# SOME DESCRIPTIVE TITLE. # Copyright (C) 2015, Neutron FWaaS Developers # This file is distributed under the same license as the neutron-fwaas package. # FIRST AUTHOR , YEAR. # #, fuzzy msgid "" msgstr "" "Project-Id-Version: neutron-fwaas \n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2020-04-28 15:52+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" #: ../../:45 msgid "--resource-type firewall_group" msgstr "" #: ../../:39 msgid "--resource-type firewall_group --resource " msgstr "" #: ../../:40 msgid "" "--resource-type firewall_group --resource --target " "" msgstr "" #: ../../:44 msgid "--resource-type firewall_group --target " msgstr "" #: ../../:5 msgid "11.0.0" msgstr "" #: ../../:5 msgid "12.0.0" msgstr "" #: ../../:5 msgid "13.0.0" msgstr "" #: ../../:5 msgid "14.0.0" msgstr "" #: ../../:5 current msgid "16.0.0.0rc1" msgstr "" #: ../../:50 msgid "7.0.2" msgstr "" #: ../../:5 msgid "7.1.1" msgstr "" #: ../../:5 msgid "8.0.0" msgstr "" #: ../../:5 msgid "9.0.0" msgstr "" #: ../../:93 msgid "9.0.0.0b2" msgstr "" #: ../../:48 msgid "9.0.0.0b3" msgstr "" #: ../../:5 msgid "9.0.0.0rc1" msgstr "" #: ../../:14 msgid "Adding new tables for future consumption." msgstr "" #: ../../:76 msgid "And the Security Group driver is specified as:" msgstr "" #: ../../:19 msgid "" "Associating default firewall group for new VM ports within a project " "automatically." msgstr "" #: ../../:90 msgid "Bug Fixes" msgstr "" #: ../../:29 msgid "Coexistence between security group and firewall group." msgstr "" #: ../../:72 msgid "Currently, the FWaaSv2 L2 driver can be configured as:" msgstr "" #: ../../:20 current msgid "Deprecation Notes" msgstr "" #: ../../:24 current msgid "" "Due to lack of maintainers neutron-fwaas project is now deprecated in the " "Neutron stadium. There is no planned releases of this project in the " "``Victoria`` cycle. In ``W`` cycle project will be moved out from the " "stadium to the unofficial OpenStack projects. If You want to step in and be " "maintainer of this project to keep it in the Neutron stadium, please contact " "the ``neutron team`` via openstack-discuss@lists.openstack.org or IRC " "channel #openstack-neutron @freenode." msgstr "" #: ../../:51 origin/stable/ocata>:28 msgid "" "Earlier the FWaaS agent integrated with the L3 agent by having the L3 Agent " "class inherit from the FWaaS Agent class. This meant that other service " "agents could not also integrate with the L3 agent. Now, using the L3 agent " "extensions mechanism, FWaaS (v1 and v2) plugs in to the L3 agent. This " "means that it can interoperate peacefully with other L3 advanced services " "that also implement the L3 agent extension mechanism, all without any code " "changes to Neutron." msgstr "" #: ../../:14 origin/stable/mitaka>:19 msgid "Enable quotas for FWaaS." msgstr "" #: ../../:24 msgid "" "Enable to collect network packet log for ACCEPT/DROP action from firewall " "groups. Currently, packet logging supports only L3(router) ports." msgstr "" #: ../../:14 msgid "" "FWaaS V1 is being removed from the neutron-fwaas repo. Because FWaaS V2 has " "been available since the Newton release." msgstr "" #: ../../:69 origin/stable/ocata>:42 msgid "" "FWaaS v1 can not be enabled at the same time as FWaaS v2; one or the other " "must be chosen." msgstr "" #: ../../:14 msgid "Generation of sample Neutron FWaaS configuration files." msgstr "" #: ../../:128 msgid "" "If a port is associated with both firewall group & security group and there " "is a security group logging, which is enabled to collect ``DROP`` events for " "this port, then most of invalid packets will be dropped at firewall group " "for performance reason except first dropped packet, which is allowed by " "firewall group but not accepted by security group. So not every dropped " "packet will be logged (like in case of security group works in standalone " "mode)." msgstr "" #: ../../:80 msgid "" "If both are configured, the packet will still only hit the FWaaS table in " "OVS and will not traverse the rules in the SG table. There are some fixes " "needed to support this model which are being tested and will be merged " "shortly. Currently there are no checks to allow only one of FWaaS L2 or SG " "to be configured." msgstr "" #: ../../:47 origin/stable/ocata>:24 msgid "" "In FWaaS v2 firewall policies are applied to router ports, as opposed to " "applying to routers in FWaaS v1." msgstr "" #: ../../:30 origin/stable/mitaka>:39 #: stable/queens>:68 stable/rocky>:31 msgid "Known Issues" msgstr "" #: ../../:62 msgid "" "L2 firewall group driver based OVS can work in coexistence mode. That means, " "if a port is associated with both firewall group and security group, then a " "packet must be allowed by both features." msgstr "" #: ../../:29 msgid "" "Neutron FWaaS no longer includes static example configuration files. " "Instead, use tools/generate_config_file_samples.sh to generate them. The " "files are generated with a .sample extension." msgstr "" #: ../../:14 msgid "" "Neutron Firewall as a Service can be configured by the users with the newly " "introduced fwaas configuration file." msgstr "" #: ../../:14 current msgid "Neutron-fwaas project is now deprecated in the Neutron stadium." msgstr "" #: ../../:20 origin/stable/mitaka>:25 #: origin/stable/newton>:43 origin/stable/ocata>:20 stable/pike>:10 #: stable/queens>:40 stable/rocky>:20 msgid "New Features" msgstr "" #: ../../:44 msgid "" "New tables ``ACCEPTED_EGRESS_TRAFFIC_TABLE=91`` and " "``ACCEPTED_INGRESS_TRAFFIC_TABLE=92`` & ``DROPPED_TRAFFIC_TABLE=93`` are " "added to OVS based FWaaS L2 driver for future comsumption like logging " "service." msgstr "" #: ../../:44 origin/stable/mitaka>:53 msgid "" "Operators that increase the default limit for quota_routers from 10 may want " "to bump FWaaS quotas as well, since with router insertion a tenant can " "potentially have a unique policy and firewall for each router." msgstr "" #: ../../:40 origin/stable/liberty>:55 #: origin/stable/mitaka>:49 stable/queens>:124 msgid "Other Notes" msgstr "" #: ../../:10 current origin/stable/liberty>:10 #: origin/stable/mitaka>:10 origin/stable/newton>:10 origin/stable/ocata>:10 #: origin/stable/ocata>:53 origin/stable/ocata>:98 stable/queens>:10 #: stable/rocky>:10 stable/stein>:10 msgid "Prelude" msgstr "" #: ../../:14 msgid "" "Resource type **firewall group** has been supported for neutron packet " "logging framework. You can specify firewall group as ``--resource-type`` " "for logging API." msgstr "" #: ../../:59 msgid "Start using reno to manage release notes." msgstr "" #: ../../:24 msgid "" "Taking security for VM instance into consideration, we've removed an option " "to disable automatic association with default firewall group feature. " "Therefore, `auto_associate_default_firewall_group` has been removed." msgstr "" #: ../../:34 origin/stable/mitaka>:43 msgid "" "Tenants may receive a 409 Conflict error with a message body containing a " "quota exceeded message during resource creation if their quota is exceeded." msgstr "" #: ../../:61 origin/stable/ocata>:79 msgid "" "The Cisco FWaaS driver will not be available from the neutron-fwaas repo in " "Newton. For the Cisco FWaaS driver, refer to the openstack/networking-cisco " "repo." msgstr "" #: ../../:14 origin/stable/ocata>:57 msgid "" "The Cisco Firewall Driver is being moved from the FWaaS repo to the Cisco " "specific repo: https://github.com/openstack/networking-cisco" msgstr "" #: ../../:25 msgid "" "The FWaaS V1 source code will not be available in neutron-fwaas repo from " "Stein. neutron-fwaas-migrate-v1-to-v2 can be used for migrating V1 object to " "V2 model." msgstr "" #: ../../:24 msgid "" "The FWaaS extension can register quotas. The default values for " "quota_firewall, quota_firewall_policy, and quota_firewall_rule are set to -1 " "(unlimited)." msgstr "" #: ../../:33 msgid "" "The FWaaS extension will register quotas. The default values for " "quota_firewall and quota_firewall_policy are set to 10. The default value " "for quota_firewall_rule is set to 100. Quotas can be adjusted in the conf " "files, including -1 values to allow unlimited." msgstr "" #: ../../:19 origin/stable/ocata>:14 msgid "" "The FWaaS team is pleased to release FWaaS v2.0. This release of FWaaS " "supports either the original FWaaS v1 or the new FWaaS v2." msgstr "" #: ../../:24 origin/stable/ocata>:102 msgid "" "The McAfee Firewall Driver is being removed from the FwaaS repo, due to lack " "of active maintainers." msgstr "" #: ../../:73 origin/stable/ocata>:113 msgid "" "The McAfee Firewall Driver will not be available for use in the Newton " "release." msgstr "" #: ../../:51 msgid "" "The default firewall group won't be applied to all new VM ports as default. " "However, if option ``auto_associate_default_firewall_group`` is enabled in " "neutron_fwaas.conf like:" msgstr "" #: ../../:94 msgid "" "The limitation related to logging for security group in case of co-existence " "between SG and FWG is also fixed." msgstr "" #: ../../:30 origin/stable/ocata>:62 msgid "" "The vArmour Firewall Driver is being removed from the FwaaS repo, as per " "decision to remove vendor drivers from the community repo." msgstr "" #: ../../:77 origin/stable/ocata>:83 msgid "" "The vArmour Firewall Driver will not be available for use in the Newton " "release." msgstr "" #: ../../:38 origin/stable/ocata>:70 msgid "The vyatta Firewall Driver is being removed from the FwaaS repo," msgstr "" #: ../../:81 origin/stable/ocata>:87 msgid "" "The vyatta Firewall Driver will not be available for use in the Newton " "release from the community repo." msgstr "" #: ../../:58 msgid "Then, the default firewall group will be applied to all new VM ports." msgstr "" #: ../../:110 msgid "" "There is no validation to check if an updated port is for VM or not so far. " "After this fix, default firewall group association is called only for VM " "ports which are newly created." msgstr "" #: ../../:65 origin/stable/ocata>:38 msgid "" "There is not currently a defined upgrade path from FWaaS v1 to FWaaS v2." msgstr "" #: ../../:42 msgid "Therefore, you can only run with following combinations:" msgstr "" #: ../../:57 origin/stable/ocata>:34 #: origin/stable/ocata>:75 origin/stable/ocata>:109 stable/stein>:21 msgid "Upgrade Notes" msgstr "" #: ../../:34 msgid "Validating if a port is supported by FWaaS V2" msgstr "" #: ../../:99 msgid "" "[`bug 1702242 `__] Port " "range specification of a firewall rule now works expectedly with the " "reference L3 agent based implementation. Previously, when creating a " "firewall rule with port range like ``8778:9000``, the rule was not deleted " "correctly and only entries associated with the first port number were clean " "up. Note that this bug is only applied to the reference L3 agent based " "implementation." msgstr "" #: ../../:35 msgid "" "[`bug 1720727 `__] " "Currently, we cannot specify the following combination on CLI due to missing " "validation of --resource-type:" msgstr "" #: ../../:116 msgid "" "[`bug 1746855 `__] Now, " "FWaaS V2 will validate if a port is supported before adding it to a FWG. " "This helps to make sure FWaaS V2 API works as expected." msgstr "" #: ../../:55 msgid "[fwaas] auto_associate_default_firewall_group = True" msgstr "" #: ../../:78 msgid "``firewall_driver = openvswitch``" msgstr "" #: ../../:74 msgid "``firewall_driver = ovs``" msgstr "" #: ../../:37 origin/stable/ocata>:69 msgid "as per decision to remove vendor drivers from the community repo." msgstr "" #: ../source/index.rst:3 msgid "Neutron FWaaS Release Notes" msgstr "" #: ../source/liberty.rst:3 msgid "Liberty Series Release Notes" msgstr "" #: ../source/mitaka.rst:3 msgid "Mitaka Series Release Notes" msgstr "" #: ../source/newton.rst:3 msgid "Newton Series Release Notes" msgstr "" #: ../source/ocata.rst:3 msgid "Ocata Series Release Notes" msgstr "" #: ../source/pike.rst:3 msgid "Pike Series Release Notes" msgstr "" #: ../source/queens.rst:3 msgid "Queens Series Release Notes" msgstr "" #: ../source/rocky.rst:3 msgid "Rocky Series Release Notes" msgstr "" #: ../source/stein.rst:3 msgid "Stein Series Release Notes" msgstr "" #: ../source/unreleased.rst:3 msgid "Current Series Release Notes" msgstr ""