openstack/security-doc
Code Issues Proposed changes

Imported Translations from Transifex

Browse Source 
Change-Id: Ia6411d5399f1602f847a0d20dfaac59f57ab072f
This commit is contained in:
OpenStack Proposal Bot
2014-09-04 06:07:50 +00:00
parent 247748fc3d
commit 70af54ab76
2 changed files with 111 additions and 103 deletions
Download Patch File Download Diff File Expand all files Collapse all files

136
security-guide/locale/ja.po
View File

@@ -12,8 +12,8 @@
msgid "" msgid ""
msgstr "" msgstr ""
"Project-Id-Version: OpenStack Manuals\n" "Project-Id-Version: OpenStack Manuals\n"
"POT-Creation-Date: 2014-09-02 17:40+0000\n" "POT-Creation-Date: 2014-09-03 09:43+0000\n"
"PO-Revision-Date: 2014-09-02 17:41+0000\n" "PO-Revision-Date: 2014-09-03 09:39+0000\n"
"Last-Translator: openstackjenkins <jenkins@openstack.org>\n" "Last-Translator: openstackjenkins <jenkins@openstack.org>\n"
"Language-Team: Japanese (http://www.transifex.com/projects/p/openstack-manuals-i18n/language/ja/)\n" "Language-Team: Japanese (http://www.transifex.com/projects/p/openstack-manuals-i18n/language/ja/)\n"
"MIME-Version: 1.0\n" "MIME-Version: 1.0\n"
@@ -2968,7 +2968,7 @@ msgid ""
msgstr "@@image: 'static/swift_network_diagram-2.png'; md5=69f8effe3f5d0f3cbccfb8c5a5dd299e" msgstr "@@image: 'static/swift_network_diagram-2.png'; md5=69f8effe3f5d0f3cbccfb8c5a5dd299e"
#: ./security-guide/ch_object-storage.xml8(title) #: ./security-guide/ch_object-storage.xml8(title)
#: ./security-guide/section_introduction-to-openstack.xml144(title) #: ./security-guide/section_introduction-to-openstack.xml145(title)
msgid "Object Storage" msgid "Object Storage"
msgstr "Object Storage" msgstr "Object Storage"
@@ -3668,7 +3668,7 @@ msgstr "データベースサーバー"
#: ./security-guide/section_introduction-to-ssl-tls.xml120(para) #: ./security-guide/section_introduction-to-ssl-tls.xml120(para)
#: ./security-guide/ch_dashboard.xml8(title) #: ./security-guide/ch_dashboard.xml8(title)
#: ./security-guide/section_introduction-to-openstack.xml186(title) #: ./security-guide/section_introduction-to-openstack.xml190(title)
#: ./security-guide/section_management-interfaces.xml33(title) #: ./security-guide/section_management-interfaces.xml33(title)
msgid "Dashboard" msgid "Dashboard"
msgstr "Dashboard" msgstr "Dashboard"
@@ -4243,13 +4243,14 @@ msgstr "OpenStack の概要"
#: ./security-guide/section_introduction-to-openstack.xml9(para) #: ./security-guide/section_introduction-to-openstack.xml9(para)
msgid "" msgid ""
"This guide provides security insight into OpenStack deployments. The " "This guide provides security insight into <glossterm>OpenStack</glossterm> "
"intended audience is cloud architects, deployers, and administrators. In " "deployments. The intended audience is cloud architects, deployers, and "
"addition, cloud users will find the guide both educational and helpful in " "administrators. In addition, cloud users will find the guide both "
"provider selection, while auditors will find it useful as a reference " "educational and helpful in provider selection, while auditors will find it "
"document to support their compliance certification efforts. This guide is " "useful as a reference document to support their compliance certification "
"also recommended for anyone interested in cloud security." "efforts. This guide is also recommended for anyone interested in cloud "
msgstr "本ガイドは、OpenStack のデプロイメントにおけるセキュリティに関する知見を提供します。クラウドアーキテクト、デプロイ担当者、管理者などを対象読者としています。また、クラウドユーザーには、プロバイダー選択にあたって参照することのできる有用な情報を記載している一方、監査担当者には、コンプライアンス認証に伴う作業を支援する参考資料としてご利用いただくことができます。本ガイドは、クラウドのセキュリティに関心を持つ読者全般にもお奨めします。" "security."
msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml16(para) #: ./security-guide/section_introduction-to-openstack.xml16(para)
msgid "" msgid ""
@@ -4381,33 +4382,34 @@ msgstr "Compute"
#: ./security-guide/section_introduction-to-openstack.xml123(para) #: ./security-guide/section_introduction-to-openstack.xml123(para)
msgid "" msgid ""
"OpenStack Compute service (nova) provides services to support the management" "OpenStack <glossterm>Compute</glossterm> service "
" of virtual machine instances at scale, instances that host multi-tiered " "(<glossterm>nova</glossterm>) provides services to support the management of"
" virtual machine instances at scale, instances that host multi-tiered "
"applications, dev/test environments, \"Big Data\" crunching Hadoop clusters," "applications, dev/test environments, \"Big Data\" crunching Hadoop clusters,"
" and/or high performance computing." " and/or high performance computing."
msgstr "OpenStack Compute サービス (Nova) は、多層アプリケーション、開発/テスト環境、「ビッグデータ」を処理する Hadoop のクラスター、ハイパフォーマンスコンピューティングなどをホストする、大規模な仮想マシンインスタンスの管理をサポートするサービスを提供します。" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml128(para) #: ./security-guide/section_introduction-to-openstack.xml129(para)
msgid "" msgid ""
"The Compute service facilitates this management through an abstraction layer" "The Compute service facilitates this management through an abstraction layer"
" that interfaces with supported hypervisors, which we address later on in " " that interfaces with supported hypervisors, which we address later on in "
"more detail." "more detail."
msgstr "Compute は、サポート対象のハイパーバイザーと連動する抽象化レイヤーを介してこのような管理を行います。ハイパーバイザーについては、後半で詳しく説明します。" msgstr "Compute は、サポート対象のハイパーバイザーと連動する抽象化レイヤーを介してこのような管理を行います。ハイパーバイザーについては、後半で詳しく説明します。"
#: ./security-guide/section_introduction-to-openstack.xml131(para) #: ./security-guide/section_introduction-to-openstack.xml132(para)
msgid "" msgid ""
"Later in the guide, we focus generically on the virtualization stack as it " "Later in the guide, we focus generically on the virtualization stack as it "
"relates to hypervisors." "relates to hypervisors."
msgstr "本ガイドの後半では、ハイパーバイザーと関連する仮想化スタックに焦点をあてて、包括的に解説します。" msgstr "本ガイドの後半では、ハイパーバイザーと関連する仮想化スタックに焦点をあてて、包括的に解説します。"
#: ./security-guide/section_introduction-to-openstack.xml133(para) #: ./security-guide/section_introduction-to-openstack.xml134(para)
msgid "" msgid ""
"For information about the current state of feature support, see <link " "For information about the current state of feature support, see <link "
"href=\"https://wiki.openstack.org/wiki/HypervisorSupportMatrix\">OpenStack " "href=\"https://wiki.openstack.org/wiki/HypervisorSupportMatrix\">OpenStack "
"Hypervisor Support Matrix</link>." "Hypervisor Support Matrix</link>."
msgstr "機能サポートの現在の状況に関する情報は、 <link href=\"https://wiki.openstack.org/wiki/HypervisorSupportMatrix\">OpenStack Hypervisor Support Matrix</link> を参照してください。" msgstr "機能サポートの現在の状況に関する情報は、 <link href=\"https://wiki.openstack.org/wiki/HypervisorSupportMatrix\">OpenStack Hypervisor Support Matrix</link> を参照してください。"
#: ./security-guide/section_introduction-to-openstack.xml137(para) #: ./security-guide/section_introduction-to-openstack.xml138(para)
msgid "" msgid ""
"The security of Compute is critical for an OpenStack deployment. Hardening " "The security of Compute is critical for an OpenStack deployment. Hardening "
"techniques should include support for strong instance isolation, secure " "techniques should include support for strong instance isolation, secure "
@@ -4415,118 +4417,124 @@ msgid ""
"facing <glossterm>API</glossterm> endpoints." "facing <glossterm>API</glossterm> endpoints."
msgstr "OpenStack のデプロイメントでは、Compute のセキュリティが極めて重要となります。セキュリティ強化のテクニックには、頑強なインスタンスの隔離、Compute のサブコンポーネント間におけるセキュアな通信、一般向けの <glossterm>API</glossterm> エンドポイントの弾力性などがあげられます。" msgstr "OpenStack のデプロイメントでは、Compute のセキュリティが極めて重要となります。セキュリティ強化のテクニックには、頑強なインスタンスの隔離、Compute のサブコンポーネント間におけるセキュアな通信、一般向けの <glossterm>API</glossterm> エンドポイントの弾力性などがあげられます。"
#: ./security-guide/section_introduction-to-openstack.xml145(para) #: ./security-guide/section_introduction-to-openstack.xml146(para)
msgid "" msgid ""
"The OpenStack Object Storage service (swift) provides support for storing " "The OpenStack <glossterm>Object Storage</glossterm> service "
"and retrieving arbitrary data in the cloud. The Object Storage service " "(<glossterm>swift</glossterm>) provides support for storing and retrieving "
"provides both a native API and an Amazon Web Services S3 compatible API. The" "arbitrary data in the cloud. The Object Storage service provides both a "
" service provides a high degree of resiliency through data replication and " "native API and an Amazon Web Services S3 compatible API. The service "
"can handle petabytes of data." "provides a high degree of resiliency through data replication and can handle"
msgstr "OpenStack Object Storage Service (swift) は、クラウド内の任意データの保管/取得機能のサポートを提供します。Object Storage Service はネイティブ API および Amazon Web Services S3 互換の API の両方を提供します。このサービスは、データレプリケーションにより高度な回復性を提供し、ペタバイト規模のデータの処理が可能です。" " petabytes of data."
msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml151(para) #: ./security-guide/section_introduction-to-openstack.xml153(para)
msgid "" msgid ""
"It is important to understand that object storage differs from traditional " "It is important to understand that object storage differs from traditional "
"file system storage. It is best used for static data such as media files " "file system storage. It is best used for static data such as media files "
"(MP3s, images, videos), virtual machine images, and backup files." "(MP3s, images, videos), virtual machine images, and backup files."
msgstr "オブジェクトストレージは、従来のファイルシステムストレージと異なる点を理解しておくことが重要です。メディアファイル (MP3、画像、ビデオ) や仮想マシンイメージ、バックアップファイルなどの静的データに使用するのに最適です。" msgstr "オブジェクトストレージは、従来のファイルシステムストレージと異なる点を理解しておくことが重要です。メディアファイル (MP3、画像、ビデオ) や仮想マシンイメージ、バックアップファイルなどの静的データに使用するのに最適です。"
#: ./security-guide/section_introduction-to-openstack.xml155(para) #: ./security-guide/section_introduction-to-openstack.xml157(para)
msgid "" msgid ""
"Object security should focus on access control and encryption of data in " "Object security should focus on access control and encryption of data in "
"transit and at rest. Other concerns may relate to system abuse, illegal or " "transit and at rest. Other concerns may relate to system abuse, illegal or "
"malicious content storage, and cross authentication attack vectors." "malicious content storage, and cross authentication attack vectors."
msgstr "オブジェクトのセキュリティは、アクセス制御と、伝送中および静止中のデータの暗号化に重点を置くべきです。その他の懸念事項には、システムの悪用、不法または悪意のあるコンテンツの保管、クロス認証の攻撃ベクトルなどに関する問題があげられます。" msgstr "オブジェクトのセキュリティは、アクセス制御と、伝送中および静止中のデータの暗号化に重点を置くべきです。その他の懸念事項には、システムの悪用、不法または悪意のあるコンテンツの保管、クロス認証の攻撃ベクトルなどに関する問題があげられます。"
#: ./security-guide/section_introduction-to-openstack.xml161(title) #: ./security-guide/section_introduction-to-openstack.xml163(title)
msgid "Block Storage" msgid "Block Storage"
msgstr "Block Storage" msgstr "Block Storage"
#: ./security-guide/section_introduction-to-openstack.xml162(para) #: ./security-guide/section_introduction-to-openstack.xml164(para)
msgid "" msgid ""
"The OpenStack Block Storage service (cinder) provides persistent block " "The OpenStack <glossterm>Block Storage</glossterm> service "
"storage for compute instances. The Block Storage service is responsible for " "(<glossterm>cinder</glossterm>) provides persistent block storage for "
"managing the life-cycle of block devices, from the creation and attachment " "compute instances. The Block Storage service is responsible for managing the"
"of volumes to instances, to their release." " life-cycle of block devices, from the creation and attachment of volumes to"
msgstr "OpenStack Block Storage Service (cinder) は、Compute インスタンス用に永続的なブロックストレージを提供します。Block Storage Service はブロックデバイスの作成からインスタンスへのボリュームの接続、それらの解放にいたるまでのライフサイクルを管理する役割を果たします。" " instances, to their release."
msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml167(para) #: ./security-guide/section_introduction-to-openstack.xml170(para)
msgid "" msgid ""
"Security considerations for block storage are similar to that of object " "Security considerations for block storage are similar to that of object "
"storage." "storage."
msgstr "Block Storage のセキュリティ課題は、Object Storage の場合と同様です。" msgstr "Block Storage のセキュリティ課題は、Object Storage の場合と同様です。"
#: ./security-guide/section_introduction-to-openstack.xml171(title) #: ./security-guide/section_introduction-to-openstack.xml174(title)
#: ./security-guide/ch_networking.xml7(title) #: ./security-guide/ch_networking.xml7(title)
msgid "Networking" msgid "Networking"
msgstr "ネットワーク" msgstr "ネットワーク"
#: ./security-guide/section_introduction-to-openstack.xml172(para) #: ./security-guide/section_introduction-to-openstack.xml175(para)
msgid "" msgid ""
"The OpenStack Networking service (neutron, previously called quantum) " "The OpenStack <glossterm>Networking</glossterm> service "
"provides various networking services to cloud users (tenants) such as IP " "(<glossterm>neutron</glossterm>, previously called quantum) provides various"
"address management, <glossterm>DNS</glossterm>, <glossterm>DHCP</glossterm>," " networking services to cloud users (tenants) such as IP address management,"
" load balancing, and security groups (network access rules, like firewall " " <glossterm>DNS</glossterm>, <glossterm>DHCP</glossterm>, load balancing, "
"policies). It provides a framework for software defined networking (SDN) " "and security groups (network access rules, like firewall policies). It "
"that allows for pluggable integration with various networking solutions." "provides a framework for software defined networking (SDN) that allows for "
msgstr "OpenStack Networking (neutron、旧称 quantum) はIP アドレス管理、<glossterm>DNS</glossterm>、<glossterm>DHCP</glossterm>、負荷分散、セキュリティグループ (ファイアウォールのポリシーなど、ネットワークのアクセスルール) など、さまざまなネットワークサービスをクラウドユーザー (テナント) に提供します。また、各種ネットワークソリューションとのプラグ可能な統合を可能にするソフトウェア定義ネットワーク(SDN) のフレームワークを提供します。" "pluggable integration with various networking solutions."
msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml180(para) #: ./security-guide/section_introduction-to-openstack.xml184(para)
msgid "" msgid ""
"OpenStack Networking allows cloud tenants to manage their guest network " "OpenStack Networking allows cloud tenants to manage their guest network "
"configurations. Security concerns with the networking service include " "configurations. Security concerns with the networking service include "
"network traffic isolation, availability, integrity and confidentiality." "network traffic isolation, availability, integrity and confidentiality."
msgstr "OpenStack Networking により、クラウドテナントはゲストのネットワーク設定を管理することができます。ネットワークサービスに伴うセキュリティ上の問題には、 ネットワークトラフィックの隔離、可用性、完全性、機密性などがあげられます。" msgstr "OpenStack Networking により、クラウドテナントはゲストのネットワーク設定を管理することができます。ネットワークサービスに伴うセキュリティ上の問題には、 ネットワークトラフィックの隔離、可用性、完全性、機密性などがあげられます。"
#: ./security-guide/section_introduction-to-openstack.xml187(para) #: ./security-guide/section_introduction-to-openstack.xml191(para)
msgid "" msgid ""
"The OpenStack dashboard (horizon) provides a web-based interface for both " "The OpenStack <glossterm>dashboard</glossterm> "
"(<glossterm>horizon</glossterm>) provides a web-based interface for both "
"cloud administrators and cloud tenants. Through this interface " "cloud administrators and cloud tenants. Through this interface "
"administrators and tenants can provision, manage, and monitor cloud " "administrators and tenants can provision, manage, and monitor cloud "
"resources. Horizon is commonly deployed in a public facing manner with all " "resources. Horizon is commonly deployed in a public facing manner with all "
"the usual security concerns of public web portals." "the usual security concerns of public web portals."
msgstr "OpenStack ダッシュボードサービス (Horizon) は、クラウド管理者とクラウドテナントの両方に向けた Web ベースのインターフェースを提供します。このインターフェースにより、管理者およびテナントは、クラウドリソースのプロビジョニング、管理、監視を行うことができます。Horizon は通常、一般i向けにデプロイされ、パブリック Web ポータルの一般的なセキュリティ問題が伴います。" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml195(title) #: ./security-guide/section_introduction-to-openstack.xml200(title)
msgid "Identity service" msgid "Identity service"
msgstr "Identity" msgstr "Identity"
#: ./security-guide/section_introduction-to-openstack.xml196(para) #: ./security-guide/section_introduction-to-openstack.xml201(para)
msgid "" msgid ""
"The OpenStack Identity service (keystone) is a <emphasis " "The OpenStack <glossterm baseform=\"Identity Service\">Identity</glossterm> "
"service (<glossterm>keystone</glossterm>) is a <emphasis "
"role=\"bold\">shared service</emphasis> that provides authentication and " "role=\"bold\">shared service</emphasis> that provides authentication and "
"authorization services throughout the entire cloud infrastructure. The " "authorization services throughout the entire cloud infrastructure. The "
"Identity service has pluggable support for multiple forms of authentication." "Identity service has pluggable support for multiple forms of authentication."
msgstr "OpenStack Identity (keystone) は、クラウドインフラストラクチャー全体にわたる認証および承認サービスを提供する<emphasis role=\"bold\">共有サービス</emphasis>です。Identity には、複数形式の認証に対するプラグ可能なサポートを採用しています。" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml201(para) #: ./security-guide/section_introduction-to-openstack.xml207(para)
msgid "" msgid ""
"Security concerns here pertain to trust in authentication, management of " "Security concerns here pertain to trust in authentication, management of "
"authorization tokens, and secure communication." "authorization tokens, and secure communication."
msgstr "ここでのセキュリティ課題には、認証の信頼、承認トークンの管理、セキュリティ保護された通信などがあげられます。" msgstr "ここでのセキュリティ課題には、認証の信頼、承認トークンの管理、セキュリティ保護された通信などがあげられます。"
#: ./security-guide/section_introduction-to-openstack.xml206(title) #: ./security-guide/section_introduction-to-openstack.xml212(title)
msgid "Image Service" msgid "Image Service"
msgstr "Image Service" msgstr "Image Service"
#: ./security-guide/section_introduction-to-openstack.xml207(para) #: ./security-guide/section_introduction-to-openstack.xml213(para)
msgid "" msgid ""
"The OpenStack Image Service (glance) provides disk image management " "The OpenStack <glossterm>Image Service</glossterm> "
"services. The Image Service provides image discovery, registration, and " "(<glossterm>glance</glossterm>) provides disk image management services. The"
"delivery services to the Compute service, as needed." " Image Service provides image discovery, registration, and delivery services"
msgstr "OpenStack Image Service (glance) は、ディスクイメージ管理サービスを提供します。Image Service は、必要に応じて、イメージの検索、登録、デリバリサービスを Compute サービスに提供します。" " to the Compute service, as needed."
msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml211(para) #: ./security-guide/section_introduction-to-openstack.xml218(para)
msgid "" msgid ""
"Trusted processes for managing the life cycle of disk images are required, " "Trusted processes for managing the life cycle of disk images are required, "
"as are all the previously mentioned issues with respect to data security." "as are all the previously mentioned issues with respect to data security."
msgstr "前述したデータセキュリティに関する問題と同様に、ディスクイメージのライフサイクル管理には信頼されたプロセスが必要です。" msgstr "前述したデータセキュリティに関する問題と同様に、ディスクイメージのライフサイクル管理には信頼されたプロセスが必要です。"
#: ./security-guide/section_introduction-to-openstack.xml216(title) #: ./security-guide/section_introduction-to-openstack.xml223(title)
msgid "Other supporting technology" msgid "Other supporting technology"
msgstr "その他の支援技術" msgstr "その他の支援技術"
#: ./security-guide/section_introduction-to-openstack.xml217(para) #: ./security-guide/section_introduction-to-openstack.xml224(para)
msgid "" msgid ""
"OpenStack relies on messaging for internal communication between several of " "OpenStack relies on messaging for internal communication between several of "
"its services. By default, OpenStack uses message queues based on the " "its services. By default, OpenStack uses message queues based on the "
@@ -4537,14 +4545,14 @@ msgid ""
"or <glossterm>ZeroMQ</glossterm>." "or <glossterm>ZeroMQ</glossterm>."
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml226(para) #: ./security-guide/section_introduction-to-openstack.xml233(para)
msgid "" msgid ""
"As most management commands flow through the message queuing system, it is a" "As most management commands flow through the message queuing system, it is a"
" primary security concern for any OpenStack deployment. Message queuing " " primary security concern for any OpenStack deployment. Message queuing "
"security is discussed in detail later in this guide." "security is discussed in detail later in this guide."
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml230(para) #: ./security-guide/section_introduction-to-openstack.xml237(para)
msgid "" msgid ""
"Several of the components use databases though it is not explicitly called " "Several of the components use databases though it is not explicitly called "
"out. Securing the access to the databases and their contents is yet another " "out. Securing the access to the databases and their contents is yet another "

78
security-guide/locale/security-guide.pot
View File

@@ -1,7 +1,7 @@
msgid "" msgid ""
msgstr "" msgstr ""
"Project-Id-Version: PACKAGE VERSION\n" "Project-Id-Version: PACKAGE VERSION\n"
"POT-Creation-Date: 2014-09-03 06:01+0000\n" "POT-Creation-Date: 2014-09-04 06:07+0000\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n" "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n" "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -1689,7 +1689,7 @@ msgstr ""
msgid "@@image: 'static/swift_network_diagram-2.png'; md5=69f8effe3f5d0f3cbccfb8c5a5dd299e" msgid "@@image: 'static/swift_network_diagram-2.png'; md5=69f8effe3f5d0f3cbccfb8c5a5dd299e"
msgstr "" msgstr ""
#: ./security-guide/ch_object-storage.xml:8(title) ./security-guide/section_introduction-to-openstack.xml:144(title) #: ./security-guide/ch_object-storage.xml:8(title) ./security-guide/section_introduction-to-openstack.xml:145(title)
msgid "Object Storage" msgid "Object Storage"
msgstr "" msgstr ""
@@ -2141,7 +2141,7 @@ msgstr ""
msgid "Database server" msgid "Database server"
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-ssl-tls.xml:120(para) ./security-guide/ch_dashboard.xml:8(title) ./security-guide/section_introduction-to-openstack.xml:186(title) ./security-guide/section_management-interfaces.xml:33(title) #: ./security-guide/section_introduction-to-ssl-tls.xml:120(para) ./security-guide/ch_dashboard.xml:8(title) ./security-guide/section_introduction-to-openstack.xml:190(title) ./security-guide/section_management-interfaces.xml:33(title)
msgid "Dashboard" msgid "Dashboard"
msgstr "" msgstr ""
@@ -2468,7 +2468,7 @@ msgid "Introduction to OpenStack"
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:9(para) #: ./security-guide/section_introduction-to-openstack.xml:9(para)
msgid "This guide provides security insight into OpenStack deployments. The intended audience is cloud architects, deployers, and administrators. In addition, cloud users will find the guide both educational and helpful in provider selection, while auditors will find it useful as a reference document to support their compliance certification efforts. This guide is also recommended for anyone interested in cloud security." msgid "This guide provides security insight into <glossterm>OpenStack</glossterm> deployments. The intended audience is cloud architects, deployers, and administrators. In addition, cloud users will find the guide both educational and helpful in provider selection, while auditors will find it useful as a reference document to support their compliance certification efforts. This guide is also recommended for anyone interested in cloud security."
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:16(para) #: ./security-guide/section_introduction-to-openstack.xml:16(para)
@@ -2536,102 +2536,102 @@ msgid "Compute"
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:123(para) #: ./security-guide/section_introduction-to-openstack.xml:123(para)
msgid "OpenStack Compute service (nova) provides services to support the management of virtual machine instances at scale, instances that host multi-tiered applications, dev/test environments, \"Big Data\" crunching Hadoop clusters, and/or high performance computing." msgid "OpenStack <glossterm>Compute</glossterm> service (<glossterm>nova</glossterm>) provides services to support the management of virtual machine instances at scale, instances that host multi-tiered applications, dev/test environments, \"Big Data\" crunching Hadoop clusters, and/or high performance computing."
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:128(para) #: ./security-guide/section_introduction-to-openstack.xml:129(para)
msgid "The Compute service facilitates this management through an abstraction layer that interfaces with supported hypervisors, which we address later on in more detail." msgid "The Compute service facilitates this management through an abstraction layer that interfaces with supported hypervisors, which we address later on in more detail."
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:131(para) #: ./security-guide/section_introduction-to-openstack.xml:132(para)
msgid "Later in the guide, we focus generically on the virtualization stack as it relates to hypervisors." msgid "Later in the guide, we focus generically on the virtualization stack as it relates to hypervisors."
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:133(para) #: ./security-guide/section_introduction-to-openstack.xml:134(para)
msgid "For information about the current state of feature support, see <link href=\"https://wiki.openstack.org/wiki/HypervisorSupportMatrix\">OpenStack Hypervisor Support Matrix</link>." msgid "For information about the current state of feature support, see <link href=\"https://wiki.openstack.org/wiki/HypervisorSupportMatrix\">OpenStack Hypervisor Support Matrix</link>."
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:137(para) #: ./security-guide/section_introduction-to-openstack.xml:138(para)
msgid "The security of Compute is critical for an OpenStack deployment. Hardening techniques should include support for strong instance isolation, secure communication between Compute sub-components, and resiliency of public-facing <glossterm>API</glossterm> endpoints." msgid "The security of Compute is critical for an OpenStack deployment. Hardening techniques should include support for strong instance isolation, secure communication between Compute sub-components, and resiliency of public-facing <glossterm>API</glossterm> endpoints."
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:145(para) #: ./security-guide/section_introduction-to-openstack.xml:146(para)
msgid "The OpenStack Object Storage service (swift) provides support for storing and retrieving arbitrary data in the cloud. The Object Storage service provides both a native API and an Amazon Web Services S3 compatible API. The service provides a high degree of resiliency through data replication and can handle petabytes of data." msgid "The OpenStack <glossterm>Object Storage</glossterm> service (<glossterm>swift</glossterm>) provides support for storing and retrieving arbitrary data in the cloud. The Object Storage service provides both a native API and an Amazon Web Services S3 compatible API. The service provides a high degree of resiliency through data replication and can handle petabytes of data."
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:151(para) #: ./security-guide/section_introduction-to-openstack.xml:153(para)
msgid "It is important to understand that object storage differs from traditional file system storage. It is best used for static data such as media files (MP3s, images, videos), virtual machine images, and backup files." msgid "It is important to understand that object storage differs from traditional file system storage. It is best used for static data such as media files (MP3s, images, videos), virtual machine images, and backup files."
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:155(para) #: ./security-guide/section_introduction-to-openstack.xml:157(para)
msgid "Object security should focus on access control and encryption of data in transit and at rest. Other concerns may relate to system abuse, illegal or malicious content storage, and cross authentication attack vectors." msgid "Object security should focus on access control and encryption of data in transit and at rest. Other concerns may relate to system abuse, illegal or malicious content storage, and cross authentication attack vectors."
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:161(title) #: ./security-guide/section_introduction-to-openstack.xml:163(title)
msgid "Block Storage" msgid "Block Storage"
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:162(para) #: ./security-guide/section_introduction-to-openstack.xml:164(para)
msgid "The OpenStack Block Storage service (cinder) provides persistent block storage for compute instances. The Block Storage service is responsible for managing the life-cycle of block devices, from the creation and attachment of volumes to instances, to their release." msgid "The OpenStack <glossterm>Block Storage</glossterm> service (<glossterm>cinder</glossterm>) provides persistent block storage for compute instances. The Block Storage service is responsible for managing the life-cycle of block devices, from the creation and attachment of volumes to instances, to their release."
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:167(para) #: ./security-guide/section_introduction-to-openstack.xml:170(para)
msgid "Security considerations for block storage are similar to that of object storage." msgid "Security considerations for block storage are similar to that of object storage."
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:171(title) ./security-guide/ch_networking.xml:7(title) #: ./security-guide/section_introduction-to-openstack.xml:174(title) ./security-guide/ch_networking.xml:7(title)
msgid "Networking" msgid "Networking"
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:172(para) #: ./security-guide/section_introduction-to-openstack.xml:175(para)
msgid "The OpenStack Networking service (neutron, previously called quantum) provides various networking services to cloud users (tenants) such as IP address management, <glossterm>DNS</glossterm>, <glossterm>DHCP</glossterm>, load balancing, and security groups (network access rules, like firewall policies). It provides a framework for software defined networking (SDN) that allows for pluggable integration with various networking solutions." msgid "The OpenStack <glossterm>Networking</glossterm> service (<glossterm>neutron</glossterm>, previously called quantum) provides various networking services to cloud users (tenants) such as IP address management, <glossterm>DNS</glossterm>, <glossterm>DHCP</glossterm>, load balancing, and security groups (network access rules, like firewall policies). It provides a framework for software defined networking (SDN) that allows for pluggable integration with various networking solutions."
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:180(para) #: ./security-guide/section_introduction-to-openstack.xml:184(para)
msgid "OpenStack Networking allows cloud tenants to manage their guest network configurations. Security concerns with the networking service include network traffic isolation, availability, integrity and confidentiality." msgid "OpenStack Networking allows cloud tenants to manage their guest network configurations. Security concerns with the networking service include network traffic isolation, availability, integrity and confidentiality."
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:187(para) #: ./security-guide/section_introduction-to-openstack.xml:191(para)
msgid "The OpenStack dashboard (horizon) provides a web-based interface for both cloud administrators and cloud tenants. Through this interface administrators and tenants can provision, manage, and monitor cloud resources. Horizon is commonly deployed in a public facing manner with all the usual security concerns of public web portals." msgid "The OpenStack <glossterm>dashboard</glossterm> (<glossterm>horizon</glossterm>) provides a web-based interface for both cloud administrators and cloud tenants. Through this interface administrators and tenants can provision, manage, and monitor cloud resources. Horizon is commonly deployed in a public facing manner with all the usual security concerns of public web portals."
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:195(title) #: ./security-guide/section_introduction-to-openstack.xml:200(title)
msgid "Identity service" msgid "Identity service"
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:196(para)
msgid "The OpenStack Identity service (keystone) is a <emphasis role=\"bold\">shared service</emphasis> that provides authentication and authorization services throughout the entire cloud infrastructure. The Identity service has pluggable support for multiple forms of authentication."
msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:201(para) #: ./security-guide/section_introduction-to-openstack.xml:201(para)
msgid "Security concerns here pertain to trust in authentication, management of authorization tokens, and secure communication." msgid "The OpenStack <glossterm baseform=\"Identity Service\">Identity</glossterm> service (<glossterm>keystone</glossterm>) is a <emphasis role=\"bold\">shared service</emphasis> that provides authentication and authorization services throughout the entire cloud infrastructure. The Identity service has pluggable support for multiple forms of authentication."
msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:206(title)
msgid "Image Service"
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:207(para) #: ./security-guide/section_introduction-to-openstack.xml:207(para)
msgid "The OpenStack Image Service (glance) provides disk image management services. The Image Service provides image discovery, registration, and delivery services to the Compute service, as needed." msgid "Security concerns here pertain to trust in authentication, management of authorization tokens, and secure communication."
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:211(para) #: ./security-guide/section_introduction-to-openstack.xml:212(title)
msgid "Image Service"
msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:213(para)
msgid "The OpenStack <glossterm>Image Service</glossterm> (<glossterm>glance</glossterm>) provides disk image management services. The Image Service provides image discovery, registration, and delivery services to the Compute service, as needed."
msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:218(para)
msgid "Trusted processes for managing the life cycle of disk images are required, as are all the previously mentioned issues with respect to data security." msgid "Trusted processes for managing the life cycle of disk images are required, as are all the previously mentioned issues with respect to data security."
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:216(title) #: ./security-guide/section_introduction-to-openstack.xml:223(title)
msgid "Other supporting technology" msgid "Other supporting technology"
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:217(para) #: ./security-guide/section_introduction-to-openstack.xml:224(para)
msgid "OpenStack relies on messaging for internal communication between several of its services. By default, OpenStack uses message queues based on the Advanced Message Queue Protocol (<glossterm baseform=\"Advanced Message Queuing Protocol (AMQP)\">AMQP </glossterm>). Similar to most OpenStack services, it supports pluggable components. Today the implementation back end could be <glossterm>RabbitMQ</glossterm>, <glossterm>Qpid</glossterm>, or <glossterm>ZeroMQ</glossterm>." msgid "OpenStack relies on messaging for internal communication between several of its services. By default, OpenStack uses message queues based on the Advanced Message Queue Protocol (<glossterm baseform=\"Advanced Message Queuing Protocol (AMQP)\">AMQP </glossterm>). Similar to most OpenStack services, it supports pluggable components. Today the implementation back end could be <glossterm>RabbitMQ</glossterm>, <glossterm>Qpid</glossterm>, or <glossterm>ZeroMQ</glossterm>."
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:226(para) #: ./security-guide/section_introduction-to-openstack.xml:233(para)
msgid "As most management commands flow through the message queuing system, it is a primary security concern for any OpenStack deployment. Message queuing security is discussed in detail later in this guide." msgid "As most management commands flow through the message queuing system, it is a primary security concern for any OpenStack deployment. Message queuing security is discussed in detail later in this guide."
msgstr "" msgstr ""
#: ./security-guide/section_introduction-to-openstack.xml:230(para) #: ./security-guide/section_introduction-to-openstack.xml:237(para)
msgid "Several of the components use databases though it is not explicitly called out. Securing the access to the databases and their contents is yet another security concern, and consequently discussed in more detail later in this guide." msgid "Several of the components use databases though it is not explicitly called out. Securing the access to the databases and their contents is yet another security concern, and consequently discussed in more detail later in this guide."
msgstr "" msgstr ""