# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2015-2019, Project Gluon
# This file is distributed under the same license as the Gluon package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: Gluon 2018.2+\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2019-04-20 16:46-0400\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"

#: ../../features/vpn.rst:2
# 58fbd14144974a8884e74e59d443be93
msgid "Mesh-VPN"
msgstr ""

#: ../../features/vpn.rst:4
# 59162e8df8fc468a9f792b812ffb7628
msgid "Gluon integrates several OSI-Layer 2 tunneling protocols to enable interconnects between local meshes and provide internetwork access. Available protocols currently are:"
msgstr ""

#: ../../features/vpn.rst:8
#: ../../features/vpn.rst:23
# 33c4ddfce8fe41fc82aece9b18e4e594
# 50309a86344b4a8c81a3375449a4378d
msgid "fastd"
msgstr ""

#: ../../features/vpn.rst:9
# 4647df46fd4f46f590e6f911d6c0a95c
msgid "L2TPv3 (via tunneldigger)"
msgstr ""

#: ../../features/vpn.rst:11
# 2d82f2d0738741feb40bcdbb9d22ea7e
msgid "fastd is a lightweight userspace tunneling daemon, that implements cipher suites that are specifically designed to work well on embedded devices. It offers encryption and authentication. Its primary drawback are the necessary context-switches when forwarding packets."
msgstr ""

#: ../../features/vpn.rst:17
# 4a63be8ebe094e029c12d252f83d66fb
msgid "L2TPv3 is an in-kernel tunneling protocol that performs well, but offers no security properties by itself. The brokering of the tunnel happens through tunneldigger, its primary drawback being the lack of IPv6 support."
msgstr ""

#: ../../features/vpn.rst:26
# e47643f5b0fb48adb90bad71b4f26bfb
msgid "Configurable Cipher"
msgstr ""

#: ../../features/vpn.rst:29
# c951bd6c933a4de4a7a22f679387b1b8
msgid "From the site configuration fastd can be allowed to offer toggleable encryption in the config mode with the intent to increase throughput, although in practice the gain is minimal."
msgstr ""

#: ../../features/vpn.rst:33
# 3b8b564aec704427a025458ef7e20094
msgid "**Site configuration:**"
msgstr ""

#: ../../features/vpn.rst:35
# 0aae6a179be749d0a1a44fb9ddc0ce3e
msgid "Add the feature ``web-mesh-vpn-fastd`` in ``site.mk``"
msgstr ""

#: ../../features/vpn.rst:36
# 0cfac47f523d4bacb2cbb7881b9f6718
msgid "Set ``mesh_vpn.fastd.configurable = true`` in ``site.conf``"
msgstr ""

#: ../../features/vpn.rst:37
# 9fc8d7753a1643a4964177f513746b43
msgid "Optionally add ``null`` to the ``mesh_vpn.fastd.methods`` table if you want \"Performance mode\" as default (not recommended)"
msgstr ""

#: ../../features/vpn.rst:39
# 1b80ac37d99d4c979d439890e4f0acd9
msgid "**Gateway configuration:**"
msgstr ""

#: ../../features/vpn.rst:41
# dc4945a90bbf4660904290f5a91177b9
msgid "Prepend the ``null`` cipher in fastd's method list"
msgstr ""

#: ../../features/vpn.rst:44
# 2f095fa8cc374f8cb01f8c24b8f1f794
msgid "**Config Mode:** The resulting firmware will allow users to choose between secure (encrypted) and fast (unencrypted) transport."
msgstr ""

#: ../../features/vpn.rst:49
# 232c807ecddb4720b3f71f90d7c71568
msgid "**Unix socket:** To confirm whether the correct cipher is being used, fastds unix socket can be interrogated, after installing for example `socat`."
msgstr ""