#Licensed to the Apache Software Foundation (ASF) under one #or more contributor license agreements. See the NOTICE file #distributed with this work for additional information #regarding copyright ownership. The ASF licenses this file #to you under the Apache License, Version 2.0 (the #"License"); you may not use this file except in compliance #with the License. You may obtain a copy of the License at #http://www.apache.org/licenses/LICENSE-2.0 #Unless required by applicable law or agreed to in writing, #software distributed under the License is distributed on an #"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY #KIND, either express or implied. See the License for the #specific language governing permissions and limitations #under the License. # # Translators: msgid "" msgstr "" "Project-Id-Version: Apache CloudStack Docs\n" "POT-Creation-Date: 2013-04-12T11:19:38\n" "PO-Revision-Date: 2013-04-12 11:36+0000\n" "Last-Translator: sebgoa \n" "Language-Team: None\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Language: zh_TW\n" "Plural-Forms: nplurals=1; plural=0;\n" #. Tag: title #, no-c-format msgid "Console Proxy" msgstr "" #. Tag: para #, no-c-format msgid "" "The Console Proxy is a type of System Virtual Machine that has a role in " "presenting a console view via the web UI. It connects the user’s browser to " "the VNC port made available via the hypervisor for the console of the guest." " Both the administrator and end user web UIs offer a console connection." msgstr "" #. Tag: para #, no-c-format msgid "" "Clicking a console icon brings up a new window. The AJAX code downloaded " "into that window refers to the public IP address of a console proxy VM. " "There is exactly one public IP address allocated per console proxy VM. The " "AJAX application connects to this IP. The console proxy then proxies the " "connection to the VNC port for the requested VM on the Host hosting the " "guest." msgstr "" #. Tag: para #, no-c-format msgid "" "The hypervisors will have many ports assigned to VNC usage so that multiple " "VNC sessions can occur simultaneously." msgstr "" #. Tag: para #, no-c-format msgid "" "There is never any traffic to the guest virtual IP, and there is no need to " "enable VNC within the guest." msgstr "" #. Tag: para #, no-c-format msgid "" "The console proxy VM will periodically report its active session count to " "the Management Server. The default reporting interval is five seconds. This " "can be changed through standard Management Server configuration with the " "parameter consoleproxy.loadscan.interval." msgstr "" #. Tag: para #, no-c-format msgid "" "Assignment of guest VM to console proxy is determined by first determining " "if the guest VM has a previous session associated with a console proxy. If " "it does, the Management Server will assign the guest VM to the target " "Console Proxy VM regardless of the load on the proxy VM. Failing that, the " "first available running Console Proxy VM that has the capacity to handle new" " sessions is used." msgstr "" #. Tag: para #, no-c-format msgid "" "Console proxies can be restarted by administrators but this will interrupt " "existing console sessions for users." msgstr "" #. Tag: title #, no-c-format msgid "Using a SSL Certificate for the Console Proxy" msgstr "" #. Tag: para #, no-c-format msgid "" "The console viewing functionality uses a dynamic DNS service under the " "domain name realhostip.com to assist in providing SSL security to console " "sessions. The console proxy is assigned a public IP address. In order to " "avoid browser warnings for mismatched SSL certificates, the URL for the new " "console window is set to the form of https://aaa-bbb-ccc-ddd.realhostip.com." " You will see this URL during console session creation. &PRODUCT; includes " "the realhostip.com SSL certificate in the console proxy VM. Of course, " "&PRODUCT; cannot know about the DNS A records for our customers' public IPs " "prior to shipping the software. &PRODUCT; therefore runs a dynamic DNS " "server that is authoritative for the realhostip.com domain. It maps the aaa-" "bbb-ccc-ddd part of the DNS name to the IP address aaa.bbb.ccc.ddd on " "lookups. This allows the browser to correctly connect to the console proxy's" " public IP, where it then expects and receives a SSL certificate for " "realhostip.com, and SSL is set up without browser warnings." msgstr "" #. Tag: title #, no-c-format msgid "Changing the Console Proxy SSL Certificate and Domain" msgstr "改變控制台代理SSL認證及網域" #. Tag: para #, no-c-format msgid "" "If the administrator prefers, it is possible for the URL of the customer's " "console session to show a domain other than realhostip.com. The " "administrator can customize the displayed domain by selecting a different " "domain and uploading a new SSL certificate and private key. The domain must " "run a DNS service that is capable of resolving queries for addresses of the " "form aaa-bbb-ccc-ddd.your.domain to an IPv4 IP address in the form " "aaa.bbb.ccc.ddd, for example, 202.8.44.1. To change the console proxy " "domain, SSL certificate, and private key:" msgstr "如果管理者想要，有可能客戶的控制台工作的URL會顯示不同於realhostip.com的網路。管理者可以自訂顯示的網域，藉由選擇不同的網域，並上傳新的SSL認證與私人金鑰。往玉必須執行DNS服務，能夠解析位址查詢，位址形式為aaa-bbb-ccc-ddd.your.domain，並轉成IPv4 IP位址，位址形式為aaa.bbb.ccc.ddd。例如，202.8.44.1。想要改變控制台代理網域、SSL認證及私人金鑰：" #. Tag: para #, no-c-format msgid "" "Set up dynamic name resolution or populate all possible DNS names in your " "public IP range into your existing DNS server with the format aaa-bbb-ccc-" "ddd.company.com -> aaa.bbb.ccc.ddd." msgstr "建立動態名稱解析或填充所有您公開IP範圍中可能的DNS名稱到已有的DNS伺服器，格式為aaa-bbb-ccc-ddd.company.com -> aaa.bbb.ccc.ddd" #. Tag: para #, no-c-format msgid "" "Generate the private key and certificate signing request (CSR). When you are" " using openssl to generate private/public key pairs and CSRs, for the " "private key that you are going to paste into the &PRODUCT; UI, be sure to " "convert it into PKCS#8 format." msgstr "產生私人金鑰及certificate signing request (CSR)，當您要使用openssl來產生私人/公開金鑰對及CSRs時，對於您要貼到&PRODUCT;使用者介面的私人金鑰，請確定已轉為PKCS#8 格式" #. Tag: para #, no-c-format msgid "Generate a new 2048-bit private key" msgstr "產生新的2048位元私人金鑰" #. Tag: programlisting #, no-c-format msgid "openssl genrsa -des3 -out yourprivate.key 2048" msgstr "openssl genrsa -des3 -out yourprivate.key 2048" #. Tag: para #, no-c-format msgid "Generate a new certificate CSR" msgstr "產生新的認證CSR" #. Tag: programlisting #, no-c-format msgid "openssl req -new -key yourprivate.key -out yourcertificate.csr" msgstr "openssl req -new -key yourprivate.key -out yourcertificate.csr" #. Tag: para #, no-c-format msgid "" "Head to the website of your favorite trusted Certificate Authority, purchase" " an SSL certificate, and submit the CSR. You should receive a valid " "certificate in return" msgstr "前往您信任的認證機構網站，購買SSL認證，然後交給CSR，您會收到合法的認證" #. Tag: para #, no-c-format msgid "Convert your private key format into PKCS#8 encrypted format." msgstr "將您的私人金鑰格式轉為 PKCS#8加密格式" #. Tag: programlisting #, no-c-format msgid "" "openssl pkcs8 -topk8 -in yourprivate.key -out " "yourprivate.pkcs8.encrypted.key" msgstr "" #. Tag: para #, no-c-format msgid "" "Convert your PKCS#8 encrypted private key into the PKCS#8 format that is " "compliant with &PRODUCT;" msgstr "將您的PKCS#8加密私人金鑰轉為PKCS#8格式，符合&PRODUCT;的格式" #. Tag: programlisting #, no-c-format msgid "" "openssl pkcs8 -in yourprivate.pkcs8.encrypted.key -out yourprivate.pkcs8.key" msgstr "openssl pkcs8 -in yourprivate.pkcs8.encrypted.key -out yourprivate.pkcs8.key" #. Tag: para #, no-c-format msgid "" "In the Update SSL Certificate screen of the &PRODUCT; UI, paste the " "following:" msgstr "" #. Tag: para #, no-c-format msgid "The certificate you've just generated." msgstr "" #. Tag: para #, no-c-format msgid "The private key you've just generated." msgstr "" #. Tag: para #, no-c-format msgid "The desired new domain name; for example, company.com" msgstr "新的網域名稱，例如，company.com" #. Tag: para #, no-c-format msgid "" "This stops all currently running console proxy VMs, then restarts them with " "the new certificate and key. Users might notice a brief interruption in " "console availability." msgstr "" #. Tag: para #, no-c-format msgid "" "The Management Server generates URLs of the form \"aaa-bbb-ccc-" "ddd.company.com\" after this change is made. The new console requests will " "be served with the new DNS domain name, certificate, and key." msgstr ""