgid "A VyOS system has three major types of configurations:" -msgstr "A VyOS system has three major types of configurations:" +msgstr "Система VyOS має три основні типи конфігурацій:" #: ../../cli.rst:576 msgid "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit." -msgstr "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit." +msgstr "Перезавантаження через те, що ви не ввели ``confirm``, не обов’язково переведе вас до *збереженої конфігурації*, а до точки перед невдалим комітом." #: ../../cli.rst:690 msgid "Access opmode from config mode" -msgstr "Access opmode from config mode" +msgstr "Доступ до opmode з режиму конфігурації" #: ../../cli.rst:697 msgid "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode." -msgstr "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode." +msgstr "Доступ до цих команд можливий за допомогою команди ``run [command]``. За допомогою цієї команди ви матимете доступ до всього, доступного з робочого режиму." #: ../../cli.rst:651 msgid "Add comment as an annotation to a configuration node." -msgstr "Add comment as an annotation to a configuration node." +msgstr "Додайте коментар як анотацію до вузла конфігурації." #: ../../cli.rst:539 msgid "All changes in the working config will thus be lost." -msgstr "All changes in the working config will thus be lost." +msgstr "Таким чином, усі зміни в робочій конфігурації буде втрачено." #: ../../cli.rst:355 msgid "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them." -msgstr "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them." +msgstr "Усі команди, що виконуються тут, відносяться до рівня конфігурації, який ви ввели. Ви можете робити все з верхнього рівня, але команди будуть досить довгими, якщо їх вводити вручну." #: ../../cli.rst:676 msgid "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show
`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment." -msgstr "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show
`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment." +msgstr "Важливо зауважити, що оскільки коментар додається вгорі розділу, він не відображатиметься, якщо ``показати
`` використовується команда. У наведеному вище прикладі команда `show firewall` повертатиметься після рядка ``firewall {``, приховуючи коментар." #: ../../cli.rst:493 msgid "Any change you do on the configuration, will not take effect until committed using the :cfgcmd:`commit` command in configuration mode." -msgstr "Any change you do on the configuration, will not take effect until committed using the :cfgcmd:`commit` command in configuration mode." +msgstr "Будь-яка зміна, яку ви вносите в конфігурацію, не набуде чинності, доки не буде зафіксовано за допомогою команди :cfgcmd:`commit` у режимі конфігурації." #: ../../cli.rst:221 msgid "Both these ``show`` commands should be executed when in operational mode, they do not work directly in configuration mode. There is a special way on how to :ref:`run_opmode_from_config_mode`." -msgstr "Both these ``show`` commands should be executed when in operational mode, they do not work directly in configuration mode. There is a special way on how to :ref:`run_opmode_from_config_mode`." +msgstr "Обидві ці команди ``show`` слід виконувати в робочому режимі, вони не працюють безпосередньо в режимі конфігурації. Існує спеціальний спосіб :ref:`запустити_opmode_from_config_mode`." #: ../../cli.rst:193 msgid "By default, the configuration is displayed in a hierarchy like the above example, this is only one of the possible ways to display the configuration. When the configuration is generated and the device is configured, changes are added through a collection of :cfgcmd:`set` and :cfgcmd:`delete` commands." -msgstr "By default, the configuration is displayed in a hierarchy like the above example, this is only one of the possible ways to display the configuration. When the configuration is generated and the device is configured, changes are added through a collection of :cfgcmd:`set` and :cfgcmd:`delete` commands." +msgstr "За замовчуванням конфігурація відображається в ієрархії, як у прикладі вище, це лише один із можливих способів відображення конфігурації. Після створення конфігурації та налаштування пристрою зміни додаються за допомогою набору команд :cfgcmd:`set` і :cfgcmd:`delete`." #: ../../cli.rst:5 msgid "Command Line Interface" -msgstr "Command Line Interface" +msgstr "Інтерфейс командного рядка" #: ../../cli.rst:701 msgid "Command completion and syntax help with ``?`` and ``[tab]`` will also work." -msgstr "Command completion and syntax help with ``?`` and ``[tab]`` will also work." +msgstr "Доповнення команд і синтаксична довідка з ``?`` і ``[tab]`` також працюватимуть." #: ../../cli.rst:754 msgid "Compare configurations" -msgstr "Compare configurations" +msgstr "Порівняйте конфігурації" #: ../../cli.rst:75 msgid "Configuration Mode" -msgstr "Configuration Mode" +msgstr "Режим конфігурації" #: ../../cli.rst:102 msgid "Configuration Overview" -msgstr "Configuration Overview" +msgstr "Огляд конфігурації" #: ../../cli.rst:457 msgid "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered." -msgstr "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered." +msgstr "Команди конфігурації зведені з дерева в команди «одного рядка», показані в :opcmd:`показати команди конфігурації` з режиму роботи. Команди відносяться до рівня, на якому вони виконуються, і вся зайва інформація з поточного рівня видаляється з введеної команди." #: ../../cli.rst:535 msgid "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used." -msgstr "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used." +msgstr "Неможливо вийти з режиму конфігурації, поки існують незафіксовані зміни. Щоб вийти з режиму налаштування без застосування змін, необхідно використати команду :cfgcmd:`exit discard`." #: ../../cli.rst:583 msgid "Copy a configuration element." -msgstr "Copy a configuration element." +msgstr "Скопіюйте елемент конфігурації." #: ../../cli.rst:447 msgid "Editing the configuration" -msgstr "Editing the configuration" +msgstr "Редагування конфігурації" #: ../../cli.rst:662 msgid "Example:" -msgstr "Example:" +msgstr "приклад:" #: ../../cli.rst:30 msgid "Example showing possible show commands:" -msgstr "Example showing possible show commands:" +msgstr "Приклад, що показує можливі команди шоу:" #: ../../cli.rst:433 msgid "Exiting from the configuration mode is done via the :cfgcmd:`exit` command from the top level, executing :cfgcmd:`exit` from within a sub-level takes you back to the top level." -msgstr "Exiting from the configuration mode is done via the :cfgcmd:`exit` command from the top level, executing :cfgcmd:`exit` from within a sub-level takes you back to the top level." +msgstr "Вихід із режиму налаштування здійснюється за допомогою команди :cfgcmd:`exit` з верхнього рівня, виконання :cfgcmd:`exit` з підрівня повертає вас на верхній рівень." #: ../../cli.rst:21 msgid "For example typing ``sh`` followed by the ``TAB`` key will complete to ``show``. Pressing ``TAB`` a second time will display the possible sub-commands of the ``show`` command." -msgstr "For example typing ``sh`` followed by the ``TAB`` key will complete to ``show``. Pressing ``TAB`` a second time will display the possible sub-commands of the ``show`` command." +msgstr "Наприклад, введення ``sh`` і клавіша ``TAB`` призведе до ``show``. Повторне натискання ``TAB`` відобразить можливі підкоманди команди ``show``." #: ../../cli.rst:201 msgid "Get a collection of all the set commands required which led to the running configuration." -msgstr "Get a collection of all the set commands required which led to the running configuration." +msgstr "Отримайте збірку всіх необхідних команд, які призвели до запущеної конфігурації." #: ../../cli.rst:933 msgid "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config." -msgstr "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config." +msgstr "Якщо ви підключені віддалено, ви втратите з’єднання. Ви можете спочатку скопіювати конфігурацію, відредагувати її, щоб забезпечити з’єднання, і завантажити відредаговану конфігурацію." #: ../../cli.rst:919 msgid "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:" -msgstr "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:" +msgstr "Якщо ви хочете повністю видалити конфігурацію та відновити стандартну, ви можете ввести таку команду в режимі конфігурації:" #: ../../cli.rst:413 msgid "It is also possible to display all :cfgcmd:`set` commands within configuration mode using :cfgcmd:`show | commands`" @@ -138,95 +138,95 @@ msgstr "It is also possible to display all :cfgcmd:`set` commands within configu #: ../../cli.rst:413 msgid "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`" -msgstr "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`" +msgstr "Також можна відобразити всі команди `set` в режимі конфігурації за допомогою :cfgcmd:`show | команди`" #: ../../cli.rst:723 msgid "Local Archive" -msgstr "Local Archive" +msgstr "Місцевий архів" #: ../../cli.rst:714 msgid "Managing configurations" -msgstr "Managing configurations" +msgstr "Керування конфігураціями" #: ../../cli.rst:627 msgid "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters." -msgstr "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters." +msgstr "Зауважте, що команда ``show`` поважає ваш рівень редагування, і на цьому рівні ви можете переглядати змінений набір правил брандмауера лише за допомогою ``show`` без параметрів." #: ../../cli.rst:11 msgid "Operational Mode" -msgstr "Operational Mode" +msgstr "Режим роботи" #: ../../cli.rst:13 msgid "Operational mode allows for commands to perform operational system tasks and view system and service status, while configuration mode allows for the modification of system configuration." -msgstr "Operational mode allows for commands to perform operational system tasks and view system and service status, while configuration mode allows for the modification of system configuration." +msgstr "Оперативний режим дозволяє командам виконувати завдання операційної системи та переглядати стан системи та служби, а режим конфігурації дозволяє змінювати конфігурацію системи." #: ../../cli.rst:85 msgid "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``." -msgstr "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``." +msgstr "Підказка змінюється з ``$`` на ``#``. Щоб вийти з режиму налаштування, введіть ``вихід``." #: ../../cli.rst:850 msgid "Remote Archive" -msgstr "Remote Archive" +msgstr "Віддалений архів" #: ../../cli.rst:616 msgid "Rename a configuration element." -msgstr "Rename a configuration element." +msgstr "Перейменувати елемент конфігурації." #: ../../cli.rst:917 msgid "Restore Default" -msgstr "Restore Default" +msgstr "Відновити значення за замовчуванням" #: ../../cli.rst:725 msgid "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong." -msgstr "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong." +msgstr "Ревізії зберігаються на диску. Ви можете переглядати, порівнювати та повертати їх до будь-яких попередніх версій, якщо щось піде не так." #: ../../cli.rst:828 msgid "Rollback Changes" -msgstr "Rollback Changes" +msgstr "Відкат змін" #: ../../cli.rst:835 msgid "Rollback to revision N (currently requires reboot)" -msgstr "Rollback to revision N (currently requires reboot)" +msgstr "Відкат до версії N (наразі вимагає перезавантаження)" #: ../../cli.rst:884 msgid "Saving and loading manually" -msgstr "Saving and loading manually" +msgstr "Збереження та завантаження вручну" #: ../../cli.rst:94 msgid "See the configuration section of this document for more information on configuration mode." -msgstr "See the configuration section of this document for more information on configuration mode." +msgstr "Дивіться розділ конфігурації цього документа, щоб отримати додаткові відомості про режим конфігурації." #: ../../cli.rst:133 msgid "Seeing and navigating the configuration" -msgstr "Seeing and navigating the configuration" +msgstr "Перегляд конфігурації та навігація" #: ../../cli.rst:810 msgid "Show commit revision difference." -msgstr "Show commit revision difference." +msgstr "Показати різницю в редакції фіксації." #: ../../cli.rst:861 msgid "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`" -msgstr "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`" +msgstr "Укажіть віддалене розташування архіву комітів як будь-яке з наведених нижче :abbr:`URI (уніфікований ідентифікатор ресурсу)`" #: ../../cli.rst:111 msgid "Terminology" -msgstr "Terminology" +msgstr "Термінологія" #: ../../cli.rst:17 msgid "The CLI provides a built-in help system. In the CLI the ``?`` key may be used to display available commands. The ``TAB`` key can be used to auto-complete commands and will present the help system upon a conflict or unknown value." -msgstr "The CLI provides a built-in help system. In the CLI the ``?`` key may be used to display available commands. The ``TAB`` key can be used to auto-complete commands and will present the help system upon a conflict or unknown value." +msgstr "CLI забезпечує вбудовану довідкову систему. У CLI можна використовувати клавішу ``?`` для відображення доступних команд. Клавіша ``TAB`` може використовуватися для автоматичного завершення команд і відображатиме довідкову систему у випадку конфлікту або невідомого значення." #: ../../cli.rst:7 msgid "The VyOS :abbr:`CLI (Command-Line Interface)` comprises an operational and a configuration mode." -msgstr "The VyOS :abbr:`CLI (Command-Line Interface)` comprises an operational and a configuration mode." +msgstr "VyOS :abbr:`CLI (інтерфейс командного рядка)` містить робочий і конфігураційний режими." #: ../../cli.rst:378 msgid "The :cfgcmd:`show` command within configuration mode will show the working configuration indicating line changes with ``+`` for additions, ``>`` for replacements and ``-`` for deletions." -msgstr "The :cfgcmd:`show` command within configuration mode will show the working configuration indicating line changes with ``+`` for additions, ``>`` for replacements and ``-`` for deletions." +msgstr "Команда :cfgcmd:`show` у режимі конфігурації покаже робочу конфігурацію, вказуючи на зміни рядка за допомогою ``+`` для додавання, ``>`` для заміни та ``-`` для видалення." #: ../../cli.rst:653 msgid "The ``comment`` command allows you to insert a comment above the ```` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes." -msgstr "The ``comment`` command allows you to insert a comment above the ```` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes." +msgstr "Команда ``comment`` дозволяє вставити коментар над `` `` розділ конфігурації. Коли відображаються, коментарі обмежуються ``/*`` і ``*/`` як розділювачі відкриття/закриття. Коментарі потрібно зафіксувати, як і інші зміни конфігурації." #: ../../cli.rst:653 msgid "The ``comment`` command allows you to insert a comment above the ```` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes." @@ -234,95 +234,95 @@ msgstr "The ``comment`` command allows you to insert a comment above the ``:@/``" -msgstr "``ftp://:@/``" +msgstr "``ftp:// : @ / ``" #: ../../cli.rst:870 msgid "``git+https://:@/``" @@ -438,32 +438,32 @@ msgstr "``https://:@:/``" #: ../../cli.rst:71 msgid "``left-arrow`` and ``right-arrow`` can be used to scroll left or right in the event that the output has lines which exceed the terminal size." -msgstr "``left-arrow`` and ``right-arrow`` can be used to scroll left or right in the event that the output has lines which exceed the terminal size." +msgstr "``стрілка вліво`` і ``стрілка вправо`` можна використовувати для прокручування вліво або вправо у випадку, якщо вихідні дані містять рядки, які перевищують розмір терміналу." #: ../../cli.rst:65 msgid "``q`` key can be used to cancel output" -msgstr "``q`` key can be used to cancel output" +msgstr "Для скасування виводу можна використовувати клавішу ``q``" #: ../../cli.rst:68 msgid "``return`` will scroll down one line" -msgstr "``return`` will scroll down one line" +msgstr "``return`` прокрутить на один рядок вниз" #: ../../cli.rst:868 msgid "``scp://:@:/``" -msgstr "``scp://:@:/``" +msgstr "``scp:// : @ :/ ``" #: ../../cli.rst:867 msgid "``sftp://:@/``" -msgstr "``sftp://:@/``" +msgstr "``sftp:// : @ / ``" #: ../../cli.rst:66 msgid "``space`` will scroll down one page" -msgstr "``space`` will scroll down one page" +msgstr "``пробіл`` прокрутить на одну сторінку вниз" #: ../../cli.rst:869 msgid "``tftp:///``" -msgstr "``tftp:///``" +msgstr "``tftp:// / ``" #: ../../cli.rst:69 msgid "``up-arrow`` and ``down-arrow`` will scroll up or down one line at a time respectively" -msgstr "``up-arrow`` and ``down-arrow`` will scroll up or down one line at a time respectively" +msgstr "``стрілка вгору`` і ``стрілка вниз`` прокручують вгору або вниз на один рядок відповідно" diff --git a/docs/_locale/uk/configexamples.pot b/docs/_locale/uk/configexamples.pot index 066dc74e..b6a28477 100644 --- a/docs/_locale/uk/configexamples.pot +++ b/docs/_locale/uk/configexamples.pot @@ -10,60 +10,60 @@ msgstr "" #: ../../configexamples/zone-policy.rst:162 msgid "''It is important to note, that you do not want to add logging to the established state rule as you will be logging both the inbound and outbound packets for each session instead of just the initiation of the session. Your logs will be massive in a very short period of time.''" -msgstr "''It is important to note, that you do not want to add logging to the established state rule as you will be logging both the inbound and outbound packets for each session instead of just the initiation of the session. Your logs will be massive in a very short period of time.''" +msgstr "''Важливо зауважити, що ви не хочете додавати журналювання до встановленого правила стану, оскільки ви реєструватимете як вхідні, так і вихідні пакети для кожного сеансу, а не лише початок сеансу. Ваші журнали стануть масивними за дуже короткий проміжок часу." #: ../../configexamples/azure-vpn-bgp.rst:117 msgid "**Important**: Add an interface route to reach Azure's BGP listener" -msgstr "**Important**: Add an interface route to reach Azure's BGP listener" +msgstr "**Важливо**: додайте маршрут інтерфейсу для доступу до прослухувача BGP Azure" #: ../../configexamples/azure-vpn-dual-bgp.rst:134 msgid "**Important**: Add an interface route to reach both Azure's BGP listeners" -msgstr "**Important**: Add an interface route to reach both Azure's BGP listeners" +msgstr "**Важливо**: додайте маршрут інтерфейсу, щоб отримати доступ до обох слухачів BGP Azure" #: ../../configexamples/azure-vpn-dual-bgp.rst:156 msgid "**Important**: Disable connected check, otherwise the routes learned from Azure will not be imported into the routing table." -msgstr "**Important**: Disable connected check, otherwise the routes learned from Azure will not be imported into the routing table." +msgstr "**Важливо**: вимкніть перевірку підключення, інакше маршрути, отримані з Azure, не будуть імпортовані в таблицю маршрутизації." #: ../../configexamples/azure-vpn-bgp.rst:133 msgid "**Important**: Disable connected check \\" -msgstr "**Important**: Disable connected check \\" +msgstr "**Важливо**: Вимкніть перевірку підключення \\" #: ../../configexamples/l3vpn-hub-and-spoke.rst:46 msgid "**NOTE:** VyOS Router (tested with VyOS 1.4-rolling-202110310317) – The configurations below are specifically for VyOS 1.4.x." -msgstr "**NOTE:** VyOS Router (tested with VyOS 1.4-rolling-202110310317) – The configurations below are specifically for VyOS 1.4.x." +msgstr "**ПРИМІТКА.** Маршрутизатор VyOS (перевірено з VyOS 1.4-rolling-202110310317) – наведені нижче конфігурації спеціально для VyOS 1.4.x." #: ../../configexamples/l3vpn-hub-and-spoke.rst:1123 msgid "**Note:** At the moment, trace mpls doesn’t show labels/paths. So we’ll see * * * for the transit routers of the mpls backbone." -msgstr "**Note:** At the moment, trace mpls doesn’t show labels/paths. So we’ll see * * * for the transit routers of the mpls backbone." +msgstr "**Примітка.** На даний момент trace mpls не показує мітки/шляхи. Отже, ми побачимо * * * для транзитних маршрутизаторів магістралі mpls." #: ../../configexamples/zone-policy.rst:34 msgid "**This specific example is for a router on a stick, but is very easily adapted for however many NICs you have**:" -msgstr "**This specific example is for a router on a stick, but is very easily adapted for however many NICs you have**:" +msgstr "**Цей конкретний приклад стосується маршрутизатора на накопичувачі, але його дуже легко адаптувати для будь-якої кількості мережевих карток, які у вас є**:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:5 msgid "**Virtual Routing and Forwarding** is a technology that allow multiple instance of a routing table to exist within a single device. One of the key aspect of **VRFs** is that do not share the same routes or interfaces, therefore packets are forwarded between interfaces that belong to the same VRF only." -msgstr "**Virtual Routing and Forwarding** is a technology that allow multiple instance of a routing table to exist within a single device. One of the key aspect of **VRFs** is that do not share the same routes or interfaces, therefore packets are forwarded between interfaces that belong to the same VRF only." +msgstr "**Віртуальна маршрутизація та переадресація** — це технологія, яка дозволяє існувати кільком примірникам таблиці маршрутизації на одному пристрої. Одним із ключових аспектів **VRF** є те, що вони не використовують однакові маршрути чи інтерфейси, тому пакети пересилаються між інтерфейсами, які належать лише одній VRF." #: ../../configexamples/ha.rst:389 msgid "**offsite1**" -msgstr "**offsite1**" +msgstr "**поза сайтом1**" #: ../../configexamples/ha.rst:201 #: ../../configexamples/ha.rst:237 #: ../../configexamples/ha.rst:366 #: ../../configexamples/ha.rst:540 msgid "**router1**" -msgstr "**router1**" +msgstr "**роутер1**" #: ../../configexamples/ha.rst:215 #: ../../configexamples/ha.rst:250 #: ../../configexamples/ha.rst:581 msgid "**router2**" -msgstr "**router2**" +msgstr "**роутер2**" #: ../../configexamples/ha.rst:70 msgid "100: 'Public' network, using our 203.0.113.0/24 network." -msgstr "100: 'Public' network, using our 203.0.113.0/24 network." +msgstr "100: «Загальнодоступна» мережа, яка використовує нашу мережу 203.0.113.0/24." #: ../../configexamples/azure-vpn-bgp.rst:38 #: ../../configexamples/azure-vpn-dual-bgp.rst:35 @@ -118,35 +118,35 @@ msgstr "172.17.1.2/24 CS0" #: ../../configexamples/qos.rst:143 msgid "172.17.1.2/24 CS0 - > CS4" -msgstr "172.17.1.2/24 CS0 - > CS4" +msgstr "172.17.1.2/24 CS0 - > CS4" #: ../../configexamples/qos.rst:150 msgid "172.17.1.2/24 CS4 - > CS5" -msgstr "172.17.1.2/24 CS4 - > CS5" +msgstr "172.17.1.2/24 CS4 - > CS5" #: ../../configexamples/qos.rst:26 msgid "172.17.1.2 CS0 -> CS4" -msgstr "172.17.1.2 CS0 -> CS4" +msgstr "172.17.1.2 CS0 -> CS4" #: ../../configexamples/qos.rst:27 msgid "172.17.1.3 CS0 -> CS5" -msgstr "172.17.1.3 CS0 -> CS5" +msgstr "172.17.1.3 CS0 -> CS5" #: ../../configexamples/qos.rst:29 msgid "172.17.1.40 CS0 by default" -msgstr "172.17.1.40 CS0 by default" +msgstr "172.17.1.40 CS0 за замовчуванням" #: ../../configexamples/qos.rst:28 msgid "172.17.1.4 CS0 -> CS6" -msgstr "172.17.1.4 CS0 -> CS6" +msgstr "172.17.1.4 CS0 -> CS6" #: ../../configexamples/zone-policy.rst:45 msgid "192.168.100.10/2001:0DB8:0:AAAA::10 is the administrator's console. It can SSH to VyOS." -msgstr "192.168.100.10/2001:0DB8:0:AAAA::10 is the administrator's console. It can SSH to VyOS." +msgstr "192.168.100.10/2001:0DB8:0:AAAA::10 — це консоль адміністратора. Він може SSH до VyOS." #: ../../configexamples/zone-policy.rst:43 msgid "192.168.200.200/2001:0DB8:0:BBBB::200 is an internal/external DNS, web and mail (SMTP/IMAP) server." -msgstr "192.168.200.200/2001:0DB8:0:BBBB::200 is an internal/external DNS, web and mail (SMTP/IMAP) server." +msgstr "192.168.200.200/2001:0DB8:0:BBBB::200 — внутрішній/зовнішній DNS, веб-сервер і поштовий (SMTP/IMAP) сервер." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:91 msgid "192.168.3.0/30" @@ -175,7 +175,7 @@ msgstr "2001:db8::6/127" #: ../../configexamples/ha.rst:71 msgid "201: 'Internal' network, using 10.200.201.0/24" -msgstr "201: 'Internal' network, using 10.200.201.0/24" +msgstr "201: «Внутрішня» мережа, використовуючи 10.200.201.0/24" #: ../../configexamples/azure-vpn-bgp.rst:44 #: ../../configexamples/azure-vpn-dual-bgp.rst:41 @@ -192,7 +192,7 @@ msgstr "2 private subnets on each site." #: ../../configexamples/l3vpn-hub-and-spoke.rst:35 msgid "2 x Route reflectors (VyOS-RRx)" -msgstr "2 x Route reflectors (VyOS-RRx)" +msgstr "2 x Маршрутні відбивачі (VyOS-RRx)" #: ../../configexamples/l3vpn-hub-and-spoke.rst:38 msgid "3 x Customer Edge (VyOS-CEx)" @@ -204,11 +204,11 @@ msgstr "3 x Provider Edge (VyOs-PEx)" #: ../../configexamples/l3vpn-hub-and-spoke.rst:36 msgid "4 x Provider routers (VyOS-Px)" -msgstr "4 x Provider routers (VyOS-Px)" +msgstr "4 маршрутизатори провайдера (VyOS-Px)" #: ../../configexamples/ha.rst:69 msgid "50: Upstream, using the 192.0.2.0/24 network allocated by them." -msgstr "50: Upstream, using the 192.0.2.0/24 network allocated by them." +msgstr "50: Вгору, використовуючи виділену ними мережу 192.0.2.0/24." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:102 msgid "64496:1" @@ -253,70 +253,78 @@ msgstr "65540" #: ../../configexamples/qos.rst:62 msgid "ADDRESS10 change CS0 -> CS4 source 172.17.1.2/32" -msgstr "ADDRESS10 change CS0 -> CS4 source 172.17.1.2/32" +msgstr "ADDRESS10 змінити CS0 -> джерело CS4 172.17.1.2/32" #: ../../configexamples/qos.rst:63 msgid "ADDRESS20 change CS0 -> CS5 source 172.17.1.3/32" -msgstr "ADDRESS20 change CS0 -> CS5 source 172.17.1.3/32" +msgstr "ADDRESS20 змінити CS0 -> джерело CS5 172.17.1.3/32" #: ../../configexamples/qos.rst:64 msgid "ADDRESS30 change CS0 -> CS6 source 172.17.1.4/32" -msgstr "ADDRESS30 change CS0 -> CS6 source 172.17.1.4/32" +msgstr "ADDRESS30 змінити CS0 -> джерело CS6 172.17.1.4/32" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:28 msgid "A brief excursion into VRFs: This has been one of the longest-standing feature requests of VyOS (dating back to 2016) which can be described as \"a VLAN for layer 2 is what a VRF is for layer 3\". With VRFs, a router/system can hold multiple, isolated routing tables on the same system. If you wonder what's the difference between multiple tables that people used for policy-based routing since forever, it's that a VRF also isolates connected routes rather than just static and dynamically learned routes, so it allows NICs in different VRFs to use conflicting network ranges without issues." -msgstr "A brief excursion into VRFs: This has been one of the longest-standing feature requests of VyOS (dating back to 2016) which can be described as \"a VLAN for layer 2 is what a VRF is for layer 3\". With VRFs, a router/system can hold multiple, isolated routing tables on the same system. If you wonder what's the difference between multiple tables that people used for policy-based routing since forever, it's that a VRF also isolates connected routes rather than just static and dynamically learned routes, so it allows NICs in different VRFs to use conflicting network ranges without issues." +msgstr "Короткий екскурс у VRF. Це був один із найдавніших запитів щодо функцій VyOS (починаючи з 2016 року), який можна описати так: «VLAN для рівня 2 — це те, що VRF для рівня 3». За допомогою VRF маршрутизатор/система може зберігати кілька ізольованих таблиць маршрутизації в одній системі. Якщо вам цікаво, яка різниця між декількома таблицями, які люди використовували для маршрутизації на основі політики з давніх-давен, це те, що VRF також ізолює підключені маршрути, а не просто статичні та динамічно вивчаються маршрути, тому він дозволяє мережевим картам у різних VRF використовувати конфліктні мережеві діапазони без питань." #: ../../configexamples/azure-vpn-bgp.rst:26 #: ../../configexamples/azure-vpn-dual-bgp.rst:23 msgid "A connection resource deployed in Azure linking the Azure VNet gateway and the local network gateway representing the Vyos device." -msgstr "A connection resource deployed in Azure linking the Azure VNet gateway and the local network gateway representing the Vyos device." +msgstr "Ресурс з’єднання, розгорнутий в Azure, зв’язує шлюз Azure VNet і шлюз локальної мережі, що представляє пристрій Vyos." #: ../../configexamples/index.rst:38 msgid "A host ``vyos-oobm`` will use as a ssh proxy. This host is just necessary for the Lab test." -msgstr "A host ``vyos-oobm`` will use as a ssh proxy. This host is just necessary for the Lab test." +msgstr "Хост ``vyos-oobm`` використовуватиметься як проксі-сервер ssh. Цей хост просто необхідний для лабораторного тесту." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:312 msgid "A key point to understand is that if we need two VRFs to communicate between each other EXPORT rt from VRF1 has to be in the IMPORT rt list from VRF2. But this is only in ONE direction, to complete the communication the EXPORT rt from VRF2 has to be in the IMPORT rt list from VRF1." -msgstr "A key point to understand is that if we need two VRFs to communicate between each other EXPORT rt from VRF1 has to be in the IMPORT rt list from VRF2. But this is only in ONE direction, to complete the communication the EXPORT rt from VRF2 has to be in the IMPORT rt list from VRF1." +msgstr "Ключовим моментом, який слід зрозуміти, є те, що якщо нам потрібні два VRF для зв’язку між собою, EXPORT rt з VRF1 має бути в списку IMPORT rt з VRF2. Але це тільки в ОДНОМУ напрямку, для завершення зв’язку EXPORT rt з VRF2 має бути в списку IMPORT rt з VRF1." #: ../../configexamples/azure-vpn-bgp.rst:21 #: ../../configexamples/azure-vpn-dual-bgp.rst:18 msgid "A local network gateway deployed in Azure representing the Vyos device, matching the below Vyos settings except for address space, which only requires the Vyos private IP, in this example 10.10.0.5/32" -msgstr "A local network gateway deployed in Azure representing the Vyos device, matching the below Vyos settings except for address space, which only requires the Vyos private IP, in this example 10.10.0.5/32" +msgstr "Шлюз локальної мережі, розгорнутий в Azure, представляє пристрій Vyos, що відповідає наведеним нижче налаштуванням Vyos, за винятком адресного простору, для якого потрібна лише приватна IP-адреса Vyos, у цьому прикладі 10.10.0.5/32" #: ../../configexamples/azure-vpn-dual-bgp.rst:15 msgid "A pair of Azure VNet Gateways deployed in active-active configuration with BGP enabled." -msgstr "A pair of Azure VNet Gateways deployed in active-active configuration with BGP enabled." +msgstr "Пара шлюзів Azure VNet, розгорнутих у конфігурації активний-активний із увімкненим BGP." #: ../../configexamples/azure-vpn-bgp.rst:18 msgid "A pair of Azure VNet Gateways deployed in active-passive configuration with BGP enabled." -msgstr "A pair of Azure VNet Gateways deployed in active-passive configuration with BGP enabled." +msgstr "Пара шлюзів Azure VNet, розгорнутих у активній-пасивній конфігурації з увімкненим BGP." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:16 msgid "A public, routable IPv4 address. This does not necessarily need to be static, but you will need to update the tunnel endpoint when/if your IP address changes, which can be done with a script and a scheduled task." -msgstr "A public, routable IPv4 address. This does not necessarily need to be static, but you will need to update the tunnel endpoint when/if your IP address changes, which can be done with a script and a scheduled task." +msgstr "Загальнодоступна адреса IPv4, яку можна маршрутизувати. Це не обов’язково має бути статичним, але вам потрібно буде оновити кінцеву точку тунелю, коли/якщо ваша IP-адреса змінюється, що можна зробити за допомогою сценарію та запланованого завдання." #: ../../configexamples/wan-load-balancing.rst:126 #: ../../configexamples/wan-load-balancing.rst:136 msgid "A rule order for prioritizing traffic is useful in scenarios where the secondary link has a lower speed and should only carry high priority traffic. It is assumed for this example that eth1 is connected to a slower connection than eth0 and should prioritize VoIP traffic." -msgstr "A rule order for prioritizing traffic is useful in scenarios where the secondary link has a lower speed and should only carry high priority traffic. It is assumed for this example that eth1 is connected to a slower connection than eth0 and should prioritize VoIP traffic." +msgstr "Порядок правил для визначення пріоритетів трафіку корисний у сценаріях, коли вторинне з’єднання має нижчу швидкість і має передавати лише високопріоритетний трафік. У цьому прикладі припускається, що eth1 підключено до повільнішого з’єднання, ніж eth0, і має надавати пріоритет VoIP-трафіку." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:41 msgid "A simple solution could be using different routing tables, or VRFs for all the networks so we can keep the routing restrictions. But for us to route between the different VRFs we would need a cable or a logical connection between each other:" -msgstr "A simple solution could be using different routing tables, or VRFs for all the networks so we can keep the routing restrictions. But for us to route between the different VRFs we would need a cable or a logical connection between each other:" +msgstr "Простим рішенням може бути використання різних таблиць маршрутизації або VRF для всіх мереж, щоб ми могли зберегти обмеження маршрутизації. Але для маршрутизації між різними VRF нам знадобиться кабель або логічне з’єднання між собою:" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:19 msgid "Account at https://www.tunnelbroker.net/" -msgstr "Account at https://www.tunnelbroker.net/" +msgstr "Обліковий запис на https://www.tunnelbroker.net/" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:21 msgid "Active Directory on Windows server" -msgstr "Active Directory on Windows server" +msgstr "Active Directory на сервері Windows" #: ../../configexamples/ha.rst:161 msgid "Add (temporary) default route" -msgstr "Add (temporary) default route" +msgstr "Додати (тимчасовий) маршрут за замовчуванням" + +#: ../../configexamples/ansible.rst:99 +msgid "Add a simple playbook with the tasks for each router:" +msgstr "Add a simple playbook with the tasks for each router:" + +#: ../../configexamples/ansible.rst:73 +msgid "Add all the VyOS hosts:" +msgstr "Add all the VyOS hosts:" #: ../../configexamples/ansible.rst:73 msgid "Add all the hosts of VyOS:" @@ -328,7 +336,7 @@ msgstr "Add general variables:" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:47 msgid "Add the LDAP plugin configuration file `/config/auth/ldap-auth.config`" -msgstr "Add the LDAP plugin configuration file `/config/auth/ldap-auth.config`" +msgstr "Додайте файл конфігурації плагіна LDAP `/config/auth/ldap-auth.config`" #: ../../configexamples/ansible.rst:99 msgid "Add the simple playbook with the tasks for each router:" @@ -336,19 +344,23 @@ msgstr "Add the simple playbook with the tasks for each router:" #: ../../configexamples/wan-load-balancing.rst:167 msgid "Adding a rule for the second interface" -msgstr "Adding a rule for the second interface" +msgstr "Додавання правила для другого інтерфейсу" #: ../../configexamples/ha.rst:498 msgid "Advertise connected routes" -msgstr "Advertise connected routes" +msgstr "Оголошуйте сполучені маршрути" #: ../../configexamples/autotest/Wireguard/Wireguard.rst:87 msgid "After all is done and commit, let's take a look if the Wireguard interface is up and running." -msgstr "After all is done and commit, let's take a look if the Wireguard interface is up and running." +msgstr "Після того, як усе зроблено та закріплено, давайте подивимося, чи працює інтерфейс Wireguard." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:324 msgid "After configured all the VRFs involved in this topology we take a deeper look at both BGP and Routing table for the VRF LAN1" -msgstr "After configured all the VRFs involved in this topology we take a deeper look at both BGP and Routing table for the VRF LAN1" +msgstr "Після налаштування всіх VRF, залучених до цієї топології, ми глибше розглядаємо як BGP, так і таблицю маршрутизації для VRF LAN1" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 +msgid "After some testing, we can check IPSec status, and counter on every tunnel:" +msgstr "After some testing, we can check IPSec status, and counter on every tunnel:" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 msgid "After some testing, we can check ipsec status, and counter on every tunnel:" @@ -356,27 +368,35 @@ msgstr "After some testing, we can check ipsec status, and counter on every tunn #: ../../configexamples/qos.rst:81 msgid "After the interface eth0 on router VyOS3" -msgstr "After the interface eth0 on router VyOS3" +msgstr "Після інтерфейсу eth0 на роутері VyOS3" #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:51 msgid "After this, we need the DHCP-Server and Relay configuration. To get a testable result, we just have one IP in the DHCP range. Expand it as you need it." -msgstr "After this, we need the DHCP-Server and Relay configuration. To get a testable result, we just have one IP in the DHCP range. Expand it as you need it." +msgstr "Після цього нам знадобиться конфігурація DHCP-сервера та ретрансляції. Щоб отримати перевірений результат, ми маємо лише одну IP-адресу в діапазоні DHCP. Розширюйте його, як вам це потрібно." #: ../../configexamples/autotest/Wireguard/Wireguard.rst:52 msgid "After you have each public key. The wireguard interfaces can be setup." -msgstr "After you have each public key. The wireguard interfaces can be setup." +msgstr "Після того, як у вас є кожен відкритий ключ. Інтерфейси Wireguard можна налаштувати." #: ../../configexamples/wan-load-balancing.rst:28 msgid "All outgoing packets are assigned the source address of the assigned interface (SNAT)." -msgstr "All outgoing packets are assigned the source address of the assigned interface (SNAT)." +msgstr "Усім вихідним пакетам призначається адреса джерела призначеного інтерфейсу (SNAT)." #: ../../configexamples/wan-load-balancing.rst:24 msgid "All traffic coming in through eth2 is balanced between eth0 and eth1 on the router." -msgstr "All traffic coming in through eth2 is balanced between eth0 and eth1 on the router." +msgstr "Весь трафік, що надходить через eth2, балансується між eth0 і eth1 на маршрутизаторі." #: ../../configexamples/pppoe-ipv6-basic.rst:88 msgid "Allow DHCPv6 packets for router" -msgstr "Allow DHCPv6 packets for router" +msgstr "Дозволити пакети DHCPv6 для маршрутизатора" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:34 +msgid "Allow DNS requests only only for local networks." +msgstr "Allow DNS requests only only for local networks." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:36 +msgid "Allow ICMP on all interfaces." +msgstr "Allow ICMP on all interfaces." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:32 msgid "Allow access to the router only from trusted networks." @@ -384,11 +404,11 @@ msgstr "Allow access to the router only from trusted networks." #: ../../configexamples/pppoe-ipv6-basic.rst:86 msgid "Allow all established and related traffic for router and LAN" -msgstr "Allow all established and related traffic for router and LAN" +msgstr "Дозволити весь встановлений і пов’язаний трафік для маршрутизатора та локальної мережі" #: ../../configexamples/pppoe-ipv6-basic.rst:87 msgid "Allow all icmpv6 packets for router and LAN" -msgstr "Allow all icmpv6 packets for router and LAN" +msgstr "Дозволити всі пакети icmpv6 для маршрутизатора та локальної мережі" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:38 msgid "Allow all new connections from local subnets." @@ -412,11 +432,11 @@ msgstr "Also, we can check firewall counters:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:716 msgid "Also we can verify how PE devices receives VPNv4 networks from the RRs and installing them to the specific customer VRFs:" -msgstr "Also we can verify how PE devices receives VPNv4 networks from the RRs and installing them to the specific customer VRFs:" +msgstr "Також ми можемо перевірити, як пристрої PE отримують мережі VPNv4 від RR і встановлюють їх на VRF певного клієнта:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:20 msgid "An L3VPN consists of multiple access links, multiple VPN routing and forwarding (VRF) tables, and multiple MPLS paths or multiple P2MP LSPs. An L3VPN can be configured to connect two or more customer sites. In hub-and-spoke MPLS L3VPN environments, the spoke routers need to have unique Route Distinguishers (RDs). In order to use the hub site as a transit point for connectivity in such an environment, the spoke sites export their routes to the hub. Spokes can talk to hubs, but never have direct paths to other spokes. All traffic between spokes is controlled and delivered over the hub site." -msgstr "An L3VPN consists of multiple access links, multiple VPN routing and forwarding (VRF) tables, and multiple MPLS paths or multiple P2MP LSPs. An L3VPN can be configured to connect two or more customer sites. In hub-and-spoke MPLS L3VPN environments, the spoke routers need to have unique Route Distinguishers (RDs). In order to use the hub site as a transit point for connectivity in such an environment, the spoke sites export their routes to the hub. Spokes can talk to hubs, but never have direct paths to other spokes. All traffic between spokes is controlled and delivered over the hub site." +msgstr "L3VPN складається з кількох каналів доступу, кількох таблиць маршрутизації та переадресації VPN (VRF) і кількох шляхів MPLS або кількох P2MP LSP. L3VPN можна налаштувати для підключення двох або більше сайтів клієнтів. У середовищах MPLS L3VPN із концентратором і стрілкою спіцеві маршрутизатори повинні мати унікальні розрізнювачі маршрутів (RD). Щоб використовувати вузловий сайт як транзитну точку для підключення в такому середовищі, спільні сайти експортують свої маршрути до концентратора. Спиці можуть спілкуватися з концентраторами, але ніколи не мають прямих шляхів до інших спиць. Весь трафік між вузлами контролюється та передається через вузол." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:191 msgid "And NAT Configuration:" @@ -424,20 +444,20 @@ msgstr "And NAT Configuration:" #: ../../configexamples/autotest/Wireguard/Wireguard.rst:99 msgid "And ping the Branch PC from your central router to check the response." -msgstr "And ping the Branch PC from your central router to check the response." +msgstr "І перевірте відповідь на Branch PC із центрального маршрутизатора." #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:90 msgid "And show all DHCP Leases" -msgstr "And show all DHCP Leases" +msgstr "І показати всі оренди DHCP" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:132 msgid "And the ``client`` to receive an IPv6 address with stateless autoconfig." -msgstr "And the ``client`` to receive an IPv6 address with stateless autoconfig." +msgstr "І ``клієнт`` для отримання IPv6-адреси з автоконфігурацією без збереження стану." #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:-1 #: ../../configexamples/autotest/Wireguard/Wireguard.rst:-1 msgid "Ansible Example topology image" -msgstr "Ansible Example topology image" +msgstr "Приклад зображення топології Ansible" #: ../../configexamples/ansible.rst:7 msgid "Ansible example" @@ -445,71 +465,71 @@ msgstr "Ansible example" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:10 msgid "Any information related to a VRF is not exchanged between devices -or in the same device- by default, this is a technique called **VRF-Lite**." -msgstr "Any information related to a VRF is not exchanged between devices -or in the same device- by default, this is a technique called **VRF-Lite**." +msgstr "Будь-яка інформація, пов’язана з VRF, не обмінюється між пристроями або в одному пристрої за замовчуванням, це техніка під назвою **VRF-Lite**." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:611 msgid "Appendix-A" -msgstr "Appendix-A" +msgstr "Додаток-А" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:764 msgid "Appendix-B" -msgstr "Appendix-B" +msgstr "Додаток-Б" #: ../../configexamples/ha.rst:500 msgid "As a reminder, only advertise routes that you are the default router for. This is why we are NOT announcing the 192.0.2.0/24 network, because if that was announced into OSPF, the other routers would try to connect to that network over a tunnel that connects to that network!" -msgstr "As a reminder, only advertise routes that you are the default router for. This is why we are NOT announcing the 192.0.2.0/24 network, because if that was announced into OSPF, the other routers would try to connect to that network over a tunnel that connects to that network!" +msgstr "Нагадуємо, рекламуйте лише маршрути, для яких ви є маршрутизатором за умовчанням. Ось чому ми НЕ анонсуємо мережу 192.0.2.0/24, тому що якби це було оголошено в OSPF, інші маршрутизатори намагалися б підключитися до цієї мережі через тунель, який з’єднується з цією мережею!" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:853 msgid "As we can see even if both VRF LAN1 and LAN2 has the same import RTs we are able to select which routes are effectively imported and installed." -msgstr "As we can see even if both VRF LAN1 and LAN2 has the same import RTs we are able to select which routes are effectively imported and installed." +msgstr "Як ми бачимо, навіть якщо VRF LAN1 і LAN2 мають однакові RT імпорту, ми можемо вибрати, які маршрути ефективно імпортувати та встановити." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:417 msgid "As we can see in the BGP table any imported route has been injected with a \"@\" followed by the VPN id; In the routing table of the VRF, if the route was installed, we can see -between round brackets- the exported VRF table." -msgstr "As we can see in the BGP table any imported route has been injected with a \"@\" followed by the VPN id; In the routing table of the VRF, if the route was installed, we can see -between round brackets- the exported VRF table." +msgstr "Як ми бачимо в таблиці BGP, до будь-якого імпортованого маршруту додано символ «@», за яким слідує ідентифікатор VPN; У таблиці маршрутизації VRF, якщо маршрут було встановлено, ми можемо побачити (між круглими дужками) експортовану таблицю VRF." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:52 msgid "As we can see this is unpractical." -msgstr "As we can see this is unpractical." +msgstr "Як бачимо, це непрактично." #: ../../configexamples/l3vpn-hub-and-spoke.rst:67 msgid "As we know the main assumption of L3VPN “Hub and Spoke” is, that the traffic between spokes have to pass via hub, in our scenario VyOS-PE2 is the Hub PE and the VyOS-CE1-HUB is the central customer office device that is responsible for controlling access between all spokes and announcing its network prefixes (10.0.0.100/32). VyOS-PE2 has the main VRF (its name is BLUE_HUB), its own Route-Distinguisher(RD) and route-target import/export lists. Multiprotocol-BGP(MP-BGP) delivers L3VPN related control-plane information to the nodes across network where PEs Spokes import the route-target 60535:1030 (this is export route-target of vrf BLUE_HUB) and export its own route-target 60535:1011(this is vrf BLUE_SPOKE export route-target). Therefore, the Customer edge nodes can only learn the network prefixes of the HUB site [10.0.0.100/32]. For this example VyOS-CE1 has network prefixes [10.0.0.80/32] / VyOS-CE2 has network prefixes [10.0.0.90/32]. Route-Reflector devices VyOS-RR1 and VyOS-RR2 are used to simplify network routes exchange and minimize iBGP peerings between devices." -msgstr "As we know the main assumption of L3VPN “Hub and Spoke” is, that the traffic between spokes have to pass via hub, in our scenario VyOS-PE2 is the Hub PE and the VyOS-CE1-HUB is the central customer office device that is responsible for controlling access between all spokes and announcing its network prefixes (10.0.0.100/32). VyOS-PE2 has the main VRF (its name is BLUE_HUB), its own Route-Distinguisher(RD) and route-target import/export lists. Multiprotocol-BGP(MP-BGP) delivers L3VPN related control-plane information to the nodes across network where PEs Spokes import the route-target 60535:1030 (this is export route-target of vrf BLUE_HUB) and export its own route-target 60535:1011(this is vrf BLUE_SPOKE export route-target). Therefore, the Customer edge nodes can only learn the network prefixes of the HUB site [10.0.0.100/32]. For this example VyOS-CE1 has network prefixes [10.0.0.80/32] / VyOS-CE2 has network prefixes [10.0.0.90/32]. Route-Reflector devices VyOS-RR1 and VyOS-RR2 are used to simplify network routes exchange and minimize iBGP peerings between devices." +msgstr "Як ми знаємо, основне припущення L3VPN «Hub and Spoke» полягає в тому, що трафік між вузлами має проходити через концентратор, у нашому сценарії VyOS-PE2 — це Hub PE, а VyOS-CE1-HUB — це центральний офісний пристрій клієнта, який відповідає за контроль доступу між усіма зв’язками та оголошення своїх мережевих префіксів (10.0.0.100/32). VyOS-PE2 має головний VRF (його назва BLUE_HUB), власний Route-Distinguisher (RD) і списки імпорту/експорту цільового маршруту. Multiprotocol-BGP(MP-BGP) доставляє пов’язану з L3VPN інформацію про площину керування до вузлів у мережі, де спілки PE імпортують цільовий маршрут 60535:1030 (це цільовий маршрут експорту vrf BLUE_HUB) і експортують власний цільовий маршрут 60535 :1011 (це мета експорту vrf BLUE_SPOKE). Таким чином, периферійні вузли клієнта можуть вивчати лише мережеві префікси сайту HUB [10.0.0.100/32]. Для цього прикладу VyOS-CE1 має мережеві префікси [10.0.0.80/32] / VyOS-CE2 має мережеві префікси [10.0.0.90/32]. Пристрої Route-Reflector VyOS-RR1 і VyOS-RR2 використовуються для спрощення обміну мережевими маршрутами та мінімізації однорангового обміну iBGP між пристроями." #: ../../configexamples/qos.rst:182 msgid "As we see shaper is working and the traffic will not work over 5 Mbit/s." -msgstr "As we see shaper is working and the traffic will not work over 5 Mbit/s." +msgstr "Як ми бачимо, шейпер працює і трафік більше 5 Мбіт/с працювати не буде." #: ../../configexamples/ha.rst:141 msgid "Assign external IP addresses" -msgstr "Assign external IP addresses" +msgstr "Призначити зовнішні IP-адреси" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:74 msgid "Assuming the pings are successful, you need to add some DNS servers. Some options:" -msgstr "Assuming the pings are successful, you need to add some DNS servers. Some options:" +msgstr "Якщо пінг пройшов успішно, вам потрібно додати кілька DNS-серверів. Деякі варіанти:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:107 msgid "At the first step we need to configure the IP/MPLS backbone network using OSPF as IGP protocol and LDP as label-switching protocol for the base connectivity between **P** (rovider), **P** (rovider) **E** (dge) and **R** (oute) **R** (eflector) nodes:" -msgstr "At the first step we need to configure the IP/MPLS backbone network using OSPF as IGP protocol and LDP as label-switching protocol for the base connectivity between **P** (rovider), **P** (rovider) **E** (dge) and **R** (oute) **R** (eflector) nodes:" +msgstr "На першому кроці нам потрібно налаштувати магістральну мережу IP/MPLS за допомогою OSPF як протоколу IGP і LDP як протоколу перемикання міток для базового з’єднання між **P** (rovider), **P** (rovider) ** Вузли E** (dge) і **R** (oute) **R** (eflector):" #: ../../configexamples/ha.rst:516 msgid "At this point, you now need to create the X link between all four routers. Use amdifferent /30 for each link." -msgstr "At this point, you now need to create the X link between all four routers. Use amdifferent /30 for each link." +msgstr "На цьому етапі вам потрібно створити X-з’єднання між усіма чотирма маршрутизаторами. Використовуйте amdifferent /30 для кожного посилання." #: ../../configexamples/ha.rst:184 msgid "At this point, you should be able to SSH into both of them, and will no longer need access to the console (unless you break something!)" -msgstr "At this point, you should be able to SSH into both of them, and will no longer need access to the console (unless you break something!)" +msgstr "На цьому етапі ви зможете підключатися через SSH до обох, і вам більше не потрібен доступ до консолі (якщо ви не зламаєте щось!)" #: ../../configexamples/ha.rst:278 msgid "At this point, you should be able to see both IP addresses when you run ``show interfaces``\\ , and ``show vrrp`` should show both interfaces in MASTER state (and SLAVE state on router2)." -msgstr "At this point, you should be able to see both IP addresses when you run ``show interfaces``\\ , and ``show vrrp`` should show both interfaces in MASTER state (and SLAVE state on router2)." +msgstr "На цьому етапі ви повинні бачити обидві IP-адреси, коли запускаєте ``show interfaces``\\ , а ``show vrrp`` має показувати обидва інтерфейси в стані MASTER (і стані SLAVE на router2)." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:102 msgid "At this point, your VyOS install should have full IPv6, but now your LAN devices need access." -msgstr "At this point, your VyOS install should have full IPv6, but now your LAN devices need access." +msgstr "На даний момент ваша інсталяція VyOS повинна мати повний IPv6, але тепер вашим пристроям локальної мережі потрібен доступ." #: ../../configexamples/l3vpn-hub-and-spoke.rst:324 msgid "At this step we are going to enable iBGP protocol on MPLS nodes and Route Reflectors (two routers for redundancy) that will deliver IPv4 VPN (L3VPN) routes between them:" -msgstr "At this step we are going to enable iBGP protocol on MPLS nodes and Route Reflectors (two routers for redundancy) that will deliver IPv4 VPN (L3VPN) routes between them:" +msgstr "На цьому кроці ми збираємося ввімкнути протокол iBGP на вузлах MPLS і Route Reflectors (два маршрутизатори для резервування), які забезпечать маршрути IPv4 VPN (L3VPN) між ними:" #: ../../configexamples/azure-vpn-bgp.rst:52 #: ../../configexamples/azure-vpn-dual-bgp.rst:51 @@ -518,11 +538,11 @@ msgstr "Azure ASN" #: ../../configexamples/azure-vpn-dual-bgp.rst:41 msgid "Azure VNet Gateway 1 public IP" -msgstr "Azure VNet Gateway 1 public IP" +msgstr "Загальнодоступна IP-адреса віртуальної мережі Azure Gateway 1" #: ../../configexamples/azure-vpn-dual-bgp.rst:43 msgid "Azure VNet Gateway 2 public IP" -msgstr "Azure VNet Gateway 2 public IP" +msgstr "Загальнодоступна IP-адреса Azure VNet Gateway 2" #: ../../configexamples/azure-vpn-bgp.rst:46 #: ../../configexamples/azure-vpn-dual-bgp.rst:45 @@ -531,12 +551,12 @@ msgstr "Azure VNet Gateway BGP IP" #: ../../configexamples/azure-vpn-bgp.rst:44 msgid "Azure VNet Gateway public IP" -msgstr "Azure VNet Gateway public IP" +msgstr "Загальнодоступна IP-адреса віртуальної мережі Azure" #: ../../configexamples/azure-vpn-bgp.rst:38 #: ../../configexamples/azure-vpn-dual-bgp.rst:35 msgid "Azure address space" -msgstr "Azure address space" +msgstr "Адресний простір Azure" #: ../../configexamples/ha.rst:534 msgid "BGP" @@ -544,11 +564,11 @@ msgstr "BGP" #: ../../configexamples/bgp-ipv6-unnumbered.rst:7 msgid "BGP IPv6 unnumbered with extended nexthop" -msgstr "BGP IPv6 unnumbered with extended nexthop" +msgstr "BGP IPv6 без номерів із розширеним наступним кроком" #: ../../configexamples/ha.rst:536 msgid "BGP is an extremely complex network protocol. An example is provided here." -msgstr "BGP is an extremely complex network protocol. An example is provided here." +msgstr "BGP є надзвичайно складним мережевим протоколом. Приклад наведено тут." #: ../../configexamples/l3vpn-hub-and-spoke.rst:88 msgid "BLUE_HUB" @@ -561,15 +581,19 @@ msgstr "BLUE_SPOKE" #: ../../configexamples/wan-load-balancing.rst:169 msgid "Based on the previous example, another rule for traffic from the second interface eth3 can be added to the load balancer. However, traffic meant to flow between the LAN subnets will be sent to eth0 and eth1 as well. To prevent this, another rule is required. This rule excludes traffic between the local subnets from the load balancer. It also excludes locally-sources packets (required for web caching with load balancing). eth+ is used as an alias that refers to all ethernet interfaces:" -msgstr "Based on the previous example, another rule for traffic from the second interface eth3 can be added to the load balancer. However, traffic meant to flow between the LAN subnets will be sent to eth0 and eth1 as well. To prevent this, another rule is required. This rule excludes traffic between the local subnets from the load balancer. It also excludes locally-sources packets (required for web caching with load balancing). eth+ is used as an alias that refers to all ethernet interfaces:" +msgstr "На основі попереднього прикладу до балансувальника навантаження можна додати ще одне правило для трафіку з другого інтерфейсу eth3. Однак трафік, призначений для проходження між підмережами LAN, також буде надіслано до eth0 та eth1. Щоб цього не сталося, потрібно ще одне правило. Це правило виключає трафік між локальними підмережами з балансувальника навантаження. Він також виключає пакети з локальних джерел (потрібні для веб-кешування з балансуванням навантаження). eth+ використовується як псевдонім, який посилається на всі інтерфейси Ethernet:" #: ../../configexamples/pppoe-ipv6-basic.rst:82 msgid "Basic Firewall" -msgstr "Basic Firewall" +msgstr "Базовий брандмауер" #: ../../configexamples/ha.rst:108 msgid "Basic Setup (via console)" -msgstr "Basic Setup (via console)" +msgstr "Основне налаштування (через консоль)" + +#: ../../configexamples/ansible.rst:64 +msgid "Basic configuration of ansible.cfg:" +msgstr "Basic configuration of ansible.cfg:" #: ../../configexamples/ansible.rst:64 msgid "Basik configuration of the ansible.cfg:" @@ -577,55 +601,55 @@ msgstr "Basik configuration of the ansible.cfg:" #: ../../configexamples/qos.rst:74 msgid "Before the interface eth0 on router VyOS3" -msgstr "Before the interface eth0 on router VyOS3" +msgstr "До інтерфейсу eth0 на роутері VyOS3" #: ../../configexamples/ha.rst:125 msgid "Bonding on Hardware Router" -msgstr "Bonding on Hardware Router" +msgstr "З’єднання на апаратному маршрутизаторі" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:32 msgid "Both LANs have to be able to route between each other, both will have managed devices through a dedicated management network and both will need Internet access yet the LAN2 will need access to some set of outside networks, not all. The management network will need access to both LANs but cannot have access to/from the outside." -msgstr "Both LANs have to be able to route between each other, both will have managed devices through a dedicated management network and both will need Internet access yet the LAN2 will need access to some set of outside networks, not all. The management network will need access to both LANs but cannot have access to/from the outside." +msgstr "Обидві локальні мережі повинні мати можливість маршрутизації між собою, обидві матимуть керовані пристрої через спеціальну мережу керування, і обидві потребуватимуть доступу до Інтернету, але LAN2 потребуватиме доступ до деяких зовнішніх мереж, а не до всіх. Мережі керування потрібен доступ до обох локальних мереж, але вона не може мати доступу до/ззовні." #: ../../configexamples/autotest/Wireguard/Wireguard.rst:35 #: ../../configexamples/autotest/Wireguard/Wireguard.rst:61 #: ../../configexamples/autotest/Wireguard/Wireguard.rst:77 msgid "Branch" -msgstr "Branch" +msgstr "Відділення" #: ../../configexamples/zone-policy.rst:151 msgid "By default, iptables does not allow traffic for established sessions to return, so you must explicitly allow this. I do this by adding two rules to every ruleset. 1 allows established and related state packets through and rule 2 drops and logs invalid state packets. We place the established/related rule at the top because the vast majority of traffic on a network is established and the invalid rule to prevent invalid state packets from mistakenly being matched against other rules. Having the most matched rule listed first reduces CPU load in high volume environments. Note: I have filed a bug to have this added as a default action as well." -msgstr "By default, iptables does not allow traffic for established sessions to return, so you must explicitly allow this. I do this by adding two rules to every ruleset. 1 allows established and related state packets through and rule 2 drops and logs invalid state packets. We place the established/related rule at the top because the vast majority of traffic on a network is established and the invalid rule to prevent invalid state packets from mistakenly being matched against other rules. Having the most matched rule listed first reduces CPU load in high volume environments. Note: I have filed a bug to have this added as a default action as well." +msgstr "За замовчуванням iptables не дозволяє повертати трафік для встановлених сеансів, тому ви повинні явно дозволити це. Я роблю це, додаючи два правила до кожного набору правил. 1 дозволяє пакети встановленого та пов’язаного стану, а правило 2 відкидає та реєструє недійсні пакети стану. Ми розміщуємо встановлене/пов’язане правило вгорі, оскільки переважна більшість трафіку в мережі встановлено, а правило недійсності запобігає помилковому зіставленню недійсних пакетів стану з іншими правилами. Якщо правило, яке найбільше відповідає першим, зменшує навантаження на ЦП у середовищах із великим обсягом. Примітка: я повідомив про помилку, щоб також додати цю дію як дію за замовчуванням." #: ../../configexamples/l3vpn-hub-and-spoke.rst:891 msgid "CE Hub device" -msgstr "CE Hub device" +msgstr "пристрій концентратора CE" #: ../../configexamples/qos.rst:33 msgid "CS4 -> CS5" -msgstr "CS4 -> CS5" +msgstr "CS4 -> CS5" #: ../../configexamples/autotest/Wireguard/Wireguard.rst:29 #: ../../configexamples/autotest/Wireguard/Wireguard.rst:55 #: ../../configexamples/autotest/Wireguard/Wireguard.rst:71 msgid "Central" -msgstr "Central" +msgstr "Центральний" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:48 msgid "Check all possible settings `here `_" -msgstr "Check all possible settings `here `_" +msgstr "Перевірте всі можливі налаштування тут `_" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:252 msgid "Check the BGP VRF table and verify if the static routes are injected showing the correct next-hop information." -msgstr "Check the BGP VRF table and verify if the static routes are injected showing the correct next-hop information." +msgstr "Перевірте таблицю BGP VRF і перевірте, чи впроваджено статичні маршрути з правильною інформацією про наступний крок." #: ../../configexamples/qos.rst:67 msgid "Check the result" -msgstr "Check the result" +msgstr "Перевірте результат" #: ../../configexamples/qos.rst:175 msgid "Check the result." -msgstr "Check the result." +msgstr "Перевірте результат." #: ../../configexamples/ansible.rst:142 msgid "Check the result on the vyos10 router:" @@ -637,7 +661,7 @@ msgstr "Check the version:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:164 msgid "Checking the routing table of the VRF should reveal both static and connected entries active. A PING test between the Core and remote router is a way to validate connectivity within the VRF." -msgstr "Checking the routing table of the VRF should reveal both static and connected entries active. A PING test between the Core and remote router is a way to validate connectivity within the VRF." +msgstr "Перевірка таблиці маршрутизації VRF має виявити активні статичні та підключені записи. Тест PING між ядром і віддаленим маршрутизатором є способом перевірки підключення в межах VRF." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:204 msgid "Checking through op-mode commands" @@ -649,12 +673,12 @@ msgstr "Cisco" #: ../../configexamples/ha.rst:90 msgid "Cisco VPC Crossconnect - Ports 39 and 40 bonded between each switch" -msgstr "Cisco VPC Crossconnect - Ports 39 and 40 bonded between each switch" +msgstr "Cisco VPC Crossconnect – порти 39 і 40, з’єднані між кожним комутатором" #: ../../configexamples/azure-vpn-bgp.rst:92 #: ../../configexamples/azure-vpn-dual-bgp.rst:94 msgid "Clamp the VTI's MSS to 1350 to avoid PMTU blackholes." -msgstr "Clamp the VTI's MSS to 1350 to avoid PMTU blackholes." +msgstr "Підніміть MSS VTI до 1350, щоб уникнути чорних дірок PMTU." #: ../../configexamples/lac-lns.rst:96 msgid "Client" @@ -662,7 +686,11 @@ msgstr "Client" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:94 msgid "Client configuration" -msgstr "Client configuration" +msgstr "Конфігурація клієнта" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 +msgid "Communication between private subnets should be done through IPSec tunnel without NAT." +msgstr "Communication between private subnets should be done through IPSec tunnel without NAT." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 msgid "Communication between private subnets should be done through ipsec tunnel without nat." @@ -670,7 +698,7 @@ msgstr "Communication between private subnets should be done through ipsec tunne #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:601 msgid "Conclusions" -msgstr "Conclusions" +msgstr "Висновки" #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:26 #: ../../configexamples/autotest/Wireguard/Wireguard.rst:25 @@ -686,35 +714,35 @@ msgstr "Conclusions" #: ../../configexamples/segment-routing-isis.rst:24 #: ../../configexamples/site-2-site-cisco.rst:18 msgid "Configuration" -msgstr "Configuration" +msgstr "Конфігурація" #: ../../configexamples/qos.rst:38 msgid "Configuration:" -msgstr "Configuration:" +msgstr "Конфігурація:" #: ../../configexamples/nmp.rst:26 msgid "Configuration 'NMP'" -msgstr "Configuration 'NMP'" +msgstr "Конфігурація "NMP"" #: ../../configexamples/nmp.rst:13 msgid "Configuration 'VyOS'" -msgstr "Configuration 'VyOS'" +msgstr "Конфігурація "VyOS"" #: ../../configexamples/qos.rst:10 msgid "Configuration 'dcsp' and shaper using QoS" -msgstr "Configuration 'dcsp' and shaper using QoS" +msgstr "Конфігурація 'dcsp' і формувач з використанням QoS" #: ../../configexamples/index.rst:4 msgid "Configuration Blueprints" -msgstr "Configuration Blueprints" +msgstr "Чертежі конфігурації" #: ../../configexamples/index.rst:31 msgid "Configuration Blueprints (autotest)" -msgstr "Configuration Blueprints (autotest)" +msgstr "Конфігурація креслень (самоперевірка)" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:40 msgid "Configuration VyOS as OpenVPN Server" -msgstr "Configuration VyOS as OpenVPN Server" +msgstr "Налаштуйте VyOS як сервер OpenVPN" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:27 msgid "Configuration of basic firewall in one site, in order to:" @@ -724,57 +752,57 @@ msgstr "Configuration of basic firewall in one site, in order to:" #: ../../configexamples/lac-lns.rst:29 #: ../../configexamples/pppoe-ipv6-basic.rst:26 msgid "Configurations" -msgstr "Configurations" +msgstr "Конфігурації" #: ../../configexamples/ha.rst:358 msgid "Configure Wireguard" -msgstr "Configure Wireguard" +msgstr "Налаштувати Wireguard" #: ../../configexamples/azure-vpn-bgp.rst:85 msgid "Configure a VTI with a dummy IP address" -msgstr "Configure a VTI with a dummy IP address" +msgstr "Налаштуйте VTI з фіктивною IP-адресою" #: ../../configexamples/ha.rst:312 msgid "Configure conntrack-sync and enable helpers" -msgstr "Configure conntrack-sync and enable helpers" +msgstr "Налаштуйте conntrack-sync і ввімкніть помічники" #: ../../configexamples/azure-vpn-bgp.rst:58 #: ../../configexamples/azure-vpn-dual-bgp.rst:57 msgid "Configure the IKE and ESP settings to match a subset of those supported by Azure:" -msgstr "Configure the IKE and ESP settings to match a subset of those supported by Azure:" +msgstr "Налаштуйте параметри IKE та ESP відповідно до підмножини тих, що підтримуються Azure:" #: ../../configexamples/azure-vpn-bgp.rst:98 msgid "Configure the VPN tunnel" -msgstr "Configure the VPN tunnel" +msgstr "Налаштуйте VPN-тунель" #: ../../configexamples/azure-vpn-dual-bgp.rst:101 msgid "Configure the VPN tunnels" -msgstr "Configure the VPN tunnels" +msgstr "Налаштуйте VPN-тунелі" #: ../../configexamples/wan-load-balancing.rst:47 msgid "Configure the WAN load balancer with the parameters described above:" -msgstr "Configure the WAN load balancer with the parameters described above:" +msgstr "Налаштуйте балансир навантаження глобальної мережі з параметрами, описаними вище:" #: ../../configexamples/wan-load-balancing.rst:46 msgid "Configure the load balancer" -msgstr "Configure the load balancer" +msgstr "Налаштуйте балансир навантаження" #: ../../configexamples/azure-vpn-dual-bgp.rst:84 msgid "Configure two VTIs with a dummy IP address each" -msgstr "Configure two VTIs with a dummy IP address each" +msgstr "Налаштуйте два VTI з фіктивною IP-адресою кожен" #: ../../configexamples/azure-vpn-bgp.rst:123 #: ../../configexamples/azure-vpn-dual-bgp.rst:141 msgid "Configure your BGP settings" -msgstr "Configure your BGP settings" +msgstr "Налаштуйте параметри BGP" #: ../../configexamples/ha.rst:314 msgid "Conntrack helper modules are enabled by default, but they tend to cause more problems than they're worth in complex networks. You can disable all of them at one go." -msgstr "Conntrack helper modules are enabled by default, but they tend to cause more problems than they're worth in complex networks. You can disable all of them at one go." +msgstr "Допоміжні модулі Conntrack увімкнено за замовчуванням, але вони, як правило, створюють більше проблем, ніж вони того варті, у складних мережах. Ви можете вимкнути їх усі за один раз." #: ../../configexamples/nmp.rst:9 msgid "Consider how to quickly set up NMP and VyOS for monitoring. NMP is multi-vendor network monitoring from 'SolarWinds' built to scale and expand with the needs of your network." -msgstr "Consider how to quickly set up NMP and VyOS for monitoring. NMP is multi-vendor network monitoring from 'SolarWinds' built to scale and expand with the needs of your network." +msgstr "Розглянемо, як швидко налаштувати NMP і VyOS для моніторингу. NMP — це моніторинг мережі від багатьох постачальників від SolarWinds, створений для масштабування та розширення відповідно до потреб вашої мережі." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:87 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:89 @@ -782,199 +810,199 @@ msgstr "Consider how to quickly set up NMP and VyOS for monitoring. NMP is multi #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:93 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:616 msgid "Core" -msgstr "Core" +msgstr "Ядро" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:134 msgid "Core Router" -msgstr "Core Router" +msgstr "Основний маршрутизатор" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:62 msgid "Core network" -msgstr "Core network" +msgstr "Основна мережа" #: ../../configexamples/ha.rst:417 msgid "Create Export Filter" -msgstr "Create Export Filter" +msgstr "Створити експортний фільтр" #: ../../configexamples/ha.rst:448 msgid "Create Import Filter" -msgstr "Create Import Filter" +msgstr "Створити фільтр імпорту" #: ../../configexamples/ha.rst:265 msgid "Create VRRP sync-group" -msgstr "Create VRRP sync-group" +msgstr "Створіть групу синхронізації VRRP" #: ../../configexamples/ha.rst:127 msgid "Create a LACP bond on the hardware router. We are assuming that eth0 and eth1 are connected to port 8 on both switches, and that those ports are configured as a Port-Channel." -msgstr "Create a LACP bond on the hardware router. We are assuming that eth0 and eth1 are connected to port 8 on both switches, and that those ports are configured as a Port-Channel." +msgstr "Створіть зв’язок LACP на апаратному маршрутизаторі. Ми припускаємо, що eth0 і eth1 підключені до порту 8 на обох комутаторах і що ці порти налаштовані як порт-канал." #: ../../configexamples/ha.rst:117 msgid "Create an 'All VLANs' network group, that passes all trunked traffic through to the VM. Attach this network group to router1 as eth0." -msgstr "Create an 'All VLANs' network group, that passes all trunked traffic through to the VM. Attach this network group to router1 as eth0." +msgstr "Створіть мережеву групу «Усі VLAN», яка передає весь транкінговий трафік до віртуальної машини. Приєднайте цю мережеву групу до router1 як eth0." #: ../../configexamples/wan-load-balancing.rst:81 msgid "Create interface weight based configuration" -msgstr "Create interface weight based configuration" +msgstr "Створення конфігурації на основі ваги інтерфейсу" #: ../../configexamples/wan-load-balancing.rst:111 msgid "Create rule order based configuration" -msgstr "Create rule order based configuration" +msgstr "Створення конфігурації на основі порядку правил" #: ../../configexamples/wan-load-balancing.rst:142 msgid "Create rule order based configuration with low speed secondary link" -msgstr "Create rule order based configuration with low speed secondary link" +msgstr "Створіть конфігурацію на основі порядку правил із низькошвидкісним вторинним посиланням" #: ../../configexamples/wan-load-balancing.rst:35 msgid "Create static routes through the two ISPs towards the ping targets and commit the changes:" -msgstr "Create static routes through the two ISPs towards the ping targets and commit the changes:" +msgstr "Створіть статичні маршрути через двох провайдерів до цілей ping і зафіксуйте зміни:" #: ../../configexamples/wan-load-balancing.rst:34 msgid "Create static routes to ping targets" -msgstr "Create static routes to ping targets" +msgstr "Створіть статичні маршрути до цілей ping" #: ../../configexamples/ha.rst:110 msgid "Create your router1 VM. So it can withstand a VM Host failing or a network link failing. Using VMware, this is achieved by enabling vSphere DRS, vSphere Availability, and creating a Distributed Port Group that uses LACP." -msgstr "Create your router1 VM. So it can withstand a VM Host failing or a network link failing. Using VMware, this is achieved by enabling vSphere DRS, vSphere Availability, and creating a Distributed Port Group that uses LACP." +msgstr "Створіть віртуальну машину router1. Таким чином, він може витримати збій хоста віртуальної машини або мережевого з’єднання. За допомогою VMware це досягається шляхом увімкнення vSphere DRS, vSphere Availability та створення розподіленої групи портів, яка використовує LACP." #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:44 #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:62 msgid "DHCP-Relay" -msgstr "DHCP-Relay" +msgstr "DHCP-ретрансляція" #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:37 #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:55 msgid "DHCP-Server" -msgstr "DHCP-Server" +msgstr "DHCP-сервер" #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:3 msgid "DHCP Relay trough GRE-Bridge" -msgstr "DHCP Relay trough GRE-Bridge" +msgstr "DHCP Relay через GRE-Bridge" #: ../../configexamples/pppoe-ipv6-basic.rst:42 msgid "DHCPv6-PD Setup" -msgstr "DHCPv6-PD Setup" +msgstr "Налаштування DHCPv6-PD" #: ../../configexamples/zone-policy.rst:374 msgid "DMZ-LAN policy is LAN-DMZ. You can get a rhythm to it when you build out a bunch at one time." -msgstr "DMZ-LAN policy is LAN-DMZ. You can get a rhythm to it when you build out a bunch at one time." +msgstr "Політика DMZ-LAN – LAN-DMZ. Ви можете досягти ритму, коли ви створюєте купу одночасно." #: ../../configexamples/zone-policy.rst:49 msgid "DMZ cannot access LAN resources." -msgstr "DMZ cannot access LAN resources." +msgstr "DMZ не може отримати доступ до ресурсів локальної мережі." #: ../../configexamples/ha.rst:18 msgid "Design" -msgstr "Design" +msgstr "Дизайн" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:85 msgid "Device-A" -msgstr "Device-A" +msgstr "Пристрій-А" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:85 msgid "Device-B" -msgstr "Device-B" +msgstr "Пристрій-Б" #: ../../configexamples/ha.rst:514 msgid "Duplicate configuration" -msgstr "Duplicate configuration" +msgstr "Дубльована конфігурація" #: ../../configexamples/pppoe-ipv6-basic.rst:44 msgid "During address configuration, in addition to assigning an address to the WAN interface, ISP also provides a prefix to allow the router to configure addresses of LAN interface and other nodes connecting to LAN, which is called prefix delegation (PD)." -msgstr "During address configuration, in addition to assigning an address to the WAN interface, ISP also provides a prefix to allow the router to configure addresses of LAN interface and other nodes connecting to LAN, which is called prefix delegation (PD)." +msgstr "Під час конфігурації адреси, окрім призначення адреси інтерфейсу WAN, ISP також надає префікс, який дозволяє маршрутизатору налаштовувати адреси інтерфейсу LAN та інших вузлів, що підключаються до LAN, що називається делегуванням префікса (PD)." #: ../../configexamples/l3vpn-hub-and-spoke.rst:484 msgid "Dynamic routing used between CE and PE nodes and eBGP peering established for the route exchanging between them. All routes received by PEs are then exported to L3VPN and delivered from Spoke sites to Hub and vise-versa based on previously configured L3VPN parameters." -msgstr "Dynamic routing used between CE and PE nodes and eBGP peering established for the route exchanging between them. All routes received by PEs are then exported to L3VPN and delivered from Spoke sites to Hub and vise-versa based on previously configured L3VPN parameters." +msgstr "Динамічна маршрутизація, що використовується між вузлами CE і PE, і eBGP, встановлений для обміну маршрутами між ними. Усі маршрути, отримані PE, потім експортуються до L3VPN і доставляються з Spoke-сайтів до Hub і навпаки на основі попередньо налаштованих параметрів L3VPN." #: ../../configexamples/zone-policy.rst:91 msgid "Each interface is assigned to a zone. The interface can be physical or virtual such as tunnels (VPN, PPTP, GRE, etc) and are treated exactly the same." -msgstr "Each interface is assigned to a zone. The interface can be physical or virtual such as tunnels (VPN, PPTP, GRE, etc) and are treated exactly the same." +msgstr "Кожен інтерфейс призначений для зони. Інтерфейс може бути фізичним або віртуальним, як-от тунелі (VPN, PPTP, GRE тощо), і обробляється однаково." #: ../../configexamples/index.rst:35 msgid "Each lab will build an test from an external script. The page content will generate, so changes will not take an effect." -msgstr "Each lab will build an test from an external script. The page content will generate, so changes will not take an effect." +msgstr "Кожна лабораторія створить тест із зовнішнього сценарію. Вміст сторінки генеруватиметься, тому зміни не матимуть чинності." #: ../../configexamples/azure-vpn-bgp.rst:79 #: ../../configexamples/azure-vpn-dual-bgp.rst:78 msgid "Enable IPsec on eth0" -msgstr "Enable IPsec on eth0" +msgstr "Увімкніть IPsec на eth0" #: ../../configexamples/ha.rst:470 msgid "Enable OSPF" -msgstr "Enable OSPF" +msgstr "Увімкніть OSPF" #: ../../configexamples/ha.rst:174 msgid "Enable SSH" -msgstr "Enable SSH" +msgstr "Увімкніть SSH" #: ../../configexamples/ha.rst:176 msgid "Enable SSH so you can now SSH into the routers, rather than using the console." -msgstr "Enable SSH so you can now SSH into the routers, rather than using the console." +msgstr "Увімкніть SSH, щоб тепер ви могли підключатися через SSH до маршрутизаторів, а не використовувати консоль." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:140 msgid "Enables router advertisements. This is an IPv6 alternative for DHCP (though DHCPv6 can still be used). With RAs, Your devices will automatically find the information they need for routing and DNS." -msgstr "Enables router advertisements. This is an IPv6 alternative for DHCP (though DHCPv6 can still be used). With RAs, Your devices will automatically find the information they need for routing and DNS." +msgstr "Вмикає оголошення маршрутизатора. Це альтернатива IPv6 для DHCP (хоча DHCPv6 все ще можна використовувати). За допомогою RA ваші пристрої автоматично знайдуть інформацію, необхідну для маршрутизації та DNS." #: ../../configexamples/zone-policy.rst:253 msgid "Even if the two zones will never communicate, it is a good idea to create the zone-pair-direction rulesets and set enable-default-log. This will allow you to log attempts to access the networks. Without it, you will never see the connection attempts." -msgstr "Even if the two zones will never communicate, it is a good idea to create the zone-pair-direction rulesets and set enable-default-log. This will allow you to log attempts to access the networks. Without it, you will never see the connection attempts." +msgstr "Навіть якщо дві зони ніколи не спілкуватимуться, доцільно створити набори правил zone-pair-direction і встановити enable-default-log. Це дозволить вам реєструвати спроби доступу до мереж. Без нього ви ніколи не побачите спроб підключення." #: ../../configexamples/ha.rst:472 msgid "Every router **must** have a unique router-id. The 'reference-bandwidth' is used because when OSPF was originally designed, the idea of a link faster than 1gbit was unheard of, and it does not scale correctly." -msgstr "Every router **must** have a unique router-id. The 'reference-bandwidth' is used because when OSPF was originally designed, the idea of a link faster than 1gbit was unheard of, and it does not scale correctly." +msgstr "Кожен маршрутизатор **повинен** мати унікальний ідентифікатор маршрутизатора. «Reference-bandwidth» використовується тому, що коли OSPF був спочатку розроблений, ідея зв’язку, швидшого за 1 Гбіт, була нечуваною, і вона не масштабується належним чином." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:114 msgid "Every router that provides access to a customer network needs to have the customer network (VRF + VNI) configured. To make our own lives easier, we utilize the same VRF table id (local routing table number) and VNI (Virtual Network Identifier) per tenant on all our routers." -msgstr "Every router that provides access to a customer network needs to have the customer network (VRF + VNI) configured. To make our own lives easier, we utilize the same VRF table id (local routing table number) and VNI (Virtual Network Identifier) per tenant on all our routers." +msgstr "Кожний маршрутизатор, який надає доступ до клієнтської мережі, повинен мати налаштовану клієнтську мережу (VRF + VNI). Щоб полегшити собі життя, ми використовуємо однаковий ідентифікатор таблиці VRF (номер таблиці локальної маршрутизації) та VNI (ідентифікатор віртуальної мережі) для кожного клієнта на всіх наших маршрутизаторах." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:108 msgid "Every tenant is assigned an individual VRF that would support overlapping address ranges for customers blue, red and green. In our example, we do not use overlapping ranges to make it easier when showing debug commands." -msgstr "Every tenant is assigned an individual VRF that would support overlapping address ranges for customers blue, red and green. In our example, we do not use overlapping ranges to make it easier when showing debug commands." +msgstr "Кожному орендарю призначається окремий VRF, який підтримуватиме перекриття діапазонів адрес для клієнтів синього, червоного та зеленого кольорів. У нашому прикладі ми не використовуємо діапазони, що перекриваються, щоб полегшити показ команд налагодження." #: ../../configexamples/azure-vpn-bgp.rst:31 #: ../../configexamples/azure-vpn-dual-bgp.rst:28 msgid "Example" -msgstr "Example" +msgstr "приклад" #: ../../configexamples/wan-load-balancing.rst:12 msgid "Example 1: Distributing load evenly" -msgstr "Example 1: Distributing load evenly" +msgstr "Приклад 1: рівномірний розподіл навантаження" #: ../../configexamples/wan-load-balancing.rst:68 msgid "Example 2: Failover based on interface weights" -msgstr "Example 2: Failover based on interface weights" +msgstr "Приклад 2: відновлення після відмови на основі ваги інтерфейсу" #: ../../configexamples/wan-load-balancing.rst:95 msgid "Example 3: Failover based on rule order" -msgstr "Example 3: Failover based on rule order" +msgstr "Приклад 3: відновлення після відмови на основі порядку правил" #: ../../configexamples/wan-load-balancing.rst:124 msgid "Example 4: Failover based on rule order - priority traffic" -msgstr "Example 4: Failover based on rule order - priority traffic" +msgstr "Приклад 4: відновлення після відмови на основі порядку правил – пріоритетний трафік" #: ../../configexamples/wan-load-balancing.rst:156 msgid "Example 5: Exclude traffic from load balancing" -msgstr "Example 5: Exclude traffic from load balancing" +msgstr "Приклад 5: виключення трафіку з балансування навантаження" #: ../../configexamples/ha.rst:43 msgid "Example Network" -msgstr "Example Network" +msgstr "Приклад мережі" #: ../../configexamples/pppoe-ipv6-basic.rst:38 msgid "Fill ``password`` and ``user`` with the credential provided by your ISP." -msgstr "Fill ``password`` and ``user`` with the credential provided by your ISP." +msgstr "Заповніть ``password`` і ``user`` обліковими даними, наданими вашим провайдером." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:202 msgid "Finally, don't forget the :ref:`firewall`. The usage is identical, except for instead of `set firewall name NAME`, you would use `set firewall ipv6-name NAME`." -msgstr "Finally, don't forget the :ref:`firewall`. The usage is identical, except for instead of `set firewall name NAME`, you would use `set firewall ipv6-name NAME`." +msgstr "Нарешті, не забудьте про :ref:`firewall`. Використання ідентичне, за винятком того, що замість «встановити ім’я брандмауера ІМ’Я» ви використовуєте «встановити ім’я ipv6 брандмауера ІМ’Я»." #: ../../configexamples/l3vpn-hub-and-spoke.rst:985 msgid "Finally, let’s check the reachability between CEs:" -msgstr "Finally, let’s check the reachability between CEs:" +msgstr "Нарешті, давайте перевіримо доступність між CE:" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:200 msgid "Firewall" -msgstr "Firewall" +msgstr "Брандмауер" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:123 msgid "Firewall Configuration:" @@ -982,19 +1010,19 @@ msgstr "Firewall Configuration:" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:39 msgid "First, we configure the ``vyos-wan`` interface to get a DHCP address." -msgstr "First, we configure the ``vyos-wan`` interface to get a DHCP address." +msgstr "Спочатку ми налаштовуємо інтерфейс ``vyos-wan`` для отримання адреси DHCP." #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:28 msgid "First, we configure the transport network and the Tunnel interface." -msgstr "First, we configure the transport network and the Tunnel interface." +msgstr "Спочатку ми налаштовуємо транспортну мережу та інтерфейс тунелю." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:44 msgid "First a CA, a signed server and client ceftificate and a Diffie-Hellman parameter musst be generated and installed. Please look :ref:`here ` for more information." -msgstr "First a CA, a signed server and client ceftificate and a Diffie-Hellman parameter musst be generated and installed. Please look :ref:`here ` for more information." +msgstr "Спочатку необхідно створити та встановити ЦС, підписаний сертифікат сервера та клієнта та параметр Діффі-Хеллмана. Подивіться :ref:`тут ` для отримання додаткової інформації." #: ../../configexamples/nmp.rst:15 msgid "First prepare our VyOS router for connection to NMP. We have to set up the SNMP protocol and connectivity between the router and NMP." -msgstr "First prepare our VyOS router for connection to NMP. We have to set up the SNMP protocol and connectivity between the router and NMP." +msgstr "Спочатку підготуйте наш маршрутизатор VyOS для підключення до NMP. Нам потрібно налаштувати протокол SNMP і підключення між маршрутизатором і NMP." #: ../../configexamples/site-2-site-cisco.rst:9 msgid "FlexVPN is a newer \"solution\" for deployment of VPNs and it utilizes IKEv2 as the key exchange protocol. The result is a flexible and scalable VPN solution that can be easily adapted to fit various network needs. It can also support a variety of encryption methods, including AES and 3DES." @@ -1002,15 +1030,19 @@ msgstr "FlexVPN is a newer \"solution\" for deployment of VPNs and it utilizes I #: ../../configexamples/ha.rst:60 msgid "For connection between sites, we are running a WireGuard link to two REMOTE routers and using OSPF over those links to distribute routes. That remote site is expected to send traffic from anything in 10.201.0.0/16" -msgstr "For connection between sites, we are running a WireGuard link to two REMOTE routers and using OSPF over those links to distribute routes. That remote site is expected to send traffic from anything in 10.201.0.0/16" +msgstr "Для з’єднання між сайтами ми запускаємо зв’язок WireGuard із двома ВІДДАЛЕНИМИ маршрутизаторами та використовуємо OSPF для цих посилань для розподілу маршрутів. Очікується, що цей віддалений сайт надсилатиме трафік із будь-якого місця в 10.201.0.0/16" #: ../../configexamples/pppoe-ipv6-basic.rst:56 msgid "For home network users, most of time ISP only provides /64 prefix, hence there is no need to set SLA ID and prefix length. See :ref:`pppoe-interface` for more information." -msgstr "For home network users, most of time ISP only provides /64 prefix, hence there is no need to set SLA ID and prefix length. See :ref:`pppoe-interface` for more information." +msgstr "Для користувачів домашньої мережі провайдер здебільшого надає лише префікс /64, тому немає необхідності встановлювати ідентифікатор SLA та довжину префікса. Перегляньте :ref:`pppoe-interface` для отримання додаткової інформації." #: ../../configexamples/azure-vpn-bgp.rst:11 msgid "For redundant / active-active configurations see :ref:`examples-azure-vpn-dual-bgp`" -msgstr "For redundant / active-active configurations see :ref:`examples-azure-vpn-dual-bgp`" +msgstr "Для надлишкових/активних-активних конфігурацій див. :ref:`examples-azure-vpn-dual-bgp`" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 +msgid "For simplicity, configuration and tests are done only using IPv4, and firewall configuration is done only on one router." +msgstr "For simplicity, configuration and tests are done only using IPv4, and firewall configuration is done only on one router." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 msgid "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." @@ -1018,23 +1050,23 @@ msgstr "For simplicity, configuration and tests are done only using ipv4, and fi #: ../../configexamples/ha.rst:146 msgid "For the hardware router, replace ``eth0`` with ``bond0``. As (almost) every command is identical, this will not be specified unless different things need to be performed on different hosts." -msgstr "For the hardware router, replace ``eth0`` with ``bond0``. As (almost) every command is identical, this will not be specified unless different things need to be performed on different hosts." +msgstr "Для апаратного маршрутизатора замініть ``eth0`` на ``bond0``. Оскільки (майже) кожна команда ідентична, це не буде вказано, якщо на різних хостах не потрібно виконувати різні дії." #: ../../configexamples/ha.rst:88 msgid "From Datacenter - This connects into port 1 on both switches, and is tagged as VLAN 50" -msgstr "From Datacenter - This connects into port 1 on both switches, and is tagged as VLAN 50" +msgstr "З центру обробки даних - це підключення до порту 1 на обох комутаторах і позначене як VLAN 50" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:427 msgid "From Management to LAN1/LAN2" -msgstr "From Management to LAN1/LAN2" +msgstr "Від керування до LAN1/LAN2" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:469 msgid "From Management to Outside (fails as intended)" -msgstr "From Management to Outside (fails as intended)" +msgstr "Від управління до зовнішнього (виходить з ладу, як передбачалося)" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:614 msgid "Full configuration from all devices" -msgstr "Full configuration from all devices" +msgstr "Повна конфігурація з усіх пристроїв" #: ../../configexamples/site-2-site-cisco.rst:23 msgid "GRE:" @@ -1042,59 +1074,59 @@ msgstr "GRE:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:19 msgid "General information about L3VPNs can be found in the :ref:`configuration/vrf/index:L3VPN VRFs` chapter." -msgstr "General information about L3VPNs can be found in the :ref:`configuration/vrf/index:L3VPN VRFs` chapter." +msgstr "Загальну інформацію про L3VPN можна знайти в розділі :ref:`configuration/vrf/index:L3VPN VRF`." #: ../../configexamples/l3vpn-hub-and-spoke.rst:49 msgid "General information can be found in the :ref:`configuration/vrf/index:L3VPN VRFs` chapter." -msgstr "General information can be found in the :ref:`configuration/vrf/index:L3VPN VRFs` chapter." +msgstr "Загальну інформацію можна знайти в розділі :ref:`configuration/vrf/index:L3VPN VRFs`." #: ../../configexamples/bgp-ipv6-unnumbered.rst:9 msgid "General information can be found in the :ref:`routing-bgp` chapter." -msgstr "General information can be found in the :ref:`routing-bgp` chapter." +msgstr "Загальну інформацію можна знайти в розділі :ref:`routing-bgp`." #: ../../configexamples/ospf-unnumbered.rst:9 msgid "General information can be found in the :ref:`routing-ospf` chapter." -msgstr "General information can be found in the :ref:`routing-ospf` chapter." +msgstr "Загальну інформацію можна знайти в розділі :ref:`routing-ospf`." #: ../../configexamples/ha.rst:74 msgid "Hardware" -msgstr "Hardware" +msgstr "Обладнання" #: ../../configexamples/ha.rst:91 msgid "Hardware Router - Port 8 of each switch" -msgstr "Hardware Router - Port 8 of each switch" +msgstr "Апаратний маршрутизатор - порт 8 кожного комутатора" #: ../../configexamples/zone-policy.rst:282 msgid "Here is an example of an IPv6 DMZ-WAN ruleset." -msgstr "Here is an example of an IPv6 DMZ-WAN ruleset." +msgstr "Ось приклад набору правил IPv6 DMZ-WAN." #: ../../configexamples/segment-routing-isis.rst:178 msgid "Here is the routing tables showing the MPLS segment routing label operations:" -msgstr "Here is the routing tables showing the MPLS segment routing label operations:" +msgstr "Ось таблиці маршрутизації, що показують операції міток маршрутизації сегмента MPLS:" #: ../../configexamples/pppoe-ipv6-basic.rst:76 msgid "Here we set the prefix to ``::/64`` to indicate advertising any /64 prefix the LAN interface is assigned." -msgstr "Here we set the prefix to ``::/64`` to indicate advertising any /64 prefix the LAN interface is assigned." +msgstr "Тут ми встановлюємо префікс ``::/64``, щоб позначити рекламу будь-якого префікса /64, призначеного інтерфейсу LAN." #: ../../configexamples/pppoe-ipv6-basic.rst:54 msgid "Here we use the prefix to configure the address of eth1 (LAN) to form ``::64``, where ``64`` is hexadecimal of address 100." -msgstr "Here we use the prefix to configure the address of eth1 (LAN) to form ``::64``, where ``64`` is hexadecimal of address 100." +msgstr "Тут ми використовуємо префікс для налаштування адреси eth1 (LAN) у формі `` ::64``, де ``64`` є шістнадцятковим адресою 100." #: ../../configexamples/ha.rst:7 msgid "High Availability Walkthrough" -msgstr "High Availability Walkthrough" +msgstr "Покрокове керівництво щодо високої доступності" #: ../../configexamples/l3vpn-hub-and-spoke.rst:65 msgid "How does it work?" -msgstr "How does it work?" +msgstr "Як це працює?" #: ../../configexamples/l3vpn-hub-and-spoke.rst:88 msgid "Hub" -msgstr "Hub" +msgstr "Хаб" #: ../../configexamples/l3vpn-hub-and-spoke.rst:6 msgid "IP/MPLS technology is widely used by various service providers and large enterprises in order to achieve better network scalability, manageability and flexibility. It also provides the possibility to deliver different services for the customers in a seamless manner. Layer 3 VPN (L3VPN) is a type of VPN mode that is built and delivered through OSI layer 3 networking technologies. Often the border gateway protocol (BGP) is used to send and receive VPN-related data that is responsible for the control plane. L3VPN utilizes virtual routing and forwarding (VRF) techniques to receive and deliver user data as well as separate data planes of the end-users. It is built using a combination of IP- and MPLS-based information. Generally, L3VPNs are used to send data on back-end VPN infrastructures, such as for VPN connections between data centres, HQs and branches." -msgstr "IP/MPLS technology is widely used by various service providers and large enterprises in order to achieve better network scalability, manageability and flexibility. It also provides the possibility to deliver different services for the customers in a seamless manner. Layer 3 VPN (L3VPN) is a type of VPN mode that is built and delivered through OSI layer 3 networking technologies. Often the border gateway protocol (BGP) is used to send and receive VPN-related data that is responsible for the control plane. L3VPN utilizes virtual routing and forwarding (VRF) techniques to receive and deliver user data as well as separate data planes of the end-users. It is built using a combination of IP- and MPLS-based information. Generally, L3VPNs are used to send data on back-end VPN infrastructures, such as for VPN connections between data centres, HQs and branches." +msgstr "Технологія IP/MPLS широко використовується різними постачальниками послуг і великими підприємствами для досягнення кращої масштабованості, керованості та гнучкості мережі. Це також забезпечує можливість безперебійного надання різних послуг клієнтам. VPN рівня 3 (L3VPN) — це тип режиму VPN, створений і надається за допомогою мережевих технологій рівня 3 OSI. Часто протокол прикордонного шлюзу (BGP) використовується для надсилання та отримання даних, пов’язаних з VPN, які відповідають за площину керування. L3VPN використовує методи віртуальної маршрутизації та переадресації (VRF) для отримання та доставки даних користувачів, а також окремих рівнів даних кінцевих користувачів. Він створений з використанням комбінації інформації на основі IP та MPLS. Зазвичай L3VPN використовуються для надсилання даних у внутрішні інфраструктури VPN, наприклад для VPN-з’єднань між центрами обробки даних, штаб-квартирами та філіями." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:65 msgid "IPSec configuration:" @@ -1102,7 +1134,7 @@ msgstr "IPSec configuration:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:82 msgid "IP Schema" -msgstr "IP Schema" +msgstr "IP-схема" #: ../../configexamples/site-2-site-cisco.rst:34 msgid "IPsec:" @@ -1110,23 +1142,23 @@ msgstr "IPsec:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:85 msgid "IPv4 Network" -msgstr "IPv4 Network" +msgstr "Мережа IPv4" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:85 msgid "IPv6 Network" -msgstr "IPv6 Network" +msgstr "Мережа IPv6" #: ../../configexamples/zone-policy.rst:383 msgid "IPv6 Tunnel" -msgstr "IPv6 Tunnel" +msgstr "Тунель IPv6" #: ../../configexamples/segment-routing-isis.rst:17 msgid "ISIS-SR example network" -msgstr "ISIS-SR example network" +msgstr "Приклад мережі ISIS-SR" #: ../../configexamples/segment-routing-isis.rst:17 msgid "ISIS-SR network" -msgstr "ISIS-SR network" +msgstr "Мережа ІДІЛ-СР" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:93 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:739 @@ -1135,87 +1167,91 @@ msgstr "ISP" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:64 msgid "I chose to run OSPF as the IGP (Interior Gateway Protocol). All required BGP sessions are established via a dummy interfaces (similar to the loopback, but in Linux you can have only one loopback, while there can be many dummy interfaces) on the PE routers. In case of a link failure, traffic is diverted in the other direction in this triangle setup and BGP sessions will not go down. One could even enable BFD (Bidirectional Forwarding Detection) on the links for a faster failover and resilience in the network." -msgstr "I chose to run OSPF as the IGP (Interior Gateway Protocol). All required BGP sessions are established via a dummy interfaces (similar to the loopback, but in Linux you can have only one loopback, while there can be many dummy interfaces) on the PE routers. In case of a link failure, traffic is diverted in the other direction in this triangle setup and BGP sessions will not go down. One could even enable BFD (Bidirectional Forwarding Detection) on the links for a faster failover and resilience in the network." +msgstr "Я вирішив запустити OSPF як IGP (Interior Gateway Protocol). Усі необхідні сеанси BGP встановлюються за допомогою фіктивних інтерфейсів (подібно до loopback, але в Linux ви можете мати лише один loopback, тоді як фіктивних інтерфейсів може бути багато) на маршрутизаторах PE. У разі збою з’єднання трафік перенаправляється в іншому напрямку в цьому трикутнику, і сеанси BGP не припиняються. Можна навіть увімкнути BFD (Bidirectional Forwarding Detection) на з’єднаннях для швидшого відмовостійкості та стійкості мережі." #: ../../configexamples/zone-policy.rst:171 msgid "I create/configure the interfaces first. Build out the rulesets for each zone-pair-direction which includes at least the three state rules. Then I setup the zone-policies." -msgstr "I create/configure the interfaces first. Build out the rulesets for each zone-pair-direction which includes at least the three state rules. Then I setup the zone-policies." +msgstr "Спочатку я створюю/налаштовую інтерфейси. Створіть набори правил для кожної зони-пари-напрямку, які включають принаймні три правила стану. Потім я встановлюю політику зони." #: ../../configexamples/zone-policy.rst:100 msgid "I name rule sets to indicate which zone-pair-direction they represent. eg. ZoneA-ZoneB or ZoneB-ZoneA. LAN-DMZ, DMZ-LAN." -msgstr "I name rule sets to indicate which zone-pair-direction they represent. eg. ZoneA-ZoneB or ZoneB-ZoneA. LAN-DMZ, DMZ-LAN." +msgstr "Я називаю набори правил, щоб вказати, яку зону-пару-напрямок вони представляють. напр. ЗонаА-ЗонаБ або ЗонаБ-ЗонаА. LAN-DMZ, DMZ-LAN." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:14 msgid "I named the customers blue, red and green which is common practice in VRF (Virtual Routing and Forwarding) documentation scenarios." -msgstr "I named the customers blue, red and green which is common practice in VRF (Virtual Routing and Forwarding) documentation scenarios." +msgstr "Я назвав клієнтів синім, червоним і зеленим, що є звичайною практикою в сценаріях документації VRF (віртуальна маршрутизація та пересилання)." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:9 msgid "I spun up a new lab in EVE-NG, which represents this as the \"Foo Bar - Service Provider Inc.\" that has 3 points of presence (PoP) in random datacenters/sites named PE1, PE2, and PE3. Each PoP aggregates at least two customers." -msgstr "I spun up a new lab in EVE-NG, which represents this as the \"Foo Bar - Service Provider Inc.\" that has 3 points of presence (PoP) in random datacenters/sites named PE1, PE2, and PE3. Each PoP aggregates at least two customers." +msgstr "Я створив нову лабораторію в EVE-NG, яка представляє це як "Foo Bar - Service Provider Inc." який має 3 точки присутності (PoP) у випадкових центрах обробки даних/сайтах під назвою PE1, PE2 і PE3. Кожен PoP об’єднує принаймні двох клієнтів." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:256 msgid "If the client is connect successfully you can check the output with" -msgstr "If the client is connect successfully you can check the output with" +msgstr "Якщо клієнт підключено успішно, ви можете перевірити вихід за допомогою" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:236 msgid "If we need to retrieve information about a specific host/network inside the EVPN network we need to run" -msgstr "If we need to retrieve information about a specific host/network inside the EVPN network we need to run" +msgstr "Якщо нам потрібно отримати інформацію про певний хост/мережу всередині мережі EVPN, нам потрібно запустити" #: ../../configexamples/ha.rst:34 msgid "If you are following through this document, it is strongly suggested you complete the entire document, ONLY doing the virtual router1 steps, and then come back and walk through it AGAIN on the backup hardware router." -msgstr "If you are following through this document, it is strongly suggested you complete the entire document, ONLY doing the virtual router1 steps, and then come back and walk through it AGAIN on the backup hardware router." +msgstr "Якщо ви дотримуєтеся цього документа, наполегливо рекомендуємо пройти весь документ, ЛИШЕ виконавши кроки віртуального маршрутизатора1, а потім повернутися та переглянути його ЩЕ РАВНО на резервному апаратному маршрутизаторі." #: ../../configexamples/zone-policy.rst:385 msgid "If you are using a IPv6 tunnel from HE.net or someone else, the basis is the same except you have two WAN interfaces. One for v4 and one for v6." -msgstr "If you are using a IPv6 tunnel from HE.net or someone else, the basis is the same except you have two WAN interfaces. One for v4 and one for v6." +msgstr "Якщо ви використовуєте тунель IPv6 від HE.net або когось іншого, основа така сама, за винятком того, що у вас є два інтерфейси WAN. Один для v4 і один для v6." #: ../../configexamples/ha.rst:354 msgid "If you use a routing protocol itself, you solve two problems at once. This is only a basic example, and is provided as a starting point." -msgstr "If you use a routing protocol itself, you solve two problems at once. This is only a basic example, and is provided as a starting point." +msgstr "Якщо ви використовуєте сам протокол маршрутизації, ви вирішуєте дві проблеми одночасно. Це лише базовий приклад, який надається як відправна точка." #: ../../configexamples/zone-policy.rst:110 msgid "If your computer is on the LAN and you need to SSH into your VyOS box, you would need a rule to allow it in the LAN-Local ruleset. If you want to access a webpage from your VyOS box, you need a rule to allow it in the Local-LAN ruleset." -msgstr "If your computer is on the LAN and you need to SSH into your VyOS box, you would need a rule to allow it in the LAN-Local ruleset. If you want to access a webpage from your VyOS box, you need a rule to allow it in the Local-LAN ruleset." +msgstr "Якщо ваш комп’ютер під’єднано до локальної мережі, і вам потрібно підключитися через SSH до свого блоку VyOS, вам знадобиться правило, яке дозволятиме це в наборі правил LAN-Local. Якщо ви хочете отримати доступ до веб-сторінки зі свого вікна VyOS, вам потрібне правило, щоб дозволити це в наборі правил локальної локальної мережі." #: ../../configexamples/l3vpn-hub-and-spoke.rst:44 msgid "Image name: vyos-1.4-rolling-202110310317-amd64.iso" -msgstr "Image name: vyos-1.4-rolling-202110310317-amd64.iso" +msgstr "Назва зображення: vyos-1.4-rolling-202110310317-amd64.iso" #: ../../configexamples/zone-policy.rst:103 msgid "In VyOS, you have to have unique Ruleset names. In the event of overlap, I add a \"-6\" to the end of v6 rulesets. eg. LAN-DMZ, LAN-DMZ-6. This allows for each auto-completion and uniqueness." -msgstr "In VyOS, you have to have unique Ruleset names. In the event of overlap, I add a \"-6\" to the end of v6 rulesets. eg. LAN-DMZ, LAN-DMZ-6. This allows for each auto-completion and uniqueness." +msgstr "У VyOS ви повинні мати унікальні імена набору правил. У разі збігу я додаю «-6» у кінець наборів правил v6. напр. LAN-DMZ, LAN-DMZ-6. Це забезпечує кожне автозавершення та унікальність." #: ../../configexamples/zone-policy.rst:167 msgid "In VyOS you must have the interfaces created before you can apply it to the zone and the rulesets must be created prior to applying it to a zone-policy." -msgstr "In VyOS you must have the interfaces created before you can apply it to the zone and the rulesets must be created prior to applying it to a zone-policy." +msgstr "У VyOS у вас повинні бути створені інтерфейси, перш ніж ви зможете застосувати його до зони, а набори правил мають бути створені перед застосуванням його до зональної політики." #: ../../configexamples/zone-policy.rst:18 msgid "In :vytask:`T2199` the syntax of the zone configuration was changed. The zone configuration moved from ``zone-policy zone `` to ``firewall zone ``." -msgstr "In :vytask:`T2199` the syntax of the zone configuration was changed. The zone configuration moved from ``zone-policy zone `` to ``firewall zone ``." +msgstr "У :vytask:`T2199` змінено синтаксис конфігурації зони. Конфігурацію зони переміщено з ``zone-policy zone `` до ``зони брандмауера ``." #: ../../configexamples/zone-policy.rst:115 msgid "In rules, it is good to keep them named consistently. As the number of rules you have grows, the more consistency you have, the easier your life will be." -msgstr "In rules, it is good to keep them named consistently. As the number of rules you have grows, the more consistency you have, the easier your life will be." +msgstr "У правилах добре, щоб вони називалися послідовно. У міру того, як кількість ваших правил зростає, чим більше у вас послідовності, тим легше вам буде жити." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:176 msgid "In the above examples, 1,2,ffff are all chosen by you. You can use 1-ffff (1-65535)." -msgstr "In the above examples, 1,2,ffff are all chosen by you. You can use 1-ffff (1-65535)." +msgstr "У наведених вище прикладах 1,2,ffff вибрано вами. Ви можете використовувати 1-ffff (1-65535)." #: ../../configexamples/qos.rst:157 msgid "In the end, on the router “VyOS2” we will set outgoing bandwidth limits between the “VyOS3” and “VyOS1” routers. Let's set a limit for IP 10.1.1.100 = 5 Mbps(Tx). We will check the result of the work with the help of the “iPerf” utility." -msgstr "In the end, on the router “VyOS2” we will set outgoing bandwidth limits between the “VyOS3” and “VyOS1” routers. Let's set a limit for IP 10.1.1.100 = 5 Mbps(Tx). We will check the result of the work with the help of the “iPerf” utility." +msgstr "Зрештою, на маршрутизаторі “VyOS2” ми встановимо обмеження вихідної смуги пропускання між маршрутизаторами “VyOS3” і “VyOS1”. Давайте встановимо обмеження для IP 10.1.1.100 = 5 Мбіт/с (Tx). Результат роботи перевіримо за допомогою утиліти «iPerf»." #: ../../configexamples/qos.rst:35 msgid "In the end, we will configure the traffic shaper using QoS mechanisms on the “VYOS2” router." -msgstr "In the end, we will configure the traffic shaper using QoS mechanisms on the “VYOS2” router." +msgstr "На завершення ми налаштуємо формувач трафіку за допомогою механізмів QoS на маршрутизаторі «VYOS2»." #: ../../configexamples/nmp.rst:66 msgid "In the end, you'll get a powerful instrument for monitoring the VyOS systems." -msgstr "In the end, you'll get a powerful instrument for monitoring the VyOS systems." +msgstr "У підсумку ви отримаєте потужний інструмент для моніторингу систем VyOS." #: ../../configexamples/zone-policy.rst:377 msgid "In the end, you will end up with something like this config. I took out everything but the Firewall, Interfaces, and zone-policy sections. It is long enough as is." -msgstr "In the end, you will end up with something like this config. I took out everything but the Firewall, Interfaces, and zone-policy sections. It is long enough as is." +msgstr "Зрештою, ви отримаєте щось на зразок цієї конфігурації. Я видалив усе, окрім розділів Firewall, Interfaces і zone-policy. Він досить довгий як є." + +#: ../../configexamples/ansible.rst:216 +msgid "In the next chapter of the example, we'll use Ansible with jinja2 templates and variables." +msgstr "In the next chapter of the example, we'll use Ansible with jinja2 templates and variables." #: ../../configexamples/ansible.rst:216 msgid "In the next chapter of the example, we'll use the Ansible with jinja2 templates and variables." @@ -1223,23 +1259,23 @@ msgstr "In the next chapter of the example, we'll use the Ansible with jinja2 te #: ../../configexamples/ha.rst:154 msgid "In this case, the hardware router has a different IP, so it would be" -msgstr "In this case, the hardware router has a different IP, so it would be" +msgstr "У цьому випадку апаратний маршрутизатор має іншу IP-адресу, тому так і буде" #: ../../configexamples/qos.rst:12 msgid "In this case, we'll try to make a simple lab using QoS and the general ability of the VyOS system. We recommend you to go through the main article about `QoS `_ first." -msgstr "In this case, we'll try to make a simple lab using QoS and the general ability of the VyOS system. We recommend you to go through the main article about `QoS `_ first." +msgstr "У цьому випадку ми спробуємо зробити просту лабораторну роботу, використовуючи QoS і загальні можливості системи VyOS. Ми рекомендуємо вам переглянути основну статтю про `QoS `_ перший." #: ../../configexamples/zone-policy.rst:365 msgid "In this case, we are setting the v6 ruleset that represents traffic sourced from the LAN, destined for the DMZ. Because the zone-policy firewall syntax is a little awkward, I keep it straight by thinking of it backwards." -msgstr "In this case, we are setting the v6 ruleset that represents traffic sourced from the LAN, destined for the DMZ. Because the zone-policy firewall syntax is a little awkward, I keep it straight by thinking of it backwards." +msgstr "У цьому випадку ми встановлюємо набір правил v6, який представляє трафік, отриманий з локальної мережі, призначений для DMZ. Оскільки синтаксис брандмауера політики зони трохи незграбний, я тримаю його чітким, думаючи про це в зворотному порядку." #: ../../configexamples/ha.rst:45 msgid "In this document, we have been allocated 203.0.113.0/24 by our upstream provider, which we are publishing on VLAN100." -msgstr "In this document, we have been allocated 203.0.113.0/24 by our upstream provider, which we are publishing on VLAN100." +msgstr "У цьому документі наш вихідний постачальник виділив нам 203.0.113.0/24, який ми публікуємо на VLAN100." #: ../../configexamples/wan-load-balancing.rst:76 msgid "In this example, eth0 is the primary interface and eth1 is the secondary interface. To provide simple failover functionality. If eth0 fails, eth1 takes over." -msgstr "In this example, eth0 is the primary interface and eth1 is the secondary interface. To provide simple failover functionality. If eth0 fails, eth1 takes over." +msgstr "У цьому прикладі eth0 є основним інтерфейсом, а eth1 — вторинним. Для забезпечення простої функції відновлення після відмови. Якщо eth0 не вдається, eth1 бере на себе." #: ../../configexamples/ansible.rst:12 msgid "In this example, we will set up a simple use of Ansible to configure multiple VyoS routers. We have four pre-configured routers with this configuration:" @@ -1247,15 +1283,15 @@ msgstr "In this example, we will set up a simple use of Ansible to configure mul #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:42 msgid "In this example OpenVPN will be setup with a client certificate and username / password authentication." -msgstr "In this example OpenVPN will be setup with a client certificate and username / password authentication." +msgstr "У цьому прикладі OpenVPN буде налаштовано за допомогою сертифіката клієнта та автентифікації за іменем користувача/паролем." #: ../../configexamples/wan-load-balancing.rst:158 msgid "In this example two LAN interfaces exist in different subnets instead of one like in the previous examples:" -msgstr "In this example two LAN interfaces exist in different subnets instead of one like in the previous examples:" +msgstr "У цьому прикладі два інтерфейси LAN існують у різних підмережах замість одного, як у попередніх прикладах:" #: ../../configexamples/zone-policy.rst:107 msgid "In this example we have 4 zones. LAN, WAN, DMZ, Local. The local zone is the firewall itself." -msgstr "In this example we have 4 zones. LAN, WAN, DMZ, Local. The local zone is the firewall itself." +msgstr "У цьому прикладі ми маємо 4 зони. LAN, WAN, DMZ, локальний. Локальною зоною є сам брандмауер." #: ../../configexamples/lac-lns.rst:17 msgid "In this example we use VyOS 1.5 as LNS and Cisco IOS as LAC. All users with domain **vyos.io** will be tunneled to LNS via L2TP." @@ -1267,15 +1303,23 @@ msgstr "In this lab we use Windows PPPoE client." #: ../../configexamples/zone-policy.rst:50 msgid "Inbound WAN connect to DMZ host." -msgstr "Inbound WAN connect to DMZ host." +msgstr "Вхідне підключення WAN до хосту DMZ." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:189 msgid "Information about Ethernet Virtual Private Networks" -msgstr "Information about Ethernet Virtual Private Networks" +msgstr "Інформація про віртуальні приватні мережі Ethernet" #: ../../configexamples/segment-routing-isis.rst:223 msgid "Information about prefix-sid and label-operation from VyOS" -msgstr "Information about prefix-sid and label-operation from VyOS" +msgstr "Інформація про prefix-sid і label-operation від VyOS" + +#: ../../configexamples/ansible.rst:37 +msgid "Install Ansible:" +msgstr "Install Ansible:" + +#: ../../configexamples/ansible.rst:44 +msgid "Install Paramiko:" +msgstr "Install Paramiko:" #: ../../configexamples/ansible.rst:37 msgid "Install the Ansible:" @@ -1287,11 +1331,11 @@ msgstr "Install the paramiko:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:3 msgid "Inter-VRF Routing over VRF Lite" -msgstr "Inter-VRF Routing over VRF Lite" +msgstr "Маршрутизація між VRF через VRF Lite" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:603 msgid "Inter-VRF routing is a well-known solution to address complex routing scenarios that enable -in a dynamic way- to leak routes between VRFs. Is recommended to take special consideration while designing route-targets and its application as it can minimize future interventions while creating a new VRF will automatically take the desired effect in its propagation." -msgstr "Inter-VRF routing is a well-known solution to address complex routing scenarios that enable -in a dynamic way- to leak routes between VRFs. Is recommended to take special consideration while designing route-targets and its application as it can minimize future interventions while creating a new VRF will automatically take the desired effect in its propagation." +msgstr "Маршрутизація між VRF є добре відомим рішенням для вирішення складних сценаріїв маршрутизації, які дозволяють динамічно пропускати маршрути між VRF. Рекомендується приділяти особливу увагу під час проектування цілей маршруту та його застосування, оскільки це може мінімізувати майбутні втручання, тоді як створення нового VRF автоматично матиме бажаний ефект у своєму поширенні." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:49 msgid "Interface and routing configuration:" @@ -1299,64 +1343,64 @@ msgstr "Interface and routing configuration:" #: ../../configexamples/ha.rst:195 msgid "Internal Network" -msgstr "Internal Network" +msgstr "Внутрішня мережа" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:30 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:108 msgid "Internet" -msgstr "Internet" +msgstr "Інтернет" #: ../../configexamples/zone-policy.rst:40 msgid "Internet - 192.168.200.100 - TCP/25" -msgstr "Internet - 192.168.200.100 - TCP/25" +msgstr "Інтернет - 192.168.200.100 - TCP/25" #: ../../configexamples/zone-policy.rst:39 msgid "Internet - 192.168.200.100 - TCP/443" -msgstr "Internet - 192.168.200.100 - TCP/443" +msgstr "Інтернет - 192.168.200.100 - TCP/443" #: ../../configexamples/zone-policy.rst:41 msgid "Internet - 192.168.200.100 - TCP/53" -msgstr "Internet - 192.168.200.100 - TCP/53" +msgstr "Інтернет - 192.168.200.100 - TCP/53" #: ../../configexamples/zone-policy.rst:38 msgid "Internet - 192.168.200.100 - TCP/80" -msgstr "Internet - 192.168.200.100 - TCP/80" +msgstr "Інтернет - 192.168.200.100 - TCP/80" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:79 msgid "It's important to note that all your existing configurations will be migrated automatically on image upgrade. Nothing to do on your side." -msgstr "It's important to note that all your existing configurations will be migrated automatically on image upgrade. Nothing to do on your side." +msgstr "Важливо зазначити, що всі ваші наявні конфігурації буде автоматично перенесено під час оновлення образу. Нічого робити на вашому боці." #: ../../configexamples/ha.rst:163 msgid "It is assumed that the routers provided by upstream are capable of acting as a default router, add that as a static route." -msgstr "It is assumed that the routers provided by upstream are capable of acting as a default router, add that as a static route." +msgstr "Передбачається, що маршрутизатори, надані вищим потоком, можуть діяти як маршрутизатор за замовчуванням, додайте це як статичний маршрут." #: ../../configexamples/zone-policy.rst:140 msgid "It is good practice to log both accepted and denied traffic. It can save you significant headaches when trying to troubleshoot a connectivity issue." -msgstr "It is good practice to log both accepted and denied traffic. It can save you significant headaches when trying to troubleshoot a connectivity issue." +msgstr "Рекомендується реєструвати як прийнятий, так і заборонений трафік. Це може позбавити вас значних головних болів під час спроб усунути проблему підключення." #: ../../configexamples/zone-policy.rst:60 msgid "It will look something like this:" -msgstr "It will look something like this:" +msgstr "Це буде виглядати приблизно так:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:13 msgid "Keep networks isolated is -in general- a good principle, but there are cases where you might need that some network can access other in a different VRF." -msgstr "Keep networks isolated is -in general- a good principle, but there are cases where you might need that some network can access other in a different VRF." +msgstr "Зберігати ізольовані мережі - це загалом хороший принцип, але є випадки, коли вам може знадобитися, щоб одна мережа мала доступ до іншої в іншому VRF." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:4 msgid "L3VPN EVPN with VyOS" -msgstr "L3VPN EVPN with VyOS" +msgstr "L3VPN EVPN з VyOS" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:-1 msgid "L3VPN EVPN with VyOS topology image" -msgstr "L3VPN EVPN with VyOS topology image" +msgstr "L3VPN EVPN із зображенням топології VyOS" #: ../../configexamples/l3vpn-hub-and-spoke.rst:83 msgid "L3VPN configuration parameters table:" -msgstr "L3VPN configuration parameters table:" +msgstr "Таблиця параметрів конфігурації L3VPN:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:4 msgid "L3VPN for Hub-and-Spoke connectivity with VyOS" -msgstr "L3VPN for Hub-and-Spoke connectivity with VyOS" +msgstr "L3VPN для підключення Hub-and-Spoke із VyOS" #: ../../configexamples/lac-lns.rst:32 msgid "LAC" @@ -1364,7 +1408,7 @@ msgstr "LAC" #: ../../configexamples/zone-policy.rst:392 msgid "LAN, WAN, DMZ, local and TUN (tunnel)" -msgstr "LAN, WAN, DMZ, local and TUN (tunnel)" +msgstr "LAN, WAN, DMZ, локальний і TUN (тунель)" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:87 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:102 @@ -1374,11 +1418,11 @@ msgstr "LAN1" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:575 msgid "LAN1 to LAN2" -msgstr "LAN1 to LAN2" +msgstr "LAN1 до LAN2" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:520 msgid "LAN1 to Outside" -msgstr "LAN1 to Outside" +msgstr "LAN1 назовні" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:89 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:104 @@ -1388,23 +1432,23 @@ msgstr "LAN2" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:27 msgid "LAN 1" -msgstr "LAN 1" +msgstr "І 1" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:28 msgid "LAN 2" -msgstr "LAN 2" +msgstr "І 2" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:100 msgid "LAN Configuration" -msgstr "LAN Configuration" +msgstr "Конфігурація локальної мережі" #: ../../configexamples/zone-policy.rst:47 msgid "LAN and DMZ hosts have basic outbound access: Web, FTP, SSH." -msgstr "LAN and DMZ hosts have basic outbound access: Web, FTP, SSH." +msgstr "Хости LAN і DMZ мають базовий вихідний доступ: Web, FTP, SSH." #: ../../configexamples/zone-policy.rst:48 msgid "LAN can access DMZ resources." -msgstr "LAN can access DMZ resources." +msgstr "LAN може отримати доступ до ресурсів DMZ." #: ../../configexamples/lac-lns.rst:72 msgid "LNS" @@ -1412,11 +1456,15 @@ msgstr "LNS" #: ../../configexamples/l3vpn-hub-and-spoke.rst:551 msgid "Let’s check IPv4 routing and MPLS information on provider nodes (same procedure for all P nodes):" -msgstr "Let’s check IPv4 routing and MPLS information on provider nodes (same procedure for all P nodes):" +msgstr "Давайте перевіримо інформацію про маршрутизацію IPv4 та MPLS на вузлах провайдера (та сама процедура для всіх вузлів P):" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:25 msgid "Let’s say we have a requirement to have multiple networks." -msgstr "Let’s say we have a requirement to have multiple networks." +msgstr "Скажімо, у нас є вимога мати кілька мереж." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 +msgid "Local subnets should be able to reach internet using source NAT." +msgstr "Local subnets should be able to reach internet using source NAT." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 msgid "Local subnets should be able to reach internet using source nat." @@ -1424,39 +1472,39 @@ msgstr "Local subnets should be able to reach internet using source nat." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:58 msgid "MP-BGP or MultiProtocol BGP introduces two main concepts to solve this limitation: - Route Distinguisher (RD): Is used to distinguish between different VRFs –called VPNs- inside the BGP Process. The RD is appended to each IPv4 Network that is advertised into BGP for that VPN making it a unique VPNv4 route. - Route Target (RT): This is an extended BGP community append to the VPNv4 route in the Import/Export process. When a route passes from the VRF routing table into the BGP process it will add the configured export extended community(ies) for that VPN. When that route needs to go from BGP into the VRF routing table will only pass if that given VPN import policy matches any of the appended community(ies) into that prefix." -msgstr "MP-BGP or MultiProtocol BGP introduces two main concepts to solve this limitation: - Route Distinguisher (RD): Is used to distinguish between different VRFs –called VPNs- inside the BGP Process. The RD is appended to each IPv4 Network that is advertised into BGP for that VPN making it a unique VPNv4 route. - Route Target (RT): This is an extended BGP community append to the VPNv4 route in the Import/Export process. When a route passes from the VRF routing table into the BGP process it will add the configured export extended community(ies) for that VPN. When that route needs to go from BGP into the VRF routing table will only pass if that given VPN import policy matches any of the appended community(ies) into that prefix." +msgstr "MP-BGP або MultiProtocol BGP вводить дві основні концепції для усунення цього обмеження: - Розрізнювач маршруту (RD): використовується для розрізнення різних VRF – званих VPN – у процесі BGP. RD додається до кожної мережі IPv4, яка рекламується в BGP для цієї VPN, що робить її унікальним маршрутом VPNv4. - Route Target (RT): це розширене додавання спільноти BGP до маршруту VPNv4 у процесі імпорту/експорту. Коли маршрут проходить із таблиці маршрутизації VRF у процес BGP, він додає налаштовану розширену спільноту експорту для цієї VPN. Коли цей маршрут має перейти від BGP до таблиці маршрутизації VRF, він пройде, лише якщо дана політика імпорту VPN збігається з будь-якою спільнотою, доданою до цього префікса." #: ../../configexamples/qos.rst:60 msgid "Main rules:" -msgstr "Main rules:" +msgstr "Основні правила:" #: ../../configexamples/ha.rst:414 msgid "Make sure you can ping 10.254.60.1 and .2 from both routers." -msgstr "Make sure you can ping 10.254.60.1 and .2 from both routers." +msgstr "Переконайтеся, що ви можете пінгувати 10.254.60.1 і .2 з обох маршрутизаторів." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:29 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:91 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:106 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:727 msgid "Management" -msgstr "Management" +msgstr "управління" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:26 msgid "Management VRF" -msgstr "Management VRF" +msgstr "Управління VRF" #: ../../configexamples/ha.rst:114 msgid "Many other Hypervisors do this, and I'm hoping that this document will be expanded to document how to do this for others." -msgstr "Many other Hypervisors do this, and I'm hoping that this document will be expanded to document how to do this for others." +msgstr "Багато інших гіпервізорів роблять це, і я сподіваюся, що цей документ буде розширено, щоб документувати, як це робити для інших." #: ../../configexamples/ha.rst:297 msgid "Masquerade Traffic originating from 10.200.201.0/24 that is heading out the public interface." -msgstr "Masquerade Traffic originating from 10.200.201.0/24 that is heading out the public interface." +msgstr "Маскарадний трафік, що надходить із 10.200.201.0/24, що надходить через публічний інтерфейс." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:254 #: ../../configexamples/lac-lns.rst:106 msgid "Monitoring" -msgstr "Monitoring" +msgstr "Моніторинг" #: ../../configexamples/lac-lns.rst:117 msgid "Monitoring on LAC side" @@ -1472,28 +1520,28 @@ msgstr "Monitoring on RADIUS Server side" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:162 msgid "Multiple LAN/DMZ Setup" -msgstr "Multiple LAN/DMZ Setup" +msgstr "Налаштування декількох LAN/DMZ" #: ../../configexamples/ha.rst:295 msgid "NAT and conntrack-sync" -msgstr "NAT and conntrack-sync" +msgstr "NAT і conntrack-sync" #: ../../configexamples/nmp.rst:7 msgid "NMP example" -msgstr "NMP example" +msgstr "Приклад НМП" #: ../../configexamples/zone-policy.rst:23 msgid "Native IPv4 and IPv6" -msgstr "Native IPv4 and IPv6" +msgstr "Власний IPv4 та IPv6" #: ../../configexamples/ha.rst:86 msgid "Network Cabling" -msgstr "Network Cabling" +msgstr "Мережевий кабель" #: ../../configexamples/lac-lns.rst:21 #: ../../configexamples/pppoe-ipv6-basic.rst:18 msgid "Network Topology" -msgstr "Network Topology" +msgstr "Топологія мережі" #: ../../configexamples/ansible.rst:-1 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:-1 @@ -1505,7 +1553,7 @@ msgstr "Network Topology" #: ../../configexamples/wan-load-balancing.rst:-1 #: ../../configexamples/zone-policy.rst:-1 msgid "Network Topology Diagram" -msgstr "Network Topology Diagram" +msgstr "Схема топології мережі" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:14 msgid "Network Topology and requirements" @@ -1513,140 +1561,140 @@ msgstr "Network Topology and requirements" #: ../../configexamples/qos.rst:31 msgid "Next, we will replace only all CS4 labels on the “VyOS2” router." -msgstr "Next, we will replace only all CS4 labels on the “VyOS2” router." +msgstr "Далі ми замінимо лише всі мітки CS4 на маршрутизаторі «VyOS2»." #: ../../configexamples/nmp.rst:28 msgid "Next, you just should follow the pictures:" -msgstr "Next, you just should follow the pictures:" +msgstr "Далі слід просто стежити за картинками:" #: ../../configexamples/qos.rst:106 msgid "Next on the router VyOS2 we will change labels on all incoming traffic only from CS4-> CS6" -msgstr "Next on the router VyOS2 we will change labels on all incoming traffic only from CS4-> CS6" +msgstr "Далі на роутері VyOS2 ми змінимо мітки на весь вхідний трафік тільки з CS4-> CS6" #: ../../configexamples/autotest/Wireguard/Wireguard.rst:42 msgid "Next thing to do, is to create a wireguard keypair on each side. After this, the public key can be displayed, to save for later." -msgstr "Next thing to do, is to create a wireguard keypair on each side. After this, the public key can be displayed, to save for later." +msgstr "Наступне, що потрібно зробити, це створити пару ключів для захисту проводів з кожного боку. Після цього відкритий ключ можна буде відобразити, щоб зберегти на потім." #: ../../configexamples/l3vpn-hub-and-spoke.rst:86 msgid "Node" -msgstr "Node" +msgstr "Вузол" #: ../../configexamples/ha.rst:83 msgid "Note that router1 is a VM that runs on one of the compute nodes." -msgstr "Note that router1 is a VM that runs on one of the compute nodes." +msgstr "Зауважте, що router1 — це віртуальна машина, яка працює на одному з обчислювальних вузлів." #: ../../configexamples/pppoe-ipv6-basic.rst:115 msgid "Note to allow the router to receive DHCPv6 response from ISP. We need to allow packets with source port 547 (server) and destination port 546 (client)." -msgstr "Note to allow the router to receive DHCPv6 response from ISP. We need to allow packets with source port 547 (server) and destination port 546 (client)." +msgstr "Зверніть увагу, щоб дозволити маршрутизатору отримувати відповідь DHCPv6 від провайдера. Нам потрібно дозволити пакети з портом джерела 547 (сервер) і портом призначення 546 (клієнт)." #: ../../configexamples/zone-policy.rst:411 msgid "Notice, none go to WAN since WAN wouldn't have a v6 address on it." -msgstr "Notice, none go to WAN since WAN wouldn't have a v6 address on it." +msgstr "Зауважте, ніхто не переходить до WAN, оскільки WAN не матиме адреси v6." #: ../../configexamples/l3vpn-hub-and-spoke.rst:831 msgid "Now, let’s check routing information on out Hub PE:" -msgstr "Now, let’s check routing information on out Hub PE:" +msgstr "Тепер давайте перевіримо інформацію про маршрутизацію на нашому Hub PE:" #: ../../configexamples/ha.rst:322 msgid "Now enable replication between nodes. Replace eth0.201 with bond0.201 on the hardware router." -msgstr "Now enable replication between nodes. Replace eth0.201 with bond0.201 on the hardware router." +msgstr "Тепер увімкніть реплікацію між вузлами. Замініть eth0.201 на bond0.201 на апаратному маршрутизаторі." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:54 msgid "Now generate all required certificates on the ovpn-server:" -msgstr "Now generate all required certificates on the ovpn-server:" +msgstr "Тепер згенеруйте всі необхідні сертифікати на ovpn-сервері:" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:144 msgid "Now the Client is able to ping a public IPv6 address" -msgstr "Now the Client is able to ping a public IPv6 address" +msgstr "Тепер клієнт може перевіряти загальнодоступну адресу IPv6" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:45 msgid "Now we are able to setup the tunnel interface." -msgstr "Now we are able to setup the tunnel interface." +msgstr "Тепер ми можемо налаштувати інтерфейс тунелю." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:425 msgid "Now we perform some end-to-end testing" -msgstr "Now we perform some end-to-end testing" +msgstr "Тепер ми проводимо наскрізне тестування" #: ../../configexamples/l3vpn-hub-and-spoke.rst:636 msgid "Now we’re checking iBGP status and routes from route-reflector nodes to other devices:" -msgstr "Now we’re checking iBGP status and routes from route-reflector nodes to other devices:" +msgstr "Зараз ми перевіряємо статус iBGP і маршрути від вузлів маршрутизатора до інших пристроїв:" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:57 msgid "Now you should be able to ping a public IPv6 Address" -msgstr "Now you should be able to ping a public IPv6 Address" +msgstr "Тепер ви зможете перевіряти загальнодоступну IPv6-адресу" #: ../../configexamples/ha.rst:348 msgid "OSPF Over WireGuard" -msgstr "OSPF Over WireGuard" +msgstr "OSPF через WireGuard" #: ../../configexamples/ospf-unnumbered.rst:7 msgid "OSPF unnumbered with ECMP" -msgstr "OSPF unnumbered with ECMP" +msgstr "OSPF без нумерації з ECMP" #: ../../configexamples/azure-vpn-bgp.rst:36 #: ../../configexamples/azure-vpn-dual-bgp.rst:33 msgid "On-premises address space" -msgstr "On-premises address space" +msgstr "Локальний адресний простір" #: ../../configexamples/qos.rst:88 msgid "On the router, VyOS4 set all traffic as CS4. We have to configure the default class and class for changing all labels from CS0 to CS4" -msgstr "On the router, VyOS4 set all traffic as CS4. We have to configure the default class and class for changing all labels from CS0 to CS4" +msgstr "На маршрутизаторі VyOS4 встановив весь трафік як CS4. Нам потрібно налаштувати клас за замовчуванням і клас для зміни всіх міток із CS0 на CS4" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:105 msgid "Once all routers can be safely remotely managed and the core network is operational, we can now setup the tenant networks." -msgstr "Once all routers can be safely remotely managed and the core network is operational, we can now setup the tenant networks." +msgstr "Коли всіма маршрутизаторами можна буде безпечно віддалено керувати, а базова мережа запрацює, ми зможемо налаштувати мережі орендарів." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:87 msgid "Once all the required certificates and keys are installed, the remaining OpenVPN Server configuration can be carried out." -msgstr "Once all the required certificates and keys are installed, the remaining OpenVPN Server configuration can be carried out." +msgstr "Після встановлення всіх необхідних сертифікатів і ключів можна виконати решту конфігурації сервера OpenVPN." #: ../../configexamples/zone-policy.rst:355 msgid "Once you have all of your rulesets built, then you need to create your zone-policy." -msgstr "Once you have all of your rulesets built, then you need to create your zone-policy." +msgstr "Коли ви створите всі набори правил, вам потрібно створити політику зони." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:96 msgid "One advantage of having the client certificate stored is the ability to create the client configuration." -msgstr "One advantage of having the client certificate stored is the ability to create the client configuration." +msgstr "Однією з переваг збереження сертифіката клієнта є можливість створити конфігурацію клієнта." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:47 msgid "One cable/logical connection between LAN1 and Internet" -msgstr "One cable/logical connection between LAN1 and Internet" +msgstr "Один кабель/логічне з'єднання між LAN1 та Інтернетом" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:46 msgid "One cable/logical connection between LAN1 and LAN2" -msgstr "One cable/logical connection between LAN1 and LAN2" +msgstr "Один кабель/логічне з'єднання між LAN1 і LAN2" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:49 msgid "One cable/logical connection between LAN1 and Management" -msgstr "One cable/logical connection between LAN1 and Management" +msgstr "Один кабель/логічне з'єднання між LAN1 і керуванням" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:48 msgid "One cable/logical connection between LAN2 and Internet" -msgstr "One cable/logical connection between LAN2 and Internet" +msgstr "Один кабель/логічне з'єднання між LAN2 та Інтернетом" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:50 msgid "One cable/logical connection between LAN2 and Management" -msgstr "One cable/logical connection between LAN2 and Management" +msgstr "Один кабель/логічне з'єднання між LAN2 і керуванням" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:5 msgid "OpenVPN with LDAP" -msgstr "OpenVPN with LDAP" +msgstr "OpenVPN з LDAP" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:-1 msgid "OpenVPN with LDAP topology image" -msgstr "OpenVPN with LDAP topology image" +msgstr "OpenVPN із зображенням топології LDAP" #: ../../configexamples/l3vpn-hub-and-spoke.rst:42 msgid "Operating system: VyOS" -msgstr "Operating system: VyOS" +msgstr "Операційна система: VyOS" #: ../../configexamples/ha.rst:100 msgid "Our implementation uses VMware's Distributed Port Groups, which allows VMware to use LACP. This is a part of the ENTERPRISE licence, and is not available on a free licence. If you are implementing this and do not have access to DPGs, you should not use VMware, and use some other virtualization platform instead." -msgstr "Our implementation uses VMware's Distributed Port Groups, which allows VMware to use LACP. This is a part of the ENTERPRISE licence, and is not available on a free licence. If you are implementing this and do not have access to DPGs, you should not use VMware, and use some other virtualization platform instead." +msgstr "Наша реалізація використовує розподілені групи портів VMware, що дозволяє VMware використовувати LACP. Це частина ліцензії ENTERPRISE і недоступна для безкоштовної ліцензії. Якщо ви реалізуєте це і не маєте доступу до DPG, вам не слід використовувати VMware, а використовувати іншу платформу віртуалізації." #: ../../configexamples/ha.rst:52 msgid "Our routers are going to have a floating IP address of 203.0.113.1, and use .2 and .3 as their fixed IPs." -msgstr "Our routers are going to have a floating IP address of 203.0.113.1, and use .2 and .3 as their fixed IPs." +msgstr "Наші маршрутизатори матимуть плаваючу IP-адресу 203.0.113.1 і використовуватимуть .2 і .3 як фіксовані IP-адреси." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:23 #: ../../configexamples/wan-load-balancing.rst:23 @@ -1654,7 +1702,7 @@ msgstr "Our routers are going to have a floating IP address of 203.0.113.1, and #: ../../configexamples/wan-load-balancing.rst:104 #: ../../configexamples/wan-load-balancing.rst:135 msgid "Overview" -msgstr "Overview" +msgstr "Огляд" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:82 #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:123 @@ -1663,7 +1711,7 @@ msgstr "PE1" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:17 msgid "PE1 is located in an industrial area that holds multiple office buildings. All customers have a site in this area." -msgstr "PE1 is located in an industrial area that holds multiple office buildings. All customers have a site in this area." +msgstr "PE1 знаходиться в промисловій зоні, яка містить кілька офісних будівель. У всіх клієнтів є сайти в цьому районі." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:88 #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:129 @@ -1672,7 +1720,7 @@ msgstr "PE2" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:19 msgid "PE2 is located in a smaller area where by coincidence two customers (blue and red) share an office building." -msgstr "PE2 is located in a smaller area where by coincidence two customers (blue and red) share an office building." +msgstr "PE2 розташовано в меншому районі, де випадково двоє клієнтів (синій і червоний) ділять офісну будівлю." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:94 #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:135 @@ -1681,15 +1729,15 @@ msgstr "PE3" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:21 msgid "PE3 is located in a smaller area where by coincidence two customers (blue and green) are located." -msgstr "PE3 is located in a smaller area where by coincidence two customers (blue and green) are located." +msgstr "PE3 знаходиться в меншій зоні, де за збігом обставин знаходяться два клієнти (синій і зелений)." #: ../../configexamples/pppoe-ipv6-basic.rst:7 msgid "PPPoE IPv6 Basic Setup for Home Network" -msgstr "PPPoE IPv6 Basic Setup for Home Network" +msgstr "Базове налаштування PPPoE IPv6 для домашньої мережі" #: ../../configexamples/pppoe-ipv6-basic.rst:29 msgid "PPPoE Setup" -msgstr "PPPoE Setup" +msgstr "Налаштування PPPoE" #: ../../configexamples/lac-lns.rst:7 msgid "PPPoE over L2TP" @@ -1697,20 +1745,20 @@ msgstr "PPPoE over L2TP" #: ../../configexamples/segment-routing-isis.rst:255 msgid "Ping between VyOS-P1 / VyOS-P2 to confirm reachability:" -msgstr "Ping between VyOS-P1 / VyOS-P2 to confirm reachability:" +msgstr "Проведіть пінг між VyOS-P1 / VyOS-P2, щоб підтвердити доступність:" #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:73 msgid "Ping the Client from the DHCP Server." -msgstr "Ping the Client from the DHCP Server." +msgstr "Передайте клієнту ping із сервера DHCP." #: ../../configexamples/wan-load-balancing.rst:26 msgid "Pings will be sent to four targets for health testing (33.44.55.66, 44.55.66.77, 55.66.77.88 and 66.77.88.99)." -msgstr "Pings will be sent to four targets for health testing (33.44.55.66, 44.55.66.77, 55.66.77.88 and 66.77.88.99)." +msgstr "Пінги будуть надіслані до чотирьох цілей для перевірки справності (33.44.55.66, 44.55.66.77, 55.66.77.88 і 66.77.88.99)." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:128 #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:195 msgid "Please note, 'autonomous-flag' and 'on-link-flag' are enabled by default, 'valid-lifetime' and 'preferred-lifetime' are set to default values of 30 days and 4 hours respectively." -msgstr "Please note, 'autonomous-flag' and 'on-link-flag' are enabled by default, 'valid-lifetime' and 'preferred-lifetime' are set to default values of 30 days and 4 hours respectively." +msgstr "Зауважте, що «autonomous-flag» і «on-link-flag» увімкнено за умовчанням, «valid-lifetime» і «preferred-lifetime» встановлено значення за замовчуванням 30 днів і 4 години відповідно." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:5 msgid "Policy-Based Site-to-Site VPN and Firewall Configuration" @@ -1719,17 +1767,21 @@ msgstr "Policy-Based Site-to-Site VPN and Firewall Configuration" #: ../../configexamples/azure-vpn-bgp.rst:48 #: ../../configexamples/azure-vpn-dual-bgp.rst:47 msgid "Pre-shared key" -msgstr "Pre-shared key" +msgstr "Попередньо спільний ключ" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:14 #: ../../configexamples/azure-vpn-bgp.rst:16 #: ../../configexamples/azure-vpn-dual-bgp.rst:13 msgid "Prerequisites" -msgstr "Prerequisites" +msgstr "передумови" #: ../../configexamples/ha.rst:520 msgid "Priorities" -msgstr "Priorities" +msgstr "Пріоритети" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 +msgid "Protect the router on 'WAN' interface, allowing only IPSec connections and SSH access from trusted IPs." +msgstr "Protect the router on 'WAN' interface, allowing only IPSec connections and SSH access from trusted IPs." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 msgid "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." @@ -1737,11 +1789,11 @@ msgstr "Protect the router on 'WAN' interface, allowing only ipsec connections a #: ../../configexamples/ha.rst:230 msgid "Public Network" -msgstr "Public Network" +msgstr "Публічна мережа" #: ../../configexamples/qos.rst:7 msgid "QoS example" -msgstr "QoS example" +msgstr "Приклад QoS" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:100 #: ../../configexamples/l3vpn-hub-and-spoke.rst:86 @@ -1750,7 +1802,7 @@ msgstr "RD" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:97 msgid "RD & RT Schema" -msgstr "RD & RT Schema" +msgstr "Схема RD & RT" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:100 msgid "RT" @@ -1758,122 +1810,122 @@ msgstr "RT" #: ../../configexamples/l3vpn-hub-and-spoke.rst:86 msgid "RT export" -msgstr "RT export" +msgstr "RT експорт" #: ../../configexamples/l3vpn-hub-and-spoke.rst:86 msgid "RT import" -msgstr "RT import" +msgstr "RT імпорт" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:73 msgid "Regular VyOS users will notice that the BGP syntax has changed in VyOS 1.4 from even the prior post about this subject. This is due to T1711, where it was finally decided to get rid of the redundant BGP ASN (Autonomous System Number) specification on the CLI and move it to a single leaf node (set protocols bgp local-as)." -msgstr "Regular VyOS users will notice that the BGP syntax has changed in VyOS 1.4 from even the prior post about this subject. This is due to T1711, where it was finally decided to get rid of the redundant BGP ASN (Autonomous System Number) specification on the CLI and move it to a single leaf node (set protocols bgp local-as)." +msgstr "Звичайні користувачі VyOS помітять, що синтаксис BGP змінився у VyOS 1.4 навіть з попередньої публікації на цю тему. Це пов’язано з T1711, де було нарешті вирішено позбутися надлишкової специфікації BGP ASN (Autonomous System Number) на CLI та перенести її на один кінцевий вузол (встановити протоколи bgp local-as)." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:120 msgid "Remote Networks" -msgstr "Remote Networks" +msgstr "Віддалені мережі" #: ../../configexamples/ha.rst:368 msgid "Replace the 203.0.113.3 with whatever the other router's IP address is." -msgstr "Replace the 203.0.113.3 with whatever the other router's IP address is." +msgstr "Замініть 203.0.113.3 IP-адресою іншого маршрутизатора." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:20 msgid "Requested a \"Regular Tunnel\". You want to choose a location that is closest to your physical location for the best response time." -msgstr "Requested a \"Regular Tunnel\". You want to choose a location that is closest to your physical location for the best response time." +msgstr "Запитав "Звичайний тунель". Ви хочете вибрати місце, яке є найближчим до вашого фізичного розташування для найкращого часу відповіді." #: ../../configexamples/bgp-ipv6-unnumbered.rst:55 #: ../../configexamples/ospf-unnumbered.rst:50 msgid "Results" -msgstr "Results" +msgstr "Результати" #: ../../configexamples/l3vpn-hub-and-spoke.rst:86 msgid "Role" -msgstr "Role" +msgstr "Роль" #: ../../configexamples/azure-vpn-dual-bgp.rst:6 msgid "Route-Based Redundant Site-to-Site VPN to Azure (BGP over IKEv2/IPsec)" -msgstr "Route-Based Redundant Site-to-Site VPN to Azure (BGP over IKEv2/IPsec)" +msgstr "Маршрутизована надлишкова мережева VPN до Azure (BGP через IKEv2/IPsec)" #: ../../configexamples/azure-vpn-bgp.rst:6 msgid "Route-Based Site-to-Site VPN to Azure (BGP over IKEv2/IPsec)" -msgstr "Route-Based Site-to-Site VPN to Azure (BGP over IKEv2/IPsec)" +msgstr "VPN на основі маршруту Site-to-Site VPN до Azure (BGP через IKEv2/IPsec)" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:767 msgid "Route-Filtering" -msgstr "Route-Filtering" +msgstr "Фільтрація маршруту" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:110 msgid "Routed /48. This is something you can request by clicking the \"Assign /48\" link in the Tunnelbroker.net tunnel config. It allows you to have up to 65k" -msgstr "Routed /48. This is something you can request by clicking the \"Assign /48\" link in the Tunnelbroker.net tunnel config. It allows you to have up to 65k" +msgstr "Розбитий /48. Це те, що ви можете запросити, натиснувши посилання «Призначити /48» у конфігурації тунелю Tunnelbroker.net. Це дозволяє мати до 65 тис" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:107 msgid "Routed /64. This is the default assignment. In IPv6-land, it's good for a single \"LAN\", and is somewhat equivalent to a /24." -msgstr "Routed /64. This is the default assignment. In IPv6-land, it's good for a single \"LAN\", and is somewhat equivalent to a /24." +msgstr "Розбитий /64. Це призначення за замовчуванням. У країнах IPv6 це добре для однієї «LAN» і дещо еквівалентно /24." #: ../../configexamples/bgp-ipv6-unnumbered.rst:14 #: ../../configexamples/bgp-ipv6-unnumbered.rst:57 #: ../../configexamples/ospf-unnumbered.rst:14 #: ../../configexamples/ospf-unnumbered.rst:52 msgid "Router A:" -msgstr "Router A:" +msgstr "Маршрутизатор A:" #: ../../configexamples/pppoe-ipv6-basic.rst:61 msgid "Router Advertisement" -msgstr "Router Advertisement" +msgstr "Оголошення про маршрутизатор" #: ../../configexamples/bgp-ipv6-unnumbered.rst:34 #: ../../configexamples/bgp-ipv6-unnumbered.rst:118 #: ../../configexamples/ospf-unnumbered.rst:31 #: ../../configexamples/ospf-unnumbered.rst:87 msgid "Router B:" -msgstr "Router B:" +msgstr "Маршрутизатор B:" #: ../../configexamples/ha.rst:538 msgid "Router id's must be unique." -msgstr "Router id's must be unique." +msgstr "Ідентифікатори маршрутизатора мають бути унікальними." #: ../../configexamples/zone-policy.rst:98 msgid "Ruleset are created per zone-pair-direction." -msgstr "Ruleset are created per zone-pair-direction." +msgstr "Набір правил створюється для зони-пари-напрямку." #: ../../configexamples/segment-routing-isis.rst:7 msgid "Segment-routing IS-IS example" -msgstr "Segment-routing IS-IS example" +msgstr "Приклад сегментної маршрутизації IS-IS" #: ../../configexamples/pppoe-ipv6-basic.rst:73 msgid "Set DNS server address in the advertisement so that clients can obtain it by using RDNSS option. Most operating systems (Windows, Linux, Mac) should already support it." -msgstr "Set DNS server address in the advertisement so that clients can obtain it by using RDNSS option. Most operating systems (Windows, Linux, Mac) should already support it." +msgstr "Встановіть адресу DNS-сервера в оголошенні, щоб клієнти могли отримати її за допомогою параметра RDNSS. Більшість операційних систем (Windows, Linux, Mac) вже мають підтримувати його." #: ../../configexamples/qos.rst:40 msgid "Set IP addresses on all VPCs and a default gateway 172.17.1.1. We'll use in this case only static routes. On the VyOS3 router, we need to change the 'dscp' labels for the VPCs. To do this, we use this configuration." -msgstr "Set IP addresses on all VPCs and a default gateway 172.17.1.1. We'll use in this case only static routes. On the VyOS3 router, we need to change the 'dscp' labels for the VPCs. To do this, we use this configuration." +msgstr "Установіть IP-адреси на всіх VPC і шлюз за замовчуванням 172.17.1.1. Ми будемо використовувати в цьому випадку тільки статичні маршрути. На маршрутизаторі VyOS3 нам потрібно змінити мітки «dscp» для VPC. Для цього ми використовуємо цю конфігурацію." #: ../../configexamples/pppoe-ipv6-basic.rst:72 msgid "Set MTU in advertisement to 1492 because of PPPoE header overhead." -msgstr "Set MTU in advertisement to 1492 because of PPPoE header overhead." +msgstr "Встановіть MTU в оголошенні на 1492 через накладні витрати заголовка PPPoE." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:143 msgid "Set the VRF name and Table ID, set interface address and bind it to the VRF. Last add the static route to the remote network." -msgstr "Set the VRF name and Table ID, set interface address and bind it to the VRF. Last add the static route to the remote network." +msgstr "Встановіть назву VRF та ідентифікатор таблиці, установіть адресу інтерфейсу та прив’яжіть її до VRF. Останнім додайте статичний маршрут до віддаленої мережі." #: ../../configexamples/ha.rst:522 msgid "Set the cost on the secondary links to be 200. This means that they will not be used unless the primary links are down." -msgstr "Set the cost on the secondary links to be 200. This means that they will not be used unless the primary links are down." +msgstr "Встановіть вартість вторинних посилань на 200. Це означає, що вони не використовуватимуться, якщо первинні посилання не працюють." #: ../../configexamples/autotest/Wireguard/Wireguard.rst:27 msgid "Set the local subnet on eth2 and the public ip address eth1 on each site." -msgstr "Set the local subnet on eth2 and the public ip address eth1 on each site." +msgstr "Встановіть локальну підмережу на eth2 та публічну IP-адресу eth1 на кожному сайті." #: ../../configexamples/qos.rst:159 msgid "Set up bandwidth limits on the eth2 interface of the router “VyOS2”." -msgstr "Set up bandwidth limits on the eth2 interface of the router “VyOS2”." +msgstr "Налаштуйте обмеження пропускної здатності на інтерфейсі eth2 роутера «VyOS2»." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:139 msgid "Sets your LAN interface's IP address" -msgstr "Sets your LAN interface's IP address" +msgstr "Встановлює IP-адресу вашого інтерфейсу локальної мережі" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:235 msgid "Setting BGP global local-as as well inside the VRF. Redistribute static routes to inject configured networks into the BGP process but still inside the VRF." -msgstr "Setting BGP global local-as as well inside the VRF. Redistribute static routes to inject configured networks into the BGP process but still inside the VRF." +msgstr "Налаштування глобального локального BGP, а також усередині VRF. Перерозподіліть статичні маршрути, щоб додати налаштовані мережі в процес BGP, але все ще всередині VRF." #: ../../configexamples/ansible.rst:10 msgid "Setting up Ansible on a server running the Debian operating system." @@ -1881,19 +1933,19 @@ msgstr "Setting up Ansible on a server running the Debian operating system." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:51 msgid "Setup the ipv6 default route to the tunnel interface" -msgstr "Setup the ipv6 default route to the tunnel interface" +msgstr "Налаштуйте стандартний маршрут ipv6 до інтерфейсу тунелю" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:148 msgid "Show routes for all VRFs" -msgstr "Show routes for all VRFs" +msgstr "Показати маршрути для всіх VRF" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:206 msgid "Similarly, to attach the firewall, you would use `set interfaces ethernet eth0 firewall in ipv6-name` or `et firewall zone LOCAL from WAN firewall ipv6-name`." -msgstr "Similarly, to attach the firewall, you would use `set interfaces ethernet eth0 firewall in ipv6-name` or `et firewall zone LOCAL from WAN firewall ipv6-name`." +msgstr "Подібним чином, щоб під’єднати брандмауер, ви повинні використати `set interfaces ethernet eth0 firewall in ipv6-name` або `et firewall zone LOCAL from WAN firewall ipv6-name`." #: ../../configexamples/pppoe-ipv6-basic.rst:78 msgid "Since some ISPs disconnects continuous connection for every 2~3 days, we set ``valid-lifetime`` to 2 days to allow PC for phasing out old address." -msgstr "Since some ISPs disconnects continuous connection for every 2~3 days, we set ``valid-lifetime`` to 2 days to allow PC for phasing out old address." +msgstr "Оскільки деякі інтернет-провайдери відключають безперервне з’єднання кожні 2–3 дні, ми встановлюємо ``valid-lifetime`` на 2 дні, щоб дозволити ПК поступово відключати стару адресу." #: ../../configexamples/site-2-site-cisco.rst:128 msgid "Since the tunnel is a point-to-point GRE tunnel, it behaves like any other point-to-point interface (for example: serial, dialer), and it is possible to run any Interior Gateway Protocol (IGP)/Exterior Gateway Protocol (EGP) over the link in order to exchange routing information" @@ -1901,15 +1953,15 @@ msgstr "Since the tunnel is a point-to-point GRE tunnel, it behaves like any oth #: ../../configexamples/zone-policy.rst:236 msgid "Since we have 4 zones, we need to setup the following rulesets." -msgstr "Since we have 4 zones, we need to setup the following rulesets." +msgstr "Оскільки у нас 4 зони, нам потрібно налаштувати наступні набори правил." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:119 msgid "Single LAN Setup" -msgstr "Single LAN Setup" +msgstr "Налаштування однієї локальної мережі" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:121 msgid "Single LAN setup where eth2 is your LAN interface. Use the Tunnelbroker Routed /64 prefix:" -msgstr "Single LAN setup where eth2 is your LAN interface. Use the Tunnelbroker Routed /64 prefix:" +msgstr "Налаштування однієї локальної мережі, де eth2 є вашим інтерфейсом локальної мережі. Використовуйте префікс Tunnelbroker Routed /64:" #: ../../configexamples/site-2-site-cisco.rst:4 msgid "Site-to-Site IPSec VPN to Cisco using FlexVPN" @@ -1917,20 +1969,20 @@ msgstr "Site-to-Site IPSec VPN to Cisco using FlexVPN" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:179 msgid "So, when your LAN is eth1, your DMZ is eth2, your cameras are on eth3, etc:" -msgstr "So, when your LAN is eth1, your DMZ is eth2, your cameras are on eth3, etc:" +msgstr "Отже, коли ваша локальна мережа — eth1, ваша DMZ — eth2, ваші камери — на eth3 тощо:" #: ../../configexamples/zone-policy.rst:416 msgid "Something like:" -msgstr "Something like:" +msgstr "Щось на зразок:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:91 #: ../../configexamples/l3vpn-hub-and-spoke.rst:93 msgid "Spoke" -msgstr "Spoke" +msgstr "Говорив" #: ../../configexamples/zone-policy.rst:358 msgid "Start by setting the interface and default action for each zone." -msgstr "Start by setting the interface and default action for each zone." +msgstr "Почніть із встановлення інтерфейсу та дії за замовчуванням для кожної зони." #: ../../configexamples/ansible.rst:122 msgid "Start the playbook:" @@ -1942,65 +1994,65 @@ msgstr "Starting from VyOS 1.4-rolling-202308040557, a new firewall structure ca #: ../../configexamples/l3vpn-hub-and-spoke.rst:105 msgid "Step-1: Configuring IGP and enabling MPLS LDP" -msgstr "Step-1: Configuring IGP and enabling MPLS LDP" +msgstr "Крок 1: Налаштування IGP і ввімкнення MPLS LDP" #: ../../configexamples/l3vpn-hub-and-spoke.rst:322 msgid "Step-2: Configuring iBGP for L3VPN control-plane" -msgstr "Step-2: Configuring iBGP for L3VPN control-plane" +msgstr "Крок 2: Налаштування iBGP для рівня керування L3VPN" #: ../../configexamples/l3vpn-hub-and-spoke.rst:407 msgid "Step-3: Configuring L3VPN VRFs on PE nodes" -msgstr "Step-3: Configuring L3VPN VRFs on PE nodes" +msgstr "Крок 3: Налаштування VRF L3VPN на вузлах PE" #: ../../configexamples/l3vpn-hub-and-spoke.rst:482 msgid "Step-4: Configuring CE nodes" -msgstr "Step-4: Configuring CE nodes" +msgstr "Крок 4: Налаштування вузлів CE" #: ../../configexamples/l3vpn-hub-and-spoke.rst:545 msgid "Step-5: Verification" -msgstr "Step-5: Verification" +msgstr "Крок 5: Перевірка" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:137 msgid "Step 1: VRF and Configurations to remote networks" -msgstr "Step 1: VRF and Configurations to remote networks" +msgstr "Крок 1: VRF і налаштування для віддалених мереж" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:228 msgid "Step 2: BGP Configuration for VRF-Lite" -msgstr "Step 2: BGP Configuration for VRF-Lite" +msgstr "Крок 2: Конфігурація BGP для VRF-Lite" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:287 msgid "Step 3: VPN Configuration" -msgstr "Step 3: VPN Configuration" +msgstr "Крок 3: Конфігурація VPN" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:422 msgid "Step 4: End to End verification" -msgstr "Step 4: End to End verification" +msgstr "Крок 4: Наскрізна перевірка" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:103 msgid "Tenant networks (VRFs)" -msgstr "Tenant networks (VRFs)" +msgstr "Мережі орендарів (VRF)" #: ../../configexamples/ha.rst:489 msgid "Test OSPF" -msgstr "Test OSPF" +msgstr "Тест OSPF" #: ../../configexamples/ha.rst:412 msgid "Test WireGuard" -msgstr "Test WireGuard" +msgstr "Перевірте WireGuard" #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:71 msgid "Test the result" -msgstr "Test the result" +msgstr "Перевірте результат" #: ../../configexamples/autotest/Wireguard/Wireguard.rst:6 msgid "Testdate: 2023-02-24" -msgstr "Testdate: 2023-02-24" +msgstr "Дата тестування: 24.02.2023" #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:6 #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:6 #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:7 msgid "Testdate: 2023-05-11" -msgstr "Testdate: 2023-05-11" +msgstr "Дата тестування: 2023-05-11" #: ../../configexamples/autotest/Wireguard/Wireguard.rst:6 #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:7 @@ -2015,72 +2067,72 @@ msgstr "Testdate: 2024-01-13" #: ../../configexamples/ha.rst:276 #: ../../configexamples/ha.rst:337 msgid "Testing" -msgstr "Testing" +msgstr "Тестування" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:143 #: ../../configexamples/autotest/Wireguard/Wireguard.rst:85 msgid "Testing and debugging" -msgstr "Testing and debugging" +msgstr "Тестування та налагодження" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:164 msgid "That's how you can expand the example above. Use the `Routed /48` information. This allows you to assign a different /64 to every interface, LAN, or even device. Or you could break your network into smaller chunks like /56 or /60." -msgstr "That's how you can expand the example above. Use the `Routed /48` information. This allows you to assign a different /64 to every interface, LAN, or even device. Or you could break your network into smaller chunks like /56 or /60." +msgstr "Таким чином ви можете розширити наведений вище приклад. Використовуйте інформацію `Routed /48`. Це дозволяє призначати різні /64 для кожного інтерфейсу, локальної мережі чи навіть пристрою. Або ви можете розбити свою мережу на менші частини, наприклад /56 або /60." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:23 msgid "The Lab asume a full running Active Directory on the Windows Server. Here are some PowerShell commands to quickly add a Test Active Directory." -msgstr "The Lab asume a full running Active Directory on the Windows Server. Here are some PowerShell commands to quickly add a Test Active Directory." +msgstr "Лабораторія припускає повноцінну роботу Active Directory на Windows Server. Ось кілька команд PowerShell для швидкого додавання тестового Active Directory." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:15 msgid "The Topology are consists of:" -msgstr "The Topology are consists of:" +msgstr "Топологія складається з:" #: ../../configexamples/zone-policy.rst:57 msgid "The VyOS interface is assigned the .1/:1 address of their respective networks. WAN is on VLAN 10, LAN on VLAN 20, and DMZ on VLAN 30." -msgstr "The VyOS interface is assigned the .1/:1 address of their respective networks. WAN is on VLAN 10, LAN on VLAN 20, and DMZ on VLAN 30." +msgstr "Інтерфейсу VyOS призначається адреса .1/:1 відповідних мереж. WAN знаходиться у VLAN 10, LAN у VLAN 20, а DMZ у VLAN 30." #: ../../configexamples/ha.rst:30 msgid "The ``commit`` command is implied after every section. If you make an error, ``commit`` will warn you and you can fix it before getting too far into things. Please ensure you commit early and commit often." -msgstr "The ``commit`` command is implied after every section. If you make an error, ``commit`` will warn you and you can fix it before getting too far into things. Please ensure you commit early and commit often." +msgstr "Після кожного розділу мається на увазі команда ``commit``. Якщо ви зробите помилку, ``commit`` попередить вас, і ви зможете виправити її, перш ніж заглиблюватися в речі. Будь ласка, переконайтеся, що ви зобов’язуєтесь рано та часто." #: ../../configexamples/ha.rst:543 msgid "The ``redistribute ospf`` command is there purely as an example of how this can be expanded. In this walkthrough, it will be filtered by BGPOUT rule 10000, as it is not 203.0.113.0/24." -msgstr "The ``redistribute ospf`` command is there purely as an example of how this can be expanded. In this walkthrough, it will be filtered by BGPOUT rule 10000, as it is not 203.0.113.0/24." +msgstr "Команда ``redistribute ospf`` є лише як приклад того, як це можна розширити. У цьому покроковому керівництві його буде відфільтровано за правилом BGPOUT 10000, оскільки це не 203.0.113.0/24." #: ../../configexamples/segment-routing-isis.rst:19 msgid "The below configuration is used as example where we keep focus on VyOS-P1/VyOS-P2/XRv-P3 which we share the settings." -msgstr "The below configuration is used as example where we keep focus on VyOS-P1/VyOS-P2/XRv-P3 which we share the settings." +msgstr "Наведена нижче конфігурація використовується як приклад, де ми зосереджуємось на VyOS-P1/VyOS-P2/XRv-P3, налаштування яких ми ділимо." #: ../../configexamples/wan-load-balancing.rst:82 msgid "The configuration steps are the same as in the previous example, except rule 10. So we keep the configuration, remove rule 10 and add a new rule for the failover mode:" -msgstr "The configuration steps are the same as in the previous example, except rule 10. So we keep the configuration, remove rule 10 and add a new rule for the failover mode:" +msgstr "Кроки конфігурації такі ж, як і в попередньому прикладі, за винятком правила 10. Тому ми зберігаємо конфігурацію, видаляємо правило 10 і додаємо нове правило для режиму відновлення після відмови:" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:28 msgid "The example topology has 2 VyOS routers. One as The WAN Router and on as a Client, to test a single LAN setup" -msgstr "The example topology has 2 VyOS routers. One as The WAN Router and on as a Client, to test a single LAN setup" +msgstr "Приклад топології містить 2 маршрутизатори VyOS. Один як WAN-маршрутизатор і як клієнт, щоб перевірити налаштування однієї локальної мережі" #: ../../configexamples/zone-policy.rst:133 msgid "The first two rules are to deal with the idiosyncrasies of VyOS and iptables." -msgstr "The first two rules are to deal with the idiosyncrasies of VyOS and iptables." +msgstr "Перші два правила стосуються особливостей VyOS та iptables." #: ../../configexamples/zone-policy.rst:182 msgid "The following are the rules that were created for this example (may not be complete), both in IPv4 and IPv6. If there is no IP specified, then the source/destination address is not explicit." -msgstr "The following are the rules that were created for this example (may not be complete), both in IPv4 and IPv6. If there is no IP specified, then the source/destination address is not explicit." +msgstr "Нижче наведено правила, створені для цього прикладу (можуть бути неповними) як для IPv4, так і для IPv6. Якщо IP-адреса не вказана, адреса джерела/одержувача не є явною." #: ../../configexamples/l3vpn-hub-and-spoke.rst:40 msgid "The following software was used in the creation of this document:" -msgstr "The following software was used in the creation of this document:" +msgstr "Для створення цього документа використовувалося наступне програмне забезпечення:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:122 msgid "The following template configuration can be used in each remote router based in our topology." -msgstr "The following template configuration can be used in each remote router based in our topology." +msgstr "Наступну конфігурацію шаблону можна використовувати в кожному віддаленому маршрутизаторі в нашій топології." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:169 msgid "The format of these addresses:" -msgstr "The format of these addresses:" +msgstr "Формат цих адрес:" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:42 msgid "The lab I built is using a VRF (called **mgmt**) to provide out-of-band SSH access to the PE (Provider Edge) routers." -msgstr "The lab I built is using a VRF (called **mgmt**) to provide out-of-band SSH access to the PE (Provider Edge) routers." +msgstr "Лабораторія, яку я створив, використовує VRF (називається **mgmt**) для забезпечення позасмугового доступу SSH до маршрутизаторів PE (Provider Edge)." #: ../../configexamples/site-2-site-cisco.rst:14 msgid "The lab was built using EVE-NG." @@ -2088,23 +2140,23 @@ msgstr "The lab was built using EVE-NG." #: ../../configexamples/index.rst:33 msgid "The next pages contains automatic full tested configuration examples." -msgstr "The next pages contains automatic full tested configuration examples." +msgstr "Наступні сторінки містять автоматичні повні протестовані приклади конфігурації." #: ../../configexamples/wan-load-balancing.rst:97 msgid "The previous example used the failover command to send traffic through eth1 if eth0 fails. In this example, failover functionality is provided by rule order." -msgstr "The previous example used the failover command to send traffic through eth1 if eth0 fails. In this example, failover functionality is provided by rule order." +msgstr "У попередньому прикладі використано команду відновлення після відмови, щоб відправити трафік через eth1, якщо eth0 не вдається. У цьому прикладі функція відновлення після збоїв надається порядком правил." #: ../../configexamples/index.rst:41 msgid "The process will do the following steps:" -msgstr "The process will do the following steps:" +msgstr "Процес виконуватиме такі кроки:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:16 msgid "The scope of this document is to cover such cases in a dynamic way without the use of MPLS-LDP." -msgstr "The scope of this document is to cover such cases in a dynamic way without the use of MPLS-LDP." +msgstr "Метою цього документа є охоплення таких випадків динамічним способом без використання MPLS-LDP." #: ../../configexamples/wan-load-balancing.rst:14 msgid "The setup used in this example is shown in the following diagram:" -msgstr "The setup used in this example is shown in the following diagram:" +msgstr "Налаштування, використане в цьому прикладі, показано на наступній діаграмі:" #: ../../configexamples/ansible.rst:161 msgid "The simple way without configuration of the hostname (one task for all routers):" @@ -2112,55 +2164,59 @@ msgstr "The simple way without configuration of the hostname (one task for all r #: ../../configexamples/ha.rst:339 msgid "The simplest way to test is to look at the connection tracking stats on the standby hardware router with the command ``show conntrack-sync statistics``. The numbers should be very close to the numbers on the primary router." -msgstr "The simplest way to test is to look at the connection tracking stats on the standby hardware router with the command ``show conntrack-sync statistics``. The numbers should be very close to the numbers on the primary router." +msgstr "Найпростіший спосіб перевірити — переглянути статистику відстеження з’єднання на резервному апаратному маршрутизаторі за допомогою команди ``show conntrack-sync statistics``. Цифри мають бути дуже близькими до цифр на основному маршрутизаторі." #: ../../configexamples/ha.rst:267 msgid "The sync group is used to replicate connection tracking. It needs to be assigned to a random VRRP group, and we are creating a sync group called ``sync`` using the vrrp group ``int``." -msgstr "The sync group is used to replicate connection tracking. It needs to be assigned to a random VRRP group, and we are creating a sync group called ``sync`` using the vrrp group ``int``." +msgstr "Група синхронізації використовується для реплікації відстеження підключення. Його потрібно призначити випадковій групі VRRP, і ми створюємо групу синхронізації під назвою ``sync`` за допомогою групи vrrp ``int``." #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:17 msgid "The topology has 3 VyOS routers and one client. Between the DHCP Server and the DHCP Relay is a GRE tunnel. The `transport` VyOS represent a large Network." -msgstr "The topology has 3 VyOS routers and one client. Between the DHCP Server and the DHCP Relay is a GRE tunnel. The `transport` VyOS represent a large Network." +msgstr "Топологія включає 3 маршрутизатори VyOS і один клієнт. Між сервером DHCP і ретранслятором DHCP є тунель GRE. `Транспорт` VyOS представляє собою велику мережу." #: ../../configexamples/autotest/Wireguard/Wireguard.rst:17 msgid "The topology have a central and a branch VyOS router and one client, to test, in each site." -msgstr "The topology have a central and a branch VyOS router and one client, to test, in each site." +msgstr "Топологія містить центральний маршрутизатор VyOS і маршрутизатор філії та один клієнт для тестування на кожному сайті." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:803 msgid "Then add a route-map and reference to above prefix. Consider that the actions taken inside the prefix will MATCH the routes that will be affected by the actions inside the rules of the route-map." -msgstr "Then add a route-map and reference to above prefix. Consider that the actions taken inside the prefix will MATCH the routes that will be affected by the actions inside the rules of the route-map." +msgstr "Потім додайте карту маршруту та посилання на префікс вище. Вважайте, що дії, виконані всередині префікса, ВІДПОВІДАЮТЬ маршрутам, на які впливатимуть дії всередині правил карти маршруту." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:820 msgid "Then we need to attach the policy to the BGP process. This needs to be under the import statement in the vrf we need to filter." -msgstr "Then we need to attach the policy to the BGP process. This needs to be under the import statement in the vrf we need to filter." +msgstr "Потім нам потрібно приєднати політику до процесу BGP. Це має бути під оператором імпорту у vrf, який нам потрібно відфільтрувати." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:317 msgid "There are some cases where this is not needed -for example, in some DDoS appliance- but most inter-vrf routing designs use the above configurations." -msgstr "There are some cases where this is not needed -for example, in some DDoS appliance- but most inter-vrf routing designs use the above configurations." +msgstr "У деяких випадках це не потрібно, наприклад, у деяких пристроях DDoS, але більшість проектів маршрутизації між vrf використовують наведені вище конфігурації." #: ../../configexamples/ha.rst:360 msgid "There is plenty of instructions and documentation on setting up Wireguard. The only important thing you need to remember is to only use one WireGuard interface per OSPF connection." -msgstr "There is plenty of instructions and documentation on setting up Wireguard. The only important thing you need to remember is to only use one WireGuard interface per OSPF connection." +msgstr "Існує багато інструкцій та документації щодо налаштування Wireguard. Єдина важлива річ, про яку вам потрібно пам’ятати, це використання лише одного інтерфейсу WireGuard для кожного з’єднання OSPF." #: ../../configexamples/ha.rst:67 msgid "These are the vlans we will be using:" -msgstr "These are the vlans we will be using:" +msgstr "Це vlans, які ми будемо використовувати:" #: ../../configexamples/ha.rst:48 msgid "They want us to establish a BGP session to their routers on 192.0.2.11 and 192.0.2.12 from our routers 192.0.2.21 and 192.0.2.22. They are AS 65550 and we are AS 65551." -msgstr "They want us to establish a BGP session to their routers on 192.0.2.11 and 192.0.2.12 from our routers 192.0.2.21 and 192.0.2.22. They are AS 65550 and we are AS 65551." +msgstr "Вони хочуть, щоб ми встановили сеанс BGP до їхніх маршрутизаторів на 192.0.2.11 і 192.0.2.12 з наших маршрутизаторів 192.0.2.21 і 192.0.2.22. Вони AS 65550, а ми AS 65551." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:10 msgid "This LAB show how to uwe OpenVPN with a Active Directory authentication backend." -msgstr "This LAB show how to uwe OpenVPN with a Active Directory authentication backend." +msgstr "Ця ЛАБ показує, як використовувати OpenVPN із серверною частиною автентифікації Active Directory." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:137 msgid "This accomplishes a few things:" -msgstr "This accomplishes a few things:" +msgstr "Це досягає кількох речей:" #: ../../configexamples/index.rst:6 msgid "This chapter contains various configuration examples:" -msgstr "This chapter contains various configuration examples:" +msgstr "Цей розділ містить різні приклади конфігурації:" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 +msgid "This configuration example and the requirments consists of:" +msgstr "This configuration example and the requirments consists of:" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 msgid "This configuration example and the requirments consists on:" @@ -2168,7 +2224,7 @@ msgstr "This configuration example and the requirments consists on:" #: ../../configexamples/ha.rst:13 msgid "This document aims to walk you through setting everything up, so at a point where you can reboot any machine and not lose more than a few seconds worth of connectivity." -msgstr "This document aims to walk you through setting everything up, so at a point where you can reboot any machine and not lose more than a few seconds worth of connectivity." +msgstr "У цьому документі описано, як усе налаштувати, щоб ви могли перезавантажити будь-який комп’ютер і не втратити більше кількох секунд підключення." #: ../../configexamples/lac-lns.rst:9 msgid "This document is to describe a basic setup using PPPoE over L2TP. LAC and LNS are components of the broadband topology. LAC - L2TP access concentrator LNS - L2TP Network Server LAC and LNS forms L2TP tunnel. LAC receives packets from PPPoE clients and forward them to LNS. LNS is the termination point that comes from PPP packets from the remote client." @@ -2176,23 +2232,23 @@ msgstr "This document is to describe a basic setup using PPPoE over L2TP. LAC an #: ../../configexamples/pppoe-ipv6-basic.rst:9 msgid "This document is to describe a basic setup using PPPoE with DHCPv6-PD + SLAAC to construct a typical home network. The user can follow the steps described here to quickly setup a working network and use this as a starting point to further configure or fine-tune other settings." -msgstr "This document is to describe a basic setup using PPPoE with DHCPv6-PD + SLAAC to construct a typical home network. The user can follow the steps described here to quickly setup a working network and use this as a starting point to further configure or fine-tune other settings." +msgstr "У цьому документі описується базове налаштування за допомогою PPPoE з DHCPv6-PD + SLAAC для побудови типової домашньої мережі. Користувач може виконати описані тут кроки, щоб швидко налаштувати робочу мережу та використовувати це як відправну точку для подальшого налаштування або точного налаштування інших параметрів." #: ../../configexamples/ha.rst:9 msgid "This document walks you through a complete HA setup of two VyOS machines. This design is based on a VM as the primary router and a physical machine as a backup, using VRRP, BGP, OSPF, and conntrack sharing." -msgstr "This document walks you through a complete HA setup of two VyOS machines. This design is based on a VM as the primary router and a physical machine as a backup, using VRRP, BGP, OSPF, and conntrack sharing." +msgstr "Цей документ проведе вас через повне налаштування високої доступності двох машин VyOS. Ця конструкція базується на віртуальній машині як основному маршрутизаторі та фізичній машині як резервній, використовуючи VRRP, BGP, OSPF і спільне використання conntrack." #: ../../configexamples/ha.rst:38 msgid "This ensures you don't go too fast or miss a step. However, it will make your life easier to configure the fixed IP address and default route now on the hardware router." -msgstr "This ensures you don't go too fast or miss a step. However, it will make your life easier to configure the fixed IP address and default route now on the hardware router." +msgstr "Це гарантує, що ви не їдете надто швидко або не пропустите крок. Однак це полегшить ваше життя, якщо налаштувати фіксовану IP-адресу та маршрут за замовчуванням зараз на апаратному маршрутизаторі." #: ../../configexamples/wan-load-balancing.rst:70 msgid "This example uses the failover mode." -msgstr "This example uses the failover mode." +msgstr "У цьому прикладі використовується режим відновлення після відмови." #: ../../configexamples/segment-routing-isis.rst:112 msgid "This gives us MPLS segment routing enabled and labels forwarding :" -msgstr "This gives us MPLS segment routing enabled and labels forwarding :" +msgstr "Це дає нам можливість сегментної маршрутизації MPLS і пересилання міток:" #: ../../configexamples/site-2-site-cisco.rst:6 msgid "This guide shows a sample configuration for FlexVPN site-to-site Internet Protocol Security (IPsec)/Generic Routing Encapsulation (GRE) tunnel." @@ -2200,59 +2256,63 @@ msgstr "This guide shows a sample configuration for FlexVPN site-to-site Interne #: ../../configexamples/azure-vpn-dual-bgp.rst:8 msgid "This guide shows an example of a redundant (active-active) route-based IKEv2 site-to-site VPN to Azure using VTI and BGP for dynamic routing updates." -msgstr "This guide shows an example of a redundant (active-active) route-based IKEv2 site-to-site VPN to Azure using VTI and BGP for dynamic routing updates." +msgstr "У цьому посібнику наведено приклад резервної (активний-активний) маршрутної мережі IKEv2 між сайтами VPN до Azure із використанням VTI та BGP для динамічного оновлення маршрутизації." #: ../../configexamples/azure-vpn-bgp.rst:8 msgid "This guide shows an example of a route-based IKEv2 site-to-site VPN to Azure using VTI and BGP for dynamic routing updates." -msgstr "This guide shows an example of a route-based IKEv2 site-to-site VPN to Azure using VTI and BGP for dynamic routing updates." +msgstr "У цьому посібнику наведено приклад міжсайтової VPN IKEv2 на основі маршруту до Azure з використанням VTI та BGP для динамічного оновлення маршрутизації." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:7 msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:7 +msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configuration." +msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configuration." + #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:10 msgid "This guide walks through the setup of https://www.tunnelbroker.net/ for an IPv6 Tunnel." -msgstr "This guide walks through the setup of https://www.tunnelbroker.net/ for an IPv6 Tunnel." +msgstr "Цей посібник розповідає про налаштування https://www.tunnelbroker.net/ для тунелю IPv6." #: ../../configexamples/ha.rst:197 msgid "This has a floating IP address of 10.200.201.1/24, using virtual router ID 201. The difference between them is the interface name, hello-source-address, and peer-address." -msgstr "This has a floating IP address of 10.200.201.1/24, using virtual router ID 201. The difference between them is the interface name, hello-source-address, and peer-address." +msgstr "Він має плаваючу IP-адресу 10.200.201.1/24, використовує ідентифікатор віртуального маршрутизатора 201. Різниця між ними полягає в імені інтерфейсу, привітній адресі джерела та одноранговій адресі." #: ../../configexamples/ha.rst:232 msgid "This has a floating IP address of 203.0.113.1/24, using virtual router ID 113. The virtual router ID is just a random number between 1 and 254, and can be set to whatever you want. Best practices suggest you try to keep them unique enterprise-wide." -msgstr "This has a floating IP address of 203.0.113.1/24, using virtual router ID 113. The virtual router ID is just a random number between 1 and 254, and can be set to whatever you want. Best practices suggest you try to keep them unique enterprise-wide." +msgstr "Він має плаваючу IP-адресу 203.0.113.1/24 із використанням ідентифікатора віртуального маршрутизатора 113. Ідентифікатор віртуального маршрутизатора — це лише випадкове число від 1 до 254, яке можна встановити будь-яким. Рекомендації з найкращих практик рекомендують вам намагатися зберегти їх унікальними для всього підприємства." #: ../../configexamples/zone-policy.rst:258 msgid "This is an example of the three base rules." -msgstr "This is an example of the three base rules." +msgstr "Це приклад трьох основних правил." #: ../../configexamples/ha.rst:20 msgid "This is based on a real-life production design. One of the complex issues is ensuring you have redundant data INTO your network. We do this with a pair of Cisco Nexus switches and using Virtual PortChannels that are spanned across them. As a bonus, this also allows for complete switch failure without an outage. How you achieve this yourself is left as an exercise to the reader. But our setup is documented here." -msgstr "This is based on a real-life production design. One of the complex issues is ensuring you have redundant data INTO your network. We do this with a pair of Cisco Nexus switches and using Virtual PortChannels that are spanned across them. As a bonus, this also allows for complete switch failure without an outage. How you achieve this yourself is left as an exercise to the reader. But our setup is documented here." +msgstr "Це засновано на реальному виробничому проекті. Однією зі складних проблем є забезпечення надлишкових даних у вашій мережі. Ми робимо це за допомогою пари комутаторів Cisco Nexus і віртуальних каналів портів, які охоплюють їх. Як бонус, це також дозволяє повністю відмовити комутатор без відключення. Читачеві залишиться для вправи, як ви досягнете цього самостійно. Але наше налаштування задокументовано тут." #: ../../configexamples/ha.rst:391 msgid "This is connecting back to the STATIC IP of router1, not the floating." -msgstr "This is connecting back to the STATIC IP of router1, not the floating." +msgstr "Це зворотне підключення до СТАТИЧНОЇ IP-адреси router1, а не до плаваючої." #: ../../configexamples/ha.rst:583 msgid "This is identical, but you use the BGPPREPENDOUT route-map to advertise the route with a longer path." -msgstr "This is identical, but you use the BGPPREPENDOUT route-map to advertise the route with a longer path." +msgstr "Це ідентично, але ви використовуєте карту маршруту BGPPREPENDOUT для оголошення маршруту з довшим шляхом." #: ../../configexamples/ha.rst:96 msgid "This is ignoring the extra Out-of-band management networking, which should be on totally different switches, and a different feed into the rack, and is out of scope of this." -msgstr "This is ignoring the extra Out-of-band management networking, which should be on totally different switches, and a different feed into the rack, and is out of scope of this." +msgstr "Це ігнорує додаткову мережу позасмугового керування, яка має бути на зовсім інших комутаторах, і іншу подачу в стійку, і це виходить за рамки цього." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:38 msgid "This scenario could be a nightmare applying regular routing and might need filtering in multiple interfaces." -msgstr "This scenario could be a nightmare applying regular routing and might need filtering in multiple interfaces." +msgstr "Цей сценарій може стати кошмаром із застосуванням звичайної маршрутизації та потребує фільтрації в кількох інтерфейсах." #: ../../configexamples/l3vpn-hub-and-spoke.rst:547 msgid "This section describes verification commands for MPLS/BGP/LDP protocols and L3VPN related routes as well as diagnosis and reachability checks between CE nodes." -msgstr "This section describes verification commands for MPLS/BGP/LDP protocols and L3VPN related routes as well as diagnosis and reachability checks between CE nodes." +msgstr "У цьому розділі описано команди перевірки для протоколів MPLS/BGP/LDP і пов’язаних з L3VPN маршрутів, а також перевірки діагностики та доступності між вузлами CE." #: ../../configexamples/l3vpn-hub-and-spoke.rst:409 msgid "This section provides configuration steps for setting up VRFs on our PE nodes including CE facing interfaces, BGP, rd and route-target import/export based on the pre-defined parameters." -msgstr "This section provides configuration steps for setting up VRFs on our PE nodes including CE facing interfaces, BGP, rd and route-target import/export based on the pre-defined parameters." +msgstr "У цьому розділі наведено кроки конфігурації для налаштування VRF на наших вузлах PE, включаючи інтерфейси, спрямовані на CE, BGP, rd та імпорт/експорт цільового маршруту на основі попередньо визначених параметрів." #: ../../configexamples/lac-lns.rst:91 msgid "This setup requires the Compression Control Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access ppp-options disable-ccp`` accomplishes that." @@ -2260,43 +2320,43 @@ msgstr "This setup requires the Compression Control Protocol (CCP) being disable #: ../../configexamples/autotest/Wireguard/Wireguard.rst:10 msgid "This simple structure show how to connect two offices. One remote branch and the central office." -msgstr "This simple structure show how to connect two offices. One remote branch and the central office." +msgstr "Ця проста структура показує, як з'єднати два офіси. Одне віддалене відділення та центральний офіс." #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:10 msgid "This simple structure shows how to configure a DHCP Relay over a GRE Bridge interface." -msgstr "This simple structure shows how to configure a DHCP Relay over a GRE Bridge interface." +msgstr "Ця проста структура показує, як налаштувати DHCP Relay через інтерфейс GRE Bridge." #: ../../configexamples/ha.rst:531 msgid "This will be visible in 'show ip route'." -msgstr "This will be visible in 'show ip route'." +msgstr "Це буде видно в «show ip route»." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:112 msgid "Thus you can easily match it to one of the devices/networks below." -msgstr "Thus you can easily match it to one of the devices/networks below." +msgstr "Таким чином, ви можете легко підключити його до одного з пристроїв/мереж нижче." #: ../../configexamples/pppoe-ipv6-basic.rst:14 msgid "To achieve this, your ISP is required to support DHCPv6-PD. If you're not sure, please contact your ISP for more information." -msgstr "To achieve this, your ISP is required to support DHCPv6-PD. If you're not sure, please contact your ISP for more information." +msgstr "Для цього ваш провайдер повинен підтримувати DHCPv6-PD. Якщо ви не впевнені, будь ласка, зверніться до свого провайдера для отримання додаткової інформації." #: ../../configexamples/zone-policy.rst:144 msgid "To add logging to the default rule, do:" -msgstr "To add logging to the default rule, do:" +msgstr "Щоб додати журналювання до правила за замовчуванням, виконайте:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:54 msgid "To address this scenario we will use to our advantage an extension of the BGP routing protocol that will help us in the “Export” between VRFs without the need for MPLS." -msgstr "To address this scenario we will use to our advantage an extension of the BGP routing protocol that will help us in the “Export” between VRFs without the need for MPLS." +msgstr "Для вирішення цього сценарію ми використаємо розширення протоколу маршрутизації BGP, яке допоможе нам здійснювати «Експорт» між VRF без потреби в MPLS." #: ../../configexamples/l3vpn-hub-and-spoke.rst:31 msgid "To deploy a Layer3 VPN with MPLS on VyOS, we should meet a couple requirements in order to properly implement the solution. We'll use the following nodes in our LAB environment:" -msgstr "To deploy a Layer3 VPN with MPLS on VyOS, we should meet a couple requirements in order to properly implement the solution. We'll use the following nodes in our LAB environment:" +msgstr "Щоб розгорнути Layer3 VPN з MPLS на VyOS, ми повинні відповідати кільком вимогам, щоб правильно реалізувати рішення. Ми будемо використовувати наступні вузли в нашому середовищі LAB:" #: ../../configexamples/pppoe-ipv6-basic.rst:84 msgid "To have basic protection while keeping IPv6 network functional, we need to:" -msgstr "To have basic protection while keeping IPv6 network functional, we need to:" +msgstr "Щоб мати базовий захист і підтримувати роботу мережі IPv6, нам потрібно:" #: ../../configexamples/autotest/Wireguard/Wireguard.rst:68 msgid "To reach the network, a route must be set on each VyOS host. In this structure, a static interface route will fit the requirements." -msgstr "To reach the network, a route must be set on each VyOS host. In this structure, a static interface route will fit the requirements." +msgstr "Щоб отримати доступ до мережі, на кожному хості VyOS потрібно встановити маршрут. У цій структурі вимогам відповідатиме статичний маршрут інтерфейсу." #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:15 #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:52 @@ -2305,15 +2365,15 @@ msgstr "To reach the network, a route must be set on each VyOS host. In this str #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:72 #: ../../configexamples/l3vpn-hub-and-spoke.rst:55 msgid "Topology" -msgstr "Topology" +msgstr "Топологія" #: ../../configexamples/zone-policy.rst:95 msgid "Traffic flows from zone A to zone B. That flow is what I refer to as a zone-pair-direction. eg. A->B and B->A are two zone-pair-destinations." -msgstr "Traffic flows from zone A to zone B. That flow is what I refer to as a zone-pair-direction. eg. A->B and B->A are two zone-pair-destinations." +msgstr "Трафік рухається із зони A в зону B. Цей потік я називаю напрямком пари зон. напр. A->B і B->A є двома зонами призначення." #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:31 msgid "Transport:" -msgstr "Transport:" +msgstr "Транспорт:" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:5 msgid "Tunnelbroker.net (IPv6)" @@ -2321,7 +2381,7 @@ msgstr "Tunnelbroker.net (IPv6)" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:-1 msgid "Tunnelbroker topology image" -msgstr "Tunnelbroker topology image" +msgstr "Зображення топології Tunnelbroker" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:18 msgid "Two VyOS routers with public IP address." @@ -2329,32 +2389,32 @@ msgstr "Two VyOS routers with public IP address." #: ../../configexamples/wan-load-balancing.rst:105 msgid "Two rules will be created, the first rule directs traffic coming in from eth2 to eth0 and the second rule directs the traffic to eth1. If eth0 fails the first rule is bypassed and the second rule matches, directing traffic to eth1." -msgstr "Two rules will be created, the first rule directs traffic coming in from eth2 to eth0 and the second rule directs the traffic to eth1. If eth0 fails the first rule is bypassed and the second rule matches, directing traffic to eth1." +msgstr "Буде створено два правила: перше правило спрямовує трафік, що надходить від eth2 до eth0, а друге правило спрямовує трафік до eth1. Якщо eth0 виходить з ладу, перше правило обходиться, а друге правило збігається, спрямовуючи трафік на eth1." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:113 msgid "Unlike IPv4, IPv6 is really not designed to be broken up smaller than /64. So if you ever want to have multiple LANs, VLANs, DMZ, etc, you'll want to ignore the assigned /64, and request the /48 and use that." -msgstr "Unlike IPv4, IPv6 is really not designed to be broken up smaller than /64. So if you ever want to have multiple LANs, VLANs, DMZ, etc, you'll want to ignore the assigned /64, and request the /48 and use that." +msgstr "На відміну від IPv4, IPv6 справді не призначений для розбивання меншого ніж /64. Отже, якщо ви коли-небудь захочете мати кілька локальних мереж, VLAN, DMZ тощо, ви захочете проігнорувати призначений /64 і запросити /48 і використовувати його." #: ../../configexamples/ansible.rst:15 #: ../../configexamples/qos.rst:16 msgid "Using the general schema for example:" -msgstr "Using the general schema for example:" +msgstr "Використовуючи загальну схему, наприклад:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:783 msgid "Using this command we are also able to check the transport and customer label (inner/outer) for Hub network prefix (10.0.0.100/32):" -msgstr "Using this command we are also able to check the transport and customer label (inner/outer) for Hub network prefix (10.0.0.100/32):" +msgstr "За допомогою цієї команди ми також можемо перевірити транспортну та клієнтську мітку (внутрішню/зовнішню) для префікса мережі Hub (10.0.0.100/32):" #: ../../configexamples/ha.rst:143 msgid "VLAN 100 and 201 will have floating IP addresses, but VLAN50 does not, as this is talking directly to upstream. Create our IP address on vlan50." -msgstr "VLAN 100 and 201 will have floating IP addresses, but VLAN50 does not, as this is talking directly to upstream. Create our IP address on vlan50." +msgstr "VLAN 100 і 201 матимуть плаваючі IP-адреси, а VLAN50 – ні, оскільки це напряму спілкується з висхідним. Створіть нашу IP-адресу на vlan50." #: ../../configexamples/ha.rst:65 msgid "VLANs" -msgstr "VLANs" +msgstr "VLAN" #: ../../configexamples/ha.rst:120 msgid "VMware: You must DISABLE SECURITY on this Port group. Make sure that ``Promiscuous Mode``\\ , ``MAC address changes`` and ``Forged transmits`` are enabled. All of these will be done as part of failover." -msgstr "VMware: You must DISABLE SECURITY on this Port group. Make sure that ``Promiscuous Mode``\\ , ``MAC address changes`` and ``Forged transmits`` are enabled. All of these will be done as part of failover." +msgstr "VMware: ви повинні ВИМКНУТИ БЕЗПЕКУ для цієї групи портів. Переконайтеся, що ``Promiscuous Mode``\\ , ``MAC address changes`` і ``Forged transmits`` увімкнено. Усе це буде зроблено в рамках відновлення після відмови." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:100 #: ../../configexamples/l3vpn-hub-and-spoke.rst:86 @@ -2363,7 +2423,7 @@ msgstr "VRF" #: ../../configexamples/ha.rst:189 msgid "VRRP Configuration" -msgstr "VRRP Configuration" +msgstr "Конфігурація VRRP" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:160 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:248 @@ -2371,17 +2431,17 @@ msgstr "VRRP Configuration" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:829 #: ../../configexamples/site-2-site-cisco.rst:134 msgid "Verification" -msgstr "Verification" +msgstr "Перевірка" #: ../../configexamples/l3vpn-hub-and-spoke.rst:43 msgid "Version: 1.4-rolling-202110310317" -msgstr "Version: 1.4-rolling-202110310317" +msgstr "Версія: 1.4-rolling-202110310317" #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:7 #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:7 #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:8 msgid "Version: 1.4-rolling-202305100734" -msgstr "Version: 1.4-rolling-202305100734" +msgstr "Версія: 1.4-rolling-202305100734" #: ../../configexamples/autotest/Wireguard/Wireguard.rst:7 #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:8 @@ -2395,7 +2455,7 @@ msgstr "Version: 1.5-rolling-202401121239" #: ../../configexamples/autotest/Wireguard/Wireguard.rst:7 msgid "Version: vyos-1.4-rolling-202302150317" -msgstr "Version: vyos-1.4-rolling-202302150317" +msgstr "Версія: vyos-1.4-rolling-202302150317" #: ../../configexamples/site-2-site-cisco.rst:21 msgid "VyOS" @@ -2403,11 +2463,11 @@ msgstr "VyOS" #: ../../configexamples/l3vpn-hub-and-spoke.rst:1025 msgid "VyOS-CE-HUB -------> VyOS-CE1-SPOKE" -msgstr "VyOS-CE-HUB -------> VyOS-CE1-SPOKE" +msgstr "VyOS-CE-HUB -------> VyOS-CE1-SPOKE" #: ../../configexamples/l3vpn-hub-and-spoke.rst:1026 msgid "VyOS-CE-HUB -------> VyOS-CE2-SPOKE" -msgstr "VyOS-CE-HUB -------> VyOS-CE2-SPOKE" +msgstr "VyOS-CE-HUB -------> VyOS-CE2-SPOKE" #: ../../configexamples/l3vpn-hub-and-spoke.rst:507 msgid "VyOS-CE1-HUB:" @@ -2419,7 +2479,7 @@ msgstr "VyOS-CE1-SPOKE:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:987 msgid "VyOS-CE1-SPOKE -----> VyOS-CE-HUB" -msgstr "VyOS-CE1-SPOKE -----> VyOS-CE-HUB" +msgstr "VyOS-CE1-SPOKE -----> VyOS-CE-HUB" #: ../../configexamples/l3vpn-hub-and-spoke.rst:525 msgid "VyOS-CE2-SPOKE:" @@ -2427,7 +2487,7 @@ msgstr "VyOS-CE2-SPOKE:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:1085 msgid "VyOS-CE2-SPOKE -------> VyOS-CE-HUB" -msgstr "VyOS-CE2-SPOKE -------> VyOS-CE-HUB" +msgstr "VyOS-CE2-SPOKE -------> VyOS-CE-HUB" #: ../../configexamples/l3vpn-hub-and-spoke.rst:112 #: ../../configexamples/segment-routing-isis.rst:26 @@ -2493,80 +2553,80 @@ msgstr "VyOS-RR2:" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:38 msgid "VyOS 1.3 added initial support for VRFs (including IPv4/IPv6 static routing) and VyOS 1.4 now enables full dynamic routing protocol support for OSPF, IS-IS, and BGP for individual VRFs." -msgstr "VyOS 1.3 added initial support for VRFs (including IPv4/IPv6 static routing) and VyOS 1.4 now enables full dynamic routing protocol support for OSPF, IS-IS, and BGP for individual VRFs." +msgstr "У VyOS 1.3 додано початкову підтримку для VRF (включаючи статичну маршрутизацію IPv4/IPv6), а VyOS 1.4 тепер забезпечує повну підтримку протоколу динамічної маршрутизації для OSPF, IS-IS і BGP для окремих VRF." #: ../../configexamples/zone-policy.rst:42 msgid "VyOS acts as DHCP, DNS forwarder, NAT, router and firewall." -msgstr "VyOS acts as DHCP, DNS forwarder, NAT, router and firewall." +msgstr "VyOS діє як DHCP, DNS-переадресатор, NAT, маршрутизатор і брандмауер." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:15 msgid "VyOS as Client" -msgstr "VyOS as Client" +msgstr "VyOS як клієнт" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:14 msgid "VyOS as a OpenVPN Server" -msgstr "VyOS as a OpenVPN Server" +msgstr "VyOS як сервер OpenVPN" #: ../../configexamples/segment-routing-isis.rst:148 msgid "VyOS is able to check MSD per devices:" -msgstr "VyOS is able to check MSD per devices:" +msgstr "VyOS може перевіряти MSD на пристрої:" #: ../../configexamples/azure-vpn-bgp.rst:50 #: ../../configexamples/azure-vpn-dual-bgp.rst:49 msgid "Vyos ASN" -msgstr "Vyos ASN" +msgstr "Виос АСН" #: ../../configexamples/azure-vpn-bgp.rst:56 #: ../../configexamples/azure-vpn-dual-bgp.rst:55 msgid "Vyos configuration" -msgstr "Vyos configuration" +msgstr "Ваша конфігурація" #: ../../configexamples/azure-vpn-bgp.rst:42 #: ../../configexamples/azure-vpn-dual-bgp.rst:39 msgid "Vyos private IP" -msgstr "Vyos private IP" +msgstr "Виос приватний IP" #: ../../configexamples/azure-vpn-bgp.rst:40 #: ../../configexamples/azure-vpn-dual-bgp.rst:37 msgid "Vyos public IP" -msgstr "Vyos public IP" +msgstr "Ваш публічний IP" #: ../../configexamples/azure-vpn-bgp.rst:34 #: ../../configexamples/azure-vpn-dual-bgp.rst:31 msgid "WAN Interface" -msgstr "WAN Interface" +msgstr "Інтерфейс WAN" #: ../../configexamples/wan-load-balancing.rst:8 msgid "WAN Load Balancer examples" -msgstr "WAN Load Balancer examples" +msgstr "Приклади балансування навантаження WAN" #: ../../configexamples/ha.rst:28 msgid "Walkthrough suggestion" -msgstr "Walkthrough suggestion" +msgstr "Пропозиція покрокового керівництва" #: ../../configexamples/ha.rst:55 msgid "We are going to use 10.200.201.0/24 for an 'internal' network on VLAN201." -msgstr "We are going to use 10.200.201.0/24 for an 'internal' network on VLAN201." +msgstr "Ми збираємося використовувати 10.200.201.0/24 для «внутрішньої» мережі на VLAN201." #: ../../configexamples/ha.rst:191 msgid "We are setting up VRRP so that it does NOT fail back when a machine returns into service, and it prioritizes router1 over router2." -msgstr "We are setting up VRRP so that it does NOT fail back when a machine returns into service, and it prioritizes router1 over router2." +msgstr "Ми налаштовуємо VRRP так, щоб він НЕ виходив з ладу, коли машина повертається в експлуатацію, і він надавав пріоритет маршрутизатору1 над маршрутизатором2." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:815 msgid "We are using a \"white list\" approach by allowing only what is necessary. In case that need to implement a \"black list\" approach then you will need to change the action in the route-map for a deny BUT you need to add a rule that permits the rest due to the implicit deny in the route-map." -msgstr "We are using a \"white list\" approach by allowing only what is necessary. In case that need to implement a \"black list\" approach then you will need to change the action in the route-map for a deny BUT you need to add a rule that permits the rest due to the implicit deny in the route-map." +msgstr "Ми використовуємо підхід «білого списку», дозволяючи лише те, що є необхідним. У випадку, якщо потрібно застосувати підхід із «чорним списком», вам потрібно буде змінити дію в карті маршруту для заборони, АЛЕ вам потрібно додати правило, яке дозволяє решту через неявну заборону в карті маршруту." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:778 msgid "We create a prefix-list first and add all the routes we need to." -msgstr "We create a prefix-list first and add all the routes we need to." +msgstr "Спочатку ми створюємо список префіксів і додаємо всі маршрути, які нам потрібні." #: ../../configexamples/ha.rst:300 msgid "We explicitly exclude the primary upstream network so that BGP or OSPF traffic doesn't accidentally get NAT'ed." -msgstr "We explicitly exclude the primary upstream network so that BGP or OSPF traffic doesn't accidentally get NAT'ed." +msgstr "Ми явно виключаємо основну вихідну мережу, щоб трафік BGP або OSPF випадково не отримав NAT." #: ../../configexamples/qos.rst:23 msgid "We have four hosts on the local network 172.17.1.0/24. All hosts are labeled CS0 by default. We need to replace labels on all hosts except vpc8. We will replace the labels on the nearest router “VyOS3” using the IP addresses of the sources." -msgstr "We have four hosts on the local network 172.17.1.0/24. All hosts are labeled CS0 by default. We need to replace labels on all hosts except vpc8. We will replace the labels on the nearest router “VyOS3” using the IP addresses of the sources." +msgstr "У нас є чотири хости в локальній мережі 172.17.1.0/24. Усі хости за замовчуванням позначені CS0. Нам потрібно замінити мітки на всіх хостах, крім vpc8. Замінимо мітки на найближчому роутері «VyOS3» на IP-адреси джерел." #: ../../configexamples/ansible.rst:22 msgid "We have four pre-configured routers with this configuration:" @@ -2574,59 +2634,59 @@ msgstr "We have four pre-configured routers with this configuration:" #: ../../configexamples/zone-policy.rst:25 msgid "We have three networks." -msgstr "We have three networks." +msgstr "У нас три мережі." #: ../../configexamples/wan-load-balancing.rst:112 msgid "We keep the configuration from the previous example, delete rule 10 and create the two new rules as described:" -msgstr "We keep the configuration from the previous example, delete rule 10 and create the two new rules as described:" +msgstr "Ми зберігаємо конфігурацію з попереднього прикладу, видаляємо правило 10 і створюємо два нових правила, як описано:" #: ../../configexamples/wan-load-balancing.rst:143 msgid "We keep the configuration from the previous example, delete rule 20 and create a new rule as described:" -msgstr "We keep the configuration from the previous example, delete rule 20 and create a new rule as described:" +msgstr "Ми зберігаємо конфігурацію з попереднього прикладу, видаляємо правило 20 і створюємо нове правило, як описано:" #: ../../configexamples/pppoe-ipv6-basic.rst:63 msgid "We need to enable router advertisement for LAN network so that PC can receive the prefix and use SLAAC to configure the address automatically." -msgstr "We need to enable router advertisement for LAN network so that PC can receive the prefix and use SLAAC to configure the address automatically." +msgstr "Нам потрібно ввімкнути оголошення маршрутизатора для мережі LAN, щоб ПК міг отримати префікс і використовувати SLAAC для автоматичного налаштування адреси." #: ../../configexamples/ha.rst:419 msgid "We only want to export the networks we know. Always do a whitelist on your route filters, both importing and exporting. A good rule of thumb is **'If you are not the default router for a network, don't advertise it'**. This means we explicitly do not want to advertise the 192.0.2.0/24 network (but do want to advertise 10.200.201.0 and 203.0.113.0, which we ARE the default route for). This filter is applied to ``redistribute connected``. If we WERE to advertise it, the remote machines would see 192.0.2.21 available via their default route, establish the connection, and then OSPF would say '192.0.2.0/24 is available via this tunnel', at which point the tunnel would break, OSPF would drop the routes, and then 192.0.2.0/24 would be reachable via default again. This is called 'flapping'." -msgstr "We only want to export the networks we know. Always do a whitelist on your route filters, both importing and exporting. A good rule of thumb is **'If you are not the default router for a network, don't advertise it'**. This means we explicitly do not want to advertise the 192.0.2.0/24 network (but do want to advertise 10.200.201.0 and 203.0.113.0, which we ARE the default route for). This filter is applied to ``redistribute connected``. If we WERE to advertise it, the remote machines would see 192.0.2.21 available via their default route, establish the connection, and then OSPF would say '192.0.2.0/24 is available via this tunnel', at which point the tunnel would break, OSPF would drop the routes, and then 192.0.2.0/24 would be reachable via default again. This is called 'flapping'." +msgstr "Ми хочемо експортувати лише ті мережі, які знаємо. Завжди створюйте білий список для фільтрів маршрутів, як імпорту, так і експорту. Хорошим емпіричним правилом є **"Якщо ви не є маршрутизатором за умовчанням для мережі, не рекламуйте це"**. Це означає, що ми явно не хочемо рекламувати мережу 192.0.2.0/24 (але хочемо рекламувати 10.200.201.0 і 203.0.113.0, для яких ми Є маршрутом за замовчуванням). Цей фільтр застосовується до ``перерозподілу підключених``. Якби ми МАЛИ це рекламувати, віддалені машини бачили б 192.0.2.21 доступним через їхній маршрут за замовчуванням, встановлювали б з’єднання, а потім OSPF скаже, що «192.0.2.0/24 доступний через цей тунель», після чого тунель перерветься. , OSPF видалить маршрути, а потім 192.0.2.0/24 знову стане доступним за умовчанням. Це називається «махання»." #: ../../configexamples/ha.rst:450 msgid "We only want to import networks we know. Our OSPF peer should only be advertising networks in the 10.201.0.0/16 range. Note that this is an INVERSE MATCH. You deny in access-list 100 to accept the route." -msgstr "We only want to import networks we know. Our OSPF peer should only be advertising networks in the 10.201.0.0/16 range. Note that this is an INVERSE MATCH. You deny in access-list 100 to accept the route." +msgstr "Ми хочемо імпортувати лише знайомі нам мережі. Наш партнер OSPF має бути лише рекламними мережами в діапазоні 10.201.0.0/16. Зверніть увагу, що це ЗВЕРНЕНА ВІДПОВІДНІСТЬ. Ви забороняєте в списку доступу 100 приймати маршрут." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:115 msgid "We use a static route configuration in between the Core and each LAN and Management router, and BGP between the Core router and the ISP router but any dynamic routing protocol can be used." -msgstr "We use a static route configuration in between the Core and each LAN and Management router, and BGP between the Core router and the ISP router but any dynamic routing protocol can be used." +msgstr "Ми використовуємо статичну конфігурацію маршруту між ядром і кожним маршрутизатором локальної мережі та керування, а також BGP між маршрутизатором ядра та маршрутизатором ISP, але можна використовувати будь-який протокол динамічної маршрутизації." #: ../../configexamples/ha.rst:364 msgid "We use small /30's from 10.254.60/24 for the point-to-point links." -msgstr "We use small /30's from 10.254.60/24 for the point-to-point links." +msgstr "Ми використовуємо маленькі /30 з 10.254.60/24 для зв’язків «точка-точка»." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:54 msgid "We use the following network topology in this example:" -msgstr "We use the following network topology in this example:" +msgstr "У цьому прикладі ми використовуємо наступну топологію мережі:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:770 msgid "When importing routes using MP-BGP it is possible to filter a subset of them before are injected in the BGP table. One of the most common case is to use a route-map with an prefix-list." -msgstr "When importing routes using MP-BGP it is possible to filter a subset of them before are injected in the BGP table. One of the most common case is to use a route-map with an prefix-list." +msgstr "Під час імпорту маршрутів за допомогою MP-BGP можна відфільтрувати їх підмножину перед тим, як їх додати до таблиці BGP. Одним із найпоширеніших випадків є використання маршрутної карти зі списком префіксів." #: ../../configexamples/ha.rst:57 msgid "When traffic is originated from the 10.200.201.0/24 network, it will be masqueraded to 203.0.113.1" -msgstr "When traffic is originated from the 10.200.201.0/24 network, it will be masqueraded to 203.0.113.1" +msgstr "Коли трафік надходить із мережі 10.200.201.0/24, він маскується під 203.0.113.1" #: ../../configexamples/segment-routing-isis.rst:9 msgid "When utilizing VyOS in an environment with Cisco IOS-XR gear you can use this blue print as an initial setup to get MPLS ISIS-SR working between those two devices.The lab was build using :abbr:`EVE-NG (Emulated Virtual Environment NG)`." -msgstr "When utilizing VyOS in an environment with Cisco IOS-XR gear you can use this blue print as an initial setup to get MPLS ISIS-SR working between those two devices.The lab was build using :abbr:`EVE-NG (Emulated Virtual Environment NG)`." +msgstr "Використовуючи VyOS у середовищі з обладнанням Cisco IOS-XR, ви можете використати цей план як початкове налаштування, щоб MPLS ISIS-SR працював між цими двома пристроями. Лабораторію було створено за допомогою :abbr:`EVE-NG (емульоване віртуальне середовище). НГ)`." #: ../../configexamples/ha.rst:343 msgid "When you have both routers up, you should be able to establish a connection from a NAT'ed machine out to the internet, reboot the active machine, and that connection should be preserved, and will not drop out." -msgstr "When you have both routers up, you should be able to establish a connection from a NAT'ed machine out to the internet, reboot the active machine, and that connection should be preserved, and will not drop out." +msgstr "Коли у вас підключено обидва маршрутизатори, ви зможете встановити з’єднання від машини з NAT до Інтернету, перезавантажте активну машину, і це з’єднання має бути збережено та не розривається." #: ../../configexamples/ha.rst:491 msgid "When you have enabled OSPF on both routers, you should be able to see each other with the command ``show ip ospf neighbour``. The state must be 'Full' or '2-Way'. If it is not, then there is a network connectivity issue between the hosts. This is often caused by NAT or MTU issues. You should not see any new routes (unless this is the second pass) in the output of ``show ip route``" -msgstr "When you have enabled OSPF on both routers, you should be able to see each other with the command ``show ip ospf neighbour``. The state must be 'Full' or '2-Way'. If it is not, then there is a network connectivity issue between the hosts. This is often caused by NAT or MTU issues. You should not see any new routes (unless this is the second pass) in the output of ``show ip route``" +msgstr "Коли ви ввімкнули OSPF на обох маршрутизаторах, ви зможете бачити один одного за допомогою команди ``show ip ospf neighbour``. Стан має бути «Повний» або «2-сторонній». Якщо це не так, між хостами виникла проблема мережевого з’єднання. Це часто спричинено проблемами NAT або MTU. Ви не повинні побачити жодних нових маршрутів (якщо це не другий прохід) у виводі ``show ip route``" #: ../../configexamples/lac-lns.rst:-1 msgid "Window PPPoE Client Configuration" @@ -2634,27 +2694,27 @@ msgstr "Window PPPoE Client Configuration" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:13 msgid "Windows Server 2019 with a running Active Directory" -msgstr "Windows Server 2019 with a running Active Directory" +msgstr "Windows Server 2019 із запущеною Active Directory" #: ../../configexamples/autotest/Wireguard/Wireguard.rst:3 msgid "Wireguard" -msgstr "Wireguard" +msgstr "WireGuard" #: ../../configexamples/ha.rst:350 msgid "Wireguard doesn't have the concept of an up or down link, due to its design. This complicates AND simplifies using it for network transport, as for reliable state detection you need to use SOMETHING to detect when the link is down." -msgstr "Wireguard doesn't have the concept of an up or down link, due to its design. This complicates AND simplifies using it for network transport, as for reliable state detection you need to use SOMETHING to detect when the link is down." +msgstr "Wireguard не має концепції висхідного або низхідного зв’язку через свою конструкцію. Це ускладнює ТА спрощує його використання для мережевого транспорту, оскільки для надійного виявлення стану потрібно використовувати ЩОСЬ, щоб виявити, коли з’єднання не працює." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:105 msgid "With Tunnelbroker.net, you have two options:" -msgstr "With Tunnelbroker.net, you have two options:" +msgstr "З Tunnelbroker.net у вас є два варіанти:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:907 msgid "With this command we are able to check the transport and customer label (inner/outer) for network spokes prefixes 10.0.0.80/32 - 10.0.0.90/32" -msgstr "With this command we are able to check the transport and customer label (inner/outer) for network spokes prefixes 10.0.0.80/32 - 10.0.0.90/32" +msgstr "За допомогою цієї команди ми можемо перевірити транспортну та клієнтську мітку (внутрішню/зовнішню) для префіксів спілок мережі 10.0.0.80/32 - 10.0.0.90/32" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:293 msgid "Within the VRF we set the Route-Distinguisher (RD) and Route-Targets (RT), then we enable the export/import VPN." -msgstr "Within the VRF we set the Route-Distinguisher (RD) and Route-Targets (RT), then we enable the export/import VPN." +msgstr "У VRF ми встановлюємо Route-Distinguisher (RD) і Route-Targets (RT), а потім вмикаємо експорт/імпорт VPN." #: ../../configexamples/segment-routing-isis.rst:48 msgid "XRv-P3:" @@ -2662,79 +2722,79 @@ msgstr "XRv-P3:" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:145 msgid "You managed to come this far, now we want to see the network and routing tables in action." -msgstr "You managed to come this far, now we want to see the network and routing tables in action." +msgstr "Вам вдалося зайти так далеко, тепер ми хочемо побачити мережу та таблиці маршрутизації в дії." #: ../../configexamples/ha.rst:292 msgid "You should be able to ping to and from all the IPs you have allocated." -msgstr "You should be able to ping to and from all the IPs you have allocated." +msgstr "Ви повинні мати можливість перевіряти зв’язок із усіма IP-адресами, які ви виділили." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:81 msgid "You should now be able to ping something by IPv6 DNS name:" -msgstr "You should now be able to ping something by IPv6 DNS name:" +msgstr "Тепер ви повинні мати можливість запитувати щось за DNS-іменем IPv6:" #: ../../configexamples/ha.rst:511 msgid "You should now be able to see the advertised network on the other host." -msgstr "You should now be able to see the advertised network on the other host." +msgstr "Тепер ви зможете побачити рекламовану мережу на іншому хості." #: ../../configexamples/zone-policy.rst:388 msgid "You would have 5 zones instead of just 4 and you would configure your v6 ruleset between your tunnel interface and your LAN/DMZ zones instead of to the WAN." -msgstr "You would have 5 zones instead of just 4 and you would configure your v6 ruleset between your tunnel interface and your LAN/DMZ zones instead of to the WAN." +msgstr "У вас буде 5 зон замість 4, і ви налаштуєте свій набір правил v6 між інтерфейсом тунелю та зонами LAN/DMZ замість WAN." #: ../../configexamples/zone-policy.rst:413 msgid "You would have to add a couple of rules on your wan-local ruleset to allow protocol 41 in." -msgstr "You would have to add a couple of rules on your wan-local ruleset to allow protocol 41 in." +msgstr "Вам потрібно буде додати пару правил у свій набір правил wan-local, щоб дозволити протокол 41 in." #: ../../configexamples/zone-policy.rst:6 msgid "Zone-Policy example" -msgstr "Zone-Policy example" +msgstr "Приклад Zone-Policy" #: ../../configexamples/zone-policy.rst:89 msgid "Zones Basics" -msgstr "Zones Basics" +msgstr "Основи зон" #: ../../configexamples/zone-policy.rst:136 msgid "Zones and Rulesets both have a default action statement. When using Zone-Policies, the default action is set by the zone-policy statement and is represented by rule 10000." -msgstr "Zones and Rulesets both have a default action statement. When using Zone-Policies, the default action is set by the zone-policy statement and is represented by rule 10000." +msgstr "І зони, і набори правил мають оператор дії за замовчуванням. Під час використання Zone-Policies дія за умовчанням встановлюється оператором zone-policy і представлена правилом 10000." #: ../../configexamples/zone-policy.rst:175 msgid "Zones do not allow for a default action of accept; either drop or reject. It is important to remember this because if you apply an interface to a zone and commit, any active connections will be dropped. Specifically, if you are SSH’d into VyOS and add local or the interface you are connecting through to a zone and do not have rulesets in place to allow SSH and established sessions, you will not be able to connect." -msgstr "Zones do not allow for a default action of accept; either drop or reject. It is important to remember this because if you apply an interface to a zone and commit, any active connections will be dropped. Specifically, if you are SSH’d into VyOS and add local or the interface you are connecting through to a zone and do not have rulesets in place to allow SSH and established sessions, you will not be able to connect." +msgstr "Зони не дозволяють дії за замовчуванням прийняти; або відкинути, або відхилити. Важливо пам’ятати про це, оскільки якщо ви застосуєте інтерфейс до зони та зафіксуєте, будь-які активні з’єднання будуть розірвані. Зокрема, якщо ви використовуєте SSH у VyOS і додаєте локальний або інтерфейс, через який ви підключаєтеся, до зони та не маєте наборів правил, які дозволяють SSH і встановлені сеанси, ви не зможете підключитися." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:172 msgid "`2001:470:xxxx:1::/64`: A subnet suitable for a LAN" -msgstr "`2001:470:xxxx:1::/64`: A subnet suitable for a LAN" +msgstr "`2001:470:xxxx:1::/64`: підмережа, придатна для локальної мережі" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:173 msgid "`2001:470:xxxx:2::/64`: Another subnet" -msgstr "`2001:470:xxxx:2::/64`: Another subnet" +msgstr "`2001:470:xxxx:2::/64`: інша підмережа" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:171 msgid "`2001:470:xxxx::/48`: The whole subnet. xxxx should come from Tunnelbroker." -msgstr "`2001:470:xxxx::/48`: The whole subnet. xxxx should come from Tunnelbroker." +msgstr "`2001:470:xxxx::/48`: уся підмережа. xxxx має надходити від Tunnelbroker." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:174 msgid "`2001:470:xxxx:ffff:/64`: The last usable /64 subnet." -msgstr "`2001:470:xxxx:ffff:/64`: The last usable /64 subnet." +msgstr "`2001:470:xxxx:ffff:/64`: остання доступна підмережа /64." #: ../../configexamples/pppoe-ipv6-basic.rst:39 msgid "``service-name`` can be an arbitrary string." -msgstr "``service-name`` can be an arbitrary string." +msgstr "``service-name`` може бути довільним рядком." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:75 msgid "after all these steps the config look like this:" -msgstr "after all these steps the config look like this:" +msgstr "після всіх цих кроків конфігурація виглядає так:" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:62 msgid "after this create a signed server and a client certificate" -msgstr "after this create a signed server and a client certificate" +msgstr "після цього створіть підписаний сервер і сертифікат клієнта" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:69 msgid "and last the DH Key" -msgstr "and last the DH Key" +msgstr "і останній ключ DH" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:119 msgid "blue uses local routing table id and VNI 2000" -msgstr "blue uses local routing table id and VNI 2000" +msgstr "синій використовує ідентифікатор локальної таблиці маршрутизації та VNI 2000" #: ../../configexamples/azure-vpn-bgp.rst:48 #: ../../configexamples/azure-vpn-dual-bgp.rst:47 @@ -2743,7 +2803,7 @@ msgstr "ch00s3-4-s3cur3-psk" #: ../../configexamples/ha.rst:92 msgid "compute1 - Port 9 of each switch" -msgstr "compute1 - Port 9 of each switch" +msgstr "compute1 – порт 9 кожного комутатора" #: ../../configexamples/ha.rst:78 msgid "compute1 (VMware ESXi 6.5)" @@ -2751,7 +2811,7 @@ msgstr "compute1 (VMware ESXi 6.5)" #: ../../configexamples/ha.rst:93 msgid "compute2 - Port 10 of each switch" -msgstr "compute2 - Port 10 of each switch" +msgstr "compute2 – порт 10 кожного комутатора" #: ../../configexamples/ha.rst:79 msgid "compute2 (VMware ESXi 6.5)" @@ -2759,7 +2819,7 @@ msgstr "compute2 (VMware ESXi 6.5)" #: ../../configexamples/ha.rst:94 msgid "compute3 - Port 11 of each switch" -msgstr "compute3 - Port 11 of each switch" +msgstr "compute3 – порт 11 кожного комутатора" #: ../../configexamples/ha.rst:80 msgid "compute3 (VMware ESXi 6.5)" @@ -2767,15 +2827,15 @@ msgstr "compute3 (VMware ESXi 6.5)" #: ../../configexamples/index.rst:44 msgid "configure each host in the lab" -msgstr "configure each host in the lab" +msgstr "налаштувати кожен хост у лабораторії" #: ../../configexamples/index.rst:43 msgid "create the lab on a eve-ng server" -msgstr "create the lab on a eve-ng server" +msgstr "створити лабораторію на сервері eve-ng" #: ../../configexamples/index.rst:45 msgid "do some defined tests" -msgstr "do some defined tests" +msgstr "виконати певні тести" #: ../../configexamples/azure-vpn-bgp.rst:34 #: ../../configexamples/azure-vpn-dual-bgp.rst:31 @@ -2784,63 +2844,63 @@ msgstr "eth0" #: ../../configexamples/wan-load-balancing.rst:30 msgid "eth0 is set to be removed from the load balancer's interface pool after 5 ping failures, eth1 will be removed after 4 ping failures." -msgstr "eth0 is set to be removed from the load balancer's interface pool after 5 ping failures, eth1 will be removed after 4 ping failures." +msgstr "eth0 налаштовано на видалення з пулу інтерфейсу балансувальника навантаження після 5 помилок ping, eth1 буде видалено після 4 помилок ping." #: ../../configexamples/l3vpn-hub-and-spoke.rst:941 msgid "extended community and remote label of specific destination" -msgstr "extended community and remote label of specific destination" +msgstr "розширена спільнота та віддалена мітка конкретного призначення" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:56 msgid "first the PCA" -msgstr "first the PCA" +msgstr "спочатку PCA" #: ../../configexamples/index.rst:47 msgid "generate the documentation and include files" -msgstr "generate the documentation and include files" +msgstr "створити документацію та включити файли" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:121 msgid "green uses local routing table id and VNI 4000" -msgstr "green uses local routing table id and VNI 4000" +msgstr "зелений використовує ідентифікатор локальної таблиці маршрутизації та VNI 4000" #: ../../configexamples/l3vpn-hub-and-spoke.rst:764 msgid "information between PE and CE:" -msgstr "information between PE and CE:" +msgstr "інформація між PE та CE:" #: ../../configexamples/index.rst:46 msgid "optional do an upgrade to a higher version and do step 3 again." -msgstr "optional do an upgrade to a higher version and do step 3 again." +msgstr "за бажанням виконайте оновлення до вищої версії та повторіть крок 3." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:120 msgid "red uses local routing table id and VNI 3000" -msgstr "red uses local routing table id and VNI 3000" +msgstr "червоний використовує ідентифікатор локальної таблиці маршрутизації та VNI 3000" #: ../../configexamples/ha.rst:81 msgid "router2 (Random 1RU machine with 4 NICs)" -msgstr "router2 (Random 1RU machine with 4 NICs)" +msgstr "router2 (випадкова машина 1RU з 4 мережевими картами)" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:102 msgid "save the output to a file and import it in nearly all openvpn clients." -msgstr "save the output to a file and import it in nearly all openvpn clients." +msgstr "зберегти вихідні дані у файл та імпортувати їх у майже всі клієнти openvpn." #: ../../configexamples/index.rst:48 msgid "shutdown and destroy the lab, if there is no error" -msgstr "shutdown and destroy the lab, if there is no error" +msgstr "вимкнути та знищити лабораторію, якщо помилки немає" #: ../../configexamples/l3vpn-hub-and-spoke.rst:806 msgid "specific VPNv4 destination including extended community and remotelabel information. This procedure is the same on all Spoke nodes:" -msgstr "specific VPNv4 destination including extended community and remotelabel information. This procedure is the same on all Spoke nodes:" +msgstr "конкретне призначення VPNv4, включаючи розширену інформацію про спільноту та віддалену мітку. Ця процедура однакова для всіх вузлів Spoke:" #: ../../configexamples/ha.rst:76 msgid "switch1 (Nexus 10gb Switch)" -msgstr "switch1 (Nexus 10gb Switch)" +msgstr "switch1 (коммутатор Nexus 10 Гб)" #: ../../configexamples/ha.rst:77 msgid "switch2 (Nexus 10gb Switch)" -msgstr "switch2 (Nexus 10gb Switch)" +msgstr "switch2 (коммутатор Nexus 10 Гб)" #: ../../configexamples/zone-policy.rst:394 msgid "v6 pairs would be:" -msgstr "v6 pairs would be:" +msgstr "v6 пари будуть:" #: ../../configexamples/ansible.rst:34 msgid "vyos10 - 192.0.2.108" @@ -2860,72 +2920,72 @@ msgstr "vyos9 - 192.0.2.107" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:571 msgid "we are using \"source-address\" option cause we are not redistributing connected interfaces into BGP on the Core router hence there is no comeback route and ping will fail." -msgstr "we are using \"source-address\" option cause we are not redistributing connected interfaces into BGP on the Core router hence there is no comeback route and ping will fail." +msgstr "ми використовуємо опцію «адреса джерела», оскільки ми не перерозподіляємо підключені інтерфейси в BGP на основному маршрутизаторі, отже, немає маршруту повернення, і пінг не вдасться." #: ../../configexamples/l3vpn-hub-and-spoke.rst:736 msgid "within VRFs:" -msgstr "within VRFs:" +msgstr "в межах VRF:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:639 msgid "“show bgp ipv4 vpn summary” for checking BGP VPNv4 neighbors:" -msgstr "“show bgp ipv4 vpn summary” for checking BGP VPNv4 neighbors:" +msgstr "«показати підсумок bgp ipv4 vpn» для перевірки сусідів BGP VPNv4:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:834 msgid "“show bgp ipv4 vpn summary” for checking iBGP neighbors again" -msgstr "“show bgp ipv4 vpn summary” for checking iBGP neighbors again" +msgstr "«показати підсумок bgp ipv4 vpn» для повторної перевірки сусідів iBGP" #: ../../configexamples/l3vpn-hub-and-spoke.rst:719 msgid "“show bgp ipv4 vpn summary” for checking iBGP neighbors against route-reflector devices:" -msgstr "“show bgp ipv4 vpn summary” for checking iBGP neighbors against route-reflector devices:" +msgstr "«показати підсумок bgp ipv4 vpn» для перевірки сусідів iBGP на пристроях відбивача маршрутів:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:941 msgid "“show bgp ipv4 vpn x.x.x.x/32” for checking best-path," -msgstr "“show bgp ipv4 vpn x.x.x.x/32” for checking best-path," +msgstr "«показати bgp ipv4 vpn xxxx/32» для перевірки найкращого шляху," #: ../../configexamples/l3vpn-hub-and-spoke.rst:807 msgid "“show bgp ipv4 vpn x.x.x.x/32” for checking the best-path to the" -msgstr "“show bgp ipv4 vpn x.x.x.x/32” for checking the best-path to the" +msgstr "«показати bgp ipv4 vpn xxxx/32» для перевірки найкращого шляху до" #: ../../configexamples/l3vpn-hub-and-spoke.rst:698 msgid "“show bgp ipv4 vpn x.x.x.x/x” for checking best path selected for specific VPNv4 destination" -msgstr "“show bgp ipv4 vpn x.x.x.x/x” for checking best path selected for specific VPNv4 destination" +msgstr "«показати bgp ipv4 vpn xxxx/x» для перевірки найкращого шляху, вибраного для певного призначення VPNv4" #: ../../configexamples/l3vpn-hub-and-spoke.rst:658 msgid "“show bgp ipv4 vpn” for checking all VPNv4 prefixes information:" -msgstr "“show bgp ipv4 vpn” for checking all VPNv4 prefixes information:" +msgstr "«показати bgp ipv4 vpn» для перевірки всіх префіксів VPNv4:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:891 msgid "“show bgp vrf BLUE_HUB summary” for checking EBGP neighbor" -msgstr "“show bgp vrf BLUE_HUB summary” for checking EBGP neighbor" +msgstr "«показати підсумок bgp vrf BLUE_HUB» для перевірки сусіда EBGP" #: ../../configexamples/l3vpn-hub-and-spoke.rst:764 msgid "“show bgp vrf BLUE_SPOKE summary” for checking EBGP neighbor" -msgstr "“show bgp vrf BLUE_SPOKE summary” for checking EBGP neighbor" +msgstr "«показати підсумок bgp vrf BLUE_SPOKE» для перевірки сусіда EBGP" #: ../../configexamples/l3vpn-hub-and-spoke.rst:736 msgid "“show bgp vrf all” for checking all the prefix learning on BGP" -msgstr "“show bgp vrf all” for checking all the prefix learning on BGP" +msgstr "«показати всі bgp vrf» для перевірки всіх префіксів, які навчаються на BGP" #: ../../configexamples/l3vpn-hub-and-spoke.rst:851 msgid "“show bgp vrf all” for checking all the prefixes learning on BGP" -msgstr "“show bgp vrf all” for checking all the prefixes learning on BGP" +msgstr "«показати всі bgp vrf» для перевірки всіх префіксів, які навчаються на BGP" #: ../../configexamples/l3vpn-hub-and-spoke.rst:554 msgid "“show ip ospf neighbor” for checking ospf relationship" -msgstr "“show ip ospf neighbor” for checking ospf relationship" +msgstr "«показати сусіда ip ospf» для перевірки зв’язку ospf" #: ../../configexamples/l3vpn-hub-and-spoke.rst:909 msgid "“show ip route vrf BLUE_HUB” to view the RIB in our Hub PE." -msgstr "“show ip route vrf BLUE_HUB” to view the RIB in our Hub PE." +msgstr "«show ip route vrf BLUE_HUB», щоб переглянути RIB у нашому Hub PE." #: ../../configexamples/l3vpn-hub-and-spoke.rst:784 msgid "“show ip route vrf BLUE_SPOKE” for viewing the RIB in our Spoke PE." -msgstr "“show ip route vrf BLUE_SPOKE” for viewing the RIB in our Spoke PE." +msgstr "«show ip route vrf BLUE_SPOKE» для перегляду RIB у нашому Spoke PE." #: ../../configexamples/l3vpn-hub-and-spoke.rst:579 msgid "“show mpls ldp binding” for checking mpls label assignment" -msgstr "“show mpls ldp binding” for checking mpls label assignment" +msgstr "«показати прив’язку mpls ldp» для перевірки призначення міток mpls" #: ../../configexamples/l3vpn-hub-and-spoke.rst:567 msgid "“show mpls ldp neighbor “ for checking ldp neighbors" -msgstr "“show mpls ldp neighbor “ for checking ldp neighbors" +msgstr "«показати сусіда mpls ldp» для перевірки сусідів ldp" diff --git a/docs/_locale/uk/configuration.pot b/docs/_locale/uk/configuration.pot index 0dbc9243..766adc4c 100644 --- a/docs/_locale/uk/configuration.pot +++ b/docs/_locale/uk/configuration.pot @@ -10,35 +10,35 @@ msgstr "" #: ../../configuration/policy/route.rst:74 msgid "!: Match everything except the specified prefix." -msgstr "!: Match everything except the specified prefix." +msgstr "! : відповідність усім, крім зазначеного префікса." #: ../../configuration/policy/route.rst:75 msgid "!-: Match everything except the specified range." -msgstr "!-: Match everything except the specified range." +msgstr "! - : відповідність усім, крім указаного діапазону." #: ../../configuration/policy/route.rst:73 msgid "!: Match everything except the specified address." -msgstr "!: Match everything except the specified address." +msgstr "! : відповідність усім, крім зазначеної адреси." #: ../../configuration/policy/route.rst:66 msgid "!: Match everything except the specified subnet." -msgstr "!: Match everything except the specified subnet." +msgstr "! : відповідність усім, крім зазначеної підмережі." #: ../../configuration/policy/route.rst:67 msgid "!-: Match everything except the specified range." -msgstr "!-: Match everything except the specified range." +msgstr "! - : відповідність усім, крім указаного діапазону." #: ../../configuration/policy/route.rst:65 msgid "!: Match everything except the specified address." -msgstr "!: Match everything except the specified address." +msgstr "! : відповідність усім, крім зазначеної адреси." #: ../../configuration/service/router-advert.rst:1 msgid "\"Managed address configuration\" flag" -msgstr "\"Managed address configuration\" flag" +msgstr "Прапорець "Конфігурація керованої адреси"." #: ../../configuration/service/router-advert.rst:1 msgid "\"Other configuration\" flag" -msgstr "\"Other configuration\" flag" +msgstr "Прапор «Інша конфігурація»." #: ../../configuration/firewall/flowtables.rst:5 msgid "###################ä############# Flowtables Firewall Configuration #################################" @@ -46,35 +46,35 @@ msgstr "###################ä############# Flowtables Firewall Configuration ### #: ../../configuration/protocols/babel.rst:146 msgid "**1-254** – interfaces with a channel number interfere with interfering interfaces and interfaces with the same channel number. **interfering** – interfering interfaces are assumed to interfere with all other channels except noninterfering channels. **noninterfering** – noninterfering interfaces are assumed to only interfere with themselves." -msgstr "**1-254** – interfaces with a channel number interfere with interfering interfaces and interfaces with the same channel number. **interfering** – interfering interfaces are assumed to interfere with all other channels except noninterfering channels. **noninterfering** – noninterfering interfaces are assumed to only interfere with themselves." +msgstr "**1-254** – інтерфейси з номером каналу створюють перешкоди інтерфейсам, що створюють перешкоди, і інтерфейсам з таким же номером каналу. **Interfering** – передбачається, що інтерфейси, що створюють перешкоди, створюють перешкоди всім іншим каналам, крім каналів, які не створюють перешкод. **noninterfering** – передбачається, що неперешкоджаючі інтерфейси заважають лише самі собі." #: ../../configuration/system/flow-accounting.rst:102 msgid "**10** - :abbr:`IPFIX (IP Flow Information Export)` as per :rfc:`3917`" -msgstr "**10** - :abbr:`IPFIX (IP Flow Information Export)` as per :rfc:`3917`" +msgstr "**10** - :abbr:`IPFIX (Експорт інформації про потік IP)` згідно з :rfc:`3917`" #: ../../configuration/interfaces/tunnel.rst:235 msgid "**1. Confirm IP connectivity between tunnel source-address and remote:**" -msgstr "**1. Confirm IP connectivity between tunnel source-address and remote:**" +msgstr "**1. Підтвердьте IP-з’єднання між адресою джерела тунелю та дистанційним керуванням:**" #: ../../configuration/interfaces/tunnel.rst:250 msgid "**2. Confirm the link type has been set to GRE:**" -msgstr "**2. Confirm the link type has been set to GRE:**" +msgstr "**2. Переконайтеся, що тип посилання встановлено на GRE:**" #: ../../configuration/interfaces/tunnel.rst:267 msgid "**3. Confirm IP connectivity across the tunnel:**" -msgstr "**3. Confirm IP connectivity across the tunnel:**" +msgstr "**3. Підтвердьте IP-з’єднання через тунель:**" #: ../../configuration/system/flow-accounting.rst:100 msgid "**5** - Most common version, but restricted to IPv4 flows only" -msgstr "**5** - Most common version, but restricted to IPv4 flows only" +msgstr "**5** – найпоширеніша версія, але обмежена лише потоками IPv4" #: ../../configuration/system/flow-accounting.rst:101 msgid "**9** - NetFlow version 9 (default)" -msgstr "**9** - NetFlow version 9 (default)" +msgstr "**9** - NetFlow версії 9 (за замовчуванням)" #: ../../configuration/protocols/bgp.rst:75 msgid "**AS path length check**" -msgstr "**AS path length check**" +msgstr "**Перевірка довжини шляху AS**" #: ../../configuration/service/dhcp-server.rst:175 msgid "**Active-active**: both DHCP servers will respond to DHCP requests. If ``mode`` is not defined, this is the default behavior." @@ -86,16 +86,16 @@ msgstr "**Active-passive**: only ``primary`` server will respond to DHCP request #: ../../configuration/protocols/bgp.rst:106 msgid "**Already-selected external check**" -msgstr "**Already-selected external check**" +msgstr "**Вже вибраний зовнішній чек**" #: ../../configuration/trafficpolicy/index.rst:547 #: ../../configuration/trafficpolicy/index.rst:1181 msgid "**Applies to:** Inbound traffic." -msgstr "**Applies to:** Inbound traffic." +msgstr "**Застосовується до:** Вхідного трафіку." #: ../../configuration/trafficpolicy/index.rst:444 msgid "**Applies to:** Outbound Traffic." -msgstr "**Applies to:** Outbound Traffic." +msgstr "**Застосовується до:** вихідного трафіку." #: ../../configuration/trafficpolicy/index.rst:355 #: ../../configuration/trafficpolicy/index.rst:387 @@ -106,11 +106,11 @@ msgstr "**Applies to:** Outbound Traffic." #: ../../configuration/trafficpolicy/index.rst:961 #: ../../configuration/trafficpolicy/index.rst:1020 msgid "**Applies to:** Outbound traffic." -msgstr "**Applies to:** Outbound traffic." +msgstr "**Застосовується до:** вихідного трафіку." #: ../../configuration/trafficpolicy/index.rst:32 msgid "**Apply the traffic policy to an interface ingress or egress**." -msgstr "**Apply the traffic policy to an interface ingress or egress**." +msgstr "**Застосуйте політику трафіку до входу або виходу інтерфейсу**." #: ../../configuration/firewall/index.rst:22 msgid "**Bridge Port?**: choose appropiate path based on if interface were the packet was received is part of a bridge, or not." @@ -122,19 +122,19 @@ msgstr "**Bridge Port?**: choose appropriate path based on whether interface whe #: ../../configuration/interfaces/tunnel.rst:137 msgid "**Cisco IOS Router:**" -msgstr "**Cisco IOS Router:**" +msgstr "**Маршрутизатор Cisco IOS:**" #: ../../configuration/service/pppoe-server.rst:66 msgid "**Client IP address via IP range definition**" -msgstr "**Client IP address via IP range definition**" +msgstr "**IP-адреса клієнта через визначення діапазону IP-адрес**" #: ../../configuration/service/pppoe-server.rst:89 msgid "**Client IP subnets via CIDR notation**" -msgstr "**Client IP subnets via CIDR notation**" +msgstr "**ІР-підмережі клієнта через нотацію CIDR**" #: ../../configuration/protocols/bgp.rst:120 msgid "**Cluster-List length check**" -msgstr "**Cluster-List length check**" +msgstr "**Перевірка довжини списку кластерів**" #: ../../configuration/firewall/index.rst:35 msgid "**Conntrack Ignore**: rules defined under ``set system conntrack ignore [ipv4 | ipv6] ...``." @@ -142,7 +142,7 @@ msgstr "**Conntrack Ignore**: rules defined under ``set system conntrack ignore #: ../../configuration/trafficpolicy/index.rst:30 msgid "**Create a traffic policy**." -msgstr "**Create a traffic policy**." +msgstr "**Створіть політику дорожнього руху**." #: ../../configuration/interfaces/wwan.rst:53 #: ../../_include/interface-common-with-dhcp.txt:9 @@ -153,7 +153,7 @@ msgstr "**DHCP(v6)**" #: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 msgid "**DHCPv6 Prefix Delegation (PD)**" -msgstr "**DHCPv6 Prefix Delegation (PD)**" +msgstr "**Делегування префікса DHCPv6 (PD)**" #: ../../configuration/firewall/index.rst:41 msgid "**Destination NAT**: rules defined under ``set [nat | nat66] destination...``." @@ -174,7 +174,7 @@ msgstr "**Documentation under development**" #: ../../configuration/trafficpolicy/index.rst:169 msgid "**Ethernet (protocol, destination address or source address)**" -msgstr "**Ethernet (protocol, destination address or source address)**" +msgstr "**Ethernet (протокол, адреса призначення або адреса джерела)**" #: ../../configuration/service/dhcp-server.rst:63 #: ../../configuration/service/dhcp-server.rst:158 @@ -182,15 +182,15 @@ msgstr "**Ethernet (protocol, destination address or source address)**" #: ../../configuration/service/dhcp-server.rst:646 #: ../../configuration/service/dhcp-server.rst:687 msgid "**Example:**" -msgstr "**Example:**" +msgstr "**Приклад:**" #: ../../configuration/protocols/bgp.rst:89 msgid "**External check**" -msgstr "**External check**" +msgstr "**Зовнішня перевірка**" #: ../../configuration/trafficpolicy/index.rst:175 msgid "**Firewall mark**" -msgstr "**Firewall mark**" +msgstr "**Позначка брандмауера**" #: ../../configuration/firewall/flowtables.rst:51 msgid "**Flowtable Reference:** https://docs.kernel.org/networking/nf_flowtable.html" @@ -218,19 +218,19 @@ msgstr "**Hardware offload:** should be supported by the NICs used." #: ../../configuration/protocols/bgp.rst:94 msgid "**IGP cost check**" -msgstr "**IGP cost check**" +msgstr "**Перевірка вартості IGP**" #: ../../configuration/trafficpolicy/index.rst:171 msgid "**IPv4 (DSCP value, maximum packet length, protocol, source address,** **destination address, source port, destination port or TCP flags)**" -msgstr "**IPv4 (DSCP value, maximum packet length, protocol, source address,** **destination address, source port, destination port or TCP flags)**" +msgstr "**IPv4 (значення DSCP, максимальна довжина пакета, протокол, адреса джерела,** **адреса призначення, порт джерела, порт призначення або позначки TCP)**" #: ../../configuration/trafficpolicy/index.rst:173 msgid "**IPv6 (DSCP value, maximum payload length, protocol, source address,** **destination address, source port, destination port or TCP flags)**" -msgstr "**IPv6 (DSCP value, maximum payload length, protocol, source address,** **destination address, source port, destination port or TCP flags)**" +msgstr "**IPv6 (значення DSCP, максимальна довжина корисного навантаження, протокол, адреса джерела,** **адреса призначення, порт джерела, порт призначення або позначки TCP)**" #: ../../configuration/trafficpolicy/index.rst:345 msgid "**If you are looking for a policy for your outbound traffic** but you don't know which one you need and you don't want to go through every possible policy shown here, **our bet is that highly likely you are looking for a** Shaper_ **policy and you want to** :ref:`set its queues ` **as FQ-CoDel**." -msgstr "**If you are looking for a policy for your outbound traffic** but you don't know which one you need and you don't want to go through every possible policy shown here, **our bet is that highly likely you are looking for a** Shaper_ **policy and you want to** :ref:`set its queues ` **as FQ-CoDel**." +msgstr "**Якщо ви шукаєте політику для свого вихідного трафіку**, але ви не знаєте, яка вам потрібна, і не хочете переглядати всі можливі політики, показані тут, **ми впевнені, що ви, швидше за все, є шукаєте** політику Shaper_ **і хочете** :ref:`встановити її черги ` **як FQ-CoDel**." #: ../../configuration/firewall/general-legacy.rst:9 msgid "**Important note:** This documentation is valid only for VyOS Sagitta prior to 1.4-rolling-202308040557" @@ -265,7 +265,7 @@ msgstr "**Important note on usage of terms:** The firewall makes use of the term #: ../../configuration/firewall/general-legacy.rst:24 msgid "**Important note on usage of terms:** The firewall makes use of the terms `in`, `out`, and `local` for firewall policy. Users experienced with netfilter often confuse `in` to be a reference to the `INPUT` chain, and `out` the `OUTPUT` chain from netfilter. This is not the case. These instead indicate the use of the `FORWARD` chain and either the input or output interface. The `INPUT` chain, which is used for local traffic to the OS, is a reference to as `local` with respect to its input interface." -msgstr "**Important note on usage of terms:** The firewall makes use of the terms `in`, `out`, and `local` for firewall policy. Users experienced with netfilter often confuse `in` to be a reference to the `INPUT` chain, and `out` the `OUTPUT` chain from netfilter. This is not the case. These instead indicate the use of the `FORWARD` chain and either the input or output interface. The `INPUT` chain, which is used for local traffic to the OS, is a reference to as `local` with respect to its input interface." +msgstr "**Важлива примітка щодо використання термінів:** брандмауер використовує терміни `in`, `out` і `local` для політики брандмауера. Користувачі, які мають досвід роботи з netfilter, часто плутають `in` як посилання на ланцюжок `INPUT`, а `out` — ланцюжок `OUTPUT` від netfilter. Це не той випадок. Натомість вони вказують на використання ланцюжка `FORWARD` та інтерфейсу введення або виведення. Ланцюжок `INPUT`, який використовується для локального трафіку до ОС, є посиланням на `локальний` щодо його вхідного інтерфейсу." #: ../../configuration/firewall/index.rst:48 msgid "**Input**: stage where traffic destinated to the router itself can be filtered and controlled. This is where all rules for securing the router should take place. This includes ipv4 and ipv6 filtering rules, defined in:" @@ -277,7 +277,7 @@ msgstr "**Input**: stage where traffic destined for the router itself can be fil #: ../../configuration/trafficpolicy/index.rst:170 msgid "**Interface name**" -msgstr "**Interface name**" +msgstr "**Назва інтерфейсу**" #: ../../configuration/vpn/site2site_ipsec.rst:306 msgid "**LEFT**" @@ -293,11 +293,11 @@ msgstr "**Layer 3 bridge**: When an IP address is assigned to the bridge interfa #: ../../configuration/interfaces/vxlan.rst:235 msgid "**Leaf2 configuration:**" -msgstr "**Leaf2 configuration:**" +msgstr "**Конфігурація Leaf2:**" #: ../../configuration/interfaces/vxlan.rst:260 msgid "**Leaf3 configuration:**" -msgstr "**Leaf3 configuration:**" +msgstr "**Конфігурація Leaf3:**" #: ../../configuration/interfaces/tunnel.rst:159 msgid "**Linux systemd-networkd:**" @@ -305,27 +305,27 @@ msgstr "**Linux systemd-networkd:**" #: ../../configuration/protocols/bgp.rst:67 msgid "**Local preference check**" -msgstr "**Local preference check**" +msgstr "**Перевірка місцевих переваг**" #: ../../configuration/protocols/bgp.rst:71 msgid "**Local route check**" -msgstr "**Local route check**" +msgstr "**Перевірка місцевого маршруту**" #: ../../configuration/protocols/bgp.rst:84 msgid "**MED check**" -msgstr "**MED check**" +msgstr "**З чеком**" #: ../../configuration/protocols/bgp.rst:98 msgid "**Multi-path check**" -msgstr "**Multi-path check**" +msgstr "**Багатохідна перевірка**" #: ../../configuration/protocols/bgp.rst:1215 msgid "**Node1:**" -msgstr "**Node1:**" +msgstr "**Вузол1:**" #: ../../configuration/protocols/bgp.rst:1243 msgid "**Node2:**" -msgstr "**Node2:**" +msgstr "**Вузол 2:**" #: ../../configuration/protocols/ospf.rst:840 #: ../../configuration/protocols/ospf.rst:913 @@ -333,7 +333,7 @@ msgstr "**Node2:**" #: ../../configuration/protocols/ospf.rst:1350 #: ../../configuration/protocols/segment-routing.rst:281 msgid "**Node 1**" -msgstr "**Node 1**" +msgstr "**Вузол 1**" #: ../../configuration/protocols/babel.rst:192 #: ../../configuration/protocols/bgp.rst:1125 @@ -349,7 +349,7 @@ msgstr "**Node 1**" #: ../../configuration/protocols/rip.rst:243 #: ../../configuration/protocols/segment-routing.rst:195 msgid "**Node 1:**" -msgstr "**Node 1:**" +msgstr "**Вузол 1:**" #: ../../configuration/protocols/ospf.rst:850 #: ../../configuration/protocols/ospf.rst:930 @@ -357,7 +357,7 @@ msgstr "**Node 1:**" #: ../../configuration/protocols/ospf.rst:1365 #: ../../configuration/protocols/segment-routing.rst:296 msgid "**Node 2**" -msgstr "**Node 2**" +msgstr "**Вузол 2**" #: ../../configuration/protocols/babel.rst:202 #: ../../configuration/protocols/bgp.rst:1136 @@ -371,23 +371,23 @@ msgstr "**Node 2**" #: ../../configuration/protocols/rip.rst:251 #: ../../configuration/protocols/segment-routing.rst:211 msgid "**Node 2:**" -msgstr "**Node 2:**" +msgstr "**Вузол 2:**" #: ../../configuration/policy/examples.rst:136 msgid "**OPTIONAL:** Exclude Inter-VLAN traffic (between VLAN10 and VLAN11) from PBR" -msgstr "**OPTIONAL:** Exclude Inter-VLAN traffic (between VLAN10 and VLAN11) from PBR" +msgstr "**НЕОБОВ’ЯЗКОВО:** Виключити трафік між VLAN (між VLAN10 і VLAN11) із PBR" #: ../../configuration/protocols/ospf.rst:731 msgid "**OSPF network routing table** – includes a list of acquired routes for all accessible networks (or aggregated area ranges) of OSPF system. \"IA\" flag means that route destination is in the area to which the router is not connected, i.e. it’s an inter-area path. In square brackets a summary metric for all links through which a path lies to this network is specified. \"via\" prefix defines a router-gateway, i.e. the first router on the way to the destination (next hop). **OSPF router routing table** – includes a list of acquired routes to all accessible ABRs and ASBRs. **OSPF external routing table** – includes a list of acquired routes that are external to the OSPF process. \"E\" flag points to the external link metric type (E1 – metric type 1, E2 – metric type 2). External link metric is printed in the \"/\" format." -msgstr "**OSPF network routing table** – includes a list of acquired routes for all accessible networks (or aggregated area ranges) of OSPF system. \"IA\" flag means that route destination is in the area to which the router is not connected, i.e. it’s an inter-area path. In square brackets a summary metric for all links through which a path lies to this network is specified. \"via\" prefix defines a router-gateway, i.e. the first router on the way to the destination (next hop). **OSPF router routing table** – includes a list of acquired routes to all accessible ABRs and ASBRs. **OSPF external routing table** – includes a list of acquired routes that are external to the OSPF process. \"E\" flag points to the external link metric type (E1 – metric type 1, E2 – metric type 2). External link metric is printed in the \"/\" format." +msgstr "**Таблиця мережевої маршрутизації OSPF** – містить список отриманих маршрутів для всіх доступних мереж (або агрегованих діапазонів зон) системи OSPF. Прапор «IA» означає, що пункт призначення маршруту знаходиться в зоні, до якої маршрутизатор не підключений, тобто це міжзональний шлях. У квадратних дужках вказується підсумкова метрика для всіх посилань, через які пролягає шлях до цієї мережі. Префікс "via" визначає маршрутизатор-шлюз, тобто перший маршрутизатор на шляху до пункту призначення (наступного переходу). **Таблиця маршрутизації маршрутизатора OSPF** – містить список отриманих маршрутів до всіх доступних ABR і ASBR. **Зовнішня таблиця маршрутизації OSPF** – містить список отриманих маршрутів, зовнішніх щодо процесу OSPF. Прапорець "E" вказує на тип метрики зовнішнього посилання (E1 – тип метрики 1, E2 – тип метрики 2). Метрика зовнішнього посилання надрукована в " / "формат." #: ../../configuration/protocols/failover.rst:65 msgid "**One gateway:**" -msgstr "**One gateway:**" +msgstr "**Один шлюз:**" #: ../../configuration/protocols/bgp.rst:79 msgid "**Origin check**" -msgstr "**Origin check**" +msgstr "**Перевірка походження**" #: ../../configuration/firewall/index.rst:64 msgid "**Output**: stage where traffic that is originated by the router itself can be filtered and controlled. Bare in mind that this traffic can be a new connection originted by a internal process running on VyOS router, such as NTP, or can be a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" @@ -403,7 +403,7 @@ msgstr "**Output**: stage where traffic that originates from the router itself c #: ../../configuration/protocols/bgp.rst:125 msgid "**Peer address**" -msgstr "**Peer address**" +msgstr "**Адреса аналога**" #: ../../configuration/firewall/index.rst:38 msgid "**Policy Route**: rules defined under ``set policy [route | route6] ...``." @@ -411,7 +411,7 @@ msgstr "**Policy Route**: rules defined under ``set policy [route | route6] ...` #: ../../configuration/policy/examples.rst:5 msgid "**Policy definition:**" -msgstr "**Policy definition:**" +msgstr "**Визначення політики:**" #: ../../configuration/firewall/index.rst:76 msgid "**Postrouting**: as in **Prerouting**, several actions defined in different parts of VyOS configuration are performed in this stage. This includes:" @@ -427,47 +427,47 @@ msgstr "**Prerouting**: several actions can be done in this stage, and currently #: ../../configuration/service/dhcp-server.rst:448 msgid "**Primary**" -msgstr "**Primary**" +msgstr "**Первинний**" #: ../../configuration/trafficpolicy/index.rst:443 msgid "**Queueing discipline** Fair/Flow Queue CoDel." -msgstr "**Queueing discipline** Fair/Flow Queue CoDel." +msgstr "**Дисципліна черги** Fair/Flow Queue CoDel." #: ../../configuration/trafficpolicy/index.rst:960 msgid "**Queueing discipline:** Deficit Round Robin." -msgstr "**Queueing discipline:** Deficit Round Robin." +msgstr "**Дисципліна стояння в черзі:** Дефіцитна кругова система." #: ../../configuration/trafficpolicy/index.rst:766 msgid "**Queueing discipline:** Generalized Random Early Drop." -msgstr "**Queueing discipline:** Generalized Random Early Drop." +msgstr "**Дисципліна черги: ** Узагальнене випадкове раннє скидання." #: ../../configuration/trafficpolicy/index.rst:1019 msgid "**Queueing discipline:** Hierarchical Token Bucket." -msgstr "**Queueing discipline:** Hierarchical Token Bucket." +msgstr "**Дисципліна черги: ** Ієрархічне відро маркерів." #: ../../configuration/trafficpolicy/index.rst:546 msgid "**Queueing discipline:** Ingress policer." -msgstr "**Queueing discipline:** Ingress policer." +msgstr "**Дисципліна стояння в черзі: ** Офіцер." #: ../../configuration/trafficpolicy/index.rst:354 msgid "**Queueing discipline:** PFIFO (Packet First In First Out)." -msgstr "**Queueing discipline:** PFIFO (Packet First In First Out)." +msgstr "**Дисципліна постановки в чергу:** PFIFO (пакет першим прийшов, першим вийшов)." #: ../../configuration/trafficpolicy/index.rst:690 msgid "**Queueing discipline:** PRIO." -msgstr "**Queueing discipline:** PRIO." +msgstr "**Дисципліна черги:** PRIO." #: ../../configuration/trafficpolicy/index.rst:386 msgid "**Queueing discipline:** SFQ (Stochastic Fairness Queuing)." -msgstr "**Queueing discipline:** SFQ (Stochastic Fairness Queuing)." +msgstr "**Дисципліна черги: ** SFQ (Stochastic Fairness Queuing)." #: ../../configuration/trafficpolicy/index.rst:915 msgid "**Queueing discipline:** Tocken Bucket Filter." -msgstr "**Queueing discipline:** Tocken Bucket Filter." +msgstr "**Дисципліна постановки в чергу: ** Фільтр відра Tocken." #: ../../configuration/trafficpolicy/index.rst:621 msgid "**Queueing discipline:** netem (Network Emulator) + TBF (Token Bucket Filter)." -msgstr "**Queueing discipline:** netem (Network Emulator) + TBF (Token Bucket Filter)." +msgstr "**Дисципліна черги:** netem (емулятор мережі) + TBF (фільтр маркерів)." #: ../../configuration/interfaces/bonding.rst:407 #: ../../configuration/interfaces/macsec.rst:159 @@ -489,11 +489,11 @@ msgstr "**R2 Static Key**" #: ../../configuration/service/pppoe-server.rst:91 msgid "**RADIUS based IP pools (Framed-IP-Address)**" -msgstr "**RADIUS based IP pools (Framed-IP-Address)**" +msgstr "**IP-пули на основі RADIUS (IP-адреса в рамці)**" #: ../../configuration/service/pppoe-server.rst:115 msgid "**RADIUS sessions management DM/CoA**" -msgstr "**RADIUS sessions management DM/CoA**" +msgstr "**Управління сеансами RADIUS DM/CoA**" #: ../../configuration/vpn/site2site_ipsec.rst:346 msgid "**RIGHT**" @@ -505,27 +505,27 @@ msgstr "**RIGHT:** * WAN interface on `eth0.202` * `eth0.201` interface IP: `172 #: ../../configuration/protocols/bgp.rst:113 msgid "**Router-ID check**" -msgstr "**Router-ID check**" +msgstr "**Перевірка ідентифікатора маршрутизатора**" #: ../../configuration/protocols/pim.rst:228 msgid "**Router 1**" -msgstr "**Router 1**" +msgstr "**Маршрутизатор 1**" #: ../../configuration/protocols/pim.rst:256 msgid "**Router 2**" -msgstr "**Router 2**" +msgstr "**Маршрутизатор 2**" #: ../../configuration/protocols/pim.rst:241 msgid "**Router 3**" -msgstr "**Router 3**" +msgstr "**Маршрутизатор 3**" #: ../../configuration/policy/examples.rst:36 msgid "**Routes learned after routing policy applied:**" -msgstr "**Routes learned after routing policy applied:**" +msgstr "**Маршрути, отримані після застосування політики маршрутизації:**" #: ../../configuration/policy/examples.rst:21 msgid "**Routes learned before routing policy applied:**" -msgstr "**Routes learned before routing policy applied:**" +msgstr "**Маршрути, отримані до застосування політики маршрутизації:**" #: ../../configuration/interfaces/bonding.rst:443 msgid "**SW1**" @@ -537,15 +537,15 @@ msgstr "**SW2**" #: ../../configuration/service/dhcp-server.rst:458 msgid "**Secondary**" -msgstr "**Secondary**" +msgstr "**Вторинний**" #: ../../configuration/vpn/ipsec.rst:265 msgid "**Setting up IPSec**" -msgstr "**Setting up IPSec**" +msgstr "**Налаштування IPSec**" #: ../../configuration/vpn/ipsec.rst:241 msgid "**Setting up the GRE tunnel**" -msgstr "**Setting up the GRE tunnel**" +msgstr "**Налаштування тунелю GRE**" #: ../../configuration/firewall/index.rst:80 msgid "**Source NAT**: rules defined under ``set [nat | nat66] destination...``." @@ -553,19 +553,19 @@ msgstr "**Source NAT**: rules defined under ``set [nat | nat66] destination...`` #: ../../configuration/interfaces/vxlan.rst:212 msgid "**Spine1 Configuration:**" -msgstr "**Spine1 Configuration:**" +msgstr "**Конфігурація Spine1:**" #: ../../configuration/protocols/ospf.rst:1380 msgid "**Status**" -msgstr "**Status**" +msgstr "**Статус**" #: ../../configuration/protocols/ospf.rst:1338 msgid "**To see the redistributed routes:**" -msgstr "**To see the redistributed routes:**" +msgstr "**Щоб переглянути перерозподілені маршрути:**" #: ../../configuration/protocols/failover.rst:85 msgid "**Two gateways and different metrics:**" -msgstr "**Two gateways and different metrics:**" +msgstr "**Два шлюзи та різні показники:**" #: ../../configuration/trafficpolicy/index.rst:176 msgid "**VLAN ID**" @@ -574,20 +574,20 @@ msgstr "**VLAN ID**" #: ../../configuration/interfaces/tunnel.rst:128 #: ../../configuration/interfaces/tunnel.rst:149 msgid "**VyOS Router:**" -msgstr "**VyOS Router:**" +msgstr "**Маршрутизатор VyOS:**" #: ../../configuration/protocols/bgp.rst:63 msgid "**Weight check**" -msgstr "**Weight check**" +msgstr "**Перевірка ваги**" #: ../../_include/interface-dhcp-options.txt:74 msgid "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" -msgstr "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" +msgstr "**адресу** можна вказати кілька разів, наприклад 192.168.100.1 та/або 192.168.100.0/24" #: ../../_include/interface-address-with-dhcp.txt:7 #: ../../_include/interface-address.txt:6 msgid "**address** can be specified multiple times as IPv4 and/or IPv6 address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64" -msgstr "**address** can be specified multiple times as IPv4 and/or IPv6 address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64" +msgstr "**address** можна вказати декілька разів як адресу IPv4 та/або IPv6, наприклад 192.0.2.1/24 та/або 2001:db8::1/64" #: ../../configuration/service/pppoe-server.rst:474 #: ../../configuration/vpn/l2tp.rst:428 @@ -605,23 +605,23 @@ msgstr "**allow** - Negotiate IPv6 only if client requests" #: ../../configuration/container/index.rst:38 msgid "**allow-host-networks** cannot be used with **network**" -msgstr "**allow-host-networks** cannot be used with **network**" +msgstr "**allow-host-networks** не можна використовувати з **network**" #: ../../configuration/container/index.rst:107 msgid "**always**: Restart containers when they exit, regardless of status, retrying indefinitely" -msgstr "**always**: Restart containers when they exit, regardless of status, retrying indefinitely" +msgstr "**завжди**: перезапускати контейнери, коли вони виходять, незалежно від статусу, повторюючи спроби на невизначений час" #: ../../configuration/service/dhcp-relay.rst:71 msgid "**append:** The relay agent is allowed to append its own relay information to a received DHCP packet, disregarding relay information already present in the packet." -msgstr "**append:** The relay agent is allowed to append its own relay information to a received DHCP packet, disregarding relay information already present in the packet." +msgstr "**додавання:** Агенту ретрансляції дозволено додавати власну інформацію ретрансляції до отриманого пакету DHCP, не враховуючи інформацію ретрансляції, яка вже є в пакеті." #: ../../configuration/system/flow-accounting.rst:32 msgid "**application**: analyzes received flow data in the context of intrusion detection or traffic profiling, for example" -msgstr "**application**: analyzes received flow data in the context of intrusion detection or traffic profiling, for example" +msgstr "**додаток**: аналізує отримані дані потоку, наприклад, у контексті виявлення вторгнень або профілювання трафіку" #: ../../configuration/protocols/babel.rst:69 msgid "**auto** – automatically determines the interface type. **wired** – enables optimisations for wired interfaces. **wireless** – disables a number of optimisations that are only correct on wired interfaces. Specifying wireless is always correct, but may cause slower convergence and extra routing traffic." -msgstr "**auto** – automatically determines the interface type. **wired** – enables optimisations for wired interfaces. **wireless** – disables a number of optimisations that are only correct on wired interfaces. Specifying wireless is always correct, but may cause slower convergence and extra routing traffic." +msgstr "**auto** – автоматично визначає тип інтерфейсу. **wired** – дозволяє оптимізувати дротові інтерфейси. **wireless** – вимикає низку оптимізацій, які є правильними лише для дротових інтерфейсів. Зазначення бездротового зв’язку завжди є правильним, але це може спричинити повільнішу конвергенцію та додатковий трафік маршрутизації." #: ../../configuration/service/ids.rst:90 msgid "**ban-time** and **threshold**: these values are kept very low in order to easily identify and generate and attack." @@ -629,11 +629,11 @@ msgstr "**ban-time** and **threshold**: these values are kept very low in order #: ../../configuration/protocols/ospf.rst:435 msgid "**broadcast** – broadcast IP addresses distribution. **non-broadcast** – address distribution in NBMA networks topology. **point-to-multipoint** – address distribution in point-to-multipoint networks. **point-to-point** – address distribution in point-to-point networks." -msgstr "**broadcast** – broadcast IP addresses distribution. **non-broadcast** – address distribution in NBMA networks topology. **point-to-multipoint** – address distribution in point-to-multipoint networks. **point-to-point** – address distribution in point-to-point networks." +msgstr "**broadcast** – широкомовний розподіл IP-адрес. **non-broadcast** – розподіл адрес у топології мереж NBMA. **точка-багато точок** – розподіл адрес у мережах «точка-багато точок». **точка-точка** – розподіл адрес у мережах «точка-точка»." #: ../../configuration/protocols/ospf.rst:1175 msgid "**broadcast** – broadcast IP addresses distribution. **point-to-point** – address distribution in point-to-point networks." -msgstr "**broadcast** – broadcast IP addresses distribution. **point-to-point** – address distribution in point-to-point networks." +msgstr "**broadcast** – широкомовний розподіл IP-адрес. **точка-точка** – розподіл адрес у мережах «точка-точка»." #: ../../configuration/service/pppoe-server.rst:401 #: ../../configuration/vpn/l2tp.rst:345 @@ -644,19 +644,19 @@ msgstr "**calling-sid** - Calculate interface identifier from calling-station-id #: ../../configuration/protocols/ospf.rst:121 msgid "**cisco** – a router will be considered as ABR if it has several configured links to the networks in different areas one of which is a backbone area. Moreover, the link to the backbone area should be active (working). **ibm** – identical to \"cisco\" model but in this case a backbone area link may not be active. **standard** – router has several active links to different areas. **shortcut** – identical to \"standard\" but in this model a router is allowed to use a connected areas topology without involving a backbone area for inter-area connections." -msgstr "**cisco** – a router will be considered as ABR if it has several configured links to the networks in different areas one of which is a backbone area. Moreover, the link to the backbone area should be active (working). **ibm** – identical to \"cisco\" model but in this case a backbone area link may not be active. **standard** – router has several active links to different areas. **shortcut** – identical to \"standard\" but in this model a router is allowed to use a connected areas topology without involving a backbone area for inter-area connections." +msgstr "**cisco** – маршрутизатор буде вважатися ABR, якщо він має кілька налаштованих з’єднань з мережами в різних областях, одна з яких є магістральною. Крім того, зв'язок з магістральною зоною має бути активним (працюючим). **ibm** – ідентична моделі "cisco", але в цьому випадку магістральний канал може бути неактивним. **стандартний** – маршрутизатор має кілька активних посилань на різні області. **ярлик** – ідентичний «стандартному», але в цій моделі маршрутизатору дозволено використовувати топологію підключених областей без залучення магістральної області для міжзональних з’єднань." #: ../../configuration/system/flow-accounting.rst:30 msgid "**collector**: responsible for reception, storage and pre-processing of flow data received from a flow exporter" -msgstr "**collector**: responsible for reception, storage and pre-processing of flow data received from a flow exporter" +msgstr "**збирач**: відповідає за прийом, зберігання та попередню обробку даних потоку, отриманих від експортера потоку" #: ../../configuration/protocols/ospf.rst:329 msgid "**default** – this area will be used for shortcutting only if ABR does not have a link to the backbone area or this link was lost. **enable** – the area will be used for shortcutting every time the route that goes through it is cheaper. **disable** – this area is never used by ABR for routes shortcutting." -msgstr "**default** – this area will be used for shortcutting only if ABR does not have a link to the backbone area or this link was lost. **enable** – the area will be used for shortcutting every time the route that goes through it is cheaper. **disable** – this area is never used by ABR for routes shortcutting." +msgstr "**за замовчуванням** – ця область використовуватиметься для швидкого доступу, лише якщо ABR не має зв’язку з магістральною областю або цей зв’язок було втрачено. **увімкнути** – область використовуватиметься для скорочення кожного разу, коли маршрут, що проходить через неї, є дешевшим. **вимкнути** – ця область ніколи не використовується ABR для скорочення маршрутів." #: ../../configuration/protocols/babel.rst:82 msgid "**default** – enable split-horizon on wired interfaces, and disable split-horizon on wireless interfaces. **enable** – enable split-horizon on this interfaces. **disable** – disable split-horizon on this interfaces." -msgstr "**default** – enable split-horizon on wired interfaces, and disable split-horizon on wireless interfaces. **enable** – enable split-horizon on this interfaces. **disable** – disable split-horizon on this interfaces." +msgstr "**за замовчуванням** – увімкнути розділений горизонт на дротових інтерфейсах і вимкнути розділений горизонт на бездротових інтерфейсах. **enable** – увімкнути split-horizon на цьому інтерфейсі. **disable** – вимкнути split-horizon на цьому інтерфейсі." #: ../../configuration/service/pppoe-server.rst:566 msgid "**deny**: Deny second session authorization." @@ -681,19 +681,19 @@ msgstr "**deny** - Do not negotiate IPv6 (default value)" #: ../../configuration/vpn/pptp.rst:385 #: ../../configuration/vpn/sstp.rst:419 msgid "**deny** - deny mppe" -msgstr "**deny** - deny mppe" +msgstr "**deny** - заборонити mppe" #: ../../configuration/nat/nat44.rst:213 msgid "**destination** - specify which packets the translation will be applied to, only based on the destination address and/or port number configured." -msgstr "**destination** - specify which packets the translation will be applied to, only based on the destination address and/or port number configured." +msgstr "**destination** - вкажіть, до яких пакетів буде застосовано переклад, лише на основі налаштованої адреси призначення та/або номера порту." #: ../../_include/interface-address-with-dhcp.txt:9 msgid "**dhcp** interface address is received by DHCP from a DHCP server on this segment." -msgstr "**dhcp** interface address is received by DHCP from a DHCP server on this segment." +msgstr "Адреса інтерфейсу **dhcp** отримується DHCP від сервера DHCP у цьому сегменті." #: ../../_include/interface-address-with-dhcp.txt:11 msgid "**dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server on this segment." -msgstr "**dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server on this segment." +msgstr "Адреса інтерфейсу **dhcpv6** отримується DHCPv6 від сервера DHCPv6 у цьому сегменті." #: ../../configuration/service/pppoe-server.rst:565 msgid "**disable**: Disables session control." @@ -701,19 +701,19 @@ msgstr "**disable**: Disables session control." #: ../../configuration/service/dhcp-relay.rst:75 msgid "**discard:** Received packets which already contain relay information will be discarded." -msgstr "**discard:** Received packets which already contain relay information will be discarded." +msgstr "**відкинути:** Отримані пакети, які вже містять інформацію про ретрансляцію, будуть відхилені." #: ../../configuration/protocols/igmp-proxy.rst:23 msgid "**downstream:** Downstream network interfaces are the distribution interfaces to the destination networks, where multicast clients can join groups and receive multicast data. One or more downstream interfaces must be configured." -msgstr "**downstream:** Downstream network interfaces are the distribution interfaces to the destination networks, where multicast clients can join groups and receive multicast data. One or more downstream interfaces must be configured." +msgstr "**низхідний канал:** Низхідні мережеві інтерфейси – це інтерфейси розподілу до мереж призначення, де багатоадресні клієнти можуть приєднуватися до груп і отримувати багатоадресні дані. Необхідно налаштувати один або кілька вихідних інтерфейсів." #: ../../configuration/system/flow-accounting.rst:28 msgid "**exporter**: aggregates packets into flows and exports flow records towards one or more flow collectors" -msgstr "**exporter**: aggregates packets into flows and exports flow records towards one or more flow collectors" +msgstr "**експортер**: об’єднує пакети в потоки та експортує записи потоків до одного або кількох збирачів потоків" #: ../../configuration/firewall/general-legacy.rst:51 msgid "**firewall all-ping** affects only to LOCAL and it always behaves in the most restrictive way" -msgstr "**firewall all-ping** affects only to LOCAL and it always behaves in the most restrictive way" +msgstr "**firewall all-ping** впливає лише на LOCAL і завжди веде себе максимально обмежено" #: ../../configuration/firewall/global-options.rst:36 msgid "**firewall global-options all-ping** affects only to LOCAL and it always behaves in the most restrictive way" @@ -721,11 +721,11 @@ msgstr "**firewall global-options all-ping** affects only to LOCAL and it always #: ../../configuration/service/dhcp-relay.rst:78 msgid "**forward:** All packets are forwarded, relay information already present will be ignored." -msgstr "**forward:** All packets are forwarded, relay information already present will be ignored." +msgstr "**forward:** Усі пакети пересилаються, інформація про реле, яка вже є, ігноруватиметься." #: ../../configuration/nat/nat44.rst:159 msgid "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to." -msgstr "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to." +msgstr "**inbound-interface** - застосовується лише до :ref:`destination-nat`. Він налаштовує інтерфейс, який використовується для внутрішнього трафіку, до якого застосовується правило перекладу." #: ../../configuration/nat/nat44.rst:165 msgid "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." @@ -744,43 +744,43 @@ msgstr "**l2**: It means that clients are on same network where interface is.**( #: ../../configuration/interfaces/bonding.rst:161 msgid "**layer2** - Uses XOR of hardware MAC addresses and packet type ID field to generate the hash. The formula is" -msgstr "**layer2** - Uses XOR of hardware MAC addresses and packet type ID field to generate the hash. The formula is" +msgstr "**layer2** – використовує XOR апаратних MAC-адрес і поля ідентифікатора типу пакета для створення хешу. Формула така" #: ../../configuration/interfaces/bonding.rst:174 msgid "**layer2+3** - This policy uses a combination of layer2 and layer3 protocol information to generate the hash. Uses XOR of hardware MAC addresses and IP addresses to generate the hash. The formula is:" -msgstr "**layer2+3** - This policy uses a combination of layer2 and layer3 protocol information to generate the hash. Uses XOR of hardware MAC addresses and IP addresses to generate the hash. The formula is:" +msgstr "**layer2+3** – ця політика використовує комбінацію інформації про протоколи рівня 2 і 3 для створення хешу. Використовує XOR апаратних MAC-адрес та IP-адрес для створення хешу. Формула така:" #: ../../configuration/interfaces/bonding.rst:200 msgid "**layer3+4** - This policy uses upper layer protocol information, when available, to generate the hash. This allows for traffic to a particular network peer to span multiple slaves, although a single connection will not span multiple slaves." -msgstr "**layer3+4** - This policy uses upper layer protocol information, when available, to generate the hash. This allows for traffic to a particular network peer to span multiple slaves, although a single connection will not span multiple slaves." +msgstr "**layer3+4** – ця політика використовує інформацію протоколу верхнього рівня, якщо вона доступна, для створення хешу. Це дозволяє трафіку до певного мережевого вузла охоплювати кілька підлеглих пристроїв, хоча одне з’єднання не охоплюватиме кілька підлеглих пристроїв." #: ../../configuration/vpn/site2site_ipsec.rst:288 msgid "**left**" -msgstr "**left**" +msgstr "**ліворуч**" #: ../../configuration/protocols/isis.rst:87 msgid "**level-1** - Act as a station (Level 1) router only." -msgstr "**level-1** - Act as a station (Level 1) router only." +msgstr "**level-1** - діяти лише як маршрутизатор станції (рівень 1)." #: ../../configuration/protocols/isis.rst:153 msgid "**level-1** - Level-1 only adjacencies are formed." -msgstr "**level-1** - Level-1 only adjacencies are formed." +msgstr "**level-1** - на рівні 1 формуються лише суміжності." #: ../../configuration/protocols/isis.rst:88 msgid "**level-1-2** - Act as a station (Level 1) router and area (Level 2) router." -msgstr "**level-1-2** - Act as a station (Level 1) router and area (Level 2) router." +msgstr "**level-1-2** - Виконувати функції маршрутизатора станції (Рівень 1) і маршрутизатора області (Рівень 2)." #: ../../configuration/protocols/isis.rst:154 msgid "**level-1-2** - Level-1-2 adjacencies are formed" -msgstr "**level-1-2** - Level-1-2 adjacencies are formed" +msgstr "**level-1-2** - формуються примикання рівня 1-2" #: ../../configuration/protocols/isis.rst:89 msgid "**level-2-only** - Act as an area (Level 2) router only." -msgstr "**level-2-only** - Act as an area (Level 2) router only." +msgstr "**level-2-only** - діяти лише як зональний (рівень 2) маршрутизатор." #: ../../configuration/protocols/isis.rst:155 msgid "**level-2-only** - Level-2 only adjacencies are formed" -msgstr "**level-2-only** - Level-2 only adjacencies are formed" +msgstr "**level-2-only** – формуються суміжності лише рівня 2" #: ../../configuration/service/ipoe-server.rst:65 #: ../../configuration/service/pppoe-server.rst:43 @@ -788,7 +788,7 @@ msgstr "**level-2-only** - Level-2 only adjacencies are formed" #: ../../configuration/vpn/pptp.rst:32 #: ../../configuration/vpn/sstp.rst:58 msgid "**local**: All authentication queries are handled locally." -msgstr "**local**: All authentication queries are handled locally." +msgstr "**локальний**: усі запити автентифікації обробляються локально." #: ../../configuration/service/ipoe-server.rst:93 msgid "**local**: It means that client are behind some router." @@ -796,31 +796,39 @@ msgstr "**local**: It means that client are behind some router." #: ../../configuration/interfaces/wireguard.rst:140 msgid "**local side - commands**" -msgstr "**local side - commands**" +msgstr "**локальна сторона - команди**" #: ../../configuration/service/dns.rst:83 msgid "**log-fail** In this mode, the recursor will attempt to validate all data it retrieves from authoritative servers, regardless of the client's DNSSEC desires, and will log the validation result. This mode can be used to determine the extra load and amount of possibly bogus answers before turning on full-blown validation. Responses to client queries are the same as with process." -msgstr "**log-fail** In this mode, the recursor will attempt to validate all data it retrieves from authoritative servers, regardless of the client's DNSSEC desires, and will log the validation result. This mode can be used to determine the extra load and amount of possibly bogus answers before turning on full-blown validation. Responses to client queries are the same as with process." +msgstr "**log-fail** У цьому режимі рекурсор намагатиметься перевірити всі дані, які він отримує з авторитетних серверів, незалежно від бажань DNSSEC клієнта, і реєструватиме результат перевірки. Цей режим можна використовувати для визначення додаткового навантаження та кількості ймовірно фальшивих відповідей перед увімкненням повномасштабної перевірки. Відповіді на запити клієнта такі ж, як і на процес." + +#: ../../configuration/service/dns.rst:197 +msgid "**lookup-a** A Flag." +msgstr "**lookup-a** A Flag." + +#: ../../configuration/service/dns.rst:199 +msgid "**lookup-srv** S flag." +msgstr "**lookup-srv** S flag." #: ../../configuration/protocols/isis.rst:100 msgid "**narrow** - Use old style of TLVs with narrow metric." -msgstr "**narrow** - Use old style of TLVs with narrow metric." +msgstr "**вузький** – використовуйте старий стиль TLV з вузькою метрикою." #: ../../configuration/container/index.rst:124 msgid "**net-admin**: Network operations (interface, firewall, routing tables)" -msgstr "**net-admin**: Network operations (interface, firewall, routing tables)" +msgstr "**net-admin**: мережеві операції (інтерфейс, брандмауер, таблиці маршрутизації)" #: ../../configuration/container/index.rst:125 msgid "**net-bind-service**: Bind a socket to privileged ports (port numbers less than 1024)" -msgstr "**net-bind-service**: Bind a socket to privileged ports (port numbers less than 1024)" +msgstr "**net-bind-service**: прив’язує сокет до привілейованих портів (номер порту менше 1024)" #: ../../configuration/container/index.rst:126 msgid "**net-raw**: Permission to create raw network sockets" -msgstr "**net-raw**: Permission to create raw network sockets" +msgstr "**net-raw**: дозвіл на створення необроблених мережевих сокетів" #: ../../configuration/container/index.rst:105 msgid "**no**: Do not restart containers on exit" -msgstr "**no**: Do not restart containers on exit" +msgstr "**ні**: не перезапускайте контейнери після виходу" #: ../../configuration/service/ipoe-server.rst:66 msgid "**noauth**: Authentication disabled" @@ -833,15 +841,19 @@ msgstr "**noauth**: Authentication disabled." #: ../../configuration/service/dns.rst:66 msgid "**off** In this mode, no DNSSEC processing takes place. The recursor will not set the DNSSEC OK (DO) bit in the outgoing queries and will ignore the DO and AD bits in queries." -msgstr "**off** In this mode, no DNSSEC processing takes place. The recursor will not set the DNSSEC OK (DO) bit in the outgoing queries and will ignore the DO and AD bits in queries." +msgstr "**вимкнено** У цьому режимі обробка DNSSEC не відбувається. Рекурсор не встановлюватиме біт DNSSEC OK (DO) у вихідних запитах і ігноруватиме біти DO та AD у запитах." #: ../../configuration/container/index.rst:106 msgid "**on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)" -msgstr "**on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)" +msgstr "**on-failure**: перезапускати контейнери, коли вони виходять із ненульовим кодом виходу, повторювати спроби на невизначений час (за замовчуванням)" + +#: ../../configuration/service/dns.rst:201 +msgid "**order** Rule order. Requires ``." +msgstr "**order** Rule order. Requires ``." #: ../../configuration/nat/nat44.rst:149 msgid "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." -msgstr "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." +msgstr "**outbound-interface** - застосовується лише до :ref:`source-nat`. Він налаштовує інтерфейс, який використовується для зовнішнього трафіку, до якого застосовується це правило перекладу." #: ../../configuration/nat/nat44.rst:149 msgid "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." @@ -863,7 +875,7 @@ msgstr "**prefer** - Ask client for IPv6 negotiation, do not fail if it rejects" #: ../../configuration/vpn/sstp.rst:204 msgid "**prefer** - ask client for mppe, if it rejects don't fail" -msgstr "**prefer** - ask client for mppe, if it rejects don't fail" +msgstr "**prefer** - запитувати у клієнта mppe, якщо він відхиляє, не виконуйте помилок" #: ../../configuration/service/pppoe-server.rst:506 #: ../../configuration/vpn/l2tp.rst:460 @@ -872,17 +884,25 @@ msgstr "**prefer** - ask client for mppe, if it rejects don't fail" msgid "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" msgstr "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" +#: ../../configuration/service/dns.rst:203 +msgid "**preference** Rule preference. Requires ``. Defaults to 0 if not set." +msgstr "**preference** Rule preference. Requires ``. Defaults to 0 if not set." + #: ../../configuration/service/dns.rst:77 msgid "**process** When dnssec is set to process the behavior is similar to process-no-validate. However, the recursor will try to validate the data if at least one of the DO or AD bits is set in the query; in that case, it will set the AD-bit in the response when the data is validated successfully, or send SERVFAIL when the validation comes up bogus." -msgstr "**process** When dnssec is set to process the behavior is similar to process-no-validate. However, the recursor will try to validate the data if at least one of the DO or AD bits is set in the query; in that case, it will set the AD-bit in the response when the data is validated successfully, or send SERVFAIL when the validation comes up bogus." +msgstr "**process** Коли dnssec налаштовано на обробку, поведінка подібна до процесу без підтвердження. Однак рекурсор спробує перевірити дані, якщо в запиті встановлено хоча б один із бітів DO або AD; у такому випадку він встановлює біт AD у відповідь, коли дані успішно перевірені, або надсилає SERVFAIL, коли перевірка виявляється фальшивою." #: ../../configuration/service/dns.rst:70 msgid "**process-no-validate** In this mode the recursor acts as a \"security aware, non-validating\" nameserver, meaning it will set the DO-bit on outgoing queries and will provide DNSSEC related RRsets (NSEC, RRSIG) to clients that ask for them (by means of a DO-bit in the query), except for zones provided through the auth-zones setting. It will not do any validation in this mode, not even when requested by the client." -msgstr "**process-no-validate** In this mode the recursor acts as a \"security aware, non-validating\" nameserver, meaning it will set the DO-bit on outgoing queries and will provide DNSSEC related RRsets (NSEC, RRSIG) to clients that ask for them (by means of a DO-bit in the query), except for zones provided through the auth-zones setting. It will not do any validation in this mode, not even when requested by the client." +msgstr "**process-no-validate** У цьому режимі рекурсор діє як «сервер імен, що підтримує безпеку, не перевіряє», тобто він встановлюватиме біт DO для вихідних запитів і надаватиме RRsets, пов’язані з DNSSEC (NSEC, RRSIG). клієнти, які запитують їх (за допомогою біта DO в запиті), за винятком зон, наданих через налаштування auth-zones. Він не виконуватиме жодної перевірки в цьому режимі, навіть якщо запитує клієнт." #: ../../configuration/nat/nat44.rst:181 msgid "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." -msgstr "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." +msgstr "**протокол** - вкажіть, до яких типів протоколів застосовується це правило перекладу. Лише пакети, що відповідають зазначеному протоколу, піддаються NAT. За замовчуванням це стосується `всіх` протоколів." + +#: ../../configuration/service/dns.rst:205 +msgid "**protocol-specific** P flag." +msgstr "**protocol-specific** P flag." #: ../../configuration/service/ipoe-server.rst:63 #: ../../configuration/service/pppoe-server.rst:41 @@ -890,7 +910,7 @@ msgstr "**protocol** - specify which types of protocols this translation rule ap #: ../../configuration/vpn/pptp.rst:30 #: ../../configuration/vpn/sstp.rst:56 msgid "**radius**: All authentication queries are handled by a configured RADIUS server." -msgstr "**radius**: All authentication queries are handled by a configured RADIUS server." +msgstr "**радіус**: усі запити автентифікації обробляються налаштованим сервером RADIUS." #: ../../configuration/service/pppoe-server.rst:391 #: ../../configuration/service/pppoe-server.rst:398 @@ -903,9 +923,13 @@ msgstr "**radius**: All authentication queries are handled by a configured RADIU msgid "**random** - Random interface identifier for IPv6" msgstr "**random** - Random interface identifier for IPv6" +#: ../../configuration/service/dns.rst:207 +msgid "**regexp** Regular expression. Requires ``." +msgstr "**regexp** Regular expression. Requires ``." + #: ../../configuration/interfaces/wireguard.rst:190 msgid "**remote side - commands**" -msgstr "**remote side - commands**" +msgstr "**віддалена сторона - команди**" #: ../../configuration/service/pppoe-server.rst:567 msgid "**replace**: Terminate first session when second is authorized **(default)**" @@ -913,7 +937,11 @@ msgstr "**replace**: Terminate first session when second is authorized **(defaul #: ../../configuration/service/dhcp-relay.rst:81 msgid "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." -msgstr "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." +msgstr "**replace:** Інформація про ретрансляцію, яка вже є в пакеті, видаляється та замінюється власним набором інформації про реле маршрутизатора." + +#: ../../configuration/service/dns.rst:209 +msgid "**replacement** Replacement DNS name." +msgstr "**replacement** Replacement DNS name." #: ../../configuration/service/pppoe-server.rst:472 #: ../../configuration/vpn/l2tp.rst:426 @@ -934,15 +962,23 @@ msgstr "**require** - Require IPv6 negotiation" #: ../../configuration/vpn/pptp.rst:383 #: ../../configuration/vpn/sstp.rst:417 msgid "**require** - ask client for mppe, if it rejects drop connection" -msgstr "**require** - ask client for mppe, if it rejects drop connection" +msgstr "**require** - запитувати у клієнта mppe, якщо він відхиляє розрив з'єднання" + +#: ../../configuration/service/dns.rst:211 +msgid "**resolve-uri** U flag." +msgstr "**resolve-uri** U flag." #: ../../configuration/vpn/site2site_ipsec.rst:319 msgid "**right**" -msgstr "**right**" +msgstr "**право**" + +#: ../../configuration/service/dns.rst:213 +msgid "**service** Service type. Requires ``." +msgstr "**service** Service type. Requires ``." #: ../../configuration/container/index.rst:127 msgid "**setpcap**: Capability sets (from bounded or inherited set)" -msgstr "**setpcap**: Capability sets (from bounded or inherited set)" +msgstr "**setpcap**: набори можливостей (з обмеженого або успадкованого набору)" #: ../../configuration/service/ipoe-server.rst:99 msgid "**shared**: Multiple clients share the same network. **(default)**" @@ -950,27 +986,27 @@ msgstr "**shared**: Multiple clients share the same network. **(default)**" #: ../../configuration/nat/nat44.rst:195 msgid "**source** - specifies which packets the NAT translation rule applies to based on the packets source IP address and/or source port. Only matching packets are considered for NAT." -msgstr "**source** - specifies which packets the NAT translation rule applies to based on the packets source IP address and/or source port. Only matching packets are considered for NAT." +msgstr "**джерело** - визначає, до яких пакетів застосовується правило трансляції NAT на основі IP-адреси джерела пакетів і/або порту джерела. Для NAT розглядаються лише збігаються пакети." #: ../../configuration/container/index.rst:128 msgid "**sys-admin**: Administation operations (quotactl, mount, sethostname, setdomainame)" -msgstr "**sys-admin**: Administation operations (quotactl, mount, sethostname, setdomainame)" +msgstr "**sys-admin**: операції адміністрування (quotactl, mount, sethostname, setdomainame)" #: ../../configuration/container/index.rst:129 msgid "**sys-time**: Permission to set system clock" -msgstr "**sys-time**: Permission to set system clock" +msgstr "**sys-time**: дозвіл на встановлення системного годинника" #: ../../configuration/protocols/isis.rst:101 msgid "**transition** - Send and accept both styles of TLVs during transition." -msgstr "**transition** - Send and accept both styles of TLVs during transition." +msgstr "**перехід** – надсилайте та приймайте обидва стилі TLV під час переходу." #: ../../configuration/protocols/igmp-proxy.rst:19 msgid "**upstream:** The upstream network interface is the outgoing interface which is responsible for communicating to available multicast data sources. There can only be one upstream interface." -msgstr "**upstream:** The upstream network interface is the outgoing interface which is responsible for communicating to available multicast data sources. There can only be one upstream interface." +msgstr "**upstream:** мережевий інтерфейс висхідного потоку – це вихідний інтерфейс, який відповідає за обмін даними з доступними джерелами багатоадресних даних. Може бути лише один висхідний інтерфейс." #: ../../configuration/service/dns.rst:90 msgid "**validate** The highest mode of DNSSEC processing. In this mode, all queries will be validated and will be answered with a SERVFAIL in case of bogus data, regardless of the client's request." -msgstr "**validate** The highest mode of DNSSEC processing. In this mode, all queries will be validated and will be answered with a SERVFAIL in case of bogus data, regardless of the client's request." +msgstr "**validate** Найвищий режим обробки DNSSEC. У цьому режимі всі запити перевірятимуться та отримуватимуть відповідь SERVFAIL у разі фальшивих даних, незалежно від запиту клієнта." #: ../../configuration/service/ipoe-server.rst:100 msgid "**vlan**: One VLAN per client." @@ -978,7 +1014,7 @@ msgstr "**vlan**: One VLAN per client." #: ../../configuration/protocols/isis.rst:102 msgid "**wide** - Use new style of TLVs to carry wider metric." -msgstr "**wide** - Use new style of TLVs to carry wider metric." +msgstr "**wide** – Використовуйте новий стиль TLV для ширшої метрики." #: ../../configuration/service/pppoe-server.rst:392 #: ../../configuration/service/pppoe-server.rst:399 @@ -993,7 +1029,7 @@ msgstr "**x:x:x:x** - Specify interface identifier for IPv6" #: ../../configuration/protocols/bgp.rst:143 msgid "*bgpd* supports Multiprotocol Extension for BGP. So if a remote peer supports the protocol, *bgpd* can exchange IPv6 and/or multicast routing information." -msgstr "*bgpd* supports Multiprotocol Extension for BGP. So if a remote peer supports the protocol, *bgpd* can exchange IPv6 and/or multicast routing information." +msgstr "*bgpd* підтримує багатопротокольне розширення для BGP. Отже, якщо віддалений вузол підтримує протокол, *bgpd* може обмінюватися інформацією про IPv6 та/або групову маршрутизацію." #: ../../configuration/system/syslog.rst:112 #: ../../configuration/system/syslog.rst:171 @@ -1049,11 +1085,11 @@ msgstr "0: Disable DAD" #: ../../configuration/highavailability/index.rst:267 msgid "0 if not defined, which means no refreshing." -msgstr "0 if not defined, which means no refreshing." +msgstr "0, якщо не визначено, що означає відсутність оновлення." #: ../../configuration/highavailability/index.rst:249 msgid "0 if not defined." -msgstr "0 if not defined." +msgstr "0, якщо не визначено." #: ../../configuration/service/dhcp-server.rst:293 #: ../../configuration/system/syslog.rst:114 @@ -1065,7 +1101,7 @@ msgstr "1" #: ../../configuration/nat/nat44.rst:612 msgid "1-to-1 NAT" -msgstr "1-to-1 NAT" +msgstr "1-до-1 NAT" #: ../../configuration/system/syslog.rst:132 #: ../../configuration/trafficpolicy/index.rst:269 @@ -1075,11 +1111,11 @@ msgstr "10" #: ../../configuration/interfaces/ethernet.rst:51 msgid "100000 - 100 GBit/s" -msgstr "100000 - 100 GBit/s" +msgstr "100000 - 100 Гбіт/с" #: ../../configuration/interfaces/ethernet.rst:47 msgid "10000 - 10 GBit/s" -msgstr "10000 - 10 GBit/s" +msgstr "10000 - 10 Гбіт/с" #: ../../configuration/trafficpolicy/index.rst:287 msgid "100010" @@ -1087,7 +1123,7 @@ msgstr "100010" #: ../../configuration/interfaces/ethernet.rst:44 msgid "1000 - 1 GBit/s" -msgstr "1000 - 1 GBit/s" +msgstr "1000 - 1 Гбіт/с" #: ../../configuration/trafficpolicy/index.rst:289 msgid "100100" @@ -1099,7 +1135,7 @@ msgstr "100110" #: ../../configuration/interfaces/ethernet.rst:43 msgid "100 - 100 MBit/s" -msgstr "100 - 100 MBit/s" +msgstr "100 - 100 Мбіт/с" #: ../../configuration/trafficpolicy/index.rst:265 msgid "101110" @@ -1107,11 +1143,11 @@ msgstr "101110" #: ../../configuration/nat/nat44.rst:38 msgid "10.0.0.0 to 10.255.255.255 (CIDR: 10.0.0.0/8)" -msgstr "10.0.0.0 to 10.255.255.255 (CIDR: 10.0.0.0/8)" +msgstr "10.0.0.0 до 10.255.255.255 (CIDR: 10.0.0.0/8)" #: ../../configuration/interfaces/ethernet.rst:42 msgid "10 - 10 MBit/s" -msgstr "10 - 10 MBit/s" +msgstr "10 - 10 Мбіт/с" #: ../../configuration/system/syslog.rst:134 #: ../../configuration/trafficpolicy/index.rst:874 @@ -1161,7 +1197,7 @@ msgstr "17" #: ../../configuration/nat/nat44.rst:39 msgid "172.16.0.0 to 172.31.255.255 (CIDR: 172.16.0.0/12)" -msgstr "172.16.0.0 to 172.31.255.255 (CIDR: 172.16.0.0/12)" +msgstr "172.16.0.0 до 172.31.255.255 (CIDR: 172.16.0.0/12)" #: ../../configuration/system/syslog.rst:148 #: ../../configuration/trafficpolicy/index.rst:275 @@ -1175,11 +1211,11 @@ msgstr "19" #: ../../configuration/nat/nat44.rst:40 msgid "192.168.0.0 to 192.168.255.255 (CIDR: 192.168.0.0/16)" -msgstr "192.168.0.0 to 192.168.255.255 (CIDR: 192.168.0.0/16)" +msgstr "192.168.0.0 до 192.168.255.255 (CIDR: 192.168.0.0/16)" #: ../../configuration/service/eventhandler.rst:32 msgid "1. Create an event handler" -msgstr "1. Create an event handler" +msgstr "1. Створіть обробник події" #: ../../configuration/firewall/flowtables.rst:144 msgid "1. First packet is received on eht0, with destination address 192.0.2.100, protocol tcp and destination port 1122. Assume such destination address is reachable through interface eth1." @@ -1191,7 +1227,7 @@ msgstr "1: Enable DAD (default)" #: ../../configuration/highavailability/index.rst:277 msgid "1 if not defined." -msgstr "1 if not defined." +msgstr "1, якщо не визначено." #: ../../configuration/service/dhcp-server.rst:299 #: ../../configuration/system/syslog.rst:116 @@ -1221,11 +1257,11 @@ msgstr "23" #: ../../configuration/interfaces/ethernet.rst:48 msgid "25000 - 25 GBit/s" -msgstr "25000 - 25 GBit/s" +msgstr "25000 - 25 Гбіт/с" #: ../../configuration/interfaces/ethernet.rst:45 msgid "2500 - 2.5 GBit/s" -msgstr "2500 - 2.5 GBit/s" +msgstr "2500 - 2,5 Гбіт/с" #: ../../configuration/service/dhcp-server.rst:385 msgid "252" @@ -1241,11 +1277,11 @@ msgstr "28" #: ../../configuration/vpn/openconnect.rst:59 msgid "2FA OTP support" -msgstr "2FA OTP support" +msgstr "Підтримка 2FA OTP" #: ../../configuration/service/eventhandler.rst:40 msgid "2. Add regex to the script" -msgstr "2. Add regex to the script" +msgstr "2. Додайте регулярний вираз до сценарію" #: ../../configuration/firewall/flowtables.rst:148 msgid "2. Since this is the first packet, connection status of this connection, so far is **new**. So neither rule 10 nor 20 are valid." @@ -1281,7 +1317,7 @@ msgstr "38" #: ../../configuration/service/eventhandler.rst:51 msgid "3. Add a full path to the script" -msgstr "3. Add a full path to the script" +msgstr "3. Додайте повний шлях до сценарію" #: ../../configuration/service/dhcp-server.rst:310 #: ../../configuration/system/syslog.rst:120 @@ -1293,11 +1329,11 @@ msgstr "4" #: ../../configuration/interfaces/ethernet.rst:49 msgid "40000 - 40 GBit/s" -msgstr "40000 - 40 GBit/s" +msgstr "40000 - 40 Гбіт/с" #: ../../configuration/interfaces/wireless.rst:170 msgid "40 MHz channels may switch their primary and secondary channels if needed or creation of 40 MHz channel maybe rejected based on overlapping BSSes. These changes are done automatically when hostapd is setting up the 40 MHz channel." -msgstr "40 MHz channels may switch their primary and secondary channels if needed or creation of 40 MHz channel maybe rejected based on overlapping BSSes. These changes are done automatically when hostapd is setting up the 40 MHz channel." +msgstr "Канали 40 МГц можуть перемикати свої первинні та вторинні канали, якщо це необхідно, або створення каналу 40 МГц може бути відхилено на основі накладання BSS. Ці зміни виконуються автоматично, коли hostapd налаштовує канал 40 МГц." #: ../../configuration/service/dhcp-server.rst:330 msgid "42" @@ -1313,7 +1349,7 @@ msgstr "46" #: ../../configuration/service/eventhandler.rst:60 msgid "4. Add optional parameters" -msgstr "4. Add optional parameters" +msgstr "4. Додайте додаткові параметри" #: ../../configuration/firewall/flowtables.rst:153 msgid "4. Once answer from server 192.0.2.100 is seen in opposite direction, connection state will be triggered to **established**, so this reply is accepted in rule 10." @@ -1328,11 +1364,11 @@ msgstr "5" #: ../../configuration/interfaces/ethernet.rst:50 msgid "50000 - 50 GBit/s" -msgstr "50000 - 50 GBit/s" +msgstr "50000 - 50 Гбіт/с" #: ../../configuration/interfaces/ethernet.rst:46 msgid "5000 - 5 GBit/s" -msgstr "5000 - 5 GBit/s" +msgstr "5000 - 5 Гбіт/с" #: ../../configuration/service/dhcp-server.rst:340 msgid "54" @@ -1345,7 +1381,7 @@ msgstr "5. Second packet for this connection is received by the router. Since co #: ../../configuration/highavailability/index.rst:257 #: ../../configuration/highavailability/index.rst:288 msgid "5 if not defined." -msgstr "5 if not defined." +msgstr "5, якщо не визначено." #: ../../configuration/service/dhcp-server.rst:315 #: ../../configuration/system/syslog.rst:124 @@ -1361,7 +1397,7 @@ msgstr "66" #: ../../configuration/loadbalancing/wan.rst:74 msgid "66% of traffic is routed to eth0, eth1 gets 33% of traffic." -msgstr "66% of traffic is routed to eth0, eth1 gets 33% of traffic." +msgstr "66% трафіку спрямовується на eth0, eth1 отримує 33% трафіку." #: ../../configuration/service/dhcp-server.rst:355 msgid "67" @@ -1381,7 +1417,7 @@ msgstr "6in4 (SIT)" #: ../../configuration/interfaces/tunnel.rst:83 msgid "6in4 uses tunneling to encapsulate IPv6 traffic over IPv4 links as defined in :rfc:`4213`. The 6in4 traffic is sent over IPv4 inside IPv4 packets whose IP headers have the IP protocol number set to 41. This protocol number is specifically designated for IPv6 encapsulation, the IPv4 packet header is immediately followed by the IPv6 packet being carried. The encapsulation overhead is the size of the IPv4 header of 20 bytes, therefore with an MTU of 1500 bytes, IPv6 packets of 1480 bytes can be sent without fragmentation. This tunneling technique is frequently used by IPv6 tunnel brokers like `Hurricane Electric`_." -msgstr "6in4 uses tunneling to encapsulate IPv6 traffic over IPv4 links as defined in :rfc:`4213`. The 6in4 traffic is sent over IPv4 inside IPv4 packets whose IP headers have the IP protocol number set to 41. This protocol number is specifically designated for IPv6 encapsulation, the IPv4 packet header is immediately followed by the IPv6 packet being carried. The encapsulation overhead is the size of the IPv4 header of 20 bytes, therefore with an MTU of 1500 bytes, IPv6 packets of 1480 bytes can be sent without fragmentation. This tunneling technique is frequently used by IPv6 tunnel brokers like `Hurricane Electric`_." +msgstr "6in4 використовує тунелювання для інкапсуляції трафіку IPv6 через посилання IPv4, як визначено в :rfc:`4213`. Трафік 6in4 надсилається через IPv4 всередині пакетів IPv4, IP-заголовки яких мають номер IP-протоколу, встановлений на 41. Цей номер протоколу спеціально призначено для інкапсуляції IPv6, за заголовком пакету IPv4 одразу слідує пакет IPv6, що переноситься. Накладні витрати на інкапсуляцію — це розмір заголовка IPv4 у 20 байт, тому з MTU 1500 байт пакети IPv6 розміром 1480 байт можна надсилати без фрагментації. Ця техніка тунелювання часто використовується посередниками тунелів IPv6, такими як `Hurricane Electric`_." #: ../../configuration/system/syslog.rst:126 #: ../../configuration/system/syslog.rst:191 @@ -1400,7 +1436,7 @@ msgstr "8" #: ../../_include/interface-vlan-8021q.txt:21 msgid "802.1q VLAN interfaces are represented as virtual sub-interfaces in VyOS. The term used for this is ``vif``." -msgstr "802.1q VLAN interfaces are represented as virtual sub-interfaces in VyOS. The term used for this is ``vif``." +msgstr "Інтерфейси VLAN 802.1q представлені у VyOS як віртуальні підінтерфейси. Для цього використовується термін ``vif``." #: ../../configuration/system/syslog.rst:130 #: ../../configuration/trafficpolicy/index.rst:878 @@ -1409,23 +1445,23 @@ msgstr "9" #: ../../configuration/policy/route.rst:98 msgid "<1-65535>: Numbered port." -msgstr "<1-65535>: Numbered port." +msgstr "<1-65535>: Пронумерований порт." #: ../../configuration/policy/extcommunity-list.rst:38 msgid ": Extended community list regular expression." -msgstr ": Extended community list regular expression." +msgstr ": Регулярний вираз розширеного списку спільноти." #: ../../configuration/policy/route.rst:71 msgid ": IPv6 prefix to match." -msgstr ": IPv6 prefix to match." +msgstr ": префікс IPv6 для відповідності." #: ../../configuration/policy/route.rst:72 msgid "-: IPv6 range to match." -msgstr "-: IPv6 range to match." +msgstr "- : відповідний діапазон IPv6." #: ../../configuration/policy/route.rst:70 msgid ": IPv6 address to match." -msgstr ": IPv6 address to match." +msgstr ": адреса IPv6 для відповідності." #: ../../configuration/system/syslog.rst:230 msgid "" @@ -1433,39 +1469,39 @@ msgstr "" #: ../../configuration/interfaces/wireless.rst:251 msgid " must be from 34 - 173. For 80 MHz channels it should be channel + 6." -msgstr " must be from 34 - 173. For 80 MHz channels it should be channel + 6." +msgstr "має бути від 34 до 173. Для каналів 80 МГц має бути канал +6." #: ../../configuration/protocols/ospf.rst:346 msgid " – area identifier through which a virtual link goes. – ABR router-id with which a virtual link is established. Virtual link must be configured on both routers." -msgstr " – area identifier through which a virtual link goes. – ABR router-id with which a virtual link is established. Virtual link must be configured on both routers." +msgstr "– ідентифікатор області, через яку проходить віртуальне посилання. – ідентифікатор маршрутизатора ABR, за допомогою якого встановлюється віртуальне з’єднання. Віртуальний канал має бути налаштований на обох маршрутизаторах." #: ../../configuration/policy/route.rst:97 msgid ": Named port (any name in /etc/services, e.g., http)." -msgstr ": Named port (any name in /etc/services, e.g., http)." +msgstr ": Іменований порт (будь-яка назва в /etc/services, наприклад, http)." #: ../../configuration/policy/extcommunity-list.rst:39 msgid ": Route Target regular expression." -msgstr ": Route Target regular expression." +msgstr ": регулярний вираз цільового маршруту." #: ../../configuration/policy/extcommunity-list.rst:40 msgid ": Site of Origin regular expression." -msgstr ": Site of Origin regular expression." +msgstr ": регулярний вираз Site of Origin." #: ../../configuration/policy/route.rst:99 msgid "-: Numbered port range (e.g., 1001-1005)." -msgstr "-: Numbered port range (e.g., 1001-1005)." +msgstr "- : діапазон нумерованих портів (наприклад, 1001-1005)." #: ../../configuration/policy/route.rst:63 msgid ": Subnet to match." -msgstr ": Subnet to match." +msgstr ": відповідна підмережа." #: ../../configuration/policy/route.rst:64 msgid "-: IP range to match." -msgstr "-: IP range to match." +msgstr "- : відповідний діапазон IP." #: ../../configuration/policy/route.rst:62 msgid ": IP address to match." -msgstr ": IP address to match." +msgstr ": IP-адреса для відповідності." #: ../../configuration/pki/index.rst:283 msgid "ACME" @@ -1485,63 +1521,67 @@ msgstr "ARP" #: ../../configuration/firewall/groups.rst:129 msgid "A **domain group** represents a collection of domains." -msgstr "A **domain group** represents a collection of domains." +msgstr "**Група доменів** представляє набір доменів." #: ../../configuration/firewall/groups.rst:111 msgid "A **mac group** represents a collection of mac addresses." -msgstr "A **mac group** represents a collection of mac addresses." +msgstr "**група mac** представляє набір mac-адрес." #: ../../configuration/firewall/groups.rst:86 msgid "A **port group** represents only port numbers, not the protocol. Port groups can be referenced for either TCP or UDP. It is recommended that TCP and UDP groups are created separately to avoid accidentally filtering unnecessary ports. Ranges of ports can be specified by using `-`." -msgstr "A **port group** represents only port numbers, not the protocol. Port groups can be referenced for either TCP or UDP. It is recommended that TCP and UDP groups are created separately to avoid accidentally filtering unnecessary ports. Ranges of ports can be specified by using `-`." +msgstr "**Група портів** представляє лише номери портів, а не протокол. Групи портів можуть посилатися на TCP або UDP. Рекомендується створювати групи TCP і UDP окремо, щоб уникнути випадкового фільтрування непотрібних портів. Діапазони портів можна вказати за допомогою `-`." #: ../../configuration/trafficpolicy/index.rst:84 msgid "A *bit* is written as **bit**," -msgstr "A *bit* is written as **bit**," +msgstr "*біт* записується як **біт**," #: ../../configuration/protocols/rpki.rst:21 msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described in :rfc:`8210`." -msgstr "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described in :rfc:`8210`." +msgstr "Маршрутизатор, що розмовляє BGP, як-от VyOS, може отримувати інформацію про ROA з RPKI «програмного забезпечення перевіряючої сторони» (часто його називають просто «сервер RPKI» або «валідатор RPKI») за допомогою протоколу :abbr:`RTR (RPKI до маршрутизатора)`. Є кілька реалізацій з відкритим вихідним кодом на вибір, наприклад Routinator_ від NLNetLabs (написано на Rust), GoRTR_ і OctoRPKI_ від Cloudflare (написано на Go) і RPKI Validator_ RIPE NCC (написано на Java). Протокол RTR описано в :rfc:`8210`." + +#: ../../configuration/protocols/rpki.rst:21 +msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." +msgstr "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." #: ../../configuration/protocols/bgp.rst:951 msgid "A BGP confederation divides our AS into sub-ASes to reduce the number of required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but between these sub-ASes we use something that looks like EBGP but behaves like IBGP (called confederation BGP). Confederation mechanism is described in :rfc:`5065`" -msgstr "A BGP confederation divides our AS into sub-ASes to reduce the number of required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but between these sub-ASes we use something that looks like EBGP but behaves like IBGP (called confederation BGP). Confederation mechanism is described in :rfc:`5065`" +msgstr "Конфедерація BGP поділяє нашу AS на підсистеми, щоб зменшити кількість необхідних однорангових IBGP. У межах підсистеми AS нам все ще потрібен повнокомпонентний IBGP, але між цими підсистемами ми використовуємо щось, що виглядає як EBGP, але поводиться як IBGP (називається BGP конфедерації). Механізм конфедерації описано в :rfc:`5065`" #: ../../configuration/interfaces/bridge.rst:9 msgid "A Bridge is a way to connect two Ethernet segments together in a protocol independent way. Packets are forwarded based on Ethernet address, rather than IP address (like a router). Since forwarding is done at Layer 2, all protocols can go transparently through a bridge. The Linux bridge code implements a subset of the ANSI/IEEE 802.1d standard." -msgstr "A Bridge is a way to connect two Ethernet segments together in a protocol independent way. Packets are forwarded based on Ethernet address, rather than IP address (like a router). Since forwarding is done at Layer 2, all protocols can go transparently through a bridge. The Linux bridge code implements a subset of the ANSI/IEEE 802.1d standard." +msgstr "Міст — це спосіб з’єднати два сегменти Ethernet у незалежний від протоколу спосіб. Пакети пересилаються на основі адреси Ethernet, а не IP-адреси (як маршрутизатор). Оскільки пересилання здійснюється на рівні 2, усі протоколи можуть проходити прозоро через міст. Код мосту Linux реалізує підмножину стандарту ANSI/IEEE 802.1d." #: ../../configuration/interfaces/tunnel.rst:108 msgid "A GRE tunnel operates at layer 3 of the OSI model and is represented by IP protocol 47. The main benefit of a GRE tunnel is that you are able to carry multiple protocols inside the same tunnel. GRE also supports multicast traffic and supports routing protocols that leverage multicast to form neighbor adjacencies." -msgstr "A GRE tunnel operates at layer 3 of the OSI model and is represented by IP protocol 47. The main benefit of a GRE tunnel is that you are able to carry multiple protocols inside the same tunnel. GRE also supports multicast traffic and supports routing protocols that leverage multicast to form neighbor adjacencies." +msgstr "Тунель GRE працює на рівні 3 моделі OSI і представлений протоколом IP 47. Основна перевага тунелю GRE полягає в тому, що ви можете передавати кілька протоколів в одному тунелі. GRE також підтримує багатоадресний трафік і підтримує протоколи маршрутизації, які використовують багатоадресну передачу для формування сусідніх мереж." #: ../../configuration/firewall/general-legacy.rst:749 msgid "A Rule-Set can be applied to every interface:" -msgstr "A Rule-Set can be applied to every interface:" +msgstr "Набір правил можна застосувати до кожного інтерфейсу:" #: ../../configuration/service/dhcp-server.rst:620 msgid "A SNTP server address can be specified for DHCPv6 clients." -msgstr "A SNTP server address can be specified for DHCPv6 clients." +msgstr "Для клієнтів DHCPv6 можна вказати адресу сервера SNTP." #: ../../configuration/vrf/index.rst:18 msgid "A VRF device is created with an associated route table. Network interfaces are then enslaved to a VRF device." -msgstr "A VRF device is created with an associated route table. Network interfaces are then enslaved to a VRF device." +msgstr "Пристрій VRF створюється з пов’язаною таблицею маршрутів. Потім мережеві інтерфейси підпорядковані пристрою VRF." #: ../../configuration/interfaces/tunnel.rst:114 msgid "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." -msgstr "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." +msgstr "Тунель VyOS GRE може передавати трафік як IPv4, так і IPv6, а також може бути створений через IPv4 (gre) або IPv6 (ip6gre)." -#: ../../configuration/service/dns.rst:149 +#: ../../configuration/service/dns.rst:243 msgid "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." -msgstr "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." +msgstr "Маршрутизатор VyOS із двома інтерфейсами — eth0 (WAN) і eth1 (LAN) — потрібен для реалізації конфігурації DNS із розділеним горизонтом для example.com." #: ../../configuration/service/dhcp-server.rst:592 msgid "A :abbr:`NIS (Network Information Service)` domain can be set to be used for DHCPv6 clients." -msgstr "A :abbr:`NIS (Network Information Service)` domain can be set to be used for DHCPv6 clients." +msgstr "Домен :abbr:`NIS (Network Information Service)` можна налаштувати для використання клієнтами DHCPv6." #: ../../configuration/interfaces/tunnel.rst:121 msgid "A basic configuration requires a tunnel source (source-address), a tunnel destination (remote), an encapsulation type (gre), and an address (ipv4/ipv6). Below is a basic IPv4 only configuration example taken from a VyOS router and a Cisco IOS router. The main difference between these two configurations is that VyOS requires you explicitly configure the encapsulation type. The Cisco router defaults to GRE IP otherwise it would have to be configured as well." -msgstr "A basic configuration requires a tunnel source (source-address), a tunnel destination (remote), an encapsulation type (gre), and an address (ipv4/ipv6). Below is a basic IPv4 only configuration example taken from a VyOS router and a Cisco IOS router. The main difference between these two configurations is that VyOS requires you explicitly configure the encapsulation type. The Cisco router defaults to GRE IP otherwise it would have to be configured as well." +msgstr "Для базової конфігурації потрібен джерело тунелю (адреса джерела), призначення тунелю (віддалений), тип інкапсуляції (gre) та адреса (ipv4/ipv6). Нижче наведено базовий приклад конфігурації лише для IPv4, взятий із маршрутизатора VyOS і маршрутизатора Cisco IOS. Основна відмінність між цими двома конфігураціями полягає в тому, що VyOS вимагає явного налаштування типу інкапсуляції. Маршрутизатор Cisco за замовчуванням має IP-адресу GRE, інакше його також потрібно було б налаштувати." #: ../../configuration/firewall/zone.rst:73 msgid "A basic introduction to zone-based firewalls can be found `here `_, and an example at :ref:`examples-zone-policy`." @@ -1550,7 +1590,7 @@ msgstr "A basic introduction to zone-based firewalls can be found `here `." -msgstr "A full example of a Tunnelbroker.net config can be found at :ref:`here `." +msgstr "Повний приклад конфігурації Tunnelbroker.net можна знайти :ref:`тут `." #: ../../configuration/service/dhcp-server.rst:201 msgid "A generic `` referencing this sync service." -msgstr "A generic `` referencing this sync service." +msgstr "Загальний ` ` посилання на цю службу синхронізації." #: ../../configuration/system/host-name.rst:18 msgid "A hostname is the label (name) assigned to a network device (a host) on a network and is used to distinguish one device from another on specific networks or over the internet. On the other hand this will be the name which appears on the command line prompt." -msgstr "A hostname is the label (name) assigned to a network device (a host) on a network and is used to distinguish one device from another on specific networks or over the internet. On the other hand this will be the name which appears on the command line prompt." +msgstr "Ім’я хоста — це мітка (ім’я), призначена мережевому пристрою (хосту) у мережі та використовується для відмінності одного пристрою від іншого в певних мережах або через Інтернет. З іншого боку, це буде ім’я, яке з’явиться в командному рядку." #: ../../configuration/pki/index.rst:191 msgid "A human readable description what this CA is about." -msgstr "A human readable description what this CA is about." +msgstr "Зрозумілий для людини опис того, про що цей CA." #: ../../configuration/pki/index.rst:230 msgid "A human readable description what this certificate is about." -msgstr "A human readable description what this certificate is about." +msgstr "Зрозумілий опис змісту цього сертифіката." #: ../../configuration/interfaces/loopback.rst:17 msgid "A lookback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." -msgstr "A lookback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." +msgstr "Інтерфейс ретроспективного перегляду завжди активний, тому його можна використовувати для керування трафіком або як джерело/призначення для :abbr:`IGP (Interior Gateway Protocol)`, наприклад :ref:`routing-bgp`, тому ваше внутрішнє посилання BGP не залежить на стані фізичного зв’язку та декілька маршрутів до місця призначення. Інтерфейсу :ref:`dummy-interface` завжди слід надавати перевагу над інтерфейсом :ref:`loopback-interface`." + +#: ../../configuration/interfaces/loopback.rst:17 +msgid "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." +msgstr "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." #: ../../configuration/service/snmp.rst:42 msgid "A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers." -msgstr "A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers." +msgstr "Керований пристрій — це мережевий вузол, який реалізує інтерфейс SNMP, що забезпечує односпрямований (лише читання) або двонаправлений (читання та запис) доступ до інформації вузла. Керовані пристрої обмінюються інформацією про вузли з NMS. Керовані пристрої, які іноді називають елементами мережі, можуть бути будь-якими типами пристроїв, включаючи, але не обмежуючись, маршрутизатори, сервери доступу, комутатори, кабельні модеми, мости, концентратори, IP-телефони, IP-відеокамери, комп’ютерні хости та принтери." #: ../../configuration/trafficpolicy/index.rst:154 msgid "A match filter can contain multiple criteria and will match traffic if all those criteria are true." -msgstr "A match filter can contain multiple criteria and will match traffic if all those criteria are true." +msgstr "Фільтр відповідності може містити кілька критеріїв і відповідатиме трафіку, якщо всі ці критерії відповідають дійсності." #: ../../configuration/protocols/bfd.rst:145 msgid "A monitored static route conditions the installation to the RIB on the BFD session running state: when BFD session is up the route is installed to RIB, but when the BFD session is down it is removed from the RIB." -msgstr "A monitored static route conditions the installation to the RIB on the BFD session running state: when BFD session is up the route is installed to RIB, but when the BFD session is down it is removed from the RIB." +msgstr "Контрольований статичний маршрут обумовлює інсталяцію до RIB у стані роботи сеансу BFD: коли сеанс BFD активний, маршрут установлюється до RIB, але коли сеанс BFD не працює, він видаляється з RIB." #: ../../configuration/service/snmp.rst:54 msgid "A network management station executes applications that monitor and control managed devices. NMSs provide the bulk of the processing and memory resources required for network management. One or more NMSs may exist on any managed network." -msgstr "A network management station executes applications that monitor and control managed devices. NMSs provide the bulk of the processing and memory resources required for network management. One or more NMSs may exist on any managed network." +msgstr "Станція керування мережею виконує програми, які відстежують і контролюють керовані пристрої. NMS забезпечують основну частину ресурсів обробки та пам'яті, необхідних для керування мережею. Одна чи декілька NMS можуть існувати в будь-якій керованій мережі." #: ../../configuration/interfaces/bonding.rst:337 msgid "A new interface becomes present ``Port-channel1``, all configuration like allowed VLAN interfaces, STP will happen here." -msgstr "A new interface becomes present ``Port-channel1``, all configuration like allowed VLAN interfaces, STP will happen here." +msgstr "Новий інтерфейс стає присутнім ``Port-channel1``, уся конфігурація, як дозволені інтерфейси VLAN, STP відбуватиметься тут." #: ../../configuration/loadbalancing/wan.rst:79 msgid "A packet rate limit can be set for a rule to apply the rule to traffic above or below a specified threshold. To configure the rate limiting use:" -msgstr "A packet rate limit can be set for a rule to apply the rule to traffic above or below a specified threshold. To configure the rate limiting use:" +msgstr "Обмеження швидкості пакетів можна встановити для правила, щоб застосувати правило до трафіку вище або нижче вказаного порогу. Щоб налаштувати обмеження швидкості, використовуйте:" #: ../../configuration/firewall/flowtables.rst:44 msgid "A packet that finds a matching entry in the flowtable (flowtable hit) is transmitted to the output netdevice, hence, packets bypass the classic IP forwarding path and uses the **Fast Path** (orange circles path). The visible effect is that you do not see these packets from any of the Netfilter hooks coming after ingress. In case that there is no matching entry in the flowtable (flowtable miss), the packet follows the classic IP forwarding path." @@ -1654,77 +1698,77 @@ msgstr "A packet that finds a matching entry in the flowtable (flowtable hit) is #: ../../configuration/protocols/bgp.rst:720 msgid "A penalty of 1000 is assessed each time the route fails. When the penalties reach a predefined threshold (suppress-value), the router stops advertising the route." -msgstr "A penalty of 1000 is assessed each time the route fails. When the penalties reach a predefined threshold (suppress-value), the router stops advertising the route." +msgstr "Штраф у розмірі 1000 нараховується щоразу, коли маршрут не виконується. Коли штрафні санкції досягають попередньо визначеного порогу (значення придушення), маршрутизатор припиняє рекламувати маршрут." #: ../../configuration/interfaces/macsec.rst:44 msgid "A physical interface is required to connect this MACsec instance to. Traffic leaving this interface will now be authenticated/encrypted." -msgstr "A physical interface is required to connect this MACsec instance to. Traffic leaving this interface will now be authenticated/encrypted." +msgstr "Для підключення цього екземпляра MACsec потрібен фізичний інтерфейс. Трафік, що виходить із цього інтерфейсу, тепер буде автентифікований/зашифрований." #: ../../configuration/nat/nat44.rst:374 msgid "A pool of addresses can be defined by using a hyphen between two IP addresses:" -msgstr "A pool of addresses can be defined by using a hyphen between two IP addresses:" +msgstr "Пул адрес можна визначити за допомогою дефіса між двома IP-адресами:" #: ../../configuration/firewall/ipv4.rst:508 #: ../../configuration/firewall/ipv6.rst:491 msgid "A port can be set with a port number or a name which is here defined: ``/etc/services``." -msgstr "A port can be set with a port number or a name which is here defined: ``/etc/services``." +msgstr "Порт можна встановити за допомогою номера порту або імені, визначеного тут: ``/etc/services``." #: ../../configuration/service/dns.rst:115 msgid "A query for which there is authoritatively no answer is cached to quickly deny a record's existence later on, without putting a heavy load on the remote server. In practice, caches can become saturated with hundreds of thousands of hosts which are tried only once." -msgstr "A query for which there is authoritatively no answer is cached to quickly deny a record's existence later on, without putting a heavy load on the remote server. In practice, caches can become saturated with hundreds of thousands of hosts which are tried only once." +msgstr "Запит, на який офіційно немає відповіді, кешується, щоб пізніше швидко заперечити існування запису, не створюючи великого навантаження на віддалений сервер. На практиці кеші можуть бути насичені сотнями тисяч хостів, які пробуються лише один раз." #: ../../configuration/vpn/dmvpn.rst:134 msgid "A received NHRP Traffic Indication will trigger the resolution and establishment of a shortcut route." -msgstr "A received NHRP Traffic Indication will trigger the resolution and establishment of a shortcut route." +msgstr "Отримана індикація дорожнього руху NHRP ініціює вирішення та встановлення скороченого маршруту." #: ../../configuration/vrf/index.rst:30 msgid "A routing table ID can not be modified once it is assigned. It can only be changed by deleting and re-adding the VRF instance." -msgstr "A routing table ID can not be modified once it is assigned. It can only be changed by deleting and re-adding the VRF instance." +msgstr "Ідентифікатор таблиці маршрутизації не можна змінити після його призначення. Його можна змінити, лише видаливши та повторно додавши екземпляр VRF." #: ../../configuration/firewall/general-legacy.rst:272 msgid "A rule-set is a named collection of firewall rules that can be applied to an interface or a zone. Each rule is numbered, has an action to apply if the rule is matched, and the ability to specify the criteria to match. Data packets go through the rules from 1 - 999999, at the first match the action of the rule will be executed." -msgstr "A rule-set is a named collection of firewall rules that can be applied to an interface or a zone. Each rule is numbered, has an action to apply if the rule is matched, and the ability to specify the criteria to match. Data packets go through the rules from 1 - 999999, at the first match the action of the rule will be executed." +msgstr "Набір правил — це іменована колекція правил брандмауера, які можна застосувати до інтерфейсу або зони. Кожне правило пронумеровано, має дію, яку слід застосувати, якщо правило збігається, і можливість вказати критерії відповідності. Пакети даних проходять правила від 1 до 999999, при першому збігу буде виконано дію правила." #: ../../configuration/policy/route.rst:12 msgid "A rule-set is a named collection of rules that can be applied to an interface. Each rule is numbered, has an action to apply if the rule is matched, and the ability to specify the criteria to match. Data packets go through the rules from 1 - 999999, at the first match the action of the rule will be executed." -msgstr "A rule-set is a named collection of rules that can be applied to an interface. Each rule is numbered, has an action to apply if the rule is matched, and the ability to specify the criteria to match. Data packets go through the rules from 1 - 999999, at the first match the action of the rule will be executed." +msgstr "Набір правил — це іменований набір правил, які можна застосувати до інтерфейсу. Кожне правило пронумеровано, має дію, яку слід застосувати, якщо правило збігається, і можливість вказати критерії відповідності. Пакети даних проходять правила від 1 до 999999, при першому збігу буде виконано дію правила." #: ../../configuration/loadbalancing/wan.rst:250 msgid "A script can be run when an interface state change occurs. Scripts are run from /config/scripts, for a different location specify the full path:" -msgstr "A script can be run when an interface state change occurs. Scripts are run from /config/scripts, for a different location specify the full path:" +msgstr "Сценарій можна запустити, коли відбувається зміна стану інтерфейсу. Сценарії запускаються з /config/scripts, для іншого розташування вкажіть повний шлях:" #: ../../configuration/protocols/segment-routing.rst:91 #: ../../configuration/protocols/segment-routing.rst:169 msgid "A segment ID that contains an IP address prefix calculated by an IGP in the service provider core network. Prefix SIDs are globally unique, this value indentify it" -msgstr "A segment ID that contains an IP address prefix calculated by an IGP in the service provider core network. Prefix SIDs are globally unique, this value indentify it" +msgstr "Ідентифікатор сегмента, який містить префікс IP-адреси, розрахований IGP у базовій мережі постачальника послуг. Префікс SID є глобально унікальним, це значення ідентифікує його" #: ../../_include/interface-disable-flow-control.txt:11 msgid "A sending station (computer or network switch) may be transmitting data faster than the other end of the link can accept it. Using flow control, the receiving station can signal the sender requesting suspension of transmissions until the receiver catches up." -msgstr "A sending station (computer or network switch) may be transmitting data faster than the other end of the link can accept it. Using flow control, the receiving station can signal the sender requesting suspension of transmissions until the receiver catches up." +msgstr "Станція-відправник (комп’ютер або мережевий комутатор) може передавати дані швидше, ніж інший кінець з’єднання може прийняти їх. Використовуючи керування потоком, станція-одержувач може сигналізувати відправнику, вимагаючи призупинення передачі, поки одержувач не наздожене." #: ../../configuration/service/dhcp-server.rst:648 msgid "A shared network named ``NET1`` serves subnet ``2001:db8::/64``" -msgstr "A shared network named ``NET1`` serves subnet ``2001:db8::/64``" +msgstr "Спільна мережа під назвою ``NET1`` обслуговує підмережу ``2001:db8::/64``" #: ../../configuration/protocols/bgp.rst:1168 msgid "A simple BGP configuration via IPv6." -msgstr "A simple BGP configuration via IPv6." +msgstr "Проста конфігурація BGP через IPv6." #: ../../configuration/trafficpolicy/index.rst:769 msgid "A simple Random Early Detection (RED) policy would start randomly dropping packets from a queue before it reaches its queue limit thus avoiding congestion. That is good for TCP connections as the gradual dropping of packets acts as a signal for the sender to decrease its transmission rate." -msgstr "A simple Random Early Detection (RED) policy would start randomly dropping packets from a queue before it reaches its queue limit thus avoiding congestion. That is good for TCP connections as the gradual dropping of packets acts as a signal for the sender to decrease its transmission rate." +msgstr "Проста політика випадкового раннього виявлення (RED) почне випадково відкидати пакети з черги до того, як вона досягне ліміту черги, таким чином уникаючи перевантаження. Це добре для TCP-з’єднань, оскільки поступове відкидання пакетів діє як сигнал для відправника щодо зниження швидкості передачі." #: ../../configuration/protocols/bgp.rst:1123 msgid "A simple eBGP configuration:" -msgstr "A simple eBGP configuration:" +msgstr "Проста конфігурація eBGP:" #: ../../configuration/trafficpolicy/index.rst:1124 msgid "A simple example of Shaper using priorities." -msgstr "A simple example of Shaper using priorities." +msgstr "Простий приклад Shaper з використанням пріоритетів." #: ../../configuration/trafficpolicy/index.rst:532 msgid "A simple example of an FQ-CoDel policy working inside a Shaper one." -msgstr "A simple example of an FQ-CoDel policy working inside a Shaper one." +msgstr "Простий приклад політики FQ-CoDel, що працює всередині політики Shaper." #: ../../configuration/firewall/index.rst:14 msgid "A simplified traffic flow, based on Netfilter packet flow, is shown next, in order to have a full view and understanding of how packets are processed, and what possible paths can take." @@ -1736,35 +1780,35 @@ msgstr "A simplified traffic flow diagram, based on Netfilter packet flow, is sh #: ../../configuration/nat/nat66.rst:28 msgid "A single internal network and external network. Use the NAT66 device to connect a single internal network and public network, and the hosts in the internal network use IPv6 address prefixes that only support routing within the local range. When a host in the internal network accesses the external network, the source IPv6 address prefix in the message will be converted into a global unicast IPv6 address prefix by the NAT66 device." -msgstr "A single internal network and external network. Use the NAT66 device to connect a single internal network and public network, and the hosts in the internal network use IPv6 address prefixes that only support routing within the local range. When a host in the internal network accesses the external network, the source IPv6 address prefix in the message will be converted into a global unicast IPv6 address prefix by the NAT66 device." +msgstr "Єдина внутрішня мережа і зовнішня мережа. Використовуйте пристрій NAT66 для підключення однієї внутрішньої мережі до загальнодоступної мережі, а хости у внутрішній мережі використовують префікси адрес IPv6, які підтримують маршрутизацію лише в межах локального діапазону. Коли хост у внутрішній мережі отримує доступ до зовнішньої мережі, префікс адреси джерела IPv6 у повідомленні буде перетворено пристроєм NAT66 на префікс глобальної одноадресної адреси IPv6." #: ../../configuration/interfaces/wireless.rst:19 msgid "A station acts as a Wi-Fi client accessing the network through an available WAP" -msgstr "A station acts as a Wi-Fi client accessing the network through an available WAP" +msgstr "Станція діє як клієнт Wi-Fi, який отримує доступ до мережі через доступний WAP" #: ../../configuration/highavailability/index.rst:110 msgid "A sync group allows VRRP groups to transition together." -msgstr "A sync group allows VRRP groups to transition together." +msgstr "Група синхронізації дозволяє групам VRRP переходити разом." #: ../../configuration/protocols/ospf.rst:1318 msgid "A typical configuration using 2 nodes." -msgstr "A typical configuration using 2 nodes." +msgstr "Типова конфігурація з використанням 2 вузлів." #: ../../configuration/nat/nat44.rst:414 msgid "A typical problem with using NAT and hosting public servers is the ability for internal systems to reach an internal server using it's external IP address. The solution to this is usually the use of split-DNS to correctly point host systems to the internal address when requests are made internally. Because many smaller networks lack DNS infrastructure, a work-around is commonly deployed to facilitate the traffic by NATing the request from internal hosts to the source address of the internal interface on the firewall." -msgstr "A typical problem with using NAT and hosting public servers is the ability for internal systems to reach an internal server using it's external IP address. The solution to this is usually the use of split-DNS to correctly point host systems to the internal address when requests are made internally. Because many smaller networks lack DNS infrastructure, a work-around is commonly deployed to facilitate the traffic by NATing the request from internal hosts to the source address of the internal interface on the firewall." +msgstr "Типовою проблемою використання NAT і розміщення загальнодоступних серверів є можливість внутрішніх систем отримати доступ до внутрішнього сервера за допомогою його зовнішньої IP-адреси. Рішенням цього зазвичай є використання split-DNS для правильного вказівки хост-систем на внутрішню адресу під час внутрішніх запитів. Оскільки в багатьох невеликих мережах відсутня інфраструктура DNS, для полегшення трафіку зазвичай розгортається обхідний шлях шляхом NAT-перетворення запиту від внутрішніх хостів на адресу джерела внутрішнього інтерфейсу на брандмауері." #: ../../configuration/service/console-server.rst:40 msgid "A user friendly alias for this connection. Can be used instead of the device name when connecting." -msgstr "A user friendly alias for this connection. Can be used instead of the device name when connecting." +msgstr "Зручний псевдонім для цього підключення. Може використовуватися замість назви пристрою під час підключення." #: ../../configuration/service/console-server.rst:36 msgid "A user friendly description identifying the connected peripheral." -msgstr "A user friendly description identifying the connected peripheral." +msgstr "Зручний опис підключеного периферійного пристрою." #: ../../configuration/interfaces/bonding.rst:260 msgid "A value of 0 disables ARP monitoring. The default value is 0." -msgstr "A value of 0 disables ARP monitoring. The default value is 0." +msgstr "Значення 0 вимикає моніторинг ARP. Значення за замовчуванням 0." #: ../../configuration/interfaces/pppoe.rst:152 msgid "A value of 296 works well on very slow links (40 bytes for TCP/IP header + 256 bytes of data)." @@ -1772,11 +1816,11 @@ msgstr "A value of 296 works well on very slow links (40 bytes for TCP/IP header #: ../../configuration/trafficpolicy/index.rst:943 msgid "A very small buffer will soon start dropping packets." -msgstr "A very small buffer will soon start dropping packets." +msgstr "Дуже маленький буфер незабаром почне скидати пакети." #: ../../configuration/firewall/zone.rst:52 msgid "A zone must be configured before an interface is assigned to it and an interface can be assigned to only a single zone." -msgstr "A zone must be configured before an interface is assigned to it and an interface can be assigned to only a single zone." +msgstr "Зону необхідно налаштувати перед тим, як їй призначити інтерфейс, а інтерфейс можна призначити лише одній зоні." #: ../../configuration/service/dns.rst:411 msgid "Above, command syntax isn noted to configure dynamic dns on a specific interface. It is possible to overlook the additional address option, web, when completeing those commands. ddclient_ has another way to determine the WAN IP address, using a web-based url to determine the external IP. Each of the commands above will need to be modified to use 'web' as the 'interface' specified if this functionality is to be utilized." @@ -1784,19 +1828,19 @@ msgstr "Above, command syntax isn noted to configure dynamic dns on a specific i #: ../../configuration/vpn/l2tp.rst:173 msgid "Above command will use `10.0.0.3` as source IPv4 address for all RADIUS queries on this NAS." -msgstr "Above command will use `10.0.0.3` as source IPv4 address for all RADIUS queries on this NAS." +msgstr "Наведена вище команда використовуватиме `10.0.0.3` як вихідну адресу IPv4 для всіх запитів RADIUS на цьому NAS." #: ../../configuration/system/acceleration.rst:5 msgid "Acceleration" -msgstr "Acceleration" +msgstr "Прискорення" #: ../../configuration/service/console-server.rst:68 msgid "Accept SSH connections for the given `` on TCP port ``. After successfull authentication the user will be directly dropped to the connected serial device." -msgstr "Accept SSH connections for the given `` on TCP port ``. After successfull authentication the user will be directly dropped to the connected serial device." +msgstr "Приймати підключення SSH для вказаного ` `на порт TCP` `. Після успішної автентифікації користувача буде безпосередньо перекинуто на підключений послідовний пристрій." #: ../../configuration/service/conntrack-sync.rst:42 msgid "Accept only certain protocols: You may want to replicate the state of flows depending on their layer 4 protocol." -msgstr "Accept only certain protocols: You may want to replicate the state of flows depending on their layer 4 protocol." +msgstr "Приймати лише певні протоколи: ви можете відтворити стан потоків залежно від протоколу рівня 4." #: ../../configuration/service/pppoe-server.rst:384 #: ../../configuration/vpn/l2tp.rst:328 @@ -1815,94 +1859,94 @@ msgstr "Acceptable rate of connections (e.g. 1/min, 60/sec)" #: ../../configuration/policy/access-list.rst:3 msgid "Access List Policy" -msgstr "Access List Policy" +msgstr "Політика списку доступу" #: ../../configuration/policy/access-list.rst:16 msgid "Access Lists" -msgstr "Access Lists" +msgstr "Списки доступу" #: ../../configuration/system/syslog.rst:173 msgid "Action must be taken immediately - A condition that should be corrected immediately, such as a corrupted system database." -msgstr "Action must be taken immediately - A condition that should be corrected immediately, such as a corrupted system database." +msgstr "Необхідно негайно вжити заходів. Стан, який слід негайно виправити, наприклад, пошкоджена системна база даних." #: ../../configuration/system/option.rst:15 msgid "Action which will be run once the ctrl-alt-del keystroke is received." -msgstr "Action which will be run once the ctrl-alt-del keystroke is received." +msgstr "Дія, яка буде виконана після отримання клавіші ctrl-alt-del." #: ../../configuration/firewall/bridge.rst:65 #: ../../configuration/firewall/ipv4.rst:81 #: ../../configuration/firewall/ipv6.rst:81 #: ../../configuration/policy/route.rst:238 msgid "Actions" -msgstr "Actions" +msgstr "Дії" #: ../../configuration/interfaces/openvpn.rst:483 msgid "Active Directory" -msgstr "Active Directory" +msgstr "Активна Директорія" #: ../../configuration/loadbalancing/reverse-proxy.rst:135 msgid "Active health check backend server" -msgstr "Active health check backend server" +msgstr "Сервер активної перевірки справності" #: ../../configuration/service/dns.rst:45 msgid "Add NTA (negative trust anchor) for this domain. This must be set if the domain does not support DNSSEC." -msgstr "Add NTA (negative trust anchor) for this domain. This must be set if the domain does not support DNSSEC." +msgstr "Додайте NTA (негативний якір довіри) для цього домену. Це потрібно встановити, якщо домен не підтримує DNSSEC." #: ../../configuration/interfaces/wireless.rst:105 msgid "Add Power Constraint element to Beacon and Probe Response frames." -msgstr "Add Power Constraint element to Beacon and Probe Response frames." +msgstr "Додайте елемент Power Constraint до кадрів Beacon і Probe Response." #: ../../configuration/interfaces/l2tpv3.rst:113 msgid "Add a forwarding rule matching UDP port on your internet router." -msgstr "Add a forwarding rule matching UDP port on your internet router." +msgstr "Додайте правило переадресації, що відповідає порту UDP на вашому інтернет-маршрутизаторі." #: ../../configuration/container/index.rst:118 msgid "Add a host device to the container." -msgstr "Add a host device to the container." +msgstr "Додайте хост-пристрій до контейнера." #: ../../configuration/service/ssh.rst:84 msgid "Add access-control directive to allow or deny users and groups. Directives are processed in the following order of precedence: ``deny-users``, ``allow-users``, ``deny-groups`` and ``allow-groups``." -msgstr "Add access-control directive to allow or deny users and groups. Directives are processed in the following order of precedence: ``deny-users``, ``allow-users``, ``deny-groups`` and ``allow-groups``." +msgstr "Додайте директиву керування доступом, щоб дозволити або заборонити користувачам і групам. Директиви обробляються в такому порядку пріоритету: ``deny-users``, ``allow-users``, ``deny-groups`` і ``allow-groups``." #: ../../configuration/container/index.rst:58 msgid "Add custom environment variables. Multiple environment variables are allowed. The following commands translate to \"-e key=value\" when the container is created." -msgstr "Add custom environment variables. Multiple environment variables are allowed. The following commands translate to \"-e key=value\" when the container is created." +msgstr "Додайте спеціальні змінні середовища. Дозволено кілька змінних середовища. Наступні команди перетворюються на "-e ключ=значення" під час створення контейнера." #: ../../configuration/policy/examples.rst:109 msgid "Add default routes for routing ``table 10`` and ``table 11``" -msgstr "Add default routes for routing ``table 10`` and ``table 11``" +msgstr "Додати маршрути за замовчуванням для маршрутизації ``table 10`` і ``table 11``" #: ../../configuration/policy/examples.rst:176 msgid "Add multiple source IP in one rule with same priority" -msgstr "Add multiple source IP in one rule with same priority" +msgstr "Додайте кілька вихідних IP-адрес в одне правило з однаковим пріоритетом" #: ../../configuration/service/webproxy.rst:147 msgid "Add new port to SSL-ports acl. Ports included by default in SSL-ports acl: 443" -msgstr "Add new port to SSL-ports acl. Ports included by default in SSL-ports acl: 443" +msgstr "Додати новий порт до SSL-портів acl. Порти, включені за замовчуванням у SSL-порти acl: 443" #: ../../configuration/service/webproxy.rst:142 msgid "Add new port to Safe-ports acl. Ports included by default in Safe-ports acl: 21, 70, 80, 210, 280, 443, 488, 591, 777, 873, 1025-65535" -msgstr "Add new port to Safe-ports acl. Ports included by default in Safe-ports acl: 21, 70, 80, 210, 280, 443, 488, 591, 777, 873, 1025-65535" +msgstr "Додати новий порт до Safe-ports acl. Порти, включені за замовчуванням у Safe-ports acl: 21, 70, 80, 210, 280, 443, 488, 591, 777, 873, 1025-65535" #: ../../configuration/policy/route-map.rst:224 msgid "Add or replace BGP community attribute in format ``<0-65535:0-65535>`` or from well-known community list" -msgstr "Add or replace BGP community attribute in format ``<0-65535:0-65535>`` or from well-known community list" +msgstr "Додайте або замініть атрибут спільноти BGP у форматі ``<0-65535:0-65535>`` або зі списку загальновідомої спільноти" #: ../../configuration/policy/route-map.rst:239 msgid "Add or replace BGP large-community attribute in format ``<0-4294967295:0-4294967295:0-4294967295>``" -msgstr "Add or replace BGP large-community attribute in format ``<0-4294967295:0-4294967295:0-4294967295>``" +msgstr "Додайте або замініть атрибут великої спільноти BGP у форматі ``<0-4294967295:0-4294967295:0-4294967295>``" #: ../../configuration/policy/examples.rst:116 msgid "Add policy route matching VLAN source addresses" -msgstr "Add policy route matching VLAN source addresses" +msgstr "Додайте маршрут політики, що відповідає адресам джерел VLAN" #: ../../configuration/pki/index.rst:219 msgid "Add public key portion for the certificate named `name` to the VyOS CLI." -msgstr "Add public key portion for the certificate named `name` to the VyOS CLI." +msgstr "Додайте частину відкритого ключа для сертифіката під назвою `name` до VyOS CLI." #: ../../configuration/pki/index.rst:195 msgid "Add the CAs private key to the VyOS CLI. This should never leave the system, and is only required if you use VyOS as your certificate generator as mentioned above." -msgstr "Add the CAs private key to the VyOS CLI. This should never leave the system, and is only required if you use VyOS as your certificate generator as mentioned above." +msgstr "Додайте приватний ключ ЦС до VyOS CLI. Це ніколи не повинно залишати систему, і це потрібно лише якщо ви використовуєте VyOS як генератор сертифікатів, як зазначено вище." #: ../../configuration/vpn/remoteaccess_ipsec.rst:163 msgid "Add the commands from Snippet in the Windows side via PowerShell. Also import the root CA cert to the Windows “Trusted Root Certification Authorities” and establish the connection." @@ -1910,63 +1954,63 @@ msgstr "Add the commands from Snippet in the Windows side via PowerShell. Also i #: ../../configuration/pki/index.rst:234 msgid "Add the private key portion of this certificate to the CLI. This should never leave the system as it is used to decrypt the data." -msgstr "Add the private key portion of this certificate to the CLI. This should never leave the system as it is used to decrypt the data." +msgstr "Додайте частину приватного ключа цього сертифіката до CLI. Це ніколи не повинно залишати систему, оскільки воно використовується для розшифровки даних." #: ../../configuration/pki/index.rst:176 msgid "Add the public CA certificate for the CA named `name` to the VyOS CLI." -msgstr "Add the public CA certificate for the CA named `name` to the VyOS CLI." +msgstr "Додайте загальнодоступний сертифікат ЦС для ЦС під назвою `name` до VyOS CLI." #: ../../configuration/vpn/openconnect.rst:176 msgid "Adding a 2FA with an OTP-key" -msgstr "Adding a 2FA with an OTP-key" +msgstr "Додавання 2FA з OTP-ключем" -#: ../../configuration/loadbalancing/reverse-proxy.rst:260 +#: ../../configuration/loadbalancing/reverse-proxy.rst:263 msgid "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." -msgstr "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." +msgstr "Встановлюються додаткові глобальні параметри, включаючи обмеження на максимальну кількість з’єднань у 4000 і мінімальну версію TLS 1.3." #: ../../configuration/service/tftp-server.rst:35 msgid "Additional option to run TFTP server in the :abbr:`VRF (Virtual Routing and Forwarding)` context" -msgstr "Additional option to run TFTP server in the :abbr:`VRF (Virtual Routing and Forwarding)` context" +msgstr "Додаткова опція запуску TFTP-сервера в контексті :abbr:`VRF (віртуальна маршрутизація та переадресація)`" #: ../../configuration/interfaces/openvpn.rst:415 msgid "Additionally, each client needs a copy of ca cert and its own client key and cert files. The files are plaintext so they may be copied either manually from the CLI. Client key and cert files should be signed with the proper ca cert and generated on the server side." -msgstr "Additionally, each client needs a copy of ca cert and its own client key and cert files. The files are plaintext so they may be copied either manually from the CLI. Client key and cert files should be signed with the proper ca cert and generated on the server side." +msgstr "Крім того, кожному клієнту потрібна копія ca cert і власний ключ клієнта та файли сертифікатів. Файли є відкритими, тому їх можна скопіювати вручну з CLI. Файли ключів клієнта та сертифікатів мають бути підписані належним сертифікатом ca та згенеровані на стороні сервера." #: ../../configuration/nat/nat44.rst:760 msgid "Additionally, we want to use VPNs only on our eth1 interface (the external interface in the image above)" -msgstr "Additionally, we want to use VPNs only on our eth1 interface (the external interface in the image above)" +msgstr "Крім того, ми хочемо використовувати VPN лише на нашому інтерфейсі eth1 (зовнішній інтерфейс на зображенні вище)" #: ../../configuration/protocols/bgp.rst:296 msgid "Additionally you should keep in mind that this feature fundamentally disables the ability to use widely deployed BGP features. BGP unnumbered, hostname support, AS4, Addpath, Route Refresh, ORF, Dynamic Capabilities, and graceful restart." -msgstr "Additionally you should keep in mind that this feature fundamentally disables the ability to use widely deployed BGP features. BGP unnumbered, hostname support, AS4, Addpath, Route Refresh, ORF, Dynamic Capabilities, and graceful restart." +msgstr "Крім того, ви повинні мати на увазі, що ця функція принципово вимикає можливість використання широко розгорнутих функцій BGP. Ненумерований BGP, підтримка імен хостів, AS4, Addpath, оновлення маршруту, ORF, динамічні можливості та плавний перезапуск." #: ../../configuration/highavailability/index.rst:59 msgid "Address" -msgstr "Address" +msgstr "Адреса" #: ../../configuration/nat/nat44.rst:231 msgid "Address Conversion" -msgstr "Address Conversion" +msgstr "Перетворення адрес" #: ../../configuration/protocols/bgp.rst:48 msgid "Address Families" -msgstr "Address Families" +msgstr "Адреса сімей" #: ../../configuration/firewall/groups.rst:19 msgid "Address Groups" -msgstr "Address Groups" +msgstr "Групи адрес" #: ../../configuration/service/dhcp-server.rst:651 msgid "Address pool shall be ``2001:db8::100`` through ``2001:db8::199``." -msgstr "Address pool shall be ``2001:db8::100`` through ``2001:db8::199``." +msgstr "Пул адрес має бути від ``2001:db8::100`` до ``2001:db8::199``." #: ../../configuration/service/dhcp-server.rst:641 msgid "Address pools" -msgstr "Address pools" +msgstr "Пули адрес" #: ../../configuration/service/https.rst:33 msgid "Address to listen for HTTPS requests" -msgstr "Address to listen for HTTPS requests" +msgstr "Адреса для прослуховування запитів HTTPS" #: ../../configuration/container/index.rst:160 msgid "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, VyOS will use docker.io and quay.io as the container registry." @@ -1974,11 +2018,11 @@ msgstr "Adds registry to list of unqualified-search-registries. By default, for #: ../../configuration/container/index.rst:141 msgid "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, Vyos will use docker.io as the container registry." -msgstr "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, Vyos will use docker.io as the container registry." +msgstr "Додає реєстр до списку реєстрів некваліфікованого пошуку. За замовчуванням для будь-якого зображення, яке не містить реєстру в назві зображення, Vyos використовуватиме docker.io як реєстр контейнера." #: ../../configuration/protocols/bgp.rst:669 msgid "Administrative Distance" -msgstr "Administrative Distance" +msgstr "Адміністративна відстань" #: ../../configuration/service/ipoe-server.rst:335 msgid "Advanced Interface Options" @@ -1998,11 +2042,11 @@ msgstr "Advanced configuration can be used in order to apply source or destinati #: ../../configuration/interfaces/openvpn.rst:16 msgid "Advantages of OpenVPN are:" -msgstr "Advantages of OpenVPN are:" +msgstr "Перевагами OpenVPN є:" #: ../../configuration/service/router-advert.rst:1 msgid "Advertise DNS server per https://tools.ietf.org/html/rfc6106" -msgstr "Advertise DNS server per https://tools.ietf.org/html/rfc6106" +msgstr "Оголошуйте DNS-сервер за https://tools.ietf.org/html/rfc6106" #: ../../configuration/service/router-advert.rst:78 msgid "Advertising a NAT64 Prefix" @@ -2010,15 +2054,15 @@ msgstr "Advertising a NAT64 Prefix" #: ../../configuration/service/router-advert.rst:54 msgid "Advertising a Prefix" -msgstr "Advertising a Prefix" +msgstr "Реклама Префікс" #: ../../configuration/service/snmp.rst:165 msgid "After commit the plaintext passwords will be hashed and stored in your configuration. The resulting CLI config will look like:" -msgstr "After commit the plaintext passwords will be hashed and stored in your configuration. The resulting CLI config will look like:" +msgstr "Після фіксації паролі відкритого тексту будуть хешовані та збережені у вашій конфігурації. Отримана конфігурація CLI виглядатиме так:" #: ../../configuration/vrf/index.rst:344 msgid "After committing the configuration we can verify all leaked routes are installed, and try to ICMP ping PC1 from PC3." -msgstr "After committing the configuration we can verify all leaked routes are installed, and try to ICMP ping PC1 from PC3." +msgstr "Після фіксації конфігурації ми можемо перевірити, чи встановлено всі виточені маршрути, і спробувати ICMP пінгувати PC1 з PC3." #: ../../configuration/vpn/remoteaccess_ipsec.rst:80 msgid "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this example are validated to work on Windows 10." @@ -2030,7 +2074,7 @@ msgstr "After the PKI certs are all set up we can start configuring our IPSec/IK #: ../../configuration/pki/index.rst:214 msgid "After we have imported the CA certificate(s) we can now import and add certificates used by services on this router." -msgstr "After we have imported the CA certificate(s) we can now import and add certificates used by services on this router." +msgstr "Після того, як ми імпортували сертифікат(и) ЦС, тепер ми можемо імпортувати та додавати сертифікати, які використовуються службами на цьому маршрутизаторі." #: ../../configuration/vpn/ipsec.rst:399 msgid "After you obtained your server certificate you can import it from a file on the local filesystem, or paste it into the CLI. Please note that when entering the certificate manually you need to strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate or key needs to be presented in a single line without line breaks (``\\n``)." @@ -2038,55 +2082,55 @@ msgstr "After you obtained your server certificate you can import it from a file #: ../../configuration/service/snmp.rst:39 msgid "Agent - software which runs on managed devices" -msgstr "Agent - software which runs on managed devices" +msgstr "Агент - програмне забезпечення, яке працює на керованих пристроях" #: ../../configuration/system/syslog.rst:173 msgid "Alert" -msgstr "Alert" +msgstr "Попередження" #: ../../configuration/highavailability/index.rst:356 msgid "Algorithm" -msgstr "Algorithm" +msgstr "Алгоритм" #: ../../configuration/system/host-name.rst:13 msgid "Aliases" -msgstr "Aliases" +msgstr "Псевдоніми" -#: ../../configuration/service/dns.rst:154 +#: ../../configuration/service/dns.rst:248 msgid "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" -msgstr "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" +msgstr "Усі DNS-запити для example.com мають бути направлені на DNS-сервер за адресою 192.0.2.254 і 2001:db8:cafe::1" #: ../../configuration/service/snmp.rst:204 msgid "All SNMP MIBs are located in each image of VyOS here: ``/usr/share/snmp/mibs/``" -msgstr "All SNMP MIBs are located in each image of VyOS here: ``/usr/share/snmp/mibs/``" +msgstr "Усі SNMP MIB розташовані в кожному образі VyOS тут: ``/usr/share/snmp/mibs/``" #: ../../configuration/interfaces/wwan.rst:323 msgid "All available WWAN cards have a build in, reprogrammable firmware. Most of the vendors provide a regular update to the firmware used in the baseband chip." -msgstr "All available WWAN cards have a build in, reprogrammable firmware. Most of the vendors provide a regular update to the firmware used in the baseband chip." +msgstr "Усі доступні карти WWAN мають вбудовану мікропрограму з можливістю перепрограмування. Більшість постачальників регулярно оновлюють мікропрограму, яка використовується в чіпі базової смуги." #: ../../configuration/vpn/sstp.rst:22 msgid "All certificates should be stored on VyOS under ``/config/auth``. If certificates are not stored in the ``/config`` directory they will not be migrated during a software update." -msgstr "All certificates should be stored on VyOS under ``/config/auth``. If certificates are not stored in the ``/config`` directory they will not be migrated during a software update." +msgstr "Усі сертифікати мають зберігатися у VyOS у папці ``/config/auth``. Якщо сертифікати не зберігаються в каталозі ``/config``, їх не буде перенесено під час оновлення програмного забезпечення." #: ../../configuration/system/syslog.rst:110 msgid "All facilities" -msgstr "All facilities" +msgstr "Всі зручності" #: ../../configuration/service/dhcp-relay.rst:11 msgid "All interfaces used for the DHCP relay must be configured. This includes the uplink to the DHCP server." -msgstr "All interfaces used for the DHCP relay must be configured. This includes the uplink to the DHCP server." +msgstr "Необхідно налаштувати всі інтерфейси, які використовуються для ретрансляції DHCP. Це включає висхідне з’єднання з сервером DHCP." #: ../../configuration/highavailability/index.rst:142 msgid "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." -msgstr "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." +msgstr "Усі елементи в групі синхронізації мають бути однаково налаштовані. Якщо для однієї групи VRRP встановлено іншу затримку або пріоритет випередження, це призведе до нескінченного циклу переходу." -#: ../../configuration/service/dns.rst:156 +#: ../../configuration/service/dns.rst:250 msgid "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" -msgstr "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" +msgstr "Усі інші DNS-запити будуть перенаправлені на інший набір DNS-серверів за адресами 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff і 2001:db8::2:ffff" #: ../../configuration/service/webproxy.rst:134 msgid "All reply sizes are accepted by default." -msgstr "All reply sizes are accepted by default." +msgstr "Усі розміри відповідей приймаються за замовчуванням." #: ../../configuration/protocols/pim.rst:91 msgid "All routers in the PIM network must agree on these values." @@ -2094,27 +2138,27 @@ msgstr "All routers in the PIM network must agree on these values." #: ../../configuration/system/task-scheduler.rst:10 msgid "All scripts excecuted this way are executed as root user - this may be dangerous. Together with :ref:`command-scripting` this can be used for automating (re-)configuration." -msgstr "All scripts excecuted this way are executed as root user - this may be dangerous. Together with :ref:`command-scripting` this can be used for automating (re-)configuration." +msgstr "Усі сценарії, які виконуються таким чином, виконуються від імені користувача root - це може бути небезпечно. Разом із :ref:`command-scripting` це можна використовувати для автоматизації (повторної) конфігурації." #: ../../configuration/protocols/bgp.rst:241 msgid "All these rules with OTC will help to detect and mitigate route leaks and happen automatically if local-role is set." -msgstr "All these rules with OTC will help to detect and mitigate route leaks and happen automatically if local-role is set." +msgstr "Усі ці правила з OTC допоможуть виявити та пом’якшити витоки маршрутів і відбуватимуться автоматично, якщо встановлено локальну роль." #: ../../configuration/interfaces/tunnel.rst:15 msgid "All those protocols are grouped under ``interfaces tunnel`` in VyOS. Let's take a closer look at the protocols and options currently supported by VyOS." -msgstr "All those protocols are grouped under ``interfaces tunnel`` in VyOS. Let's take a closer look at the protocols and options currently supported by VyOS." +msgstr "Усі ці протоколи згруповані в ``інтерфейсний тунель`` у VyOS. Давайте детальніше розглянемо протоколи та параметри, які зараз підтримуються VyOS." #: ../../configuration/firewall/zone.rst:55 msgid "All traffic between zones is affected by existing policies" -msgstr "All traffic between zones is affected by existing policies" +msgstr "На весь трафік між зонами впливають існуючі політики" #: ../../configuration/firewall/zone.rst:54 msgid "All traffic to and from an interface within a zone is permitted." -msgstr "All traffic to and from an interface within a zone is permitted." +msgstr "Весь трафік до і від інтерфейсу в межах зони дозволений." #: ../../configuration/vpn/pptp.rst:45 msgid "All tunnel sessions can be checked via:" -msgstr "All tunnel sessions can be checked via:" +msgstr "Усі сеанси тунелю можна перевірити за допомогою:" #: ../../configuration/service/ipoe-server.rst:231 #: ../../configuration/service/pppoe-server.rst:193 @@ -2122,27 +2166,27 @@ msgstr "All tunnel sessions can be checked via:" #: ../../configuration/vpn/pptp.rst:176 #: ../../configuration/vpn/sstp.rst:209 msgid "Allocation clients ip addresses by RADIUS" -msgstr "Allocation clients ip addresses by RADIUS" +msgstr "Розподіл ip-адрес клієнтів за RADIUS" #: ../../configuration/service/ssh.rst:121 msgid "Allow ``ssh`` dynamic-protection." -msgstr "Allow ``ssh`` dynamic-protection." +msgstr "Дозволити динамічний захист ``ssh``." #: ../../configuration/service/webproxy.rst:70 msgid "Allow access to sites in a domain without retrieving them from the Proxy cache. Specifying \"vyos.net\" will allow access to vyos.net but the pages accessed will not be cached. It useful for working around problems with \"If-Modified-Since\" checking at certain sites." -msgstr "Allow access to sites in a domain without retrieving them from the Proxy cache. Specifying \"vyos.net\" will allow access to vyos.net but the pages accessed will not be cached. It useful for working around problems with \"If-Modified-Since\" checking at certain sites." +msgstr "Дозволити доступ до сайтів у домені без отримання їх із кешу проксі. Якщо вказати "vyos.net", ви зможете отримати доступ до vyos.net, але сторінки, до яких ви отримали доступ, не будуть кешовані. Це корисно для вирішення проблем із перевіркою «If-Modified-Since» на певних сайтах." #: ../../configuration/protocols/bgp.rst:274 msgid "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." -msgstr "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." +msgstr "Дозволити bgp узгоджувати можливості extended-nexthop зі своїм партнером. Якщо ви переглядаєте локальну адресу IPv6 Link-Local, ця можливість вмикається автоматично. Якщо ви переглядаєте через глобальну адресу IPv6, увімкнення цієї команди дозволить BGP інсталювати маршрути IPv4 із IPv6 nexthops, якщо IPv4 не налаштовано на інтерфейсах." -#: ../../configuration/service/dns.rst:362 +#: ../../configuration/service/dns.rst:456 msgid "Allow explicit IPv6 address for the interface." -msgstr "Allow explicit IPv6 address for the interface." +msgstr "Дозволити явну адресу IPv6 для інтерфейсу." #: ../../configuration/container/index.rst:32 msgid "Allow host networking in a container. The network stack of the container is not isolated from the host and will use the host IP." -msgstr "Allow host networking in a container. The network stack of the container is not isolated from the host and will use the host IP." +msgstr "Дозволити підключення до мережі в контейнері. Мережевий стек контейнера не ізольований від хоста та використовуватиме IP-адресу хоста." #: ../../configuration/service/mdns.rst:43 msgid "Allow listing additional custom domains to be browsed (in addition to the default ``local``) so that they can be reflected." @@ -2150,11 +2194,11 @@ msgstr "Allow listing additional custom domains to be browsed (in addition to th #: ../../configuration/protocols/bfd.rst:34 msgid "Allow this BFD peer to not be directly connected" -msgstr "Allow this BFD peer to not be directly connected" +msgstr "Дозволити цьому вузлу BFD не підключатися безпосередньо" #: ../../configuration/firewall/general-legacy.rst:694 msgid "Allowed values fpr TCP flags: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` When specifying more than one flag, flags should be comma separated. The ``!`` negate the selected protocol." -msgstr "Allowed values fpr TCP flags: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` When specifying more than one flag, flags should be comma separated. The ``!`` negate the selected protocol." +msgstr "Дозволені значення fpr прапорів TCP: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` При вказівці більше ніж один прапор, прапори слід розділяти комами. ``!`` скасовує вибраний протокол." #: ../../configuration/firewall/ipv4.rst:835 #: ../../configuration/firewall/ipv6.rst:821 @@ -2164,23 +2208,23 @@ msgstr "Allowed values fpr TCP flags: ``ack``, ``cwr``, ``ecn``, ``fin``, ``psh` #: ../../configuration/interfaces/bridge.rst:171 msgid "Allows specific VLAN IDs to pass through the bridge member interface. This can either be an individual VLAN id or a range of VLAN ids delimited by a hyphen." -msgstr "Allows specific VLAN IDs to pass through the bridge member interface. This can either be an individual VLAN id or a range of VLAN ids delimited by a hyphen." +msgstr "Дозволяє певним ідентифікаторам VLAN проходити через інтерфейс члена моста. Це може бути окремий ідентифікатор VLAN або діапазон ідентифікаторів VLAN, розділених дефісом." #: ../../configuration/loadbalancing/reverse-proxy.rst:73 msgid "Allows to define URL path matching rules for a specific service." -msgstr "Allows to define URL path matching rules for a specific service." +msgstr "Дозволяє визначати правила відповідності URL-шляху для певної служби." #: ../../configuration/protocols/static.rst:92 msgid "Allows you to configure the next-hop interface for an interface-based IPv4 static route. `` will be the next-hop interface where traffic is routed for the given ``." -msgstr "Allows you to configure the next-hop interface for an interface-based IPv4 static route. `` will be the next-hop interface where traffic is routed for the given ``." +msgstr "Дозволяє налаштувати інтерфейс наступного переходу для статичного маршруту IPv4 на основі інтерфейсу. ` ` буде інтерфейсом наступного стрибка, куди маршрутизується трафік для даного ` `." #: ../../configuration/protocols/static.rst:112 msgid "Allows you to configure the next-hop interface for an interface-based IPv6 static route. `` will be the next-hop interface where traffic is routed for the given ``." -msgstr "Allows you to configure the next-hop interface for an interface-based IPv6 static route. `` will be the next-hop interface where traffic is routed for the given ``." +msgstr "Дозволяє налаштувати наступний інтерфейс для статичного маршруту IPv6 на основі інтерфейсу. ` ` буде інтерфейсом наступного стрибка, куди маршрутизується трафік для даного ` `." #: ../../configuration/service/ssh.rst:157 msgid "Already learned known_hosts files of clients need an update as the public key will change." -msgstr "Already learned known_hosts files of clients need an update as the public key will change." +msgstr "Вже вивчені файли unknown_hosts клієнтів потребують оновлення, оскільки відкритий ключ зміниться." #: ../../configuration/firewall/bridge.rst:123 #: ../../configuration/firewall/ipv4.rst:166 @@ -2190,7 +2234,7 @@ msgstr "Also, **default-action** is an action that takes place whenever a packet #: ../../configuration/service/dhcp-relay.rst:110 msgid "Also, for backwards compatibility this configuration, which uses generic interface definition, is still valid:" -msgstr "Also, for backwards compatibility this configuration, which uses generic interface definition, is still valid:" +msgstr "Крім того, для зворотної сумісності ця конфігурація, яка використовує загальне визначення інтерфейсу, все ще дійсна:" #: ../../configuration/firewall/index.rst:15 msgid "Also, for those who haven't updated to newer version, legacy documentation is still present and valid for all sagitta version prior to VyOS 1.4-rolling-202308040557:" @@ -2198,23 +2242,23 @@ msgstr "Also, for those who haven't updated to newer version, legacy documentati #: ../../configuration/nat/nat44.rst:288 msgid "Also, in :ref:`destination-nat`, redirection to localhost is supported. The redirect statement is a special form of dnat which always translates the destination address to the local host’s one." -msgstr "Also, in :ref:`destination-nat`, redirection to localhost is supported. The redirect statement is a special form of dnat which always translates the destination address to the local host’s one." +msgstr "Також у :ref:`destination-nat` підтримується переспрямування на локальний хост. Оператор перенаправлення — це спеціальна форма Dnat, яка завжди перетворює адресу призначення на адресу локального хоста." #: ../../configuration/protocols/static.rst:171 msgid "Alternate Routing Tables" -msgstr "Alternate Routing Tables" +msgstr "Альтернативні таблиці маршрутизації" #: ../../configuration/protocols/static.rst:175 msgid "Alternate routing tables are used with policy based routing by utilizing :ref:`vrf`." -msgstr "Alternate routing tables are used with policy based routing by utilizing :ref:`vrf`." +msgstr "Альтернативні таблиці маршрутизації використовуються з маршрутизацією на основі політики за допомогою :ref:`vrf`." #: ../../configuration/interfaces/vxlan.rst:342 msgid "Alternative to multicast, the remote IPv4 address of the VXLAN tunnel can be set directly. Let's change the Multicast example from above:" -msgstr "Alternative to multicast, the remote IPv4 address of the VXLAN tunnel can be set directly. Let's change the Multicast example from above:" +msgstr "Як альтернатива груповій розсилці, віддалену IPv4-адресу тунелю VXLAN можна встановити безпосередньо. Давайте змінимо приклад Multicast вище:" #: ../../configuration/service/dhcp-server.rst:132 msgid "Always exclude this address from any defined range. This address will never be assigned by the DHCP server." -msgstr "Always exclude this address from any defined range. This address will never be assigned by the DHCP server." +msgstr "Завжди виключайте цю адресу з будь-якого визначеного діапазону. Ця адреса ніколи не буде призначена сервером DHCP." #: ../../configuration/firewall/groups.rst:68 msgid "An **interface group** represents a collection of interfaces." @@ -2222,43 +2266,43 @@ msgstr "An **interface group** represents a collection of interfaces." #: ../../configuration/protocols/bgp.rst:26 msgid "An AS is a connected group of one or more IP prefixes run by one or more network operators which has a SINGLE and CLEARLY DEFINED routing policy." -msgstr "An AS is a connected group of one or more IP prefixes run by one or more network operators which has a SINGLE and CLEARLY DEFINED routing policy." +msgstr "AS — це пов’язана група з одного або кількох IP-префіксів, керованих одним або декількома мережевими операторами, які мають ЄДИНУ та ЧІТКО ВИЗНАЧЕНУ політику маршрутизації." #: ../../configuration/trafficpolicy/index.rst:208 msgid "An IPv4 TCP filter will only match packets with an IPv4 header length of 20 bytes (which is the majority of IPv4 packets anyway)." -msgstr "An IPv4 TCP filter will only match packets with an IPv4 header length of 20 bytes (which is the majority of IPv4 packets anyway)." +msgstr "TCP-фільтр IPv4 зіставлятиме лише пакети з довжиною заголовка IPv4 20 байтів (що в будь-якому випадку становить більшість пакетів IPv4)." #: ../../configuration/service/snmp.rst:36 msgid "An SNMP-managed network consists of three key components:" -msgstr "An SNMP-managed network consists of three key components:" +msgstr "Мережа, керована SNMP, складається з трьох ключових компонентів:" #: ../../configuration/interfaces/bonding.rst:234 msgid "An `` specifying which slave is the primary device. The specified device will always be the active slave while it is available. Only when the primary is off-line will alternate devices be used. This is useful when one slave is preferred over another, e.g., when one slave has higher throughput than another." -msgstr "An `` specifying which slave is the primary device. The specified device will always be the active slave while it is available. Only when the primary is off-line will alternate devices be used. This is useful when one slave is preferred over another, e.g., when one slave has higher throughput than another." +msgstr "An ` ` вказуючи, який підлеглий пристрій є основним. Зазначений пристрій завжди буде активним веденим, поки він доступний. Альтернативні пристрої використовуватимуться лише тоді, коли основний не працює. Це корисно, коли одному підлеглому надається перевага над іншим, наприклад, коли один підлеглий пристрій має більшу пропускну здатність, ніж інший." #: ../../configuration/interfaces/wireguard.rst:90 msgid "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto." -msgstr "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto." +msgstr "Поверх асиметричного шифрування можна використовувати додатковий рівень криптографії з симетричним ключем." #: ../../configuration/interfaces/wireguard.rst:103 msgid "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto. This command automatically creates for you the required CLI command to install this PSK for a given peer." -msgstr "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto. This command automatically creates for you the required CLI command to install this PSK for a given peer." +msgstr "Поверх асиметричного шифрування можна використовувати додатковий рівень криптографії з симетричним ключем. Ця команда автоматично створює для вас необхідну команду CLI для встановлення цього PSK для даного вузла." #: ../../configuration/interfaces/wireguard.rst:247 msgid "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto. This is optional." -msgstr "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto. This is optional." +msgstr "Поверх асиметричного шифрування можна використовувати додатковий рівень криптографії з симетричним ключем. Це необов'язково." #: ../../configuration/vpn/ipsec.rst:11 msgid "An advantage of this scheme is that you get a real interface with its own address, which makes it easier to setup static routes or use dynamic routing protocols without having to modify IPsec policies. The other advantage is that it greatly simplifies router to router communication, which can be tricky with plain IPsec because the external outgoing address of the router usually doesn't match the IPsec policy of typical site-to-site setup and you need to add special configuration for it, or adjust the source address for outgoing traffic of your applications. GRE/IPsec has no such problem and is completely transparent for the applications." -msgstr "An advantage of this scheme is that you get a real interface with its own address, which makes it easier to setup static routes or use dynamic routing protocols without having to modify IPsec policies. The other advantage is that it greatly simplifies router to router communication, which can be tricky with plain IPsec because the external outgoing address of the router usually doesn't match the IPsec policy of typical site-to-site setup and you need to add special configuration for it, or adjust the source address for outgoing traffic of your applications. GRE/IPsec has no such problem and is completely transparent for the applications." +msgstr "Перевагою цієї схеми є те, що ви отримуєте реальний інтерфейс із власною адресою, що полегшує налаштування статичних маршрутів або використання протоколів динамічної маршрутизації без необхідності змінювати політики IPsec. Інша перевага полягає в тому, що це значно спрощує зв’язок між маршрутизаторами, що може бути складно зі звичайним IPsec, оскільки зовнішня вихідна адреса маршрутизатора зазвичай не відповідає політиці IPsec типового налаштування типу «сайт-сайт», і вам потрібно додати спеціальні конфігурацію для нього або налаштуйте адресу джерела для вихідного трафіку ваших програм. GRE/IPsec не має такої проблеми, і він повністю прозорий для програм." #: ../../configuration/service/snmp.rst:50 msgid "An agent is a network-management software module that resides on a managed device. An agent has local knowledge of management information and translates that information to or from an SNMP-specific form." -msgstr "An agent is a network-management software module that resides on a managed device. An agent has local knowledge of management information and translates that information to or from an SNMP-specific form." +msgstr "Агент — це програмний модуль для керування мережею, який знаходиться на керованому пристрої. Агент має локальні знання інформації про керування та перекладає цю інформацію у форму, специфічну для SNMP, або з неї." #: ../../configuration/protocols/ospf.rst:211 msgid "An alternate command could be \"mpls-te on\" (Traffic Engineering)" -msgstr "An alternate command could be \"mpls-te on\" (Traffic Engineering)" +msgstr "Альтернативною командою може бути "mpls-te on" (Traffic Engineering)" #: ../../configuration/firewall/ipv4.rst:396 msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion." @@ -2266,7 +2310,7 @@ msgstr "An arbitrary netmask can be applied to mask addresses to only match agai #: ../../configuration/firewall/general-legacy.rst:424 msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)" -msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)" +msgstr "Довільну маску мережі можна застосувати для маскування адрес, щоб відповідати лише певній частині. Це особливо корисно з IPv6 і брандмауером на основі зони, оскільки правила залишатимуться дійсними, якщо префікс IPv6 зміниться, а хост-адреса системної IPv6-адреси стане статичною (наприклад, з адресами SLAAC або `tokenized IPv6 `_)" #: ../../configuration/firewall/general-legacy.rst:424 msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)." @@ -2278,7 +2322,7 @@ msgstr "An arbitrary netmask can be applied to mask addresses to only match agai #: ../../configuration/firewall/zone.rst:43 msgid "An basic introduction to zone-based firewalls can be found `here `_, and an example at :ref:`examples-zone-policy`." -msgstr "An basic introduction to zone-based firewalls can be found `here `_, and an example at :ref:`examples-zone-policy`." +msgstr "Базовий вступ до зональних брандмауерів можна знайти тут `_, і приклад у :ref:`examples-zone-policy`." #: ../../configuration/interfaces/tunnel.rst:36 #: ../../configuration/interfaces/tunnel.rst:54 @@ -2287,27 +2331,27 @@ msgstr "An basic introduction to zone-based firewalls can be found `here ` interface to bridge ``. A completion helper will help you with all allowed interfaces which can be bridged. This includes :ref:`ethernet-interface`, :ref:`bond-interface`, :ref:`l2tpv3-interface`, :ref:`openvpn`, :ref:`vxlan-interface`, :ref:`wireless-interface`, :ref:`tunnel-interface` and :ref:`geneve-interface`." -msgstr "Assign `` interface to bridge ``. A completion helper will help you with all allowed interfaces which can be bridged. This includes :ref:`ethernet-interface`, :ref:`bond-interface`, :ref:`l2tpv3-interface`, :ref:`openvpn`, :ref:`vxlan-interface`, :ref:`wireless-interface`, :ref:`tunnel-interface` and :ref:`geneve-interface`." +msgstr "Призначити ` `інтерфейс до мосту` `. Помічник завершення допоможе вам з усіма дозволеними інтерфейсами, які можна з’єднати мостом. Це включає :ref:`ethernet-interface`, :ref:`bond-interface`, :ref:`l2tpv3-interface`, :ref:`openvpn`, :ref:`vxlan-interface`, :ref:`wireless -interface`, :ref:`tunnel-interface` і :ref:`geneve-interface`." #: ../../configuration/loadbalancing/reverse-proxy.rst:86 msgid "Assign a specific backend to a rule" -msgstr "Assign a specific backend to a rule" +msgstr "Призначте певну серверну частину до правила" #: ../../configuration/vrf/index.rst:98 msgid "Assign interface identified by `` to VRF named ``." -msgstr "Assign interface identified by `` to VRF named ``." +msgstr "Призначити інтерфейс, позначений ` ` до VRF під назвою ` `." #: ../../configuration/interfaces/bonding.rst:324 msgid "Assign member interfaces to PortChannel" -msgstr "Assign member interfaces to PortChannel" +msgstr "Призначте інтерфейси учасників для PortChannel" #: ../../configuration/service/pppoe-server.rst:437 #: ../../configuration/vpn/l2tp.rst:381 #: ../../configuration/vpn/pptp.rst:305 #: ../../configuration/vpn/sstp.rst:339 msgid "Assign static IP address to `` account." -msgstr "Assign static IP address to `` account." +msgstr "Призначте статичну IP-адресу для ` ` обліковий запис." #: ../../configuration/service/dhcp-server.rst:113 msgid "Assign the IP address to this machine for `