mirror of https://github.com/apache/cloudstack.git
245 lines
9.0 KiB
Plaintext
245 lines
9.0 KiB
Plaintext
#Licensed to the Apache Software Foundation (ASF) under one
|
||
#or more contributor license agreements. See the NOTICE file
|
||
#distributed with this work for additional information
|
||
#regarding copyright ownership. The ASF licenses this file
|
||
#to you under the Apache License, Version 2.0 (the
|
||
#"License"); you may not use this file except in compliance
|
||
#with the License. You may obtain a copy of the License at
|
||
#http://www.apache.org/licenses/LICENSE-2.0
|
||
#Unless required by applicable law or agreed to in writing,
|
||
#software distributed under the License is distributed on an
|
||
#"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
||
#KIND, either express or implied. See the License for the
|
||
#specific language governing permissions and limitations
|
||
#under the License.
|
||
#
|
||
# Translators:
|
||
msgid ""
|
||
msgstr ""
|
||
"Project-Id-Version: Apache CloudStack Docs\n"
|
||
"POT-Creation-Date: 2013-04-12T11:19:38\n"
|
||
"PO-Revision-Date: 2013-04-12 11:36+0000\n"
|
||
"Last-Translator: sebgoa <runseb@gmail.com>\n"
|
||
"Language-Team: None\n"
|
||
"MIME-Version: 1.0\n"
|
||
"Content-Type: text/plain; charset=UTF-8\n"
|
||
"Content-Transfer-Encoding: 8bit\n"
|
||
"Language: zh_TW\n"
|
||
"Plural-Forms: nplurals=1; plural=0;\n"
|
||
|
||
#. Tag: title
|
||
#, no-c-format
|
||
msgid "Console Proxy"
|
||
msgstr ""
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid ""
|
||
"The Console Proxy is a type of System Virtual Machine that has a role in "
|
||
"presenting a console view via the web UI. It connects the user’s browser to "
|
||
"the VNC port made available via the hypervisor for the console of the guest."
|
||
" Both the administrator and end user web UIs offer a console connection."
|
||
msgstr ""
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid ""
|
||
"Clicking a console icon brings up a new window. The AJAX code downloaded "
|
||
"into that window refers to the public IP address of a console proxy VM. "
|
||
"There is exactly one public IP address allocated per console proxy VM. The "
|
||
"AJAX application connects to this IP. The console proxy then proxies the "
|
||
"connection to the VNC port for the requested VM on the Host hosting the "
|
||
"guest."
|
||
msgstr ""
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid ""
|
||
"The hypervisors will have many ports assigned to VNC usage so that multiple "
|
||
"VNC sessions can occur simultaneously."
|
||
msgstr ""
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid ""
|
||
"There is never any traffic to the guest virtual IP, and there is no need to "
|
||
"enable VNC within the guest."
|
||
msgstr ""
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid ""
|
||
"The console proxy VM will periodically report its active session count to "
|
||
"the Management Server. The default reporting interval is five seconds. This "
|
||
"can be changed through standard Management Server configuration with the "
|
||
"parameter consoleproxy.loadscan.interval."
|
||
msgstr ""
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid ""
|
||
"Assignment of guest VM to console proxy is determined by first determining "
|
||
"if the guest VM has a previous session associated with a console proxy. If "
|
||
"it does, the Management Server will assign the guest VM to the target "
|
||
"Console Proxy VM regardless of the load on the proxy VM. Failing that, the "
|
||
"first available running Console Proxy VM that has the capacity to handle new"
|
||
" sessions is used."
|
||
msgstr ""
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid ""
|
||
"Console proxies can be restarted by administrators but this will interrupt "
|
||
"existing console sessions for users."
|
||
msgstr ""
|
||
|
||
#. Tag: title
|
||
#, no-c-format
|
||
msgid "Using a SSL Certificate for the Console Proxy"
|
||
msgstr ""
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid ""
|
||
"The console viewing functionality uses a dynamic DNS service under the "
|
||
"domain name realhostip.com to assist in providing SSL security to console "
|
||
"sessions. The console proxy is assigned a public IP address. In order to "
|
||
"avoid browser warnings for mismatched SSL certificates, the URL for the new "
|
||
"console window is set to the form of https://aaa-bbb-ccc-ddd.realhostip.com."
|
||
" You will see this URL during console session creation. &PRODUCT; includes "
|
||
"the realhostip.com SSL certificate in the console proxy VM. Of course, "
|
||
"&PRODUCT; cannot know about the DNS A records for our customers' public IPs "
|
||
"prior to shipping the software. &PRODUCT; therefore runs a dynamic DNS "
|
||
"server that is authoritative for the realhostip.com domain. It maps the aaa-"
|
||
"bbb-ccc-ddd part of the DNS name to the IP address aaa.bbb.ccc.ddd on "
|
||
"lookups. This allows the browser to correctly connect to the console proxy's"
|
||
" public IP, where it then expects and receives a SSL certificate for "
|
||
"realhostip.com, and SSL is set up without browser warnings."
|
||
msgstr ""
|
||
|
||
#. Tag: title
|
||
#, no-c-format
|
||
msgid "Changing the Console Proxy SSL Certificate and Domain"
|
||
msgstr "改變控制台代理SSL認證及網域"
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid ""
|
||
"If the administrator prefers, it is possible for the URL of the customer's "
|
||
"console session to show a domain other than realhostip.com. The "
|
||
"administrator can customize the displayed domain by selecting a different "
|
||
"domain and uploading a new SSL certificate and private key. The domain must "
|
||
"run a DNS service that is capable of resolving queries for addresses of the "
|
||
"form aaa-bbb-ccc-ddd.your.domain to an IPv4 IP address in the form "
|
||
"aaa.bbb.ccc.ddd, for example, 202.8.44.1. To change the console proxy "
|
||
"domain, SSL certificate, and private key:"
|
||
msgstr "如果管理者想要，有可能客戶的控制台工作的URL會顯示不同於realhostip.com的網路。管理者可以自訂顯示的網域，藉由選擇不同的網域，並上傳新的SSL認證與私人金鑰。往玉必須執行DNS服務，能夠解析位址查詢，位址形式為aaa-bbb-ccc-ddd.your.domain，並轉成IPv4 IP位址，位址形式為aaa.bbb.ccc.ddd。例如，202.8.44.1。想要改變控制台代理網域、SSL認證及私人金鑰："
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid ""
|
||
"Set up dynamic name resolution or populate all possible DNS names in your "
|
||
"public IP range into your existing DNS server with the format aaa-bbb-ccc-"
|
||
"ddd.company.com -> aaa.bbb.ccc.ddd."
|
||
msgstr "建立動態名稱解析或填充所有您公開IP範圍中可能的DNS名稱到已有的DNS伺服器，格式為aaa-bbb-ccc-ddd.company.com -> aaa.bbb.ccc.ddd"
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid ""
|
||
"Generate the private key and certificate signing request (CSR). When you are"
|
||
" using openssl to generate private/public key pairs and CSRs, for the "
|
||
"private key that you are going to paste into the &PRODUCT; UI, be sure to "
|
||
"convert it into PKCS#8 format."
|
||
msgstr "產生私人金鑰及certificate signing request (CSR)，當您要使用openssl來產生私人/公開金鑰對及CSRs時，對於您要貼到&PRODUCT;使用者介面的私人金鑰，請確定已轉為PKCS#8 格式"
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid "Generate a new 2048-bit private key"
|
||
msgstr "產生新的2048位元私人金鑰"
|
||
|
||
#. Tag: programlisting
|
||
#, no-c-format
|
||
msgid "openssl genrsa -des3 -out yourprivate.key 2048"
|
||
msgstr "openssl genrsa -des3 -out yourprivate.key 2048"
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid "Generate a new certificate CSR"
|
||
msgstr "產生新的認證CSR"
|
||
|
||
#. Tag: programlisting
|
||
#, no-c-format
|
||
msgid "openssl req -new -key yourprivate.key -out yourcertificate.csr"
|
||
msgstr "openssl req -new -key yourprivate.key -out yourcertificate.csr"
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid ""
|
||
"Head to the website of your favorite trusted Certificate Authority, purchase"
|
||
" an SSL certificate, and submit the CSR. You should receive a valid "
|
||
"certificate in return"
|
||
msgstr "前往您信任的認證機構網站，購買SSL認證，然後交給CSR，您會收到合法的認證"
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid "Convert your private key format into PKCS#8 encrypted format."
|
||
msgstr "將您的私人金鑰格式轉為 PKCS#8加密格式"
|
||
|
||
#. Tag: programlisting
|
||
#, no-c-format
|
||
msgid ""
|
||
"openssl pkcs8 -topk8 -in yourprivate.key -out "
|
||
"yourprivate.pkcs8.encrypted.key"
|
||
msgstr ""
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid ""
|
||
"Convert your PKCS#8 encrypted private key into the PKCS#8 format that is "
|
||
"compliant with &PRODUCT;"
|
||
msgstr "將您的PKCS#8加密私人金鑰轉為PKCS#8格式，符合&PRODUCT;的格式"
|
||
|
||
#. Tag: programlisting
|
||
#, no-c-format
|
||
msgid ""
|
||
"openssl pkcs8 -in yourprivate.pkcs8.encrypted.key -out yourprivate.pkcs8.key"
|
||
msgstr "openssl pkcs8 -in yourprivate.pkcs8.encrypted.key -out yourprivate.pkcs8.key"
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid ""
|
||
"In the Update SSL Certificate screen of the &PRODUCT; UI, paste the "
|
||
"following:"
|
||
msgstr ""
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid "The certificate you've just generated."
|
||
msgstr ""
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid "The private key you've just generated."
|
||
msgstr ""
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid "The desired new domain name; for example, company.com"
|
||
msgstr "新的網域名稱，例如，company.com"
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid ""
|
||
"This stops all currently running console proxy VMs, then restarts them with "
|
||
"the new certificate and key. Users might notice a brief interruption in "
|
||
"console availability."
|
||
msgstr ""
|
||
|
||
#. Tag: para
|
||
#, no-c-format
|
||
msgid ""
|
||
"The Management Server generates URLs of the form \"aaa-bbb-ccc-"
|
||
"ddd.company.com\" after this change is made. The new console requests will "
|
||
"be served with the new DNS domain name, certificate, and key."
|
||
msgstr ""
|