openstack/neutron-fwaas
Code Issues Proposed changes
9f30a6f44c
neutron-fwaas/releasenotes/source/locale/en_GB/LC_MESSAGES/releasenotes.po
ZhouHeng a9f26b81e2 revive neutron-fwaas project 
This reverts commit caae7b6a6f.

Reason for revert:
Many users still need L3 firewalls and Inspur team wants to maintain
this project.
Neutron drivers team discussed the topic of the maintenance of
neutron-fwaas, and agreed to include neutron-fwaas again to Neutron
stadium[1].

Some updates have been made:
Remove use "autonested_transaction" method, see more [2]
Replace "neutron_lib.callbacks.registry.notify" with "registry.publish"
Replace rootwrap execution with privsep context execution.
Ensure db Models and migration scripts are sync, set table
firewall_group_port_associations_v2's two columns nullable=False

[1] https://meetings.opendev.org/meetings/neutron_drivers/2022/neutron_drivers.2022-01-28-14.00.log.html#l-14
[2] https://review.opendev.org/c/openstack/neutron-lib/+/761728

Change-Id: I14f551c199d9badcf25b9e65c954c012326d27cd
2022-03-01 01:01:47 +00:00

474 lines
18 KiB
Plaintext
Raw Blame History

# Andi Chandler <andi@gowling.com>, 2017. #zanata
# Andi Chandler <andi@gowling.com>, 2018. #zanata
# Andi Chandler <andi@gowling.com>, 2020. #zanata
msgid ""
msgstr ""
"Project-Id-Version: neutron-fwaas\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2020-01-24 00:17+0000\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"PO-Revision-Date: 2020-04-16 12:40+0000\n"
"Last-Translator: Andi Chandler <andi@gowling.com>\n"
"Language-Team: English (United Kingdom)\n"
"Language: en_GB\n"
"X-Generator: Zanata 4.3.3\n"
"Plural-Forms: nplurals=2; plural=(n != 1)\n"
msgid "--resource-type firewall_group"
msgstr "--resource-type firewall_group"
msgid "--resource-type firewall_group --resource <ID of firewall group>"
msgstr "--resource-type firewall_group --resource <ID of firewall group>"
msgid ""
"--resource-type firewall_group --resource <ID of firewall group> --target "
"<ID of port>"
msgstr ""
"--resource-type firewall_group --resource <ID of firewall group> --target "
"<ID of port>"
msgid "--resource-type firewall_group --target <ID of port>"
msgstr "--resource-type firewall_group --target <ID of port>"
msgid "11.0.0"
msgstr "11.0.0"
msgid "12.0.0"
msgstr "12.0.0"
msgid "13.0.0"
msgstr "13.0.0"
msgid "14.0.0"
msgstr "14.0.0"
msgid "15.0.0-9"
msgstr "15.0.0-9"
msgid "7.0.2"
msgstr "7.0.2"
msgid "7.1.1"
msgstr "7.1.1"
msgid "8.0.0"
msgstr "8.0.0"
msgid "9.0.0"
msgstr "9.0.0"
msgid "9.0.0.0b2"
msgstr "9.0.0.0b2"
msgid "9.0.0.0b3"
msgstr "9.0.0.0b3"
msgid "9.0.0.0rc1"
msgstr "9.0.0.0rc1"
msgid "Adding new tables for future consumption."
msgstr "Adding new tables for future consumption."
msgid "And the Security Group driver is specified as:"
msgstr "And the Security Group driver is specified as:"
msgid ""
"Associating default firewall group for new VM ports within a project "
"automatically."
msgstr ""
"Associating default firewall group for new VM ports within a project "
"automatically."
msgid "Bug Fixes"
msgstr "Bug Fixes"
msgid "Coexistence between security group and firewall group."
msgstr "Coexistence between security group and firewall group."
msgid "Current Series Release Notes"
msgstr "Current Series Release Notes"
msgid "Currently, the FWaaSv2 L2 driver can be configured as:"
msgstr "Currently, the FWaaSv2 L2 driver can be configured as:"
msgid ""
"Earlier the FWaaS agent integrated with the L3 agent by having the L3 Agent "
"class inherit from the FWaaS Agent class. This meant that other service "
"agents could not also integrate with the L3 agent. Now, using the L3 agent "
"extensions mechanism, FWaaS (v1 and v2) plugs in to the L3 agent. This "
"means that it can interoperate peacefully with other L3 advanced services "
"that also implement the L3 agent extension mechanism, all without any code "
"changes to Neutron."
msgstr ""
"Earlier the FWaaS agent integrated with the L3 agent by having the L3 Agent "
"class inherit from the FWaaS Agent class. This meant that other service "
"agents could not also integrate with the L3 agent. Now, using the L3 agent "
"extensions mechanism, FWaaS (v1 and v2) plugs in to the L3 agent. This "
"means that it can interoperate peacefully with other L3 advanced services "
"that also implement the L3 agent extension mechanism, all without any code "
"changes to Neutron."
msgid "Enable quotas for FWaaS."
msgstr "Enable quotas for FWaaS."
msgid ""
"Enable to collect network packet log for ACCEPT/DROP action from firewall "
"groups. Currently, packet logging supports only L3(router) ports."
msgstr ""
"Enable to collect network packet log for ACCEPT/DROP action from firewall "
"groups. Currently, packet logging supports only L3(router) ports."
msgid ""
"FWaaS V1 is being removed from the neutron-fwaas repo. Because FWaaS V2 has "
"been available since the Newton release."
msgstr ""
"FWaaS V1 is being removed from the neutron-fwaas repo. Because FWaaS V2 has "
"been available since the Newton release."
msgid ""
"FWaaS v1 can not be enabled at the same time as FWaaS v2; one or the other "
"must be chosen."
msgstr ""
"FWaaS v1 can not be enabled at the same time as FWaaS v2; one or the other "
"must be chosen."
msgid "Generation of sample Neutron FWaaS configuration files."
msgstr "Generation of sample Neutron FWaaS configuration files."
msgid ""
"If a port is associated with both firewall group & security group and there "
"is a security group logging, which is enabled to collect ``DROP`` events for "
"this port, then most of invalid packets will be dropped at firewall group "
"for performance reason except first dropped packet, which is allowed by "
"firewall group but not accepted by security group. So not every dropped "
"packet will be logged (like in case of security group works in standalone "
"mode)."
msgstr ""
"If a port is associated with both firewall group & security group and there "
"is a security group logging, which is enabled to collect ``DROP`` events for "
"this port, then most of invalid packets will be dropped at firewall group "
"for performance reason except first dropped packet, which is allowed by "
"firewall group but not accepted by security group. So not every dropped "
"packet will be logged (like in case of security group works in standalone "
"mode)."
msgid ""
"If both are configured, the packet will still only hit the FWaaS table in "
"OVS and will not traverse the rules in the SG table. There are some fixes "
"needed to support this model which are being tested and will be merged "
"shortly. Currently there are no checks to allow only one of FWaaS L2 or SG "
"to be configured."
msgstr ""
"If both are configured, the packet will still only hit the FWaaS table in "
"OVS and will not traverse the rules in the SG table. There are some fixes "
"needed to support this model which are being tested and will be merged "
"shortly. Currently there are no checks to allow only one of FWaaS L2 or SG "
"to be configured."
msgid ""
"In FWaaS v2 firewall policies are applied to router ports, as opposed to "
"applying to routers in FWaaS v1."
msgstr ""
"In FWaaS v2 firewall policies are applied to router ports, as opposed to "
"applying to routers in FWaaS v1."
msgid "Known Issues"
msgstr "Known Issues"
msgid ""
"L2 firewall group driver based OVS can work in coexistence mode. That means, "
"if a port is associated with both firewall group and security group, then a "
"packet must be allowed by both features."
msgstr ""
"L2 firewall group driver based OVS can work in coexistence mode. That means, "
"if a port is associated with both firewall group and security group, then a "
"packet must be allowed by both features."
msgid "Liberty Series Release Notes"
msgstr "Liberty Series Release Notes"
msgid "Mitaka Series Release Notes"
msgstr "Mitaka Series Release Notes"
msgid "Neutron FWaaS Release Notes"
msgstr "Neutron FWaaS Release Notes"
msgid ""
"Neutron FWaaS no longer includes static example configuration files. "
"Instead, use tools/generate_config_file_samples.sh to generate them. The "
"files are generated with a .sample extension."
msgstr ""
"Neutron FWaaS no longer includes static example configuration files. "
"Instead, use tools/generate_config_file_samples.sh to generate them. The "
"files are generated with a .sample extension."
msgid ""
"Neutron Firewall as a Service can be configured by the users with the newly "
"introduced fwaas configuration file."
msgstr ""
"Neutron Firewall as a Service can be configured by the users with the newly "
"introduced FWaaS configuration file."
msgid "New Features"
msgstr "New Features"
msgid ""
"New tables ``ACCEPTED_EGRESS_TRAFFIC_TABLE=91`` and "
"``ACCEPTED_INGRESS_TRAFFIC_TABLE=92`` & ``DROPPED_TRAFFIC_TABLE=93`` are "
"added to OVS based FWaaS L2 driver for future comsumption like logging "
"service."
msgstr ""
"New tables ``ACCEPTED_EGRESS_TRAFFIC_TABLE=91`` and "
"``ACCEPTED_INGRESS_TRAFFIC_TABLE=92`` & ``DROPPED_TRAFFIC_TABLE=93`` are "
"added to OVS based FWaaS L2 driver for future consumption like logging "
"service."
msgid "Newton Series Release Notes"
msgstr "Newton Series Release Notes"
msgid "Ocata Series Release Notes"
msgstr "Ocata Series Release Notes"
msgid ""
"Operators that increase the default limit for quota_routers from 10 may want "
"to bump FWaaS quotas as well, since with router insertion a tenant can "
"potentially have a unique policy and firewall for each router."
msgstr ""
"Operators that increase the default limit for quota_routers from 10 may want "
"to bump FWaaS quotas as well, since with router insertion a tenant can "
"potentially have a unique policy and firewall for each router."
msgid "Other Notes"
msgstr "Other Notes"
msgid "Pike Series Release Notes"
msgstr "Pike Series Release Notes"
msgid "Prelude"
msgstr "Prelude"
msgid ""
"Python 2.7 support has been dropped. The minimum version of Python now "
"supported by neutron-fwaas is Python 3.6."
msgstr ""
"Python 2.7 support has been dropped. The minimum version of Python now "
"supported by neutron-fwaas is Python 3.6."
msgid "Queens Series Release Notes"
msgstr "Queens Series Release Notes"
msgid ""
"Resource type **firewall group** has been supported for neutron packet "
"logging framework. You can specify firewall group as ``--resource-type`` "
"for logging API."
msgstr ""
"Resource type **firewall group** has been supported for neutron packet "
"logging framework. You can specify firewall group as ``--resource-type`` "
"for logging API."
msgid "Rocky Series Release Notes"
msgstr "Rocky Series Release Notes"
msgid "Start using reno to manage release notes."
msgstr "Start using Reno to manage release notes."
msgid "Stein Series Release Notes"
msgstr "Stein Series Release Notes"
msgid ""
"Taking security for VM instance into consideration, we've removed an option "
"to disable automatic association with default firewall group feature. "
"Therefore, `auto_associate_default_firewall_group` has been removed."
msgstr ""
"Taking security for VM instance into consideration, we've removed an option "
"to disable automatic association with default firewall group feature. "
"Therefore, `auto_associate_default_firewall_group` has been removed."
msgid ""
"Tenants may receive a 409 Conflict error with a message body containing a "
"quota exceeded message during resource creation if their quota is exceeded."
msgstr ""
"Tenants may receive a 409 Conflict error with a message body containing a "
"quota exceeded message during resource creation if their quota is exceeded."
msgid ""
"The Cisco FWaaS driver will not be available from the neutron-fwaas repo in "
"Newton. For the Cisco FWaaS driver, refer to the openstack/networking-cisco "
"repo."
msgstr ""
"The Cisco FWaaS driver will not be available from the neutron-fwaas repo in "
"Newton. For the Cisco FWaaS driver, refer to the openstack/networking-cisco "
"repo."
msgid ""
"The Cisco Firewall Driver is being moved from the FWaaS repo to the Cisco "
"specific repo: https://github.com/openstack/networking-cisco"
msgstr ""
"The Cisco Firewall Driver is being moved from the FWaaS repo to the Cisco "
"specific repo: https://github.com/openstack/networking-cisco"
msgid ""
"The FWaaS V1 source code will not be available in neutron-fwaas repo from "
"Stein. neutron-fwaas-migrate-v1-to-v2 can be used for migrating V1 object to "
"V2 model."
msgstr ""
"The FWaaS V1 source code will not be available in neutron-fwaas repo from "
"Stein. neutron-fwaas-migrate-v1-to-v2 can be used for migrating V1 object to "
"V2 model."
msgid ""
"The FWaaS extension can register quotas. The default values for "
"quota_firewall, quota_firewall_policy, and quota_firewall_rule are set to -1 "
"(unlimited)."
msgstr ""
"The FWaaS extension can register quotas. The default values for "
"quota_firewall, quota_firewall_policy, and quota_firewall_rule are set to -1 "
"(unlimited)."
msgid ""
"The FWaaS extension will register quotas. The default values for "
"quota_firewall and quota_firewall_policy are set to 10. The default value "
"for quota_firewall_rule is set to 100. Quotas can be adjusted in the conf "
"files, including -1 values to allow unlimited."
msgstr ""
"The FWaaS extension will register quotas. The default values for "
"quota_firewall and quota_firewall_policy are set to 10. The default value "
"for quota_firewall_rule is set to 100. Quotas can be adjusted in the conf "
"files, including -1 values to allow unlimited."
msgid ""
"The FWaaS team is pleased to release FWaaS v2.0. This release of FWaaS "
"supports either the original FWaaS v1 or the new FWaaS v2."
msgstr ""
"The FWaaS team is pleased to release FWaaS v2.0. This release of FWaaS "
"supports either the original FWaaS v1 or the new FWaaS v2."
msgid ""
"The McAfee Firewall Driver is being removed from the FwaaS repo, due to lack "
"of active maintainers."
msgstr ""
"The McAfee Firewall Driver is being removed from the FWaaS repo, due to lack "
"of active maintainers."
msgid ""
"The McAfee Firewall Driver will not be available for use in the Newton "
"release."
msgstr ""
"The McAfee Firewall Driver will not be available for use in the Newton "
"release."
msgid ""
"The default firewall group won't be applied to all new VM ports as default. "
"However, if option ``auto_associate_default_firewall_group`` is enabled in "
"neutron_fwaas.conf like:"
msgstr ""
"The default firewall group won't be applied to all new VM ports as default. "
"However, if option ``auto_associate_default_firewall_group`` is enabled in "
"neutron_fwaas.conf like:"
msgid ""
"The limitation related to logging for security group in case of co-existence "
"between SG and FWG is also fixed."
msgstr ""
"The limitation related to logging for security group in case of co-existence "
"between SG and FWG is also fixed."
msgid ""
"The vArmour Firewall Driver is being removed from the FwaaS repo, as per "
"decision to remove vendor drivers from the community repo."
msgstr ""
"The vArmour Firewall Driver is being removed from the FWaaS repo, as per "
"decision to remove vendor drivers from the community repo."
msgid ""
"The vArmour Firewall Driver will not be available for use in the Newton "
"release."
msgstr ""
"The vArmour Firewall Driver will not be available for use in the Newton "
"release."
msgid "The vyatta Firewall Driver is being removed from the FwaaS repo,"
msgstr "The Vyatta Firewall Driver is being removed from the FWaaS repo,"
msgid ""
"The vyatta Firewall Driver will not be available for use in the Newton "
"release from the community repo."
msgstr ""
"The Vyatta Firewall Driver will not be available for use in the Newton "
"release from the community repo."
msgid "Then, the default firewall group will be applied to all new VM ports."
msgstr "Then, the default firewall group will be applied to all new VM ports."
msgid ""
"There is no validation to check if an updated port is for VM or not so far. "
"After this fix, default firewall group association is called only for VM "
"ports which are newly created."
msgstr ""
"There is no validation to check if an updated port is for VM or not so far. "
"After this fix, default firewall group association is called only for VM "
"ports which are newly created."
msgid ""
"There is not currently a defined upgrade path from FWaaS v1 to FWaaS v2."
msgstr ""
"There is not currently a defined upgrade path from FWaaS v1 to FWaaS v2."
msgid "Therefore, you can only run with following combinations:"
msgstr "Therefore, you can only run with following combinations:"
msgid "Upgrade Notes"
msgstr "Upgrade Notes"
msgid "Validating if a port is supported by FWaaS V2"
msgstr "Validating if a port is supported by FWaaS V2"
msgid ""
"[`bug 1702242 <https://bugs.launchpad.net/neutron/+bug/1702242>`__] Port "
"range specification of a firewall rule now works expectedly with the "
"reference L3 agent based implementation. Previously, when creating a "
"firewall rule with port range like ``8778:9000``, the rule was not deleted "
"correctly and only entries associated with the first port number were clean "
"up. Note that this bug is only applied to the reference L3 agent based "
"implementation."
msgstr ""
"[`bug 1702242 <https://bugs.launchpad.net/neutron/+bug/1702242>`__] Port "
"range specification of a firewall rule now works expectedly with the "
"reference L3 agent based implementation. Previously, when creating a "
"firewall rule with port range like ``8778:9000``, the rule was not deleted "
"correctly and only entries associated with the first port number were clean "
"up. Note that this bug is only applied to the reference L3 agent based "
"implementation."
msgid ""
"[`bug 1720727 <https://bugs.launchpad.net/neutron/+bug/1720727>`__] "
"Currently, we cannot specify the following combination on CLI due to missing "
"validation of --resource-type:"
msgstr ""
"[`bug 1720727 <https://bugs.launchpad.net/neutron/+bug/1720727>`__] "
"Currently, we cannot specify the following combination on CLI due to missing "
"validation of --resource-type:"
msgid ""
"[`bug 1746855 <https://bugs.launchpad.net/neutron/+bug/1746855>`__] Now, "
"FWaaS V2 will validate if a port is supported before adding it to a FWG. "
"This helps to make sure FWaaS V2 API works as expected."
msgstr ""
"[`bug 1746855 <https://bugs.launchpad.net/neutron/+bug/1746855>`__] Now, "
"FWaaS V2 will validate if a port is supported before adding it to a FWG. "
"This helps to make sure FWaaS V2 API works as expected."
msgid "[fwaas] auto_associate_default_firewall_group = True"
msgstr "[fwaas] auto_associate_default_firewall_group = True"
msgid "``firewall_driver = openvswitch``"
msgstr "``firewall_driver = openvswitch``"
msgid "``firewall_driver = ovs``"
msgstr "``firewall_driver = ovs``"
msgid "as per decision to remove vendor drivers from the community repo."
msgstr "as per decision to remove vendor drivers from the community repo."
View Git Blame Copy Permalink