#Licensed to the Apache Software Foundation (ASF) under one #or more contributor license agreements. See the NOTICE file #distributed with this work for additional information #regarding copyright ownership. The ASF licenses this file #to you under the Apache License, Version 2.0 (the #"License"); you may not use this file except in compliance #with the License. You may obtain a copy of the License at #http://www.apache.org/licenses/LICENSE-2.0 #Unless required by applicable law or agreed to in writing, #software distributed under the License is distributed on an #"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY #KIND, either express or implied. See the License for the #specific language governing permissions and limitations #under the License. # # Translators: # , 2013. msgid "" msgstr "" "Project-Id-Version: Apache CloudStack Docs\n" "POT-Creation-Date: 2013-04-12T11:19:38\n" "PO-Revision-Date: 2013-04-12 11:36+0000\n" "Last-Translator: sebgoa \n" "Language-Team: None\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Language: zh_CN\n" "Plural-Forms: nplurals=1; plural=0;\n" #. Tag: title #, no-c-format msgid "Console Proxy" msgstr "控制台代理（控制台虚拟机）" #. Tag: para #, no-c-format msgid "" "The Console Proxy is a type of System Virtual Machine that has a role in " "presenting a console view via the web UI. It connects the user’s browser to " "the VNC port made available via the hypervisor for the console of the guest." " Both the administrator and end user web UIs offer a console connection." msgstr "控制台代理作为系统虚拟机的一种通过网页用户接口为用户呈现一个控制台视图。它通过虚拟机软件为来宾提供的控制台将用户浏览器与vnc端口相连。管理员和终端用户动能通过网页用户接口获得一个控制台连接。" #. Tag: para #, no-c-format msgid "" "Clicking a console icon brings up a new window. The AJAX code downloaded " "into that window refers to the public IP address of a console proxy VM. " "There is exactly one public IP address allocated per console proxy VM. The " "AJAX application connects to this IP. The console proxy then proxies the " "connection to the VNC port for the requested VM on the Host hosting the " "guest." msgstr "" #. Tag: para #, no-c-format msgid "" "The hypervisors will have many ports assigned to VNC usage so that multiple " "VNC sessions can occur simultaneously." msgstr "虚拟机软件会分配多个vnc端口供vnc会话使用。" #. Tag: para #, no-c-format msgid "" "There is never any traffic to the guest virtual IP, and there is no need to " "enable VNC within the guest." msgstr "不会有任何流量是刘翔来宾虚拟IP的，并且不需要在来宾虚拟机打开vnc。" #. Tag: para #, no-c-format msgid "" "The console proxy VM will periodically report its active session count to " "the Management Server. The default reporting interval is five seconds. This " "can be changed through standard Management Server configuration with the " "parameter consoleproxy.loadscan.interval." msgstr "控制台虚拟机会定时的向管理服务器回报当前活动的会话数。默认报告间隔是五秒钟。可以通过管理服务器的配置参数 consoleproxy.loadscan.interval.更改。" #. Tag: para #, no-c-format msgid "" "Assignment of guest VM to console proxy is determined by first determining " "if the guest VM has a previous session associated with a console proxy. If " "it does, the Management Server will assign the guest VM to the target " "Console Proxy VM regardless of the load on the proxy VM. Failing that, the " "first available running Console Proxy VM that has the capacity to handle new" " sessions is used." msgstr "如果来宾虚拟机之前有已经分配的关联控制台代理的会话，控制台代理的分配会由第一次分配的控制台代理决定。如果该来宾虚拟级之前存在已分配的控制台代理，则不论该控制台代理目前负载如何管理服务器都会将该来宾虚拟机分配到目标控制台代理虚拟机。如果失败则会将来宾虚拟机分配到第一个拥有足够资源处理新会话的控制台代理上。" #. Tag: para #, no-c-format msgid "" "Console proxies can be restarted by administrators but this will interrupt " "existing console sessions for users." msgstr "管理员能重启控制台代理，但是这回是已经存在的用户的控制台会话中断。" #. Tag: title #, no-c-format msgid "Using a SSL Certificate for the Console Proxy" msgstr "" #. Tag: para #, no-c-format msgid "" "The console viewing functionality uses a dynamic DNS service under the " "domain name realhostip.com to assist in providing SSL security to console " "sessions. The console proxy is assigned a public IP address. In order to " "avoid browser warnings for mismatched SSL certificates, the URL for the new " "console window is set to the form of https://aaa-bbb-ccc-ddd.realhostip.com." " You will see this URL during console session creation. &PRODUCT; includes " "the realhostip.com SSL certificate in the console proxy VM. Of course, " "&PRODUCT; cannot know about the DNS A records for our customers' public IPs " "prior to shipping the software. &PRODUCT; therefore runs a dynamic DNS " "server that is authoritative for the realhostip.com domain. It maps the aaa-" "bbb-ccc-ddd part of the DNS name to the IP address aaa.bbb.ccc.ddd on " "lookups. This allows the browser to correctly connect to the console proxy's" " public IP, where it then expects and receives a SSL certificate for " "realhostip.com, and SSL is set up without browser warnings." msgstr "" #. Tag: title #, no-c-format msgid "Changing the Console Proxy SSL Certificate and Domain" msgstr "" #. Tag: para #, no-c-format msgid "" "If the administrator prefers, it is possible for the URL of the customer's " "console session to show a domain other than realhostip.com. The " "administrator can customize the displayed domain by selecting a different " "domain and uploading a new SSL certificate and private key. The domain must " "run a DNS service that is capable of resolving queries for addresses of the " "form aaa-bbb-ccc-ddd.your.domain to an IPv4 IP address in the form " "aaa.bbb.ccc.ddd, for example, 202.8.44.1. To change the console proxy " "domain, SSL certificate, and private key:" msgstr "" #. Tag: para #, no-c-format msgid "" "Set up dynamic name resolution or populate all possible DNS names in your " "public IP range into your existing DNS server with the format aaa-bbb-ccc-" "ddd.company.com -> aaa.bbb.ccc.ddd." msgstr "" #. Tag: para #, no-c-format msgid "" "Generate the private key and certificate signing request (CSR). When you are" " using openssl to generate private/public key pairs and CSRs, for the " "private key that you are going to paste into the &PRODUCT; UI, be sure to " "convert it into PKCS#8 format." msgstr "" #. Tag: para #, no-c-format msgid "Generate a new 2048-bit private key" msgstr "" #. Tag: programlisting #, no-c-format msgid "openssl genrsa -des3 -out yourprivate.key 2048" msgstr "" #. Tag: para #, no-c-format msgid "Generate a new certificate CSR" msgstr "" #. Tag: programlisting #, no-c-format msgid "openssl req -new -key yourprivate.key -out yourcertificate.csr" msgstr "" #. Tag: para #, no-c-format msgid "" "Head to the website of your favorite trusted Certificate Authority, purchase" " an SSL certificate, and submit the CSR. You should receive a valid " "certificate in return" msgstr "" #. Tag: para #, no-c-format msgid "Convert your private key format into PKCS#8 encrypted format." msgstr "" #. Tag: programlisting #, no-c-format msgid "" "openssl pkcs8 -topk8 -in yourprivate.key -out " "yourprivate.pkcs8.encrypted.key" msgstr "" #. Tag: para #, no-c-format msgid "" "Convert your PKCS#8 encrypted private key into the PKCS#8 format that is " "compliant with &PRODUCT;" msgstr "" #. Tag: programlisting #, no-c-format msgid "" "openssl pkcs8 -in yourprivate.pkcs8.encrypted.key -out yourprivate.pkcs8.key" msgstr "" #. Tag: para #, no-c-format msgid "" "In the Update SSL Certificate screen of the &PRODUCT; UI, paste the " "following:" msgstr "" #. Tag: para #, no-c-format msgid "The certificate you've just generated." msgstr "" #. Tag: para #, no-c-format msgid "The private key you've just generated." msgstr "" #. Tag: para #, no-c-format msgid "The desired new domain name; for example, company.com" msgstr "" #. Tag: para #, no-c-format msgid "" "This stops all currently running console proxy VMs, then restarts them with " "the new certificate and key. Users might notice a brief interruption in " "console availability." msgstr "" #. Tag: para #, no-c-format msgid "" "The Management Server generates URLs of the form \"aaa-bbb-ccc-" "ddd.company.com\" after this change is made. The new console requests will " "be served with the new DNS domain name, certificate, and key." msgstr ""