e2fad0b115
These are used to prime Weblate. They will be populated over time once we set up pushing translations back to the Gluon repo. Signed-off-by: Felix Kaechele <felix@kaechele.ca>
134 lines
4.4 KiB
Plaintext
134 lines
4.4 KiB
Plaintext
# SOME DESCRIPTIVE TITLE.
|
|
# Copyright (C) 2015-2019, Project Gluon
|
|
# This file is distributed under the same license as the Gluon package.
|
|
# FIRST AUTHOR <EMAIL@ADDRESS>, 2019.
|
|
#
|
|
#, fuzzy
|
|
msgid ""
|
|
msgstr ""
|
|
"Project-Id-Version: Gluon 2018.2+\n"
|
|
"Report-Msgid-Bugs-To: \n"
|
|
"POT-Creation-Date: 2019-04-20 14:06-0400\n"
|
|
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
|
|
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
|
|
"Language-Team: LANGUAGE <LL@li.org>\n"
|
|
"MIME-Version: 1.0\n"
|
|
"Content-Type: text/plain; charset=utf-8\n"
|
|
"Content-Transfer-Encoding: 8bit\n"
|
|
"Generated-By: Babel 2.6.0\n"
|
|
|
|
# 8d42dc1fc63f45c9bb5b87d670e3af86
|
|
#: ../../dev/wan.rst:2
|
|
msgid "WAN support"
|
|
msgstr ""
|
|
|
|
# 023242bda5054dcc8240afb505729953
|
|
#: ../../dev/wan.rst:4
|
|
msgid ""
|
|
"As the WAN port of a node will be connected to a user's private network, "
|
|
"it is essential that the node only uses the WAN when it is absolutely "
|
|
"necessary. There are two cases in which the WAN port is used:"
|
|
msgstr ""
|
|
|
|
# 78ff039978394cddb15392a69971b5b4
|
|
#: ../../dev/wan.rst:8
|
|
msgid "Mesh VPN (package ``gluon-mesh-vpn-fastd``)"
|
|
msgstr ""
|
|
|
|
# b84901d439c34f08a367adaeaca4d929
|
|
#: ../../dev/wan.rst:9
|
|
msgid "DNS to resolve the VPN servers' addresses (package ``gluon-wan-dnsmasq``)"
|
|
msgstr ""
|
|
|
|
# 2ef41e0cdc4c4db3878b79f4a0f8082e
|
|
#: ../../dev/wan.rst:11
|
|
msgid ""
|
|
"After the VPN connection has been established, the node should be able to"
|
|
" reach the mesh's DNS servers and use these for all other name "
|
|
"resolution."
|
|
msgstr ""
|
|
|
|
# 67b06cabea8443b09987aaaaef2018f2
|
|
#: ../../dev/wan.rst:16
|
|
msgid "Routing tables"
|
|
msgstr ""
|
|
|
|
# d035145beb7a4c6db3247df855a7f37d
|
|
#: ../../dev/wan.rst:17
|
|
msgid ""
|
|
"As a node may get IPv6 default routes both over the WAN and the mesh, "
|
|
"Gluon uses two routing tables for IPv6. As all normal traffic should go "
|
|
"over the mesh, the mesh routes are added to the default table (table 0). "
|
|
"All routes on the WAN interface are put into table 1 (see "
|
|
"``/lib/gluon/upgrade/110-network`` in ``gluon-core``)."
|
|
msgstr ""
|
|
|
|
# 3ce900c937804d7c820876b65b62984b
|
|
#: ../../dev/wan.rst:22
|
|
msgid ""
|
|
"There is also an *ip -6 rule* which routes all IPv6 traffic with a packet"
|
|
" mark with the bit 1 set though table 1."
|
|
msgstr ""
|
|
|
|
# de4cf4a3bd094e1c8eac7cc077f345b6
|
|
#: ../../dev/wan.rst:27
|
|
msgid "libpacketmark"
|
|
msgstr ""
|
|
|
|
# 6f90146bdb504edc805939d5cfa5d9f8
|
|
#: ../../dev/wan.rst:28
|
|
msgid ""
|
|
"*libpacketmark* is a library which can be loaded with ``LD_PRELOAD`` and "
|
|
"will set the packet mark of all sockets created by a process in "
|
|
"accordance with the ``LIBPACKETMARK_MARK`` environment variable. This "
|
|
"allows setting the packet mark for processes which don't support this "
|
|
"themselves. The process must run as root (or at least with "
|
|
"``CAP_NET_ADMIN``) for this to work."
|
|
msgstr ""
|
|
|
|
# 79083a8682dc41f4afe93bd6b2096b84
|
|
#: ../../dev/wan.rst:33
|
|
msgid ""
|
|
"Unfortunately there's no nice way to set the packet mark via iptables for"
|
|
" outgoing packets. The iptables will run after the packet has been "
|
|
"created, to even when the packet mark is changed and the packet is re-"
|
|
"routed, the source address won't be rewritten to the default source "
|
|
"address of the newly chosen route. *libpacketmark* avoids this issue as "
|
|
"the packet mark will already be set when the packet is created."
|
|
msgstr ""
|
|
|
|
# 810fd6d3fd404eab81585048b75bd561
|
|
#: ../../dev/wan.rst:39
|
|
msgid "gluon-wan-dnsmasq"
|
|
msgstr ""
|
|
|
|
# 7adf1141883d4cd1b8a8cd3344d57893
|
|
#: ../../dev/wan.rst:40
|
|
msgid ""
|
|
"To separate the DNS servers in the mesh from the ones on the WAN, the "
|
|
"``gluon-wan-dnsmasq`` package provides a secondary DNS daemon which runs "
|
|
"on ``127.0.0.1:54``. It will automatically use all DNS servers explicitly"
|
|
" configured in ``/etc/config/gluon-wan-dnsmasq`` or received via DNS/RA "
|
|
"on the WAN port. It is important that no DNS servers for the WAN "
|
|
"interface are configured in ``/etc/config/network`` and that ``peerdns`` "
|
|
"is set to 0 so the WAN DNS servers aren't leaked to the primary DNS "
|
|
"daemon."
|
|
msgstr ""
|
|
|
|
# 28d224ef1e6a4c0ba38610204401a8b1
|
|
#: ../../dev/wan.rst:46
|
|
msgid ""
|
|
"*libpacketmark* is used to make the secondary DNS daemon send its "
|
|
"requests over the WAN interface."
|
|
msgstr ""
|
|
|
|
# a945de8c2cb648dc829bb46fbb02243f
|
|
#: ../../dev/wan.rst:48
|
|
msgid ""
|
|
"The package ``gluon-mesh-vpn-fastd`` provides an iptables rule which will"
|
|
" redirect all DNS requests from processes running with the primary group "
|
|
"``gluon-mesh-vpn`` to ``127.0.0.1:54``, thus making fastd use the "
|
|
"secondary DNS daemon."
|
|
msgstr ""
|
|
|