From nobody Mon Oct 2 23:01:15 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 710191342D3 for ; Mon, 2 Oct 2017 23:01:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.841 X-Spam-Level: X-Spam-Status: No, score=-4.841 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DC_PNG_UNO_LARGO=0.001, FREEMAIL_FROM=0.001, HTML_IMAGE_RATIO_04=0.556, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-2.8, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mv0i1-y7Vc7q for ; Mon, 2 Oct 2017 23:01:11 -0700 (PDT) Received: from relais-inet.orange.com (mta135.mail.business.static.orange.com [80.12.70.35]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9A5DA13306F for ; Mon, 2 Oct 2017 23:01:10 -0700 (PDT) Received: from opfednr04.francetelecom.fr (unknown [xx.xx.xx.68]) by opfednr25.francetelecom.fr (ESMTP service) with ESMTP id 4EFDE180D10; Tue, 3 Oct 2017 08:01:09 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.66]) by opfednr04.francetelecom.fr (ESMTP service) with ESMTP id 1BCA24005D; Tue, 3 Oct 2017 08:01:09 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILMA1.corporate.adroot.infra.ftgroup ([fe80::95e2:eb4b:3053:fabf%19]) with mapi id 14.03.0361.001; Tue, 3 Oct 2017 08:01:08 +0200 From: To: Dino Farinacci , "lisp@ietf.org list" CC: Stefano Secci , JACQUENET Christian IMT/OLN Thread-Topic: [lisp] Addition to RFC6833bis for xTR-ID in Map-Request message Thread-Index: AQHTOKias241j71enkaitU3YxHrnIKLRpeJw Date: Tue, 3 Oct 2017 06:01:07 +0000 Message-ID: <1e0aac70-67f4-4b35-8d89-67e8800f8cd7@OPEXCLILMA1.corporate.adroot.infra.ftgroup> References: In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.2] Content-Type: multipart/related; boundary="_004_1e0aac7067f44b358d8967e8800f8cd7OPEXCLILMA1corporateadr_"; type="multipart/alternative" MIME-Version: 1.0 Archived-At: Subject: Re: [lisp] Addition to RFC6833bis for xTR-ID in Map-Request message X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Oct 2017 06:01:14 -0000 --_004_1e0aac7067f44b358d8967e8800f8cd7OPEXCLILMA1corporateadr_ Content-Type: multipart/alternative; boundary="_000_1e0aac7067f44b358d8967e8800f8cd7OPEXCLILMA1corporateadr_" --_000_1e0aac7067f44b358d8967e8800f8cd7OPEXCLILMA1corporateadr_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgRGlubywgYWxsLA0KDQpJIGRvIHN0cm9uZ2x5IHN1cHBvcnQgdGhhdCBwdWIvc3ViIGZlYXR1 cmUgaXMgYWxzbyBwb3NzaWJsZSBpbiBMSVNQLg0KDQpPdmVybG9hZGluZyBNYXAtUmVxdWVzdCBp cyBvbmUgd2F5IHRvIHByb2NlZWQsIGJ1dCB0aGVyZSBpcyBhbHNvIGFuIGFsdGVybmF0ZSBhcHBy b2FjaCB0byBkZWZpbmUgYSBkZWRpY2F0ZSBtZXRob2QgZm9yIHRoZSBzdWJzY3JpcHRpb24vbm90 aWZpY2F0aW9uIHB1cnBvc2VzIChlLmcuLCBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJh ZnQtYm91Y2FkYWlyLWxpc3Atc3Vic2NyaWJlLTA1KS4NCg0KSSBzdWdnZXN0IHRoYXQgdGhlIFdH IGV4YW1pbmVzIGJvdGggYXBwcm9hY2hlcy4NCg0KQ2hlZXJzLA0KTWVkDQoNCkRlIDogbGlzcCBb bWFpbHRvOmxpc3AtYm91bmNlc0BpZXRmLm9yZ10gRGUgbGEgcGFydCBkZSBEaW5vIEZhcmluYWNj aQ0KRW52b3nDqSA6IHZlbmRyZWRpIDI5IHNlcHRlbWJyZSAyMDE3IDAwOjI0DQrDgCA6IGxpc3BA aWV0Zi5vcmcgbGlzdA0KT2JqZXQgOiBbbGlzcF0gQWRkaXRpb24gdG8gUkZDNjgzM2JpcyBmb3Ig eFRSLUlEIGluIE1hcC1SZXF1ZXN0IG1lc3NhZ2UNCg0KVGhpcyBpcyBiYXNlZCBvbiB0aGUgZGlz Y3Vzc2lvbiB0aGF0IEFsYmVydG8gcmFpc2VkIG9uIHRoZSBsaXN0LiBIZXJlIGlzIHRoZSBwcm9w b3NlZCBjaGFuZ2UuIFdlIG1hZGUgdGhlDQp0ZXh0IGNvbnNpc3RlbnQgd2l0aCBob3cgdGhlIHhU Ui1JRCBpcyBzcGVj4oCZZWQgYW5kIHJlZmVyZW5jZWQgaW4gdGhlIE1hcC1SZWdpc3RlciBtZXNz YWdlLg0KDQpIZXJlIGlzIGEgY2hhbmdlIGRlc2NyaXB0aW9uOg0KW2NpZDppbWFnZTAwMS5wbmdA MDFEMzNDMUMuRDRFQTZCQzBdDQoNCg0KRGlubw0KDQpfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXw0KbGlzcCBtYWlsaW5nIGxpc3QNCmxpc3BAaWV0Zi5vcmc8 bWFpbHRvOmxpc3BAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3Rp bmZvL2xpc3ANCg== --_000_1e0aac7067f44b358d8967e8800f8cd7OPEXCLILMA1corporateadr_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7 fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJcGFub3NlLTE6MiAxMSA2IDQg MyA1IDQgNCAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5N c29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4w MDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFu Iiwic2VyaWYiO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZp c2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnNwYW4uRW1h aWxTdHlsZTE3DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5 OiJDb3VyaWVyIE5ldyI7DQoJY29sb3I6YmxhY2s7DQoJZm9udC13ZWlnaHQ6bm9ybWFsOw0KCWZv bnQtc3R5bGU6bm9ybWFsO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9y dC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6 NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3MC44NXB0IDcwLjg1cHQgNzAuODVwdCA3MC44NXB0 O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48 IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNw aWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHht bD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBk YXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0K PGJvZHkgbGFuZz0iRlIiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0i V29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 Oztjb2xvcjpibGFjayI+SGkgRGlubywgYWxsLA0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPkkgZG8gc3Ryb25nbHkgc3VwcG9ydCB0aGF0IHB1Yi9z dWIgZmVhdHVyZSBpcyBhbHNvIHBvc3NpYmxlIGluIExJU1AuPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNr Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPk92ZXJsb2FkaW5nIE1hcC1SZXF1ZXN0IGlz IG9uZSB3YXkgdG8gcHJvY2VlZCwgYnV0IHRoZXJlIGlzIGFsc28gYW4gYWx0ZXJuYXRlIGFwcHJv YWNoIHRvIGRlZmluZSBhIGRlZGljYXRlIG1ldGhvZCBmb3IgdGhlIHN1YnNjcmlwdGlvbi9ub3Rp ZmljYXRpb24gcHVycG9zZXMNCiAoZS5nLiwgPGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9y Zy9odG1sL2RyYWZ0LWJvdWNhZGFpci1saXNwLXN1YnNjcmliZS0wNSI+aHR0cHM6Ly90b29scy5p ZXRmLm9yZy9odG1sL2RyYWZ0LWJvdWNhZGFpci1saXNwLXN1YnNjcmliZS0wNTwvYT4pLg0KPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPkkgc3VnZ2Vz dCB0aGF0IHRoZSBXRyBleGFtaW5lcyBib3RoIGFwcHJvYWNoZXMuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJs YWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPkNoZWVycyw8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6 YmxhY2siPk1lZDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVw dDtwYWRkaW5nOjBjbSAwY20gMGNtIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6 bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNt IDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 OyI+RGUmbmJzcDs6PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IGxpc3Ag W21haWx0bzpsaXNwLWJvdW5jZXNAaWV0Zi5vcmddDQo8Yj5EZSBsYSBwYXJ0IGRlPC9iPiBEaW5v IEZhcmluYWNjaTxicj4NCjxiPkVudm95w6kmbmJzcDs6PC9iPiB2ZW5kcmVkaSAyOSBzZXB0ZW1i cmUgMjAxNyAwMDoyNDxicj4NCjxiPsOAJm5ic3A7OjwvYj4gbGlzcEBpZXRmLm9yZyBsaXN0PGJy Pg0KPGI+T2JqZXQmbmJzcDs6PC9iPiBbbGlzcF0gQWRkaXRpb24gdG8gUkZDNjgzM2JpcyBmb3Ig eFRSLUlEIGluIE1hcC1SZXF1ZXN0IG1lc3NhZ2U8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEy LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPlRoaXMgaXMgYmFzZWQgb24gdGhl IGRpc2N1c3Npb24gdGhhdCBBbGJlcnRvIHJhaXNlZCBvbiB0aGUgbGlzdC4gSGVyZSBpcyB0aGUg cHJvcG9zZWQgY2hhbmdlLiBXZSBtYWRlIHRoZTxicj4NCnRleHQgY29uc2lzdGVudCB3aXRoIGhv dyB0aGUgeFRSLUlEIGlzIHNwZWPigJllZCBhbmQgcmVmZXJlbmNlZCBpbiB0aGUgTWFwLVJlZ2lz dGVyIG1lc3NhZ2UuPGJyPg0KPGJyPg0KSGVyZSBpcyBhIGNoYW5nZSBkZXNjcmlwdGlvbjo8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxpbWcgYm9yZGVyPSIwIiB3aWR0aD0iMTA0MCIgaGVpZ2h0PSIzODQiIGlkPSJfeDAw MDBfaTEwMjUiIHNyYz0iY2lkOmltYWdlMDAxLnBuZ0AwMUQzM0MxQy5ENEVBNkJDMCI+PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+ PGJyPg0KPGJyPg0KRGlubzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEy LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NCmxpc3AgbWFpbGluZyBsaXN0PGJyPg0KPGEg aHJlZj0ibWFpbHRvOmxpc3BAaWV0Zi5vcmciPmxpc3BAaWV0Zi5vcmc8L2E+PGJyPg0KPGEgaHJl Zj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9saXNwIj5odHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2xpc3A8L2E+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_1e0aac7067f44b358d8967e8800f8cd7OPEXCLILMA1corporateadr_-- --_004_1e0aac7067f44b358d8967e8800f8cd7OPEXCLILMA1corporateadr_ Content-Type: image/png; name="image001.png" Content-Description: image001.png Content-Disposition: inline; filename="image001.png"; size=132658; creation-date="Tue, 03 Oct 2017 06:01:07 GMT"; modification-date="Tue, 03 Oct 2017 06:01:07 GMT" Content-ID: Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAABBAAAAGACAYAAAAUO5EUAABpLGlDQ1BJQ0MgUHJvZmlsZQAAeJyk 3HdUU1v7L/plryi9Se+9F6mhSw9NOiT0noQmPQm9JwHpLUGxUCRgBzUBURRFim1vilTbFqTa27pz 7fe8Y9zfvX+cccYhww8xJJkra835fOczhgJBpySCCITY3RAEJYbgEtxOWEh4+/hK7FuAdoDbv19B IYkEcxcXR+T+f7//z68vL//z3GeqyHu9/WfrkvnBcJMXV6Zbl/b5vfj/P/9/fO0PDUsMAd9fgz8Z IYSEJAjagQX3pVOSCMj9PHCf11zLQgvcr4OgJMeQyKBQCEpGnq8SFERIg6BTnOD+EfAcjf8+B9zX /O/9//X+yJekOTi+MAmvqNAwCUt8LD5Bwj0yKCEKFyHhkoAPj4oN+98c6//xV1JYahLy3RJPSEuI iohMkvjPEdjhQtRUJLQ0NPUgCDnf/5/zaBhnbvHvY7t2/fsD5L4L+EMGfxbAu4qEJCec+l9D7IQg GP7f/R2CzNYgSI4KQTzgu9hZMOoqOPUJ4OdHIWgvFwSFpP+/j5sQlBD07x1k/J3h4RC01QFBHJ7g 9RMQdJDz//bnXFxc/+M87fwffzuyjSj279VQ/QvRxA7R8RaivypiDB05VxmciCU5iPWfENvDEW/O Ij7sQN54ShzxQwdyLDC848XRNeT1nDqcBPDhByUjgVaa4GiPvDQDYx0hu4DZdMQMA67MES6cDzjq taxc4POyq8CBRvBqjt5OMNM4zvVnAC88kgOyppH7mysr4FX5MLxHSPztvxfuLAcb6CZxCYLElzTB tRMPs7ACn+29mwzwVFAXkCcePFOUTQYjiqZTA4DmLeBKi3JfaoMgkY+3x4ALo17AT7Ol4HG9jzPg VUdg+GCs+hwyiia07ycEadwXiwDiNT4Ad1qYQJB6kRtYJeoHQrghSK08ARyRmlAOWC+qzIp5oGsr OHKVPz1+wBvsQmDF+D5gw7wycGkDXDXVzzDMeQf1Egzy3dwMGctcURi8g9kbNbCuzcrM5YGSbhQI QnWEBANVEkcgyPRS7jRQ6/RFcOVun7UEoi9fgyDjlbtHgN2TYC4YdyzOAj9tC4NnGsOwwBE0+JyH 97hMI6O45vIeBjopNwJ3o9TA9G93BavYBRUMfo5+nAiei0bnYSDIeaKqFejWBnR6eTUGGHSPA8j3 bBG4/zU4D05en6uRZ8KwKAYzDEF8hdg6ZJSgqX1bwEtyn4EEYw+gNJoIQdjhIAYwMFESgjAreWB0 THwVeLfAT+dsgcnXwLoJ+HY/Ctj2AtSngJq3QsC1r+BoMXUwLN2DZ4HrVEuIBnM9OL4fGSthn4Qp BMU/O54CrHAE5z/eHPMQrLTl+FfAjFxwtgkHq8BVwJ8+B44Ez38NXGVc/bAi0PolDWj4DpwBXMt3 fvDMVBhWgkjXIUh2P9kGggTTs32QUXIC+MBoOZraJyEo+6sdGCu7N8AdGEgA6zx7Rw442+T60+1A xTZwJklXrt0GGg5jIYj4z19gURJfv5cCj3j+AJGQ7QPDGq5UMHdVpGngOKSaK5BlK1LZg4xVWaIC VlCltzV4fqWwrz4EVUzG3QRmksGIFWKVYMbSbpwFK4Jmew28mvpiGNQxatFfgsDi9+Cz0Pb/wIPX KsOw3hn6OQjSPsgA76/syZiCIAHiGX1klDOLUp3Aa6gLQKInOM4zxtHPIKh1g8gLbKDVAI3OVEEQ 4/lVUBkYkfdB5WOIv7wClHkPUoPR9QPMzDPLMGy8zWyGIINx5i8wllcPeF+Zf3qnkFGu6HGDeXLl yHEwiy6/cu0Gtka4AQMyvIFHKOBa995g/A30vjwJQT3b93DArhcfgZffgXftNfkO1t2VNBi2tGKD YzLLZINPbrgyUABWIGEQVF7OhiEFZKyhcHV7oKHDBnB3CKgDd4dTBYDEUjCr76q1gCo3+LIXXKnB U0NgvQyqPR8HarwF12Hw+ndQnYbewrBd2zioRyfkQDmFLKwmQF043jsJPrmM1dNX/2bIkuRlYJ8V qDnPigINgegkXyBHEahyT+81gVr8NIEJrstToUEw5ycvPAOrabL5DaghTwW+gvd4LgfDLmILPGD9 vFoAZ8EubwHUAXP7RTB7NDOX/kFGeU3fDSrn63QjcB5eO3mDq/lakMAHQcuz+eBzL9fVg2NYdrx0 CIKWvrOfAOlPxSFo8cfyU3Df/wuYpa91Ydjz7gYYz+PqpihY4SOb4FzZUbfQoDoUboN3FH//eR8y 1ufz6mDGfs50Be/82THGAMibDdbIp+c14Bp+onSAU/HJjAVq3fbqBLi/XbEM6ttW7qdM8DgnDAd8 QHLQfw+idzyi6zdEm8eImucRkYQQuYxoZ4EYtoZIVEKsOo548Sfi7SXEiX8fX/qB+DkWEYaP5EJg PR65A6637BEncPR9HH/ADNjPMQrqnAMHmFlOpzlAnfBf5gBVM9aQA3yajFoOUO9LvnGADGnw50gF KTbEAa5lnxpHNkixzxxgfk2FcICz/+H9ERwyDicvJ5j9R//89yb2A1HNANGEhui4hejvgxgzhJih jljSfBQ++qfhMGJ7BuLNNc7DnIce9nOqcqpMqXDGcsZ8uMLFw8UFw9xYcfDZePzFW7jCeVzFGeIT PJbidLUFHmXxelN9ngPi5U5XuOfE0wLMubvFMbHPuDPFzTODuO3EJUvfcwuJ72iM5FoRW+pY5Lor NtzvxdUuxnokCXwxXc71SFx49RC3r/gPGObrVAcrRaBUPYn7Ff8T9SqJWv4u9WL1eX6SeioqhN9G HYPeyb9D3Sywk++aujDOky9EbS3rF98RNVZ5HW+/WnmzEm+Eml9XD6+gmvJtdZ4ZNb7Hv3luqinO RvLcUkv7uMirqV4Nw0KDKFBzRWRRIbwCQu9RAxJ2QvdQTA0FodOoGjNOIQ9UMvqb0AGUE2ZG8ApK DH9N0MP0PSlHYN20m2ouUGRKaNkQEDPV7K7gv2GyzZLlx5g8G9vJL2Xyeu4U/0FT8/Ut/jhUPQyL xaFBLkryov34ZEV6XXaLNYtQ0Rvq6SJY9HPUDxFpdI+L87EpdB4291ge2oXAOCaD5iOfF77l/JxW K+zoTGUkCk05n+gxEgpz+sPeFoSd/hpfFex1+rCQJFjs7L75S3AO/QbkSy7mMdjNWWM8+bkkXmOF RTXFhbGmqjfF1rBSKC6xG5jf6C2xeMwEliYmgWmMh0TvYQKznUSxmGMVGSJbgU9bqSJZgfm9xSJ7 AvUGccfqAw9Plh2zCZRc0jzGG1i//eQYFhsEwwqv8XdBNe7Eu/Mvy0URDouwJfGESqWbkicIKSa2 kjwEd+cliZcEeSwkUYLfJjyX0Mdfz04Qf4FPrHgnjsMrnTEQ+42buRwrVoArvpsvJooLfDomOoRL Xa4RrcTBn21FZwlg/allkPrA6jMguQgwVIxJP0VypevI7+WkpRPJY4YF0lbkLic+6cPknMDnUo/J LgRRqTQyf7aglBTpecWsJJtUdiZB8iTJ9PKyxBvi6pCORAbx7rMuCUXiwusa8U+kpC/BEtbZtTCs c5zaC0F6b6lOgg5aKOoHEYLiTtqKNEY2rUJejy7rVrHPniQrTpsP2CczT+vBzcrU0lLJljK2NIOK AOlV6qczptKF1IuXN6UlqF5DWVL9VNXnclKRVJc3ulIo6vpXXqncSg0YNuSmgx2P8SW6neDKcR/6 tEiCxm7GA6lQ+ZBWkqaVPKo16MQeeY5WY1+q3LNWzrgjcpWMGeKWnB2DQcPL/mAEtLbK1jF4LzfK atOHhyJkpuhNz81kyujsN/Eyfoywr2Ey58/chGGznUywO7EoYFoLZZnmMx+JlOnBPW2S1xTVev9S fKZ4tPeWRbrCcm+9V4BCVy8+ulsB32uaJaug1LuXyi0/3zPMoMtTe8i9b+Q1enTvfpJ72nPw+Q65 oh6lNx5ywT0TXz3kuq7IwrDNLnY9BNkS2JbCO61use+I9Jq8GciX1NIsH+yQn1Fi3+U3Pq3UOPjF /aQSYXAs4rKS4SAjfUrx62BM+QnFrkENuqGi/8Baz3PFfQNtd5UUbgwkPYtWSBkofz2rYDWo8uUf BeJQAgw7SoyDfaHzqfFQ4XyHXePPReathiYoEk8N/plskruqEva0WudvFYunp5z9VASfuoXyKr97 KpcqoMyc/FQqqZwweau5VFl9MpNZoDQ7eXxQVSltYvpptpL6xNvXvEq7J5O/yCsZPwP7MbegBVAt PS7M3z8m6hq7oCYq7cBcmJY4b/578YXsXxrsZQVVBdWfy/q25qpPl/kw46r0pdWkZdXwJVbRRVW5 paJGusrCklP3QZXqpUMDR1WsF+9NDisvLGotfVfuW7zw+ajyh+UKGPZ+gaSY3+6NymMt3gc3tkSr 3a5snpaot/u9lSnrbXR8+6byE/XaT+FmmeqJn6x9L6vbfRKPV1cX2t7KX1Bb3h6oz1G7uF3YlagW uW3Leqsms7174qfqs63+pWFVu82B7Yuqntv+MIx5geRU0CbIKVuMOKg4u3xBgkp8cVOAYdm91upg X/hBswzsqHI042DYY17THobjbDUlYThXVWMNhms7NbpguPOERigMs2w1BECK/a1+D4aXudRxIMV2 q/UiKSbaD90DPUYOSDFOMbADkDAUpYMUWxI1Bnt8W5FNcM0qRMA+JeC5yGkIihMUAWmViRUBu7PS bhHQqTbuFAFdToePiBFIsZsiIBFHEkVAck29FAE1ZcVN9CKSYmJXOcHOTHSFs4PTE1FcBVHND9Gk HXjOiUP0H84mf5LoG05azBfROc7cjFjRvzhTShZEJzhjGtxEH3EGtd8Tvcfp3acv+pQzYGSn6C/O lKkEMXdO5oev4uZcruDcgC+Qw7A4zNUu/ue/N7X3iKaciE4eiP4XEWP3IGZEIJY8QWzQRWxnIO/Q d1SCR4L74UsJawmrKQuJNomzH+5KtkoyYFjKRAN0mVJv1bu5/0iLqddI2iGqjyCaXpcWVa9xeikt oF4dICJ9QL0ilij1Sb0o47PUtHpGaarUbfWoRkiqQf1kR7FUmjqqn0cqWt1sZFMqQz1qOg789MnK F2mGJjhjsgdQYNcoh0YV8SrJH0C5SC3ITaD8NBbkWCgf1DW586iTztNyhSinQDW5IJR5HENOB6WZ JSe3A3Ws7IbsCGpHk7MsxXS5862sq+ndW2RZOdM7j6NlRUzfzazLWqJ8PmbJcZs9BJU/EQ26HSU5 dDKfhrItWkXGWckSHagZr6SI9jTLVNqHdkA/UXyFNsJYK3aiFXAvFOPRR4mJihrOWxRhhX+cJ5qH FJqdOy7FKTg7Z9/hV+B0Tn3CIb/tfP5Vo8JetOK6qsKwy3MYVgnFgKxUC8BE8QuqP8EIylapJmLy NZVUPTFpZmdUNTGRLpaquzDumB8qTzCG+Nsq5ZhjpDwVm8CvVGflb4HjdH7ltsAz3dPKDoGJrEbl nYERY21KU4H186ZKCxiVjZfK1UGgR9YYwj+CIK13+CD+9zpU/GG5mxrl+H4NLg0HfK/ZAQ05fIuL mPo3fD5WWX0QH0nQUifjrcla6sfxojQVtfe4TYaoWgWO3bNXTQdXyn6v+haXNXFQ9TruysI11Rt4 jy0PtbD4CBjWzSANQJD+NZKfwFmDfNIe+bu6fKR+9WfaR0hfTOlaH0hLaBctFukB5olWEekiQUnL jpRLJmjtJvnQ2jSvkpQYDzUDiJ97XmnuILIG3mlcJnZPymuQiO8W32lkkKq2qZoy2eMgX9KpN0C+ 3KF6CjqZXqBCCtcN91OvqV/VPUezNHbQzaWpOY3p+tJ4Aqd15ajbeIbOCvUJ2UDnAvUMrVfHl5rQ yqmzj2rc66N9ibp7kKYdQNmc/KStRFVeGtGWpS5+ytB+UGkAw6heOug0zD/TXQVXLTdafinWoezo Xeq9x/kZp4+/1f/KIDoU608wQgPs9OkMKxxNP5whTirVV6B/ornrzdHvMT7pUemU3hQ9ffrJwSXd D3TU02jda/TUZW9dJkPrM5ee/RmwU7LmZ7aB/sWD6ShEtPPq/q4UYTXEbFW/b+LWQ9WvNLTteWob bijT0+fHZfC9pz72i8HdnmRimEF+jwO12MCi5xjj1PEvzLe9x4+fYV4anDnuzax6WnZcivlgufK4 UA/ps8vxrsugS7Kns8He2fEp21Z4l/M066uykn0ku1b9g6XxQIbetDFpUNHKwthvkNNb0lhjYCt6 xAgeGM+8Z/Rg4BzFzahkIIVebYQasOyhG64PHBwkGl5gf3jqaxg/wLOcYhg8MPTZ0PDtkCDokk6O gz2MW8Z4pHC+R/64oPIHF8PxHg1ZO8xEsZ6X6dnJNtPXpjmTZR44U79JfCSXqdqkU/pNk5+TsmX3 TQYnvrXEmqRPDDNHTNQnqAPrxlMTZpMvjdsmfJcPGVMnvn16YvzrGajuniYLoLPy9pt/eEzUFzOf rtLjiVo4qJGOvrkwpXfIunRxxaTR7OKSA3rGLHdJPfSBmc/SkVQLM8XF9yUfUNuLt5v3o64ulnUP o6IXPQdMUSKLIpMk06sLdUtoU/qi8Kcjpt+WQZfkH7YxC0GBCSDFmrEpGzaq2f65G2MaG57Om6d1 PzuObNUZP7H4ezvJXtvi2rYvdtqibNswOcQicJuv6KGF0tZK4ynzza3bl9rNr2wVsXPMI7dcJgXM +ba4l1LMSjflt2Czka1RGA6RQVIsTBqkmE0E+Gxq5SEg2zR7ApJActl7kEGvnm9zDoatzlmDGemf ZA2OLCHKagmGC+5bMWG4Qd3qFAx3fbfSh2G2u+VnGJ70trwEUkzEMhiGP3VY5CEpprK5owJUGD3Q KZWogk5RwkQ1EoI00CrboD/fqVIEQegMFTXwaZ8pv4Eg3DHlLgjKClAG3XAZQxn0yo1vlE0hqFNN GfTt/URldQh6pKIcCEHTucojIMW2Vf7t/FTPcoJeWCWA6wbnsgqG67o4USWEq1etTiWK65zJPypx XJVOniqxXOn+kyoRXJhYV/BMy4wxFTcuhVI7FRuuIw1sFQPOLx3aKmqci33nVYw5p0fiVeI5P0zN qyxwCa1g1QS4roIz1CERCkGq8xKV3LtVH0rUSzgjqosimuojOiUi+g8ixgqpPpCoy8hQHZY4XfJO dUiivMFblS1R0P5I9ZYEsc9MdUKiZIRD7ZDEtakstWxJjg+w+l2p3aBaqmiogDN0QOMAj6b6H/U/ ktWI/7mZvkJ02kYMUECMxSNmDCKWHkNsSENsn1WH1eE+Kw0hDaGRPRp+Gr5TkRpTGn9/mNVS0AJX W0vL7DCoyWdR93hPaH1ANUpza/1GVWoaIKIeIDp3IAbcRoz9gJipqPUTVVGaprWNojTMar1FFXY4 a71AkfpGtaZRFSNntfegnk6LaMeZ+a206rSbg5micxv9FYJ029AtfBZ6VuhgGZxeL9pE65HeBTTK 7JMeHW2GZuhVo80Cq/QK0KZxN/US0UaZf/R80bplgXomaJXGcT1htHgnWvczmrN/RvcNWuLRHd2f 6PAZEz20C7Q6rJ/uCvZN+kOYtxBksAtTyC9jsI0xk203ZGH26nga2mPEzbcMj2NEXFoNpTCCGLrh XgwXbsLgDeYAUcaAFfi7vMKgMnCt+ahBUOBMV4OBSuDwbQ2Dw4HPR4UMuDHis00GnpjHa1KGiUHD MGxkjP8bVP7b+FT+DZMVvLLcA9Ru3GtdtslNvIIF1qQVL+lqapKHF8SGmwTjOfD9Joa4PyQVk0O4 j5TLxi9xf7ecMG7CsS+9MQ7AnbtTZqyN63lCMlbDwXN7jSPwfeuFJinxoK9ECZFGwcq4T4oTuGAh TxKVf2JJIo7pHzTbIjlaiJlNkSxcXc1ukXSxt8yqSXIEG7MoEg/pjZk+8Re1AvWHuEw/gWIT7zN3 ojKI51l3UfbES2P3USbEP/PuKBxpaOOpWWIOHwxbOlFBVloLUMMEXW3oVB6FO7aKlIHjxlZ3qIHm HyzfUJNdRiyHqWFYqiWD6k4IskykmpCNLM2o0jQhyz3UvfTvFvcob5hTFkTKILvPwo5yf/y5hR6V byHWAktd3PzH0qfSGYZPjNKvQ5DdBXqA4JqDI/2wYrPj75brBt52knSM+Q+bEfoVdL1NO/0M5oVN Hp1C2GXjRT9FlrORofvSzK0/0I0YHtaddIEerHVIy+ZApLVyy/pEkzUf3XjRwlqfcXDrjo3kGVBj HIuZoGY445meQtkucsy9SjGuX7qZhhinl8wACyG7YuZ3px67KOb7wEI7K+YzvJydMLOP1Gr7ntlE 22XLZGYw3GwJTM+eSltlptrA8IlNptyk0InnzJjFsRMbPbrbNraPLoOq5prFPgtB7mFsV+FdJ5XZ O5VVvbhYnUZebo/Z3hbWjowBXYdTjgcGdPzrHN4OiMfdc2AN7CG2O5Sx31MxDifZw/RtB2E2owdn /4KdPPDcvo4dNmlnn8JuWeKwLxkI2CY7ON8dBPlyaZwF8qVqHC9c4BsyLqm86u839sjYyXvPeLJF uStrwtV+2bl+4oLvAefUicqYt86uE6lZTs4yE76UKKe1ieN0tNOVCe6eo06J4+8Hep1kxi9OKjr+ HJ9Y/OO0byJjO9qp+ynoXv3FFwRBxd07P3pMHPPXPFmlN2hmXsnkREDe/ITFhpfJQod9gavyYoDn mOuBRduocpelRbWMKpdri1zlSi55C+stSS5OCyPMApejC/QBPHpkIWFSDx02/3uRgQ5bKN3ehV5Z At1P0KsNUO9DboEUawyr2jihmhPRur5l6hpycqPKMiNAbDPSPsrDcovgbuvethUVznQnb7mk5bh7 bWmXMt0Vt7ib4922N1e737pd2xwakHZL3KyZ1HFT3QxdknY9t1G05eS2dwskT6QlkmLRQiDFrGK+ ghpdiuMAq6g96glIrvCQbrD/eOgHEsLtq2czyLwSzwwYTonx9IDhEqwnqINN7JOfYLj7+klwXgZC T6aCFJs+qQNSTNpjFaSYncdOJMWMFXaCXZ/JAgQdaTOpBZ3MiokWqNGBxuBqmYUan4AgFzEjUB0w 542SIQh/yAh0O8QAwykIKm8zbIGgpneGcRDUpWhoDUG3CIYWEPSY2zAJgmYCDbcgaPWucTSSYsZM LiYEGYnwcHCVGhlyr4p/NDLnnlXfbWTDPWTqbXSCu83pkZEVNznA3siI2yt23EiNWzXT3UiMe3fp U6PDXDONTobfua51DBm+56rsP274mYv0aKeRNlfOdJxRH9fFlVUTQ25DGDbJkngC6piLpBs3zvig ZKIEG1E9GtGUgOhER/R/bXxYEh+LMuaQDM9oB/qUioDH7RuqjXdLGnQcMYIlFftKjfkllUf8jf0l naYmjFckm1fcTZOlymHYtF0jFoJMd2nk8BBMrmlUSP4yuaJRoWGHiOJDdBZHDHBAjC1DzJhGLNVA bPj3kfY1ILXP12RC49yIuKmoxtJUoellTb8PsJmN1nkYNjtudhxcAX4zfl6c2S6zXdLuqD+oP5o5 iP+5Ob9ADJhHjNuHmGmBWFqC2DCD2KFlBqHgvgozcTOxkRNmeDP8VLP5QfODKzsszluAUSw0XAQg yIKE/pvP16IPfUmmzuINukJ7v8UHNNVcHRE9jBh4BjGuAzFzFLFsB2KjJWIHFUjre2u5G315pNHS 0eXg1GfLWZebKwHWcW5UMFsrMWAmW5tgrvBrWw9iUmWHbXQxtjpkmxiMjkUHossWIqbWJhqjg0ux CcfoZJFtsBidsvM2JzHajW9tTmA0Og3Bq1T6W21MMI6PgmwSMR3TgzZb2KhVRdvEYDC7T/jiVyHI 1hnfwP/DjgfvKTdrN4oX1H1l741btbK1V8F9dVOyl8R9xfbY8+C+4HPsd+A+EQvtVnGb5b12z3Cr TV/sruPedLnZ1eBe3Rq0o+B+Ps63u4YPmFm2lyUofzR3qE6IAWsulwR2sA7dpCIBpmM7CSU/69RK /KYv6XyKeMd6xGmQ+MZ9p1MPcSmoxqmROEc45ZRN/JtU6hRCnKDcczInPmgRcjpGvHUpx3GD2H37 t+MccWR02PErSfWVlJMvee9aonNfDhjFeQ91HOwffajpgp4u2VR1hYeu3ZTF405ug5SmExquKpQt dy9XAcpqML/LH8rreBGXBco02dXlDmWcesGlmjJI53OJovR0V7scp9BZMi4ilGtPvrmoUAXm3F1y qV/W613HK8Fe2PUl/S6o/HZ0vOCmRzVdWrHt5FrLU4NQL72WfFuSRyd9n7ufhxf9ULCYhxEdivf3 ONbyiTzo/rnlDc3M/XHLM/qke2MLm4l3j2hpZwu5W7X0jf1yt6fzz/u719C/bNR6jJ0hwfDJdSao MF6pzDChfO95ppBSgm9A97BhtN9Ed7JdnzeLecC9xSueaRB0xuskUzVexUuHKUYe8zrCPEwjey52 f2OYevZ0L/bs8kzvfsge83TrHh8f9nRhyiwoe9KYvzd9vbov58Kwry0b9JV+c+xA4d0B/mxuZe3A ryyWEQZLZUXbLwTwsw+6L/vGsJOwjb7O7HBCnq8q25Oc4LuPbUEL8ZlmqzA8fdrZ3D12PgmszwNG Ptas7QkHn+Nsw4UbPnED+zZnfOPugp4g8J/x+xCELRpPEy4K5htXU94IGRmbNnYPI43lOe4Ouj2u 5IEK8Bj/G3MwwGB8BI8PEBy/Qbrjvzl+lvrLf3i8lKHuXzNO6PH1Dxx3G8jyFxmXmCjy3zPusfDb X2ni8BZPwIGnbqCW/7UgAvoX0vzTYxIR/PNFKpcjZ+Z1TOyjO+ZeOamHX50v8LgZFLXgFqiGlV4g xG1gdy4EEq9hZhfsqO6Yywsa9JeY3AXeHmuM0/zngbMY7vlnE58Cb8zHLXwPfLiwdwvCZC8dheEo 8Y1pkC/3N04fq4+N2rBXzcWZrH8xdSdIrbc4E2IPbNie9A8v2hQIFA4R2cyN3Rf8Z5OQFRL896Yf JSW4e9OC7hdM2pTtEQl22twzcDeYZ2N50j3o+cadxWdBDutbm61BLzYvwDBeGEkxAhukmHlCHEix oiQXkGIXTtmCzvZAAj/YGcTHJoAzWxWeBY7pRzgGhjPFwk1guHwiHPyUrh/2HoZ7IsJAlzKID8uE 4ac+YWYgxRRDQXptvwndg6SYQ+BuFAQ55UEQh7uTHUgxb0fQhWkoORaDGprhyAtSLM0B9OrY4w7K IMUe24N5TzK2D4MgSp09DwQ1v7MDyXFJza4Sgm4n2eVC0Ci33VUImvW0B4n2sdfhD5JiDo+4eyDI XoC3mFvZPo5XTOKEPY53vzrOPpbnH9Nx+3CeIWdHe3+emoDn9k48oXFYe0MejcwVe2nun2Xx9ge5 hxs37Da4T3fG2P3NHdK/ZLfMbfnokr0it9GMgP0wt+fqaUcK9zzY9SVK+oMKwymlzz1nXyhFkXRH VJ+wL5YqM71tT5EqcFq0r5LKDFC0b5DCxRbbN0v5ZXwDWpfGg0dUGtbtq6W4OnD2FMmvfev2FyU3 Ru7b/5TaN23kcFYKvcJ2OiV9HIadIjWGIciRoCnE0+fwTtNBiuDwTNNd4xIiCoPo7IMYkI4YewUx 4ydiqSPQreEi0KnjqMNzTZu+bIcvmp4jDo4umuVTN50gLWhF23lG2wbUsS4zsGtwljUj8jY5PTEr lG51OmdWrrmMaHYCEX0UMfAIYpwaYmYIYul5xIZPiB22TufNKH3nnB6ZXRrxdlYw+z3V5TxrXrty xOW2pSaYR5YuVuAKy7jI8KW5HHE5IjPmArlA2u7oP+g/5imI/7kFTiDG/WvmR8QyMcRGf8SOc8ir +r65SLtIj9Bdsl2yp1676rnqrWi6C7gLgH2WNlYSgtxiMSv8tm71mEHZFbchTIvOdbdZTLnFBqKr IiLmvtsrTDmuCTGrEbHsKmLjAmKnsNschtqPdd+BuT7ywz0AKz6t6sGNXVkJPbkesh+GPdIJ+yHI 4zf+vsC+k5F4ityXkxN4P709ntJ4fatMTwO8mlsFInYVEV+FSMQjlsciNmUjdnZ46uHV+995uuK9 H2V4tuKHpzu9bAitK3M+nAlrMOwlQALrw+slqVOgzzuNFCu/7nOMpKZv6tNB/GG94buHOOuh5vOD OB9s4vOZOE+45vORuEAi+LwmLlB8ff4mzjdH+IwQ57oqfG4SX9165jNE2v040ncnKXnmtG812X/1 pr9dzhioyfupSxDk+4VaKxjg95DqrvCXP4PKcTwkIJIyfsI5cB+FfnIwoJNyLcQ7gE65Gj8cQKVc IWcFZFF6qVHgOZda0gPQlPZLHQE6lLbb2wFalAejxQHBVP3ZroC3NJmPLEx2JROGA2zoz8Ce35de KPgZ40E3V2RifVu+GCQHnWxh2tYEa7QkeRkH6bd0hXIGybe0J9CCuFvOZftgf7TQaSex8y319BTs QAut+zq2paWIxYGtbGl7chF7lX701f0gBfqvtXvBF89UwDD2CRNU/mCImS5UEiLE1FLKCD3R/dow NQzfXW/3OJzY7eHdGtre3RcaGFrWfS3hZ2hyNzP7Tahv9/kKKNSou4lhEirQXcGsDtnszmPvCJnt rhs7F7LV/X0ObM2Z8+udYdcv42E4tJbdDyr/HJsgvDeCl62gbBgZyvrbKDrqCqvIfj16nWXqsx1J YfWHPo2YZL1I+BVxkzWaIxDRyBqs8I9IZ11lsCJOss736EUosarYrAgOVst4fAQ/a3O+OCKSPbIR FNl2F9TOSOY42F1E7xsvEC6JcRtHKX+KZY2tGfvi1MeaHI/iK8ec/Cxib49Nh7nE7BuXTGiOXhvn z/4RPTF+oCIl+tLYz9YD0YVjH3o6o/3H/hrwiZYZ6x3/Ey0+trEgGI0Zv7wxExM/CWpynMgCWC+4 3PnpY9L42fnTKtfisfMWJuiEtbk1J/2kxLkm//p403ndsPc41PzV+GWc7PzF7GrcvvmGCp+41/PF rQpxt+dP9UJxFfNBA6/igubtJ1hxHHNbC6Fx+vNVm1w44cWzMBz/YQN0J4knQYrVJt3dcFTNO+W9 /sv0ZCq0ft45Ke3sumvggVPS61vhHfEDGx3xB+MJG+fIW/GuGzUVnPFqG3mtyvH7Ngi9NoRXGz6D GELnhtnkKULKhuxiKX5zPWZzB4G+KQv6qhQkxVJBEomYpAeDFMvLPARSrC3rEag++0hFMIxZyBiF 4Yi1FE5wTO3JGjBMjkvmguGKPUlgvbWWJj2A4cs7k0CndhefFAtS7FkS6PGW1RORFMtP/Pdfd/hW 79WAoABZCDpE8v8EQWKF/p0QpM72dwQp5uM3D2pctV8USDGKL+itCK6+RJBiq77cEESN9AH9VcuY jycEdcv4gApyJ8n7IwQ94fMRhaBXPj43IWitx+8akmK+H3n+gSAfLX457gGf53wWEgk+Y3xK6v0+ 9/kOoHR8bvLOO9/1Oc/bHejjQ+VNidv0SeY1zirw8eKBy/l89HgGm5p9eHnyusS8P/HY32rw/s0j /jjCx56HY+aZzy8e0Y9O/gd5WmDYL0MKpK7Pb2lTHrSPjvS05E8fO+kHGid80NJ3UHI+XtJMZ1uf QOmmgAqfUOn82G2fCOmozHCfcGn70kWfYGnFxmAfP+k9HW983KQW+2N8CFITjyx9xqTmp2/5UqVF V838O6TBGfN30DQGuz5Jzce8+30jteSkVn01tKw0lRFRtxGdzyAGXEOMfQ20zJTz1dZClab56mrp N8z46mspd9j6GmiJ9bF9g7TkR8p9R7S8pn77VWndW0kPuK6zC1QYf7MHEORPM/vN+9R/l7mM9He/ S+YoLT+/LnMzs7OIaC/EQFvEOAxiZhli6SPERh7EjlDwKvM+lt9f5tgRvL+5+aWpewGcFpYr8hgd y2mwA+p1IYE6Zu6Szdcc8NElV/ZwQJdLoXZnQKNLifkkoosNIthbAnE7ELP4EcvMERszEDsGA5pd Svs5A+67MEeuBaq7Hp76EvjbdWDFJEjCvRXUMTQWDWaQFlaLH4sVxgrLCWD3Y/frfMH8wfyxtER0 JSD+54YbRcy6h1j2N2IjjNiph4WwUH8aVh4r/+goloqlTpsG+Qb5ruBDUkPAWgk+TlAF1TIY/1tA ODgf/1yeP/ginqmnE/wAX2XVH/wMX+b2EjFIFhF/D5FYh1hORWxqRey8H/wCX97/PfgH/sajrBAM QWG6NlQ+fu9KZ7hxoheolrFkMPdDn5H+EngYpkxqU9gXlk+K1w8Oe0mysZEIP0JS8YgO5yMpBZMR Ce8RSZWIlCjEZixiFy6cn6R8qyLckOT5eEd4I2l0BooIIPevfI4KytWC4fAV6i8Iisij3hKMiDxE zVb4J7KOanWcGCVKPXIiMaqE8vrkehSL8jT0SNQdytMEQ0Ty1ahblGfU8KiblGctFlFXKM8umURd ory47RF1j/LncV80L/XUzKXoQVr0KjX2QuVPsPO9TAerMjqJfk7wR4wsPVzxTswCXdqgNLa65bXt lTi9lm6voLjOlpKw7riclqrE3Lj0lqrshThCSzWNHBfSUkV3iTvZcrr7RJx1y+k7AXFOLTdHb8eV 0ZVnW3FyDMmP0fgPZ27DcCyLCapl3BnmaaEK3Cmmm1Ih3pd5yLCIYNJ9324pnqO7wJsd39/tEXE8 XqE7JYkUL9x9Kmc2/mB3UgWJ8K07gXGSsNyNY7oRRrtjWHjCw+6iJ6OEL91br9riM5mLa66JwpdB l0Q4zH4MQfEH2QXC++N/sy2VLRP3sr4bpSVxsroddiRzsCJ9DyWvslQjmUndrORksaRmVkIuJamE hau0TEpkRbYqJ/mwgnsMkkxYvuzQJDVW3Nj9JEfWw7nTSbfY7euyp9Tvgpqc2D4OOvGkO+N1wuXJ D8c9lH+e2hjfbxyaKj7W7yiWZjmG9/NIdx5TiZZOzR6jJT9M5R2j5/5O+TNWV/ks5c1YRetUyshY Ue+ulPYx4oBtSuZYyPjplOKxjnnvlMXxxPWxNJnJe6DyNy8ogMp/f/71MYm05flWlRsZ8vMeJp6Z SfO7nSyybs9d879AXJ+LjTmb2Tn3+lRpBmWeL08149Q8x2mdDP/5XWfCMkzmvvVeyxCZWxkUS/8y 92qiPr1rrnL+ffrKvNGGecbXRUcYzvi28QKCspQ2qo6dJmI2XFQLSDc3dpl6Z0ut9zqn5hSvYwK5 chfWueKMs7XX68GFEVv/mqdI2rv+8XQ88cP60plZ4uP1F5exxAvrw4PfiDnr1ydbiJ7rZxddsv5a +7mRTDy3cR2Gs48hKZYDVo7I8dwmkGKk/MMgxRgFVJBie4p4QYrNF5eBns2uIB+GU5dzVWE4zzkX PH76c85XGD57JecvGL6SlwN6saGgHPDMZ7Y5WJBi+jlgnWwrZ6vDv8BMHt0PuqjYexC0/3dsIwSJ JseCfkZdLhakktmBmDaQYuQYXVCDuqPZIMXORJ+AIHJUFNjD0Q5GhUIQnRr5G6TYn0g6BLEwkekQ NMYR2Q5Bc55RbhC0zowpR1Ismp8PZF1koMACj12UN/9JidAoZ34T9dkoM/5jqJQoFb5NtEQUDx87 8HHkF74CXFLkcz5bokAkk29v+ZXIQt6hZpvIAF5S10SkLq/x7ZORRrwHRhUiKTxrs7VRHjyf17hi zvMSwChUKZDDUXtlQnnuRPLIWki1RrrJQhpXIr1ktlCVkf4yc843I7Ey9wP3RgbLXIiLA+ZnLkcG ymDKQsBz9BrfRzrJHOrERZpLz/d/jQySvv/oWeQj6dEZx6izMjtXJ2J3y8zCcIylJtiPRf3SquP1 jRLXFpeOjezRDtMciuzVDjNTi7ysHer8K/KadlDgjsg+bf84pUi2tnsmLvK+9onS+5GPtPUblSOf aMt0NEaOa3P280X+1uYeeRuVqG007R3trd268jx2UAfkS6y6uRoExeiZV/AdjiabT8l4R/2x4NJ6 FbVmIWTOg4hmIgbSEOMaEDPZiKVfEBsNETsKojYsBPsWoiUstEaqoussMqZWYrItD6+g41asQO7H ebqAtR/b5bLONxyr4HpY1jWm31Ve53AMxVXbAoXo0oyIcUPEGSNm2QF1yuIQG88gdizH0Fx1+9Vj 7rh6j4zHartemz4UJ+QWteKAz/KwhWFcH7YE7C19sYX8RNxhbL6cfdwwNk8XFVePLbRsjavCFrne R8RaIeL3IWZ9QSzfhdgkh9jpFVeNLe6vjRvE9jxSxOkECUy74/mDFley4uNDwEwm+BH8wAw1I5gJ qBIUCAryxgQeAo9eDGEXYZf1Tvwf/B93JcSgaMT/3IiPEMtvITY9QOx8S4AI0C0BgiJB8VEtoY5Q N90Vfyo+eaUvcShxCIYTUOTjEJQQSOYQeJ6QRnqnIJ1QQxrUL024TDpj45XwkETxYCaMkkqD7yHG SyGShhApVYjNBYhdtIQxUtktZsIn0vXHxxIDycozfEm62QKrO07F54KVmhRGEwHV8gb1nWByMkS9 qfAn2YlacJyeXEv1PdGS/JKq7ymX/J0qF+qS/IMql5CISH6DSKUhtoQiXvJM/kmVv409JUZ1fXzl VA714QwtxYV2Z9Uj7dRpUMdOjTJ2Q1CKHf2x0M6UW/QqxfFUXbqfQVvqJbqM7cs0oZbPXmVpMS3P w5bScltGEzcRc9QRaT2I9GDE7uNpeS1P7iintbZ8Gg1N+0mPmpVI72MErd7JvHMGXJe0ROYGBKXz Mq8InU7vZKYpVWY4Mw0MmzI2u3/a/cks7r7rvZR1sLs6IiTLtzsj+XSWczcxtyLLrptU8SHLspvE IGUZdZOZZlna3dks2Szz7rNPnLIKmFyz20Tlnt0f48i7LtfDcKYPewHUZAF2q/ChrDF2qLIzsYYt YVRECmLNOgiSpVlNvvLkCVZY5NNsL5ZxilL2XpZr3gD5F8vl9CHyBsultYa8xEL3uJOfspzYesCw Mffs3azhV0vZNHbnmkGu3l0FGCaVjq+C+hcyfkm4MltnHKeyK0d0XMGYkMsxNu+onvt5rN4vJm90 zDcalZ87Jp/Kzrs25pN/Je/CmFfVnrzasZNn6vPyx9x6sXmEMecBpzz0mPG4Q17sWNHcw7xX455r PwocJy/AcC7fAugs8nbObx4Tzfswf1nlVv7mfJQJpnDHvJiTc9GRuef+N4oPzVFibhSvzbmlY4vq 5loLWot85i5WTRdZz7WdLSjSmKNfDikSmKsfDC/8PVc5UVh4Z85jvqSIc37Hem2xxSLodQr3bYAq XrRro/oYrXjXhodqcYnUxiFT/1KX9TvOxLKsdXygUHnLumycLaV9bSlTvGx+3abwVpn0ekR1VdnR 9aC28NIv675XIkpn193ulpWy1u0mn5S2rJsuypbKrV3Y2FXGsxEEw6XDSIqVjYMU0ypfAimWThUC KdZECwEptrOCCVJstnILpJhtlSQME30rVmG4OICWBMM1tbRAGD7XTrOC4atvaODs37OgHQApdpP6 BqSYBXUQhrdeUQZgGphjuw4FQlBmEATtWck0hSCRY5kgv9QCM1gQhKrIADnlYpkO9oXYs+mgEhGG 00G3Q76R1gxSjJwGdgwM+dQbEMS8kuoMQWzVVNAJj62mukLQvEUaeJ+N1gwykmJp5vygk0upErrO 8zB1TcBLQiB1UcBMfSJ1XEAcVZ16g/8LOiC1gf8eRio1hb8Mt5CK5nciVqdK8x+gmKd84htqXkq5 x5dxKS2lik/nzoGUWt4fo69TNninXnmnPuKdWnuREcDnDEbplP4B9jASsud5FVJ45AalUSnlctqa u1KocpKodeBBtGQKVXYtMDWlTHY07l1Koey5rLAUkmx62YeURFnHpqSUMFnhLijlpMz7W5SUUzIP H8em/CPzYOZd6pTM14/RGVmyj2E43VYrG4yyrZ3Feynlp46G9GqKh06XVkxKiA7DrCslSqceHZlC 0KEGhqek6OTGlaeQdBIzJ1MKdLBlSimlOvaNlSkUHY3O3SkVOnz92SlDOpyP3FOtdbSn76VZ6VSu ojI2dcGVzxAy7wJrf5eFIZ9DmprFOZnbqfkWf7RDUr0sBczrEF0EEQPfIsYtIWb+QixTTvW25G+M TvWz5OroS8VaHuoXSK2xFB8ZTxO1DJ6WT5ewXFspznxinQbWvoirIgRl2LsS+LbTW10vyjanc7jO 6iSl3Xb9ZTGQdsv1l+tuRMx5RFwuYlY+YlkrYuMEYuehtDuuv/vd09bcJEbW0glumdMyGTh39ZVA IvfJgzCc5Y59CubYPewKf3OmIxaWy82YCeLVpWYUB8lZ7c9ICVJ2U85IDVLG1iHinRGJWojl+ohN 7oid5Iy0IJX+2xntQW6P7DLlg/qmY7MkgnNWKKTroaCOEQcJ1RBExBOoAlZERUKJfHjWa0KBXntW FyHf2i2LQihwL0MMuoNIsEIk7UEsX0Ns+oTYdTSLRii6ZZR1m9Dz6AZRL15s+j5JIf7HyqPsS0kW MEyOIEeAFeBEdhJYJuuR9RQsyeJkcf1b5MPkwzY15B3kHR6/SX9If0L4EOPDEf9zozxAbL6C2HWT DJGhW8/IimTFx4bkZnLzjFp2QXbBKnfu59zPMJxzgmYJdrAYmqggMSeJ+l1RMKeE+vz4vZxW6uUT Ezk3qHWeoTnD1NLQxpwH1JKE64jZ4ojUIcSWCsRLxJyH1NLbeTkfqVcfP831oSnOXMw7XnFsNayg 7HQb2PMGM+RAtWyjfxU6nLdIf6y4kC9NbzS4mx9Gx9n+yT9DP+HFzn9KVwkXz39Dl07SRsyJRKQt I9KpiN3Y/Ld0mTvogr10+9Hsgkj6nVmdQkPG5dWh4rizNjBccKPnCAQVijGnhGoKScwLSozCD0yC 4dWik0xDe7GifuYBn4PFXN2LEVXFjt0jyU+KPbqHc6cRK+UQGZcQmdjik90PWDrF+O53T04UDzM9 Zp+WFPZYf1Qtq7r8DFQ+G/Z3CCoeZd8V5ixxZpcpe5W8YqONGkrxbG4HrdJfrClfu7IM1oXIn2WL rJwU33JuVnx+UjkXK+E0pZyTldC6Wn6EldCTVX6QlcjWKxdilY4plfuzVl9RKDvZkx9vUv++awfD ZaLI/xQrY48PC9eWB4yXqxyhcIw7GZMoQ+OHHC2pyWOP/fJpx8YqojG0zrHg1DcVXGMWhTK0D2OO Vdu05THHswa06TGn3j7a5JjTQATtzpjZuCrt/Rh1Lr4CPx64FnN632QHDFPtF4xAfd21AB0TovXN D6sMVBTN55pEVWLmTZz8T+vOffMfqYLmbsSMVd2YI6VnVjvOeRQtVT2eS6oxqBqYS2zLqroyl3AZ rmqbix/sraqaI0yUVGHnjOddqu7PfVgXqRFc+ALDlfMb4MOcbt+oOVZalbbho1pSHbTBZ4qt8Vof dc6vdV7PDZSuM143ifOsF1z7k6lR/9faSMlg3cL67trsulvr+8+x6zrX91x1q6tb3zkkUJe39ufp zrq4tR+LHHXQWtJ6T/3+DUUYrrVAUqxOBKSYch0MUiyxYSdIsdpGPhhG/2lSAik21WwIUuxEiyGS YnQJGC6Xar4Dw/W+zWYwfCGkGXRn1yWaQfbd52jeAcPPJZregxRzbQK1eKup8TlsAsNFBkeMIaj0 DwTtdCsFuxnhuNIeCFKNLMVDkOl2qSgEoZdK7oAUSywBvRXhbjF4DvlVcTQ4y6NFIJkYtUVZENRj WcQBUuzvwhkIGr9UBGbtAm/RcwjazCotQlKsiCAIsq5g/Ng5XtMiqqCdeGFRtqC2+umiWEFeVFmR q8BHdGqRhsAdjG/RAYECvEbhKwFb4s/CLoE9lL7CVH5WS2yhOX9SN3fhIX7lO8xCDr7VJ9WFsXzD c1xFPnxD6xWlyvygvywalQWrsvCE/B7e8gIFBU/pvwpW5P01NQr+kbcz0yp4I6+BTi5YkOcKnC2Y kvuI8yoYkxvKmi8YlKsuxxX0yoU0wQXNcmpdlQXFsl9vyxZ0yE6OHiiUlX08W1CkJPt57UDpUTnQ 7xd7a7uAUX7ppPNBBVu6PjIxBVJ6B7S5C9x0Z8ylC7x1J9BTBYG6dwNfFITp9sb9LojRbcqyLIjX zS1rKUjSjWjaX3BK17YzsyBFV77/Z0GXruij8UIDXYMZsyK07unVm6WmegMwXMJtYQF2Sh8svvGB U2iZLytZqGu1U3u1YNrK2EIL0aWyYMbKGGNXMGtliNMrWLDSzzpR8NpKsyyx4IOVYuPVgg0rsc69 BV+tuPojCrWtJB6JFz6w8p9OKVq2Wl55WTppEwlG+eHaAEElh9x28ssUn3DzlF0tOu12Xmex6Jjb nKV90VG3165ZiNgDiLgXiFmjiGXziE17EDuNirjc3vQTi2zc9z/iKXrhHjRtU7zqcXQlq2zs5Guw 9o8GKYE55hcUwH+35G5QsdxAiXrQVd03xbeCpqxOFVcGvXdrRcT+QMQzEImpiOVJiE3FiJ3M4qqg f/rfFj8IPvoorsQlOGm6pDQwxHjlDEUtDA3mvgcBzL6yvwkrAkFlsYTv8jVlUPx+vdXSs/EC1h2l 0fHS7t9Kw+JlgkURCdWIJHtEijJisyJil2lpRLzcrbDS2ninRzNlwvH900vlEgmnV+aoM0kvYZjy iMyAIEouuU7gG8WCXKEQSYHIJfob5ffJBTaz5fXkvJPu5SXk/JBExPjriGRLROouxOb3iF3vykvJ Bbd+l98gMx8HUrSzJWYcqOo5+1ZlK8bz8DBMS6QlghXmR/MTLKFZ0awUtWiqNNXjazRBmqDtfhq4 eXZQYSocukb9Q/2TuAcxOwTxP7eW+4iXumgQDbrdTZOnyT/+QmugNczcryiuKF5NrTpQBXa1lS4M NARVBjNUhIQrExgHFb9U5tHfGixX1tDv2SlXttPPe32t7KdXhIdU3qUXJ2Uj5nQhVogi0ocqh+jF 3ZTKe/SSO6mVb+jM0XOnnRnis65Vqq2cqy9rCs82wnBVcI8mBFXV9ewVaqwaZb5S6q3ew+wxHKs2 ZebaW1SfYvr6GFRfZBpEjFaPMmVPHa1+zpTME0GsxCIyFhGZFERWQPU60+xJTI0Ds2N2vVagp+aj Wb3NlWNg594+IAhBNTD7H2H+Wnd2v3JIbQ8736in7ijb1cGlLpYt7ouvG2R9ilKs38d6lkKrV2MN 5V+p12DdPf0Q8YwEYk9nvTrrLjug3oI1NWZbT2HrvWppsB7g/3i9yexuDqis2hMCEFR/bvy1cEsD //hlFcGGqvFU44pG/nETR7/G2vHdfmebuMYmovOaMsbOpXE1jYwVFXo1LY2RqkMQz9KalsdIvd8Q ByhN02PJ48bNvGMDc0HNPeOla8fpcZOjMNx0dOEEBDU1LPAc42uWnn+lMtw8MM8wSW4Jncc6xdD3 zUv6z9Pb5t7G/MPQmruS3sS4MFdSvJ+xOZdYq8dYnks5p8aYm0u5ksqYmksd/Mp4Npc2QWd0zjnP m7ZKzn1fmzpzeuEnDNNdN0YhiL6+UXuskFG5gVUtarXfkDANP3N4fdaZcmZivT5Q4yxl3TsuvA21 Lppp1Ta9tlry9znXtYf1auf2rc2cn2j7szZzjaft09rMELXtn7WZp8fbZtdmFve1ZayFrRPPNWyA ju8sFkmxNk6QYtJtD0CKxZ5rAClWcT4dpNjPC//+j7KLRiDFrNqPICnW/gSsZOkOHAw3drWDbuvi q/ZOGL6h0N4MUqy/nQJSLKM9C6RYcHs0SLHIiyQY7JNrCVzCENSovQPslhtB3yTo2+gJQSpmjceQ 3wPRMAlSLKghDaSYTAPy2wta6pHfQLBQrwfW2Kc6NkixxTpbkGKXakFmDWBrWyFowrl2CqTYgzqQ hlumjQwkxWoZwuB7zWHRDt7OOj0hFTFmnZyQoLpMHafgT5Rv7SfBl+j42gnBDkxi7QXBJHxobaqg Acmm1krgK1W49rBAT8t8zaRAZHdNTY3AMZZVTQ3/7JhezS/+K3O3an/yd22YNx4UAFlduymXDEZJ UsjiXa92UIRlImuCFNI0tWv8FcLMTtacVHBE99Q4KKhilGtQCvtx12s05F8RHWrE5C+Vv605IJ/W nFO9IW92SbT6L/m9t/uqv8m9Gj1TkyH37JVUbZXct7VzDdflh2C4Dq8Dcr+WW5fG51b9S69W5l01 h36q9rVqnD6veWF1gv5eF1R1it5nDKo6Q28BF1tN1HuQdaM6W6+jnB9Y0pRXTdYL7/wNHje/Raq+ pqf52KPGUc9uZqg2Ra/54/GGNn2QlfUCFhtglDeWj/hGaz5YpckW1uy1FtZJrk61JlvMVOdap7jy VxdZJ2BuVVOsY3DN1dXWwVnt1U3WXmXPq89a2zXxVXdYG3RGVF+xlu8fqd62Vn+UU1NpHT79V+19 67ermg2bJ8LAKO/dxMBO6Z3bOX7PuiPufHImtSj3HF23mnPuLy3/qiG5r7rtRcSmI+J1EImiiOWy iE2WwJXOhJpc9w/9l2vYHvse2dX6efhNp9eVnNy1wmy86DkBww1LQRUQ1MAbNM//rj44WEoequsN DtND1YkFM6z+qX0ePOCuiBgUhYj/g0gcQSzvR2waRux8W/syePCWQN3h4LePauvoIfbTnfV3QzlX +ppGwsXB2t8brwrmcEy8u0BGw2J8svxIg0d8nb5O/V/x/Tb76rPjn3tE18fHTwWXIhK2EEkNiBQC YnM4YldSfWL8zK2a+nMJOx7vadBMiJ3Z3WifaLnyueV4MhmGmz3Jr0GFWSGvCXI3FZO/KlCbpLN3 HldqvJ/NcUKhMT1b8GRvo1e2eMgCYgI3IrkSkWqL2CKDeEm00Ttb8rZqY2G27eOipoPZN2ZimwVy GleN6e/yQIVpeUYDnXhLNe2sYH2LL61B0a3lGK3CQKR5gVZsa93cTcv3/NJcTssLs2suoOUlYhGz LyPSLBHpOxEvLTUX0vJvzzX30DpHJVqUKkRm3tIVK/etUlqfVRFhmEFikJDfu8GIFFJiuDHclDgZ RgwjwwMMGYaMnT+Di8HlrcvYzdgd3k2H6XDS34g53xErghD/c+u+x4AY0J2LDCmG1Og4g8agzSa0 Zv0/ld2FX5Pd/z/wy87bVmJg3AaNLV0GHQYdohJi0Eoo0igISCoiBjU6Bmw0bLANGDA2RucGyqjB Btx2XN9z/Dx+f8BPHz5FHHtfOzvnvM7bB24ZT3i8rF9Zv1A00xpnjSCZt3HKIhmZ3jiMNDUzpPSb Mi8zrrRP/37mh9JKK9fMktJ3Lpsz60pjfSwziaVR4S7QxCxohhi0tDmTVBrVGJs5UppDT85Sxv0z tj17F+6/BfOcGxX3UTTbiQRWZXYiaa/o/uwGIl/GK3uRSFahYQ8RXxt4Yq8R3azfYEOJ+nfssIXE 4750LIV4MOI7toV4IHkzNNMaimNDibHYQeKZLo8cCWLsGDGHS3JZ6Mj70Qz24Jxi5mkEyfnC3CCa m6vOGJU9mBvPKFDNzJ1i+Bo+zFNiXLKh5j1nCN8tzuvuWvE/n7+pa/BZXP6BLsbLDGhWK7RcEkqq zhfuamE45l9jbBsPzv/CYC0aFtJY61A0/zwH7MH52RxJzK6CDexvsl0FPuxmtaACHjvKKLDwJvuK 7dfCHrbY/Q1FKuMLj0hFyeO0qFNFXePlKc5Fg+OlWC9oBQ7a/C+U2VBUN/6cbVqsxj6+OFjSOvEv ihapCGgIUlQmSMWEFssKbss9K64WyKnfKzHk841fl0zwy66rlXrzfVx9S3/xNQOscQ/5u5+v4PoW l1INy9YtTuS6l61enCRElq1anCSP4/4sfmQ54H4ufpzYhitYfML3KhsTgNNF6U+YYrgIkGKiZaD/ kncqqwMpFl1+D6TYfxVg3dp3V3SDFNPCg1wLtCSA28QeIYC2La2E8BlFC1YRukCKTRHaULRFgQDO 970NhGqQYm6EEpBiWvi+P1/B85K7+ysYseX19xCk8ACC7G0rAJ259EQBFUHUDAtCEcS4qQCcpeyr 8kFOedjmu4IUo+SBK4v/mReNIBmb8/aCq/ySC1KK1JLrBlKMngtW4IRN3iuQYhOFRJhiOd1iuQiC NTxA3rsrd0J0jXhkbrcIXz44t1akTx3NfStSYaKT6y/yzN4111jE3D0gV1xEPMg3Z1p4LO5mTpFw 6gflHFfhy6XrcuSF1zeSc44LUbsoOW+E3rGv5RYLJQnYBZ+FQa+ZKyoBdhhsrvT2vQbZfjJ1R5aw M1LRJ7dgJ6R8Nc2wA1LXTRjYdikN+5vYWikRd3BLycXAHGy8ZOMLY6yPZNS7L1grycvF77Cqknsa LmBtJWbop7FTEiNjVbm7JH7zlQvcJKmgSvTZS2AmnzrXsDcDu0dh7qh99nbF72dMs4sVdbRY2aWK CpeTs3GKh+3fZ5cpbnXryS5XEAQey8YpdMfGZBcrlLxDsvMUnhU9yc5SuF6/NntYQb9jBOuvYDdq kFOtULRQV3BAkQHOIEcuEECVxYu4ff9gZy4FH13I5mtfPPM7W0m7/0JYtr02/kpytpN20Y3j2fe1 M9y3ZntrJwcKZT/WDo/Vyg7V9nwblh2lbVvYnx2vfalOObtHW7d9BRug/WjkUg5Z+zMvtUBKF6z9 vMmroEpu/zXrfVE5C9e4xxJyNpl6nCVjr5hOXHTCrjXbfTUTeuMH1D0du85sV6A/doPZjlgf7Baz rW/jsDvMNhQ2YIXMkNo/WCszofbkHMTMcZice8l8/fxSwVuLdrAqW25tRJA87i0PoZ15B261S1zI tXA4du5dTr6D36UbOaoOJdeqck47VNycgXq4QIOOQF9sgr7bCi06knPWAV9nnOPmMNjemrvJUXmY lafp+Ge+p/DJbbD2C5iesQhSIO5JE3qT/8gTlfiT1+OloBCcp+x1X/tObqvXK9OJ3CwvrMNGqKcN NOgz9AUR+q4IWlSei/XKraPnDnt1dpzNc/M+OyKdn/pgE297UZWPOlj7q0LAPlb4KMRE+GjBr5C7 krUFfiFPFV3yf4Zk6vjlJ4fUme/OtwqhO5rmm4V0eT2CBvOgca+g7+9Ai23yLUIY9Y75z0I+d1QV 7Aq9NZJYeDxMi2deIh0BVnCxdfwi2GF+xf8nXFyUFf9d6kHRxQREyaRwOmGD7rPClIQdFrqFtgnC ToWF+gkY7xZo6GZofDz0gza05EChYYJ4w95CnwStTpPCLwklo1uLVye+5OWV9r4E66VkLL0KQUqw 6cUip0vc07OkpUvOpKcqnyz+kR6nl1Tckh5p6V/8Nj3cGS2OSA97qFAclh4WdhmaUAJNPw8tRYrD 08Mb2MW56djO3yWiGTtGU0p3ZXxdWFdGyAbnZVw0DuwTuIe4hyIFuBu4G9JjOD2cnso23EncSf1U nDhO3AqL24rb6mKCW41b7ZNbipai4URoIh+aYQ/9389GMk4UJ0pvxj3BPRk7U2ZfZr/gXkGroKFo uSPJGUHK3Uh6olLlviQZmYjyENImlY/lMcRpg5Ty18RWa1o5llh451V5GfGV387yOuLzp9rl9cTI ZDNo5jtoGQZKbC7vIqZ1va/YTxSMfaqYIlEWPlXuIIP9Fe/NvIYg+FTmcdESfCNzi6wMfoYxqVpJ 2MOoMkwgaDFe2MwRXBkud0cIyQw9fz8CgXH6GZ1AZUi9nIZmr4WW20NJswQS4zAjkfCD4TSOrcxk Hl50rH7G0kbRynaOC4JUbeRoYrZV6XKEZAeq4tgzajFVo+xKo6RqSXaE3c5qb7bFfcnqavbxRzPV n9nbo27UHBj/kfKmRmr8CzYXWjEGbdaDMtk1O8aH2H41yWyfRX6d9IQlitYECVoQpKZXkIYJrJUR uMs9rX0hUFF3r/0mWGucUefIp183qKPzX7s+rz/JdwnwrI/ma0Rvr+/hH0x1rf/F35H7sv4Pfzuh EEr+AWX5QScw9dWLNfynDV8EF1G0/jNMsQY7kGI7G8BeIG/bqANSLKIR9FwmPKIFSDE6cRykmDrp JkgxC9IQ7MWaNEGK4ZpiwKpe25SDotWS0Jab0F4G9ONt6PK/JC66AUUJn/b1I0g1c4s3gtSSEWRX VC3op6R0ar0QRFWr9ixIsQ018yDFztS8BCm2puYMSLGE6g6QYrxqG5BiYlXTCFImUQXSrWlblTqC dMtXhYMUY1aDzm7FsW4Cpljlpv3gK/CJhwR7vaqSRBliG6vCRBvl8qvui+aoB1WZiIYb/66SEbW1 N6xEReXcH1fSRb4GJVa+EqmNS660Fnn0IaxSRORU6S0CS3iaKAcsYKhWXhJ+wh6ochH2XXKpnRXm gCoGUqAXw0/K1O7NqiiTiz76gBAinXSikuAnHax5mnBf+rZJN8FWWs8+mKAnfdj9HOGU1PdAPkFY ivYiD/9TKum9PX5YyrpkN75cSqyBiGdJ8unVhJuSnHHNyg9SCJ9Se1IKpFhl2bn7CEK4rrhmrwCv qnT1aF/FMeWYM3z8VqUH51fjtyg5XO7Db1Yytl/Ab1Q6634Cv1ZJOPBFBar4NfZ3xXfF7nePKgSK eUVoxYTi4/qneGFFx86b+AZF71Fm5TZF4qJaTb7SKDh9qF1MRpDKDZeK9xnjv2u/PXa1QqATdjai QkxX/aJMxT2d5asbKjx0pm+kV/joDLk/qQjQoQU+rwjVqYytrHim8+Htz4oYnadFV4F36ioqmDou HffwITrJI7WEEd3NCxtqHuiBs0/V/DUHUGXA9PC+ZsInU9qxaTzfzOOcAl7cfNXFrxVZ5pbXjCoK za/cjKgoNTfyEKnAm+sGTlfUmmvFjlc0mSu9XaloM5cvOljRaX6ozha/y/xUuwBPNvcfwVRiLPbw ztfkWIJErq6/lQRWJcNhl5By5XeHcInnlfsdvp37Q7B0dLg0iu90LDM1wBc7Um75QT0moUEvoC+c oe+uQ4vc8AWOzXUxeK7jp/Y/hBin8yOrKwec/sz/rtW+DU58NTjPP2Amz3mZCBGrz3q9llSo8vXi KnRXtngf1+6uVPJ2NbtO+Ood4/AS6tkLDbaDxmGg735Di34S/vN+Xr+lUsa7pONuZcuDvSNm1asf TPFk6wx9d6FobWtIPFgpUiFEYbWaVyFzkjPV30KFFQuqb4Zq63RVcUI9zJ9URYe+cGRWPQlN8lqG hlyDxi1B39dCi7OqHocm1mdWFYVWdvCq1cIOjjTU3An7xfOuj32qC9b+6gTQWdQ9T7gqTK0TTnCW Sq19lxCgFFF7JCFJl1FTnVBgkV7jlNDgvLtGK6H1gQo01AMaPwf98BJacrtGI6Gl4WrN3YSZzvCa xcSro+fqNiad4VEa/rxMRtGGW+k/wA6zPf23iHp9QwYirVPvmLFG2a5+S8YGva66moytluS6hxm7 b1vU6WWIPHxXdz5DNAwPTVwPTU+AlmrXaWWINIrVOWUo0k/VDWe8H22qH88MXviX+CGbi6KNszgK gjRW4mpFKhvDcaXSy41GuCyVU417cK/1aQ0cXJzVx4ZyXKTL64YEXITPn4ZQXHjEQWjSJWhGERR3 oSEEF0ZEGt7i3tK/NiK4H2PXG+fK+heim9zxJ1GUlEJKAefoUFKo6DmSG8lNJo1kQbJQXUXSIGkY EElSJCnrX6R9pH13ekkbSRv9rEgICXmaSkSJaHI+NHMaWnYdSkRJ20nbu1gke5L9+D9Nsk2yCyj5 Phmc+pofMP0QpPkx0060sDmUqSmr2BzFPKhKb05koIblzWmMcdvdzVhG071/mksZef7lzTWMlMid zURG3KszzSTGi2x9aPlbaNPB5gZGNIPa/IXRNt5FzmAGLgZRk1lxKEpJ4gQgCKWcY4PZSunhKMlO Ur5ydqmlUfezZ4xyqdpsot1xqis79b4hNZHt+3g3Fc+2jUqkdrH1U3qp/exL2I9Q/E5o80No91oq mX2Snd6iy6byN7dyJ16iaOtmQTOCtGoK3mP8W/0EvnIRrdUCfXXv1p8CjHFhmxZ//rpN21N+g+uH tjZ+YkA0bS3fPVqOdo5/LTWBZsq/mNtIs+RfIDChlH1QVgx0Qoq2fxHlp7fbCXxQtP0cTLH2YJBi G9pBcsmbdkiAFAvoeApS7FPHLEgxaqc+SDGlznyQYqb0VTDF6MYgxcrokSDFNtAzwA4iC22xhfaS oB9NoMurOr+hx1GU2ioCeqy22zuOIEjHTgTZZtu+jCAS8e2tCKKi0x6HIEYP2w0Q5Po8Dcx49880 0HMFV9LAGkvQaOsGKZbWdgOkWHcrSLombus2kGJerXYIMinRBvb6lbbOVTDFqDOHpMHz8uSI6d7Z 1vdiSRjZ1jFMpmxLawsmWn1Haz7mnvFwawTmkr1DqzVGxL2pVVJ0JnhVi0C0KF6qpUL0frpqi6eo NE61RUZkgiRDDRQJYaRTv4rYcC62yopcWRptZ4vUgkd5SMYIVGmWy9+3mxx3/M0xESpVpuHEDWqd TIGmBLVYJtHkFzVN5qH9APWpzGX3Cup9mWNBL6gm0l/inKny0uQPytTN0lGlmygfpQ0bWRRzqaUu ecq8FGe8vkVJChVo0n5JN4EqjxVAMlPllZL2mVE2qaw55trMVXU+W00RV2acN6GIKjdeuUjZp5x/ 4xFlp3Kc+yBls7JnkAlltbLxiwHyV2WJ93fJ80q/StaSR5W6GrLId5UCOjmUPUqRY5epD5WYizU0 TeUZUOXLJfAMUJu0f+0rpJTobjg2Sk7V23lOtblQ779LW8jH9e5fLSGf1rO/aUpW0DPx0CKr6KkG XSdr6B17kUY+r/fPOz75ou5SsTn5ki6rntY8o/u8g0t+r1s+eoq6Ue/fBf+2bv1oMJPjTO8gSIu/ 2Xmh7dQA89USNyn+5i3nRsiJFj6XmpqXLZZNVck7LQZvWZOFLLo9eGRxi7agRvIRi8YX9WRZi/J3 w+TTFlnFO8kqFon1ts2zFqYd1uQMi1cjwdQtltK8921kK5DIbboOYO23XnXcLhTW4umYIvGZGuF0 ROEFpdApTzuessZ5p9khcpOzisNNqGcDNPgGNO40meys/F6G3OKsUKxGpjmfrnciP3JCO3QoUs7m I9rUZ7e38BRph11AitEOeIGTUpuh9wmhz62R3rGSSS1V3gJFY6rggYmOG9XgQYY5hjLzoNfRnTLx YNArFxoiAY1jQ98TocUN0PpuStKDvI4c6umHW0fCW548HOQZ0vi+v8Cq3B2qgyA0x9BIYY+2xlCK 1Lm2LWHrlPa12oVp65q3UMJCLA61mIeVOMW1nA2r966Dhu6GxhdCP3hCS6ygDTZUflhMp0RLeNjK CK+1IZzGS+pY92wzinYcha8c3f46ca0wr31XooTUCC0o0ViJ3baQ+FDvfJtLYpqlbOvvxDrnqlaw gT740kpKZIYdgSakQNM1oKXboA0/WkMTMzuJbZuTNo46044nfeJ96rz4SgFFO80ynoFVP5/xWsSm IywjTzqwY0dGjXJ++9uMDn359uMZ41aKNFaG4PYELSED9VGhBWeuDbeGJmZDM6SgpaPQxjKaUcYI 3ZXWkqk2KmhnZQkvaNFLsG4oSseWKSEI3bpMWYRJ31GmIoPprC9TUXHrvF2mZrCvc1+ZhrVWR1fZ hTsbO16V6foGdviWGUaUdfiUGSZ1QzNPQnEUKDGw40qZbNfJjsqyiLGYztxyq4UCxnl8Nooy9pBA 99rFJX0SNeiqJg3JVHWFkTpV5bqMSCSD710iJLzNRfocqfCuFJ1MwvrV0/NImc820dNJmS8PQLPM oWUtUNItegwpjrGVPkoaHlfpKm76sLif+YfciaLMTGYWgjDjmHGiBczHzABZHaYT00l1mmnENDLs YZ5jnrPVYP7L/PfeeeZO5k7/JeY65rpIKwbKQF9FQLNToOUT0CZbKAOFXzX+k/mR+XHxHYvDAqdx ViwHnGBZiZxHmM2sFI697BzrLUdTrYiVyTlgRGTls1E7IxaOPXHfi1XNbnmsxWpil0W1sWjsrNc7 WXT2+5yjULwetDkH2i3HamYnsek92pz9fInemYlBkAYdAiKC9HIFGZiHfasFIXJP+w4JbNT9+y4I ThtX9d0WbLl+r+85/5Mrvq+Y3xSQ00fnZ0Ub983yY1Ir+37xA3Nn+hF+AOEblHIWysqCTij29fEN +fUDuwUlKDpQDFNsAOwCmN+D/4AUMxgE3aaG+2AYSLHRwWaQYo1DILnczwxpgBS7POQPUuzgUDFM saE+kGKbhuZAip2AtphBe0uhH89Al0aHrqO2KNo/LQ6SZ8hwTyyCjGYjyEa/0UgEOdoyCrJJ+fGo LEgxhREe6MV2j4AezcNjxBBBQh4PLyBIot7wUwTJ5A4LI0iFzRAWQcjFQ8cRpIczADq4yVuDZvBV jUdFYYoNrD7MQZC+DIkd+2IG0w94YwyH/MQqZOaHboq9V+sbuigWarJl6JCYnf3M4BexUx4vBili q0K2D8ZgOhO8Bo0x8RmNg1sxhmWfByiY9c3CA36iRJZ0X4moLOdd/4ro4WXl4V5RcIYZOCX3AlQZ OY7uK+3NO7Xt2K8BfTmpE4cH1OWENM0HjsuilwMHxGQnb7wfWCtL9Kjun5V9GdzRT5O9HT/YnyN7 Op3dHyTzEzfebyrTSOrvl5B5wmztDZIeYUv0jUh/FxQNdcpUgSoBSp0I0n9GJWXfdN9WNQkJ7R6O etm57j4P1eDz4333VN2vbutzUrW6+bjPTlXDc0vfNdWDwWV9Oiq/4537lFT60o/2Sankl8727VN5 RCzrW6WizXjcE6D8Zqy1d06ZzZcZnFBZBlUmdB6BKqW6NKFTfSl6SxI5vT4G+xUu9TwwlNQ26VU0 ML5G6FU20LwV0qtqIO+Z3KtuIBrc36thsDpesVdDf/pDGbCtVLVXTT+3sadXWT+06wGrW485mt+r q6+6MDOobPAWRQdvmH0Hc0zbfF4ovv+CBVUS03fGMleB2ats5aPN73lkLWSW3lNvNeJQ0NNs1e11 rafNqiVEvYdhVRNv0dNvlf8hqWfMKqVkpueTVVjjlZ45q/v0dlaqZeXIfO8Oq0s8dGDJmgeqfHVc AlV+Or0XEgxsd1aT/NC/x/mTonuf5O1QHWyvs8sG87s9P1yuOg71rnIx9j7du9bFIGS8d6OLTjyp 9x8XrQ/tvbtdVEpWekVdTjWe6T3kIkmPZE3c9hpJ7TVxOcALHtx1dw2KDmU/OIUgg60PioStBz4/ FJeSH9j78KWSaL+Kzxbde31BPt4WOr1/fBqcaL0ffegP9kBDU6EJ1tB0HWjpNWijH5SO6ynzERmp 6dvkw+F5Dab7fUHRYZewD2C9FIQtCTMHv4RrSJEGT4QnKdEH3MKn9ZT6iRFnLY/3K0R4O7f1/YqI fygEDfOCJu6Epk9CSwegjdPQrm29E+FDo4f6j0QU8iqHop+xUXREMwmcKoezkyxFzgxvSXoufXXI IalJOWSwLumH/pbBA8knrMQG3iXb36YPGCQH+Zwc0EgOD78PTfwEzUiG4tygxNvQLv9+rSTmaOqA WzJ2YcPwh1fgFDwqn1mBICNlmd0i70bOZi5KfxouzNqmcnr4QNZx/dGhN1mXrTcOHctyd2ENMrMi fY0Gi7OSIp5Bk3qhmfbQMlEo8Ru0a2WAlTk/dmSQm0VccBwZylmLomMnyi+CvaW7/LLollHPclsZ r9H15XdVJkZSyv0M8kdky59ZC4Y7ylPu9A4/Kcf6OQ8bleOeEoa1y8uT2dCs89CyISjpDZTxaOhl +YEx0nB0+fxC59g5wr8oOq7TREeQ8TVNnaK+Y8SmDpmvY55N7aqRYwebaIauo8wmmg1z9FlT+136 qG4T3d93VLSp+9nI6MamnlfroNkq0PIiaJMhlLl9JLLp1rjrqG3z/kWN8WoKyH22V7cugrB1u9VE SWzx7lOy/uPz3UfVJMaruoWNpMbDu7fYYsdNu5F7dePSzK+PAsY3MpcjP4/9xxSknB5bYgqw+tCK RGjzP1AmbqyIWcqWG7fsvrrYyLHtUUJRTgmnBEE4bzlvMZs4UZwoWT7Hm+Ot1six4dgYDXEuci7a uXPkOfL30zgYDuaxF2crZ+vzVZw1nDWvr7BRNprjCsVHQptHoN02UDbKCeIE8XUn/50EIzaJFzSA fbpKgMV4TdYKouWeTTYIXNVDJpsERsbkSapA7nrAZLtgm2vHJJO/HNA8OcAfjnafZPPbUscnp/gN eXsnp/l1lUegFAsoqx46oTvJ4GfyRz9tEMyj6JQeTLGpGyDFlqdAQsmfn0oGKXZrqhykWM9UN0ix yqklkGJy3B0gxfS5oLOKFecagBQr5TqAFNvM9QApdprrCVLMGNr7FvpxH3QJz92MvkDRuVMHyxCE 5yKyGUEE7giySlxgiiCHBQKQR8rr+eAKjCL5ZJBiX/igy/Vk8EFPFaa7yECQ5CeLoNvCPlkE3Vbl 1YV4cNpetYABu1UCD5xXZtbMqIAUU+XJwBSbuyQhAj63IG0s5DFP/3cAQ1+4sH+3zOkFOXFU7ffC DvEpEwZvXpx6U5JHEn/vpcqLF3cNO8izFFdI+sgTFfudHTXfJ0YkCM/HiD2hJsxrip3o+z4nwHzk mnBrRQXLIXNkDBinOZcToLOYFTq1KJQwPXFWTPLS3I/j6078O7cg/5/mf3Oj8mNXXs+1yTfdOjJX Kv/e6/1corxP2D9zHvJ6SZ5zBvJ7szrmDsmN4cVnV+QyKE6zZLkbvdmzcXLin0amwmXmltbPpsmC rnfunaojqGKpbiBEmZHX+C4Zzv2qVajoPjOv3nxheuaTOu6a78yoeqqD2ky3epD3oRmqun2YyEyl umqS2AxWfXeWxEyC2nSFwsxjtUqy3oyDWkiP7YyOmv5Ht093Veb4iTNPVb+CKp/0+KBKmYGl8NqZ l4bvJQem7xotKLK4piYHdc9OOxmNm92cdjRiOD4A1nvTpx2McsLMpm8ZxST+mr5h5J5ZO21rZFwe NW1hJNPsOH3ZaC1Ld1rXcHjy9MfXBqaL16aLDQtRdF7F8jqCzB20chE2md1rbSelOv3Dxk5Jn7to a6zbyN1lt8eCxI2wxTqRuVG2qQ+yuHG2MWGt3GTbgCQM943t3cxE7gdbs/Ij3Gxb9aZ2br7tke5g bpHtxonzH6Wsby04TMva/AFVMm9fAVXSXfYI584WurRL4Way70QrsaZz7mrrWXE77s5YunKV75nf PsY1vaf5MIlrdU853Jlrf+90kg/X+Z50ZhnX7d7B8m3ch/f2NIVzn9zb0L2dG3H3K6fwo+wdZR5r ese97SjK2+MD5uC8vK+4yOa5K76Z0lKzN/1OKTvNPPQj6q+ezvLXtJKcXu+feXuJ2+nf6vMQGrEP mvQNmrWZS/dvKdfgMvypTfFcln8z8wu337+R4/4x33eZlzt9wx88L7zEiG+gCu2prYjT/PqnddK5 cyeeHVb+M2v9LEa/bObVs0Ur3vSXSE2X1um0SE9fi+mXkQ8iuqHJL6BZwdDyN9AmFrT7EJQT+in1 aTpvdEY0koqiC8IvvcCqdHtJECHOU19+lZGc3/JKUyVlzvjVc4Nbs29fdVuXz65N2XEnfSY1RcNP cyYgxfBpLvSlMjR7I7RiDbT5ALTbHMrJmGp66bcgN7sxpQBUyc2eR5AFEayQqDgvBqslkz6/iPVQ lZs3xGYYbp/DYbttHs4dw/656zNbk3PEX2I2JEfp2avZoByllz+h2enQCl9o80NodxyU0zy9K/vh QtTcvpxcFF1UxVuCKu14D9GgBUt8pKwwbwCfpVrPu4InGhLmu/AjtsfnzfFf712cWybsfLR+roRw JDJ87j1B6lU3FKsLrfgGbWZBu+lQzseZmIqohaX5iwQwkxcHyMUIshhMrhSlLUqSibIhC2Ryu5rW ghW5z+gKb4k8YcvmxZEX7q/nKZN/PBqa/05ZH+U8P0D5J6V6vp/yDxaF4sOg5HNQ1nboxLo5+ea8 RUdeIgVU4fuwwGmcr8Qax6xe/M4akeUt4liDarWLt1j9RuzFvaweu+CFDhbrfvVCFKvncdqCKavv +bmF46zB18kLx1hDORQoQQhKToeyrkInjs1/6+5YnFz40/MGRQXCE9OgyvLEGEaJT5vollPjv5mg qEvyXSYIxvb8cxN513fw10+kuVouDk8kBOguEiaingsWUyfCU60XoyfCcuMWn0+EESqglH+grJfQ iQsLs5w5/j1+5KQ3qFIrqAV7fr4gH+MueCV4JfdcECwIUX8uuCO4Y0wXXBFcuf5CoCJQcf0okBBI BLAF+wT7ohMFmwSb3qwXrBKsyrvIR/lo5TUo5TGU1Q+dsIby0SX5JXkUXfn7DmUrq0GKzayAM428 0so6kGKmKxtAilFXNoMUK1gBPZr74RWYYhdW4Hd3CK9g4PcorhwCKbZx5RhIsTPQFm1o7zPo5Bfo UtTyIkqBr95xbMPfV53vhW7c/b/3RTu8CaqSBL38GuqoAfWVh0YVQNMGocXtUGIMtPsodDLt73Uv QVH01/H/vQOMrDr8/XiSCOiZJLeK41H04JTMFJCpaQokXHMCJjuBHvKgqy84Jx7UimoC7khzR9ED A0W/gEmNrkAjRitw7cQWcM11y6pANxT9USImDquc9YFVFA+J5KCocqAMSPTTDqdsUPQU7cI4sNwM PKJTybeFgJ5+QUC9qB6geNo+FD05XWQELGnwBXp1vQTKs8EjPTEjAFd74gOKfneRi4NVtP7+H7gL MSLgsV9ylgEnDB1D1YvgM5464LFcuA6/o+GCjgu42guy/lLALVGfUfQ89w34/PmGwmxgbH0o0IYO svf8kXF1cJ9zfFFgEfrfNzm1L7CKiRKscpkq8hNFr56SqUTRayWqz1HUbJchEXx80eoH8MydLuBB fzBi1zY8Pw1uyXsDeqyrnYViwPy6ImBYpw7QahR0RVdlFl6h6JWffy59PWZUDavYTcEq9ttFwUnz xlFZ8PFNA1XQDdxyMtqPog6Wth/Bxx/unQUmPgJ1b4U+TwC6vwH3c8u6gAQ8Xwfm5S2JjuvAzSM0 cA9zPE1g26/mL55222AV172wiut/ok9Q1K1F9jKYtXlqaijqEW4UgaKeenZg3DzH75Pha9A8BiPt mREN5rdnyhvwqD2jCxKBT2qhbu0lQNthDvyq+SPA0z99v2Du74dVAiJglSdSonXAFlksWBWeau9R NEjMCHS3QdV24NqCFV3BaAcHBtwBPooOA/q+AWfG4AcFkUCPWmPg3fYzQIdhMJ7BNnNg9IKv/Lj/ 5fijP7BKzHpYJSZQFGRazLLsN7DqPNXA38QuG9uh6Iv718GcfNHnWoOiceIBXKBM9Edomgi0IApa exRKm4QOwVvKzGZDv3/4UhzVAKukBcAqad0YcCVvj8iB2fU2WN0SOG4Mxvyd8vU8YKybDJD+xBY4 F2MATdOHwirvZmu+Q2lx0CEt6Owm6LdPX/1eP4ZVCrpglcKNGC+glhxYxYUh6uCeC8kmYDYWrbPf CDzvBu6hyOcJ2C2KXsdUAN+lhUALnkNraFDaSehgDXTGBvpt57cbuZawSg0PVqndgQGrqfaMHLif Wjt1MOa1kSbgtF2Lt7cAjruB0ahbGygM/DcW1K2TS2uEFkRDa5KgbTTo4GHodCr067HvDpVasEpb C6zSNoypBy7IraAoba3GQaCYCdiRaGftwfyhGbsfADoFmgMfx4JRpUWlgeeR9rwgBlpjCW2zgA4E QrlU6JejP0KpkrDKwJW//7ZkiQFrecBeHuwbA7c1tIHuJmC/GvCzB6tqINQd3PNAbCDYGQZSYsHO NpDxdjcQWxALrRGBto5B++nQKTb087afdb1rYZWpvzN5KhTTCwyUB4936pEGuOYpHxOwX0152YM9 cMrdHayjKdfAYGjsbfiZt+A0N+VZEApvU90HbbWG9m+DfpqDrnz6vW2yA1ZZsYRVVowxw8Dz8mAu rZzRsAIeM2EAhezB+K9scgeju/w78D5wJRbMsWVeGnjulmcKwJpdnq6OhbYwoH2XoB+noMu5fx4v +aB/f/wvATBjUPm/o6ih83eHq4Lav4e6i0ADlaGxO/6ugJy/M/TveFSfhLaoQXs9oZMs6JLV/6vw //ven97Op0/9/dOqrWoIsm4UPFJJBNkQhyC/wTz5mYmivzMRZM0IgpCeON588Pd9O+HbkG4Cv/4P uHoKoH0xhg4AAAAJcEhZcwAAFiUAABYlAUlSJPAAAAGeaVRYdFhNTDpjb20uYWRvYmUueG1wAAAA AAA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJYTVAgQ29yZSA1 LjQuMCI+CiAgIDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8y Mi1yZGYtc3ludGF4LW5zIyI+CiAgICAgIDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiCiAg ICAgICAgICAgIHhtbG5zOmV4aWY9Imh0dHA6Ly9ucy5hZG9iZS5jb20vZXhpZi8xLjAvIj4KICAg ICAgICAgPGV4aWY6UGl4ZWxYRGltZW5zaW9uPjEwNDA8L2V4aWY6UGl4ZWxYRGltZW5zaW9uPgog ICAgICAgICA8ZXhpZjpQaXhlbFlEaW1lbnNpb24+Mzg0PC9leGlmOlBpeGVsWURpbWVuc2lvbj4K ICAgICAgPC9yZGY6RGVzY3JpcHRpb24+CiAgIDwvcmRmOlJERj4KPC94OnhtcG1ldGE+CipwEEYA AEAASURBVHgB7J0HXBRH+8d/FzBgQMGGoEaxYwMs0ZhiicYeFTW2N38VU9XEmERjiT0mvsYkxpL+ xpKGRmNvaKLBxBoLYBcVMSpgBUUFBe8/s7t3t3cc5RD0Ir/5fOB2pz7zndm7nWdmnjGcO3fOCDvO y9vbji+9SIAESIAESIAESIAESIAESIAESIAECiOBhwpjpVlnEiABEiABEiABEiABEiABEiABEiAB xwhQgeAYL8YmARIgARIgARIgARIgARIgARIggUJJgAqEQtnsrDQJkAAJkAAJkAAJkAAJkAAJkAAJ OEaACgTHeDE2CZAACZAACZAACZAACZAACZAACRRKAlQgFMpmZ6VJgARIgARIgARIgARIgARIgARI wDECVCA4xouxSYAESIAESIAESIAESIAESIAESKBQEqACoVA2OytNAiRAAiRAAiRAAiRAAiRAAiRA Ao4RoALBMV6MTQIkQAIkQAIkQAIkQAIkQAIkQAKFkgAVCIWy2VlpEiABEiABEiABEiABEiABEiAB EnCMABUIjvFibBIgARIgARIgARIgARIgARIgARIolASoQCiUzc5KkwAJkAAJkAAJkAAJkAAJkAAJ kIBjBKhAcIwXY5MACZAACZAACZAACZAACZAACZBAoSRABUKhbHZWmgRIgARIgARIgARIgARIgARI gAQcI0AFgmO8GJsESIAESIAESIAESIAESIAESIAECiUBKhAKZbOz0iRAAiRAAiRAAiRAAiRAAiRA AiTgGAEqEBzjxdgkQAIkQAIkQAIkQAIkQAIkQAIkUCgJUIFQKJudlSYBEiABEiABEiABEiABEiAB EiABxwhQgeAYL8YmARIgARIgARIgARIgARIgARIggUJJgAqEQtnsrDQJkAAJkAAJkAAJkAAJkAAJ kAAJOEaACgTHeDE2CZAACZAACZAACZAACZAACZAACRRKAlQgFMpmZ6VJgARIgARIgARIgARIgARI gARIwDECVCA4xouxSYAESIAESIAESIAESIAESIAESKBQEqACoVA2OytNAiRAAiRAAiRAAiRAAiRA AiRAAo4RcN1d4m+7KVoZn7Xrn5OnwTAtpygMJwESuEcEpt959x6VxGJIgARIgAScmcCIhz5yZvEo GwmQAAmQgEbAaBzp1Cy4AsGpm4fCkQAJkAAJkAAJkAAJkAAJkAAJkIBzEKACwTnagVKQAAmQAAmQ AAmQAAmQAAmQAAmQgFMToALBqZuHwpEACZAACZAACZAACZAACZAACZCAcxCgAsE52oFSkAAJ/EsI GJCGf5Ysxr6wVUhO+ZcI7WRipsfuwt753+PortNOJhnFKSwE2AcLS0uzniRAAiRAAvlNwDW/M7yv +aXeRNyxi9i5NR5uTwaiS6D7fRXnXhZ+JyEWL3TZhpvVgITjZfHZ2tZoUupeSsCy/m0EYmcOwoY/ EuHt6Y7LMQa0+2kuKld1u+/VkAP083+uwKG1y/DP5luAnxEQMvq3H4Wn+gbed/mMx5fjf/0HKnKE bLuE4CDn+57JOH8MB5cKhuHbka4Re7h8Uzw1dgTK+d4dQkPGeWwb8BpOpLijiKfMKxW3Y4riyVz2 H9m+Rya0x4pfU+FW+3OM/HsAXO5OpH916nvd36/s24LYiJ1ISgXkC8AjtduiUecsnqurcYhZG474 U8kK42JVm6BG+2bwUNo9C+xXz4v8IxB/6BTSxaNbtFKQSNMGXt5ZxNe8U/ZvwcmtkUhKShM+3ij/ TFtUbVzRKpEByYie+Bqiogzih+4UKo0Ow9OdK1nFyc2N0/fBG3E49P0KJCgsxHdfh16oEuiTm6oB GclI2BKOk7viFP6AO3zb90ONIK/cpWcsEiABEiABEsiBQL4rEIwpV7BhU4J4M7GTtbsrvL09ERBU Bl75+MaYFHUIoyf8iQXholzNtf2k8gOhQEg9G49F3+/H+p0XkOpRBL4VSqNF88pwT0xAZEIxvPZu XZQVLNMuJWF59HEgWgI4jkNnWwoFQj5CNoHlZxYEbmLFfzci7EpFzPwwWGmTLCI6hbd8gb6yKAzn om7jnCbR9dTv7rtscoCw7YlKWC/kMrv96lXM0jjU7LYVZXTjdRn/4LRROHj5cXT8oD8esfO1Y84n vy68LCNwe19z+VLMjaOIGDkJ6Q2GoVVoY4eyTN09E1Obj7GTJhzXq7RG6Nv17YTl3suYHo+Y5Rtx 4s4dq0TBuew/RrjBs0oNkTYaD5cTI8xC7Bzt73eF6nI0NnV6GhFRJpWSmptb7TKoLxQItr8WKX/M xPSO9voR0H1zLAIbZx7QXlg9DXN6TbYrZo8t51CvoZ1BbNpRbGnZGL/byIX3hRqh6xwM/jEUbkJf IJ0xIwnHP12NmAy17xW/eFMNcPC/U/fBy7sQVqkVjuier4j3R+GJb7ehbd+gbGuaEvkLvn8qFIk2 j1Wt4q2pQMiWHANJgARIgAQcIZDvr9tHF29EyODDOcrw4a9vYliHHKYkcsxFjZBw6IiV8kD6ugll xb/bpSPiy3Vo//beTNVYMOtPs1/FLrUQWtsFRevUx+UzvphQbR5mp4rB17+9+uYa/ksuUpPx09Ro rL51C6MmO78CQb5AN9h8GrWTT2FdtScRqb2Q32/at4+sNysPmnwchsZtg4HkRFw4fgp3SgVZKQ+k rMa0U4ia8qN42b6GFpPukQLBwxutunXB6ZQS8Cql02bkI7z009uxae4KFDv9LFoIBYLt4C6roqRi 6PgsdQDnVq8fun/5FsqK2eKUM0dwJSENZZ+9O+WBUq5bEP4TdwI3Uw1CT3wFm6s3xI50a2VCVvKZ /D3qhqB6Gz+UbFMl13UzpX2QPh3t73mte3rsCnxTr695YNlyThgCGgXAVXRf9zI1MrfB5Qiz8qBE 13EIea8vimecQuSELvgj/BZ+bTkYZc4ugZ/uJ9yQcRTr+kxRRJR9r8uHA+FlOIRNnV9XlE1Lmg2B 76UfMz3DlxaONCsPGk+Zh+AWlXF5xQdYMn0jkpa/jvB5TdF5YIBadZdKCLlyBtVDq2CxWMFyN84Z +6ABifiramtNeRCC//z1LtJWjFdYbHv5CZStk/WKpyvrJ+Kz7tM1JCEIWfgK/Kr5wkW8CxSrLBV2 dCRAAiRAAiSQPwTyfZhZM6Ql5sMfm77+Dd+LWcQyoe0x/amiirRX4uLx1uTtyvWY7jPhf2IiuubD DFTN557FvoNt4F/JE7G/rEaDgXvyh859zOWP//6ADpPU/cHBb3TFl8NqIsDDiFNRxzGi0wr8djsj k3TupfxQv1MRYIlu9jZTLHoUCAFXF5QwqNNkBTOkLACp3YrD3ScQ1bs+jMi7fBnPL+mSojYrWVUe sgYdBrXQsq2I0vUfs1uEQYyA3LXZydwOsu1m5IjnI0Fo9sPPjqRwPK6r+p3pIrZuOOTEIG//slsi STD6Lv8S/tpiCe/qNVDBoYyyj+xS0gfqKvYyeLTLw9jhYP8p0+NdvNAj+zIKQ6ij/T1PTDLisDH4 BU15EIrX4ubAr3T2OV3cFKZEeLjOBxj04zBtBUBFtFwcidSSdYXCaB3iohLh17ysOSOjS020X/sr rrr7o+pjpgHrY+gX548vKnYQ5S9DwtFUlLHZ8lMqZBp6PzIEPi2fRSlNrvL1l6NY0a6YN3kjjq3Y jgyhQDA/3y5eqND5eeDXH8xl5+XCGfvg7QPLsOGW+tv+QtQPqF7NAEP9RTCcLKcoTDZ/tAz1fupj YWGqePwKs/JArtp4dUHovVmNZSqfnyRAAiRAAoWKQL4rEAzeZdAztAzubIpQFAjThjdBzyqm9XT1 8MrLtdCr6gIxU5uBRX9cRte+Je4auMGzGGpmtyfzrku4txncPLrfrDzo/PlgLBxYxixAzWb1sGyX mFGov1TxU4cZpmDL0lTD9SuICDuEzz47hAQY4FutJt6c8Dha1LA/IDm1NwYrlp/EjuiLOBWvWoYr 26g2hg15DC1qW6e5eSIW36xMgLv09vJD19Ye+OO77Vi4/JxSVqUWTTBxTDAC7KxWVSRNT0fUlsPY EZUidk+LZarl/dC8rRjeRB7Gir0pYsemWEFSszoGdNC95abfxK6l+zHv532IjFdygdGvBPr0fRID upe3vyVGSzN/RQz2HZd1Kgb/Rn5o0cgDkSv2wdglBF+FZl6Gq+buwH+x0deYmo4rRtnPbyt7i+Fi 6vNaPq7aKNcmW+PF81i8+ACWhccjVoQZ4g2o1OJR9OlVF10a3P2zoS9O7os/uvYPbY+xG4rXrI/q zwbC1eshfTT1Oi0O0V+uxHV3N/Gymor01Mpo+OZzcLt1HjFh87Fn5XJcEe1QzLc+Gk/80Hp5rNiD G79hA45FbMY/EZG4puVeoc1reOKNfuZBgr7QlMPRuC48zp9KULwvHj2MxJhygmsaDG5llf3TBjFo ddN/Y6UbYLyVilQFdSrSZGey5exq0w76Qh28jl/9PWKPpyqztnLff3qqH4Jffz7HF/VUYTAweoFg Fh5pLrF0s95oPLA/KtW0/5CkpyQpcW/EJEM8LqINbPqPbb3EvvOEuESxl+mw6IHSReLisWh4XjAo 6YtVqQSjAOxZrrgSml//5IqHXDuxhH7X9xFiyttNSZIu2ta7WS/UbpD9M5gaI/j9NB/HBD/Zlx7y 9UeN5i3gkRaJPUtLoHv4B/DRZsJTdv+C6L8SlQVYD1Vpi8fE/vj4P8Nxeo/YDy46iMHHH1WatUXZ qnfPQdb95MIFiBddVs7kpycZUO2ll1G2dBrOrV8kZF6Ok8dFoLEyGowZiSY6OwN56u+Smni2Yhcv wM5fFirPn/gSRHnBok6PICRvWo+zN4LRalxPqz6ZsnGetkKkPV7KhfJAFgOxVUC6h/18zdsHFA+x AqByP3fsmHsDCSeuADoFggwv83QbWH6tlBQwiC0/JQwPCQXCHRj0z68aDPFFhFrP1zTdmT89fQXU LFy6pj939xTPRZqwubAhAhfOXhHPZBqKlg8S32vN4Kn1Cass7kEftCrPwZszSxYoKfyGLFGUB/JG rhYLGP+FUJgMFCsyfsXllD4oY/O+c2LWq0o6qfDRb/lQPPmPBEiABEiABPKZgL2f83wowjKQvSkG VvL11+QMpR9Ft85uWL3khvrCbwrgp5lA+OyNyrVbvbb4+kXxOmYzBnIJqIZPgh/GO5Gl4CsNINhx g5t9buUbFZ2A8KURmLtnLHqLLQ96F/vLGtTpv1vvpV6LNBvmbsKHW0Zh2GPqS78MOLphC0aPOaXG Ef/fMl+pF1HRK7By1nFsu9gDwR7WgcaEf/BawPf4Ic3SR6xjmO7c0Se1NNxE3e+ciUXvOj8pSidT qPIp5IsOP4zR/etg7akeaGGZDBNv81cwocwXmK70P1OqBERFC0XJXPW+2J1zmDlQDEpt+Jpi5+bz jwlz0eGjf3RRj+EZ30m6e/VybpTgXsOa+5GVf6JBr02Z4koZV87ahBIh7bB1XhP4W9BniptbjzML RuPbwbNyGx3psevw63ujdPFDUO5JN2x/prvV3tyE6CicPvOYlSG8w2J58UI7M9IJ0YOw++OvxSBm Kx7V6YaQFoXvH3vCvLxaFnrtt+H4IlhXvLjsIgwWNtBmL09NbIp50xWDH1qkdfiqvE1nEyF99l5C QM2sByLWJWR9J5dn/9FniFXdgfao/lrWCgRlgDmzP+aPWZUpY8ntwJzRaPDxGnTRVlpI44QRT1c3 L+eWiW4dfAcfer1jkz4Ub16ag5K6al0KE6uU3o6yireqfVOre2AWxl9/UfdtbBNcwLdJmz7Emves WdSf/Wy2CoSU9RMx3bwsWxNQsDu3YYVZ2nNx44QCwV2oWNJwbOgrCDfbzxgF69LMSVB37FJ0G932 rlgY045g3UtvWfVb98Y1ETenK1aH6xUrUVjbJw1VLi1Rl+/nob9LydNjI/BzYCcb2xNRSNi/Hnvm mOoWgsdHWxQI0sbCocmfKYH13h+LikK5kXI+Wdy7w8MnayWKu1eAiLMKKb/9hQupvS3bDq7uwr75 UlMH+Df0Vz5z+ndt3w7zc+NVVtdps0kon4V/flN/B4sHVcqynbaGNsDWLPJpu3gvnuhgrZgo6D6Y hSi58pb9N+XkMSVuwJMNrNIUqSwU8g89JDiuQ2KcWMVRR8dRtMnWOUI7KFy72QPgdicZ1y+J/ufi DY9SD1vlwxsSIAESIAESyA8CBaRAyEI0MZV2dMtuDBTKA+kaV3ski4iF2Dv9Arb/pL6g9RpeA152 B7dF0Wd+b5QS44VaNjMRenJthnbBpFerwV0MwE3bHt6ZcgS9f66jjwaD9i4S2K05Rg+rK1YceMN4 5h/MGLAQ0yNvYer7hzFoVbB5oB30f92wvWYMxnVda95K0e/TF/BWl7JI+msfWvaXg+KDmLaiFcL0 K0xE3UbV+sGsPOj3YWc8U9YV8VH7MXpWjFmmoV/8B6Ed/dXyRJpBdX/WlAd++HBRZ4S2Ki1ef2/j yO+RaNprg1JWB38fxKY0MxsvvLLnqKY8aIS1Ua3UlRey/23Yh/rd1yplGSC2e9wnd2XnDp3yoBHC tj6BFnWKAUlXsH7eHwiddAhXlq3H4ymeiFtVx8w+L+JeXNRbKA9MQ6lQsTe2M7zEwGL/hy9hT7R9 RU6R6qF446+GSE0y7WFehnktlinFlwgZgXavPINb+8Lw65jvUbp9RasXfIO2oqHe8Blo+p+uKF3e HVcPr8fiFtK4VyT+/iUSjw62aAcMrn54evibiBetary0D9vmyjYFKr/+LioWFasMUoWV/5QS8BP5 3C8nl2eH7N2KhPg0uD8Sj6Ut+oi6uFvV21a2C0veNCsPKg34FB3f7oPSldxw+8JR7PvwFayfux97 h3eEV8WTaNFR1X7dOuSYLQFTmR5NhuGJ0CgUKW3EmU9ma4PM9nhmRCDkZO3t1ER4BD6WrbymvArq 0zvkawwqOxjp7iWQsukVhE2Ohp21L+bi5eB3vzb4DZ6yVmxpaS5WoBiQcTkKe99pidVL1e9JkyFL xa7H+mN4ZGogwmZdM+cjFT3t/9dL7Me/gsiX31EGswemdMNVrMaLo1vq4jl4KWxB9Pt7O5KuJwjF xfOKccIVz7XXMhF70Je8Aq/rkVg3YLToK8Hw0H5t89TfhdJhsU55EDR2Hp7sGgyX9ATEfPOu0pdM 0uvVlMa0BJzYr07X7x/3JM6Ph07hEYL+uz5HlTqZV8F4PhGCqg99IvrRPMwpBfT9Q9Ql9Qg2d3hR UwaEonzVrJ9HqQCI+laszji4zfw8N52z2VpxaBJY95kSuRJ7lu9AnLkPh6LT4Gd0MexfSjsN7V56 AsZE8f3y8ntK/w9/vgEeWnsSj+tWSRR0H7QvneO+vrbL91z8US/kYRyxo5hNP3fIrFRa+UxHrBSr j0zOu+sH6P/1MJTM5j3BFJefJEACJEACJJBbAgWuQBjScAq+CfRV5JGz4Bb3FAY1F1OrdgfIlliF 7kqM52I168stgjO/2Jl4eNesjJ7WkyumIOWzzfhQLB9dUfWrUg8LViWhfLtNSE+5jTSx6lM/6+7f uSNuXOugLv8WM/bJYvKiaLXKGPVjV0yv+wuubTyOw6nBCNZmwuWWkaBmj8LvIZGRcCN+HYZJHTRZ ez6NzSfPouWko9j21wXx5llClUH8T1gbqRp4RA0sPdgT7apor7p966FXh+2o0k4dOAY/WR01fdSO Ebt0l6ZwqIG1Z/qghXiZVZ0rgjo3Rcp+T3jWk9s5NuPT8EaY1kFVSiUeOqtEK/6sP5rKGWiZnRhp 1OzwGFJivNE0YCESKhSx4qDm69j/FpMG4sY4uYUhAb3KfycUHQHYliBXXth0bKul9Sn4qr1Usoh2 qPcM9m1/Gv6mt/6yZdBr1PMIqrIRDfpvw9WNS8SqkWoY1ECD75h4gDCG9suLqvLAb8h3CJ3W27wk ucpznRE4rZeyz9g2W6OLm2J3wJBRHMXUZlaiNBeWwJ8xWQJv1gyBQ74SXK3rGjD7AibNFtHFFoMM sWxcqijKNOqJPgv34rNeYnAbfgQZQoFgqrLRxQf1xDaIerKEU4uUAYd31/9hwLQ+0seu85+4HZPG CsFuRSKs7FNiUNMFQ87+CB+5pFnvbGTTBzl67V49EP7V1VTPhD6CsLlZ5yBXLPw58CclQt2xa/D8 6BbmyC5+gWg6ewdKiMXeYWIp+Oae36Jx8lix7NwHrZOuobWImX5kPt5vOATFWs/BG8uFFfqM7Ovl HtwTbef0VMo4cPJrnBADjT5RixFQzSadWYr7cCH2rvs+3UwtuMwwYPLAbIWQBjJPaYPf6m2aCMO4 MroRLsJux2M/XEKJql3xgzC05+amezaK+yDg1ZlisYWad5kB3+HlmaLPa790tXv3wuGJ7RAmVq+c ntIJp0Kvm+1EZCtMFoGetQKFLYhAJFUTBWinCCjP2YemMpthcNc3rZ6RvPT3xPkTtIE7YH2aQQ2U Fn3Jr5qwFzBGnbFX1QWqwHLLgMlGiPSR1vnd6gUhbb/QPmMZFjRehj7RYpWOrTKguFCO7HsfE4Le E/Hm4ecW82Rys+t7dHamZfTmQHFxO2Ytfn1not4L5Rtk84MlYiorSAb3wybzChIha+1GKKVfWWaV o3rTYt42tOwZpIU0Q62QLtjepz7Wi1Ug6zp8i0Dl2dKC70UftCNjbrxkf1ftl4jn375e1342mr0U NVBVHvgFCsW8UA4nLX8PM5dfxLDkKSihPQP2M6EvCZAACZAACeSewD35SbFWHJiE+wtT59bDf/Nj D7opywfhU7SIyRjf3VSnt7ALoHfedSqgnstD2G+jDJBx5D78X77dgdDJ+/RJrK6znmuqgz5tNeWB liLwOfGiKBQIaWeslRVH9vyjxGj7SWuL8kBL49u8KX5+cyf6zkzGTeXtSQ4v07Fz1SEtxjGc2nkc v6Tc1O7lh6sYWKWo9RKnCMQJK/PiVHMlvFKDKuLzgDIA9218CK91rSAGCm5ijlschVm1BL7Z9ToC 6gjlhvXYV0nr8D+hHDCIUz9M7abYhrBSGFjnaEy5hu2a1frxXzW2KA900QJ6PoUPZ+zGGLECZMOO q0KBYLuzWBc5m8v087HajGMIuo+3KA9kEjlj6z98Jp6eWhd/3r6TTS5qUOuwveLMdZtBgJ0BempM BHbO+kycIqAqhGwzdvXMGrrpxTk9RSgfREKTksE2D+VelG0Qy2dMAyS5D91WmWGbLvXASuxaHafZ MbANNd2LvfJeTdA4tJnd8uVAJz05e163YyPNJ1skihVAMavEMazqhLlSiKvoJEmoKq73i78juC4G DFZHUOqMKCpdyQ5nk7T6TymbyaWnyeusn9z8YGEqy9FPUztnl87gFoCAZ4vgiBgILm5cCtGhb6Jy XX+hSBBPsUcJlOzyPt5+Y5E4CcNaSWLJOwS9pMJM9ytnFGtvAsYtxOMzpCHAOzi25Sj8hSb2bljo mVd951f8Z3I7636TTduZZM2uv8v8z4dvUVBVfWe13aMQK7/5NTpF1BJbJ/ytTlDW90NpWLP3trWo FeSFjHihWKzRSVFKrBu/DNV/sjHMJwwvbuk3wdw8NUNHoqxhH7Zoz/QqoTh89NdB1n3WHBsoEtBH rGCqg2sJYlA8WV3ptOSJcihiT1mhpZPfR0Grd8HnYAKubFuIJZMXIO3QEHz7uhcGfR5izVRLIxVs zczKA83TrRKafh6G9dW6CY+pOH1iuN1tTCb2Wiq7H3ntg/Grv0HM8bTsD0MSylUPoVgNalVJLVt8 gXk/JC6z/2rJJGfSns2K38OBD8NwZyheCp+k2ARJ+fNrTG/3tgibga2/vIBOfQMypaUHCZAACZAA CeSFgO7VKi/Jc07zyc6xGBRoGQakJYsl2l/+hj5iifaswV/i8bb5cxJDzpL8S2KIgYRqjA84fEYM AGqoA2JHpb9pM4Nh8PZEsKtQIIhRmX5IYUw6gy5V5pu3IogC0X9oKRjOXMD8pcdzV6wsy9LEYhBn r1ulIyFarEgQrs1TJZVP239BDeT0rh1bDFrEwd3VGV3bdKb7+FTL3FvRoHoIG7oXfWadQVr0IcwU f7ZOrtJYNKbiXa9CsM03p/vUuASNdx20r+OWRXSxOkILKVtaDzeL6Fl4J0Wt10Ja2l3GanDxhW9n sU/WztJY6yxDUddmP7F1uHqXGvk1pj4pX1pVV+zZzqgXUBJXju3D4XA56ynUQkI5cL/c9T1z8fv7 6kxt9jK0R7U+zSx7v7OPnG3ohfmv48f52UXRaRZsohUkq/vBwqZ62d7KAWW9D7/E9g0DFSXY0Xkz cTRTivYYEP0TKlc1PS2WCN5dO9qfJXepZD45IjVFVWblF4vH+t6dXQWL9NZXBm1ljW/dctYB2p0R ZfHY0st4zCbU1ctbDPzVlQdB0z9XlAcyiotfc4RsnoKpzceIWeo1uJwqDPPpfhiSlk3VbHG0R/+9 P6FKTZXvk6/+gqlNQhUbJfsiuuHJVvaXB8i2kyenlBYSVWnTHGWeD1BWBOz+ZQcCRrewkdJy61JS nBbytPxrhspP1sT0tmNwYf7HODcpxO72h4BeTa1+ekw5SWOZwUJhLo+nzY2iwJTO9jMvfVAqfBLm jsLvQvGVk3OrXQZ1/x6g1EF+F2d9okkSrh23/L7p83UXRiqluxV9CyHbRpsNino+/Spe+XAdvhEr U44s2o72VCDosfGaBEiABEjgLgjYG+ndRXaZk4qJWSvn5lUCXYY/jdYfHlUGUVeSxOiznJ0BkvjV Tzx9Tdg6lzPGngU7yEu9ibhz4iVeHJlWycf6XAMr4e/FjbsnWgojh6sjM/C//8ViTKu72/+ek8hH 1+0yD2aX7umEdroTFz5PideW5eeUS27CXeHbxAdYfxo/rT4nlEqP2iRKxx9hB2z8LLfF27RD+FQx U6Oa3LcE6K58a+ot87mi3fi+iH0xCTt2x+NUovoyl5Z0Fb9+sksoUu5gw2SxNLfLWITaGJXUZVkg l+7ly6B1ERfB/SCOXHoeAVkcZVpCLosWKxCS7mLA7eLir9Th4TrXIA6LgIudsfttbRCVfWWTYJSK IpvnWZ9Gvjgf/3SM4qXsvZ01CCVLWQZ26QfEsvwmQ/RJ7vn1Q6XkLFzOCoSH6zxl3rOeJyElK811 XLwdFf3sgNfCDR5lrQZvpnTyM7vVGvp4ebm+ZyzyIpyWpkj1rhh4uiWSonbg3NFTYhWH5JiKa3uW YtvSaHG9DkveXoa3V/TONJC8EZOINNHn3WzQy35q6vOmyd78YpGRIb9ndCNxrR759WFSeOQ2P0NJ f7HVTJyAIL7vKjSpaZXMVbcywvYXOOlEghK3/DvvmJUH0sO9bk8xKP1ZGZReiLsifOwrEJTE2j+5 ZaNW355CgfADEnbEipVFLTK1lT6+6bpY03ZCCTBWKAEikZyYKhQImbkmxSWZolt9GtNNp7NYeefp xtE+KJUORWsKpWwuFAgVu/nbZXFy5ynUrSO/q1RnvCFsXWjbeWz1857VammxgsW7kjUjV2H7RDqH j4PVcuQHCZAACZAACdgjkM1wwF70fPLTvVzbzTH1Akb6favtl5cxnhUG8p4wG8izmyaPnvLIxFLB cg+96uqPGIitk20Ht6bQe/FZFC2Hihe9gfuFEb0l+DLCH8OaeWQqWG47WLkxEf6t6iFIjMvz5tIR ufaEkrT88KeslAfSM+lgXOaTDxwoyMXGcFNAPcn1NPa+PxefPf4mhj3jreUmtirMW48h621nYoXS oUopEeeGWG7vAv86vlkYlRQneYk14G6KYQd1tGA6WWK8OEFiVF8/K6nfHdcAI8vo+5dVcN5uRJ+2 OsbRMm5W85Ojd+nkdgdPsZVCG9RM/+o0utrpb3eOHzYbG60ktl7k1RULrq8kvXXwPRzYNQANm5iY qznePhCG5bl40c1N+fo9vI8PfdVKeSDTJ/6+XMkmN4Pi3MSRmUmlhtUxjtbvz2K5gwZaGyyV6PRf TLr+X0WOgvznWsrXPPPrUqoifOtbczeVbRADzvTbUmitf5gCtE/lGEd7ih9ZL90A0CZZrm7vFYtc CWMnkrQj8bN3I7HM/r8YkzIEvi31kUagcZdR+Kz/bL2n1bXs83+v7YOnNAOVpsCbu+eb+3w58Z0i 3f1mkV1/lwNS01Gre974EU/3y7yfXSpFTi6ciZhTlfHUcMvJIEahzDB911w/IQaTDf2V+qr/LA9L hs5XXhbRglyK2gSIW9NLg1xtn1tnUkg4MpA1JicgXrMHlFU5MVPeEXYstmayY3Fx4ZeazYj2KFXe Us+s8snKP699MGBqAiZNzSpX+/6ynX1bPStWg63CsRWbkRYaYFZ+pe5drxlKfAvlbJQE8DDVLxJJ CUZxZLP2nSeL8VYVPBkptr+t9mWgLwmQAAmQAAnkhoAj7wC5yU+Nk34bN7UX4lR5jJ4YPKWJN5S0 6zeReCgW/33pe23WG/ArZTv3AdwUS7xnp97WlbcRa4/avuLogsVlmjwWUJSTKs6BVpx2r/hbR7W6 i9sbZ3W/b/pOHNGysAq4hzcBzz+N/9M27o5p+zEm/nwWyVr105KvISJsCzwe/RJ9Bi5Fnx8uWiSz 5W4JgVGs9DBtjUhOMQWIAXodddb+WvRxRF0SDIUzlVG+RbgpIixpVC9jUqp4uVMHPbZhaSlqPtJg o/4URd+2TTBCW5IypuNMlO2yBh/N2IKeXv9Fy8F7zGXpL5r0VRflXtuwBu0GR+FUsi5UrByJWvu3 SC9eqEt/gG7fJ5kD0zJU2SY3W4BFe80VVsJTE1NwWMzI5asT00KVxUwfcAyf/RyvGKqU/THpRDwW TV2JR4pNFn/bxUygiOJaBmP+K7drAPumz0XvGafN7Sv9EqMPo2uDFfJSuEbi1Im8bWORqV0rP47H xdYV6VY+Ux47V0YjQzSPHLhe+ONrqxUB8gx1vcsQs73yJV4uA5Yu7boIT0sThhHFnzITrI8t8nTz hp+2xOHMpg24rr2zpp4/hv1iL7pcSiudfJm1XVYs5ZFypWsvujKOfISVsrIoT8nMtG9YzETv+nmn YjdBKg1SY6NFmYMxwesR8fcxbqhdUkmSl3+KfFrdjRniVAhtvJ8VE0OZx9Gsm/piLy2jR0VYf89I +XZN7IPxxUticqnu4qg8a6lcXdS08hjHQ3+LgZ9wUoYr+7cg4o0QpV7fjN9klShDtI9etvS0ZCWN iaFV5Lu8MfeBjGTz0mql/wj25jCbMkxyKO2sGYQwyj5nSiP4mhU+VmnfRdioReb+JIPkgDn5xBGr WPZuNvasgt/nRYhj7a4i9fJ5nFk4SSzbN22xeQvVG9pX7NjLy66flFkwSF6l/l5ZMZBhWThH+3vA O3O0nGbgyycn4NxZS97S5sjvT/hg/ouTsPX9zxR7GuZixXaNx2Z1VG7/CB2O2BNaurSj2DJ4pOIv V9sUt9FRupX3VcJOTxmOmKOWzpl65Bd8oT3HxcuWMBcjL87M7I0JHk/ity9XIlla4tXchdXTzIZa q7aqbz3jfjkCYcWK4euuY3BU/BbLvqG4y8ew5aWuZvsttoPm9FTTd30k5lXtIZ6RY0rajKvnEfP1 IMwe/IOSjd+QF+Gna+L70Qe1GuXqo3SbUCWePMZ2+6qjapobUcIY5BTluvrYTihu0uBoORr82qFH W7UBf+07E8lac6XHrhCGLNXv3CptbbhraflBAiRAAiRAAnkhYFh5c4X2KmydvJVRaMLz4OJWtUbt XttylbLz54OxcGBm43C2qwJkZnOjxqJ3jczKBvHGiYX/N8M8W2uv4BIhPXAyzP5WgCNhS9FAzPZb XB3sTemBAHtFWSIV+NXNEzFoEbRQWWqfdWF1sPZUD7QQkwx3ju/XTiOwxC4/fCBi3n8Uptl4Swjw xq8jlBMLruzZgfJPheuDsrwu/mwP5UjB+BUbM7Vxv0Vv4avOxbH89U/R97trVnno286YdAHTQr/D 5PWWF0yryOLm8z3W2wp2frYQLUdrL1MiPLBtLfjhCsLDE6ySjl8zHKOeUVdrHAlbLdrVopRwC6yB 19oJUBfjMXPucS3dUziU0squEUOrjHN5E/nlIjzxdtaDGrd6HXHq70bqKor0a/jq+S/wtm7VRZBy WslFROmOVvxi50gMCDTNMOVSEF206XfeRWrkAmGXYLDON/OlNMAl99DK0w+G/tQHp0b74nuro/Ay p3ns2z2ZDHMlzuxqHmBkTmHt03D2HnQeGCAGuaaZ5uyUOsF4KW6r3X3QiV+LMt9WX5StS1DvHq7z CYbvfM08m2cvTnZ+uZNPzeHJeXvRxnQ8ihgcfV+pk/mINWnErna3sri0LFwbGJnk+wBvbRtmZZBO HmG454lKWGG2SB8sIkdaiVlzyu/o+9bjip88qnP2wFVW4bY3Fcfe5bGFWoa5KUtG1feP3KYBQoXF +DmqxXgxyA0rLVcgWPpF9ZA3Ua6aGKyaj/kDWv58EC26+GvSiV+E44vwftBA831WF713XUKtOnl/ tlLWj8L07lmvgJDlmp4n/c9J7vpT5v6esOg1fDlQHRirdcrcJ+pNWYOQt6y3CMjy1pZspBiNtMci ZMs5BDe0NoQLwX5ZmUZm5aFMV65NW5zbYPqtGI13ksdaDWbjJvph7vSr5iLkaQ/eB6J0ff0tvHlp CkrqkYtnZMKjHcxp5IVvYJCwlxNl9tM/UwYk4q8S1bHhVgZM31nmiJkuRovyxprLu5d9MJMoDnic mtZUKFzk9hz9iRnyLkQ9aUanEJG+0mXf59uLdEsU2wgjHvpITcD/JEACJEACTk3AaFSV/M4qZL6v QHB3sVGPZ6q5H9oMbCbOvR9qV3kgoxet6o9Pu1vWTga/8Tza19S/gllnWrRcSWsPmzv38kVsfCy3 NVrWN8/2S9+h3z1935UHUo6iVatjR4J4YRyqzlRLP70b+ukLiBeKDqk8UF1mPnVLqm1hgNiPaeP8 NEv4JRo+jr2LnrEJFYP0bs2x+eBQYYiwgjnMTRx7KJ29Nvb3VMs3eNi8iAqjjL5eFtkM3mUwatko xO4ZiLBf+2F7RD+sixiMK6nvYembtmnVopsM641D67uh08NqPtHhh3XKgxp499Nu2Bf3nll5oMjo YVrG6aec0pAWfQwzP/rTrDxoM7Ajtp/JP+WBLDN4UGeETaitCq37H9jtCcxb8yoStmvKAxnmWgyv LXsH2xe0VOSTXvK0EpPyQJVvwl0pD2Se0rkH98e4yLVoKI72snbt0W3dZjw/sJ6iPJBhRbXlvi7e 6sDUOr71naeHfiSghvm+uQC9xz9nHVHc1Rs+D0NjtqN5kEWGYrojFxXr45lS6T0q27fNKaL4vmq/ zAohQ9Fz1XaM2pZ35YFJgpzlU2M+omdSsjn6JR5AjxGdtWwicWipRXlQPWQkeq7bh1G7rJUHMrI8 LaDB+p1o1S3QnFa7QN3Xp2Lg9liz8kD6u3j4m4Kz/Cztlf33ZJYJbQJyU5ZM4qE7iSS3aURrWmao xeoS0/J7OaiULmbZTERMn6kpZdqjQ9h2K+WBEkn7J49wfOvAZrQdauIvA4LRSPbFs9fvSnmgFOFu mYGXx+bZc6bnyTYs5/6Uub/79voKI3aG6Z5ji0KpQsi76C/6RA8b5YEs1+hSE+3jd6NV28y/A11W HsqsPJCJ3Goi5NRWqzQm5YG0bzL0rLXyQCbxHxeFXuP7yUvFyaMi5bGR0lV+/XO8mWijPJAB4hmx rpM47tesPAhGNyGfWSEn44stGV7Pqb9DUuFZacCH6P7pu0qI/t/THy/DGKHg0Csr7kcf1MuU2+vK I9ejzwj1uVeP25QpQ/DSse/MBhJt83Kt1gvj9vyMqsoqOH1oKF4URkZ97Cgd9LF4TQIkQAIkQAKO EMj3FQgGwzRHys82rtzXLkcN+mO+s01wF4FKWWJ5vZtlrHsXueVvUqM4uvD8eWEUSmTrLgw9epcq mv9ySqOVl2UJogwPT3hlNrughBXcv5v4rOlnyrGFtisQ9GUmXxKGNcURd+5iuwbciwg57b+4yzTJ iTfhVVZVRMn2TRXbYlIzMuDuJepns2RXX8ZdXwuWaddFWcIAqLtnLvqU2OqQfCkFqQZhH0F0eTcp Xz7xlysQ9C71/HkYxCDXKJravVRxfVD+Xl+/ihSxjNngKuw9lCyOHPWK+VC6XBaeniIM5Im9xEU8 3O5JmbkWO+0qrifLZ0vYbJDsvRxgIpbCy61ZkqWbm1Da3KXtg1zL7AwRRT9Kve0Fd29xZKepfcXx dxlii4dHFv3XNBvr2fo7a+OK+WA3whmQSBkyxHaM2y5C4Zou+oVHcXG0Ze4kS409BmWXkOBXrIo4 gSbrr09zhqnnTyPlkvrbUNTHX3DPrIgwRxYXsp2uxSWK71qRRnyfFS1XCR65+MKVdbpyKUlJA7Ed qkRFn1w/w+a+IcovInjk6/dNHvqgnkder1PPHRO/Id7iyNgkFKteI1dtpbA/GaduHZQMqwiGOgG4 AkEHg5ckQAIk4MQEnH0FQi5eH+4fXbdsBof5LdW9LMtR2Q2eRVFW/BWoE4qasj42Vg8LskAxaFac nKUUA+4/fvhdUR5IvxLeslva3VkjznwvJuZmpcu565qUBzK2bF/5Z3+Ng4yRj04qvbzEX26zFAy8 yprqldtEeYvn7qNZ3MwnBUWWUoiXeM+CLsOmcKOLUBqIgYr+hdkmyv27dSsODxN6R7kIDaq7WYtq /7m4fxUr4JJFPxLqLqUQS/tmr/gSj5/ipGFCq77wACleXEqaBoa5/pZRmLhXriF4OubcfSrCXeu7 uUkp28lTKCcc/TWRdSot/vLiLH0jL6lzSJOHPphDjrkKdi+ntVW53DNR2Atlg6PscyUQI5EACZAA CZCARiDnURhRkUA+E0jasw/lnlppN1dpr6J9eTFgKGTjJLsw6EkCJOAQgSvCMOiWWfOVNEnLX8KS UftRTNiTSE3xR9OJI+Cj2ox1KE9GJgESIAESIAESIAESsBCgAsHCglf3iIAxxfpUBFOxncf3xtfv 1oRyGqPJk58kQAIkkAsC8mSGM7NGY2+4xUDr/tkzzSkfffkNoUBwdP7dnJwXJEACJEACJEACJEAC ggAVCOwG95xAieZP4/KZYCSKfbVyZ6272J7hW9Yz/+063POasUASIIH7RcAoNg3V++EI/E6LffS2 v2zGEmI/OJUH96ttWC4JkAAJkAAJkMCDQ8D2NevBqRlr4tQE3IUtg0rij44ESIAE8o2AMDRRulbu 94znW7nMiARIgARIgARIgAQKCQEqEApJQ7OahZMArW4XznZnrUmABEiABEiABEiABEigIAg8VBCZ Mk8SIAESIAESIAESIAESIAESIAESIIEHiwAVCA9We7I2JEACJEACJEACJEACJEACJEACJFAgBKhA KBCszJQESIAESIAESIAESIAESIAESIAEHiwCVCA8WO3J2pAACZAACZAACZAACZAACZAACZBAgRCg AqFAsDJTEiABEiABEiABEiABEiABEiABEniwCFCB8GC1J2tDAiRAAiRAAiRAAiRAAiRAAiRAAgVC gAqEAsHKTEmABEiABEiABEiABEiABEiABEjgwSJABcKD1Z6sDQmQAAmQAAmQAAmQAAmQAAmQAAkU CAEqEAoEKzMlARIgARIgARIgARIgARIgARIggQeLABUID1Z7sjYkQAIkQAIkQAIkQAIkQAIkQAIk UCAEqEAoEKzMlARIgARIgARIgARIgARIgARIgAQeLAJUIDxY7cnakAAJkAAJkAAJkAAJkAAJkAAJ kECBEKACoUCwMlMSIAESIAESIAESIAESIAESIAESeLAIUIHwYLUna0MCJEACJEACJEACJEACJEAC JEACBUKACoQCwcpMSYAESIAESIAESIAESIAESIAESODBIkAFwoPVnqwNCZAACZAACZAACZAACZAA CZAACRQIASoQCgQrMyUBEiABEiABEiABEiABEiABEiCBB4sAFQgPVnuyNiRAAiRAAiRAAiRAAiRA AiRAAiRQIASoQCgQrMyUBEiABEiABEiABEiABEiABEiABB4sAlQgPFjtydqQAAmQAAmQAAmQAAmQ AAmQAAmQQIEQoAKhQLAyUxIgARIgARIgARIgARIgARIgARJ4sAhQgfBgtSdrQwIkQAIkQAIkQAIk QAIkQAIkQAIFQoAKhALBykxJgARIgARIgARIgARIgARIgARI4MEiQAXCg9WerA0JkAAJkAAJkAAJ kAAJkAAJkAAJFAgBKhAKBCszJQESIAESIAESIAESIAESIAESIIEHi4Brfldn+p138ztL5kcCJEAC JOAEBEY89JETSEERSIAESIAESIAESIAE7hcBrkC4X+RZLgmQAAmQAAmQAAmQAAmQAAmQAAn8iwhQ gfAvaiyKSgIkQAIkQAIkQAIkQAIkQAIkQAL3iwAVCPeLPMslARIgARIgARIgARIgARIgARIggX8R ASoQ/kWNRVFJgARIgARIgARIgARIgARIgARI4H4RyHcjiverIiy3kBG4EIGVz83C1epucL1+Coa6 E9BrcttCBsG5qnthyUQs/SkaXoYEpT16iPZwcS4R71qalJhoxG7dgSsJySIvd5Rq3BwBzwTmWM/0 2F2I/iUCKbgJuNVCQJ/O8CnrlqM8GVfP48KxSJz7KwEVXugHn9L2kxgy0nDlZBzS7QdDBhT18YdH qYezikF/EiABEiABEiABEiABEsiRABUIOSK69xEu7N6CixdSYa9xiniUgGeFSihdxefeC2ZTogHJ ODhtFA5efhwdP+iPR+wJbJMmv27TL8Viz/71wH41R8+MK8gQl/kxYDUgDec3r0D00uU4tvsUivn6 w6dJC/j5puLgip2oPXoGAhvfP/73k3t27Xcp4nOc23AD50Qk2R4PlEuLw98vNcDqpal2qjUaryeO RRlPO0HCK3X315ja/G2rwN/fA3pvO4daQV5W/qab+NWz8PsH4xATbVEJhLTsKRQI7qYoVp/G2OWY ETzQys/2ptb0reg9ONjWm/ckQAIkQAIkQAIkQAIkkGsC93DIl2uZCnfEtCgsbtEeicacMITgP7s+ R4069gcgOaXOj3Bj2ilETfkRR+5cQ4tJ91aB4BowAKPPdUPSxnfxZf8f4OqZI7DcVTntKH5v2RgR UZaBW0J0FGI2rDCnd39u3H1VINxP7mYIdi4CZlzEG817YXb/VfnXHnbKuR9eFxeONCsPar3+KZr2 boo7R5dh/ovyWMOp+PHVqhj6U5/MCqzLEZjbQlUeeHf9AD1HNcCJCV3we/gtLHxiiFA8/JhJ8WDI OIo/+ryHmDt3rKrqms239ZUj+7S4wajdrZI5nUF8PRycp/bdR9ztKx/MkXlBAiRAAiRAAiRAAiRA AjkQyOaVNIeUDC4YAm5BCFk8HxeTryB25gjsETOQZQaMQ/OnqgKGmzi/dRm2zN0gyl6GnxrH4qW4 rXg0i2XNBSOgJVeDqzvcDep9fsz8W3LO3ZW7V3H4NmopIv+A9BRNkNwlzTLW2c8GaMqDYHRe/CXq Nq8J17RknF45A/OHzFLS3W/DIfebe5bwXI0o3ShEBK/Kt/bIsqx7HGCAuvIgSMzidzPN4tcPxOuu NzGn/2wkLf8Vl1P6ZFIGJC6eoSkDR+PFBcNQXHzjlg/bgUtlGiEyYxn2rT2KNj1rWtXG6FITPU8c xLXb3ihR3g37+5XD4l/trXywJCsW0BTVcRSN9oYhoKa1ouCAoQwWz72BKk38LQl4RQIkQAIkQAIk QAIkQAJ5IFC4FQiXjyF6cRgOrY8Si/GBO/EGlG7eBIG9eqFmA8ssXh643lUSv/bPw0/kYFg7WlEg tH5rJAKqaQPk3v3Q/M0V+Ca4rxiYRGLPyiN4dGCAVXmpMRGI/mkRjoVHAr6+uC5CKzfpiqDnu6Js 1eJWcU03F3avRPSChcqSfelXrFp9VGvVBGl7luHEnd74z5xecNOP0dMNMN5KRaoy8Z+KNDm+cdVH kPdZrAq4GodDYfOxd344rsnChCtWtR3qv9IbdZrVUD1s/ivbCv4MR+wedZ93EW9flGvaFrnYRm6T U9a3cuZ31wcHlAidN61BwybeamQPH1QeMBWvJP6BbyZH4+iKSGQI5rZKkyuC4d4F8wTDRDWd0Q/V evdGgwHPo5SWlRJwYRd2/bRTbKE3IsNYCw1efha3D2/Bya1HkJKaJqJ4oVyzFvBvUFHNR///Lrin yn34C+Zjj+wXmivdrDcaD+yPSjXVlSyS87klCxB7RjSfu2jfJANun92kKK0qhExAx8ldkbRqBiIW RkGuzHj643VoOaiZmUW6tnCjaAW5vz8NF/6MwD8HTyFV1KuIlz8qtWkOn/L2+yAc6BdSzpMLFyA+ QcoptvgLOau99DLKlhbyr18k+v9ynDwuAo2V0WDMSDTpHGiqcp4+vZ/7CKGV0/Bos3pW6cu06Yaq D30unpF1OHsiFWWChDCaMyARh0duUu5a/vKyojxQbtxq4ulv/4PIgT8IObeh+fM1rZ8tEcnFpyLU LiP7Q87OtVoXvHC9S+aIYgXElnk3hP9oVLFRLGSOTB8SIAESIAESIAESIAESyJ5AoVUgXFg9DXN6 Tc5EJ0Hsqz8wZxLkcuOB3w2Dl2U8kCluQXrIAZLJpafJa4sgcrDQYVwg5onBrH42XO6NPyS2Eiz8 aKMpKSAGedKd2xCOre8PQvCUtej8VnPzgE+GxU30w9zpV+Wl2SnL9pfO1+49cPWTXiijiXBqYlPM mx5tjgusw1flPXT36mWfvZcyzYam/Pk1prd7O1Ncpbxl0wT3j/HqgkHW9hTEgHtp1VZixtZ6Sbc+ k/zYwmAUg19VIQJhbE4dUOvLKP/GV2h1YBo8B7S04mfIOI9dA2qZl7hb0ohBtuhPf703AF3WnkSD 5mWVoEtrP8Sa9yxttH64JYX+qtiz4zDwx1Eoqe2tzyt3ZbA9sz/mj1mlz165ltwPzBmNBh+vQZdB LYCMU9gY+o4YEGdmfWbZJHwt/vTuz+Ht4VrxJFp0VOtmCrsw/wVMnm+6s/6sO3Ypuo22NrDoaL8w ph3Bupfestrq4964JuLmdMXqcMuzA0RhbZ80VLm0xNx/raXJ3Z1LyRrwb5Y5burJbRqr9ihbyfKM ypjGtCTEZ6hKtApB1jYzvBu2FDF+wLXffsfVtNC7ki2zVBafixvDFEY1p7S2fqYsUXhFAiRAAiRA AiRAAiRAArkmoB9/5jrRvz1i6u6ZOuVBKPr+eQhjLl/G6Nh96DH+OaV6Scvfwze9FiqG+Zyxviln jiti6Yd5Z2a2MysPpAJk8P5YjBf1GhG5Ga3aqtbXI8d2wJq5RyxVuroLaz5WlQedVu3F+OTrmHxV pNm9DMEu+ds90o8vMisP3Or1U7hL+cbHH8ILH/bTuA/H92PWWeQTNiHCqliUB0HjvsD/rV6H7lp8 S8R8uBJT2d5alVcPn4i46PPI0GbUldwfCUKzH35Gg1aWwbIcnO8fVsesPGjycRjePi3qJOo1bGuY meGKDlWUWX2ZT6kXFuC1RW9kEvipD75E74Xz0aKbOhC9tvF9zCz7CW5ksZAjUwZZeFxY8qZZeVBp wKcYHB0v2ln09+Pb0W6gOqO+d3hH/LEmEcry+eit6DG0jTm3Tqu2C3knmO+BEPTfsQ+9tWdl38+b snlOQhCycBkGLJmPJwJVfeWBKd0wf+pmc3556hdiq0+/v7fj5YhlaB6k5rviufaa8kCUuWQdBiyY irLKophgeBSEqjQjDrsGq1w8W/eAj36ViVI707aDUJTytV6d4/poAAIeUjub7UoWM5i7vJAKxZiZ C5VcAtsE32VuTE4CJEACJEACJEACJEACsJrALhQ85LLiHa3HKXV1qzMO7yTPUbYruLm5wd2nBuqN XIjXF6iDu5TfXsT+PXJzw/11euNp8ri2+CUTlT3NUipDShTDAABAAElEQVTfKr6qcOJYw2/GqKsC qr6zGm/9NAxlxUkNLqJentUbo/nSBDw/8BEl7p43xuJCipos/dwhbRY3BNWa1YSLGGgZXUSaWm0Q cuUAWimDM3+46QZg/hO3Y1LyDUy6sE0bBIVgyNnrqp/01/70e7HlQPvI5MFKocVaf4Bh279UuEv5 XIpXQvU3v8QwjXv85z3Mg+2zn70mjDRKNUkweu86h26j+qNay2YIFPHHHVgqlo+rg7B8sYHgUgmP /zREkfHaxo8xt2llTPbywAQPD/wY0hebP1uMS4n62W3B6tRyc1t0WnMWHQZ1hlcpUSdRrxLBndHt ym487qrKGD5LU4y4eMGv/SCzPxCKIXHX8eywfqj13PNo+cMlvL5ohNpAGI+9a9UtEXniLrZl/Dnw JyWvumPXYODnryrbWFxcRX/3C0TT2TvQR+sXm3t+ixtCYeJeORCPNlSVJPXe34rHxDGF5Tq9io5B RZR82q+Zgyr1aqBWL2nvQGwfyML+hN+Q7zAm5UcEP9cGlcW2nHbbzyN0/LNKmtNTOuFUgtimk8d+ ITPxrBWICo3awKeapXMqZSaLMts3Q+UeQzE4SfTH62PzffZdyn0gtAF+14xtPvdRV6tVKVK+9Ngj Wt9Nglzdond6OxZ6//y8Np5aj/VRt0WWb6Eity/kJ1rmRQIkQAIkQAIkQAKFloDlzbuQIDDeSMBp bVlx2y9fs+xL1tXfp8dotPv0K+Xl++TOWAQ3vL+zdxGj+mK3lM+QgJhwdUuCvH24zgcIbK5Oe6Yn xkov4dqj/btyebS1M8INdT9YIuwOdLLar+1aub4yCD9xZxk+83oSDd/oCl//ssq+8ofL+qPG13+j Sa0aVgoEJWdh38BgsBhRlPvQs7R5IBOIpfExy28pSa/9dhxx66WhPdMMraiasBB/56xFWXM9ORWG Cgac33lUSdNw9heoZXPihGvltui2+B1M7z5diZMf/0p0+i9GbH0C2yb3x1ZhKd/k5CkM8u8Pcfxe J7Ed4TFtO8LFnZaZ9PjYCBy+cAv6saLkcru2UCBE38G1o8nmoyalUT7TdomQLR+L4/lMJamfZTpN RJ+hXyFs1jVErt2Gph1D1AGqg9xvx0aat34knolFzKoLwh6BpSxXwT0JwkCnch7mEVwXwsvjONPl mZjCufvKhpXOHY9UE3PlYkDqpe1lMdk7UMNt/4eg++TeVnv7ZR+sPPwbPD21Kv68fQfHthxF5e5w uF+ggkkmVQFhKrnqO7/iP5PbWQ/kBa+CcLETW5gNGz7zy8FMW3Vkma5uFjkLQoac8jy7IkyJUn1s J7vfczmlZzgJkAAJkAAJkAAJkAAJ2BIodAqE9NP7tD3LIahcJ9OaY42Pu3kQ4lm6qC2ze34v7Rfo nVu9zmgzZjTqdwiEi7YyOmnPeiWKd9fu5j3z+jTKtZulvuYT3cRS8Pbz3hGW5OUgXBhlnB2ZOZlY qfH6tlF3PQgxDZiBeVjYY16mcvQecnAqjys8slHOoArL9UHWlupNcT0Dapku8+3TU6wcaLP0CtoI 2xMplxKRkpiIy1FrsWiIPLIPWN1hNmomT8nEY8/rfbEnGylun9ON3M3xQlFJZ3jP7C0ufBt2Ff9/ wM0z1qse9HEcub4w/3X8OD+7FJnlu5PZK5vtCpa8vbt2tL+vX6y+8O0sttOIUwVSU+TgXqhSzGP8 3PULSynWV4/1tbarYB2aP3dy5cFxoTz4XrMBEjR9E5p39LebuaFigLKFJVIoYzR9jDmeMTkB8Zqd Cdswc6S7uJAGQaPH/67kENw5+C5yYlISIAESIAESIAESIAESsBAodAoE13K1zTPuly8aUVLMcttz ptlWdZBjL8a982svZrwff9IXGRliNGcUyg1hvd/WedZpKrxWiePkDiqzyPK4OFsnl02ri9DFDLNu mrxM+zHC/kNfxO+MwoUTCcoMenraFcQv/wSHxDGSaQffxx/fd0Vnm9MebPPP7l6/hLvelKV4qnU5 IUQWKcTy+jK13MUKB6g2CeQOhnQ5ks08o5ueejOLTPLgHR+O72v0wKPf7UZLebSe3P5RrqLy51v/ MUxqHowJdfuKjDcjOQkorqwaEBeKa49+f42HhxgQZ+WKlKthVkxZ4uxDisiihM0KBBmefl3N24C7 qKOOccfF21HRL2v5DB5l7Q/6LcLm+upGTCLSRDe1OrlDS21UFAfi1BNxn5d+kZUQGWJ7j70+klV8 R/2lTYH9o2tg8Sx1/08DoTzoMrhJltlYjHIuQ6I8oaGOpf+mnz6sbR3yhn6LUpaZORhwc/867EiX hB3YvpB2FUlnRZ/z8IZ32SxOynBQDkYnARIgARIgARIgARJ4sAjYGWY+WBW0rY3Bw8s8iN72zR+o NrmlbRR1X7t27nrxsiUyhd9rD6/S4kQAsRRb7lsXQy67xbuLYw1VNwP7I97AkzpDf6YEl5fN0/Zk i2GWl8xLuFOLMKHOQFQc+xteHP08Kqu+yn/DyJE4/EYFhIkz5O05ywBJO8bRMj5So4sjBxUnl92L 1Q9+YrnEEWXUWBa+9VTjffbyzbiepthiAPxRoZVQeQir+uvfmI+6O4dZDUiVAd0Y9USH/DiFQQ7Y 5ekDJ0J/QMNumVcYyBllafhOqYM2MHcvW19UQZ5uIJb4C9sBvt72aiT8xGqGDGFbIrOLxDphG+GV ye2tg4Rxy7Wvr1H8fB+vZaV4cIS7aylfxZBgoug2LqUqwre+fQGlbY3027IB7fcva+Gs7+yxv3Xw Peze1CdTP7x9YAWWiPaU7tEgX9Ev0vLQL6zLvxd3sq/t7VYZyzXZW8zbqyqZROGSXcqlNHj4WA+6 DW7+qBfyMI6I75JjEUdQt06wWdQz4QuUa78hHVGiAL6FT333gZJ/9bGtM62UMQuhu5CGLN8PGmj2 kXZU+tn5bjRH4AUJkAAJkAAJkAAJkEChJCA2ZxcuJ63MP/NxK6XSJz7phGUzIpCmm6VNObAS39d7 SYMSikA7A/ECJyYH3hnJSF6lLt9PS01TBikZqdqA3I4Ahmrt0KmtOkDd0LkKdq09Zo4ll13Hr/4I n/Wfrfh5d/0fKmsrL0wrEU6LY942/xJldeqAMS0B5/eodgDkuD+TM59asA67ft6pLtMWsqfGRmP/ tMGY4PWI+PtYMcxnRFnU/VrO3ovd9uOexO/zrLlnXI5DzFeTFIOFk31KIupgqhjKuqHCwFeUNHJA +sULn+H8WXFihCgj4/wx/P1GNfOALkPYUzDVRUlwV/9mIHx6uNWyc8kw9uORmgKmJby0FQOeTbtq hiSXiaMsx+L0CYsdBzmwvBK5AZu6NcWEkiUxrel8qzxNIp79pAfmj5yPS6JuqclXcWH3L/i+fCtt qw3QqKdl4KmkcYC7oczjaKad6rDymY6IiogzFat8yrbaNbEPxhcvicmluuOCtmXh1in1yEej6Hu2 Lt3GT89eb9dC9sMtYbuQJvMUs9vx67/B+01CtexGo1aQt2hjx/uFWR6hlNE/J4pcsm9IZY0My0d3 RhyDaVIeeLb+Dg1al0DKydO4fv48jn/cAh9V9sMB0Wf1TvZf/74vK15RI4Yg5qgann7gF+UIVhnQ oHtTfRLLtVYPo1h1dFvT6cj6yT6V3feAksGNKOyar5YV1OFxS57ZXCXt2WwVeuKT73DZujpW4bwh ARIgARIgARIgARIonAQMK2+usDvl2Mr4bJ6IfGy0m12e8iqoRIaM89j1fIDVefG+gUFi8flBxIsl +ybXY9s51AsSs//30omj4daVrKstP85ccMPZe7LeSnA5At9XkkYSTcP9YPgGGmHcH6Utl5b5CYv/ Z+eYj5yznXmUpx3UfaMtSuEIImavMAvwf0dTUK1CZgVG4tdd8cXbG83xbC8ervMJhu98TVk5IE/A 2NWtlhX36t26AMfXIEbHXcrw0omteNRX7pC3nvm1zd/2vs/eS3YN2tnGs3dvj8WT43rB0z0Jx8dN N3N97Ns96NQ3wJyFPBZ0avMx5nu3em1QRWwVOLwh3OwnL6qLUxBeGN1C8ZN71JeWaGQ2cKh42vmn n+nWBzvCHXb6Re1uZXFpWbiuX6hGOd/aNggnB5YzGwhUywzBsOTvkCD8F2orcxrPPYGOzSIwoZpp 1joEXcecwPIP5UkgUuERqRfX5joYL+z9HdW1kwHy0i9S1o8SxjNVhZhN5uZbqSgb+lMfq9Ub5kBH Li6EY4J/txxT9Nh2SXxfWC/Dkd81m0tVw+bbqqUDP3GUpek7pljrOXhjeajVqhpZSG76hm0f1Atn YfOWOGUm80oafVzT9cVFvTF7oKo0Uv1km/+YaXXEiIdUOyCmdPwkARIgARIgARIgARLIXwJG48j8 zTCfcyt0KxAkP6OLDxovjcdrCyZo58QDCdFR5hf7mgNmKMfq3XPlgZDNgKLwrpP1yfDFS1kPUKz6 Q8nm6HfxBHqM7695Ryr1ksvXpWssbA+MFMdW6s+r1++/loMbOfA7MHuaWXlQ7Nk38B+hSLGnPJB5 +r66AL3HPycvrVyFkKHouWo7Rm1TlQcyUM42S+4vf/euOW7MUnG6gaY8KPZsPzw3fx3evaQqD9Q0 XmiwNBYDPu1nTmO6qPX6PLy8/kvTrfgM1rY+6LwcuNSzUJNFYuv7oxH+3jRNedAenRfvs1IeyHju jd4UR0quRfNugUqytP0brJQHjYbPwMC/Y83KAzVv0/9QvLp/H3p9+Ka5L8qQmqETMHDvOfMyeVNs 06cj3CH7ReIB9BjRWUseiUNLLcqD6iEj0XPdPozaNQweogu4etl+LfiLQbgbipavbioeHu4GGPya 6I6iFEd9ljOtlJDKg1D0WDDDfMymKWGt1z/F0LNbzcoD6Z+XfgF3y9Yitd+aSrB8Fi2fzbNiiZbj laGkv66eWUUPQelKmcuT3zUtzv2N5spxqDB/x8ijTF/5NbPywJS7wJut8/TIXJZMoKyU+eYbJW35 d57J1fYFGbn0M4MUg49KQvGv+bcjMikPTGH8JAESIAESIAESIAESKLwECuUKBKvmFkuFUy8nKkvL jeLatbgP3D2dfxWFVR3s3Kj7sk3L6cVxiyWLZzm4zrh8Humi3m5SfyCWfqemiGXSYum0i5uXxVaC nTL0XrK8dJHuthhoFvFwy7IsUxoZ/+alZEibFEZh86BIcS+7xiFN8ZVPsQz+uqiSu9ipcVtY8y+I drrw5xbc8ApApUAf0S/OI/VSkmq/URiWK1HRJ8d6ZYgtCHKFvyKjYOEuB3r2jhJMO4plZeQKhC7W M72iDyrOXhorGOqNo9zlVgKFoQeU4xzdvbLuF3aKy5OXZCI34xQR/cmeAVB9pnnqF/oMnPg6JeaY MFDoLp6voihdo0zBSao9w0Xy0LbS/og0HuoivwvsOK5AsAOFXiRAAiRAAiRAAiSQjwScfQVCFq+J +UjA2bMSAzV3Hx+dlP9+5YGsjFEY7POwqpeuijaXLiXFwNjkJwYP7uJPnDFg8snVpyzPRRhmNOeT QyoZ38xdKBzkPHSOzq24qJMayyU38XPMMHOEMk83M3u6Cy7yzxHnIgZtYmyuOJWF/XoZsnrycqk4 MMnkKHfoGHqYBDVlVkCfkkl2LPTF5qlf6DNw4mvP6jUU6TwLWkbzM+x4QS7Ks+h4OqYgARIgARIg ARIgARIoHASyGsYUjtqzliRwHwikx0QgYtZnmv2DZVgzYAzKVBArAlKSUT30Q9RueI/tbtwHBiyS BEiABEiABEiABEiABEjg30eACoR/X5tR4n85geRtM7BlrsXwZMyymYjR6nS5yktCgVD/X15Dik8C JEACJEACJEACJEACJPAgEqAC4UFsVdbJqQmUfmERhjWOQ4bt0ycOAClWWV3m7tQVoHAkQAIkQAIk QAIkQAIkQAKFkoDtEKZQQmClSeBeEpD7/EvUoqLgXjJnWSRAAiRAAiRAAiRAAiRAAndPIN8VCLTS ffeNwhxIgARIgARIgARIgARIgARIgARIwNkI2B747mzyUR4SIAESIAESIAESIAESIAESIAESIAEn IEAFghM0AkUgARIgARIgARIgARIgARIgARIgAWcnQAWCs7cQ5SMBEiABEiABEiABEiABEiABEiAB JyBABYITNAJFIAESIAESIAESIAESIAESIAESIAFnJ0AFgrO3EOUjARIgARIgARIgARIgARIgARIg AScgQAWCEzQCRSABEiABEiABEiABEiABEiABEiABZydABYKztxDlIwESIAESIAESIAESIAESIAES IAEnIEAFghM0AkUgARIgARIgARIgARIgARIgARIgAWcnQAWCs7cQ5SMBEiABEiABEiABEiABEiAB EiABJyBABYITNAJFIAESIAESIAESIAESIAESIAESIAFnJ0AFgrO3EOUjARIgARIgARIgARIgARIg ARIgAScgQAWCEzQCRSABEiABEiABEiABEiABEiABEiABZydABYKztxDlIwESIAESIAESIAESIAES IAESIAEnIEAFghM0AkUgARIgARIgARIgARIgARIgARIgAWcnQAWCs7cQ5SMBEiABEiABEiABEiAB EiABEiABJyBABYITNAJFIAESIAESIAESIAESIAESIAESIAFnJ0AFgrO3EOUjARIgARIgARIgARIg ARIgARIgAScgQAWCEzQCRSABEiABEiABEiABEiABEiABEiABZydABYKztxDlIwESIAESIAESIAES IAESIAESIAEnIEAFghM0AkUgARIgARIgARIgARIgARIgARIgAWcnQAWCs7cQ5SMBEiABEiABEiAB EiABEiABEiABJyBABYITNAJFIAESIAESIAESIAESIAESIAESIAFnJ0AFgrO3EOUjARIgARIgARIg ARIgARIgARIgAScgQAWCEzQCRSABEiABEiABEiABEiABEiABEiABZydABYKztxDlIwESIAESIAES IAESIAESIAESIAEnIOCa3zJMv/NufmfJ/EiABEiABEiABEiABEiABEiABEggzwRGPPRRntMyoYUA VyBYWPCKBEiABEiABEiABEiABEiABEiABEggCwJUIGQBht4kQAIkQAIkQAIkQAIkQAIkQAIkQAIW AlQgWFjwigRIgARIgARIgARIgARIgARIgARIIAsCVCBkAYbeJEACFgIGpOGfJYuxL2wVklMs/rzK PYH02F3YO/97HN11OveJGJMESOBfT4DP/r++CVkBEiABEiABHYF8N6Koy5uXJHB/CFyIwKLOs3C7 mhHXjtVC1zUfwK/0/RHlfpd6YclELP0pGl6GBBjqTkCPyW3hkgehjMeX43/9ByopQ7ZdQnCQex5y KbxJpALmyIT2WPFrKtxqf46Rfw/IUzvkN8GUP2bih1FbULK6m5L17eun8MhjE9BtdNv8LspufrEz B2HDH4nw9nTH5RgD2v00F5WrqrLYTeBEniZ2JfyMuFOuC7rP7A83/qI6UQs5hyjO+uw7Bx1KQQIk QAIk8G8kwNcdJ241+eJxfvMKRC9djmO7T6GYrz98mrSAn28qDq7YidqjZyCwsY8T1yAfRbtxFBEj JyG9wTC0Cm2cbcbpl2JxKHo9EC2jhePi2XFCgeBcA17Ztuc2RyAlNeuqpKcDpRo3h0/ZvA+oLkV8 jnMbbuCcKMYz40rWheUU4uVrjuGai2+NC6unIXxhGp75eDzKWZKa88ivCwOScXDaKBy8/Dg6ftAf j+RCtvwq25F8jHCDZ5UaIkk0Hi5ndCRpgcZNi9uMhP0bxZ+lGNlPMsRtXhRNllxyvpLPwJVFYTgX dVvpnzLF9dTvck5YgDHSj6zAmtGLUHn0Zzl+t1qzewRXP+mPMk7a/xxBlrJ/C/45lYocn/P0NHjU bo7yQuEjv8uSxHeZbfUNcIerR1F4VqiE0lXy77cqPT4asbsTRYH2nyXZt+BRE5Wb1VD7cdp5xG7Y iXRX6+9SGe82vOATGIxS5Ys7ginXcZ312c91Be4iotKXzoi+JPIwePiJ9qhn/b2SkYz4LTvV30HR nx6pIfpTzYJph7uohlVS02/3vezvVgI8YDeOfOc+YFVndbIj4MA7f3bZMKzgCNj+3hdcSczZMQJp R/F7y8aIiBKjSM0lREchZsMK0y3cnxuX40uuOfK//CL99HZsmrsCxU4/ixZCgZDd4MY1YADG/9MA Gyo/iR3pd2Bwwl5uTDuCZc+FINH++6+5tfzf/wuhb9c33zt6ETDjIt5o3guz+6+Cq2cOhWWXuYc3 WnXrgtMpJeBVKntljHzBSpg7DTHhaQge/a5QIGQfP7ticwozpp1C1JQfceTONbSY5LwKBFkPj7oh qN7GDyXbVMm2/+ZU5/wML/3CIox49ioMbm64sf1DzOk1++76iQPCyYFVg82nUTv5FNZVexKRGXcc SF0wUZN2hmHvhlUwPjc+x+9WyW50kxWY2jBUESa776SCkTb/c5XP7rFXO2OFUOrkximraf6qj686 heQY3a3ucLwWMQkl8+Hr4NLK1/Dj21E5lvn6pesoI8pLj1mK+b3fyTZ+pQGfo/snA+CVD/LZFuSM z76tjPl9L/vSwWadsPaWVEeqruOms2jcxNt0i5SNU/FV99nme+BrjL/+gtN8P+oEM1/K3+573d/N hT+AF4585z6A1WeVsiDgyDt/FlnQu4AJOOHQqoBr/C/J/uxnAzTlQTA6L/4SdZvXhGtaMk6vnIH5 Q2YptShUBixciyp1dhFLnXPjXEoG4tEuD2OHWDLulM7VH+3nz8eVlJti8FYUt08vxZrJK+FWrzOe fbMbXNJuCrGLokL72ncnvpihK91IvtyvQnqKIe95PRKEZj/8nOv0Bs+7KCvXpYhZLVd3uGtFOfsA rkyPd/FCDwcqdw+iGl3Eyoj/Z+86wKo6mvaLoKCAoAiCGsWCXcCuSeyVaBSMBY1R8Yuxt9hiPntM /I0m1sSYBpqCGj9FowImFkysEUXsHY0KWEHRQATvP7un3HMb3HsuIDF3nwfuOVtmd+fMzs7Ozs5W 8OQ1OdcXFFVW0YmlbXYsDScvf/gFl0BCURirTsLixhzeynBX0i8AgfbFSPnBaNHSzhfN/CVq0Eg6 UQ/tPhkOD7eS0JCC5/fJc0jZGSjH/SXyq5I1aUffsTbGxEUjLeUcfgmdyPO9HjEbHi4gS5Z03N73 I2KX70TWqcVY85/aGPdDf6sXiG7tF6D3Z9fIegAo7pSJq8umID4xG0xJ8fqE+nhK/LOEV0NZWeFQ uR3e+HQqfp/0MW9fp5UT4E2KzSfXziFhyjxcfvYM1yJG49OISxh/b75cLr++UFEc+/nVN1NwmIIw 4MivKLZ8HLZ9K5g4HVm7hxQIgrKJKRiSfvxKUTwEwy/0sZo2FAAL5NHuOdB7gXSkqAC1gOcWlSbb 2lEIGLBQ5i+EFtmq0MPACyLy6PXK3Nf7F5D4UyTOxJwgMQd4lmyHcm2aw79fP9RqVMVcKPmezy7n PI58eIrD7bF7OxpLGntnL1QdsgDvpO7Fl/MScX5LAnKG1uYTbsbRDUj8PZWbChar1gVNe1RB8m+x uB5/DdlZmbDz8kW11l1QvroJ88CH13AmMoKcvMXikdgj1+pd0fCdUNQjM1BT4c5vG3Dsy3W4cimF Z/Fo3BZ1u3WFY+ohnDlqh6YzpuSLCXt2RhqH/+RiOphpvz30Fqh6pqxMOJHCsyfXcXVdFPYvi+J9 Y/1qNXM8qtRyk7Lo/pJZ5Z+b1+PYj+G4RTTBQjE6PhI4YAICQ5rlzzlnezdU7d0HVaWak55xBULJ 6j3QtH8fKTZffhm+WChZiZnvZuHOb3H483QSMjOzUNzNF1U60zEJE+a7ydvW4uolMkHleptMZGf6 IHBMH9NHBbIJXw5apU021QEyYwaLl4Let5KiLf4lmJq/M5HJDSsyQWROdSvqYQBN1VVYY/9+Io6s jSMUCKbTDB/urfuhbiPj5twPaDydjSfTbApu/l1Q5aVkxC9fTWMpCdD4oM7g8Wg5rLVJGrRmPEp0 wis38e8O0cNFogdGR+6tBqFuY2EMZSRsReLea0QnjkQjWSjXbhBqBhiOr5zbF3B+x16kpTG6cETp Wg3h18kfDm65LNkLYzyK/c1JEfhYdqZIw2bTrTseXU3EjR++wInYBM5nPDsPR7uJg+Eh6CQMMaqS 5xoCMhGTdQ2J4VvwmMYfU66x7+LWqAfx8yrIPLUTx349z78XK52d6YQaAwehvOwrpioC3h6EMiQh sPno8tR5SM1pKMdB5FdCzY7wbNIaXjnlcapYMcpXFdVDOvOyLL1GUB/UaTMHS99YhLSo7bif2Z9b BQhl1f138muDBn7asnY7pnMFQq8f5qB2DT0ewLKVroWAEaG4PGUx70e9t/qI7Xsd/iOm4M7e1VjZ 7V3KuASbl3TAf6a30wJX+2TB2Gfz1ZV1a5AskB8qdg5GqXt7ceDTdbhFNMnmnybD5qDxa6bnYjXN fJCwE2ej9uL6iXN4INK+W+NgvDJyOKrUMxy/ltbh5NcMNdq0BUQFwp2I/+HOwhB4knJJc/8Qjm3+ Wwb5yrfzUaGi7hGTTBpTF7bE4mr8QdwSZYxi3oFoMXYCAtrr4sJqGUhuSe4PTDFiNb2rGfvEB1P2 xeLKCWF+KFneFxXbd4ZXyXM48vk+wF2DHE0dNBrWCZpz4vimrhSr0AZN+voLnbpN89GPccJ8RPyg WDVK6yGmKbuthufSnHqG5OnE2Fg8SCZgNF9V6kJHUnzIEmXSJgTui0EDcb7QqUo1z1VCMfGs6G92 OsmOeIDrRO8XE+3QOXwV6tZNwr5ZC3AsNhGuncai32dz8ZIeDUINLqQyW2IEuiVceDQJQNUm3ri1 NRyO3b9A16EBBo2+c5Tm0TXr+JFlluhaoyFqdGiOrPjNpOQMxZsr+8FRn70RLV3cQXSxfy/ukJzA 5Xeqr85wkhXeMi0r2OVk0fGhLTT2UwkvJB9WDEC1zs3xLHELl0HY4rBEzS4IVPIcqV8FKRuzjlOw VOYXSoHkW1oLbYhC8h8kY1QgQtT4wrfHEDSgOcnN1FwsFbb9WoQBu61/bTFq19xB08kiQFLmxRqj 4KTkIvPLzmiv7DfPZHvcgz/E0G8mFIg5o8lKpYSs84gs14TMsp+h/4kMQ4HoyQnsG74QLkOWoFGH 8rSUzkL8y+XNMjutP2MTd5Cm3K3N+G01FnVlwpPx4B68GMPXjNRdNJJwerB/Q8SQmXpuoc+Re6hf j68+c8tmNM0u5zbiWvlhl+IYh9GMCKNdo5U6u0YMJycHVcBPuexqhlLb6ui3LTkOkTW7c9wbrysE b1/+Hi95G09VG5t9aT0+CBgKl47f4N0tofm6CyPBzq1txuiCLRx+dBfoUFs2CGPubTS6AMjYuxCL upkeUxKMl786hi4Dakmvqn6T5rRE+KLEPMv2P3YPtWvp0l9hjv20jaFYQsdHlKHhingEk+JPPzCa PVTGU8fkVz8Pe3ftuBJjo8J0BYl8GI8SnZiiQf32SfkcjPCfgEX70WtUoE7zb6yZjq9GLdeJ038x 4BeFMR6TY/G5X688jxO5B39tsHvOxsimMk1yOX5hyJtYn1XxXH1k5fGefeoLfNB8kl6u1ZhLJuIn e5XFRj3e3ZOcozYOsBP5ZhDx1O85T9X2sacch6tbMLv+AB1+ZTSfVHvWCZrTXiW+qoAhpVn5q+T1 BvSjgJ1r+yhfxrb3sIiO8ABBGHFzI3ysFDYtGfsg/Mwu+7KitcYfG67YT7xDd1wZz5l3bNrGEcSb vjOZsQcdN5A3L0zmyjvhLtWzQlFP561X8ArJLQ8I30s5vgUYjYkv9lDyxaT1mF1vqMkKas3fhQET W/B0RgPWyEAmK8klIVd6yoXe1Yx95ifgx6YDuaVMLk3iSezYTrE1L2O5fMQnRB6391j8qBMyCKMO fdXwXOKhs2v0kuEae9ChXSt4rjHYpuLurQmm/v5iKtlI/ERMS5+vlXXV4CLnGn71qI/fnpo+ksfm 8IlbwnTkvGtzfPDtoodG2iRFhZDs9b2O7KWlQeN1laj3ISYenoBS+kqHO0ewuXqHXOYtqc7ldKTo P0I71eBCAmPmrzUyP8hnwr6OzXJdL3TfegZNO1TBlGIfm9mi55tNo5n2fBuQR+3F8kh/IZMzjy5T KA/CMOC3M3j//n1Mv3ocvWe9zvucFvVffNlvHXcmVuhIoO1ed/HLbJs8B9cSbyNH6woBEM3JmfKA BX6WOOYC+o9z1WtqEIK+jkDoN0tQm3aGWDg1vxciFuyR87FFg6Q8cGwwiONiFuFiVvIZDPxoEM+X FjUZa9+PlstwgU2hPCgTPBNDfz+OiQkH0U8sI2e28uHvM8YZo6Vg64z5HKNOXsWYmHBUF3ER89Fm HTCMGW+uJSkPAvFa5EG8f5twcTsZI9YvEPNuxtfV5+OJ8nvoQPknvIQgZN1mDNkYgZf9BSMkfbpg vdDY10LIsf0Ii96LkXGRKM8nIWE302gvM/8yGq0f+ZQo9nmFwh777iGrMTImGsP2HkL/WcJOjymm y8Zxk/NHMeSbqQr0sCNMBzH1IvGmKYJS99GvY3D1grhDTjkLazyy9gUc02+fwH8Coo5wOpHa7uCk q7S5uz5UoTwIE+hvXQQai/Sn6LD8+E8cj61X7sDEi2cV3zAcR7eel/vEHtTwXB0AZr441OlPRws2 o02A1tCwzdaOvHSD1ZEyFNdOMxG29zjqMWVqThJO8l3hzFznPrvKtfmcUrZFeR0hWADqbnCcI2Xd Klkpqz0RLzehSDy4dAoT58lo3L2mHV9qG2fJ2IdjAKbQ/Nl7XGe5Osf6YzGI5tUpCXvQoUsJHn98 7Nd4kE9zj0YcopVCpmIAfX82101P2CHTyx6aH/PjW6XHJ1DbA0kWWcLn3iPf7uY8K+nbLyk+DN0+ Giz32fhDCF6P3Iup15PJtxHxwXECHz0/YzHuZAglrJGBjNdpSaz59K5q7NOtUh80HiArDxpMXoJQ 4p1dFLTCWsvoZejBs3yB6d4nEsO2fS7LOtJ39AiNwrCYvXIaP4Kk6KpanntzwyoOhW02jb9+n5SU j0luuoqBnwoyJEssxiwRCzl4DFxDsttYuVbWvlGK8cQSGszfhLH7I0VcLcH1y8LYV4uLzONRovIg DEOP3eK4mPfwPsb8b4ncDg0dT9UJD49g+2JBedD952OYlf4YrMyUo5v5ETmdvEZfAtF2cSTGXaAx QvLqsG/G8Vx/n/4vLiTq8jLWr+gaWuVBsw9XoTetE/TpqfXKzRh3RfBHohYXRpuaR6QamZ850z7Y sbmsPGg2PxLvMn5BuBgTFy6vf7b1qItTp3XxkUdzbMm5YEArWeSS6UVKskMqDnWcybvkWG8mxhx4 D6UlLHjVRINp6+Bd/T2sHLwCGb/+ByfjgxBoxOyqQHFiXwUtfhiNQ6Sdf/TLYnxLf1Lw69wTFduE wL9/D3govfOX9kLt4cuA5UN5Vs8h32DYslDZ1LluaD+cndMVkbRre31+dySFPUZVb7pabt4ont+1 44cYFaXQVDpWgd/4VZhQ0Q1LCRfJn/XG1XFUphLwV0KEvHvVeMUB2jXQmmK5U5kpjWtjUZf3pSar /tXYe6Fj2iMwkTf7XARNoqO1u685eipVU6bqVLb+jO3oM72t0I5qfdE3+ioWdJmHHLoCgU2skjXG g81LRI1sEN6+thEvyea8jvDpPg5zT5cXd0QW4EjsMLTtJihwBMD/jP8+o79B2EKiCxF91YJ6oNbC fgif94tMF77e2r44+fnDVzQVbh9WCpHfatP0n1y6zsHc9Lm0eEijXcxq3Pqj94FbaMBM2c02BdeH avzdd85BzJ1Bnfg7AZHlhZ3N0Te/h5e+7wUFXTyXsW/vBu9WrYVOeE4A5gnj03iviBaJB1VtUVtM DsSQ8/v5mGMR/nPWIGNnFcSQg7uUcylkWeHL8xXWeGSVOVWl9tlJ7ePV83+s3b5e9Jh0RRspPd2P w4b/CFYYBvT3eg/4i/QnZZd+C208+nTBqLQn/LjL3TWhWDHqZ8h8zQK67b7jCpq2EXiCe+hshJ2L 4VYyGXe1ijWm7FHDcyWcWPRLtOfZpDPa/5YIh1b+XLiK6zEZvn/MwpNVszkoNge+s1E7B2pQC62+ mgmPpKraedFopWWIr45FemVnI6nHceLrtSjN1guZqbi4Zj7diiOsen1Gv6mzg2ak8HOLsnP0JTPX EjhHVmv54s/CwrHvQrz2pcYC/XDZZL/2u7SOiMKpCq+RlUw47iatQBljxzQsxFwZMqOem75aOOaV lUVH2sifRNU2aP3DWsSRdcmjX3fRcZMwq74Xo/e/bl5khAD3gHA06FQcUXSMJemkB07+8hS15vfG S9VjjLfctx8tvvoJadS+nMwsWiXXgv/8CKSuakKLtGikkqLHU7IiVCEDKec6440wJ9Y8elc79i9/ KuKAlDADj+2Cn2RR93ofNOq3BgteEWS4kjUCUMW/Mm+wfdkqeKl1C7iK87wk48DRC5VaedGxpNI8 7Z5e99TwXNav23H7OKTqHdqhrIej0AY6cus3nOTBKr5Y9MY8lFQ6X84nnqvXfMNXGoM+QSPRwuEz cqjdBQNXj+THZzzo2MKu2ElgO/SvT+jC5aFGNPYv09iXjvKpwQVrQMbpg7wdLh1fRSXxmCzzl+PZ 9R3MvVSFW7s9o+Ok8jeh3Nm3zogWcCGo0boW7GlNwpRiLnU6I+TBKXhw/u0ry/O8AvrHN3kePkII PbMjCcKRUUe8FDoHg07swdrlJ+kYcxJdu62dsx9Fh3Pn4szSakjiD9prk+norH+3ZbLsXqFlJ1pj CASkFhdSO839VSvzP9r7BZeLWD1dycKppbi5yt49m/RF/7sBiPZqwvsd834k0rfREdHnt4/FmvVC BGnp/EJ0xpxOaJ6k4HqOQDldVo0wKiR59Z6Orp8KBHnl8FVSIOSPyaA57ZPylOn+f5iy/2UcmDcY +2P/lqL5LQzsJoa9/wWUAivLIDE+EDvpxxaJiq+roauqas9chxZL6vNBdGHfeVR9A7gYJcB+9Osl XIthjva02jk72kV8djNdrvtxOqVVckIGMSYhzEPHMK3yQMro8up4DPvoIL56nzz/MyEyP4LCoQo/ 5q5YGOYFvkGvFjpZnOq24LvpqQoBiU2CN7b+JOaLxr0/diItQ9t3do7fISdVKEfk8zD1AeUVhD0d 4AX5QufPzny1hq5LE6UCE3Vl02fy7fMOKlcXJnJtthC8MU+rPGDxbJKqOvlLtFpQnWvNGV349q2l LSI+Mfxkpz8ziDeI4N9F+9HtHMQ2WPC9DGCaiiCYdnZaJ4qc1nKp53mPfe34NNUhIV7K5x48BpVJ YScFNob9hndFDC1wH97TjtPCHo9S+6R2KX+NpWXTTpRw2wjR3yxD+vOdvIzoT9fks9DHo0Q3okMv 5p+BByle2UmjzyT4vaLLD7w7hgKksL0cew45dJyDC4w5Sap4rtEqzY20r4I2v11E8T616cjZZqxp upmXFG5F0C5SJXCVQqdCQXZStM4vE/QaTPtIJ077koA9k0ZqX8WnQNrpe42EdWXIPLUVR7Yx3xnK WP1nWtC7NUezsNY6Qrd+rqL8bmxcGGtvtrhV7D8hWEc2sSvdAq06O3LFfRYtptl8ZHWgM+snv1qK jfPWmASlXOSYzGRugmNl1BzQl25W/g7fthBoMKR9C/i4CWf6DcDQfHf1p9X4bdgH8u67QR69CC2e zZOB2FxnPQ2aSe8qxr6dzzUcWfmY97Ldjz9olQdiv50CB2Pkp9FY9a7gJFm5IaKHmjxf1fJcJkNU 6NKavusviB/bGKm7B6NWk0C4uDtxB9FlaryGsSdH0jWupXXbIPFW1TxXF5ypNztSXgl+ksh6UpKJ Xcrw7KX8ynO3SazvyqAWFwyGe+Ou9P9nvgG5sMUWNAluiTLe7sS7SqJ0NV+8ceQsytUVFD1SnQ5V G3ILiMvPNmOp2ytoPDYY3r7UNhrmJcr7oubqP9C8Tk0dmV4qy878H5w6jPuAkeJy+717NI4nByya oVUeiAWY7N5/3AJELn+EHFJIMD5jDS5ya0eeaRbI/Bnnj3NwJep9gkbtdedhnkCKx3a75uNQm/e5 YvRqpj8CxSk+z3bYMpjEgDScTGZ40RKyrx8XJ6MQVK3nbqJ7WjNtl3J6pkYmShREtEtgD3Te9ACd SWDIuJeKjNRU3D+xA+tHC+d3tr22ArXovJZsQSE2wj24G9eyGrSJBEnpZoLMDKZEIdYq6FLoORzr eocbFFFGyJOzyPA9h1SUd7KV+dhzpfHrMHe8fqz172o8xMvtFqu3c/OGD3f2pbU+0G/Z5t5Mp2s6 PJGcrJnOkv8p2Uk4OuW/ZglTdUq3QmW9M+icLozJnWynrAeZyJL2XaCL/G96UYD4Txr7DF9GaV0W thQYfY7jUdEK/mhsQkk7ESNmo90pcp6mH+zsvWX600+T3ovkeJQaJ/5q2Ca7AgFO3t48Rf/6VFU8 V68uS1/Zgr/lumjElGlPN70EIOvkCbRb/p6O3xhLYZrOH4TQ3z+Cp10S/mjzhrjbBTQNE3b6lOUe x3+LXR/8oowy8RyEGv1bW7UbbgKwIjoN9y+xj/j8wzOtflBuTL7ebEMm02urdFDMJUG0aKkJzc1z OLYpVq4zPx80Tx3h3L4/gfxOBBtGjhppQkoSXi/vOi47hWYmyYdbVcF2srYSQiDqhbUheSMJN8O3 mOGvxFwZCLCeBs2ndzVjX7plyJEWocaCdxcmqwgWXsbS1cZZwnPLv7UQrabt4psQNzavAfvTD0F0 /rxFhyr60c/13egca6RFluCieP3+CB23GuuWJxKf3Yr99KcfmFVsr+lttQpROsIUFD6JLJ8XUdYE xK9I0C8CA4tpypG6LBifv6/ln369hsDTjRwJxn9PjiINeRlTBjxKPM9hV3ultkEdLMKbnKhqx6hh FktwYVja8pi8vhHrU3LsTg44YEJbk2sS5uBZCL5wUszTlrfIVkLCwL8OjQ4V6sqavvt3NShbyfhu bil+ldXT57OgIgcza2uSad83R9GO7QbTHe0uFSrzP++GTTG3TSB3YAXsQXoaOZiWTe2Fz/rkYiqy SDEgmalLH5sNtKdccUA3TlAkF3jFRHYO7NWOFWjVIuXW+6WdZM860uqTKqXw1w29PIXwqi+MF0SV 7DjHW//XHppcdvpd/RoURNW5w3RwhycdoL9shiFAlVo+BrBM0QXLqFHQhUFBKyLydQfLinawov+I sa+qj89nPBobi5kpSQY9sLf35XEl6j1CNvEleyMsV+JLBoUp4nmMx2ISqzPWIDPjJFaqFIDU81wz KzWRjfH+M7Mn8FSmPGAhpn1HeCfuNtiF4olW/XOCd4OadMtBTQT9+TvSKrIjRs+wbnC4gfPPYh5M iNUKwKaqLVHvVTgXsLSiST4kn6F1cpOETVMt+mfH343+VN5IGXzkM1RT3LjQczU5vOTHwvKzjyEo 72sHO6cW6POGEz/eVmv+QH4ThrFx8vRSjKw86PbTcTTuXFPePbZbkY5jvaoiKjbLZANNzXX6MhAD YD0NmkfvasY+KyMpHUqaMNPJSEoyiQdTCZr0FCTTmDQVLOa5JWqj3bWbCLySgGS60eMRv2WHNiRS jiNuxRZeTXSP/6Km6JjVWL35wXONwbU2zlJcMIuMmjNiMWVoEv4k/x8PUtJ5E56mJeP04mVc+XVq fjfU6aHrYNwz6H3ywzYAyYdP4M7lFC6KZ2c9QHLUJ/wIWNbpD7B3bbDsaJT5Jdg9YxeHza27RpKC Vp63PkMKHcdbRdaKysDa5tqc1hR068SpHYfoaENbZTK3Nrj64wadOOWLpbhQllX7bEzOUMJiffJq 05pbwNxIuAoMYHOKkeBQRoykG8iyyY9KURJOjTT3nxBVwFNy0UOBnbMbiovNOvDlXtSY186gkZqk KNl7f+nyEtEZZCuwiOzHaXxyvxz2HRr3MrQwkBxYnWP8X5p9Fa1hjlP+2NEfr3bTNeX562iEPOlW qOdN5mVZ8CFpnsPRlCehz/SiOOdxljyB2zv78tqYj4iL54MNvNyzRH6d3PZraDh5Crz0FBy8sMp/ /BpHY4sQdlZZMolTAZsxIZdqNalkIv05wr22v4ECRgLLccG1M9SQfA65MkuyIAlKf0Qn19QFRhdH d/fnHrCVEJ6e2iL7tHgpQNg1VaZb8/yEH4mRZzUtKCu/lwRIK2CJ1zjqVyWdYSfa+CeMfalf7DdX WlBkzO/xaG69zIeIfkj5NUo/Cq6BDXkco79TR4YYeHZ/eipS5ktS4ec3HgVlzMMUw77xtjGlopNl 416JTztHd1U8V8KLml+uPKDdLrYjxpzWjbg4DinTWiJqUwIi/NvrnqtWU4GRMnyxxKSL0gF4PXoG zpHPGeb8c9/WdujU01cuwY7qzX38f/L783pgO97Hpgr+SZiH9KomNhaeV/vys15GDynbBaVNxUmj dZQHrJ7MM3tlh5f5WS+DxcZ1/bV0+9EqkiecdZU0ynGSRtfWCWEev7pSKetr7idw/wliBqM/5spA rHB+0KA59K5m7NvZlYEndZ7JaL/OC0edqJG6cgl5/D8UPN8oDpSR4skYOSoj8RBfyLrLMcK3USMD MXo6OZTdeFUbw27uR4OGtJhThPYjtLdp6LdDyJb/PFdRfa6PSppTZrRm/pFuN+lGt5g0C6WFqiK0 nTkYO8oKZ/EV0YB440jlGb/SFbKK670pk920aTg7thL5nyI/PYrw9GqCPE5b6igPmG0xHf9ZHaPI rX0sF9CGXhJxkZQYfzQTbiVgqew7/rlmfBGai4U2myPzO3oLgl/yZ/Px57tBBreksb5d+myMABC1 4fOvW/mKXc/nH9rP/HcF5nSk/eIOvNOXP+lOdz7HIUuxCM+gM5lrG7wtIiUM/gpnHIWPqSWIXRSr 4wmZDYSri6eJjKMd3Ewszn/pWw27wuPw+N5DZN6/jRvr5mJBm3fFLkyEX2N3mszLo/7qATzu5MxX eH4lLnLu0/2yX8zFbGdnzPMqixOi99KyQWGyZ9jIRgNx5thtGTU57Fzl9JZY2TUMB1bMwY2bJgRx uYR5Dw72AoP4+/QknPkjlRdiTmMenNyHuLEhmO1WCl/O2i0D0+Rk4qko5wuOZeQkaNLJYZSYlpWh ja80cAJ/efTrZPwwJoJbd8ipWQ+RHPMlIl1dOS6i1p6Vk1Q/0OI2hzmHYrsMaSkcDN85ofcctlCR Fr+qKxAKKv1a7OxRDfsijyCLfRaxTx80DxNrmI46AVqRguGXt4/aqMRnFimTwNrN/oxYabDJ18FN YC37lkfKN1Ywerq67mOsJRzOdnsZfwpdtq53tCsj3FgSTfdbHxbGCuGN3R9+cuEoThez3RbzNjyP sS/hj33jbPHYi4Y5A5O+PeFQ/ztni7TAFuj6x2+yMwVhS4LFkGfNeJS/MWufXr3Ktut8JMrLAlsQ Htt9nj8zOCnr3pOv1lS2z6FqC3JiJdDD1vYVcXhrIqd5VubO3tV01eBoDoP9U47VQh+PVL+kjDk/ czH+TKVvw8Ljh0jZswFb6erD2R6lsH+XwH9YkuaxdL6WhoSCl7A0adwpv6NansvgqQp0jvzSHEl5 QOqDyyvhU6EmGn13BZ1LsGVZAr5v1AFnTwu7ZDp1MBql8a3crZTGvj7Nsvdsxa4mzycCc311AvoP LcXffh8wGX/eFPGqU5mKF4n/UB/Tf37KATD6YXTF20dtUgblt2J+YnggHnjn6AZsKl2JFCpCZNeP +ufL5pRy/EjjIa+xn5UiMEWeT9F4Jf9VjhFFFrMf+eKoHlOWky+fxDjcvid8j5yHtzl/XkDnhKWg T9NSvLm/ynZzmhC/iVJ5kJmWxMEpx4lTRUHpCBzEZbqFSsiQzjcmIqt0l49e5IYLc2QgAbCK/yro Xc3YZ0ePmnz9Jm8gk0tWhPwfrl+gW7mI9jNO7UTsq/6ix3/DPmiV65sRt2qvLOdmJGzA2u7zeAEl zlmEdTw3AWu7zMZtiW+KTXqQh4WEpTxXBGv2j3Lc69Ozfv8ZUImm1OJC8mOyvX03HdmYw76dgjts 408vSPP89fkdsWfDCZ1b1zRZKbgd/zcvoSzqUNZbvBkLuLJTO6dmnN2HfW9Vk50KSrxHqtK107to VVyYj9mtBIuDR2Lf0kX40bUc3ZT0nZRN51ctLnSAWPhiicxfLmi6eItGAt2SNhBXzivms6zbOEOO miUFTNOveqM8m/pswWoM2G39a4vR7ZQOGuHKMEtrWKwxCs5SMAWan901eoQcSm2L1Qoy3v4BpIE7 jWTFuSHZg3yBtsYQuHQfuzYlEK/M7AcXpzRcmrlInjybfhWP7gpzHcNyWgjKp9AjtAMgei5mnumP 9Kqjgwu/Xj2BS9v1zlAF4u3L+2XNXvapDST4SwtPATpz2Co4SxPembnTqP/RzQ75oO1jGtX4l6tg i+JMJBN+lUG+F9rI/dEVJ/2Md+a1h6QdVpZrt+GKfKPCTTpT9qXiTFkFuvXCmc5dXow9oSxi4OlV J9GMF2Z+lvv98eAMsSw5z1F+YzNA62RJWtiSblhgO4+B9KeLL52Meh6eWft+dG8ia7h18+q+vRJ+ DJ3ZURtF0L+DXp828uuudVZl6mo6B/iusKOmaIL8yBzrTD48gu/cFObYZ1cXrhiqa0IoN0rnIQwT 0ldyc95zYz3liU7K0v9EBmpXvY7NZerr3dusLadmPJr/jbX3iPM20a5XdFnBGavURuO/2nKZCVpv 4cbzkrMo/xL4O/FvuAd/jXE/CIu4whqPcpuenMBaMt++LJr3Sm2S0+mhB+0sNW7ubpSXSHfcnxrk IVuxSWXfOp+BGpXIjFslz5XgmPv7YNt7WEo3+SiDH529HTi9LTL2krftbtqFIsvTcEU8gofW5tnz 5k8TiWbnc5o1ldel4zd4d0uosBjXw6tOmrKBZj7f3TgCKwYbF3YZCMHPQzWMF02mzZ0bO0YeQ6se urzMzCbpZLN07Je1O29kZ3IiJjEfRze0O7hSJcoxIsVZ8puZsJS89//XrCKqv5WReRjIm276J95D bc9EfF6hnY48YbqxWj5j7ndWykCm4RpPsYbeHVSMfSb7nBxbAz/p7UDrt84YTVym+WRtHuUYnD4k E9YXZUJLeS7b1Do5iFkgSFo5gMlNfuT5PyNxKeJFOdtn9EaM+DhIv9mAHm/IjecaFs49xhg9NP3y FLq3P4LZNYaKhcNonH2C69yKQuiDxAstxQUDeHc98aahWt7k2KAzmnRtCM294zjw7U6xTnFsi7Kx YTsDUX9sF3jgnHwEhBWU5hD2zOjiMMnEWj8hLNZ0UH5jPDyPfUNa0E0UgmLCWCmd/JRBDS6MwTU3 ziKZn4BmHF2NRfImqTAHlKE1SUqiVnZnY2TU9/0xw/5jc5vxXPNpNNOea/15VS6oofLK9YKlM61u s03JGLFmtqzBY0QmKQ9qDVmC0dceC9fPPYe+OxgsuBOw/4PpiP3vQlGwDaK74Y+bXFiyKxwnntpD 97r2ULQ+EE0mh2Pczcey8oAlMq04w8Uwxd3zFzdtkZUHrp0G4fWIaEy9p1UesHIO9fti7p8H0XWo 9tiDpDxwbNADIXR3/cQt+aM8ENrphkYxh9Ghl2QSpl0M1x+zgO4/vooBE1uwrNQpJ+FX8b9sGeG6 MQ3cFbHCo7PCsVvF8VGYEKO9N/YW3XihVR4Eoe0nEXQ37n2da2IMAJoZITlHMpWdLWI8rDxC4+Qd IIJn+ApD7zXCXdzKOuuM+ZToYr+Bh2dhZ1+Z0/hzKWdDfDvUH4Ex62fJ40tJG0FfEz2lboSP4acw XkEesd7D1yB01usGuSqFjEPfnw/ivQOC8oBlKMyxL+2sGDTMIMJb3vEs7lFDLzWIzjUKO6n69FKi Xg2y9RCC2vFo3jf28jQ3PwAAQABJREFU1b3Wjo7SdD63DS/76zKqOmPCMURx1zWgLce8hc+kO+Yb 65VhiqRe0XvQh/gIUx6wULKilp4KczzyyksFoO8fP6Cu2E6pTUwB9+qHERh94b58BENjxKGlk4vw RSQLHA6T/6PvyK+PUc9ztbDMeypu5Mw0XazDgwN5SGdBvKWLP7srrlnTkPdt11ykgxL1ysm0Zyqv ay2JOgk8w+tvK3k97F9JusbMmmBvBPdKeMzPg2O9+rKzLGk3S5lHevZu0JUU9Kv4t80P5QGDa+nY ZzgsLgxzqVnUfhc4sJ0yI/NZpfo+Ms+QC1jw4BQ4gfNn/SKVQqZi+Mmz5AROmmet+FZG2q2kG1a3 Pk9j/MCZzSelm2Ho0Uj5/nZtO+l2hb3HMWL9FG2Ugs9IkZbIQFIZc3+toXc18ha7faf+ijsYs+1z NOqi/S5skf5a5EFMOBzOm670tSL1pfri06QU1JZh8a6dJiNs72bZipTFKWVOS3mu0uKQKe5YYHJT 3KKFsvKgGfnYCvvIiPKAZbaA57LslgRlv6RyLi5kDUX+pLTBm8aZI90+NUyOKiVeB20pLhgAe0HU pKdAzl+zTu7EfsKFpDwQ1he6R5OV7fThc08CTq1YKCsPXDuNxZt0JTZTQEuB0UUzkok79tLOl0Ja IDp8vQcT4sN1+LvOdFC6FlqTg/YpR/cidGM0Ru6NJpo4jlmP72PQOFepCp1fNbjQAWDhC+uf2TI/ wXZpMhwzLx1EB5He2RygVR4E8bEykTYm9H3DWdgsW3YFBv6VFgiK/nNTx8z7qdz0WUNmaQ50l7CT y/O3orjz2z48catN9/p68SMImffSyLSKWu7sjjKVvWR/BMq+SFpMgx0D6pc5/gGY6edf99L5WXEN makXL+0Ge3PO+5KJL1nycmHtKYmVBe6Aisz3MpmpKjl2dGReY6zwfaDEn/4zO/qRQzcU2GdTXeTB 1VHvzKZ+/n/Se076QzylBhd3NPMbW9G5wqqL0W92BjkKJRosTt9KvrLJVNtpXBTFsW+quWbHF+J4 5N+WjjQUdzafjjJv3yYe40ROSolneJQ2u1uFPR6Zr5OnNPaLE59Rmlyb3WAzMqrmuWbAtmWxYSAv DDD6y6A5nwX7UuWLhOyj32bGL/j1hDRX5SVbWCsD6dddkO+qxz6T51iQ5J5LZKESMBQGcp+Qi//P oTnhKfFbS+UYc3kup6M0Ozh7lOAydU5WOp7SOcmcbLpmuWzpvOdisa2FwXMVaLHo0VxcMKCZtx/C yUuY23ifSF7NoWO1bH2hdXSoW30OyZvZLJ3p5ZmMS7IMK2NvBt2zspnsaCEd9XV2c9PShm4Veb6x Xf8DZNUQQ5a++hYIysKW4EJZTvWzpTI/0XsGHVW2Y2OE4URPzphSzGaBoPpbKArqbiEpEv41j0Rg Tl5eiu4+f+UBa4xnK60jGqeypNSgv7yCpMVkjmF0jvhIE00eADSkhZVxwRfLZuLCuTTtGgjAderN oz7VyXQrhRP9CcHMNqqoTItzqS4VQIpoEXs3mtR52woOf1LXC6suRr/25D3dbBosomNfwpvq30Ic j2q+rZbHWNbDwh6PTGlgL++zW9ZWc3Or5rnmVmDLZ8NALhhg9Ocsyz8FPxfk0hSTSTK/MJlDm2Ct DKSFVPBPqse+vjwnSvEGcp+iC/Y0J2h3xhUJeTyay3M5HXmIwKh99g6sPvOVw1IzCoPnSnVZ+msu LhhcSXnAnnmfuDydOz7sScaXZRdZxs29DIPPAisrGz6QXbHZQaGMYkqgK9+/J/tOyE1ZZwkuzG5L bhllfLBMZvSPaM9Fi5DcINvSrMCATYFgBfKKUtEH5Ixs3/II3qS0qLex8b2TcCVtYmaGL1rOyd+b EIpSv21tsWHAhgEbBmwYsGHAhoF/Nwb+TTJQCjnFPvz7bbIYcUPmzT38w6dFrcTPs5+iw8xB+eJ3 6t9NTS9+73PzS8R8BbzIN9G8+F+3cHpoUyAUDp4LtBbmxObG8uk4JjqrYZWdXLFMrvOlYWPpKkX9 c1Jysu3BhgEbBmwYsGHAhgEbBmwY+Edi4N8kA/G+jvoEx7L0L0VMwNHFI+E3qC9qV7fJe/9IQi7M RmekGK0tYMaP6Dalp9YawmguW6QNA3RSxoaEfz4GmBObBt+dg8/1NMMvqimDMtVsk8k//yvbemDD gA0DNgzYMGDDgA0D+hj4N8lArK8Nz52C7z1yaqAvwZO8V86mPNAnD9u7EQw4vToNs/4MwyPmX43S Hci/misdZ8rTd5QRWLaofycG9NnPvxMLL0Kvnb1Qrk7efhJehK7a+mDDgA0DNgzYMGDDgA0DNgzI GPgXyUD2XpVRzibuyZ/e9qAOA8x3grsZ/tXUQbeVetExYFMgvOhf2NY/GwZsGLBhwIYBGwZsGLBh wIYBGwZsGLBh4F+OgUXPpqrCwD/l9gZVnVNRKJebnlVAsxWxYcCGARsGbBiwYcCGARsGbBiwYcCG ARsGbBiwYcCGgRcSAzYFwgv5WW2dsmHAhgEbBmwYsGHAhgEbBmwYsGHAhgEbBmwYsGEgfzFgUyDk Lz5t0GwYsGHAhgEbBmwYsGHAhgEbBmwYsGHAhgEbBmwYeCExYFMgvJCf1dap/MAAuy7pz40/4Xjk z0jPyA+INhgFiYEHv23FsYifcPNyVkFWY4Ntw8A/FgPZV4/QGFmL80eu/2P7YGu4DQM2DNgwYA0G CpMPFmZd1uDEVtaGAUsxYHOiaCnGCjr/k/PY/eZ03HKhqxcvZqH5Dz/Az3YtT0Fj3Sh8zaUofD14 KE8LOXAPgQG26zCNIqoIRNrlnEfMa2/i3LNnqLNoP0JHBeZbq64uG4mde1PhbJeCsp2W4rWRzfIN dn4Ayti7DN+9tw9lfDR4VqEn3lg2GI42zp4fqH2hYDCF6LnZQdjyv0w41v0M0/4YYrvr+4X6wrbO PG8M2OXcxpEhI3A+wwnFXTKR9qgF+m+citI2fvy8P41cf2HywcKsS+7gv/DBJgM9n49uY2vPB++m a00/h7idsXJ6IF31awvPCQNu3nLFDgU0UrLPbcH26etRdfpS+DcrgvcykUIrbtpcZDeagA5hRWvh LH8c/lAGPvZ2pEAAnJzyVvSYi3cmADxYH4lbJ57yWlxzTqMLKRDsdSvP/zcL8J51bQ9STv5Cf6wZ pfDwk8HwLCB6VdPRjJP78OeNTH5luZ2zD6q2bqCLv5x0JO87jAzG67KzUKpmG1SsVVpNVYVWhtHF rT1xSDNyFbsdnOhO7ZJwqVQF5aoVnTHN7o93qVaTcJSIEhU0BYIrO6Tj9ML3cPp+C3T7cDBKFSE6 LJAO24DaMKDAgCb7Ac5G/YLLpMgWQilkZdNTfowDC+YERZNeyEdr+Exh8EEJ6YVZl1Snub/mykDm wsv3fBbQe1GXgfIdN0UEYH6wtSLSlRekGT49MTf5GDZXaoKEHGkSekH69k/rhrM7OvTqiesZZeDm kfeiVE330g5H4tjOn6F5fVaRVCBkXz+I3d9ugev1TmhLCoQCXzirQSIrY+8Ir+lvwu9QKipXL5Mn FHPxzgSARntS8dIvs7Gy3wrYM8ugQgiW4L3cwPWY3nwLFjQO4y0rSt+ILbRPt+6OHX/nyFjrtvsm mjV3l98zflmAL95YIb8DqzHr8cCiS2vUUk3WOXzRPUTRZuOPjvUnY0TcXJQtHLIx3ghFrHP9EPh1 9kHZztUKBL+arCScmP89KfIeoe1cmwJBgXrb478BA4618OaNm/grOQaL8pkfWzInvOiotpbPFDQf VOK/MOtS1pvXs7kyUF5wCirdEnovyjJQQeGnKMC1KRCKwlfQb0PpWvAb7ISEb5/op9jeCxMDpQLQ +rsfC7ZGJ2EhVWSdkTiU5P0vrIWzWmRr4Ia601ahrrkALMG7oyM86zfkkLMz7Mytwbp8FuBdQ8qT kn4BCLQvRkpHwK4IcXWmgAk48iuKLR+Hbd9yEwkcWbuHFAjC4pspGJJ+/EqBqxAMv9CnQBa3ikqs frRzrI0xcdFISzmHX0InIlUTiNcjZsPDBcihXfjb+35E7PKdyDq1GGv+UxvjfuhfJPrk2XsqBva2 uvsmAdg5OMFJHCJFSZFlssG2BBsG8hkD9m6l4eqi5cf5Bt6COSHf6iyigKzlMwXNB5VoK8y6lPXm +WyJDJQnsALIYAG9F2UZqAAwU2RAFiFRs8jg5Lk3hAnVSBesD0geQ87tC7iw+xAepaQjmwRyN/8W qNHa3+Q550xylJW4JgLxsQlyX8q1DkWzoYNRpZabHJcfD3d+24BjX67DlUspHJxH47ao260rHFMP 4cxROzSdMQUVtCcBhCrvX0DiT5E4E3OCRG3gWbIdyrVpDv9+/VCrURWdZj0g+GfjU3mcm38XVHkp GfHLVxPsJNoG9EGdwePRclhr47gg0+g/N6/HsS0xuMXaR/k9mgSgahNv3NoaDsfuX6Dr0ACd+thL 8ra1uHqJTK75rmEmsjN9EDimT+7muNSnM9SnxNhYPEgmIFRXpS5kiu1DO7CTNiFwXwwaNDbEfU6K gLfsTGa/TSFbsUB1MG1m/OAoOQxcE44LRwXcsPpqhIai0ZA+8NBu7gJZ15C4aiseO2mgoX7UGtAG D3dH4PCGKN5O1+pd8fL08ahWz7BtvDkZabxZTy4S7ZEppj0U7WMpubSRF8zt38MTOPbtPmQ7OfJc 2ZlZcGvUA/VaK2jg4XnKQwsxysMWJCyPe6tBqCviMvMU4eHXa/StRBhpdqgxZBi89GlOrx2W4p31 nYWSlf7Cg7P7cPrzL7Q0OJxocAjRoB5qhBLq/merxrs7Hl1NxI0fvsAJGv+PqHrPzsPRbuJgXbpQ NuvhNZyJjCDnerE8P0tidNHwnVD6Fszk3brg5NcMNdq0BUQFwp2I/+HOwhB40mJbc/8Qjm3+W67g lW/no0JF4VtKkZnUnwtbYnE1/qAwjimhmHcgWoydgID2uu3LOLoBib+ncovhYtW6oGmPKkj+LRbX 46/R6YhM2Hn5olrrLihf3bojEkwx4tmkNbxyyuNUsWJIzamK6iGdUUacUWsE9UGdNnOw9I1FSIva jvuZ/eHJ+YnUK/pViXd2JOTCrhNgHKO4uzcqt+oCt2LHkbglkc7vaJBDyo1Gb3XW8sT7iaS0iaM0 7Thzb90PdRvlfrwi8yLNIz9E4IJIR8W8fVGTvqNzVgLiN5XBG7EfwkvJa4h3af7ORCZnW5kgdBN/ 0BsUpviFBbhg8+OVdWuQTKyT8ehsNubfHoby5ehYScx6anOUMB9pqqLR+9PQvIc/NcSywOq4tXEN rt5gdVCfqI6nN3djH/GiSiGz0W1eMNJ+XoK4dSeQkngCrRZHo93I1gZKIjVz8R3i7Ylr1hFvT+KN dq3REDU6NEdW/GYyjQ/Fmyv7GfIalfPPg4SdZHK/F9dPnMMDcS5yaxyMV0YORxUTcwJrlMU0SGXU 4IIjwNJ/7EjUzp24ELcHf8YJPJCBqNR5BF4eOwge5bQAlbTEYit2Dkape3tx4NN1uEX4YDTfZNgc NH5Nl89oIRAuaD64QvVkZNrBzskNXo3awpfECkmRpsxrzbPaOSHzYhyNifV8HMPbG4+pEVWbByOg T7DVfFCnPzSGL+6IxZX9e3GHaJfNPVxGY/PjW7oymlV4V8tnVPJBED1d/WkNyUzrZNmuIvHBer0D kL47BjefBKLDzL668qEldd05giM/HBZ4t6YOGg3rhKeMpvafI5qitQBtjlRoTTTVqLIOuuUXC/Au l6EHS2UgXlaSqX8Mxy2S21lgYyRwwAQEhjTTzjk8xbp/aukdKHoykHWYKLql7bb+tcXoKqWDppOq Vi/WGAWnCta/tRBjricHVcBP5OzKdAjB4GPfoFotrbDNmTI5UIt4/2eTxRot3o6eI9uaTDc7gRam B/s3REwsY3CmQ58j91C/nlZyvrNtIZmCzzNZwD34Qwz9ZgLcqAjrz6Eynjrmz8YKunZcibFRYbpC Vc41/OpRH789NX0MhJWbuCVMR+hjzvh+dG/CnfFp6wrCmHsbDRcAUobkWMyu0Ut6M/rbcMV+BA8N FNIo/+d+vWjX0mhWOdI9+GuDnUvBSVMdbNtkmjZ67riCRm3KczjZp77AB80nyTBNPYQcuEVOIgUl AqsjrpUfdp0QV82mCiEM4++tVG2ebbxtuubr2eeo/Y112+/7we8Ie1ewCDg1yMNgnPQimgtQ0Jzc fCvwnn1pPT4IEBxqyvAUD8a+lSLZrEdr8M7odlOZ3I49Gf9WGb+txqKu75psn3vwYgxfM1JXODKZ 23TC3Y0jsGLwd3KGzluv4JUO5fFg23tYSkdDpNB4RTx6DK0tvQJJ6zG7nmm815q/CwMmtuD5Gb+I f7k8toj+KrRADJ/qz9iEXtO76Ix9w1x5x2jx3pPGwve6YyHrBCLLvUq8xDBNDd4ZfRybUA9RZlim jbn3WOZXaRtDsWSw7pzQkPAcrMSzXlczYuZgESk/cgtKx7JJc1oifBEpMPII/Y/dQ+1a2vmAZbcY F4TXzz1e1uGfPX+ORs7KYGwzmI/y4N0m2su+6xqaB7Rn2U1kVES323AFbbsJfFftXHxtjg++XfRQ AVX/MYTmou/lb8tTLZ1/RJBpNCaXKMakfk096KhRY8VRI5auhgbV4kK/Pea+n6U5YZ1J2SkQb1/b j5ckJQLR0uyyL+cJWmf+FnMLuOhJ4zE3ug8x5At51qbNYNWcQNszZ+YOxrqPf9EC1HsKnL8DPSa2 yUc+aFzeKlHvQ0w8PAGlJH2iSrxbw2fU8MHsq3H40b97HnzAcExaUte9NcFYPsr0N5I+mWunmRj6 /XsoS4p3KWjnHzPxboUMhOQ4RNbsricbSy1hvyF4+/L3eMlbGWfZs1X0Xggy0JRiH1vWIStzazTT rIRQsMWLFSx4G/T8wkDAzM/x1rZovPHReBHkZqxp1B5/pmhruLNxvKw8qDLkU4xKTMas9PuYfukg 7bQ34BmPTe6GvdvFXWttUYuemEBwUqE8KBNMjO3345iYcBD9PhpkElbm0WUK5UEYBvx2Bu/fp/Zd PY7es17n5dKi/osv+60jM2BSXtMuX5PzRzHkm6kKmIHo8dNBTL1IZaYISq5Hv47B1Qu6C+rM41Gi 8iAMQ4/dwtzHjzHv4X2M+d8SGZYGJeVn6UFjXwshx/YjLHovRsZFojyf8JxynWBvbljFi7PF1vjr 93lds25fxcBPtbgoRo7VrA0c77SAkJQHzRdH4l2qbxbhcML+SG7CzurY8lo1vnPGnovXCcPY36PR JkBrbMRp4/hVMsEOR3XaPWVhz8c7+K/07+8zxickKT0/fh3q9McQBY76Rh8k/Inm66IlhoNff4w9 dAidSwgG0UzB1GOQoDxgbai/9CDCYqLxDvWxg9hHIWd+tNAUjCD0+lmkwXGdeaa0qLdx8bIuDZoq nVt8fuG99codmHjxrGLshOPo1vM6VTOliKQ8cGwwiI9HRkuzks9goDiO06ImY+370Trl1LykxydQ sUAEfb2E09yRb3dzBWHSt19SfBi6fTQ4D7AheD1yL6ZeJ572J439ccKu8vkZi3FHvGKV8YtGMRfQ f5yrHqwgqjcCod8sQW2R3k/N74WIBXv08lnz6m5wdCRl3SpZ2GL8TApq8M7G/lmF8qDKkNnoTX3q Kc8HAvSqYz7DKBrbSmsH95DVGEljZNjeQ+g/S8BbbhM/c1B2ct5SDpAtMN4nZcTc9CeYdfUguvfS 8rH8cCyrBhdwDMCgPw5iWNxmma9teT1IVB6EIGRjNIasWSDy7kA4a1mf9Any/GXzQN/E/URnwvhm BbrTmB+xfraiLCnxDx1HqDh3Hf9xN5+3WAZVc/HDI9i+WFAedP/5GM3dwpw15ehmmbcrKpcf1c4/ GvFTVgqZigF7j+P92zQXJ+yQcbrno81yf1hlamlQFS7k3ln+YOcmUHeDyUvwDo2F928n87lOmMsT 8McGxovEQLQ0heQW5Xd2rD8Wg0iemZKwBx26lOAZj4/9Gg8U+nQ+F4fVkZUHzCqlP8lnod9IdCdV YP2v2jnhxrKusvKAzZujTl7lsoKyXwkzXsP2b89Z30gZQiDaklwy7gLxacL7sG/G8ZS/T/8XFxIV 86NKvMvVqHiwlA+ClBw/KZQHATPCMerocZJHomV5WmqGvsxhSV0eA9cQXxkrgZJ/X/1wFULXRaCt yHMf/fIBlpX/BE+MbjyZiXcZumUPTFGxuZakPAjEa5EHOb9g33jE+gUisM34uvp8PFGME8tqEXKr pXf9uoqaDKTfvhfhXcXU+iJ0+5/Uh0CEHtiBOuLuMNq1Rt0eXUStaAK2f7obIz5uTzsD5/Hb0B94 x+rP2I4+09vKnbT38UfLFYdQBp6IpN2rPX2/QrP0Gap3Ff9KiMBGcaen8YoDtGNI9npicB+/ClMa 18aiLu9LUfzXDqk41HEmf3asNxNjDrynvdrIqyYaTFsH7+rvYeXgFcj49T84GR+EQDJTt6e0qi1q i7ACMeT8flStJLz6z1mDjJ1VEEM7jinnUmhny1fMR7tapw/yZ5eOr6KSeGyDnZPy7PoO5l6qwi0A nlUSzOLlQuKDk58/fP2El/ZhpQhn+jm070yQuB23j0dU79AOZT0EixB7Zy/4DSdcVPGlnbx5KKl0 wujTBaPSnnDz/7trQrFi1M+Q8SgunDlAPXNfTVIUfhJ3H7tvv4mmbd3lhpQJ7IFeD47CqWwTHMp+ Ruevo4kugsD6XK4hmVrXoKFOFgXVJ/0Pg+Z1Fcv1Rd89yVjQ5n0ysz6Nh8T42XVTGnsvdEx7hI6U K/tcBFkAjIZs5ZEjbSGIIPTaKDfInAd7N1R9awSqT/6eNPw94dXMn+/gZiasxoJX3oXnkO8x8rMQ lGvQABkT2gO0k9Jy2BAdE1SUrQnfVjV5bc7v9seuXHbUoBLvul0JIi37RlnL7r/gC9xb5Yc9T3OQ KS5kdfOb/5ZfeO9OFihNRQsU99DZCDsXw3eHM+7+JTeG0e25eaP4u2tHEi6jFLtDjlXgR+N4QkU3 LKXxmPxZb1wd91gedzIQMx9YXX/dvEi5M+EeEI4GnYojisz6k0564OQvT1Frfm+8VD3GODTffqSQ 6yekZWUhh5l0kqMy//kRSF3VhJSE0Ui9lglPyeKktBdqD18GLB/Ky3gO+QbDloXKppV1Q/vh7Jyu iKTd8uvzuyMp7DF8vY1XbVnscZz4ei1Ks0VZZiourpmPM4mCJOUz+k15Qa8W7xpyysZ4NwudNpzB q92q8GegDxr17YK1tDPEdsvLBbRA+ZpeYpr4Q+PMu1Vr4cVzAjBPwI1uJu0bc1CWdFJQefh1bg5H vtDUEC/2R9Pv7qFM9WB8t+gXOJJvECn4zjmIuTOIN/ydgMjygtXF6Jvfw8vFNL9QiwtWp0sdf7jA H2kiX2NxPqO/QdhH0rdujVHBpGy3gj85VfXHS43LM9Bo8MF+NG3vT4voKugW8BG205wTtH0lqjUg HuwaQjj9GZJ/FLVzcfatM6JVRQgdUawFe8aLSSnmUqczQh6cgkcrf7IK85VpmbWL4dDi+YcVpFCG jvDNTV8t4IjGFjtFV7xqG7T+YS3i6g/Ao1930dGbMJl21dCgWlwILVT3v/aKO5jLjJpoLs2hczRs FHo26Yv+645xa6fLseeQQ9f8Sos+F5rvpe/MZZP9WtmkdUQUTlV4jb5LOO4mrUCZGgI9/3X0C9ny rW34MbTrW0tsbGvUCemJfe3YtxLGv7peCKVUzwl34vDl+4JlRPVJ22jObyc3w4WOlLXZRFcSj63E 5Yn4sTPQsi9ZWCp2tuXMZj7wjZeHj2gPmlmpZPGjhsSo8VLoHAw6sQdrl5+kY2RJZOUoyXI0hlXg XQ2fkbtgIR9MjZgtK4B777ulOIJaE+VInvapEYzw9wXLAaWCmNdnSV2U1ydoJFo4fMZlN6ZQH31t JbxEK5k6r/dB/X5zaPONWYTNwrEdA4n/C3zJYryrlIEebF4iOnUn+ecayT+SBQ99Y5/u4zD3dHnR UnABjsQOky2xZNyb+aCa3vXgF5QMhMp6Ff3LX2mKsoWijIHGKz7XKg/EhjrQJN/rp0ncxDT5s014 8FF7uCYlyLc2pN64ios/3+ECgdQ3B7raLg3V6fUk/Z3DY5rb1F6xlUETghDmoWOYVnkgRsLl1fEY 9tFBfEVHKQQ/AiQIPUnB9RxBddpl1Qit8kAqRL9evaej66dfcIXAlcNXSYEQyFOl8+fuwWNQuZK2 AHOc5ze8K2JoAf7wnkK7TVncG7NF8s9cGbGwxRY0CW6JMt7uJDSUROlqvnjjyFmUq5s7N2DCWbbo i0Jbq+4TE/AqdCHhPPYXxI9tjNTdg1GrSSBc3J1g51iSBI7XMPbkSLrOrbRuQUmwFR3ZsMmWByle Nzd/u3tYwjv5aSDTurN3/ubCkZSV4fpp3WJ0S9szPDqfznePmJDE+iGFZm+2lR75r1ODtnxX9tyz JOPXTSkc2fDjzLm0TwewmS92pei8dkgJXP4fne89lAZPUoqkREXw0nciFuP2hyGo4HoeZz/dRXFB qBJIAruJkG0wixvJKLXfArwrobgHv6Hj00OD8vCdTsqNeb8YCEjKchY/q8Y7LT5eEYQLqU7vjqEA LZh1BOecJFyM+ptnefTrJVyLYQsg7RiyI37x7Ga6BAKP0ymtEl9JynGqHhwro+aAvjRevsO3LTZz ECHtW8DHzYRVFD9/uhq/DfsgDzNSbWskfsFMKvstlBaUQjrjGbVnrkOLJfW5sHZh33n4kvDPfGkc 2cZ8aWjhGD6RDwW35mgWZnjWHUjAnkkjDYoEzt+E1yZ00carxHvG+XMcBlPktZSVByJYnzZknTGa L46eaT+htk7FkxY3iki9R+YgsjYpec6RkvinZh5IDBuPqvVp4Uo0Udy5DMr2/ADvjl1PN9MYKgfs 7LROFDkupfGmVwd/VYkLCZSSrzHF6JukGJUWhTxPbnVLQPL4lXiKk7dEGE4oVYNqIQWCm2jmoY/T p1fVzcUOVRty65zLzzZjqdsraDw2GN6+5TlNlihP/idW/4HmdWrqKBBUzz+s3+Q34eRXS7Fx3hqT WFDiUw0NqsWFyQaZkcDO/B9evpRuD9ppNLeDiyCHKBOl7+w/IVhHNrEr3QKtOjvyDZMsUrLQQXVe TNqgcA9eiday8kCESArY1v/bgF15HGtU1m/WswVzQnbqVREkWV9N1SoPpHoY3dT/cCP5vWGKx2jc JOs5zwCJxqVclv0yf1gHpw5DvKg4Nae0pXjnMGlcW8RnjDREf8zqZ+GKudh9PJopYIz5r6o6fjW6 x9Fx0lhf5GaNlVddrBI7Uq4LvmNo1tq3WFYeSO3y7D6HLOu+QOTyR0jYcYDmgBCZ11mMd4kvmikD MVzc2PqT2JRo3PtjJ9IytLIBGxMOOanc4osdy32Y+oDy6sogUj8s+rWA3nXhFqAMpFvRv/7NpkAo 4iRQ8xVJs63bUJfadcSINO7cTpl6J2IMvo9Qxug/5yFl6mfXfxcZj+eQirp+BxT5Ko1fh7njtRHZ 14+LC4AQVK1nahGoPSrgUs7weIG0w6OFSk8yE9SJRfH6/RE6bjXWLU9E1smt2E9/+oFZavQiSw2l kKSfx5z38m8tRKtpu/iRiRub14D96YegrWfQokMV/WjV7/FjBiA+l9JPbxn/xvqTmbnejI3iPpf6 zU1igkzFvsOA/61A4u5jaNm2Hi4tPSUWT8C1hDT41Ergiz2Xjr11nbaZW0k+5jOGB5f82cI22kpj 9RnNqIjUsI0vBWd3IsdZLOgLzpLAAoRjXe9wnsfUP326MZUvr3jNU0c4t+9P2b4Ts4aRszYSXJOE 18u7jiOHzuazMclM6Q+3qsJ3e4XUQNQLa0M8Jwk3w7fonIEX0nX/uwd3M76rZl8FL/UsgUN0Tjoz gyQeCo/jv8WuD4TdJF0o+m9BqNG/tbwrq00NQujvH8GT2vZHmzfEnSSgaVgXAx6pBu+Z147zqqp1 aWiUX5URbwnRtkf9ExuTDT5ahYM7h3Icnw9fhvMG4IIwJPEHVK0uKj4N0s2LUIMLY5CbDrDen4Ux uFKcMcWMOfpKi+ZiMusOCp9EVnhsp5EcVa5IkKqXfw2s9yhF1fxDxyXWVumgUMoFkcKiJjQ3z+HY pli5PuWDtTRoES6UFVvwLFmvSUVcO/VAg9pl8eDCcZyNPcGjc+Opxr6znZ4VDVtQpewSeEX5xsbH o50XOZYTb8WR2pJfv7m1X6ojLT6GPzKFt/LMvJTOfx21chjpBq0KqcuC8bm4G88A+fUaAk83OsoT /z0umqFQMAfvVjVQRWHpu3vXr2C0NNs8aLrpPpoaTVUbSfOhCUWONzk3ZfPmXzeYIksI1uJdgmPJ 7+beIblmfyI5BM81l/mJ5tC7PrSiLAPpt/Wf/K4QM//J3Xhx256WTAtBPadTrLfZmX/pdpotGsTQ 7aeDqOxjJ70a/No5lzciABtkyyUijaf9dSOXLHpJDhXqyrsr9+9qULaS8fZJuzuSYK8HxuxXJgTX nBGLKUOT8Cedv35AN1iw8DQtGacXL+OC8an53VCnh66TR7MrUGYsURvtrt1E4JUEJJM360dpjMHT 4iTlOOJWbOE5o3v8FzX1nawpYBQzawIX8M524gf9PgvOtMQyFYpXqGl0oWEqf17x+ovPvPJbkl7m 5SDSXq/AzU+OI7nvXR3Hl5cOHoLvXWHxFPCmcWHNkrr085qHd/1ShfeeH3iXWINyIuYTrNiNBrRL /mpHEpKkjPrdc6CjP3XMIlD9knrvISjvyzyVt0CfN5y4CXCt+QP5zQVS1co2Pr0UIysPuv10HI07 E02LM5bdinQc61UVUbRLbio8uZiKLNIP6N+OwRYAT0XFwTOxcDGP2vSUtwKhRL1XTZypd4J3g5rU l5oI+vN3pFVkZvzPsG5wuI6DV7V4d6rekNr3M05M2YVuIwMN+pRC/gDyMxT3C8bQ6+2QduIQbp1P Ims2xmsy8Sh+Ew5sYqbR0dj47ma8uyVUNZ9Riwtj/cwhs2lpd9hYeqHGScRMlVo6F3sGvU8+gQYg +fAJ3LmcwodkdtYDJEd9wo/EZJ3+AHvXBus6GlUx/9yN/lRW6A8+8pnOLTw9V5PzT34MRRdrqmjQ Clzo1p73GxvXlz59n2dkZ/4HLx8pHylkkdmn6Dhe89F5AzIjh4PoZ+EZv2rEsIAmW7ujbJhqXYw5 c4JLvZZUyc/8aCKzNmVHE/UD2zwoLkZaoyBmx1R2z2AWguTlhllcjSSlqTxdfIYUOqa5iqxE/6nB WlnUsn4fB7uAqYx8REBbOvuxIP/ZQZD98wvvlshA7LjjW//Xnm70Mi17uvo10DY6H57Mofe8qpHY kFK+yM/5J6/6X9R0I2zlRe3qP7Nf0d2+gX/6JJ3jBmyiPPfRJN4hJtCWpk0gBw9v2YTI3qMyvBu6 G+0wP5/2lHF3YefNaKY8Iu2dfXkO5qvg4vlgA6/aLJFf77j9GhpOnsLNseyc3eTJ6sCXe1FjXjsO Q/mPn/GnXUEWSpcvo0ziz5YwEsnDdDfyJN0sVHAcJgFsO3Mwdoi+AqQ4tb/sW5wcym7MqI1hN/ej AfkbUIb2I7Re5I3vWAmTwsMUod/KsvyZMWq6mo0Fp/LCIoIJyqXofC6dyDAeyNQyh3wf5Gfg1zhS M+z15w3ms0EyiVNZoV3ZQDTxL06LxVlY1VwA0v+Pg3jwdmvEzH8DF0W4fi/XUlmDsWLm411Z2hIa VJZT+5yfeFe23Y52n3zoY55jK2hNeVr8mp70cx5nyQt3tf1QlmPKvfpr76HOKoLrrEunyjam0bV1 QpjHr1FTWgpp7idw/wlKuPrPzHHXHzv6y+dFpfS/jkbIiocK9bx5dJnu/0e+Fv5PyqLqlwskbEYt HYDXo2fgXJd5dI58DPZtbYdOPX05TLV4d6keKLZpFnYsbaLjOT3j6Jp8FdCZYCrcRPN/eD9jNLx1 WPUUNOtJN2eQbwxjgeFAsCoQr3GUFxJibsYvWCCeoRYXAoCi91+iXdVzsXjjSOUZv+I/0/ugqqKL dtOm4SydWZf8YEhJauYfViZlu6AsqzhptI7ygMHNPLNXPvst1cN+1dCgalwoKzbzmfnuOCleCdti 3HAd5QEDkborikOSvpOZYA2yMf5V7tUOdC3tz7g4fzH+HKY8Ey5kT1m3wCgODYCpiDBnTnCi612F sAQn48byG2/0q7q/OVxuo5ObLh/Wz5vbOzumwpSlLLTUUR4IVmRXV8fkVlxVmiV8Rk0F7BtLSqL4 sd+j1aD58hW9Ejw2jq6sW4aLSVXx6uQ8rvmWCuX5m4Bo8l/1zrwg3ZxkMbRjzHYe592iDlfaWo93 82QghguXaszPFFMcO8K9Nl0hL7Jx3UbS1ZBMVuCJ6tcX+jDNoXf9MqbelWP/RZt/TPW5IOPpwLQt FDUMaHIy8VQef7Ow9JXZuHX5IXcKlJmciD+Y8xtxof3K7BA+mO08W6C16K11a/tuOBF3Tadb7C71 I3P6Y1bpspjn8QbumFiv6hQy8VI2KEz2Ch3ZaCDOHLst58xh5yqnt8TKrmE4sGIObtwUKmLOXtov pkmXwuVPumPzkjjhzL1YMoPOIK9t8Lb4FgZ/uuJNCtlpKfwxh85o62vKszMFJpitZzYlna3bTrhQ to8Byr6dgjvCfCdVIf8yBUsOW4DTn/I7ZBFjhBifY1T7moC1XWbjdqrujuiDpCQZtrEHSRlzfiYJ IlLZxw+RsmcDtvYqi9kepbB/Vyov6tKSlDXci/xmfFFxBq5fTpdBsnazO71392pJ11KVxcKWEVoP 2jnpeHJJUF9k83uF5WLQpJPzLJHWsjK08dKTg72wAvj79CSc+UNoB6+L7qKPGxuC2W6l8OWs3VJ2 Vb/sXHq18aGKshNRgZykVe7ZVo5j10CVryi/Cg/cSZbwrZjDLC0t0DdQpukVY6+W4J3ll/wDWEKD rJzaYCneNY+1O17639FY25n5Zf3VA3jzTs58BbvCdcdjzn260/uLuZjt7Ix5XmVx4rR6hmEwjujb sKBUHmSmJfE4JX6dKjKFGQsHcTlR5DFEy0w5GVlFe7WWPk0LZYT/v/Stxvv2+N5DZN6/jRvr5pLT 0HfFLBPh19hdmd2yZ0Zz6SlIFoVnziNECK6vTkD/oaX42+8DJuPPmwJfUI13cn41dIrgR4V5Tp/n 3Bt7li5C7FstsajNqFzbLfGzHFrcS3xSw/iAcoyI30QX0FREvrceRFpyYEJz+uVz8rvBA+1qunOp IhpHfjws8CCCzeafkwtHcX4x220x99StGhesUuLF7H729J+f8iZwGlD2x6Bh6iL+ThJ2Tjm+9EDo 051Eu2rnYmluuz6/I/ZsOAH2vaSgyUrB7fi/+avxqcv8+YcvCOoJjmcfJsbh9j2BNnMe3sbVdR9z p7pSvTq8RAUNqsWFVL8lv9KCgJW5sXunTLeZt0kmIV8oX0oO74zIEVkpgoyh/52VvEv5vcs16y82 LRpfVxlINwwQf2Jj6DHhcPVIHYWeDg4t6ZBeXkvmBLsaXdG9i6AU2NmjGo7suCBDY2M4edvHshKQ XUFctZKJFaFcyvSDQ1lh84rluLIzkdMtkxEyzu7DvreqcZ9WLE3iPexZCpbiXSrHHIOYy2ekMpby wdqTVopFl2AVk8FFHs4imZ+NXS97IeI/c7H/g6Xcp5hUD/u1tC5l2Zuf9EbEtAjcu0lzVvpD3Dm6 AWsrao8bNekbyLNbg3cGwBIZqNLACbzOR79Oxg9jIpAuiN08DlkPkRzzJSJdXbmsELX2rBBv5X9L 6J1VVZRlICtRUWSL2239a4u8VFW2soOmk/LV7OfFGqPgzC7/r894Pw6fV2Zef+lsI/F09msq+Iz+ HsM+1jpTAZVdqxCs2bVpdXuVx73NsTpw+J28B8jruhX2J9mnNpA5YJhO0/Tby727/09bD7vj9Uif 2jp3dXv7B5Ah/mkkK87J9T5AHm/FWyfOjRVujlBW1P9EBmpXvY7NZerLjiOF9DBMSF/JNcV319O9 80O/k4s5NuiMJl0bQnPvOA7IzpUmYlL6fNm8T7vzZlxEk4HRwyvkebkzOU9ik/HJQcwCQStlV+jc E37kbTgjcSniYwXhzGf0Rn4rghIGf35yAmvJXFS6b7yEfwn8nSgIilJe5X3c7CpMdmuCFFi/qtFx lbM7Y6Uo/utH/h0GTm8LXN2C2eRRWxnY7QZj6HYDyUpDmSb1S4pj59DjX66CLeQ0TAhs8kqQkvlv rfm7MGBiC504i1+SqZ01hHZK7VP2lXlB7/0uq1sIxvAupen/Mk/8Iz/TM7U2E+9Nmpc0svNHd4lf 3o/KnuexqUwTPRqcTjQ1Q6Yp/baY+24J3o19x85br/Bdp1N0J7qSNln9b53PQA0SGNnNKEd6MSdQ Ao2yNL9ePYFL2/XOrQr9VXW/s7irymBrw0Qap8KODhtzhjgE+ifeQ23PRHxeoZ0O79LC0H/S3rfO rgb8IGCofgaD99AjZAUh3d5gkJp7hKl2u3T8RmvWr0djUpqDSrwzmsjrXvfGK+J1zNvvrqdbXoaa Yz6s5Z3IOo/Ick3kXUWGCb+Q8ahQgxZmn6yQeVW7H0+jrWhZocRW6mo6D/3uL8oonecS9T7B5MMj BMW3ClxkxLxHDoSNW0BIFbFF0bgf+qs+XmGcv4QQ3X6DFLI4Wyfy+2bfXka31nHEuyR6E+nwieVz sSHdBqL+2C7wIKfH0lE41j9p/LJnY+00Z/7JTFhKN938l4HIM0h0yyyA1NBgYcol+mfCc+scGys9 B9sZsUYU5YIbWutBCY6SrswxzZdkoqZfxaP7gNoSGFW/lswJvAIj8qC3vwaakycUPJU8/t8kj//u qprEC7F2HSYZgd1MYk7oQ3y3Qe1rqvEu1WEJn1HFB6miFJIjVynkSCZT68s/DeZvR8jEtjKvUVOX qflE6qv0q7zxQw3e6yvnO735KS/Z8+ayYFkJx9rD+Iwz+fy5KPoWkdrYlWSPlooNQCne0l9L6L2w ZKDlFT62tBtW5ddopllVvqAL2ywQChrDlsInp4A+4l3lTHnQbH44uk3prAclCD3oTPAIpfKA5Sjb BoNST6H3lB5i/gScIYdIkhLCL2Qa+kYfx3tHtIt6PcBmvzrU74u5fx7UuQ9XqsexQQ+EkB+GiVt0 62FXtDTbRPfGrpnNlSOsspTEE7LyoNaQJXR9zWNZecDSi3uQ1KoTguh8naAtF3/k1BL1apCBlRDs naXoQF5X1smd2L9ooaw8EOrSKg+k3IJWW3oz/VvKWdiZV5q6OTYI4AVu7dyCOKpLUh40o3OBYR/p maRJoEsFoO8fP6Cuv6DN0SoPAvHqhxEYfeE+GjfXzu5OTcZj5im6q7uXP4fA+qVUHjShu6+H/nFV UB6wHOQdiQkxylDaQ4CnMeKA0lVMk/Iz64BGMYfRQaxPOXnWH7MAQw9etV55QJXZ+bRAu+JMRCWX H51b8l92Q0R1cSzU7mIofNlXFHbReOZc/rH+CpAVmSzAu8ZFnwaryl6X9WnQtaOL0n+hokLLHi3B u7Hv6OQijATJDFNbO40ffp0GO8RUno/HYd9MlZMvbtoiKw9cOw3C6xHRmHpvv3xtpZzR3AfpsnlF /hL1ysnjlEXr45D5+HBm46t0Mww9Gila3SgAsNsV6N76EeunKCJ9YScMITmOKY4mntqDLuMkfsiS 6LjM5HCMu/lYtfKAQdHQMSJXI7Onay2JA1EmRmO/SbtYQEm6NlYoqw7vjCbqzI7CzEvHMXBdFN75 fS+GbNtL3+cxphi5R5zVJe0y8Ypz/eetHSO0uyd9E6bgZeHi5mXE05aJyoMgfg+4MeUBy+s9fA1C Z73OHnVCpZBx6PvzQbx3QFAesERVNOikPd7mI/JNnYropWRFgT/rx1vybjh2fAlHjgTbTwbjTIiy 82lOV7BJxCDSoYq5WOnJXehXAk6tWCgrD1w7jcWbpFxnyj8pqJ1/nAInYMz6WRIY+bdSyFQMP3mW HBAL8wtLkOiWPauhwcKUS7zHG6e9BmzMXzyINgFaJuFKzhHZOC6uRSfrIhzrEQ9nE4YR3lWpvo88 TrwHr8OY7Z8azK+unSZj6O/RnCYkmchFlBd4BSr/WTIn8CoYDd69jN6zBos1JnB5S2oTk0um0YaL NcoDBpi1qxnJCB1FC1ixMvoJRIev92BCfLgOjoi9WIV3Cb4lfEYVH6SKvPt9gSmHI9FY5jMJUvVg Y2UwyT+9FcoDlqi2LgFwGI2/4+j30XgdnNUKm42hx24prgtVh3e58ezBAhmIZa84PgoTYsLl+ZjJ uVrlQRDafhKBcVfu54vygNVnCb0XaRmIdeYFDTYLhH/KhyWTzUxufu4Is86rkVnRY7Jwd6KFNLPu d3Irna/nmHXQRib3zMzViebmpyRgmdU+MvfLvJ/KTVw19OxA97c7GbleSaceC18ybz+Ek1dpXoqd zXpK+Muh4yGsLq2THwuBGsnOzfXS7ODsUUI0C07HU3KulJNNgnhZ8/HO25idheLktE5p3m2kSqFP ZN7GSMKJ1iUc70xIsdIfgam6eLxIg3bUPkeGwPyui8zmU8hM0JOuKpOc5WXeuoD0DHfDu+1zbahl iZbi3TLo+ZC7oPFOTWQ0/Ne9dDBfJRoaK8VLu8Fe9L2RDz2wGkTm7dvCtaSObnnyF2knV7lzyhtA fCbfadbKnuUX3m8upN0hukpU3wJBdfOIp2c+JVy7k68Coo3sDOKfjKfRkSZnD4Gn5gVbLkdzQnHy dSGNaVPl8gsXpuA/t3gL5uIcOmaTzeYnts5l457wzuYs+1zonuEtQ+X8w8vSuGfBvlR5q+Zgs2jQ AlzwRqn9R/SbQcfz2FxlyRyspjoBh1lc1nqabab8o6YiZRkL5wTldyaJocBwwug3kx29YXzCza1Q +C3rG+dPZvIZJRoteWZ9e2pPfSIZzc65dL7KkMzqa7Mns2bsSVZO32v9LbA5i4U8ZC1r8W6pDMSO A+YQLuwZLkgAddTzZSQ0Oh//W0jvampmdJSXDDSlmM0CQYlbrTpWGWt7LnoYcKSJif7MDo6l4ewl 5KZjzAUbiJlKdRjs9JqqmRiik5fYQJ4nl7MapmDkES8pD1g2tiAXFuXmCb95gNZJ1pDDQmcPMYr6 Ze9ASgPCiaWBt5EmQXODPSmFpE8r4D3/cajTFh0aLIC6ylaBd1mdGuFEt0mQqqJAg6V4L9DGGANe 0HinOhkNy+ORCwMF8H2N9c3MOLltZuSXdnKZwyQdfpSHEGYG6HzPogrvekLlg9/WcOUBa1xpj3wa LcS/nGgPiAXWRntysmYPy3iathwHk+c/VbjIE2oRyGDBXGxf1ktLs/K4/3/2zgOu6qr/4x8EBRMV F+IoxYkLcK9cmYM0BXPXo2L5PGaaZpnpY2pm+S+tXGlT0TI0TdyoDcWetJwIDpygpYgTFO2S4P1/ z2/d3x2Mexle8HteL7i/3/md+T77e1bW3AU3R9sfya7WDttR5h3Ng3awyFXKUf71VBvHXDmUvWWZ odxum9U32Vt13ISWN4QT2aebeTo77m12NkX+NWHPPlzZuZeT7yJucv2UE9OOmzGVzZz30XLqm+Xq Oc1eDtus3HK3tw/kQeksq7xnocVd/2BnftdbzemzyEdaP8MJ+0A5jUdBmmMBQkHSZr+YABNgAkwg 3wjc2v059iwMk9xP3vAS1r0Vi9K0R9eQWhNtZ8o3wuSb5wXh8G26Yk+5ItLaOzp8tkdNa23WYQJ5 SYDzYF7SZLcecQLpdCBj1ML5yllKEdg6YioqVaeVw6kpqBv6Pho2p1UPrJiAExJgAYITJgoHiQkw ASbABOwjIA6U+2vhFBzeYToUMnbRAs2Rx0eNoytl82iGXnO1gB/Sk3HLaH3Ia/WQGeg7/02UL+TR K2Ca7J0jBDgPOkKN7TABmwRS9n6CPctMh86K82bOKCZv1nqJBAhNbdpjTSbwsAnwGQgPOwXYfybA BJgAE8gbAnSN2vWLybRn1MI5YzmUq1Up2334Frac85X2dyfTVbTStX+uXvD0zt3edeeMJIfKqQlw HnTq5OHAFR4CYu/9zdMXkGHZZtFZEqV96+XtWQuFB4tThpTPQDBPFsssa/6V35gAE2ACTIAJFBYC dPBLxQbq/szCEmg7w0n7u7189fviC2avsZ2hZONFmQDnwaKcuhy3AiQg9t6Xo4OjWTGBwkaABQiF LcU4vEyACTABJsAEmAATYAJMgAkwAScjUNAz9U4W/UcmOOrlxY9MhDmiTIAJMAEmwASYABNgAkyA CTABJsAEmID9BFiAYD8ztsEEmAATYAJMgAkwASbABJgAE2ACTOCRI8AChEcuyTnCTIAJMAEmwASY ABNgAkyACTABJsAE7CfAAgT7mRW4DXE92Z/r1uJI+GakpBa49+xhQRC4dwGxYStxbPMBZBSEf+wH E2ACzkGAy74pHZiFiQU/MQEmwASYABNwUgJ8iKKTJow+WMazG/DV8JGSVsjeGwgM4Mu+cS0Km55d iNt13eF2NwEujWdg0KweemyF6vn65slY98pmCnMQxt5Yh0qPcBILgdnVXzfixLYI/LnrH6AKnTLv 6YGaQW/hyaH+hSJdr62bifWrYlDW5YqUN/tT3nR1opCnx63B6hHfo3hdI5LvtMHAdW+iXEG2BmlX Eb95A05v3I5rilC0eKkGaDJxPBo2K+K3KFjkg6JS9l0yrmLviNE4l+qB4p4ikgbcP1MS7Vctg29t d4tY234tKixsx64I6CZGYU2/hbhfxx3FKTrGVANSjG0whOqPMlnUHwkfDMaO3/+BF9XjQt0/m4Ba 08LRrlcN6Z3/MQEmwASYQOEikEWVX7giUqRDW9ZHi55bPqVYetxGbJ2yBr5T5sO/lfN34NNvxONQ 7HYgVkbjmXFLmrl/WIM0F6Tg+Adv4fjNNuj13nA8Zmc6eVT2o4gIAcIjLDmg2AuOe9vVwPaj9+WE Ff+VND6z/gLq9/utUAhXbkR9iss77+EyBV/kTWdTd87uwhmt/DyGdLpzGnbmWYfjdHM/VtboinMP Hlg4sQMnImph+t0XnUrYYhFIq1cu+zISY3oizmz40SpdAw1fWzHLTMOeejC33DMLQ17qX9vyAXas TsNT86ajqqkZz0svCtSt9JR4nIihdjdG7+1jSMui/hAC4ZskKLxMdbqoD1VVJulv9bFQ/Yr4XN4V hWQDSIiShuLVWqOGv0WfiVbSxP8cg3Q3d6lu9e7QHRW8nDyad0mo+8sfUpgtQ+ri4QE3z3LweqIe vCrnTBho6caj9u7sZb+w9fkftfxTGOJbUF3GwsDCecNYygtd+/XFxdRyKFshfwaYyX+E4/DOzTA+ O71QCBDc/EZgyuV+SP7xTSwd/g01bg/3LnRjWgKOzv4WcQ/uoPM79gsQ3HyaoVn3HrhbtSNKPcKl 8n7cdk140HpeOFr1CARSknCNZqweVAgoFMIDUZH4fXId4zoNwqLhmx963rRVsZXr/RmmHHoKc5qH Sp8LUvB2ffPHyiAzEM+Ef4L6TbxguH6F0jgJZRo610oNW+ws9bjsK0TcA/D8hXP42+ACN7db2FW3 OX5PtxQSWdIzf7enHswtd3Of8/5NDDSvLPsAZ3akIXDKmyRAyJ+2O+9DnrmLbnVCMSX+GRLWe8B4 czfmNh8iGc6q/jDCHc1+vIh6KWlw8TDiz7n+CF94J3NPnPyLMS0On/UO0YUyEKMu/YbqOgHBuXdb Y6UujrXn/g/DxjTV2XHCx3snETZ4cLYBq/36Kjw/K7hQCXmzjVQeGygMZb+w9fnzOInYuTwg8AgP VfKAXkE58VgAOn7zXf765iG3foXpUAyPsmXg06ILcfkG6aku+csnG9dd3DzgoQQhqzm1VfIAAEAA SURBVM5UZs54+PVB34g+mX1+ZPSTj+6S4ur7ylY883JnJd5PoGLTloWLgZsRFVuITubmh543MwNX sm4AAl2LIZoO3SjIczeu/PyjFKRu369H616V5eD51oNPIUtilSuXfZUE4FreG9LuBVTC431L4Pcf aJrWDmVPPZhb7nYEy2GjLp4Pt11yOOCZWaR6zcNbnm13qVBfqz8yM67plyoDz1Lym0/zYHr4RvtU 2B5c3P0wNoomXMb9C3tjxNKLaJyNSkD1vjXlqKQdxf7Fd7VolX56MZ4b6eTCAxHaMg0wakskbp6O xA8TF8K98Tj0mfmMtCbSSNtE478bj992/INzHz2PSL9D6D3UT4sjP1gTcPqyXwj7/NaUWedhEmAB wsOkn43fiVtWIv6sATQ2JWVAuqEKAscOsL08Pu0CYpZuwl2S8BvJXP2hnXD7lzD88f0G3EoEStfu iXZTxqNWo7I2fc24ckXSTzcoHb50XceHOg16JaSr51evQCJZEWFLT3ZBnZdGoXJFWtq3fQ1iVm3A +bP00eiLZlMno3Ufi33rN08jZm04Tmw/SgvWgQeJLqjYqTX8Bw1C/Wa290QKP6/+ugPxhy5ANNnF vXxQtW0P2FpNZzi2E4d/OiWtyC5WtRNaDFT8vxqD/d9F0S4BWoJnSEOxWvTNMmwiohkpiF+7gtit ltjBWAXVOnVGo/4BSPllOy7dC0TXtwea0oFYGf8xwCBhMiBNIHTT8RNuWjAUWsKfE1+uIAYesjRf hEkfXsmQ7X/Xfv0eMZS2iQfSgKqUwMaaqNlnBJqEdEdZ3UwIcpkvbPueva7hTBTlgzU4vSMa8PGB 6E75tg5GwIBgVK5dxsqB1JMxkpmrCXI+vH7qJJLOVKW8TLNW7pWlOLnQ4MQ9NzXWtf3Yv+oPSn8j MowN0GxUN9w/uQfnf4tDKvkDlEXVjp1Rs9kTpvBRGp2hNLouZtyUfO5dUf6cuO4LxP+llAGDB+q8 MAzqN2FC2hZAvyWriyWfabj2axT+PJ4AA/lVvGxN1OjeCd7VrFkIu4Yz+4lfmMRPzNUV86mJepQH S6VF49D6cnhux3vwVtL5GtUTZ6ieEH54dRiGhs3lMp4avQkxuy9QGaVltORnxS7DUC/AVvn3kvJf auweKl9xuJMsZgqJRbue1ktzyReHFHG8fuIiwTLgZqo8K3314klcP5lEYXNB8ao14J6RhpJVK8ll wVHuuc3vom76Jgwxq3dD5V6rUwjqPumOC+u2w8V/NDrqz+Eo6LJPXOIjqI4VS8LPuKC0C5X92p3R eOBgNHjG37x85JKFIT6GzqgQde4+XBb1OaliPoFoM24CAp6ql2U2EPV1jhXFye560E7u1yLX4syp K1JZEOFKp+JSLWg4atSnsnn7FA4v24k0KidC+CvKSmUqK7VtlpUcxkq0n5TXVSXclLanCX1V2WoT xDcH2kfVSXt/b0XvxMkNu3HxaBxuKX2AsjTAb//yf1Ajk76CvX5Ymk+3R1qZw/yutfmibScl0rf6 s8PxhO7sDUMc9Qu2U79ANWNRn1uGM7N3saKiUos+qNaiAW3lkPfXHVy2Cx36hkr5x3BgN61ENK28 6f3RCJSifpJe5ZS7OFfk6JerqW1U2p/Ro1DhHyqXv0RTeqVIfaEK/p1Qp6NF2dd7ltNnd29U70J/ von4geyUrBOAxkEdFdsdUa//INSe2Rkr58Ygbs0+BJEAwXKy5NbBTTi8YjlOH0yS7RmroA6tamg2 YkDmWzhu03aPnVFIPEu9QUqbMrX94NutI1wTlPQil0pQXy2Q+mq5besM8dSurgjDIdEvUVTFjoPR aqSoC2y1jfa1xZKTuSj714hfzIrVxC9Bcqp0naao07U10g5F0Kq9wXh+8SC466oQJQoO/djT59c8 yGF51MzzQ5Em4LLp743mo0Mlul2N3RyK+DyjTecccutRtuSScQrfebUwa4iyOmAv/dhneLf169ki C9l7mQ5hVCrKxB1YUrcfkrJJMq/gr/DqqiGmxoIk7EsqtDOz13dzJDIWB2MLLdc0V+aHAop9YYsH zTI3onvzCn4PI7+egLL6BpcGfhG1u9JMqalR1lmRHvVhvPF5OyyceFQxEoLxN75FeXLvxgrSH6Pq A+4NP8XkAyNM8SIb6fFR+M6/t9U+XnP/Quigw2+l5fQJM9tiOTWo2akhh2/Ar74+UmQjYQ1mNBpp ZtVWmMwM3DuFPU+3ws9HhRjFtuq96QRadq0hfXQoX9h2Nke6Yl/yiXeGY/WH8iyzLUuBs7ehz2ud TNxt5Cdb9vrSAaLNAiwY2jKYid6NFcGU/pmHS7VWutvbGPntWygvplItwtbyS2XmJYPKQFnzMmB5 wGn62TV4N8A8fVU/1N/G09aj3xTzZfup22di7nNzVSM2f1W/xEDt93KVsO0fuVfu+fTXmLhxMAnP 0nCoXWVs1J0lETD3N/QbE6i5J+qY9eVaZFmuSj9N5XHVBJmFZtP+h/Q4qp+aZ1c/BVK5Us64cJB7 bvL7rd0LML/X1CwjJ2YTX9soDxQKuuyLPavftXwhi7opBC/GfK0NmnLDwlbdpAdTf/bPGPpaG72W 2bPIl7HDqmItrUAYsP8GGjfKotzaWQ/ay92yjKgBrfnu/xA6sSlscVK/qWbt+U3d/QHm9sq8jVPd avflYfQYWl99lX4dah/NXMj5S/K60fiEtv9lpvr8cgnNWytSShuGTPVHX62NtWHMSuv6mtFYNPIb NF90CH1G+ll9VzXsye9J1OYv0dp82YUGcw9i8Bga5CvKvF8gazrapujzt+xSIF469xse9wHixlVC +LJ7qrdW+d8e7ulxYVRvvqK5lflDEIYfXoVaQiCWS6W2W2pbohcSqOHR97eEd0LQsX9EA2xZbxKa WQaj77bzaNZJWXGmfMwuv5vcWEhn47yAg462dVQfnV8wHGFTN5uctHhqNm8r+r7c2UzXnrZYWMxN 2b8wswqWzb1t5r/5i6nfaa5vx5ujfX7ywp7yOKnYh3YEio1mRsBonJzZJ6fQL+YUoeBAWBEwutZH yOHfEBq5Gy/TcrnKktRRmam2Mk0z8g1CMe5/kegUYJqirTHiY4w5Ek/L7ZajdjE5qXd9uM2GbTu1 aK/rsAP7MCoqQvNv47NBivAgBCHrIjFixRwlzIHann7DwQU64UEohv56AlNv3qQ9lUfQf/qzUiCS N/wXXwxabVpSTQOJ8Fom4UHA20vwL1pm99z7wzINtNeAcFqKt0SLszrhUWHwBozavlv7VrKeRWNL fq3VCQ8Cpi3HmINHMO73SPQc2cTMP32javbBnpeag6Q0C91NYVozQ7JpFSade2Jwvu/p1prwoNXs cEy8mIjpVxOlNPZT0nhLn4Y4dlxuyAs0X1BY/1rQUxMeCGHQmNh4TKc0nhS9C117lJBiEz3tGWxd FqfFzMWtCjq8MR7tJ01Gu5HdNX3fsW+iE+l1HDcebUNnokq1LAYhmq3MHyq8sAKj14yzMvDke0sx eHUYOveT3b/z47tYUPkj3CPBmliuOoTyev9JskD1gdo/chVlYDdE2qnfsj/glMrG6giMWBeGdv5y OT02ux/C5uzSwiTSOHbWfOldCFqm3riLd1LuYXr8PvRWwic+qn6J2bCAwwcx4us3NTfEg6S/Yb9U f6jf3OggrKxVILotDseILeHo8aqcDnd++q/GImu7WX91826Gp0InSOnZrIe/Zrj925MlvXaUxu3e mKDVFY5ydzS/i46xXnjQ7atIjIs9iZe3L0dzJa1EoI0oqYU9Vw92ln3c3o8vWgzVhAfPhO/Dm1dv YnpiPEatkOsOIAJf+7+Ia0oedZSFebxC8Gz4brwp6pk/qZ5+VU67U9PmabdnmJt34M1eFnZ6IZWF 4we1NkZYb754K4Yqe9IFp7FRSzRXG76xHP1ys+Tc8LfmVlYP9yk36ZVD7aPeATufjUp1UD3kTQzd fQRTKT9Nid6mtem73o8wtcN2up1r43bm98pDlqO31kZPwcj/7cOzIxXhgbLqo8KQDXj5twilXwIE zl6PRlkJtrKIhDHjCq5sohuCEIr+n75Kv9E4+nM8rSqk7QthBlQa8Z5Vn0F1zh7u4qynSX8sV61q vw3GzsGA1avRa1IfRS8SK5o9hT+vaEZy/SDOlTLr59Dsc9z7shA4g27fUJUkTJnQSBMeiLOLJl6k uona/Qm/hUvbXITZjc/UklbsqfZSd8/U9QeBzh+FYfCKpWiv9BNUc75jP8WYmAEUFsfbumvrxmvC A6lfHEP1WQrl97P7tHQ6/EYv7N6apHorHehsT1ssWXSw7Iv6fes8WXjQe/NhCttdzLpN/aaDERo/ LWAP48HO8vgwgsh+FjwB02iz4P1mH7Mh4FHXHzXryoaeCn2MpNqZWzC6utM+8Y7wrkNJSrPTtV// AcNm9VQsDMTAXYmY02kqkjccx22avJauXKrSA2OSSVJOSymvrxiMRWM206zAXpoVCCBxo26dFH23 VJ4N/Gmvqz+SFf/E9yqvfI3Q9wcry2g7YkzweMlt8c0FSfj96bfFI9wbvY2xe98yXfvkXQ9NJq+G T+23sHj4IqT+9CJiDwUhkJZiX5o/WlmFEYjB+7ehgbqssktHNOwTTKsF+kudav0ZCK7la+Dxjm1o ea/knakRFEv0OniTtLyM9O2G/Fn7nxQ2Q1vx0X/PZTRRloID9VBx0e+oUicYy6fKM9iqUKLmzH14 Zxp59E80wis/Sfb74pVL38Lbcu+rDYbCY5Fm0or4DG9qKN5FghYa64c7uz/TDhjsuek82nY1SfMr tRiIIdcDEOndQjq4bPvUcNTdEAp3R/KFtdc506GrNb+YKq/GqP36Fsp/XTR7nnVbodP6Kyg/rjrW 0uzMoXHT0HYgXVdJs/xGV280mfk+mgjTNBu5l5YTixmOER8M0eznyYNrWVQJehlt3D5VDncLxSsX FmvbDho8OwCNB4lOjZj9n47D217Ak7RHvxzldZfGPlZB8GzQUtrvnXzB+pulYals0FVm6vLDWkF9 UP+DQVg+60dcnN0bCaF3UZOcEQfDJcTKuatu99Zwlzr51JHz9kfLb26gXO1gfDP3R7i7m4RfHnR+ gK+Ln6WXZKceanqTdsJ5q2/WGq9Rvp2tbYvw7dIHDXqoM/LTsZ9YdFbPK7C2nL1OeUr/xa0kc8nr LuPwjhi0/OIYuj/va9OuGPQ5wt2RelAS2kydqITDPE+g1hPo+7/OqNShnlb21AAXZNlP+Hi8suIr ECNO/Qbf6mooqE7r/ybeDqyhrHaJwK/LoqWVJo6wUF0FDerfuTtIfk1LQ4ZYgu9eH/6zw5C0tAV+ vR+JpAs0UHJwAKb5ozzYUw86wt2jaj34v/EOzr63VVpxY/y7nFK2RP1Dec1NHfSHoNuUgeYr4CwD m827Z8+ZJPR7By5uybQKo5a0CqM/rfxrIlb+ZdKuOto+ZhOULD+Lg1TfSflcbqMpjcXuxeK+ndBx 1UpENR6KOz/9jJuG0IdycK0j+b3piyOwZdnrKP10NVRv6i+1+1c+H4ylEzej8/LD6DKwPqoE0rJ8 EggmHW2MlqE9zLf8ZEnL4iPtkbgmVdNe8O7UB37FFuPMtt24Uu221B8JGhQEr8j/s7Akv9rL3bMx te0jX9FWNZj1TZ59Fv6DN2FZiyFUP0Rj68e/YPSHT9n0117Nv89twoGw+xLH9KQ4HHx3gbbqtMW/ n9H6VcaEDVKbLtzvvfUSWnY2rVopF9gH/W4dhEd5uV+yY2EkhS+IBC0X8Gvfj6Qgif7g6F+UFX+k 06D/MPivGI2lY+TVMRUD2mjbHh1p68RKmV9HrpL8ajxtKwZM6Sw9i3+uVfzRlvp25ejMFrFqZNfA L9EqZZq0PdWRttiRsi/CkX75hMI2hLaj1IcrdeNFG+jZoDtCbh1DhQ7+NHFU0/H8KjwRysE+v73l EWNl7/h/0SbAAoRCkL5Cwpue8iDbkApzqmr1fGf1Ufr1aNKZGrliNMBNML9ySR3YKgeqUC9Rtqfq m7li/qL3TwgsnieBhZnEWueG8d4VXMyQBRE9lo42CQ90Tnr3n4KeH8uD5PN/xKNp8wa4+scpyUTz RUtMwgPFjptvD/Rb+3q2y711XmT6KOJydcce6bsY/JqEByYrvuM/R+8oWqa3o6Y2Ayx9pXi6uJgO URTnQtg888DklNWTC51xkZ1KPXVEMlKi0Udo9pRJeKDZow5+l59n43cSFInO3+00ufOnT6cc5wvN 0Zw/pCfRDIykghD0pkl4oLogGsTG763D4TCxRSQSl87RAMRiS4J6boAQCIn+mVl+Uh3Kxa/gLJ9V AYTsmacJD1QnK/WeiSGvfiadEh69bS/a9gqRO1CqxEg1qPvNfk9vCJ6bZRIeCKuChe8bX6DDnNo0 GHuA03tOoSZ1cMXMu1+34oijrUBrW1VATOh4+DamjgOtHiheqhzK930XE8etodtYXHQhoA5I5jta svymOtJ/7zRNeKDqles8HsNeDafTxGNxbBvt8e01OE/SQ+X1gAYt2SnVrC1zmX2zN78b064g7sf7 khc9N71tlSeEgKvtlo1IqNEbN6TzLHShKYCyLwQct2LkerDJu5/qhAemcLjVGYR/vx9OArwfcX7H EWTQVhVRduxlobko9rqu/Ry/jnpXW/WgfcvHh5zUg5L3DnAXq/o6LHse0bRs//Ckd9Fq6DpUobGO 4HtgzFuSsy2/nCZtd8t1FKW2TzQEsnKh6/wkJekrmrofR9rHwOaBOhcceKSzFmK/nI91s1Zkajmv 699MPdJ9cDS/uzXoIvdxfvoKl6+H4omKSTg2eStK+JfA3nmRaDegPtwv7JZW8JVo9C9UInmOo8qF es7yocnJKPE4HUYbUgKrfxiLpRuEi0Go064+3C4H0/M31l7YyV2UYbX/J7ahWfZNxMGjQ1aPw/xB i5D46S+49f5TJBADErd8QWfjpElnQVkHQtGhA5tK0eRDQNcaVkbSYjdhyyubrPR7rT2CVs+Y+h/X /9ilmUmkLaAnr/0jnc2gaor+0P2GtAI25gHunEqR2nVj/O+KED8QA76bbLVFrsrwD9B74/fSqlZt 1Z/ioL1t3f34aG2bXtJf8Tiz+ZokLDOFzwPJqE2vsfQXh7vUlopruB1ti+W+X87LvgiHm29TacXs uQcRmF+2PZqPC4ZPzcrSGWMlKtP5R58fQOsG9XIvQJA8k/vhyGGf35HymDaORhKKN8JLVkWTAAsQ ima6Wg0a8vvE6pZDzfdxW2JNv3hE6YiGwLcR9dpsKtMWDc+KJaXZWLVjXy2gvk0bnn7KMkWbX+3T VE/N9Wlc1aZFIyqj5fqbeBiHxYtOROKOnVK4AiZ01mayLQOqHhAFWAg5FIOWjW9e5ovkQ9slX7yC n7PqEGjhdDelfbYr6jVL+fEQihoWwgvVF/WU8L//yn6Aq9rJ6tcruJftWTxaEeHTpwRA+8QNqXJr KwQLTd5fin07R0ozEqeWL4A8dNT7EIQRMavgW1sZlOg/2XjOvpIPRfVMZpIrSIOUWPz9lw2HC4FW TvK7aTAAlKueyaiifCcMuXPnocRYzISp9WCjHn6ZhkESXNJXj+olbZrJCQthUXQY/+hQA1u18zMC 0Si0E9U5Cbi0fKM2C2nTEyfXrBTyGgJpNjI6IxK7lv8unePw98EwZXVJKNr1y5xvfkbNkfYxV+Gh Jckra3TVCYeCaNBSD8ZLcTi8fkeunM6tZYfzOwnQm47wQBytwLkYnYzHA6Il4SxixFaDtbiWMgHl DsqD3SajM29D7Q8/CYNH0pTrD/Mkq5VGPI+KVOleV2S8CUcT6AwQJV/lknvDrrbzZ7nGTZVgJ0h9 Pxc3cYXoW/iZBNHZKfeGldD4gPlZUMKOWBkwfFU/GM/txqb+rynlfhYCgupl6uShsUNxKNOvJEi4 bDlREo2SFc2F4cK6kQ40rjt0ILDDhgAmC/eza+uuhY3Ft2FZOKCbyMmPtjhTn2lbcNDy12kFrlj9 SAclL4q2Mmq1ctfKRP5oOFwe8yc47KoTEciuvDlRUDkoBUGgmIdjvmTQCerSKdOZWHer2lCTsN68 bkT56taNhrD6WB2a86COqxhQudBNBl7i6Aax+EIcqwzrwKXncM8ZWdaUMeUKEnWnJGsflAd1MGep /zDfRWPm3akjNag/4q/oeIBOQLap3Mop2nJHIuvpB5suOKzp2agt2d0sbZMRUnxpm4yFa0JgUVzR sxzQWBjN59cjSE2mAaNyo4Les/S79IGUC9Rlzfqv1s+pCaaDOa2/AvfOJCGN5APq9gW9GaMiONCv LypeNxgjL3ZB8tHfcfmUuLVBlBUD7hxaj73rY+g5EusmRkiHJVJpMVNi36qlMlxJsNSyeM87FhYO 5+trdtxz6rmR8qq6KuXh5knbIXZxr4naTVwRd/QBkuik8gaZCHtcveT6MbfCnvtnt2vCAzHb2Lx7 PWlJrQidy6IUHO7niw05GJjYjs3D1RWrEDp/9wqiabb21LTFuDayFv58dYYUqJZfjs2b1Qc2omhZ Ti2NONI+Wrphz/v1yI81gf7w/Z+a3c7U93M6d0jajmePi3lnNjf5vfpzbwDLZuHcnt9Ry7BbF6ho JOyNQeqhDZJevU41dd8cf/QKbi+1c65th9Lqh4+lLZBth3Uxc1A/g55b7smJ1A+yPIyZfLPsB4n+ Qsn6JJzOQTl9ol9NmyvLStatgWp1SVhAfyP/Z8Sc9hPJp+nYurSr2WG8oPl7WQVh2P+moxS1nJmp 4rSVSJQFUz0blOmsevKxrNvVHLd1utV5vdbuwxNVMg+fS6nKZsL+3LTFKoPsyr5qrlLQVDoPbCgS /ziKa+euSKs40tNuIXHDRzhB14WmHX8Xu1cGZ3nwqOqWPb/Z9flzUx7tCQebLXwEWIBQ+NIsn0Is NwK3r1hKiBXvxCDGw3pwktPAuJQqqw0c936xG3VmmTeywh1pLx3NxgpVpjINhF29UL0rDTepEdw+ LgyN/5hgNggTM2Wxyt5lW42J5BD9s1x9nhrzuyRN91IN0K9ocN3KCmkFaH/+t+gwbLa0DFDSUP6J VQDnVy/AmQRfPPmG+XWapkGIco2jpaxD3fuayRJWvT+ZPbv7yI4mfjobf04Mkk581psV4Tv7qbr5 zE87kE5vJj+fPehqTVl9gtiocWivO6NB9fdmxHLtnAmPspnPoGeVnqpbufuNRiTtx/z3LNqPqVc0 Q7Rt7FZJx6dNA6uOlX6gLwyJvcsJc47rXbB6/uf4f3HwlyFWPO4f24h1Sgfv8QCZndivKd++8n+Y mvoKfMyKySS06vsW5tM5IZkp/eFWqpkrP8mdZvXd+jcauxbuMjuzQjJDh4r+Ok5mUbNTUysW1u7k n44j3HMcGhJqqYLK3Us2oMGnNrZq0O0nsYtWIOXxwXhSf40jeZL/Zd9DE6zuGvotWqW+jscs+sAi 3xz4t5xWpek6spx2Wm0xSqYrw2Q1C82fkTv8qjnjzWjEKts9VL2H9eso93LaOSgRWFxVjWso2g/0 y7eo3JMOnbNsFMg70S5Qm+BQ++hgaEU7cWWrfJZPtddfMRMeCCcNJ8yvIXTQm1xYczy/e7bqTBMV s3Huo+dwTgrBFDoIuRV+aBmCHwcIAbdQU/BEDRtpIX907D+tfhiafB33//ZAZm1XXnCP7LUYDWmP vl44L/pBR5R+UIlGLVBGaVb95lzBO3Mci45qS91G6BH4H4ROD6Mze2JwdFJ7NOyeCr86ciXkUbkp Gd9Mf5Ruvv7w0XesVIfEbxqdpeIqB86tgmooEr+ulM9s0Rul5ZbZ3m6V07bOrYKPdHCmuG3MtcIT 8Gmq+m3mI52NRVtF7ot8Ifdzc9sWq65nV/Ylc8pNNE9M+wkvThkAX9Uy/bpMnoyTdHaU/mYP3edc PCZLdrPv89tfHnn7Qi6SpRBZlUdMhSjAj0pQRWWWISpc+jNmGHBfGbun3aWZfkU/Q5qZ1BGhfav3 zsrDZfneadM3YwodkqS6kWrSV59cS9WUHk+9PQ9/JonVBKTu3saVXd9jU7/ymFHhMfz2c5KsL/5T GED+pWyW9w5L/lFnSA2zyaD8JGZ+nprXVXo591FvRHwSJZ/FoBhMPbYJK5u8pLyFwp8Gn2JQX33k vyU9MQhb8sJ8XL10W+p0ZVw9jQPj6mgzYaIxMUm19Z36CEQt3a35lRr9PVb2niW5aWnH7/XFiv+f YGn7Gbh8SeFAuoYzUfi5nTfCXnwHv707X9onpxiWf9RBCM0O7//uD1loQTzEXeqxH4zBjLKP0d88 3NNJw/XpaLwr781Xw6RyzNCZrxg0RblZIhpf1X4B52k/oabSruIEHcqnNjItv+wv7eOTvuciX2ju 5+DBpU5P9O4hdxB29qlFB++d1myJzlPilg+1wa84JNG3umkUJOV3imu6crqz4JBG7xoHy7yuuez4 w6WP+iNschhuUJ4ypNzGtYOUN6qZlvW2GBioc1xubI+Mm23ifvcqYqYEY9d9pcyl6dKDbKpxEY4I HnvC94O2nFLZuY3E7V/Qtauh4hOpKWgQYNmpeRPhb60BZQtNCYYp5+K0d7MHJZ/c+WksDv9ySvok mF5Z/ZbWEUsXp6TplJrnhJYok2tmfI+bN9KkjlTqsZ2IqPSktne0uRkLnSP2PFKdIXXSDDJLIx3M J/K3lsZKHMydtJ+7qJfsqgdda6Dt189L3l4LexGrphN3pY4U4b326/dYQrdIrJu1AD+OOmAlkBQb VSUBRD6VfVEP1pn4voJlOj5/YSluyFgkvYyrMYga0EbZU0ynmb/YxYTQXhZk06OaGBAItQ/nYq7K j+SO4BBO50CcU1ZvWbYxwqCUlqKskvk7+rZIbRtslWNde6bmyazqQTlA9N8R7sIypXeHVa9ozoiH 9svHWQmMzQw48KIXSu9ZGK7V/Rk36d771R9iZenS1Ca0k07Od6R9dCBIkhURLs9GNLNM6nZMFK5S mRcq4/ZVKVzisGVVpVn2FXTpqF/Jl2W/RDimpLEQmKRdOSo5L8q/eFfLv3rAZG7yu8tjgWhG5xGo qtKIRvBp0Fo6OFHVqzvtSVPbqGra+av2p9R2SlgXh3HqhQdpyso0KZ7ie264a+Gbg8Xt38KFE1el NiuV+iW/0AoC9frsVv8NNptk0azl9IHSw5B8RTKtlkHVqu8bYXQAsTxk+GHoAqQozYln22Dp7Alx C8xn1abh4jlTOyjqz1vROymMbTGjfHl80DZMqj9dKnXGgJGPSU4LgYRoe24k3UaG1Of8QrpeXPXX 6tfOts6lUht0VG4w2vRULxyNumDmpOij7Z85BNPLlMesCs9pt9iYDNnZFpNFe8q+8Eftu16c/TR2 fX9UahdV/8UZPVcPiW048mJcVT+3vznt8+emPOY2jGzfuQm4bPp7ozKsNA9oV2M3c40cvs0z2nQu h7bZmCBgknxazrtZ82lPpwt3p8PXEL8RM+jkZL2qNOJbjP00BLbuHdbsqRbuHcVKWraodg7FwUP/ SHsHVQOAei906va36ODCzGdBhQ3Le4KFnnRX8AA/rbETej7+ATSLexyJtERLVdqJ1aQhpOv2LJkd cvgG/JQlfufoPuaVuvuYVfctf/X3lF+hO6qX0h3VJhVIj9GmV3pqMnsrQl7rbDXLl/R5MN1FLc/s mFlQXsThh2/8MVpq4NW7lm2Zs9TTxyn14OeY20ksJZSVe5MAlKP++pUYuVMmdAX7Md8OkTsSuc0X ij85/rkZRXtrTYMMuiyL0tgIY+xR3d5pOun+Et1+4CW7mrP8TvdsX6B7tivmOCQ2DQq/1pdroQ2M bRoiTfXUbu17IpWvOublS/ume1Dvzv7zg7bSbI2Iv2X+0Rmnx0C8cPhn1FWXpaadQnjFFtoqDWG2 bsh4VK0D/PXRIq18dvnuODr3rSk+y4pOtY4s31gbRKra1r8h0p3tjx38AHN6CEFaduEDng4/jA59 qI7JhcpZfp+FyZaz63Zyd3Uwv4t6JpYEkuKGEFWJspVG+VavetPtJy1trKwpiLL/14LB+FJ3j7mo O4XSl/22dItOT3GLjlAOshBXii2p2kVXXmXnbP+X81N5mri7voZu8hkpZiKzVi2/PITeyhasnOUL 2T19Paj6YA931Y74FW3RjxXkA0zFVXwTUhbnuQBB+JN+7DMSFL4uHiUlrmMWM6EmFYTRl5TDHClM ++1sH03u2PdkiJ5PS9L/myNLap3mRgLM2GFVpVslsrM4eP8NbatNTtNY9UddPWN3flcClbqF+ie0 RUWoJ6me7Eb15KUFwdIBo0Kvz55LaN5caXyEhp3KVn9K7WtJTimzyebOvkZ5bDZKHss/7uKmn1Ef 2lg9ZR6QzN9shpuuPF10SFs2nx5N+bm9KT+r38QVpHrBk3uT7qhFWwVO7txh5l9dugXhhSmdZT3q c0ZWeTLbNkv1Q3PIzrZO1E2w0S9p2K8ybkTsMCuPJRq9h9f2TpAFTI62xUpA7Sn71mUkEI3H9UAF OtQxatFGLer/OpWKOtWpEskLZUefX3hnT3mcVOzDvAjhI++G0TjZqRnwCgQnTR55Riv7wD1WStSO pOhEOtE50asyyjIxo3baqulraW0JmaL3WAAGHliFhnTFkVAm4UEgnnwvDK+cvonmrZVG16OcZEb8 q6KY1zSUh5LVlHDpPojTzFutT8RourdcDavo/KrCg/ojPqFr9e7K110p9sRhOs3Wx2PEx8N0LsmP DcYux6jtS3X6dPK4blNO7XnHETzSX/cdKN3tDYTuNr9b101nx2fQZ3Tvcrju7vdozb64L3v4vnj0 f81aeCAM+fxnBQZPf1Yzrz5UD3kVAzfvw1t7ZeGB0Hdzteajmjf/DYS7msb0wbPFf/A23V3cVYmX GOCYBhBBEPfDv7ZKER4Ih3KbL8wDk/0bHTY37Po5unN9uGI2Wgqf2mluRXdvT6bOuio8UB3MPr/7 mt98oVp0+DcU/4k9gkHvj9fyonCqfugMjDx8Wbryy8zpKn0xafsSM7Pie6evtuEFXd4sqZzS7+Gj DOIk4RPdFb7iE2X1iMnVBmM/xquXfjMJD8QnmlWVT/eWhWtC60zEAkTNXaAID+Q0NhMeCEM0q9o9 bgvaWZRHUUZG/PCJMKGomnS2CHnjVVl5F/k7EN2+CkNni/u3S3cbh+H7L+daeCA8ykl+9woubyWU g53cHc3vop5pvOgaRq+Zo6WxXnjQ5I0leOU8HaBqQ3gg4lcQZb/6+NWY9NtyrW4S5V4t+yKtnt97 2SQ8EIFytOyXaYWRB8OVWUXhkKpCMGj3EWI0SdWgXzk/CQ11Rkv30eZjKTrbRlU5yReyWfN6ULVv D3fVjvTrahrFt1/2Rr4ID4Q/bo1HY+ya6VqeUutB9yZ9EPRVJN5MkoUHwqwj7aOw54jyCJwghcvS rmjj/hN7EoNfNbWbap0mzLpWk1cuWNqzfKdLiTSV0zQuXV9evaZatDu/KxY925m2pfk2ryHpVu7a U/ma1SHOqs9Z/9rqT1WubuoTwaiLvOKUeyNPWn9ARdJB7mqI+v9K5W/FHOqnqe0LULX7cPTbTPq5 ER4ID2yEW2iXqWCKj1vgaLysa+9KK9dVe7QYj7ePbUOnfnK+SYvdaSY8aPHGJxh5IN4kPBAOU58z 6OZfGPHpDLO2UQjMh/56Ai+voKP8bSk72zrJCdEvSTqG/pP6KC5G4wQdFqqWx7ohkzEw8gje2q8I D4QpR9tixQd7yr6+Dyr3qaNxbNEHmvBArd/zTHggwmhPn5+MO1oeFRz8UwQJ8AqEIpiouY1SBm2T uJ+ehuJ09ZRrKfNGPbdua/bFUrmbSdJyNiM9u5XxhoeNA+A08+KBln7fTaFGmIJ0n06wz9a8Ylks i7tPy+1cyKK7HfHJuHlV8gfEwqVUGbpKzyw0mb5Iy7RTiSF1GYqTf3qhRqaWHPlA8UqlrSkubtQZ JoFEqQplHHEl3+wIDqk3KMEkRQPj8mXyj0VOY0GzChGVxAqEvjQj9K1p4EB5UFKCZRZKxOnvZHnJ b/Gy9scng7ZK3Cf3i7vTPvXMzhShdDXcp/ztRXujyb90kZdo70NGDtNY8oMW9BSnc0cy9SOTOKpl X1w7Z09ZycS5PNPOLXe7AqLUTWJfupHqwuJ25FstvfK57Ivl5n/TVadCuVHdlNV5InbF3cKw4epV qY52pfyaX35YeOnQq73cU7fPVK7/lWeGxbV3+a1yVPbVQDjSPqp27fgV3NQ62vWxyjluU+3wIk+M 2pvfDfGnkXLfC5XreWv+p56MQVqZ+qhQLZ/6NJpP2T/Yw11sXVNXfuhXS6pbPuRrA7P3s6BMiHxu oCZS6qdRPeghJkCyaVelsIk2WGfuOq0GXUSrQa1WIOgi4lBbp/YjS9HWVOoXemTVjueyLVaDmpOy L/qb6dQPdhd1EW35MVC7n0Hblwui7lXb/Zz2+bMrj7wCQU353P06+wqEAmg2cweQbRc8ASE0cJXk 5fnoNzUUHt6mxl3sGstWuZdBKcWKa07MKw66UgfblRoLe5VreW9lRtS+DofYC+lKBwSqSzHt9TfH 5ileng7EK8fu59Kg4FDKLI1z6WAeWBez7zaVruNi87uiKeLkUcG+/KB3z1V0ViSNLPK7GBAq+duU l3IuHMqRH/pA6Z4LpOzr/MvpY26559QfyZy+brJD4CjsmtLLLh/tNuxKHU3PnGcJu91XLZjX0aqu 8/3aw10cfPr74I+kSHTflPdnH2RGx65yqc+DkoNZ1BeZeZgDfcHNVEfnjx85CEa2RuzN7x6+9azu bPJs4A/PbH0qGAP2cBd70FXlSumlqRy2WZr5AnoQ+VztlmTb1unDZBEfN6UDldUtAXaVKdUvXT+y lBpQ9Zvlby7bYtW5nITT1N8kW+7Uz6A/Wv+hOpGvv/a2+/aWx3wNPDv+0Ahk1p1+aAFij5kAE2AC +UEgnQ6cilo4Xzn/IAJbR0xFpeo0C5Gagrqh76Nh87L54S27yQSYwEMmYKDDc3d8FUUz7GVhuLQL h+/L5wtF/XcmvNzeQaNOemH2Qw4se88EVAJ0+8t+Orz14Hr5xMKtbw3FRT9fqc0q1+4/6GhxI4xq rTD+inNJYt6difPXvaic0uWQUeFSNGIWToFn2mvoENox/ydlCiM4DjMTeEgEWIDwkMCzt0yACRQs gZS9n2DPMtMhl+JsgTNKEG7WeokECE0LNkDsGxNgAgVC4O4f83F4+VErv9JiV2L/oX+zAMGKDGs4 A4H0y/uwla6PVdWdHzdhr9qELW+G9iRAyPeVjqrn+fxrTE/Er/NWaOcSqN6J8xR2jS2FgH91NG05 VD/yLxNgAg+NAJ+B8NDQs8dMgAkUJAGx7/Tm6QvIsBSb0nkBpWnJa07PuCjIMLNfTIAJ5AEB2vd8 /fwV2mNt4RaV/ZKP10MpZ1nbbhE8fmUCqWdOQ15/oGNB+ba4dw2UzcV2Op1rTvMozq5IpbiZKXp3 K18DXpV12zfMDPCLsxHgMxDyJkX4DIS84ciuMAEmwARyRUDsOy3XIGeniOfKI7bMBJiAcxGgfc8V GxTMfmLnijiHprAT8Kxbz2nObshvlrbOrshvP9l9JsAEHCNgKY93zBW2xQSYABNgAkyACTgFAZ4B copk4EAwASbABJgAEyiSBIoVyVhxpJgAE2ACTIAJMAEmwASYABNgAkyACTCBPCXAAoQ8xcmOMQEm wASYABNgAkyACTABJsAEmAATKJoEWIBQNNOVY8UEmAATYAJMgAkwASbABJgAE2ACTCBPCbAAIU9x smPOSiA9fj8Oh63Eqf0XnTWIHC4mwASYABNgAkyACTABJsAEmIBTE+BDFJ06efI3cOlxa7B6xPco XteI5DttMHDdm0Xynl0XpCFuRhA2/mCAe8NPMfnACOu7k++dwi/PT8FlTw/gTBpar1qFurXpmRUT YAK5I3AtCmv6LMT9OkbcOd0AwVvfQ5WKuXOSbTMBJsAEmAATYAJMgAk8HAIsQHg43J3C1ztnd+FM 7HYgVgTnMaSL+3eLYI4wwh2etcT1fTEoUdUoImutUuIQtXOHph9odfGy9umhP7ggBcc/eAvHb7ZB r/eG4zEnSbPU2D34M8EANxvhKU6CmZIVaqJivSfgqvuenhiD+INJlO+s0yU93QNPdOmY7R3thpN7 cHjFapw/Rfe8C+VZBX4DRqDpMy3N/JI/mv6nRu/EodUb8CfZK052vGr5oUbXANw7shv/VApGm6H+ JsOF4MlZ80X6jXiciKF6JkZA3IHrl94mAQIL5wpBluIgMgEmwASYABNgAkzAioCuK2/1jTWKOIFy vT/DlENPYU7zUCmmrkU4vqUah6Bu9yoo372W9eoDEe8qffFO4mFEVG+B6IwHTk3CmJaAo7O/RdyD O+j8jnMIEMQqj+Mde2PbPxnZsAvEC4d/Rt368gDyxqbR+Hbi0Uzt9N17A80CbA82hZ/nFwxH2NTN VvbPrA/DZryGVy7MhrfFbLdLxlXsH9EAW9ZbS4n2zlOdOo3a/b5FJdteq4ac6tcZ84UA5OY3AtP/ bIadvu3xe/oDuHCr41T5hgPDBJgAE2ACTIAJMAF7CHBXzh5aRdBsyboBCHQtRoNmILuhX2GOfqX+ b+KF/tnEoEx91B3ugehl97Ix+HA/u7h5wMNFDoOzCH3EKo9Ge3+Gd0ICTs96CXtj0tF63nI08POS AnorZjc2Tl1Az9H4ttkbGH9jMcrT4LxC9/no/2kc4GFA/IJJOET2At7+BHVreuD+3+VQO4ttJFc+ H0TCgx8l92uM+Bi9pw5BGU8Drv+6Gl8OmkL6n+DTGsmaX8KgEB7sqlAHu+7Lub3j4m1o06cpXF0M SNy5FGEvfii5J/45C1stQNk8OGO+UIPsWt4fj/ctgd9pGxErJsAEmAATYAJMgAkwgcJLgAUITpx2 hjP7EbMqDKd3ROMOhbOYT03U69QZpdKicWh9OTy34z14y+MzGI7txOGfTkk7EIpV7YQWA5Xl11dj sP+7KBqguQOGNBSrRd/62Fqa7SUNmMQy9PhDcbiTnAYXj7Ko2q4navh726Z08zROrA1HzI4duJVI RoxVUL1HJ1SrQrPRr69H4J7taNK8rLVdshfzTRhiVu/W4lWrE60QeNIdF9Zth4v/aHRUl4+nXUDM 0k24S+F3hQHpBl80H/8s3P+5ijPhYTi0aYPkd2mfpmg1833UC9D5d5PivlKJO4UineLv1XEQGjaz HR8xo40UefUBjdGRcfU0Tv/yO+5cSUE6DZDL+rdBnY7+cM+k1Nw6uImW0i/HabEkXyjiUWfwYDQb MQAVlHSSP+Tif7oLjP8YYJBW/BuQJsZjboo0QXXWxnYA8clwJory0xopP8HHB3dJz7d1MAIGBKNy 7TKqbYd/PRu0hPi7Gz6alqunw7fLAPj6yWHz7dIdzfq0xpImQ5FkXI6Lp+ahPK0scPNthSb0J5TL timSAKFB8CgSPFjEyTJUN6OwZKIsPGgyeyv6v9ZZMVEG1Xu/ireP1sAXgbJfu5e9hH5jAqXv19ZN 14QH/fdc1uXPMvAdPAPj3BKxaPg3ZDaPEiwjBX9GrMHhjdtx+ewVKU9UaBEA3xY+uLxpOdxpFVDP kQFK2HU/qr3vluNyosxClP/AoRMQGNLKOg/mIl/ofLXr8dqv3+PwF7R1RMSLVIXmndGwV0+4J/2O Ewdd0HLaJFT1kZ2Uypb8iAf3LiKeto78tmCDVP5L1+6JDm+PR436urKrmBU/hvgYnN64g+qlfTJD 0ivmE4g24yYg4CmxNUmntPrCCKOhCuoP7YTbv4Thj++VeoL8ajdlPGo1su2XS0YaEvdsxMWjSVTm gZLVAlCre2s8iNmIk4eSpPq1RL0eCHzG3F9Hyv41qi9iaOvN6YMJUgRK12mKOl1bI+1QBM49GIzn Fw+CezbFQBdzfmQCTIAJMAEmwASYQIEQcNn090brzcfkdVdjN4cCMM9o0zmH3HqULaVun4m5z83N EkEILe8OVJZ33/i8HRZqS8FDaNb1W2mG98YK0h9jWiJueYigS8YprC+X9bL90k+/h5GrJqC8py44 iTswo04/nYb1Y9NFvyF4pDxwU7/e2r0A83tNVV9t/pZ+ejFe2xgqCTTS4z7Du81f15kLQejuYdj3 1HO0hN98q4Fl3JLXDcYnw82XtzdddIjC5Kdzz/QoBjmxw6pibZazpCEYfvhr1KpPAhlFZbUkXjXT d9t5NOtUWX116DdhZlssnyttJM/S/pDDN+CnbBEQBsXe+BO01WH1h/KA25blwNnb0Oe1Trmeddcz HLD/Bho38tC8E98O96uCDTvSYOubyt7ym+aA7uHK54OxdKJI21BMSFls8/DPpM+DFSGDYsblAiLL N5aW0ded9jNemNJG56LyeO8olni3w62G7+G1vRNyd75ExgX8VKExfr1vnk/1nurzuqafGIXwer2t 8rf2HSF46dy3eFwZnDuaL0zu2flEg/R9Q5piO6VjVkqfjvp8kZmdwZRfGujyi2QuYQ1mNBqZmRXU n/0zhr5mSsf0Y1RftNbXF7athuy9THWnhRDh2n5E1O6agy1MCzH97otSWXG07F+YWQXL5t62HThJ NwRjqQ53dAvNpGKmlTRZeMKfmAATYAJMgAkwASckYDROdsJQmYLE1ziaWDjNkxjwxc6aL4VHDOym 3riLd1LuYXr8PvTuZxqQ6Q+r8xoQjlFblqB2MTlJ1e0IFQZvwKjtu7VvJeuZBr62IxyIbovDMWJL OHq82l0ycuen/2JB5Y9wTycbuvT9UumbV/A8jL94E+/cvYvpV+PxwsfDNGeLwRRWoZkeF2YmPOj2 VSTGxZ7Ey9uXo7m/aVrfiJKaG8XrhmLc/0zhByKwvHOINLgqFzIJQyIj8dz7sp8Vg+iAPs0mzSGH fE5uR2LU7t8xZLq86sLeDB/w9hL8a4vwY7zicgRWNHsKf16RX6WB0YRG2n761vPCMZF4TL95ExN+ C5e2hwiTG5+phfi/FCcK+OevBT014YFX8HsYExsvhW9S9C507VFCCk30tGewdVlcnobM1dU8r/0d vVoSHuTWE8H82o6dkjNN3n3JpvBAfKzcY4ji1REki/S6GC0JD4Rmi4Hmgi3FIJ0lGoABkeHoO7Or 9Sy/ZihnD4YjGxThQShGHr4slZFZt29i7A+faA7o87rQFAK9iPqq8CAQz4Tvw9SrlJ+uJmL0mjmK vQh8VXs27okp8gJWUn7XCQ/KBb+Nkf87gtei92GQUg5zEqQGY5dI+XAslX21ztr+fkQWVkPwbPhu vHkxkc5TOIL+r8rl+dS0ebiWarJWvIGoLyLRKcBUn4jtLWOOxGNslMmvXR9uM1miJ8E9so5JeNDq vaXo/1WYVgeqhjsujsCr51+QhQdC4OhI2b+9H1vnycKD3psPY3rKXYh8MelghFZfqP7xLxNgAkyA CTABJsAEnI2AqZflbCF7hMMjDkNLiJVFAHVp+ay7NA43wtXbHy2/uYFytYPxzdwf4e5uGqC5lq+B xzu2QWllyas2kHb3RvUO3tRBLiN9u5ElVzp07hIdOqes3vbt0gcNeqgrBqZj/7YX0LlXZZrRTsPV qD2SS7W7dkH5CnI4XEt5o+5/lmJSjZq0emIWnbpvEiBIQpGpExXfQ+lwu8Wmw+1qPYG+/+uMSh3q YfvR+2YhNNIgtGLTllr41Y+dvtyLp4YGyK8dO8L/lc+sT/J3LQufDh1lM5UmALNGqtZz8BuIwXu3 oYE6S0m3ATTs0wPf+fem5cXR2PrxLxj94VMwJmzAWuXMhN5bL6FlZwUe+VAusA/63ToIj/ItpIHr joWRZCcoB37bNlJz5j68M40S+J9ohFd+koQofSm9voW3p8U6Z/0WBrpC74up8qqF2q9vwbBZXTTH Peu2Qqf1V1B+XHUpDofGTUPbgetQSb/SRDNt/8Px8C/xt6/IAwYk/7wcUevlcABT8IRuhYT9LtOA T4mzh48pj1m64/J4oHK+RzTuptD2F3eDYiQUlWtkbq9Shz6oZOmYA++px/dJtjyffhLVleX5Ij9X 6vlvvHO2BpbU7YcH1cXWHJO6FfGJMgMehJcurMPj2gGQ7qhCWzPeOV5ZmZGfg/07Rknl0aF8YfLS rqe/o8OwTll50HzRXvTRbb/wGk9lv7kf5vbIeoVR42lbMWBKZ9nfWgMxMDIec3rMQkaqQTqHRc8D NQeR4GWQbDYtDRm0DQnu9eE/OwxJS1uQgCYSSRcMqKSsXJDri47wrkNN29F01H79B8rzPZU4kl+7 EjGn01QkbziO2ySAKaO0gHcilyvCpSCMiFkF39pK3TpkAPx7LdDiVLVtN1SoLJc3R8t++uUTtI1H BCmEtkTVl24KkW6KadAdIbeOoUIHf/x8tGauBVhKpPmHCTABJsAEmAATYAJ5SoAFCHmKM28cc3H3 g1+34oijjvraVhUQEzoevo2pQ+nhgeKlyqF833cxcdwalK1gMXDMpff9907ThAeqU+U6j8ewV8Ox cmEsjm3bhQ69BtOAxx1Ve9DAfMePODSuOZJ+GY76LQLh6eUBF/eSKFfnGVpZ8DIq1jLtqzemXUHc j7JwoOemt03CA8Ujo6s32m7ZiIQavXGDBlVZqafDD6NDn/rmRvSDZvMv0pt0RaUN/cy0mi9aYhIe KIbcfDuh39rXpa0liZ+ux633n0LGH7s0JxLjo3Dy2j/S3mlVU5ylcL8hrXuIeYA7p1KsB0iqwZz+ UjxdXEyHKAr3bV2BqDqXnhSvPAYh6E2T8ED9LgYujd9bh8NhQjASiUvnaDCWya0Hqp2c/sbOe02+ IVRnQayAGPbpBG3gpvuU5aPYm34n6TaKl68EKgaaeqDKBDQd2w96YZttE1no3j6K/Ut3kgBC57EN 4+nwQePRA6StQ+KzV/Oe9H8zUn96ER+02YgWwW1RzkecNVISZWrVxHP7T6Jiwyc0l4Rg7q9Na5X3 SNw4sBPJqSnadzrIBG4ZSRDjVzEAvZ10i74p22LszBc6R+16TD2q5vdZeDpUEeDpXPB8cjxGvb8P X9LNGFLe1H1TH5v0a6M+Sr8eDdvIcfrpZ9w0hJov26ezIOLXfo5fR71L+fOBmb3MXgRHVbV6vrP6 KP16NOkMP1qlFfcgAWliBYfSAl4/GCV9D5g7zSQ8UGyKOA15dQ7CF95BBuVDkQ5CXXew7Lv5NpVW XZx7EIH5Zduj+bhg+NSsLPEqUZnOufn8AFo3qMcCBIky/2MCTIAJMAEmwAScjQALEJwtRSg8YlDX 5P2l2LdzpDRQOLV8AU5ZhdNipszqu70aoahuuf9YcaJC80B6isXff5ncrPyvD9Bh8s/SEu2/IlZA /FmqoE0n0KZrDUlbXN3mQQMfocpVLys/WP4v3wlD7tyx1LV4D0XjZyyEBxYm8uK1Xnvbfnj6NVCc T4YQSihRkvQOjR2KQ1l4fv9yDke7Wbhh76fkQ9slK17Bz5mfYaF3yN20akI/ONcbceS56/JdaNjE BfFLxmHLsljJiVajRjh0oOT9M+GY2/wVNJh7EEPG1NKCUyyLMb3xbgru0EBbqDSavYbr3/ILjiD1 OuVDH+U1m5/0y0ewddbMbEzJn8t0eVY6HFK8FW88BINf/RyrF8YgLXYTfqM/SyVm4/vRbLzZrLti KKJ/iKVxs/d7hoLPT/CQ80qlEdUyPeCv+vjVeGe8WVDNXiyFeS5lfVCFBvVJtOhKz0GsWvqjQw1s 1VYlBaJRaCfyNwGXlm9UZvHNnLZ6sfKLpBpqPaT6JQQOd2LkGrZWez8rN4SGT/Ng+v+NzW9C066y 7x6AoOWvY/FwccYNHYi7KNrKXfdGb2Ps3rfsFrRZOcQaTIAJMAEmwASYABPIYwIsQMhjoHnlXPG6 wRh5sQuSj/6Oy6cSYDCIoaoBdw6tx15pKXgk1k3S/CvCAABAAElEQVSMwMSNYkVA9sqYcgWJWc7g 0aAqmQZV2pJpk5vpd+kDKReoAzB6KeGHLhcuIfB8NBKPyrc2iPAZrhxB1KKNkvnIPv9FPeUwRyMN tuWbA+gsBDHz57BKhnBLnTl02JlsLCYn0uDMxjL7dIOOgeSGzAYIwrD/TUcpM5GCuSfFq9bLUVqZ 28rdm2ejtuTAZmnJ9l3ipi7Z1rsqrv8rrmjkLm30rgKV/Fuiop8LKi3aAbdLvtL5Bzt7vYR6SQ5s k3CTz8V4jEZ/QsBWspoIsQFxa/ah2xA/m4NZw+Fdyqx1CN0yQbP3/zRUZn6jcfSXODw+1PZg0TwW lNXcy1lqZfIeRMvbTRINEc5603Zg0sgE/HkoGrfoNg+h7icn4vi8BdIA+NjsXmjQx/ywSWFGHFz6 r/+jLTJSuRc61qp03SbWmvmuI+d3vTAxv7y8f3a7JjzotfYImnen8qO0WC6LUuhATjlP5dZ/kU6l W5PAcEcMrbL6nQ5X7GzmpBAwxH/3vZme/OJ42a8UNBVT4oci8Y+juHbuirRqKT3tFhI3fIQTdINJ 2vF3sXtlMG0RsZ1HpRU5F8RNESVRulalAq9XbMBgLSbABJgAE2ACTOARIcACBCdMaHGg13deLWiZ 7f9hauor8OmiD+QktOr7FuYPX6TXtHpWD1FUP6TG/C4NWLxUDavfaOxauMtsj7xkJO0ofh23VXqs 2amp1FEVHerYkeK2Aj+MuvQbmjSl7Qw69dRo08npWjhokOpFK/lBq5B3L9mABp/aEHzcO4XYRSuQ 8vhgPKle46hztyAfI3t9Df+U181O4RfxjntfPuG9RKMnUcadBoOVm1KwNtOfBx7z9QetULetxP5t i0MFbRvMXtckjFGucTSNWWXLdKWfpGhZu4eXOs3+CWKjxqF9V2XJu86bmxHLpUMphZZHWYpUHil1 ubcRZdH0qwjse+IZyoORWDM5AmM/DcmVLzUGzQQWvo47P43FyZgh2m0kqqMuSMKRqXOkV8+ne0vb Clw8AtAspATO0S0bB0ZNoysA6YwBFY9qkX7FdZdn6BrC2gM6yunv21c6AFFnJEePyetG0y0g36DX L5fQarB86J9qsfPbw7FNORtD1RMDWc9a9ehVnBXhDi8/ujJUv8RFNUi/GXfT4Cp9VJZYkJ49+ULn lF2PrqVqSubFtowzp4LNbvtQHZKud9x6AU3fmGS1VUk1k5PfZLrOUFaz0JyuTdQLSo03oxGrbInK iVvZmakY0ImMxOAMCXQOtDqBlurKKSrzf64Yb/PwTw9Hy75ys8QT037Ci1PoqlNd4FwmT8ZJOpMk XDlXRffJ9Jh2Ctu85XNVZM1ZmGxRV5kM8xMTYAJMgAkwASbABPKWgBjSsXJaAm8i/K01uKtbqSwG sSnn4myG2DSAiEDU0t3yHl8ymRr9PVb2niXZEQeV6WeZjeS4ujLg3Ee9sWbG97h5I40OLUxD6rGd iKj0pHatWXOrk+ujsbLHDFxNouXhOnUrIUH3pjy61kDbr5+XXq6FvYhV0yleyunpwi8x6Fji3Qzr Zi3Aj6MOSGcFqI5k0CysWEERnSHvgU6jwROtSUeG+Mtihlb6LszQzHu6stzbKA5howG2+k08q8qY YcB9bTw2HfPbz8Dlc7cl84bEGBwQhw0qVzy2nxEiDe4829IgSrr5IgKfVZuGi+fkWWbhpojXreid +KVfW8woXx4ftA0zi5fqr92/qjAGkdj/3R+ymxQPQ3wMYj8YgxllH6O/edIp/S51eqJ3D1kosLNP LToI87TmnchLiVs+1IRRXsFfwbe6iYdmMKcPgiXtWb9zVhYbpaeZWEBsTwkbJ7l0LewF/P7zBZOr lEZ69ukWaSSlX7I62ytbKx44BD0D5HUTEe264uRRnV9pV3F4XGPtQM6g94OlwacYoPtNX6L4G0k3 GfTHif1KOAS/y6eJ32DMCXwG614KQtxxXcEzhTbHT+mK9GzrU71w4vBVM3vpV6/gmpydzfSrvzBB er/z0xtYNTYMKfpop91G4vYvEF66NGZ5l8eGlSfN7IpN9JKQLgf5wtxizt/KB4VqNwWEN3vBLF4Z N4nflLZY3DMUexfNxF+XTPys0lfnpTElTauD0nQ3KnhUa6qY2odzMQo/yl+irgins1LUMxGk/KJz T+TBe2oeFHlJpzLzq3S3iehQXG4Ot/RpiHnBL2PP/Ln4rnRFfDnG9tYFR8u+Wv9enP00dn1/VKqf 1CCKs2KuHvpHerWRPST99D9Nt4nI9qbj/CkTa9Ut/mUCTIAJMAEmwASYQH4QcNn090ZtyKT3oKux m/41x8/zjDady7F9NkgEaIYpvKJYgWDqQtYNGY+qdYC/PlqkdZy7fHccnfvWNEN2blwlrMxq9kox Le5or3NrgXT6ORBIutFm7li+6A8ulFYgDBMrEEyd1qrd+6JugB9SY+bj0A65017llXVmtw5INzGM q6PdWiD8cG8SQPvDj5p513vTeZoBlGfKz03xoQMc75h9t3xp+eUh9LZYjn59zWAsGilWBmSnQjEh ZTHK3Y7CEmmGnI6lo3GwfEq6bbtVXvkWoz4M0WZEDQeJI53srir3Jt1Rq4oLTu7coWpJv3Vpv/sL 6unzZl/sf0n6PBhLJv6YqcUSjT7CG3+Mlmewb0ZhpW7AJdLbx98II3E3xZNuxrhEN2N4Zepkth/i KO9Zz5yGYLyyjUWkv/my8xAM+7o0Vr64Mlu3VQPNFx0yLeu+uZ8Gkl21clK1ew/aQgKc0XFvR7d1 9FBv61AcubX9A8ynW0KyUqWfnocxP7xstgIlK/O2vl1fM5ryoGnwKfJFi55NYbxxBHuX7VSsvIbX U2abbS25tCCYbs4wpa0oW6Vo3/+ZHeblpCeVk7YWK0rsyhe2Ap0DvfRj3+Pd1qFmJi3LjNiCMeaH CTI/ZcZdb6Ha65vx71lPQV2lof/W5fvz0u0SoOsOl1TtosujelOWz0o+S9yIGY2Hmn2sNOJbacWL Lb/aLz+M7gPry+Zvn8KeEW3w8w55AG/miPIi6s3GurNiHCn76WfX4N2AkTrnA9F4XA9UQJy2/Ut8 /NepVNSxIdCztg8MOXzDbDXIpGIf6tznRybABJgAE2ACTKAwETAaJzt1cOUpF6cO4iMYOJpJVA/6 8vEPkACciViAqLkLFOFBkHQ/vKXwQBisPe84gkeaL5cu3e0NhO42v2PcjTavuHnJg3RZeBCIbl+F oXOPEmbAS3cbh+H7L5vdeiBmct3KyllHCACEurxzI4XvA0140Gr2eoS+b35loVjK3njRNek+e+Um NDPhQZM3luCV8zc14YFw19WrjfjJUnmWslzDT/aUpdZZWpQ++siCADocThzkJpQYVLeavRy9JnWX 3k3/gtCH9mKP1gkPxDePFuPx9rFt6NRP5p4Wu9NMeNDijU8w8kB8ngkPhJ8+/1mBwdOfFY9mqnrI qxi4eR/e2qsID8RXmv0fdv0c+k8frpiNxpUYk/BApNVkEqLkRnggHC7uWVtxX//jB3GAplDyVobt 2gw2UBMoaZ/EorSnLq3Lt8KQ68fQ91U5nS6T4MAkPAjCoF3xVsIDEY5yPSfj7ehtaG+R18U3cbWe SOM3NuZOeCBcchXSDEkFSkIpkS9+ozKiCg/qj/iErjM1Fx4I49XGb8CE7cuVlS1y2TIJD4LQ+aMw vErlxFJ4IOzalS+EBQeUW+OBeOfPfeg50nQGgyqIcm/SByFr9+G1jYrwQLhv1KWZ4l/5cjIcI6zT v5R6jWiZVhh5MFzjYApqCAbtpnK4ZpJJi/KSlM/oFFC1blE/lqkg+2FUDoBU9cVvaeWbpFemPjqu v4VJB3dj8LpIvLw7kurNI5h+9ybdRFNab017dqTsi7pXVVX8xUs0ji36QBMeiDr3+b2XbQoPhL3i vl3Qu5+Jqe/YZfCtZ3pX3eZfJsAEmAATYAJMgAnkBwFegZAfVPPCzbu3Ybhflvaw07V9tBQ+PTUN 99PonnRXD5SqUCZbHzLI/n1aIODi4Q73UvIS9mwtKQbE/ur76bSNwS1zu9IWh2QXCgsJHGj5dwYt V5fCl07Cj/JltMPOMvVTLBm/mQSXUmVhJP+K58ROpo7l4wdaXm8wiBUV7jk6HyAjhdKNjBN23Bd2 hHCDziLIL6XlDfKrOKWzeshcZv5J6XZDXe6fw7TKzDEn0s+4fRW3kpKlELmV8oJXVe8chS7j5lXc SRYraUqieNmycn7Okc2cGTJcvQ0Pb7m8SuWKMkcGbZVxK+NN17Jm74aBwpfhWhauojzaUZbtzRfZ hyQTE1TPiC1WHjQOlvJ7Hp6hoffRcJU4kIarO9WJ+eSH3j/9s1g5s7ddDWlLjOUKBL05e8q+yHfp Ig8I+YGoY6h+F/nCnviJ/ARqD1w9rOsXXoGgTxl+ZgJMgAkwASZQuAg4+woEFiAUrvzEoWUCTIAJ MIH8JEDCTUmR4E8IYs5/OwFhY1ZKWpltK8jP4DjiNgsQHKHGdpgAE2ACTIAJOAcBZxcg6BZTOgcw DgUTYAJMgAkwgYdBwBC9AnPaj7Hpda4PGbXpKmsyASbABJgAE2ACTKBwEWABQuFKLw4tE2ACTIAJ 5BeB1Cs2XQ6Y9h2didJXOzjVpiHWZAJMgAkwASbABJjAI0CABQiPQCJzFJkAE2ACTCB7Ah5PTsb0 P0Nx50Yy6PZXiPM0Snt7Z3u2SPYuswkmwASYABNgAkyACRQNAixAKBrpyLFgAkyACTCBPCDgWt4b XvTHigkwASbABJgAE2ACTMCaQJ4LEPjwJmvIrMMEmAATYAJMgAkwASbABJgAE2ACTKCwE5Avvi/s seDwMwEmwASYABNgAkyACTABJsAEmAATYAL5SoAFCPmKlx1nAkyACTABJsAEmAATYAJMgAkwASZQ NAiwAKFopCPHggkwASbABJgAE2ACTIAJMAEmwASYQL4SYAFCvuJlx5kAE2ACTIAJMAEmwASYABNg AkyACRQNAixAKBrpyLFgAkyACTABJsAEmAATYAJMgAkwASaQrwRYgJCveNlxJsAEmAATYAJMgAkw ASbABJgAE2ACRYMACxCKRjpyLJgAE2ACTIAJMAEmwASYABNgAkyACeQrARYg5CtedpwJMAEmwASY ABNgAkyACTABJsAEmEDRIMAChKKRjhwLJsAEmAATYAJMgAkwASbABJgAE2AC+UqABQj5ipcdZwJM gAkwASbABJgAE2ACTIAJMAEmUDQIsAChaKQjx4IJMAEmwASYABNgAkyACTABJsAEmEC+EmABQr7i ZceZABNgAkyACTABJsAEmAATYAJMgAkUDQIsQCga6cixYAJMgAkwASbABJgAE2ACTIAJMAEmkK8E WICQr3jZcSbABJgAE2ACTIAJMAEmwASYABNgAkWDAAsQikY6ciyYABNgAkyACTABJsAEmAATYAJM gAnkKwEWIOQrXnacCTABJsAEmAATYAJMgAkwASbABJhA0SDAAoSikY4cCybABJgAE2ACTIAJMAEm wASYABNgAvlKgAUI+YqXHWcCTIAJMAEmwASYABNgAkyACTABJlA0CLAAoWikI8eCCTABJsAEmAAT YAJMgAkwASbABJhAvhJgAUK+4mXHmQATYAJMgAkwASbABJgAE2ACTIAJFA0CLEAoGunIsWACTIAJ MAEmwASYABNgAkyACTABJpCvBFiAkK942XEmwASYABNgAkyACTABJsAEmAATYAJFgwALEIpGOnIs mAATYAJMgAkwASbABJgAE2ACTIAJ5CsBFiDkK152nAkwASbABJgAE2ACTIAJMAEmwASYQNEgwAKE opGOHAsmwASYABNgAkyACTABJsAEmAATYAL5SsAtr12f++DNvHaS3WMCTIAJMAEmwASYABNgAkyA CTABJlDgBCYV+7DA/XRmD3kFgjOnDoeNCTABJsAEmAATYAJMgAkwASbABJiAkxBgAYKTJAQHgwkw ASbABJgAE2ACTIAJMAEmwASYgDMTYAGCM6cOh40JMAEmwASYABNgAkyACTABJsAEmICTEGABgpMk BAeDCTABJvCoEEiP34/DYStxav9F54zyvQuIpfAd23wAGfkdwoL0K7/jwu7nHQEnzxcuSMOf69bi SPhmpKTmXbTZJSbABJiASoDrGZWE8/3m+SGKzhdFDpEjBFJ//RwbJu1E8bruuH82AbWmhaNdrxqO OOVUduIXvIydu5Pg5emBm2dc0HPVMvjWdneqMNoTmIyrp3F8/Uac2LEP6YrFEtXa4slpk1DVxx6X 2KyzEkg9uQcn1mzH6aNxShA94N06BE++MQCPFcIaXHQI4mYEYeMPBrg3/BSTD4yAawHAt6fsX988 Gete2UyhCsLYG+tQySP/Apgrv65FYdOzC3Gb6mm3uwlwaTwDg2b1yL/AZuGyS8ZV7B0xGudSPVDc Uxg04P6ZkmhfWOvYe6fwy/NTcJnaCpxJQ+tVq1C3dj5mBAu2ucoXFm7lx6vx7AZ8NXyk5HTI3hsI DCg4NvkRn/x2UysfkPOT/4Jl8G9dNr+9zVf3XZCCmJmjcfSoC3AlATWmhKNDn8LfT8xXaI+K47q2 CTSGcDRvcD3jvBmmEHY/nRdmXoRMNDLnd/5Bg0HToLZ4xZp4vGU9uFHH+/KuKCQbQM+ySjdWQb1n muR5BzztfCTOxP4IxMr+lEn6Oy+iJ7mRHrcRW6esge+U+fBv5Z1n7mbnkBi43FoTjstH7+OyYviu 4evsrDntd8PBBZjTaaqN8O3A3VpPI3RiUxvfWKswEbi0IBhfTKVyaKHO7NyIikHPolkh7LQbqW7z rFWPYhSDElWNFjHLn1d7y75HZT8KiBAg5P+gKDd+pd+Ix6HY7Vo97ZlxS1oxURACGcuUMqYn4syG H3HuwQOzT4GFtY5NiUPUzh1aXAKp3S1IlZt8USDhLOujeeOmdkg0nUfjQQygj3/wFo7fbINe7w3P UqBrWT48jycWiADh2pYPsGN1Gp6aNz3PJxWMGck4+/EWnMmQy3yZ63nXT3w0clDRjaVl2+Rw3uB6 xmkzySNa7TtteuD+yfUI6/+6VQDH3riLSi5xiHg2BEkWfW7pWx73cyu+sAZTglNwdlwDrKWZwrxU yX+E4/DOzTA+O71ABQhi4NJs10U0TElAZJ32iFYavbyMW0G5JQZEZxfOkrxzbzIMzy19DZVp1i/1 rzjcupKGyt1YeFBQaZFv/qSdwp5pP0vO1xjxMXq8EgR3l2TcOXsKqYbKqN0ojwt9vkXE2uFSjUNQ t3sVlO9eK8+Fn9a+AfaWfTefZmjWvQfuVu2IUvncSubGLze/EZhyuR+Sf3wTS4d/A7f/Z+884Kos 2z/+O4JCCYKiiGmKA7eAI1flNtyCOXtNxbLUnJWZvubK6m/aUsuWib4VaL7iXg3FXkemCLhwoqYC mgqKBXno/K/7Wec5CzkHQY3r+XzgPM+97++9r3t5WTUO9mAUlppHCP517jT+zDbA3f06tgc1xV6j pTChsLwuFHcr9cas1HjEVml2T9qKguSLQuFh7WhpX3Ts0xvns8rCx+/BrYuso+XMtynnLBLnfI3k v2+i3ay8BQgQ5SPtIk6+XhPRX/2Botg/LPoJaV/NxcmtOQid8hoJEO5yOrlVQ8T1CwiKrHHX+4nO pAObvf8ISG3T+T64eWgpFnW3N9GVzzBzPZNPUEVvrJC7RkUfoQfdR/egPhj8cTq+H/OuJCgIfvUd 1GnRHuVEvZ8biK7RUbh+8Rj2vjqX9CPQM+oFlCmEVDS5ecDTxx9VevUD/vufu4vV01dyrygaUJuA e5SBp38wgsJLIeEuC0Zs/CpMhdyzOBT7F/kQimfWLEagMhnkG1QbVQrTX3a76Aj8lkAdUzEAm4KB i17Ew7RKFKiK8vWCiy4MheRThb6vYXDfQnLckbNOlH3Pur3QO7aXI5fuqnpB/fL0KYOAZu0pTP+B MUvKJHc1fM445lbOH9LuBVTAo71LYe+DXMeKiJepg6ChnkigAV9RPwXNF4Ue3odD0OY/3xa6N/ez BwZ3T3gqRS4/q37cSlNZbfs08NVd7lPlAcngVch1gptP4fQT84gTaz0YBDz9qL9dxbxSyaVQcz3j EraisFQIQ8+iCPZd8uPaCSR9F42jWxJpIRrwd6oB5du2QPCAAajT5B7t4/LwR+1nB+LwuPlIpxny +oPGol5dtYXyQfWe/VAj9zjOvTYPOT27o1m/NhKMrP0rkfS/dGlrQ4kaYXiM9qGl/rwV5w+cgzEn Gwb/QNRoE4aKNcvYh5dzGSnb4pB6Ok3Sf6hiHVTr1hYGZbBv19KNczi5aSvO7NqBK/vP4qYwRFsq 6r04Hq2ebQMPB7krN032w5itrGww6ho4dwczaLmZ+C12BeK/XYpLlE7iKREQiNBnJiA0orljv+iM gOObdiAjI4dseFB/sDGCOgfD3efuiC+EhP9MzDKkUpSoLwFjhgG1nh+BiuVpu8mWFUj6Zg3OnCJN U3U0mToZLXpZDf6I4VESCsVHbZX5USi9a3ZB4xcGokEbsczb6rlxGWnn0oGcY7gtaSXg9xNJ8Lpi gJEOQfCuUQ2mW4DXI7bpnE0H1yUti8KBrQmao+XbDETz4UNRrY7VXsycc0havA63PD1ohjgbxuzq aDq+Jzz+uoyTFN4D69bgeir5F9AYzWe+jdohlvbz65eenwhU5afC8fDVHdj9fgwuUT4RadxsxEw0 7WaHhRKLKz+vRPznMTJnUvNr2g71u3eBR/peHN1vwGP2zoNwlju5m32S+H0ThRPET+R1Ebbabduh dE4CDqwui6e3vgV/WTZGuq4/2ZdOIOMq5aXj5xRHEnAl+QQ8jHIe9q3qC+NtGqiVt/VDsEhauQap v5LZRyiBTIEI7DUMjSKego9V2IwpcYhfm0Sr9Gm7VHYOSjzSFs36ByP3chISl8bg6JodUjz9mgyk 2bVx8Lfjn20I8lC5loR9y+Nk/8iYkfz0bTMA9ZvY38Z0neJy7ADldXp8gsNQ7dFUHFjwGaXpWbme GUr1zIg86hlnyz7VMUe/WEZtgae8KkLHRAqE/h/Vl0nE6JZqlspIrqkemozoDE/3TJyJWoHUDLlO ENZEXMu3H2IuJ874pfNXlJfLVK+niHqd1Ev6BuCRVlSvm3e8aaazD29D/A/H5TZBSVtJk9J337dK Oog41qB0t66XyGB2ShJOrBV+7cElUYfRUyIgFC3HTkBIB8flUZgT4Sz0h9rvo9R+J23dKtVFou2p EtYWlSvl4MgrqxG6cwsaNZXrJVdZSPHIFEI8OS3FmTMnftqLm2mZ0jZDn+CWqNUm2Nz+6NgaM4WZ 6zhP5ehkkgFPLV2M+vXPYuf0dxC/NQnencdiwMez8GhlXeK5mC/gBAt9ulzZv47ahBicEGWKHu9a jVGrYwvkHIilrSgD8a9FA2jVk6Sl/UvdsBwpp7Kl9k6cc2HMroTQMXc+jyX7ZBzVnyuk+hMBAVR2 gOotwhHSL9ymX1Kgsq/2FdZukfMt5Qu/ZiGo3iwAl9YthUePT9FleIgWH5dfqN9i+isb2VKXJRvU zaJMYgXLTn/GqJzKWspwA6K+1rd1LcfOdFi2nC6Pol/lrvSxKGiiDpK2ZOWnv+UkFDVOnkJYofQl r1y8Lvn5UOUQ6nO1gZdV+6N54UJbLOw63e5Tvkjdtg0n4rbjtzi5DRfuVHlqJFqPHQI/pX0TZf7S qmVIuSDKPKUv9eluX/wJO7/ahioRM9B9djgy1n+AuJhEpCUl4sn5m9F+VBublXT57QOJMDj7XKEy eFJXBnNRCfWH9YMP9UHV58oWMpOcSXEQ9Yton6ojZERP8zYbZ8Y/BegPinbK4hFuLV1rbjspX5ai NijUqg1ypp4RfZl91Jdx9zTB4BOK+h0DcGbph0hcI6dz+TYvosOUofBzkAcNuTlI3bkW5xPTpXZV 5NkaT7XA30lrpT6IGMqUqh0G9LCISbH/MKz7c63dEVtHU2eX4Mw32XXOJbcK05LYF7ZowGyHXviG v4XhSyZYFEiHhu+yhoEEBKvLyssm++27ioZWS5VV/bM9P8e4bwZRBzEHB1pXxFra23+np+G01egz Jcyissvavwzz2o7O02rThQfQa3hdzYwaBkfbAEo1eAsTf5mgzJqStdSt+IRWV1hvv9AcVF58w7+U 4mQhzU+NQ3TtHspsrLUN8R2B509/jUetBJ0Xlk3BF6MX2LOgqdnjq2nm5yUnEZ/4tbaIV+/1m5G7 KBwbaNmg5WN5IJs4qHJel5ctjei+fMPn48Vlo8wVPuld/aw1FrycqDNl73UBpt96Tktj0SCe+Wgo oqaut2dYUmsyfyN6j2qn6RuTP8WbTV/RvgXjyB1DsKfD0zbpoD8Iz2m/iN+Mcq11/th/bbxwF8KH h1pqUkO0Z1BjbLHhbGnMOo1d4Z61ZSbmPT3P0mGrr7txkJjg92u5Clifo/QyrfxQPwPf/J/lGRd0 4NvOTs3xY6JNc61aQY91R/FYx2rat3Ve8g1fhH7P38QXPaZoZtSXkHm70Ge0FX9VM5+/GasG4oOh lnmwMdUr4bp6RXVKcNhbtgI2/ZU3B+9OizB2TaTNIMelsn92BWY0GK4GQfrV5229hm35kHWl7WQl qU7wsawThK5Fmjnhl+bvlX2Irdkxz+X0+vrTMn0jMP7q19JKtqvLqA4Zba5D7MbRTvi0cNBLnTk/ 4pmJLfVKFu8i/Q4NeURa1mxd/iwMuvpB7cmMWn3ytK2vM1xloY+HY88iMDR+CWrU8cDVZeHE1vbM Esd2J2Jy5hxzHW+Hu9300TvoJAvV6rmZlfDVvBvqp53fCDpA9GuLA0RFu/+tbzOrNsCyXbN2SJwT cHTWUMS865hL6JxN6DWxrdRmFajs557DD34N8fNtWehjHRbxLeqMiWsjtfbRnpk7qZ2d2QpL5yXd yRgGxV9F3Tq6UR3Z+H3FSCwc7ngFwmNfHECPZ8x9LckTO/lC77l1eczaMRfzujvu36p2W38Rj7Bn 6qifLv/eKU7C4bDv4tG6m6VfrrTFcLHdPzbEDzEOV0SF4vlzu/AoCRFEHl9Gedz6LJe84LRfeQbt uleUjIj862x/Ky+3rfUclY8+NFYIUcYK9s2EUnneJZVnZ8c/tu1d/vqDIuzGUyvwZshwaGMIu3nZ qs/qZD2TTv3iT+7YL6b6LJ3qM3mJnBlrPtpV2fACXM++Co8iHOKaTJPN4bwP30rch2Eq9CCJw+fM woNIPPPzUUy9dg1TUg6i7/Sekv8Za/6NzwfEFP4VXnchttL+3i0nMGict5VrXdH1yygMXPIB6paQ k/rwnD6Ieme7Zs6YvEInPAhF50XRGLYhmiT0jTQzeb+Eot38aIw7kYrpl1MxYsk4yfhfR/6NE0lm 6XfebjjWFZV5bB1VeBCKbtF7MPXyNcmvkSveUSzG4suac/CHbuz0+4qBOuFBJCJiYjEsJgpNgx0s i3AchLx1aF/jkF/3YERcLNqGyG6v7dlVER5EIGLVZgxb9g4qShMTodp+alGpqsIDcYaByIPTKQ9O Tz2KwW8PkfzMWPMqlk/dbOF/6RYT0DpyAtpOGo+aSpqKk+I7TJpMapNJkj4Mnb94zKJzdGXVeE14 IPbSj06itMqk/H5qj5bO8a92x46N8myv8LBkUCTG/m8HRmz4RPEnFkvbRUgdx7IRkzBo82Y8rYSz fNeqmn9O+0X8JiXsQd9xT2nx9Gg4FkP+d5DUt6NjWClJ/eDYL3Fdl76igTykEx6UDX8Dw8nORHJr gBIuzUHdiyvcRQf40OwPJVdER3cqnUcyK/MPTE/Zgx59zJ3Du3GQmCjLVT6ZhqZjKT3H9tZCLmYr tTSm9G/xRGVNT4RvT6cWmvCg+ZxovHxeLo9j4pZqZX9Dr/o4fMRcJv0Gr8GoHTswbMlrklsZa8Zo woNGr36CyC2btfzhX62S5p+rL74Rn2EUuTlix14Mmi6vxHHUAAkOzY7v18Im+xmKXt/twWsnqZ6e JAu4b/4wBiknzHES5lwu+4EDKM9vJkEZ5fsVMyQvH6rtIXtt9b9k3UhM2BWNUDc5Bh4NX8XwX1Pk wZYb1QkHD2LodHW6IxQR3+1Av+GNza444ZdkiQRt0TXMwoOQNz7BsxvMZdDssPnNt1+0rvzSDjhF y2/gGozYYi7bjuIoG6dtctE78JrIT78R93Fyuh2fNh9Xssx+FfXbxZWLJS+FkHX8+WuYdesWtQkp GPy+XHcKzRK6AzDvDgs5lmb242UFxGJZkw74LY1WPw1ehpErxirqgAjfaF09JjQazVmNsZR35Pr7 A5w/rcu/zuYLcs9ZFlLgbuzDxvmy8KDH+nhqD25h9o1rmLQ/VsvTkjmrfya3OoiI34XIzTswKi5a adeUFTtWZtXPCx910YQHYmJm9KEUqa3T1+8J07ph41fJkpWClP3sg2sU4UEkhsdfkvKFiNeY/36g BofOQ3lIe7/XL1K9sZfauv2btf7DryMWWbR1lmHMZ3nM/tPSmoOv20SjMB7RHg+i+mngkne0fsrW fk2wN87cx3CtLXat3RdxNCirThu9+gFeOJhC/chUiPZR7psl4NeVCRIKkcf7J+2y6JP0WL+HyrXc Jsi8SGhI6TZQGS8c/PYnrX51ug8kO5jv/6J8hOxbr5XTSi8twai9x8wTjWJljDBzZD9GbXxbc7f7 d0ul9smV8Y+r/UHNc93L9eRj2peUT6guGXdmsNaHFJrO1jMVRV9G66vKzreYvxrjTqZgxDI13WLx yzq5jlEDIMYXm2uZ29Xmby1GXxozhen6o8Jsm0WxUhiLUnighvF+/r3Lo6n7Oapy2AxIx95Ob0gf Hg3ewJjdr5vPEPCvjUaTYxBQ83UsGroQWT88h0MHuiJUWQZ5X8eujD/qvvgRsGC4FMwKw5ZgxEcD taWV9QcOwLGZXRBNUvPzc3rgbOQtVA9Ix6/DX1SiNREvXZyjLcGu3r4X6nafiw+fnm032lIBv3GT 5qWFxDZHWR7ngUcHzsSQxO1YvuAQbZ84S1c7KZL0SmEYnfEHrQkz4fdlA7Fw9HqSSO6mVQ20lDCP JXXXYz9QZty6koR4lSQhlgPkgUo9xmHWkYrKrOE72Ld1hCwFvhaHlc/JM52ico2cSxykATxQo2cv BM8dgKWzHc+G2I1wHopetCfdC8HIqEXFSZkBlvx9W+XfBqPDqbNJcRePGPwmz5ZXfHh3og7VGt1K DY9qCBq/GBMq++BDyoOpH/dFyjhKqypyADxD+yNsUX/p4/CZz3CaJOqDEr9D3VpKBGVj2n9RQf48 /Bvpu+G0jeg3pZ2m51YpGK0W7kVZ2q8sDnXa3v8LNM+cJs2GiTMwyjd+jNK2DLx1Trf9Yjc6PENp Jp42bRD80qfmeLnol1dQMB5tWlFyUiqTu8xlsk3UGhx+pBut8FiK388uRFklnn8mRGGVsvJAy0eS C9RpJ36TmtbFvDDLg3tc5S4Oyjp7SB5+BdGyNg9JZmCCG52l8dh/rqJszXD8Z9738PCwP9hUgpXv n4CBr6HXQHkmJPOT9ZT/h+K5Vf+Hsg5q65s7PsUWZfVRl3Vn0KqjzFJ4WKFZfwz6PQSb/ZtJB9pt mRqNIHXGvrQ/Ah7zJ0NndGELxcDdm1BP2ZIS+ORetPqAMoCSd3UGnX+lvbIBT7aR7VWYAMyW6ypH DrlRfVy9pVJ/0Fkfw47v0spB8MxlyNpWTYp3WnIazfIFys4UsOyXb9wG0krWXH/qoL2Jsw4CJzpo ZUN7of1X/0ICHV6Yc/gqytQmlsrjRWeRZHo+Rl/fo9JL0xDaTbxbPvn1S9i6+OFIZdaX0mcfpU8D H9mx9m1Qv1c4vg3uK82Y6c9AcCtXDY+2aamVX21VF22Tq/Kkv1a2r1oGS/6igeysWwPk95wc5Irl zx51EDwnCumLm9EgbTPSz2WjgtXqOHtO3W01UY4vx+2UnK3Zkc4H8pPLnRvl56AXqexXC6TVQrPx kO5gvwKx0CJgWTYgsQ8j9j2IfQI2vv8TRr7bAZW6jkJL94+pvIVh8GejpBkvP9q28OPWVyBW5vWc ECa1R00iSkn1t9h6pn+cyReusBB+GS8dVVbNRdAWjDpwo7pF5Gmvek/RoXiH4fdkMAkkA7X+gz58 nlRfBwbJKh0iH6a2Q69r9U5XuX0+VZ6pr/nKBgyZ3V4z4BXUHG1Xp6Hc2Cr4jtqfA2OnoVV/ujKV ZghdKvvkctaRPZL7Xp2eQBVlW55oyyp0eQGzTlWTVkH+XUVsyyvYEzhzD2ZNo3rxrwREV3yCymZv 6j99DX/r8wbyqDdFXpiwV237a6PDhnVIriraugzqT1H49DOlTpZHry4zScg9Cwb3DFoJJB9w2Hf3 JTQS9Xoe/a2CUZFtt1u6G+37K30EtEG9iN7aSsHN3b5AMPUxSru71gdypd1X41R34RXMWkhfFP9c 2m8iip3UPsbE48MBC3F6azJyaZWdyBue1c19kkZv7sJjHYKp31YN3UPexkZqa7tuXIQajUhA7E09 4NnrtbNnXO1vqWHM769nUFu0fpMGvnRDU6XAeghoVJXCl4l9fapLk1fyypfaCPBMlQQk6abZCOla m8y4Nv5xpT9oExdDGi6s+BBfKKtvLPOJjWk4Vc9Q3V9J19Z1XnkUT6jXztN5Sy+c3o3Pqc9/dhcJ L3Sre25uXqoc9NsVw5K+MV/pPqgfgrt/pPUhH2nVGX6ypMk2oMVYxUGX9J9LxPRHGs7nygO5sMUj zcIDXZT9+05Bl/flTvmZX1JIgBCq071/X80dkQgMEINmXeqa4IO6b8Sg5QcNpQJzYudxBPbO1gZG fXdP04QHagzLdpmMIeNiJWGAqqb/FXvQ9rw2AgeSrHpAekP6d7Ux1c5VUAZcqrreLL2LztGFdd8p qptx9ddtyMjK1JnyhHtuulJBAjfSr5NeRRhpJkreKhGBp6ebhQfCougkBb76EZ58J+9ljjpP8vUq wqo+NV/5L/41u4tlJ0UfRzoA8eQacQAicPOHUzi3RTRAoscgPwZPT/x90RzPW5mkV0UatapGJDbq h5E6+NLeRlVB93s7JUFb8px+IQUn11+BevSEMOZOfmWgJr0dor9k3KKkfFiXb4QZ9ekUHU93PNdR P+VfXbwK4pe6hzJ4QrhFmTSUaYknn/KQhAU5unhmkZBKfmajU6TaWTEHzeuJ8Rjx9h58Qds2xNkU 0uMid4NHXdTtXBLJJLD4rrkfkiLHo3pD6lwTu5Kly6Jc7zfx8tgVdBI5dSjv4mPSihV1KMW7g3TJ On5Q8rVUg/fQpINZeKAFhQZ+7X+cg7105efNH37EjZxIi2XJ5nojFIPjf0SQ1ZLbuyI80AIjv5j9 tNKw+lTN+YaPQdUqZk1RnwW92AVbSBB546q57Nytsm+gPaP5eXx7jqIVHt/QAGIpEje+ina9A2Vr NMO79t+ykLLdC13ydOpOfkmDxF+OS240XfiJWXiguOpePQx9vnvljlts8gyEtSbtF0757jP8POJN p5byWjtTGN+iDn8kjARRW7+nQWdTpP80FHWahdIea08YPB4iIWM3jD00CuVrlLmr3kvsFcGa6rB7 9bYa+9SPV+P62x1QzqDui6eZebXMepWVrDwcVFHaJq9vL1S3rH/vlC+EeVdZuFdvLM0Mn/47Fh/6 PE4rnsIREEhho7qyVEU62+WzX9GiXm2LPoRt+GjiQDkfwlpP/TampyivtBryNbPwQNUX4W/41io6 A0gIYTbjIq3GqBAiV9jOln3hpm9TUdbWS5M/c1uuRbPwVigb4Ett8UMoUyMQT+87hvL1q6reF+yX 2j6DwXyIotTO6NrDOzkeMqGLeYsnGTaUq4vGwSVJKBprK5xzpTxKYZFZirAY3PPub90pvPnRF9tD 2mjCA8UGTYq0+jgaW6QtR+/QiptXUa8WnZ/lQh/IpXZfCYY4g+OXBR/iJzrLwN5jfYON2ifx1G6u 8MTDtUi8QAIEnwqWeVR1ryB9INWN/P76hQ0CSIAQP+kHdBkVAo/fE7Rts/GbEkio3hLXfyJBLw13 GpGwQUyi3c3xz536g9bxODCmOw4oii2+PY32vQOsjdj9FnXlneoZS4sRaBBWzUKpYu9wEvR8jz8v kDCcdISQSDy/74+TfkPmTTMLDyQVkt9RH3LQuHcQveAmcmmS1FEfWzFeLH/U5q3YRN54/qDSIYpA 9QYkQbT7mJfkeZW/N8vd5IN57Abujoq+4d1t9/kIW240I6WcjJ2dZYIxJVmb1QqoaW5o9B74ScIT Mbi0fNLpfvpPdPfTB/UZhgo+dLDNga/pwCht5GNpqYBfsX0j8nThD2VknJG4RTFHs1N6Kb6ianAL QECvUnS7RP4GCXl6akfzsWcsz5iwY0Q5eEnoLEVM36X2jGhqakdKU3Dx5UrUGHwdlZflvHhEoqHV /sW8XHLVr7/tBMHuKdKKEKrCsMra6hLr8FQZH4NZ4y1VzeUq/9xFJ7fR24uxZ9twqTE+vvQjyMM5 vdtWEmy9lovvBl3trDZ41k6JxjV1q9whCpnQziEL+SAlYTuQrtizdkX+FoN0G+GBfaNFrqqfWdc8 1wSRmgqKvOzTFpwOczoimerCXW+tQateE6Q0SIt9X8or4kyCIAerg8yhzvtNrIBJ/v62ZKhyiJUA T7HqVbde3o44oStmsn55spo00yZbC0WDyLYUr7O4SIdf3ekcGye8ctloxWfn4snJP0rL1S/ELoP4 s3660pkfLTtadiStzTjzXfvxO7FXBH0lHbtqNx87Np4vHZdYUL7tuvQVWmkpznWhQ2AXJtj4ZbNC 08bEnRUyDshtsW/403bbYskFD3M/jGSyNo9dZnbKvrBYsuEgDBz3GWIWJCHn0Drsoj/rR6zE60Mr 8RzVqdbmC+vbtq3zpUMs5QGq3s8HoTyq4a07oJVdruIQb7HdS5yZpfZnXGmL4Wq7n/AZ3nn8ZTWY dIBpLzSqWw7XTxzEsa2JkrrdfEY6tulk3g6mOWjnxdU+kB2n7Cq5B7WklU4laEJwOq5kvgLfA9s1 c2ejdyBnQkukrftCUqsbVlf6vXvjH+f6g1rAlJfjKzejYy/bs4uszbn6LU2+6Ps57rbjONF3upkk 9+RqPC7zsfYvoCkJHuh2I37sE9Ajtm/iH6bq/kh9TfJ+7XcTylUx2I2hKmkUA+178XjaD5YUFBNd 7yYqYnOzaxnCP06mI4eCrS7bV3VFgbmtxOdvUtRmZuldrdRVs+qv8VaG+qr9imVaPyn304fSfs5u o2hJptbwf4w02qKwmGYG7/SU0OzcyaQ4+OgtPPt/HWCiO8YdPd5BjSQtN7dA6bdUg5swEgc3O1ZU Do7cKoj6naSV5plleT/sE50eoQRw4CPNGlSo5wQoa2d07nan/eNVK9mBodgxlK5oMTNt6VQGbCpl SwMWcSiYX9YO2/uW8+WfF+zp2VcrCPeSQeEYfr49DVD34tLxs7SKQ3DMxs0Dq7F7tViiuxmrXo7F y2sH2u1A2Q9RwVWFcMO/bRtpNvZCQorF8jwL193lGVDgrMPVDKIDpZfOW9h/QD7uRdmv+OxEVKTV BulH/o0zx8ejftAJ7Bm7USLW/uVuBc4PQpDkW4KcE5W2tLbZtj4w5nPPsz4ZTZlpSJWuCdWrArdP bdGEB92/O4imT9XWZtINCzMRT8tk19BqnHv6lKqL9ucuIvRMAlITk3FTumWHZv7TDiJu4VopaJt7 /Ru1lYMj7xRWRyz09jJSSbppvTqHDLjCXu9ugd9dZFGh61Q69+kZpP6SiCt0+5JoKow515G65j0c pUmAnCNvYsfycIvDk50Nq1eDVmRlPTLWHJFWt9m7clpchajKXBz1Q/Lrr6gPa0/biknDz+K3Awm4 TrdliOd2RiqOzP9IEn4dntMd9XrZHk6dXz+K2tzdKo9FITDJOGfbXxS8TFRvmQUG4ttMUZwJkv8+ kPPtvuj3nnp/quShOINj6IJR2rYnoWg8HIU3W7xkDlBB3nTxKvQ+EE0I1ptIK4ppW/LZ3Uko//On WshzjqzHxcMdcXbtX6QWicpKvXX3xj/56A9qoZFfvDu/gb7TamBn++dweg2dtzTmIYz6uGj7S/og ibrCuwUJhelGnMOb9tJ263Z6bWmVb8q3Ky3U+MOSQLETIBhK+2iN1e7Pd6DW7PaWROjLdHaNdHq0 0ChTUe142xgrPAUaAAeFl0ICzZCfiEumw1FCLfzKOntW+s7VLXvXGxAHGP66aRDtAbJczvzn/iit 4/dIgwAYHjVIB6wl0/7NXUt/Qd+JLfTOAH8k4vsxckdYryGWacn30wOtLIQHYtsBLX39TJ510Nux fJcbgRtp1CGz94jBGV3HIgq4V43aZEIM0DzgW5euy3Iw/s29lQM3SdME79DGkquCw+F9w9C0ha+F L7cPR2scLDSK6MNAMy6VSKqRLAYEpoq0f00WfNjzXopXAUqpu1+AtsXDza8qAhpbslD9lM6xuC0G Jq4LzIrSL7fSgVLQxTklJ4+H25x0LTSla542nkPjVydJVxC6yl0IzOSTx/8PU7NeQoBFlTEJzXu/ Lp1XIQXoHvzzUJZYpn48B7+93NXmNhKpA/XxGCVkdbWDPK2Dar2E01r/Xn7nN2z3pOyXa4uwsd60 1esmDm6OQ/m0XyQBr9jjXK8JLcsq6EPtQZWONMSiQfuWsVFoSLfb6OtBUecemirPruXFST7FwxyY rKS98ioJs5L0lkFX+MnPbOn6VP3Aw3QtAYeU1RBW1orsU+TnQ8PFDQ91MeLiLjSicyv0T4eR5ts0 rOOsmrNWd8RCNS9+N3dfQvu3X7HY4iXCkvz2K5KxUg2eQBkPehX1uoMnr/RxYCVPZZdZKCehV532 A56b0g/Vdb4YJk/GMTqXQJyLU9DHk64ZlZ8PcChuLB7Xnc+iun0tdqnWn/D0EQAtH2eYZawaSTe9 /Afdf7qI5gPlAz9V19q9MRSbyslnwahqBf0VA2F5YKxc42gt21PPG5C2E7jm290qj39I/UXrAFKY RBgLED59rE7OeYXO19qFQDXZFc3fYxYradwVfpXFViPX+kCutPtiBdehWDGQBlqOe9FCeCDU0n9c I37gTD6TLOj+qXaLsg8kvA8IHwbMexnf9xOCOtB5O1/j6W4nsIhu4FjWsp2i1l07P+lejn/q9g9H YLO6qPKriW74Go4rUc/hG7pXcQht9y2qR00n1b/yIW3pNQknSaj4a3PzLVWiXv1t2fh7Ok5Qw3g/ /4p5jWL1iMP/OszvKMX59Hs9EPtBHHJ0UsOsw+uwvNHzCpNIBNtp8AobmDRwbiAGzrTdatLjOBp/ 2ewlXTnyfa850neNsMYOZ7e+718DPy6Nw62rN5B97TIuxMzCO23VJVwTEdSUBpLUMW08prTk1qFp HYgF3c0qTtamBiXr2E7EBojDgeTekFG3cd69nDwoFRbPbEtCLvETA1BhZ+ezNbQD3fR2JE+Uf2oj cPyN+fgtXZnJunUDadtXYl2fcpjh9zB2/Zguma4yeIL0e/OHV/HNmChkZuhcyrmB1C2fI9rbG7P9 y2HN8mOSpnt1eWmX+FjXoTKdvGoO45Udn1lIm+W7kXVuuvIq9ubTHsXM9fIyY8lNYphL6uLP+jHR OQ0NP3tGUj70xuNSOunzYO412h/46SzMKF1ailei7uR8YUkIFUy52bitjPWNOZkSf3v+GSq0RBvl poB1HbojMe6cRXDE3dL7Zg7C9DLlMNvvaVzRyXRySZAjZubUqzpzyF8ocRJ61k9B/MpJS5OcM0l3 VZtdtoinTq9c10jtFOLoJoMtykgu3W98aEorLOoSid0LZ+LCRTlSBeUOvIbo11fglo6RaGgyTyeb A3w33kTeIb7GzBxt1saCvVWeKt91inLSdQLdRjKYZsHlWTcpKHQn99G5A7TBwGNf9DUPgIQ/ogOc cVYyKgSSYgZQzUdC724+enfVukFKb31ZoXf9Y8yQ84UaNgu9bLkyUN0SegUq+7q8baJEFgMD1V99 2PVhUN9rigNs6Tk+rbvUeRPv7d4ZZDHQF2ra44Rfoj2oMvwFyaoQin4y+ENcvnhDqqdzL5/Ar2Nr aR0dNbyqP+YBTiziFtOyViVNsxJWYnmP2ZIxazuelWUBLLAHp5OUtofqNyGQi64m9qqrbYJt3SZx EnUDmb95Sh6mW9SHduoNNazO/yZgedgMXFbbEMWB64qA3do9V1jo6x9gOj58fAYunZbZZ6cmEXs6 AFDZCvf4jAgpvdW8I/zPsbqpwpq1MGPRBjmRL4Rd8+McC3Wm//ycTti+MlGqB1S3TDlpuHxAHnBZ y0JEO6+WBT0bi/pJl8aGWl3QI0wWCmzrVQP7Np1QvZFm+FI3vKsJX8V2n+pVzOXf2bIvHFb3rW+k ts6i3yT0LqfhinWEtNC4+EKrJ6TVQbQCbd+3v8gn8VMdJtrVQ3NHY4bPw/Q33+KGKKOdekv4ruep zxMFKY+i7nBXbh/YuSBaC4foY6TEvIvl1HeaQVfO/iZXsy5CEHlY7ZglYGnNvjj66wkpT+XeuIyT dJDowtHyMvBKLz2HSr5imsK1PpAr7b4qrBCRu/DTNq39zqa68xCdFfa5shXXumz+dVZeRWvdJxHu 6NNHfKt2C9IHEu44+3jWa6fdsiTs1n28NSo0b6HcLCG7FtqtleZsQcY/zvYHJU9FWVDacHUriHvd AZgS976kffq9p7Hqgx1y/aNr+52tZ4Rjpkxqc5Q+sXW9q54xpqaT5Dn98+78Mp4sKQ+DxS1V88NH YeeH8/Ctd3m6xU3Os6pZ/rUlYFj351oFuaVmR1NnS4V8fs032XUun7aLxpgh9zL29aurHTgifA0I DqEG7QhSdfv3tVNriyZYlr7Q7P9yOt1X7axJe7YezcZu7QCYrnTq7yqLgw/V+1YtHbL9Gkj3xdZT T8++QdeDVTYLCmxN61Xku8T9PGmPbGv9Hlm9Gdt3m3vAreJWKrgU/kqSOyyq7V40g6CuHLhI5y2o lbzQf+Sp3ihN+3FPKnvXVDv6E+izE5bRnrfRqpbdX9Vf/d3pdg3moZi15XU6vGxhHibEVV5fYtw3 gyyEPeI03H196lnkwaA+vYFTG63OkKD7iU/T/cQBshfiirqFw+WGzZGnVadtoFml9mZtOpl+ua7j DzrRvn6firgau9ViP7OYMZ24m06FphUPp6cESDOqZkds3+zeV+2kX6UNx+3MCk3EK3Q3epkL5plE 1Xc9S+PhlSQMilS1pF9xUK5+j7Z0y8V/5TgJAy5xzzmO6PKWd58HRYzHI7WoQ/Iend6sDKjaf3vE fIieRajy/yEEEkl9Kmk3TDiy2XXTGbRsW1HTztr/GV3HqgoIab1OoxCUJRZpSYmaGcFu9NfKoJbu S99cTj5QVTNg58XePeZ2jN1RKT/5VnaErkfMXCTNmCSPlW8H0Ts+KDELdaufR2zZhppgy9qeK2Xf pNxVrffL0bs9JrbppuRhKkvWT37raWFP9UusMnBm64BqT7hxmjguz8dsslZP0wGQnzzS3qIcCXfs P3KbUM5Tvj7zTnWTcMNuvWHfcbuqgvWhIWIFglmSJ9qEILrxJyvpQxzYKgs2Kr20im5F6GrhhlMs Kv2CT6RT8eloXqt6xcJR+hAzfyPejYC9fPTY54fRo8M+zKg1XLEWSfXbezgvraKQ49B44QH0aJMo 3Zdu7ba9bzV9XWVhmwdD0XBsGPzoIF11C4jw99njWailDOrNK7HuPAp/fGk8nupfRw66nTYhIJhW GB5K1OWxSOrPLNL6M66W/d9XjKT20dzx92j0FJp1aQzT1YO6vpPjsmmP9Z3U0j+j86Be/t6hMXG4 7au/jITn38exumwzq3prNiZn0aqWc7ZtnZZ/XSyPaoCMhz+ldvIV9dNOXu6KkdSXFAN7Zx/Rnv6v bBC2/ZULtT/loSDjEQAAQABJREFU2I0pGH91GkRdIR6X2mKy50q7b31mlxQAB//ErU41dnSwqF9A 941NyFyCNCqzMUq90/yr0+jeJk5XrpW68A/n+1sOgpIvZX1ZGUztY+1aN7Cb+ufyzUy2aevK+Mel /mDKWsxoKE+UiYg0pTqu1/C6cpxSSa+WWU8oenVaIm0BdddWfOa/nrm+gVaB0k0a+ucJ6o91pkON 9XxUfbX+lL5vHMfOYS3plhzLMYhqVvyqbeOkEu/qlQv93WSaXOh+FMQDWfRSEBceQLsmN380X52K kXQ/qHozh+hoq8KDOsM+wEvnbslX3tyr+D1Md4mf24V2YaWkENz8fp3WAIq7g1888Y3W2FoHUVzh OPHwdrrLtJdOKxTNXl2KcRdvmYUHQrdMCAal70eP4bbL6Dt8uQnDPh6nc6MuneQrpMc+aL7lF3RS ZrbNBkLR8cvtmHBgqcZV6OnPWpDMUtz6//oN6gfLvWuz8CAUT7wVhZdOXNOEB8J85fFrMGGL+T77 S9vW6oQHXdHuvSi6o/WaxfV1nqFD8UbCJjRV/JD8lf51RZ/N2+lO9kaa0OIhWlLn8uNZVrNaycYv Wcue+0ICL/LgiCWvafZPrqZ4KQIs785D0DNqM167ahYeCIPq6g3Nkp2X8j7lLFVpifWQ9MPoO0nN Dwk4utosPAiKmIz+mw/i9X3mgbabb0tLN+x8eZW2w81Jv0x0V3tJ6pzrH48GXnB3IxWTrftVGlbS BDHuDftj1m970EWXd1XhgUejXoigMx8mrjXHSfjhEnfKwOqZJELQKJ6TsR8hbt5HivCgK7pF7ymw 8EBymP6511E63qqCnV9PL0s2Xs1exBun9qDj8GDJdA51zs3CAzl8E0mIpS59N9Cp5KUbqNV/qB0f FCU7A2DHhh3r5CffyrYDtPQt6VfLysGudNaKnFnU9FANlGpQi+ba5MeVsu/uZslTddf2NxQedvK9 mOmrN/ttzfhjXwy2uE1E06AXV/wSdW6T1SkY9v4QvVPSe70xSzFiy2KdOl1Fpku3mvOPIFzJF6oh 786vInJHrLaKR6hrh2uWaY7h+6MtZrZke3S7z46DdB/6JNUZ+g2U2gShkN80Lu1uVeB1ruXnVT+r KgRl4hFtQty8uZrwoDntq45821J4IMw5xYIObKtUQi4jol5pPmcpuk96Sjije7qiF50TMZKEB6LK 0hjqTHh5PUwa+tFZAOUBDwT2H6GZepiu/3MtX5hnmJ1hoQ+n3G4l4PDCuZrwwLvzWPyLrv1ThQdq QOXZdvXL8e/D+jIi2oTfT6Pv9KGKhQSpblLrapFWk0lo6K9D5GrZd5MXVJI/oVIfJOfQNuyifKFO vMh9OxJO68qH41jkTyfgxWUYOL2njeEqEePQf/0evL57pFbvWtdb3p0e1uo7awf8yj4kK7lYHlX3 3BuOxJgV07U+mcpdtJFdv6Q+RrprwgPZfU/49KTtVfSIfly1YW/j6ffNfRrZDPDk/FhMpesbVeGB UHepLSZ7rrT7AePtp1Ej0Sc+uQdtQ8wZwluURWXVhhp+Uc+5UR3/UOUgTak0JaahUgvpIENZUakL newDaQ66+BI44FXFJp3FE0irRqmtqDG0naTm1amvRbkSiq6Mf1zqD3r5anlO+Oupv+LULPsVWtJT MUTcliI/ztYzJW0GGSSQ8JLLj8nLth9R2kfX3pepgzarr2PS/h0YuGozRu3YTG3jQUy/dY1uofNW QsQ/9ggUyxUIFiDEEptr6dLSMxO9u5fxp4x+f62iyL58HllX5RJnKBNAe8jKWERB/VBnFVRJnloY 87vHTSw3uy0GbbTMtaRPGYtOqOqH9W8ubY/IFstiqQNe2seHanfn2Inl+LeNOShJhwW6lVaHANa+ mL/Fdoxcuk/ejewYPD2oM58PO5cvw0AdGhMh9PSzz87sQ9G/ieVaf16lbQh0PoeJeJQsQ/GjMyAK 5aFtH7cyiQN1tMSuFM98prNLYSlKv2gLjNha4En9gNvU0NvbS2sdB6e4k/vZt33oEGi6uovSy5hF +Zbuks4V+f5+y1MU1iza/mAQZfF+DJ91QhTid3YRl/3slBPI+LMsKtSvoHWG7nr01HJFVd9tqgvz 217lUr64TWUkv/WmCLfgJzYiuHmQP3b2p9/1uOXTQVEGszIMVPZIwE7tdi5t45LKo5GEfeXu3Ha5 wkILGm0zyJa2U+WvntHsFdKLqyxE222k/o503bOIE9VpubQ1rjDTWgortXXyk7+0chZb9uUb8PSX 23mpf0FpJeIl+nYeunGDs+7eybzWLlD7U5L6JXoh3p3s5le/oOUxN5PqAPKsJJXnQutjkPtmFuRX 6TuXR2HepT6Qs+2+1jZS2c1HPZHfdHFoTq2rC7G/JVYhXTt2HH+XqwO/ikp/mLaQ/X70PB6q3gil 7dxEpoX3ARj/aGEt4hex6k9dycErEOzDZwGCfS4PpqpyMJJYqixmG/lhAkyACTABJsAEmAATYAJM gAkwAQcESJgiPTTxIgRaZ76egKjRyyUldSsXb2GwZGdet2Opzl8PGIHrdDjgzgVRUqgz1jyPVa8f gjdJ0LKzAtFqpnwK/QMWJQ4uE2ACTIAJMAEmwASYABNgAkygUAjkdW6SmJDVH+5aKAF4QB1lAcID mnD6YIslTBcWTEG8cniU0Du08CPNyKMjxtI1doW4dk/ziV+YABNgAkyACTABJsAEmAATYAIPAIGs NLuBDJn2LZ1707vwtiPa9fXBUWQBwoOTVg5DKg6VavSfZFQ6n0FnEFgZM5VF2RosPLCiwp9MgAkw ASbABJgAE2ACTIAJFGMCnk9MxvTfInHzaoY4Ag7upX3h7e9fKOeY/JMwWw83/0lxK15xKe2P8vX8 i1ecObZMgAkwASbABJgAE2ACTIAJMAEXCbiV84cv/fGTfwIsQMg/KzbJBJjAA0qgqA+/eUAxcbCZ ABNgAkyACTABJsAEmECeBNSLwPM0xJpMgAkwASbABJgAE2ACTIAJMAEmwASYQPEmwAKE4p3+HHsm wASYABNgAkyACTABJsAEmAATYAL5IsAChHxhYkNMgAkwASbABJgAE2ACTIAJMAEmwASKNwEWIBTv 9OfYMwEmwASYABNgAkyACTABJsAEmAATyBcBPkQxX5jY0D+FQMpHo7BtRzp8vTxx7aQBXb75CtVr evxTosfxYAJMgAkwASbABJgAE2ACTIAJFBoBFiAUGlp2+H4jYEAOrq+IxqXE27ikBO5W9pL7LZj/ iPBc2TAXW2Ny0GH+dDwS8I+IEkeCCTABJsAEmAATYAJMgAkUewK8haHYZ4HiA8AEDzTZfh5TUvYg 1I2zfmGlvBDUpH01Fydj5+La1ezC8obdZQJMgAkwASbABJgAE2ACTKCICfAoqoiBs3f3mIBHGXj6 ByMovNQ9Dsg/23uDl+GfHUGOHRNgAkyACTABJsAEmAATKIYEeAvDfZ7oWYd24sSPiRDzuCV9A1D1 yTD4lDiIpLVJgKcJuR510eTZp+BBKXn955U4diAd7p4eMGbnwPfJIajf1AdZh7fhwDdLcXTHOcBU CVUHDEWnsb0kO1r0r51A0nfROLolEZmk+HeqAeXbtkDwgAGo06SaZky8XNmwHCdPiRCZ/RDqWQnr kER+qP6Xbz8EtUN8hBZZ2od93/wih9lUD01GdMbtYztxZlcysiisgA8eadMOgU2qSsbv1r/cyydw fNMOZGQIPzxQpk5jBHUOhrtPHrKz3EykxK4gxltwic5J8DakAjXboWH/gajXLdiSmy6gV4h//Ocx OHMqTVL1a9oO9bt3gUf6Xhzdb8Bj0ybJy/lvJCL+q50wUvoZs6sjdExPPEzpZ8i9jCNfxBB/T7hR iucqnETaZiWsJLZK2mZm4vafKTgyfxkMDcPRbvEM+F7cgh/fisHJpETUG/MJus4aCh9PXeDoNTtl H5KWReHA1gRNo3ybgWg+fCiq1VHSSdFR85L49AkOQ7VHU3FgwWcUj7NSHqo3dDxajWhjy8JIggN3 86oDkQ8p0QGhrj7uJvXN4vfKfso/y2JwQvhBj3etxqjVsQVyDsTi9N8D8a9FA+Chc0YyxP+YABNg AkyACTABJsAEmAATKDIChnV/rrXbm+9o6uxSIOab7DrnklvF2ZIYTMZPaIA1X/1xRwxjrt6Cv2cO 9patgE1/5Wrmm8zfiPolPsXXL6/X1NSXiN1XERoijzDFfvVFA2arWja/vuFvYfiSCdKAVCxP1/vj 1WkJXl47EO6kfqB1Rayl8wXUJ2TeLvQZHSp9Xl0WjgWjv1e1HP56d34Dw79+HeW8HBrJt8aFZVPw xegFeZrvt+8qGjYwj7SNyWvx7WODacD6twN7EXguaQmq6g9ezDmHPYMaY8tWMVh2/Kh+GQ9/ijdb vKIZ1NSTo/Bm05c0daArxlxdJaVtErFdpWOrM2T3tcLQVRjzSVdJT6TZmY+GImqqbT5QLYu80ntU O828Po1VM9a/3p0WYeyaSG1Qn7VjLuZ1d5yPVPutv4hH2DN11E/p99zMSvhq3g0LNcuPCGLxNSqY k8pS+w5fk0q8ewcTrM0EmAATYAJMgAkwASbABO49AZNp8r0PRB4hyGMaNg9brFWoBMSA75hOeFBt 2Az0/TIKvd8eb+Fv9TEfY/TBFGlQJfb3Nzu+HyN27EDfSbLwJ/7V7prwoP2iWAzbsBRNg2k6G6Hw 8ZNHYtn7P9IJDyLxzM9HMfXaNTon4CD6Tu8p+Zex5t/4fEAMhGhC+BMSvx/DlrxmERZJfc0+RG7e oem5e5pHe36Dl2HkirEWdsTHE28txsCYKLTrI5u9+f2b+Kjie/ijgHKo31cM1AkPIhERQ/Enf+T4 2wRDVrixD583e0YTHnSL3oPXLl/D9NQUjFg2Q7EUiyXBz+GKMsku0uqQTnhQNpwEIP87iIkJezDg 7SF2PXIPegZj/7cZbUNEWpifknUHYUzcZoyIi1X0xEoEmXkjWhmiZy4G/GN3LUXNEuYiHPbdHmIs h/PKso24bpTdvrJqvCY8qDbsfYxOSsX0TErjU3vQZXgjyZDIKzs2pkvval7S+yfyTC9y/7WTlC+U /HXzhzFIOWFebYDsP2UP7/D/NuUii4e4b5wvCw96rI+nsN3C7BvXMGl/LJ9VYQGKP5gAE2ACTIAJ MAEmwASYwL0lYDmCubdhYd8VAqbULYhWVh50XnkUT3Svpuj0Q5P+YVheu4c0yC0f0hIVa/tr3Nz8 a6MKfXqdC9DUgIl46dwc+JeXlarv6Y9e0jJzEwxIx95Ob0gaHg3ewJjdr6OMmiPIrUaTYxBQ83Us GroQWT88h0MHuiKUtkR4Vq+N6oa6Oj/kV+F/oAjO2TM2enDzQaWuo9DS/WPsNYrZ/UgK1yItXPV6 9kPDATNJmDGP9KYjftNgindFW3fyo3ItDiufk2fbK720BJFzB2qz5DV69kLw3AFYOtt2NcTZ98cj XRrbhmLY8V2oXkX1zB9V+r6GN0Kr4c2Q4aQYi5+/SpBWV/yZEIVVysqDpgt3o9fwENUSfMcvxqSm dTEvbKqmJr3QOQzlG7eBfy2CnaiM8klDDNwrNGsjGcmQ9HTWylRD9ZYy81IN3kOXke2kOIXN+Raf TP0eQdM2ojVtrzDketCg+00k5GbASE4bDMfx8/BvJIcakpl+U9ppjrpVCkarhXtRFhWk/La9/xdo njlN2k4h0lL1TwgP9DyCZy5D1rZq2EIrItKS01C3TqDkpleXmZiVOQsG9wwcGlID3/03G313X0Ij sY0ljy0MxktHFe4RqNWmDtwIi2DhVe8pRFw/DL8ng/FjYqDtdgktJvzCBJgAE2ACTIAJMAEmwASY QFEQME9fFoVv7Ee+CGQdT5bMiSXirTThgWK1Ulv0jJaXuf+tm/zVO2xUdjEIocD4q2bhgWZG2YNu +iMN53Pl2eCwxSPNwgPNIODfdwq6hJSUVM78kqLpiMGpo8eRnoH29WfL3iFi53xNeKC6U6HHTAwa 5y19JmzaLa14UPWc+TVeTtEGpE9PNwsPhBtiYBr46kd4sqRl1jfQyQPXk45L3jR682Od8MDss3ut AXjhbXl1x5mtB6XwZSVuVwzMRqdIs/BAteX1xHiMeLun9OkuL7KQ3sXKBUePIz2V68NBPnBXzgJw C5CFRb7V9EIj2WWxeuF2SgIJE4TABki/kIKT67/Doe/Mf8fWr8d11JT0gWTc0qWr6p9v+BhUraIY oR8TnVcR9GIXSeGG9S0LUt4yR9Tg7iFbFOrqn9kp6c29emNlJUUsPvR5HOten4d9ny5HfNRyHN52 DrU/+xVTM+fYzZ9WTvEnE2ACTIAJMAEmwASYABNgAoVIQJ1vLkQv2GlnCWSfOyhZqRHWWFrCbm2/ bMPG1kp2v4MnhKOceSxnY8Z4/qCyXD8C1Rv42ujLCvIyevHuVf4hB2Ysle+cqSJRTTl/wdImENA0 nJT+gz8vOB5gW9ux/s5I3KIotbd7loLBLQABvegWBpohVx9Tzlkkfy+f39AgrK6qbPOrCgE8qygs PGVuFYZV1lY5WFuqMj4Gs8Zbq7r+bcyyPUnQkTBJ78uVqDH4OkqvYv1u5qHXsecflHjrzbn87hGC rktfoZUuYvVJAg4sTLBxymaFjI0JVmACTIAJMAEmwASYABNgAkygsAnceaxX2CFg920IeNYUAoL1 SJz0I7qPCrUZmKbRHvn8PHcaVLo/Ul+a+T39dyyu/W5CuSq2A1Phz8O1aC6blqtnZynLB3Seu3vZ qmWnndWZsPd6EFkZQFllW4XehPEWadBjQP720+vtqu9uboHSa6kGN2Gk4LnZidZtq7gYPAJRs5Eb khP/RvqpTNTTHayouit+3XxlicyfF1RVObzmb1W9IL8ZuHlKWUZSEGeEXd2Kgu50hkHVSnZgKH4Y Sld0+ZBCR8EUqyDy81ToOpXO3XgGqb8k4srpNCnYxpzrSF3zHo4mGZFz5E3sWB5OW0QcC3eyL51H dvZDeOiRCvDIQ3CWn/CwGSbABJgAE2ACTIAJMAEmwARsCViu47bVZ5V7QMCrZqji63Rs+jDOYil/ 1v5lWDza8Wn6zgTXUNoH8uYEYPfnO+xaNZ1dI+1lF5plKpa1MZObZTtrnfbDGhtzlgoJ2Lxgs6WS +KLD9DaN2SipB7SsZ3f1ha0lWxXvUHmFxl9H/o3D++QBvt7U7cPRWGNzY4KnLCghg9uf+druIY6G 3OP49QU5fN507aEYHLuVDpScFmdEnDxuy0Joiusdt9Ky/Mu/S0Zt/pl0g3yhabqWjINJ8moIG8Ok YE9oY8+cUHP3C0BFRWbg5lcVAY0b2f2rFFwb5avaP3PCGf+sw/GHnfwhmdGfiXB2BWb4l8U3S66i Op2F0XzCWLSmvzaTp2PgnssYNPxha2ctvsWWj+QpAXgnqB4+aBSIt/0eR4om4LEwyh9MgAkwASbA BJgAE2ACTIAJFIAACxAKAK/QrFYKw/BJZSTnE6Z1w+zSfbH9w3nY+mwrzGs72qG3hlxa9k8Ds7/O ygIGU7b8nZuTA/FncZAduWJyq4MO8ztK7p1+rwdiP4hDjm4wm3V4HZY3el7xLxLBHXUDTMWcOIk/ /qfjkhnhf1rM61g6L0n6NmbbH1ALzYvv9UXU5ChcvXgD2Zk3cGX/Siyv3FG7AaFZf1WIIjnl1D/3 6i3psEY5a6/rUBm/rEtCLoVXhO/Kjs/oCkX5DAnhqFEwokecjVDr5beld3GI42eDF+OqTvaQezkJ cf1aKgdAAu2eay+ZLdc1UrspILrJYByNv6y4AeReO4FDU1phUZdI7F44Excu2uexdfqnml/G1H34 qUcv5QwHICdLcw7GjBTpQwht1PMJVF17rI1k11ChJdooN1ys69AdiXHnVCvSb3ZKEvbNHITpZcph tt/T2u0SQtOYkSaZse+fDMeev4Klu4/Mf+eCaPyh5JXca+eQEvMulnt7Y4ZPa/wmO6/F5fycTti+ MlFKK8lj+mfKScPlA39Jn/JJDqqO7jf3LI59fEunkIBD25J13/zKBJgAE2ACTIAJMAEmwASYwN0g YFj351rbNejkckeTfFics57MN9l1zllnir15cajf0VlDEfOu7W0BKpymCw+Yl3SnbsWMWn1ULQe/ kXSo4iKLcxEMuZexr19dbNDNyAcEh9AWgiNIpaXj6qOdpq8q5J7D5nINtQG1qmz7G0F+fi35KWbw V5dtph3qZ2tWVmm3NB7t+9dxpJ0v9eyEZXjnccfCFuFIqeBS+CvpL/iGf4lx3wySVhRc+Iiuf5xq XuEhWIgnLSlR+hX/WtFtC110ty0YD68koUSkpi9exKy/fKODrOzd6S2M/u8E6YYD1WDWhtcxb8BC 9dPhb2NK5yfKfIiFQ/9jYWZQ0lU8enAC3lXUfcO/xsvL61sw7rfvKhpW+gXLq8k3d8gOhKJ+n4q4 GrvVIoylGryFibvlMCaPlW9m0Hs4KDELdaufR2zZhlZpGIkJmYtQVrchynj4U2LyimbdmgfQFSMv rkIlXxJUnFqh3G6hGg9Fw7Fh8KNDHeMWrlUV8ezxLNSys81G5KtvfZsh+W+ziOGxLw6gxzPm7Q6T SryrucMvTIAJMAEmwASYABNgAkzgfiVgMk2+X4MmhYtXINynySNOuq83Yw3eOHUQg2PW4IX/7cCw DTvw2tVbmLRirG2o6XQ/dam6GBjbf3zpij1LHZObP5qvTsXIZTM0+2KwrAoP6gz7gK5bvCVfxae3 6lYNTyVvQOtgSwfrjVmKYf/9QGcy0MZPcYXji4cOYsDb4zU/hYU6kTMwPP5SgYUHwi3P0KF4I2ET mlqFTwxc+2zejn7DG0nCA2H2ocrmDfPiwMNJu5Zq9gQLVXjg3Xks/kXXEuqFB8K+e8P+mPXbHlJv JD6lRxUeeDTqhQg6e2DiWkvhgTDk3WMWhn08Trag/afwrd+MHsqqAaHs42Ug4QaNtK0edw8PmLwC NNWylR+SVpXUHdpAU3MXyVOuLYakH0bfSb0U9QQcXW0WHgRFTEb/zQfx+j5zGEv61dLckF+60rkC JBWhR/mRlel/qQa1aM2B5ePecCTGrJiupa+eR9cvN+O1dFl4IGxJYVSsV5LSKwGHF87VhAcqd3vC A2FNrKR5cv5gxQXAo+FYNO9mFh5oGvzCBJgAE2ACTIAJMAEmwASYQIEI8AqEAuG7N5Yvzg3H57O/ h8UKhLsRFNr+kH0tXTpzwUTv7mX84WnnkERrr3JpC8JtWqxQks5UcPPMYwVKznHEVhArEHrTjPXX 5hlr8kt6xDV/hfBkX74MQ2lPmGgHgaefvDUkP97k3riMP5UbD9xLl4Gnj/Uw2Y4rt27glvCHBu63 aVidLzu0vSQ7i7ZS0JWH+TJvx9t8K+VQ+DIpfKVBBw7Sr08ZuFnKgPLtVH4NSvmDDJf0cJw/cq9d hpHym4cIi8IjNzcbbmQn30zIntiq4lbaNp14BUJ+U4vNMQEmwASYABNgAkyACdxLAvf7CoRCHjrc S/T/EL+tBtfXf14mCQ9E7Mr4mWfO70psaQDv6e+vcyp/A3o3MQiVbOVt3nr1g+ZRIQkOVPe1ONGg 2ZnHjQa0XvmXN8hOk6ChtOKPzCQfPtJKAk/6K5LHg8KnJLEazsL2Nz/5w62cv5KHKDQaDyfhkz23 IsJY2MzYfSbABJgAE2ACTIAJMAEmcD8SYAHC/ZgqaphuJCK68hMWe7tVLbENIDgs0Px5n78ZT8Yh bsGHyt75WGwcNhUVqtAseFYmgiLfRv2mPvd5DDh4TIAJMAEmwASYABNgAkyACTCB4k2ABQj3c/ob M3DdZD4YTg1qlYgZ6P3haxaHIap69+tv5u4PsPMr84GQJ2M/wkklsNdqPE8CBPnqxfs1/BwuJsAE mAATYAJMgAkwASbABJhAcSfAAoT7OQfQ4Xej01ORcTlNvurOzRde/hXzdS7B/Rat8oNXYELzc8i1 znG0Z927eu37LbgcHibABJgAE2ACTIAJMAEmwASYABOwImA9nLPS5s97ToD21PtW1+8Fz/ucgXse XgcBMNHm9LL1WFDgAA8rMwEmwASYABNgAkyACTABJsAE7nsCd12AwKed3/dpzgFkAkyACTABJsAE mAATYAJMgAkwASbgNIESTttgC0yACTABJsAEmAATYAJMgAkwASbABJhAsSPAAoRil+QcYSbABJgA E2ACTIAJMAEmwASYABNgAs4TYAGC88zYBhNgAkyACTABJsAEmAATYAJMgAkwgWJHgAUIxS7JOcJM gAkwASbABJgAE2ACTIAJMAEmwAScJ8ACBOeZsQ0mwASYABNgAkyACTABJsAEmAATYALFjgALEIpd knOEmQATYAJMgAkwASbABJgAE2ACTIAJOE+ABQjOM2MbTIAJMAEmwASYABNgAkyACTABJsAEih0B FiAUuyTnCDMBJsAEmAATYAJMgAkwASbABJgAE3CeAAsQnGfGNpgAE2ACTIAJMAEmwASYABNgAkyA CRQ7AixAKHZJzhFmAkyACTABJsAEmAATYAJMgAkwASbgPAEWIDjPjG0wASbABJgAE2ACTIAJMAEm wASYABModgRYgFDskpwjzASYABNgAkyACTABJsAEmAATYAJMwHkCLEBwnhnbYAJMgAkwASbABJgA E2ACTIAJMAEmUOwIsACh2CU5R5gJMAEmwASYABNgAkyACTABJsAEmIDzBFiA4DwztsEEmAATYAJM gAkwASbABJgAE2ACTKDYEWABQrFLco4wE2ACTIAJMAEmwASYABNgAkyACTAB5wmwAMF5ZmyDCTAB JsAEmAATYAJMgAkwASbABJhAsSPAAoRil+QcYSbABJgAE2ACTIAJMAEmwASYABNgAs4TYAGC88zY BhNgAkyACTABJsAEmAATYAJMgAkwgWJHgAUIxS7JOcJMgAkwASbABJgAE2ACTIAJMAEmwAScJ8AC BOeZsQ0mwASYABNgAkyACTABJsAEmAATYALFjgALEIpdknOEmQATYAJMgAkwASbABJgAE2ACTIAJ OE+ABQjOM2MbTIAJMAEmwASYABNgAkyACTABJsAEih0BFiAUuyTnCDMBJsAEmAATYAJMgAkwASbA BJgAE3CeAAsQnGfGNpgAE2ACTIAJMAEmwASYABNgAkyACRQ7Au53O8bz/n7tbjvJ7jEBJsAEmAAT YAJMgAkwASbABJgAE3CZwKQS77psly2aCfAKBDMLfmMCTIAJMAEmwASYABNgAkyACTABJsAEHBBg AYIDMKzMBJgAE2ACTIAJMAEmwASYABNgAkyACZgJsADBzILfmAATYAJMgAkwASbABJgAE2ACTIAJ MAEHBFiA4AAMKzMBJsAEmAATcIbA9Z/XIT7qO1w8neOMNTbLBJgAE2ACTIAJMIEHhsBdP0TxgYk5 BzRPAlk/f4Y1k7ahZJAHbp86ixrTotG6e7U87TwImikfjcK2Henw9fLEtZMGdPnmK1Sv6fEgBN1u GHMvn8CR1WtxdOseGBUTpSq3whPTJuGRALtWWPEBI5B1bCeOrtiCE4nJSsg94d8iAk+82g8Pcw1e 4NQ05F7Gvgkv4vgFA2BIQ8mGM9B3dhjcnHTZkHscW7r9C8l//41683Zh4OhQJ11g4/90Av+09uef nl73Q/zUPFOa6qZynT9Et1HN74dgFSgMxuQViBm2kvqXJmTcbIn+q15DWW7LCsSULTOBoibARbao id/BP9GZPbPtFxoMmge1JcsH4tHHasMdObi0PQ4Z2aB3+TGaKqF2t0ZOd3bvEAzknNmMk4e+Bw7J Jsuk/3knK/nWNyavxcYpK1B9yocIbu6fb3sFNWggftdXRONS4m1cUhy7lb2koM7eM/vZ+z/CO22n 2vF/K27V6ITIlxvb0WOlB4nAxY/C8flUKodWz8lta1G+a080CfG00uFPZwmYjNdxLOoHnKaBv3i8 cq8764RiviwquRlIgAB4enK6uAjxH2vtn9b+3M8JdWXDXGyNyUGH+dPvS0F6fvtA+jwjeHvnHkEY CRCcFW46nVZ/HEfc5FkwNpmAjpF3X2Bx89R26l9uUfqXD8MoZj/UTq3TgWUL+SVgTE1Cyv50Ym2y seJObVYp3wD4BtVGaS9L7ayEnfgtNfvOSWQ0wKdJG/hXNo9fhEuGXBq7fL8CSRu34MqFbJSqXAkV arVDYIgHUuMS4NttJOoX4VjAMnb85SoBLrKukiske7ePrUZU31dsXB9z9RYqGJIR2zMC6VZlX9K7 y/3V8oNXYEp4Jk6NrYfv/ksSi7v4ZPwSjfht62HqOb1IBQgmEso02X4e9TPPYnOtx5GQKw8Y7mLU iswp0bE4tWC25J9HoyF4evFEVKRKP+tCMq6n5aBiZxYeFFliFJZHOcexc9qPkuvVhr2PsJe6wsOQ gZunjiMruyJqNrjLhb6w4nG/u+tRB/+6cBF/Xj6I9U16IM3LqoLNb/jdPOA/5V8I2puOqjXL5tcW mysmBP5J7c/9nGSibUz7ai5Obs1B6JTXSIBw/9WT+e0DyXkmHY9+PwOLBiyEG62cLIrHeH4Pfvpq LbzPd0Y7EiDcbYFF2R6fYsqBDninaaQUnbvtflEwehD9uLayO76eeu2OQe8UHY8ne9WRzImVdeuf 7C6trLujRTJgs/ouNQ6r6/Sw09+O0pzzOlgbddYOvOv5TPOAXwqFAAsQCgWr6466B/XB4I/T8f2Y dyVBQfCr76BOi/YoJ9qN3EB0jY7C9YvHsPfVuaQfgZ5RL6BMIaSiiTrDnj7+qNKrH/Df/7geIXs2 PX0l1XtyAIdHGXj6ByMovBQS7rJgxF5UC00t9ywOxf5FzofimTWLERgg+ySkx1UKzVN2uEgJ/Jag NNpTMHDRi3iYVtgDVVG+XnCRBqM4eObmUwbeXgHwlBi7FmMTfFB/8mLUd8062yoOBP4p7c99nlYG rwIU5KKImzN9IA8PVGgoTwgYs4ooXu4PSRQKU2DxUFAIQt1K0MCSurZFwZz9gN+gHzEs+Cx+3zYD GxYkQUxMtOlbXSLz57lkHBz7b2kl3g+DmqD8vquoR5MUJrc66LRuCeocT1bGHUDIG58gKNCA28rc osHjIdw+vx0bZy/Dw/rVd1fi8ElQN2XSMxR91i9G3RZ1YLpxHCc/m45V8+TVle6uCu05Te8pgUIY et7T+Djn+bUTSPouGke3JCKTbP6dakD5ti0QPGAA6jS5R/v9PfxR+9mBODxuPtJphrz+oLGoV1dp NNx8UL1nP9QgieC51+Yhp2d3NOvXRopz1v6VSPpfurTEqESNMDzWqxpSf96K8wfOwZiTDYN/IGq0 CUPFmmXsM8q5jJRtcUg9nSbpP1SxDqp1awuD0tDZtXTjHE5u2oozu3bgyv6zuCkM0ZaKei+OR6tn 28DDQe7KTZP9MGYrtQ8te9IeO0urJL3cTPwWuwLx3y7FJUon8ZQICEToMxMQGtHcsV90RsDxTTuQ kSEONfNAmTqNEdQ5GO4+d0d8IWY7zsQsQypFyZ2EPMYMA2o9PwIVy9OSrS20ZOubNThzijRN1dFk 6mS06GU1+COGR0koFB+1VeZHofSu2QWNXxiIBm1qi2haPjcuI+0cLUHLOYbbkk4Cfj+RBK8rBmkZ oHeNajDdomXYj9imc3bKPiQti8KBrQmam+XbDETz4UNRrY6Ppia95JxD0uJ1uOXpQVLhbBizq6Pp +J7w+OsyTlJ4D6xbg+upFNaAxmg+823UDrG0n1+/9PyEv5WfCsfDV3dg9/sxuET5RKRxsxEz0bSb HRZKiK/8vBLxn8fInEnNr2k71O/eBR7pe3F0vwGP2TsPwlnu5G72SeL3TRROED+R10XYardth9I5 CTiwuiye3voW/GXZGOm6/mRfOoGMq5SXjp9THEnAleQT8DDKedi3qi+Mt/3hVd7WD8EiaeUapP5K Zh+hBDIFIrDXMDSKeAo+VmEzpsQhfm0Srben5YbZOSjxSFs06x+M3MtJSFwag6Nrdkjx9GsyEO1m jYO/Hf9sQ2Cpkn14G+J/OE5lg/ygx0hFvkrPoTRDL38LtexkMrNFZ0YpQ5p/VPZTqOwnrd2CS3Ru ibeB4lWzHRr2H4h63YJtyv51YnDsANWF5KeR4uX75BDUb+qDLArLgW+W4ugO4kr1VNUBQ9FpbC8b +yJM4tHnTVG2KaTINdVDkxGdLexkH6aDE384Z46jCP+wEfBXhHrCpvro3RRqruT3rEM7ceLHRAoN UJKWnFZ9Mgw+JQ4SH5GWJuR61EWTZ5+yCKPqv7O/+fXL072A9aATbfGVDctx8pSIvTltRbyyEtYh idJWTffy7Ydo9VKB20dnwSnmxRk1Trc/TrDQByvf9eCNRMR/tRNGyiuiXg8d01M6S0VsnzzyRQz1 hTylOl/N6yJtL61ahpQLoo3LRjbl79sXf8LOr7ahSsQMdJ8djoz1HyAuJhFpSYl4cv5mtB/VxmY2 Mb9tgoiTWobFu09wGKo9mooDCz6j+vys3McYSn2MEXb6GKIv4S7yhvyI8k+FgioeUlcfB32MK/sp /yyLwQnhBz3etRqjVscWyDkQS4OqgfjXogG0AkzSKvA/Z/tA0hJ/8vWhKn/iOp2Jc+STT80sRH9r GLGwFzaqO1O3bcOJuO34jZaKS300cqfKUyPReuwQ+Dmo041ZGVIc/ziZKfUr3Kg2tHgcMLQwk+8P XymviLom5UAyblJfzeDpg0dad0G1YMdbXK9TesUvW0rpRf0h8VCdXmvgQDQZ1g9+Vm2dbIBqcGIX v3wxEkUbQI+Uxt16o6JvGk5s/AWPDplhs5Q+OyUJJ9ZupbDtwSXRl6OnREAoWo6dgJAOun4JtZv7 vo2T2lNjJnHDdZynNvRkkgFPLSXBcv2z2Dn9HcRvTYJ357EY8PEsPGq11B8u9EukAOXzn5t/bVSn v7JXV5ONJPg/3ha12tdVbD+FRs/2xg9+DfHz7b9xLC6ZBAihkl6F9v3h30Yed6TnDkX7V4fanllx 9m9JgKAGRbR1h17powgPIvHSuUXmPkTpYDSauQaGqxXw3Vd/qFYsfouqv2XhKX84RcCw7s+1dtdr djR1dsoh1fB8k13nVO375lfskVs0YLbD8PiGv4XhSybAR+o4OjRWKBpiydDqss2kJT/9SArY0Gqp sqp/tufnGPfNIBIa5OBA64pYS3v77/Q0nLYafaZYHhCWtX8Z5rUdnafVpgsPoNdwtaIRe5rMYbRn sVSDtzDxlwnKrCmZSN1Kkki1MrFnQ1bzDf9SipPFkjZaAhVdu0ceS6gi8Pzpr/GoVYf9wrIp+GL0 AseekY49vnlasNbMScQnfq2VSlLW7L1+M3IXhWMDLaG0fLpizNVVqKDkKXFQ5bwuL1sa0X35hs/H i8tGWRyUd/Wz1ljwcqLOlL3XBZh+6zmtAycNWj4aiqip6+0ZltSazN+I3qPaafrG5E/xZtNXtG8g ApE7hmBPh6dt0sGj/seY/OswyT+n/SJ+M8q11vlj/7Xxwl0IHy43ZpoJEnLsGdQYW2w4ayakF+s0 doV71paZmPf0PEuHrb4idl9FaEjBKgzB79dyFbA+J+85mcA3/2d5xgXtWd3ZqTl+TBSbSe0/PdYd xWMdzYJR67zkG74I/Z6/iS96TLFxIIQOBezjwqGA6ZRfP7HKr/Xm7acDButpfliHQ2j0JpbifAex V/jbxwZr5xNolrSXCDyXtEQTSAh+e8tWwKa/zPxE3q5f4lN8/bJt/tenmVqnafUq1XHLfJtZ+R1K ZXiXVoZFMA4P8bPZ5tWH6u0Qq3pbCnIB8rsY4MVPaIA1DjpcGhJ6Kei2Nqf9MrheDzrTFlunr1en JXiZlr7aawPVPCvsFKR91HN15t2V9scZFlpYnKwHjYepbm9hrtvV+tGYHEV1/kuas4DcXvmXtFcO dMbsvLZfeQbtuleUdAT/M060P9ZpbMd5Scm70yKMXROpDZyzdszFvO6O+3SqO62/iEfYM3XUT+n3 3MxK+GreDQs1y48IKlNfW5R7S/18fBWgD2Q8tQJvhgx36IndfhOZPkZ1U4zDlZaheP7cLjyqCBFE mY97MijPNkQOQCTGX10kr4p1GKI7a6j1bV5bSb07UT/8mwkop9uTL8K5b1g9bFhtFhRZ+9Z70xk0 aSvnP6GXnzwozDWmfm64rp+Lsyswo4Fj7nXm/IhnJrYUVnF1WTgWjLY9r0jStPtvIiZnztH6d670 S+w6mw/F31eMxMLh/4F1v15Y/X3ZQCwcvd5Gz5xevTEh82tZgEArDBYHTkHn47tQK3sZZoS8ZN7C kLoWM2o9I4Wm68aLaNnOVqpjTPgQbz7+bwRN24jBU9pJZsW/wu5vTSrxrubX/fxiMk2+n4OHEvd1 6AopcOLwObPwIBLP/HwUU69dw5SUg+g7vafka8aaf+PzATEPxNIqaZ/clhMYNM7bilhXdP0yCgOX fIC6JeSkPjynD6Le2a6ZE6fhmoUHoei8KBrDNkSjy/BGmpm8X0LRbn40xp1IxfTLqRixZJxk/K8j /8aJJMcVfN5umnVFpRVL+6fEyeZiuX636D2Yevma5NfIFe8oBmPxZc05+EM3dvp9xUCd8CASETGx GBYThabBDpZFmL107s0jBEN+3YMRcbFoGyK7vbbn/7d3JXBVVVt/8YGCggrigEMKKg4piOVYmvNA moo5PzOwLDPHcsg+hzS/fA0+p8xswqwelr4gU1FzLofMAYccMhPNATQVFQsS5Ftrn7PPPfdy7uXe cy9kj7V/P7jn7LPH/x7W2muvvXa0KjyIgZhVyRD78RyoLAT4UeCvZk8MgRQekA0D6oPTsQ9Ov3QM hrw2VJQhI2kCLH852ao8/i3GwUNx46DtxLFQW21TYvQ6TJyMfpNxVyEWOr/fTBMeUOQrq8ZqwgNS WRt5GNvqBvb3n3dr7XxgQnfYtlaV5GOcEuFxMPq7bTB8zTtqPokQ3y5GtENQzEQYlJwMj6vlrBBd Q8vP5bwQv4kpu6HvmC5aPX0bjYah3x1E/63QsWtJ4X9w9AdwXde+xBAc0QkPgnpPg2EYZzymNUAt l5ag7sEM7l64J3dk1nyRStTsdfAy2iOZeeN3mH5mN/ToYxEY+Higa9FYrv7OVHhwNLbn6F5ayWnH QmtjbP8Wratp36h8uzu10Bi/5rMT4IVzyngctT1eG/tret4PR3+0jMngIUnw3LZtEPvhJJFWRtIo TXgQMeEdiFufrPWPSjWraPm58lB5UDz00OaSKdhGu+GxYarwQN0VDB6E5diZqI4RHOWzv4SGtPi+ uRfeazpYW8DT2J9EY//SGRj+8Qy1GInwYeRTcEWtFuHX9OQ+GI716jtREYJT35bCg/Zv4zywJl6d B6KgXLCl/WS9SE2YBJh3zqVqeZMAjcbyyIOJ+RYRjebvFlg9810ydFTnACsBqEyYft3o78d1woOa sXhTBM7tvV4bq08dwkYtxjKeyVdGq0AFvNDYcjkvk/Ogq7SY2rfxgX1an5VVEf5JeyEu2dKfySgY Ofr2gEn6KNN39dcM/XEVCyqTmXnQJ3wwzu3JGr2SdStRfxCM2p6so2WkiYD4oQpz/8M7reboHl/v hhGfyzFIKcTAk3sOwkCVfzr47y0a7+QqTZBjWM5LSvmioOdKHP+nkEdTx/WtTaPgzE+W+Qyy/lCC FvD/DvYIK4fzzNq3FOFBj68PIG28DbNuXoOJ+xKFir1V2HviJRpVwVUsVLqZkfQ0nDqtw0Itp5eq aRkxYR48g/PCy8ijEU1Q+JEU+OGLFKsa/XmM+Ky/yln4z65qvW5t+l9YUHku/K42mejvOA9K4UEL 5D1fOIc0AXmncTsTtPb66tFaQmNG1uTKx/oNlBjoj/iNPnoQYpGHVLBQQtpfEOFx4YRtMIno6q/Y B8dEiggnp74FVzKVuMFDPsYxMVpmCbQBNFLHw9CHCKRto7GcCu82D86pbWaGL9EycuPhf2zJ37XD 8O3otSJF+z0hC279chmyrt6EKz+mQBqgNtwN1BoJexRiVyVCh14Kfb+OGhuKGw/1WucXHtC3ElFx gi9v3dVy8K8o+S21gPxjEgEPsLwmc/6LonlBOuzpNE3k7ttwGoza9ZLFhgCq9kRMXgEhtV+Ct59c BJmbnoIj+6MhCtVf73lXthLUf3YBwMJhoqgVYz+E4QsGamqs9w8cAMdf6QYJbx6Gc7N7QGrcbQgL SYcfhj2rVm08PH9htqaCHda+J9Tv/jrMf3yWYdWJqYi5eQvZBtJGyBaqwnRE4L6Br8DQQ1th+cIj eHwiFXdk6yvxq3SFkRmoqoSqbxYJ5y7UamjsUL3weuI81fhKNErLV2nScsqrSo8xMPPHyqqEeA7s 3TBc2fW4th2+eErZbazy/IcQ9zriIBbwALUe6wmRrw+A+FmuSIoNIdA8A/BMegBEQkYdHE7qDrDI 9zWJ/yMwsjcy+lh3ckQET8xSND5Iwj4ySaep4VsTwscugXHVysF87IOXFveFM2Owraor2flF9Yeu b/cXL0d/WQqncXdh0KGVUL+OWkElmPafBDDfDvtMvDdCKW8/nZTXu0oktFq0B4KgIiTgrubW/u9D 8xtThUScbGBUaNIM2xbPhuuSbvv+LugwGNuM3COPQOTz71rqZTKvgPBIuO9BZbdAjMmdljH5yLIk OFqVztDFw2+piyBIrecfKctglap58OAitR8ppYJAxG/ig/Xhza4vqz7Kj1nc87JTIfWIsqMd3qUF +AqimwfeaEuj2SdXIah2b/gEz/L54llVT7iQgZOg50AaVyfhxjtfY/9/Ep5a9c/8KoNqZre2vQvr Ve2jbqt/gVYdFSzpc8Wm/WHQb40huVJT2JNzF9a/nADhctfOvxKENKuEgX7RFTsKBu5aBw3UIymh bfZAq3nYAdS+qwvo3GPZetDkqVhY89GLUKZTNajeJFIsStKWDoQlqBHQLv4AtO9fD6pENYZGKNxL P9QImsV1FfNW6r/GamcnY3GHQ44BALTN0ncSTIuqqe7KJcK3H6VoGhKkplkdqxVwNkRXRpzfzuL8 pu62he3uDz2FurPNYgJj+AT8AWl4JGxJ2zgRP2zURzDo/1B92R61LF8XQtvUFWH9XxgEm5/8RJdv /kcz/T3v0noxRim1zl8cg9balbr94IH+XWE5amjRLRIVGreEynWx8m44s3m5Pg+ao8V+YaiG66XS FV09qd1Dqeqp+v6sBjBBH6VdGV0Wzj2aoD9m+RIz8yCgHYYKTdBSuo5eUcVo4V6x6SOijgots1TX L8wyR0e8uhOadYhEOlYTujd+Ddbi3BO99m2oFYGLhDLIEcz6GuRZfbP0R6hat5RtHAX68R/5yseQ ubGmmPPSTqRB/XqhoqAB3V5Bwe5M8PLJgCNDawmtoL67LkIEzWUOjjDkXDymzjMxUOeReuCN45yw CGjQBWKuH4XgNpEonA21P/4tMDl+MskDWSeKfNBp5IPUqS1yzrtwdUk4bL2TC1nqQlYfvv6iKzBz Efpg/XPxKCvJ4AVNWHEA5qNRxtMbTkAuapYpgqJK0CnjFnSi4Ko2iqblkatjAigDs/SA4hq6/Pxn g64LYH53ouHTYe+6IYK3y0tN0lTee+CudjPdrnZQVE/oc30f+JVXaN2Ghckw4o1ogN8PwbpRyqKY tOxGfmrRWqmAc8nIM41heS1l/sxXtNABMPP2AMU7Oxty6UgMGt2NnL0M0pc0RVX/ZEg/mwUVSeCN R4yrRD8HLX0WI63tCkOWPgcVUXMiGI8tbN7wIpBW7mPjkLYhlA/ElBS8Gx1NMcuX5CurCY9L6/BY 8J9hIuat1GTY8uZqLZXGXeT407zUh2T4sIkSR/8lz7sShEV30bxyb2eI58DeDS1rLO2r8kB2g+hY tt4VNb+lz5ufXUPAHkvkWip/o9B5v6fBuVyFaey6ZIRhx67Udwp0+5fClP/y/RkUIET9LWooz8nR bsAAWjTrWpcGav1pK6DlvEZiIfHTjpMQ2itLWxj13TVVEx7IygZ1mwxDxyQKYYD00//Smcvdk4bD /sNElpxwkuhodhXUBZf0t0mCJtbzq1eqvslw9YeNkJF5QxfKD3xy04UEmW6muJl+Hb9VhpzLZzSG 4PHpFuEBRSTGIHTCAmgzRznnpUvMrUcqq3S1X/wP/GNWN0GUpZ8Vwc1NhVNJf4pPtzb9DGfXE8OV pQX1wp2zuxcs9bx9A79VRwKlc/r8cpCwiXOeuu/y8c6ZFFUAA5B+/gyc+voKSNMTFIZ26TKgNj4d wb8TcBubsrSu31AY6fSWeaWfvl7u5JWjrM8hclxvqzHpVbYltOniK4QF2bp6ZqKQSnGzoFOcKtDQ CoWLx9ZjYfhru+F9PLahnF/HjyZx98Iz5fU7l4ATKLBY2TwYDseNhbBGyFAidiX8g6B8r1fhhdGf 4242cgYedHnasMpweM1V5smDIteSDefCAx0swgOtKMjwtN88G/bglZ+3Nm2Gm9lxVjvUlnkjCoYc 2Azh9az7mr6NtTRdePBp0F5oQZzY9AFc/C0OalRIh6OT10LJyJKwC89LP9SvHvie3SY0KEo2fAIq Ir9PuxDXD58UuUS8ulgnPLBk7FNnADzzWoK45vKXDQc1RliGkH2KhFIjdryUX+XWzrxDmhhLkpRU AnutgtjXkQl10sk8Cwouwznd30+eEEkSQ99KEx6ouVRpi7tjz4sFwV3LNFJQEex+z3QjL/28VNA8 6A4ttvTZ/NWw983i7yR9RMGWGWeG/pjFwtQ8iJXSt5NtHe19k33WT7vVwA9K18GlJwoQyqnn8iwY K6m6RRPU+S+w9yioUd1SSuJlwp/tButRzfrmVZsOL8a0Zf7y8nHMY1CqPmFNxI7w6buJML/cw6j9 1RtCQisLulGyMtq5WfoDtGhQ14qfspTGxSc55zjJA9mmHtj7catrKfOQ3wmd0gGFNt9Yb9ioEbNO bYfvF87HGxU22iYl3u0ar9MZUfQhsibLbZiK+56G/Ge7sch/Jgj+8+i6rdCm+0C4/r2k+3gqFm34 HL/ypxCKyBIQrb9zP+oRHL4Lt07eEFoweecOqppkUdB3gUV4IONAxbbQJ3m22HAoY2t8k+zvrFwK 3w5/VaeNpsXM9+CFlmmyxPICtXckHxUQJMKVDsc+hVjmG18m+ZJ8mZvwOJ/4BpxPtI2I2kR7jWmu EjIK2s99FoLLlYLrK59B4cif1ryubXIuvv9V/JaLxeTgiIDs4sUGjBxtMomBsIaBduqtqO7Rx4AK peyEKVxvZRIyl0dg7+5C8pkvtndNuK9XSdiDu9ZZmWhA6cwJ7WhASG0L0dXHCxbCE1pcWrv0Bb3h Hd399OF9YgXjf2X/p2g0Rlv5WEdy8y2xb4zDFH5XV8YZh9ar4fD2Ct3ZORnZyzsEQnqWxNslbJgP GcDN32aDrW1MGCVnad94WNE33iiI5mfLlGkfXHy4smwUfLrMUSRHeMRBo0edZ6jN5mW0ADK0qK0y YBVjq2naJbY1qz52Bcwca+1rBncSOkW8tgR2bxwmBFMn4xeAsrTVpx0NsYc/g7DaKsOq/2Ty2Us3 O9MOkZEjZuTSBoU5bDyunV0spBFDgFCwd9SCGPV8wgOjTF31QwFGk1g/OIFaAudSMuC+xinCSBMc /hNTWglXboyDoH0KYxgxQqkD7UKc+OaOyKlh1/p2c5TCIb/q9udpWqSXN57e7KYrP2R8tRYu/RYN VVTNBenvqV9n+3vWWUVIVKtrE0NmLUi10u6Jcnkqr4LmwcKixbphYwiHs/TRMLITnmboj2ksTM6D TlTDbhCjPqvKf+3GoQ9maYLUZrBKXFuAW/mae8HjN9HxL6LWKdm4QYO4i1LypZNPWzVfiKLxMMIi wI6qTFbKUpjz8Atawcp07gkR9cvD9Z8OwvENh4S/UXpaBHwo6Ls+rPnnOKhuZANyE5kAABq6SURB VC8GE5T85x/n86e+f9Rg2J/fW/O5c1HlZ1RhCFo4gAA7LD9tOMy8bc0skBD7+zY1hYaNkmgUNIxr izQ2FS7Ef6VuUmnZFfjgCEszfEmBGToR4P4J8dBxSBRc3zIPj/ktFzGqvTgMajUs5yB2E2j89FBF I7LVXdiMNiKyjVj+rAyRRkbSRfHd3saUbUZ/Fb9lWw5+LxiBgmhtwSn8zUL4VL1fkzZf+y0Pylcn 8Wp+JyXrtND+K5yfcbFEUfLwejcyPGNnLoTfT6VDNhZbqu3L8tNi445an7voKZlv+m5vkZpzW5kE ZBr0S2qJW9T76em88qPPoVqWxqAvhjQ0wrIEdwcKcvnOXzmIQKr+T/yzA+Rl2QemTHiESMHbO1T8 lmx4C3IQB2+DKBIHB1ma/pSLRzrsaQRQopadZeVMXOtOVbEB7GSHOygVG2jg2gnkwFuXbnc8Q1qj igEYanQv/8pWO9PWqWYo5XY0Y3gsL+ucjd+UfmnEWBiHdw/3EuG9Ydi59pBxaA9cPJmKWhyEI54F 3P8l7PryMD4nw6oXEoVBN3uLfXvlcsefiG2ltqh2vOEbOJ9yBmCwncW2j7ILApBqV5uBGBxaCBRG +as/PgHgo1lwesceqJW1TVflFEjddRgy9ycJv7ptQ8Wvl28o1I7whhOH7kL6zzfEdVK6SNqjd6Ay Nhz1A6MFj5aA4UM0DNg2Bn7DW0c2H4qHd2uiUcL0t42FsobxPe/pV7sJJvo1HJq4Gbo/F5Vvbk9D Gyyecp7Kq6B50BO02GgHNSst1SEUztJHh4k4+GiG/pjHwvV50EHR1U8ZcOtnZ0QCBaekp2vu0R8n 8jII4uxcVjH6ZbSBNRgufX8IruBNVETKcrKvw6WkuXAMN0Syf3wVti3vbWVI2iA7l71c4YFcSZx4 vZ//9bKIQgbBn1z4HJQPtgi3c46iwcwWeoOZxqkbjS/jkO74HoRM7MZBBkJayX96wR9qBkp/J7tP Q7+bDv64n2/PlahaV9AyC1viWJPPNp07P6/XhAfdVx6EB7tgeir/47XoBhzoEwZJqJXoritSftCm sP71IqECXv1dIXwJPIe3RtCxwgtzH4OUXhcdHN228IJeob1h4qkOUKpSfh41oHF7zI3WAdPh7Ek0 rmhHSGRTJPHqCX4r6+I55NNKQamqFXXrE6Pc2M8sAo6WA2bTvKfjefmXgxJqCXe9tw3qzKJObu3E OSt1d7psZcl4W4cp1DdcAIf3LgkpWIaf8CqVRupVKjLPzNRU8ZirU3uX3+iXDBj+sG4QnpO1Vmf+ Y98ybcKr2jAEvO7zUlSL76bAzvjvoe/4FvpkxNmxb9SzY/oPpJaoGDUEaGUlPCD1LFT5Wio1APSx 9M8KEbiZZmfHmxZneMUULY4CatXFiLRA84XA+nhlmx16kXs7G7zFxzwoE0XMtoLD0b2x8GCLQPEu /905mqDhIP2K8tfLNxCqoFTjxF3MNa8yhEQogg+jMoh6uTFKfYJDtCMe3sE1IKSJNRYyT2HH4g4R AZS4mHRFmZe3f6goJdkpOXWyN56DzU/AxLVma89CkwkTxdl3s7iTwOzfaI3/xN1/wsuZz0OI1ZQx EZr3eknYqzAJm9vRfFWV4kuLZ8OvL0Rr52NlwoKZXDxKfa2vGfKU3+VvYTKLAc3boeB2Npye+zic FhlOgZH7msN/msXAN/1aqUWYAjVqyna0qEdvHfwpNM980XKjixqa2uWHZ5SzrWXwGlJnFwuyvvZ+ SU34/mYolNm0A66GtEZhbTy8XTkEXkT7IGXdGIv28nPGP6B2lBpsOqyb3xR6jm+r1Zdu0XFGYOtM PhSmqPLyBC02ooFpm5IcVtVZ+ugwEQcfzdAfs1iYmQdti65fwNC3vGt4H/xhRfvHNqyz73Iu8QRN kGk5m7c+3O+CR5Jziu4L2USQavmqpf0aUzfBU1P6QZgumNfkyXB8dHXN/ojuk5uPGSJ+QTyQbSbO YkEaXEcSScMLoOWYZ62EB+SXvlkZIwWlJ65xNNqE0eNHCbrlUmDrwq0w1JYXxxtrpEG/0LaK5pVf ZUWQShs0pdEuR0ignYzxuGMu2nEi5+Mt2z8RDq4+CV0Mjibl4FGPnR9ugIr9JosrfyleBl7fqbhZ 4hppPX3Ju5YCR1QNOTVQgT/2sDbLlxSYoRMB9ML1KmhDrf3kdcKeRuIjb0JNvCEiqAB6J3h0XKAb Ob8GLdX1xV34Mu5dGL8LbX0ZpHfl29WQfisMNVwVPthdfov4neNTakLCwltqsaxtqBiVlf3MIYCH hYqXI+N/Hd7qKCp9em4PSJy33Ur9JhPv9F4e8bQKShxE6gySFRVSYlA2pIUzHi+c+DAcO3DZkvWV vfBNz9ni3Z46K338pn8t2By/HW6jpdSsa5fh/IqZMKetVGcbD+EP4syLgoomo/xFWkemdkAsvoLb mfiKxCET78tNROZZCgpydAfnfcori1KK+MvGw5CLIl5agFKcHU/U0gy66eOITNR/kuk5Oe0t+DVd leDevglpW7+A1X3Kw4zg0rBzc7oIXX3IOPF7a9ME+GzUMriRoUsp+yZcWv8eJJQpA7MqlYek5cfF R5+wlmjIRunaqztUg+9XW8p4ZdtSK8m7ck+0Lk0zj3Q2H8/K3fhaYbpEmohhLhEx+mbj6Nxio6WD he+RaQ+LdtKrgOVeOwun3p0JM/z9Rb0O6SznUyQSKuTlZsEdda2fk31D4G+Un1fFlvCIelPA6g7d 4dD2s1aloTuO974yCKaXLQ+zgh/XrNmLfFCQk3cjTbOhkI35glqnXANNEHfyyk5LE+XKE/d2W4po VU/dt/LRcZrF5YQHhliNkVy8R/3IlFbwdrc42LXoFTh/QRFUuYs7wCRIeOlzuK2TexGxunH6hKXA nniivoP45qBlY6naaIW9TZ+qED1FteqcgreRDIFf8Oyn5rIvw7HXB2gMcLP3+1qIOOWDYzcrI1UE p8UYaSLJfkTfPOW8SkcJw1EyvYqxDSGkQQthOFH6hU9trZWN5sA6L7ymfpoOS4csgau6sZ+Ld25v 79dS2HOhQO2eskh1aC6iOezPVEULSvQpqqscj/icz6Ef9fVL4rYXxIAClG4MMamb1Vss5sB7jy/R 5kctvk26OaraZkFzgKv9HdAA27CJZUW2KVMfhVn+fWHr/DdhwxOtdLfoaKVy78FsXtQvXZkH3aHF at8kS/wHtpwU9aV2T1vxEsSjoWBy9ugPfXOKPlJAE84M/THLl5iZB22rtGE6GuJTx1bOpb2wpUdP TT07m/gB1VmNJ+mp/trSUTmXuEMTcjIUmiDT0mdpGWe6yVgNQHOHj3r7wI6FCdrtTERXz6x4A5Yj vzCj3EPwq5K8pn15bnYn2PrFITEnyrzystPg8n5lIU7yfk85V3ggylPaSHIWC7kopbjnt2zUaFbW ZaSNaB/rPfX4qVF6FEcuuv/88UU49oPCi9H4un5kB2wfHYP4lYb3pm+hoKZdHhJSSd+IF/98xhdw 7Spa8yde8uhGSKxIwlsF9Qf7R4l8AlrhZoG4fSoR3q02FW8xsNA6Ub6UjbClTyu8Gro8vN5qmZjH vcK6waBhpUX8nXEPwI6EvZY2vn0Z+8QUeDXqUdiyaAGkbD+j1cevmrIRBbAbTh9WeXCc32hjIqGm xeiivu/r66QfO5SoEdYU132+RCuyUw+EU3baIRFWz29ROdqlvK+mMQ/WvrnNgpNKH2V7aPyIAR+o FQKPBnWO/4d4JaHt/IdnwMULN8W7aGNcL3z7RDDyaYNgZb8RVrynkoZJfis3FY4vvq0Vg44lHdno YR5Nl3pxfvRa/cdXhluOHfOUK7BcBeetPMPkXE2mUMOLe2T71Vev2lOyColsjLvnP8Il3fl9zYJv oZbGTuJoOXZ55daa4RZxfu2+LNilGcOJxlsTVlkZPizormCZ00C8o1xTJ7p5CBKqWQQFMozxbwze //spBPvh2bCH9GfDjENLX3nPtHwnq7j6upExtT/FeWgtBPTcckHTHLiA9hYkwaMQVbv0An8vNESo nuOTsfQW6LNSPsbzfyPlJ8Nfma+9O5QNI9l4Zq5/Cd58fJGNr/WrUfpkdXtvH7zLeAMy3aoL79ML 4Oe1NjYk8K7m03hXc4gSiK4HWzRMWRjJeLa/NaauwZ0Uy4IK0Cr4ch3Bo+sw7+9TGa4mbtAYRUqD rARLKfHpKSFovEhKcG1zUN6bvb8fetiqzLuYl7/XSVinWk225DIed3tnQ9nz+e9g1mOZc/QLFAbF WaLhE13JRAY1pRO3XPzHIvk2hXv2SUioQBoIFhYyPGYsVK2DzNlctGSt+rf/94/QrleozNrULwkk Dvepot0wYS+RaLznumXbytrnzH1LcSEpBYSorxPRGIIQi7TDCqNAAQm7kZ8OUrR4cs9CcnnFoKqW iMHDoANXDbU7DIIW6JW5BscKWv4m1xqx6oxY6cd2zx045kmwqXPnF+B1rGgIUzqap8np69UKb+Ho Rre5kMO71mfU6aM82/1vc4+5DRYBnT60HEXBb4lBjTRGVklSzoN4lejQqsLau92s1A90K85ziwei 0Vfz/Z20u47NfBJWvPGN3eyM7vW2G9jBB1fzMj0P0p3uZmixTZvZr4rSVmQDwxR9tJ+wwy9m6I+P SSzMzINUeP14dFSZJji+6mzrYNPPY/Au+A8hbVhVWKFqazb/6DR0f2Q7jr9hanIq9r+7Tn9OjFZu BtKXa9ChTKgfds5gPMZhWd622i3NOfou0oYXtei2dIFU4Ecg/1QFp5v8/SIKGo3uCsFoVHj7oq+0 NJ44mQl1quOk6gnnJA/UtEUpAw0IhSeoUfEkfBnU1GZumqJpStnaqXJUbNt5g8b/fuTxvkIDmYqj BXyKVRL1Zm+GweNbWvk5+5L13eswp+ssDJ4/Xds0bI0303Wnc9AgsHS+EV2gFh7NPL5xg/QSv+F4 69SQKe0UP8SbNsTkApg8q+CtP3p+n/rE0z99BvdVU4964PWe71Rtb8VPKIkZ/Y+B5/b2hCXNrfmR Zu8dhR4d9urGRBy2z1w4h+NmpTpumizaDzHDgkzxg0YlceR3fc0INLb7Sb4geh49fSnaN3vBQmP6 7jkB6W3uV+wW5YsJoI9r+5n4mZ9faQfLVaGu7Xf5Ttdjx6BWnXBu8lsWDQYLv2bLq078nzdk1vf0 b17e5Hu6fMo27T1dRM8Xjq4baf7lJRiBd4nLO2CJIZWTSb3YeXjl123l+h/PZ+9cirj7NfTsTmjX taQIf+ub1ZrwwLfRBHgWJ7pKSPyMHDGr449uha5jeuo+R0FTNJgy5sJti/CAvpZtDIPS9+nuardE 6fDBOohdPMbiAfXxiiRSci8Hzdd/D53UnW1LgCjo+MFWGLc/XsOVvultLYiwWLf+P3wG9+METs4i PIiC1v+3DJ7/6ZomPKDv1cYmwbj1lvvsL278Sic8iIZ2c5fBmF+uWV1f5xf1JExLWafe906pSId3 KCdvhX54N73Mt1Q15C7NOr8gLSYRJCNnlD5Je6kPDv9wkhbl1JdYL1WAVabzUHhsWTJMumoRHlBA uXOhRTJ4qFCuvLVv+bYwNP0o3p8t+0MKHPvSIjwIj5kM/ZMPwkt7LQtt78CCGYMAfwPcXMwrD1UR S9jwZL4NA3AHBKuQlz/96o2qaKrbPo36w8xfd+Pi0XIERAoPfCN6QgzafBj/laVOBIop3LEDS5sk cgF7KnEBbH9zgSo8iIZHE3a7LTyQjeZTr558tPvrF2CNTUDTZ2Haz7uh47BIESf7yCHdIlsp3/jP VOEBhvCCUuDfUE7/xMTZccZd2k5gx94BD0VrAcIerCmeK3fspvoZG7UlQ5gTd8Zr45jmaSk8KNN5 NPwDr2nThAeUEraVnNNJQGjsAsU8Jr9ZYwFQqrrKQGIAsqot216GB5wHpSFK72p1Ld4OnsoGB4p+ 605/p3m3wYwkbOeDMGRFEjzz3TaIXYN3k1+9DRN19487KIbTn1zOy+w8aJYWo0HgLifWwEM2c26D UfEQ+595unqGWrU1fXCJPupScuXRDP0xy5eYmQepLmV6zLSh7+SL9PHrZOiho+3l0DK93NGnEIoL xf7sC6WqhUsP8MeB4lWlhab9B6Bi7yJNoARLBNfR0lUeovEcs0IobMdjyYZ1sCTWzqfRCBj1+XRt LtDThegPkK6mK8IDiiXHMj0rNDwFji56XRMeyHnGY8IDysgFHigvwBaLMK3MtliU6YS0k9JHFzL2 Yxg4/THlRfc/gvjAU7uhbWMZEvuCze0DNP4fQB6vYx+FnuiFB41GzYFhu8+YFh5QUXwCpfCbhBJR 0PmDZRqvK4tKuD+59yK06WlND/2ajoVpR9dBW7Vs2Uc2WgkPmk6YB8N+OGMRHlCCiHef66dhwGtD ZfIav0/5t387EedRvB5TCg8oVNnmMGxfgqrxoEXDB7zFZdtBGPH5RJ1nKMgLP3SeEBCAmg8+ekY9 BHkbvAms/3AtWGnE3hRfoqXgyoO6E2UVBW3q6NiJkGc/ht5au+NYxI/Bj9mjpdbjxypZfCFtoNqv 7IZRa95RtSStQ5TpPAGGIg3XhAf02U1+i7S52rw1RMvIt9FoaP5ofe2dHzyHQLHUQLCCD1Vzsq6l C1WnPHz2wfui/QJ0W5hWgf+al6zL5yDzapbI3KtsCARXK2tYEClJt9pBo5BYL+28n2FMxTP35mVU i8eZBNVDS5QrqxmMcRAFcvF4RBapk+I5M/9y5ZzKR58eqePfycmGEjj7evvbsgH6kMozHcfIxft2 vTGOl58v+DoT5/Jl8MLFbh5C6BdsjF3+nIrOh9S5/riKxxD8y0Ee4lGiLNYPbUAUisNjH7dvIA54 coVOpfg52c6mylKUeeERGDpa4Ic80R0kWn7lCu5LLuGO6WfdKQd+gXlCxTInE/st3qudS/3+XutT WNZMPP7gRWd877HyZZ35CW7cCYTKdStpXSrz+GHILlsP5zXHbUbz0x9o6JGcj39Zp9pYy+S//OHC 66ilhVe52e4kFka1Cy0vk7Q498ZNpCFIs3D+dDRvuksfzWKZZYb+mMQCTMyDdCwtC+czWgE5M2+a xUHEK0qaoBZU9A98LuFrv38QH5ODvJ+4+lrFIxePCXpjnMLGxFUeyGX8NXqA7VveOb7OKg/CA1Xt 6UpMX1ppStsRVoE88yKxEHk5wdtR22LRAFlBhe7TpkYB5RPq83hUgnigO07yhDSGhYHhIugPLvEl noG9yFIhHLPILglegV0K1wt2+XdP8FvYb+kYptG6gjUQPNPkFhGkZ9L7+6WCk41fJQszSzKze835 VaqBZSy4VFKSTsZa9AZfCppQZcreSECt4skPDn69y1dCS7jSuY4dDW7ayXDW+WF+inMhjmxfS0Gd za5IwuWhRFrrg4Jouo6j0wX1LQv+KoRoYqFwXVHmhQtKWR9n+7BLuNOCVZ0bKJ43Cii84d4TRokG xbIGFHbbmuw5fmF1EUdrF9AgEgxuW7UOhG80PwXco5DnK2xhepBAmJzKKF//9mMhPCCvssG26JKv G64o8zJJi71JCCqq6HjedJc+mkXRMre7kIJJLMDEPIirQlyAOU9PXahF/qBFSRPU3J3pH8THaHRD w6NoJhtXeaD8oBbg4y490PCgfByPsQJKUuBnV7GgtpWkzpk5QNQA6bd/JaW/e8vIBZRMG8MFhPPE Z5f4Ek9kWIRpEI7OrGVoHnOb38J+i03NrhARYAFCIYJblElfR+OAOxYuE1lmJD0Nq146AmXwHFtW Zii0ekWxQl+U5eG8GAFGgBFgBDyMgEObNWj0t2uo5zIsyrw8V2rDlJg+GsLCnowAI8AIMAKMgCkE WIBgCrZ7KxIZKjm/cAoc2IC6XKo7ghZlpbtv+Gi8xs7DO1Mycf5lBBgBRoARKBoEcjLgep7FOJTM tHrMDOg1fxKQsUCPuaLMy2OFzp8Q08f8mLAPI8AIMAKMACPgDgIsQHAHvXskLhkqifjkBFQ5l4Fq rTaFyguCoFqe5Cpt0udXRoARYAQYgaJBAA3SjUy/BBmX05Tr57wDIaBS5cKx21OUeRUiekwfCxFc TpoRYAQYAUagWCJgu9wsliD8V1QaD7ZXaCDtA/xX1IgrwQgwAowAI2CLAJ4PDQzTn88uxHPJRZmX bT09+c700ZNoclqMACPACDACxRwBjwsQ/i7WLYt5u3P1GQFGgBFgBBgBRoARYAQYAUaAEWAEGAGX EJAXgbsUiQMzAowAI8AIMAKMACPACDACjAAjwAgwAoxA8UKABQjFq725towAI8AIMAKMACPACDAC jAAjwAgwAoyAKQRYgGAKNo7ECDACjAAjwAgwAowAI8AIMAKMACPACBQvBFiAULzam2vLCDACjAAj wAgwAowAI8AIMAKMACPACJhCgAUIpmDjSIwAI8AIMAKMACPACDACjAAjwAgwAoxA8UKABQjFq725 towAI8AIMAKMACPACDACjAAjwAgwAoyAKQRYgGAKNo7ECDACjAAjwAgwAowAI8AIMAKMACPACBQv BFiAULzam2vLCDACjAAjwAgwAowAI8AIMAKMACPACJhCgAUIpmDjSIwAI8AIMAKMACPACDACjAAj wAgwAoxA8UKABQjFq725towAI8AIMAKMACPACDACjAAjwAgwAoyAKQRYgGAKNo7ECDACjAAjwAgw AowAI8AIMAKMACPACBQvBFiAULzam2vLCDACjAAjwAgwAowAI8AIMAKMACPACJhCgAUIpmDjSIwA I8AIMAKMACPACDACjAAjwAgwAoxA8UKABQjFq725towAI8AIMAKMACPACDACjAAjwAgwAoyAKQRY gGAKNo7ECDACjAAjwAgwAowAI8AIMAKMACPACBQvBFiAULzam2vLCDACjAAjwAgwAowAI8AIMAKM ACPACJhCgAUIpmDjSIwAI8AIMAKMACPACDACjAAjwAgwAoxA8UKABQjFq725towAI8AIMAKMACPA CDACjAAjwAgwAoyAKQRYgGAKNo7ECDACjAAjwAgwAowAI8AIMAKMACPACBQvBFiAULzam2vLCDAC jAAjwAgwAowAI8AIMAKMACPACJhCgAUIpmDjSIwAI8AIMAKMACPACDACjAAjwAgwAoxA8ULg/wGu LyShQYUOngAAAABJRU5ErkJggg== --_004_1e0aac7067f44b358d8967e8800f8cd7OPEXCLILMA1corporateadr_-- From nobody Wed Oct 4 13:36:02 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB6BA134485; Wed, 4 Oct 2017 13:35:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IqpKFs-IV6FP; Wed, 4 Oct 2017 13:35:36 -0700 (PDT) Received: from mail-pg0-x22e.google.com (mail-pg0-x22e.google.com [IPv6:2607:f8b0:400e:c05::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C628C126B6D; Wed, 4 Oct 2017 13:35:36 -0700 (PDT) Received: by mail-pg0-x22e.google.com with SMTP id m18so1012328pgd.13; Wed, 04 Oct 2017 13:35:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=duMlAHVY0QH7MwJPo6caLf3gIUMG/9ck8nPM3IUlXzU=; b=P+yX20UU9M2iXgPq5b6FhVULqsUbikGhTuRv9FugqBUPsf5QrIlbrCEmm4jzQ+fWUF yJBSz4qwXRb6jc25dCnq4lz86UI0cQ9BXsaQCEtlwxk8BOvOp0tKTLtUVBrd175rSf5q p7RI3HyVpoNX73jfvAuKnW0mX6fSJ1nE/1Nt07+SpW+HWCvgoT7UertUBIHBOqlGDnoB s/Wn79hm7yuc+xc+HJ2xL4x54U3PTR79egZKUdDq8RLc9aQqRuQQl0T88axhyjir2nA9 G9SIbOV7H8oPR7JoxUY2eCYQuXKNB9TFG/a/pHPi6QaV4WmHncGhfguD8myYmEOevQjk QU+w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=duMlAHVY0QH7MwJPo6caLf3gIUMG/9ck8nPM3IUlXzU=; b=D0fybi3T4SknSKJV7IcyPrsIB8oQU48qdB8kknw5ONlPR8r+i1xb1iI+QOVHC6slaA RzJpkpVjAJWeN5HD5pxfYoaJtKgoh52xmx/82WZIIv7RahHQ/2dWk7gjsnnhg6Oe26oy K9OUWc4JWqptNfFkd/gAOcFpsXPZ/5mRJbzWXrGYoDpn1o6pmFlU/ldhwmA8OAOflbtb BtLvRY3QyuFqiiRIjxHpv7qG220KTiF9deSvZhqf9hNq/9wwcUfpW2n2YNyXMYtM3MG+ XrF13dI6B0E5GFaU+TdtlKL/kr1pHmunZOWKiMPkMOGGGypwa4iuBlGubq2+ujFvrIFg 4Uxg== X-Gm-Message-State: AMCzsaUBvzv19usJvkZ1ZdSw/rLh3mzKQGaqAwKrZUNUStbtHa9ZRHTJ 8ioWIbdnYTXSQ3Kj3dC2axg= X-Google-Smtp-Source: AOwi7QBGpqNZZN6eqpIaKgVB4nZwtc6GccODtJfssKdRN5MvOXJeDWfdVBTTVbfSSOysIQE9FG7H8w== X-Received: by 10.99.103.68 with SMTP id b65mr11100095pgc.271.1507149336286; Wed, 04 Oct 2017 13:35:36 -0700 (PDT) Received: from [10.197.31.157] (173-11-119-245-SFBA.hfc.comcastbusiness.net. [173.11.119.245]) by smtp.gmail.com with ESMTPSA id g68sm25709075pfb.120.2017.10.04.13.35.32 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 04 Oct 2017 13:35:33 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Dino Farinacci In-Reply-To: Date: Wed, 4 Oct 2017 13:35:32 -0700 Cc: Alexander Clemm , Tom Herbert , "ideas@ietf.org" , "phill@hallambaker.com" , "ietf@ietf.org" , "lisp@ietf.org list" Content-Transfer-Encoding: quoted-printable Message-Id: <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> References: <150670160872.14128.2758037992338326085.idtracker@ietfa.amsl.com> <778d5504-ba4f-d418-7b20-356353bb0fb2@cs.tcd.ie> <8kd5pq.oxb4pv.rtlo8t-qmf@mercury.scss.tcd.ie> <644DA50AFA8C314EA9BDDAC83BD38A2E0EAA7204@sjceml521-mbx.china.huawei.com> To: Stephen Farrell X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [lisp] [Ideas] WG Review: IDentity Enabled Networks (ideas) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Oct 2017 20:35:40 -0000 Adding lisp@ietf.org to cc list. How about creating a working group that solely focuses on deployment of = a mapping system and does not specify how and where identifiers are = allocated? I have made suggestions before that such a working group should be in = the ops area. Some examples include and are not limited to v6ops, dnsop, = and mboned. Cheers, Dino > On Oct 4, 2017, at 12:45 PM, Stephen Farrell = wrote: >=20 >=20 > Hiya, >=20 > TL;DR - I am now even more convinced that this ought not > go ahead. (Sorry;-) >=20 > On 04/10/17 19:48, Alexander Clemm wrote: >> There were a couple of things raised in the overall thread that I >> just wanted to quickly respond to: >>=20 >> Clearly privacy is an important issue and concern. The current >> charter proposal includes a requirement for a detailed analysis of >> this aspect. If this aspect needs to be expanded, sure, let's do >> this. >=20 > TBH, I don't think that'd help, for me at least. I don't > see any way in which such permanent strings representing > identity can be defined to be usable as claimed and not > be perniciously privacy invasive. So some promises to > ponder the problem in charter text wouldn't do it for > me. (And tbh, I've seen that can kicked down that road > before, so I'm skeptical of such promises in general.) >=20 >> Everyone seems to be jumping up and down regarding the use of the >> term of "identity" as if a foregone conclusion that this is a synonym >> for "privacy invasion". However: - "Identity" does not imply >> "personal identity". Really, this is an identifier scheme for >> endpoints. =20 >=20 > Sorry, what I assume is the relevant draft [1] says the "identity" > (denoted "IDy") is a "Unique and Permanent Identity" and that > "Networks may treat traffic differently depending on the IDy of > source or destination" and also seems to envisage a large logical > database of everyone's IDy's: "Identity also allows to have metadata > associated it to be applied, regardless of which IDf is used to > refer it." (Where IDf is the identifier that'll later be mapped > to a locator via, I assume, HIP or LISP or similar.) >=20 > I think it's entirely correct to jump up and down about the > privacy consequences of the above. (Not to mention the potential > censorship and discriminatory aspects.) >=20 > [1] = https://tools.ietf.org/html/draft-ccm-ideas-identity-use-cases-01 >=20 >> Perhaps even "identity" is a misnomer. =20 >=20 > Well, it was presumably your choice (where your =3D=3D some set of > the proponents). If that's a mistake, then it seems a fairly > fatal one - to get the name wrong for an effort all about mapping > names to identifiers;-) >=20 >> If you will, >> identity as conceived in the context of IDEAS is a second level of >> identifier that does not have to be exposed over the data plane - >> Because of this, it may result in greater privacy than existing >> schemes, not less.=20 >=20 > I see that argument in [1] but I'm not buying it tbh. To get > that level of protection from such an indirection, one would > have to have something like Tor hidden services and perhaps > one would have to *not* standardise the mapping from human > meaningful identifiers to those used as IDf, and esp. not the > reverse mapping. Defining that reverse mapping cannot but be > privacy invasive afaics. (There could maybe be ways to define > how an already hashed human meaningful identifier could then > be further hashed to become an IDy but I don't really see the > point of that at all, other than to just standardise something > for the fun of the process.) >=20 >> It enables you, for example, to obfuscate >> endpoints to outside observers as you wouldn't need to use personal >> unique long-lived identifiers, quite the contrary. - There is also a >> security dimension here. If I am victim of a phishing attack because >> my network information (like today) is exposed to botnets,=20 >=20 > (Nit: that says nothing about being a victim of, only of being > a target of, an attempted attack. Speaking of victims also > tends not to lead to more objective analysis, so I think it's > better to not go there unless it's relevant, which I don't > think is the case here, because...) >=20 > I don't understand what network information you mean. If you > mean email addresses, and are proposing that the email ecosystem > change to use some IDf or LOC values, that doesn't seem at all > realistic to me. If you don't mean email addresses then I don't > see how any lower layer change will affect attempted phishes. > The routing area is probably also the entirely wrong venue for > any real anti-phishing effort. >=20 > That really wasn't a good example;-) >=20 >> phishers >> etc who can hide from me (but not I from them) and remain anonymous >> or impersonate legitimate users, I do consider this a very serious >> threat also to my privacy. How can IETF counteract such threats? I >> think that IDEAS, if done right, can provide a contribution here. >=20 > I don't see that at all. Unless I'm mistaken that seems like > wishful thinking to me. >=20 >>=20 >> One aspect that has been missing from the discussion is the question >> whether there is a distinction between the network provider who >> provides GRIDS services and an outside attacker / observer. I think >> this distinction is important. The way I see it, if done right >> (sure, big "if", and requiring detailed analysis), IDEAS as I would >> envision it can contribute greatly to provide greater security and >> privacy from outside attackers. At the same time, as it is currently >> envisioned, there clearly is a trust relationship between an entity >> and the provider of "its" GRIDS services. The mapping database will >> have information about locator-identifier and identifier-identifier >> mappings, so GRIDS will know which identifiers its endpoints are >> using. Clearly, if this trust is abused because the provider cannot >> be trusted, if you are concerned that it sells your endpoint=C3=A2=E2=82= =AC=E2=84=A2s >> information to the mob or a suppressive government, there is an >> issue. However, when concerned about this scenario, it seems to me >> one would have equal reason to e.g. not trust your mobile service >> provider either, who can track you, knows your location, and has your >> customer data. >=20 > ISTM that introducing that GRIDS thing makes matters worse and not > better, because, as you yourself say, it is clear that whoever has > access to the GRIDS information would be better able to track people > compared to now. >=20 > I would prefer to see fewer long lived identifiers in networking > and not more, and this proposal introduces more long lived identifiers > (erroneously calling those identities). >=20 > Regardless of what one thinks of them, given that things like > HIP and LISP exist, and try tackle the ID/LOC split, I see no benefit > adding this extra layer of indirection with a privacy invasive > "Unique and Permanent" identifier which seems to be the only > non-overlapping part of this work - in fact I only see downsides. >=20 > Cheers, > S. >=20 >=20 >>=20 >> --- Alex >>=20 >>=20 >>> -----Original Message----- From: Ideas >>> [mailto:ideas-bounces@ietf.org] On Behalf Of=20 >>> stephen.farrell@cs.tcd.ie Sent: Wednesday, October 04, 2017 9:35 >>> AM To: tom@herbertland.com Cc: ideas@ietf.org; >>> phill@hallambaker.com; ietf@ietf.org Subject: Re: [Ideas] WG >>> Review: IDentity Enabled Networks (ideas) >>>=20 >>>=20 >>>=20 >>> On Wednesday, 4 October 2017, Tom Herbert wrote: >>>> On Wed, Oct 4, 2017 at 7:57 AM, Phillip Hallam-Baker=20 >>>> wrote: >>>>> On Fri, Sep 29, 2017 at 2:31 PM, Stephen Farrell=20 >>>>> wrote: >>>>>>=20 >>>>>>=20 >>>>>> As currently described, I oppose creation of this working >>>>>> group on the basis that it enables and seemingly encourages >>>>>> embedding identifiers for humans as addresses. Doing so would >>>>>> have significant privacy downsides, would enable new methods >>>>>> for censorship and discrimination, and could be very hard to >>>>>> mitigate should one wish to help protect people's privacy, as >>>>>> I think is current IETF policy. >>>>>>=20 >>>>>> If the work precluded the use of any identifiers that >>>>>> strongly map to humans then I'd be ok with it being done as >>>>>> it'd then only be a waste of resources. But I don't know how >>>>>> that could be enforced so I think it'd be better to just not >>>>>> do this work at all. >>>>>>=20 >>>>>> S. >>>>>=20 >>>>>=20 >>>>> +1 >>>>>=20 >>>>> I know how to restrict the work to 'meaningless' identifiers,=20 >>>>> require that the identifiers be the output of a cryptographic >>>>> algorithm. >>>>>=20 >>>>> Now strictly speaking, this only limits scope to identifiers >>>>> that are indexical as opposed to rendering them meaningless but >>>>> I think that was the sense of it. >>>>>=20 >>>>>=20 >>>>> N=C3=83=C2=B6th proposed a trichotemy of identifiers as follows >>>>>=20 >>>>> * Identity, the signifier is the signified (e.g. data: URI) >>>>>=20 >>>>> * Indexical, the signifier is related to the signified by a=20 >>>>> systematic relationship, (e.g. ni URIs, SHA256Data), PGP=20 >>>>> fingerprints etc.) >>>>>=20 >>>>> * Names, the signifier is the related to the signified by a >>>>> purely conventional relationship, (e.g. example.com to its >>>>> owner) >>>>>=20 >>>>>=20 >>>>> There is a big difference between attempting to manage >>>>> indexical signifiers and names. Especially when the people >>>>> trying to do so refuse to read any of the literature on >>>>> semiotics. >>>>>=20 >>>>> Names are problematic because the only way that a conventional=20 >>>>> relationship can be implemented is through some sort of >>>>> registration infrastructure and we already have one of those >>>>> and the industry that manages it has a marketcap in the tens of >>>>> billions. >>>>>=20 >>>>> Identifiers do lead to tractable solutions. But, this proposal >>>>> looks a bit unfocused for IRTF consideration, an IETF WG? >>>>> Really? >>>>>=20 >>>> Identifiers are equivalent to addresses in that they indicate a >>>> node in the network for the purposes of end to end >>>> communications. The only difference between identifiers and >>>> addresses is that identifiers are not topological. Virtual >>>> addresses in network virtualization are also identifiers. So the >>>> security properties are the same when considering privacy. For >>>> instance, if applications use temporary addresses for privacy, it >>>> would have equivalent properties using temporary identifiers. In >>>> fact from the application POV this would be transparent. It could >>>> get a pool of apparently random addresses to choose from as >>>> source of communication, it shouldn't know or even care if the >>>> addresses are identifiers. >>>>=20 >>>> Identity is a completely separate concept from identifiers. Is >>>> not required in any of the identifier/locator protocols and AFAIK >>>> none of them even mention the term. There is no association of an >>>> identity of user behind and identifier any more than there is an >>>> association of identity behind IP address. The fact that the >>>> words "identifier" and "identity" share a common prefix is an >>>> unfortunate happenstance :-). >>>=20 >>>=20 >>> Yes. But doesn't that mean either the name of this effort is wildly >>> misleading or else the effort is hugely problematic from a privacy >>> POV? Either way, istm this ought not proceed. >>>=20 >>> S. >>>=20 >>>>=20 >>>> Tom >>>>=20 >>> _______________________________________________ Ideas mailing list=20= >>> Ideas@ietf.org https://www.ietf.org/mailman/listinfo/ideas >=20 > _______________________________________________ > Ideas mailing list > Ideas@ietf.org > https://www.ietf.org/mailman/listinfo/ideas From nobody Wed Oct 4 13:47:14 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E0A7D1331E7; Wed, 4 Oct 2017 13:46:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cs.tcd.ie Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id or1mrK8UQpaT; Wed, 4 Oct 2017 13:46:48 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BC38613307B; Wed, 4 Oct 2017 13:46:47 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id C2955BE38; Wed, 4 Oct 2017 21:46:45 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zmRSn4L3IfVf; Wed, 4 Oct 2017 21:46:43 +0100 (IST) Received: from [10.244.2.100] (95-45-153-252-dynamic.agg2.phb.bdt-fng.eircom.net [95.45.153.252]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 0C94DBDD8; Wed, 4 Oct 2017 21:46:43 +0100 (IST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1507150003; bh=ft2nVRVRO+f8oYspfkLGITM7ywm2L7eGJhjgi0ZsoHY=; h=Subject:To:Cc:References:From:Date:In-Reply-To:From; b=AgjvLMSQTB9jPRKX8f3kpl0kswEOrK8/U8tysRRgyck9bupHUrMTPGIaG0pRat4F4 JXPpphC93sjHDzjZpHB5e87MeySnG8aqaPpr81S0ug6hxxOvwAs3cRbtYrYU2bPy9J QLcVvrGd+2aMZUP+9SCJmCAbr6ryUnUTXIJTDtH4= To: Dino Farinacci Cc: Alexander Clemm , Tom Herbert , "ideas@ietf.org" , "phill@hallambaker.com" , "ietf@ietf.org" , "lisp@ietf.org list" References: <150670160872.14128.2758037992338326085.idtracker@ietfa.amsl.com> <778d5504-ba4f-d418-7b20-356353bb0fb2@cs.tcd.ie> <8kd5pq.oxb4pv.rtlo8t-qmf@mercury.scss.tcd.ie> <644DA50AFA8C314EA9BDDAC83BD38A2E0EAA7204@sjceml521-mbx.china.huawei.com> <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> From: Stephen Farrell Openpgp: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Message-ID: <4846459e-7ce5-a5ce-be8e-5854838dc244@cs.tcd.ie> Date: Wed, 4 Oct 2017 21:46:41 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 In-Reply-To: <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="Np1AnoqIqJjJGrExM86qutM1wo1WX6F7B" Archived-At: Subject: Re: [lisp] [Ideas] WG Review: IDentity Enabled Networks (ideas) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Oct 2017 20:46:51 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Np1AnoqIqJjJGrExM86qutM1wo1WX6F7B Content-Type: multipart/mixed; boundary="vLixmrQQpXTB5fmmrNAavgsepHfV29uxF"; protected-headers="v1" From: Stephen Farrell To: Dino Farinacci Cc: Alexander Clemm , Tom Herbert , "ideas@ietf.org" , "phill@hallambaker.com" , "ietf@ietf.org" , "lisp@ietf.org list" Message-ID: <4846459e-7ce5-a5ce-be8e-5854838dc244@cs.tcd.ie> Subject: Re: [Ideas] WG Review: IDentity Enabled Networks (ideas) References: <150670160872.14128.2758037992338326085.idtracker@ietfa.amsl.com> <778d5504-ba4f-d418-7b20-356353bb0fb2@cs.tcd.ie> <8kd5pq.oxb4pv.rtlo8t-qmf@mercury.scss.tcd.ie> <644DA50AFA8C314EA9BDDAC83BD38A2E0EAA7204@sjceml521-mbx.china.huawei.com> <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> In-Reply-To: <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> --vLixmrQQpXTB5fmmrNAavgsepHfV29uxF Content-Type: text/plain; charset=utf-8 Content-Language: en-GB Content-Transfer-Encoding: quoted-printable Hi Dino, On 04/10/17 21:35, Dino Farinacci wrote: > Adding lisp@ietf.org to cc list. >=20 > How about creating a working group that solely focuses on deployment > of a mapping system and does not specify how and where identifiers > are allocated? >=20 > I have made suggestions before that such a working group should be in > the ops area. Some examples include and are not limited to v6ops, > dnsop, and mboned. If there's deployment of things like LISP and HIP and folks are interested in discussing/documenting what they've been doing in the ops area then that seems quite reasonable sure. S. >=20 > Cheers, Dino >=20 >> On Oct 4, 2017, at 12:45 PM, Stephen Farrell >> wrote: >>=20 >>=20 >> Hiya, >>=20 >> TL;DR - I am now even more convinced that this ought not go ahead. >> (Sorry;-) >>=20 >> On 04/10/17 19:48, Alexander Clemm wrote: >>> There were a couple of things raised in the overall thread that >>> I just wanted to quickly respond to: >>>=20 >>> Clearly privacy is an important issue and concern. The current=20 >>> charter proposal includes a requirement for a detailed analysis >>> of this aspect. If this aspect needs to be expanded, sure, let's >>> do this. >>=20 >> TBH, I don't think that'd help, for me at least. I don't see any >> way in which such permanent strings representing identity can be >> defined to be usable as claimed and not be perniciously privacy >> invasive. So some promises to ponder the problem in charter text >> wouldn't do it for me. (And tbh, I've seen that can kicked down >> that road before, so I'm skeptical of such promises in general.) >>=20 >>> Everyone seems to be jumping up and down regarding the use of >>> the term of "identity" as if a foregone conclusion that this is a >>> synonym for "privacy invasion". However: - "Identity" does not >>> imply "personal identity". Really, this is an identifier scheme >>> for endpoints. >>=20 >> Sorry, what I assume is the relevant draft [1] says the "identity"=20 >> (denoted "IDy") is a "Unique and Permanent Identity" and that=20 >> "Networks may treat traffic differently depending on the IDy of=20 >> source or destination" and also seems to envisage a large logical=20 >> database of everyone's IDy's: "Identity also allows to have >> metadata associated it to be applied, regardless of which IDf is >> used to refer it." (Where IDf is the identifier that'll later be >> mapped to a locator via, I assume, HIP or LISP or similar.) >>=20 >> I think it's entirely correct to jump up and down about the privacy >> consequences of the above. (Not to mention the potential censorship >> and discriminatory aspects.) >>=20 >> [1] >> https://tools.ietf.org/html/draft-ccm-ideas-identity-use-cases-01 >>=20 >>> Perhaps even "identity" is a misnomer. >>=20 >> Well, it was presumably your choice (where your =3D=3D some set of the= >> proponents). If that's a mistake, then it seems a fairly fatal one >> - to get the name wrong for an effort all about mapping names to >> identifiers;-) >>=20 >>> If you will, identity as conceived in the context of IDEAS is a >>> second level of identifier that does not have to be exposed over >>> the data plane - Because of this, it may result in greater >>> privacy than existing schemes, not less. >>=20 >> I see that argument in [1] but I'm not buying it tbh. To get that >> level of protection from such an indirection, one would have to >> have something like Tor hidden services and perhaps one would have >> to *not* standardise the mapping from human meaningful identifiers >> to those used as IDf, and esp. not the reverse mapping. Defining >> that reverse mapping cannot but be privacy invasive afaics. (There >> could maybe be ways to define how an already hashed human >> meaningful identifier could then be further hashed to become an IDy >> but I don't really see the point of that at all, other than to just >> standardise something for the fun of the process.) >>=20 >>> It enables you, for example, to obfuscate endpoints to outside >>> observers as you wouldn't need to use personal unique long-lived >>> identifiers, quite the contrary. - There is also a security >>> dimension here. If I am victim of a phishing attack because my >>> network information (like today) is exposed to botnets, >>=20 >> (Nit: that says nothing about being a victim of, only of being a >> target of, an attempted attack. Speaking of victims also tends not >> to lead to more objective analysis, so I think it's better to not >> go there unless it's relevant, which I don't think is the case >> here, because...) >>=20 >> I don't understand what network information you mean. If you mean >> email addresses, and are proposing that the email ecosystem change >> to use some IDf or LOC values, that doesn't seem at all realistic >> to me. If you don't mean email addresses then I don't see how any >> lower layer change will affect attempted phishes. The routing area >> is probably also the entirely wrong venue for any real >> anti-phishing effort. >>=20 >> That really wasn't a good example;-) >>=20 >>> phishers etc who can hide from me (but not I from them) and >>> remain anonymous or impersonate legitimate users, I do consider >>> this a very serious threat also to my privacy. How can IETF >>> counteract such threats? I think that IDEAS, if done right, can >>> provide a contribution here. >>=20 >> I don't see that at all. Unless I'm mistaken that seems like=20 >> wishful thinking to me. >>=20 >>>=20 >>> One aspect that has been missing from the discussion is the >>> question whether there is a distinction between the network >>> provider who provides GRIDS services and an outside attacker / >>> observer. I think this distinction is important. The way I see >>> it, if done right (sure, big "if", and requiring detailed >>> analysis), IDEAS as I would envision it can contribute greatly to >>> provide greater security and privacy from outside attackers. At >>> the same time, as it is currently envisioned, there clearly is a >>> trust relationship between an entity and the provider of "its" >>> GRIDS services. The mapping database will have information about >>> locator-identifier and identifier-identifier mappings, so GRIDS >>> will know which identifiers its endpoints are using. Clearly, if >>> this trust is abused because the provider cannot be trusted, if >>> you are concerned that it sells your endpoint=C3=A2=E2=82=AC=E2=84=A2= s information to >>> the mob or a suppressive government, there is an issue. However, >>> when concerned about this scenario, it seems to me one would have >>> equal reason to e.g. not trust your mobile service provider >>> either, who can track you, knows your location, and has your=20 >>> customer data. >>=20 >> ISTM that introducing that GRIDS thing makes matters worse and not=20 >> better, because, as you yourself say, it is clear that whoever has=20 >> access to the GRIDS information would be better able to track >> people compared to now. >>=20 >> I would prefer to see fewer long lived identifiers in networking=20 >> and not more, and this proposal introduces more long lived >> identifiers (erroneously calling those identities). >>=20 >> Regardless of what one thinks of them, given that things like HIP >> and LISP exist, and try tackle the ID/LOC split, I see no benefit=20 >> adding this extra layer of indirection with a privacy invasive=20 >> "Unique and Permanent" identifier which seems to be the only=20 >> non-overlapping part of this work - in fact I only see downsides. >>=20 >> Cheers, S. >>=20 >>=20 >>>=20 >>> --- Alex >>>=20 >>>=20 >>>> -----Original Message----- From: Ideas=20 >>>> [mailto:ideas-bounces@ietf.org] On Behalf Of=20 >>>> stephen.farrell@cs.tcd.ie Sent: Wednesday, October 04, 2017 >>>> 9:35 AM To: tom@herbertland.com Cc: ideas@ietf.org;=20 >>>> phill@hallambaker.com; ietf@ietf.org Subject: Re: [Ideas] WG=20 >>>> Review: IDentity Enabled Networks (ideas) >>>>=20 >>>>=20 >>>>=20 >>>> On Wednesday, 4 October 2017, Tom Herbert wrote: >>>>> On Wed, Oct 4, 2017 at 7:57 AM, Phillip Hallam-Baker=20 >>>>> wrote: >>>>>> On Fri, Sep 29, 2017 at 2:31 PM, Stephen Farrell=20 >>>>>> wrote: >>>>>>>=20 >>>>>>>=20 >>>>>>> As currently described, I oppose creation of this >>>>>>> working group on the basis that it enables and seemingly >>>>>>> encourages embedding identifiers for humans as addresses. >>>>>>> Doing so would have significant privacy downsides, would >>>>>>> enable new methods for censorship and discrimination, and >>>>>>> could be very hard to mitigate should one wish to help >>>>>>> protect people's privacy, as I think is current IETF >>>>>>> policy. >>>>>>>=20 >>>>>>> If the work precluded the use of any identifiers that=20 >>>>>>> strongly map to humans then I'd be ok with it being done >>>>>>> as it'd then only be a waste of resources. But I don't >>>>>>> know how that could be enforced so I think it'd be better >>>>>>> to just not do this work at all. >>>>>>>=20 >>>>>>> S. >>>>>>=20 >>>>>>=20 >>>>>> +1 >>>>>>=20 >>>>>> I know how to restrict the work to 'meaningless' >>>>>> identifiers, require that the identifiers be the output of >>>>>> a cryptographic algorithm. >>>>>>=20 >>>>>> Now strictly speaking, this only limits scope to >>>>>> identifiers that are indexical as opposed to rendering them >>>>>> meaningless but I think that was the sense of it. >>>>>>=20 >>>>>>=20 >>>>>> N=C3=83=C2=B6th proposed a trichotemy of identifiers as follows >>>>>>=20 >>>>>> * Identity, the signifier is the signified (e.g. data: >>>>>> URI) >>>>>>=20 >>>>>> * Indexical, the signifier is related to the signified by a >>>>>> systematic relationship, (e.g. ni URIs, SHA256Data), PGP=20 >>>>>> fingerprints etc.) >>>>>>=20 >>>>>> * Names, the signifier is the related to the signified by >>>>>> a purely conventional relationship, (e.g. example.com to >>>>>> its owner) >>>>>>=20 >>>>>>=20 >>>>>> There is a big difference between attempting to manage=20 >>>>>> indexical signifiers and names. Especially when the people=20 >>>>>> trying to do so refuse to read any of the literature on=20 >>>>>> semiotics. >>>>>>=20 >>>>>> Names are problematic because the only way that a >>>>>> conventional relationship can be implemented is through >>>>>> some sort of registration infrastructure and we already >>>>>> have one of those and the industry that manages it has a >>>>>> marketcap in the tens of billions. >>>>>>=20 >>>>>> Identifiers do lead to tractable solutions. But, this >>>>>> proposal looks a bit unfocused for IRTF consideration, an >>>>>> IETF WG? Really? >>>>>>=20 >>>>> Identifiers are equivalent to addresses in that they indicate >>>>> a node in the network for the purposes of end to end=20 >>>>> communications. The only difference between identifiers and=20 >>>>> addresses is that identifiers are not topological. Virtual=20 >>>>> addresses in network virtualization are also identifiers. So >>>>> the security properties are the same when considering >>>>> privacy. For instance, if applications use temporary >>>>> addresses for privacy, it would have equivalent properties >>>>> using temporary identifiers. In fact from the application POV >>>>> this would be transparent. It could get a pool of apparently >>>>> random addresses to choose from as source of communication, >>>>> it shouldn't know or even care if the addresses are >>>>> identifiers. >>>>>=20 >>>>> Identity is a completely separate concept from identifiers. >>>>> Is not required in any of the identifier/locator protocols >>>>> and AFAIK none of them even mention the term. There is no >>>>> association of an identity of user behind and identifier any >>>>> more than there is an association of identity behind IP >>>>> address. The fact that the words "identifier" and "identity" >>>>> share a common prefix is an unfortunate happenstance :-). >>>>=20 >>>>=20 >>>> Yes. But doesn't that mean either the name of this effort is >>>> wildly misleading or else the effort is hugely problematic from >>>> a privacy POV? Either way, istm this ought not proceed. >>>>=20 >>>> S. >>>>=20 >>>>>=20 >>>>> Tom >>>>>=20 >>>> _______________________________________________ Ideas mailing >>>> list Ideas@ietf.org >>>> https://www.ietf.org/mailman/listinfo/ideas >>=20 >> _______________________________________________ Ideas mailing list=20 >> Ideas@ietf.org https://www.ietf.org/mailman/listinfo/ideas >=20 >=20 --vLixmrQQpXTB5fmmrNAavgsepHfV29uxF-- --Np1AnoqIqJjJGrExM86qutM1wo1WX6F7B Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQEcBAEBCAAGBQJZ1UiyAAoJEC88hzaAX42izTEH/3SWQmhEt148VZFbzlHQvpLS WAq4Uq+0EVRgP9HHPP91P9B1StqZy5HUTyXhU4Q//OKLHIuyJBNjvncCs89ROqI/ KbbjDoP5eohyB4oAv2CyligVZbgaMJZpiqQEVDwRdcCbyhXD64Zq+xMd+T+1zD60 IZiUGx7L+QyM5udzu3XBAcwLTzMCFBKPzS4ecF+P05cp+dP7Zuskh0TXC3GPu5rB 2XpgsnWDnr1sy8Sc5R0UfewuU9u/YKIM+28EuZ7ubK6PU+9oN6x3vQ3q7WrbD9aB HMWVJ+Co2fECL+nuU8oQNuQRCFQa8QB5Rv236Jilvbo+uhTDZblT9wpu7Pu+Gv8= =CLaD -----END PGP SIGNATURE----- --Np1AnoqIqJjJGrExM86qutM1wo1WX6F7B-- From nobody Wed Oct 4 14:57:12 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 103D61344BB; Wed, 4 Oct 2017 14:56:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dA4pQxONFVUd; Wed, 4 Oct 2017 14:56:47 -0700 (PDT) Received: from mail-pg0-x229.google.com (mail-pg0-x229.google.com [IPv6:2607:f8b0:400e:c05::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 364691323B4; Wed, 4 Oct 2017 14:56:47 -0700 (PDT) Received: by mail-pg0-x229.google.com with SMTP id m18so1115589pgd.13; Wed, 04 Oct 2017 14:56:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:organization:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=/o1mGaaI/C+mzDykgr1H3K1J0TNu50yE9WzF7ha9rlM=; b=lRPKpHt2JTlqTYx+W1UfRtxuH9ECbh5yj24AnINcf+qofdqustwmOHHEYSoaXvj3xS wFhxLSrhq4AdtGHKjI7eY/sq+L0NIBN0IT+o4yIBPdI4kvFcTbgU3aJpo93TS8ovWTnM ToqXmKifuYiH0VCQUzf9jImh8j6VBC18jKRLMGiMZBn+bY7JNR29Ujge70yKjJj6h6Jp 2DON4g78ZizZLPnHDq4PfSTzZl21rQ5yxDEp+ev6j9OBrxbV4sRXlezhxDOv15xkojuP 6IiaOQdGIFGBiBeJhd7gYme7qREg4qRCwyh2B68ltxSKX8UbWwxip4kjExrQ4hGtoF7B yt2w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:organization :message-id:date:user-agent:mime-version:in-reply-to :content-language:content-transfer-encoding; bh=/o1mGaaI/C+mzDykgr1H3K1J0TNu50yE9WzF7ha9rlM=; b=sT4ZAiqXHRQKfcojIkxEdfFxZZhPPRKS9KZqUTjCDvINkRWcWWhFnZxVJ5MWMizN8U ScXXqm299Mj5jqwJ87oQeLxQiK+ZoLZ/ZAVwWRcqK4hnvioZlM92L9qxvVgLqolqvbxP dzCFg7GB5yzp1n51CDPjNMJkR0OysKsBP6fAgOFOfVTNF5uJJgVk6yfL/4o6jfo4QDAT rwjlYxWo4sOzbwDQs2+Mf+TmR02zfMxmHtV34xpDgbCDZQ3WheoJ2ZblL4R6zMTIcLsk /r76iwjnWgJY2miAYIszhBKqyBCNVCEITi4UKgi3elLDK6RhieHT+Ursb7R51QY7S3Vr tFYQ== X-Gm-Message-State: AMCzsaVnwgSe7Gy7otoeAeoPIMk1lSmPG8DleD7TRrh9gRfbX/gepvkl DeZh/M7lhhpwNXJfVUDZZadzsw== X-Google-Smtp-Source: AOwi7QARZLO4ur64GE2PoBEnSh+aN0VqqNPt8wJSNC0ceuKlEeTUjBtBtlzvmiH/yG/ExFjHrS/1Qg== X-Received: by 10.99.52.196 with SMTP id b187mr10877726pga.222.1507154206282; Wed, 04 Oct 2017 14:56:46 -0700 (PDT) Received: from ?IPv6:2406:e007:6d3c:1:28cc:dc4c:9703:6781? ([2406:e007:6d3c:1:28cc:dc4c:9703:6781]) by smtp.gmail.com with ESMTPSA id 207sm27070335pfu.0.2017.10.04.14.56.42 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 04 Oct 2017 14:56:45 -0700 (PDT) To: Dino Farinacci Cc: "ideas@ietf.org" , "ietf@ietf.org" , "lisp@ietf.org list" References: <150670160872.14128.2758037992338326085.idtracker@ietfa.amsl.com> <778d5504-ba4f-d418-7b20-356353bb0fb2@cs.tcd.ie> <8kd5pq.oxb4pv.rtlo8t-qmf@mercury.scss.tcd.ie> <644DA50AFA8C314EA9BDDAC83BD38A2E0EAA7204@sjceml521-mbx.china.huawei.com> <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> From: Brian E Carpenter Organization: University of Auckland Message-ID: <1f254140-1340-6c7d-9c73-e7137562c685@gmail.com> Date: Thu, 5 Oct 2017 10:56:48 +1300 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 In-Reply-To: <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [lisp] [Ideas] WG Review: IDentity Enabled Networks (ideas) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Oct 2017 21:56:50 -0000 On 05/10/2017 09:35, Dino Farinacci wrote: > Adding lisp@ietf.org to cc list. >=20 > How about creating a working group that solely focuses on deployment of= a mapping system and does not specify how and where identifiers are allo= cated? That seems reasonable, well defined and relatively uncontentious. The current proposed charter leaves me a bit puzzled. Firstly I agree that the name 'IDEAS' is misleading, and 'GRIDS' tramples on previous wor= k, and 'identity' is a red flag. But if we get past terminology distractions= , where's the meat? All the interesting stuff is relegated to drafts or a wiki, and the output is a 'framework'. The IETF has a very mixed record with 'framework' documents. Brian >=20 > I have made suggestions before that such a working group should be in t= he ops area. Some examples include and are not limited to v6ops, dnsop, a= nd mboned. >=20 > Cheers, > Dino >=20 >> On Oct 4, 2017, at 12:45 PM, Stephen Farrell wrote: >> >> >> Hiya, >> >> TL;DR - I am now even more convinced that this ought not >> go ahead. (Sorry;-) >> >> On 04/10/17 19:48, Alexander Clemm wrote: >>> There were a couple of things raised in the overall thread that I >>> just wanted to quickly respond to: >>> >>> Clearly privacy is an important issue and concern. The current >>> charter proposal includes a requirement for a detailed analysis of >>> this aspect. If this aspect needs to be expanded, sure, let's do >>> this. >> >> TBH, I don't think that'd help, for me at least. I don't >> see any way in which such permanent strings representing >> identity can be defined to be usable as claimed and not >> be perniciously privacy invasive. So some promises to >> ponder the problem in charter text wouldn't do it for >> me. (And tbh, I've seen that can kicked down that road >> before, so I'm skeptical of such promises in general.) >> >>> Everyone seems to be jumping up and down regarding the use of the >>> term of "identity" as if a foregone conclusion that this is a synonym= >>> for "privacy invasion". However: - "Identity" does not imply >>> "personal identity". Really, this is an identifier scheme for >>> endpoints. =20 >> >> Sorry, what I assume is the relevant draft [1] says the "identity" >> (denoted "IDy") is a "Unique and Permanent Identity" and that >> "Networks may treat traffic differently depending on the IDy of >> source or destination" and also seems to envisage a large logical >> database of everyone's IDy's: "Identity also allows to have metadata >> associated it to be applied, regardless of which IDf is used to >> refer it." (Where IDf is the identifier that'll later be mapped >> to a locator via, I assume, HIP or LISP or similar.) >> >> I think it's entirely correct to jump up and down about the >> privacy consequences of the above. (Not to mention the potential >> censorship and discriminatory aspects.) >> >> [1] https://tools.ietf.org/html/draft-ccm-ideas-identity-use-cases= -01 >> >>> Perhaps even "identity" is a misnomer. =20 >> >> Well, it was presumably your choice (where your =3D=3D some set of >> the proponents). If that's a mistake, then it seems a fairly >> fatal one - to get the name wrong for an effort all about mapping >> names to identifiers;-) >> >>> If you will, >>> identity as conceived in the context of IDEAS is a second level of >>> identifier that does not have to be exposed over the data plane - >>> Because of this, it may result in greater privacy than existing >>> schemes, not less.=20 >> >> I see that argument in [1] but I'm not buying it tbh. To get >> that level of protection from such an indirection, one would >> have to have something like Tor hidden services and perhaps >> one would have to *not* standardise the mapping from human >> meaningful identifiers to those used as IDf, and esp. not the >> reverse mapping. Defining that reverse mapping cannot but be >> privacy invasive afaics. (There could maybe be ways to define >> how an already hashed human meaningful identifier could then >> be further hashed to become an IDy but I don't really see the >> point of that at all, other than to just standardise something >> for the fun of the process.) >> >>> It enables you, for example, to obfuscate >>> endpoints to outside observers as you wouldn't need to use personal >>> unique long-lived identifiers, quite the contrary. - There is also a >>> security dimension here. If I am victim of a phishing attack because >>> my network information (like today) is exposed to botnets,=20 >> >> (Nit: that says nothing about being a victim of, only of being >> a target of, an attempted attack. Speaking of victims also >> tends not to lead to more objective analysis, so I think it's >> better to not go there unless it's relevant, which I don't >> think is the case here, because...) >> >> I don't understand what network information you mean. If you >> mean email addresses, and are proposing that the email ecosystem >> change to use some IDf or LOC values, that doesn't seem at all >> realistic to me. If you don't mean email addresses then I don't >> see how any lower layer change will affect attempted phishes. >> The routing area is probably also the entirely wrong venue for >> any real anti-phishing effort. >> >> That really wasn't a good example;-) >> >>> phishers >>> etc who can hide from me (but not I from them) and remain anonymous >>> or impersonate legitimate users, I do consider this a very serious >>> threat also to my privacy. How can IETF counteract such threats? I >>> think that IDEAS, if done right, can provide a contribution here. >> >> I don't see that at all. Unless I'm mistaken that seems like >> wishful thinking to me. >> >>> >>> One aspect that has been missing from the discussion is the question >>> whether there is a distinction between the network provider who >>> provides GRIDS services and an outside attacker / observer. I think >>> this distinction is important. The way I see it, if done right >>> (sure, big "if", and requiring detailed analysis), IDEAS as I would >>> envision it can contribute greatly to provide greater security and >>> privacy from outside attackers. At the same time, as it is currently= >>> envisioned, there clearly is a trust relationship between an entity >>> and the provider of "its" GRIDS services. The mapping database will >>> have information about locator-identifier and identifier-identifier >>> mappings, so GRIDS will know which identifiers its endpoints are >>> using. Clearly, if this trust is abused because the provider cannot >>> be trusted, if you are concerned that it sells your endpoint=C3=A2=E2= =82=AC=E2=84=A2s >>> information to the mob or a suppressive government, there is an >>> issue. However, when concerned about this scenario, it seems to me >>> one would have equal reason to e.g. not trust your mobile service >>> provider either, who can track you, knows your location, and has your= >>> customer data. >> >> ISTM that introducing that GRIDS thing makes matters worse and not >> better, because, as you yourself say, it is clear that whoever has >> access to the GRIDS information would be better able to track people >> compared to now. >> >> I would prefer to see fewer long lived identifiers in networking >> and not more, and this proposal introduces more long lived identifiers= >> (erroneously calling those identities). >> >> Regardless of what one thinks of them, given that things like >> HIP and LISP exist, and try tackle the ID/LOC split, I see no benefit >> adding this extra layer of indirection with a privacy invasive >> "Unique and Permanent" identifier which seems to be the only >> non-overlapping part of this work - in fact I only see downsides. >> >> Cheers, >> S. >> >> >>> >>> --- Alex >>> >>> >>>> -----Original Message----- From: Ideas >>>> [mailto:ideas-bounces@ietf.org] On Behalf Of=20 >>>> stephen.farrell@cs.tcd.ie Sent: Wednesday, October 04, 2017 9:35 >>>> AM To: tom@herbertland.com Cc: ideas@ietf.org; >>>> phill@hallambaker.com; ietf@ietf.org Subject: Re: [Ideas] WG >>>> Review: IDentity Enabled Networks (ideas) >>>> >>>> >>>> >>>> On Wednesday, 4 October 2017, Tom Herbert wrote: >>>>> On Wed, Oct 4, 2017 at 7:57 AM, Phillip Hallam-Baker=20 >>>>> wrote: >>>>>> On Fri, Sep 29, 2017 at 2:31 PM, Stephen Farrell=20 >>>>>> wrote: >>>>>>> >>>>>>> >>>>>>> As currently described, I oppose creation of this working >>>>>>> group on the basis that it enables and seemingly encourages >>>>>>> embedding identifiers for humans as addresses. Doing so would >>>>>>> have significant privacy downsides, would enable new methods >>>>>>> for censorship and discrimination, and could be very hard to >>>>>>> mitigate should one wish to help protect people's privacy, as >>>>>>> I think is current IETF policy. >>>>>>> >>>>>>> If the work precluded the use of any identifiers that >>>>>>> strongly map to humans then I'd be ok with it being done as >>>>>>> it'd then only be a waste of resources. But I don't know how >>>>>>> that could be enforced so I think it'd be better to just not >>>>>>> do this work at all. >>>>>>> >>>>>>> S. >>>>>> >>>>>> >>>>>> +1 >>>>>> >>>>>> I know how to restrict the work to 'meaningless' identifiers,=20 >>>>>> require that the identifiers be the output of a cryptographic >>>>>> algorithm. >>>>>> >>>>>> Now strictly speaking, this only limits scope to identifiers >>>>>> that are indexical as opposed to rendering them meaningless but >>>>>> I think that was the sense of it. >>>>>> >>>>>> >>>>>> N=C3=83=C2=B6th proposed a trichotemy of identifiers as follows >>>>>> >>>>>> * Identity, the signifier is the signified (e.g. data: URI) >>>>>> >>>>>> * Indexical, the signifier is related to the signified by a=20 >>>>>> systematic relationship, (e.g. ni URIs, SHA256Data), PGP=20 >>>>>> fingerprints etc.) >>>>>> >>>>>> * Names, the signifier is the related to the signified by a >>>>>> purely conventional relationship, (e.g. example.com to its >>>>>> owner) >>>>>> >>>>>> >>>>>> There is a big difference between attempting to manage >>>>>> indexical signifiers and names. Especially when the people >>>>>> trying to do so refuse to read any of the literature on >>>>>> semiotics. >>>>>> >>>>>> Names are problematic because the only way that a conventional=20 >>>>>> relationship can be implemented is through some sort of >>>>>> registration infrastructure and we already have one of those >>>>>> and the industry that manages it has a marketcap in the tens of >>>>>> billions. >>>>>> >>>>>> Identifiers do lead to tractable solutions. But, this proposal >>>>>> looks a bit unfocused for IRTF consideration, an IETF WG? >>>>>> Really? >>>>>> >>>>> Identifiers are equivalent to addresses in that they indicate a >>>>> node in the network for the purposes of end to end >>>>> communications. The only difference between identifiers and >>>>> addresses is that identifiers are not topological. Virtual >>>>> addresses in network virtualization are also identifiers. So the >>>>> security properties are the same when considering privacy. For >>>>> instance, if applications use temporary addresses for privacy, it >>>>> would have equivalent properties using temporary identifiers. In >>>>> fact from the application POV this would be transparent. It could >>>>> get a pool of apparently random addresses to choose from as >>>>> source of communication, it shouldn't know or even care if the >>>>> addresses are identifiers. >>>>> >>>>> Identity is a completely separate concept from identifiers. Is >>>>> not required in any of the identifier/locator protocols and AFAIK >>>>> none of them even mention the term. There is no association of an >>>>> identity of user behind and identifier any more than there is an >>>>> association of identity behind IP address. The fact that the >>>>> words "identifier" and "identity" share a common prefix is an >>>>> unfortunate happenstance :-). >>>> >>>> >>>> Yes. But doesn't that mean either the name of this effort is wildly >>>> misleading or else the effort is hugely problematic from a privacy >>>> POV? Either way, istm this ought not proceed. >>>> >>>> S. >>>> >>>>> >>>>> Tom >>>>> >>>> _______________________________________________ Ideas mailing list=20 >>>> Ideas@ietf.org https://www.ietf.org/mailman/listinfo/ideas >> >> _______________________________________________ >> Ideas mailing list >> Ideas@ietf.org >> https://www.ietf.org/mailman/listinfo/ideas >=20 > . >=20 From nobody Wed Oct 4 15:32:17 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 85A9C1344CD for ; Wed, 4 Oct 2017 15:32:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=herbertland-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IpbYCp0Q26vu for ; Wed, 4 Oct 2017 15:32:13 -0700 (PDT) Received: from mail-qt0-x233.google.com (mail-qt0-x233.google.com [IPv6:2607:f8b0:400d:c0d::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 109BF133078 for ; Wed, 4 Oct 2017 15:32:12 -0700 (PDT) Received: by mail-qt0-x233.google.com with SMTP id x54so22139323qth.12 for ; Wed, 04 Oct 2017 15:32:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=herbertland-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=GmLRG40ssy7uHv3JcSX13HnbRabUhvyF5sUWe8OuWeg=; b=Iuv2VnReC4DjvosrxUsn/+5pdg16rqTy7lSgYvKY3dAZorlHe36YIPFM4zqk9JIHiA UUfg2dzXJ1+YcEuB1CsvkFWw8FQ4TThg1laYFzFPsvl7ErcjUeBPPxOlRTMDXcT984Kh V5uESodZVcns6cuVh1IozieGV5bFO066QFjCOlPNXl7sATu3UdcgmTvV+fKmoENT5d/j SUTvbmVVW/cBW+L/pytEErxy8E5jt5hCKbsNKATQduiEA4ovVSUSF0qDBeHeRyKr6GHH yBfBj/H/q251J7dir42TY3GCivckao8Qzee5XUuNdMU0wne8P66CBIOtDvRf4vH28XKy 3oxw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=GmLRG40ssy7uHv3JcSX13HnbRabUhvyF5sUWe8OuWeg=; b=rz1LPZNZCwoTpB6RmZn1EJ2eSkoHZ66mnZ1ZLNjHnhrwN20VMS/fa/1bu2LUBPYMZe Q6//cHJi7GBxjm5yr6ZWpNi5UlGH8xki4NQp4wwYUWlAa6Q0tItBuxuwhuGHxC/DN8Jy +gc+R/WjR+tEq7uZf87pe6hYIfHQGvv7btJ58m+oYZDxJBljgmnAM/xtKR5FNok3Q9fn p4wyoZv2EZQUUt05ibYfqk8m3sRcQ2U9E4SssP6qN2wLM70xj6jWiBFms2xWnUsUkOzC ISSW8u8XMR0wwlZrp/VX2wgfCpBM29n3ZI9SctKFL+xRDycg5B/Eh6l5UrnNqPOh/csV 5BNA== X-Gm-Message-State: AMCzsaVyQJl6KMpEYpCNmHHyd6NQ1j1OMwbiGthkXwRdqEwRARO0OEFk l1eM0ChCDmV/KITpN7MzmURPL87PB0XnM6W5oqEwSQ== X-Google-Smtp-Source: AOwi7QB4x7CjBJpLzD44XhKYMoHGJd6AnZQoX8aFIPxP++KSZfv7g5Y8JW8rfmxr0GGBBcOd2umtC5rsyUXZPt3NXVI= X-Received: by 10.200.36.164 with SMTP id s33mr17354343qts.108.1507156331879; Wed, 04 Oct 2017 15:32:11 -0700 (PDT) MIME-Version: 1.0 Received: by 10.237.48.144 with HTTP; Wed, 4 Oct 2017 15:32:11 -0700 (PDT) Received: by 10.237.48.144 with HTTP; Wed, 4 Oct 2017 15:32:11 -0700 (PDT) In-Reply-To: References: <150670160872.14128.2758037992338326085.idtracker@ietfa.amsl.com> <778d5504-ba4f-d418-7b20-356353bb0fb2@cs.tcd.ie> <8kd5pq.oxb4pv.rtlo8t-qmf@mercury.scss.tcd.ie> <644DA50AFA8C314EA9BDDAC83BD38A2E0EAA7204@sjceml521-mbx.china.huawei.com> <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> From: Tom Herbert Date: Wed, 4 Oct 2017 15:32:11 -0700 Message-ID: To: Dino Farinacci Cc: lisp@ietf.org, ietf@ietf.org, Alexander Clemm , Stephen Farrell , "ideas@ietf.org" , "phill@hallambaker.com" Content-Type: multipart/alternative; boundary="001a11404e58c86f30055ac02d4e" Archived-At: Subject: Re: [lisp] [Ideas] WG Review: IDentity Enabled Networks (ideas) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Oct 2017 22:32:16 -0000 --001a11404e58c86f30055ac02d4e Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Oct 4, 2017 1:35 PM, "Dino Farinacci" wrote: Adding lisp@ietf.org to cc list. How about creating a working group that solely focuses on deployment of a mapping system and does not specify how and where identifiers are allocated= ? +1 I suggest that could be called idloc (for Identifier-Locator) Tom I have made suggestions before that such a working group should be in the ops area. Some examples include and are not limited to v6ops, dnsop, and mboned. Cheers, Dino > On Oct 4, 2017, at 12:45 PM, Stephen Farrell wrote: > > > Hiya, > > TL;DR - I am now even more convinced that this ought not > go ahead. (Sorry;-) > > On 04/10/17 19:48, Alexander Clemm wrote: >> There were a couple of things raised in the overall thread that I >> just wanted to quickly respond to: >> >> Clearly privacy is an important issue and concern. The current >> charter proposal includes a requirement for a detailed analysis of >> this aspect. If this aspect needs to be expanded, sure, let's do >> this. > > TBH, I don't think that'd help, for me at least. I don't > see any way in which such permanent strings representing > identity can be defined to be usable as claimed and not > be perniciously privacy invasive. So some promises to > ponder the problem in charter text wouldn't do it for > me. (And tbh, I've seen that can kicked down that road > before, so I'm skeptical of such promises in general.) > >> Everyone seems to be jumping up and down regarding the use of the >> term of "identity" as if a foregone conclusion that this is a synonym >> for "privacy invasion". However: - "Identity" does not imply >> "personal identity". Really, this is an identifier scheme for >> endpoints. > > Sorry, what I assume is the relevant draft [1] says the "identity" > (denoted "IDy") is a "Unique and Permanent Identity" and that > "Networks may treat traffic differently depending on the IDy of > source or destination" and also seems to envisage a large logical > database of everyone's IDy's: "Identity also allows to have metadata > associated it to be applied, regardless of which IDf is used to > refer it." (Where IDf is the identifier that'll later be mapped > to a locator via, I assume, HIP or LISP or similar.) > > I think it's entirely correct to jump up and down about the > privacy consequences of the above. (Not to mention the potential > censorship and discriminatory aspects.) > > [1] https://tools.ietf.org/html/draft-ccm-ideas-identity-use-cases-01 > >> Perhaps even "identity" is a misnomer. > > Well, it was presumably your choice (where your =3D=3D some set of > the proponents). If that's a mistake, then it seems a fairly > fatal one - to get the name wrong for an effort all about mapping > names to identifiers;-) > >> If you will, >> identity as conceived in the context of IDEAS is a second level of >> identifier that does not have to be exposed over the data plane - >> Because of this, it may result in greater privacy than existing >> schemes, not less. > > I see that argument in [1] but I'm not buying it tbh. To get > that level of protection from such an indirection, one would > have to have something like Tor hidden services and perhaps > one would have to *not* standardise the mapping from human > meaningful identifiers to those used as IDf, and esp. not the > reverse mapping. Defining that reverse mapping cannot but be > privacy invasive afaics. (There could maybe be ways to define > how an already hashed human meaningful identifier could then > be further hashed to become an IDy but I don't really see the > point of that at all, other than to just standardise something > for the fun of the process.) > >> It enables you, for example, to obfuscate >> endpoints to outside observers as you wouldn't need to use personal >> unique long-lived identifiers, quite the contrary. - There is also a >> security dimension here. If I am victim of a phishing attack because >> my network information (like today) is exposed to botnets, > > (Nit: that says nothing about being a victim of, only of being > a target of, an attempted attack. Speaking of victims also > tends not to lead to more objective analysis, so I think it's > better to not go there unless it's relevant, which I don't > think is the case here, because...) > > I don't understand what network information you mean. If you > mean email addresses, and are proposing that the email ecosystem > change to use some IDf or LOC values, that doesn't seem at all > realistic to me. If you don't mean email addresses then I don't > see how any lower layer change will affect attempted phishes. > The routing area is probably also the entirely wrong venue for > any real anti-phishing effort. > > That really wasn't a good example;-) > >> phishers >> etc who can hide from me (but not I from them) and remain anonymous >> or impersonate legitimate users, I do consider this a very serious >> threat also to my privacy. How can IETF counteract such threats? I >> think that IDEAS, if done right, can provide a contribution here. > > I don't see that at all. Unless I'm mistaken that seems like > wishful thinking to me. > >> >> One aspect that has been missing from the discussion is the question >> whether there is a distinction between the network provider who >> provides GRIDS services and an outside attacker / observer. I think >> this distinction is important. The way I see it, if done right >> (sure, big "if", and requiring detailed analysis), IDEAS as I would >> envision it can contribute greatly to provide greater security and >> privacy from outside attackers. At the same time, as it is currently >> envisioned, there clearly is a trust relationship between an entity >> and the provider of "its" GRIDS services. The mapping database will >> have information about locator-identifier and identifier-identifier >> mappings, so GRIDS will know which identifiers its endpoints are >> using. Clearly, if this trust is abused because the provider cannot >> be trusted, if you are concerned that it sells your endpoint=C3=A2=E2=82= =AC=E2=84=A2s >> information to the mob or a suppressive government, there is an >> issue. However, when concerned about this scenario, it seems to me >> one would have equal reason to e.g. not trust your mobile service >> provider either, who can track you, knows your location, and has your >> customer data. > > ISTM that introducing that GRIDS thing makes matters worse and not > better, because, as you yourself say, it is clear that whoever has > access to the GRIDS information would be better able to track people > compared to now. > > I would prefer to see fewer long lived identifiers in networking > and not more, and this proposal introduces more long lived identifiers > (erroneously calling those identities). > > Regardless of what one thinks of them, given that things like > HIP and LISP exist, and try tackle the ID/LOC split, I see no benefit > adding this extra layer of indirection with a privacy invasive > "Unique and Permanent" identifier which seems to be the only > non-overlapping part of this work - in fact I only see downsides. > > Cheers, > S. > > >> >> --- Alex >> >> >>> -----Original Message----- From: Ideas >>> [mailto:ideas-bounces@ietf.org] On Behalf Of >>> stephen.farrell@cs.tcd.ie Sent: Wednesday, October 04, 2017 9:35 >>> AM To: tom@herbertland.com Cc: ideas@ietf.org; >>> phill@hallambaker.com; ietf@ietf.org Subject: Re: [Ideas] WG >>> Review: IDentity Enabled Networks (ideas) >>> >>> >>> >>> On Wednesday, 4 October 2017, Tom Herbert wrote: >>>> On Wed, Oct 4, 2017 at 7:57 AM, Phillip Hallam-Baker >>>> wrote: >>>>> On Fri, Sep 29, 2017 at 2:31 PM, Stephen Farrell >>>>> wrote: >>>>>> >>>>>> >>>>>> As currently described, I oppose creation of this working >>>>>> group on the basis that it enables and seemingly encourages >>>>>> embedding identifiers for humans as addresses. Doing so would >>>>>> have significant privacy downsides, would enable new methods >>>>>> for censorship and discrimination, and could be very hard to >>>>>> mitigate should one wish to help protect people's privacy, as >>>>>> I think is current IETF policy. >>>>>> >>>>>> If the work precluded the use of any identifiers that >>>>>> strongly map to humans then I'd be ok with it being done as >>>>>> it'd then only be a waste of resources. But I don't know how >>>>>> that could be enforced so I think it'd be better to just not >>>>>> do this work at all. >>>>>> >>>>>> S. >>>>> >>>>> >>>>> +1 >>>>> >>>>> I know how to restrict the work to 'meaningless' identifiers, >>>>> require that the identifiers be the output of a cryptographic >>>>> algorithm. >>>>> >>>>> Now strictly speaking, this only limits scope to identifiers >>>>> that are indexical as opposed to rendering them meaningless but >>>>> I think that was the sense of it. >>>>> >>>>> >>>>> N=C3=83=C2=B6th proposed a trichotemy of identifiers as follows >>>>> >>>>> * Identity, the signifier is the signified (e.g. data: URI) >>>>> >>>>> * Indexical, the signifier is related to the signified by a >>>>> systematic relationship, (e.g. ni URIs, SHA256Data), PGP >>>>> fingerprints etc.) >>>>> >>>>> * Names, the signifier is the related to the signified by a >>>>> purely conventional relationship, (e.g. example.com to its >>>>> owner) >>>>> >>>>> >>>>> There is a big difference between attempting to manage >>>>> indexical signifiers and names. Especially when the people >>>>> trying to do so refuse to read any of the literature on >>>>> semiotics. >>>>> >>>>> Names are problematic because the only way that a conventional >>>>> relationship can be implemented is through some sort of >>>>> registration infrastructure and we already have one of those >>>>> and the industry that manages it has a marketcap in the tens of >>>>> billions. >>>>> >>>>> Identifiers do lead to tractable solutions. But, this proposal >>>>> looks a bit unfocused for IRTF consideration, an IETF WG? >>>>> Really? >>>>> >>>> Identifiers are equivalent to addresses in that they indicate a >>>> node in the network for the purposes of end to end >>>> communications. The only difference between identifiers and >>>> addresses is that identifiers are not topological. Virtual >>>> addresses in network virtualization are also identifiers. So the >>>> security properties are the same when considering privacy. For >>>> instance, if applications use temporary addresses for privacy, it >>>> would have equivalent properties using temporary identifiers. In >>>> fact from the application POV this would be transparent. It could >>>> get a pool of apparently random addresses to choose from as >>>> source of communication, it shouldn't know or even care if the >>>> addresses are identifiers. >>>> >>>> Identity is a completely separate concept from identifiers. Is >>>> not required in any of the identifier/locator protocols and AFAIK >>>> none of them even mention the term. There is no association of an >>>> identity of user behind and identifier any more than there is an >>>> association of identity behind IP address. The fact that the >>>> words "identifier" and "identity" share a common prefix is an >>>> unfortunate happenstance :-). >>> >>> >>> Yes. But doesn't that mean either the name of this effort is wildly >>> misleading or else the effort is hugely problematic from a privacy >>> POV? Either way, istm this ought not proceed. >>> >>> S. >>> >>>> >>>> Tom >>>> >>> _______________________________________________ Ideas mailing list >>> Ideas@ietf.org https://www.ietf.org/mailman/listinfo/ideas > > _______________________________________________ > Ideas mailing list > Ideas@ietf.org > https://www.ietf.org/mailman/listinfo/ideas --001a11404e58c86f30055ac02d4e Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Oct 4, 2017 1:35 PM, "Dino Farinacci" <farinacci@gmail.com> wrote:
Adding lisp@ietf.org to cc list.

How about creating a working group that solely focuses on deployment of a m= apping system and does not specify how and where identifiers are allocated?=


+1

I suggest that could be called idloc = (for Identifier-Locator)

Tom

I have made suggestions before that such a working group should be in the o= ps area. Some examples include and are not limited to v6ops, dnsop, and mbo= ned.

Cheers,
Dino

> On Oct 4, 2017, at 12:45 PM, Stephen Farrell <stephen.farrell@cs.tcd.ie> wrote:
>
>
> Hiya,
>
> TL;DR - I am now even more convinced that this ought not
> go ahead. (Sorry;-)
>
> On 04/10/17 19:48, Alexander Clemm wrote:
>> There were a couple of things raised in the overall thread that I<= br> >> just wanted to quickly respond to:
>>
>> Clearly privacy is an important issue and concern.=C2=A0 The curre= nt
>> charter proposal includes a requirement for a detailed analysis of=
>> this aspect.=C2=A0 If this aspect needs to be expanded, sure, let&= #39;s do
>> this.
>
> TBH, I don't think that'd help, for me at least. I don't > see any way in which such permanent strings representing
> identity can be defined to be usable as claimed and not
> be perniciously privacy invasive. So some promises to
> ponder the problem in charter text wouldn't do it for
> me. (And tbh, I've seen that can kicked down that road
> before, so I'm skeptical of such promises in general.)
>
>> Everyone seems to be jumping up and down regarding the use of the<= br> >> term of "identity" as if a foregone conclusion that this= is a synonym
>> for "privacy invasion".=C2=A0 =C2=A0However: - "Ide= ntity" does not imply
>> "personal identity".=C2=A0 Really, this is an identifier= scheme for
>> endpoints.
>
> Sorry, what I assume is the relevant draft [1] says the "identity= "
> (denoted "IDy") is a "Unique and Permanent Identity&quo= t; and that
> "Networks may treat traffic differently depending on the IDy of > source or destination" and also seems to envisage a large logical=
> database of everyone's IDy's: "Identity also allows to ha= ve metadata
> associated it to be applied, regardless of which IDf is used to
> refer it." (Where IDf is the identifier that'll later be mapp= ed
> to a locator via, I assume, HIP or LISP or similar.)
>
> I think it's entirely correct to jump up and down about the
> privacy consequences of the above. (Not to mention the potential
> censorship and discriminatory aspects.)
>
>=C2=A0 =C2=A0 =C2=A0[1] https:/= /tools.ietf.org/html/draft-ccm-ideas-identity-use-cases-01 >
>> Perhaps even "identity" is a misnomer.
>
> Well, it was presumably your choice (where your =3D=3D some set of
> the proponents). If that's a mistake, then it seems a fairly
> fatal one - to get the name wrong for an effort all about mapping
> names to identifiers;-)
>
>> If you will,
>> identity as conceived in the context of IDEAS is a second level of=
>> identifier that does not have to be exposed over the data plane -<= br> >> Because of this, it may result in greater privacy than existing >> schemes, not less.
>
> I see that argument in [1] but I'm not buying it tbh. To get
> that level of protection from such an indirection, one would
> have to have something like Tor hidden services and perhaps
> one would have to *not* standardise the mapping from human
> meaningful identifiers to those used as IDf, and esp. not the
> reverse mapping. Defining that reverse mapping cannot but be
> privacy invasive afaics. (There could maybe be ways to define
> how an already hashed human meaningful identifier could then
> be further hashed to become an IDy but I don't really see the
> point of that at all, other than to just standardise something
> for the fun of the process.)
>
>> It enables you, for example, to obfuscate
>> endpoints to outside observers as you wouldn't need to use per= sonal
>> unique long-lived identifiers, quite the contrary. - There is also= a
>> security dimension here. If I am victim of a phishing attack becau= se
>> my network information (like today) is exposed to botnets,
>
> (Nit: that says nothing about being a victim of, only of being
> a target of, an attempted attack. Speaking of victims also
> tends not to lead to more objective analysis, so I think it's
> better to not go there unless it's relevant, which I don't
> think is the case here, because...)
>
> I don't understand what network information you mean. If you
> mean email addresses, and are proposing that the email ecosystem
> change to use some IDf or LOC values, that doesn't seem at all
> realistic to me. If you don't mean email addresses then I don'= t
> see how any lower layer change will affect attempted phishes.
> The routing area is probably also the entirely wrong venue for
> any real anti-phishing effort.
>
> That really wasn't a good example;-)
>
>> phishers
>> etc who can hide from me (but not I from them) and remain anonymou= s
>> or impersonate legitimate users, I do consider this a very serious=
>> threat also to my privacy.=C2=A0 How can IETF counteract such thre= ats?=C2=A0 I
>> think that IDEAS, if done right, can provide a contribution here.<= br> >
> I don't see that at all. Unless I'm mistaken that seems like > wishful thinking to me.
>
>>
>> One aspect that has been missing from the discussion is the questi= on
>> whether there is a distinction between the network provider who >> provides GRIDS services and an outside attacker / observer.=C2=A0 = I think
>> this distinction is important.=C2=A0 The way I see it, if done rig= ht
>> (sure, big "if", and requiring detailed analysis), IDEAS= as I would
>> envision it can contribute greatly to provide greater security and=
>> privacy from outside attackers.=C2=A0 At the same time, as it is c= urrently
>> envisioned, there clearly is a trust relationship between an entit= y
>> and the provider of "its" GRIDS services.=C2=A0 The mapp= ing database will
>> have information about locator-identifier and identifier-identifie= r
>> mappings, so GRIDS will know which identifiers its endpoints are >> using.=C2=A0 Clearly, if this trust is abused because the provider= cannot
>> be trusted, if you are concerned that it sells your endpoint=C3=A2= =E2=82=AC=E2=84=A2s
>> information to the mob or a suppressive government, there is an >> issue.=C2=A0 However, when concerned about this scenario, it seems= to me
>> one would have equal reason to e.g. not trust your mobile service<= br> >> provider either, who can track you, knows your location, and has y= our
>> customer data.
>
> ISTM that introducing that GRIDS thing makes matters worse and not
> better, because, as you yourself say, it is clear that whoever has
> access to the GRIDS information would be better able to track people > compared to now.
>
> I would prefer to see fewer long lived identifiers in networking
> and not more, and this proposal introduces more long lived identifiers=
> (erroneously calling those identities).
>
> Regardless of what one thinks of them, given that things like
> HIP and LISP exist, and try tackle the ID/LOC split, I see no benefit<= br> > adding this extra layer of indirection with a privacy invasive
> "Unique and Permanent" identifier which seems to be the only=
> non-overlapping part of this work - in fact I only see downsides.
>
> Cheers,
> S.
>
>
>>
>> --- Alex
>>
>>
>>> -----Original Message----- From: Ideas
>>> [mailto:ideas-bounce= s@ietf.org] On Behalf Of
>>> stephen.farrell@c= s.tcd.ie Sent: Wednesday, October 04, 2017 9:35
>>> AM To: tom@herbertland.= com Cc: ideas@ietf.org;
>>> phill@hallambaker.com= ; ietf@ietf.org Subject: Re: [Idea= s] WG
>>> Review: IDentity Enabled Networks (ideas)
>>>
>>>
>>>
>>> On Wednesday, 4 October 2017, Tom Herbert wrote:
>>>> On Wed, Oct 4, 2017 at 7:57 AM, Phillip Hallam-Baker
>>>> <phill@hallamb= aker.com> wrote:
>>>>> On Fri, Sep 29, 2017 at 2:31 PM, Stephen Farrell
>>>>> <steph= en.farrell@cs.tcd.ie> wrote:
>>>>>>
>>>>>>
>>>>>> As currently described, I oppose creation of this = working
>>>>>> group on the basis that it enables and seemingly e= ncourages
>>>>>> embedding identifiers for humans as addresses. Doi= ng so would
>>>>>> have significant privacy downsides, would enable n= ew methods
>>>>>> for censorship and discrimination, and could be ve= ry hard to
>>>>>> mitigate should one wish to help protect people= 9;s privacy, as
>>>>>> I think is current IETF policy.
>>>>>>
>>>>>> If the work precluded the use of any identifiers t= hat
>>>>>> strongly map to humans then I'd be ok with it = being done as
>>>>>> it'd then only be a waste of resources. But I = don't know how
>>>>>> that could be enforced so I think it'd be bett= er to just not
>>>>>> do this work at all.
>>>>>>
>>>>>> S.
>>>>>
>>>>>
>>>>> +1
>>>>>
>>>>> I know how to restrict the work to 'meaningless= 9; identifiers,
>>>>> require that the identifiers be the output of a crypto= graphic
>>>>> algorithm.
>>>>>
>>>>> Now strictly speaking, this only limits scope to ident= ifiers
>>>>> that are indexical as opposed to rendering them meanin= gless but
>>>>> I think that was the sense of it.
>>>>>
>>>>>
>>>>> N=C3=83=C2=B6th proposed a trichotemy of identifiers a= s follows
>>>>>
>>>>> * Identity, the signifier is the signified (e.g. data:= URI)
>>>>>
>>>>> * Indexical, the signifier is related to the signified= by a
>>>>> systematic relationship, (e.g. ni URIs, SHA256Data), P= GP
>>>>> fingerprints etc.)
>>>>>
>>>>> * Names,=C2=A0 the signifier is the related to the sig= nified by a
>>>>> purely conventional relationship, (e.g. example.com to it= s
>>>>> owner)
>>>>>
>>>>>
>>>>> There is a big difference between attempting to manage=
>>>>> indexical signifiers and names. Especially when the pe= ople
>>>>> trying to do so refuse to read any of the literature o= n
>>>>> semiotics.
>>>>>
>>>>> Names are problematic because the only way that a conv= entional
>>>>> relationship can be implemented is through some sort o= f
>>>>> registration infrastructure and we already have one of= those
>>>>> and the industry that manages it has a marketcap in th= e tens of
>>>>> billions.
>>>>>
>>>>> Identifiers do lead to tractable solutions. But, this = proposal
>>>>> looks a bit unfocused for IRTF consideration, an IETF = WG?
>>>>> Really?
>>>>>
>>>> Identifiers are equivalent to addresses in that they indic= ate a
>>>> node in the network for the purposes of end to end
>>>> communications. The only difference between identifiers an= d
>>>> addresses is that identifiers are not topological. Virtual=
>>>> addresses in network virtualization are also identifiers. = So the
>>>> security properties are the same when considering privacy.= For
>>>> instance, if applications use temporary addresses for priv= acy, it
>>>> would have equivalent properties using temporary identifie= rs. In
>>>> fact from the application POV this would be transparent. I= t could
>>>> get a pool of apparently random addresses to choose from a= s
>>>> source of communication, it shouldn't know or even car= e if the
>>>> addresses are identifiers.
>>>>
>>>> Identity is a completely separate concept from identifiers= . Is
>>>> not required in any of the identifier/locator protocols an= d AFAIK
>>>> none of them even mention the term. There is no associatio= n of an
>>>> identity of user behind and identifier any more than there= is an
>>>> association of identity behind IP address. The fact that t= he
>>>> words "identifier" and "identity" shar= e a common prefix is an
>>>> unfortunate happenstance :-).
>>>
>>>
>>> Yes. But doesn't that mean either the name of this effort = is wildly
>>> misleading or else the effort is hugely problematic from a pri= vacy
>>> POV? Either way, istm this ought not proceed.
>>>
>>> S.
>>>
>>>>
>>>> Tom
>>>>
>>> _______________________________________________ Ideas mai= ling list
>>> Ideas@ietf.org https://www.ietf.org/mailman/listinfo/ideas
>
> _______________________________________________
> Ideas mailing list
> Ideas@ietf.org
> https://www.ietf.org/mailman/listinfo/ideas=


--001a11404e58c86f30055ac02d4e-- From nobody Wed Oct 4 15:38:00 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 66CDE1344D8; Wed, 4 Oct 2017 15:37:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KWc71Jy_iBR0; Wed, 4 Oct 2017 15:37:46 -0700 (PDT) Received: from mail-oi0-x22c.google.com (mail-oi0-x22c.google.com [IPv6:2607:f8b0:4003:c06::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D0BA4134225; Wed, 4 Oct 2017 15:37:45 -0700 (PDT) Received: by mail-oi0-x22c.google.com with SMTP id u130so22006073oib.11; Wed, 04 Oct 2017 15:37:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=yQMeMA3WWlYXnnQhRK1xhSogbbsfN+TG15nM1b6KE5s=; b=DfDE7tJSX42UPIvO9iAKXBUYrnksJHNb+e9H1A0rwZXlBHgMVN6rPn1tL2P8HdgVg/ aY+Wp6KgrnrQG0b15o7RqL1Csfpjq7ICUpIDSWLS6CCtg455OypYpLx2rlDUfJsbft/V K+lMiwpxJlhffzt6LmxkVl7BF7H9IDondcdpcA4dcYN0WVS9cmzLgRLmSG2gVg8KFWI+ mmvFEmB8VhO9oOeNQoWJHg3r+6+UENsDrsmXkTV4bsl6S7Pc/W78SWLFaaGp7jWuw+Eo wmHeRF5SwbSzsI3EKJQ0czeQswcVEZbhJQgBc85x6JSuMMRd1tiwcO1VRF5wyHeKXTFl yYAQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=yQMeMA3WWlYXnnQhRK1xhSogbbsfN+TG15nM1b6KE5s=; b=Ze7TIZUGkllHDzMTpAsX7pvEGHPzjEyK5DnQH87QY70Z7PygQZ51Kr9LOr4OrX+i8p +T+Hc4NaPh4R2AOT+HjwChsKc2f/HX7mIcretb4zcQ5bA1Ppnr7NJ2AWuTM3ab+5joew B6RAcUbR+Kpz+qC8cVXV4QxnnisvVjiWQSD4QBwmhNNzyVL0TkianxC0CLK8OMIdUX0j 7KqpK9Qh7tDMkBYEzXL3I5MjJLLsuFz+/rYk4l5Ssh6A8EglIPlkKT4XvuyJn7kfpHXV 1WIOEQfD3PrjhOJCryGI83uFw7N7KlZaK8+P3smUCCmM/0yOs5mKeIrcSPMNR48ISv22 ZFYg== X-Gm-Message-State: AMCzsaVfQBT3YvY+7JntILWeJs08hXT2uYtZyn8OpG7T2OqMWrBxXzZL 0/jvnN5/iTcQuknojNYyEFw= X-Google-Smtp-Source: AOwi7QBDFR2jOSE6ssZmZxO08IoNVOvxXm7Y924fnBgtCkFwM8MgmOxp15UFnYePVuk0Ysry5cIztg== X-Received: by 10.202.236.7 with SMTP id k7mr1231226oih.442.1507156665244; Wed, 04 Oct 2017 15:37:45 -0700 (PDT) Received: from dino-macbook.attlocal.net (adsl-108-94-3-96.dsl.pltn13.sbcglobal.net. [108.94.3.96]) by smtp.gmail.com with ESMTPSA id p205sm4480898oib.33.2017.10.04.15.37.39 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 04 Oct 2017 15:37:44 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Dino Farinacci In-Reply-To: Date: Wed, 4 Oct 2017 15:37:37 -0700 Cc: lisp@ietf.org, ietf@ietf.org, Alexander Clemm , Stephen Farrell , "ideas@ietf.org" , "phill@hallambaker.com" Content-Transfer-Encoding: quoted-printable Message-Id: <5B46C69B-FF7F-406B-AB53-12AC8BF45E30@gmail.com> References: <150670160872.14128.2758037992338326085.idtracker@ietfa.amsl.com> <778d5504-ba4f-d418-7b20-356353bb0fb2@cs.tcd.ie> <8kd5pq.oxb4pv.rtlo8t-qmf@mercury.scss.tcd.ie> <644DA50AFA8C314EA9BDDAC83BD38A2E0EAA7204@sjceml521-mbx.china.huawei.com> <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> To: Tom Herbert X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [lisp] [Ideas] WG Review: IDentity Enabled Networks (ideas) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Oct 2017 22:37:47 -0000 > I suggest that could be called idloc (for Identifier-Locator) I would suggest ms-ops as in =E2=80=9Cmapping system operation=E2=80=9D. Dino From nobody Wed Oct 4 16:03:53 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5D4A13207A for ; Wed, 4 Oct 2017 16:03:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id faIVxQIQmDyM for ; Wed, 4 Oct 2017 16:03:49 -0700 (PDT) Received: from mail-io0-x22a.google.com (mail-io0-x22a.google.com [IPv6:2607:f8b0:4001:c06::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C326132125 for ; Wed, 4 Oct 2017 16:03:49 -0700 (PDT) Received: by mail-io0-x22a.google.com with SMTP id g32so11940265ioj.2 for ; Wed, 04 Oct 2017 16:03:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=ecActxDj1L1T164VlYcwvHsNNajFCsxXdr4Pb9KdV7M=; b=iPb2zmVOadaGrVp3YMVawXUEsNcQQRdy7XWEuWJHjhc5RjerP+2toTQ/of4+k1oFsh Z4GBGS1EjahSg0yvHSXIpS2aPLzASHKkjE2lLQEld06afh9r6tANTVjLdx1C7kTf1Qld XpBi10FU09bvIe44rZ229kGUMANK7+pDSOKMTPl1rsqevMN5E9GmBUs44wFOQNv2oF7j KDfF6AO650ykB+rnAOnMEUQEVBsg/T12cnWUxBMpVBMhBlKD0LqtVZqOFSUXsIafELjC KU6qsqq/ryOPtpxx70LgMfqFjv2hk9OF1wzVDvipA8+7+VO4z2h8W00vHk+uTvU9Rdw2 8w9w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=ecActxDj1L1T164VlYcwvHsNNajFCsxXdr4Pb9KdV7M=; b=ZAvxtoDjDFczDNQ2Ytnux1cpsVfHfqtyrLf1836BoDZltlZ+ATTyyMAe0FHvTXeu37 RGtbU4S57DYy1jM45wuzgQl4u6G2XnWMSMmXOHvBnMSNYapp5ueWiQ/kc8V2k/K0+wz1 sIjFMomoyMnMhmtTPUED/dFYInKE80JbMLs+XsLKUC4wyOcbqNGNWp3DpJQrDUc9vQB2 PGBrP623TVs8LPeO/aQqFfecw3URJXxdlecPLZTJh8ypOzFPj0ma6JCkem6vwFKJYm3p lg6arCjKHgNwqRZD+6pWQeREkx8P3THNko9amMVmlEZ3+FC/eBOhH8PX8cwyG1TwjC1G TH/Q== X-Gm-Message-State: AMCzsaVDKBdpPSEmbQdBFIzfpHgpYz2EIp/C+k9TcWgcuTXzgrUYC6fC K4kmIYewV8tBwaV4ByZKoLY= X-Google-Smtp-Source: AOwi7QByrGB91wrpiBWTf0Mm3lEwQz8bDlMeHa8xPowr7eaQ12uJQ9vfKEq792AZ3POp+5hps0ZcdA== X-Received: by 10.107.83.15 with SMTP id h15mr36630313iob.72.1507158228855; Wed, 04 Oct 2017 16:03:48 -0700 (PDT) Received: from dino-macbook.attlocal.net (adsl-108-94-3-96.dsl.pltn13.sbcglobal.net. [108.94.3.96]) by smtp.gmail.com with ESMTPSA id f199sm7631439iof.67.2017.10.04.16.03.47 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 04 Oct 2017 16:03:48 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Dino Farinacci In-Reply-To: <1e0aac70-67f4-4b35-8d89-67e8800f8cd7@OPEXCLILMA1.corporate.adroot.infra.ftgroup> Date: Wed, 4 Oct 2017 16:03:47 -0700 Cc: "lisp@ietf.org list" , Stefano Secci , JACQUENET Christian IMT/OLN Content-Transfer-Encoding: quoted-printable Message-Id: <4B8ADB46-E806-4FFC-94EE-9C5A73E054CF@gmail.com> References: <1e0aac70-67f4-4b35-8d89-67e8800f8cd7@OPEXCLILMA1.corporate.adroot.infra.ftgroup> To: mohamed.boucadair@orange.com X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [lisp] Addition to RFC6833bis for xTR-ID in Map-Request message X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Oct 2017 23:03:51 -0000 > Hi Dino, all, > =20 > I do strongly support that pub/sub feature is also possible in LISP. Thanks for the response Med. I think it can be introduced quite easily = with the right machinery. > Overloading Map-Request is one way to proceed, but there is also an = alternate approach to define a dedicate method for the = subscription/notification purposes (e.g., = https://tools.ietf.org/html/draft-boucadair-lisp-subscribe-05). I read your original draft and I just finished reading your -05 draft. = Here are my concerns with your design: (1) Your draft covers a lot more issues then just getting notifications = for RLOC-set changes (pubsub functionality). So the scope needs to be = narrowed IMO. (2) You indicate for Map-Resolver redirect to use a Map-Subscribe = message. That doesn=E2=80=99t sound like a pubsub capability. (3) The Map-Subscribe has all the same fields (and in different order) = than a Map-Request, that means a new parser and code needs to be written = and debugged when existing implementations could easily process a new = S-bit in a Map-Request message. (4) An ITR would have to send two message when its data-plane gets a = cache miss. A Map-Request to get a Map-Reply to populate its map-cache = and a Map-Subscribe to request for notifications. And then it would have = to process a Map-Subscribe-Ack and Map-Reply separately. (5) As for (4) what if the Map-Subscribe-Ack comes back but the = Map-Reply is lost? The ITR has subscription state but can=E2=80=99t do = any forwarding. What if the Map-Reply is returned and the = Map-Subscribe-Ack is lost, then the ITR has forwarding state but no = notification state. What if the RLOC-set changes during the = retransmission of the Map-Subscribe-Ack? (6) You put the Map-Subscribe functionality in the Map-Resolver. Well = when an RLOC-set changes for a registered entry in a Map-Server how does = it know which Map-Resolver to inform about the change? And Map-Resolvers = today do not cache mapping entries. So there are a lot of mechanical = issues you have not worked out. (7) I belive the spec is mis-named in a major way. You are talking about = ITR bulk transfer and cache re-population when an ITR reboots. This spec = has nothing to do with pubsub. Now as for draft-rodrigueznatal-lisp-pubsub-00 design: (1) The reason putting subscription requests in the Map-Request is = because both cache population and requesting for notifications come = together and are ack=E2=80=99ed together. (2) The reason for subscription requests in the Map-Request is so = subscriptions can go to the map-servers. The nodes that first know when = an RLOC-set changes. So we can do fast converging notifications. (3) Using Map-Requests allows map-resolvers and ddt-nodes to NOT change. = That has huge deployment advantagese. With this design only ITRs that = want the functionality and map-servers that provide the functionality = need to change. And both new and old ITRs/map-servers can interoperate. (4) Using Map-Replies for acknowledgements allows for both cache = population and subscription-acks to be signed by the map-server. That = is, they can be authenticated. (5) The implementation can be done fairly easily and we can deploy = quickly. This has been confirmed by at least 3 developers. So back to the simple change for RFC6833bis. Irrespective of pubsub, = knowing the xTR-ID on Map-Requests have advantages to identify the ITR = when it moves around (when the RLOCs change). If there are no other objections, I=E2=80=99d like to publish this the = change tomorrow? Dino > =20 > I suggest that the WG examines both approaches. > =20 > Cheers, > Med From nobody Wed Oct 4 16:08:31 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 527DA13320B for ; Wed, 4 Oct 2017 16:08:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.021 X-Spam-Level: X-Spam-Status: No, score=-0.021 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=joelhalpern.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g1vTTInHJnCq for ; Wed, 4 Oct 2017 16:08:28 -0700 (PDT) Received: from mailb2.tigertech.net (mailb2.tigertech.net [208.80.4.154]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9EE2F13219C for ; Wed, 4 Oct 2017 16:08:28 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mailb2.tigertech.net (Postfix) with ESMTP id 8CE1346DCA3 for ; Wed, 4 Oct 2017 16:08:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=joelhalpern.com; s=1.tigertech; t=1507158508; bh=A1yl+1xiA9ofQAth0pvAgIGhfF7FeOV05Y+WkbfsMB4=; h=To:From:Subject:Date:From; b=kjpIowhO/JNtcbBF9Mz47dcbjISo5dTxlm2yVHRYgz+vyz3o0dCEcwA2V+t62KVyk Wx5ZXyXwO75ldW49pG7aDPEwEzflGNtzXPGrr0SLN9QdqFmqyD66T6ylyfp+sYZk7U 9Lt3Dk38Vi+VQWySwQjMohFFQyTeCYPEW5VzRC6w= X-Virus-Scanned: Debian amavisd-new at b2.tigertech.net Received: from Joels-MacBook-Pro.local (unknown [50.225.209.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mailb2.tigertech.net (Postfix) with ESMTPSA id 2AD0146DC9A for ; Wed, 4 Oct 2017 16:08:28 -0700 (PDT) To: "lisp@ietf.org" From: "Joel M. Halpern" Message-ID: Date: Wed, 4 Oct 2017 19:08:27 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: [lisp] 6830bis and 6833bis X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Oct 2017 23:08:29 -0000 Folks, can you please take a good luck at these two? We ar enot yet at last call, but I hope we are getting close. So if there are things that are wrong, we need to know ASAP. Thanks, Joel From nobody Thu Oct 5 07:29:39 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 013691321B6 for ; Thu, 5 Oct 2017 07:29:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.619 X-Spam-Level: X-Spam-Status: No, score=-1.619 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zQY-UMRtKaST for ; Thu, 5 Oct 2017 07:29:36 -0700 (PDT) Received: from relais-inet.orange.com (mta239.mail.business.static.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3F559126DFE for ; Thu, 5 Oct 2017 07:29:36 -0700 (PDT) Received: from opfedar06.francetelecom.fr (unknown [xx.xx.xx.8]) by opfedar21.francetelecom.fr (ESMTP service) with ESMTP id E00D6100426; Thu, 5 Oct 2017 16:29:34 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.57]) by opfedar06.francetelecom.fr (ESMTP service) with ESMTP id A82FD8007C; Thu, 5 Oct 2017 16:29:34 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM23.corporate.adroot.infra.ftgroup ([fe80::787e:db0c:23c4:71b3%19]) with mapi id 14.03.0361.001; Thu, 5 Oct 2017 16:29:33 +0200 From: To: Dino Farinacci CC: "lisp@ietf.org list" , Stefano Secci , JACQUENET Christian IMT/OLN Thread-Topic: [lisp] Addition to RFC6833bis for xTR-ID in Map-Request message Thread-Index: AQHTPWUIs241j71enkaitU3YxHrnIKLVS/mQ Date: Thu, 5 Oct 2017 14:29:33 +0000 Message-ID: References: <1e0aac70-67f4-4b35-8d89-67e8800f8cd7@OPEXCLILMA1.corporate.adroot.infra.ftgroup> <4B8ADB46-E806-4FFC-94EE-9C5A73E054CF@gmail.com> In-Reply-To: <4B8ADB46-E806-4FFC-94EE-9C5A73E054CF@gmail.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.4] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [lisp] Addition to RFC6833bis for xTR-ID in Map-Request message X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Oct 2017 14:29:38 -0000 SGkgRGlubywgDQoNClBsZWFzZSBzZWUgaW5saW5lIHNvbWUgY2xhcmlmaWNhdGlvbnMsIEZXSVcu IA0KDQpDaGVlcnMsDQpNZWQNCg0KPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gRGXC oDogRGlubyBGYXJpbmFjY2kgW21haWx0bzpmYXJpbmFjY2lAZ21haWwuY29tXQ0KPiBFbnZvecOp wqA6IGpldWRpIDUgb2N0b2JyZSAyMDE3IDAxOjA0DQo+IMOAwqA6IEJPVUNBREFJUiBNb2hhbWVk IElNVC9PTE4NCj4gQ2PCoDogbGlzcEBpZXRmLm9yZyBsaXN0OyBTdGVmYW5vIFNlY2NpOyBKQUNR VUVORVQgQ2hyaXN0aWFuIElNVC9PTE4NCj4gT2JqZXTCoDogUmU6IFtsaXNwXSBBZGRpdGlvbiB0 byBSRkM2ODMzYmlzIGZvciB4VFItSUQgaW4gTWFwLVJlcXVlc3QNCj4gbWVzc2FnZQ0KPiANCj4g PiBIaSBEaW5vLCBhbGwsDQo+ID4NCj4gPiBJIGRvIHN0cm9uZ2x5IHN1cHBvcnQgdGhhdCBwdWIv c3ViIGZlYXR1cmUgaXMgYWxzbyBwb3NzaWJsZSBpbiBMSVNQLg0KPiANCj4gVGhhbmtzIGZvciB0 aGUgcmVzcG9uc2UgTWVkLiBJIHRoaW5rIGl0IGNhbiBiZSBpbnRyb2R1Y2VkIHF1aXRlIGVhc2ls eQ0KPiB3aXRoIHRoZSByaWdodCBtYWNoaW5lcnkuDQo+IA0KPiA+IE92ZXJsb2FkaW5nIE1hcC1S ZXF1ZXN0IGlzIG9uZSB3YXkgdG8gcHJvY2VlZCwgYnV0IHRoZXJlIGlzIGFsc28gYW4NCj4gYWx0 ZXJuYXRlIGFwcHJvYWNoIHRvIGRlZmluZSBhIGRlZGljYXRlIG1ldGhvZCBmb3IgdGhlDQo+IHN1 YnNjcmlwdGlvbi9ub3RpZmljYXRpb24gcHVycG9zZXMgKGUuZy4sDQo+IGh0dHBzOi8vdG9vbHMu aWV0Zi5vcmcvaHRtbC9kcmFmdC1ib3VjYWRhaXItbGlzcC1zdWJzY3JpYmUtMDUpLg0KPiANCj4g SSByZWFkIHlvdXIgb3JpZ2luYWwgZHJhZnQgYW5kIEkganVzdCBmaW5pc2hlZCByZWFkaW5nIHlv dXIgLTA1IGRyYWZ0Lg0KPiBIZXJlIGFyZSBteSBjb25jZXJucyB3aXRoIHlvdXIgZGVzaWduOg0K PiANCj4gKDEpIFlvdXIgZHJhZnQgY292ZXJzIGEgbG90IG1vcmUgaXNzdWVzIHRoZW4ganVzdCBn ZXR0aW5nIG5vdGlmaWNhdGlvbnMNCj4gZm9yIFJMT0Mtc2V0IGNoYW5nZXMgKHB1YnN1YiBmdW5j dGlvbmFsaXR5KS4gU28gdGhlIHNjb3BlIG5lZWRzIHRvIGJlDQo+IG5hcnJvd2VkIElNTy4NCj4g DQo+ICgyKSBZb3UgaW5kaWNhdGUgZm9yIE1hcC1SZXNvbHZlciByZWRpcmVjdCB0byB1c2UgYSBN YXAtU3Vic2NyaWJlIG1lc3NhZ2UuDQo+IFRoYXQgZG9lc27igJl0IHNvdW5kIGxpa2UgYSBwdWJz dWIgY2FwYWJpbGl0eS4NCg0KW01lZF0gSSBtYXkgbm90IGxvb2sgbGlrZSBhIHB1YnN1YiBjYXBh YmlsaXR5LCBidXQgdGhpcyBpcyBhIGNvbnNlcXVlbmNlIG9mIHJlcXVpcmluZyB0aGUgTWFwLVJl c29sdmVycyB0byBtYWludGFpbiBzdGF0ZSBmb3Igbm90aWZpY2F0aW9uIHB1cnBvc2VzLiBNYWlu dGFpbmluZyB0aG9zZSBzdGF0ZSBtYXkgaW5jbHVkZSBzb21lIGV4dHJhIGxvYWQgb24gdGhvc2Ug c2VydmVycy4gVGhlIHJlZGlyZWN0IGZ1bmN0aW9uYWxseSBhbGxvd3MgdG8gcmVkaXJlY3QgSVRS cyB0byBhbiBhbHRlcm5hdGUgc2VydmVyIHRoYXQgd2lsbCBzZXJ2aWNlIHRoZW0uIFRoaXMgaXMg ZG9uZSBhdXRvbWF0aWNhbGx5IGF0IHRoZSBtYXBwaW5nIHN5c3RlbSBzaWRlLiAgIA0KDQo+IA0K PiAoMykgVGhlIE1hcC1TdWJzY3JpYmUgaGFzIGFsbCB0aGUgc2FtZSBmaWVsZHMgKGFuZCBpbiBk aWZmZXJlbnQgb3JkZXIpDQo+IHRoYW4gYSBNYXAtUmVxdWVzdCwgdGhhdCBtZWFucyBhIG5ldyBw YXJzZXIgYW5kIGNvZGUgbmVlZHMgdG8gYmUgd3JpdHRlbg0KPiBhbmQgZGVidWdnZWQgd2hlbiBl eGlzdGluZyBpbXBsZW1lbnRhdGlvbnMgY291bGQgZWFzaWx5IHByb2Nlc3MgYSBuZXcgUy0NCj4g Yml0IGluIGEgTWFwLVJlcXVlc3QgbWVzc2FnZS4NCg0KW01lZF0gTmV3IGNvZGUgd2lsbCBiZSBy ZXF1aXJlZCBhbnl3YXkgZm9yIHN1cHBvcnRpbmcgdGhlIG5ldyBmdW5jdGlvbmFsaXR5LiAgDQoN Cj4gDQo+ICg0KSBBbiBJVFIgd291bGQgaGF2ZSB0byBzZW5kIHR3byBtZXNzYWdlIHdoZW4gaXRz IGRhdGEtcGxhbmUgZ2V0cyBhIGNhY2hlDQo+IG1pc3MuDQoNCltNZWRdIE5vLiBJdCB3aWxsIHNl bmQgb25seSB0aGUgc3Vic2NyaWJlIG1lc3NhZ2Ugd2l0aCBJLWJpdCBzZXQuIFRoaXMgc2luZ2xl IG1lc3NhZ2Ugd2lsbCBiZSBzdWZmaWNpZW50IHRvIGltbWVkaWF0ZWx5IHJldHJpZXZlIGFsbCB0 aGUgbWFwcGluZ3MgdGhhdCBhcmUgbWF0Y2hpbmcgdGhlIGZpbHRlcnMgaW4gdGhlIE1hcC1SZXNv bHZlciBmb3IgdGhpcyBwYXJ0aWN1bGFyIElUUi4gVGhpcyBvcHRpbWl6YXRpb24gaXMgbm90IHN1 cHBvcnRlZCB3aXRoIHRoZSBtb2RpZmllciBNYXAtUmVxdWVzdC4NCg0KIEEgTWFwLVJlcXVlc3Qg dG8gZ2V0IGEgTWFwLVJlcGx5IHRvIHBvcHVsYXRlIGl0cyBtYXAtY2FjaGUgYW5kIGENCj4gTWFw LVN1YnNjcmliZSB0byByZXF1ZXN0IGZvciBub3RpZmljYXRpb25zLiANCg0KW01lZF0gTm8uIFBs ZWFzZSBzZWUgYWJvdmUuIA0KDQpBbmQgdGhlbiBpdCB3b3VsZCBoYXZlIHRvDQo+IHByb2Nlc3Mg YSBNYXAtU3Vic2NyaWJlLUFjayBhbmQgTWFwLVJlcGx5IHNlcGFyYXRlbHkuDQo+IA0KPiAoNSkg QXMgZm9yICg0KSB3aGF0IGlmIHRoZSBNYXAtU3Vic2NyaWJlLUFjayBjb21lcyBiYWNrIGJ1dCB0 aGUgTWFwLVJlcGx5DQo+IGlzIGxvc3Q/DQoNCltNZWRdIEkgZ3Vlc3MgeW91IGFyZSByZWZlcnJp bmcgdG8gdGhlIGNhc2Ugd2hlcmUgSS1iaXQgaXMgc2V0IGluIHRoZSBNYXAtU3Vic2NyaWJlLiBB IHdheSB0byBkZXRlY3QgbG9zdCBNYXAtUmVwbHkgaXMgdG8gY29udmV5IGluIHRoZSBNYXAtU3Vi c2NyaWJlLUFjayB0aGUgbnVtYmVyIG9mIGVudHJpZXMgdGhhdCB3aWxsIGJlIHJldHJpZXZlZC4g VGhlIElUUiBjYW4gY2hlY2sgYmFzZWQgb24gdGhhdCBpbmZvcm1hdGlvbi4gDQoNCiBUaGUgSVRS IGhhcyBzdWJzY3JpcHRpb24gc3RhdGUgYnV0IGNhbuKAmXQgZG8gYW55IGZvcndhcmRpbmcuIFdo YXQNCj4gaWYgdGhlIE1hcC1SZXBseSBpcyByZXR1cm5lZCBhbmQgdGhlIE1hcC1TdWJzY3JpYmUt QWNrIGlzIGxvc3QsIHRoZW4gdGhlDQo+IElUUiBoYXMgZm9yd2FyZGluZyBzdGF0ZSBidXQgbm8g bm90aWZpY2F0aW9uIHN0YXRlLg0KDQpbTWVkXSBUaGUgSVRSIHdpbGwgcmV0cmFuc21pdCBNYXAt U3Vic2NyaWJlIGluIHRoaXMgY2FzZS4gDQoNCiBXaGF0IGlmIHRoZSBSTE9DLXNldA0KPiBjaGFu Z2VzIGR1cmluZyB0aGUgcmV0cmFuc21pc3Npb24gb2YgdGhlIE1hcC1TdWJzY3JpYmUtQWNrPw0K DQpbTWVkXSBJbXBsaWNpdCBNYXAtUmVwbGllcyB3aWxsIGJlIHNlbnQgaW1tZWRpYXRlbHkgdG8g dGhlIElUUi4gIA0KDQo+IA0KPiAoNikgWW91IHB1dCB0aGUgTWFwLVN1YnNjcmliZSBmdW5jdGlv bmFsaXR5IGluIHRoZSBNYXAtUmVzb2x2ZXIuIFdlbGwgd2hlbg0KPiBhbiBSTE9DLXNldCBjaGFu Z2VzIGZvciBhIHJlZ2lzdGVyZWQgZW50cnkgaW4gYSBNYXAtU2VydmVyIGhvdyBkb2VzIGl0DQo+ IGtub3cgd2hpY2ggTWFwLVJlc29sdmVyIHRvIGluZm9ybSBhYm91dCB0aGUgY2hhbmdlPw0KDQpb TWVkXSBUaGUgZHJhZnQgcHV0cyBpdCBpbiB0aGUgTWFwLVJlc29sdmVyLCBidXQgaGF2aW5nIGEg ZGVkaWNhdGVkIG1ldGhvZCBhbGxvd3MgZm9yIG1vcmUgZmxleGliaWxpdHkgdG8gZGVmaW5lIGZv ciBleGFtcGxlIHNlcnZlcnMgdGhhdCB3aWxsIG1hbmFnZSBzdWJzY3JpcHRpb24gYW5kIG5vdGlm aWNhdGlvbnMuIA0KDQogQW5kIE1hcC1SZXNvbHZlcnMNCj4gdG9kYXkgZG8gbm90IGNhY2hlIG1h cHBpbmcgZW50cmllcy4gU28gdGhlcmUgYXJlIGEgbG90IG9mIG1lY2hhbmljYWwNCj4gaXNzdWVz IHlvdSBoYXZlIG5vdCB3b3JrZWQgb3V0Lg0KDQpbTWVkXSBUaGlzIGlzIHZhbGlkIGZvciBhbGwg c3ViL3B1YiBwcm9wb3NhbHMsIElNSE8uDQoNCj4gDQo+ICg3KSBJIGJlbGl2ZSB0aGUgc3BlYyBp cyBtaXMtbmFtZWQgaW4gYSBtYWpvciB3YXkuIFlvdSBhcmUgdGFsa2luZyBhYm91dA0KPiBJVFIg YnVsayB0cmFuc2ZlciBhbmQgY2FjaGUgcmUtcG9wdWxhdGlvbiB3aGVuIGFuIElUUiByZWJvb3Rz LiBUaGlzIHNwZWMNCj4gaGFzIG5vdGhpbmcgdG8gZG8gd2l0aCBwdWJzdWIuDQoNCltNZWRdIEJ1 bGsgdHJhbnNmZXIgaXMgbm90IGRlZmluZWQgaW4gdGhpcyBkcmFmdC4gSXQgaXMgYSB1c2VmdWwg ZnVuY3Rpb25hbGl0eSB0byBhbGxvdyBmb3IgdGhlIHJldHJpZXZhbCBvZiBtYW55IG1hcHBpbmcg dXNpbmcgVENQLiBUaGUgSVRSIGluZm9ybXMgdGhlIHN1YnNjcmlwdGlvbiBzZXJ2ZXIgd2hldGhl ciBpdCBzdXBwb3J0IGJ1bGsgdHJhbnNmZXIgb3Igbm90LiBCYXNlZCBvbiB0aGF0IGNyaXRlcmlh LCBub3RpZmljYXRpb25zIHdpbGwgYmUgc2VudCB1c2luZyBpbmRpdmlkdWFsIE1hcC1SZXBseSBt ZXNzYWdlcyBvciB1c2luZyB0aGUgYnVsayB0cmFuc2ZlciBwcm9jZWR1cmUuIA0KDQo+IA0KPiBO b3cgYXMgZm9yIGRyYWZ0LXJvZHJpZ3Vlem5hdGFsLWxpc3AtcHVic3ViLTAwIGRlc2lnbjoNCj4g DQo+ICgxKSBUaGUgcmVhc29uIHB1dHRpbmcgc3Vic2NyaXB0aW9uIHJlcXVlc3RzIGluIHRoZSBN YXAtUmVxdWVzdCBpcyBiZWNhdXNlDQo+IGJvdGggY2FjaGUgcG9wdWxhdGlvbiBhbmQgcmVxdWVz dGluZyBmb3Igbm90aWZpY2F0aW9ucyBjb21lIHRvZ2V0aGVyIGFuZA0KPiBhcmUgYWNr4oCZZWQg dG9nZXRoZXIuDQo+IA0KPiAoMikgVGhlIHJlYXNvbiBmb3Igc3Vic2NyaXB0aW9uIHJlcXVlc3Rz IGluIHRoZSBNYXAtUmVxdWVzdCBpcyBzbw0KPiBzdWJzY3JpcHRpb25zIGNhbiBnbyB0byB0aGUg bWFwLXNlcnZlcnMuIFRoZSBub2RlcyB0aGF0IGZpcnN0IGtub3cgd2hlbiBhbg0KPiBSTE9DLXNl dCBjaGFuZ2VzLiBTbyB3ZSBjYW4gZG8gZmFzdCBjb252ZXJnaW5nIG5vdGlmaWNhdGlvbnMuDQo+ IA0KPiAoMykgVXNpbmcgTWFwLVJlcXVlc3RzIGFsbG93cyBtYXAtcmVzb2x2ZXJzIGFuZCBkZHQt bm9kZXMgdG8gTk9UIGNoYW5nZS4NCj4gVGhhdCBoYXMgaHVnZSBkZXBsb3ltZW50IGFkdmFudGFn ZXNlLiBXaXRoIHRoaXMgZGVzaWduIG9ubHkgSVRScyB0aGF0IHdhbnQNCj4gdGhlIGZ1bmN0aW9u YWxpdHkgYW5kIG1hcC1zZXJ2ZXJzIHRoYXQgcHJvdmlkZSB0aGUgZnVuY3Rpb25hbGl0eSBuZWVk IHRvDQo+IGNoYW5nZS4gQW5kIGJvdGggbmV3IGFuZCBvbGQgSVRScy9tYXAtc2VydmVycyBjYW4g aW50ZXJvcGVyYXRlLg0KPiANCj4gKDQpIFVzaW5nIE1hcC1SZXBsaWVzIGZvciBhY2tub3dsZWRn ZW1lbnRzIGFsbG93cyBmb3IgYm90aCBjYWNoZQ0KPiBwb3B1bGF0aW9uIGFuZCBzdWJzY3JpcHRp b24tYWNrcyB0byBiZSBzaWduZWQgYnkgdGhlIG1hcC1zZXJ2ZXIuIFRoYXQgaXMsDQo+IHRoZXkg Y2FuIGJlIGF1dGhlbnRpY2F0ZWQuDQo+IA0KPiAoNSkgVGhlIGltcGxlbWVudGF0aW9uIGNhbiBi ZSBkb25lIGZhaXJseSBlYXNpbHkgYW5kIHdlIGNhbiBkZXBsb3kNCj4gcXVpY2tseS4gVGhpcyBo YXMgYmVlbiBjb25maXJtZWQgYnkgYXQgbGVhc3QgMyBkZXZlbG9wZXJzLg0KPiANCj4gU28gYmFj ayB0byB0aGUgc2ltcGxlIGNoYW5nZSBmb3IgUkZDNjgzM2Jpcy4gSXJyZXNwZWN0aXZlIG9mIHB1 YnN1YiwNCj4ga25vd2luZyB0aGUgeFRSLUlEIG9uIE1hcC1SZXF1ZXN0cyBoYXZlIGFkdmFudGFn ZXMgdG8gaWRlbnRpZnkgdGhlIElUUg0KPiB3aGVuIGl0IG1vdmVzIGFyb3VuZCAod2hlbiB0aGUg UkxPQ3MgY2hhbmdlKS4NCj4gDQo+IElmIHRoZXJlIGFyZSBubyBvdGhlciBvYmplY3Rpb25zLCBJ 4oCZZCBsaWtlIHRvIHB1Ymxpc2ggdGhpcyB0aGUgY2hhbmdlDQo+IHRvbW9ycm93Pw0KPiANCj4g RGlubw0KPiANCj4gPg0KPiA+IEkgc3VnZ2VzdCB0aGF0IHRoZSBXRyBleGFtaW5lcyBib3RoIGFw cHJvYWNoZXMuDQo+ID4NCj4gPiBDaGVlcnMsDQo+ID4gTWVkDQoNCg== From nobody Thu Oct 5 09:52:36 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9BBCD1342FD for ; Thu, 5 Oct 2017 09:52:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id buD22OCHtdA7 for ; Thu, 5 Oct 2017 09:52:33 -0700 (PDT) Received: from mail-pg0-x234.google.com (mail-pg0-x234.google.com [IPv6:2607:f8b0:400e:c05::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B604132D96 for ; Thu, 5 Oct 2017 09:51:03 -0700 (PDT) Received: by mail-pg0-x234.google.com with SMTP id k7so3587938pga.3 for ; Thu, 05 Oct 2017 09:51:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=JbfL6IOuJA5/dXyznAweJFMu9yFg8+q+7NGRhR9o2Fw=; b=VP3/IsobjFdYZOKSZqU5m1Zt2WnGBVols6YJ7k86k43UAZscb8s+Tmr5eZO2FBt1D7 xV/ndUjQ94tsJb8mKhxneWOh6QNrXGlLgDQUExhgKy3yoGCPZtlwGP1wbtgdJekpo/50 +himRD2DMAKd5qeQEGGD8Tf9B9Lbtt6Dhx5BtklmgOgfYeKP23ycBnEfzlOEayR5biql 8o/b76IpJCv9LKB6YvPK5wEQohFVdihSCaraAyLCgZDPbDgR8nE8euwSzMsmLPz3qPqw YNnZAWOBHZVdSCCMHjuC6FUvoqwBIpfEvjin/IvheAhH3q2/jXt3UF0X0Czgh1CLeurM smoQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=JbfL6IOuJA5/dXyznAweJFMu9yFg8+q+7NGRhR9o2Fw=; b=GnDhmdnvnHLiQSbVIT9L1Dtnhqy3x+XyKCNi54gP9y5psjPbYOq7EJmiMiwL2nWMWW 00+Xv1wu8uuxqgy7y1whHdT08Ao87xlvsBCxfEboSU+FGcK+qm0YVSqqwaRd+j9xLEL4 ipJLVsRrsSki/csfASgxO7dzjsjRLPkI0ekc0jEQgGvg9yiAo43TDZ7rYPJpTXoOjSL1 1V59h9Hc65yf+1+wHkK4ENWzyJq5juD9qAtPgt6PZaPoG/yaRYsxpqXYHuTQ2XDpMyeP HCYWuKVMG/gyNGnLpKW6WZoYkqVViGvHR0ZvX1hINfP1R4shI09WaF1R4e79qMh7d9q8 iZFg== X-Gm-Message-State: AHPjjUh6YaCVaELyD1z7PR2ou1AiFyevjkLY6cwMI2PxPKMwJOSpl/gr 12acoVq285dK+ut0y+bi5lE= X-Google-Smtp-Source: AOwi7QCqHrS4Xr9HmZ347DQiomoMoTEjpIinEZxHwrzYORp1QkAkh8h33BeUPC3rhShT6SrGZxKUAQ== X-Received: by 10.99.50.70 with SMTP id y67mr21462562pgy.291.1507222262917; Thu, 05 Oct 2017 09:51:02 -0700 (PDT) Received: from [10.197.31.157] (173-11-119-245-SFBA.hfc.comcastbusiness.net. [173.11.119.245]) by smtp.gmail.com with ESMTPSA id 27sm5932902pfp.65.2017.10.05.09.51.01 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 05 Oct 2017 09:51:02 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Dino Farinacci In-Reply-To: Date: Thu, 5 Oct 2017 09:51:01 -0700 Cc: "lisp@ietf.org list" , Stefano Secci , JACQUENET Christian IMT/OLN Content-Transfer-Encoding: quoted-printable Message-Id: <77E2D225-E418-4F93-9FB9-A8C70C08146B@gmail.com> References: <1e0aac70-67f4-4b35-8d89-67e8800f8cd7@OPEXCLILMA1.corporate.adroot.infra.ftgroup> <4B8ADB46-E806-4FFC-94EE-9C5A73E054CF@gmail.com> To: mohamed.boucadair@orange.com X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [lisp] Addition to RFC6833bis for xTR-ID in Map-Request message X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Oct 2017 16:52:35 -0000 See responses below. I cut out text that I didn=E2=80=99t need to = respond to. > [Med] I may not look like a pubsub capability, but this is a = consequence of requiring the Map-Resolvers to maintain state for = notification purposes. Maintaining those state may include some extra = load on those servers. The redirect functionally allows to redirect ITRs = to an alternate server that will service them. This is done = automatically at the mapping system side. =20 You can load-split by using several sets of anycast map-resolvers. So = you have two levels of spread. >> (3) The Map-Subscribe has all the same fields (and in different = order) >> than a Map-Request, that means a new parser and code needs to be = written >> and debugged when existing implementations could easily process a new = S- >> bit in a Map-Request message. >=20 > [Med] New code will be required anyway for supporting the new = functionality. =20 But you require it in all LISP nodes. Do you agree the draft-rodrigueznatal-lisp-pubsub-00 is a simpler and = more effective way to introduce pubsub functionality. FYI for others on the list, we have asked Med and Christian to be = co-authors on draft-rodrigueznatal-lisp-pubsub-00. It would be good for = you two to deploy pubsub to verify the design. Do you have time to do this? There should be two implementations = available soon. Dino= From nobody Thu Oct 5 09:56:06 2017 Return-Path: X-Original-To: lisp@ietf.org Delivered-To: lisp@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 6C18A126D0C; Thu, 5 Oct 2017 09:55:59 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: lisp@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.63.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <150722255939.1401.16267598715316648717@ietfa.amsl.com> Date: Thu, 05 Oct 2017 09:55:59 -0700 Archived-At: Subject: [lisp] I-D Action: draft-ietf-lisp-rfc6833bis-06.txt X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Oct 2017 16:55:59 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Locator/ID Separation Protocol WG of the IETF. Title : Locator/ID Separation Protocol (LISP) Control-Plane Authors : Vince Fuller Dino Farinacci Albert Cabellos Filename : draft-ietf-lisp-rfc6833bis-06.txt Pages : 42 Date : 2017-10-05 Abstract: This document describes the Control-Plane and Mapping Service for the Locator/ID Separation Protocol (LISP), implemented by two new types of LISP-speaking devices -- the LISP Map-Resolver and LISP Map-Server -- that provides a simplified "front end" for one or more Endpoint ID to Routing Locator mapping databases. By using this control-plane service interface and communicating with Map-Resolvers and Map-Servers, LISP Ingress Tunnel Routers (ITRs) and Egress Tunnel Routers (ETRs) are not dependent on the details of mapping database systems, which facilitates modularity with different database designs. Since these devices implement the "edge" of the LISP infrastructure, connect directly to LISP-capable Internet end sites, and comprise the bulk of LISP-speaking devices, reducing their implementation and operational complexity should also reduce the overall cost and effort of deploying LISP. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-lisp-rfc6833bis/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-lisp-rfc6833bis-06 https://datatracker.ietf.org/doc/html/draft-ietf-lisp-rfc6833bis-06 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-lisp-rfc6833bis-06 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Oct 5 14:35:48 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5C2EA1331E7; Thu, 5 Oct 2017 14:35:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.621 X-Spam-Level: X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tXIpQRrTz6U9; Thu, 5 Oct 2017 14:35:45 -0700 (PDT) Received: from mx0a-00191d01.pphosted.com (mx0a-00191d01.pphosted.com [67.231.149.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 83124132076; Thu, 5 Oct 2017 14:35:45 -0700 (PDT) Received: from pps.filterd (m0049287.ppops.net [127.0.0.1]) by m0049287.ppops.net-00191d01. (8.16.0.21/8.16.0.21) with SMTP id v95L58ne010453; Thu, 5 Oct 2017 17:35:43 -0400 Received: from alpi155.enaf.aldc.att.com (sbcsmtp7.sbc.com [144.160.229.24]) by m0049287.ppops.net-00191d01. with ESMTP id 2ddusta719-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 05 Oct 2017 17:35:43 -0400 Received: from enaf.aldc.att.com (localhost [127.0.0.1]) by alpi155.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id v95LZe3I017729; Thu, 5 Oct 2017 17:35:42 -0400 Received: from mlpi408.sfdc.sbc.com (mlpi408.sfdc.sbc.com [130.9.128.240]) by alpi155.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id v95LZSbI017502 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 5 Oct 2017 17:35:35 -0400 Received: from MISOUT7MSGHUBAH.ITServices.sbc.com (MISOUT7MSGHUBAH.itservices.sbc.com [130.9.129.152]) by mlpi408.sfdc.sbc.com (RSA Interceptor); Thu, 5 Oct 2017 21:35:09 GMT Received: from MISOUT7MSGUSRDE.ITServices.sbc.com ([169.254.5.160]) by MISOUT7MSGHUBAH.ITServices.sbc.com ([130.9.129.152]) with mapi id 14.03.0361.001; Thu, 5 Oct 2017 17:35:09 -0400 From: "BRUNGARD, DEBORAH A" To: "draft-ietf-lisp-sec@ietf.org" , "lisp-chairs@ietf.org" , "lisp@ietf.org" Thread-Topic: Datatracker State Update Notice: Thread-Index: AQHTPhxtPh7bm2UzfECXqgWpFOeFBaLVwRXA Date: Thu, 5 Oct 2017 21:35:08 +0000 Message-ID: References: <150723698405.6107.13784209135306484873.idtracker@ietfa.amsl.com> In-Reply-To: <150723698405.6107.13784209135306484873.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [130.10.230.194] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-RSA-Inspected: yes X-RSA-Classifications: public X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2017-10-05_09:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_policy_notspam policy=outbound_policy score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 impostorscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1707230000 definitions=main-1710050293 Archived-At: Subject: Re: [lisp] Datatracker State Update Notice: X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Oct 2017 21:35:47 -0000 TElTUCwNCg0KSSd2ZSBwdWxsZWQgdGhpcyBkb2N1bWVudCBvZmYgdGhlIHVwY29taW5nIHRlbGVj aGF0IGFuZCByZXR1cm5lZCBpdCB0byB0aGUgd29ya2luZyBncm91cCBhZnRlciB0YWxraW5nIHdp dGggeW91ciBDaGFpcnMgYW5kIHRoZSBBdXRob3JzLiBXZSBoYWQgYW4gT1BTLURJUiByZXZpZXcg d2hpY2ggcXVlc3Rpb25lZCB3aHkgd2UgZG9uJ3QgdGFrZSB0aGlzIGRvY3VtZW50IHN0YW5kYXJk cy10cmFjay4gQnV0IGFzIGl0IGhhcyByZWZlcmVuY2VzIHRvIDY4MzAgYW5kIDY4MzMsIGl0IGNh biBub3QgYmUgUFMuIEJ1dCB3aGVuIHRoZSBiaXMgZG9jdW1lbnRzIGFyZSBkb25lLCB3ZSBtYXkg dGhlbiBoYXZlIGRpZmZpY3VsdGllcyBhcyB0aGlzIG9uZSBpcyBFeHBlcmltZW50YWwuDQoNClRo ZSBiaXMgZG9jdW1lbnRzIGFyZSBtYWtpbmcgZXhjZWxsZW50IHByb2dyZXNzLCBzbyB3ZSdsbCBw cm9ncmVzcyBhbGwgdGhyZWUgZG9jdW1lbnRzIHRvZ2V0aGVyIGFzIFBTLiBUaGlzIHdpbGwgbGV0 IHVzIGhhdmUgdGhlIGZsZXhpYmlsaXR5IHRvIGhhbmRsZSB0aGUgRElSIHJldmlld2Vycy9JRVNH IGNvbW1lbnRzIGJ5IGRldGVybWluaW5nIHdoaWNoIGRvY3VtZW50IGlzIG1vcmUgYXBwcm9wcmlh dGUuDQoNClRoYW5rcyBhbmQga2VlcCB1cCB0aGUgcHJvZ3Jlc3Mgb24gdGhlIGJpcyBkb2N1bWVu dHMhDQpEZWJvcmFoDQogDQoNCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTog SUVURiBTZWNyZXRhcmlhdCBbbWFpbHRvOmlldGYtc2VjcmV0YXJpYXQtcmVwbHlAaWV0Zi5vcmdd DQo+IFNlbnQ6IFRodXJzZGF5LCBPY3RvYmVyIDA1LCAyMDE3IDQ6NTYgUE0NCj4gVG86IEx1aWdp IElhbm5vbmUgPGdneEBnaWdpeC5uZXQ+OyBkcmFmdC1pZXRmLWxpc3Atc2VjQGlldGYub3JnOyBn Z3hAZ2lnaXgubmV0Ow0KPiBCUlVOR0FSRCwgREVCT1JBSCBBIDxkYjM1NDZAYXR0LmNvbT47IGxp c3AtY2hhaXJzQGlldGYub3JnDQo+IFN1YmplY3Q6IERhdGF0cmFja2VyIFN0YXRlIFVwZGF0ZSBO b3RpY2U6IDxkcmFmdC1pZXRmLWxpc3Atc2VjLTEzLnR4dD4NCj4gDQo+IElFU0cgc3RhdGUgY2hh bmdlZDoNCj4gDQo+IE5ldyBTdGF0ZTogQUQgaXMgd2F0Y2hpbmc6OlJldmlzZWQgSS1EIE5lZWRl ZA0KPiANCj4gKFRoZSBwcmV2aW91cyBzdGF0ZSB3YXMgV2FpdGluZyBmb3IgV3JpdGV1cCkNCj4g DQo+IFdpbGwgcmV2aXNlIHRvIFBTIHRyYWNrLg0KPiANCj4gRGF0YXRyYWNrZXIgVVJMOiBodHRw czovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtDQo+IDNBX19kYXRh dHJhY2tlci5pZXRmLm9yZ19kb2NfZHJhZnQtMkRpZXRmLTJEbGlzcC0yRHNlY18mZD1Ed0lDYVEm Yz1MRllaLQ0KPiBvOV9IVU1lTVRTUWljdmpJZyZyPTZVaEdwVzlsd2k5ZE03allseFhEOHcmbT1r dWJuckRhejkyRjVsajJhQVQNCj4gZ1FuUHNkN0YzMjI2bndfcHFRODdsMUp6byZzPXZ2SjNxNDZ6 eVdlaGs1Q1lyVWlCWnV0R2UzeG1ScHhnd2tqaw0KPiBNR2ZhY2RvJmU9DQoNCg== From nobody Mon Oct 9 09:55:51 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E5029134672 for ; Mon, 9 Oct 2017 09:55:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.101 X-Spam-Level: X-Spam-Status: No, score=-0.101 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fmdjl5iW1Wjh for ; Mon, 9 Oct 2017 09:55:48 -0700 (PDT) Received: from mail-pf0-x22a.google.com (mail-pf0-x22a.google.com [IPv6:2607:f8b0:400e:c00::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C02261342E9 for ; Mon, 9 Oct 2017 09:55:48 -0700 (PDT) Received: by mail-pf0-x22a.google.com with SMTP id x7so4051182pfa.1 for ; Mon, 09 Oct 2017 09:55:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:content-transfer-encoding:mime-version:subject:message-id:date :to; bh=LOZ1xBrxcJy0ywpLWUU8nXoDO8j5UkNC/1zozHdzwZM=; b=NWJ4KSvMir4K+Hgs3AmJjekPmcJUK+ka6Pf7ElfxtAbC4XhRU3BjC/jXX5JF7jhLwt 7F1nBeRKl+GCPvaV/2Ns415qX/++BlVcxvgqEK/kdetOdvAsohd04Ecjk+Q6HOH4ok02 aCYXjRLIyyVQ95THQaWPajYOo0GSx1V9YNLsApQ///WUSdk8b7s0hOiwi4M7zWlEhHqJ 8TwD4YtBvw32rvP0QUCHxywiIX9Br7Z1N1Wp4YKMUghfCf9oFP0ZTvrDXEVaKzi1Xv0p gn8Us9Tfi/1aWe8cGUofjbpeW/IE1/lXUab69kwdqdKIjvCQwv7tO45wOfrWxZmXQvsj RvnQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:content-transfer-encoding:mime-version :subject:message-id:date:to; bh=LOZ1xBrxcJy0ywpLWUU8nXoDO8j5UkNC/1zozHdzwZM=; b=h1IfRGIGcRltZf2WE2BCTSACuZkTwCdCl8vsS44MsfKwDcPzc47uRge+WTelSZmUTr lnNQ8PZOdjGrRjej4Qys9yHX6vUX0vbktOctKGDVO5hClarG5CFKb7h5X6YcezwSat/+ Jdl62JYl7cdND3k+KnJawWeLrL3jx0nQL1WCGKswhd31wP8kDpVjsSwHmoBPAi3DP5ol Y6camwLNHqK7nvlZtLpOjp8HKR4UmmLpdz22spQlMFcPhsuUmydr8wwxSLPo34MgDmIu GH/jrTJ7iBBLR+gUcmEE68GQBtqBhPmeCx0W3H8fJWY0d6ca16rqzfNJMtLDX1rT2qhs sDeA== X-Gm-Message-State: AMCzsaUwsbuJf5EUJYkiT8VgEwOdweNFiVKrNlEO8D3sim/jIzfUWzpy gOtAHg0ITHSF8olwNIguha3v9owM X-Google-Smtp-Source: AOwi7QBBTbf1ou/m+fBm4/Aaa2n+Rg5psNbYMA+tC0TdPXENFG0ajNYGs+r+sXwiD0O26nTjyuNxxw== X-Received: by 10.98.245.66 with SMTP id n63mr7336724pfh.102.1507568147970; Mon, 09 Oct 2017 09:55:47 -0700 (PDT) Received: from [10.197.31.157] (173-11-119-245-SFBA.hfc.comcastbusiness.net. [173.11.119.245]) by smtp.gmail.com with ESMTPSA id a19sm4625574pfh.30.2017.10.09.09.55.46 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 09 Oct 2017 09:55:47 -0700 (PDT) From: Dino Farinacci Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Message-Id: <37C27B2F-AD76-4B5F-AFE6-E56D02180DD4@gmail.com> Date: Mon, 9 Oct 2017 09:55:52 -0700 To: "lisp@ietf.org list" X-Mailer: Apple Mail (2.3273) Archived-At: Subject: [lisp] Comments to draft-boucadair-lisp-multiple-records-00 X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Oct 2017 16:55:50 -0000 Med/Christian, RFC6830 already supports multiple EID-records in both = Map-Requests and Map-Replies (as well as Map-Notify messages). If you = think it is not specified sufficiently, now is the time to add a better = explanation to RFC6833bis. Dino= From nobody Mon Oct 9 22:54:56 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 679F313219B for ; Mon, 9 Oct 2017 22:54:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.618 X-Spam-Level: X-Spam-Status: No, score=-2.618 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PjLe5vYT4OLx for ; Mon, 9 Oct 2017 22:54:53 -0700 (PDT) Received: from relais-inet.orange.com (mta241.mail.business.static.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3AB831320D8 for ; Mon, 9 Oct 2017 22:54:53 -0700 (PDT) Received: from opfedar07.francetelecom.fr (unknown [xx.xx.xx.9]) by opfedar22.francetelecom.fr (ESMTP service) with ESMTP id 76C9F6019C; Tue, 10 Oct 2017 07:54:51 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.69]) by opfedar07.francetelecom.fr (ESMTP service) with ESMTP id 58A20C006B; Tue, 10 Oct 2017 07:54:51 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILMA2.corporate.adroot.infra.ftgroup ([fe80::bc1c:ad2f:eda3:8c3d%18]) with mapi id 14.03.0361.001; Tue, 10 Oct 2017 07:54:51 +0200 From: To: Dino Farinacci , "lisp@ietf.org list" Thread-Topic: [lisp] Comments to draft-boucadair-lisp-multiple-records-00 Thread-Index: AQHTQR95XQpCPgQ380KlPIqmhWfHUaLck7VA Date: Tue, 10 Oct 2017 05:54:51 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93300A051871@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <37C27B2F-AD76-4B5F-AFE6-E56D02180DD4@gmail.com> In-Reply-To: <37C27B2F-AD76-4B5F-AFE6-E56D02180DD4@gmail.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.4] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [lisp] Comments to draft-boucadair-lisp-multiple-records-00 X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Oct 2017 05:54:54 -0000 Hi Dino,=20 Thank you for the comment.=20 There is a provision in RFC6830 to support multiple RLCOs/EIDS but without = specifying the behavior. As you know, that RFC is crystal clear about that. Yes, I do think it is time to specify that behavior in the bis document. Section 3 of draft-boucadair-lisp-multiple-records is an example of what ca= n be considered in the bis document. Thank you. Cheers, Med > -----Message d'origine----- > De=A0: lisp [mailto:lisp-bounces@ietf.org] De la part de Dino Farinacci > Envoy=E9=A0: lundi 9 octobre 2017 18:56 > =C0=A0: lisp@ietf.org list > Objet=A0: [lisp] Comments to draft-boucadair-lisp-multiple-records-00 >=20 > Med/Christian, RFC6830 already supports multiple EID-records in both Map- > Requests and Map-Replies (as well as Map-Notify messages). If you think i= t > is not specified sufficiently, now is the time to add a better explanatio= n > to RFC6833bis. >=20 > Dino > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From nobody Tue Oct 10 07:59:05 2017 Return-Path: X-Original-To: lisp@ietf.org Delivered-To: lisp@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 89CB5134E3C; Tue, 10 Oct 2017 07:58:33 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Takeshi Takahashi To: Cc: draft-ietf-lisp-sec.all@ietf.org, ietf@ietf.org, lisp@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.63.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <150764751351.13466.15119625109787574982@ietfa.amsl.com> Date: Tue, 10 Oct 2017 07:58:33 -0700 Archived-At: Subject: [lisp] Secdir last call review of draft-ietf-lisp-sec-13 X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Oct 2017 14:58:34 -0000 Reviewer: Takeshi Takahashi Review result: Ready I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. I would say this document is ready with nits, but the nits are very minor. [comments that require chages to the current draft] 1. I guess the authors mix up "reply" and "replay" in Section 6.6. "Reply attacks" could be "Replay attacks". [comments that does not necessarily require changes to the current draft] 2. The security aspect of LISP is addressed not only in this draft but also in RFC6830 and in RFC7835. If I understood correctly, LISP-SEC addressed a part of the threats mentioned in RFC7835. Then, it would be nice if the authors could clarify what types of further threats that are not mentioned in LISP-SEC still exist by referring to RFC6830 and RFC7835. 3. DOS/DDoS was mentioned in the introduction section, but it was not discussed in the later sections. It would be nice if the authors could address DoS/DDoS issues as well. From nobody Tue Oct 10 10:22:15 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B545133158 for ; Tue, 10 Oct 2017 10:22:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DC_PNG_UNO_LARGO=0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UiEAhhzGVP8c for ; Tue, 10 Oct 2017 10:22:11 -0700 (PDT) Received: from mail-pf0-x22b.google.com (mail-pf0-x22b.google.com [IPv6:2607:f8b0:400e:c00::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E16561342E8 for ; Tue, 10 Oct 2017 10:22:10 -0700 (PDT) Received: by mail-pf0-x22b.google.com with SMTP id b85so6754148pfj.13 for ; Tue, 10 Oct 2017 10:22:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=zFXX0hY8LyrXPQ7R7Ai2lgxKUVe8T6eUJy2K2lbcDtg=; b=lKt64BKncuE9kCcnn/pvt9wvX0jmahVyYZJ12oGCPX0+UARNQY/UXihVjQRjzc3jkS /jcTI1P99dAn4ICEA4Zf0su+osQT/869bOQhBqBJsPCpJP0x2sRsvVrYFOcb2EL1oeIs xGdhgW9yQBoVffxPp9lHwVpTMEFl2ELh3OWHIaiw23v7jvH6NeNoSUxPlsPIq8SijOCp hTwD12PI+cWb4IUsphD100bfWAG1DtCAvTn0QzhZrx/wxKRivPcZl7VHpFGAAIE5O9iO pCM/9r3USiDy2cJCuCwJaPnGiCKK2kQv5gKJwipd6fqcXwMQw2zBOHmvN1NRw/1NZlSd Psyg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=zFXX0hY8LyrXPQ7R7Ai2lgxKUVe8T6eUJy2K2lbcDtg=; b=ov3wTrPIAiUE65CUwvFeASMHxG9Zuwn98lgY711eJvhIdJ9IvpDoQiETMNhAKa4Xw3 PfTSlwgPWI42pC35zr3M9JPu1vcJk0yhWd5vHIp4Iyyjx5Hjouy1n1qhSqmKzghDbbyF s2LDC1i6J4EYTXstOWqAYtsSaBFKGPZXoF98alPYhIfnxjQzQwtb4at/o/IGzCbMlv68 DO165IzRUkhSRxzj0zmifKznZFWhns7gZOLM4tdh1BrRJYnYTmTRfcOJSd3SqSRokBNC 4jbkQwlxQvzQl8IiyUNokrKAp2Ma9Mc9R66RZnJn2ZPbz3CqhmupBv2GFXwUFpyRhcCu C5eQ== X-Gm-Message-State: AMCzsaXcnbhCqBPaJ0K61R64bEt56YIppQrsXNgz6/iLXEvNtev+Eb+o bfs74sc/nLom8NmqfRKFLzo= X-Google-Smtp-Source: AOwi7QBNFDiahSEMr5wJxveV14/MbV0Y+2TcjrzReezqvoCi1q9UsQkTX1MrZGC+Z/Rj85ePezkWkA== X-Received: by 10.159.195.11 with SMTP id bd11mr8205518plb.58.1507656130477; Tue, 10 Oct 2017 10:22:10 -0700 (PDT) Received: from [10.197.31.157] (173-11-119-245-SFBA.hfc.comcastbusiness.net. [173.11.119.245]) by smtp.gmail.com with ESMTPSA id r9sm25892655pfd.6.2017.10.10.10.22.08 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 10 Oct 2017 10:22:09 -0700 (PDT) From: Dino Farinacci Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_F16BE124-119F-4749-964E-F591F52200E2" Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Date: Tue, 10 Oct 2017 10:22:10 -0700 In-Reply-To: <787AE7BB302AE849A7480A190F8B93300A051871@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Cc: "lisp@ietf.org list" To: mohamed.boucadair@orange.com References: <37C27B2F-AD76-4B5F-AFE6-E56D02180DD4@gmail.com> <787AE7BB302AE849A7480A190F8B93300A051871@OPEXCLILMA3.corporate.adroot.infra.ftgroup> X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [lisp] Comments to draft-boucadair-lisp-multiple-records-00 X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Oct 2017 17:22:13 -0000 --Apple-Mail=_F16BE124-119F-4749-964E-F591F52200E2 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > Hi Dino,=20 >=20 > Thank you for the comment.=20 >=20 > There is a provision in RFC6830 to support multiple RLCOs/EIDS but = without specifying the behavior. Right, I already said that. > As you know, that RFC is crystal clear about that. RFC6830 or your Internet Draft? > Yes, I do think it is time to specify that behavior in the bis = document. >=20 > Section 3 of draft-boucadair-lisp-multiple-records is an example of = what can be considered in the bis document. I=E2=80=99ll have a look at it. But what part of section 3? All the = packet format descriptions are already in RFC6830. And you have this in = section 3 which is semantically incorrect: It is documented no where that a Map-Resolvers caching mappings. And if = you are proposing that you need a lot more text to describe how mappings = are kept up to date in the Map-Resolver. This is a major architectural = change and really not sure you know the implications of it. Map-Resolvers ONLY cache referral entries documented in the LISP-DDT = RFC. Also note, what if a Map-Request has both 10.1.1.1/32 and 10.1.0.0/16 = encoded as EID records. And if the mapping system has registered = 10.0.0.0/8, then does the Map-Reply contain two records to satisfy = 10.1.1.1/32 AND 10.1.0.0/16, or just one EID record. And if so, how does = the requestor know that the one reply record is associated with both = request records or one doesn=E2=80=99t apply (or is not found in the = mapping system). As you can see there is a lot of text that would need to be written. = Which I think is too late for RFC6833bis. That is why I asked you for = text. I wanted to see how coarse versus detail your text would be and = then have the WG judge if it should go in. Then there is the practical aspect. What are you trying to accomplish = with multiple EID-records in a Map-Request. Let=E2=80=99s start there. Dino >=20 > Thank you. >=20 > Cheers, > Med >=20 >> -----Message d'origine----- >> De : lisp [mailto:lisp-bounces@ietf.org] De la part de Dino Farinacci >> Envoy=C3=A9 : lundi 9 octobre 2017 18:56 >> =C3=80 : lisp@ietf.org list >> Objet : [lisp] Comments to draft-boucadair-lisp-multiple-records-00 >>=20 >> Med/Christian, RFC6830 already supports multiple EID-records in both = Map- >> Requests and Map-Replies (as well as Map-Notify messages). If you = think it >> is not specified sufficiently, now is the time to add a better = explanation >> to RFC6833bis. >>=20 >> Dino >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp --Apple-Mail=_F16BE124-119F-4749-964E-F591F52200E2 Content-Type: multipart/related; type="text/html"; boundary="Apple-Mail=_540B2063-7F8D-4C0B-983A-01E308BAF4B2" --Apple-Mail=_540B2063-7F8D-4C0B-983A-01E308BAF4B2 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
Hi Dino, 

Thank you for the = comment. 

There is a provision in = RFC6830 to support multiple RLCOs/EIDS but without specifying the = behavior.

Right, I = already said that.

As you know, = that RFC is crystal clear about that.

RFC6830 or your Internet Draft?

Yes, I do = think it is time to specify that behavior in the bis document.

Section 3 of = draft-boucadair-lisp-multiple-records is an example of what can be = considered in the bis document.

I=E2=80=99ll have a look at it. But what = part of section 3? All the packet format descriptions are already in = RFC6830. And you have this in section 3 which is semantically = incorrect:


It is documented no = where that a Map-Resolvers caching mappings. And if you are proposing = that you need a lot more text to describe how mappings are kept up to = date in the Map-Resolver. This is a major architectural change and = really not sure you know the implications of it.

Map-Resolvers ONLY cache referral = entries documented in the LISP-DDT RFC.

Also note, what if a Map-Request has = both 10.1.1.1/32 and 10.1.0.0/16 encoded as EID records. And if the = mapping system has registered 10.0.0.0/8, then does the Map-Reply = contain two records to satisfy 10.1.1.1/32 AND 10.1.0.0/16, or just one = EID record. And if so, how does the requestor know that the one reply = record is associated with both request records or one doesn=E2=80=99t = apply (or is not found in the mapping system).

As you can see there is a lot of text = that would need to be written. Which I think is too late for RFC6833bis. = That is why I asked you for text. I wanted to see how coarse versus = detail your text would be and then have the WG judge if it should go = in.

Then there = is the practical aspect. What are you trying to accomplish with multiple = EID-records in a Map-Request. Let=E2=80=99s start there.

Dino


Thank you.

Cheers,
Med

-----Message d'origine-----
De : lisp [mailto:lisp-bounces@ietf.org] De la part de Dino = Farinacci
Envoy=C3=A9 : lundi 9 octobre 2017 18:56
=C3=80 : lisp@ietf.org list
Objet : [lisp] Comments = to draft-boucadair-lisp-multiple-records-00

Med/Christian, RFC6830 already supports multiple EID-records = in both Map-
Requests and Map-Replies (as well as = Map-Notify messages). If you think it
is not specified = sufficiently, now is the time to add a better explanation
to= RFC6833bis.

Dino
_______________________________________________
lisp mailing list
lisp@ietf.org
https://www.ietf.org/mailman/listinfo/lisp

= --Apple-Mail=_540B2063-7F8D-4C0B-983A-01E308BAF4B2 Content-Transfer-Encoding: base64 Content-Disposition: inline; filename=PastedGraphic-91.png Content-Type: image/png; name="PastedGraphic-91.png" Content-Id: iVBORw0KGgoAAAANSUhEUgAABJ4AAADCCAYAAAAIEAh1AABpLGlDQ1BJQ0MgUHJvZmlsZQAAeJyk 3HdUU1v7L/plryi9Se+9F6mhSw9NOiT0noQmPQm9JwHpLUGxUCRgBzUBURRFim1vilTbFqTa27pz 7fe8Y9zfvX+cccYhww8xJJkra835fOczhgJBpySCCITY3RAEJYbgEtxOWEh4+/hK7FuAdoDbv19B IYkEcxcXR+T+f7//z68vL//z3GeqyHu9/WfrkvnBcJMXV6Zbl/b5vfj/P/9/fO0PDUsMAd9fgz8Z IYSEJAjagQX3pVOSCMj9PHCf11zLQgvcr4OgJMeQyKBQCEpGnq8SFERIg6BTnOD+EfAcjf8+B9zX /O/9//X+yJekOTi+MAmvqNAwCUt8LD5Bwj0yKCEKFyHhkoAPj4oN+98c6//xV1JYahLy3RJPSEuI iohMkvjPEdjhQtRUJLQ0NPUgCDnf/5/zaBhnbvHvY7t2/fsD5L4L+EMGfxbAu4qEJCec+l9D7IQg GP7f/R2CzNYgSI4KQTzgu9hZMOoqOPUJ4OdHIWgvFwSFpP+/j5sQlBD07x1k/J3h4RC01QFBHJ7g 9RMQdJDz//bnXFxc/+M87fwffzuyjSj279VQ/QvRxA7R8RaivypiDB05VxmciCU5iPWfENvDEW/O Ij7sQN54ShzxQwdyLDC848XRNeT1nDqcBPDhByUjgVaa4GiPvDQDYx0hu4DZdMQMA67MES6cDzjq taxc4POyq8CBRvBqjt5OMNM4zvVnAC88kgOyppH7mysr4FX5MLxHSPztvxfuLAcb6CZxCYLElzTB tRMPs7ACn+29mwzwVFAXkCcePFOUTQYjiqZTA4DmLeBKi3JfaoMgkY+3x4ALo17AT7Ol4HG9jzPg VUdg+GCs+hwyiia07ycEadwXiwDiNT4Ad1qYQJB6kRtYJeoHQrghSK08ARyRmlAOWC+qzIp5oGsr OHKVPz1+wBvsQmDF+D5gw7wycGkDXDXVzzDMeQf1Egzy3dwMGctcURi8g9kbNbCuzcrM5YGSbhQI QnWEBANVEkcgyPRS7jRQ6/RFcOVun7UEoi9fgyDjlbtHgN2TYC4YdyzOAj9tC4NnGsOwwBE0+JyH 97hMI6O45vIeBjopNwJ3o9TA9G93BavYBRUMfo5+nAiei0bnYSDIeaKqFejWBnR6eTUGGHSPA8j3 bBG4/zU4D05en6uRZ8KwKAYzDEF8hdg6ZJSgqX1bwEtyn4EEYw+gNJoIQdjhIAYwMFESgjAreWB0 THwVeLfAT+dsgcnXwLoJ+HY/Ctj2AtSngJq3QsC1r+BoMXUwLN2DZ4HrVEuIBnM9OL4fGSthn4Qp BMU/O54CrHAE5z/eHPMQrLTl+FfAjFxwtgkHq8BVwJ8+B44Ez38NXGVc/bAi0PolDWj4DpwBXMt3 fvDMVBhWgkjXIUh2P9kGggTTs32QUXIC+MBoOZraJyEo+6sdGCu7N8AdGEgA6zx7Rw442+T60+1A xTZwJklXrt0GGg5jIYj4z19gURJfv5cCj3j+AJGQ7QPDGq5UMHdVpGngOKSaK5BlK1LZg4xVWaIC VlCltzV4fqWwrz4EVUzG3QRmksGIFWKVYMbSbpwFK4Jmew28mvpiGNQxatFfgsDi9+Cz0Pb/wIPX KsOw3hn6OQjSPsgA76/syZiCIAHiGX1klDOLUp3Aa6gLQKInOM4zxtHPIKh1g8gLbKDVAI3OVEEQ 4/lVUBkYkfdB5WOIv7wClHkPUoPR9QPMzDPLMGy8zWyGIINx5i8wllcPeF+Zf3qnkFGu6HGDeXLl yHEwiy6/cu0Gtka4AQMyvIFHKOBa995g/A30vjwJQT3b93DArhcfgZffgXftNfkO1t2VNBi2tGKD YzLLZINPbrgyUABWIGEQVF7OhiEFZKyhcHV7oKHDBnB3CKgDd4dTBYDEUjCr76q1gCo3+LIXXKnB U0NgvQyqPR8HarwF12Hw+ndQnYbewrBd2zioRyfkQDmFLKwmQF043jsJPrmM1dNX/2bIkuRlYJ8V qDnPigINgegkXyBHEahyT+81gVr8NIEJrstToUEw5ycvPAOrabL5DaghTwW+gvd4LgfDLmILPGD9 vFoAZ8EubwHUAXP7RTB7NDOX/kFGeU3fDSrn63QjcB5eO3mDq/lakMAHQcuz+eBzL9fVg2NYdrx0 CIKWvrOfAOlPxSFo8cfyU3Df/wuYpa91Ydjz7gYYz+PqpihY4SOb4FzZUbfQoDoUboN3FH//eR8y 1ufz6mDGfs50Be/82THGAMibDdbIp+c14Bp+onSAU/HJjAVq3fbqBLi/XbEM6ttW7qdM8DgnDAd8 QHLQfw+idzyi6zdEm8eImucRkYQQuYxoZ4EYtoZIVEKsOo548Sfi7SXEiX8fX/qB+DkWEYaP5EJg PR65A6637BEncPR9HH/ADNjPMQrqnAMHmFlOpzlAnfBf5gBVM9aQA3yajFoOUO9LvnGADGnw50gF KTbEAa5lnxpHNkixzxxgfk2FcICz/+H9ERwyDicvJ5j9R//89yb2A1HNANGEhui4hejvgxgzhJih jljSfBQ++qfhMGJ7BuLNNc7DnIce9nOqcqpMqXDGcsZ8uMLFw8UFw9xYcfDZePzFW7jCeVzFGeIT PJbidLUFHmXxelN9ngPi5U5XuOfE0wLMubvFMbHPuDPFzTODuO3EJUvfcwuJ72iM5FoRW+pY5Lor NtzvxdUuxnokCXwxXc71SFx49RC3r/gPGObrVAcrRaBUPYn7Ff8T9SqJWv4u9WL1eX6SeioqhN9G HYPeyb9D3Sywk++aujDOky9EbS3rF98RNVZ5HW+/WnmzEm+Eml9XD6+gmvJtdZ4ZNb7Hv3luqinO RvLcUkv7uMirqV4Nw0KDKFBzRWRRIbwCQu9RAxJ2QvdQTA0FodOoGjNOIQ9UMvqb0AGUE2ZG8ApK DH9N0MP0PSlHYN20m2ouUGRKaNkQEDPV7K7gv2GyzZLlx5g8G9vJL2Xyeu4U/0FT8/Ut/jhUPQyL xaFBLkryov34ZEV6XXaLNYtQ0Rvq6SJY9HPUDxFpdI+L87EpdB4291ge2oXAOCaD5iOfF77l/JxW K+zoTGUkCk05n+gxEgpz+sPeFoSd/hpfFex1+rCQJFjs7L75S3AO/QbkSy7mMdjNWWM8+bkkXmOF RTXFhbGmqjfF1rBSKC6xG5jf6C2xeMwEliYmgWmMh0TvYQKznUSxmGMVGSJbgU9bqSJZgfm9xSJ7 AvUGccfqAw9Plh2zCZRc0jzGG1i//eQYFhsEwwqv8XdBNe7Eu/Mvy0URDouwJfGESqWbkicIKSa2 kjwEd+cliZcEeSwkUYLfJjyX0Mdfz04Qf4FPrHgnjsMrnTEQ+42buRwrVoArvpsvJooLfDomOoRL Xa4RrcTBn21FZwlg/allkPrA6jMguQgwVIxJP0VypevI7+WkpRPJY4YF0lbkLic+6cPknMDnUo/J LgRRqTQyf7aglBTpecWsJJtUdiZB8iTJ9PKyxBvi6pCORAbx7rMuCUXiwusa8U+kpC/BEtbZtTCs c5zaC0F6b6lOgg5aKOoHEYLiTtqKNEY2rUJejy7rVrHPniQrTpsP2CczT+vBzcrU0lLJljK2NIOK AOlV6qczptKF1IuXN6UlqF5DWVL9VNXnclKRVJc3ulIo6vpXXqncSg0YNuSmgx2P8SW6neDKcR/6 tEiCxm7GA6lQ+ZBWkqaVPKo16MQeeY5WY1+q3LNWzrgjcpWMGeKWnB2DQcPL/mAEtLbK1jF4LzfK atOHhyJkpuhNz81kyujsN/Eyfoywr2Ey58/chGGznUywO7EoYFoLZZnmMx+JlOnBPW2S1xTVev9S fKZ4tPeWRbrCcm+9V4BCVy8+ulsB32uaJaug1LuXyi0/3zPMoMtTe8i9b+Q1enTvfpJ72nPw+Q65 oh6lNx5ywT0TXz3kuq7IwrDNLnY9BNkS2JbCO61use+I9Jq8GciX1NIsH+yQn1Fi3+U3Pq3UOPjF /aQSYXAs4rKS4SAjfUrx62BM+QnFrkENuqGi/8Baz3PFfQNtd5UUbgwkPYtWSBkofz2rYDWo8uUf BeJQAgw7SoyDfaHzqfFQ4XyHXePPReathiYoEk8N/plskruqEva0WudvFYunp5z9VASfuoXyKr97 KpcqoMyc/FQqqZwweau5VFl9MpNZoDQ7eXxQVSltYvpptpL6xNvXvEq7J5O/yCsZPwP7MbegBVAt PS7M3z8m6hq7oCYq7cBcmJY4b/578YXsXxrsZQVVBdWfy/q25qpPl/kw46r0pdWkZdXwJVbRRVW5 paJGusrCklP3QZXqpUMDR1WsF+9NDisvLGotfVfuW7zw+ajyh+UKGPZ+gaSY3+6NymMt3gc3tkSr 3a5snpaot/u9lSnrbXR8+6byE/XaT+FmmeqJn6x9L6vbfRKPV1cX2t7KX1Bb3h6oz1G7uF3YlagW uW3Leqsms7174qfqs63+pWFVu82B7Yuqntv+MIx5geRU0CbIKVuMOKg4u3xBgkp8cVOAYdm91upg X/hBswzsqHI042DYY17THobjbDUlYThXVWMNhms7NbpguPOERigMs2w1BECK/a1+D4aXudRxIMV2 q/UiKSbaD90DPUYOSDFOMbADkDAUpYMUWxI1Bnt8W5FNcM0qRMA+JeC5yGkIihMUAWmViRUBu7PS bhHQqTbuFAFdToePiBFIsZsiIBFHEkVAck29FAE1ZcVN9CKSYmJXOcHOTHSFs4PTE1FcBVHND9Gk HXjOiUP0H84mf5LoG05azBfROc7cjFjRvzhTShZEJzhjGtxEH3EGtd8Tvcfp3acv+pQzYGSn6C/O lKkEMXdO5oev4uZcruDcgC+Qw7A4zNUu/ue/N7X3iKaciE4eiP4XEWP3IGZEIJY8QWzQRWxnIO/Q d1SCR4L74UsJawmrKQuJNomzH+5KtkoyYFjKRAN0mVJv1bu5/0iLqddI2iGqjyCaXpcWVa9xeikt oF4dICJ9QL0ilij1Sb0o47PUtHpGaarUbfWoRkiqQf1kR7FUmjqqn0cqWt1sZFMqQz1qOg789MnK F2mGJjhjsgdQYNcoh0YV8SrJH0C5SC3ITaD8NBbkWCgf1DW586iTztNyhSinQDW5IJR5HENOB6WZ JSe3A3Ws7IbsCGpHk7MsxXS5862sq+ndW2RZOdM7j6NlRUzfzazLWqJ8PmbJcZs9BJU/EQ26HSU5 dDKfhrItWkXGWckSHagZr6SI9jTLVNqHdkA/UXyFNsJYK3aiFXAvFOPRR4mJihrOWxRhhX+cJ5qH FJqdOy7FKTg7Z9/hV+B0Tn3CIb/tfP5Vo8JetOK6qsKwy3MYVgnFgKxUC8BE8QuqP8EIylapJmLy NZVUPTFpZmdUNTGRLpaquzDumB8qTzCG+Nsq5ZhjpDwVm8CvVGflb4HjdH7ltsAz3dPKDoGJrEbl nYERY21KU4H186ZKCxiVjZfK1UGgR9YYwj+CIK13+CD+9zpU/GG5mxrl+H4NLg0HfK/ZAQ05fIuL mPo3fD5WWX0QH0nQUifjrcla6sfxojQVtfe4TYaoWgWO3bNXTQdXyn6v+haXNXFQ9TruysI11Rt4 jy0PtbD4CBjWzSANQJD+NZKfwFmDfNIe+bu6fKR+9WfaR0hfTOlaH0hLaBctFukB5olWEekiQUnL jpRLJmjtJvnQ2jSvkpQYDzUDiJ97XmnuILIG3mlcJnZPymuQiO8W32lkkKq2qZoy2eMgX9KpN0C+ 3KF6CjqZXqBCCtcN91OvqV/VPUezNHbQzaWpOY3p+tJ4Aqd15ajbeIbOCvUJ2UDnAvUMrVfHl5rQ yqmzj2rc66N9ibp7kKYdQNmc/KStRFVeGtGWpS5+ytB+UGkAw6heOug0zD/TXQVXLTdafinWoezo Xeq9x/kZp4+/1f/KIDoU608wQgPs9OkMKxxNP5whTirVV6B/ornrzdHvMT7pUemU3hQ9ffrJwSXd D3TU02jda/TUZW9dJkPrM5ee/RmwU7LmZ7aB/sWD6ShEtPPq/q4UYTXEbFW/b+LWQ9WvNLTteWob bijT0+fHZfC9pz72i8HdnmRimEF+jwO12MCi5xjj1PEvzLe9x4+fYV4anDnuzax6WnZcivlgufK4 UA/ps8vxrsugS7Kns8He2fEp21Z4l/M066uykn0ku1b9g6XxQIbetDFpUNHKwthvkNNb0lhjYCt6 xAgeGM+8Z/Rg4BzFzahkIIVebYQasOyhG64PHBwkGl5gf3jqaxg/wLOcYhg8MPTZ0PDtkCDokk6O gz2MW8Z4pHC+R/64oPIHF8PxHg1ZO8xEsZ6X6dnJNtPXpjmTZR44U79JfCSXqdqkU/pNk5+TsmX3 TQYnvrXEmqRPDDNHTNQnqAPrxlMTZpMvjdsmfJcPGVMnvn16YvzrGajuniYLoLPy9pt/eEzUFzOf rtLjiVo4qJGOvrkwpXfIunRxxaTR7OKSA3rGLHdJPfSBmc/SkVQLM8XF9yUfUNuLt5v3o64ulnUP o6IXPQdMUSKLIpMk06sLdUtoU/qi8Kcjpt+WQZfkH7YxC0GBCSDFmrEpGzaq2f65G2MaG57Om6d1 PzuObNUZP7H4ezvJXtvi2rYvdtqibNswOcQicJuv6KGF0tZK4ynzza3bl9rNr2wVsXPMI7dcJgXM +ba4l1LMSjflt2Czka1RGA6RQVIsTBqkmE0E+Gxq5SEg2zR7ApJActl7kEGvnm9zDoatzlmDGemf ZA2OLCHKagmGC+5bMWG4Qd3qFAx3fbfSh2G2u+VnGJ70trwEUkzEMhiGP3VY5CEpprK5owJUGD3Q KZWogk5RwkQ1EoI00CrboD/fqVIEQegMFTXwaZ8pv4Eg3DHlLgjKClAG3XAZQxn0yo1vlE0hqFNN GfTt/URldQh6pKIcCEHTucojIMW2Vf7t/FTPcoJeWCWA6wbnsgqG67o4USWEq1etTiWK65zJPypx XJVOniqxXOn+kyoRXJhYV/BMy4wxFTcuhVI7FRuuIw1sFQPOLx3aKmqci33nVYw5p0fiVeI5P0zN qyxwCa1g1QS4roIz1CERCkGq8xKV3LtVH0rUSzgjqosimuojOiUi+g8ixgqpPpCoy8hQHZY4XfJO dUiivMFblS1R0P5I9ZYEsc9MdUKiZIRD7ZDEtakstWxJjg+w+l2p3aBaqmiogDN0QOMAj6b6H/U/ ktWI/7mZvkJ02kYMUECMxSNmDCKWHkNsSENsn1WH1eE+Kw0hDaGRPRp+Gr5TkRpTGn9/mNVS0AJX W0vL7DCoyWdR93hPaH1ANUpza/1GVWoaIKIeIDp3IAbcRoz9gJipqPUTVVGaprWNojTMar1FFXY4 a71AkfpGtaZRFSNntfegnk6LaMeZ+a206rSbg5micxv9FYJ029AtfBZ6VuhgGZxeL9pE65HeBTTK 7JMeHW2GZuhVo80Cq/QK0KZxN/US0UaZf/R80bplgXomaJXGcT1htHgnWvczmrN/RvcNWuLRHd2f 6PAZEz20C7Q6rJ/uCvZN+kOYtxBksAtTyC9jsI0xk203ZGH26nga2mPEzbcMj2NEXFoNpTCCGLrh XgwXbsLgDeYAUcaAFfi7vMKgMnCt+ahBUOBMV4OBSuDwbQ2Dw4HPR4UMuDHis00GnpjHa1KGiUHD MGxkjP8bVP7b+FT+DZMVvLLcA9Ru3GtdtslNvIIF1qQVL+lqapKHF8SGmwTjOfD9Joa4PyQVk0O4 j5TLxi9xf7ecMG7CsS+9MQ7AnbtTZqyN63lCMlbDwXN7jSPwfeuFJinxoK9ECZFGwcq4T4oTuGAh TxKVf2JJIo7pHzTbIjlaiJlNkSxcXc1ukXSxt8yqSXIEG7MoEg/pjZk+8Re1AvWHuEw/gWIT7zN3 ojKI51l3UfbES2P3USbEP/PuKBxpaOOpWWIOHwxbOlFBVloLUMMEXW3oVB6FO7aKlIHjxlZ3qIHm HyzfUJNdRiyHqWFYqiWD6k4IskykmpCNLM2o0jQhyz3UvfTvFvcob5hTFkTKILvPwo5yf/y5hR6V byHWAktd3PzH0qfSGYZPjNKvQ5DdBXqA4JqDI/2wYrPj75brBt52knSM+Q+bEfoVdL1NO/0M5oVN Hp1C2GXjRT9FlrORofvSzK0/0I0YHtaddIEerHVIy+ZApLVyy/pEkzUf3XjRwlqfcXDrjo3kGVBj HIuZoGY445meQtkucsy9SjGuX7qZhhinl8wACyG7YuZ3px67KOb7wEI7K+YzvJydMLOP1Gr7ntlE 22XLZGYw3GwJTM+eSltlptrA8IlNptyk0InnzJjFsRMbPbrbNraPLoOq5prFPgtB7mFsV+FdJ5XZ O5VVvbhYnUZebo/Z3hbWjowBXYdTjgcGdPzrHN4OiMfdc2AN7CG2O5Sx31MxDifZw/RtB2E2owdn /4KdPPDcvo4dNmlnn8JuWeKwLxkI2CY7ON8dBPlyaZwF8qVqHC9c4BsyLqm86u839sjYyXvPeLJF uStrwtV+2bl+4oLvAefUicqYt86uE6lZTs4yE76UKKe1ieN0tNOVCe6eo06J4+8Hep1kxi9OKjr+ HJ9Y/OO0byJjO9qp+ynoXv3FFwRBxd07P3pMHPPXPFmlN2hmXsnkREDe/ITFhpfJQod9gavyYoDn mOuBRduocpelRbWMKpdri1zlSi55C+stSS5OCyPMApejC/QBPHpkIWFSDx02/3uRgQ5bKN3ehV5Z At1P0KsNUO9DboEUawyr2jihmhPRur5l6hpycqPKMiNAbDPSPsrDcovgbuvethUVznQnb7mk5bh7 bWmXMt0Vt7ib4922N1e737pd2xwakHZL3KyZ1HFT3QxdknY9t1G05eS2dwskT6QlkmLRQiDFrGK+ ghpdiuMAq6g96glIrvCQbrD/eOgHEsLtq2czyLwSzwwYTonx9IDhEqwnqINN7JOfYLj7+klwXgZC T6aCFJs+qQNSTNpjFaSYncdOJMWMFXaCXZ/JAgQdaTOpBZ3MiokWqNGBxuBqmYUan4AgFzEjUB0w 542SIQh/yAh0O8QAwykIKm8zbIGgpneGcRDUpWhoDUG3CIYWEPSY2zAJgmYCDbcgaPWucTSSYsZM LiYEGYnwcHCVGhlyr4p/NDLnnlXfbWTDPWTqbXSCu83pkZEVNznA3siI2yt23EiNWzXT3UiMe3fp U6PDXDONTobfua51DBm+56rsP274mYv0aKeRNlfOdJxRH9fFlVUTQ25DGDbJkngC6piLpBs3zvig ZKIEG1E9GtGUgOhER/R/bXxYEh+LMuaQDM9oB/qUioDH7RuqjXdLGnQcMYIlFftKjfkllUf8jf0l naYmjFckm1fcTZOlymHYtF0jFoJMd2nk8BBMrmlUSP4yuaJRoWGHiOJDdBZHDHBAjC1DzJhGLNVA bPj3kfY1ILXP12RC49yIuKmoxtJUoellTb8PsJmN1nkYNjtudhxcAX4zfl6c2S6zXdLuqD+oP5o5 iP+5Ob9ADJhHjNuHmGmBWFqC2DCD2KFlBqHgvgozcTOxkRNmeDP8VLP5QfODKzsszluAUSw0XAQg yIKE/pvP16IPfUmmzuINukJ7v8UHNNVcHRE9jBh4BjGuAzFzFLFsB2KjJWIHFUjre2u5G315pNHS 0eXg1GfLWZebKwHWcW5UMFsrMWAmW5tgrvBrWw9iUmWHbXQxtjpkmxiMjkUHossWIqbWJhqjg0ux CcfoZJFtsBidsvM2JzHajW9tTmA0Og3Bq1T6W21MMI6PgmwSMR3TgzZb2KhVRdvEYDC7T/jiVyHI 1hnfwP/DjgfvKTdrN4oX1H1l741btbK1V8F9dVOyl8R9xfbY8+C+4HPsd+A+EQvtVnGb5b12z3Cr TV/sruPedLnZ1eBe3Rq0o+B+Ps63u4YPmFm2lyUofzR3qE6IAWsulwR2sA7dpCIBpmM7CSU/69RK /KYv6XyKeMd6xGmQ+MZ9p1MPcSmoxqmROEc45ZRN/JtU6hRCnKDcczInPmgRcjpGvHUpx3GD2H37 t+MccWR02PErSfWVlJMvee9aonNfDhjFeQ91HOwffajpgp4u2VR1hYeu3ZTF405ug5SmExquKpQt dy9XAcpqML/LH8rreBGXBco02dXlDmWcesGlmjJI53OJovR0V7scp9BZMi4ilGtPvrmoUAXm3F1y qV/W613HK8Fe2PUl/S6o/HZ0vOCmRzVdWrHt5FrLU4NQL72WfFuSRyd9n7ufhxf9ULCYhxEdivf3 ONbyiTzo/rnlDc3M/XHLM/qke2MLm4l3j2hpZwu5W7X0jf1yt6fzz/u719C/bNR6jJ0hwfDJdSao MF6pzDChfO95ppBSgm9A97BhtN9Ed7JdnzeLecC9xSueaRB0xuskUzVexUuHKUYe8zrCPEwjey52 f2OYevZ0L/bs8kzvfsge83TrHh8f9nRhyiwoe9KYvzd9vbov58Kwry0b9JV+c+xA4d0B/mxuZe3A ryyWEQZLZUXbLwTwsw+6L/vGsJOwjb7O7HBCnq8q25Oc4LuPbUEL8ZlmqzA8fdrZ3D12PgmszwNG Ptas7QkHn+Nsw4UbPnED+zZnfOPugp4g8J/x+xCELRpPEy4K5htXU94IGRmbNnYPI43lOe4Ouj2u 5IEK8Bj/G3MwwGB8BI8PEBy/Qbrjvzl+lvrLf3i8lKHuXzNO6PH1Dxx3G8jyFxmXmCjy3zPusfDb X2ni8BZPwIGnbqCW/7UgAvoX0vzTYxIR/PNFKpcjZ+Z1TOyjO+ZeOamHX50v8LgZFLXgFqiGlV4g xG1gdy4EEq9hZhfsqO6Yywsa9JeY3AXeHmuM0/zngbMY7vlnE58Cb8zHLXwPfLiwdwvCZC8dheEo 8Y1pkC/3N04fq4+N2rBXzcWZrH8xdSdIrbc4E2IPbNie9A8v2hQIFA4R2cyN3Rf8Z5OQFRL896Yf JSW4e9OC7hdM2pTtEQl22twzcDeYZ2N50j3o+cadxWdBDutbm61BLzYvwDBeGEkxAhukmHlCHEix oiQXkGIXTtmCzvZAAj/YGcTHJoAzWxWeBY7pRzgGhjPFwk1guHwiHPyUrh/2HoZ7IsJAlzKID8uE 4ac+YWYgxRRDQXptvwndg6SYQ+BuFAQ55UEQh7uTHUgxb0fQhWkoORaDGprhyAtSLM0B9OrY4w7K IMUe24N5TzK2D4MgSp09DwQ1v7MDyXFJza4Sgm4n2eVC0Ci33VUImvW0B4n2sdfhD5JiDo+4eyDI XoC3mFvZPo5XTOKEPY53vzrOPpbnH9Nx+3CeIWdHe3+emoDn9k48oXFYe0MejcwVe2nun2Xx9ge5 hxs37Da4T3fG2P3NHdK/ZLfMbfnokr0it9GMgP0wt+fqaUcK9zzY9SVK+oMKwymlzz1nXyhFkXRH VJ+wL5YqM71tT5EqcFq0r5LKDFC0b5DCxRbbN0v5ZXwDWpfGg0dUGtbtq6W4OnD2FMmvfev2FyU3 Ru7b/5TaN23kcFYKvcJ2OiV9HIadIjWGIciRoCnE0+fwTtNBiuDwTNNd4xIiCoPo7IMYkI4YewUx 4ydiqSPQreEi0KnjqMNzTZu+bIcvmp4jDo4umuVTN50gLWhF23lG2wbUsS4zsGtwljUj8jY5PTEr lG51OmdWrrmMaHYCEX0UMfAIYpwaYmYIYul5xIZPiB22TufNKH3nnB6ZXRrxdlYw+z3V5TxrXrty xOW2pSaYR5YuVuAKy7jI8KW5HHE5IjPmArlA2u7oP+g/5imI/7kFTiDG/WvmR8QyMcRGf8SOc8ir +r65SLtIj9Bdsl2yp1676rnqrWi6C7gLgH2WNlYSgtxiMSv8tm71mEHZFbchTIvOdbdZTLnFBqKr IiLmvtsrTDmuCTGrEbHsKmLjAmKnsNschtqPdd+BuT7ywz0AKz6t6sGNXVkJPbkesh+GPdIJ+yHI 4zf+vsC+k5F4ityXkxN4P709ntJ4fatMTwO8mlsFInYVEV+FSMQjlsciNmUjdnZ46uHV+995uuK9 H2V4tuKHpzu9bAitK3M+nAlrMOwlQALrw+slqVOgzzuNFCu/7nOMpKZv6tNB/GG94buHOOuh5vOD OB9s4vOZOE+45vORuEAi+LwmLlB8ff4mzjdH+IwQ57oqfG4SX9165jNE2v040ncnKXnmtG812X/1 pr9dzhioyfupSxDk+4VaKxjg95DqrvCXP4PKcTwkIJIyfsI5cB+FfnIwoJNyLcQ7gE65Gj8cQKVc IWcFZFF6qVHgOZda0gPQlPZLHQE6lLbb2wFalAejxQHBVP3ZroC3NJmPLEx2JROGA2zoz8Ce35de KPgZ40E3V2RifVu+GCQHnWxh2tYEa7QkeRkH6bd0hXIGybe0J9CCuFvOZftgf7TQaSex8y319BTs QAut+zq2paWIxYGtbGl7chF7lX701f0gBfqvtXvBF89UwDD2CRNU/mCImS5UEiLE1FLKCD3R/dow NQzfXW/3OJzY7eHdGtre3RcaGFrWfS3hZ2hyNzP7Tahv9/kKKNSou4lhEirQXcGsDtnszmPvCJnt rhs7F7LV/X0ObM2Z8+udYdcv42E4tJbdDyr/HJsgvDeCl62gbBgZyvrbKDrqCqvIfj16nWXqsx1J YfWHPo2YZL1I+BVxkzWaIxDRyBqs8I9IZ11lsCJOss736EUosarYrAgOVst4fAQ/a3O+OCKSPbIR FNl2F9TOSOY42F1E7xsvEC6JcRtHKX+KZY2tGfvi1MeaHI/iK8ec/Cxib49Nh7nE7BuXTGiOXhvn z/4RPTF+oCIl+tLYz9YD0YVjH3o6o/3H/hrwiZYZ6x3/Ey0+trEgGI0Zv7wxExM/CWpynMgCWC+4 3PnpY9L42fnTKtfisfMWJuiEtbk1J/2kxLkm//p403ndsPc41PzV+GWc7PzF7GrcvvmGCp+41/PF rQpxt+dP9UJxFfNBA6/igubtJ1hxHHNbC6Fx+vNVm1w44cWzMBz/YQN0J4knQYrVJt3dcFTNO+W9 /sv0ZCq0ft45Ke3sumvggVPS61vhHfEDGx3xB+MJG+fIW/GuGzUVnPFqG3mtyvH7Ngi9NoRXGz6D GELnhtnkKULKhuxiKX5zPWZzB4G+KQv6qhQkxVJBEomYpAeDFMvLPARSrC3rEag++0hFMIxZyBiF 4Yi1FE5wTO3JGjBMjkvmguGKPUlgvbWWJj2A4cs7k0CndhefFAtS7FkS6PGW1RORFMtP/Pdfd/hW 79WAoABZCDpE8v8EQWKF/p0QpM72dwQp5uM3D2pctV8USDGKL+itCK6+RJBiq77cEESN9AH9VcuY jycEdcv4gApyJ8n7IwQ94fMRhaBXPj43IWitx+8akmK+H3n+gSAfLX457gGf53wWEgk+Y3xK6v0+ 9/kOoHR8bvLOO9/1Oc/bHejjQ+VNidv0SeY1zirw8eKBy/l89HgGm5p9eHnyusS8P/HY32rw/s0j /jjCx56HY+aZzy8e0Y9O/gd5WmDYL0MKpK7Pb2lTHrSPjvS05E8fO+kHGid80NJ3UHI+XtJMZ1uf QOmmgAqfUOn82G2fCOmozHCfcGn70kWfYGnFxmAfP+k9HW983KQW+2N8CFITjyx9xqTmp2/5UqVF V838O6TBGfN30DQGuz5Jzce8+30jteSkVn01tKw0lRFRtxGdzyAGXEOMfQ20zJTz1dZClab56mrp N8z46mspd9j6GmiJ9bF9g7TkR8p9R7S8pn77VWndW0kPuK6zC1QYf7MHEORPM/vN+9R/l7mM9He/ S+YoLT+/LnMzs7OIaC/EQFvEOAxiZhli6SPERh7EjlDwKvM+lt9f5tgRvL+5+aWpewGcFpYr8hgd y2mwA+p1IYE6Zu6Szdcc8NElV/ZwQJdLoXZnQKNLifkkoosNIthbAnE7ELP4EcvMERszEDsGA5pd Svs5A+67MEeuBaq7Hp76EvjbdWDFJEjCvRXUMTQWDWaQFlaLH4sVxgrLCWD3Y/frfMH8wfyxtER0 JSD+54YbRcy6h1j2N2IjjNiph4WwUH8aVh4r/+goloqlTpsG+Qb5ruBDUkPAWgk+TlAF1TIY/1tA ODgf/1yeP/ginqmnE/wAX2XVH/wMX+b2EjFIFhF/D5FYh1hORWxqRey8H/wCX97/PfgH/sajrBAM QWG6NlQ+fu9KZ7hxoheolrFkMPdDn5H+EngYpkxqU9gXlk+K1w8Oe0mysZEIP0JS8YgO5yMpBZMR Ce8RSZWIlCjEZixiFy6cn6R8qyLckOT5eEd4I2l0BooIIPevfI4KytWC4fAV6i8Iisij3hKMiDxE zVb4J7KOanWcGCVKPXIiMaqE8vrkehSL8jT0SNQdytMEQ0Ty1ahblGfU8KiblGctFlFXKM8umURd ory47RF1j/LncV80L/XUzKXoQVr0KjX2QuVPsPO9TAerMjqJfk7wR4wsPVzxTswCXdqgNLa65bXt lTi9lm6voLjOlpKw7riclqrE3Lj0lqrshThCSzWNHBfSUkV3iTvZcrr7RJx1y+k7AXFOLTdHb8eV 0ZVnW3FyDMmP0fgPZ27DcCyLCapl3BnmaaEK3Cmmm1Ih3pd5yLCIYNJ9324pnqO7wJsd39/tEXE8 XqE7JYkUL9x9Kmc2/mB3UgWJ8K07gXGSsNyNY7oRRrtjWHjCw+6iJ6OEL91br9riM5mLa66JwpdB l0Q4zH4MQfEH2QXC++N/sy2VLRP3sr4bpSVxsroddiRzsCJ9DyWvslQjmUndrORksaRmVkIuJamE hau0TEpkRbYqJ/mwgnsMkkxYvuzQJDVW3Nj9JEfWw7nTSbfY7euyp9Tvgpqc2D4OOvGkO+N1wuXJ D8c9lH+e2hjfbxyaKj7W7yiWZjmG9/NIdx5TiZZOzR6jJT9M5R2j5/5O+TNWV/ks5c1YRetUyshY Ue+ulPYx4oBtSuZYyPjplOKxjnnvlMXxxPWxNJnJe6DyNy8ogMp/f/71MYm05flWlRsZ8vMeJp6Z SfO7nSyybs9d879AXJ+LjTmb2Tn3+lRpBmWeL08149Q8x2mdDP/5XWfCMkzmvvVeyxCZWxkUS/8y 92qiPr1rrnL+ffrKvNGGecbXRUcYzvi28QKCspQ2qo6dJmI2XFQLSDc3dpl6Z0ut9zqn5hSvYwK5 chfWueKMs7XX68GFEVv/mqdI2rv+8XQ88cP60plZ4uP1F5exxAvrw4PfiDnr1ydbiJ7rZxddsv5a +7mRTDy3cR2Gs48hKZYDVo7I8dwmkGKk/MMgxRgFVJBie4p4QYrNF5eBns2uIB+GU5dzVWE4zzkX PH76c85XGD57JecvGL6SlwN6saGgHPDMZ7Y5WJBi+jlgnWwrZ6vDv8BMHt0PuqjYexC0/3dsIwSJ JseCfkZdLhakktmBmDaQYuQYXVCDuqPZIMXORJ+AIHJUFNjD0Q5GhUIQnRr5G6TYn0g6BLEwkekQ NMYR2Q5Bc55RbhC0zowpR1Ismp8PZF1koMACj12UN/9JidAoZ34T9dkoM/5jqJQoFb5NtEQUDx87 8HHkF74CXFLkcz5bokAkk29v+ZXIQt6hZpvIAF5S10SkLq/x7ZORRrwHRhUiKTxrs7VRHjyf17hi zvMSwChUKZDDUXtlQnnuRPLIWki1RrrJQhpXIr1ktlCVkf4yc843I7Ey9wP3RgbLXIiLA+ZnLkcG ymDKQsBz9BrfRzrJHOrERZpLz/d/jQySvv/oWeQj6dEZx6izMjtXJ2J3y8zCcIylJtiPRf3SquP1 jRLXFpeOjezRDtMciuzVDjNTi7ysHer8K/KadlDgjsg+bf84pUi2tnsmLvK+9onS+5GPtPUblSOf aMt0NEaOa3P280X+1uYeeRuVqG007R3trd268jx2UAfkS6y6uRoExeiZV/AdjiabT8l4R/2x4NJ6 FbVmIWTOg4hmIgbSEOMaEDPZiKVfEBsNETsKojYsBPsWoiUstEaqoussMqZWYrItD6+g41asQO7H ebqAtR/b5bLONxyr4HpY1jWm31Ve53AMxVXbAoXo0oyIcUPEGSNm2QF1yuIQG88gdizH0Fx1+9Vj 7rh6j4zHartemz4UJ+QWteKAz/KwhWFcH7YE7C19sYX8RNxhbL6cfdwwNk8XFVePLbRsjavCFrne R8RaIeL3IWZ9QSzfhdgkh9jpFVeNLe6vjRvE9jxSxOkECUy74/mDFley4uNDwEwm+BH8wAw1I5gJ qBIUCAryxgQeAo9eDGEXYZf1Tvwf/B93JcSgaMT/3IiPEMtvITY9QOx8S4AI0C0BgiJB8VEtoY5Q N90Vfyo+eaUvcShxCIYTUOTjEJQQSOYQeJ6QRnqnIJ1QQxrUL024TDpj45XwkETxYCaMkkqD7yHG SyGShhApVYjNBYhdtIQxUtktZsIn0vXHxxIDycozfEm62QKrO07F54KVmhRGEwHV8gb1nWByMkS9 qfAn2YlacJyeXEv1PdGS/JKq7ymX/J0qF+qS/IMql5CISH6DSKUhtoQiXvJM/kmVv409JUZ1fXzl VA714QwtxYV2Z9Uj7dRpUMdOjTJ2Q1CKHf2x0M6UW/QqxfFUXbqfQVvqJbqM7cs0oZbPXmVpMS3P w5bScltGEzcRc9QRaT2I9GDE7uNpeS1P7iintbZ8Gg1N+0mPmpVI72MErd7JvHMGXJe0ROYGBKXz Mq8InU7vZKYpVWY4Mw0MmzI2u3/a/cks7r7rvZR1sLs6IiTLtzsj+XSWczcxtyLLrptU8SHLspvE IGUZdZOZZlna3dks2Szz7rNPnLIKmFyz20Tlnt0f48i7LtfDcKYPewHUZAF2q/ChrDF2qLIzsYYt YVRECmLNOgiSpVlNvvLkCVZY5NNsL5ZxilL2XpZr3gD5F8vl9CHyBsultYa8xEL3uJOfspzYesCw Mffs3azhV0vZNHbnmkGu3l0FGCaVjq+C+hcyfkm4MltnHKeyK0d0XMGYkMsxNu+onvt5rN4vJm90 zDcalZ87Jp/Kzrs25pN/Je/CmFfVnrzasZNn6vPyx9x6sXmEMecBpzz0mPG4Q17sWNHcw7xX455r PwocJy/AcC7fAugs8nbObx4Tzfswf1nlVv7mfJQJpnDHvJiTc9GRuef+N4oPzVFibhSvzbmlY4vq 5loLWot85i5WTRdZz7WdLSjSmKNfDikSmKsfDC/8PVc5UVh4Z85jvqSIc37Hem2xxSLodQr3bYAq XrRro/oYrXjXhodqcYnUxiFT/1KX9TvOxLKsdXygUHnLumycLaV9bSlTvGx+3abwVpn0ekR1VdnR 9aC28NIv675XIkpn193ulpWy1u0mn5S2rJsuypbKrV3Y2FXGsxEEw6XDSIqVjYMU0ypfAimWThUC KdZECwEptrOCCVJstnILpJhtlSQME30rVmG4OICWBMM1tbRAGD7XTrOC4atvaODs37OgHQApdpP6 BqSYBXUQhrdeUQZgGphjuw4FQlBmEATtWck0hSCRY5kgv9QCM1gQhKrIADnlYpkO9oXYs+mgEhGG 00G3Q76R1gxSjJwGdgwM+dQbEMS8kuoMQWzVVNAJj62mukLQvEUaeJ+N1gwykmJp5vygk0upErrO 8zB1TcBLQiB1UcBMfSJ1XEAcVZ16g/8LOiC1gf8eRio1hb8Mt5CK5nciVqdK8x+gmKd84htqXkq5 x5dxKS2lik/nzoGUWt4fo69TNninXnmnPuKdWnuREcDnDEbplP4B9jASsud5FVJ45AalUSnlctqa u1KocpKodeBBtGQKVXYtMDWlTHY07l1Koey5rLAUkmx62YeURFnHpqSUMFnhLijlpMz7W5SUUzIP H8em/CPzYOZd6pTM14/RGVmyj2E43VYrG4yyrZ3Feynlp46G9GqKh06XVkxKiA7DrCslSqceHZlC 0KEGhqek6OTGlaeQdBIzJ1MKdLBlSimlOvaNlSkUHY3O3SkVOnz92SlDOpyP3FOtdbSn76VZ6VSu ojI2dcGVzxAy7wJrf5eFIZ9DmprFOZnbqfkWf7RDUr0sBczrEF0EEQPfIsYtIWb+QixTTvW25G+M TvWz5OroS8VaHuoXSK2xFB8ZTxO1DJ6WT5ewXFspznxinQbWvoirIgRl2LsS+LbTW10vyjanc7jO 6iSl3Xb9ZTGQdsv1l+tuRMx5RFwuYlY+YlkrYuMEYuehtDuuv/vd09bcJEbW0glumdMyGTh39ZVA IvfJgzCc5Y59CubYPewKf3OmIxaWy82YCeLVpWYUB8lZ7c9ICVJ2U85IDVLG1iHinRGJWojl+ohN 7oid5Iy0IJX+2xntQW6P7DLlg/qmY7MkgnNWKKTroaCOEQcJ1RBExBOoAlZERUKJfHjWa0KBXntW FyHf2i2LQihwL0MMuoNIsEIk7UEsX0Ns+oTYdTSLRii6ZZR1m9Dz6AZRL15s+j5JIf7HyqPsS0kW MEyOIEeAFeBEdhJYJuuR9RQsyeJkcf1b5MPkwzY15B3kHR6/SX9If0L4EOPDEf9zozxAbL6C2HWT DJGhW8/IimTFx4bkZnLzjFp2QXbBKnfu59zPMJxzgmYJdrAYmqggMSeJ+l1RMKeE+vz4vZxW6uUT Ezk3qHWeoTnD1NLQxpwH1JKE64jZ4ojUIcSWCsRLxJyH1NLbeTkfqVcfP831oSnOXMw7XnFsNayg 7HQb2PMGM+RAtWyjfxU6nLdIf6y4kC9NbzS4mx9Gx9n+yT9DP+HFzn9KVwkXz39Dl07SRsyJRKQt I9KpiN3Y/Ld0mTvogr10+9Hsgkj6nVmdQkPG5dWh4rizNjBccKPnCAQVijGnhGoKScwLSozCD0yC 4dWik0xDe7GifuYBn4PFXN2LEVXFjt0jyU+KPbqHc6cRK+UQGZcQmdjik90PWDrF+O53T04UDzM9 Zp+WFPZYf1Qtq7r8DFQ+G/Z3CCoeZd8V5ixxZpcpe5W8YqONGkrxbG4HrdJfrClfu7IM1oXIn2WL rJwU33JuVnx+UjkXK+E0pZyTldC6Wn6EldCTVX6QlcjWKxdilY4plfuzVl9RKDvZkx9vUv++awfD ZaLI/xQrY48PC9eWB4yXqxyhcIw7GZMoQ+OHHC2pyWOP/fJpx8YqojG0zrHg1DcVXGMWhTK0D2OO Vdu05THHswa06TGn3j7a5JjTQATtzpjZuCrt/Rh1Lr4CPx64FnN632QHDFPtF4xAfd21AB0TovXN D6sMVBTN55pEVWLmTZz8T+vOffMfqYLmbsSMVd2YI6VnVjvOeRQtVT2eS6oxqBqYS2zLqroyl3AZ rmqbix/sraqaI0yUVGHnjOddqu7PfVgXqRFc+ALDlfMb4MOcbt+oOVZalbbho1pSHbTBZ4qt8Vof dc6vdV7PDZSuM143ifOsF1z7k6lR/9faSMlg3cL67trsulvr+8+x6zrX91x1q6tb3zkkUJe39ufp zrq4tR+LHHXQWtJ6T/3+DUUYrrVAUqxOBKSYch0MUiyxYSdIsdpGPhhG/2lSAik21WwIUuxEiyGS YnQJGC6Xar4Dw/W+zWYwfCGkGXRn1yWaQfbd52jeAcPPJZregxRzbQK1eKup8TlsAsNFBkeMIaj0 DwTtdCsFuxnhuNIeCFKNLMVDkOl2qSgEoZdK7oAUSywBvRXhbjF4DvlVcTQ4y6NFIJkYtUVZENRj WcQBUuzvwhkIGr9UBGbtAm/RcwjazCotQlKsiCAIsq5g/Ng5XtMiqqCdeGFRtqC2+umiWEFeVFmR q8BHdGqRhsAdjG/RAYECvEbhKwFb4s/CLoE9lL7CVH5WS2yhOX9SN3fhIX7lO8xCDr7VJ9WFsXzD c1xFPnxD6xWlyvygvywalQWrsvCE/B7e8gIFBU/pvwpW5P01NQr+kbcz0yp4I6+BTi5YkOcKnC2Y kvuI8yoYkxvKmi8YlKsuxxX0yoU0wQXNcmpdlQXFsl9vyxZ0yE6OHiiUlX08W1CkJPt57UDpUTnQ 7xd7a7uAUX7ppPNBBVu6PjIxBVJ6B7S5C9x0Z8ylC7x1J9BTBYG6dwNfFITp9sb9LojRbcqyLIjX zS1rKUjSjWjaX3BK17YzsyBFV77/Z0GXruij8UIDXYMZsyK07unVm6WmegMwXMJtYQF2Sh8svvGB U2iZLytZqGu1U3u1YNrK2EIL0aWyYMbKGGNXMGtliNMrWLDSzzpR8NpKsyyx4IOVYuPVgg0rsc69 BV+tuPojCrWtJB6JFz6w8p9OKVq2Wl55WTppEwlG+eHaAEElh9x28ssUn3DzlF0tOu12Xmex6Jjb nKV90VG3165ZiNgDiLgXiFmjiGXziE17EDuNirjc3vQTi2zc9z/iKXrhHjRtU7zqcXQlq2zs5Guw 9o8GKYE55hcUwH+35G5QsdxAiXrQVd03xbeCpqxOFVcGvXdrRcT+QMQzEImpiOVJiE3FiJ3M4qqg f/rfFj8IPvoorsQlOGm6pDQwxHjlDEUtDA3mvgcBzL6yvwkrAkFlsYTv8jVlUPx+vdXSs/EC1h2l 0fHS7t9Kw+JlgkURCdWIJHtEijJisyJil2lpRLzcrbDS2ninRzNlwvH900vlEgmnV+aoM0kvYZjy iMyAIEouuU7gG8WCXKEQSYHIJfob5ffJBTaz5fXkvJPu5SXk/JBExPjriGRLROouxOb3iF3vykvJ Bbd+l98gMx8HUrSzJWYcqOo5+1ZlK8bz8DBMS6QlghXmR/MTLKFZ0awUtWiqNNXjazRBmqDtfhq4 eXZQYSocukb9Q/2TuAcxOwTxP7eW+4iXumgQDbrdTZOnyT/+QmugNczcryiuKF5NrTpQBXa1lS4M NARVBjNUhIQrExgHFb9U5tHfGixX1tDv2SlXttPPe32t7KdXhIdU3qUXJ2Uj5nQhVogi0ocqh+jF 3ZTKe/SSO6mVb+jM0XOnnRnis65Vqq2cqy9rCs82wnBVcI8mBFXV9ewVaqwaZb5S6q3ew+wxHKs2 ZebaW1SfYvr6GFRfZBpEjFaPMmVPHa1+zpTME0GsxCIyFhGZFERWQPU60+xJTI0Ds2N2vVagp+aj Wb3NlWNg594+IAhBNTD7H2H+Wnd2v3JIbQ8736in7ijb1cGlLpYt7ouvG2R9ilKs38d6lkKrV2MN 5V+p12DdPf0Q8YwEYk9nvTrrLjug3oI1NWZbT2HrvWppsB7g/3i9yexuDqis2hMCEFR/bvy1cEsD //hlFcGGqvFU44pG/nETR7/G2vHdfmebuMYmovOaMsbOpXE1jYwVFXo1LY2RqkMQz9KalsdIvd8Q ByhN02PJ48bNvGMDc0HNPeOla8fpcZOjMNx0dOEEBDU1LPAc42uWnn+lMtw8MM8wSW4Jncc6xdD3 zUv6z9Pb5t7G/MPQmruS3sS4MFdSvJ+xOZdYq8dYnks5p8aYm0u5ksqYmksd/Mp4Npc2QWd0zjnP m7ZKzn1fmzpzeuEnDNNdN0YhiL6+UXuskFG5gVUtarXfkDANP3N4fdaZcmZivT5Q4yxl3TsuvA21 Lppp1Ta9tlry9znXtYf1auf2rc2cn2j7szZzjaft09rMELXtn7WZp8fbZtdmFve1ZayFrRPPNWyA ju8sFkmxNk6QYtJtD0CKxZ5rAClWcT4dpNjPC//+j7KLRiDFrNqPICnW/gSsZOkOHAw3drWDbuvi q/ZOGL6h0N4MUqy/nQJSLKM9C6RYcHs0SLHIiyQY7JNrCVzCENSovQPslhtB3yTo2+gJQSpmjceQ 3wPRMAlSLKghDaSYTAPy2wta6pHfQLBQrwfW2Kc6NkixxTpbkGKXakFmDWBrWyFowrl2CqTYgzqQ hlumjQwkxWoZwuB7zWHRDt7OOj0hFTFmnZyQoLpMHafgT5Rv7SfBl+j42gnBDkxi7QXBJHxobaqg Acmm1krgK1W49rBAT8t8zaRAZHdNTY3AMZZVTQ3/7JhezS/+K3O3an/yd22YNx4UAFlduymXDEZJ UsjiXa92UIRlImuCFNI0tWv8FcLMTtacVHBE99Q4KKhilGtQCvtx12s05F8RHWrE5C+Vv605IJ/W nFO9IW92SbT6L/m9t/uqv8m9Gj1TkyH37JVUbZXct7VzDdflh2C4Dq8Dcr+WW5fG51b9S69W5l01 h36q9rVqnD6veWF1gv5eF1R1it5nDKo6Q28BF1tN1HuQdaM6W6+jnB9Y0pRXTdYL7/wNHje/Raq+ pqf52KPGUc9uZqg2Ra/54/GGNn2QlfUCFhtglDeWj/hGaz5YpckW1uy1FtZJrk61JlvMVOdap7jy VxdZJ2BuVVOsY3DN1dXWwVnt1U3WXmXPq89a2zXxVXdYG3RGVF+xlu8fqd62Vn+UU1NpHT79V+19 67ermg2bJ8LAKO/dxMBO6Z3bOX7PuiPufHImtSj3HF23mnPuLy3/qiG5r7rtRcSmI+J1EImiiOWy iE2WwJXOhJpc9w/9l2vYHvse2dX6efhNp9eVnNy1wmy86DkBww1LQRUQ1MAbNM//rj44WEoequsN DtND1YkFM6z+qX0ePOCuiBgUhYj/g0gcQSzvR2waRux8W/syePCWQN3h4LePauvoIfbTnfV3QzlX +ppGwsXB2t8brwrmcEy8u0BGw2J8svxIg0d8nb5O/V/x/Tb76rPjn3tE18fHTwWXIhK2EEkNiBQC YnM4YldSfWL8zK2a+nMJOx7vadBMiJ3Z3WifaLnyueV4MhmGmz3Jr0GFWSGvCXI3FZO/KlCbpLN3 HldqvJ/NcUKhMT1b8GRvo1e2eMgCYgI3IrkSkWqL2CKDeEm00Ttb8rZqY2G27eOipoPZN2ZimwVy GleN6e/yQIVpeUYDnXhLNe2sYH2LL61B0a3lGK3CQKR5gVZsa93cTcv3/NJcTssLs2suoOUlYhGz LyPSLBHpOxEvLTUX0vJvzzX30DpHJVqUKkRm3tIVK/etUlqfVRFhmEFikJDfu8GIFFJiuDHclDgZ RgwjwwMMGYaMnT+Di8HlrcvYzdgd3k2H6XDS34g53xErghD/c+u+x4AY0J2LDCmG1Og4g8agzSa0 Zv0/ld2FX5Pd/z/wy87bVmJg3AaNLV0GHQYdohJi0Eoo0igISCoiBjU6Bmw0bLANGDA2RucGyqjB Btx2XN9z/Dx+f8BPHz5FHHtfOzvnvM7bB24ZT3i8rF9Zv1A00xpnjSCZt3HKIhmZ3jiMNDUzpPSb Mi8zrrRP/37mh9JKK9fMktJ3Lpsz60pjfSwziaVR4S7QxCxohhi0tDmTVBrVGJs5UppDT85Sxv0z tj17F+6/BfOcGxX3UTTbiQRWZXYiaa/o/uwGIl/GK3uRSFahYQ8RXxt4Yq8R3azfYEOJ+nfssIXE 4750LIV4MOI7toV4IHkzNNMaimNDibHYQeKZLo8cCWLsGDGHS3JZ6Mj70Qz24Jxi5mkEyfnC3CCa m6vOGJU9mBvPKFDNzJ1i+Bo+zFNiXLKh5j1nCN8tzuvuWvE/n7+pa/BZXP6BLsbLDGhWK7RcEkqq zhfuamE45l9jbBsPzv/CYC0aFtJY61A0/zwH7MH52RxJzK6CDexvsl0FPuxmtaACHjvKKLDwJvuK 7dfCHrbY/Q1FKuMLj0hFyeO0qFNFXePlKc5Fg+OlWC9oBQ7a/C+U2VBUN/6cbVqsxj6+OFjSOvEv ihapCGgIUlQmSMWEFssKbss9K64WyKnfKzHk841fl0zwy66rlXrzfVx9S3/xNQOscQ/5u5+v4PoW l1INy9YtTuS6l61enCRElq1anCSP4/4sfmQ54H4ufpzYhitYfML3KhsTgNNF6U+YYrgIkGKiZaD/ kncqqwMpFl1+D6TYfxVg3dp3V3SDFNPCg1wLtCSA28QeIYC2La2E8BlFC1YRukCKTRHaULRFgQDO 970NhGqQYm6EEpBiWvi+P1/B85K7+ysYseX19xCk8ACC7G0rAJ259EQBFUHUDAtCEcS4qQCcpeyr 8kFOedjmu4IUo+SBK4v/mReNIBmb8/aCq/ySC1KK1JLrBlKMngtW4IRN3iuQYhOFRJhiOd1iuQiC NTxA3rsrd0J0jXhkbrcIXz44t1akTx3NfStSYaKT6y/yzN4111jE3D0gV1xEPMg3Z1p4LO5mTpFw 6gflHFfhy6XrcuSF1zeSc44LUbsoOW+E3rGv5RYLJQnYBZ+FQa+ZKyoBdhhsrvT2vQbZfjJ1R5aw M1LRJ7dgJ6R8Nc2wA1LXTRjYdikN+5vYWikRd3BLycXAHGy8ZOMLY6yPZNS7L1grycvF77Cqknsa LmBtJWbop7FTEiNjVbm7JH7zlQvcJKmgSvTZS2AmnzrXsDcDu0dh7qh99nbF72dMs4sVdbRY2aWK CpeTs3GKh+3fZ5cpbnXryS5XEAQey8YpdMfGZBcrlLxDsvMUnhU9yc5SuF6/NntYQb9jBOuvYDdq kFOtULRQV3BAkQHOIEcuEECVxYu4ff9gZy4FH13I5mtfPPM7W0m7/0JYtr02/kpytpN20Y3j2fe1 M9y3ZntrJwcKZT/WDo/Vyg7V9nwblh2lbVvYnx2vfalOObtHW7d9BRug/WjkUg5Z+zMvtUBKF6z9 vMmroEpu/zXrfVE5C9e4xxJyNpl6nCVjr5hOXHTCrjXbfTUTeuMH1D0du85sV6A/doPZjlgf7Baz rW/jsDvMNhQ2YIXMkNo/WCszofbkHMTMcZice8l8/fxSwVuLdrAqW25tRJA87i0PoZ15B261S1zI tXA4du5dTr6D36UbOaoOJdeqck47VNycgXq4QIOOQF9sgr7bCi06knPWAV9nnOPmMNjemrvJUXmY lafp+Ge+p/DJbbD2C5iesQhSIO5JE3qT/8gTlfiT1+OloBCcp+x1X/tObqvXK9OJ3CwvrMNGqKcN NOgz9AUR+q4IWlSei/XKraPnDnt1dpzNc/M+OyKdn/pgE297UZWPOlj7q0LAPlb4KMRE+GjBr5C7 krUFfiFPFV3yf4Zk6vjlJ4fUme/OtwqhO5rmm4V0eT2CBvOgca+g7+9Ai23yLUIY9Y75z0I+d1QV 7Aq9NZJYeDxMi2deIh0BVnCxdfwi2GF+xf8nXFyUFf9d6kHRxQREyaRwOmGD7rPClIQdFrqFtgnC ToWF+gkY7xZo6GZofDz0gza05EChYYJ4w95CnwStTpPCLwklo1uLVye+5OWV9r4E66VkLL0KQUqw 6cUip0vc07OkpUvOpKcqnyz+kR6nl1Tckh5p6V/8Nj3cGS2OSA97qFAclh4WdhmaUAJNPw8tRYrD 08Mb2MW56djO3yWiGTtGU0p3ZXxdWFdGyAbnZVw0DuwTuIe4hyIFuBu4G9JjOD2cnso23EncSf1U nDhO3AqL24rb6mKCW41b7ZNbipai4URoIh+aYQ/9389GMk4UJ0pvxj3BPRk7U2ZfZr/gXkGroKFo uSPJGUHK3Uh6olLlviQZmYjyENImlY/lMcRpg5Ty18RWa1o5llh451V5GfGV387yOuLzp9rl9cTI ZDNo5jtoGQZKbC7vIqZ1va/YTxSMfaqYIlEWPlXuIIP9Fe/NvIYg+FTmcdESfCNzi6wMfoYxqVpJ 2MOoMkwgaDFe2MwRXBkud0cIyQw9fz8CgXH6GZ1AZUi9nIZmr4WW20NJswQS4zAjkfCD4TSOrcxk Hl50rH7G0kbRynaOC4JUbeRoYrZV6XKEZAeq4tgzajFVo+xKo6RqSXaE3c5qb7bFfcnqavbxRzPV n9nbo27UHBj/kfKmRmr8CzYXWjEGbdaDMtk1O8aH2H41yWyfRX6d9IQlitYECVoQpKZXkIYJrJUR uMs9rX0hUFF3r/0mWGucUefIp183qKPzX7s+rz/JdwnwrI/ma0Rvr+/hH0x1rf/F35H7sv4Pfzuh EEr+AWX5QScw9dWLNfynDV8EF1G0/jNMsQY7kGI7G8BeIG/bqANSLKIR9FwmPKIFSDE6cRykmDrp JkgxC9IQ7MWaNEGK4ZpiwKpe25SDotWS0Jab0F4G9ONt6PK/JC66AUUJn/b1I0g1c4s3gtSSEWRX VC3op6R0ar0QRFWr9ixIsQ018yDFztS8BCm2puYMSLGE6g6QYrxqG5BiYlXTCFImUQXSrWlblTqC dMtXhYMUY1aDzm7FsW4Cpljlpv3gK/CJhwR7vaqSRBliG6vCRBvl8qvui+aoB1WZiIYb/66SEbW1 N6xEReXcH1fSRb4GJVa+EqmNS660Fnn0IaxSRORU6S0CS3iaKAcsYKhWXhJ+wh6ochH2XXKpnRXm gCoGUqAXw0/K1O7NqiiTiz76gBAinXSikuAnHax5mnBf+rZJN8FWWs8+mKAnfdj9HOGU1PdAPkFY ivYiD/9TKum9PX5YyrpkN75cSqyBiGdJ8unVhJuSnHHNyg9SCJ9Se1IKpFhl2bn7CEK4rrhmrwCv qnT1aF/FMeWYM3z8VqUH51fjtyg5XO7Db1Yytl/Ab1Q6634Cv1ZJOPBFBar4NfZ3xXfF7nePKgSK eUVoxYTi4/qneGFFx86b+AZF71Fm5TZF4qJaTb7SKDh9qF1MRpDKDZeK9xnjv2u/PXa1QqATdjai QkxX/aJMxT2d5asbKjx0pm+kV/joDLk/qQjQoQU+rwjVqYytrHim8+Htz4oYnadFV4F36ioqmDou HffwITrJI7WEEd3NCxtqHuiBs0/V/DUHUGXA9PC+ZsInU9qxaTzfzOOcAl7cfNXFrxVZ5pbXjCoK za/cjKgoNTfyEKnAm+sGTlfUmmvFjlc0mSu9XaloM5cvOljRaX6ozha/y/xUuwBPNvcfwVRiLPbw ztfkWIJErq6/lQRWJcNhl5By5XeHcInnlfsdvp37Q7B0dLg0iu90LDM1wBc7Um75QT0moUEvoC+c oe+uQ4vc8AWOzXUxeK7jp/Y/hBin8yOrKwec/sz/rtW+DU58NTjPP2Amz3mZCBGrz3q9llSo8vXi KnRXtngf1+6uVPJ2NbtO+Ood4/AS6tkLDbaDxmGg735Di34S/vN+Xr+lUsa7pONuZcuDvSNm1asf TPFk6wx9d6FobWtIPFgpUiFEYbWaVyFzkjPV30KFFQuqb4Zq63RVcUI9zJ9URYe+cGRWPQlN8lqG hlyDxi1B39dCi7OqHocm1mdWFYVWdvCq1cIOjjTU3An7xfOuj32qC9b+6gTQWdQ9T7gqTK0TTnCW Sq19lxCgFFF7JCFJl1FTnVBgkV7jlNDgvLtGK6H1gQo01AMaPwf98BJacrtGI6Gl4WrN3YSZzvCa xcSro+fqNiad4VEa/rxMRtGGW+k/wA6zPf23iHp9QwYirVPvmLFG2a5+S8YGva66moytluS6hxm7 b1vU6WWIPHxXdz5DNAwPTVwPTU+AlmrXaWWINIrVOWUo0k/VDWe8H22qH88MXviX+CGbi6KNszgK gjRW4mpFKhvDcaXSy41GuCyVU417cK/1aQ0cXJzVx4ZyXKTL64YEXITPn4ZQXHjEQWjSJWhGERR3 oSEEF0ZEGt7i3tK/NiK4H2PXG+fK+heim9zxJ1GUlEJKAefoUFKo6DmSG8lNJo1kQbJQXUXSIGkY EElSJCnrX6R9pH13ekkbSRv9rEgICXmaSkSJaHI+NHMaWnYdSkRJ20nbu1gke5L9+D9Nsk2yCyj5 Phmc+pofMP0QpPkx0060sDmUqSmr2BzFPKhKb05koIblzWmMcdvdzVhG071/mksZef7lzTWMlMid zURG3KszzSTGi2x9aPlbaNPB5gZGNIPa/IXRNt5FzmAGLgZRk1lxKEpJ4gQgCKWcY4PZSunhKMlO Ur5ydqmlUfezZ4xyqdpsot1xqis79b4hNZHt+3g3Fc+2jUqkdrH1U3qp/exL2I9Q/E5o80No91oq mX2Snd6iy6byN7dyJ16iaOtmQTOCtGoK3mP8W/0EvnIRrdUCfXXv1p8CjHFhmxZ//rpN21N+g+uH tjZ+YkA0bS3fPVqOdo5/LTWBZsq/mNtIs+RfIDChlH1QVgx0Qoq2fxHlp7fbCXxQtP0cTLH2YJBi G9pBcsmbdkiAFAvoeApS7FPHLEgxaqc+SDGlznyQYqb0VTDF6MYgxcrokSDFNtAzwA4iC22xhfaS oB9NoMurOr+hx1GU2ioCeqy22zuOIEjHTgTZZtu+jCAS8e2tCKKi0x6HIEYP2w0Q5Po8Dcx49880 0HMFV9LAGkvQaOsGKZbWdgOkWHcrSLombus2kGJerXYIMinRBvb6lbbOVTDFqDOHpMHz8uSI6d7Z 1vdiSRjZ1jFMpmxLawsmWn1Haz7mnvFwawTmkr1DqzVGxL2pVVJ0JnhVi0C0KF6qpUL0frpqi6eo NE61RUZkgiRDDRQJYaRTv4rYcC62yopcWRptZ4vUgkd5SMYIVGmWy9+3mxx3/M0xESpVpuHEDWqd TIGmBLVYJtHkFzVN5qH9APWpzGX3Cup9mWNBL6gm0l/inKny0uQPytTN0lGlmygfpQ0bWRRzqaUu ecq8FGe8vkVJChVo0n5JN4EqjxVAMlPllZL2mVE2qaw55trMVXU+W00RV2acN6GIKjdeuUjZp5x/ 4xFlp3Kc+yBls7JnkAlltbLxiwHyV2WJ93fJ80q/StaSR5W6GrLId5UCOjmUPUqRY5epD5WYizU0 TeUZUOXLJfAMUJu0f+0rpJTobjg2Sk7V23lOtblQ779LW8jH9e5fLSGf1rO/aUpW0DPx0CKr6KkG XSdr6B17kUY+r/fPOz75ou5SsTn5ki6rntY8o/u8g0t+r1s+eoq6Ue/fBf+2bv1oMJPjTO8gSIu/ 2Xmh7dQA89USNyn+5i3nRsiJFj6XmpqXLZZNVck7LQZvWZOFLLo9eGRxi7agRvIRi8YX9WRZi/J3 w+TTFlnFO8kqFon1ts2zFqYd1uQMi1cjwdQtltK8921kK5DIbboOYO23XnXcLhTW4umYIvGZGuF0 ROEFpdApTzuessZ5p9khcpOzisNNqGcDNPgGNO40meys/F6G3OKsUKxGpjmfrnciP3JCO3QoUs7m I9rUZ7e38BRph11AitEOeIGTUpuh9wmhz62R3rGSSS1V3gJFY6rggYmOG9XgQYY5hjLzoNfRnTLx YNArFxoiAY1jQ98TocUN0PpuStKDvI4c6umHW0fCW548HOQZ0vi+v8Cq3B2qgyA0x9BIYY+2xlCK 1Lm2LWHrlPa12oVp65q3UMJCLA61mIeVOMW1nA2r966Dhu6GxhdCP3hCS6ygDTZUflhMp0RLeNjK CK+1IZzGS+pY92wzinYcha8c3f46ca0wr31XooTUCC0o0ViJ3baQ+FDvfJtLYpqlbOvvxDrnqlaw gT740kpKZIYdgSakQNM1oKXboA0/WkMTMzuJbZuTNo46044nfeJ96rz4SgFFO80ynoFVP5/xWsSm IywjTzqwY0dGjXJ++9uMDn359uMZ41aKNFaG4PYELSED9VGhBWeuDbeGJmZDM6SgpaPQxjKaUcYI 3ZXWkqk2KmhnZQkvaNFLsG4oSseWKSEI3bpMWYRJ31GmIoPprC9TUXHrvF2mZrCvc1+ZhrVWR1fZ hTsbO16V6foGdviWGUaUdfiUGSZ1QzNPQnEUKDGw40qZbNfJjsqyiLGYztxyq4UCxnl8Nooy9pBA 99rFJX0SNeiqJg3JVHWFkTpV5bqMSCSD710iJLzNRfocqfCuFJ1MwvrV0/NImc820dNJmS8PQLPM oWUtUNItegwpjrGVPkoaHlfpKm76sLif+YfciaLMTGYWgjDjmHGiBczHzABZHaYT00l1mmnENDLs YZ5jnrPVYP7L/PfeeeZO5k7/JeY65rpIKwbKQF9FQLNToOUT0CZbKAOFXzX+k/mR+XHxHYvDAqdx ViwHnGBZiZxHmM2sFI697BzrLUdTrYiVyTlgRGTls1E7IxaOPXHfi1XNbnmsxWpil0W1sWjsrNc7 WXT2+5yjULwetDkH2i3HamYnsek92pz9fInemYlBkAYdAiKC9HIFGZiHfasFIXJP+w4JbNT9+y4I ThtX9d0WbLl+r+85/5Mrvq+Y3xSQ00fnZ0Ub983yY1Ir+37xA3Nn+hF+AOEblHIWysqCTij29fEN +fUDuwUlKDpQDFNsAOwCmN+D/4AUMxgE3aaG+2AYSLHRwWaQYo1DILnczwxpgBS7POQPUuzgUDFM saE+kGKbhuZAip2AtphBe0uhH89Al0aHrqO2KNo/LQ6SZ8hwTyyCjGYjyEa/0UgEOdoyCrJJ+fGo LEgxhREe6MV2j4AezcNjxBBBQh4PLyBIot7wUwTJ5A4LI0iFzRAWQcjFQ8cRpIczADq4yVuDZvBV jUdFYYoNrD7MQZC+DIkd+2IG0w94YwyH/MQqZOaHboq9V+sbuigWarJl6JCYnf3M4BexUx4vBili q0K2D8ZgOhO8Bo0x8RmNg1sxhmWfByiY9c3CA36iRJZ0X4moLOdd/4ro4WXl4V5RcIYZOCX3AlQZ OY7uK+3NO7Xt2K8BfTmpE4cH1OWENM0HjsuilwMHxGQnb7wfWCtL9Kjun5V9GdzRT5O9HT/YnyN7 Op3dHyTzEzfebyrTSOrvl5B5wmztDZIeYUv0jUh/FxQNdcpUgSoBSp0I0n9GJWXfdN9WNQkJ7R6O etm57j4P1eDz4333VN2vbutzUrW6+bjPTlXDc0vfNdWDwWV9Oiq/4537lFT60o/2Sankl8727VN5 RCzrW6WizXjcE6D8Zqy1d06ZzZcZnFBZBlUmdB6BKqW6NKFTfSl6SxI5vT4G+xUu9TwwlNQ26VU0 ML5G6FU20LwV0qtqIO+Z3KtuIBrc36thsDpesVdDf/pDGbCtVLVXTT+3sadXWT+06wGrW485mt+r q6+6MDOobPAWRQdvmH0Hc0zbfF4ovv+CBVUS03fGMleB2ats5aPN73lkLWSW3lNvNeJQ0NNs1e11 rafNqiVEvYdhVRNv0dNvlf8hqWfMKqVkpueTVVjjlZ45q/v0dlaqZeXIfO8Oq0s8dGDJmgeqfHVc AlV+Or0XEgxsd1aT/NC/x/mTonuf5O1QHWyvs8sG87s9P1yuOg71rnIx9j7du9bFIGS8d6OLTjyp 9x8XrQ/tvbtdVEpWekVdTjWe6T3kIkmPZE3c9hpJ7TVxOcALHtx1dw2KDmU/OIUgg60PioStBz4/ FJeSH9j78KWSaL+Kzxbde31BPt4WOr1/fBqcaL0ffegP9kBDU6EJ1tB0HWjpNWijH5SO6ynzERmp 6dvkw+F5Dab7fUHRYZewD2C9FIQtCTMHv4RrSJEGT4QnKdEH3MKn9ZT6iRFnLY/3K0R4O7f1/YqI fygEDfOCJu6Epk9CSwegjdPQrm29E+FDo4f6j0QU8iqHop+xUXREMwmcKoezkyxFzgxvSXoufXXI IalJOWSwLumH/pbBA8knrMQG3iXb36YPGCQH+Zwc0EgOD78PTfwEzUiG4tygxNvQLv9+rSTmaOqA WzJ2YcPwh1fgFDwqn1mBICNlmd0i70bOZi5KfxouzNqmcnr4QNZx/dGhN1mXrTcOHctyd2ENMrMi fY0Gi7OSIp5Bk3qhmfbQMlEo8Ru0a2WAlTk/dmSQm0VccBwZylmLomMnyi+CvaW7/LLollHPclsZ r9H15XdVJkZSyv0M8kdky59ZC4Y7ylPu9A4/Kcf6OQ8bleOeEoa1y8uT2dCs89CyISjpDZTxaOhl +YEx0nB0+fxC59g5wr8oOq7TREeQ8TVNnaK+Y8SmDpmvY55N7aqRYwebaIauo8wmmg1z9FlT+136 qG4T3d93VLSp+9nI6MamnlfroNkq0PIiaJMhlLl9JLLp1rjrqG3z/kWN8WoKyH22V7cugrB1u9VE SWzx7lOy/uPz3UfVJMaruoWNpMbDu7fYYsdNu5F7dePSzK+PAsY3MpcjP4/9xxSknB5bYgqw+tCK RGjzP1AmbqyIWcqWG7fsvrrYyLHtUUJRTgmnBEE4bzlvMZs4UZwoWT7Hm+Ot1six4dgYDXEuci7a uXPkOfL30zgYDuaxF2crZ+vzVZw1nDWvr7BRNprjCsVHQptHoN02UDbKCeIE8XUn/50EIzaJFzSA fbpKgMV4TdYKouWeTTYIXNVDJpsERsbkSapA7nrAZLtgm2vHJJO/HNA8OcAfjnafZPPbUscnp/gN eXsnp/l1lUegFAsoqx46oTvJ4GfyRz9tEMyj6JQeTLGpGyDFlqdAQsmfn0oGKXZrqhykWM9UN0ix yqklkGJy3B0gxfS5oLOKFecagBQr5TqAFNvM9QApdprrCVLMGNr7FvpxH3QJz92MvkDRuVMHyxCE 5yKyGUEE7giySlxgiiCHBQKQR8rr+eAKjCL5ZJBiX/igy/Vk8EFPFaa7yECQ5CeLoNvCPlkE3Vbl 1YV4cNpetYABu1UCD5xXZtbMqIAUU+XJwBSbuyQhAj63IG0s5DFP/3cAQ1+4sH+3zOkFOXFU7ffC DvEpEwZvXpx6U5JHEn/vpcqLF3cNO8izFFdI+sgTFfudHTXfJ0YkCM/HiD2hJsxrip3o+z4nwHzk mnBrRQXLIXNkDBinOZcToLOYFTq1KJQwPXFWTPLS3I/j6078O7cg/5/mf3Oj8mNXXs+1yTfdOjJX Kv/e6/1corxP2D9zHvJ6SZ5zBvJ7szrmDsmN4cVnV+QyKE6zZLkbvdmzcXLin0amwmXmltbPpsmC rnfunaojqGKpbiBEmZHX+C4Zzv2qVajoPjOv3nxheuaTOu6a78yoeqqD2ky3epD3oRmqun2YyEyl umqS2AxWfXeWxEyC2nSFwsxjtUqy3oyDWkiP7YyOmv5Ht093Veb4iTNPVb+CKp/0+KBKmYGl8NqZ l4bvJQem7xotKLK4piYHdc9OOxmNm92cdjRiOD4A1nvTpx2McsLMpm8ZxST+mr5h5J5ZO21rZFwe NW1hJNPsOH3ZaC1Ld1rXcHjy9MfXBqaL16aLDQtRdF7F8jqCzB20chE2md1rbSelOv3Dxk5Jn7to a6zbyN1lt8eCxI2wxTqRuVG2qQ+yuHG2MWGt3GTbgCQM943t3cxE7gdbs/Ij3Gxb9aZ2br7tke5g bpHtxonzH6Wsby04TMva/AFVMm9fAVXSXfYI584WurRL4Way70QrsaZz7mrrWXE77s5YunKV75nf PsY1vaf5MIlrdU853Jlrf+90kg/X+Z50ZhnX7d7B8m3ch/f2NIVzn9zb0L2dG3H3K6fwo+wdZR5r ese97SjK2+MD5uC8vK+4yOa5K76Z0lKzN/1OKTvNPPQj6q+ezvLXtJKcXu+feXuJ2+nf6vMQGrEP mvQNmrWZS/dvKdfgMvypTfFcln8z8wu337+R4/4x33eZlzt9wx88L7zEiG+gCu2prYjT/PqnddK5 cyeeHVb+M2v9LEa/bObVs0Ur3vSXSE2X1um0SE9fi+mXkQ8iuqHJL6BZwdDyN9AmFrT7EJQT+in1 aTpvdEY0koqiC8IvvcCqdHtJECHOU19+lZGc3/JKUyVlzvjVc4Nbs29fdVuXz65N2XEnfSY1RcNP cyYgxfBpLvSlMjR7I7RiDbT5ALTbHMrJmGp66bcgN7sxpQBUyc2eR5AFEayQqDgvBqslkz6/iPVQ lZs3xGYYbp/DYbttHs4dw/656zNbk3PEX2I2JEfp2avZoByllz+h2enQCl9o80NodxyU0zy9K/vh QtTcvpxcFF1UxVuCKu14D9GgBUt8pKwwbwCfpVrPu4InGhLmu/AjtsfnzfFf712cWybsfLR+roRw JDJ87j1B6lU3FKsLrfgGbWZBu+lQzseZmIqohaX5iwQwkxcHyMUIshhMrhSlLUqSibIhC2Ryu5rW ghW5z+gKb4k8YcvmxZEX7q/nKZN/PBqa/05ZH+U8P0D5J6V6vp/yDxaF4sOg5HNQ1nboxLo5+ea8 RUdeIgVU4fuwwGmcr8Qax6xe/M4akeUt4liDarWLt1j9RuzFvaweu+CFDhbrfvVCFKvncdqCKavv +bmF46zB18kLx1hDORQoQQhKToeyrkInjs1/6+5YnFz40/MGRQXCE9OgyvLEGEaJT5vollPjv5mg qEvyXSYIxvb8cxN513fw10+kuVouDk8kBOguEiaingsWUyfCU60XoyfCcuMWn0+EESqglH+grJfQ iQsLs5w5/j1+5KQ3qFIrqAV7fr4gH+MueCV4JfdcECwIUX8uuCO4Y0wXXBFcuf5CoCJQcf0okBBI BLAF+wT7ohMFmwSb3qwXrBKsyrvIR/lo5TUo5TGU1Q+dsIby0SX5JXkUXfn7DmUrq0GKzayAM428 0so6kGKmKxtAilFXNoMUK1gBPZr74RWYYhdW4Hd3CK9g4PcorhwCKbZx5RhIsTPQFm1o7zPo5Bfo UtTyIkqBr95xbMPfV53vhW7c/b/3RTu8CaqSBL38GuqoAfWVh0YVQNMGocXtUGIMtPsodDLt73Uv QVH01/H/vQOMrDr8/XiSCOiZJLeK41H04JTMFJCpaQokXHMCJjuBHvKgqy84Jx7UimoC7khzR9ED A0W/gEmNrkAjRitw7cQWcM11y6pANxT9USImDquc9YFVFA+J5KCocqAMSPTTDqdsUPQU7cI4sNwM PKJTybeFgJ5+QUC9qB6geNo+FD05XWQELGnwBXp1vQTKs8EjPTEjAFd74gOKfneRi4NVtP7+H7gL MSLgsV9ylgEnDB1D1YvgM5464LFcuA6/o+GCjgu42guy/lLALVGfUfQ89w34/PmGwmxgbH0o0IYO svf8kXF1cJ9zfFFgEfrfNzm1L7CKiRKscpkq8hNFr56SqUTRayWqz1HUbJchEXx80eoH8MydLuBB fzBi1zY8Pw1uyXsDeqyrnYViwPy6ImBYpw7QahR0RVdlFl6h6JWffy59PWZUDavYTcEq9ttFwUnz xlFZ8PFNA1XQDdxyMtqPog6Wth/Bxx/unQUmPgJ1b4U+TwC6vwH3c8u6gAQ8Xwfm5S2JjuvAzSM0 cA9zPE1g26/mL55222AV172wiut/ok9Q1K1F9jKYtXlqaijqEW4UgaKeenZg3DzH75Pha9A8BiPt mREN5rdnyhvwqD2jCxKBT2qhbu0lQNthDvyq+SPA0z99v2Du74dVAiJglSdSonXAFlksWBWeau9R NEjMCHS3QdV24NqCFV3BaAcHBtwBPooOA/q+AWfG4AcFkUCPWmPg3fYzQIdhMJ7BNnNg9IKv/Lj/ 5fijP7BKzHpYJSZQFGRazLLsN7DqPNXA38QuG9uh6Iv718GcfNHnWoOiceIBXKBM9Edomgi0IApa exRKm4QOwVvKzGZDv3/4UhzVAKukBcAqad0YcCVvj8iB2fU2WN0SOG4Mxvyd8vU8YKybDJD+xBY4 F2MATdOHwirvZmu+Q2lx0CEt6Owm6LdPX/1eP4ZVCrpglcKNGC+glhxYxYUh6uCeC8kmYDYWrbPf CDzvBu6hyOcJ2C2KXsdUAN+lhUALnkNraFDaSehgDXTGBvpt57cbuZawSg0PVqndgQGrqfaMHLif Wjt1MOa1kSbgtF2Lt7cAjruB0ahbGygM/DcW1K2TS2uEFkRDa5KgbTTo4GHodCr067HvDpVasEpb C6zSNoypBy7IraAoba3GQaCYCdiRaGftwfyhGbsfADoFmgMfx4JRpUWlgeeR9rwgBlpjCW2zgA4E QrlU6JejP0KpkrDKwJW//7ZkiQFrecBeHuwbA7c1tIHuJmC/GvCzB6tqINQd3PNAbCDYGQZSYsHO NpDxdjcQWxALrRGBto5B++nQKTb087afdb1rYZWpvzN5KhTTCwyUB4936pEGuOYpHxOwX0152YM9 cMrdHayjKdfAYGjsbfiZt+A0N+VZEApvU90HbbWG9m+DfpqDrnz6vW2yA1ZZsYRVVowxw8Dz8mAu rZzRsAIeM2EAhezB+K9scgeju/w78D5wJRbMsWVeGnjulmcKwJpdnq6OhbYwoH2XoB+noMu5fx4v +aB/f/wvATBjUPm/o6ih83eHq4Lav4e6i0ADlaGxO/6ugJy/M/TveFSfhLaoQXs9oZMs6JLV/6vw //ven97Op0/9/dOqrWoIsm4UPFJJBNkQhyC/wTz5mYmivzMRZM0IgpCeON588Pd9O+HbkG4Cv/4P uHoKoH0xhg4AAAAJcEhZcwAAFiUAABYlAUlSJPAAAAGeaVRYdFhNTDpjb20uYWRvYmUueG1wAAAA AAA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJYTVAgQ29yZSA1 LjQuMCI+CiAgIDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8y Mi1yZGYtc3ludGF4LW5zIyI+CiAgICAgIDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiCiAg ICAgICAgICAgIHhtbG5zOmV4aWY9Imh0dHA6Ly9ucy5hZG9iZS5jb20vZXhpZi8xLjAvIj4KICAg ICAgICAgPGV4aWY6UGl4ZWxYRGltZW5zaW9uPjExODI8L2V4aWY6UGl4ZWxYRGltZW5zaW9uPgog ICAgICAgICA8ZXhpZjpQaXhlbFlEaW1lbnNpb24+MTk0PC9leGlmOlBpeGVsWURpbWVuc2lvbj4K ICAgICAgPC9yZGY6RGVzY3JpcHRpb24+CiAgIDwvcmRmOlJERj4KPC94OnhtcG1ldGE+Ch+enL8A AEAASURBVHgB7F0JXBXV/v9S5sXSQFuA7O/ay53FFreeWhmIJaiVqe9lor3KSs0yzUpNS7PcKpdW hRb3DclEfSaiiUshi7lguVEi+BKBFKGs+Z8z987MmblzL/fODFzQM5/PvXPmbL/f7/s7++p3obRU AH84AhwBjgBHgCPAEeAIcAQ4AhwBjgBHgCPAEeAIcAQ4AhYjcJXF8fHoOAIcAY4AR4AjwBHgCHAE OAIcAY4AR4AjwBHgCHAEOAIiAnzgiScEjgBHgCPAEeAIcAQ4AhwBjgBHgCPAEeAIcAQ4AhyBSkGA DzxVCqw8Uo4AR4AjwBHgCHAEOAIcAY4AR4AjwBHgCHAEOAIcAT7wxNMAR4AjwBHgCHAEOAIcAY4A R4AjwBHgCHAEOAIcAY5ApSDAB54qBVYeKUeAI8AR4AhwBDgCHAGOAEeAI8AR4AhwBDgCHAGOAB94 4mmAI8AR4AhwBDgCHAGOAEeAI8AR4AhwBDgCHAGOAEegUhDgA0+VAiuPlCPAEeAIcAQ4AhwBjgBH gCPAEeAIcAQ4AhwBjgBHgA888TTAEeAIcAQ4AhwBjgBHgCPAEeAIcAQ4AhwBjgBHgCNQKQjwgadK gZVHyhHgCHAEOAIcAY4AR4AjwBHgCHAEOAIcAY4AR4AjwAeeeBrgCHAEOAIcAY4AR4AjwBHgCHAE OAIcAY4AR4AjwBGoFAT4wFOlwMoj5QhwBDgCHAGOAEeAI8AR4AhwBDgCHAGOAEeAI8AR4ANPPA1w BDgCHAGOAEeAI8AR4AhwBDgCHAGOAEeAI8AR4AhUCgJ84KlSYOWRcgQ4AhwBjgBHgCPAEeAIcAQ4 AhwBjgBHgCPAEeAI8IEnngY4AhwBjgBHgCPAEeAIcAQ4AhwBjgBHgCPAEeAIcAQqBQE+8FQpsPJI OQIcAY4AR4AjwBHgCHAEOAIcAY4AR4AjwBHgCHAE+MATTwMcAY4AR4AjwBHgCHAEOAIcAY4AR4Aj wBHgCHAEOAKVggAfeKoUWHmkHAGOAEeAI8AR4AhwBDgCHAGOAEeAI8AR4AhwBDgCfOCJpwGOAEeA I8AR4AhwBDgCHAGOAEeAI8AR4AhwBDgCHIFKQYAPPFUKrDxSjgBHgCPAEeAIcAQ4AhwBjgBHgCPA EeAIcAQ4AhwBPvDE0wBHgCPAEeAIcAQ4AhwBjgBHgCPAEeAIcAQ4AhwBjkClIFCrUmLlkXIEOALm ETifh+1790O4OgThXUIRwHOreUx5DByBGoJA+akM7Mk6A6FhS3QLa1xDuOZsVhcEePqpLprgfHAE OAIcAY4AR4AjQBHwu1BaKtR0KPxQhtQVy3Digp8oinBdU/Tp15V31Gu6Yq9w/o/ExyDiuS0iCjN3 nsPwCNsVjoi++Dz/6+PCbe0IlP+chuU7fmLgqIO7+/ZHy0DGqpoZaZqOvycYz+37g3AWjZ2FqxHu X82Y1LBTnvMtlm/9FdDw6d+oE/rff7vGd9V9+lr/vqBfE9NP1aUITokjwBHgCHAEOAIcAV8gcHms oSg7iLHDnsf+v/52YBiNsJiuCL88pPNFujBFs7zgOE6evxaNmwfhShwqsUr+02fOyHrYcfAEGXhq IX9fzgav8eP5/3JODqZlO7llOoa/aB/AlSKbGR6LltV8ILdOM1KBiQNPyTj8UznC21Xf0pQOdCwd 9rBjoExC2f6u3WY+Yr+/3Wd1ga/17yv6NSn9qFMM/+IIXLkIFBw7jDJbCBo3DLhyQeCScwQ4Apct Aj4/46k4ayGuu/Zand9zyDyv4L59eoyOn2vR5Nk1KL8mBM++9G/ERoU6AvhrJ12ViLipUhHwu3QQ /W8PRUS7pli0v7xSaVXHyK2Un1048M/WTaqjuJbzZAi/WsE8/1uuicsnwoCIgRjSbwj5RcpC+deA SYmLxy45+A1Hy6bVd9CJMimQGjd66myCcSyeiHtC/EWFXyPyXzuELckcIlXhy9f69xX9mpR+qjA5 qEj5oQgJg29QtS37zt6u8iN9bH+vv8pfw0GLUCw51tC3nvx67fFOfQZh/NsrkVVw5bXpqlK15Tmf oVnb9mj9j6HILKtKypwWR6DmIaBXfl1J5XfN05idY583v8tOHXaBXTyOn5uP8LpkPyCZTT299ztd f8XfF4tn4Ax+4yM8/vNXqLvpKV1/3LLqEAi5yr7l0bfdjaqTV0vJKvk7DF2E5Lv+R3p19RFWjVc7 aOU3++0tfkKtW8Dzv1nUL9/wQR0GYj750UHNv77Zii/LpQGd6iszHcjptzAFzU6RM57I1vFWpB6s 7k9Qt6GYT37Sk7vyElo9sVj69Nnb1/r3Bf2amH58kkAuFWL313+qSG9+/RXsGpqGTuxW3KKdGDth g8pfUWI6Tl8aWrOPdCDyH15fcXmYvTkR9PfBm8DCPecw4Apqj6iUXukfdRwU+OR5pUPNCdR8BK70 8ruGatDnK56Ces1Axvq3ZPh6froLx34+iIPHT6Pv/9mtaSNqwJKjOLb/IHHbh4Sh7USHm4bMQ0ZK nLyE/4+/7AMe1JFPFtix4/81GIGbWqPrfd3Q9X5+sLgnWuT53xOUrmA/FfevqhU417eIIPk/Ct06 +G6bmhlAyi4p9bGZeCwL62v9VzH9mp5+LNO7m4iEWs3w8emTWDuxB+MrE+u2FTDfQEFaMnOUA0C3 jx4tnI+WPp+6VbHp9QeVf/rREzh2/BiSp9kxqNdjKvb9dNze3iZt7oxta/BGP3ubmxIY1mEKDldx WvZasMsgAO/DXAZK5CJUKgJXevldqeBWYuTVotps0bUnHqo9Cev/+AttA0MQdMvNosh+ZeeQk0tn fIPRomF9BDWvL9r/XXJUfHe64x400Z0JboI6f5XjyIYl+HzJOqQcJY0IIQTdHhuIUcMfRXAFS3FK jqYhcWUS1q1LxWkH+EJQBAb0H4DHyKHl2vB0RVZ20jpkkMPN66CUrMBqjT4Ph+FE6lp8vmiZTD8s diDGjXjUBc8OQha8jPCfszURu09eBX8Gm4B/dEPUnUFkpcA57NmwGYeJfJKzX9lF1G7XE7HE3ZLn /EGsXPk9BH/7jA+N/3oSv50+wZfMtq3dkIis9JM4TXQZFtUHo0YPdjogmKaZPVs3I3VvCjIyC3Ci IF9kj+pvyNBnMCQmVB6odMV3wYEUJK1cjo2bskT9BwcFIzjsXsTGRKGp3yGsS8rC9WT7ztOx1h+Y m7tnLbYd/FOlh4tCMPr0d31YvtXpz68sD3vStuNwDtlIQBKE/w1NENalI1reICB16TLk41qyCpGk 84D2iO1VMZ6ucK48+6rN/1bIIR7MnHZW1nsZaXWGRvdHeDCJnd5u+PUKLP9mGzJIWSYENUXPmGfw wmD9NEHT0PIvl2MtySv0EbIFBPe5DwOHDkAsGcR0t2mLpqWc7YlYtiIRGx3hg4OI/rv1Q19ybp7f gTVYu+93hD7yDPq0vV6Mn/0Tw+/diHWrN2FXjj3vUffgFp0Q1a8PeroYRLFS/pKcDGzbl4X8IlJe kQIrsFEE7u4QihC2cGOZZszlBYeQtCYJazfttpcdpKxpfEdL3EvSf/3idCz7YjMeeDsRz3S3qNxj aFPs9pB6RFXO0nx2fWf0f9B1WUPz66Y1O1Dk5wexXG7dHX3uuB6pX36Mj9btEeWgaaZPf5JmBnWt VP0z4nhsLM7cinUZv4m6UqV7GsP5Y/h65Q5cZOuFCFIvhLvG34z+KUkz+YeGN0ufxmHkqQ7pxwjf bJjys4eQujkVu3duQ+av5ch31N9B7aMxJO5p69obDFHBvz6aNKYFrfIkLPoGk/sMFfMKxXXbso8U R2KKfqGzUzuQejDCf0F6MjZl/y6n/7sf7U9WOJJyOH03so6cwMUyur2tPhqHhqHjHS3c5l/Kg9dP fdK2JoGKSTuHPlfXDUKThsr5nEHNm+Dlr3qiAznuInrKFuJjDnYdmoiWLlY9mc0/BVkp2L4vF+cI JX/Som7cOhzhd9yOQBzDii93iG1E2v74+5bOeKzb7bC6/DDDv9n6o7ag3PVUFdvBS3K2IjHNXvZS 3eM6Gwo2L8LSdHK+KKn7Hhs/HS9E1cWK9yZjzrpsZGVlIXLIe3j73afQUrfvZa78NIuf6fAWlD+U hz2p2Th8tojk6foIbtYSHUj7IxAHsWKpvY8j9m9c1GNm0p+oQx/+GSn/zLJ7xZffZgH0RXh6q52v f6UlPwsv+9eiJa4QMzdT5ufbSQ1EO2q/Ps/OZ2lpnjAtorZoP2HDcdkvlaEw41PZPw2j/+srbHHE pZW7tOSUkDC2h4twSnzzNXRLC78T2l19VYXh7PxEC+uPVQ7m1vPfV0gvKRXO73nHhWwfCIU0/eR9 J4zrFylERUYJUVGhjN9wux21d/x6hvYUJi5VdCzpIGO+M+6BfT4TTv+yU3jcZk8bWn2GPLdKpf8L uUkV6sHWdqpwlMgk0WXfNB3Gj2zH8K/oXEubzHjaZbdIfspHaWmhML+9PW1r6c3cc06XZzGchekv Y9VUl/LH9vPXuIULOwv1sWRxrdBsQfqhNHyV/yuUj6YRNz9Xeo/9NEM4tmuhBnMlTT6/Ul3+Xcj9 TnjZUTZq04/yHSd8c8RFWjr2X2FkxDUu6SlxQIiaudtJpsL9X7vMq0pYQj9bTd8y+c/8IEx7WJtG FbwmzZoklw/zdPJTxsJ/eyb73Awn2d3p11M31/VItNt8Vrj3XY/4pjpwV/5dMKl/rZwSnnV7LFTK Sk0+oLqfWVdd5rFpS082VdnLxmdS/6bzj1n6rCwGzD5PPwZ4ZtNMXvKbFabj9q9vqJS8J6VVpZwK F9bnOsptnXYF206VZDDCv17ZFzlhuptytK+wep+6/JTom31LGLjKr+ezP5H1o1d+ms0/hT+td1P/ 9BXGObXNaPvTwvLDZP0p4aekIaXuYe2iNPVHXtpnQqzUPg4LkzG2hTra1Kr2cx9hsU7dZUT3emmP 5dO9eYpzO9pH+EmyG8VfCm8k/0ph6ZvimTztIVl/avyihYdqX61xc/SfpHLTJH4sL74wm8XPDM/O ur/yym8z+FV1WJ9vtSOZE6jVAK0eqi0ad6Wng87v+JG1JhvfKYEtLEy03yQtfb6Uh7QDf4l2QTew m/BFK6e/mJen48NZk0AGhhxua/H41G+d/NFDyj7q3xxD3qUzOvZn5NTPsWHHLuzauAQTH5b2XgPP 9WqKObtLJG+E/6Z46bXnmcPNFaeYEaMQ6hfK0E9G3BRyILrixRKTOf6D8RI5nF06DFZiqOenZFaL rIm7qtXDWDRSfcNGFDlEdtpK++x52Yk0vLNmMzZt3oRNm7Kl4OSdabej9o7fxuyNmDJwu5P8tz8w EuPi7IfSSroqSnwSIf/XRT6Tpd4DMQRjZb3GxVNFDC0y25h/WLUcfvDL72Hp+mSsXThNxr/8x9fw 4vIcVTj6QdPbe91aI+6D/bJbvQcGY9KsOXhjRG/ZTjKwB+ZaIT+Nl24pvWPYSMQMHSIezjuEWd5O Fm64fixKf0dWPoWIR15zSWfdmjLZLTSyD0a+NRmt3DIme3drsAo/PSJVkv/1CHthR/VOD2YWD2Ue GiOHXPefCDTrNEz+pnmuxzVXy9+/nFf0gaJ9iG3eDTMy/nC4R2PaZ4nYtWsXklctICtKpXDxePD2 QUj5TY7GbvhtCzr+IwofZCjnnUTGvYK3Z72NUUw6lELZbGrFCz+vQoN2veW8StYEiPRTUlLE/Kfw TeiH1kfiz0oJaIn8v+1EbMMOeHU1g4nErOM9+aXJqvJB5UzkH/zUEodVXyxYtRsHyXaTjF1b8eFY df63kdKiUh5ySD4th6X8H+M4nJvO+6vRVlO3BXcmZdQTTuU3EI5RI3uDdGDkALT8m7z6iPwtG0zq X47HSwPV/f0Jb6sOfmfTlu3GCIzrF4MniHzSc+0/lDpAsoNZ/ZvOPybTnyyICYMv048JtqWgBYdS JSN5h2PsrAQkb0xGwrTHZft9b/XCssNK2SE7WGQYPC8RC4bRpRyZWLHJnk9y0zaJ5UbkhAR8OFLZ cqYlaYR/sc5/bpwq/W9+8xWmHAXCwtiNCWvxcPv6+PAHpv2pZaSSvn856NxukkmZzD/lPy5Gg388 pKp/aNtfagsCa/EO0zajdeHEhA5k9ZdF5YdJ/mGi/sjfPRfrpPYxWVEkPeXZjja1qv2ciPe2H5K8 mHrTtHffFHohhFI/0Ajr930Z0zV1HrWPmTAdI+X290RsY+pwK9ofpupfE/hT2ehjJP/aQ9rPIV42 ohGiX10vWWneyeKOHskyqt8QzHb0n0Q7s+lPitiHbzP4WcU2L7+tQrKS46nqkS5X9HbPto8Uy7Mt R75QjQ7T1S/21TX/FUgnhrj1FXaeUa8kUK94iBO+Pc7MDJHZyBH+0mx+nJCuWalxaNlzMr16D0wQ 0jVxU74PrX9L9gM4x8HOCFH+2Jn90sIf5FVdIu8a+q5w8dTeCv7pip/ZPZUVA71f3yhiLo7kT1RW JI1ZeVg160hXWqWsWiusXZUsrF0+W15VMHhWgpC8ntozv2VrhbSfGL1Io/3Me9Ej1zI401mjOGF1 Rr5M89j33wjxCcuEdM3KNcpHckK8sPTr3UKedlXTme/kGYd6PeY5zcCrR8yjhUVpmtUkdDabwUZO p4Rvq+WXdM6mJ90ZRgYzGob173X6O6ZeLTZtZaaMUWnhKWGtZibns3R13pN4NvK2Cj9f538jsmvD lJb84DTbHdhnppDumH2neTEjeY0QvyxZTuPUbsmwenKeiXw9UXaT4tfOxt00RFmFQt3YPGdrN0FI Y8tOkrYKM1Y6yl37LC4748+uQiXVlRDx8lJn+iRvLh2nrIYUV95o0i/l1aj8LP/kjBIV/4XHdwoT e9pkfCiP2vxUuFdZLftZlnPazts+Vw6vnbGWMLb6fejzfzlokpWnHtQXin8IFIMDTJjC/Svlcllb /pnVvyu5pTKVLStd+WX1zqYt1r8knzY+Lf/e6p+GtzL/eEufldFKs4QXrQsqM/1YxvPJH4SE+QnC hh2H5Lpeivts2geVmv+ktDo4PlM4tv5FkVbttrNIHUjKRke9P5+0CaR0optGTfDPpn9aPpGBe2HR dqUNUvhLujBnKLsam7Q/tW0cnfJUws+Tt4SBU/4i9f/uZexKaGY1AS2zzeYf0u6UdjxQ2QP7qMvv Y9+v1tSJ9pX4rEwsfrq6IXxK+cFJPpP8Uz5M1R8k3SQ72s/LZo1wpPNwYXZCosNeaT8vJfX+AZ2+ CYuFt2YWO7ZdkMK0+Uc4dinQVZXSyp0RS+39ALP6N42fWfxJeBEzE/n3WPJrcvkk9lf2Kv0Vmndn P1yHcVenXyvw81bnleLfBH5m+ZHKriu5/DaLYVWGZ6dSSJnvu8fmWL10fst3OH5pIOqTWSb2KUpc jX3nB6Fj/nFs+ZOueAqEuz3Q8/bMRscgZma0bms8+3F/zBVv2Skiu/aVh64WWvvOpw6LaCz9fLzu /uVG972ItSOXo6848xKPXT/NVu1zZw83nrD1Q3S/TaEv+LfG6LXjMCN6qkjH3Qy2wplnJqv4p7eD PbPmAGyD2+K5VRfx9Vs9cV/RHDxx7QaMdqwEIxUQJj/YSMWYUKs+7u4VJdr5XboJa2pdJc4Qdu3e H11bqbxW+EHPU2Af0ojH7jWj0YRJqUFt7kX/Nqwvu5ny0bX/Y+RMqjLk52Qi6yw5o4g8Nlsggps2 QL8YG9avKiVnGKjRp7ddzX52mT0S8v9V1mr0/Yf8aTeQ9PPCku9wKKSjOBvph4uyByvllyMlBjY9 sfauzKx/b9PfkZRP5NUgb23Nx6iOyvk9dA915AsrkIIY3PuqfUVg2SU666ykb1c8eWJfGfj5Iv97 ImuFfjSHtka+vhHLXlXO5aGzlLd364nbmYgEcuPS2wkXRBsyoIOEVyOhXp9IezL+6PbC+3h5ykbM KLuE/yWsx6HZAxFOssLfZLXSUJIv7M9opO0k5R+T36i9rcWDWLH3IzSI+I/orVwcf7KH+Pvwerzq WGlFOmv4ZnKsM32SN2MnbcTsrGZ4cWMZ6Mqb5P3PIk57TogB+Vn+qfyZSaMRbGdN/LeR891eWXMQ /l1ayXwyzk7G3CNkpUMTUgBco6xsCrhzGM7uDcRLr3+Fdm0rXmnrFKkBC28P51b8kzrsC1JmMsWc rfmDeOf1tug1Odup/GPxA7zXvwHRnINo9O7sgVwY4uKwcpZ/I/q3Mv8Yoa8nqxV2rvByFbfi37v0 4yo+r+3JZRqPxrUm55SRsz3J+Ub5F2gd44/A6wIRFHKnuGqTngNaGSsOy4rzRXaLL9kQ3LkfWWnz Hvb/uAXrtt+CJd/SVaCjEd0uELuL7avtCZPO4pnhX5X+o7EldzU63aiQsN3QCk/PS0VQvaYY9D5t 18Tj/dWj8OFjbE2g+DdjOr9lGBpcq6y01cY1OD4B9zK8mc0/+ZsXiHUSpUMGxXFwCbkpkCEa1Caa HAC/G3C0vagTqcLITgPGkwo/xp4xKumbsSRGs/yrYyNnHHlbf9BLZHq1FqMRfv7FEV0EupGVSNp6 WEvLkm8Gu85d2sutusahoST6LeQXjVhylpb9USqVk7/Z84DP8XNwJr28xl8KaDD/imfALZzjiCUa 63Pnq/IHzbvPfHkUwrEmeMnRTmLTr9X4SeJU+dsgflbwyctvK1CsujjYorvqqOpQahzajdh+RX5F 8CMHg+9ev1b0tWjHbhRN7U46K8nYSJYXRwTat1fV7XEPmiploCbGOHRq5dwpDgrtTvwtFv2qgpLD WaXte0AyPvnoXfxAy1SVJ1JBkUnzycxy370HC0jHST0II0aOvugZrnTc7XbA9UGNJaO1bwv5FxCC uC+Ook7A7Ri68Dwy540mi87tz4j4TEz34kBt84MT450GndwCRw6iXTnvHQyZ8qVbb5fOKx1K6lEg J9qecxzqGDFmg/OgkyM2Onj4TspH+H34B2jUs61cQbsiZl5+VzFXZO99+jt9JFeMtF6PmRjKDDqx lDo88wZ6TEpxDPyyLpVjNo6fr/O/CTyYEpmcYYa1ZNCpoqf81+PyoCEd0Hlvzh9k36kfOQKeeUh5 ZvM/Jjfw6daFw+Tw3nAyOF7ObNkbkzTSZWPX1uJf2P15Dp6e9SMimyuDL79kK9sDpn2s7jQwHJCh qkCSN98lZflI0XrvwZOk/JQatA6fBuT/JUPZojPhg2GqQSeJPi3XhnwwAa/+c4JkpXrbApWuzpRH wzGFuNLtpBENiX1d0vEll160CuuACV+tRTDdiVONn7o9HkFnRT0ypyGNaEciG9ryz6z+ZQJmDIze vY3GrP7N5h+z9L2Vt7L9e5t+rOKn/Oc0fPzeaIxfpGx3typud/HQjuOhzd+JXoQyMqTu3x6j+/qT wXhyLELPZNG+/eu9EXS1TZ4W25p4AOVD1Rc1mOKfSf8x8yapBp0k3unkQey4VeixoKdYB+efOic5 YX/8WExa9wv8PSmbSHnfKGYKpjtuh5YjqdAQjUXbF+AxzYUyZvNPcbF9SyMl/+Es/fqDtr0mrxqH L3tPFbnUNM3Vg1AVyqH2YJZ/GptV9YcyeUj6OdrBNTXb1n0xaU8oU9rGN5NDse2PP+pLgPvfgnvb XI31GY4BWOKhOuBnBf6G8++lQhz/xn5EQdTMSapBJ0lJYttn/ky81Nne9pHgpO5W4CfR8eXbMH4m meblt0kAfRCcKXJ8QJ0haQsIEvdz7/9rLXbvGYxdX5POExnACQsLxVWR9wAbt2Dp1i14sJ29g1zn Vpubjr+XhTZBoT65EUh6kqa8gSTpw827+JKy6kXrjS1YJLc/GBqSnSVvi/mnheSAubuR8lU4c9ZA HMZXwuyaO/kD+zRHiIcp1O/SMYwjt1fNLVPOqKFnmwzo1gp+pw4hgZxB5eopP7FP3n/dqEWIK2+i fUD4ICzeNcitn+rg6E36owV3fpa98Xc16WTrhRVlquWPkKuUfFId5NTnwff5X58v72zvDm/uWYBr lPPnaIB3X5vsWTjHTGduhpI3Wt2qM2LBxNbu0SlIe5SxIMayv+wrC6ltMZk0cLcSTigjunE8Recl k/7bU/nZmezw25wH/KXYAxrbzwzZ/9ffkpXyvvUhZCx7CREDZsl29CZN9sQ6yYGu+vRmAF4KV1Xv WnXpqn7PH7P695xS5fg0rX+T+cc0/cqBxXCs3qYfw4TYgL+uR4PQ/qyNOPB7b4sAnDiSgXWqsyNV 3qz5qCudAWqPrvuQZ4BVs+W4h/aOICe7KaucnDCykP/Yzi1kulqDX936ch28axsZ/HqxA6mvy3Dw 68/IOZoKf9pw2u96f/fGZDLw5Dw9S32SVY8/jURw+WmkfvI0c+5lJ3TTDDqJ8ZrMP+Vy9RGOYDfN r5sbVtLErUn+RQwuo/pDlIf86fdXyCBUc9Iod6zcsUL/luBnFn8z+fdSPjIcbQr/AP0cRWW0ubpV 14r0J4Lowz8z+FnBNi+/rUCxyuLwsFtf+fz43XgLGl/tR2buyRjTigQklV9CYJ8H0ZRwWJts2aJL Pk/NXIyEofaR9k53tK0kpuIQvyoG/mS7lsuH3vlctwnujnTdQHAZttIdrOE/9T31AZd0afcdL9+D AzMGumisOAtW5xpnO29stDPz7sLmb/5QHnQiZ+Jg65xhaMFstZxPAu//qD86vuh8+J/txiaOQc+/ yeon6wZWzMrvTl4r3ehMasjd9sHdosQ88RrjYB0CQlEeMi/pdNp1/Fph5Rv8rMk/VshvJC2S8zEQ /+9m9q0ILpgoKy9D4M1kKX9LeyMpoFkY8WnPFxeVcVsXoXWsmcGkJnVdN7xoSFtdJWWx2/V0YvUi LzKDWXQRALMNhI1XKMqXV4ax9pL59pg3cSEvDv9dm4SUH3Jwgmy/KaODY36nVZcmzB0YjqhjpbhX EUWKolq8vSk3KcOm9V9FUpcXK3pWk1Tsi0zon8ZpJP/QVdrSY5a+FI8v396mHyt43TT/P3I0MW8l Ys5TkaqVhX6XziGeXP7yHNmmWxUP3W7X45r3Hat7yTY7cQW9QluLkZX8n8gng/eOstmdrALsEw60 /vbXdLzchaNu9LgBVyV1YJ82aNkwiLgH4bHpqRAuNBJXvwMT8ei0O7Hj1e4uozeUf8hRCPYnBHXc 9Ej0B0JcsuLk4Lr8ULwa4t8R3Nr6g2DiBguF4+pl8iV+ZvA3lX/9Q9DZsQosN+c0UUgLXaWUFJzU tWctzeDHxlPVZlP4VQKzV3L5XQlwWh5l9SnayPlC0fddg/Ub/0LSonWioDGx94iVo99tnUEOBicD C8n4fJEdg7DGAdaBQWb+pa1W9Xq0QSw5r8hVpWwdUQtjspj/ve/FkNsZtogMxkxNQHTJbAx/Jxun 55PBHHKUTNaCgao9+K4kyThahAEtg1w5W2p/+PsdjvjGY+cXz6rOhJIIFRbbV8tJ39KbHfRMGrEc +U9MQLCbnFGQc5h0bpsi6Ab3qaQq5ZdkMfoObiytc5qIyUsi8eEgui1Heehs77LJg9x23BXf1piq DD+L84810huLpcM99yOyl1p3FcUUGNxE9jL1i28RN6OX/K010A5gTs4ZBDVvgQBHkgkSt0nbB65W bM0hed41/R+3KWtJ/xnmZnpbS9jNt/91ykz4yr05ZKusfsPvxy0Kbafoft2C2DZ90WrBPkyPewEP xKl9ULlT5z0t31pz4n+kcxjsPv+rY6i+X2b1b4lkTB70E++3UMdKy5/0zfY6Se1CdsRboX9HpEby j5X0tbJdCd9+5KbijE/sZ8zR7cVLX4x0FrsWWZWbqmzvcfZgrQ3dbrfiwF7knPoD1zcPU9oDAeqV UZSq1fzPmf0NRnfXn+Ar2rlWXoXepWcbuZ3aZ9GvOD2nCBcv1XE7eEP5vUhW6gfeEEyNug87qEYH tR57eyPWfNlNXBVObxWMjz6HuAj9ss9I/rHJA7fJ+HhdLjm3qpEuX9sSxujai5Ymyg82UiP8i+Et rz/icej0fLT8P5a76m/2GX4m8Deff+sj2LEKLGMmuXWz7zkM0OaP8wcxrs87FSrQMH7amMm5n89F v4TTQfY21un/nsao9FTSNtPPt9rg3nybx88bap75vZLLb88Q8q0v51rUZ/yQJZwN1UtkIjvbKyCh VjNEj1OfUh0UJM2SKAzXppfdSY/OwIHirp5NoPvHBz1uPxHl9y1jyF55+7YjKSr2XX72OLYv/Qiv jvsAmb+xLmRllkxfHb/kqyJ3yZ+3b6v4p3T3klVB0gHS9GDjpaP744lJ27BsbA+Rrf8lDEPrQUsg r47WMss0ANKyjmtdxYO/c9O3YcXSFcgqIJ03zUMbOtJDl7N7UkyKW8WO/uwIRlYpSBEw7yMbpokH 61Irp3hJ+pL0D7yN4e9uhzNnJGDRQbzTrz6aRbRHy55L9P2YlJ9hmUlPpHNVq2IkKkpf7txvjx5F ZnivFsl/8WRH9J20EjlEP/Sg9oIjuzC9X4hj1pPlsBLMJvBT5CN8+SD/W41GoJIV3Ebt3zxCHJin njaN6ej2uvGSoxlY+eE7mPz2ShQTrOnDhj89/xFM/1Z/gLb4xzWIuaERIu6KQOzCQ/bA5D+gebic dij9+MwS2Y01FGcuYVYcRqOjm21xNJyn8je6u5tMZt1/IrBMh37xDwsZ2rJ32VBeVCCubpj7nzAk stdEO3zQA/D/2TNG9l8VBv9aUn2mX59oeZD8O5VvDo+u3M3qX8uH9O2KnuSuepMLDOisMX22Lv/W qX4pylrscrWLWf2z8hvJP2bpq3Cw8EPCn17EolceaklJ/r1NP9p4vP8uwom/7Wn94qkip+B00HfT 9KfxpmM5pt7ApFMgLyzYNkcgc0aS7dZWCO0QhiaOFZTUX6eusWLMaoys5Z8e7j1kwV4nCUpy1mBw zHTZvmvrJrJZINvgryeDSUFBAeTt/hcUFAybTv3oUv912+OTda/ItJ7v8i5OOOoOamk2/zS+Sxlo /CJugG75vX/pWPQTD1WX2VAbTJQfZvmnjFhWf/ypHN+Rc0qnHj2fh+ztiVixZDPy9Rq6alS8/mLT vxJYv/yQ/FYH/Mzhby7/0nKh5yjleINhXerjjSV7UUAuR/Aju2OO7F2G2IYd5AFjBVe7yQr8tHEW 7EtGQlY22X67SfxlCw0RdGPFfQhtPJ59m8PPMxquffHy2zU21dWl2gw80cTTqrPSgQDGo5N9sFbE rkPUvxkMoxHRVJ2JSo4exo4MacCoDNk7s3GSGdgoOMa6x2PdZrV7zCi6Gcv+0K0UtOOddaoYZMcf /iBL/I+QwZJPX4lFg/9rg+hhL+L9ua8g5RdleKLkFIlfnlF3xE/CS4+aP2f6kj+jbzP804GbgiOZ +O9HT+NeZivapGe7iuxQ3fR+fpzMWlHik2TwaQGyjiryyY7k8MFOtewdiH1v3Yf3k/ajpLhYjP/r +OnoUP9GtPpnL8QNG4IRi5XOa0lOBrLTs5CdtQ0nzttnNulNhpuyiB21J78CEs9JHZqUv4jo+xws xKPH4LeRmnUSBWdOYP/WZRjftz4iHnlLZvEiSSupJN4cR1w0fOxri2X3zeQ2v8axE8U4RN5J2vk6 fhKuu+VOTNlo13ntEBejAgblpzrIZWTNJmYlPZNDN5M34gjrnp4jDxxQxk2nv8Au+GSN0rjcPOMJ tG9aH9de3wDNwu+X5ZZBqiyDQfzU+avq878ZOFjdZ+0jKwsdnbDl73+D7ANS+s8h+ShfVaZJNIVa 5MbOhKekTwxrTxs+21Fw1j5wWHKWbDFz5IOQdl0w5KXJePfNOeT2UHsQGn70yrFy+Dd7txTLv+yj BWLezT2wG1+8EYtb7v63fLB8A3+m6iBpZ8ZHA+Xwz3cOxvgFhH5xOf4oJ7/i09jx4Tjc0vlJ2U/s p9PQibRn6WNWfgQ/hDWjlBWwwwj9gWRgLfvASeQS/FZO749buo6wE3P8l5eeVJclzJzHv0Lri+UW bTiKz58CSnK2YninZ+U4gi1uxNGbvKRyTnwTvvccKHDQi8em1GxSNkppgbx/lNzs+NHyOzlpjei/ KHEeKTdzkO/ow9PBY4qDFJ/oTsqPfLqNkDym9U/iYHWo5V/ih5VPKntFBigP5PD3Ju3tdTqd/Ok1 9nNS/5L0V3AC28nBybd0UvRXq+5FnDx2EsVSx8uk/s3mH0vSnwSEwbcv049BlpVgZOLn3t61xW/a thhI2l607KFttu0rPxIHu/tO2SL7zyVpPftADk6S8s3sQ3E7Qtoch3+3tzm+iEsS45byjhw/6fDT +lfKQ/Y2hCMPVQL/SWO6o0GHcVixIRV7t6fi0zceQ0iEUv7W7bEQw7tfL7NnxlD+6yGxbJFkK0r8 RtU+onEHdnsJS4bVc5B5G6NnrBBxopMXZvOPre2TTNyZoOV337GfIGnFcqxYuRyTSfut47B5bkU0 U36Y5V9kzKL6wxZsP/aBxvnmfcOxLpPWwfli/+OLN57BdTffhk49ByHuyT5Yesh8+sf5c8hKU9oc YvoneY8+tR0X7tBjNpaR/pJc3oquAPWbQ/o41QI/M/hbkH8D7ngOG8aFOpABZjzZHc1uIu3nBg0Q 0X2o3G6SPTAGS/Bj4qPGwzuU8pJ+t3/9Zd1Dz6mb6ccC/IzywMtvo8j5ONyF0lKhuvyOJb9Gp73E H7ldTMVXackPwuM2cQqYuPcV0gsVvksLvxPIag05rBRH7TbzhUIinyt34GPRXZL/0KrXneKQ4tK+ be3GCOln7DyUFv6gS1+K3zV9IkeJIofEh9G3Uf4L936gK7eMH8H+IftyEo2/cGEnoweJ72NfK3rU 4sZ+z9ueL+rYNT72tMCGIVe76tK8kPtfod3VV2n40wvP2qn5z9v+mYfhRws781zrzVv5KW6udKCW neUdwsyd5xz4WZf+8tI+c6HraGHB5wvkdD5vj522pHMr397i5yr9yOnXRfkg5U+Jd6P5Rwpv9O2N 7iWZtLRKSwuF5Ik9PEy/ECJeXirkacr+3fP/7VH48OfjhTxNuSXSn/aQR+HJSkpVuWuJ/CU/ChMj antEX8lTSv4/n/2Jx2HJdiBV3aTVhZHvjPme687Ov8K7K/zumpEm8unKnXReVXowo39XNBSs1WWX Xjo+m/auxzqg8UryUbxLTerfbP4xS99ImmHDVIf0w/LjrTkv5U2vdE/1r5eGvKXrCrfabZS8QdPG op7i/k8nHqU0aJZ/dftWnVe0eahej6nCAZ12l7eyU/+Urn7bjvKglDFi3Gec29lyG8Rk/VNa8rOw YBhZ4u5o/7t/q9v/ktymyg+T/FtZf5ABDA9wiHPbBpUwqei95JFrdWnNSC8VtDLdNSNdrE8WqcLY 04jZ8lNLy53+9epfs+HN5l8J592fT9DFk/YXExa+7HBzTr9m8ZPo0zfNSy/bly866IUL63Nd91fY sEbNVuHnLf0rvfz2Fq/q4p+ZtiZZ3cfPzQ1byBz8K6a9bKYGOio8aFx30U48dJxdcFIrEBHkYHLt c0N3xyy4C/fw59UzRo16vYrCn3bibTfXzA5++T1s2HschXumoKW0LJssc45oa1/lw/Igx0/p67iH DYn1+NY2Nl5XZqP82wKDxcO1tfF279vcvtWNjGg//ExrrTPq9XhUOfuAcQ26/zVkrJolb79hnBDa 9wUsWJaCo4WliLvTgX+tYHTWwYcNJ5ltbe/RpYkbuyA1cx1GRjBTH45A9R4YTK4BPo4LuUkqnmzt eqviCrhzEDlc+Ad8OPIBiZzqbQsdjAVf70Zh6VSEO1ZrqDw4PryWn4SzBTZR8aYXr9ouHCHSBKSF 6Y/e2rei6H849n0akjcmk18Kdn1/CIUlq/HEP+u6nblR82f8y2v8XOTvKsv/xkUVQ9LD7aVtjhVF JedJjUe6aq/rK0k4tmMxBoc75wG792iMnZVAbiw6h+8mxzqd09Yu7hOczliPsVHq1aQSqci4ydiQ dhw7330MAZqtGiL9F1YgL20VRqrCh0vBUe+BEVhDwq99tatqC60l8pMy6pXU40ic/bhMjzWMnLkR h75frCrnaP4PdMihXGMNcptWFBuUMYdj2rI95IKFXoydNcaARh28jCiabL+1B3FVfne8tYHowZV7 vz5tVXowo39vdEiZkvOmXQTx3z/8eRxLWaiTF6IxPyUTu5erz3jpydxASrfjm9G/2fxjlj4DgyFj dUg/hhh3BAro8BIObZynyp9SfJFx05F2/ByOJb8pWYnv7tGO9onK1ruPgCBllQIbsudAJW6aNlpH 9mCdZXO3JvY8ZiX/C/edQ97e9Zg+orcKj9DIIYj/OhP5SaPRhG3/ytwYMJB80+/xOroB2fJR9EC2 3H2R+jHDk9IGMZ9/bsETc8/gEMn/o/q1Y/gJRwypd2i9Ubj/S8be2Wiq/DBZf1pZf3SftBGJU5UV nqykMSPewBJSFhaWznfbBmXDuDO3iu6n4xyNVvXJKlbNLWzdmtwg+g1ufhsTJlqsQ83q3yx+ZsNb lX/bPToepYWnkLFjq9h+3pCSgoz99v5i1+vs59gx4MlGs/jJERGD8Ns+zChzLGcn3w3HvFl5q50c hK3Cj5XDE/MVX357AlI19ONHR8CqIV++Z4ksQc3NOwMb2Q+P8xfJLXb1EXQtWQ5+jfMAl++Z1eGg mvBPtylK103bAgJ0zxbQ4d6UVUlBPvLJNh/b1eTcsBsCcX2gfkfaLRGCXwHdKhlMamCi/zqB9XH9 dd7H4wv53cplwrEs8zPc0HmkGMO8na4PGDVBwimoz/CrJvnHCRAPLcrPnsbJ365C8K3+uFjkffql 2+NO51+F+o7w9DBamxedHRo+P/8PBDYJxsUTp0k+CkGQm6uGPRTLI290+XX+qXLUubEOLpK8G+ji TBNtZCWn8iEEBCOATijQ7XUlJbhYRsp+8RZTUv6T81OulMes/s3iRMtwgjz8r66PAC+3NRrVP8uz mfxjBX2WlyvJTLeF5p/JJ9t6/GAjBU7gDUHyJQY1AQej/PtdOoinb+oongNDVhMjrh3T1iBlkfjU lLYnYdZM/hFl1ZG5PGcxGkT8hzj3RXrhYrR0Ux+ZKT8ofSP8W15/0DqotASgYwikLXv9dTWn/+EL /KzA32j+pWmmoke5VbsvdpL0G+4m/RrBT6JfsOF1NHtktvSJVUdLER0if1aqoTLxq1TGHZEb5f9y K78rG2s+8FTZCPP4OQKXAQJ+5OaZZYNvw9BVdNYmGutzV1f6LMplABsXgSPAEeAIcAQ4Am4RYDsu dMVTZdw+5ZaBGuAoHP4Kdds/RTglA08lZODJseKzBrDOWbzSESjah2eadhcHlm1tp+L43tFOK86t gmjT+BD5IH56S+jPlbBC2ypeL5d4ePntnSZ50e0dXtw3R+CyR6AgPRmbsn9HYOMg+J8vgn/dMix9 /Sl8kfmnKHvttj3Q3nHTz2UPBheQI8AR4AhwBDgClYUAWdlSfOwEMi/9LVI4ceokSkKCcPESWfN3 qc4VtdJSCzG9GOMiWfFTp1YdFJ0hq3/Eh6yKO1mMpo2rZgW9lif+zRFwhQC9ZCN7QyIyislq86Ag lJ0vQ2D5IYwd+jr2/2XP320H3Ftpg050ACTlY2VL34ynrD8WwJXsV6w9L7+9Vj1f8eQ1ZDwAR+Dy RYBWXDE3dHBzllM4Vh9JQc9bma0Aly8cXDKOAEeAI8AR4AhUCgK0o7ps8K2OlcT6JEYsPYzpsY30 HS9jW2Vrnb6Q5HB55H8fpzqnTt8nt+UIVA0C5Tmfke2g9uMo9Cja2k3Avp3j0aSSlnzQnQnLX4lC 3Af7cdOQr3Bigd4ZXnqccTsjCPDy2whqQLU6XNyYCDwUR4AjYBkC5LDRYcOdD5InN9xg5NTPceBM Gh90sgxsHhFHgCPAEeAIcAQ4At4iUDvEzSE53kbG/XMELEDAv3FnjPB3vtzFFtob0xK24XglDjpR 9gUEov/0PbhQcBY5H/BBJwtUyqOoBAT4iqdKAJVHyRGo6Qj4kQOVy/8qJwfDkwN+ye0mtW18hVNN 1ynnnyPAEeAIcASqFwL0QNviC+X6TAnkUGkjl6Pox1bjbP+4UCy2QfQYt13Ht9rp4cLtfI/AHyQ/ l5F8DZJ/bf42ry5m8T33nANvEODltzdo2f3ygSfvMeMhOAIcAY4AR4AjwBHgCHAEOAIcAY4AR4Aj wBHgCHAEPECAb7XzACTuhSPAEeAIcAQ4AhwBjgBHgCPAEeAIcAQ4AhwBjgBHwHsE+MCT95jxEBwB jgBHgCPAEeAIcAQ4AhwBjgBHgCPAEeAIcAQ4Ah4gwAeePACJe+EIcAQ4AhwBjgBHgCPAEeAIcAQ4 AhwBjgBHgCPAEfAeAT7w5D1mPARHgCPAEeAIcAQ4AhwBjgBHgCPAEeAIcAQ4AhwBjoAHCNTywA/3 whHgCNREBM7nYfve/RCuDkF4l1AE8NzunRY5ft7hxX2rECg/lYE9WWcgNGyJbmGNVW78gyNQ3RHg 6be6a4jzxxHgCHAEOAIcgZqFAL/Vrjrp6/xBrFz5PS5qeBJsTdGnf1c+cKDB5bL7tFj/R+JjEPHc FhGmmTvPYXiE7bKDrDIFqjL8NHr3b9QJ/e+/vTJFszbums6/A43ynG+xfOuvgL8aHiP68EMZ4u8J xnP7/iCRRWNn4WqEa+JVU+FfegiUnz2OPXv24vDJItHZ398f/kFN0LVrNwTX1QvB7axAgKdfK1D0 MI7LpPz0UFruTYtATdd/Tedfqw/+fVkhUP5zGpbv+ImRqQ7u7tsfLQMZK26sUgT4Gogqhds9sSMr X8EQx0CB2mc0wvp1RTjXlhqWy+zLav2fPnNGRmjHwRNk4KmF/M0NFSNgFL+CY4dRZgtB44YBFRMh PspPbCX5fqzst3ab+Yj9/nb4apiwpvMvA+mFgXa0lw572DFQpA5oVB91mpECWxx4Ssbhn8oR3q5q NOqt/tTSVo8vv7KD+HhMHEYv2q/LUN0eC5GbNNBneUSXqcvM0lfpt6bD6G3+q+nlf03Xl5Z/b/Wn De/td03Xf3Xj31v8uf/LG4GTW6Zj+Iv2CXhJ0pnhsWjJJ+IlOKr8XS3OeMpO6I/rrr3W7a9zx354 dty7SM0sqHKQqorg7Q+MxAv9YvFE3BPiLzYq1EGazPJWFROcjs8QsFr/bJr5Z+smPpOrphI2gl95 zmdo1rY9Wv9jKDLLPJPcdmMExg2NQVT4NWKA2iEsZc/isMpXTeffKA4CKWGjp87GEKb8NauPi8cu OdgJR8umVTPoZER/RjGrzHC73x+qGnQKjYyS8welW6uuUJnkedwEAV+k35oOvJH8V9PL/5quM5Z/ I/pjwxsx13T9Vyf+jeDPw1zeCAREDCTtuiHkFykL6s8XcchY+MJQLeA/np5aoexZ2RtBf5/PfQOD P83Eh/+qQVtRKpTO4eHWHpj6VQ/Zt/DzV6i76Sn5mxsucwQs1n+HoYuQfNf/AKE+wqpotcXlpCFj +NVxQODFYHFwF0yc1wW5K/+DVk8s9jGENZ1/4/AFdRuK+eQnPbkrLxnWBx3I6rcwBc1OkTOermuK VlW2LcyA/iSBq8nb79IxrH3nkIOb0Ug7PhFhQfaBO79LZSi+UA7bdQF8tVMl6st36bcShaqSqA3k v5pe/lcJrlVFxID+zLJW0/Vfrfg3qwwe/nJDIKjDQMwnP79LB/HXN1vxZbk0IXi5SVpz5KkWA099 5hzGsVfKUZyzBBEPvU7Qi8aavQsQ3sB+2lHxuXzs/no2hk9ZLyL7xX/C0a3DOQy4rWpmkX2lzj/+ 8vMVaU63GiBgWv83tUbX+6qBIDWVBZP4ebjgSUan7FL1yu81nX8ZWIMGs/q4vkUEurYwSNyCYN7q zwKSFkVRhiLBvqLp+ZUj5UEnGrlQyx/XB/huRaBFAtaIaHydfmsESG6Y9Db/mS1v3LBiyMlb/g0R qcaBqlr+mq7/6sZ/NU5anDVfIMDHm3yBui7NajHwJNSqj6CGwM2/3+xg0h+NWwYhyMFd0C1NcHub FYi6ayqa9Z4q+lmReoIMPOm36kuOpiFxZRLWrUvFaUeMQlAEBvQfgMfIWUnB7tqt9Car5CRsWrcR KUcLSEs3BMG3BaNjl+5oeWMhNi2Jx98PzMWHz96tCyi1LMkh9NcmYePuHHJyiP2xNWyFnlGx6BPZ AVa3m3NTE7Ht2B8g567Kz0XBHx1iYtCSzrSfP4akr78nvKg7tio/ckjCvxH8HAcMCv72GSO/sou4 vl1PRN0ZREaay5C9ORFrNyQiK/0kThNMw6L6YNTowdYd8GYhfW/lp7f/JG3OBpWdyn1TpwHo3tKG giOZyMrMQf6FMpSRhBB8ewS60dvlGD0xsFtizN2zFtsO/qlJC8FeHU7vrfwqxi3IP6r4KvgoydmK xLTfVPISRSC0F0n7msMDtfnED6VkNUp7xMaEyqsnzOJX29FhpmwbXc5b51Yb/P46jf9+8Tni1+3B iYJ8CEFNMWDQeDzTv53MawXQGHKuDvxTHSz/cjnWkrKCPkK2gOA+92Hg0AGIvV/RlSEBKzEQPSdq T9I6HL7gJ2+NFtPY9Z3R/0HPVuiWFxxC0pokrN20W9Q7rX8a39ES93bpiPrF6Vj2xWY88HYinuke pCuJFfrTjdhDS4pBzt6NWLd6E3bl5Muhglt0QlS/PujZwfXZZeX5p1Hkdy3wW6Y8KxlStxglBQIu so3GuqS9EGDNpJNT+XEdKbc3L8LSdHI+HsH+sfHT8UJUXax4bzLmrMtGVlYWIoe8h7fffcpet8oS 2g3lZw8hdXMqdu/chsxfy5FP8i59gtpHY0jc04gl9aH2KUhPxqbs38UyjNYTdz/an6yQIzim70bW kRO4WFZOgtRH49AwdLyjhVP+Nxte4sdo+vUry8OmNTuI7vzE+q926+7oc8f1SP3yY3zElF99+j+D FwZ1deJfoi+9aR7Yk5qNw2eLCCb1EdysJTp0CEUgDmLF0u/levb6CNK+CFfjaTb/SDwYfVuR/8yU /0bSHyurFfyz8VVkrg75j+XRrPxi+bc9EctWJGKjo/4KJpchhHXrh74xXeF3YA3W7vsdoY88gz5t r2dJy2Yz+pcjMWgwKz8la5Z/M/W/FfnfDH2DsEO82CTtrNyOpfVAaHR/hAeTGGmb+usVWP7NNmSQ PiltC/aMIWXpYP0Lp8zwbzb9Gq3/rZS/JCcD2/ZlIb+ItMNIXyuwUQTuJvVHCNtBdqEoK9KPi6i5 NYNAtbrVrjxnMRpE/Iew1xfphYvRkiQa9qFL5Z6+qaPYKI2Zm0kOg1U35v0uncOKt57AkHe3sMGc zPM3HMcQnYZ7+Y+E/t2UvvunXo95OJk01KkB5Vd2DJ+PGYjhLg5EtccajlnJy/BMt0buiRDXivCg EVBM+t/YAev/+Mspvtj4DCx5rAXKf5xH5FIOL2Y9vkVuOxvtOGTNDH7sDWBS/IF9PsOhua0w9rZu ckdCcqPvkOdW4ecZvVgrw2Yr6BuVP+ejTmj/YpbMe70HxuCl/9uEN1ykg2krMzHKg46oJ/qXiRID LfSVm7RYF2DmHnKrXQXb7YzKL1Eym3+keDx9u5OXTdc0Ptd+w8mNY2nijWOu/bjHrzhzCYa/sZKg T+iQjuZG0jmljy00Et2D1YO9fvl18Pin8eijo4sjS59CxLCvxLCu/mjZk0PKHs+OLXcVi9q+2vD/ 2z68EXsfZmTQm+BcPXH45shsdCeDc5X9SPrw9CBrv7J96HBTV+z/628Na57daifR0wR2+oyam4E1 w5RJF6v050TIS4vyo99i1J19dct6JSqiv2yiP81qZeEw2Vbe3tNt5frtA4WGZyZ3+b3iGKbgaMkY BDNTd8Wps3BL9AS3Qdu/vgE7Xu0u+9HjIXLCdAS9+7oLHPti9b5F6EkmNuhjNrzMCI3LYPp1175g 46dmW9upOJg2WoWb5IfKkvreYES/al/ZLtnb39F4qPapDkwDAABAAElEQVRmTTvnAxSWPim3w4zm HzUd77+syn+e8O+u/DeS/qi0VvHvLXJ6adfzOKzJf5bKn78T4x/uhQ8y/qxQjKiZu7HmWekMV7t3 s/qvkKgLD1bp3zT/Jut/T+hTCLT1pwyLSfpyPF4aXOWD2E8zMKftPjTrNEw3xudXHsc7DzID72b5 N5l+jdb/lslPFh+8P/wevLqatsSdn0mzJmHN2DfF9tk80h+K07TBTacfZ5LcxhUCF0pLheryK8z4 lK6vJ7++QnqhM1/ns79wuEMghYeK79LSPGF2T3/ZncYzcurnwoYdu4RdG5cIEx+uo3J7a2u+JvxR YUKda2Q/Y+clCvt+Oi4cytwlJM5/Wban8ZKOiFCowa205EdhhL8SXqafkiIkr4oXRkbZVHGMWHpY RV9PBxXhIYVJmT9GIAfhMvFHCzFxk4WduQ4Mc78T3hgxShis5yfP7scsfheOJAnj4p4QyMHoQrur r2J4ofq0/+o9ECPEMjiQgakKMZBkrPBtkr4Z+fO2fyaMGhrjUu6wsDAZAwmLmJm7K5TdU/2z2Owm aSFm6BBRD0P6tZPpkoLWLT0z8lP6paXm8g8rgzfmQ+tnqnC3hQ4msjNpn8mnuxdOEJ4Y8YSMCdVF zIRlQh7rxwB++2Y761fSs977rhlpurrIWPhvFW9AuDB26kfCnImDVfZjko7rhvcGN9ZvteA/7zuh xzVXM3JGC9M+SxR27dpFys8FwkO11W7rpbKN0R0rkxVmSR965b1e/KUlPwsJYwfL+S9GLm/16zNV HLlJTDruKyxYtVs4SOqfjF1bhQ/H9mZwIWl2bqZK/1bpT8WPl7iydbM9zdv1l0Lqv7ULp2l0C2Fx tqY8OqLU7Xp5Rm0XJ6SXOLcPjPB/aP08gRw6qsK3ft+XhekazCn9mAnTVfX4wn1qGTJm92DiIXl3 VoKQvDFZSJj2OGMPQRuOlktaHlh5w8JqqcJTt5nblfaL2fASbobTr9i+eELTBqF1frgwamRvgQzA q/gfHK9Ov5R+aWmhsGiYeGK8yi+LA2uO6jdEmL2SicdE/pHkN/q2Kv9J5Y0ip3flv9H0ZxX/RvCr DvnPEvlV6c/e3o2Me0V4e9bbwiimHSbpVluGU+zM6t8I/jSMJfKb5d9s/a/C37v6U8TNLH0iv1H8 abhjyfPENvsTpB8hpRHtO6pfrKoejY0/pNA0y78KP+/Tr9n637T8uf9VYaPFTvvt1B9SyW8g/ZjU v5m0UxPDojoxzXa0dzIDT6UlhcKhHYtVnY8JG5SGF5Xh0LLn5Axb74EJQvoZ54Lg0Pq3ZD8Aabyy NAp/kOMfHK8zKEQS9uM2ewOQzDo5DTylTFManbZ2Y4SdjgEdFt+MZS8x9MOFijpPLB4sr2ycsjnv v0zHZYqqMy35yUt5U6b/FtNwpe5m8ZNo0PeiR66V6dgzfJywOkPR17HvvxHiE5YJ6ToYsfEYNRuh b4X8WroTE/YIhY4OUmnhKWHjbPXAgrYDopXXK/3rFHznsz+R9eBU0Gr8m5W/1GT+0cruzffZ7VNk Ob/KYfL9mZ/JoMVSYUOaeqBG0lPIc18rFbcGD0rfY/xO/kDorBXWrkoWls0a4eAlXJidkOiwp272 39JlycIBnbKJ0mMbnoF95glHmc514V5pUB4CHbDVDnx7g5eTXx/zTzudS4bVk3UY+XqikMfITvml fpKnPST7uWmI8+C/k1w6OvXGj6QPTweetHEf+vxfDn4rHnhi9ftZFpOGHTLkbZ8ry66ddLlgkf60 /Hv6TQetp0XUlvmLeHmps/5KTglLx4XKfsjKF+GoRj+lhYXC6f+dEwqPb5Hr4qiZKcK5c+eE06dP yz+pTPWUv4r8lZb8INftbLpKmajU6SOW2gc5Sgu/k3lzmjwiekiYn0Amu5gOgUPGs2kfyLI76Y/4 YXmw15nRwqLtSrlV+Eu6MGeoMpEgtl+YPGI2vB5G3qRfGl7xD6Fej6nCAaZ9Vbh/pdw+0Ws/HUt+ TcaHyrZ6r9JeoLLPVk0ckvzEyE5pm8o/Dh3pYeCRnUX5TypvqP4Nlf9G059F/HuElQ7WbNr1Sf4z Kb84aMq0eW3tJghpx9WD0oUZK1Ud44oGngzpXwdbj3RiUn6JhtH0a0X9byb/W0FfwsDsm80L0mBJ YJ+ZQrpjoo3ympG8Rogn7UipjWSWfxpeahNTmt6mX6vqf4qdUflZ/mndw+a/wuM7hYk91Qs/tP0h M+nHrM6vxPDMQnGS5KrNsxZdGpCzHlw8pHLC6O7K/mg/FJFbcD51+I7G0s/H656/0Oi+F7F25HL0 /WA/8RuPXT/NRkvNcjsaSf7Rwyi+1AgBLDo3dsFHv+xGm1fGI691W3l5N/VPt7vNeiOFGskTjW82 TUG45nwZ6nJ7zJvYPTsHHV+kS8kzMXddDu5ltkxQP4afwC54Z0xb9Honm0QxEUt+eArD71RjlPDi m47o38VQjZtV+NFlk+xDCgHsXjMaTRgsg9rci/5tWF/WmY3QtyL9aOmSFXUY3VHBXyBnVfzzmU+Q 0TAAEY/NFwV+acpqDFgyyDrhNTF5eji5FfKzpL3NP2xYI+Y6bXuRbRiTxW0YKzYfQV/HFtxt8+/G g5MLxSjJIC/uvZEYz+/DknX0zBTgyQfvEt+u/jzFD/QQ8l6txWiEn39xREfO8yLXt7Zk0r0rOs72 ZDvSoqGq7Si2tv/CkmEvYtDC33HpvHr7nnN4L218zL9QtBNvJ1wQmaZbcRJejXTaSkhv2er2wvt4 ecpGzCi7hP8lrMeh2QPFLZJeSltl3o0etpp75AjQ5B/ANYqeA+4chrN7A/HS61+hXVtN5WK5/ryD 6O/D6/GqY3tk7baz8M3kWGf9kXMcYydtxOysZnhxYxnZ/v0akvc/q1ruLpAzGGiJ6WcLRH1yXhB9 bLb6qG2ziT/RojL+mPOjOndpL9ftjUNDCTW6bT8asd2kbf3K/v+Tv6nrOloOPBrXmmxZOyeez5RP bt8jJ70h8LpABIXcScqoq8Uyipzg5iwFwwOltyV3NTrR8srx2G5ohafnpSKoXlMMer+Y2Mbj/dWj 8OFjDr7MhpcIMW9v06/in7TBviB1vgIVbM0fxDuvk/bJ5GxcXZdxIPRo3blt4RwH5Wisz51vL6sd NlT2Z748CuFYE7zkSGekCABclK1e5x8HHcMvy/OfwfLfaPqznH8vkWTSrk/yn0n5//55FYauKnUI TW7h3En6H5q0aWvxIFbs/chxlAg5RkNcVOIKJ4P6dxVdRfYm5XeO3jv+ra7/vc3/VtN3xsMLGyYv 0FCRr2/EsleVc/FoO+j2bj0h1UbUj1n+zaZfq+p/KgsMyM/yT9uPmUlkK7cYmf3PRs53fmXNQfh3 aSW3UxhnJ6O36ccpAm5RIQKa4rFC/z73QFaR4AXtAbvkcMu0A9IZR8n45KN38QNtE6rbN2QoV8Bk cdDJLsbegwWk4es4a6lWIFpd5Qc6JLT5rT645S37GS1Rd96C+kIggm8KROPW4YgcvwItGqrPF/n7 xD757IGomZPQSdMvYEELHfIKHnolWfS/59t0lJOBJ3VsrG/vzN2GjQHeGSwGemfRFjLw1E+O4GLm KjnTjVnZX90xsAI/mRJrGO806MS6Vr7ZQ/oWy0/PYXiWGXRi5WzR+zVMi/hU1EXpz8WgXQgrz+th aXlstkJ+E/nHYz5deBT8W2PQ49diPRmUSVn3HYrJwFPgpTxse6cEtrAwlJMzlzZ9V4B7+wSRmzN3 YcuftKyIRk9m8NVF1F5bK4NVRfZK1EAJG9inC1ppyi7KSKvOscDCr7zmyZsAvuC//Nfj8rlIdEDi vTnkjKdyP6imHkh5bvM/Jg462eVZi8Pk8OZwzVlB3shanfzaApVSYMqj4ZhCmAuN7IMIMlCNumTg IjAErcI6YMJXaxFML4xw8VihPxdRu7T+JVs5327ax67PHxPI8dBDprxLBp5GinHtPXiS1L9sE9ol icp1YPKoUKYMCt1MDrW2P/6oL+VH/1twbxsygJQhtTcU1sp/TsPH743GeBdn+yk+dUwMDzHzSBuC GXSSfNNOR+y4VeixoKdYhuWfOic5qQZhDIVXYjJtqtvjEXTWaQOFNKIDednOA+eXCnH8G/u5OLT9 JE4QaLgQ0878mXipsz3tSOqQvFmVf6T4jL6tyH9Gy39T6c8hsBX8e40dk/Z9lv9MyF9+XhmAHpM0 0mnQScLD1uJf2P15Dp6e9SMim+tkEIdHo/qX6Jh5W6F/b/m3ov43k/+toG8Gc1VYJi/QM3DXkkGn ih6z/JtNv5bW/wbk/yUjVYZowgfDVINOkoOAEAz5YAJe/af+GYxm0o9Eg789R4BRs+eBqsLnorTj 6H7zReSkLkL0sJkOkuG4u6vOrU5ECmmGlHpMmvIGkjxgsvjSRdmXUOsWjN8VjxkRj8t25dmbkUQX EGme8OeXYuu7sfKAkVJYA/8r0h4sqw4skBHdk3/RVeXk9oeGgXIcal/GvvxufQhkyaE4+/K/hJlI mdJPbMTRGcV1s19xRDoacVE3qwlYgJ86QvtXYJ/mCPFhCvOYvsXy3/dYFzd69Udwc0KQzNz+8eN3 OF423PerNiyQ30z+0Us73tp17EM6JAun4vct3+Dg+aHoVJRmH6RwHPT95YpvMb3PIJzcsUmMmnaO WrnpwHtL30r/lq9ospI5D+Lymv9r7DdhSlG/+9pkyej+rZkdc++5mruSsptsxUbEgFkyo/QmUJ3q B2TbF6bHVoMBGwenZX/R4XP7U/wXXeXjeipFKCMDso6n6Lxkqp7vPxyrrtTckUEoR/mtsv91PRqE 9ldZ0YHDe1sE4MSRDKzbpKdJlXf5I7ZzC9msNfiRG/1CyAQZfXZtO4DyFzs4oW02vJamt9+1xKOa vAh1KR8ZjgP5/d3cVmhzdytRDc4/WqS8Lj9pBBamPy0/vvr2Vf7zVt7cjM1ykFa3uh5Qop7aPToF aY/K3nUNhvSvG5NvLL3m34r630z+t4J+JUB9d3hzz2I1yb/Z9FtZ9b+n8isrbcmpgrdd7xKzgMZh IOcPy5OcKo9m0o8qIv7hCQI+HBZwx14cwtoGIYhwFzRwCjJqXUTEE3R7UiYeajYTR0vJbTIug8ch flUM/C8psxBOXuldlXWb4O5IdQPP1uJhlJbch+zNm7A2NRWHTxWhjMxm0Nm1Y9/+V06wmfMGYlrk cUzu4bhRgLnE4v8aqztRWtp+pPEUXsue+H/PKSZLbt0107Wh3X+LM6IvTgdW0VnBTHyy7gjZync7 BNIokZYCx346WLXtzTlG4/hp4/K6AtJGYPLbGH3z8v9ykpmJNilD1Qc3Lr/h/GOBkEEduqPHNdPJ SoBk7D5cgoanlcYgjb4ocSdyLtyHtJXbRWr9/uVucNAChsjqDldbQayIvfLj8A3/gX2mIv7fzSBu pXEhZFl5GQJvJlsZHTd7ufBW46zpVuwLeXH479okpPyQgxPF+aT+IWL4ncYmZuBi7sBwRB0jW0dd V4IkUBXqjxlMalLX9aATVYitrsK0++0m1HfNeTbNV27DjXkrEXOeilStTKM3hsb3b47nyDbDip4T +aRV4EHaFqDf1jAbviL+KnL3ut71D0Fnxyqy3JzTJHp1u0yiV1JwUjLqvq3NP7okvLCswvxHuLIy /dmFrFr+vQBW16sv5Q9oFkZ4Wi/ydZHpC+gyWmMsfaN/M/W/FfnfDH2rVcuu/vM0biP8m06/lVT/ ey5/kQxPEe166awWph6Eony5Dy8HYAxWpB8mOm50g0A1HXgiCYnOZju4a/Hom5i/dKGj0TYRoxdF YunQUEUs4vecYF9FVK9HG8T2inKaBVQ865v8yNac9/q3xfLgj5CyYAAm9hrg5DF362y0euh10X7/ SZrY7QNPtiatSKf3anH5+9bl36L4Xy1cbp8qykqRr0nu3L2N13w6MaWxqBP+CGZFjBHPQkgasZxs O5qAw4ulFWPRGBur06izAD8NGzXr02L59701F5kvdtRdyST89h3mrLV3Pur1uF93S1WVg2eB/Gby jxXy+tW9A4NibdhCzlrY/vUyXFWYKEa7aMdu5I/sSrY2xmPdilDs/NG+RSams2OLrRXEdeOIx6HT 89Hy/3Qda4Clb/jvcM/9iOzFlO01AClLWPx1C2Lb9EWrBfswPe4FPBCnjpUOXKTOe1q+av7E/8jg RLC7QZ6q019QaDfCrL3jtWJrDga0dK2/H7cpa5H/GRaiFrKGftGyL+MT+xkvdHvE0hcjnSWpVYb8 VHvZ4+yotpkz+xtyhuVA3bZB0c61cvuhS0/99oPZ8GpuquKrvrwKOGNmLyzrew4DIjRpm1yVPa7P O66ZsTz/uCblmUvV5T+r059dvqrj3zM8XfvytfyBwU1k5qZ+8S3iZvSSv7UGWo7n5JxBUHPSR9Du F9V69um3b/RvuP63KP8bpu9TXSnEjfBvNv36uv73v66xDMDKvTno+w+dPi7x8eMWpe0hB5AMFqUf Kbrc7Yswovco+ViP+RsWYEh3x0IVydMV/L6qOsluvzGbchQoDzrRL7qSZ8gnK8RlcvQ76fmOWCud 4UvdHWe8ULfft4zBJLLSx9VTfvY4ti/9CK+O+wCZvzG+LhUhbeufyEoYQsLnMg6KsXHXnuIBoYqN 3eRXtxnua3u1+EHpv+LqjIeifRjXY7wcvGvnJrJZz+AKDz2/kh09C2HgtJcdn28j4evliJ9+UPxu //rLCNfZXmQJfg6KVFfSQ5fca5qPklOlvY3Qt1J+u2Br8eDQRcgnAzqqhzSe34l9RB51/0fH1m7x MaJ/lp4Snhx3Vsu1JiyR30T+YXk2aqZ67/6Ivbe+ecYLeHUhXSpCVk6GheLemJZitJOfG+2oCN5F Zw8GhDzFT8Xzn8r23ZxTJSon8eN8HrK3J2LFks3I1yx+8BcvzSRFn4t8U5G7MzEDNj7g3795BEb4 XyMyu2lMRyw7TAZVXDwlRzOw8sN3MPntleQCCBeeLLI2i7cUXluf6bFXXlQgps25/wlD4s/O8gvk cO5/9ozRC6q2M6E/dUSefwU0DxcnXmgIqr/4TJ10T9yKM5c4LtagPqPR0c2yeOqDPn7+9gkl+1fl /wfq1I+u9Kf4LcKJv+18XiSrpLUP7Wxumv403nQsh6hIpvNbhmHIgr3aaFCSswaDY8iKZsfTtXUT yah6mw0vReZN+qVhJP/ell+07O45arJEFsO61McbS/aigBzO7kdWpx/ZuwyxDTvIA26yR8ZgWf5h 4jRkNJH/jOJH1vNal/5M8G8IL00gJU+xDur+gOSi+PWt/Gz9dXr+I5j+rX7/ofjHNYi5oREi7opA 7MJDkhjy27j+5SjMG0zo3yj/LH5G638z+d8K+uaBd44hUOlKOTsyNmb5Z8MbSb+VVf97Kn+ju+nE l/1Z958ILNNpfxT/sJBpe0i+lbeZ9KPE4jCRy3L6PzjS0degdsl4rldf7HJuGjgFvVIsqsfA0znS GUvPwo4MacAoHqmp2Thy4CTKpc7FjT2wYvFwWS/Dn38bqVk5yHcoM2YU3Ypnf+hWhL6TViLrFNnK RsL/UVyEI+nb8OkrsWjwf23ImVEv4v25ryDlF+cGPo1h7sCWGD7na+QUEPc/7Q3K8rOH8PELcfIh 4u0ak8rQ8dDBnmcWKfS/eL4Duoz9XKT/R3k5/rhQjP1bP0TH/+sqN57IlehOB1DTThXFQfyRs2lY PNZtJngQO9n9xwKJvNM7sMtAsSNXO6w2Xn0szkGTHFg7tKOTX8nCLH4lOQ7es7bhxHn7zG5R4mps YnguKC7GyaPKeSASbSveZumblV8rQ1Hi82h+/cN4nwww7N27jXSWJ+G6m+/EFMetPEBfzCWrotjH jP7pOV65DNbZqvQDfJi8UZ1+0nNUHXcr5fc2/7AYmDEHdY6SB6dpPPSQS3q7zO33/1sVbdTMrk4r Es3iJxGwBTeReXjzvuFYl1mAErJlipY/X7zxDEkDt6FTz0GIe7IPlh6ylz9+ZFtw7oEs7Dlgz9MX ya2aYtlGx87Io3UvSpxH8pVS9tl9WfPvC/6FWq3xbMJTsgDD2tOO53YUnCUdT4JNyVmyRHrrMozv S863adcFQ16ajHffnIPjUt0ghzRucNI/ow8Jb7nsJWV0jqYcozeZse7ZTHh6A9kmUp/RPCn70Zbf 9nE3UYB/hdbH+0n7xY63aEHqoJKcrRje6VlZwOAb9QeSjehPjtSogdyoOuOjgXLo5zsHY/wCor9i UvfR+q/4NHZ8OA63dH5S9hP76TTVJRwU/yPpu7FnD8kH27Nx2jGQs/GDNdhDcNu7Z4/4yz6QgwJa L1v1nD+HrDSF3hdxScg+as+HtR2rqKn+lpH6t1gzUEz95pA2Bmo1w729a4scFSU+iYGk7UHjKDh2 GNtXfiR2NvtO2SJznHskE1SOkyR9u3qSxnRHgw7jsGJDKvZuT8WnbzyGkIh/y43Zuj0WYjhzs682 Hm/Dm0m/VHcFRKbkpDUiG1J+kdpmuuUXqX/yHeUbDRRwx3PYME5ZKTfjye5odlN9XNugASK6D5Xl 1sopf1uUf+T4DBqM5D8tPl6X/xamPyP8G4TKHqya5T8j8tP6a/TKsTIMb/ZuKfY/aBlQQtq8uQd2 k7o/FrfcreTfBv5K18u0/mXK5g1G5DfLvyX1v4n8bwl9E9CzbY+sfUpdtPz9b0g9IbUZcsR25Emd us8s/2bTL0zW/2blR/BDWDMqQNbAMNL+GEgmJrPJ+AFtV6+c3h+3dB0hu1NDeelJdV/URPpRRUw/ SJm233FmoeKWiczjrut7xd8VYrpQWir48ldaWigs6ilOa9IRHqffzJ3nZP5KS/OE+Rq/d81Ik90P rXrdKbxenNTO1m6MkH5Gkb205AeBzLp7GH68cLRECSvhd+zrNz0KX6/HVOFAoTp8aeF3Atmu51F4 u0zhwk5NHBIf9J3x+b9Vcd30xCoZJ9YfazaKn3e8R7vlm+XHU7NV9I3KT/kU0/Ej16owd5X2yKCT 8E22kq7F8Cb1X7j3Aw9pK3mMzVuUB1PyW5B/PNW3K3+0fJgVUVvGYXD8YXuaP/OdQK4yl+3n7VFj T+OzAj+JL9KBkmm5TgNxws48exngirZUtlXkLtG16u0L/mn+SZ7YwwPc7Ok34uWlQh7Rm1Uyu8LY lf5qt5kvFDL0M+Z7zrte+X0++xOPZSfbudzK7a3+rMBQ1N+0hzySgVwRrcKO0vcGfy32Zvhf4qLM npFeKmh1cteMdBF3coEHI6e9Hs5L8azuZ9MTKwdtfzxuE5c8MnErZTUbTrf9YDK8mfTrSncVlV9k 8MwpHez+fIKu/LS9lrDwZYdbXyFd0/bR6orFS2uuKP+YSU80rLf5zyh+Er6Uptn0x8rsLf9sWG/N 1SX/sXwblX/3fHWbW5vupO/w5+OFPKb/YIX+Wf7Nmr2V3wr+zdb/ZvO/WfpmMHeFn5Re2DdbZ7A0 reDfaPqlfJip/y2Rv+RHYSLT9mcxc21W+tBm0w+riwu5Sbp12Kqj1rVXVfQI/jXtWxl2J9rxxUOX WUc8+ogL0tFowszsilfqLtoib8uggTre2kAO26jXqyj8aSfeHtpOttMaBr/8HjbsPY7CPVPQUrOs /vjf9hvpbKGR8qoFp/BTl+No4QQE65yOFXT/S7iQ+x3eG/mANpjjOxqzV+3GyaTRaKJdRlkrGJ0d 2/VcBNZY30uWtmusmM8WvV9QbQucPup+xlXfaBg/L3i3tb1HFzt9jjy0tYi+Yfk1bA6Oz8S50+lI mDgSUeHKUDpNVxM/24i8ksXorr0G3gsZ7OTU+rcFNpG3u2jYcfEZjpB6aiez8pvNP2puvP+i5cN9 Lyjnq0Q6znHyq9sa/WKkFSJxuLeVZFZoWIGfFFv3SRuROFU9wyK5xYx4A0tSMlFYOh/hjkWTtf0D dcsbqWyryF2K26q3L/in9UDXV5JwbMdiDGbyjFomckbdrASk/XQO302OdVq1pvbr3ZftRu/yzw3d lRk2SimgUQfvCJKtZmz5zd6MGhoZ5SKucExbtgcH3JwhQgN6qz8XxLyyFvX3wgrkpa3CyCg2f4XL 8dR7YATWkNtq6RXRrA/qgc60k8Fh2a87Q5vopk7h3fl359Yqup+OczRa1afb/NSVdLcmN4h+g5vf xoSJRiCphwM6vIRDG+fp5uPIuOlIO34Ox5LfZMIRPUU315Vj4b5zyNu7HtNH9FbFFxo5BPFfZyJf r/3AxGwkvJn0awsMVvEpsSKVX67c+/Vp6yR/u0fHo7TwFDJ2bEXyxmRsSElBxn57e63rdfZztKT4 2beV+YeN14jZ2/xXUflekTvl0cr05y3/RjCSwlTH/GdU/nZxn+B0xnqMVZV/kqRAZNxkbCDl3853 H0MA03avSL8VuSsUrDF5K39F/FXkTrk2W/+bzf9m6ZtB3pu2R/e++nWGFfwbTb+y/gzW/5bIT1Z9 vpJ6HImzH9dVxciZG3Ho+8WqesrWrrdYd9MAZtOPiijZnZXx+Usqq8HztiE6RGV1RX/40ZGyyxIB stwtN+8MbEHBZOkbOXeFXEMcdC1ZDn+Nn0txy/NPo+iaBgi6wd4splv0zpFb7chBA/QgKQSSuGxM heEyIuJAl67n55El+zc0RZ3zp3GOnNHROEjdWXEX3gq38oJDyCIHGdqCwhFGrnX26jGAn1fxV3fP XspPl4suG3yreHtgzNxMLCW3CcqPY7umu7Qn+60uBi/lp2xbmX+MwkCXfWeRLTsXba3QITxIiYac rbR330+wNe+IsIbabq/izVIT3SJVSs67oVvCrvbH9de5L38spW1FZD7kv/zsaZz87SoE3+qPi0UX USewPsGvivRmBXYG4ig5lQ8hIBgBdEKEYl9SgotlpO4Sb2El9Ze39YcP9Ue31+Xn/4HAJsG4eOI0 OQg9BEEBl7f+qMpp+ZN/Jp9sy/ODzUbaDDcEeXSIsN+lg3j6po7itniyIhNx7RisiB7Fx03bxWx4 O4Hq/b//o/6Oczr6YmfhYqfLOyzPP2bh8EH+M5r+dEX1Af+6fHhhWV3kp+Xf6fyrUN9RfwXeQPoO 6nFsL6TykVcf6t9I/W9l/jdC30da0iVrln+z6deX9b/Y9z5Vjjo31sFF0vf3tN9uZfqhSqHnExaT owZstoCal/d1U5V1lpfvwJN1GPGYOAIVIsAOPMV+moEl5GZD/nAEOAIcAY4AR6AiBNiBI7piaUBL ZuCposDE3Wx4D0j41gu5mOWZpt3FgTlb26k4vne0pSsefSscp84R4AhwBP6fveuAj6Jo+/+8IglK CbYk6EtVOiFBX0F4pYlAfCUhqBQLErAjKKg0pYqISFEBsUGw0SEQgQAioUhVSEEIQQlFgYRPQxIh JIju98zu7e7s3d7l7vaSHDD7+93t7OyU5/nPM8/MTnlGICAQuDoQcHP9ztUBhuBSIOAtAkV0WuLR NX/J0X89fpoMAdJMP1vpQr/gG2nEW9Q0b6EV8QQCAgGBwJWLAK0syM86htRLylb/YyePoyAshNoP Wu12qVLJK92sxvcjZNkETvralUjJp9WOISEoohXnwcUZGNb/Dc1ga9PeHcSgkx+VmSBFICAQEAgI BAQC7iIgVjy5i5QIJxBwgsDhpc8g8smvnLwFyLA7js15wOl78UIgIBAQCAgErj4E+JWyzrgftPAQ JsfUNH1tNb5pouXoWZz5GW6IHOyUgsBmo7Fv+0jUFhM5TjESLwQCAgGBgEBAIOCvCJS7cXF/BUbQ JRBwG4FLeS6DVrAzYu8ysHgpEBAICAQEAgKBqxCBoFqtDYfHqBAEhnfDpPmbcVQMOqmQiLtAQCAg EBAICAQuOwTEiqfLrsgEwf6IADNEXwRzw/VVr6vq0qi9P/IjaBIICAQEAgKB0keAGUTOP19snhEd alI12LW9J6vxzTMuX9+LhEcR4cIOdQkMChTGWcu3OETuAgGBgEBAICAQ8AkCYuDJJzCKRAQCAgGB gEBAICAQEAgIBAQCAgGBgEBAICAQEAgIBOwREFvt7BERzwIBgYBAQCAgEBAICAQEAgIBgYBAQCAg EBAICAQEAj5BQAw8+QRGkYhAQCAgEBAICAQEAgIBgYBAQCAgEBAICAQEAgIBgYA9AmLgyR4R8SwQ EAgIBAQCAgGBgEBAICAQEAgIBAQCAgGBgEBAIOATBMTAk09gFIkIBAQCAgGBgEBAICAQEAgIBAQC AgGBgEBAICAQEAjYI1DB3kM8CwQEAj5C4NwpbN2zH9I1YYhoE45qorb5CFiRjEBAICAQEAgIBAQC pYVA8ckU7E47A+nWhmjXvFZpZSPSFQgIBAQCAoGrCAFxqt1VVNhXPKvnDmLp0h9wwY5RKbAOuvds W+YDP4fjoxE5cKNMzdTtZ/F8pOtjse3I9vzRz/j3nAER43JGoDjzOyze9BsQZOQiqOY96HlffaOn eBIICASuCARydidg/cEChZeiSgh/pCcibroiWLtqmQhAEeL/G4qB+y4SBlHYnrscEXZ6/XIBp/iX HVi87WeO3Eq4O7YnGgZzXsIpELhcEbDr94v+1uVakFcP3X67BqP4j9PI/OU4NX8BQDF9y9xQGw0a hiDQbym+eoTGXzk9vHQE+tkGeow0RqF5j7aIcFN2inOO4vi561CrHsmbMSGPnk6fOaOF33bwGA08 NdCeS8PhK/5LgzaR5pWNAPtQWTjgIduHipHXik1mI+aH+pbqkjFF8SQQEAj4AwKs3ie9Emeo91Nb xdDAk5WW0x84EzRUqksdJnngKQmHfi5GRLPLs0yPb5yM54cqE4BqqU6NiEHDUpoIzMk6hKLAMNS6 tZqanbgLBNxGwFP5KT62ib57hmnpi/6WBoVw+CkCbn6KlyH1NHr7xYg4PD9vv0mmEZj9zSL0u6+m yTvhdbUjUP/+wXi5x/U4W02Zyso7lYJV69MJliD7RRhOoQq4dBA967fExr/+xtTdtErJQmeLnyC8 t3Ftp3n66oUv+PcVLZ6ks/+jnmg1dLUWpUqnt5C6YghC7bRTzpZpqBs1WgsHxGL7ma8RUZnzusyc AchDfN96GLjMfp2ekZHwzt3RvmUsevePRvMQ//sAkKiGRb01Hf0+/RaSrf5lpyzA+tS/UDGMrwlG vsSTQEAgcPkiwOr9nS8NR8yqPVi1Yr3MSJCd3r58ubu6Kb+QdckGQAQa1vG/Nsfd0qkW2Qf9etxG wU9h/ooNcrTSktHizM9QN3Iw5XF5rxJzF1sRzrcIeCM/gTdFYjj1C1P3JYn+lm+LQ6RWSgj4VReh +OQm9GwcI3/0q/wGNm+O4rQ022MqBnZriFUT1yFhaFs1iLgLBBQEbuuEt77qpKEh/fIVKq9/Rnt2 1xH2L1plR5fVz+WW/ech6T//B0jV0dzCAJa7dMNH/Ludn48CZh3YYkjpz42vY+GPAzCkVVXNnw3Q LBr1pvasOBJwKJtmYm+/fDvFuJSLQ6vVDr4de9xj+oaVYL8PCIK5NCDauyzkicvfHWdIu/6YTT/1 OrH0Eho9+bX6KO4CAYHAFYhAs0dGYmHsQTy75jt8WVyyLrsCIbjiWGIDij3mJqPuSbLxdH0dNLqM J3dCWvbBbPqxScW/12wqZRmtZJMF9yc7rzjhEQxZQMAL+QltgzGz2uDE0qdFf8sC8iJq2SHgP6fa nduHvk30QaeIF+Nx8PRZ5O7cifP555GxbhaaXaOQu+GNrugz93DZoSRyuiwRuPi3MoBUbsTf3Bht O7ZD2/vKx7B4ufPvJvDdZxxHyuqJhtCzl39veJZ++x6jUpi9CfWKwo6jNABzOQ86EStShbqYfOQY so5mIWmSMmjKVnzt+/kosvYflH8pm1dgXI9mKuMY0HICDl0G33dFl8q5/mmICYdAQCBQqghcBvqo VPm/AhOv2iCS+i9d0K7lFbJNuoxltOgKlAnBUtkh4Kn8iP5W2ZWNyMkaAhWsRfdd7PTPxmH1xb/l BDu/QSuaRnErmq4NQM22/bEroyZaNeqO/X//g8RBI7HzoeW4h3ZVMTsD6YmrkHI+AJVQSKeINUb3 h5rj2JYEfD5vEZKP5NAXXhiax/TB8EGPoHYJszcFR3Zg5dJErFq1BadtLEohkejdszd6ka2gUKtL YUqArSCT8k9IxLpdmcSZcgXe2ghdu8Sge+eWqGaWv83AnBSkjJgHFF1A1WZd0eWuEJrpIXxotUTC 2pVI23scpxkWXbrjpSF9rRtYzCOD3gk/QM0X1wciIGsHZizeikNEeq9uE/DO8LY4tGQ63vkgESd/ 2o+AjoMxdsoIdG1gW9Fyeh+WrqPT34h2me5IojsiRGacle3uJatwiAaRGNsBrHyrtUDPB8IVYPzs /wQZWt188C8EcWV0QQp1adycnR6TuCFd4//me3qjfcNA5BxORVpqJrLPF6GIBCG0fiTasdPxuLRL g/2yln+pQhDuqHGLgZXTs79G6psPaAZND3/7heF9cPeHTLecBRSdxe5NG7BlTzJSUnNwLCdbjsfq b7/+z6FfdLiDraFyx796dTBpzw8JlWm9pnIIat+q2xcLqVcbr33VFS0nRyNqwkYKMwM7M8agoZNV T0wGF3+5GAlU19klpUsI7d4Rffr3RgwNgtqvD8vZS0u00/+UZZbJ2d1kHLhR5SJk7t2FtMPHcKGI jOyhOmqFN0erOxs4xJczsfB3eOsi7DryL0OdocqA8OhoNCRdLet30l0p+RTGlg/TExXrdkBMO2vb rgsyN2Hljt/1vEl/5WyYh4V7yT4b6cleIyfj5S6VseS98ZixKh1ptPq2c7/38PaUZ2TazNj2FH8+ jeKcDCSuSETC+l2K7BINte5siA5tWqF6/l4s+mID7n97JZ5rr+hHPi5zW47/Rwa2bNiCXds3I/W3 YmTb6k9Iiyj0i3sWMdSelHQxGnZvScehP/II1+oIrdsQLVuGIxgHsWSh0lbY63k+zfLEj6fDHbev 5afYC/zLs/5oGHE9yaAg6gNQu52ZtguHMnNQRG03qRXUatwSreh0NHv9o6Vhc1gpf/u03H2WD0bY 8YemB5geDI8iI+lMJbPTab9ZgsVrNiOF+pJSSB10jX4OL/c1P7DEKv05acnYuu8EzlLWQdSjrdU4 AhF31qf6k4UlX25T+gnUD/qnRmv0alcf+ambsCpF0WEGuhnz57LwzdJtuMD3C7n+FQuiXnJfi/rR h6gfrelZ1t+q2ho9/+f6cAh/wq8gMwWb96UhO4/4IEaCa0bibtI/YXynTGXax/eKkqSl6M12Prne 7FmHVcvXY2em0ndhCYY2uAddenRH11IeBJTz37oSi5asxDpb/yE0pDaat+uB2Oi2CDiwAgn7/kT4 w8+he1N9RbrKtDf6i8W1Kj9W4vuF/rQBaFV+WDKVbiP9+/dpfPvF54hftVvuRzCd1fvRkXiuZzO/ 1L829sXtakHgfGGhVO6/M99LD1a8hmls+sVJewuc05Ty+eO2cJC6TN0l016Y+71Eq6E0fyUdlpbZ L0panWWefmHBSWn+sE5O4ulpzV57tFQwK8z9SZrTv1kJ+UdI05IOOeSfMtuR7uDun0mnf90uPRFY wTTNsIHLHNLxVBb2TW9umrY59jqG7L1aDjvt0iDjeFKuTS7NyzZK2p5rXoY8/bkpn9poi5X2ugp/ 6ntpeI/OUpfOXaQuXcI5fiIUP+Zv+3UN7yqNWZhqilthYa40u0VFLr7OL9mLMo3D6LXHsMr9r0rj XMjBpKXm+fO8M7fb/KtYl6P867TqmL2aqNSzwsJT0qRII66VO83VZETj+0RiiXogsOlb0hE7/VJa +Gt02fAt6TllrqLbTHmjNM6lf6LJ1iwzeTrxvfSaHU6O9TBOWnNYl0Uzme08erJTnUF2taTl+/T4 rngqiR8W17x+KzIwcbuSj/MwHzjKgJtYy3m7qK+OuOlyqbyb4CBH573An8dPxaukvLvMTDHVJVbj n0p6U5MvZzS0eGOtad4qnkmTHnSSRhTXxqtY2pVfOePHl4U7brO64ww3R39H+fEGf+d1A1Jp1x8e o8KCHzWdEe1Sf5D+caY/LJY/T48nbmflGPNpipS1c64TeYb04lK7fqBF+nN/Xi0NjrzWSX6x0vDB 9n1DVn9ypamVjW2j2i9mGOTumeKQHt+/4nFyLkuu+1v+gt/5Mz9Kkx4KcuBXrXtjp43V+gem7acH bQeP26kdn0kxav+wud4fDgy39SkN/cfu0tdmbTcrq/3faHVIpdnxTvUn3b32l6fRLXfWty7kT9XZ yp2XMTVtb/QXi2tVfqzEdy7zZac/fSU/7rT/VTrNkk45k3OL+kuVA3Ev+dv0asfIL7baFZ/M0FY7 tXjjCTTkZs9I8Rqu+vc/qW25277uADvwDqhQB6+8/iJiujiugoke9BLCA8K1OEAS4iasUOJxKTMb Mh/1rId+U9iKAuUa/NbnWLttJ3auW4AxD6l7b4GBD9TBjF2244PVwBbvAZeyMLxGpMGoupx/cjKS lsVjcBd1njAVr0Q1xIhVJww5MsPSw+OexJP0U7ck5q18CmH/bqPtaa9yfzRhpKYDXDiZZ0jDm4fa 90+UDdupeSppxGLspMEOyVXvPhqTB9+v+X/6XabsbtDhDbxExvHUNK67Q6cRFehI3xcex5NUjp2u vcYW17f754uO7cA7ZHRy/Yb1WC8bI1dJTFX8mL/tty59HSb02eogPyyGbGh1wGBE9+8nl0M/bnuU OoOopszfQ+8aZOD/z2+nYhxnXL852Tnjr1GPRKDPh8xouu+u8pZ/lZOb+81CwuzH5cfP5n0n4/zP LxvlbXZV7h+NRbMHqUEd7sXZh+TVkOqLvq+9h4Wrk5Awd5ImW8U/vY6hixW5U8P5A/4qLa7uvx40 0m0Im7cPMfXa4V1tO2IUJn22Ejtpq3LSsg9BA/u24PH4X/1Hkfy78ijL7MDhZHy1s5bchjdHaDqD eTZvzivkBDzUojrm/Ogj/RfUGFM+eIVWOF6r5c8c0YMmo4Nq0DaoLt6c8gbHAwsRgdc+a1ni7B0L 6exivHecQAbROd5Z2Oqxr2HysG4O0eiDmtPDY7D5F7n1UcJ5ib+Wye8b0feZBbbHWHy4bBcO0nbL lJ2bMMeOFraexOGyGp8SzMnYwiUbgWHT5iNpXRLmT3pC89838QEsOsTxbXvDZsoXDaqJqFH6IQFa JNmRpLXx7LFLj36YvrStXn7ljZ+RWLeefCo/lKNX+Jdj/XEGUiKnP+jjGzE9unBBSf+Q/oi31x9W y5/LwVMnK0d2MALrOz1J/RD1WvV0JOreM0B9JJmN4fogwK/n2Dou22WR/uKfvsYNdzyID1L+UlME s2+q9omABFoxrh+4w2gZM5/pvyDcN/9tgw4LDNR7G7Lh4R7R1H96UkvX0L/SfMlBfa1XXnlc679E azrZdX/LH/DD79sRc2tLjFrOlQnPG7nHvzLe0D+we+31Y/aumVil9g81e7S0iifd1qc09B9X4r2t GQ55Sb8sww3NunHtrtJ+J1P/n/Vf9L4v1Z/w6ljJtz0OqXnhQe1Hqzu6GOSvc9wIvD3tbbzE9WPV lHkZU/280l8U2ar8WIrvB/rTF/KjloHxTm34Wx9hxpi+mvefG1/E9I20A8j+sqi/7JMTzwIBlwj4 w8jbqWR9pnXi1mynM6qMVrb6YXpXZVaDrV7gR2/5FQFsZp6fGSjM/VF6LUhd+RPrsGImY9FAbaaE PnClvWccRy0zVk/Uwsgrs1ytonE2quzEP3lSJy3twGavSttPOeafsugVLQx9eEmrTziGYRjNe/g6 LhyboYiTlqfouGb9sEaKn79I2muSh7fyoOcZJ223YcfPgIQN/EpenSDPTtjK7+Z+XxnKWk2j5BUf JaxgsmGsr6JxHZ6tdEteliAlLEuSEhZP12bF+k6bLyWtZv7cb1GCtONn92aceHl0Z4ZN5Z8qrFx+ Y+bvlnJtq3MKc09K66brq/1YmLnOZo495J+VeXnLv1pWwd2/kk4fW2aTX2WmNWW2sooi5rNdUspi pZ6y1XzqqjhVZlk5Js2PlxZ+s0s6Zbeq6Ty3qpLN+tjHNas3VvFX6XL3rs5Y2cs/K/tdi97i6rSx 7rM6tWBAFe195zdWOvDPwvCrUW7uZ1wxxq9YUOQvSpq3VZ/Rz/11rzTDsArP9cpUxrMzfkzxOPWt Vu+AkdIRmwzzYdX0GH2fpZnrPj68u26edx6X5DG6Th5kW+XIZkjV1bmDFiorT32Bf+4edXWmOW+n ts7UytdsxZPV+DJWx3+U5s+eL63dlmHQy+zdHzs+cJl/VtLr2nu5vdmjtzdMdqY/VIl7T/qYq5/+ gJ+7smIWzqr8aGlawP98OdYfRj+PgaI/qM/ByUBh7i92q8l1/eGL8tcwNNEbnrxz5ANScPep0l5b X4vRmpK0QopflKTpWKv0Fxb8wvVNWX5vSWS/UKuDWT8st1sJY6w/9vhHzzRfEZ3x+WNyHbRvX5zh o4ZnfWmXK8Y5zMsFPyoTvu9ENhIN+OUe3S6N6RrI6R9I7vTHnOHi4E/1NsnWf1w0bZAtnwhp+vyV Nn+9/7iQ5OaA3beF/YruyNcWarKl5sX6NguH66vx5ZXbHO5qOG/uTH55/AKbjTbgx9LMTVkq0eCX hqGpjFnRXzZevJEfnmev45en/rQoPyr/fP8ouPssw4psvn9g33e2qr/U/MXdd33SKx1Lv1jxlHNw N/VVlCs4kFvtonoa7kEIrqyQXfzT7zjNGQzkjSmP3jQH7TnDwxKNbA9JGK6lpM8JMRsieUh451Pb uygs/Hykqf2Omh2HImGwauQ3Hjt/dpz51TLwwMFO25g2LlnLf836CYgg21X2V/3oN7Fr+oM271TM XOW4AoLNPPMXM1R8oGC2bk+JXoY06YCePcl+ikkefFx33Xyewd3baCegVKtXS0tiYK9O2ux2JVv5 XSAbIiqCfBpaJDsHX752ryw9ShWq4+4HuqDzA+3QJaotIioo8tW2fU/ZuGZn+R17T7/oLmh+a0ky qpDjCb32/E/clI3hbD+2bbGJRLZS7n3uE9DAi8brKxOWa24rjvKWf0Z70Tll9d2lc8WodktHTIus SL5JWLlhK5K+UVYhPtKB7FtdUML9zc8225hn5di2Zy+y+1MfRZmp2Lp1i/zbvTsNxwtvQI9opdyu qczXfiVyeeJvI1+7nds4ADdcdx2ut/2uu+FWtOr9uva+b/x8dLhJe4SUtx1vzz8ve1CHFPNHdUY1 fpESvWGzgu1efh80+C6H+7/5q5HBqwpOj7KjoDeeWI5enD2fwBsb4dlZW7DgpWq2jOPx/nIfHvAQ 3AafvNnRlvbbeM9uRSfo8InXnlsov6cBa/S5wxbUFzeO99ZtWmh6qla4uoI2SpYpJStddo7/rgDo E/w5Pk4cJlz/Yn18/ap21wD8sedL9OtMOqipa8XtdXw6DOGRuJ5o36QqDpN9L6X+7Eb63kzk33KX tuLMfsUVqzub586wERuF1SeoveHsfzDZee7LI7Y6rQQr4jD3N/x01N10cbx4Iz9aLl7iL8cvz/qj MaA6YrH9lFEGpKAaeGRcItYOV+uUrj98Xf4qFV7dubJk8Zm90awFL6ChTd8yPVq/XVf0jG6n6Vir 9Gdv+BDv2ioETYrg4IIhBvuFIU2i8PHpXSCTCRpLfP2RPe3o1gJyDk+ND3sa3oyOssDvH1ot1H9Z oZw9a/9SE434BZJ9xxErDoK263No+NDJDpGx9R8fvF/9PohEO1pJq/jb+o4UJprkxt7G7D+HVmsH p1RsOg1rxsdosqVSyfo2MWPXgSbdZS+2cjtpv9p7VkN5d+fxA4Zgx/aRBvljqQY2+B+W7PlIy6BY nhvVHhWHFf2lJmUnx+7IjxpVvnsbvzz1p0X5MfAvP8Rhzbz+CNXVBQKbPgaanFQgOmdcMW1Vfznm L3wEAq4R4ETTdcCyeqtvaHMnR+Uj1DFkLLpGVHXwrhqiD4QYXhadwo4DimFz9rH7yUdT8CP7ptC/ MeTgEk2ajOeWO+85mIO4ZtaM27KE/zm2T9uG0GXqWNlgupyhyV94vxF4cISybWH3d3tRPMCVsd+R 2LViCGqXYSlf4pRaQGhjubPEjlhWBxRZx61Ri9bAso0m3PmXV9El1rC7N8jkS8pZ5/OFVo7yy/Jo 0O116kB9KndUCn/JRz75qUMBXtNQzvLP6M5J17f5MBnp+GJPYMBXeLd3VxtbE9AxjAxw204q/HPj dzRw0l8zPi4HIkOqS2e9g34TvrTFMb/xMmoWwhv898cPw9hVvyKohIMLFDqLUDN6Aib3VzupZlSY +UVh3tYPDQNCLFTxb0e1LQSsQ/rejIvkGYDr+CRInwUGZWkfOGzrxiEa+I1QB+c5HRE9i3QQN7Cl JsPKJWb4MnT6sCs2/vU3sk+eVV/55B7+1HB0Gpsspz2zz+d4rmC0prvSvxon+7OMZgzp4ZP8tEQ4 3qUivVN2CxnFVq4gVFfbAvqA7tDkGqxOUdsL3+AfGKzX4gm0lXYCZRzeuTsibyX/ysEICQ5Do+Yt MfqrBISayJjV+IzP4l924OP3hmAkt81X4b+E/0u5OLpG2SLE2i9+UFSNKZFp5H6zp+KV1oNlLxVO 9uAL+fUF/yqtHt8tyo+an9f42xIot/qjMmC7R88cazpxxl63e2UaOk1X9MeBk7lyDF+Uvy1r6zeu LMkGpvGQGyepW6U/P18fwJ8zrb9pe84mTscvG44vu70lU8HXH9mDo9sJmWXjzdFRVvj9mqL3HUZ/ MAChJpxKCEO/D0Zj1L2jTd76zkufbKRvEzYIwuHhLJdf09O0V5M+Ni9/FkDWoROmYOg6RYfuOXic vj/qa3G9dRRzk3ivJg52auoksMFj2PV5Jp6d9hM613Oc/LCqv2T6ObzclR8D3xbi+4P+9EZ+DPzT gzz576AggEatY4C5X9kH90n765Co8BAIuECAq6YuQpXyq5DwdpSDYhvi9PmSPvaLcPaIMqwd2PR2 hDnhwKTe4WKA/lFhYInSqM69S5wwDomGAOYP+ZcumL/w0FdXNsD/5f3jMrZErB//W5kNr3RrsMth keDu9Zzi4zKTUn4ZZDu9q5SzuWyT79irjYtyDUJoPRJYsuVz8afvcbToeePgizdcl7P8yyQH6R0Z pgHqd6CBJ3ylcRM9M1rukPO70/k6LttIo9NrZhZxNjLIvkjvdo0QQDbk5pMNL3cvT/GPDCrCwW8+ IztgbLTavavKP90wngaezIc1adbx58EILT6NLZ88izhtsPsetONWIWk5XWscrp/y+njtlUuHokYd gsS0buDgp3oEVK6OsH8penTnZrKxN9SanSU1XfleuQ3efKcDNg7dSI9vY876Z/DO/0LoZKZ9GD08 WQ5y85PLEOvL1U4GAowP5u0FDULZ6p8W2hf43/YgaCs1IntP05JlJ5GaWXKjbX+YHGP3wWE1/m+r cUM4q3P6xQa+OjSohmOHU7DKYPtODyO7LmUjhU6aZVdQNXOJZu8CnZ0q5Q/4MQJ9fLktPyxfK/ir dPtJ/Ylp42SCj+gMoJUbQbZu2OHNB0l/tAJ8Uf4qBj683x1Rz73ULNJfzGaP5CsCoTS54uy65Vbn uDqLU57+ZYUfvzIr4nbzCTuGQ7Vais0sdiq2P11Ff2sCQBNrrr9/pCJ9sj3vnG+4OJGi940a3ab3 w8xSb/bIBOx4xOSNL/SXXbJuy49dPPXR4/h+oj9V+r29lzSx6pCuRf3lkJ7wEAiUgAB9cpb/FRSo K7vla/dhSKv2TomSfv8R89OVL6ZrQ0PtFyU5jef+izjEL4tG0CUXH5HszNrKtXF3Z+cfaO7nRyH1 b2X8u5bxI9I+nQDqvLOtYKzx/DMzX96q5qyr77ECss/Mz56lC74Z6HOXrUpGe8fuRrMc7tfjvl1J 4hlB5SD/JgQGhP4X3GZtNwAAQABJREFUdEIgBu67KL/t29nuQ9suTvaGOdqgE9nkwKYZA9AgRK8Z syn8/o96otVQZYDbLrrh0VP82UqgINv2UUNCLh7Ydj+dOmPA4O5N0PDWEHofgl6Tt0A6XxP957Je 5hg8MukubBvV3hiBeyL7IIh/vC4ctmJwYYqKixB8C20FaGhOwbFs6vw6ecclQzOwrnUVH9Zdd/jj 49CJBpnYiqpZj3yCIYWjUfAVt9pp1APuJlUu4azgz7ZSnz8Vh28TEpH8YyaO5WfTFlRiI+C04dCD mX0i0CWrEB1CjSxaib9+9tNaYtETV2LGM50NK6sCLp1FPB2+MXAdtX32V1AYWttWgZ3IPE1vG9iH kJ8Lco6b+vOe5YkfT0dZuy3hzxHrD/XHpf7gJjnMtjxbKX8OBp84+dWP7iboFf1a/zcMlVz0yM0H Mt2ljFYW5uuDFu7H8j5kmeFHpjLUK491nW5Sn4x3KS9bWxlsfFMaT/RN46IsDTlyg0m1K5u3yWr4 wMq60jfd7qYG9OBerW5zCq30iy5w3yIeJAFf6S8+T2/kx2p8f9CfCg8eyA/PtEW3V/rLYp4i+tWH gLuqsVSRCbo9UtuSlTL1U6SOau90Fcfhb5dojUdH+kBzrabdJJvGsc5KyiqiKp2aIIb2YvskXTez D6zdSD61gn1sbVr8HfIfa2C63Joll5eWrJ180bq9j/h3k86yClahslIW9vnxMzP270rjOeVIHno3 pBUXZXztmzgTqTQTHMEv6bHRIP3+PWYkKB9/VTrdh0YmYTwmt5zl34xeNpjTb91BtMg8QdZWG6H5 v5VQyvkAjjEO/bDN5jkS2794QduixYfMzT/BPzp1e4N/93m/4fSMPFy4VMnlxwPL9AKtlAy+Ue9A 2hPCDxgzHHq9vQ4rvmwnb8dlp4rFR51FXKS5hmr53/vIFlm4fZIePc+YvgZD2vcx1YF52xM0/dOm aynon8ot8Ob7ZGPqBdYRfhvvz6iGrPHJMv1s6X2sTQ48YqgMA3uN/28bEdMkFo0+3IfJcS/j/jgj 0WzgZ8usZ7VT4479Hw0OhnIyYCF+wKVTSPlEsZHCMF44tLMxc/ZUoQjZW/TthcYA1bVVmClT6dS7 2LPobS+f5w5iePd3jNFMnsoNPxNaysrLOv4cpX5Qf2Z+spr0x6Pm+oPrv7SivhaTYLbGQ728Ln81 gXK+e0N/oDZwkoSPybbdnF7m5hs2z3/VOXdcGx4Q5Nh/YnbY9m7Y6Dy+n7zxBr+g62tp1C/dk0kr Yhtoz7zjp43u7GPgY1hxxyPj9Gw0dKO94nd8LNmUSX1O5+33T5t1Hu5tHmaFQC1ucGhtzf3WF98h 7l3nkzusHcrMPIOQevSNYut7+lR/aZSUk8MP9KfCufvy40ukvKl/vsxfpHV1IKBYUS5nXtn+9Rdm dLVRkYCHR68wdEZU8oozl3NHTkeR8WWjgq4oH7rAQpuPFjt7z/J/9AnFIsqfG18lWy2H1Swd7sV/ HMXWhR9h1PAPkGo7ktwhkIceAZXromPTa+RYLP8Rzmxs0JGXwzuN1FJv27q25lYd7ENVvdgADvdp onr7/O5OnkFBjpTw9LE06jRuLdOWt3INMs7ZkUm8Tx+6Tvd0Y8jUWXnriZi4uA7cjrSjDgECaCXc ib2bsWThEqTl8F1mh6DQ86ctKBUc+XeMofok4H/95yGbaDFc9PH2TszD2sDrHa0auyxfPX/z+qCm Xd7yz+hQB5R4mUDlGgi/sxWa16umkop/R7bT3OqMIutUZx/5xeZPq0T0EJrr8NpJeGC8snHJkIcW gnd4jr9UIQhVaTApJKQa3V3/QmirKWcnVsvYFAP2ljpDn6waoYV7sc0UHONkI6heJAYFKcvz1r/a yvS4ezVywZEULJ3zDsa/vRT5XBrqe3Znxs37fbiH95LdBZkr0Dd6subftnFtzW3mcMqPWWDOr3lv smNXUdGHH7w+QrN/N3Ow8w4xF92SM9jEfpKz9kQN6wv8i/NyFNtWTzc3PSqbGZe9t2u0U96sxc/D sX+Uj9ULJ/Mc8mAfG+snP4s3bdPh9h+2THd3fWm8Fm9Am+oYt2APcmjbfACtDj68Z5F81Dmz9Wd2 +QN+ZnR546fKhDGuuf7Vw1rD35gXUJ71h9GSt/IpvLzAZJNo9kY8c5+uxzqF15FJ90X522Pgi+dg vSvlMjmr9Nf6jz7Q+0VcbyxKLXDIb//CYejxvr4lyyEAHT7CVh2yS568tAuQl/a1+WpFu3D8o6q/ nek/PqyZu6zwq3m33idY9XSkKX75P851a7WzGR8e+f2lr8rPPOlYjjh3CulbV2LJgg3ItnVUqtWL kCeeWT6s/Y43KX/2Lj91AcdDFFq52FbIwrt78fJ7evbDmPyd+QRd/k8rEH1jTUT+JxIxczO45H2r v9SE3ZUfNbz93dv45ao/vZAflW+1vjrr3zp7z5e/L/qPKj3iLhBwhoBfDDwx4po/Pk77eDo9+3HU fXSG8mFPp/uwj/3Da+fghsgntI/uvp++jQjuI6Hg5CFs02Y04rFqQzqOn9Qb6oIj9D5FHVCyvecG DqJfYptxlIttZYgduxRpFJ/1lS/SEuXDNNjw6YgY3PDvJogaMBTvzxyB5F9dDzyo6ZV0Z0YDn5un 5//Fiy3RZtjncv4Xi4tx8Xw+9tMpfa3+3VZbbUBHYhoMUBdkptDpQ2lIT9uMY+eUmem8lcuxPo38 mD/9cvLzcfyIjklJdLnzXh6IOZCMDJvdLdbpXJVGpyDZfWOM/XIt5W/Ei4Vd/1OOjDHLK7RJqC3L BHS8bzi2pB1HwR+0PHpTPGJqtdN4Zx2hnKzjyPnDmB77qFZ5TSe+7cv7MIdFOuVrepHx4HsqKB24 fRM74v3E/Sgg3HIOp+Kb+MloWf0mNLr3AcQN6IdBX+uNLxv8OMGnb8gfmJO0Dob82UlRdhjx9OSt fBH1qj6E96mDsmfPZhosGIvr6WSpCWTbSbliMZNWRfGXFf7LS/4Zbgzb3QeU8pDlZ286Mk8ay5Z9 /B4+wJdpEdK3Ux2nOsw+fCOjOtqgiEenvm/LspNz5hjJziKMjK2OyIcnalBdIF2whcon00Vd8AZ/ LQMPHcW/ZVC9TeMwWONAX3C7V7RTSdhKoCHvLkH6AUWGpAo0cD//GS3XAS3Yh/9WuX6w+qnUIQWH sGZt0O+V8Zjy5gwcdSF/ia+2xw0th2PJ2i3YQ6cDfjquF8IiH9cMfNOR3Hi+fVUtTwf5p7LSy3QW 6aFMvW6SLnKFvRREq55mRGlpM0fYwG8Q5cbssSGSOw/nziJtRzpO2wZevohLRPoRRRYr2lbBAvFY RO1Jvu1DQU2Whc2kNsIn+HPbeh8Lry7rHTZwI1/UBhZkbsLz97ygZo3Qm+wGsq3Er1AXHbpVlNNm 9a8PtX0Mg5ysQ9i69CP5YyN2wkYt7xNUX5nsHef0b7U7B3InlgHvPtUedW+ujutuuAGR7ftrcqMl wjn8Aj+OHo+cPpAf+AB/nuYyrT8s47OnDHWIeX3xVCvc9thYbNi6G3t278Y3c4bj+rrR2iAyO5ny +bsU/eGT8meZennxuittn64LFr+/huRc7T9lUj8gW25v7LOxSn9g06c43Z6KAa1DETvsEyQuWYwl SxdjPLVfrQbMss/W8MyMZ9duoegENnn5gNx/zEFBzjFspYMvatwzSAtfofIFHKf+E6/PAorOGvQz 41vV30z/rd+SLrdRWv+K6z+VN34IfRArtNNW6UwSwq8PTaykHziOE8TH0sk9UaOtzj8DorjwuM/7 wizdwNDaaHaN8ln1ZsfnsSqVyoDkhn0/fDHuOerD3Y57uj6KuKe6Y2GGTb/TiWrvftSHRZevF4n+ kR9S+039Zbn/n38a26j+1Gj9lBoEMZ9OcnkIkRbQDQeT3yFLh2kh3+zWUP7+YW0A6/ueOLCLaI9B jbv19v+GIO7T0aL+sio/VuNrjNscZa4/OQK8kR/lG0yvr0r/NhPZtsl7+/d5K5X+WLZtjsmq/uLI F06BgHsInC8slPzmd+JbiY6MZVOvLn/RUzcbaC7M/VHqdK283Mku3sdSLvFXmPu9k/ex0t4Cnf+M ZW/YxXdOR2CzV6W9Z/S4vsAw65s33cq/Sqe3pAO5et7O+TOjP0razsW1SnfG54+Z0vyfd/dKhYU/ SrRyQXtfsclsuTxS5j6o+bGynrr9rFKeZ5yVkxkfzE8pX8aDZxiwuBFOccj65nUDfc7kcdbWbE0O c/d84FYcPi2Nb0Z/Ya407+Hr3EwjVlqTbsPMVn99wX95yL9z3KKkvZycpszu5AQbmwyQ7qAOn5Mw zuRHlwGr+HtbjwoLjHWElw8HGTWpH6oMMfqTxjjDyJH/yNcWSqdssiPXH6LDHd3L6LPXPyy+83J0 zJuloeoCZ7gxXHh6lh3R9Z2zON74L3BS597dWyidS//EIE9Mp7E8jPVUkSGr+NvnZZQDI4a0HU7T OyrPVuOfSnav7eHpMivDXZ+PNmCmhmft5fy5r9neUbvL1W3GQ3njp+Lo6d1X8uMr/FX6y6r+yHqz BR33a+uzuaODq3SaKh3h+l2+KH+Vb2/unuguM5n3Bf2FBb9IHw6gJeo2HF3fHesPo+GPHVPcjK/o k/+8u0PTI87bV6Pu0enS207/wO8naUxkRY/4d2hfCUNv5Mc+ztrh4W7QESdtP6XnJ+u/ScZ+sY61 sQw6v7FO7kfb52v1edfsx92gG1LEi/HSKbv6a0V/WZUfq/HNcCsr/WmWt6fy44x/tX6X9J7RYLX9 NeND+On1W2BhxIIbtiY1V97XTW3w8f8dwvwxDzqhJBbzko9i4Qt3G9/TNpdI21Y1/kXEi7YZ+QrB pu+b94sxnPpW84FRyP15O952ccx539few9o9R5G7ewIaciuu+Hy9dYfc9wrOn/ge7w2+30kSUZi+ bBeOJw5BbX4ZeIVQtDbh3yyRwKb/Ragb29TM4pr5hTRqb+aNrg1uIH/aPvcvXcSaRNWQt4ZVq8aM GaoXneSiGlSkLUVLDq7HsC52s/kUdNCszcj4Ya42m8Rid36jlr7VzAMMlJw70PYuxWX/H3Lf60hZ Rsc+X6usfOLfh8e+jA8XJeNIbiHibDO27H1gcG3T8HxcozsCYVWMPupT3/hUnD29l+rBYHSJ0Jcy BNIpbWM+W4dTBV+j/e12GPmA//KQ/8DgUEOZqhgw+1XBXPmENO6ivjLcI1+9RZEB0h1bUldhcKSO lxqwyv19MW/rUapbiYYyCmzWzbQueIW/mpmnd5ot7PFEJdNYjD4eA7bl7ostH3N46TLEVn21HZGI rG1foy8nM8aEozBs2nw6Me8svh8f49SO3Nx9Z3Fqz2pMHtSNywsI79wP8d+kItte/1AmgTd5Jv83 tte3TxppVJ4kshKrrkK69VVa7RRmFsq6X6OoHiaJRKFRdbLpbXcKW7vaN8phQ+vdzsWJksvIKv78 yabhnc1lnT6UMGnRbhwwscFhNX61lq8gY90sQ3mrTHaOm4wdR88iK+lN1Uu+t4+qp+tf25tmj4xE Ye5JpGzbhKR1SVibnIyU/Up72fZ6xY6UIRHbQ3njZ0aTO36+kh9f4a/SXFb1h5VbWKd71WzlFemD PtuM5M9Ha366I0qW3+OJLzjoXavlr+fhucsT3dU+1lHmWY5W6Zcq1MCTM88gI3kuXurRjGMiAtFx 47FiB9Wh/V9y/o7OoIgXkUXxHfstUZidnIpdi402oro20JVqtZotHRN06ROl9Z/8A7+6GLHlKFZO f8KU6sFT11H/8WuDfnNoX01jeu7Zfuw6rHzLuMJKTSV60DgsoLLILZyNCNqBq16y/Ly8BKd2LMNg Q/83Qg2CKvcPkuUgYVRbB72rBbLgaBb3CU6nrDbtf7NkO5McriU53D6lF6pxfTP2zor+sio/VuMz +u2vstKf9vmyZ0/lpyKdCK2usuPTa3Ub+wYDSnrPwljVXywNcQkE3EUggI3EuRu4TMPREvbDR04o 9lpoS0gQfaDWrxdSdiRQ/idOnUEg2WPBuQtkZ6U6Qq6j7QjXBpQJDWzpc/Yp2vJxYx1UOncaZ8nG Ry2yH3O1XMV/nEbeJcK6QiUEV6tmahOnLLBg2yzV43oDS5EOtlx4Ud/b0H9ZIaJnpmLhgPo6e7TV Rr7KSPbkvMpZ/nXmPXcV5GQjm5apB14ThOo3BqNqsN0gnUmSfoe/CY2eeLH6c/z3fyH0tiBcyLuA SsHVUfV65zgEXDqIZ29uJW9nnbWbjJc348KWg/xteaeVzSZXBFZn7XA4wc0TLMojrKf4MxoLTmZD qhaKamxCgzAvKCjAhSJqe+RTVKn9KUH/W43PaGDL8rPPZNM2nAAEBgaREfwQzYgse2/l0k+VjMX2 3K9ND09Q0y8P/NS8y/PuK/z9ov4wGS4sAKj/JklBqGa/PdQF0N6Uv4vkyvyVZfpNdG5x5tdkbuJp 4iUWe6n+NOQnH+04ZG0gaQ4EXVPdI9ztkim3Ryv4yX1n2qpf6aZKuEB992AnNhVLnTlO/kF9karX u//9cJG212VnX0Rw7VBcOHaa7FCEIaQa1yaXMvEs/9PZ/0J1W/+BHYZCzUGJl6/0V4kZlXIAf9Of nsqPVXis1D+reYv4Vz4C/jvwdOVjLzgUCGgI8AMfMZ+mYAGdbCiuskPgasefH3hiK556Nyy7Tq5D Kf++EdfXjJa9W7yxFttGtXcIIjwuMwTocIjn6rSXBzYDm76Fo3uGOF1xd5lx5n/kivrjf2XiA4qk Q1/RotdnKCUaeKJVzw3tVp34IAuRhEBAICD0p5ABgUCpIiCarlKFVyQuEHAPgaI/juLomr/kwL8e P01GHWmmixl/pl/wjeW34ss96i//UFc1/jQzm591DKmX/pEL8thJMuofFkLyR3PmlyqVuNLGaumz WdL8P/Johr4SKgVdwOapr2tJPnRfI3n1T1mtNNUyFg6vEGADuOlrVyIln1bbhYSg6FwRgoszMKz/ G9rBIE17dxCDTl6hax5J1B9zXK4EX3YwBOsHVKKV33lnaPWYfNGqxOP5qFNL9AuuhDIWPJQvAkJ/ li/+IverDwGx4unqK3PBsZ8hcHjpM4h88iunVN385DIcm1P6R8k7JeAKf3E148+v9HJWzIMWHsLk mJrOXlv2P7ywJyIHrHaRzhScKnxRDFa4QMhfXhVnfkbbgQY7JSew2Wjs2z4StcWUl1OMPH0h6o+n iF0e4fWtdeb0kqFzZP8QVyr2fsxzFL4CgSsPAaE/r7wyFRz5NwK65Wf/plNQJxC4chG4ZDvX1AmH FXxsxN5JNlevt8D/6i17wblPEQiq1RqDghwN/AeGd8Ok+ZtxVAw6+RRvkdjVi0DFMDeM7ly98AjO BQICAYGAQMAPERArnvywUARJVx8CshFzmBuur3odnc5YlobFrz74cTXjLy81P19sXupkFNgd4+zm kd30pa1+FwvzaZOWufwHXi+2lLiJpN8Eu0jyVERbKEHyExgU6JZhWr8h/nIjRNSfy63E3Kb34nnS i2zLvckl9KIJKMJLIOApAkJ/eoqYCC8QsISAGHiyBJ+ILBAQCAgEBAICAYGAQEAgIBAQCAgEBAIC AYGAQEAg4AwBsdXOGTLCXyAgEBAICAQEAgIBgYBAQCAgEBAICAQEAgIBgYBAwBICYuDJEnwiskBA ICAQEAgIBAQCAgGBgEBAICAQEAgIBAQCAgGBgDMExMCTM2SEv0BAICAQEAgIBAQCAgGBgEBAICAQ EAgIBAQCAgGBgCUExMCTJfhEZIGAQEAgIBAQCAgEBAICAYGAQEAgIBAQCAgEBAICAWcIVHD2Qvj7 AQLnTmHrnv2QrglDRJtwVBOl5QeFIkgQCAgEBAICAYGAQEAgcOUiUHwyBbvTzkC6tSHaNa915TIq OCsVBIT8lAqsIlGBwGWPgDjVzo+L8HB8NCIHbpQpnLr9LJ6PDPRjagVpfovAuSx8s3QbzqoE0inn Ne+NRfumVVWfy/oegCJsWbIIx84HyHxI19dB9x5txUDtZV2qHhB/7iCWLv0BF2xRgmreg5731fcg gXIOernTX87wiez9G4HiX3Zg8bafOSIr4e7YnmgYzHkJp18hwNrU+P+GYuC+i0RXFLbnLkdEkF+R 6EBMceZ3WLzpN8COzvJuD8pb/ssj/8tRfhwESngIBAQCpYKAWENTKrD6JtHTZ85oCW07eIwGnhpo z8IhEHAXgeJja9F74DBD8C5TI2ngKdzg5y8PxTlHcfzcdahVLwRuDbUWHcSwAS9i/9//2FiIQvPo togoJ+2Wk3UIRYFhqHVrNX+BtEzpKGv+i49tQj9Ovis2mY2YH+q7JzulgIyn/Psb/aUAiUiyDBHw VP5Km7TjGyfj+aHKBJqa19SIGDQUE2kqHH55r1SXGlB54CkJh34uRkQzt1rjcuGFDXQsHPCQbaDM SEJ5twflLf/llf/lJD9GiRFPAgGBQGkiIGw8lSa6FtPmJ27ubVzbYmoi+tWKQOBNkRge9ySe7B+N ZtcoVT4wkJcu/0Em4NJB9KwfjshmdTBvf7F7hFUIxQuvPI6YLupAWpD9pKd76fggVHHmZ6jbtAUa 39EfqbSy7Gq7yoN/Wb5JtrtEXCvDXTGs/GTbG/79if6rTV6vNH69kb/SxqBaZB/069GPfp21rIJ8 OCmQOKIlrr/uOo9+/x2zXqNFdvy+ETHVqriZxkNI/l2PXpT6dYnx7nlsFBZvOaxHugxcF7Iu2aiM QMM6/jvoxIiUqMWPems6yVgMnmR9Hfr5Q3vAaCtt+Wd5uLrKK//LSX5c4Vea7wKQh/l9bzToj9jp W02z3PpeT0O4Wx+dh3zTkMJTIODfCPiw+fdvRi9H6lr2n4ek//wftarV0dyPZ5suR2yvKppD22DM 7DYyy4sLbkL/ZYV+zX7Yv5Qtc+4OH0gVaqDvuI/wxC9fofL6Z8qZt0q2/Mtv8Kt8ASgH/pl8z2qD E0ufRqMnvy5f9uEF/35FfznDJ7K3iIAX8mcxx5Kih7Tsg9n0Y5MKf6/ZhC+L1QGNkmKW/J6tdMn9 PrPkgHYhfk7NBZvWUIdTiv84ho1//W0XytljEo6dptg3KbHP/LrFWUDNPz3hPfSn30v3j8bmr0ei YWXtlV862EBOj7nJqHuSbDzR1vVGfk4vAzGkXX/Mpp96nVh6yQ/aA6KrFOVf5dXVvTzyvxzlxxWG pfbuUi52ffOXIfkNb4zAzv47cA+/FTlvO4aNXmsIl7dyL05f6i9MShhQEQ+XAwJi4MmfS+nmxmjb 0Z8JFLRdTgiwTvqVfF38WxmwYjz6A6f+QEN5lndZ8190SS//8uRbzdtT/v2NfpUPcb88EfBU/kqd S9+NN2mksg/cPst3okX2RWQmjEa/KcqWvteWbUaPEHVYyRacert8GC0RcgQ2eApZP9yFY+cCUEnu FZ9FwsRYTFnPhqeABdt2oQ6tq8ElsiRHAzHhTfW0a0V9gJSdj2LBC93xbspFRL4Wj3mPRYCt6sr7 /Sh2r43Hy1O+kdP589s3cectv2Fv7mw0dHdmRY5Z9n9VG0SibYOyz9dXOfqdPi0F+fcIqzLO/3KX H4+w9TKwVKEuPj59HD3eexKxExTdBaRi1eYc3NM9REs1Z0cSZ0oCYNtHM7bFIVR8wWsYCcflg0D5 i20eGYZN+AFSkG2m7vpABGTtwIzFW3GIcOzVbQLeGd4Wh5ZMxzsfJOLkT/sR0HEwxk4Zga4NHI0j BxSdxe5NG7BlTzJSUnNwLCdbLg0pJBL9+j+HftHh2iyXWkzs9IXEDekyDQFFF3DzPb3RvmEgcg6n Ii01E9nni1BEvbjQ+pFox06Xs+swWI2v0sHuJ3YnYPPBvxDE5XFBCkX3ns6NJbMBhfTEVUgh48qV UEin4DVG94ea49iWBHw+bxGSj+TQqqkwNI/pg+GDHkHtEmavAopOYfcOwj+TFnISIUE31kbzNq3Q 8EYJWxYuQjauQwDLp1oLxDzgiCfPj9tum4FdVQ5YOVRt1hVd7gqhmVLib8NKJKxdibS9x3Ga8dKl O14a0tfUQGnBkR1YuTQRq1ZtwWkbAaz8e/fsjV5kdDqUw9aMvpwDyUhcuhjr1qfJ8UNDQhHavANi orugTkAGViWmoSptH3g2xtyAcUEm5Z+QiHW7MrUBkMBbG6Frlxh079zSQX5kGnzIf/EfGdi9PR2H TuZR8dnKr2UrNAgpgXFGCDtJMSkR61et0+Qm9PZQtGrTHg1vysX6BfH45/6ZmPPC3WbQ+YlfbVT6 uxiH1y7A5wtWaXy069UHLz3/iMvy90Z/8ExXlOjjxHb5cjuJmqb9vSBzE1bu+F3XF6Q/czbMw8K9 ZB+O6kmvkZPxcpfKWPLeeMxYlY60tDR07vce3p7yjOmsO5OdLRu2YNf2zUj9rRjZNv0Z0iIK/eKe RQzVR1eXVf6ZLsvcuhKLlqzEOqrr7AoNIf3TrgdiyW5XwIEVSNj3J8Iffg7dnRjHr3QbtSF/n8a3 X3yO+FW75TZACqmD3o+OxHM9mznof1f8ePrOKv8sP6v0szZk8ZeLkWDDT0qXENq9I/r0742Y+3yk r+2AkQ377vhDk0PWXoZH9UREKAVkOuWbJVi8ZjNSqC1iZdE1+jm83Ne8TbNKf05aMrbuOyEfphBE LWKtxhGIuLM+gpGFJV9uU9p5ar/+qdEavdrVR37qJqxKUeqQgW7Go+1ghgu2/oncLkVSuxThvB5Y ob84JwOJKxKRsH6X0nehOlzrzoboQO1v9fy9WPTFBtz/9ko81948f1/InxX6GWQFmSnYvC8N2XkB sjwE14zE3S3DEcZ3alhAH12BIY0QTnAEH1YxiUPvznejoUnvVg/jmHlIkwioKbC3GVWukQMFd/8M MXeq27gd40kVglC/eXs0qkcZ0sBTzfoRqF9fGbGpWbcBwu/uiqcHHsTHQ+/F0OUXKIF4PD39CWwb 1cohMavl75CgBx5M9+6mfuQh6keqPQW5n1e1NXr+z7yvw5Jn/cX1K7YhLyCA3BdQsXF7dL+zKrZ8 +TE+4vRv955U5x9t61L/+kL/e8CyHNTX9d+q/F9u9U/F2x/kR6XF27vV/o83+UpB1VG7Fmso9Wv+ vDUY372/XFcYrpsXfaS/JFfUy61N+7He0J+zNwnr0/+UdTVr/+5+pCetcKR+2N5dSDt8DBeK2OB7 ddQKb45WdzZwWX8NRIoHgYAzBM4XFkrl+ds3vTn7UvPqtzrLjvYTiRLZsHGZVmDTt6QjBcZ49jRU uf9VaVz/Zk7TmbQ01YCZ1fgq/oWFudLsFhVN8526+6whTzUOuxfmfl8i3zrGUZIDbpwMpCx7yzR/ Fj+mR5Dduwhpe64RS54uT9wpszvZpQ2JOnzS6V+3S08EVnB4x+gJG7jMgElhwUlp/jDHdHTeFTmb vfaoIZ5KZ2HBL1L8YOflzqdDMw5SLoebUg4/SXNcyI0SP0KalnTIIX+f8F94SkqY9KApVizv6NGT pcGR18rvo2caZZjRn7vnU6dxed6rdJrlwLuKoVf3U99Lw3t0lrp07iJ16RLO0RCh+DF/269reFdp zEJH2mX6U9yhP1baeMqJzHqpP07t+EyKUelrruuzwHAbTwb6u0tfu6jLnuDnSl/w5WXunuCgB08l vclhb66TW7yx1kF2fcZ/1reafJrTrNPUZeouBzpS5j5eIv1Mdk/Z1VtPMDcL6yv+LdN/4nvptUjz 9kPHM05ac9h5W2LGX0l+zuQw5tMUKWvnXKdl8uJSOz1skf7cn1e7kJ9YabiDbv+A9FiuNLWyETNe tnL3THGg30z3yxhZpN+d8mfl2GVmikH2fSV/5y3Sf/7Mj9Kkh+z7CHqdHTttrNZPmeUjHcjLpo5f rNYvYbKZPHe0NGziKrnNSpmttI8ltWEs3ryHr5PLvnKnuSW2d3x4s7aV0VlYeEQaXUlpf4EIafUJ Yzuk069jptdb3c++/HkMrLid9yOjNDzN0jerI2Z0Mz+z/reWpkX9r6Vj0+8qnq7Kj5Wbz+q/Vfm/ zOtfucuPxXbd2/6Pvdx586zKql5vOP1g0i810zHe0M/k3/6bszN9Jzj75gJipeX7fNt/8AYvEcfY dlxueCiWhknay+uqff9EDOeMHit0xGLspMEOJFXvPhqTB9+v+X/6XabmZo7i7EOG5Yh9X3sPC1cn IWHuJM2ocvFPr2PoYmO80LsG4SWOhj+/nYpx8/ZraTdv3lxzM8eoRyLQ58N0zc9qfDUhtmz8zgGD Ed2/n2wcsV+PZuorbQZK8+AdFerglddf5Iwr6y+jB72E8IBwjX8gCXETVsj2DfRQiuvw0mcQ+fDr 9t7a86oVNBxuu8I7d8fgiePRSJ0aU194ea9//2DFADYZhVQNYOetfAph/26j2YSocn808agvcb9A K3rUixnp+6hnPW2pPfMf/NbnWLttJ3auW4AxD6m2L4CBD9TBjF0FalT5HkBrm95r1xhxH+jlXuX+ vhg7bQbGDepmCMse7A0YB1zKwvAakXiekxs5/+RkJC2Lx2CN7lS8EtUQI1adMKTpE/571EXsqNWG dPmHxDdH4IMU435y9T3jf0a7F9RHDJu1Evt+PoqM1J1YOfs1zZ85JM2OjcHb64eiYzvwzooNWL9h Pdav1+sVW3Is+zF/229d+jpM6LPVVH7NCIh+bTLmTBuryRSQgCfe+s4sqNf6I3vXTKxS6aMVRepV nG7jyUD/Sry3NUMNYunO9EXHCcygqm60lyVYPfY1TB7mKLM08MjJ4Rhs/oXNZOlXTsYW/QERGDZt PpLWJWH+pCc0/30TH8CiQ8Z4PuGfjPu2uqOLQT47x43A29PexkucHlQJcc84PvHw1keYMaavGg1/ bnwR0zfSClAfXj7h35QeD+jP24eYeu3krT5KUlGY9NlK7Ny5k/TPh3iworJ6g622+F/9Rw3GkU2z 9sCTySEz7Csb9aV2VL1WPR2JuvcMUB/RhQz/drpWpQP49ZzensAi/cU/fY0b7njQID+B1G6rbQmr 9+9wup3RMmZ+S5q9DcJ989821CFetmTD7z2i8eSgJzU+rrtDb4M0T4v0g+S/7zMLbMnF4sNlu3CQ 9G/Kzk2YY1eXaT2fli1z+ET+LNO/HTG3tsSo5VyZGqgExr8y3tA/s3vtw8dgeZubnCC1y9Oen4Qp b3yEDNpqdMd/+yKaDiGI7Xp7mc/cSwhD3NJBNj5TcehXTo9aKH+fAUeHdLxCh3So/U+Gk3K5tlcY GNqa+ki6MW+dngi8NLgbaAJG82L97/HLTYysl4r+17J16mC6yyf1/3eL8n8l1L/ylB+nJez+C2/7 P+7nUHLIvtTv/nAA25KSiiXrlXpyYsd6WW92Hj0fcwbr34T2qXlDv/zNOXC4of3bQN8JvB2+5s35 paMJeKhFdcz50fj9ZE+LeBYIuETAX0bK1NklIE7afkYZzeNHcMMGfiXPOskjtF2VWbWb+31lmPlj K16S5sdLC7/ZJZ2yW9V0/sz3EnW+5RksZ7NdOg3K7NKY+bulXFs6hbknpXXTjTPqc+1Gfq3Gty+L c+mfaLOt7swQ8uHZyPSadH1kujD3R+m1IHXlkD4jqOWZZVwtxlZ1qSt6GO/2K2k+21t6I672ODKZ WJ6SrZV11g9rpPj5i6S93MqVjEUDNayq3D9a2muTIY0/mg3JWD1RC8PS3Mut1jLOOERJ83bYzcaz 2Syb3FGFkuxn0ZIn6SutApu9Km3naFNpSFn0Cpc/N6NhN1PjDf8pc/mVTrHSAo7+wtxfpEVj+Pe0 +sluxROTD7V+9I13XJF1/sS32iyIs/qj8unpndXb5GUJUsKyJClh8XRtVrzvtPlS0mrmz/0WJUg7 ftblms8r17DiKU767igXjspvUJA622wsezUNr/XH8R+lJBv9i6YNspVxhDR9/kqbv07/wkVJ0gET 2VRp8OZeWPCjVjY399Nn55PH6DI5yLZKjM1KquU8aKFdORMf82fPl9Zuy9DqmkrPHzs+0GTXYcbd Iv/8agFWtwKbjZZ28GVH9SM3ZalEgxYaDfbyy+jk63Bw91mGFV38aj62klLVbSp/lu4W+Vfz9pZ+ ht+CAVU0bDq/sdKh/WNhkrjVkLycqPn74s7LIitL9gvuPlXaa1vdwehISVohxVM9UNtoq/Szlap6 28bye8sgP1k/LNfqh0JTrLTXrn/A020mWwybjM8fk/mx1/1W6Wdp8/L5WZpj23pq60ytfEuj/lmR H8Y/32ZV6WTEP/fodmlM10CNflYG7vRnPJVHvv5EDxouDR9Gv0HdbPma9HkId2d58DzZl7dZHD68 M/mR43GrF/hwlsrfBR9mtLrrp8o760vyfSVn8fXwkJgMHOD6V7n7l2rtun3/gceOyYa3+t+eLlUe 3Co/rg3ly4VPU+XPPj17+j2Vfxb/Sqh/PFbMreJV2vJjn6/Xz972f3xQ/1RZ7RufKmWtHirrrIpN p1E/hXSr7btjNvXpVTkxlVEL9PPtn9JG0jfQVv0bKPfXvdIMw24O6kPbtaFe4+4D/ETeztsyf8SG H8okeSufi+1hVa/g7m20EzSq1aulemNgr07aDFWlyspCrQtkg4TNGanzj1KF6mjbs5dsEyg7k+wz /aEcNhkYGIzQOjegR3QgVtOJXtdUdlymw9PAMp24KRtDWuk2pNg+3Huf+wQpt1ZDZK/ZMl2vTFiO 3gseld1W48uJ2P3xxpLtXpk+8uFHb5qD9reryFBrHtQYQxKG492ot+S49ggcTv5Em41kvL9kx3vn l5cgGdHoMEoxgFd0iUfelByvPO1xpEYcu1YMQW1OUkOadEDPJnrybLVTwjuf2jyisPBz81NjanYc ioTBixErz3zHY+fP09GQTgtkp+1Mf2GRluBXacsRe4f2qDgqN8bLC75HRlgreTYgAMxWg3Kx+NPG JdueorBm/QRE8CdS2N7Uj34Tu6ZnotVQtiopFTNXZaLDgAa2t8rNK/5l+tfZ0onC6hNfo8NNerJS UA10G0HlF6SXn/7W0ZV95BDyL9U0npZxUxt89OsuNBkxEqcaN9XqnGNsz31Yvb37gS5yxIBLN2NF hX/Jsti2fU+0beR5eizGrN3T0Yo3Lkvl98LHPTFTPvUsj9M4evpe6w92CMADjeWEpF9+tSVI9uBo JZKZnRE9Rx+5OKOhrdu00MqmVjizS8LqaxRiyJaNcuk1//jvut6V3xEfj8Q1JjsdZ+X9/dnnWR0P QvD1wQgJu0teNbP64t+UvnHFBSzy/88vy7iTFodgx3aqv1x9Z7QFNvgfluz5CDdEPi2TWiyPachO k784rJnX32B4M7DpY1gwYCgenfsnLpEBYZ9eFvl3pMUz+iU68ebt+eflZGgrC+aP6oxqdomymc12 L7+P1yasw7tFl/B/81cjY3ofROjiYBfDy0dOFlkKnd9Yh0WjdLsujI767bpClUYWxir92Rs+lHli adFHLQ4uoJN+2IPtCmkSRQZcdwE23c28CQKAlzE7um1RDTdnxoqt0m/IhB5OHKaZ7trUAF2ry2m1 uwbgjz3BeOWNr9CsqV3jYlH+rNLP118mf6mJQxDKMRVI9hVHrDiIoDaNMIpsIJXFlTjzHSTaZeRr UbdL3q3HgOAaiLC1b84ieFz+zhKy6O9M3p0lq4enPtgX1GfjAA+s9z+880ZTPDA+3aH/zcsP4Av9 74xCF/4W6j9PvzfyfyXWP4a0Lg8ucOde6eE9kx8uCWtOb/s/1nKVYxflZ8v3/EuBCG3dg1bqvof9 P23Eqq01sOA7tkthCKKaBWNXvu3kzQC7vhuLbYV+g/xHYeOJ5biH+4YIvLERnp21BSFV6uDR99l3 dTzeX/4S5vTiW3JGhLgEAiUjwHe9Sg5dBiH4j4KA0Magvabyh35woDKIwjqujVq0BpZtdKSGDIEu nfUO+k340vEd58PnwXlrTtZ5fYEbeNFekKNBt9cxKfJTuQNV+Es+WBXkO7ksrNX4LA1rVyy6RuiD ZmpaVUP0gTzVT72fPqxs/arSaSr6O+G95XPj0GlssgfHDqupe3sf6TDoZJoSGbfcccCmkGkr4Scf TcGPTC9zHR8WT6JJ1/Hcdos9B3MQ16wmJLKod9ZmFDry1bWOg062TNng3TvJH+HP5z9Aza764Ms/ x/aBfZCzq8vUscZjUG1x1Vt4vxF4cESSHH73d3tRTANP+vCgGkq9u8c/y19dGnvnxNcMg05qSux+ 91PDnZdfhWA0+lcA2JDYhondUWMifezTEvkud9VAdYkGbm8Olo30dh65BA1udU4xn59Vt/eDm3G4 p5EjjSHh7Ymkr2Wy7ERDIdUH+kMf/KVtoKwxLwsNy+UhFekfq7fUbajwRRWhusowDUJ2aHINVqeo 9cUWhG7Fv+zAx+8NwUhuu6j+1j2XN/wXc1uuXk0c7DDopOYc2OAx7Po8E89O+wmd69l9fKuB6C5P Xqj8cv6NWscAc7/ifHzv9IZ/eyo8pb/4t6PapAHbyvLeDPq4Lw6gIyC4i/RhYFCWNkDDtp4doomb CG5yggvtvZOTRbLBhwQadCrpskp/fj4N1NiuOdOMg06qP9Pd45cNx5fd3pK9HMSDo1uN4+7dKv0s n8BgvRcxgbbyTyA/tp09kia6UJkGfoPD0Kh5S4z+KgGhLg4H8Ub+rNL/a8oWDarRHwwwDDqpL9g2 s34fjMaoe0erXqV4j8K85LcRWZkWDhTvw2sdnqE+Sylm54OkfVX+PiDFchKVOz2M1ibqOawmmwhJ dxj497X+94oBC/XfqvxfefXPqxLQInkqP1pEiw5f9H+8IYFNNmds+F6OKhXRlFpQCwyJDaLJODKL 0jVJ9m/xRjeEXBOoTZhuWnkAxf2NB4VYop+T/+hZ9A3DDTqpPLFv75jhy9Dpw67yN2D2ybPqK+yP H4axq35FkIu2SQtM/b2a0RMwub/zbYNaWOG4IhHgxO3y4S+IThmzv2QbO3R6yswivYfBPpx7t2uE gJMZmE82ZNy9OvZq42IwIAihttNLLv70PY4WPe8wa2w1vrt0ugrn0LGmwBfp1BGziym+7DSl834N dXLN4srx6PSWMBqcKKsruHs9hLkjoRSmOsdb4oRxDrOdZjTns6OR6SrmBo5qNggzC6r5VYt4FF/T 0cn8pXf2gf/L+4d/5eCWaDDi+N/UIaar0q3BLuSMfUC7xz+ff4fwOg55qh4BleuiY9NrsNFk0EGq UAMjd8bj3cgn1OBgNooSeZNLtjcRLy7EpikxLmnXEikXh+eDPr7UH+XCskmm5vWdBqFs+ssQ5bfV uCG8p8GLffh2aFANxw6nYJXB9pYhmOWHEym6bm50m8kXC5dDs0cmYMcjnIeJs6SJBZMofuXlMf3X 6vbrGCNTXh/vHj+GWU73ongS6u6Ieu4Ft0h/sbKwmfKKQKgL9X3Lrc4nXtwj1Ekoi/TLqd72IGgr NiJ7T9MyYSe5mqhf0LZZTHZyoqoW2ROHRfr1lQpUArc7TnippFSrpdjc2v+36zZSDe/9PQjN6RTD +tQvCLh0LYLkLgudTGxLMIAmmqRSOmGvJJqlvFNIvaTwH8x3tMqz/Esi2sP3FdiAnweXr/W/B1n7 JKhl+b/i6p81WD2VH2u52WKXY/9HpsC2i0flpX2/52hxxXT1Ef27RdI6c1WD0XymfR3zIf0xrRto +do7AipX174Bd26mwa+hLel7sQgHv/mM7LDq9NnHs3+u8k83jKeBJ8fpYfuQ4vlKRMCdz/rLgu/s DXO0QSeyKYFNMwbQ8fG6WLPNcfs/6mnb5uSapV+P6yO5rkOav7Ua3zzV0vNlI9lhd/8XWLcReStP ycdQOw7tsS0Reqep9KjRU/b4A0yOGof4ZdEIuuRCCbIzQyvXxt2dFQUbeFNt2Qgt6xDzK0Z0Skpw 6WOd+Hct40egfcwA6vCqS+3/zMw3bBW1D+sN/2fOu+D70llkHHTe6Q9s8BAKCzoinYxhJ2zZgkNk vL2IZidY/zjru2+1VRWps/pgUuejGN8pxJ5knz5XutanyblMzJf6Q8mIBlAuI+26fvbTGj7RE1di xjOdDSsrAkh24sl4/8B1LuRLS4E53Oe/Wt3mFJ6ttQMucHVJ9rhs/9zn35cskn0jxD9eV9lK5iTh ouIiBN9CW0Eb6u2jk6CWvL3RpV7RT1vplSsMlVzUOfOBWPdZLM7PKzGwV/TbUmVbsc+fisO3CYlI /jETx2j7RdE5ehlw2nDowsw+EeiSVYgOoa7I8U7+vKNfxyWPdZ1MZssZpVJettaGuKLcJ+9sq02l CnXx6YEfcOxcdYRTQ5a/dzZq3PsayMYZMj/sU+YfPjnpmzUM7g43DoT6tvx9gqJXiXjab7lc9L/z +u87+b9i6p9XkqNE8lR+LGSlRfV9/0dL2isH227X6dr3bbtLaJudvIJf73vZY+RL+o9lk4kFN/oG 6iFD7PsxyG7grCSmmbmb0u19lESBeF+eCLjoppUnWZ7nfeiHbbZII7H9ixcMNoHU1HLzjSeJqf72 930TZyJ1aCuHlUwsnPT795iRoCiAKp3uMz3VzWp8e3rK4jm0ljr9NgbjF3TGnEfZsmj9YqPti8Y/ qnWa9Dd+4KJOprpVrkqnJoghe0GeKLWAm2qg1jUBxBuQOGgxsp8cbbAPY89hTuYh6lzXQciNSi6B tRvJpzVt/OtvbFr8HfIfa+Cw/VJNIy8tWdsW17p9E4/oVNOwv1ekJbjqlbh4O96LqWWa7oWfdmh5 q+HVe8ClU3ivZ1MsDv0IyR/2xpgHequvtPuJTdPR6ME35Of9x1lnq3QHnlKO5KF3w9LNQ2XOl/pD STMeGadno+G/1Rz8987KPuWTQplAtj1q4dDOjsRWoFWRW6iCuH25z39waG0t1be++A5x7z6gPds7 2ABYZuYZhNSjOqaqLPtAfvHsPv++JLflf+9D5weMutuX6Zd2Wt7QH0g2/pQrCR/TaaFzetU0JXPz /FdN/WVPrg0JkM8uMQZl7d/eDRuNniZP3tAvJ/PbRsQ0iUWjD/dhctzLuD/OmDiT+y2znkWU7dTS Y/9HHwehut43hmZP3smfN/QHXa8PoCzdk0lb1Rs4kkM+P220t7pkGsznnlVvbQi1RuSkb5HTv/Cb z7MpMUF2cmz8IzNt4WIRWYcrP5+Xf4nk+E0Av9D/Fuq/L+X/Sqx/fiNoTggpnf6Pk8zc9Gbb7ZYc 2IPMkxdRtV5z/XukmmLfmE/G1/TPmL4GQ9qbD8rnbU/QviHadNW/X7rP+w2nZ+ThwqVKLid/GN0X aKdJ8I2hPAvCfZUh4CjF5QAAGzFVL7aEkGuOVW8EBTn6qmHlrWJHfrGFpVlCLZbuOLx2kmzYkPmo 8fS39q4E/K//PGRTY2S4zh3EOzEPa4Mvd7RqbEors59hLb6Sq3IIn+IOquDIv4E2etDDB5uutnD1 vn7US9pR11881QqxY5ciM6dYNtSec3gnJvcIQ/+5bPq1dC93ZMGeAma/49EnFIsmf258lfYaK9sG 7cOx5+I/jmLrwo8wavgHSP3dFoJmRdX4wNt4fspWeSWSQ/w8Kv8e1VE3sgUadl2ghVG3sLHwLP8R zmzk0JG5wzuN1JJt27q25lYd3vD/r9vbgE51kpPIW/kUxi7Zryan33/fh5c7DNWf7V2X8rBj019I m9+P8DMfoK3Vtit3LLt9Aj565jqAO9KOOiQaQCvZTuzdjCULlyCN5JO/dPkmX5Mhdf29sX74VH/8 pWzfZHRlnizgyVPc504hfetKLFmwAdlmisoxhkc+waZ77I38qgnqYfNw7B9le8QFWuVmf7GP3vWT n8WbtuVIZh/mWhwv+A+qFwk6cVBO4vTshzH5O3P5y/9pBaJvrInI/0QiZm6GlqXqUA7tdK7fS3qv pmPp7gX/an4l0efsPY/f+ldbYdEhY71Q02f3giMpWDrnHYx/eykdIMC/8b3bsJXIRfJW6a/1H32g 9Iu43liU6ljv9i8chh6yUVQnhNDhIa3J9hm75MkDu2B5aV87Xe1nlX6WVXFejjy7PfPp5lj5i2P5 sYMP7u0abUeVyaMX8meV/pp3t9MIWfV0pCn++T/OdWu1uZaQFw61fshRTfQ/8w+qXM2tlD1th/nw pvqR+g4fPdFU06HRM8cigtPVPit/t7hzL5COp3n7YZ+KGt5Z/9rZe17+rOh/T+kxhLdQ/63KP8+/ N/rbav4GHHz4oJa3u6uf1fCeyo91kn3Y//GCGF536H0ysvt3WyOEt2yO2rYVpCzcPW1j5ByMGPmW /nMbB6Dfh3scOCnIXIG+0ZM1/7aNa2tuicywVKXBpJCQanR3/QshUzlkullcVzEC5T7wJH9IHkhG xhGlF8w+nFelZTp0isd+uRY5+cYOGQu7/qcc2lYQhMiojrZijEenvm9jS9px5Jw5hv2bFmFkbHVE PjxRK+YLdGrXlrQ0ZB7RjENo71RH3soXUa/qQ3ifPhD37NlMnfWxuP6WuzBBO5UlFjNpVZSzy9P4 7OP3BNGUvtf2I/e2FH0AZU7SOhzm3+81YlRw8hC2aTOK8Vi1IR3HT+r8FRDPenq29/yHe3AbfLJi hMbOhnefRIs61XFd1RtQN+I+TFhnxF4L6CNHQWaKwnvaZloWr6ysyFu5HOs5nnPy83HcSZlFv8Q2 UyoX24rABs7SiP9iEquLtEXiMA1WfDoiBjf8uwmi6HSr92eOQPKvCk9Moce8/rUanYxrd0WtmDGy DBVQnjlZh/BNPJV/DSp/Gw4Vw/TBUom2FT03T8//ixdbos2wz+X8LxYX4+L5fJLDOWj177babAEd 6W4wYG+Ff2a49fmvBmv0z+zXErc9SnWAZOREViYNtE3G9TX/q+UtB6TtG8eP5Mj4aBFtjpl9GuL5 Gd/IA4/4SxmQKP4jAx+/HKcZUW9WizqjpXGR8et7KigfgPsmdsT7ifshl8HhVCqDyWhZ/SY0uvcB xA3oh0Ff64MPRvkuQvp2kn9OvlkZOpN/Vv6+0h+Bocq2TQbNmx2fx6rUHKI/W5a/L8Y9RzrkdtzT 9VHEPdUdCzN8UKfOnUXajnSctg0cfRGXiHQqV3ZVtBnMZ6sfFpE+yLcb6GJhM5mOoIHXDt0qynGY Tu1DdYelwTDbuvQjebAndsJG+T37O0FlkX4gE8f/cKTfG/6lCnTi5tJhWvpvdmso119GAyv7Ewd2 4YtxMahx9+O2pefADUF606W0IWnYfUDhW9Hvmci2jZPbv89bOYv0Cr13HGPTaPDW4Q3/9vR5Sj/D 74X5z2gkD2hRHeMWbEUOlQ9Lu+AP2uJkawfDmrVBv1fGY8qbM3DURwNPfNuVtk+XxcXvryE5Udu0 TLke8HVSJdgq/YFNn6ITC6vYkkvFgNahiB32CRKXLMaSpYsxntr/VgNmqdmZ3pkOrd1CmdxhkwcP yPqb5C/nGLaS4dQa9wzS4lWofAHHs45r9ckq/XLC3Lbix8Kry3ovRz5Vkt6SDi7I3ITn73lBoyH0 JvOJKG/kzzL9oQ9ixUv6gA7Dvw8NbKYfOE51Nw1LJ/dEjbY6foyJ4sLjTttyjUk3HWwyKZ36CWr9 p/O0ZP2v9aXUPhXRoodxTDznAOk1NSzXD1H7i9o76nPyF6tjhyn8oT+VfgvTj4dJPo4fOa7ofRq0 Z32Hocsv2KKNxIwn6/NJ0AmG+qOV8tdT8czFTjLV+GMYGLCKx/ot6TLGWhgOA1b/c4jnpMQVcqb2 +tVev8nvqW+i6mcmf1b0P8uU10EyjRz9Kj0a7cSffd/fSv2HRfm/3OufjH85yo8sdFb+fNj/8ZQM Vu943SH336hv5dA3oQlL9v2n6i9DH6EU6E98tT1uaDkcS9ZuwZ6tW/DpuF4Ii9T7X5U7zcXz7at6 yq4ILxBQEDhfWCiV5y/j88fYl63D7z/v7pUKC3+UHlSWKcjvKzaZLeUSvSlzHzSEn6RzoaEAABvg SURBVLr9rHT+xLdSs2v+ZfA3S9foFyFtz1X4LyzMleY9fJ2b8WOlNemUJ4ed1fi5ez5wM28dK5lv oqEw90ep07XXmMT/WMarMPd7J+9jpb0FxvI/teMzA+Y6XlHSh59/qKUza7eRfx4LT93O6dN55elQ y8w+n4xlb5hgYJYGHXDX7FVp7xk73rd+5mb8IdL2U8a4jJasb950K36VTm9JB2xyx+L5gn8mfwnD w/+/vTuBj6K8/zj+XUSSKJpwaAL65/DgEAmJfwuoLVLFQKiC0BahrUiw2qKAR/GgWlQq3mcBoVoF tYAiXkg5/KsYWyKimAAVFIUA/oGANVchJBrdPrPn7GY2yWa3JsHP8Ao788w8zzzzntnZzS/P80y9 9m9/nwSuofIP3KbVSb3yS1Pd28Kum/BzEcvy9tduqVc9Zr1T5HkPRvLz3y8irZe87w9PXWO8f9iP d3m9zkOO4zVkL6c+8wsj3LPuX1/hPrDx8RBH655qlRl6n/PeA/esrt+1G3wfyu33Da9nQ49/7exf hdTXvi/7fMbEee49tusv0r3zB/fneY63rvXh9Y91Odrjr6t+da236mu9/1dMG1QvP8sy84ZF7j0m X6zHauWPVD/7OfPPR7pmYq1/Rfln7scuN82lHb5L1Ewzn3u2+6/f4Mu8++qZ3/uZ4r++4uEf/l6t Wefg55jpDlvreYv2+otH/SvK/+meltkqKj8zFHng+5f/HET7al03s8+Idr9ym1+cPN+N/Psrzo/u +5f9+0/499Hazt0xF/yhxvcOqw7xPP/+Y4rmNX92/e8d3uMLnrtI73//+yPS+vBz0ND7v3WckfYR 6Vw43Ydiev/HeP3Hfv9rnPef/xprCtePvy4NeY3n959o9h/JrVWv4P3JujaeGuLp/13j/up/j8Va /wrz/d88Qb5G+U7vn/DfX6I5XraNz3eu5u4Y/LOxucIaY0rtOdBxt0O6tzXpieraIljFXtkdPV3b kpP72PKYJ9m0Nn/9a3+Ocgte1eRM25+OfFsdc8FYPfVOoQ7uWhroTmatSuh9UbDvrK3EsfMKVLJ3 veZPm6zBGcHyrKfkTfvLSu0pX6CBtTyGuiH5E1K6hNTNVp0Isxnq4P8jr2nmmGmeVhY+ZUz0RaRb pjiu7zNueI2nxllPbVtc+oW2v5+nFStXmJ/Vevf9LSouf1GX/ah1oMVB+L5iWm6ZprMd6u9UZsLp P3Q8Z9a2nYb+XsWfrtHdtTymc+wNj2j5ukIVvzddPWxN3a38yWf+wgzu+oHmTL7AWqwxJaSP1WOv rVVxxQxlODT4ST3/d+Ya+4ceiZBfytZDS9Zq59Lr1CXYYMq0OIn9+K1WO1m3rVX+kgc9A6WHVz5r 4lzlf5anGzJbBbqKWk+B6mL7y3nht96Bx63r3ASnwovwLI+d8by2Fdc+BpZjxigSU8+/xXMcJpha I1f6iGv12HOrTR0qlHOm7fo2Y3SFT+0G+v4Kb13/DusD7w8rYxzvHwNvW6lXZoT+hd9ft2GTbtfC 1QXmGprteA35t6vva8/skQ6bZqtnG/NX4LAnN53bpZ1n27STT7HlyVaKafac3O932rJyluN5z8q5 R3mFJdq+4o+2fNLA7JMduxo39Ph75zyuvfnLdONg59YcWTl3aHleodbcd4mSbU21WyWmONa7/4nW Z4hp+VXH+pCDisNCtMdfV/3qWm9V2Xr/D7h5qbb/fYHG2j6zQg8nWzc+OF95n5boH3cMjzgOXWie upeshzM4vVedcg4c4XzNxFp/66mcl83cry2rn9Q1I3vbdp2hYea6eclcN8WbnrWl15xNzJio7SZ/ zWPJ1mzznl37/JSQTEO6dwgsx1p/+5NJ07MGB8oNncnQXc+9p49qGQPN2j7a68/KE2v9rUG8b84t 1CsPXWoVV2Oa/MBKbXl/Qcj71Pr+Zd17Ypmsenf8Yfeoizg1o0PIvSuhXc8oupGPUI8OwXtU597e 7i+RKmF9nl52wz2e+37Rq1NrfO+w8sXz/EeqR23pyZ361bbaYV22fL37lZCSFnJe/Rv777+R1o+8 +PSQc9DQ+7+1v2juQdb2ge8G1oJviun9H+P131zff367pnD9+OvSkNd4fv+JZv/JqemOmw8ZE/yc tK6N07IGOW53bhfvd5x41v/JD0u0Z90y3TPpopD3dXrWOM17rUBF4b+/ONaMRAQiC7isyFnk1c1z Tfm+IhWZbnkJR5hHh7dL0bEpwS8JkY7Iaqr73NgTNX5JhYbNLNCiy21NoX3djXRkzV9u/eXFmt9f TlN+rSz4i9qdPdlTxVlrSpSTWbdrox2P6YK0a89+JZj+xDpgmribx4CmHmW6E9VyDkPqavLvs7oh pZnf4E3+pJQ2Ovbo+h+v1YS2aI9pkt+uq5IO7FWJGaOjs+n//F1MVtP2op1Fpmu9qXvlISWavtf1 GYi5qmivSo9sGxg03eqiWHLA9M9ymR93olIaoW+2VQf/44oTkpO/k77hDbl/OJ5Xq4tMRblkdWky 96Jjj47i+nMs8L+f6Ll29heZbkQuJSSYc94utV7XjmPNYjj+r8r2am9RC7U5MVGHSr2DUZrqNK8p huOP9UCrvjRdaf/VQmk+v2jvX7HuP9b8Mdff4TO76pMFapt5hanaCK0vXqAetVxP1j3A6hiVeEQb JduC8/U9robUv3x3kdzJ5l5t/UHEunbKy3XI3L/leQqr+fyK9vMjhuuvIfX323g++3ZXKal9kg6Z z87G+Nzw16U5vcb9/Dengw+ra2Pf/2N5/8fj+uf9F3ZBfEeLcf3+8x3V2b6bhtbfVb1Zvzmuv2c4 DtOaUzm9bb/rOHyW2vfJPALRChyWgadoEazt7YGj4U/ka6F5Mlk0U6z5o9lXY2zrMk8Oem7sKZ7A nNVyZ9muF/Vj36B3jVEf9okAAggggEB9Bdwf/1Wtz7jSbG4CT6bVco8YW9vUd79shwACCCCAQFMV sAeerBZPo3vYAk9NtdLUq9kK8NXLd+oqzQCVhX/72rP0+c69ZiDUNPPYR7NoflLMKP11jcIfa/6m dAXtW79Cqzb+WymdU5V4oNQ8CaZSi269Us8UeH1anT5IZxB0akqnjLoggAACCIQJWAOrW5/jSS2T VLrftD70TFaL0DJ17Vz353pYcSwigAACCCBw+AiYFk1l23eooNo71MaO3TtV3iHVfG6a1rbVSdG3 tD18ZDiS/5IALZ4M7NYXrlTmZX+NSHzcZUu0Y87QiOtjzR+x4EZYYUW+h7XrV8tYThl6cetqDTmR iHgjnB52iQACCCBQD4Fg1zrnjc0Awyp6PydknBnnLUlFAAEEEEDg8BKw99SJdGSTFn2se4Z3irSa dASiFnAeQTjqYpp5huran6vdMmwQ6hpHG2v+GgU2YoIZJPHyCac5VCBDk2c8rY/25xF0ctAhCQEE EECg+Qi06lDLIE/N5zCoKQIIIIAAAggg0CwEaPHkO02eQYzNSE9O07FHmadn1TEodaz5nfbbmGku M6Bp1TdVZmBnM8CqeTpWqwRaODXm+WDfCCCAAALRCXx1sMzzGeaUK+Fouto5uZCGAAIIIPD9ELAG JC87WOV8sOahQvV5OJdzZlIRcBYg8OTsQioCCCCAAAIIIIAAAggggAACCCCAQIwCdLWLEZDsCCCA AAIIIIAAAggggAACCCCAAALOAgSenF1IRQABBBBAAAEEEEAAAQQQQAABBBCIUYDAU4yAZEcAAQQQ QAABBBBAAAEEEEAAAQQQcBYg8OTsQioCCCCAAAIIIIAAAggggAACCCCAQIwCBJ5iBCQ7AggggAAC CCCAAAIIIIAAAggggICzAIEnZxdSEUAAAQQQQAABBBBAAAEEEEAAAQRiFCDwFCPg4Zi9al+htm7b p6rD8eA4JgQQQAABBBBAAAEEEEAAAQQQ+M4EmkTgaeP8UTr6qKNq/Tm7/0hdddN9yi3Y953hfB93 5KrerFHd0pXZu6ue2kTo6ft4DXDMCCCAAAIIIIAAAggggAACCMRLoEkEngrX59Z5PBs2rtTTM2/X 0LO7asKCrXVuzwYNF+jQwuXJnNjwIsiJAAIIIIAAAggggAACCCCAAAIIqEkEni5++GNt/3S78pfd 6Tsl2XppXaG2f7bZ85P//luaM+3CwOl65ooMPfcZrXECIMwggAACCCCAAAIIIIAAAggggAACTVCg ZVOok7tlG6WeIB3/7+N91UlU5x6pSvXVLrVjF3XrtViDfzBDJ100w7PN4twdGn1Kd8fql2/L0ysv LNWrr+Zqr28Ld2qmRo8arUtGDlBaHU15ynfna23eBu34l0uJiUlK6dRDffulq0PrSr23+FV9/I1L SaqQ+4iTNNiUl/zFh3ph5Sa5zbauykM6NnOIBmekevbsUjCPtVuXlS/5DI0amu5Ydysxpvof2KN3 VizVqldXarUZp0nuDko7JU39zxmoHu2LtWrhPH17wUzNuapvxP2zAgEEEEAAAQQQQAABBBBAAAEE EIiHgOtgRYU7HgXFo4yqTxaobeYVpqgRWl+8QD3CAkTW+EO/Oa6/nq2q1rCZBVp0ebeQ3bqqS7T4 zss07r43QtLDF2YvL9S4gd7AkH2dq3KPnr59hCb8aZM9OTB/zbSxenT6M4FlKUNrivPUYv5ZOuv6 DYH0Vr1mq+j9HCWYFFflh+p33ABt+ubbwHop2+R7URk1ji+2+lf90/j1tfxqn44ZNEs7l4731M+z ZemHmj5xugoOmC52rr1atWqjr4AMDc4KdXIVudR36j26aXiofe17ZC0CCCCAAAIIIIAAAggggAAC CHwfBZpEi6f6wn+7Y7Mn6GRtX6XQeJlLpZo76mRdv7IyUNzkGU9ryIBuanOwUCueuFzTXzzkWXf1 0K4qeatI1/U/NrCtq3Kzbup4lmZWfh1IswJLffr8Uxs2VHvS7EGn9KyLldFvhLoawcQf36prxj+r t55e5gkwHXWqFXLyTS3TdPVVv9K7aqPdc2fpja+/MSsSzb/QKeb6m7ZdD597VaDQG2e9otGD+yjp YJE+WfOSLr76/sA6t2mvZZ8qd+Tp3pdetyf55gu0yiF55ZihuraiWzBw5ZCTJAQQQAABBBBAAAEE EEAAAQQQQKDJBp6C4SPTCKe6Ujs3rNAN5+cEzljfkzsE5q2ZnUtnBIJOx1zwB729YKp6tPZv0kfp Ay7WmJyH1PPCWz2Jt543VdnFswOtqlbfcb4t6DRCC/Me0nBfd7mqfVs0f8oPdb0vcGUVMPnuhRrT 01d+95/orlk/0fPl7TV+SYWqrZZDvsndsqMuvXeuLjXL7it6qXX6lf5VIa+x1l+VJcr3taoaO+9j 3XZJJ1/5qerUrY8OXpSl356a7QncueQNwPkrkHT6L7V6yakmdGfCYd9s0bRfTPEE0MY+OF9juier 0n4yTAwu9X8HEnTy4/GKAAIIIIAAAggggAACCCCAAAIRBZpo4OllndP2qIiVPm7ck7puoK21kgmZ vHzvE77ts7XoaXvQKVhMp/Ou18uTn9cIT1e6eXr304fUo7dpnfT/y/STR8t8G47Qmv0LlBEIWkkJ qT3122d3KyWlk8Y/ecCzXWW1Nbh5sGWTNZZTXdNXZmwop8lq7RRT/cMKLdr2scqqOynZfnbbn6O5 n69Vr5unas9pp9tqbgJiZoytvkMHe0pxVR+nl1q28ASeBgwcpQH+4FrYPlhEAAEEEEAAAQQQQAAB BBBAAAEE6hKwhybq2rZJrJ82/z1dO6p3SOBEZmymvI+sLmzWtEKPz71PH1hxoLD+bO4Et+6wjd+0 bvM+5fTupKqD/qCTNGnR3SFBJ0+R5j+3KeySWxbq4fkXh43X5N8ihtcY6+/Zc8sU9Wzh0jKz8Pqd F6vjnSYslp6lwWd2VBt3itKOS1Hn0zKUNXWxup8QDJjVVuvw4Fpt27IOAQQQQAABBBBAAAEEEEAA AQQQCBdosoGnp/IKNfD4Q/ok9yllX/6Ar94Z6jsgLOhkrTFH0cYVbE20dPrtWhp+pA7LZdXeLmc7 N+YG1qackBKYD59xte+oDF9roPB1MS3HWH9r31aXvqnvztP9mVanPu9UtfF1LfWPE+5PNK8ZExfp rfuGhwbvbOuZRQABBBBAAAEEEEAAAQQQQAABBOIh0EQDTznqc3qqUk3tUsdMV37LQ8q8bLY53gJd eNID2lYxRWkRjz5H85YMU6IZFyriZA1a1LqL+mZ192yS3LZzYNPkI2pvDVTiDh3UPJCxHjPuQ6Fj Kzlnib7+/nISuv9UFeXnaePrq/Rybq4+3l2qygOVnoZf29/8v0BLrYJZY3RXVqHuGJTqz+r4mnSk YzKJCCCAAAIIIIAAAggggAACCCCAQL0EmmjgqVSyHiTnq133n/9Rsxc9qas9T6ybpuueytKi8enB AzTb+gNCxwzqpeFmvKLaw0fBrNZcyoldAgn3PvE3TXhsZGDZPlO0fJ6WfeXv0mdfEzrfsrVzcGpX vsMj4qysMdbfKsJVvUePjDpdz6fN1erHRmva0NFWcsi0663g4Oqbdhpj1R54yt9WqtE9at8mZAe2 haptb+r2KT/Tn1ZZY2GZLoyzVuqO8QOiOi+24phFAAEEEEAAAQQQQAABBBBAAIFmKNCiKdW51RH+ gI3p7mYLiVnjK417fLF6H+Gt7tKJ/fXy58GauxNP0y8u9Q5G/u83pui2V7cGV4bNVX1ZqHcWzdXv b/qTCv7lXZlwQk9d2OoIz8IX83+lmxduCssllRUs1PBfzqmR7k+w6tj1tLM9i6Wv/E1bvGOQ+1dL pR/qoetXBpftxxdj/T2FVpcq762vtWH+OHP8u4L7sc11HjAkcJy25NBZWxAsb0Nh6DqzZD1hcNf6 t7V40WJt2OcNKoVvZA2WPqffTwNBJ2v9zIlD9NgH5eGbsowAAggggAACCCCAAAIIIIAAAoexQNMI PJXs0cb1G/T3fH/AaJ5yczdq60c7VWW1fLKm9oO0eMEE77z5f8LEu5W74RMVWQ13zDTsGqsrnnea OSZDI257QRt2l3nyf1VWqq0mWPLEzcPV9n96mTGjrtejM2/W6s99gZPWZ+j+Z37rz66Zv+6ntOE3 afHyXK17Z5UnX8ezfx3oqhbYMGwmrVeaL+VlnXf+TaZ+O1X+ZZE2vTVPwzufq2cDB5Oifdt3at+X wcBNTPUPq8fMMT004eHX9IkVGPraG8yr+nKL/nxtTqDFVu/OJrjnNCV21FktvUG4D+88T48u3aTy sjLt21qg1+bdo35t2qvnj4Yq5/JxmrRgi1MJpgVXhUq//bbGur+v21EjjQQEEEAAAQQQQAABBBBA AAEEEDh8BVwHKyr8zYwa5ShdqtRzIztqvKcbXc0qPLCmRBMyvR3nrJY080ae5Oty5932B/fn6e2r MzwLu5bfpZ4/u7NmIQ4pCb2nKO/N6erROrhy3bwr9eOr/xpMqGVu1nsl5ol4YR36Dnyo4Secqze+ rrs7nrfoP6u44tJA97NY6u+q3qybjj9LMyu/rqXW/lVTta38D0qztbryr7Fe9705QyddNMOe5Dg/ 650i5Zx5bI11Lu3V3e166I+HQusyZWnd40rVKIwEBBBAAAEEEEAAAQQQQAABBBBotgKN3uLJ6qKW +fOfRQDMVpf2weCOWyka99QbmpQYHPW6/4ltA3k7Df29ij9do7vH9w6khc+MveERLV9XqOL3QoNO 1nZ9cx7X3k1v6J5JF4VkSx9xrR57bq1Kvlgfsu+QjawF03Jq8eZVunFwsM7+bSbNeltb3n8y0F3Q Ss+6tXMg6GQtx1r/Ql8ro4T0rJD9WGX7p7Eznte24shBJ2u71PNvUf6SBzXoSG/LJ39e69VrsdqU UeEYdLK2cauDrsqdE1KHPuPmaMLAho0XZZXJhAACCCCAAAIIIIAAAggggAACzU+g0Vs8/dfIDpRo 1579Skg13d8OHDJBoTZKPaqVdKSr/ru0uqnZtrdaFY1q38/TXc2xxZOt5Kov96q02uyrZZJSkpOV EKF1kS1L6GwD6l9VZPZ5ZFultvMGvqwuhiXmqXZymR93olKMRbT1sMqotI7DTAnRHofx+6qizGPQ 6uiawbjQA2YJAQQQQAABBBBAAAEEEEAAAQQON4FowyHN5/hNoKlTtzbe+pqASYMmW9DJn7+NyxuE SfInRHhNaNehjmfGRcjoT25A/RPSQvfZKjlFqQ08dH81rDJMuK5hk/Gz8jMhgAACCCCAAAIIIIAA AggggMD3U+DwDTzF6Xx6Wg1VVirJtFxSaZFK3N4hsYr2m4HPK7spITFOO6IYBBBAAAEEEEAAAQQQ QAABBBBA4DATOHy72sXhRFld64a161fLYOHZWlP8ojIIPsVBmyIQQAABBBBAAAEEEEAAAQQQQOBw E2j0wcWbOmhirUNCJZqh0ZkQQAABBBBAAAEEEEAAAQQQQAABBJwEaPHkpGJLc5ludmVVVbaU4GxC ghk0nMhTEIQ5BBBAAAEEEEAAAQQQQAABBBBAwCZA4MmGwSwCCCCAAAIIIIAAAggggAACCCCAQPwE 6GoXP0tKQgABBBBAAAEEEEAAAQQQQAABBBCwCRB4smEwiwACCCCAAAIIIIAAAggggAACCCAQPwEC T/GzpCQEEEAAAQQQQAABBBBAAAEEEEAAAZsAgScbBrMIIIAAAggggAACCCCAAAIIIIAAAvETIPAU P0tKQgABBBBAAAEEEEAAAQQQQAABBBCwCRB4smEwiwACCCCAAAIIIIAAAggggAACCCAQPwECT/Gz pCQEEEAAAQQQQAABBBBAAAEEEEAAAZsAgScbBrMIIIAAAggggAACCCCAAAIIIIAAAvETIPAUP0tK QgABBBBAAAEEEEAAAQQQQAABBBCwCRB4smEwiwACCCCAAAIIIIAAAggggAACCCAQPwECT/GzpCQE EEAAAQQQQAABBBBAAAEEEEAAAZsAgScbBrMIIIAAAggggAACCCCAAAIIIIAAAvETIPAUP0tKQgAB BBBAAAEEEEAAAQQQQAABBBCwCRB4smEwiwACCCCAAAIIIIAAAggggAACCCAQPwECT/GzpCQEEEAA AQQQQAABBBBAAAEEEEAAAZsAgScbBrMIIIAAAggggAACCCCAAAIIIIAAAvETIPAUP0tKQgABBBBA AAEEEEAAAQQQQAABBBCwCRB4smEwiwACCCCAAAIIIIAAAggggAACCCAQPwECT/GzpCQEEEAAAQQQ QAABBBBAAAEEEEAAAZsAgScbBrMIIIAAAggggAACCCCAAAIIIIAAAvETIPAUP0tKQgABBBBAAAEE EEAAAQQQQAABBBCwCRB4smEwiwACCCCAAAIIIIAAAggggAACCCAQPwECT/GzpCQEEEAAAQQQQAAB BBBAAAEEEEAAAZsAgScbBrMIIIAAAggggAACCCCAAAIIIIAAAvETIPAUP0tKQgABBBBAAAEEEEAA AQQQQAABBBCwCRB4smEwiwACCCCAAAIIIIAAAggggAACCCAQPwECT/GzpCQEEEAAAQQQQAABBBBA AAEEEEAAAZvAfwD6C4DV2ONZewAAAABJRU5ErkJggg== --Apple-Mail=_540B2063-7F8D-4C0B-983A-01E308BAF4B2-- --Apple-Mail=_F16BE124-119F-4749-964E-F591F52200E2-- From nobody Wed Oct 11 07:57:29 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B4A5134224; Wed, 11 Oct 2017 07:57:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QfDYOK0TaqOE; Wed, 11 Oct 2017 07:57:10 -0700 (PDT) Received: from z9m9z.htt-consult.com (z9m9z.htt-consult.com [50.253.254.3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE2A2132331; Wed, 11 Oct 2017 07:57:08 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by z9m9z.htt-consult.com (Postfix) with ESMTP id D58CA62169; Wed, 11 Oct 2017 10:57:06 -0400 (EDT) X-Virus-Scanned: amavisd-new at htt-consult.com Received: from z9m9z.htt-consult.com ([127.0.0.1]) by localhost (z9m9z.htt-consult.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP id oAXZGJ7gk4Km; Wed, 11 Oct 2017 10:56:54 -0400 (EDT) Received: from lx120e.htt-consult.com (unknown [192.168.160.12]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by z9m9z.htt-consult.com (Postfix) with ESMTPSA id 46ED362164; Wed, 11 Oct 2017 10:56:53 -0400 (EDT) To: Brian E Carpenter , Dino Farinacci Cc: "ideas@ietf.org" , "ietf@ietf.org" , "lisp@ietf.org list" References: <150670160872.14128.2758037992338326085.idtracker@ietfa.amsl.com> <778d5504-ba4f-d418-7b20-356353bb0fb2@cs.tcd.ie> <8kd5pq.oxb4pv.rtlo8t-qmf@mercury.scss.tcd.ie> <644DA50AFA8C314EA9BDDAC83BD38A2E0EAA7204@sjceml521-mbx.china.huawei.com> <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> <1f254140-1340-6c7d-9c73-e7137562c685@gmail.com> From: Robert Moskowitz Message-ID: Date: Wed, 11 Oct 2017 10:56:48 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 In-Reply-To: <1f254140-1340-6c7d-9c73-e7137562c685@gmail.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [lisp] [Ideas] WG Review: IDentity Enabled Networks (ideas) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Oct 2017 14:57:15 -0000 Just sqeezing in a couple more replies before the last days of the Holiday... On 10/04/2017 05:56 PM, Brian E Carpenter wrote: > On 05/10/2017 09:35, Dino Farinacci wrote: >> Adding lisp@ietf.org to cc list. >> >> How about creating a working group that solely focuses on deployment of a mapping system and does not specify how and where identifiers are allocated? > That seems reasonable, well defined and relatively uncontentious. > > The current proposed charter leaves me a bit puzzled. Firstly I agree > that the name 'IDEAS' is misleading, And other wg's are not? The IETF's desire for 'nice' names often results in names a little misleading. Thus need to read the charter. Not that everyone who worked on the charter got what they wanted. It is called compromise. > and 'GRIDS' tramples on previous work, Yeah, I did/dont like it. But it is not my draft. > and 'identity' is a red flag. Whow there! You were part of the Namespace Research Group? I think? I was and we we worked a lot on this and came to the conclusion that there could be no conclusion. Not even a rough concensus, it seemed. I have been using 'identity' to apply to things for 20 years. Pretty much ever since I started working with things. Anyone that holds the position that 'identity' means we are talking only about people are allowing their thinking to be clouded. So we use qualify our use of such terms. That is why I called it a 'Host Identity', then I was challenged as to what I was naming? Were you at the NL meeting the week before Oslo? 'Oh you are naming the stack'. ARGH! enough history. > But if we get past terminology distractions, > where's the meat? All the interesting stuff is relegated to drafts or a > wiki, and the output is a 'framework'. The IETF has a very mixed record > with 'framework' documents. The meat is what is missing in current ID/Loc technologies to realize the full potential. Discovery. Some level of reversiblity. Strong access controls. I plan on doing some real protocol work. And some real implementation guidelines for protecting privacy. Bob > > Brian > >> I have made suggestions before that such a working group should be in the ops area. Some examples include and are not limited to v6ops, dnsop, and mboned. >> >> Cheers, >> Dino >> >>> On Oct 4, 2017, at 12:45 PM, Stephen Farrell wrote: >>> >>> >>> Hiya, >>> >>> TL;DR - I am now even more convinced that this ought not >>> go ahead. (Sorry;-) >>> >>> On 04/10/17 19:48, Alexander Clemm wrote: >>>> There were a couple of things raised in the overall thread that I >>>> just wanted to quickly respond to: >>>> >>>> Clearly privacy is an important issue and concern. The current >>>> charter proposal includes a requirement for a detailed analysis of >>>> this aspect. If this aspect needs to be expanded, sure, let's do >>>> this. >>> TBH, I don't think that'd help, for me at least. I don't >>> see any way in which such permanent strings representing >>> identity can be defined to be usable as claimed and not >>> be perniciously privacy invasive. So some promises to >>> ponder the problem in charter text wouldn't do it for >>> me. (And tbh, I've seen that can kicked down that road >>> before, so I'm skeptical of such promises in general.) >>> >>>> Everyone seems to be jumping up and down regarding the use of the >>>> term of "identity" as if a foregone conclusion that this is a synonym >>>> for "privacy invasion". However: - "Identity" does not imply >>>> "personal identity". Really, this is an identifier scheme for >>>> endpoints. >>> Sorry, what I assume is the relevant draft [1] says the "identity" >>> (denoted "IDy") is a "Unique and Permanent Identity" and that >>> "Networks may treat traffic differently depending on the IDy of >>> source or destination" and also seems to envisage a large logical >>> database of everyone's IDy's: "Identity also allows to have metadata >>> associated it to be applied, regardless of which IDf is used to >>> refer it." (Where IDf is the identifier that'll later be mapped >>> to a locator via, I assume, HIP or LISP or similar.) >>> >>> I think it's entirely correct to jump up and down about the >>> privacy consequences of the above. (Not to mention the potential >>> censorship and discriminatory aspects.) >>> >>> [1] https://tools.ietf.org/html/draft-ccm-ideas-identity-use-cases-01 >>> >>>> Perhaps even "identity" is a misnomer. >>> Well, it was presumably your choice (where your == some set of >>> the proponents). If that's a mistake, then it seems a fairly >>> fatal one - to get the name wrong for an effort all about mapping >>> names to identifiers;-) >>> >>>> If you will, >>>> identity as conceived in the context of IDEAS is a second level of >>>> identifier that does not have to be exposed over the data plane - >>>> Because of this, it may result in greater privacy than existing >>>> schemes, not less. >>> I see that argument in [1] but I'm not buying it tbh. To get >>> that level of protection from such an indirection, one would >>> have to have something like Tor hidden services and perhaps >>> one would have to *not* standardise the mapping from human >>> meaningful identifiers to those used as IDf, and esp. not the >>> reverse mapping. Defining that reverse mapping cannot but be >>> privacy invasive afaics. (There could maybe be ways to define >>> how an already hashed human meaningful identifier could then >>> be further hashed to become an IDy but I don't really see the >>> point of that at all, other than to just standardise something >>> for the fun of the process.) >>> >>>> It enables you, for example, to obfuscate >>>> endpoints to outside observers as you wouldn't need to use personal >>>> unique long-lived identifiers, quite the contrary. - There is also a >>>> security dimension here. If I am victim of a phishing attack because >>>> my network information (like today) is exposed to botnets, >>> (Nit: that says nothing about being a victim of, only of being >>> a target of, an attempted attack. Speaking of victims also >>> tends not to lead to more objective analysis, so I think it's >>> better to not go there unless it's relevant, which I don't >>> think is the case here, because...) >>> >>> I don't understand what network information you mean. If you >>> mean email addresses, and are proposing that the email ecosystem >>> change to use some IDf or LOC values, that doesn't seem at all >>> realistic to me. If you don't mean email addresses then I don't >>> see how any lower layer change will affect attempted phishes. >>> The routing area is probably also the entirely wrong venue for >>> any real anti-phishing effort. >>> >>> That really wasn't a good example;-) >>> >>>> phishers >>>> etc who can hide from me (but not I from them) and remain anonymous >>>> or impersonate legitimate users, I do consider this a very serious >>>> threat also to my privacy. How can IETF counteract such threats? I >>>> think that IDEAS, if done right, can provide a contribution here. >>> I don't see that at all. Unless I'm mistaken that seems like >>> wishful thinking to me. >>> >>>> One aspect that has been missing from the discussion is the question >>>> whether there is a distinction between the network provider who >>>> provides GRIDS services and an outside attacker / observer. I think >>>> this distinction is important. The way I see it, if done right >>>> (sure, big "if", and requiring detailed analysis), IDEAS as I would >>>> envision it can contribute greatly to provide greater security and >>>> privacy from outside attackers. At the same time, as it is currently >>>> envisioned, there clearly is a trust relationship between an entity >>>> and the provider of "its" GRIDS services. The mapping database will >>>> have information about locator-identifier and identifier-identifier >>>> mappings, so GRIDS will know which identifiers its endpoints are >>>> using. Clearly, if this trust is abused because the provider cannot >>>> be trusted, if you are concerned that it sells your endpoint’s >>>> information to the mob or a suppressive government, there is an >>>> issue. However, when concerned about this scenario, it seems to me >>>> one would have equal reason to e.g. not trust your mobile service >>>> provider either, who can track you, knows your location, and has your >>>> customer data. >>> ISTM that introducing that GRIDS thing makes matters worse and not >>> better, because, as you yourself say, it is clear that whoever has >>> access to the GRIDS information would be better able to track people >>> compared to now. >>> >>> I would prefer to see fewer long lived identifiers in networking >>> and not more, and this proposal introduces more long lived identifiers >>> (erroneously calling those identities). >>> >>> Regardless of what one thinks of them, given that things like >>> HIP and LISP exist, and try tackle the ID/LOC split, I see no benefit >>> adding this extra layer of indirection with a privacy invasive >>> "Unique and Permanent" identifier which seems to be the only >>> non-overlapping part of this work - in fact I only see downsides. >>> >>> Cheers, >>> S. >>> >>> >>>> --- Alex >>>> >>>> >>>>> -----Original Message----- From: Ideas >>>>> [mailto:ideas-bounces@ietf.org] On Behalf Of >>>>> stephen.farrell@cs.tcd.ie Sent: Wednesday, October 04, 2017 9:35 >>>>> AM To: tom@herbertland.com Cc: ideas@ietf.org; >>>>> phill@hallambaker.com; ietf@ietf.org Subject: Re: [Ideas] WG >>>>> Review: IDentity Enabled Networks (ideas) >>>>> >>>>> >>>>> >>>>> On Wednesday, 4 October 2017, Tom Herbert wrote: >>>>>> On Wed, Oct 4, 2017 at 7:57 AM, Phillip Hallam-Baker >>>>>> wrote: >>>>>>> On Fri, Sep 29, 2017 at 2:31 PM, Stephen Farrell >>>>>>> wrote: >>>>>>>> >>>>>>>> As currently described, I oppose creation of this working >>>>>>>> group on the basis that it enables and seemingly encourages >>>>>>>> embedding identifiers for humans as addresses. Doing so would >>>>>>>> have significant privacy downsides, would enable new methods >>>>>>>> for censorship and discrimination, and could be very hard to >>>>>>>> mitigate should one wish to help protect people's privacy, as >>>>>>>> I think is current IETF policy. >>>>>>>> >>>>>>>> If the work precluded the use of any identifiers that >>>>>>>> strongly map to humans then I'd be ok with it being done as >>>>>>>> it'd then only be a waste of resources. But I don't know how >>>>>>>> that could be enforced so I think it'd be better to just not >>>>>>>> do this work at all. >>>>>>>> >>>>>>>> S. >>>>>>> >>>>>>> +1 >>>>>>> >>>>>>> I know how to restrict the work to 'meaningless' identifiers, >>>>>>> require that the identifiers be the output of a cryptographic >>>>>>> algorithm. >>>>>>> >>>>>>> Now strictly speaking, this only limits scope to identifiers >>>>>>> that are indexical as opposed to rendering them meaningless but >>>>>>> I think that was the sense of it. >>>>>>> >>>>>>> >>>>>>> Nöth proposed a trichotemy of identifiers as follows >>>>>>> >>>>>>> * Identity, the signifier is the signified (e.g. data: URI) >>>>>>> >>>>>>> * Indexical, the signifier is related to the signified by a >>>>>>> systematic relationship, (e.g. ni URIs, SHA256Data), PGP >>>>>>> fingerprints etc.) >>>>>>> >>>>>>> * Names, the signifier is the related to the signified by a >>>>>>> purely conventional relationship, (e.g. example.com to its >>>>>>> owner) >>>>>>> >>>>>>> >>>>>>> There is a big difference between attempting to manage >>>>>>> indexical signifiers and names. Especially when the people >>>>>>> trying to do so refuse to read any of the literature on >>>>>>> semiotics. >>>>>>> >>>>>>> Names are problematic because the only way that a conventional >>>>>>> relationship can be implemented is through some sort of >>>>>>> registration infrastructure and we already have one of those >>>>>>> and the industry that manages it has a marketcap in the tens of >>>>>>> billions. >>>>>>> >>>>>>> Identifiers do lead to tractable solutions. But, this proposal >>>>>>> looks a bit unfocused for IRTF consideration, an IETF WG? >>>>>>> Really? >>>>>>> >>>>>> Identifiers are equivalent to addresses in that they indicate a >>>>>> node in the network for the purposes of end to end >>>>>> communications. The only difference between identifiers and >>>>>> addresses is that identifiers are not topological. Virtual >>>>>> addresses in network virtualization are also identifiers. So the >>>>>> security properties are the same when considering privacy. For >>>>>> instance, if applications use temporary addresses for privacy, it >>>>>> would have equivalent properties using temporary identifiers. In >>>>>> fact from the application POV this would be transparent. It could >>>>>> get a pool of apparently random addresses to choose from as >>>>>> source of communication, it shouldn't know or even care if the >>>>>> addresses are identifiers. >>>>>> >>>>>> Identity is a completely separate concept from identifiers. Is >>>>>> not required in any of the identifier/locator protocols and AFAIK >>>>>> none of them even mention the term. There is no association of an >>>>>> identity of user behind and identifier any more than there is an >>>>>> association of identity behind IP address. The fact that the >>>>>> words "identifier" and "identity" share a common prefix is an >>>>>> unfortunate happenstance :-). >>>>> >>>>> Yes. But doesn't that mean either the name of this effort is wildly >>>>> misleading or else the effort is hugely problematic from a privacy >>>>> POV? Either way, istm this ought not proceed. >>>>> >>>>> S. >>>>> >>>>>> Tom >>>>>> >>>>> _______________________________________________ Ideas mailing list >>>>> Ideas@ietf.org https://www.ietf.org/mailman/listinfo/ideas >>> _______________________________________________ >>> Ideas mailing list >>> Ideas@ietf.org >>> https://www.ietf.org/mailman/listinfo/ideas >> . >> > From nobody Wed Oct 11 09:16:14 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 873CD1342D5 for ; Wed, 11 Oct 2017 09:16:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9fMvxDHR9iDj for ; Wed, 11 Oct 2017 09:16:08 -0700 (PDT) Received: from mx43-out1.antispamcloud.com (mx43-out1.antispamcloud.com [138.201.61.189]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 15C121342C2 for ; Wed, 11 Oct 2017 09:16:08 -0700 (PDT) Received: from xsmtp06.mail2web.com ([168.144.250.232]) by mx36.antispamcloud.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.89) (envelope-from ) id 1e2Jfw-0000H5-9u for lisp@ietf.org; Wed, 11 Oct 2017 18:16:05 +0200 Received: from [10.5.2.17] (helo=xmail07.myhosting.com) by xsmtp06.mail2web.com with esmtps (TLS-1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.63) (envelope-from ) id 1e2Jfs-00067D-L6 for lisp@ietf.org; Wed, 11 Oct 2017 12:16:01 -0400 Received: (qmail 29808 invoked from network); 11 Oct 2017 16:15:59 -0000 Received: from unknown (HELO [192.168.1.103]) (Authenticated-user:_huitema@huitema.net@[172.56.42.26]) (envelope-sender ) by xmail07.myhosting.com (qmail-ldap-1.03) with ESMTPA for ; 11 Oct 2017 16:15:58 -0000 To: Robert Moskowitz , Brian E Carpenter , Dino Farinacci Cc: "ideas@ietf.org" , "ietf@ietf.org" , "lisp@ietf.org list" References: <150670160872.14128.2758037992338326085.idtracker@ietfa.amsl.com> <778d5504-ba4f-d418-7b20-356353bb0fb2@cs.tcd.ie> <8kd5pq.oxb4pv.rtlo8t-qmf@mercury.scss.tcd.ie> <644DA50AFA8C314EA9BDDAC83BD38A2E0EAA7204@sjceml521-mbx.china.huawei.com> <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> <1f254140-1340-6c7d-9c73-e7137562c685@gmail.com> From: Christian Huitema Message-ID: Date: Wed, 11 Oct 2017 09:15:56 -0700 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------92B9B6E8D99A2797A6DF8518" Content-Language: en-US X-Originating-IP: 168.144.250.232 X-SpamExperts-Domain: xsmtpout.mail2web.com X-SpamExperts-Username: 168.144.250.0/24 Authentication-Results: antispamcloud.com; auth=pass smtp.auth=168.144.250.0/24@xsmtpout.mail2web.com X-SpamExperts-Outgoing-Class: unsure X-SpamExperts-Outgoing-Evidence: Combined (0.26) X-Recommended-Action: accept X-Filter-ID: EX5BVjFpneJeBchSMxfU5nt2WKbMNDUxhDfjWr63rHQXv9krsgRhBn0ayn6qsUc7wVs6Zcv/r9lN 2vpy9awzD7gNzB/4Jkrw1eDLcif59ft5byFp/7jATAGFwe7RZ4oVB98yDTitFWvbHwz9vKZpm/D1 Ad4OAlzgsEH8ABk9OXtfZdf1siwYNJirk4ABKayRZsQEbaxxISMHgJxrdMdSS4B6hVJPXxgisa+g wkHvC+OlqTWdUBHTyoJG+mqGBYi8bWhnKPmUW/oWx9V3wTBfG4Y+ZnfomCI+rgOtA8u12EwuwjY+ quNh23liqqeOwMwwqy4lE5s79uoGaeHjfOqnzPcqs5RcLqZ0NIAm9sCHr2eyNIkhDia+jiI1x+25 WhJqOf3+cMSJJ9Vk8Y6lSpImWOFtQUIkkMAnR5eEArf6zd8XhA0UizXQaOxPdjju+1r1qq9IJIue NdZ12JJe7t4cD3McN6qoXPjenLhIOF1oeRYzOG1K2UOhXehmpLbLUpy4Qq2CcNj3kTexD/r3mYRl VTvBN9bCsMRC+NlSYmL03IDh9PobrbwB1Jj4vRnvuFdQKx3Zprq3ZEpafGy+zLjUntilh9dvYvV/ 5Pg3UZt3l4cobM5+AwD0A5qDgSPsXJ3GaydQSHaKCADuB2RogJvWPZnHEeB4hpRrmo/duzUUp/L8 t54grI4U4SFuX4VcQn799IrY44s9jB8hT0eA35srq3LYM3A6BXfvel8OEFDbU529jj6VuEkkQiOd 2CLFCAI+lXmk/kN/ohhMsDjVJmzLuIj2lB9TLiDMfXuvSrucRXqLltlcS50veJ4w4EzZsk1xpsib JQz6bCR19sO/++nnSqCDBedeB75TJ0VuxRY+unEnaeycva4NRXu2m3j3Y8zB9xGo0bndvIE+SDBs cm+vLiZuZ5OAUoGBziSYFLZuu6wTRhJez+ibxiREoUwadL3g X-Report-Abuse-To: spam@quarantine5.antispamcloud.com Archived-At: Subject: Re: [lisp] [Ideas] WG Review: IDentity Enabled Networks (ideas) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Oct 2017 16:16:09 -0000 This is a multi-part message in MIME format. --------------92B9B6E8D99A2797A6DF8518 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 10/11/2017 7:56 AM, Robert Moskowitz wrote: >> and 'identity' is a red flag. > > Whow there!=C2=A0 You were part of the Namespace Research Group?=C2=A0 = I think?=C2=A0 > I was and we we worked a lot on this and came to the conclusion that > there could be no conclusion.=C2=A0 Not even a rough concensus, it seem= ed. > > I have been using 'identity' to apply to things for 20 years. Pretty > much ever since I started working with things.=C2=A0 Anyone that holds = the > position that 'identity' means we are talking only about people are > allowing their thinking to be clouded.=20 I am concerned that the current proponents of the IDEAS work are mainly resisting the feedback, treating it as some roadblock put in the path of their work by misguided privacy purists, and attempting to remove the roadblocks by adding some weasel words to the charter. I would feel much more confident if these proponents acknowledged the tension between privacy and stable identifiers of any sort, if that tension was clearly noted in the charter, and if privacy goals were clearly stated. Specifically, I think there is a contradiction between some of documents. For example, draft-padma-ideas-problem-statement-01 states tha= t: o A single entity may have multiple IDs, and IDs of the same entity may have different life spans that are different from the lifespan of the entity. Furthermore, it is understood that IDs may have different lifecycles, which may be permanent or ephemeral by choice or design. o Ephemeral (temporary) IDs may be used as a short-lived pseudonym for a permanent ID to protect the privacy of the related entity. But then, draft-ccm-ideas-identity-use-cases-01 states that: a. Unique and Permanent Identity representing the entity enables authentication (AUTH) with the mapping and Identity services infrastructure. While it is possible to do AUTH on Identifiers those are not permanently associated to the entity. Moreover, AUTH operation is a relatively an expensive and inefficient procedure (compared to LOC resolution for example) and can cause excessive startup delays for lot of applications. The tension is obvious. On one hand, the ephemeral identifiers envisaged in the problem statement would pretty much align the privacy properties of the ID to those of IPv6 privacy addresses, and that's good. On the other hand, the requirement to perform authentication on identities completely negates that property. I would be fine if the support for "Unique and Permanent Identity" was explicitly excluded from the charter. There is obviously a need to support some form of access control to a mapping database, but you do not need a reference to a permanent identity for that -- systems similar to CGA would work just fine. --=20 Christian Huitema --------------92B9B6E8D99A2797A6DF8518 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit

On 10/11/2017 7:56 AM, Robert Moskowitz wrote:

and 'identity' is a red flag.

Whow there!  You were part of the Namespace Research Group?  I think?  I was and we we worked a lot on this and came to the conclusion that there could be no conclusion.  Not even a rough concensus, it seemed.

I have been using 'identity' to apply to things for 20 years. Pretty much ever since I started working with things.  Anyone that holds the position that 'identity' means we are talking only about people are allowing their thinking to be clouded.

I am concerned that the current proponents of the IDEAS work are mainly resisting the feedback, treating it as some roadblock put in the path of their work by misguided privacy purists, and attempting to remove the roadblocks by adding some weasel words to the charter. I would feel much more confident if these proponents acknowledged the tension between privacy and stable identifiers of any sort, if that tension was clearly noted in the charter, and if privacy goals were clearly stated.

Specifically, I think there is a contradiction between some of documents. For example, draft-padma-ideas-problem-statement-01 states that:
   o  A single entity may have multiple IDs, and IDs of the same entity
      may have different life spans that are different from the lifespan
      of the entity.  Furthermore, it is understood that IDs may have
      different lifecycles, which may be permanent or ephemeral by
      choice or design.

   o  Ephemeral (temporary) IDs may be used as a short-lived pseudonym
      for a permanent ID to protect the privacy of the related entity.
But then, draft-ccm-ideas-identity-use-cases-01 states that:
   a.  Unique and Permanent Identity representing the entity enables
       authentication (AUTH) with the mapping and Identity services
       infrastructure.  While it is possible to do AUTH on Identifiers
       those are not permanently associated to the entity.  Moreover,
       AUTH operation is a relatively an expensive and inefficient
       procedure (compared to LOC resolution for example) and can cause
       excessive startup delays for lot of applications.
The tension is obvious. On one hand, the ephemeral identifiers envisaged in the problem statement would pretty much align the privacy properties of the ID to those of IPv6 privacy addresses, and that's good. On the other hand, the requirement to perform authentication on identities completely negates that property.

I would be fine if the support for "Unique and Permanent Identity" was explicitly excluded from the charter. There is obviously a need to support some form of access control to a mapping database, but you do not need a reference to a permanent identity for that -- systems similar to CGA would work just fine.

-- 
Christian Huitema
--------------92B9B6E8D99A2797A6DF8518-- From nobody Wed Oct 11 10:33:02 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C823A12895E; Wed, 11 Oct 2017 10:32:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id imUUCu4xJ5PL; Wed, 11 Oct 2017 10:32:47 -0700 (PDT) Received: from mail-wm0-x236.google.com (mail-wm0-x236.google.com [IPv6:2a00:1450:400c:c09::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2BFB2126DD9; Wed, 11 Oct 2017 10:32:47 -0700 (PDT) Received: by mail-wm0-x236.google.com with SMTP id q124so6799787wmb.0; Wed, 11 Oct 2017 10:32:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=rvYsW/4Tk2d7QtfMqQn7wYR4YILkyYS/TaHSOsMbsuc=; b=dYXP+DhKoOq6VgJxSYzzwDAWZyc7WmgaJkUDg5Qv7ZZNuMtUr9ZOWNnVObQHEuXrsV TkVpAjcNwiEL1Pyj3Hew5bExedO0DLNTaM6MCbH417o4VKPBf5QcZUslEygFkqzofmao 43KXnZOV7Mrd1VSogIJ+RsFnxUl4EYHbTNwfKKikEHabwE4CSb1IMLBR30wmjLU/cF1Q onp8shWy/OvNc9da2Z754hAySV7ezEynxzd95/riFVqs2I7JZHe+7PBHGHdj077hf1wh LidLoj0SysvLcdogEUl0k5DtVUtJP3gIabPmNza86f8+zs5NeCYrsUScEhp8dydhDfTq 1+tw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=rvYsW/4Tk2d7QtfMqQn7wYR4YILkyYS/TaHSOsMbsuc=; b=ZxaESS0cx00Jdm4rKnpTXizLx490vLfEeSfhaw+haYAkaykRVgvQsG+hnNI/gLhrH8 3sipoMkkQ3k9RpU5XMphVNaY8ezveL7zmi937CizFY3Jz+S10/2p85VrXzc2Cif42Deg QkYLZ/2jep/4TwZK253cTqFWVttVr2HVFElYAwou9qmJ57ocO626Q0IY70Zj5a+cQrCJ p4yLpaZlmSUNgylyJ91RN3a66tBHRL1aaYYhHC02Kr5bMezoaZddKNUebxDE5FAC0VzQ H0aSSwC+ZBUOE1ktfUW67c3b3mugPusX0SrRoJsotdnz3+I8uxw9gFSjJ3DRdvrc+Wjy iHAg== X-Gm-Message-State: AMCzsaU2h/RyWsiFyYxNsy/Z/TccN9cRlyRqNcRP8DX5wo6MlnajCnio wpVP/grHG4EBYUUl08we6XdnSYMxIOkl2AVXAGE= X-Google-Smtp-Source: AOwi7QDOoPEc+JmW8HJqlgoWm4bmg2WKrunbAWx5HgGormDJkg1OSfL3G+SuaAGlKeawZ6KPl9AiaqM3Mtbb+LlJgA0= X-Received: by 10.223.173.175 with SMTP id w44mr327153wrc.19.1507743165659; Wed, 11 Oct 2017 10:32:45 -0700 (PDT) MIME-Version: 1.0 Received: by 10.223.173.86 with HTTP; Wed, 11 Oct 2017 10:32:44 -0700 (PDT) In-Reply-To: References: <150670160872.14128.2758037992338326085.idtracker@ietfa.amsl.com> <778d5504-ba4f-d418-7b20-356353bb0fb2@cs.tcd.ie> <8kd5pq.oxb4pv.rtlo8t-qmf@mercury.scss.tcd.ie> <644DA50AFA8C314EA9BDDAC83BD38A2E0EAA7204@sjceml521-mbx.china.huawei.com> <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> <1f254140-1340-6c7d-9c73-e7137562c685@gmail.com> From: Padma Pillay-Esnault Date: Wed, 11 Oct 2017 10:32:44 -0700 Message-ID: To: Christian Huitema Cc: Robert Moskowitz , Brian E Carpenter , Dino Farinacci , "ideas@ietf.org" , "ietf@ietf.org" , "lisp@ietf.org list" Content-Type: multipart/alternative; boundary="f403045ceff2cd3fef055b48cf14" Archived-At: Subject: Re: [lisp] [Ideas] WG Review: IDentity Enabled Networks (ideas) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Oct 2017 17:32:50 -0000 --f403045ceff2cd3fef055b48cf14 Content-Type: text/plain; charset="UTF-8" On Wed, Oct 11, 2017 at 9:15 AM, Christian Huitema wrote: > On 10/11/2017 7:56 AM, Robert Moskowitz wrote: > > and 'identity' is a red flag. > > > Whow there! You were part of the Namespace Research Group? I think? I > was and we we worked a lot on this and came to the conclusion that there > could be no conclusion. Not even a rough concensus, it seemed. > > I have been using 'identity' to apply to things for 20 years. Pretty much > ever since I started working with things. Anyone that holds the position > that 'identity' means we are talking only about people are allowing their > thinking to be clouded. > > > I am concerned that the current proponents of the IDEAS work are mainly > resisting the feedback, treating it as some roadblock put in the path of > their work by misguided privacy purists, and attempting to remove the > roadblocks by adding some weasel words to the charter. I would feel much > more confident if these proponents acknowledged the tension between privacy > and stable identifiers of any sort, if that tension was clearly noted in > the charter, and if privacy goals were clearly stated. > > As one of the proponents, I feel I need to speak up because blanket statements are just not helping. Speaking on behalf of my fellow proponents, we have always welcomed constructive feedback from people who want/can contribute and make the technology better. We have been willing to clarify the charter (clarification does not mean weaseling). If it is helpful to move forward, I am willing to volunteer for this work and discuss with anyone to ensure constructive feedback and comments are addressed. Specifically, I think there is a contradiction between some of documents. > For example, draft-padma-ideas-problem-statement-01 states that: > > o A single entity may have multiple IDs, and IDs of the same entity > may have different life spans that are different from the lifespan > of the entity. Furthermore, it is understood that IDs may have > different lifecycles, which may be permanent or ephemeral by > choice or design. > > o Ephemeral (temporary) IDs may be used as a short-lived pseudonym > for a permanent ID to protect the privacy of the related entity. > > But then, draft-ccm-ideas-identity-use-cases-01 states that: > > a. Unique and Permanent Identity representing the entity enables > authentication (AUTH) with the mapping and Identity services > infrastructure. While it is possible to do AUTH on Identifiers > those are not permanently associated to the entity. Moreover, > AUTH operation is a relatively an expensive and inefficient > procedure (compared to LOC resolution for example) and can cause > excessive startup delays for lot of applications. > > > As said earlier this draft was not updated by the authors and a new version was posted yesterday. https://www.ietf.org/mail-archive/web/ideas/current/msg00520.html > The tension is obvious. On one hand, the ephemeral identifiers envisaged > in the problem statement would pretty much align the privacy properties of > the ID to those of IPv6 privacy addresses, and that's good. On the other > hand, the requirement to perform authentication on identities completely > negates that property. > > I would be fine if the support for "Unique and Permanent Identity" was > explicitly excluded from the charter. > AFAIK, none of the proponents resisted that. > There is obviously a need to support some form of access control to a > mapping database, > Agreed. > but you do not need a reference to a permanent identity for that -- > systems similar to CGA would work just fine. > The identity of the device is just adding a lever of identifier which effectively allows authentication to modify the identifiers used by that device but also what the users of these identifiers can look up. If we had used "user of identifier" it would have been misconstrued for humans. So damn if you do and damn if you don't ... We are open for discussions anytime. Padma > > -- > Christian Huitema > > > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp > > --f403045ceff2cd3fef055b48cf14 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Wed, Oct 11, 2017 at 9:15 AM, Christian Huitema &l= t;huitema@huitema.= net> wrote:
=20 =20 =20

On 10/11/2017 7:56 AM, Robert Moskowitz wrote:

and 'identit= y' is a red flag.

Whow there!=C2=A0 You were part of the Namespace Research Group?=C2= =A0 I think?=C2=A0 I was and we we worked a lot on this and came to the conclusion that there could be no conclusion.=C2=A0 Not even a rough concensus, it seemed.

I have been using 'identity' to apply to things for 20 years. Pretty much ever since I started working with things.=C2=A0 Anyone th= at holds the position that 'identity' means we are talking only = about people are allowing their thinking to be clouded.

I am concerned that the current proponents of the IDEAS work are mainly resisting the feedback, treating it as some roadblock put in the path of their work by misguided privacy purists, and attempting to remove the roadblocks by adding some weasel words to the charter. I would feel much more confident if these proponents acknowledged the tension between privacy and stable identifiers of any sort, if that tension was clearly noted in the charter, and if privacy goals were clearly stated.


As one of the proponents, I = feel I need to speak up because blanket statements are just not helping.=C2= =A0

Speaking on behalf of my fellow proponents, we= have always welcomed constructive feedback from people who want/can contri= bute and make the technology better. We have been willing to clarify the ch= arter (clarification does not mean weaseling).=C2=A0

If it is helpful to =C2=A0move forward, I am willing to volunteer for th= is work and discuss with anyone to ensure constructive feedback and comment= s are addressed.


Specifically, I think there is a contradiction between some of documents. For example, draft-padma-ideas-problem-statement-01 states that:
   o  A single entity may have multiple IDs, a=
nd IDs of the same entity
      may have different life spans that are different from the lifespan
      of the entity.  Furthermore, it is understood that IDs may have
      different lifecycles, which may be permanent or ephemeral by
      choice or design.

   o  Ephemeral (temporary) IDs may be used as a short-lived pseudonym
      for a permanent ID to protect the privacy of the related entity.
    But then, draft-ccm-ideas-identity-use-cases-01 states that:

    
   a.  Unique and Permanent Identity represent=
ing the entity enables
       authentication (AUTH) with the mapping and Identity services
       infrastructure.  While it is possible to do AUTH on Identifiers
       those are not permanently associated to the entity.  Moreover,
       AUTH operation is a relatively an expensive and inefficient
       procedure (compared to LOC resolution for example) and can cause
       excessive startup delays for lot of applications.

As said earlier this draft was n= ot updated by the authors and a new version was posted yesterday.


=C2=A0
The tension is obvious. On one hand, the ephemeral id= entifiers envisaged in the problem statement would pretty much align the privacy properties of the ID to those of IPv6 privacy addresses, and that's good. On the other hand, the requirement to perform authentication on identities completely negates that property.

I would be fine if the support for "Unique and Permanent Identity&= quot; was explicitly excluded from the charter.

<= /div>
AFAIK, none of the proponents resisted that.
=C2=A0
There is obviously a need to support some form of access control to a mapping database,

Agreed.
=C2=A0
but you do not need a reference to a permanent identity for that -- systems similar to CGA would work just fine.
=C2= =A0

The identity of the device is just adding = a lever of identifier which effectively allows authentication to modify the= identifiers used by that device but also what the users of these identifie= rs can look up. If we had used "user of identifier" it would have= been misconstrued for humans. So damn if you do and damn if you don't = ...=C2=A0

We are open for discussions anytime.

Padma




--=20
Christian Huitema

_______________________________________________
lisp mailing list
lisp@ietf.org
https://www.ietf.org/mailman/listinfo/lisp


--f403045ceff2cd3fef055b48cf14-- From nobody Wed Oct 11 11:48:17 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 425F91331D7; Wed, 11 Oct 2017 11:48:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.22 X-Spam-Level: X-Spam-Status: No, score=-4.22 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zSScPSDkL436; Wed, 11 Oct 2017 11:48:01 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 388941331DD; Wed, 11 Oct 2017 11:48:00 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml702-cah.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id DXJ38193; Wed, 11 Oct 2017 18:47:58 +0000 (GMT) Received: from SJCEML701-CHM.china.huawei.com (10.208.112.40) by lhreml702-cah.china.huawei.com (10.201.108.43) with Microsoft SMTP Server (TLS) id 14.3.301.0; Wed, 11 Oct 2017 19:47:57 +0100 Received: from SJCEML521-MBX.china.huawei.com ([169.254.1.175]) by SJCEML701-CHM.china.huawei.com ([169.254.3.215]) with mapi id 14.03.0301.000; Wed, 11 Oct 2017 11:47:54 -0700 From: Alexander Clemm To: Padma Pillay-Esnault , Christian Huitema CC: "ideas@ietf.org" , "lisp@ietf.org list" , Dino Farinacci , Robert Moskowitz , Brian E Carpenter , "ietf@ietf.org" Thread-Topic: [Ideas] [lisp] WG Review: IDentity Enabled Networks (ideas) Thread-Index: AQHTQrcK0eH/tmmnfEmavTiozjDgVKLe+kVA Date: Wed, 11 Oct 2017 18:47:52 +0000 Message-ID: <644DA50AFA8C314EA9BDDAC83BD38A2E0EAA8E6D@sjceml521-mbx.china.huawei.com> References: <150670160872.14128.2758037992338326085.idtracker@ietfa.amsl.com> <778d5504-ba4f-d418-7b20-356353bb0fb2@cs.tcd.ie> <8kd5pq.oxb4pv.rtlo8t-qmf@mercury.scss.tcd.ie> <644DA50AFA8C314EA9BDDAC83BD38A2E0EAA7204@sjceml521-mbx.china.huawei.com> <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> <1f254140-1340-6c7d-9c73-e7137562c685@gmail.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.213.48.142] Content-Type: multipart/alternative; boundary="_000_644DA50AFA8C314EA9BDDAC83BD38A2E0EAA8E6Dsjceml521mbxchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020201.59DE675E.0237, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=169.254.1.175, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: 846096c927bee242d3d60c086cccb0f6 Archived-At: Subject: Re: [lisp] [Ideas] WG Review: IDentity Enabled Networks (ideas) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Oct 2017 18:48:04 -0000 --_000_644DA50AFA8C314EA9BDDAC83BD38A2E0EAA8E6Dsjceml521mbxchi_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VHdvIGFkZGl0aW9uYWwgdGhvdWdodHMgaW5saW5lLCA8QUxFWD4NCg0KRnJvbTogSWRlYXMgW21h aWx0bzppZGVhcy1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgUGFkbWEgUGlsbGF5LUVz bmF1bHQNClNlbnQ6IFdlZG5lc2RheSwgT2N0b2JlciAxMSwgMjAxNyAxMDozMyBBTQ0KVG86IENo cmlzdGlhbiBIdWl0ZW1hIDxodWl0ZW1hQGh1aXRlbWEubmV0Pg0KQ2M6IGlkZWFzQGlldGYub3Jn OyBsaXNwQGlldGYub3JnIGxpc3QgPGxpc3BAaWV0Zi5vcmc+OyBEaW5vIEZhcmluYWNjaSA8ZmFy aW5hY2NpQGdtYWlsLmNvbT47IFJvYmVydCBNb3Nrb3dpdHogPHJnbS1pZXRmQGh0dC1jb25zdWx0 LmNvbT47IEJyaWFuIEUgQ2FycGVudGVyIDxicmlhbi5lLmNhcnBlbnRlckBnbWFpbC5jb20+OyBp ZXRmQGlldGYub3JnDQpTdWJqZWN0OiBSZTogW0lkZWFzXSBbbGlzcF0gV0cgUmV2aWV3OiBJRGVu dGl0eSBFbmFibGVkIE5ldHdvcmtzIChpZGVhcykNCg0KDQoNCk9uIFdlZCwgT2N0IDExLCAyMDE3 IGF0IDk6MTUgQU0sIENocmlzdGlhbiBIdWl0ZW1hIDxodWl0ZW1hQGh1aXRlbWEubmV0PG1haWx0 bzpodWl0ZW1hQGh1aXRlbWEubmV0Pj4gd3JvdGU6DQoNCk9uIDEwLzExLzIwMTcgNzo1NiBBTSwg Um9iZXJ0IE1vc2tvd2l0eiB3cm90ZToNCmFuZCAnaWRlbnRpdHknIGlzIGEgcmVkIGZsYWcuDQoN Cldob3cgdGhlcmUhICBZb3Ugd2VyZSBwYXJ0IG9mIHRoZSBOYW1lc3BhY2UgUmVzZWFyY2ggR3Jv dXA/ICBJIHRoaW5rPyAgSSB3YXMgYW5kIHdlIHdlIHdvcmtlZCBhIGxvdCBvbiB0aGlzIGFuZCBj YW1lIHRvIHRoZSBjb25jbHVzaW9uIHRoYXQgdGhlcmUgY291bGQgYmUgbm8gY29uY2x1c2lvbi4g IE5vdCBldmVuIGEgcm91Z2ggY29uY2Vuc3VzLCBpdCBzZWVtZWQuDQoNCkkgaGF2ZSBiZWVuIHVz aW5nICdpZGVudGl0eScgdG8gYXBwbHkgdG8gdGhpbmdzIGZvciAyMCB5ZWFycy4gUHJldHR5IG11 Y2ggZXZlciBzaW5jZSBJIHN0YXJ0ZWQgd29ya2luZyB3aXRoIHRoaW5ncy4gIEFueW9uZSB0aGF0 IGhvbGRzIHRoZSBwb3NpdGlvbiB0aGF0ICdpZGVudGl0eScgbWVhbnMgd2UgYXJlIHRhbGtpbmcg b25seSBhYm91dCBwZW9wbGUgYXJlIGFsbG93aW5nIHRoZWlyIHRoaW5raW5nIHRvIGJlIGNsb3Vk ZWQuDQoNCkkgYW0gY29uY2VybmVkIHRoYXQgdGhlIGN1cnJlbnQgcHJvcG9uZW50cyBvZiB0aGUg SURFQVMgd29yayBhcmUgbWFpbmx5IHJlc2lzdGluZyB0aGUgZmVlZGJhY2ssIHRyZWF0aW5nIGl0 IGFzIHNvbWUgcm9hZGJsb2NrIHB1dCBpbiB0aGUgcGF0aCBvZiB0aGVpciB3b3JrIGJ5IG1pc2d1 aWRlZCBwcml2YWN5IHB1cmlzdHMsIGFuZCBhdHRlbXB0aW5nIHRvIHJlbW92ZSB0aGUgcm9hZGJs b2NrcyBieSBhZGRpbmcgc29tZSB3ZWFzZWwgd29yZHMgdG8gdGhlIGNoYXJ0ZXIuIEkgd291bGQg ZmVlbCBtdWNoIG1vcmUgY29uZmlkZW50IGlmIHRoZXNlIHByb3BvbmVudHMgYWNrbm93bGVkZ2Vk IHRoZSB0ZW5zaW9uIGJldHdlZW4gcHJpdmFjeSBhbmQgc3RhYmxlIGlkZW50aWZpZXJzIG9mIGFu eSBzb3J0LCBpZiB0aGF0IHRlbnNpb24gd2FzIGNsZWFybHkgbm90ZWQgaW4gdGhlIGNoYXJ0ZXIs IGFuZCBpZiBwcml2YWN5IGdvYWxzIHdlcmUgY2xlYXJseSBzdGF0ZWQuDQoNCkFzIG9uZSBvZiB0 aGUgcHJvcG9uZW50cywgSSBmZWVsIEkgbmVlZCB0byBzcGVhayB1cCBiZWNhdXNlIGJsYW5rZXQg c3RhdGVtZW50cyBhcmUganVzdCBub3QgaGVscGluZy4NCg0KU3BlYWtpbmcgb24gYmVoYWxmIG9m IG15IGZlbGxvdyBwcm9wb25lbnRzLCB3ZSBoYXZlIGFsd2F5cyB3ZWxjb21lZCBjb25zdHJ1Y3Rp dmUgZmVlZGJhY2sgZnJvbSBwZW9wbGUgd2hvIHdhbnQvY2FuIGNvbnRyaWJ1dGUgYW5kIG1ha2Ug dGhlIHRlY2hub2xvZ3kgYmV0dGVyLiBXZSBoYXZlIGJlZW4gd2lsbGluZyB0byBjbGFyaWZ5IHRo ZSBjaGFydGVyIChjbGFyaWZpY2F0aW9uIGRvZXMgbm90IG1lYW4gd2Vhc2VsaW5nKS4NCg0KSWYg aXQgaXMgaGVscGZ1bCB0byAgbW92ZSBmb3J3YXJkLCBJIGFtIHdpbGxpbmcgdG8gdm9sdW50ZWVy IGZvciB0aGlzIHdvcmsgYW5kIGRpc2N1c3Mgd2l0aCBhbnlvbmUgdG8gZW5zdXJlIGNvbnN0cnVj dGl2ZSBmZWVkYmFjayBhbmQgY29tbWVudHMgYXJlIGFkZHJlc3NlZC4NCg0KPEFMRVg+ICsxIG9u IHdlbGNvbWluZyBjb25zdHJ1Y3RpdmUgZmVlZGJhY2suICBUbyBpbmNvcnBvcmF0ZSBpdCB3ZSBu ZWVkIHRvIHVwZGF0ZSBkb2N1bWVudHMuICBBbiB1cGRhdGUgdG8gdGhlIGNjbSB1c2UgY2FzZSBk b2N1bWVudCB3YXMgcG9zdGVkIHllc3RlcmRheSAocmV2IC0wMikgd2hpY2ggaW5jb3Jwb3JhdGVz IGEgbG90IG9mIHRoZSBmZWVkYmFjayBnaXZlbi4gIENsZWFybHksIHRoaXMgd2lsbCBub3QgYmUg dGhlIGxhc3QgdXBkYXRlIGFuZCBvdGhlciBkb2N1bWVudHMgbmVlZCB0byBmb2xsb3cuDQo8L0FM RVg+DQoNCg0KU3BlY2lmaWNhbGx5LCBJIHRoaW5rIHRoZXJlIGlzIGEgY29udHJhZGljdGlvbiBi ZXR3ZWVuIHNvbWUgb2YgZG9jdW1lbnRzLiBGb3IgZXhhbXBsZSwgZHJhZnQtcGFkbWEtaWRlYXMt cHJvYmxlbS1zdGF0ZW1lbnQtMDEgc3RhdGVzIHRoYXQ6DQoNCiAgIG8gIEEgc2luZ2xlIGVudGl0 eSBtYXkgaGF2ZSBtdWx0aXBsZSBJRHMsIGFuZCBJRHMgb2YgdGhlIHNhbWUgZW50aXR5DQoNCiAg ICAgIG1heSBoYXZlIGRpZmZlcmVudCBsaWZlIHNwYW5zIHRoYXQgYXJlIGRpZmZlcmVudCBmcm9t IHRoZSBsaWZlc3Bhbg0KDQogICAgICBvZiB0aGUgZW50aXR5LiAgRnVydGhlcm1vcmUsIGl0IGlz IHVuZGVyc3Rvb2QgdGhhdCBJRHMgbWF5IGhhdmUNCg0KICAgICAgZGlmZmVyZW50IGxpZmVjeWNs ZXMsIHdoaWNoIG1heSBiZSBwZXJtYW5lbnQgb3IgZXBoZW1lcmFsIGJ5DQoNCiAgICAgIGNob2lj ZSBvciBkZXNpZ24uDQoNCg0KDQogICBvICBFcGhlbWVyYWwgKHRlbXBvcmFyeSkgSURzIG1heSBi ZSB1c2VkIGFzIGEgc2hvcnQtbGl2ZWQgcHNldWRvbnltDQoNCiAgICAgIGZvciBhIHBlcm1hbmVu dCBJRCB0byBwcm90ZWN0IHRoZSBwcml2YWN5IG9mIHRoZSByZWxhdGVkIGVudGl0eS4NCkJ1dCB0 aGVuLCBkcmFmdC1jY20taWRlYXMtaWRlbnRpdHktdXNlLWNhc2VzLTAxIHN0YXRlcyB0aGF0Og0K DQogICBhLiAgVW5pcXVlIGFuZCBQZXJtYW5lbnQgSWRlbnRpdHkgcmVwcmVzZW50aW5nIHRoZSBl bnRpdHkgZW5hYmxlcw0KDQogICAgICAgYXV0aGVudGljYXRpb24gKEFVVEgpIHdpdGggdGhlIG1h cHBpbmcgYW5kIElkZW50aXR5IHNlcnZpY2VzDQoNCiAgICAgICBpbmZyYXN0cnVjdHVyZS4gIFdo aWxlIGl0IGlzIHBvc3NpYmxlIHRvIGRvIEFVVEggb24gSWRlbnRpZmllcnMNCg0KICAgICAgIHRo b3NlIGFyZSBub3QgcGVybWFuZW50bHkgYXNzb2NpYXRlZCB0byB0aGUgZW50aXR5LiAgTW9yZW92 ZXIsDQoNCiAgICAgICBBVVRIIG9wZXJhdGlvbiBpcyBhIHJlbGF0aXZlbHkgYW4gZXhwZW5zaXZl IGFuZCBpbmVmZmljaWVudA0KDQogICAgICAgcHJvY2VkdXJlIChjb21wYXJlZCB0byBMT0MgcmVz b2x1dGlvbiBmb3IgZXhhbXBsZSkgYW5kIGNhbiBjYXVzZQ0KDQogICAgICAgZXhjZXNzaXZlIHN0 YXJ0dXAgZGVsYXlzIGZvciBsb3Qgb2YgYXBwbGljYXRpb25zLg0KDQoNCg0KQXMgc2FpZCBlYXJs aWVyIHRoaXMgZHJhZnQgd2FzIG5vdCB1cGRhdGVkIGJ5IHRoZSBhdXRob3JzIGFuZCBhIG5ldyB2 ZXJzaW9uIHdhcyBwb3N0ZWQgeWVzdGVyZGF5Lg0KDQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWls LWFyY2hpdmUvd2ViL2lkZWFzL2N1cnJlbnQvbXNnMDA1MjAuaHRtbA0KDQo8QUxFWD4gSSB0aGlu ayB5b3UgbWVhbnQgdG8gc2F5IGl0ICp3YXMqIHVwZGF0ZWQgOy0pDQpkcmFmdC1wYWRtYS1pZGVh cy1wcm9ibGVtLXN0YXRlbWVudCB3aWxsIHByZXN1bWFibHkgYmUgb25lIG9mIHRoZSBkb2N1bWVu dHMgdGhhdCBhcmUgbmV4dCBpbiBsaW5lIGZvciB1cGRhdGluZy4gIDwvQUxFWD4NCg0KVGhlIHRl bnNpb24gaXMgb2J2aW91cy4gT24gb25lIGhhbmQsIHRoZSBlcGhlbWVyYWwgaWRlbnRpZmllcnMg ZW52aXNhZ2VkIGluIHRoZSBwcm9ibGVtIHN0YXRlbWVudCB3b3VsZCBwcmV0dHkgbXVjaCBhbGln biB0aGUgcHJpdmFjeSBwcm9wZXJ0aWVzIG9mIHRoZSBJRCB0byB0aG9zZSBvZiBJUHY2IHByaXZh Y3kgYWRkcmVzc2VzLCBhbmQgdGhhdCdzIGdvb2QuIE9uIHRoZSBvdGhlciBoYW5kLCB0aGUgcmVx dWlyZW1lbnQgdG8gcGVyZm9ybSBhdXRoZW50aWNhdGlvbiBvbiBpZGVudGl0aWVzIGNvbXBsZXRl bHkgbmVnYXRlcyB0aGF0IHByb3BlcnR5Lg0KDQpJIHdvdWxkIGJlIGZpbmUgaWYgdGhlIHN1cHBv cnQgZm9yICJVbmlxdWUgYW5kIFBlcm1hbmVudCBJZGVudGl0eSIgd2FzIGV4cGxpY2l0bHkgZXhj bHVkZWQgZnJvbSB0aGUgY2hhcnRlci4NCg0KQUZBSUssIG5vbmUgb2YgdGhlIHByb3BvbmVudHMg cmVzaXN0ZWQgdGhhdC4NCg0KVGhlcmUgaXMgb2J2aW91c2x5IGEgbmVlZCB0byBzdXBwb3J0IHNv bWUgZm9ybSBvZiBhY2Nlc3MgY29udHJvbCB0byBhIG1hcHBpbmcgZGF0YWJhc2UsDQoNCkFncmVl ZC4NCg0KYnV0IHlvdSBkbyBub3QgbmVlZCBhIHJlZmVyZW5jZSB0byBhIHBlcm1hbmVudCBpZGVu dGl0eSBmb3IgdGhhdCAtLSBzeXN0ZW1zIHNpbWlsYXIgdG8gQ0dBIHdvdWxkIHdvcmsganVzdCBm aW5lLg0KDQoNClRoZSBpZGVudGl0eSBvZiB0aGUgZGV2aWNlIGlzIGp1c3QgYWRkaW5nIGEgbGV2 ZXIgb2YgaWRlbnRpZmllciB3aGljaCBlZmZlY3RpdmVseSBhbGxvd3MgYXV0aGVudGljYXRpb24g dG8gbW9kaWZ5IHRoZSBpZGVudGlmaWVycyB1c2VkIGJ5IHRoYXQgZGV2aWNlIGJ1dCBhbHNvIHdo YXQgdGhlIHVzZXJzIG9mIHRoZXNlIGlkZW50aWZpZXJzIGNhbiBsb29rIHVwLiBJZiB3ZSBoYWQg dXNlZCAidXNlciBvZiBpZGVudGlmaWVyIiBpdCB3b3VsZCBoYXZlIGJlZW4gbWlzY29uc3RydWVk IGZvciBodW1hbnMuIFNvIGRhbW4gaWYgeW91IGRvIGFuZCBkYW1uIGlmIHlvdSBkb24ndCAuLi4N Cg0KV2UgYXJlIG9wZW4gZm9yIGRpc2N1c3Npb25zIGFueXRpbWUuDQoNClBhZG1hDQoNCg0KDQoN Cg0KDQotLQ0KDQpDaHJpc3RpYW4gSHVpdGVtYQ0KDQpfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXw0KbGlzcCBtYWlsaW5nIGxpc3QNCmxpc3BAaWV0Zi5vcmc8 bWFpbHRvOmxpc3BAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3Rp bmZvL2xpc3ANCg0K --_000_644DA50AFA8C314EA9BDDAC83BD38A2E0EAA8E6Dsjceml521mbxchi_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25zb2xhczsNCglwYW5vc2UtMToyIDEx IDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWws IGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0 b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcg Um9tYW4iLHNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnANCgl7 bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdp bi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6 MGluOw0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIs c2VyaWY7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoi SFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4w MDAxcHQ7DQoJZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30N CnNwYW4uZ21haWwtbTI1NjA5NDU2NjUzNTgyODg5OTFtLTgyNzk0ODY0OTcxNDEyNTU1MzRnbWFp bC0NCgl7bXNvLXN0eWxlLW5hbWU6Z21haWwtbV8yNTYwOTQ1NjY1MzU4Mjg4OTkxbV8tODI3OTQ4 NjQ5NzE0MTI1NTUzNGdtYWlsLTt9DQpzcGFuLkhUTUxQcmVmb3JtYXR0ZWRDaGFyDQoJe21zby1z dHlsZS1uYW1lOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6 OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIjsNCglmb250LWZhbWlseTpD b25zb2xhczt9DQpzcGFuLmdtYWlsLW0yNTYwOTQ1NjY1MzU4Mjg4OTkxbS04Mjc5NDg2NDk3MTQx MjU1NTM0Z21haWwtaG9lbnpiDQoJe21zby1zdHlsZS1uYW1lOmdtYWlsLW1fMjU2MDk0NTY2NTM1 ODI4ODk5MW1fLTgyNzk0ODY0OTcxNDEyNTU1MzRnbWFpbC1ob2VuemI7fQ0Kc3Bhbi5FbWFpbFN0 eWxlMjINCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQouTXNvQ2hwRGVmYXVsdA0KCXtt c28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1z ZXJpZjt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2lu OjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3Jk U2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBl ZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0t LT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4N CjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1s PjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZs aW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5Ud28gYWRkaXRpb25hbCB0aG91 Z2h0cyBpbmxpbmUsICZsdDtBTEVYJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xp ZCBibHVlIDEuNXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5 bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMu MHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp ZiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+IElkZWFzIFttYWlsdG86aWRlYXMt Ym91bmNlc0BpZXRmLm9yZ10NCjxiPk9uIEJlaGFsZiBPZiA8L2I+UGFkbWEgUGlsbGF5LUVzbmF1 bHQ8YnI+DQo8Yj5TZW50OjwvYj4gV2VkbmVzZGF5LCBPY3RvYmVyIDExLCAyMDE3IDEwOjMzIEFN PGJyPg0KPGI+VG86PC9iPiBDaHJpc3RpYW4gSHVpdGVtYSAmbHQ7aHVpdGVtYUBodWl0ZW1hLm5l dCZndDs8YnI+DQo8Yj5DYzo8L2I+IGlkZWFzQGlldGYub3JnOyBsaXNwQGlldGYub3JnIGxpc3Qg Jmx0O2xpc3BAaWV0Zi5vcmcmZ3Q7OyBEaW5vIEZhcmluYWNjaSAmbHQ7ZmFyaW5hY2NpQGdtYWls LmNvbSZndDs7IFJvYmVydCBNb3Nrb3dpdHogJmx0O3JnbS1pZXRmQGh0dC1jb25zdWx0LmNvbSZn dDs7IEJyaWFuIEUgQ2FycGVudGVyICZsdDticmlhbi5lLmNhcnBlbnRlckBnbWFpbC5jb20mZ3Q7 OyBpZXRmQGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbSWRlYXNdIFtsaXNwXSBX RyBSZXZpZXc6IElEZW50aXR5IEVuYWJsZWQgTmV0d29ya3MgKGlkZWFzKTxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBXZWQsIE9jdCAxMSwgMjAxNyBhdCA5OjE1 IEFNLCBDaHJpc3RpYW4gSHVpdGVtYSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmh1aXRlbWFAaHVpdGVt YS5uZXQiIHRhcmdldD0iX2JsYW5rIj5odWl0ZW1hQGh1aXRlbWEubmV0PC9hPiZndDsgd3JvdGU6 PG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxl ZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1s ZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW4iPg0KPGRpdj4NCjxwPk9uIDEwLzExLzIwMTcgNzo1 NiBBTSwgUm9iZXJ0IE1vc2tvd2l0eiB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3Rl IHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGJsb2NrcXVv dGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPmFuZCAnaWRlbnRpdHknIGlz IGEgcmVkIGZsYWcuIDxvOnA+DQo8L286cD48L3NwYW4+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KV2hvdyB0aGVyZSEmbmJzcDsgWW91IHdlcmUgcGFydCBv ZiB0aGUgTmFtZXNwYWNlIFJlc2VhcmNoIEdyb3VwPyZuYnNwOyBJIHRoaW5rPyZuYnNwOyBJIHdh cyBhbmQgd2Ugd2Ugd29ya2VkIGEgbG90IG9uIHRoaXMgYW5kIGNhbWUgdG8gdGhlIGNvbmNsdXNp b24gdGhhdCB0aGVyZSBjb3VsZCBiZSBubyBjb25jbHVzaW9uLiZuYnNwOyBOb3QgZXZlbiBhIHJv dWdoIGNvbmNlbnN1cywgaXQgc2VlbWVkLg0KPGJyPg0KPGJyPg0KSSBoYXZlIGJlZW4gdXNpbmcg J2lkZW50aXR5JyB0byBhcHBseSB0byB0aGluZ3MgZm9yIDIwIHllYXJzLiBQcmV0dHkgbXVjaCBl dmVyIHNpbmNlIEkgc3RhcnRlZCB3b3JraW5nIHdpdGggdGhpbmdzLiZuYnNwOyBBbnlvbmUgdGhh dCBob2xkcyB0aGUgcG9zaXRpb24gdGhhdCAnaWRlbnRpdHknIG1lYW5zIHdlIGFyZSB0YWxraW5n IG9ubHkgYWJvdXQgcGVvcGxlIGFyZSBhbGxvd2luZyB0aGVpciB0aGlua2luZyB0byBiZSBjbG91 ZGVkLg0KPG86cD48L286cD48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxicj4NCkkgYW0gY29uY2VybmVkIHRoYXQg dGhlIGN1cnJlbnQgcHJvcG9uZW50cyBvZiB0aGUgSURFQVMgd29yayBhcmUgbWFpbmx5IHJlc2lz dGluZyB0aGUgZmVlZGJhY2ssIHRyZWF0aW5nIGl0IGFzIHNvbWUgcm9hZGJsb2NrIHB1dCBpbiB0 aGUgcGF0aCBvZiB0aGVpciB3b3JrIGJ5IG1pc2d1aWRlZCBwcml2YWN5IHB1cmlzdHMsIGFuZCBh dHRlbXB0aW5nIHRvIHJlbW92ZSB0aGUgcm9hZGJsb2NrcyBieSBhZGRpbmcgc29tZSB3ZWFzZWwg d29yZHMgdG8NCiB0aGUgY2hhcnRlci4gSSB3b3VsZCBmZWVsIG11Y2ggbW9yZSBjb25maWRlbnQg aWYgdGhlc2UgcHJvcG9uZW50cyBhY2tub3dsZWRnZWQgdGhlIHRlbnNpb24gYmV0d2VlbiBwcml2 YWN5IGFuZCBzdGFibGUgaWRlbnRpZmllcnMgb2YgYW55IHNvcnQsIGlmIHRoYXQgdGVuc2lvbiB3 YXMgY2xlYXJseSBub3RlZCBpbiB0aGUgY2hhcnRlciwgYW5kIGlmIHByaXZhY3kgZ29hbHMgd2Vy ZSBjbGVhcmx5IHN0YXRlZC4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5BcyBvbmUgb2YgdGhlIHByb3BvbmVudHMs IEkgZmVlbCBJIG5lZWQgdG8gc3BlYWsgdXAgYmVjYXVzZSBibGFua2V0IHN0YXRlbWVudHMgYXJl IGp1c3Qgbm90IGhlbHBpbmcuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPlNwZWFraW5nIG9uIGJlaGFsZiBvZiBteSBmZWxsb3cgcHJv cG9uZW50cywgd2UgaGF2ZSBhbHdheXMgd2VsY29tZWQgY29uc3RydWN0aXZlIGZlZWRiYWNrIGZy b20gcGVvcGxlIHdobyB3YW50L2NhbiBjb250cmlidXRlIGFuZCBtYWtlIHRoZSB0ZWNobm9sb2d5 IGJldHRlci4gV2UgaGF2ZSBiZWVuIHdpbGxpbmcgdG8gY2xhcmlmeSB0aGUgY2hhcnRlciAoY2xh cmlmaWNhdGlvbiBkb2VzIG5vdCBtZWFuIHdlYXNlbGluZykuJm5ic3A7PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPklmIGl0IGlzIGhlbHBmdWwg dG8gJm5ic3A7bW92ZSBmb3J3YXJkLCBJIGFtIHdpbGxpbmcgdG8gdm9sdW50ZWVyIGZvciB0aGlz IHdvcmsgYW5kIGRpc2N1c3Mgd2l0aCBhbnlvbmUgdG8gZW5zdXJlIGNvbnN0cnVjdGl2ZSBmZWVk YmFjayBhbmQgY29tbWVudHMgYXJlIGFkZHJlc3NlZC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jmx0O0FMRVgmZ3Q7ICYjNDM7MSBvbiB3ZWxjb21pbmcg Y29uc3RydWN0aXZlIGZlZWRiYWNrLiZuYnNwOyBUbyBpbmNvcnBvcmF0ZSBpdCB3ZSBuZWVkIHRv IHVwZGF0ZSBkb2N1bWVudHMuJm5ic3A7IEFuIHVwZGF0ZSB0byB0aGUgY2NtIHVzZSBjYXNlIGRv Y3VtZW50IHdhcyBwb3N0ZWQgeWVzdGVyZGF5IChyZXYNCiAtMDIpIHdoaWNoIGluY29ycG9yYXRl cyBhIGxvdCBvZiB0aGUgZmVlZGJhY2sgZ2l2ZW4uJm5ic3A7IENsZWFybHksIHRoaXMgd2lsbCBu b3QgYmUgdGhlIGxhc3QgdXBkYXRlIGFuZCBvdGhlciBkb2N1bWVudHMgbmVlZCB0byBmb2xsb3cu ICZuYnNwOyZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbHQ7L0FMRVgmZ3Q7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMx RjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90 ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRk aW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW4i Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlNwZWNpZmljYWxseSwgSSB0aGluayB0aGVy ZSBpcyBhIGNvbnRyYWRpY3Rpb24gYmV0d2VlbiBzb21lIG9mIGRvY3VtZW50cy4gRm9yIGV4YW1w bGUsIGRyYWZ0LXBhZG1hLWlkZWFzLXByb2JsZW0tc3RhdGVtZW50LTAxIHN0YXRlcyB0aGF0Ojxv OnA+PC9vOnA+PC9wPg0KPHByZT4mbmJzcDsmbmJzcDsgbyZuYnNwOyBBIHNpbmdsZSBlbnRpdHkg bWF5IGhhdmUgbXVsdGlwbGUgSURzLCBhbmQgSURzIG9mIHRoZSBzYW1lIGVudGl0eTxvOnA+PC9v OnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBtYXkgaGF2ZSBk aWZmZXJlbnQgbGlmZSBzcGFucyB0aGF0IGFyZSBkaWZmZXJlbnQgZnJvbSB0aGUgbGlmZXNwYW48 bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgb2Yg dGhlIGVudGl0eS4mbmJzcDsgRnVydGhlcm1vcmUsIGl0IGlzIHVuZGVyc3Rvb2QgdGhhdCBJRHMg bWF5IGhhdmU8bzpwPjwvbzpwPjwvcHJlPg0KPHByZT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgZGlmZmVyZW50IGxpZmVjeWNsZXMsIHdoaWNoIG1heSBiZSBwZXJtYW5lbnQgb3IgZXBo ZW1lcmFsIGJ5PG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IGNob2ljZSBvciBkZXNpZ24uPG86cD48L286cD48L3ByZT4NCjxwcmU+PG86cD4mbmJz cDs8L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7Jm5ic3A7IG8mbmJzcDsgRXBoZW1lcmFsICh0ZW1w b3JhcnkpIElEcyBtYXkgYmUgdXNlZCBhcyBhIHNob3J0LWxpdmVkIHBzZXVkb255bTxvOnA+PC9v OnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBmb3IgYSBwZXJt YW5lbnQgSUQgdG8gcHJvdGVjdCB0aGUgcHJpdmFjeSBvZiB0aGUgcmVsYXRlZCBlbnRpdHkuPG86 cD48L286cD48L3ByZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkJ1dCB0aGVuLCBkcmFmdC1jY20t aWRlYXMtaWRlbnRpdHktdXNlLWNhc2VzLTAxIHN0YXRlcyB0aGF0OjxvOnA+PC9vOnA+PC9wPg0K PHByZT4mbmJzcDsmbmJzcDsgYS4mbmJzcDsgVW5pcXVlIGFuZCBQZXJtYW5lbnQgSWRlbnRpdHkg cmVwcmVzZW50aW5nIHRoZSBlbnRpdHkgZW5hYmxlczxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZu YnNwOyZuYnNwOyZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDthdXRoZW50aWNhdGlvbiAoQVVUSCkg d2l0aCB0aGUgbWFwcGluZyBhbmQgSWRlbnRpdHkgc2VydmljZXM8bzpwPjwvbzpwPjwvcHJlPg0K PHByZT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgaW5mcmFzdHJ1Y3R1cmUu Jm5ic3A7IFdoaWxlIGl0IGlzIHBvc3NpYmxlIHRvIGRvIEFVVEggb24gSWRlbnRpZmllcnM8bzpw PjwvbzpwPjwvcHJlPg0KPHByZT4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg dGhvc2UgYXJlIG5vdCBwZXJtYW5lbnRseSBhc3NvY2lhdGVkIHRvIHRoZSBlbnRpdHkuJm5ic3A7 IE1vcmVvdmVyLDxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyBBVVRIIG9wZXJhdGlvbiBpcyBhIHJlbGF0aXZlbHkgYW4gZXhwZW5zaXZl IGFuZCBpbmVmZmljaWVudDxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyBwcm9jZWR1cmUgKGNvbXBhcmVkIHRvIExPQyByZXNvbHV0aW9u IGZvciBleGFtcGxlKSBhbmQgY2FuIGNhdXNlPG86cD48L286cD48L3ByZT4NCjxwcmU+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGV4Y2Vzc2l2ZSBzdGFydHVwIGRlbGF5cyBm b3IgbG90IG9mIGFwcGxpY2F0aW9ucy48bzpwPjwvbzpwPjwvcHJlPg0KPHByZT48bzpwPiZuYnNw OzwvbzpwPjwvcHJlPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5BcyBzYWlkIGVhcmxpZXIgdGhpcyBkcmFmdCB3YXMgbm90IHVwZGF0ZWQgYnkg dGhlIGF1dGhvcnMgYW5kIGEgbmV3IHZlcnNpb24gd2FzIHBvc3RlZCB5ZXN0ZXJkYXkuPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxhIGhyZWY9 Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIvaWRlYXMvY3VycmVudC9tc2cw MDUyMC5odG1sIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLWFyY2hpdmUvd2ViL2lkZWFzL2N1 cnJlbnQvbXNnMDA1MjAuaHRtbDwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZsdDtBTEVY Jmd0OyBJIHRoaW5rIHlvdSBtZWFudCB0byBzYXkgaXQgKjxiPndhczwvYj4qIHVwZGF0ZWQgOy0p DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iY29sb3I6IzFGNDk3RCI+ZHJhZnQtcGFkbWEtaWRlYXMtcHJvYmxlbS1zdGF0ZW1lbnQgd2ls bCBwcmVzdW1hYmx5IGJlIG9uZSBvZiB0aGUgZG9jdW1lbnRzIHRoYXQgYXJlIG5leHQgaW4gbGlu ZSBmb3IgdXBkYXRpbmcuJm5ic3A7ICZsdDsvQUxFWCZndDs8L3NwYW4+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3 RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHls ZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBp biAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW4iPg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSB0ZW5zaW9uIGlzIG9idmlvdXMuIE9uIG9uZSBo YW5kLCB0aGUgZXBoZW1lcmFsIGlkZW50aWZpZXJzIGVudmlzYWdlZCBpbiB0aGUgcHJvYmxlbSBz dGF0ZW1lbnQgd291bGQgcHJldHR5IG11Y2ggYWxpZ24gdGhlIHByaXZhY3kgcHJvcGVydGllcyBv ZiB0aGUgSUQgdG8gdGhvc2Ugb2YgSVB2NiBwcml2YWN5IGFkZHJlc3NlcywgYW5kIHRoYXQncyBn b29kLiBPbiB0aGUgb3RoZXIgaGFuZCwgdGhlIHJlcXVpcmVtZW50DQogdG8gcGVyZm9ybSBhdXRo ZW50aWNhdGlvbiBvbiBpZGVudGl0aWVzIGNvbXBsZXRlbHkgbmVnYXRlcyB0aGF0IHByb3BlcnR5 Ljxicj4NCjxicj4NCkkgd291bGQgYmUgZmluZSBpZiB0aGUgc3VwcG9ydCBmb3IgJnF1b3Q7VW5p cXVlIGFuZCBQZXJtYW5lbnQgSWRlbnRpdHkmcXVvdDsgd2FzIGV4cGxpY2l0bHkgZXhjbHVkZWQg ZnJvbSB0aGUgY2hhcnRlci4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5BRkFJSywgbm9uZSBvZiB0aGUgcHJvcG9u ZW50cyByZXNpc3RlZCB0aGF0LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3Rl IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRp bmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhlcmUgaXMgb2J2aW91c2x5IGEgbmVlZCB0 byBzdXBwb3J0IHNvbWUgZm9ybSBvZiBhY2Nlc3MgY29udHJvbCB0byBhIG1hcHBpbmcgZGF0YWJh c2UsDQo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+QWdyZWVkLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9j a3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0 O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0 OjBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+YnV0IHlvdSBkbyBub3QgbmVlZCBh IHJlZmVyZW5jZSB0byBhIHBlcm1hbmVudCBpZGVudGl0eSBmb3IgdGhhdCAtLSBzeXN0ZW1zIHNp bWlsYXIgdG8gQ0dBIHdvdWxkIHdvcmsganVzdCBmaW5lLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBpZGVu dGl0eSBvZiB0aGUgZGV2aWNlIGlzIGp1c3QgYWRkaW5nIGEgbGV2ZXIgb2YgaWRlbnRpZmllciB3 aGljaCBlZmZlY3RpdmVseSBhbGxvd3MgYXV0aGVudGljYXRpb24gdG8gbW9kaWZ5IHRoZSBpZGVu dGlmaWVycyB1c2VkIGJ5IHRoYXQgZGV2aWNlIGJ1dCBhbHNvIHdoYXQgdGhlIHVzZXJzIG9mIHRo ZXNlIGlkZW50aWZpZXJzIGNhbiBsb29rIHVwLiBJZiB3ZSBoYWQgdXNlZCAmcXVvdDt1c2VyIG9m IGlkZW50aWZpZXImcXVvdDsNCiBpdCB3b3VsZCBoYXZlIGJlZW4gbWlzY29uc3RydWVkIGZvciBo dW1hbnMuIFNvIGRhbW4gaWYgeW91IGRvIGFuZCBkYW1uIGlmIHlvdSBkb24ndCAuLi4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+V2Ug YXJlIG9wZW4gZm9yIGRpc2N1c3Npb25zIGFueXRpbWUuPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlBhZG1hPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQg I0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0 O21hcmdpbi1yaWdodDowaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJjb2xvcjojODg4ODg4Ij48YnI+DQo8YnI+DQo8YnI+DQo8c3BhbiBjbGFzcz0iZ21haWwt bTI1NjA5NDU2NjUzNTgyODg5OTFtLTgyNzk0ODY0OTcxNDEyNTU1MzRnbWFpbC1ob2VuemIiPjxv OnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8cHJlPjxzcGFuIHN0eWxlPSJjb2xvcjojODg4 ODg4Ij4tLSA8bzpwPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9ImNvbG9y OiM4ODg4ODgiPkNocmlzdGlhbiBIdWl0ZW1hPC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PGJy Pg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQps aXNwIG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzpsaXNwQGlldGYub3JnIiB0YXJn ZXQ9Il9ibGFuayI+bGlzcEBpZXRmLm9yZzwvYT48YnI+DQo8YSBocmVmPSJodHRwczovL3d3dy5p ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2xpc3AiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2xpc3A8L2E+PG86cD48L286cD48L3A+DQo8L2Js b2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_644DA50AFA8C314EA9BDDAC83BD38A2E0EAA8E6Dsjceml521mbxchi_-- From nobody Wed Oct 11 12:34:39 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 884C713314B for ; Wed, 11 Oct 2017 12:34:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5PC_Tb6tqNIW for ; Wed, 11 Oct 2017 12:34:30 -0700 (PDT) Received: from mx43-out1.antispamcloud.com (mx43-out1.antispamcloud.com [138.201.61.189]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 70C231321DC for ; Wed, 11 Oct 2017 12:34:30 -0700 (PDT) Received: from xsmtp03.mail2web.com ([168.144.250.223]) by mx36.antispamcloud.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.89) (envelope-from ) id 1e2Mlu-0004by-TU for lisp@ietf.org; Wed, 11 Oct 2017 21:34:27 +0200 Received: from [10.5.2.15] (helo=xmail05.myhosting.com) by xsmtp03.mail2web.com with esmtps (TLS-1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.63) (envelope-from ) id 1e2Mlt-0008Fa-84 for lisp@ietf.org; Wed, 11 Oct 2017 15:34:25 -0400 Received: (qmail 17983 invoked from network); 11 Oct 2017 19:34:22 -0000 Received: from unknown (HELO [192.168.1.103]) (Authenticated-user:_huitema@huitema.net@[172.56.42.26]) (envelope-sender ) by xmail05.myhosting.com (qmail-ldap-1.03) with ESMTPA for ; 11 Oct 2017 19:34:21 -0000 To: Padma Pillay-Esnault Cc: "ideas@ietf.org" , "lisp@ietf.org list" , Dino Farinacci , "ietf@ietf.org" References: <150670160872.14128.2758037992338326085.idtracker@ietfa.amsl.com> <778d5504-ba4f-d418-7b20-356353bb0fb2@cs.tcd.ie> <8kd5pq.oxb4pv.rtlo8t-qmf@mercury.scss.tcd.ie> <644DA50AFA8C314EA9BDDAC83BD38A2E0EAA7204@sjceml521-mbx.china.huawei.com> <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> <1f254140-1340-6c7d-9c73-e7137562c685@gmail.com> From: Christian Huitema Message-ID: Date: Wed, 11 Oct 2017 12:34:19 -0700 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------E14CE32255CE1CCBF53D2ED8" Content-Language: en-US X-Originating-IP: 168.144.250.223 X-SpamExperts-Domain: xsmtpout.mail2web.com X-SpamExperts-Username: 168.144.250.0/24 Authentication-Results: antispamcloud.com; auth=pass smtp.auth=168.144.250.0/24@xsmtpout.mail2web.com X-SpamExperts-Outgoing-Class: ham X-SpamExperts-Outgoing-Evidence: Combined (0.09) X-Recommended-Action: accept X-Filter-ID: EX5BVjFpneJeBchSMxfU5q5W2ClgRMV6odV0YRJ7ZtMXv9krsgRhBn0ayn6qsUc7wVs6Zcv/r9lN 2vpy9awzD7gNzB/4Jkrw1eDLcif59fvAIVTk7VPtA6HQN76lpw0LB98yDTitFWvbHwz9vKZpm/D1 Ad4OAlzgsEH8ABk9OXtfZdf1siwYNJirk4ABKayRZsQEbaxxISMHgJxrdMdSS+C+me6dA6yBk+me OMe0W20IwpnDW1iuevuskcdSkQBqqDYcAbb25yfA/Qzc5alGOhdG5bOwa1rOgT+89+/XFrGt2tce crpXRY6fm8RXptyzavERpop5LF7RavHozgbn9XzprFRbpFQTOcEGeQOY3IcDlgJpEbxunV7tCPNi PQvHQpVRoYcix47lJTuKsG8TgnDHFRDF834rtLc6Wv9Yj+vBPX9bzGJi0ycLbiOUDEySIK/1NH5T HMtlYvyHAYGOGheVSH7cGoIH3Vd41lbD31Xq4ax6KvrI/nhOyr4XmBA0QaRU5G7TB9RBnrQ7zv+k CvO5Y8nigbyGzriPU+XfAXEmd1lHR6R3AgRdwKMVrLe2x6JvzKixj8PC+OqalCFkmpH+vpUDIZeJ XjrpEEsmd+8wbu9lcViFVxDhGp2PwufGcyNBJprCgmabT8JgPqpM5mTFkJCfQx95lvhVaK1R9QMi gxjVx5rzYZiZLuq1IKA/qpuyeONa9/BCaiG5sAGSAVz1pRXWhjh9fdbl44I0Df0tN9eq0V0hlrWD EiOHLhiB8jSoYz6mw6iMTDK1bQzS5x3h1vgDbEdmhrg3iVBpdRZRb8Vdsy5LZaUHXrX9gYVqGpIO PepTCxFMvIavjx/iA3YOJbgNLT0Ix6mdJEErnNhWBb39uS1TjWG2Inx+Ts2QvrhVVD6SNHfaCiIW OOQAkvVDEoFOK6EAWKQ3WFIxRUtYANHDTJAVnZcGvok0a1Vj X-Report-Abuse-To: spam@quarantine5.antispamcloud.com Archived-At: Subject: Re: [lisp] [Ideas] WG Review: IDentity Enabled Networks (ideas) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Oct 2017 19:34:31 -0000 This is a multi-part message in MIME format. --------------E14CE32255CE1CCBF53D2ED8 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit On 10/11/2017 10:32 AM, Padma Pillay-Esnault wrote: > but you do not need a reference to a permanent identity for that > -- systems similar to CGA would work just fine. > >   > > The identity of the device is just adding a lever of identifier which > effectively allows authentication to modify the identifiers used by > that device but also what the users of these identifiers can look up. > If we had used "user of identifier" it would have been misconstrued > for humans. So damn if you do and damn if you don't ...  > > We are open for discussions anytime. > Some thing you should be hearing is that "long term identity of device" has almost the same privacy properties as "long term identity of the device's owner". You may think that identifying a random piece of hardware is no big deal, but it turns out that the network activity and network locations of that piece of hardware can be associated to those of its human owner. So you need the same kind of protection for these device identifiers as for human identifiers. -- Christian Huitema --------------E14CE32255CE1CCBF53D2ED8 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit

On 10/11/2017 10:32 AM, Padma Pillay-Esnault wrote:

but you do not need a reference to a permanent identity for that -- systems similar to CGA would work just fine.
 

The identity of the device is just adding a lever of identifier which effectively allows authentication to modify the identifiers used by that device but also what the users of these identifiers can look up. If we had used "user of identifier" it would have been misconstrued for humans. So damn if you do and damn if you don't ... 

We are open for discussions anytime.


Some thing you should be hearing is that "long term identity of device" has almost the same privacy properties as "long term identity of the device's owner". You may think that identifying a random piece of hardware is no big deal, but it turns out that the network activity and network locations of that piece of hardware can be associated to those of its human owner. So you need the same kind of protection for these device identifiers as for human identifiers.
-- 
Christian Huitema
--------------E14CE32255CE1CCBF53D2ED8-- From nobody Wed Oct 11 12:39:35 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D387C124239; Wed, 11 Oct 2017 12:39:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GBanYIrteCIL; Wed, 11 Oct 2017 12:39:19 -0700 (PDT) Received: from mail-pf0-x243.google.com (mail-pf0-x243.google.com [IPv6:2607:f8b0:400e:c00::243]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CBCE91342D6; Wed, 11 Oct 2017 12:39:18 -0700 (PDT) Received: by mail-pf0-x243.google.com with SMTP id h28so3118444pfh.5; Wed, 11 Oct 2017 12:39:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=Y3St2vojiMxDh3g/qp72u+d4nT9sShZsbDYQSvrcRAc=; b=sMcoSSqi0n4MC8QyBTQymYi/1NkTJhupE9TKu+J2Hwg6dmUSfmU4mx+AvX9vg87HOa LV7v+1+UuSwrTapCQSfJU6WTjYemXNPR8PqUaUxnk4lpFhzpxXZB1O0v/7MkkJia/JdU 6hHU7w+/Ti2Iq5/zxaEPCBTzMPcl7DctbpMEt3f69JCqFGwJI3CQsnNcD6bh3o8N5ZQW 2Sb2aHP3D6hB4LetJpTK7/E1yDh8FWhg1KHXkocH3FOtjuYJAtdtwlxu4ii3BFMlmO75 0lCvYn+8ZMLG1S+xDxuiTLkl0fZyyyPN4g4MEWvaHSN+oNMt/3KnTlHeYyqB6NxUlHHR FX2A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=Y3St2vojiMxDh3g/qp72u+d4nT9sShZsbDYQSvrcRAc=; b=sGMn4V6f4TG/7phwbxIAwNMDbxubsrH4NJY6qSmU8/3RL76NJ+iw+irYYmfn6lZCWW /eVmZ0IEhYzlDs9gGP8+Q008vBP6FjLMYeeYpS9bIblww9OQksfj5iyYzh9+iUGt9/Ny 3uxObdmQ/nwkSXlLUPXZOXmRgpzPgaa8eOXMOmY6ffS1dRn30Kvg7LPE2U5POBe3xMhS VfGRhs4LPqmViy7YriDUn2rLEnmZVg8JYe9YgfuM6/PDVj60j2kEyc7Vx3nV8zWnGtHn JdLdD9Q/S7fPoXNOTCEDnhW9a8XJwqBCSdKGJ5WPLa6IwGnTbamYAvyOrMnm1araM0cq doWA== X-Gm-Message-State: AMCzsaV6citwVnaC2+JzhFAiSSTfN2CibxThR3Uslaz3Ff7aAL9M2tIT oYTHZ0IpVUoSwx9APHpy8xcmd/pm X-Google-Smtp-Source: AOwi7QBbdbywYyDlopdurCmIct7gKuaY16Q3vdYaekWaU09zTvqQm00xqunS13Y7Ux4EJ7Z+2xgtAw== X-Received: by 10.84.150.101 with SMTP id g92mr99450plg.168.1507750758254; Wed, 11 Oct 2017 12:39:18 -0700 (PDT) Received: from [10.197.31.157] (173-11-119-245-SFBA.hfc.comcastbusiness.net. [173.11.119.245]) by smtp.gmail.com with ESMTPSA id s3sm15070525pfk.7.2017.10.11.12.39.16 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 11 Oct 2017 12:39:17 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Dino Farinacci In-Reply-To: Date: Wed, 11 Oct 2017 12:39:16 -0700 Cc: Padma Pillay-Esnault , "ideas@ietf.org" , "lisp@ietf.org list" , "ietf@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: <17BE9E1D-120B-4508-B765-3799134FD708@gmail.com> References: <150670160872.14128.2758037992338326085.idtracker@ietfa.amsl.com> <778d5504-ba4f-d418-7b20-356353bb0fb2@cs.tcd.ie> <8kd5pq.oxb4pv.rtlo8t-qmf@mercury.scss.tcd.ie> <644DA50AFA8C314EA9BDDAC83BD38A2E0EAA7204@sjceml521-mbx.china.huawei.com> <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> <1f254140-1340-6c7d-9c73-e7137562c685@gmail.com> To: Christian Huitema X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [lisp] [Ideas] WG Review: IDentity Enabled Networks (ideas) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Oct 2017 19:39:21 -0000 Let me ask for your opinion Christian (or anyone else for that matter). = If a device is assigned a private/public key-pair and the identifier for = the device is a hash of the public-key, is the identifier private? Is the identifier trackable even when its network location is not = generally known, not advertised publicly, and possibly changing = frequently? Dino > On Oct 11, 2017, at 12:34 PM, Christian Huitema = wrote: >=20 > On 10/11/2017 10:32 AM, Padma Pillay-Esnault wrote: >> but you do not need a reference to a permanent identity for that -- = systems similar to CGA would work just fine. >> =20 >>=20 >> The identity of the device is just adding a lever of identifier which = effectively allows authentication to modify the identifiers used by that = device but also what the users of these identifiers can look up. If we = had used "user of identifier" it would have been misconstrued for = humans. So damn if you do and damn if you don't ...=20 >>=20 >> We are open for discussions anytime. >>=20 >=20 > Some thing you should be hearing is that "long term identity of = device" has almost the same privacy properties as "long term identity of = the device's owner". You may think that identifying a random piece of = hardware is no big deal, but it turns out that the network activity and = network locations of that piece of hardware can be associated to those = of its human owner. So you need the same kind of protection for these = device identifiers as for human identifiers. > --=20 > Christian Huitema >=20 From nobody Wed Oct 11 12:44:37 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE2941342DB for ; Wed, 11 Oct 2017 12:44:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cJGnv7eJrvnt for ; Wed, 11 Oct 2017 12:44:27 -0700 (PDT) Received: from mail-qt0-x22f.google.com (mail-qt0-x22f.google.com [IPv6:2607:f8b0:400d:c0d::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7ACE91342E0 for ; Wed, 11 Oct 2017 12:44:27 -0700 (PDT) Received: by mail-qt0-x22f.google.com with SMTP id 8so8719546qtv.1 for ; Wed, 11 Oct 2017 12:44:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=C8GjxdzAv2fl8bNhyQ/q/aRdfCqad8gWHpE69YiZOWk=; b=Y0YVy5N7D3VFLEXSMYQt6Pf7RV20uZShHqTbzEed6zwjWxdXTSLEH9swhHRvm6BQGd SqF1QBYf8HGYx2mlhY3tns0/CPOqgtcr1E0uGzmudZtGyYEt4r6KyaNey0xMapv3JBG2 7PaKmUbqegjNpbLH9mIg3fMkggOrup2zkRyPpKCnmve+ydTJ8PjihZok0xcSrWpbHmjU RhrRva8BEFvB7F23JpI5w/ZJCQwi9AtoQf1YjmJ0meJ+CysilUL0SjPH4t2rlsqA7LPt xL8iN3Ia/M9GWzn9//rtDduMKlwk1dxiITdpKDu/2q2itrM21N10iUCaMZltx0StkDzE Qo1w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=C8GjxdzAv2fl8bNhyQ/q/aRdfCqad8gWHpE69YiZOWk=; b=oksZQjTqr8PFwyT6EDAHjueh2p0fEvm2+LsYVbD0gHR6ygI5UuSLxepKV4SxYnY+tF +qIJJkhfiAHY6Xn/NX0K0vanZLxKlu7Vjb3sKXca+68oKSKMPWN9Tg7957CB+7bkdeNV qZVGio5KrrTXLXdZtNAT+Wkj98sLy4i2+fUrSKdQXRg5RBWbUUFXPRt4eG+D1CboZuW2 9lNRdwYn6bK0ZKHniOeAixoLH15jHFpvfJlOD9kPl2lKiaNju+ZbW9Y+gvGI5gFsWyrh PcoLSlto5W2e9/9lEHqTucKRk38ZhdUH6SEAWgwN0b2ben/j3SeIBN1/mZ9mCY3cPDuM 9XSw== X-Gm-Message-State: AMCzsaWpUonKcC/TJIR44n17fEakks6aPKzGVsXBPjI6uyYAQMQHqECK RhHU+kDmZELC3wtje2RLgoh8l5IvHg8F2A6Fnmnq6A== X-Google-Smtp-Source: AOwi7QCDpkQIJCGbA7HhOdHcL+QhvTMpLAIa+InGYGKfEkFy3Qj8ItPOsV6mtEq5XfVkPdUlkds9O0GpVTvyufrO0U4= X-Received: by 10.37.45.110 with SMTP id s46mr428166ybe.400.1507751066585; Wed, 11 Oct 2017 12:44:26 -0700 (PDT) MIME-Version: 1.0 Received: by 10.129.75.194 with HTTP; Wed, 11 Oct 2017 12:43:46 -0700 (PDT) In-Reply-To: <17BE9E1D-120B-4508-B765-3799134FD708@gmail.com> References: <150670160872.14128.2758037992338326085.idtracker@ietfa.amsl.com> <778d5504-ba4f-d418-7b20-356353bb0fb2@cs.tcd.ie> <8kd5pq.oxb4pv.rtlo8t-qmf@mercury.scss.tcd.ie> <644DA50AFA8C314EA9BDDAC83BD38A2E0EAA7204@sjceml521-mbx.china.huawei.com> <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> <1f254140-1340-6c7d-9c73-e7137562c685@gmail.com> <17BE9E1D-120B-4508-B765-3799134FD708@gmail.com> From: Eric Rescorla Date: Wed, 11 Oct 2017 12:43:46 -0700 Message-ID: To: Dino Farinacci Cc: Christian Huitema , "ietf@ietf.org" , "ideas@ietf.org" , "lisp@ietf.org list" Content-Type: multipart/alternative; boundary="f4030435adecbbe39d055b4aa667" Archived-At: Subject: Re: [lisp] [Ideas] WG Review: IDentity Enabled Networks (ideas) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Oct 2017 19:44:30 -0000 --f4030435adecbbe39d055b4aa667 Content-Type: text/plain; charset="UTF-8" On Wed, Oct 11, 2017 at 12:39 PM, Dino Farinacci wrote: > Let me ask for your opinion Christian (or anyone else for that matter). If > a device is assigned a private/public key-pair and the identifier for the > device is a hash of the public-key, is the identifier private? > > I can't answer this in isolation. Does the identifier show up on the wire? If so, then totally. -Ekr Is the identifier trackable even when its network location is not generally > known, not advertised publicly, and possibly changing frequently? > > Dino > > > On Oct 11, 2017, at 12:34 PM, Christian Huitema > wrote: > > > > On 10/11/2017 10:32 AM, Padma Pillay-Esnault wrote: > >> but you do not need a reference to a permanent identity for that -- > systems similar to CGA would work just fine. > >> > >> > >> The identity of the device is just adding a lever of identifier which > effectively allows authentication to modify the identifiers used by that > device but also what the users of these identifiers can look up. If we had > used "user of identifier" it would have been misconstrued for humans. So > damn if you do and damn if you don't ... > >> > >> We are open for discussions anytime. > >> > > > > Some thing you should be hearing is that "long term identity of device" > has almost the same privacy properties as "long term identity of the > device's owner". You may think that identifying a random piece of hardware > is no big deal, but it turns out that the network activity and network > locations of that piece of hardware can be associated to those of its human > owner. So you need the same kind of protection for these device identifiers > as for human identifiers. > > -- > > Christian Huitema > > > > --f4030435adecbbe39d055b4aa667 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
On W= ed, Oct 11, 2017 at 12:39 PM, Dino Farinacci <farinacci@gmail.com&g= t; wrote:
Let me ask for your opin= ion Christian (or anyone else for that matter). If a device is assigned a p= rivate/public key-pair and the identifier for the device is a hash of the p= ublic-key, is the identifier private?


I can't answer this in isolation. = Does the identifier show up on the wire? If so, then totally.
-Ekr


Is the identifier trackable even when its network location is not generally= known, not advertised publicly, and possibly changing frequently?

Dino

> On Oct 11, 2017, at 12:34 PM, Christian Huitema <huitema@huitema.net> wrote:
>
> On 10/11/2017 10:32 AM, Padma Pillay-Esnault wrote:
>> but you do not need a reference to a permanent identity for that -= - systems similar to CGA would work just fine.
>>
>>
>> The identity of the device is just adding a lever of identifier wh= ich effectively allows authentication to modify the identifiers used by tha= t device but also what the users of these identifiers can look up. If we ha= d used "user of identifier" it would have been misconstrued for h= umans. So damn if you do and damn if you don't ...
>>
>> We are open for discussions anytime.
>>
>
> Some thing you should be hearing is that "long term identi= ty of device" has almost the same privacy properties as "long ter= m identity of the device's owner". You may think that identifying = a random piece of hardware is no big deal, but it turns out that the networ= k activity and network locations of that piece of hardware can be associate= d to those of its human owner. So you need the same kind of protection for = these device identifiers as for human identifiers.
> --
> Christian Huitema
>


--f4030435adecbbe39d055b4aa667-- From nobody Wed Oct 11 12:52:15 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9A29B132351; Wed, 11 Oct 2017 12:51:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nHBsRq31QtD0; Wed, 11 Oct 2017 12:51:40 -0700 (PDT) Received: from mail-pf0-x244.google.com (mail-pf0-x244.google.com [IPv6:2607:f8b0:400e:c00::244]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B3BF313307B; Wed, 11 Oct 2017 12:51:40 -0700 (PDT) Received: by mail-pf0-x244.google.com with SMTP id n73so1816509pfg.10; Wed, 11 Oct 2017 12:51:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=vC/Ez/TBsoaazVU+xkU2Ny7qXJ4UoUPDVj6TsAZcxVg=; b=isX7G69A/5zhcEjyFKrrCw65sVgqht7R7wOgx+JLigtbrBIs5/l0JSsOLZEYY5esKn pMD2h/jg/NHLp1QXYiKyAxDEwiWb11WrqqRrB2rel12tnP+ikyg2rY5xzcBS8CDk7Bav Qd1mDdRFuTyT6AUv4rUj18aXtqXtiphLQNC1px9ZPFb7iSoVAYjv+PO4bwvPYllWZh4E vOszwjNeQ+tnomr7ErlUHYvYQrILA1mynnQ6CH9CylkgW4uExT2rb9NjRll1ZInW9Tcq UiQRoBkfxAoYYTFjAu9ylheo3mkHCBG3qttLHzFTZp0oKIbBcVci1yFECTkw/XTD61Km j7cw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=vC/Ez/TBsoaazVU+xkU2Ny7qXJ4UoUPDVj6TsAZcxVg=; b=OSQKyf2G+SS6NXtNEqRxxjHY8HrX7FZSPX0X6XfIopgCFgjVRZ3l7DZXosqfY3eFR+ 5WiuZxr0d4miLXLtAIYgRsOUDEIUqCqleoNUC1kmZamw2DFxPOcYUJwejM0py0Edl/DT 3EkPvbGuiurC9qUmbLzzd6J3VCjPz5Hp5DqgWaZ2Z3+B9CUKP7/yRrK86b2xQcFoHpLi YfPRazDuqMQOBRul6W+KygVk2p9kUceSII53BHEJrvBbyl8tLL7OdpB8TX7qeJogxw+T ewxsa/MGRK9orMLSPd0ip18bYLFKjwU7IMZzwxcOQN5ExosyQ6AU2MUjSttcfoBqnrh+ ENxg== X-Gm-Message-State: AMCzsaVQ7V/5S/WzUTUNMqa2sLJqPiTPJ2BMJuhp0sKn2qDBTmWouQUt 9hcwYf7214BgtPIcw2htocc= X-Google-Smtp-Source: AOwi7QBhyPfODimblgpsPa0jUozgGVUYfrVMcByCXpTmePIpmjLC6eXnn0o45ZSPE1pnln34A+1NXw== X-Received: by 10.98.24.20 with SMTP id 20mr105918pfy.71.1507751500277; Wed, 11 Oct 2017 12:51:40 -0700 (PDT) Received: from [10.197.31.157] (173-11-119-245-SFBA.hfc.comcastbusiness.net. [173.11.119.245]) by smtp.gmail.com with ESMTPSA id r77sm17440000pfk.93.2017.10.11.12.51.39 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 11 Oct 2017 12:51:39 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Dino Farinacci In-Reply-To: Date: Wed, 11 Oct 2017 12:51:38 -0700 Cc: Christian Huitema , "ietf@ietf.org" , "ideas@ietf.org" , "lisp@ietf.org list" Content-Transfer-Encoding: quoted-printable Message-Id: References: <150670160872.14128.2758037992338326085.idtracker@ietfa.amsl.com> <778d5504-ba4f-d418-7b20-356353bb0fb2@cs.tcd.ie> <8kd5pq.oxb4pv.rtlo8t-qmf@mercury.scss.tcd.ie> <644DA50AFA8C314EA9BDDAC83BD38A2E0EAA7204@sjceml521-mbx.china.huawei.com> <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> <1f254140-1340-6c7d-9c73-e7137562c685@gmail.com> <17BE9E1D-120B-4508-B765-3799134FD708@gmail.com> To: Eric Rescorla X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [lisp] [Ideas] WG Review: IDentity Enabled Networks (ideas) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Oct 2017 19:51:47 -0000 > On Wed, Oct 11, 2017 at 12:39 PM, Dino Farinacci = wrote: > Let me ask for your opinion Christian (or anyone else for that = matter). If a device is assigned a private/public key-pair and the = identifier for the device is a hash of the public-key, is the identifier = private? >=20 >=20 > I can't answer this in isolation. Does the identifier show up on the = wire? If so, then totally. When the payload is encrypted, it does not. So let me ask you these = follow-up questions: (1) If a host sources a packet with its identifier in one VM and an = encapsulator in another VM (in the same physical system) encapsulates = the packet but encrypts the payload before encapsulation, has the = identifier remain private? (2) If in (1), the packet is decapsulated by an intermmediate point, and = then reencapsulated but the packet is encrypted with a new session key = (from a new ECDH exchange) to the destination, has the identifier = remained private? Dino >=20 > -Ekr >=20 >=20 > Is the identifier trackable even when its network location is not = generally known, not advertised publicly, and possibly changing = frequently? >=20 > Dino >=20 > > On Oct 11, 2017, at 12:34 PM, Christian Huitema = wrote: > > > > On 10/11/2017 10:32 AM, Padma Pillay-Esnault wrote: > >> but you do not need a reference to a permanent identity for that -- = systems similar to CGA would work just fine. > >> > >> > >> The identity of the device is just adding a lever of identifier = which effectively allows authentication to modify the identifiers used = by that device but also what the users of these identifiers can look up. = If we had used "user of identifier" it would have been misconstrued for = humans. So damn if you do and damn if you don't ... > >> > >> We are open for discussions anytime. > >> > > > > Some thing you should be hearing is that "long term identity of = device" has almost the same privacy properties as "long term identity of = the device's owner". You may think that identifying a random piece of = hardware is no big deal, but it turns out that the network activity and = network locations of that piece of hardware can be associated to those = of its human owner. So you need the same kind of protection for these = device identifiers as for human identifiers. > > -- > > Christian Huitema > > >=20 >=20 From nobody Wed Oct 11 12:59:00 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3565A1342DB for ; Wed, 11 Oct 2017 12:58:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SEmwyAWhzIjY for ; Wed, 11 Oct 2017 12:58:45 -0700 (PDT) Received: from mail-qt0-x230.google.com (mail-qt0-x230.google.com [IPv6:2607:f8b0:400d:c0d::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 69FEB134292 for ; Wed, 11 Oct 2017 12:58:37 -0700 (PDT) Received: by mail-qt0-x230.google.com with SMTP id f15so8811516qtf.7 for ; Wed, 11 Oct 2017 12:58:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=l70Gu05Ng6IDXOQ9t7Dw+emfQY83Pr+3ePuITM/8kQ8=; b=gmqTKbrtN5LZ31Zb9fRcfrynkXQbmL0dAkxkaD16DCGqn2afjn7b2x77QTkepanXe4 IWbhvQO/MNBe+BeVrGC6vTNIZ6XRq21i+KuO1H/oBBp4wmZoRepTQzUZnvvRReaB+v/0 D9kblX1rgl0plxOgnQsku7N5I1jHJTPjzvieCepk0fO+6qQyjtjb+Uqi8M1UyIqXQ1lt e1N9Rw/m5x5mCRDtQA115vsFVN7iaPm4Y/5QKwYKEkxELpP22zjjEEdLHW/XPs0s6fic 97/oZRjjMHx68DqfNnEzeQSLQS46xhNPRqBzzdEFL0WU4G+Onc09RGVG/bnWjLpcDSBd dSgA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=l70Gu05Ng6IDXOQ9t7Dw+emfQY83Pr+3ePuITM/8kQ8=; b=GkdWqHL9GSopEWEUs1OGXLzk4ZWYmxrYyzBlMxZh7B8cMK4IkuXTSP0576SAE4ZArL zSYc2q37lWPRc0s2XSxf/4eZugsO19HrU+ybHr5Kfqojn7pC2mfcf3Fd/vfU7sI7PJ2x BAXrPquU4inlKtw8dnDMkpa8x5N9B83B6e/HiutBfNNJkvqwYHpdstM4DUjy40dUr7qx xV+U13E5VypbhemErnignKES07deFT+C1Xa+e1CbJMEjuvKqFqf5nhyLdSbqx3HvSRPi hCIN2QVit2ZVUTTH9gkalXwIRY3CGVCTwKXSCHcUahWH8ziAn12d36b5lQIv421FIwop RKyQ== X-Gm-Message-State: AMCzsaXvmfQU9WE4+pWi3NoC5GcHY4kV89SAdx0Xwg7xRhO8damdGPzO i+D0zxE+QRrsXE1QCXwq8NkVG26COgLYwGgi1VwXqg== X-Google-Smtp-Source: AOwi7QCeKPm9S1Ah83s+nDSkDjSd1vOks1XlbguHucB/+kRmy3ekBQb8JhlpcOirwqJAl++NWqwerEu3s2N8lGANSkQ= X-Received: by 10.37.51.68 with SMTP id z65mr445311ybz.353.1507751916477; Wed, 11 Oct 2017 12:58:36 -0700 (PDT) MIME-Version: 1.0 Received: by 10.129.75.194 with HTTP; Wed, 11 Oct 2017 12:57:55 -0700 (PDT) In-Reply-To: References: <150670160872.14128.2758037992338326085.idtracker@ietfa.amsl.com> <778d5504-ba4f-d418-7b20-356353bb0fb2@cs.tcd.ie> <8kd5pq.oxb4pv.rtlo8t-qmf@mercury.scss.tcd.ie> <644DA50AFA8C314EA9BDDAC83BD38A2E0EAA7204@sjceml521-mbx.china.huawei.com> <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> <1f254140-1340-6c7d-9c73-e7137562c685@gmail.com> <17BE9E1D-120B-4508-B765-3799134FD708@gmail.com> From: Eric Rescorla Date: Wed, 11 Oct 2017 12:57:55 -0700 Message-ID: To: Dino Farinacci Cc: Christian Huitema , "ietf@ietf.org" , "ideas@ietf.org" , "lisp@ietf.org list" Content-Type: multipart/alternative; boundary="001a1148aa62643246055b4ad9cf" Archived-At: Subject: Re: [lisp] [Ideas] WG Review: IDentity Enabled Networks (ideas) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Oct 2017 19:58:47 -0000 --001a1148aa62643246055b4ad9cf Content-Type: text/plain; charset="UTF-8" On Wed, Oct 11, 2017 at 12:51 PM, Dino Farinacci wrote: > > On Wed, Oct 11, 2017 at 12:39 PM, Dino Farinacci > wrote: > > Let me ask for your opinion Christian (or anyone else for that matter). > If a device is assigned a private/public key-pair and the identifier for > the device is a hash of the public-key, is the identifier private? > > > > > > I can't answer this in isolation. Does the identifier show up on the > wire? If so, then totally. > > When the payload is encrypted, it does not. Are the handshakes that establish the cryptographic keys used to encrypt the payload themselves encrypted? If it's IKE, the answer is probably yes, but if not, I don't know. So let me ask you these follow-up questions: > > (1) If a host sources a packet with its identifier in one VM and an > encapsulator in another VM (in the same physical system) encapsulates the > packet but encrypts the payload before encapsulation, has the identifier > remain private? > > (2) If in (1), the packet is decapsulated by an intermmediate point, and > then reencapsulated but the packet is encrypted with a new session key > (from a new ECDH exchange) to the destination, has the identifier remained > private? > Generally, I don't tend to think of things as being "private" or "non-private". Rather we talk about who has a given capability or piece of information. I think it's clear that in these cases the identifier was available to the machine doing the deencapsulation/reencapsulation. Obviously, that's worse for privacy than having it not have that information. How much worse depends on a lot of factors. In this particular, work, however, it seems like the privacy concerns are about: 1. Whether the ID mapping systems reveal who is talking to who. 2. Whether this creates persistent identifiers that would otherwise be destroyed when people changed their location Maybe Christian and Stephen would like to say more about their concerns -Ekr > > Dino > > > > > -Ekr > > > > > > Is the identifier trackable even when its network location is not > generally known, not advertised publicly, and possibly changing frequently? > > > > Dino > > > > > On Oct 11, 2017, at 12:34 PM, Christian Huitema > wrote: > > > > > > On 10/11/2017 10:32 AM, Padma Pillay-Esnault wrote: > > >> but you do not need a reference to a permanent identity for that -- > systems similar to CGA would work just fine. > > >> > > >> > > >> The identity of the device is just adding a lever of identifier which > effectively allows authentication to modify the identifiers used by that > device but also what the users of these identifiers can look up. If we had > used "user of identifier" it would have been misconstrued for humans. So > damn if you do and damn if you don't ... > > >> > > >> We are open for discussions anytime. > > >> > > > > > > Some thing you should be hearing is that "long term identity of > device" has almost the same privacy properties as "long term identity of > the device's owner". You may think that identifying a random piece of > hardware is no big deal, but it turns out that the network activity and > network locations of that piece of hardware can be associated to those of > its human owner. So you need the same kind of protection for these device > identifiers as for human identifiers. > > > -- > > > Christian Huitema > > > > > > > > > --001a1148aa62643246055b4ad9cf Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Wed, Oct 11, 2017 at 12:51 PM, Dino Farinacci <= farinacci@gmail.co= m> wrote:
= > On Wed, Oct 11, 2017 at 12:39 PM, Dino Farinacci <farinacci@gmail.com> wrote:
> Let me ask for your opinion Christian (or anyone else for that matter)= . If a device is assigned a private/public key-pair and the identifier for = the device is a hash of the public-key, is the identifier private?
>
>
> I can't answer this in isolation. Does the identifier show up on t= he wire? If so, then totally.

When the payload is encrypted, it does not.

Are the handshakes that establish the cryptographic keys used to en= crypt the payload themselves encrypted? If it's IKE, the answer is prob= ably yes, but if not, I don't know.


=
So let me ask you these follow-up questions:=

(1) If a host sources a packet with its identifier in one VM and an encapsu= lator in another VM (in the same physical system) encapsulates the packet b= ut encrypts the payload before encapsulation, has the identifier remain pri= vate?

(2) If in (1), the packet is decapsulated by an intermmediate point, and th= en reencapsulated but the packet is encrypted with a new session key (from = a new ECDH exchange) to the destination, has the identifier remained privat= e?

Generally, I don't tend to think= of things as being "private" or "non-private". Rather = we talk about who has a given capability or piece of information. I think i= t's clear that in these cases the identifier was available to the machi= ne doing the deencapsulation/reencapsulation. Obviously, that's worse f= or privacy than having it not have that information. How much worse depends= on a lot of factors.

In this particular, work, ho= wever, it seems like the privacy concerns are about:

1. Whether the ID mapping systems reveal who is talking to who.
2. Whether this creates persistent identifiers that would otherwise be de= stroyed when people changed their location

Maybe C= hristian and Stephen would like to say more about their concerns
= -Ekr=C2=A0

Dino

>
> -Ekr
>
>
> Is the identifier trackable even when its network location is not gene= rally known, not advertised publicly, and possibly changing frequently?
>
> Dino
>
> > On Oct 11, 2017, at 12:34 PM, Christian Huitema <huitema@huitema.net> wrote:
> >
> > On 10/11/2017 10:32 AM, Padma Pillay-Esnault wrote:
> >> but you do not need a reference to a permanent identity for t= hat -- systems similar to CGA would work just fine.
> >>
> >>
> >> The identity of the device is just adding a lever of identifi= er which effectively allows authentication to modify the identifiers used b= y that device but also what the users of these identifiers can look up. If = we had used "user of identifier" it would have been misconstrued = for humans. So damn if you do and damn if you don't ...
> >>
> >> We are open for discussions anytime.
> >>
> >
> > Some thing you should be hearing is that "long term identity= of device" has almost the same privacy properties as "long term = identity of the device's owner". You may think that identifying a = random piece of hardware is no big deal, but it turns out that the network = activity and network locations of that piece of hardware can be associated = to those of its human owner. So you need the same kind of protection for th= ese device identifiers as for human identifiers.
> > --
> > Christian Huitema
> >
>
>


--001a1148aa62643246055b4ad9cf-- From nobody Wed Oct 11 13:13:32 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 981451342DF; Wed, 11 Oct 2017 13:13:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uP33ybxaUfcz; Wed, 11 Oct 2017 13:13:09 -0700 (PDT) Received: from mail-pf0-x230.google.com (mail-pf0-x230.google.com [IPv6:2607:f8b0:400e:c00::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C0E691330C1; Wed, 11 Oct 2017 13:13:09 -0700 (PDT) Received: by mail-pf0-x230.google.com with SMTP id b85so1873087pfj.13; Wed, 11 Oct 2017 13:13:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=omD/jzmAGtRvmPhYaA4R3ozEGotE0Wc5ccebyDMcEbw=; b=ZzlBsMsqunyigHGNOa3Ju+Gzo6zo7rl6q9wyfMhY5n2RYCdq5cb5IHCCkpOLVkTr9T t9MzopETYgTyW6sK5Pwd/Pon90WVdjeQJbDgxQ3MCLLLNQf5Kt0CqFXsJZKIOouQ5tuq J4O4x28npTiY1dhiTEipbVtfDvNPqci/Sw1rtAVrrl/zSxaa3qgTI+u2ZvzqElpR35rt 9lDmKDglqZOXODTBIBsFCztlO8FI9+4v43BdmOZ3FPaNXPEOEYd6Rgtkqwp0z6Npedkd ITSyi1jOGz0yUwFogf6MWCtOzuZAzqcFkh6WytBkRQhrebmSiyy8xvue4yZi2alxYNCw yjUw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=omD/jzmAGtRvmPhYaA4R3ozEGotE0Wc5ccebyDMcEbw=; b=WaNpqZZKaZSKZKfLn72gqLi4fgg0xfQ7bTe51yIVl5qKDtITbci6UoH4RMXA2t4hK9 pyFXf+qgZNifHzG4cazDzMcAmcBSxkyZ607P0e+cCJuCe2JXKoXLlP+/YHRn97s+0wfA IfuM22pgSyvloEAUSbXdv6765JjzXlSQzUgVPeGrh2OEVSHN02ooZyqBEOLrw//omtqw mr5afNffeBXdKBFZz74FsMbn+DxcKUZiSTmhI2+cfi597X/xjpJ1GZZH+2F6nqkBD2pu Ph+ksIhrnJW7hnr6CsEg43oH+yPCx/ZBJsQeOfWOpF0UAC/n+kYalFHiR4zLstydNcGC vgFg== X-Gm-Message-State: AMCzsaWlJ5R8Ifxevn/WYi7iwEl4fCIjMoBgl/rBGprMcEejqDpkgFli vfvg/DTzFCKZoGGNGIocuMUnmRM7 X-Google-Smtp-Source: AOwi7QAEeAVcn6/I5jmYsNr5MiAAPDZMp64Fg2RjjbplYEe6XkvVNdUTfHkQCsngebtLjggqzkndSA== X-Received: by 10.99.116.25 with SMTP id p25mr158145pgc.26.1507752789320; Wed, 11 Oct 2017 13:13:09 -0700 (PDT) Received: from [10.197.31.157] (173-11-119-245-SFBA.hfc.comcastbusiness.net. [173.11.119.245]) by smtp.gmail.com with ESMTPSA id a25sm25523054pfc.143.2017.10.11.13.13.08 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 11 Oct 2017 13:13:08 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Dino Farinacci In-Reply-To: Date: Wed, 11 Oct 2017 13:13:07 -0700 Cc: Christian Huitema , "ietf@ietf.org" , "ideas@ietf.org" , "lisp@ietf.org list" Content-Transfer-Encoding: quoted-printable Message-Id: References: <150670160872.14128.2758037992338326085.idtracker@ietfa.amsl.com> <778d5504-ba4f-d418-7b20-356353bb0fb2@cs.tcd.ie> <8kd5pq.oxb4pv.rtlo8t-qmf@mercury.scss.tcd.ie> <644DA50AFA8C314EA9BDDAC83BD38A2E0EAA7204@sjceml521-mbx.china.huawei.com> <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> <1f254140-1340-6c7d-9c73-e7137562c685@gmail.com> <17BE9E1D-120B-4508-B765-3799134FD708@gmail.com> To: Eric Rescorla X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [lisp] [Ideas] WG Review: IDentity Enabled Networks (ideas) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Oct 2017 20:13:12 -0000 > When the payload is encrypted, it does not. >=20 > Are the handshakes that establish the cryptographic keys used to = encrypt the payload themselves encrypted? If it's IKE, the answer is = probably yes, but if not, I don't know. For SD-WAN implementations they use IKE. For RFC8061 (lisp-crypto) the = Map-Request/Map-Reply exchange carry the EIDs in the clear. However, = DTLS could be used but it would take more RTTs to get mappings in the = encapsulator (causing more packet loss). > So let me ask you these follow-up questions: >=20 > (1) If a host sources a packet with its identifier in one VM and an = encapsulator in another VM (in the same physical system) encapsulates = the packet but encrypts the payload before encapsulation, has the = identifier remain private? >=20 > (2) If in (1), the packet is decapsulated by an intermmediate point, = and then reencapsulated but the packet is encrypted with a new session = key (from a new ECDH exchange) to the destination, has the identifier = remained private? >=20 > Generally, I don't tend to think of things as being "private" or = "non-private". Rather we talk about who has a given capability or piece = of information. I think it's clear that in these cases the identifier = was available to the machine doing the deencapsulation/reencapsulation. = Obviously, that's worse for privacy than having it not have that = information. How much worse depends on a lot of factors. It needs the information for table lookups. So how private/trackable are = IP addresses in packets today? > In this particular, work, however, it seems like the privacy concerns = are about: >=20 > 1. Whether the ID mapping systems reveal who is talking to who. The charter talks about no designs or solutions. In LISP, the mappings = are not revealed to the world, you need to sign Map-Registers (to make = your network location available to others) and you need to sign = Map-Requests (for retrieving network location). And if you cannot get network location, you can't send packets (i.e. = DoS) the destination or any nodes close to the destination (much better = than what we have on the Internet today where anyone can send packets = anywhere). > 2. Whether this creates persistent identifiers that would otherwise be = destroyed when people changed their location We can solve this quite easily. I=E2=80=99ll use Bitcoin wallet = addresses as an example. You can keep changing them for every = transaction so there is no association analysis. We have a working group = draft in the LISP WG that does just that. > Maybe Christian and Stephen would like to say more about their = concerns > -Ekr=20 Would welcome. Dino From nobody Wed Oct 11 13:17:20 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33B5C1320CF for ; Wed, 11 Oct 2017 13:16:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ugfp4q_zcJt4 for ; Wed, 11 Oct 2017 13:16:58 -0700 (PDT) Received: from mail-qt0-x229.google.com (mail-qt0-x229.google.com [IPv6:2607:f8b0:400d:c0d::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0147F132F65 for ; Wed, 11 Oct 2017 13:16:56 -0700 (PDT) Received: by mail-qt0-x229.google.com with SMTP id q4so8976208qtq.8 for ; Wed, 11 Oct 2017 13:16:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=lMVdzJvvwslKsPtjHj94/rVZeR95JUz/EuuBmkdy9ZE=; b=Ol7V6K1B9Y994WEBXFxakHGdk8kvSDknP/T36R+Rb9J2ZmD5TKaAz00JTsHwcHx+uL +tHssXIKmgmk8tL6+kUhBznUW5jfXlrNQ+ZTM9P4DQIysPGouI7et8PZ+7f8bKRCPtzp bOrluAksyZ1VhtUK9BpaBef9fiCZclQPdeIZkR4zwTiHmn9UCRvRK+ils4XL5iEvjWgB unlxjWjCE3hXjTCQaHvV7X4ceJoj7mwn1TmWCAWwOdxNus+qdGJ8NUk820l+xpGwZUac dKFdST7zAguovj+EJSR1qrIJT+LUUeheB76y+PQ0FkiZyawGOBlggu4ntboJ8RMGH0Yu E1/A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=lMVdzJvvwslKsPtjHj94/rVZeR95JUz/EuuBmkdy9ZE=; b=hFzZ9fqM4oybJYvHo7zBhdWr4xncf1njaVhOHVvJAi23hghG21xHQmI2rQSM3rnxfd rf28HDPvXvZFmPqZbT2q06xMfxlKcitkIyj7JraMccntu+zb71vO1wHpTFWCOHPKanua ZrCJT/e+bArv3zmuG9mXWZW/PNItjnb0mqVS8XpkZx2wlIlN/NSKV1zyiH/vgHDUPx0h ynyqPeC4Fo4qZA9JFd80vAiu1N3VftIyad/a6g18G8045LD6Fqe1g0mK4CNPsayhcJ1Q js8VBFbOvIAjcTmf1WpmfGCip9+Cv2O28G9UihOzntMtSSIaa/ml7XrftPWYDWRwPALA +tVA== X-Gm-Message-State: AMCzsaVErlY1s+nFbg5UUfQ24SvJXE5jcWimW7SFBFHSQF5LH6BXVyrP ZuBV2PRkoCX+guukPF5Sa1ACw9GxAy2W/uJqKFU2+Q== X-Google-Smtp-Source: AOwi7QBtyctBc6qRELys5UtjZ73Ph9pGTzJrBHQbYEoHne4EStIR79phCbOSl/Lxdot8fuFINSHthJJCH3/nhYjtGFk= X-Received: by 10.37.83.66 with SMTP id h63mr452358ybb.397.1507753015112; Wed, 11 Oct 2017 13:16:55 -0700 (PDT) MIME-Version: 1.0 Received: by 10.129.75.194 with HTTP; Wed, 11 Oct 2017 13:16:14 -0700 (PDT) In-Reply-To: References: <150670160872.14128.2758037992338326085.idtracker@ietfa.amsl.com> <778d5504-ba4f-d418-7b20-356353bb0fb2@cs.tcd.ie> <8kd5pq.oxb4pv.rtlo8t-qmf@mercury.scss.tcd.ie> <644DA50AFA8C314EA9BDDAC83BD38A2E0EAA7204@sjceml521-mbx.china.huawei.com> <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> <1f254140-1340-6c7d-9c73-e7137562c685@gmail.com> <17BE9E1D-120B-4508-B765-3799134FD708@gmail.com> From: Eric Rescorla Date: Wed, 11 Oct 2017 13:16:14 -0700 Message-ID: To: Dino Farinacci Cc: Christian Huitema , "ietf@ietf.org" , "ideas@ietf.org" , "lisp@ietf.org list" Content-Type: multipart/alternative; boundary="001a113e688ee00e6d055b4b1aae" Archived-At: Subject: Re: [lisp] [Ideas] WG Review: IDentity Enabled Networks (ideas) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Oct 2017 20:16:59 -0000 --001a113e688ee00e6d055b4b1aae Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Wed, Oct 11, 2017 at 1:13 PM, Dino Farinacci wrote= : > > When the payload is encrypted, it does not. > > > > Are the handshakes that establish the cryptographic keys used to encryp= t > the payload themselves encrypted? If it's IKE, the answer is probably yes= , > but if not, I don't know. > > For SD-WAN implementations they use IKE. For RFC8061 (lisp-crypto) the > Map-Request/Map-Reply exchange carry the EIDs in the clear. However, DTLS > could be used but it would take more RTTs to get mappings in the > encapsulator (causing more packet loss). > > > So let me ask you these follow-up questions: > > > > (1) If a host sources a packet with its identifier in one VM and an > encapsulator in another VM (in the same physical system) encapsulates the > packet but encrypts the payload before encapsulation, has the identifier > remain private? > > > > (2) If in (1), the packet is decapsulated by an intermmediate point, an= d > then reencapsulated but the packet is encrypted with a new session key > (from a new ECDH exchange) to the destination, has the identifier remaine= d > private? > > > > Generally, I don't tend to think of things as being "private" or > "non-private". Rather we talk about who has a given capability or piece o= f > information. I think it's clear that in these cases the identifier was > available to the machine doing the deencapsulation/reencapsulation. > Obviously, that's worse for privacy than having it not have that > information. How much worse depends on a lot of factors. > > It needs the information for table lookups. So how private/trackable are > IP addresses in packets today? > Uh really terrible? That's why things like Tor exist. I'm not sure it's useful to continue with the technical side of the present discussion. We're not trying to design a system here. The requirements for the system the WG is to design is is properly the kind of question that needs to be hashed out for the charter for the WG. -Ekr > > > In this particular, work, however, it seems like the privacy concerns > are about: > > > > 1. Whether the ID mapping systems reveal who is talking to who. > > The charter talks about no designs or solutions. In LISP, the mappings ar= e > not revealed to the world, you need to sign Map-Registers (to make your > network location available to others) and you need to sign Map-Requests > (for retrieving network location). > > And if you cannot get network location, you can't send packets (i.e. DoS) > the destination or any nodes close to the destination (much better than > what we have on the Internet today where anyone can send packets anywhere= ). > > > 2. Whether this creates persistent identifiers that would otherwise be > destroyed when people changed their location > > We can solve this quite easily. I=E2=80=99ll use Bitcoin wallet addresses= as an > example. You can keep changing them for every transaction so there is no > association analysis. We have a working group draft in the LISP WG that > does just that. > > > Maybe Christian and Stephen would like to say more about their concerns > > -Ekr > > Would welcome. > > Dino > > --001a113e688ee00e6d055b4b1aae Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Wed, Oct 11, 2017 at 1:13 PM, Dino Farinacci <<= a href=3D"mailto:farinacci@gmail.com" target=3D"_blank">farinacci@gmail.com= > wrote:
> When th= e payload is encrypted, it does not.
>
> Are the handshakes that establish the cryptographic keys used to encry= pt the payload themselves encrypted? If it's IKE, the answer is probabl= y yes, but if not, I don't know.

For SD-WAN implementations they use IKE. For RFC8061 (lisp-crypto) t= he Map-Request/Map-Reply exchange carry the EIDs in the clear. However, DTL= S could be used but it would take more RTTs to get mappings in the encapsul= ator (causing more packet loss).

> So let me ask you these follow-up questions:
>
> (1) If a host sources a packet with its identifier in one VM and an en= capsulator in another VM (in the same physical system) encapsulates the pac= ket but encrypts the payload before encapsulation, has the identifier remai= n private?
>
> (2) If in (1), the packet is decapsulated by an intermmediate point, a= nd then reencapsulated but the packet is encrypted with a new session key (= from a new ECDH exchange) to the destination, has the identifier remained p= rivate?
>
> Generally, I don't tend to think of things as being "private&= quot; or "non-private". Rather we talk about who has a given capa= bility or piece of information. I think it's clear that in these cases = the identifier was available to the machine doing the deencapsulation/reenc= apsulation. Obviously, that's worse for privacy than having it not= have that information. How much worse depends on a lot of factors.

It needs the information for table lookups. So how private/trackable= are IP addresses in packets today?

Uh = really terrible? That's why things like Tor exist.

=
I'm not sure it's useful to continue with the technical side o= f the present discussion. We're not trying to design a system here. The= requirements for the system the WG is to design is is properly the kind of= question that needs to be hashed out for the charter for the WG.

-Ekr

=C2=A0

> In this particular, work, however, it seems like the privacy concerns = are about:
>
> 1. Whether the ID mapping systems reveal who is talking to who.

The charter talks about no designs or solutions. In LISP, the mappin= gs are not revealed to the world, you need to sign Map-Registers (to make y= our network location available to others) and you need to sign Map-Requests= (for retrieving network location).

And if you cannot get network location, you can't send packets (i.e. Do= S) the destination or any nodes close to the destination (much better than = what we have on the Internet today where anyone can send packets anywhere).=

> 2. Whether this creates persistent identifiers that would otherwise be= destroyed when people changed their location

We can solve this quite easily. I=E2=80=99ll use Bitcoin wallet addr= esses as an example. You can keep changing them for every transaction so th= ere is no association analysis. We have a working group draft in the LISP W= G that does just that.

> Maybe Christian and Stephen would like to say more about their concern= s
> -Ekr

Would welcome.

Dino


--001a113e688ee00e6d055b4b1aae-- From nobody Wed Oct 11 13:50:52 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 94AD0132D17; Wed, 11 Oct 2017 13:50:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o35aUECmX9hN; Wed, 11 Oct 2017 13:50:25 -0700 (PDT) Received: from mail-qt0-x236.google.com (mail-qt0-x236.google.com [IPv6:2607:f8b0:400d:c0d::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ED9BA126B6D; Wed, 11 Oct 2017 13:50:24 -0700 (PDT) Received: by mail-qt0-x236.google.com with SMTP id a43so9299895qta.0; Wed, 11 Oct 2017 13:50:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language; bh=0v3LrLj4qwxfgbExL4EK1rgIV7nlwYP6jIIphvkOzeU=; b=oUFwFs6ETJiWi//Qpt1ttG+sSXwZPpTSyO2dkjE4dA1wW4pw0kXEH701Aw18iQ2LEQ SUiD0rGIMEevOvEA2J8GuOkJqi6gEIHL2H9z0LHms6hqx2BzS7bgvBbBjKRsQraPxkT4 SUWoGUfUT311++6UNHO3Rv7VB7kLh0JsteDLa5uVHXG2cGO2tqSHd0PBSyZl9Eu5A/ZO rCAPLKAS1MV2MOjbFGwDfg1oW2DyWr4a7oKJDEewT4DT3P1/kc/VkBJ6tsVRHwInCcf5 QL+p18BR5TmVwE2fir8xh2sADPu+trP18TXQIKAshqzR/yPY0vQhgzjglXzrU65NwF2h aNKg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language; bh=0v3LrLj4qwxfgbExL4EK1rgIV7nlwYP6jIIphvkOzeU=; b=c1XGfREaflFKNcU5f9waxj23xoeMIWYVbI1LGI2YjdIk8c85GiMTtWHaUW42lHjTks r89wH1nWqa7Mwchi+YcfgCbNutQLJvlM7de0Rol/iu170MmokS4ME5+jePVRYGhWiefz 7kRiLo7HdGkaShIbd70osRKZP0p2rkq9WpG8WuxfMaNh/KyJtgM9Qpbs1BdfJiYn/+4f RT23c1dTQXM6941cZOYYnn7sXGZNMWw/TNQNg1hM6mxiOlPzuNGg8lcnwqX6aaZr+rmb LM5ZMtd1hkMGqvpUaNTvDxBUv4rf13HNCGocdb5A4IvAoxQLppMT1OWgNVKvjsR1mKKE GNrw== X-Gm-Message-State: AMCzsaXLEYq6GMFGQpcza5MoCiSmooGyqy3SFZJPcmotmldX6C8ILU8f jaF68/Ap65jSt1SOR+sZbuIJwQKzQqQ= X-Google-Smtp-Source: AOwi7QDhZn5V0OoX9l6wLZ2tIhQgY25OzDuBrEjKSco+OUCkeBOyz8C/U2vcmL/wtkqp+H3Ic3awGA== X-Received: by 10.237.38.36 with SMTP id z33mr485762qtc.258.1507755023621; Wed, 11 Oct 2017 13:50:23 -0700 (PDT) Received: from host-4-159.cnri.reston.va.us (cnri-7-77.cnri.reston.va.us. [132.151.7.77]) by smtp.gmail.com with ESMTPSA id i92sm8545239qtb.65.2017.10.11.13.50.22 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 11 Oct 2017 13:50:22 -0700 (PDT) To: Padma Pillay-Esnault , Christian Huitema Cc: "ideas@ietf.org" , "lisp@ietf.org list" , Dino Farinacci , Robert Moskowitz , Brian E Carpenter , "ietf@ietf.org" References: <150670160872.14128.2758037992338326085.idtracker@ietfa.amsl.com> <778d5504-ba4f-d418-7b20-356353bb0fb2@cs.tcd.ie> <8kd5pq.oxb4pv.rtlo8t-qmf@mercury.scss.tcd.ie> <644DA50AFA8C314EA9BDDAC83BD38A2E0EAA7204@sjceml521-mbx.china.huawei.com> <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> <1f254140-1340-6c7d-9c73-e7137562c685@gmail.com> From: Sam Sun Message-ID: <5c28dab9-cb0a-e693-f75b-528dc212ea98@gmail.com> Date: Wed, 11 Oct 2017 16:50:21 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------45BDC75F3D1A7FC31FD7423D" Content-Language: en-US Archived-At: Subject: Re: [lisp] [Ideas] WG Review: IDentity Enabled Networks (ideas) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Oct 2017 20:50:27 -0000 This is a multi-part message in MIME format. --------------45BDC75F3D1A7FC31FD7423D Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit I second Padma on this! I suggest we all work more constructively in refining our charter here, and be more focused on the tasks listed in the charter. It's probably too early to fight on the exact meaning of any particular word (e.g. 'identity'). Features like privacy protection and discoverability can also be left for discussion when we work on the details of the framework, instead of being used to kill the whole proposal. By the way, statements like "someone else failed before" should never be a reason to stop working on something of such importance. Sam On 10/11/17 1:32 PM, Padma Pillay-Esnault wrote: > > > On Wed, Oct 11, 2017 at 9:15 AM, Christian Huitema > > wrote: > > On 10/11/2017 7:56 AM, Robert Moskowitz wrote: > >>> and 'identity' is a red flag. >> >> Whow there!  You were part of the Namespace Research Group?  I >> think?  I was and we we worked a lot on this and came to the >> conclusion that there could be no conclusion.  Not even a rough >> concensus, it seemed. >> >> I have been using 'identity' to apply to things for 20 years. >> Pretty much ever since I started working with things.  Anyone >> that holds the position that 'identity' means we are talking only >> about people are allowing their thinking to be clouded. > > I am concerned that the current proponents of the IDEAS work are > mainly resisting the feedback, treating it as some roadblock put > in the path of their work by misguided privacy purists, and > attempting to remove the roadblocks by adding some weasel words to > the charter. I would feel much more confident if these proponents > acknowledged the tension between privacy and stable identifiers of > any sort, if that tension was clearly noted in the charter, and if > privacy goals were clearly stated. > > > As one of the proponents, I feel I need to speak up because blanket > statements are just not helping. > > Speaking on behalf of my fellow proponents, we have always welcomed > constructive feedback from people who want/can contribute and make the > technology better. We have been willing to clarify the charter > (clarification does not mean weaseling). > > If it is helpful to  move forward, I am willing to volunteer for this > work and discuss with anyone to ensure constructive feedback and > comments are addressed. > > > Specifically, I think there is a contradiction between some of > documents. For example, draft-padma-ideas-problem-statement-01 > states that: > > o A single entity may have multiple IDs, and IDs of the same entity > may have different life spans that are different from the lifespan > of the entity. Furthermore, it is understood that IDs may have > different lifecycles, which may be permanent or ephemeral by > choice or design. > > o Ephemeral (temporary) IDs may be used as a short-lived pseudonym > for a permanent ID to protect the privacy of the related entity. > > But then, draft-ccm-ideas-identity-use-cases-01 states that: > > a. Unique and Permanent Identity representing the entity enables > authentication (AUTH) with the mapping and Identity services > infrastructure. While it is possible to do AUTH on Identifiers > those are not permanently associated to the entity. Moreover, > AUTH operation is a relatively an expensive and inefficient > procedure (compared to LOC resolution for example) and can cause > excessive startup delays for lot of applications. > > > As said earlier this draft was not updated by the authors and a new > version was posted yesterday. > > https://www.ietf.org/mail-archive/web/ideas/current/msg00520.html > > The tension is obvious. On one hand, the ephemeral identifiers > envisaged in the problem statement would pretty much align the > privacy properties of the ID to those of IPv6 privacy addresses, > and that's good. On the other hand, the requirement to perform > authentication on identities completely negates that property. > > I would be fine if the support for "Unique and Permanent Identity" > was explicitly excluded from the charter. > > > AFAIK, none of the proponents resisted that. > > There is obviously a need to support some form of access control > to a mapping database, > > > Agreed. > > but you do not need a reference to a permanent identity for that > -- systems similar to CGA would work just fine. > > > > The identity of the device is just adding a lever of identifier which > effectively allows authentication to modify the identifiers used by > that device but also what the users of these identifiers can look up. > If we had used "user of identifier" it would have been misconstrued > for humans. So damn if you do and damn if you don't ... > > We are open for discussions anytime. > > Padma > > > > > -- > Christian Huitema > > > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp > > > > > > _______________________________________________ > Ideas mailing list > Ideas@ietf.org > https://www.ietf.org/mailman/listinfo/ideas --------------45BDC75F3D1A7FC31FD7423D Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit

I second Padma on this!

I suggest we all work more constructively in refining our charter here, and be more focused on the tasks listed in the charter. It's probably too early to fight on the exact meaning of any particular word (e.g. 'identity'). Features like privacy protection and discoverability can also be left for discussion when we work on the details of the framework, instead of being used to kill the whole proposal.

By the way, statements like "someone else failed before" should never be a reason to stop working on something of such importance.

Sam


On 10/11/17 1:32 PM, Padma Pillay-Esnault wrote:


On Wed, Oct 11, 2017 at 9:15 AM, Christian Huitema <huitema@huitema.net> wrote:

On 10/11/2017 7:56 AM, Robert Moskowitz wrote:

and 'identity' is a red flag.

Whow there!  You were part of the Namespace Research Group?  I think?  I was and we we worked a lot on this and came to the conclusion that there could be no conclusion.  Not even a rough concensus, it seemed.

I have been using 'identity' to apply to things for 20 years. Pretty much ever since I started working with things.  Anyone that holds the position that 'identity' means we are talking only about people are allowing their thinking to be clouded.

I am concerned that the current proponents of the IDEAS work are mainly resisting the feedback, treating it as some roadblock put in the path of their work by misguided privacy purists, and attempting to remove the roadblocks by adding some weasel words to the charter. I would feel much more confident if these proponents acknowledged the tension between privacy and stable identifiers of any sort, if that tension was clearly noted in the charter, and if privacy goals were clearly stated.


As one of the proponents, I feel I need to speak up because blanket statements are just not helping. 

Speaking on behalf of my fellow proponents, we have always welcomed constructive feedback from people who want/can contribute and make the technology better. We have been willing to clarify the charter (clarification does not mean weaseling). 

If it is helpful to  move forward, I am willing to volunteer for this work and discuss with anyone to ensure constructive feedback and comments are addressed.


Specifically, I think there is a contradiction between some of documents. For example, draft-padma-ideas-problem-statement-01 states that:
   o  A single entity may have multiple IDs, and IDs of the same entity
      may have different life spans that are different from the lifespan
      of the entity.  Furthermore, it is understood that IDs may have
      different lifecycles, which may be permanent or ephemeral by
      choice or design.

   o  Ephemeral (temporary) IDs may be used as a short-lived pseudonym
      for a permanent ID to protect the privacy of the related entity.
But then, draft-ccm-ideas-identity-use-cases-01 states that:
   a.  Unique and Permanent Identity representing the entity enables
       authentication (AUTH) with the mapping and Identity services
       infrastructure.  While it is possible to do AUTH on Identifiers
       those are not permanently associated to the entity.  Moreover,
       AUTH operation is a relatively an expensive and inefficient
       procedure (compared to LOC resolution for example) and can cause
       excessive startup delays for lot of applications.

As said earlier this draft was not updated by the authors and a new version was posted yesterday.


 
The tension is obvious. On one hand, the ephemeral identifiers envisaged in the problem statement would pretty much align the privacy properties of the ID to those of IPv6 privacy addresses, and that's good. On the other hand, the requirement to perform authentication on identities completely negates that property.

I would be fine if the support for "Unique and Permanent Identity" was explicitly excluded from the charter.

AFAIK, none of the proponents resisted that.
 
There is obviously a need to support some form of access control to a mapping database,

Agreed.
 
but you do not need a reference to a permanent identity for that -- systems similar to CGA would work just fine.
 

The identity of the device is just adding a lever of identifier which effectively allows authentication to modify the identifiers used by that device but also what the users of these identifiers can look up. If we had used "user of identifier" it would have been misconstrued for humans. So damn if you do and damn if you don't ... 

We are open for discussions anytime.

Padma




-- 
Christian Huitema

_______________________________________________
lisp mailing list
lisp@ietf.org
https://www.ietf.org/mailman/listinfo/lisp




_______________________________________________
Ideas mailing list
Ideas@ietf.org
https://www.ietf.org/mailman/listinfo/ideas

--------------45BDC75F3D1A7FC31FD7423D-- From nobody Wed Oct 11 14:25:46 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 09C771321A0; Wed, 11 Oct 2017 14:25:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PjHW_UQ5NIyH; Wed, 11 Oct 2017 14:25:29 -0700 (PDT) Received: from mail-pf0-x235.google.com (mail-pf0-x235.google.com [IPv6:2607:f8b0:400e:c00::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 970ED132332; Wed, 11 Oct 2017 14:25:29 -0700 (PDT) Received: by mail-pf0-x235.google.com with SMTP id b85so2086718pfj.13; Wed, 11 Oct 2017 14:25:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=irwgIGZU//9IyWU1pCjxaq/c1KvWyuS8o8eD0xRX+SA=; b=Hn75PX8ffnmNMP7tWsFseE+NarPEZnbrNWNCklPmm4HiKsJqT0NWkgEpjs8uzbgCt/ 1TI61NDshLFRMx2KT0JjkCXTLHlHNaQYz0cVVQCheTmJrDA7Xsr02XEspLRskbd3uszQ +z29fT5kzmWwLkGnsKCFu5FQIElm+YP/fHF4wp4O2UumHYzOAAC6qKpb3+flu6w31v/N 1Pb3IrnDhRjRxqST3rYtQ56rVVKSUupTjnM6iHANVb+wHh9kxyvkMhszeQ2OQ2+w7NQZ WOSQGbx3wC/9XF/pcoy0Rs4nHovvmXja4hRgRZf0xl2eF7iAIqZXB2nAkTg2Og27A4eG CNEg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=irwgIGZU//9IyWU1pCjxaq/c1KvWyuS8o8eD0xRX+SA=; b=dxBP0xlg/oNgmhg7CvHXTYXeBbhSpzb/uVceSAn4MRR24MaWQBlU0OlaZFYPRIlXU6 B2R9P9i0aSEQTpxbq+d46w8w83OC9H5+O6guz6KcS6AQg+DVuhmxb3/8s4K1VTGfbcAD 4fAcyQKg+6xvtC6HWbnzWGthB+xVD6clpmeh7SCTkiMGLLZxrPpVE0bzbOgv1B4rzQqG 8RdJ2wVsI/4/bp/mc6schggm2/Bp4uEjWSNnnphFLNJ2JPe5bE70VmUPQOj0yPDWaLck jOlX/PVH71GGIHbyoUb46IJSEm8FNAAev1/GOVwMt8f3LRHVVvfPVVT2Zob3B4HPFtcj Fjgg== X-Gm-Message-State: AMCzsaV+F2flnealsJ7LYzebdiTJNqLZN77GnqU2LkK0xCuMXzx5PueP jhP7r8/j/P6H+sZunojwqqc= X-Google-Smtp-Source: AOwi7QBKjac0GMEF++3zi3oZkI720vtAJl47GUDA1YR1pGU/OEoqgpdMb2IjA79Bml4Jb+/RDYJ1Cg== X-Received: by 10.98.35.18 with SMTP id j18mr285814pfj.37.1507757129178; Wed, 11 Oct 2017 14:25:29 -0700 (PDT) Received: from [10.197.31.157] (173-11-119-245-SFBA.hfc.comcastbusiness.net. [173.11.119.245]) by smtp.gmail.com with ESMTPSA id g68sm24656165pfc.64.2017.10.11.14.25.27 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 11 Oct 2017 14:25:28 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Dino Farinacci In-Reply-To: Date: Wed, 11 Oct 2017 14:25:27 -0700 Cc: Christian Huitema , "ietf@ietf.org" , "ideas@ietf.org" , "lisp@ietf.org list" Content-Transfer-Encoding: quoted-printable Message-Id: <4ED1DD7F-FD96-4934-9518-EDE5DB4858BE@gmail.com> References: <150670160872.14128.2758037992338326085.idtracker@ietfa.amsl.com> <778d5504-ba4f-d418-7b20-356353bb0fb2@cs.tcd.ie> <8kd5pq.oxb4pv.rtlo8t-qmf@mercury.scss.tcd.ie> <644DA50AFA8C314EA9BDDAC83BD38A2E0EAA7204@sjceml521-mbx.china.huawei.com> <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> <1f254140-1340-6c7d-9c73-e7137562c685@gmail.com> <17BE9E1D-120B-4508-B765-3799134FD708@gmail.com> To: Eric Rescorla X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [lisp] [Ideas] WG Review: IDentity Enabled Networks (ideas) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Oct 2017 21:25:31 -0000 >> It needs the information for table lookups. So how private/trackable = are IP addresses in packets today? >=20 > Uh really terrible? That's why things like Tor exist. TOR exists because the network layer doesn=E2=80=99t have sufficient = security. I=E2=80=99m preaching to the choir. > I'm not sure it's useful to continue with the technical side of the = present discussion. We're not trying=20 It is useful because there is usually no technical discussion among = people from different areas of expertise. The discussion tend to happen = when a decision like this is made. So I=E2=80=99ll take the discussion whenever I can get it! > to design a system here. The requirements for the system the WG is to = design is is properly the kind of question that needs to be hashed out = for the charter for the WG. I am trying to design a system. And we need more deployment experience. = And I think an IETF working group can help facilitate this. Otherwise, = people will do it else where and new protocols will surface OUTSIDE of = the IETF. And that is when scale, security and interoperability is not = priority.=20 In the IETF, we are for the common good.=20 Dino From nobody Wed Oct 11 17:01:06 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 665F7132939; Wed, 11 Oct 2017 17:00:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8S2kNlMi87Ll; Wed, 11 Oct 2017 17:00:30 -0700 (PDT) Received: from mail-pf0-x234.google.com (mail-pf0-x234.google.com [IPv6:2607:f8b0:400e:c00::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5975B1342FA; Wed, 11 Oct 2017 17:00:24 -0700 (PDT) Received: by mail-pf0-x234.google.com with SMTP id e64so2509586pfk.9; Wed, 11 Oct 2017 17:00:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=EoGSZr1uzmC5qWEDfcv8vQbJVaYxYGcE/NexrCRI/sI=; b=LF9k667nTdA80qd6IQRWrGJ9XonUV8lV8zsUoKQIYGB8opzVJW2NgGCr6rybArWqa6 cAaTykJyga+VGIpuvUq47eUmJVwBF5MZMvipiT+3krqUzjeXj3oL3gj3VMoWEwtxZlfd C7Dx77juYRRb81XJDslwZGXrXKrS283N4b6n11ZFhu1hftgm+TkpxHHaNbUSr+G+5hVx V8/IXEQVUTU36rsjitbGfEOnEEOx7SD1h9hLDZQ50BZ6/zWWrde7uP2Ueuj6EyahcIfK DWPa3UrEIbZ0/P2pkFuU4ezUlWM1MMpKXKbqlbnY3B4hBCXAdqsGPho6ZGk0L2YiMPPA 9xkA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=EoGSZr1uzmC5qWEDfcv8vQbJVaYxYGcE/NexrCRI/sI=; b=AsMfQRdpqgcBu8wa08242M6TSozhaHjhbyrbsyXLrI0d88/TKRFVoluP8JSsmgEcpP 60bmbK5JPlK8AYUo8vgXmks1W6jungHYNGQvrcEUSHeiGII9kpvZZe5NKwSLN2oVJjNh 9Cu6L5MjKWMFIqu5SuUTL2ZZPXzmr5sXC3WkOg5e22TGJAKyOQgiHCzhtrQGOLZl4Dqp 9m0XGgN/gypIXiwrKg3K9GTq2Nh8esmeh3QAqo511P8NqoEQFORrs5TGXp0NpwkUmjFe 3WfVUsw7FDX6TZyxU9uyBHIhC6h9FPxkLYCfmwPRwSS8eqoNIQBcs8nMCFeuCO6q8VBU 3vCg== X-Gm-Message-State: AMCzsaXFUSUWwjg4lsNxNkaj2iz/ifpt2ZBQjzaUIn2KnnH6SZ660Ru+ I0bc49Z98JtyKYzaUKuHpv41nfk= X-Google-Smtp-Source: AOwi7QCcYdQQ3W+tQvmIQa74QzzisYhB0dKoYOOOe4N9tStNf0y+j9COnH/Xo9FM9QCuleE8DPRorA== X-Received: by 10.98.252.71 with SMTP id e68mr532722pfh.319.1507766423455; Wed, 11 Oct 2017 17:00:23 -0700 (PDT) Received: from ?IPv6:2600:1010:b04c:26b6:35c4:532e:4231:b8de? ([2600:1010:b04c:26b6:35c4:532e:4231:b8de]) by smtp.gmail.com with ESMTPSA id y5sm28685292pfd.89.2017.10.11.17.00.21 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 11 Oct 2017 17:00:21 -0700 (PDT) Content-Type: multipart/alternative; boundary=Apple-Mail-2B8E7735-09F6-4E01-801F-EACE7722E409 Mime-Version: 1.0 (1.0) From: Sharon X-Mailer: iPhone Mail (15A421) In-Reply-To: Date: Wed, 11 Oct 2017 17:00:20 -0700 Cc: ideas@ietf.org, LISP mailing list list , NVO3 , routing-discussion@ietf.org Content-Transfer-Encoding: 7bit Message-Id: References: To: Padma Pillay-Esnault Archived-At: Subject: Re: [lisp] IDEAS @IETF98 Minutes X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Oct 2017 00:00:34 -0000 --Apple-Mail-2B8E7735-09F6-4E01-801F-EACE7722E409 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Discussed these 2 ID networking items with Albert and others, perhaps this i= s a good thread: 1. MAMBO -=20 Map-Assisted Measurnent Based Overlay The notion here is that identity based overlays offer global (map-assisted) c= hoices hop by hop underlays do not. One factor in making these choices can b= e by measuring the pearson correlation coefficient (pcc) between the tunnels= . If considered when selecting between VTEP X or VTEP Y to reach a multi hom= e EID or a load balanced EID it can double-quadruple overall overlay capacit= y.=20 2. Lisp-Lambda - A serverless (or virtual-appliance-less) alternative to service function cha= ining which is hard to scale and dev-ops. Its done by mapping flows at the I= TR, ETR, or STR (segment) to queues, and using the mapping to invoke the (ca= ched) function on the flow queue packets rather then hair pining the packets= in and out of function virtual appliances. Saves nic-ram-nic-ram... costly l= ifting. There are reference implementations and simulations to both if theres intere= st.=20 --szb > On Apr 13, 2017, at 12:01 AM, Padma Pillay-Esnault w= rote: >=20 > =20 >=20 >=20 > Please find below the minutes of the meeting. >=20 > Many thanks to our two scribes: Toerless Eckert and Uma Chunduri. >=20 >=20 > If you have any comments/corrections please let us know. >=20 > Thanks >=20 > Padma >=20 >=20 >=20 > IDEAS Side Meeting Minutes=20 >=20 > =20 >=20 > 1. Slides >=20 > Please find below a pointer to the slides >=20 > https://drive.google.com/drive/folders/0BwYx7u1T_20RODdLaWpIdk9feHc?usp=3D= sharing >=20 > =20 >=20 > =20 >=20 > 2. Agenda=20 >=20 > 2.1. Introduction and Problem Statement for IDEAS - Padma Pillay-Esnault >=20 > =20 >=20 > https://www.ietf.org/internet-drafts/draft-padma-ideas-problem-statement-0= 1.txt =20 >=20 > =20 >=20 > IDEAS Introduction >=20 > =20 >=20 > IDEAS aims to be the forum where common issues across all ID Enabled Netwo= rks can be discussed. >=20 > Goals: >=20 > - to create awareness >=20 > - to present the work proposed in IDEAS >=20 > - A generic architecture that is scalable, extensible, robust, secur= e, and flexible for future ID enabled networks >=20 > - to sollicit comments and feedback from the community on the draft= s >=20 > - to call for new contributions >=20 > =20 >=20 > Problem Statement >=20 > Motivation: Why Now? >=20 > ID solutions can address diverse areas >=20 > IOT, M2M communication, Discovery, privacy, Latency, Virtualiz= ation >=20 > Beneficial to have standardized common infra across ID protocols >=20 > =20 >=20 > Key Issues Identified >=20 > Lack of common Infrastructure cause harder to deploy a common solution E2E= >=20 > - No Common Management due to disjoint nature >=20 > - No Common/consistent policy framework >=20 > - Risk of fragmented communication >=20 > Identifier Lifecycle >=20 > - No guidance or allocation scheme for public IDs >=20 > - Agreed upon ID format and scope in cross-domain communication >=20 > - Recycling IDs >=20 > - Better address merging of networks >=20 > Security of Mapping Systems >=20 > - Secured access to the MS >=20 > - data integrity, Confidentiality, Anonymity, Access control >=20 > - DDOS attack prone >=20 > =20 >=20 > Proposal >=20 > - To investigate the opportunity of a new specification effort to ad= dress some specific problems from an ID Enabled Networks perspective. >=20 > - To find a common solution and infrastructure that can be shared by= current protocols and facilitate the introduction of new ID-based services w= hile avoiding rehashing the same problems again each time a new service pops= up >=20 > - Generic Resilient ID Services (GRIDS) infrastructure with standard= ized access and multiple services. The services include >=20 > - secured registration >=20 > - discovery >=20 > - updates with data integrity, >=20 > - mapping and resolution capabilities, >=20 > - define relationships between IDs or group of IDs >=20 > - access control policy and security >=20 > - Other Related Work/ Groups >=20 > - LISP (ALT, DDT) >=20 > - HIP uses DNS >=20 > - NVO3 WG >=20 > =20 >=20 > Questions: >=20 > Eric Nordmark: What=E2=80=99s unclear is what is out of scope re. Identifi= er. Are you considering "what is an identifier", clearly this is not about U= RI, how about IP in IP with IPsec ? Is one of them an identifier the other o= ne a locator. Even LISP was not clear cut between locator/identifier as one c= ould be routed locally. >=20 > =20 >=20 > Padma Pillay-Esnault: Regarding scope, the way we thinking about this, the= re can be multiple scopes with multiple allocation systems. The range of sol= utions is so vast that it may not be appropriate to only have one solution. P= lenty options of where to put it and how to put. GRIDS can be used as local,= proximity, global instance just as possible to have Private ID. >=20 > =20 >=20 > Bob Moskovitz: Concept of Identity and Identifier is important and I have= been involved and saw some form of this for the last 20 years may be more. I= t really does to be discussed in the list. Definitely it needs to be fleshed= out a lot more about >=20 > what identifiers are, should be part of the work, tough problem with lots o= f opinions. >=20 > =20 >=20 > =20 >=20 > 2.2. Requirements for Generic Resilient Identity Services (GRIDS) in IDEAS= - Alex Clemm >=20 > =20 >=20 > https://www.ietf.org/internet-drafts/draft-padma-ideas-req-grids-00.txt >=20 > =20 >=20 > - This is the core infrastructure document which captures all requirements= >=20 > - Talked on Core components of GRIDS >=20 > - GRIDS-MS, GRIDS-IS are covered >=20 > - Grouping and Meta data are not described yet >=20 > - Identity and Identifier definitions elaborated >=20 > - Talked in details about mapping services >=20 > - Identity related services are detailed >=20 > - Structured and unstructured identifiers >=20 > - Grouping related services >=20 > - Requirement (Distribution, Redundancy, Performance and Scale..) >=20 > - Key performance requirements >=20 > - Security requirements >=20 > - GRIDS should be able to be deployed in private space as well as in p= ublic domain >=20 > =20 >=20 > - The naming evolved from mapping system, which was too functionally const= rained. >=20 > =20 >=20 > Questions:=20 >=20 > Ravi Ravindran: Trying to understand scope: trying to expand LISP ? >=20 > What is the scope ?=20 >=20 > =20 >=20 > Alex Clemm: No, not planning to just "expand lisp", that should be done in= LISP WG. Some of those questions are better answered in the use cases, clea= r which ones are not resolved by LISP. >=20 > =20 >=20 > Benjamin Damm: How is this different from Multicast DNS ? >=20 > =20 >=20 > Bob Moskovitz: I can totally implement everything in GRIDS in DNS but that= would not be a great idea but there would be a lot of >=20 > problems, DDoS, etc.. Think that metadata is not optional but must be call= ed mandatory. Determined by use case. >=20 > =20 >=20 > Alex Clemm: Note taken >=20 > =20 >=20 > Dino Farinacci: rfc8060 defines multiple RLOC types, eg: LISP can support= those. Does this look like multicast DNS ? No, this is network layer mappin= g information mapping addresses to addresses. >=20 > =20 >=20 > Eric Nordmark: Multicast DNS is a local service, this is meant to be globa= l. >=20 > =20 >=20 > =20 >=20 > 2.3. A Blockchain-based Mapping System - Jordi Paillisse=20 >=20 > - Blockchain is decentralized and secured >=20 > - Add blocks of data one after other >=20 > - Blockchain work flow >=20 > - Transaction with a data, Senders Signature and Senders Public Key t= o a P2P network >=20 > - Properties >=20 > - Decentralized, No prior trust is required >=20 > Data can be added but not modifiable >=20 > - Basic Idea >=20 > - Store mappings in blockchain >=20 > - EID prefixes are distributed to all participants >=20 > - Pros and Cons >=20 > - Infrastructure less, Decentralized, fast lookup, secure, no prio= r trust, simple rekeying >=20 > - Cons >=20 > - Slow updates, costly boot strapping >=20 > - Comparison with LISP DDT >=20 > - No Infra, easy management >=20 > - Issues with RPKI >=20 > - Anonymity (prefix linked to owner name) >=20 > - Revocation issues (block chain doesn=E2=80=99t use certificates= ) >=20 > - Scalability >=20 > - Growth similar to BGP Churn >=20 > - Prefix delegation + Mappings >=20 > - Design considerations >=20 > - Bitcoin is too restrictive >=20 > - New technologies - More scalable and more contracts >=20 > - Dedicated chains.. >=20 > =20 >=20 > Questions: >=20 > Toerless Eckert: what is the incentive model for participants to deploy th= e necessary infrastructure for this system ? In bitcoin, the security is ach= ieved through tremendous amount of calculation, the cost for that hardware i= s financed by handing out bitcoins for successful calculations. Do we need t= o hand out IPv4 addresses to pay for IDEAS bitchain calculations ? >=20 > =20 >=20 > Jordi Paillisee: Good question, there are some new blockchain methods with= other incentive structures. See references on last slide of the slide deck.= >=20 > Regarding incentive it is about security. >=20 > =20 >=20 > Dino Farinacci:=20 >=20 > When a new registration added (Say Jordi first and then 100000 more record= s added. Now the entry moved to the end. This solution will have >=20 > complete history of movements. Q1: can the really old stuff be chopped off= . Q2: if RLOCs change etc. is it not really slow when you need to look throu= gh a lot of other newer mappings ? >=20 > Jordi Paillisee : Q1 Answer: It can be mitigated through implementation >=20 > Q2 answer: implementation detail. Database should have latest data for all= entities, not in sequential order of evens. >=20 > =20 >=20 > Manu Sporny: Blockchain developer. Referring to blockchain group (w3c-bloc= kain group) met in the morning, sees overlap with that work, how could we cr= eate alignment. Whom to talk to coordinate ?=20 >=20 > Padma Pillay-Esnault: Let=E2=80=99s discuss this offline. >=20 > =20 >=20 > 2.4. Use Cases for IDEAS - Tom Herbert >=20 > https://www.ietf.org/internet-drafts/draft-padma-ideas-use-cases-00.txt >=20 > =20 >=20 > - Mapping essentially a distributed key/value store >=20 > - Key is fixed size per mapping DB >=20 > - Maps "virtual address" to "physical address" >=20 > - Mapping table is assumed to be distributed and possibly shared fo= r load >=20 > - Rate of entry is important characteristic >=20 > =20 >=20 > - Use Cases: >=20 > - Common Control plane >=20 > - Mobility >=20 > - Network Virtualization (for network simplification) >=20 > - Heterogeneous Multi-Access (hetnet) >=20 > - Security >=20 > - Device Discovery >=20 > - Mobility >=20 > - Map entity to its current location for forwarding >=20 > - Variants =20 >=20 > - Encap: IP Mobility, IPIP, GTP etc.. >=20 > - ID/LOC: LISP, ILA >=20 > - Properties >=20 > - Mobility sub-cases >=20 > - Within a single mobile network >=20 > - Mobility between mobile networks >=20 > - Multi-homed devices >=20 > - Hetnet environments >=20 > - Whole networks are mobile (WIFI in bus) >=20 > - Network Virtualization >=20 > - Variants >=20 > - Encap: Map virtual IP address to Physical address >=20 > - ID/LOC split >=20 > - Properties >=20 > - Mostly in DC >=20 > - Address resolution static tunnels >=20 > - Could be used as alternative means to resolve L2/L3 >=20 > - Host Routes >=20 > - A network could implement virtualization simply by creating a= host route >=20 > =20 >=20 > Questions: >=20 > Bob Moskovitz: We have been mobile since 1993. We need to start looking at= mobility as baseline. Would almost challenge in discussion the starting poi= nt. Take rate of mobility (how fast it can move) as distinguishing attribute= . >=20 > =20 >=20 > Tom Herbert: Agree. How quickly is my "device" going from one network to a= nother. With higher rate, updates become a problem. Also get more and more u= se cases where latency becomes an issue. Hope we could avoid relying on a di= stributed system. Control path is critical system, keeping everything in syn= c with low latency and secure, reliable, available. Can we design this syste= m with applicability across different use cases. >=20 > =20 >=20 > Mike McBride: There are applications like AR/VR that have strict requireme= nts hopefully, that is also included in use cases. >=20 > =20 >=20 > Tom Herbert: Yes this has been discussed in the draft. >=20 > =20 >=20 > Padma Pillay-Esnault: Yes there different strict requirements depending on= the different use cases. Earlier there was a question regarding IOT use cas= es. The requirements may vary for example depending if the type of IOT devic= e. If it battery operated (supposed to last 10 years) then it may have only= one way communication (such as a pet tracker or sensor) and may even be on n= on-IP. In some cases proximity and context may be important too. >=20 > =20 >=20 > 2.5. Mobility First and Global Name Resolution Service - Parishad Karimi >=20 > https://www.ietf.org/id/draft-karimi-ideas-gnrs-00.txt >=20 > =20 >=20 > -Name based communications >=20 > - Name based Architectures IP =3D=3D> LISP, HIP at IETF MF and NDN (= in academia) >=20 > - MF - Mobility First Background >=20 > - MF started in 2010 under NSF, FIA >=20 > - MF Protocol Layers >=20 > - GUID (global Unique Identifiers) >=20 > - We seek to use global name resolution system for resolution >=20 > - Name Resolution Requirements >=20 > - Low propagation and response Latency >=20 > - Storage and load scalability >=20 > - Security and reliability >=20 > - Extensibility and flexibility >=20 > - Structure of mapping should not be limited >=20 > - Why can=E2=80=99t DNS can be supported (DNS Deficiencies) >=20 > - TTL based caching >=20 > - High Mobility makes caching ineffective >=20 > - Static Placement of AUTH Servers >=20 > - Reliance on hierarchal (relating root) >=20 > - For MF we have looked into DMAP and GMAP and Auspice >=20 > - Comparison of all three systems >=20 > - Conclusion - We need a global mapping system with MF project >=20 > =20 >=20 > =20 >=20 > 2.6 Conclusion & Next steps - Padma Pillay-Esnault >=20 > Where do we want to go from here ? >=20 > Next Steps Slide: >=20 > - We need more collaboration from the community and looking forward for mo= re participation on topics such as Blockchain and distributed trust, Late bi= nding, Fast Caching, Security, DDOS protection .... >=20 > =20 >=20 > - Let=E2=80=99s take discussions to the alias >=20 > - Discuss the scope of work=20 >=20 > =20 >=20 > 3. Other Info >=20 > Mailing list: IDEAS >=20 > List address: ideas@ietf.org >=20 > Archive: https://mailarchive.ietf.org/arch/search/?email_list=3Dideas >=20 > To subscribe: https://www.ietf.org/mailman/listinfo/ideas >=20 > =20 >=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp --Apple-Mail-2B8E7735-09F6-4E01-801F-EACE7722E409 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
Discussed these 2 ID networking items w= ith Albert and others, perhaps this is a good thread:

1.= MAMBO - 

Map-Assisted Measurnent Based Overlay
= The notion here is that identity based overlays offer global (map-assisted) c= hoices hop by hop underlays do not. One factor in making these choices can b= e by measuring the pearson correlation coefficient (pcc) between the tunnels= . If considered when selecting between VTEP X or VTEP Y to reach a multi hom= e EID or a load balanced EID it can double-quadruple overall overlay capacit= y. 

2. Lisp-Lambda -
A serverless (or virtual-applianc= e-less) alternative to service function chaining which is hard to scale and d= ev-ops. Its done by mapping flows at the ITR, ETR, or STR (segment) to queue= s, and using the mapping to invoke the (cached) function on the flow queue p= ackets rather then hair pining the packets in and out of function virtual ap= pliances. Saves nic-ram-nic-ram... costly lifting.

= There are reference implementations and simulations to both if theres intere= st. 


--szb

On A= pr 13, 2017, at 12:01 AM, Padma Pillay-Esnault <padma.ietf@gmail.com> wrote:

 =

Please find below the minutes of the meeting.

Many thanks to our two scribes= : Toerless Eckert and Uma Chunduri.


If you have any comments/corrections p= lease let us know.

Thanks=

Padma


IDEAS Side Meeting Minutes 

 

1. Slides

Please find below a pointer to the slides

https://drive.google.com/drive/folders/0BwYx7u1T_20RODdLaWpIdk9feHc?usp=3D= sharing

 

 

2. Agenda 

2.1. Introduction and Problem Statement for IDEAS  - Padma Pillay-Esnau= lt

 

= https://www.ietf.org/internet-drafts/draft-padma-ideas-problem-statement-01.= txt    

 

IDEAS Introd= uction

 

=

IDEAS aims to be the forum where common issues across all ID Enabled Networks can b= e discussed.

 Goals:

-       to create awareness

-       to present the work proposed= in IDEAS

-       A generic architecture that i= s scalable, extensible, robust, secure, and flexible for future ID enabled networks

-        to sollicit comments a= nd feedback from the community on the drafts

-       to call for new contributions<= span>

  

Problem Statement

Motivation: Why Now?

ID solutions can address diverse areas

   = ;         IOT, M2M communication, Di= scovery, privacy, Latency, Virtualization

Beneficial to have standardized common infra across ID protocols

 

=

Key Issues Identified

Lack of common Infrastructure cause harder to deploy a common solution E2E=

  -&n= bsp;      No Common Management due to disjoint nature

  -       No Common/consistent policy framework

  -     &n= bsp; Risk of fragmented communication

 Identifier Lifecycle

  -       No guidance or allocation scheme for public IDs

  -       Agreed upon ID format and scope in cross-domain communication

  -       Recycling IDs

  -  &n= bsp;    Bet= ter address merging of networks

 Security of Mapping Systems

  -       Secured access to the MS

  -  &= nbsp;    da= ta integrity, Confidentiality, Anonymity, Access control

=   -     = ;  DDOS attack prone<= /span>

 

=

Proposal

-  = ;     To investigate the opportu= nity of a new specification effort to address some specific problems from an ID Enabled Networks perspective.

- &= nbsp;     To find a common solution a= nd infrastructure that can be shared by current protocols and facilitate the introduction of new ID-based service= s while avoiding rehashing the same problems again each time a new service pop= s up

-=        Generic Resilient ID Servi= ces (GRIDS) infrastructure with standardized access and multiple services.  The services include

      -       <= /span>secured registration=

   =   -       discovery

      -    &n= bsp;  updates with da= ta integrity,

      -       = mapping and resolution capabilities,

      -       = define relationships between IDs or group of IDs

      -       <= /span>access control policy and security

- Other Related Work/ Groups

    &nb= sp;  - LISP (ALT, DDT)

    &nb= sp;  - HIP uses DNS

    &nb= sp;  - NVO3 WG

 

Questions:<= /span>

Eric Nordmark: What=E2=80=99s unclear is what is out of scope re. Identifier. Are= you considering "what is an identifier", clearly this is not about URI, how about IP in IP with IPsec ? Is one of them an identifier the other one a= locator. Even LISP was not clear cut between locator/identifier as one could= be routed locally.

 

Padma Pillay-Esnault: Regarding scope, the way we thinking about this, there can b= e multiple scopes with multiple allocation systems. The range of solutions is s= o vast that it may not be appropriate to only have one solution. Plenty option= s of where to put it and how to put. GRIDS can be used as local, proximity, global instance just as possible to have Private ID.

 

Bob Moskovitz: Concept of Identity and Identifier is important and  I have been involved and saw some form of this for the last 20 years may be more. I= t really does to be discussed in the list. Definitely it needs to be fleshed o= ut a lot more about

what identifiers are, should be part of the work, tough problem with lots of opinions.

 

 

2.2. Requirements for Generic Resilient Identity Services (GRIDS) in IDEAS  - Alex Clemm

 

https://= www.ietf.org/internet-drafts/draft-padma-ideas-req-grids-00.txt

 

- This is the core infrastructure document which captures all requirements

   = ;  - Talked on Core components of GRIDS

   = ;  - GRIDS-MS, GRIDS-IS are covered

   = ;  - Grouping and Meta data are not described yet

=

   = ;  - Identity and Identifier definitions elaborated

   = ;  - Talked in details about mapping services

   = ;  - Identity related services are detailed

   = ;       - Structured and unstructured identifiers

   = ;       - Grouping related services

   = ;  - Requirement (Distribution, Redundancy, Performance and Scale..)

   = ;  - Key performance requirements

   = ;  - Security requirements

   = ;  - GRIDS should be able to be deployed in private space as well as in public domain

 

- The naming evolved from mapping system, which was too functionally constrain= ed.

 

Questions: <= span>

Ravi Ravindran: Trying to understand scope: trying to expand LISP ?<= /span>

What is the scope ? 

 

Alex Clemm: No, not planning to just "expand lisp", that should be done in LISP WG. Some of those questions are better answered in the use cases, clear= which ones are not resolved by LISP.

 

Benjamin Damm: How is this different from Multicast DNS ?

 

Bob Moskovitz: I can totally implement everything in GRIDS in DNS but that would= not be a great idea but there would be a lot of

problems, DDoS, etc.. Think that metadata is not optional but must be called mandatory= . Determined by use case.

 

Alex Clemm: Note taken

 

Dino Farinacci:  rfc8060 defines multiple RLOC types, eg: LISP can support t= hose. Does this look like multicast DNS ? No, this is network layer mapping information mapping addresses to addresses.

 

Eric Nordmark: Multicast DNS is a local service, this is meant to be global.

 

 

2.3. A Blockchain-based Mapping System - Jordi Paillisse 

- Blockchain is decentralized and secured

    &nb= sp;- Add blocks of data one after other

   = ;  - Blockchain work flow

   = ;  - Transaction with a data, Senders Signature and Senders Public Key to a P2P= network

   = ;  - Properties

   = ;     - Decentralized, No prior trust is required

   = ;        Data can be added but not modifiable

   = ;  - Basic Idea

   = ;     - Store mappings in blockchain

   = ;     - EID prefixes are distributed to all participants

   = ;  - Pros and Cons

   = ;     - Infrastructure less, Decentralized, fast lookup, secure, no prior trust, simple rekeying

   = ;     - Cons

   = ;         - Slow updates, costly boot strapping

   = ;  - Comparison with LISP DDT

   = ;     - No Infra, easy management

     - Issues with RPKI

   = ;      - Anonymity (prefix linked to owner name)

   = ;      - Revocation issues (block chain doesn=E2=80=99t use certificates)

   = ;  - Scalability

   = ;      - Growth similar to BGP Churn

   = ;      - Prefix delegation + Mappings

   = ;  - Design considerations

   = ;        - Bitcoin is too restrictive

   = ;        - New technologies - More scalable and more contracts

   = ;  - Dedicated chains..

 

Questions:<= /span>

Toerless Eckert: what is the incentive model for participants to deploy the necessary= infrastructure for this system ? In bitcoin, the security is achieved  through tremendous amount of calculation, the cost for that hardware is financed by handing out bitcoins for successful calculations. Do we need to hand out IPv4 addresses to pay for IDEAS bitchain calculations ?

 

Jordi Paillisee: Good question, there are some new blockchain methods with other incentive structures. See references on last slide of the slide deck.<= /span>

Regarding incentive it is about security.

 

Dino Farinacci: 

When a new registration added (Say Jordi first and then 100000 more records added= . Now the entry moved to the end. This solution will have<= /p>

complete history of movements. Q1: can the really old stuff be chopped off. Q2: if RL= OCs change etc. is it not really slow when you need to look through a lot of oth= er newer mappings ?

Jordi Paillisee : Q1 Answer: It can be mitigated through implementation

Q2 answer: implementation detail. Database should have latest data for all entities, not in sequential order of evens.

 

Manu Sporny: Blockchain developer. Referring to blockchain group (w3c-blockain group) met in the morning, sees overlap with that work, how could we create alignment. Whom to talk to coordinate ? 

Padma Pillay-Esnault: Let=E2=80=99s discuss this offline.

 

2.4. Use Cases for IDEAS - Tom Herbert

https://= www.ietf.org/internet-drafts/draft-padma-ideas-use-cases-00.txt

 

- Mapping essentially a distributed key/value store

   = ;    - Key is fixed size per mapping DB

   = ;   - Maps "virtual address" to "physical address"

   = ;    - Mapping table is assumed to be distributed and possibly shared for load

   = ;    - Rate of entry is important characteristic

 

   = ;    - Use Cases:

   = ;           - Common Control plane

   = ;           - Mobility

   = ;           - Network Virtualization (for network simplification)

   = ;           - Heterogeneous Multi-Access (hetnet)

   = ;           - Security

   = ;           - Device Discovery

   = ;    - Mobility

   = ;        - Map entity to its current location for forwarding

   = ;        - Variants         

   = ;            - Encap: IP Mobility, IPIP, GTP etc..

   = ;            - ID/LOC: LISP, ILA

   = ;        - Properties

   = ;    - Mobility sub-cases

   = ;        - Within a single mobile network

   = ;        - Mobility between mobile networks

   = ;        - Multi-homed devices

   = ;        - Hetnet environments

   = ;        - Whole networks are mobile (WIFI in bus)

   = ;    - Network Virtualization

   = ;        - Variants

   = ;           - Encap: Map virtual IP address to Physical address

   = ;           - ID/LOC split

   = ;        - Properties

   = ;           - Mostly in DC

   = ;    - Address resolution static tunnels

   = ;        - Could be used as alternative means to resolve L2/L3

   = ;    - Host Routes

   = ;        - A network could implement virtualization simply by creating a host route

 

Questions:<= /span>

Bob Moskovitz: We have been mobile since 1993. We need to start looking at mobil= ity as baseline. Would almost challenge in discussion the starting point. Take r= ate of mobility (how fast it can move) as distinguishing attribute.=

 

Tom Herbert: Agree. How quickly is my "device" going from one network to another. With higher rate, updates become a problem. Also get more and more u= se cases where latency becomes an issue. Hope we could avoid relying on a distributed system. Control path is critical system, keeping everything in s= ync with low latency and secure, reliable, available. Can we design this system with applicability across different use cases.

 

Mike McBride: There are applications like AR/VR that have strict requirements hopefully, that is also included in use cases.

 

Tom Herbert: Yes this has been discussed in the draft.

 

Padma Pillay-Esnault: Yes there different strict requirements depending on the different use cases. Earlier there was a question regarding IOT use cases. T= he requirements may vary for example depending if the type of IOT device. If it= battery  operated (supposed to last 10 years) then it may have only one= way communication (such as a pet tracker or sensor) and may even be on non-I= P. In some cases proximity and context may be important too.

 

2.5. Mobility First and Global Name Resolution Service - Parishad Karimi

https://www.ietf.org/id/d= raft-karimi-ideas-gnrs-00.txt=

 

-Name based communications

      - Name based Architectures IP =3D=3D> LISP, HIP a= t IETF MF and NDN (in academia)

   = ;   - MF - Mobility First Background

   = ;      - MF started in 2010 under NSF, FIA

   = ;   - MF Protocol Layers

   = ;       - GUID (global Unique Identifiers)

   = ;       - We seek to use global name resolution system for resolution

   = ;   - Name Resolution Requirements

   = ;       - Low propagation and response Latency

   = ;       - Storage and load scalability

   = ;       - Security and reliability

   = ;       - Extensibility and flexibility

   = ;  - Structure of mapping should not be limited

   = ;  - Why can=E2=80=99t DNS can be supported (DNS Deficiencies)

   = ;       - TTL based caching

   = ;       - High Mobility makes caching ineffective

   = ;       - Static Placement of AUTH Servers

   = ;       - Reliance on hierarchal (relating root)

   = ;  - For MF we have looked into DMAP and GMAP and Auspice

   = ;  - Comparison of all three systems

   = ;  - Conclusion - We need a global mapping system with MF project<= /span>

 

 

2.6 Conclusion & Next steps - Padma Pillay-Esnault

Where do we want to go from here ?

Next Steps Slide:

- We need more collaboration from the community and looking forward for more participation on topics such as Blockchain and distributed trust, Late bindi= ng, Fast Caching, Security, DDOS protection ....

 

=

- Let=E2=80=99s take discussions to the alias

- Discuss the scope of work 

 

=

3. Other Info

Mailing list: IDEAS

List address: ideas@ietf.org

Archive: https://mailarchive.ietf.org/arch/sear= ch/?email_list=3Dideas<= /span>

To subscribe: https://www.ietf.org/mailman/listinf= o/ideas

 

____________________= ___________________________
lisp mailing list
lisp@ietf.org
https://www.ietf.org/mailman= /listinfo/lisp
= --Apple-Mail-2B8E7735-09F6-4E01-801F-EACE7722E409-- From nobody Wed Oct 11 20:15:24 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 39AC7134320; Wed, 11 Oct 2017 20:15:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kSfbQkWdvzcI; Wed, 11 Oct 2017 20:15:21 -0700 (PDT) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9FED9124F57; Wed, 11 Oct 2017 20:15:21 -0700 (PDT) Received: from localhost ([127.0.0.1] helo=ryuu.rg.net) by ran.psg.com with esmtp (Exim 4.86_2) (envelope-from ) id 1e2Txv-0004YS-2y; Thu, 12 Oct 2017 03:15:19 +0000 Date: Thu, 12 Oct 2017 12:15:17 +0900 Message-ID: From: Randy Bush To: Dino Farinacci Cc: IETF Rinse Repeat , lisp@ietf.org In-Reply-To: <4ED1DD7F-FD96-4934-9518-EDE5DB4858BE@gmail.com> References: <150670160872.14128.2758037992338326085.idtracker@ietfa.amsl.com> <778d5504-ba4f-d418-7b20-356353bb0fb2@cs.tcd.ie> <8kd5pq.oxb4pv.rtlo8t-qmf@mercury.scss.tcd.ie> <644DA50AFA8C314EA9BDDAC83BD38A2E0EAA7204@sjceml521-mbx.china.huawei.com> <0BA14206-DC82-49EF-A625-B2425FA396F6@gmail.com> <1f254140-1340-6c7d-9c73-e7137562c685@gmail.com> <17BE9E1D-120B-4508-B765-3799134FD708@gmail.com> <4ED1DD7F-FD96-4934-9518-EDE5DB4858BE@gmail.com> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/25.2 Mule/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Subject: Re: [lisp] [Ideas] WG Review: IDentity Enabled Networks (ideas) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Oct 2017 03:15:23 -0000 > I am trying to design a system. And we need more deployment > experience. And I think an IETF working group can help facilitate > this. Otherwise, people will do it else where and new protocols will > surface OUTSIDE of the IETF. And that is when scale, security and > interoperability is not priority. old threat which sounds too much of my way or the highway, or i'll take my ball and go home. either it is simple to deal with the privacy concerns in the charter wording or the proposed wg is really not all that concerned with the privacy issue. if the latter is the case, then indeed, the ietf may not be the best place to work on it. randy From nobody Thu Oct 12 06:33:40 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF5EE134504 for ; Thu, 12 Oct 2017 06:33:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.799 X-Spam-Level: X-Spam-Status: No, score=0.799 tagged_above=-999 required=5 tests=[BAYES_50=0.8, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dJlNElWKGQUl for ; Thu, 12 Oct 2017 06:33:36 -0700 (PDT) Received: from mail.core-networks.de (mail.core-networks.de [IPv6:2001:1bc0:d::4:9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A9D3A134500 for ; Thu, 12 Oct 2017 06:33:36 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.core-networks.de id 1e2dc8-0001G4-LW with ESMTPSA (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) for lisp@ietf.org; Thu, 12 Oct 2017 15:33:34 +0200 To: IETF From: "Rene 'Renne' Bartsch, B.Sc. Informatics" Message-ID: <684da2cc-b1f7-d97c-e532-15f5b1fca15d@bartschnet.de> Date: Thu, 12 Oct 2017 15:33:28 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: de-DE Archived-At: Subject: [lisp] Current state of anycast IP-addresses in the LISP Beta Network? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Oct 2017 13:33:39 -0000 Hi, does the LISP Beta Network currently use anycast IP-adresses (MS/MR, PxTRs)? Are the MS/MR, PxTRs reachable via IPv6 (e.g. IPv6-in-IPv6) via LISP? Regards, Renne From nobody Sat Oct 14 12:09:18 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E44AC133018 for ; Sat, 14 Oct 2017 12:09:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ptp0v4gumzpH for ; Sat, 14 Oct 2017 12:09:14 -0700 (PDT) Received: from mail-it0-x22c.google.com (mail-it0-x22c.google.com [IPv6:2607:f8b0:4001:c0b::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5F9B6132C32 for ; Sat, 14 Oct 2017 12:09:14 -0700 (PDT) Received: by mail-it0-x22c.google.com with SMTP id 72so14868179itl.5 for ; Sat, 14 Oct 2017 12:09:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to :content-transfer-encoding; bh=Z+RKb0gWhhyGOtShDO5hQm0m4y3jKrpyXjRrlMPMc9M=; b=K2860ULRI4x2asrPywSlzXOs8kxVN/rJQXOv5CbAA1mcAfiAmzPhvM0L+/MZPG86cC b6j0WW/u1noXWatUVM182r3KtdIfwBQ3wbkjTkRDdppCGzIdSDwv48vV8ISEdfw+olWi G5srxOeoHkU65vbL8lXU5036/x5JqxclHQpgYVj6eG9MW26XvRSL1TVFcy3TqpV2YUsm m1pT03/RdRaIMxMehRImnVOCb2UPjiU2uOtm38GxA7iZmJ/XBzdHevhFcf+i4SUpw7p1 EG1bgMpMIkcqnHl6OE+ZliELfafp7MLkzd13mwYQvIoOnArb2aljTEZiM4kBRGikDr2Y vwFw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to :content-transfer-encoding; bh=Z+RKb0gWhhyGOtShDO5hQm0m4y3jKrpyXjRrlMPMc9M=; b=mtMiIMPo2HxViWGezruPKdt8+OBh9KPANS3tBADHKJxwGXsSiDDvb/jdd/mNp6moJf 3jhj282bVQyO0cy33mRK8CK2T1CxheDapQoSLDA8kg0594gpKDH5rk4iyvtS3BKQ/1rL ptvzfH5Irrh/or750hi20nJ/if6Fitk6qWGorJGPxFG6N3w7HvlUcJJBfZcDPik5rLB/ JUxFeaBGNSPM9icbd65fKs2iWdcCIBpJ+M0wWHCeMKyEqpgG+4XDzttbZoxA2pPfMKGQ Y5wy4b8MlP/sZnZHqMMpwCwrRdidDrt3k2I5WVwX4+by4V7yxsJem5RJe6pCY+VSQXSp 0kQw== X-Gm-Message-State: AMCzsaXWsm6ns8jY889Y978stLRm3tOyB96Co0rBfWevyvxS7EbmNHpW 0Bp6eT1FCXrzLDBzdnyppxeSXe8Y4Ic4GOnjSd/CXqBv X-Google-Smtp-Source: ABhQp+TIkmrWUSHD5L+JeEtxAk2uRmAyMSvwYti/e3Y9AF4lYffEqCs8kzPnSlrKxlEv984kBZJ27I4BiB3Aesyv6Rw= X-Received: by 10.36.31.8 with SMTP id d8mr6032177itd.80.1508008153155; Sat, 14 Oct 2017 12:09:13 -0700 (PDT) MIME-Version: 1.0 Received: by 10.107.165.207 with HTTP; Sat, 14 Oct 2017 12:08:52 -0700 (PDT) From: Alberto Rodriguez-Natal Date: Sat, 14 Oct 2017 12:08:52 -0700 Message-ID: To: "lisp@ietf.org list" Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: [lisp] Review of RFC6830bis X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 Oct 2017 19:09:17 -0000 Hi all, I've been through the process of reading in detail draft-ietf-lisp-rfc6830bis-05. Kudos to Albert, Dino and the others for the excellent work done there. In an effort to update the text to better reflect how LISP is being used today, I would like to highlight some sentences or statements that we may want to take a look at. See some extracts from the draft below, followed by my comments starting with [AR]. The extracts are verbatim, search for them in the draft to find the context where they appear (if needed). Thanks, Alberto ---------- EIDs MUST NOT be used as LISP RLOCs. [AR] I think this sentence should be reworded, especially when it is latter followed by sentences like: "In theory, the bit string that represents an EID for one device can represent an RLOC for a different device." The router then prepends an "outer" IP header with one of its globally routable RLOCs in the source address field. [AR] There are several references to RLOCs being =E2=80=9Cglobal=E2=80=9D t= hrough the document, probably coming from the original Internet use-case. I would suggest removing mentions to =E2=80=9Cglobally routable=E2=80=9D and replac= e them with something along the lines of =E2=80=9Croutable in the RLOC space=E2=80=9D o= r =E2=80=9Croutable in the transit/underlay network=E2=80=9D, etc. The EID-to-RLOC map-cache is a short-lived, on-demand table in an ITR that = store [AR] We probably should remove the note on the map-cache being =E2=80=9Cshort-lived=E2=80=9D since that may not be the case in some deploy= ments. The same database mapping entries MUST be configured on all ETRs for a given site. In a steady state, the EID-Prefixes for the site and the Locator-Set for each EID-Prefix MUST be the same on all ETRs. [AR] Is this still the case when overlapping prefixes and/or merge-semantics are in place? Address Family Identifier (AFI): AFI is a term used to describe an address encoding in a packet. An address family currently pertains to an IPv4 or IPv6 address. [AR] Although in some points the document mentions LCAF or other address types for EID/RLOC, in most of the cases it assumes only IPv4/v6. I think we should update the document to be more flexible and relax those IP-only mentions (specially for EID cases). Data-Probe: A Data-Probe is a LISP-encapsulated data packet where the inner-header destination address equals the outer-header destination address used to trigger a Map-Reply by a decapsulating ETR. [AR] Is anyone using data-probes? I=E2=80=99d like to suggest removing this= text. The ETR(s) at the destination LISP site are the first to send Map-Replies to the source site initiating the connection. [AR] We may want to clarify here that this is the common case, but may not be always (e.g. proxy-reply) In order to avoid excessive packet overhead as well as possible encapsulation loops, this document mandates that a maximum of two LISP headers can be prepended to a packet. [AR] It seems that a maximum of two headers is an arbitrary value. Therefore, I suggest we replace "mandates" with "recommends". When multiple organizations inside of a LISP site are using private addresses [RFC1918] as EID-Prefixes, their address spaces MUST remain segregated due to possible address duplication. An Instance ID in the address encoding can aid in making the entire AFI-based address unique. [AR] This text is used to introduce the concept of Instance-IDs. I don't think we should mention private addresses here. Instance ID may be used even when not private addresses are in place or for purposes other than possible address duplication. If anything, the private addresses duplication should be an example only. An ITR SHOULD only set the E-bit in an encapsulated data packet when it knows the ETR is enabled for echo-noncing. This is conveyed by the E-bit in the Map-Reply message. [AR] There should be probably a mention to merge-semantics and/or proxy-reply here. Since the LISP architecture uses a caching scheme to retrieve and store EID-to-RLOC mappings, the only way an ITR can get a more up-to-date mapping is to re-request the mapping. [AR] We could relax this constrain and/or reference PubSub here. When adding a new Locator record in lexicographic order to the end of a Locator-Set, it is easy to update mappings. We assume that new mappings will maintain the same Locator ordering as the old mapping but will just have new Locators appended to the end of the list. So, some ITRs can have a new mapping while other ITRs have only an old mapping that is used until they time out. When an ITR has only an old mapping but detects bits set in the Locator-Status-Bits that correspond to Locators beyond the list it has cached, it simply ignores them. [AR] Probably we could complement this paragraph with something like "It is RECOMMENDED to notify the ITRs that they should update their Map-Caches, e.g. via an SMR." When a Locator record is removed from a Locator-Set, ITRs that have the mapping cached will not use the removed Locator because the xTRs will set the Locator-Status-Bit to 0. [AR] Since LSB are not mandatory and not used in many deployments we should recommend notifying the affected ITRs via SMRs or PubSub. As a result, an ETR will solicit Map-Requests (called an SMR message) from those sites to which it has been sending encapsulated data for the last minute. In particular, an ETR will send an SMR to an ITR to which it has recently sent encapsulated data. [AR] We should mention that this only works when the ETR is also an ITR. It is important to note that a locator address in any LISP control message MUST be a globally routable address and therefore SHOULD NOT contain [RFC1918] addresses. [AR] The Internet use-case is less relevant today, therefore I=E2=80=99d suggest removing the sentence regarding RFC1918. Minor/Editorial: Expand the RTR acronym on its first appearance. From nobody Sun Oct 15 19:50:03 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A18E6133352 for ; Sun, 15 Oct 2017 19:50:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5Gzgs3sw_wvH for ; Sun, 15 Oct 2017 19:49:59 -0700 (PDT) Received: from mail-qt0-x230.google.com (mail-qt0-x230.google.com [IPv6:2607:f8b0:400d:c0d::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1BD013336A for ; Sun, 15 Oct 2017 19:49:56 -0700 (PDT) Received: by mail-qt0-x230.google.com with SMTP id f15so28971568qtf.7 for ; Sun, 15 Oct 2017 19:49:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=N/CUWUB/UKJxa8rbd2BnThWU4aN64I5CRxKMB62UDBk=; b=IADTU7/UyAvx4okwrDUmeq4b5PtoG5Tq6t+dVPyIDqxQhIrRdIVfdQxNdW6kTViBIk mwRwzVEPdy/k5DwxaHFnB/hA6FOaJynydTzHLgNNSAMKugdFG62feJD+qlSTd157Am4J fmKxB6HJGVF/miJmiem5Dwjoz1yg1opTnXFORRTCLs+o2rdxIo7o0tUyDHB1hkuJrtrA EMwiqmvC4/dfs4odV9Ss9AvbYNmnQQLJIODBzLFxkutAgbhAzXEKQzQq54MGMGXV/S29 a6moxmOsgfoHhlbxNc9+jRfuSnIXZl4fK/NXqHnDtCTdvzVwfOsjcGGxe0N/Xt8V+XVl NwLw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=N/CUWUB/UKJxa8rbd2BnThWU4aN64I5CRxKMB62UDBk=; b=aW50fRltJm6nIyV6GvMdW3DMCH5uP9gwddd5MnxHaJLHhXn9Al8zaZl0CK9b7Pa4Rc lbJg/Z9HuDD1FSSFgnRjPul3ZEZCU+bu4UQgH3f4vRqaoicOo/OLd7KJJ2TJQHCvLyGa reFQH41NtjURGNecymxwxpaX+f18VRIS0pNVPqSex/oxdBf/0nJRIgx742DFlSLU2jFY pub1+ttYLg3GOgMJn+RQnAgHkP3YkkzPQhSn66kDYYjw5KR/xMVdq5q7I3j4VyklOvIN U3vxtnvOD7OSPIn9ptadY0Mcvr0ofQmeybq858Osng6OU1kXQ36buY1wGi2QSIgEnxBN 0MNQ== X-Gm-Message-State: AMCzsaUc+D/z+x9xO3NwD/O17JvXNtSVlLoe0R6sAd5yGiLnOgCesX+K Buse791I2u/5FxBGfER9ooxK/pHo X-Google-Smtp-Source: ABhQp+SHARrx2QCcE1N4nRwtUKSdniOeRBakrC9WKtZkKf1xSURJbW4cMqPA32GcfIqjee8+s23CBw== X-Received: by 10.200.52.212 with SMTP id x20mr11460942qtb.90.1508122195479; Sun, 15 Oct 2017 19:49:55 -0700 (PDT) Received: from ?IPv6:2600:380:8d75:faa:1869:d2c:1780:9245? ([2600:380:8d75:faa:1869:d2c:1780:9245]) by smtp.gmail.com with ESMTPSA id j19sm4169054qkh.38.2017.10.15.19.49.54 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 15 Oct 2017 19:49:54 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (1.0) From: Dino Farinacci X-Mailer: iPhone Mail (15A421) In-Reply-To: Date: Sun, 15 Oct 2017 22:49:53 -0400 Cc: "lisp@ietf.org list" Content-Transfer-Encoding: quoted-printable Message-Id: <6B47E7DF-8005-4DE6-9B49-833157A2152B@gmail.com> References: To: Alberto Rodriguez-Natal Archived-At: Subject: Re: [lisp] Review of RFC6830bis X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Oct 2017 02:50:02 -0000 Thanks for the comments Alberto. I will provide a response later in the week= . And if we make any proposed changes, we should hear what the working group= thinks of the changes.=20 There is a lot of history in this text so I am a bit cautious to =E2=80=9Cun= do=E2=80=9D any text that was based on someone=E2=80=99s comment or WG discu= ssion.=20 Thanks again, Dino > On Oct 14, 2017, at 3:08 PM, Alberto Rodriguez-Natal wrote: >=20 > Hi all, >=20 > I've been through the process of reading in detail > draft-ietf-lisp-rfc6830bis-05. Kudos to Albert, Dino and the others > for the excellent work done there. >=20 > In an effort to update the text to better reflect how LISP is being > used today, I would like to highlight some sentences or statements > that we may want to take a look at. See some extracts from the draft > below, followed by my comments starting with [AR]. The extracts are > verbatim, search for them in the draft to find the context where they > appear (if needed). >=20 > Thanks, > Alberto >=20 > ---------- >=20 >=20 > EIDs MUST NOT be used as LISP RLOCs. >=20 > [AR] I think this sentence should be reworded, especially when it is > latter followed by sentences like: "In theory, the bit string that > represents an EID for one device can represent an RLOC for a different > device." >=20 >=20 >=20 > The router then prepends an "outer" IP header with one of its globally > routable RLOCs in the source address field. >=20 > [AR] There are several references to RLOCs being =E2=80=9Cglobal=E2=80=9D t= hrough the > document, probably coming from the original Internet use-case. I would > suggest removing mentions to =E2=80=9Cglobally routable=E2=80=9D and repla= ce them with > something along the lines of =E2=80=9Croutable in the RLOC space=E2=80=9D o= r =E2=80=9Croutable > in the transit/underlay network=E2=80=9D, etc. >=20 >=20 >=20 > The EID-to-RLOC map-cache is a short-lived, on-demand table in an ITR that= store >=20 > [AR] We probably should remove the note on the map-cache being > =E2=80=9Cshort-lived=E2=80=9D since that may not be the case in some deplo= yments. >=20 >=20 >=20 > The same database mapping entries MUST be configured on all ETRs for a > given site. In a steady state, the EID-Prefixes for the site and the > Locator-Set for each EID-Prefix MUST be the same on all ETRs. >=20 > [AR] Is this still the case when overlapping prefixes and/or > merge-semantics are in place? >=20 >=20 >=20 > Address Family Identifier (AFI): AFI is a term used to describe an > address encoding in a packet. An address family currently pertains to > an IPv4 or IPv6 address. >=20 > [AR] Although in some points the document mentions LCAF or other > address types for EID/RLOC, in most of the cases it assumes only > IPv4/v6. I think we should update the document to be more flexible and > relax those IP-only mentions (specially for EID cases). >=20 >=20 >=20 > Data-Probe: A Data-Probe is a LISP-encapsulated data packet where the > inner-header destination address equals the outer-header destination > address used to trigger a Map-Reply by a decapsulating ETR. >=20 > [AR] Is anyone using data-probes? I=E2=80=99d like to suggest removing thi= s text. >=20 >=20 >=20 > The ETR(s) at the destination LISP site are the first to send > Map-Replies to the source site initiating the connection. >=20 > [AR] We may want to clarify here that this is the common case, but may > not be always (e.g. proxy-reply) >=20 >=20 >=20 > In order to avoid excessive packet overhead as well as possible > encapsulation loops, this document mandates that a maximum of two LISP > headers can be prepended to a packet. >=20 > [AR] It seems that a maximum of two headers is an arbitrary value. > Therefore, I suggest we replace "mandates" with "recommends". >=20 >=20 >=20 > When multiple organizations inside of a LISP site are using private > addresses [RFC1918] as EID-Prefixes, their address spaces MUST remain > segregated due to possible address duplication. An Instance ID in the > address encoding can aid in making the entire AFI-based address > unique. >=20 > [AR] This text is used to introduce the concept of Instance-IDs. I > don't think we should mention private addresses here. Instance ID may > be used even when not private addresses are in place or for purposes > other than possible address duplication. If anything, the private > addresses duplication should be an example only. >=20 >=20 >=20 > An ITR SHOULD only set the E-bit in an encapsulated data packet when > it knows the ETR is > enabled for echo-noncing. This is conveyed by the E-bit in the > Map-Reply message. >=20 > [AR] There should be probably a mention to merge-semantics and/or > proxy-reply here. >=20 >=20 >=20 > Since the LISP architecture uses a caching scheme to retrieve and > store EID-to-RLOC mappings, the only way an ITR can get a more > up-to-date mapping is to re-request the mapping. >=20 > [AR] We could relax this constrain and/or reference PubSub here. >=20 >=20 >=20 > When adding a new Locator record in lexicographic order to the end of > a Locator-Set, it is easy to update mappings. We assume that new > mappings will maintain the same Locator ordering as the old mapping > but will just have new Locators appended to the end of the list. So, > some ITRs can have a new mapping while other ITRs have only an old > mapping that is used until they time out. When an ITR has only an old > mapping but detects bits set in the Locator-Status-Bits that > correspond to Locators beyond the list it has cached, it simply > ignores them. >=20 > [AR] Probably we could complement this paragraph with something like > "It is RECOMMENDED to notify the ITRs that they should update their > Map-Caches, e.g. via an SMR." >=20 >=20 >=20 > When a Locator record is removed from a Locator-Set, ITRs that have > the mapping cached will not use the removed Locator because the xTRs > will set the Locator-Status-Bit to 0. >=20 > [AR] Since LSB are not mandatory and not used in many deployments we > should recommend notifying the affected ITRs via SMRs or PubSub. >=20 >=20 >=20 > As a result, an ETR will solicit Map-Requests (called an SMR message) > from those sites to which it has been sending encapsulated data for > the last minute. In particular, an ETR will send an SMR to an ITR to > which it has recently sent encapsulated data. >=20 > [AR] We should mention that this only works when the ETR is also an ITR. >=20 >=20 >=20 > It is important to note that a locator address in any LISP control > message MUST be a globally routable address and therefore SHOULD NOT > contain [RFC1918] addresses. >=20 > [AR] The Internet use-case is less relevant today, therefore I=E2=80=99d > suggest removing the sentence regarding RFC1918. >=20 >=20 >=20 > Minor/Editorial: >=20 > Expand the RTR acronym on its first appearance. >=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From nobody Mon Oct 16 00:34:56 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 284E71321B6 for ; Mon, 16 Oct 2017 00:34:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.397 X-Spam-Level: X-Spam-Status: No, score=-4.397 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-2.8, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YI9hW62Yy0lJ for ; Mon, 16 Oct 2017 00:34:53 -0700 (PDT) Received: from relais-inet.orange.com (mta135.mail.business.static.orange.com [80.12.70.35]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B2B30134338 for ; Mon, 16 Oct 2017 00:34:52 -0700 (PDT) Received: from opfednr01.francetelecom.fr (unknown [xx.xx.xx.65]) by opfednr20.francetelecom.fr (ESMTP service) with ESMTP id BA68640288; Mon, 16 Oct 2017 09:34:50 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.27]) by opfednr01.francetelecom.fr (ESMTP service) with ESMTP id 9072D1A0070; Mon, 16 Oct 2017 09:34:50 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM7C.corporate.adroot.infra.ftgroup ([fe80::8007:17b:c3b4:d68b%19]) with mapi id 14.03.0361.001; Mon, 16 Oct 2017 09:34:50 +0200 From: To: Dino Farinacci CC: "lisp@ietf.org list" Thread-Topic: [lisp] Comments to draft-boucadair-lisp-multiple-records-00 Thread-Index: AQHTQexQa8kEr/5GhUOZpMrNgt0alqLmGTSQ Date: Mon, 16 Oct 2017 07:34:49 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B93300A0541A6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <37C27B2F-AD76-4B5F-AFE6-E56D02180DD4@gmail.com> <787AE7BB302AE849A7480A190F8B93300A051871@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.2] Content-Type: multipart/related; boundary="_004_787AE7BB302AE849A7480A190F8B93300A0541A6OPEXCLILMA3corp_"; type="multipart/alternative" MIME-Version: 1.0 Archived-At: Subject: Re: [lisp] Comments to draft-boucadair-lisp-multiple-records-00 X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Oct 2017 07:34:55 -0000 --_004_787AE7BB302AE849A7480A190F8B93300A0541A6OPEXCLILMA3corp_ Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B93300A0541A6OPEXCLILMA3corp_" --_000_787AE7BB302AE849A7480A190F8B93300A0541A6OPEXCLILMA3corp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgRGlubywNCg0KUGxlYXNlIHNlZSBpbmxpbmUuDQoNCkNoZWVycywNCk1lZA0KDQpEZSA6IERp bm8gRmFyaW5hY2NpIFttYWlsdG86ZmFyaW5hY2NpQGdtYWlsLmNvbV0NCkVudm95w6kgOiBtYXJk aSAxMCBvY3RvYnJlIDIwMTcgMTk6MjINCsOAIDogQk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTg0K Q2MgOiBsaXNwQGlldGYub3JnIGxpc3QNCk9iamV0IDogUmU6IFtsaXNwXSBDb21tZW50cyB0byBk cmFmdC1ib3VjYWRhaXItbGlzcC1tdWx0aXBsZS1yZWNvcmRzLTAwDQoNCkhpIERpbm8sDQoNClRo YW5rIHlvdSBmb3IgdGhlIGNvbW1lbnQuDQoNClRoZXJlIGlzIGEgcHJvdmlzaW9uIGluIFJGQzY4 MzAgdG8gc3VwcG9ydCBtdWx0aXBsZSBSTENPcy9FSURTIGJ1dCB3aXRob3V0IHNwZWNpZnlpbmcg dGhlIGJlaGF2aW9yLg0KDQpSaWdodCwgSSBhbHJlYWR5IHNhaWQgdGhhdC4NCg0KQXMgeW91IGtu b3csIHRoYXQgUkZDIGlzIGNyeXN0YWwgY2xlYXIgYWJvdXQgdGhhdC4NCg0KUkZDNjgzMCBvciB5 b3VyIEludGVybmV0IERyYWZ0Pw0KW01lZF0gSeKAmW0gcmVmZXJyaW5nIHRvIFJGQzY4MzAgd2hp Y2ggc2F5cyB0aGUgZm9sbG93aW5nIDoNCg0KICAgUmVjb3JkIENvdW50OiAgVGhpcyBpcyB0aGUg bnVtYmVyIG9mIHJlY29yZHMgaW4gdGhpcyBNYXAtUmVxdWVzdA0KICAgICAgbWVzc2FnZS4gIEEg cmVjb3JkIGlzIGNvbXByaXNlZCBvZiB0aGUgcG9ydGlvbiBvZiB0aGUgcGFja2V0IHRoYXQNCiAg ICAgIGlzIGxhYmVsZWQgJ1JlYycgYWJvdmUgYW5kIG9jY3VycyB0aGUgbnVtYmVyIG9mIHRpbWVz IGVxdWFsIHRvDQogICAgICBSZWNvcmQgQ291bnQuICBGb3IgdGhpcyB2ZXJzaW9uIG9mIHRoZSBw cm90b2NvbCwgYSByZWNlaXZlciBNVVNUDQogICAgICBhY2NlcHQgYW5kIHByb2Nlc3MgTWFwLVJl cXVlc3RzIHRoYXQgY29udGFpbiBvbmUgb3IgbW9yZSByZWNvcmRzLA0KICAgICAgYnV0IGEgc2Vu ZGVyIE1VU1Qgb25seSBzZW5kIE1hcC1SZXF1ZXN0cyBjb250YWluaW5nIG9uZSByZWNvcmQuDQog ICAgICBeXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5e Xl5eXl5eXl5eXg0KICAgICAgU3VwcG9ydCBmb3IgcmVxdWVzdGluZyBtdWx0aXBsZSBFSURzIGlu IGEgc2luZ2xlIE1hcC1SZXF1ZXN0Xg0KICAgICAgXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5e Xl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eDQogICAgICBtZXNzYWdlIHdpbGwgYmUg c3BlY2lmaWVkIGluIGEgZnV0dXJlIHZlcnNpb24gb2YgdGhlIHByb3RvY29sLl4NCiAgICAgIF5e Xl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl4N Cg0KWWVzLCBJIGRvIHRoaW5rIGl0IGlzIHRpbWUgdG8gc3BlY2lmeSB0aGF0IGJlaGF2aW9yIGlu IHRoZSBiaXMgZG9jdW1lbnQuDQoNClNlY3Rpb24gMyBvZiBkcmFmdC1ib3VjYWRhaXItbGlzcC1t dWx0aXBsZS1yZWNvcmRzIGlzIGFuIGV4YW1wbGUgb2Ygd2hhdCBjYW4gYmUgY29uc2lkZXJlZCBp biB0aGUgYmlzIGRvY3VtZW50Lg0KDQpJ4oCZbGwgaGF2ZSBhIGxvb2sgYXQgaXQuIEJ1dCB3aGF0 IHBhcnQgb2Ygc2VjdGlvbiAzPyBBbGwgdGhlIHBhY2tldCBmb3JtYXQgZGVzY3JpcHRpb25zIGFy ZSBhbHJlYWR5IGluIFJGQzY4MzAuDQpbTWVkXSBUaGUgZm9ybWF0IG5lZWRzIHRvIGJlIHVwZGF0 ZWQgZm9yIHJlcGxpZXMuDQoNCkFuZCB5b3UgaGF2ZSB0aGlzIGluIHNlY3Rpb24gMyB3aGljaCBp cyBzZW1hbnRpY2FsbHkgaW5jb3JyZWN0Og0KDQpbY2lkOmltYWdlMDAyLnBuZ0AwMUQzNDY2Mi4w MkJCMzk0MF0NCg0KSXQgaXMgZG9jdW1lbnRlZCBubyB3aGVyZSB0aGF0IGEgTWFwLVJlc29sdmVy cyBjYWNoaW5nIG1hcHBpbmdzLiBBbmQgaWYgeW91IGFyZSBwcm9wb3NpbmcgdGhhdCB5b3UgbmVl ZCBhIGxvdCBtb3JlIHRleHQgdG8gZGVzY3JpYmUgaG93IG1hcHBpbmdzIGFyZSBrZXB0IHVwIHRv IGRhdGUgaW4gdGhlIE1hcC1SZXNvbHZlci4gVGhpcyBpcyBhIG1ham9yIGFyY2hpdGVjdHVyYWwg Y2hhbmdlIGFuZCByZWFsbHkgbm90IHN1cmUgeW91IGtub3cgdGhlIGltcGxpY2F0aW9ucyBvZiBp dC4NCltNZWRdIFRoYXQgc2luZ2xlIHNlbnRlbmNlIGlzIGhpZGluZyB0aGUgY2FzZSB3aGVyZSBh IHNpbmdsZSByZXF1ZXN0IGZyb20gYW4geFRSIG1heSBiZSBmb3JrZWQgaW50byBtdWx0aXBsZSBv bmVzIGJlY2F1c2UgdGFyZ2V0IEVJRHMgYXJlIG5vdCBtYW5hZ2VkIGJ5IHRoZSBzYW1lIHNlcnZl cnMuIFdoYXQgaXMgaW1wb3J0YW50IGluIHRoZSB0ZXh0IHlvdSBxdW90ZWQgaXMgdGhhdCB0aGUg eFRSIHNob3VsZCBiZSBwcmVwYXJlZCB0byByZWNlaXZlIG11bHRpcGxlIHJlcGxpZXMgZm9yIGEg c2luZ2xlIHJlcXVlc3QuIFR3byBjYXNlcyBhcmUgdG8gYmUgY29uc2lkZXJlZDoNCg0KLSAgICBN dWx0aXBsZSByZWNvcmRzIGZvciB0aGUgc2FtZSBFSUQgdGhhdCBjYW5ub3QgYmUgaW5jbHVkZWQg aW4gYSBzaW5nbGUgcmVzcGx5DQoNCi0gICAgTXVsdGlwbGUgcmVwbGllczsgZWFjaCBmb3IgYSBn aXZlbiBFSUQNCg0KTWFwLVJlc29sdmVycyBPTkxZIGNhY2hlIHJlZmVycmFsIGVudHJpZXMgZG9j dW1lbnRlZCBpbiB0aGUgTElTUC1ERFQgUkZDLg0KDQpBbHNvIG5vdGUsIHdoYXQgaWYgYSBNYXAt UmVxdWVzdCBoYXMgYm90aCAxMC4xLjEuMS8zMiBhbmQgMTAuMS4wLjAvMTYgZW5jb2RlZCBhcyBF SUQgcmVjb3Jkcy4gQW5kIGlmIHRoZSBtYXBwaW5nIHN5c3RlbSBoYXMgcmVnaXN0ZXJlZCAxMC4w LjAuMC84LCB0aGVuIGRvZXMgdGhlIE1hcC1SZXBseSBjb250YWluIHR3byByZWNvcmRzIHRvIHNh dGlzZnkgMTAuMS4xLjEvMzIgQU5EIDEwLjEuMC4wLzE2LCBvciBqdXN0IG9uZSBFSUQgcmVjb3Jk LiBBbmQgaWYgc28sIGhvdyBkb2VzIHRoZSByZXF1ZXN0b3Iga25vdyB0aGF0IHRoZSBvbmUgcmVw bHkgcmVjb3JkIGlzIGFzc29jaWF0ZWQgd2l0aCBib3RoIHJlcXVlc3QgcmVjb3JkcyBvciBvbmUg ZG9lc27igJl0IGFwcGx5IChvciBpcyBub3QgZm91bmQgaW4gdGhlIG1hcHBpbmcgc3lzdGVtKS4N Cg0KQXMgeW91IGNhbiBzZWUgdGhlcmUgaXMgYSBsb3Qgb2YgdGV4dCB0aGF0IHdvdWxkIG5lZWQg dG8gYmUgd3JpdHRlbi4gV2hpY2ggSSB0aGluayBpcyB0b28gbGF0ZSBmb3IgUkZDNjgzM2Jpcy4g VGhhdCBpcyB3aHkgSSBhc2tlZCB5b3UgZm9yIHRleHQuIEkgd2FudGVkIHRvIHNlZSBob3cgY29h cnNlIHZlcnN1cyBkZXRhaWwgeW91ciB0ZXh0IHdvdWxkIGJlIGFuZCB0aGVuIGhhdmUgdGhlIFdH IGp1ZGdlIGlmIGl0IHNob3VsZCBnbyBpbi4NCltNZWRdIFRoaXMgaXMgZmFpci4NCg0KVGhlbiB0 aGVyZSBpcyB0aGUgcHJhY3RpY2FsIGFzcGVjdC4gV2hhdCBhcmUgeW91IHRyeWluZyB0byBhY2Nv bXBsaXNoIHdpdGggbXVsdGlwbGUgRUlELXJlY29yZHMgaW4gYSBNYXAtUmVxdWVzdC4gTGV04oCZ cyBzdGFydCB0aGVyZS4NCltNZWRdIEluIGFkZGl0aW9uIHRvIHdoYXQgbW90aXZhdGVkIOKAnFJG QzY4MzAgYWxyZWFkeSBzdXBwb3J0cyBtdWx0aXBsZSBFSUQtcmVjb3JkcyBpbiBib3RoIE1hcC1S ZXF1ZXN0cyBhbmQgTWFwLVJlcGxpZXPigJ0sIHdlIGFyZSBmb2N1c2luZyBvbiB0aGUgZm9sbG93 aW5nIGNhc2VzOg0KDQotICAgIEZhc3QgcmVjb3Zlcnkgb2YgcG9wdWxhciBFSURzIGluIGNhc2Ug b2YgZmFpbHVyZXMuIE9uZSBvciB2ZXJ5IGZldyByZXF1ZXN0cyB3aWxsIHRyaWdnZXIgdGhlIG1h cHBpbmcgcmV0cmlldmFsLg0KDQotICAgIE9wdGltaXplZCBzdWJzY3JpcHRpb24vbm90aWZpY2F0 aW9uIGV4Y2hhbmdlcw0KDQpEaW5vDQoNCg0KDQpUaGFuayB5b3UuDQoNCkNoZWVycywNCk1lZA0K DQoNCi0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KRGUgOiBsaXNwIFttYWlsdG86bGlzcC1i b3VuY2VzQGlldGYub3JnXSBEZSBsYSBwYXJ0IGRlIERpbm8gRmFyaW5hY2NpDQpFbnZvecOpIDog bHVuZGkgOSBvY3RvYnJlIDIwMTcgMTg6NTYNCsOAIDogbGlzcEBpZXRmLm9yZzxtYWlsdG86bGlz cEBpZXRmLm9yZz4gbGlzdA0KT2JqZXQgOiBbbGlzcF0gQ29tbWVudHMgdG8gZHJhZnQtYm91Y2Fk YWlyLWxpc3AtbXVsdGlwbGUtcmVjb3Jkcy0wMA0KDQpNZWQvQ2hyaXN0aWFuLCBSRkM2ODMwIGFs cmVhZHkgc3VwcG9ydHMgbXVsdGlwbGUgRUlELXJlY29yZHMgaW4gYm90aCBNYXAtDQpSZXF1ZXN0 cyBhbmQgTWFwLVJlcGxpZXMgKGFzIHdlbGwgYXMgTWFwLU5vdGlmeSBtZXNzYWdlcykuIElmIHlv dSB0aGluayBpdA0KaXMgbm90IHNwZWNpZmllZCBzdWZmaWNpZW50bHksIG5vdyBpcyB0aGUgdGlt ZSB0byBhZGQgYSBiZXR0ZXIgZXhwbGFuYXRpb24NCnRvIFJGQzY4MzNiaXMuDQoNCkRpbm8NCl9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpsaXNwIG1haWxp bmcgbGlzdA0KbGlzcEBpZXRmLm9yZzxtYWlsdG86bGlzcEBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vbGlzcA0KDQo= --_000_787AE7BB302AE849A7480A190F8B93300A0541A6OPEXCLILMA3corp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OldpbmdkaW5nczsNCglwYW5vc2UtMTo1IDAgMCAwIDAgMCAwIDAgMCAw O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAw IDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBh bm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 VGFob21hOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDMgNSA0IDQgMiA0O30NCi8qIFN0eWxlIERlZmlu aXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21h cmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJ Zm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsInNlcmlmIjt9DQphOmxpbmssIHNwYW4uTXNv SHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQt ZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxv d2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNv cmF0aW9uOnVuZGVybGluZTt9DQpwcmUNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1z dHlsZS1saW5rOiJQcsOpZm9ybWF0w6kgSFRNTCBDYXIiOw0KCW1hcmdpbjowY207DQoJbWFyZ2lu LWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJp ZXIgTmV3Ijt9DQpwLk1zb0FjZXRhdGUsIGxpLk1zb0FjZXRhdGUsIGRpdi5Nc29BY2V0YXRlDQoJ e21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiVGV4dGUgZGUgYnVsbGVz IENhciI7DQoJbWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXpl OjguMHB0Ow0KCWZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIjt9DQpwLk1zb0xpc3RQ YXJhZ3JhcGgsIGxpLk1zb0xpc3RQYXJhZ3JhcGgsIGRpdi5Nc29MaXN0UGFyYWdyYXBoDQoJe21z by1zdHlsZS1wcmlvcml0eTozNDsNCgltYXJnaW4tdG9wOjBjbTsNCgltYXJnaW4tcmlnaHQ6MGNt Ow0KCW1hcmdpbi1ib3R0b206MGNtOw0KCW1hcmdpbi1sZWZ0OjM2LjBwdDsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3 IFJvbWFuIiwic2VyaWYiO30NCnNwYW4uVGV4dGVkZWJ1bGxlc0Nhcg0KCXttc28tc3R5bGUtbmFt ZToiVGV4dGUgZGUgYnVsbGVzIENhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1z dHlsZS1saW5rOiJUZXh0ZSBkZSBidWxsZXMiOw0KCWZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5z LXNlcmlmIjt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1y ZXBseTsNCglmb250LWZhbWlseToiQ291cmllciBOZXciOw0KCWNvbG9yOmJsYWNrOw0KCWZvbnQt d2VpZ2h0Om5vcm1hbDsNCglmb250LXN0eWxlOm5vcm1hbDt9DQpzcGFuLlByZm9ybWF0SFRNTENh cg0KCXttc28tc3R5bGUtbmFtZToiUHLDqWZvcm1hdMOpIEhUTUwgQ2FyIjsNCgltc28tc3R5bGUt cHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IlByw6lmb3JtYXTDqSBIVE1MIjsNCglmb250 LWZhbWlseToiQ291cmllciBOZXciO30NCnNwYW4uZ3JleQ0KCXttc28tc3R5bGUtbmFtZTpncmV5 O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQt c2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0 Ow0KCW1hcmdpbjo3MC44NXB0IDcwLjg1cHQgNzAuODVwdCA3MC44NXB0O30NCmRpdi5Xb3JkU2Vj dGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxp c3QgbDANCgl7bXNvLWxpc3QtaWQ6MTYyNzY2MzEwODsNCgltc28tbGlzdC10eXBlOmh5YnJpZDsN Cgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6MjI0NDI1MDM4IC0yNjkyMTU3MjQgNjc4OTUyOTkgNjc4 OTUzMDEgNjc4OTUyOTcgNjc4OTUyOTkgNjc4OTUzMDEgNjc4OTUyOTcgNjc4OTUyOTkgNjc4OTUz MDE7fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJe21zby1sZXZlbC1zdGFydC1hdDowOw0KCW1zby1sZXZl bC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDotOw0KCW1zby1sZXZlbC10 YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7DQoJbXNvLWZhcmVhc3Qt Zm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiI7fQ0KQGxpc3QgbDA6bGV2ZWwyDQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZl bC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0 LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDA6 bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4 dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6V2luZ2Rpbmdz O30NCkBsaXN0IGwwOmxldmVsNA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJ bXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFt aWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJ Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwt dGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1p bmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw3 DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7 DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0 IGwwOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVs LXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseToiQ291cmll ciBOZXciO30NCkBsaXN0IGwwOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxs ZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZv bnQtZmFtaWx5OldpbmdkaW5nczt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBjbTt9DQp1bA0KCXtt YXJnaW4tYm90dG9tOjBjbTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0K PG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwh W2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9 ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlv dXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJGUiIgbGluaz0iYmx1 ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPkhpIERpbm8sDQo8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7 Y29sb3I6YmxhY2siPlBsZWFzZSBzZWUgaW5saW5lLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+ Q2hlZXJzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7O2NvbG9yOmJsYWNrIj5NZWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVwdDtw YWRkaW5nOjBjbSAwY20gMGNtIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9u ZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBj bSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+ RGUmbmJzcDs6PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IERpbm8gRmFy aW5hY2NpIFttYWlsdG86ZmFyaW5hY2NpQGdtYWlsLmNvbV0NCjxicj4NCjxiPkVudm95w6kmbmJz cDs6PC9iPiBtYXJkaSAxMCBvY3RvYnJlIDIwMTcgMTk6MjI8YnI+DQo8Yj7DgCZuYnNwOzo8L2I+ IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE48YnI+DQo8Yj5DYyZuYnNwOzo8L2I+IGxpc3BAaWV0 Zi5vcmcgbGlzdDxicj4NCjxiPk9iamV0Jm5ic3A7OjwvYj4gUmU6IFtsaXNwXSBDb21tZW50cyB0 byBkcmFmdC1ib3VjYWRhaXItbGlzcC1tdWx0aXBsZS1yZWNvcmRzLTAwPG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJv dHRvbTo1LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5IaSBEaW5vLCZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4w cHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQpUaGFu ayB5b3UgZm9yIHRoZSBjb21tZW50LiZuYnNwOzxicj4NCjxicj4NClRoZXJlIGlzIGEgcHJvdmlz aW9uIGluIFJGQzY4MzAgdG8gc3VwcG9ydCBtdWx0aXBsZSBSTENPcy9FSURTIGJ1dCB3aXRob3V0 IHNwZWNpZnlpbmcgdGhlIGJlaGF2aW9yLjxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5SaWdodCwgSSBhbHJlYWR5IHNhaWQgdGhhdC48bzpwPjwv bzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJv dHRvbTo1LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5BcyZuYnNwO3lvdSBrbm93LCB0aGF0 IFJGQyBpcyBjcnlzdGFsIGNsZWFyIGFib3V0IHRoYXQuPG86cD48L286cD48L3A+DQo8L2Jsb2Nr cXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlJGQzY4MzAgb3IgeW91ciBJbnRlcm5ldCBE cmFmdD88bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0gSeKAmW0gcmVmZXJyaW5nIHRvIFJGQzY4MzAgd2hp Y2ggc2F5cyB0aGUgZm9sbG93aW5nJm5ic3A7OjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgUmVjb3JkIENvdW50OiZuYnNwOyBUaGlzIGlzIHRoZSBu dW1iZXIgb2YgcmVjb3JkcyBpbiB0aGlzIE1hcC1SZXF1ZXN0PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgbWVzc2FnZS4mbmJzcDsgQSByZWNvcmQgaXMgY29tcHJpc2Vk IG9mIHRoZSBwb3J0aW9uIG9mIHRoZSBwYWNrZXQgdGhhdDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IGlzIGxhYmVsZWQgJ1JlYycgYWJvdmUgYW5kIG9jY3VycyB0aGUg bnVtYmVyIG9mIHRpbWVzIGVxdWFsIHRvPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgUmVjb3JkIENvdW50LiZuYnNwOyBGb3IgdGhpcyB2ZXJzaW9uIG9mIHRoZSBwcm90 b2NvbCwgYSByZWNlaXZlciBNVVNUPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgYWNjZXB0IGFuZCBwcm9jZXNzIE1hcC1SZXF1ZXN0cyB0aGF0IGNvbnRhaW4gb25lIG9y IG1vcmUgcmVjb3Jkcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBi dXQgYSBzZW5kZXIgTVVTVCBvbmx5IHNlbmQgTWFwLVJlcXVlc3RzIGNvbnRhaW5pbmcgb25lIHJl Y29yZC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBeXl5eXl5eXl5e Xl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFN1cHBvcnQgZm9yIHJlcXVlc3Rp bmcgbXVsdGlwbGUgRUlEcyBpbiBhIHNpbmdsZSBNYXAtUmVxdWVzdF48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBeXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5e Xl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyBtZXNzYWdlIHdpbGwgYmUgc3BlY2lmaWVkIGluIGEgZnV0dXJlIHZlcnNp b24gb2YgdGhlIHByb3RvY29sLl48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyBeXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5e Xl5eXl5ePG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+WWVzLCBJIGRvIHRoaW5rIGl0IGlzIHRp bWUgdG8gc3BlY2lmeSB0aGF0IGJlaGF2aW9yIGluIHRoZSBiaXMgZG9jdW1lbnQuPGJyPg0KPGJy Pg0KPC9zcGFuPlNlY3Rpb24gMyBvZiBkcmFmdC1ib3VjYWRhaXItbGlzcC1tdWx0aXBsZS1yZWNv cmRzIGlzIGFuIGV4YW1wbGUgb2Ygd2hhdCBjYW4gYmUgY29uc2lkZXJlZCBpbiB0aGUgYmlzJm5i c3A7ZG9jdW1lbnQuPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPknigJls bCBoYXZlIGEgbG9vayBhdCBpdC4gQnV0IHdoYXQgcGFydCBvZiBzZWN0aW9uIDM/IDxzcGFuIGxh bmc9IkVOLVVTIj4NCkFsbCB0aGUgcGFja2V0IGZvcm1hdCBkZXNjcmlwdGlvbnMgYXJlIGFscmVh ZHkgaW4gUkZDNjgzMC48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+PC9vOnA+PC9zcGFu Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7 Y29sb3I6YmxhY2siPltNZWRdIFRoZSBmb3JtYXQgbmVlZHMgdG8gYmUgdXBkYXRlZCBmb3IgcmVw bGllcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+QW5kIHlvdSBoYXZl IHRoaXMgaW4gc2VjdGlvbiAzIHdoaWNoIGlzIHNlbWFudGljYWxseSBpbmNvcnJlY3Q6PG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxpbWcgd2lkdGg9IjU5MSIgaGVpZ2h0PSI5NyIgaWQ9 Il94MDAzN184RkMyNjA0LTY4RkYtNDBGNS04N0Q3LUI4NDlCREMwOTk1NiIgc3JjPSJjaWQ6aW1h Z2UwMDIucG5nQDAxRDM0NjYyLjAyQkIzOTQwIj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SXQgaXMgZG9jdW1lbnRlZCBubyB3aGVyZSB0aGF0 IGEgTWFwLVJlc29sdmVycyBjYWNoaW5nIG1hcHBpbmdzLiBBbmQgaWYgeW91IGFyZSBwcm9wb3Np bmcgdGhhdCB5b3UgbmVlZCBhIGxvdCBtb3JlIHRleHQgdG8gZGVzY3JpYmUgaG93IG1hcHBpbmdz IGFyZSBrZXB0IHVwIHRvIGRhdGUgaW4gdGhlIE1hcC1SZXNvbHZlci4gVGhpcyBpcyBhIG1ham9y IGFyY2hpdGVjdHVyYWwgY2hhbmdlIGFuZCByZWFsbHkgbm90DQogc3VyZSB5b3Uga25vdyB0aGUg aW1wbGljYXRpb25zIG9mIGl0LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5bTWVkXSBUaGF0IHNpbmdsZSBzZW50 ZW5jZSBpcyBoaWRpbmcgdGhlIGNhc2Ugd2hlcmUgYSBzaW5nbGUgcmVxdWVzdCBmcm9tIGFuIHhU UiBtYXkgYmUgZm9ya2VkIGludG8gbXVsdGlwbGUgb25lcyBiZWNhdXNlIHRhcmdldCBFSURzIGFy ZSBub3QgbWFuYWdlZCBieSB0aGUNCiBzYW1lIHNlcnZlcnMuIFdoYXQgaXMgaW1wb3J0YW50IGlu IHRoZSB0ZXh0IHlvdSBxdW90ZWQgaXMgdGhhdCB0aGUgeFRSIHNob3VsZCBiZSBwcmVwYXJlZCB0 byByZWNlaXZlIG11bHRpcGxlIHJlcGxpZXMgZm9yIGEgc2luZ2xlIHJlcXVlc3QuIFR3byBjYXNl cyBhcmUgdG8gYmUgY29uc2lkZXJlZDoNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0idGV4dC1pbmRlbnQ6LTE4LjBwdDttc28tbGlzdDps MCBsZXZlbDEgbGZvMSI+PCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 O2NvbG9yOmJsYWNrIj48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj4tPHNwYW4gc3R5bGU9 ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJz cDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7 Y29sb3I6YmxhY2siPk11bHRpcGxlIHJlY29yZHMgZm9yIHRoZSBzYW1lIEVJRCB0aGF0IGNhbm5v dCBiZSBpbmNsdWRlZCBpbiBhIHNpbmdsZSByZXNwbHk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9InRleHQtaW5kZW50Oi0xOC4wcHQ7bXNv LWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90Oztjb2xvcjpibGFjayI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+LTxzcGFu IHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5i c3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7O2NvbG9yOmJsYWNrIj5NdWx0aXBsZSByZXBsaWVzOyBlYWNoIGZvciBhIGdpdmVuIEVJ RA0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk1hcC1SZXNvbHZlcnMgT05MWSBjYWNo ZSByZWZlcnJhbCBlbnRyaWVzIGRvY3VtZW50ZWQgaW4gdGhlIExJU1AtRERUIFJGQy48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QWxzbyBub3Rl LCB3aGF0IGlmIGEgTWFwLVJlcXVlc3QgaGFzIGJvdGggMTAuMS4xLjEvMzIgYW5kIDEwLjEuMC4w LzE2IGVuY29kZWQgYXMgRUlEIHJlY29yZHMuIEFuZCBpZiB0aGUgbWFwcGluZyBzeXN0ZW0gaGFz IHJlZ2lzdGVyZWQgMTAuMC4wLjAvOCwgdGhlbiBkb2VzIHRoZSBNYXAtUmVwbHkgY29udGFpbiB0 d28gcmVjb3JkcyB0byBzYXRpc2Z5IDEwLjEuMS4xLzMyIEFORCAxMC4xLjAuMC8xNiwgb3IganVz dA0KIG9uZSBFSUQgcmVjb3JkLiBBbmQgaWYgc28sIGhvdyBkb2VzIHRoZSByZXF1ZXN0b3Iga25v dyB0aGF0IHRoZSBvbmUgcmVwbHkgcmVjb3JkIGlzIGFzc29jaWF0ZWQgd2l0aCBib3RoIHJlcXVl c3QgcmVjb3JkcyBvciBvbmUgZG9lc27igJl0IGFwcGx5IChvciBpcyBub3QgZm91bmQgaW4gdGhl IG1hcHBpbmcgc3lzdGVtKS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+QXMgeW91IGNhbiBzZWUgdGhlcmUgaXMgYSBsb3Qgb2YgdGV4dCB0aGF0 IHdvdWxkIG5lZWQgdG8gYmUgd3JpdHRlbi4gV2hpY2ggSSB0aGluayBpcyB0b28gbGF0ZSBmb3Ig UkZDNjgzM2Jpcy4gVGhhdCBpcyB3aHkgSSBhc2tlZCB5b3UgZm9yIHRleHQuIEkgd2FudGVkIHRv IHNlZSBob3cgY29hcnNlIHZlcnN1cyBkZXRhaWwgeW91ciB0ZXh0IHdvdWxkIGJlIGFuZCB0aGVu IGhhdmUgdGhlIFdHIGp1ZGdlIGlmIGl0DQogc2hvdWxkIGdvIGluLjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPltNZWRdIFRoaXMgaXMg ZmFpci4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+VGhlbiB0aGVyZSBpcyB0aGUgcHJhY3RpY2FsIGFzcGVjdC4gV2hhdCBhcmUg eW91IHRyeWluZyB0byBhY2NvbXBsaXNoIHdpdGggbXVsdGlwbGUgRUlELXJlY29yZHMgaW4gYSBN YXAtUmVxdWVzdC4gTGV04oCZcyBzdGFydCB0aGVyZS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0gSW4g YWRkaXRpb24gdG8gd2hhdCBtb3RpdmF0ZWQg4oCcUkZDNjgzMCBhbHJlYWR5IHN1cHBvcnRzIG11 bHRpcGxlIEVJRC1yZWNvcmRzIGluIGJvdGggTWFwLVJlcXVlc3RzIGFuZCBNYXAtUmVwbGllc+KA nSwgd2UgYXJlIGZvY3VzaW5nIG9uIHRoZSBmb2xsb3dpbmcNCiBjYXNlczo8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9InRleHQtaW5kZW50 Oi0xOC4wcHQ7bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPjwhW2lmICFzdXBwb3J0TGlzdHNdPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PHNwYW4gc3R5bGU9Im1zby1saXN0Okln bm9yZSI+LTxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj5GYXN0IHJlY292ZXJ5IG9mIHBvcHVsYXIg RUlEcyBpbiBjYXNlIG9mIGZhaWx1cmVzLiBPbmUgb3IgdmVyeSBmZXcgcmVxdWVzdHMgd2lsbCB0 cmlnZ2VyIHRoZSBtYXBwaW5nIHJldHJpZXZhbC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9InRleHQtaW5kZW50Oi0xOC4wcHQ7bXNvLWxp c3Q6bDAgbGV2ZWwxIGxmbzEiPjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90Oztjb2xvcjpibGFjayI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+LTxzcGFuIHN0 eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7O2NvbG9yOmJsYWNrIj5PcHRpbWl6ZWQgc3Vic2NyaXB0aW9uL25vdGlmaWNhdGlvbiBleGNo YW5nZXMgJm5ic3A7Jm5ic3A7Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkRp bm88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxi cj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KVGhh bmsgeW91Ljxicj4NCjxicj4NCkNoZWVycyw8YnI+DQpNZWQ8YnI+DQo8YnI+DQo8YnI+DQo8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0tLS0tTWVzc2FnZSBkJ29yaWdpbmUt LS0tLTxicj4NCkRlIDogbGlzcCBbPGEgaHJlZj0ibWFpbHRvOmxpc3AtYm91bmNlc0BpZXRmLm9y ZyI+bWFpbHRvOmxpc3AtYm91bmNlc0BpZXRmLm9yZzwvYT5dIERlIGxhIHBhcnQgZGUgRGlubyBG YXJpbmFjY2k8YnI+DQpFbnZvecOpIDogbHVuZGkgOSBvY3RvYnJlIDIwMTcgMTg6NTY8YnI+DQrD gCA6IDxhIGhyZWY9Im1haWx0bzpsaXNwQGlldGYub3JnIj5saXNwQGlldGYub3JnPC9hPiBsaXN0 PGJyPg0KT2JqZXQgOiBbbGlzcF0gQ29tbWVudHMgdG8gZHJhZnQtYm91Y2FkYWlyLWxpc3AtbXVs dGlwbGUtcmVjb3Jkcy0wMDxicj4NCjxicj4NCk1lZC9DaHJpc3RpYW4sIFJGQzY4MzAgYWxyZWFk eSBzdXBwb3J0cyBtdWx0aXBsZSBFSUQtcmVjb3JkcyBpbiBib3RoIE1hcC08YnI+DQpSZXF1ZXN0 cyBhbmQgTWFwLVJlcGxpZXMgKGFzIHdlbGwgYXMgTWFwLU5vdGlmeSBtZXNzYWdlcykuIElmIHlv dSB0aGluayBpdDxicj4NCmlzIG5vdCBzcGVjaWZpZWQgc3VmZmljaWVudGx5LCBub3cgaXMgdGhl IHRpbWUgdG8gYWRkIGEgYmV0dGVyIGV4cGxhbmF0aW9uPGJyPg0KdG8gUkZDNjgzM2Jpcy48YnI+ DQo8YnI+DQpEaW5vPGJyPg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX188YnI+DQpsaXNwIG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzpsaXNw QGlldGYub3JnIj5saXNwQGlldGYub3JnPC9hPjxicj4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3Lmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vbGlzcCI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9saXNwPC9hPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8 L2h0bWw+DQo= --_000_787AE7BB302AE849A7480A190F8B93300A0541A6OPEXCLILMA3corp_-- --_004_787AE7BB302AE849A7480A190F8B93300A0541A6OPEXCLILMA3corp_ Content-Type: image/png; name="image002.png" Content-Description: image002.png Content-Disposition: inline; filename="image002.png"; size=46733; creation-date="Mon, 16 Oct 2017 07:34:49 GMT"; modification-date="Mon, 16 Oct 2017 07:34:49 GMT" Content-ID: Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAAk8AAABhCAYAAADP/kUBAAAAAXNSR0IArs4c6QAAAAlwSFlzAAAO xAAADsQBlSsOGwAAABl0RVh0U29mdHdhcmUATWljcm9zb2Z0IE9mZmljZX/tNXEAALYNSURBVHhe 7F0FeFbHtl1xd1csISRBghX34BACBCteiruVFtfiBJfiLdYCxd3dg0vwGCQkxF3fmvMnLfJLmtD7 2nsz7+v3Ljn/OTOzZ8+ePVvW1kxKTs5BUSuiQBEFiihQRIEiChRRoIgCRRTIFwU08/Wroh8VUaCI AkUUKKJAEQWKKFBEgSIKSBQoUp6KGKGIAkUUKKJAEQWKKFBEgSIK/AUKFClPf4FYRT8tokARBYoo UESBIgoUUaCIAkXKUxEPFFGgiAJFFCiiQBEFiihQRIG/QIEi5ekvEKvop0UUKKJAEQWKKFBEgSIK FFGgSHkq4oEiChRRoIgCRRQookARBYoo8BcoUKQ8/QViFf20iAJFFCiiQBEFiihQRIEiChQpT0U8 UESBIgoUUaCIAkUUKKJAEQX+AgX+I8qTmpoa1NXVkZ2djZycIkzOv7A+f/mn2jq6UMvJQlp6xl9+ 9+96oWj9P6asGveCOvdEDvdD9hfdD2rQ0dNFTmY60jOyvuhy5o0ZyOE+zinUPi7s/Av+/t9Hny9K 7KKPFVGgiAL/eAoUWnlSU1OHllbeZ3KQIQ5tdQ1oaWrIJp+TjaysHIjfqavnSP/7X9l42GlrayMz PY0H3v/DDPLRv7oaEPTsIbK0TOHkYEnS/wcHqmR8Yu3/9ev/BZdcKJPSf9wn2VmZX+jL/F5OJp7f vQ0tcwfYWxtLSs4XaRyrBscqlD11DQ2oIROZhdDNCjv/gr3/N9KnUERWg6aWFpVpIDMz4481k/1N DVn8W9aXWke54/yz/z8f53AsmV+OfwpFn/y9LOSLtrYm0tPTqdjn752iX/0nKPD/zd9/3xwLqTyJ zZ2G91FRHKFQkrRgYWWK7LQkRLyNg4amFnQM9HFp389Y9+sJ+PQYhd4d61EBSf/7ZvQ3fTmHQiw4 LAym1rbQ01Tn/fs/21T1Lw5izcxYfN+zJl459caZ7UugmZ3yHxunovFpa2vh4C8rsPZfvv5fZLV5 GGrlpOKnWROx//or1G/bA8N7+/HULPx+UNOgghofhYHelWDZaQ62LhuH7NSUwg+bh5JGWjyWjB+F 0y+ioKGlj64Dp6Jj0zK0bv5Fxa+w8y/E+38bfQpN4SxER0VSQdKEqYUF1JElKdUpibFISEqFjqEJ DHU0/0aFIAvv30Ugk/3nZGdKipqWjj5s7ayhlpWO1DSOh4rdP7tRnc9IQVhoDKztbKApNNGi9g+h wP83f/99ZCiU8qShpY13gWdRt1U3JKRrwNqmLA5dPIXUC5vQdtBMxKakwrxSF/wypS2ighfjyo0X 6N+lIbT19DijHKTweZ4SIgSGno72BzPl81Q+zyYMuo4OtHk40FnAW2/exvj4fVUkUvp9bX6fCpFo GRk8yNQ1ocX+pH9TOcyGFtJiXuLbFu0x6cAFNHC1RAYtBlm8fgu3ixp/r6ej9cf7apra0MwdZnpa KjIokDSFIvmHhY6zp2stJfXPQ/Pz8clmlJKSwgNLF6kxjxT2L2iprqlJOpmidcf+iDKrCXUKQqmR wPmhn7i56ejqUHiLV+iayaG1Ifc2nC4OSSXySFPZ+LKyUaacJyLm+hds/fOhpaqTtrq5tE2nZVCT 6ylbPSCVCoS4uKtraEKXilxeE/RPJf3zPv/pc9nvspGckib9L0FfXVoDPno/TXbLzVf/5BEd8oga dFGjYQscPzQaZ89fxvBvO0GN5BV7STvPWpvbSWZGGtIys5WR/s81Js9pmVrDr99Q6HpV+MOiJeYn XLlaPFCEy1xYbWR8kYXkD/hP4fxTyf+aOvBq0ARG7uFY7r8AVwIj0aWFh+w7/J6urq5Eb8HrmTnq 0NeV7eMMjj+D45fop2L+aqrWR8X7StlE7IFC0uePhVfwPzQ/WT9hUUxV4ToXez4r/i2G+3jj2LME fL9oM8b1bo6kqNfo1LwZrjyNweiF2zGhT31eTLmOH/DHn98n/emqFfTP5I80aRmUOFe47nP5U9HY Jctn3Bt859eS/UdCTVMXelr8G9e0Ut3WmDd7Fopb6VKxEhbH/O+fbAptSiRJfmTw0in2hxiVUv5Q 8f1P6SvmJO2PjGxok/+iX19Ey7azsf/cfrha65JeWZL1TJUV6sO9+8feFmwt2yTc/6ky/i3o+HL3 r8LxK3j+Kf+ItdLh+SjWWdCXh470v8X5lE4aaKgYnyr+VfX838jfquZU2OeFUp6yeGN2cKsO36/K 4XSCA3asmQntuEBoeTbG4X2eGNDTDxU7tsNXNRugbs1qeJuSjBN7t+Py/RA0bOGLml6leHtNJ2MK xSIH104fwokzl5GuZ4mmzVugZkU3mmHTEPzkHp6HvIODgyNCA2/h5tMI1PJujbqVXSQzraqm6vsh z+7haVCkxJzOxUvzxI1E0NsoZKRmwNnVC6WcjBEbHY14/hcdFY04aw32mwM9Iz3JnZESG4IzNx5B S9cY5apUQ3roLRw5dhqZxsXQql1z2BhqIynmHc5dv4wbAQ+RqWuGVm384OViJcUmqWvoQEczA5dP 7MP5SwEwciyFSuVLIzlJHV99VR456SkK+6e9QTqY3r98hIDHr+FcxQ+1ixeHOl044kBRp1Kokn6S 4qqJx/eu4+XrCFg6l4CFbib/91vYFHODWykHHsayQ1Bey0hTMj4K/TKVvVG/dnWEF2D903KVH8UH gDriQ57i1MNX0DUyQ6Ua5LOb53Hk7BUYO7qjbfNGMDbUp1UuCacP7Mbpy3ehb+CI5u3boKK7I5XT ZKhT+dPKSsDJA0dx8eZDOJYqhwpujkjK0UOVCu6Su1YjNR6nT57AtduB0De3Q/0Gzfgbe97M0xCn pH9f9m/C/rVyknD78hWERCWifLXq8KtfC3ujZNtPg4pZckwYftt/EA9eRMK9fHkY5qTAvYY3StmZ 0BqgmPaSYOcav358B49fhqFsy64oXsyFupFMeRZ3gmf3biAkIhGOTrZ4dPMSnr5LQuMW7VCZ4xf7 Tyjnyuavrq4Nb7/uaEx33Y0zh/n7XAVMuB4pA26evIQ4NW14eFWEsXo8jp0KgIa2AUqVKQ87awOo aVAxRLLi+WvpQDMrWen6KHtf5f4vFH1Uxw4KhTTmXQhuXLmAgAfPoWPmAJ92fnC1MUS6Ev9mTnYW tE2c0G9oP/zW4wes/GkHhvZugcCLe3Ds5lPYVO5IJfUr6ZIWE/nm8+/bGiE9NZlrcgEJavrwKOOC oKcPEBWfjpJu5eDp6vjH5UEejUT/aga2mLt+B6IHdINFg3GY3q06Xty7gH79B2CGjTvWzx/EteHl T8H6JPNyp0nlXDM9AdcvXMTbmFSuuwd0sqPx4lUEnIq5IzXiBaKztZTyh5bC9U+RFBeF+8PeBGkc Q1x0HKKjYxEVEwtrbSrxZH8Dej2U3TxEHG5s8DPcfR4GcW9/eOsmjItVhLudOn4/fB61mnaBdw1X WRhKQcdnZyy9r2x/iwu4Mv4RFws93tvu37iE1/ToOJd0g05mNF6/eY9iPJ9cStpAQ6F8K7z34d/K 36rkQmGfF0p5Emq9hp4pmlfxxOkLaShmbYKuddyg3nAsfpvaDZqpuvCuVoZjpIKjkY6tq7/HtfOu 0EqMwdwfV2LjqTPwq+aErPR4zBz1DeZtPoc6Db2hHn8I/vNnYdyPP+GHge3w8NopDBk/E+GRKbAv 5oTUkHDMmrYUG06eQqcaxXn7UOI+EBp6lvLvP7h0BANHjsfbRG2sPXwT9m83oWUff9gWK4PlK35D wJElWLB2Nx7ERGNM9/awttBDdoYOhk1ciW7tyuF9eCBWzP8RV6/fg1uNOoi8dxtJRpl4G5yKBIvz +L5dBSxbOAHzNhxE1dr1EfviIfz9N2P3yQOo52bFb8VgxqCumLH+NIpXrAj1uFA8f/UWRm6d8OLG zziwagoWb94rt/+vfd1pH9FA2N3LWLhsM54FPkD1jiPxy+KpUKNSI2LPHl4l/SYooF/N4rTuZWHt nDEYOX0FdPWNGGuRzttmKtR07DF9/hp4uhVDOk34nzfeerVzsHHhVCz7ZZ+C8dFCIb5VoPVfg7F9 fXm9UqwgC8Uj4vEtzJuzBDfuPsdXdWrhQcANGFF5CEnRgMX5O/BxjcXwrn7YdOENGjaqifinBzB/ 8RLMWL0ZA9pXQ0Z0EAb06Ii1x+7Dq2IFxL9ZiVcUTOV9h+Dcb8uQEfUcPTr4Yd/tKDRuXBuxz37G hO+mY9aKNRjWvSnePb7J/pfK7//CHbQpFYMR33TAmiMPYahPqxhNTfpUGKr69pFiXdJiXqFLqzaI 1CyNymWtsWjKWtx7GoblRx/Cw8kMyenKlSexxvcvH8eiTbvx/MF9dBy+Bv7Tu/NQSaUFNQfXT+/C DzMWIzJFE86OTgiN4P6ZtxlHzx5CTTcbpMcGYaiC+Z/ZvhR6SKWVNA06OYnSXsszQkqxR7z9/758 DvyP3cSaY7fQvvh7LF0wA2evP8Vo//2Y3q82Ut+HYES/Tgrnn50QiuE9On2+Pqu4Pn7VkBkTihF9 5b+fHwdNYehTQ1iZlQV4kQY6amlYPGEA1h18jDr1qHw82ozFG7fj5ME9cLXSo0VIyfrx4mjnbI8y HqWRFnkZNx+9waWTZ+DmUQLWHk6wtTGCVmac3O+fOrwPpQ0zsGfVXCw+cAUOFtZISE1gDGoGYhKM MHXJaoygMpbDC5qGsFp9aIYRFkgq5Zk82O3dXGBhZokSpSuhuIur9F/Dn1ciMPQxZQt/lxCicH0G +lVHYthzDO7TCb9efAEbcxNkxGdC0yiJmjsVs1kb8OzAfMzZd1UBf9RCSjTXv6ec9Rf7s101JEc+ R5fWcvbHscfwcNbDsol9sXlvAGKig9HTrzUs9IRNxgST1mxC83I2tN7KD9ATVqfIJzcxbMBYPI9I oCLijNAn46FtZAhrMx2s/ukAzt6+AHfjOAzv1kG+/FA2PrF/i1kh/t0z+eMXz50tKP8TFfJPaV4+ crKTMXdML0xffkK6sKtnqCMzJRZ69iWxcOluuFhncXzy5Vv/dl8hgxbIArd/O38Lk+3f1AqnPHFQ gi/tKrkheusZ3mpP49yDSG62E3j4dRWEpZWCvakBfyUCyVPhUrk5Dh/aDEdEoFX1Oji09zw61eyJ K7t/wuQVhzF/50mM8qsL9cwETBvZC5OGDETjJvXh02sQTpw+gn33dHD00BY45ESgk3dTHNl/Dp3q 8GagRHnSotXg6jZ/Jd+vh9a9RsPR0RJdew7A6fPH4Z4WhNKVa2PzL1tQpbQtXj/rilm2rvhuyDj0 nT4TlRxMqFyooxgtMmm0jFm6N8KO30qjS90yOHTtIRav2Y5urcsyePslLBxL0sUHdO4/Bh61/WBq aQnEBeGbzt1x+OJTNPK0x8kNKzFl/XHMWn0AQ79phpy4EIzv6oO1gQkQ52Y9n56wci4jt38h2LPp ovNo0Q1HW3WisPTBy/jEP9glLS2T9BtIi558+n1N+r26fQBjpy7BkFlrMbx7S4Q/uYqvv+6Bkk07 oXfnptx8imJncnizlo3Ptri7wvHxfCjg+g+S1r+Ss+Ef7p9P94GInyvdpAt2lnFHQ/equHnvNVZt OYrWXg5UQINRysMSvy0dguUHn+LX0+fQsUFZZCZGYUyX5hg2cCR8m53DSVpM1x4OxspdZ9GnTRXE 89Do2qY1noqYE+6Qjf5T8ev1aPx6/AQ61nVHekIEZoxojzHDBqNO3RuoQNrv5G1bXv8u7hbYNK8f lu4Lwerfj8O3Wgk8ufgbvu4+DBkinohn09uQQBy98RRbju1A1yYVEPbsFqb9uAwlrA3JZ6r9lmlp GWjadTCadeyGPr5NkMhxy1oOUjPV0a3/WJw6cgAB6g1wZPt8qEc9RosmTbDvfCDqethj08oZ8uef qDxmSgSQqxmaYcyi2ThUqblkhTN0qIjde35Ht05tES/FROXgl2UTFc5fm/Pfvma6/PUZJNbnLE4s n6Tw/fzIxcLRx0a58kSFJEtTH/1GTUPtdjEwt7ZCQvAddOg2DBcev4WHrYtS5UnoMInvI1G6bguU yniDFbP8kRKUjkEdGmDn/Vi6upiRqWMg9/vnH4bBw9sdY+bMxb7dVaHmXAu7Nv4IO8M0rJj+LX4Y 3A/VagWgZkkzJCVRmRHKbh5n0PUjXD0iLjWLh6sWFcB9ayYi5jrlFV2JO86+xoTFM6Crls1Lr6L1 GYU2zU7i91ljsfXie6zddQK+VUvi+q716DbwB7T9bh6+7loL0TVm4PejivhDHbsVrT/3Zwvvi9AI eyZ/f1jp0z2niTbdx6CY+zkMHvczpk+fDQczbWSw5r2rszFlr2LFVST/CEvt8FYHMftuNi4fWYsx vrUQ4dwe22a0QwOvBngYFoVnv81TKD+Ujo/7VwSaRCnb3zzcczQU84+ngztu7VmPyYtPYuaavejh Uw7Pr+5Cly4j4d1xFDr7eGDbnL4Kx9e0/ikUM9KUXK8Fav92/s51Yxdo7ipeKrTylE2rhYWTJ4yS 1mH3zzvRofsAxL65iXUHziLNpTjMDXQ5hCy6ubTRsGkbmrKN+G9dlK1fHQkM8hPt8Y3HZDENnNq6 FJd+Xgg1xg+EBT2nLz8NLyJiUK2UMH0aollLH7jzJg4Yo0ydqogTtllVE2SGn9Lvh8fgqxKmqNys Lw7v5bhq9sB2WOHy80BUL8VbP03CJcp4wtFcAza6dOPUrI/a/L1omVkZnBdv4jQf6OlqIVvLCAMm reMtoAHNxlmoWMWKfvkMCqNIbJwzAysPXoZDKRdopcYgMoeuOjURQ5ONc+cvwaVxb4zu3wqa/D0s SuDHjfvQIuAV9DWyYVPaA3am6gr7F2ORYkoYa6KtrUuhmBfxIyOOmmAgJfR7desCtFxb4gda/0zU cuhqaYPRndrgUIyIdZDCphQ2sSeV00do/lSyCrr+XJ+qxSkESSfFTdBfB1qGlpi4Zhu6N64gHXiV rWzIVym4+jgMtLtj24rJ2OqfRWucFoJex8EgIwHvIiJw8cotNO7ZBwPbV2f8QDrMi5fDxr2HEPAy ie6IeFy8cR3e3XpJilMa4/A0jWwwfOwULNrZBreevUWlYmaK+0+PwSmub6u+fdDfp7rkgqvXfih6 HdiPO4ynEsmnlsXKoV3z6hjaoQ6mOjjB3NwS5StUga2hWr6hDNQZ06OnbchgX8a/fBIwK6xz0LdC q1Zd4WzOy4ypGypX8kQ2FStG1eH8lRty53/rOa0YtBpL+psiEw+faXG/ipgzqV8qhLqGxjAyNGBM huz7Zy4omD9jrsQvrge+Ubg+EeHhOHvpskL6qdr/ec8LQh9ub5VNxDsmRb9mfBCTAKiMlnQtgdS4 9wxQYgxaPiKtSS7Ehr5ETJw22nVuhDpt+uOrDhPhbp+Gl/ufUvnNQVKysu8zwJuxeObWdhi/ZgEq utlKO2XyzBXYtaUGLtwNg9njHWg7fCEy6KbKW0Yht23Kt8Xh7f7kG/6dSkZGXBJe3zuGA2ceosvQ Dfi+V3OKpxRcU7I+4W/DcSPwPjr1H4lvm38lKYotBoxDV7oSUxiELtZXjE8+f4jRZCle//Q4hEfF wKtEeQX7g2/naMClXBUY68bzvDiMmg0aobiZ7FgT8atKrYYSW1N2cK1sLY1hY2IKK4YpGNq5wor0 LO5kJO33u4Gh8vlT5fiYUEXlyJLyRNH+ziEDJEW/UsA/Mjl+58RVuDfphtHfekvWQxufwejU/jhi OHfRrj1RIN84vojoBJQwMReBUtyaWn/E5krxZ/m4mP3r+XvbQhjr8AKSj7mq3Oyf/KDQylMObzCm FnZwUnuKJbvfYNXu88g8uQBDF65EzfY9YGwgFASmkTIQMeUDmAImMDKQlT5p0egm0jFxx6DBI2Gi RZcRg5WNDA3JKBpwcrWVfqJB8wXDuHOHL4ghAmH1pUBE1U3597M4Pia54siJK3CkoqRDM/mctT/j l1nDpUwXoSCJm1sSTUgJKX9KVE2OKUuNcQMiWJsHCE8uWDpYyaZEvhfBypraenh8fgtmrD2P9ceO oGOjClCjm6JNS24ECl5BGwNDHSTeikYSravmuUHNxnYOqFzZkPMTioeS/tWzKEDoOsgN0hWKkxBW kuWagaSpdLeQegrpJ8ZqZO2ApOf7cP1+GBqXd6BWGIUrD24iy9lHCthX1TKUjo8f4DwLs/5K3bJi dnRJCLgMHa6Bs7WFNFwBi5FKt5WeDmPCKERN3L7C4OHjqEMlMSBWU+IvobB7OJgxEFcbIZEREJTS yQ0Kt7UvjsoGqZJbTfwtNjqSET+C57SlAyg2+j2taWrQ19OR+pPbv3B1iR9TA42JjZGUUA0eYOLA iGBshroteVq47Rjw2aljPwwYZo3Xwa8ZVxeKdSsWI1bNAFuWTefBpjxuQQSTyoLhM6XviwB+sS90 qVAKq4uImdAgfcTvpMYlYRQLY/zExUYLBlS45c2/in4y4Q9kMCOyZAIGJAta8xIheEqXPJeeIeBH Mmkh5RcFxpiYH7WOiJA3sJG+zwkqnL8ssFzh+nCdPO2NpCB0hfRjd6quUAWmDwORlQbNSPyghVPr /bH6eDCOHjuFRpVdkRh0Gz71WkCNiQsiy09ZE+yhpS3gHzJQsXFHTBn8EFU79oHp2zVcJk0YGmng 8rxFWH2M3z/++ffF+IQilE7XXHBYDFDOVlJYYt+/R4yIp1TTgLmjC1q2ak05ISBDZKMRSSH6zl5S TJwaeTpTUw9+Y/0xrasLRvrWxKYjm/A0vCtK2zJIWdH+EevDmLzMLA1Ev4+XvqspzTcF72NDoe8k u3gJBUIZfyjen+pwsTPi5TNB6f4QClISraRpWZFIFJdP0k00IQdF38rPTcoHjjnvwiGSewS/M2iU MZRUrPR5GWHQu3z5oXp8W5dPR46S/b2Tzy8p5B/Z/rAqYY6ggxfxMCQO5ZzoFo16iXu3HqNYa1/p uZpC+abOmEnSjzRQ41plJIZj16b9eB+njhZdO6OYpZ5KGIx/P3+TA1Ub75XuUUUPC688kdn0GKhr 46SP9GATBoEzpkmrNtLnboAdb+h6tMvHhgcj9E04zfqvEBnLOIz0t/x3COJT7uPd+3RUpyKRteJX HLlyF+OYfaSeHEmX3nYcOheIqctXwyD9Hd6EPENcyj3eRFKhn/UWb96ESv8Oi0yAubGWQkwj4TKr 3rIRslbK//60ZSuhmfIOPy2cjAkLt2LnBd4ek85LlqhW72KwacYQONqYcU76SImJxJYtW1CaGTEX Du3lDe0a+kxfihrUl+4x6DyKAYsvAi7ivheFIU2xToxl4DnG2JN4CvgMuviSEPz4Orasmo1jlwNh 2+AhIqLKoHVnP0xY0xNdBk7CnFGMVWEMzryJw3EluhICLmyABc9nRf1/M3UpvN2McOfmAx5s2Qh9 +w7P8BrXAu4RqiATJdxoLWFMiyL6vYlMhGfd9mhcbiV8G9ZCZ79WjJ86jZNXH8N3CNPo89GEIFZM n2Wo55BV4PWfvGQlLBwMFJrfhXLzJuglgh/dwbvYeAQwg628jhsPBBM4O9mQ7jrwadgQK7dPxuV7 PTCgA7OZ3gdh7471OP8oAys2LsPX7TpjVY/RGDTBE6N6tEF0UAAmjBiLOE8/XNm5AB3ad8bGfpPx 3azyGNy1JRLCHqN371Gworu2rqcDwoJf4dUDef3bQocxZE2aNkLvscswyrM0evvUxdEdy7B+/000 7FIJke8TkR4RiB59+2PKio3MRu0JTbpNTm5aR7dXfkwfakhPfI+H997wyEhmXOA75ATdw+279xjk rwY3d1eEMyg27MUTpD24hpiUykgPf4XwN2FIfXAZUYkV0aV9F6yWO//2OLdlAbTSonHn4UPGDiYi /O1bpN6/hHt3KXhz9OHqVpz73xRmRjHYuH49qlt1xZEt/jhCN6SDbxDi0yqhWbNG6DlG/vwjohPR plEjrNg2Se76rOL6iPd7jJb/fvi7WFiZEBhU0QlJbaHg9LmKd3FevLkqtgAyh1FyVwoTYkZyMp4w qHfVrPG4EBSOOgzejnC3ZMIArdLy0r7E2JJiEBj0BkG34/HgWQrl3RJkpcRhz7oMpCa8ZxJAJJLo ehcagLzvR5Ylj/HylpUUjZE9fZG1wB8eVikMexiJSMuyaFmtOByKeWFp1VZyd3JKUgKeUVa8pXxO u3Ea71oUx9TFP+Fg+SroO2wyNi4Zw/Xx5v6ZKH99NixB8+a10euHqRjsbAS/Bp44vGURth+/i6Ff aUvnlkL+aMMzILUKv69of6Zj2brlyIl4gu7cH1MV7A9BWl1dfaS9u0/5fBC9m5fG0T07GXf3EpMW L0dZewO5rlOhJCXHReBFWDhC70fidVgEdaZ0BL6+j8j4OkilPLl7JRBN6zfAwk0T5Mxf9fiEKhnz 9rHS8Svjn3eeNqjFi5XLqq1oULsa/Fo1wp3Tx2lteo6h7WSXIcXyLR3+qxbCnsq5Oi+WL84cRI8B Q6BrXxvNe/ZUncUrFLN/O3+rSDjKx/Gm8CeFVp6EaUJD1wROHrVRi3FBjia0wpRviGblPRiAV473 2hycXL8G5wMCkaP2BtsvtEOpwJ04F/CMFoAQ7DjSCcO6fYNfVkRh8o9TsHfNHClTTF2Hbrr2/eBk YYATP83FuTuvkaW+HfvOdIPjO9n7WXiFrQebY3SvBjSvylLKP20iJsazUQ9+/72C7+ti2+zZmL36 d5iY2zPDDkiKS4SVmQmu7ViEDVUqYvrA1tC3LoHv6dufMGsa6tO1mMH8odqNmqGUjTHOb5+LwQs2 cgx6ePXLDJzfORcmZND9B9cxbTsD5Rp/i74tj2NE19Yw0dWAHc3MbRvUwOG1E1DczhxTB/fArp+J 0TRpNpof3sAAwlSYlayKBTNHwsxAYGkxwFhu/00ZpG+MxDePeeh2xptkugjpx0/LCUbb1mfpPrHH rlMnEcIYBEX020L6fde7ETb+fhirFjDo+VUoPOp2h53tKbxPTpKEn6qgXBFwrpg+Rjixdk4B178v bE10lLiuaHHj5Wwf+WMOb1Qp+lrYNGcYdizWRLFKfti7ZR60GA9Xt8dwrGSW5Mxpg7BujhndVSnQ MXJC22/7S5ahWowX+iUmBlNmT8GRTf7kgUS4VWmMuWO/ldyoTXqNwgbyxKxF32Hnaj5PiYGtV0Ps Wu4PJ1MtLJs3R2H/2rTMdB0wGWGv32PmzLHYsZyKho09GtWqhvun92HtTl8MaGYGS0tDzJ88mgfv D8ihSd3SsSLmMGZFnYH6ykIeNWg1Cwu8gC5fj0Iy+0pnfFpO0Aa0OrsNRmaVcOLCVuzZsAq3XydC /bcluNDDB6F7VtLdSGy2V/7Y37wJvmH8lfz594WBZg6igwPRv/PXEn+lC+yoZ7NxYZc/zMq1wYlf /WFj5oih4ydi2Nj58D6+AfbOHqj5VVkcWD0JzZtUQ4/B0xDySv78V25viWmDOe937zFDzvoIyJCv +09G8Mso+fT7rTkmD/bhuOTv/8LS50Azb/QmplWqUGDkNGEVbvDtcLQ6fp1xco2IAafBjNvaqF+r ItZNHAon493o174C3/9cERbwFMG39mH+lvO0rGVh5PgFOPL7Qrw68QvGzt4CdWIszfBfg3XjR8Pn 2BW53y9mth89amtC39QcPg0qY9OsEQh69w7OZetg9/pFKOtkKMGdyGvC1Z+V/A4ThvZGwDO6Gp/P wnIXJ0wf4ou1PHQ7DJqK2SudsWYG1ycySu76aFNx6zZsDpIytTCPsXM7VxvC66vKzFL1lEIWhPzQ MnGQzx+MsWrWtCrafzMKKyPl709DXV4JdA2U7g8R12RZohKmjf4G06YPxJaFVNp42W3UvDssDHQU ouFr0F336NRebD4fgMTEHKz6+SCsneywdd0WnHvcmdnd5kyGWYIBd7ZjzdwoTJXDn6rGp0YXiaae 4vELOIX6KvhnQIfK+P3IWSxavAovw96gXqcBsL28CynJqZJsqKdEvhnpkRbCta6ejbOnb0hs0H/i dyhtoydBBalq/2b+VjW3wj4vvPIkNNMMNXz340aMY2yNRhaxmfRsse3cBeQQN0Rk6TRmsHRAr2HS WHWNTaBdYzhudxnEf9F0bGyMFAqWTv3GoYlvV7yNjGPME91fltawMjeWsEEa9hyFgI5DZb83MYFG xnAE+Ir3GcphJH4jX3DKiJNDt0iO4u8zkL3riFloN2iaVELGwMiIDolevGl3kvzL2gbGdH2kSbgl nUdNR6MOfWkxS2e6ugUcrMzpoUiHbc+RuNR+gITlJBQJEdeipqELc0MN+t0zoW1sj1UMphz1MpQK pBYcXUpBj6mv4TzQdQxMJRq15QHWsFkHvImMgTrN/XaOxenH581IEny8oTJAXV7/mUwVT0v1xL7T F5Ahsh/pohG3BYH5Iky1ZubaKMXxBXQYopB+og8j+zIMEF2Zy0+JjO/5CVkWjSS3ksp8BfaraHyC Pjbfcv16iP4Ltv6KffPkPbo6u42aAZ8BE+mu0pTwjYR/W7iWDLRkvm6h6H47bgFadx3CNG5mINKc b2nN2CIqZsK1mpKhwQNgBpp16IPIGD7X0YMT4R50GG+WLAQUU+17j5mLVl8PQFRsuuQGcyxZEoZU LMTaKetfIOrn6FhjwvJt6DYyiH1lwoouWeHNFpZKsf76HOeVa3fpWtNAPN15wlNqT7gIUwPG0zAu 6g9sJjm7PYvZbnblm+HUheqSkJTimyRUf/Kgui7MGIvXTeLv6dLfjRnXkTlsOuk1WeJvI/47lUHJ CufP/o3sy//JX+L75G+Jx+mWM9ImXhbdl+36TkStZt0RRwXLxrEYL00piI6Jh4mZOVK5FxTNX9vA hP2roQ/Xp5W89SFvZmhbKaEf3RhK9v+XoY9ix2A2XZRGtuWw89gFvAgJ4w1fH6VcSlApief6xsHI 1ExyncprWbzYibU7e/U23a3Cu804KWamujTojvPXffk3OpapYJmZW+HXo/K+HwsTSzuoJwXTZaqP KYz38zTOQjgtKEaWNjDQ+VN+yOtfJJpoGNph+e+nmE1LKwbXVIfrIfD16nQZjvv1iUHGsANBXmXr k65pgUET11DGTmOkBRUFCyNMGtwdUdw3wjaSRPmrlD/SNJTsT3oqmIRwVcX+yFLXw9CZP6Ft/0nk xywJcNTawlSGLaXAKpnJibnU64xLN1tR9gv3KcMk1H3Ri8q+2CcNtl3GpFQ1mOkboBcvBs27DJYj P5SPL5nywdSxktLxq+IfIZ/t3SrTirROtoxJYWjgMQeWNUwlWZ+WrVy+iWzsjERC5Vw8BE26agd2 JOiI0jPzT275N/N3YZUjVe9/AeVJyOAcSemQDm0pLZT/ZtCowJoRiLU6xqYwyPX9i3IDOXSp2OZG wcvKDxCwj1qwIfFzylg5SN8TfnxxYxI3F11DUxiayGIHRAkDgqPAwFhmssxX+QIeGsq+b2hiBpPc 8Um3JSo41tYisP3D72dLQtCcqd7Ml5NKVaRSyAhzvEABdhBBeR829ikUJ8nnL+bMA6S0u4BtII2o UGQSO8fWzl6KFxEHnRifnpk1SlsyxktkOPCd5BRxjOYFKSjuX41Km5W9vRwLkaxcjhoFYh695NGP YeEE4QzG6CHD8YxpxlEv7+JRSBrWTKAAz85QGVMiTZvzVUQfXQoiw0KsvzImFgqDnrEZrSwfx5aI 9cnITSgQyMnJqVkwt3OGlYMMLFIoWXn8JQOMTIWJtTPMbWXPBQCfBBEg1aCTvW9qU4zfkI1GKIXJ qbKAMFX9Z1PBTaHy61iihLSc2SJDku/Z2tnJ+JdzsHMU6w7Y2FpLay6tPzVDZYpTHl00CGJpb89Y tc9athQvZ0D6GH/A39qf/FvsNYXzF9+ksiiXv7jm6SLTlfRKoTC2dCR9BW0kjCkD2NkzW5D7Sen8 Jf5XsT7K6Je7f5TxSKHpoxRpUaBbp9L6bgh3d8Jy8LfC+qtOpcNOuIs+KLny+Rh52aFf386W8Z25 MkXwrAZj0OzsZH8Ta5NJnDd537d3MGI8dwyWzfoe54IJN9G9I1wc7TB47GRYU7GXATwqtxuLS6Gp hb0U2yfxdS49Bf6cpS2DzwXYpKr1oXU0OVUdFtbW2L1tDY6fuoYjBw4iw+AFmjaujla1nZXzh4r9 qcHLtJ0jEx2U7A9xaU1jcL29s7M0Y+n84MVIOUgm6c8Lvm0u/WV8qw5jnleCb3V16XI1pRzhHlIm P5SNT9o+Ksavin84SsQE38MwZnvHMQj/1b1bCEl1ILhpXcZTEaiXsk7Z+ERCUzqV+WRC8fQb8QNK Mw4kP1YnGUf8u/lbmVwo7LMvojxJm+6TzDfBfHlNHFS8DHzQGED4Gf4ChY7IjpBzScvf+6pIofj7 MoHxwfs8TNM/HrBMuAmFSI7GLgTM5/P5eDwSYuxHdcx48HxEk1ylSkmYi6L+ZQJbMZZHzmfj+3i8 asywE0LcvTxBSV9Hw7W0FxZ83Q21qrjQqpV/jBDF9Cnc+qta2c/5Q84buYeaQvLm87m8seSnfyHg hAXz413w57/SC4HFIuiuDCz2M/7+bD9KzC0d+nLpo4K/cjfHJxbgj+2VquavtH8xPBX0U8YjX4Q+ KphQUoLFxe4PoUfrnCrGzZUpn66dmOunf5P3fQm4lnJXj8rPyNGjkRwfS0VHJueE5Tl/TSZ3PmvC mvyhTMnH/hDfySJiNlGl4MvYPZFsIJDO88MfytZfWr987A+Jbvm0qOTN93PeEFZb2dPsD+miZP6q xqfquehLGf+oMXhdi2EsZUu54TVhSEpXrEU3fXeC3Fr+adVUNj4qp2pGjth0JgDa+gQV5UXxr7Z/ L3//1Znm//dfTHnKf5dFv/ynUUBsbmHNG/jDnA+GJit/U9SKKFBEgX8mBaR9Syv+wIlLPhpgvsv6 fNFpifAIoGOPwfzvQzGSQdczrd/5gG34osP5L/qYsHxrmzphvP/iP2f1SXkl1dNVpxXNLNcbpPrX /4Rf/LP4+3OK/NcoTyJzQpZuKlx+jDNRbq/9J/DGFx1Dfucv6pypibpXn2ZySa7NL1BItpCzUjg+ Jd+VzV2Y6v+edf+7vy+mJlL81aUDRhn/MkCe8BM5dGOlizTSf2gTsYPisMymJeDftQ//HfT9aNm5 b4XLVPDOh/RWleTxd7COYF95MuTvVpz+7v35d39f9Vrkhg6kqALlUPYlYWHMR/au6sEU+hd5sk5Y CuVmoX7Yg4Jz6f+Dvz+d+BdRnkSg9KfAfMKNp6omV6FX4YMPCKwOYfoVuCZMUaLp9W8Cd/iSg/6C 38rP/IVuGfTsIbK0TOHkYKk4vfsLjuuvfErZ+IQA09YWmFuyYrwfNqlMCNddQ53xWQXUKf7u7yul A8cvaiQKYaLOWEBGGciZB+fILNTnd29Dy9wB9syy/CvAb8rm91fWSPFviY/DAGE9rpHkJqRRRADH yuICv0wPf+9XCkffv3dsIvROCf8LqEeJ/1lu5W/g/797btLlQcn8VPX/r9//qib4X/Zctl78TxSm /iiU5d810UIrTyJIPOb9O1n1d2qJAmFWi/EzNgw21GYNrxQRM/O3mmzVoK2ezpTS7/H72acSGKRP 1xHo1akeAy3zH6/z71q2j1SHfM1fMKpmJuEQetbEK6feOLN9CXGgCl808kvRTfn4RNBiCsJCY2Bt Z0Ngv7x7By0FzFTbsmoGs5HuovvgWejItPI0qSzIX2l/9/eVjEWUaEmLx5Lxo3D6RRRjz/TRdeDU z+YhwBbV4qMw0LsSLDvNwdZl41gyML+WQkXz+ys0UvFbcWlJi8CqJcuw/+R1gsqmwbFqeywjTpoB 8cdU3jC/4FAK8qnC0bcgPf6Vd/5u/vwP8Ify24OC/a2KRv8F+1/VFP+bnlMP0MpJxU+ziMZ//RXq t+2B4b2JJUhL+r+xFUp5ErcFDYHGPaodtp54QSWJ1Z+JKyFSiUpXro85835E+RKisKZIm9Yg2rMM MVXWRJo3YQ1yb6WixpIOU80/bCJNMoX4KkL3+vR9Ojck9GzxvkjF9PSqgxwzF6xduhgXrwWiz9cN ZVlifFmPSMF5x20aU1fVmZ2kJYqKsUmB3FSyBAy9ovHJnsnQzUUwphpTikUKv2j5gbnPz/uK6CNu 7TpMu5cgAzhWUWFccu5w4gJcTeX8c2mtLlDQdUzRumN/RJnVhDr96B+2wq6PIuYXxTdFaQaJ1uwz VQr8ZAkPup/y8uNE1puy8YmSI9GvL6Jl29nYf24/XK11JeRgkdmZla2Bsp6emEtE++vP41iFXouo 31yrvxAT8CW+L9ZFhvKdy93sP5UXB9VGF7oayY9eDZrAyD0cy/0X4EpgJOfBzK0/PkbMZJHGbmoN v35DoetV4bMbm0C41xbFXz9oUuwL0Y21yf/y6cdsUNUDlL4o1kc3F31d/DtHzI9rKb1POaBPBPLz m1Zg+HfrGTs3BNZaiYjVM1HptvuQPz6Ybu5+zcsY4/w/mZ9s3wo3BItT5/KSCJLWzM3iFYHKadL4 VD0Xk1FMXzE94UrWosIu9twfLqhP+EvsHx3KN8HT2SIWSbiS+b8zMtNoLeWFkphCctdHyEZFmyf3 71+CPxXTTxRGKDh/FH798tf/p/srd5dJSQ7/hv2vcH/mrn/B5YfYm3/K2HTSQ5NQN3myVUCxiDNE 1ffl01eEcsiSXJTt/3z1L8qH8QzlbkSNhi1w/NBonCWg8XCCYtPGIkFyFHR/qNg+f9vjQilPIqAr U90A4+duRHjcAKRYemPR1K8R9jwAQ/sPxMgZ1ji8gUCFmlkkTA6unT7EArWXka5niabNW6BmRTdG /vP2TMKmJcfg6MH9uPYgGCXdPQlulk3gzZooX8pGKqehq5HB9w/j/LU7zIK2QP363qhSvpT0fgbT wKs380NNkinwOgHnctOypbgLWiwuXbyINN6MMzlej4qVkRB6DyERiSzKyjRu4v14saK5Hm/H8sYn sjeSYkNw5sYjYgcZEwCvGtJDb+HIsdPINC6GVu2aw4agPYpu1sK/m6Ls/bbNCARpQPrI718ANj64 dhqRiRpw9fQg+vUTjj0ezi5u8PJ0kUARM7Lkzz+PawQY3vuXjxDw+DWcq/ihNjGMBBBp3rmpTmud jlbB10dR1XgR+xJLZPgHL9+K1BUYEgqggocLT5QUXD95HgnExNagq6fiV1WQ+uoxbj16JXd8aVSu 4oiZE01cpCjiIFlrE7uFG87AQJ+ZPWqo3MCXoIxraXEKw77tG3A3JB4t2nSEl4uVlKqvqhXq+1Tu NSistIjbdfrAbpy+fBf6Bo5o3r4NKro7/gmHoGgQIiOJsBXeft1B9BXcOHOYguTj41SdNTReP75D tOkwqZBp8WIuUuBnXhPYTskxYfht/0E8eBHJrMnyMMxJgXsNb5SyZ3aNEvqpPLmFYsHDVSM1HqdP nsC124HEOLND/QbNUMHNXroAZRErLeRtCPacuoFKTVuyYPIw4jxlECvHRCqTo8i9KPEH0c/vPg+T wE4f3roJ42IV4W6njt8Pn0etpl3gXdNVSjuPeReCG1cuIODBc+iYOcCnnR9cbY0IjplMml1Agpo+ PMq4IIio3lHx6SjpVg6ero5ITYpT/lzIH8oLRfQV5Uue3bshyQtHJ1sWP7+Ep++S0LhFO2Y72ZPn BO4XyyFRb75PdPHXb+PgXNKNJZ6i8frNewIFV4RLSUvWL1OwPixvoiq8oVD8KWpvUg7KpZ+NIQt7 U8ksIH8Uev3y2b9I9dfKSsDJA0dx8eZDOJYqR95zRFKOHip7eaJyw3/2/heKicL9ace6rZSBBZUf 4nyJD3mKUw9fsZyMGSrVqIa3N8/jyNkrMHZ0R9vmjWBsqE+vQ5IC+ZRMbDJeDhTQt0oFd4ZLEK9L wf4XF/g4Jf37sn8T9q+Vk4Tbl68gJCoR5atVh1/9WtgbJVM/lMqvfOwPVfL973peKOVJGhQVGysn N1hZEv2oZBmULFFK+q9zw5+x6ulbgidS18xJwMyRvTFv8znUaegN9fhD8J8/C+N+XIPv+rdFTvw7 DPdtjRuJWqhdpTxOLtiOG/efYcSyU6ji7oR0Pp/QrysW7r2G+qwGnxPzDJPHT8aYHxcTjK0jsinA RB0zfR0BmvhBZgdvfzkZyVg/ezQ2nX4Al7ItsO3AOjy/cBATZixEUIweRs9bhqoeDpg5rAfmbvp8 fOMGtEcyy2esmP8jrl6/B7cadRB57zaSjDLxNjgVCRbnMK5tBR4i8oPxBKBicrji9xMtL2Jc65KY MbTH5/SZvRbj+zbFud0rMG3pERgSCygjkUofvxlFAMKh05Zi5qhetCKlyZ9/LtcI5gy7exkLl23G s8AHqN5xJH5ZPBVqAo1a3JCz4vmdbwq4Pg7IJGiovKZBS0X4vUusAD4QqYZOGE4E9epe7jShJWP/ 5qVYsusobMs2xYVz+/i7K1i4ZOPH4+MtSoslRxZPG4jNewMQEx2Mnn6tYSEV7jPBpDWb0LwCsZLS qIbRArpqYi+ccy1PZfcVZi/dhjPnDqKyM0EUebuT20ScRSG/X6WYOWtvhWJ4z07YdOENGjaqifin BzB/8RLMWL0Z/dt9RXgLVWZpGdimTk4iLUU87D4ZrBYtSvcvH8eiTbvx/MF9dBy+Bv7TWcaHh56w eKSxsGiX1m0QqVkalctaY9GUtbj3NAzLjz2Gh7Melk3sq5h+5WzoclccKCNunGmRz9G3Ywfsux2F xo1rI/bZz5jw3XTMWrGG2EJN8S4kAC1ad8er0DesAqCFWl+dlhSmb0Yuw+RRitG/xY018slNDBsw Fs8jEqhoOCP0yXhoGxnC2kwHq386gLMB51DOXh3TJwzAuoOPUadedbx4tBmLN27HqcP7UNowA3tW zcXiA1fgYGGNhFQWM9bKQEyCEffMWozqUovP5/D51c+eT12yGiN6t6DdOlsBfQmAqJGD66d34YcZ ixGZogln4ryFRoRj1rzNOHr2EGqWtqIVMBlzx/TC9OUnWIpEj7Xg1LknYqFnXxILl/7OGmLJ6NKy xefrc/QhPFjoXMITk9e+AH9WdjYjVhv3kBz6nTy0j6VcsrGQzxTuLyX8Udj1y1f/FaigsrzU0B4d sfbYfXhVrID4Nyvxiopped8hOMNSRzlpLOD9D93/A9pVQzL3j9z9Kda/mCXLfhVcfgjZHvH4FubN WYIbd5/jqzq18CDgBox4uQpJ0YDF+TvwcY3F8K5+cuXTgPbVkMFyYAMU0Pfcb8tYS+85enTwk7v/ h4n9//gm+2d1Cnn9X7iDNqViMOKbDlhz5CEM9WkVo9FCnwpxVd8+Er5YWgzlVys58kvV/vi7tKJ8 frfwypOwX/Dw1qBl6ejeVRj2/hLLCsRh52/n0XLiMtaFAq5u+QmTVxzG/J0nMYrAXuqZCay91AuT hgyiBaox3PCGB91N9N1yCuO7NmSV8adYMG0OypSUFXk9stkfP/56DUt/O4ohHWohJz0By6YPxYjR g1G1dm20LM8DgO6JT5sATtMytMGizT/jRuUaKMNinVWL26BSr8HY8tN6eLUZi+lDu+DqjrmYtFz+ +Bo3qYcqnk2w47fS6FK3DA5de4jFa7ajW+uyDL5+CQsnWr8UlG4Q4xFYIZasgabofVuXMrjEshly 6TN4AOuiPaUbZBEO792LB1p22LV7E9zs9PHL8qkYNW4wLWG10K1eSQlVV1ETpm2PFt1wtFUnHhY+ eBmf+MdPhTvh6jb/Aq+PAPhU3G86Kvh0w7e+W3AyrRzG92uDNbMGQ8O9Db5ftBhHzlRHjyk/wpb1 /0yafY2jLTp8Mj5miORooU33MSjmfg6Dx/2M6dNnw8FMm3YNTbg6G0uKkSgBlE6U7IqNB+HQ1jnQ eBeAGnUa4vdTT1C9Xy3+RoHyIiynfLvg3w/k9+tgx5rpWH7wKX49fQ4dG5RFZmIUxnRpjmEDR7Iu 1ikUM9IkynE+KiwrIKQAH23KEjLNOnZDH98mSCTWS14Tt9qokEAcZS25Lcd2oGuTCgh7dgvTflyG Elb6dG9qKp+fkvUTLjFtWsHWL5qKX69H49fjJ4g87470hAjMGNGeFqbBqFP3BjydyuP4mXP4ZfxQ bH6th1/XzeWFKZXo2lZKFcdM4XKhJW14q4OYfTcbl4+sxRjfWohwbo9tM9qhgVd93KLVsryzG/qN moba7WJgbm2FhOA76NBtGM4/DIOHtzvGzJmLfburQs25FnZt/BF2hmlYMf1bfD+oD6rXvY/xCxfy eaXPnv/A8jfVagWgVikzBfTlZSxTHd36j8WpIwcQoN4AR7bPh3rUY7TgJW7f+UDU9bDHrQPrMXnx Scxcsxc9fMrh+dVdvDCMhDcvKZ193PHq5gH562NNEFFl0fSF5s88/teXS7+Lj8Lg2aBEgfmjsOun un9Wk6AnehvLvqw9HIyVu86iT5sqiA99zFI1rfGUxYBl7Z+7/1t4X4RG2DOF6y9uSrsLIT9EXG/p Jl2ws4w7GrpXxc17r7Fqy1G09nLA81fBKOVhid+WDlEon3ybncPJNTPl05dyRocawkZ/5fu/As+W nWU85Pbv4m6BTfP6Yem+EKz+/Th8q5XAk4u/4WtW1MgQYT+c/1tF8kvV/sinkvN3/ewLKE9iaCJ6 XhS+jWENqwfYe/AUvDuPw7LvevCIy8YjurxEBftTW5fiEuvCqdG/GRb0nLEKaXj+NgqVKpSAb7tm WDikPVZMtYezuTlKl/OCtx1RZXm8Hb9yDcW8u6IfFacMugjUNI3Qf/g4LPTfg7N3X8Onkj1dQfIP JxEnZOZYASMHt8OQjRsRPG8gYi/9jouvdXHkt150BwKPrj9iP/LH9yI8Fl9RiROZQ9laRhgwaR2G d2sgxdtUrMLDgQeAIrdV3qIxUkLh+yLg/uA1xfR5ER6Dr6zpLzaxwsipP6EWCy8LNWnkxFk49PMO nDkZgG4NSwtMaqU8Ilx3Orr0KxO9WOOPSu9qDL7OweMbjwu2PrY8nJUKfyKlq+mhQ+c22DT2MF69 foxJE1dCq0E2qlnUw3sDL7Sp7sZgUcZyyRufcGlxXUqxFqCxbjz55TBqNmiE4mYytpVAVUVWJX+X xrIQTVq3hx2LREPfA3WredGlo9plV7jvC5pn4XrgGwZuZGHbisnY6k+FnRaVoNdxLGgdh4joBJQQ 6PMF152kuYrSHXosHyHiUz7MbBWxP5bFy6Fd8+oY2qEOpjqw7Iy5JcpXqAIBnJyVowEXZfRTlp4l gg1p1bt08wa8u/WSFCcBsKfJgt/Dx07Bop1tWCPvLSrS8iwQsW1MjVmFXh8lSjpBnxPOYGq0qr1B ycF5EW3f0hg2RKK3KuYGQztXWFnboYQj67LRipMS+xrzZjPIlMpKSdcSSI1jHTa+o5UL7SDK7Zjz 9+PXLEBFN6Jik16TZ67Ari01cOrqc7r0jRU+P33tOeq5VWdpI3W59BW0l0re6FuhVauulE2USaZu qFzJkyjzMhvhnRNX4d6kG0Z/6y3xoo3PYHRqfxzRDCcQzaKYovVRXHA4bzMXjj8F/6vRZSiffpoC PV/V/lKRvleY9VPZv6jMkJ6I81duoHHPPhjYvjohOtJhTn7fuPcQbj2nlZHXKAHR8E/d/+FRMfAq UV7B/hQZ4hlfQH6I84WuTUNLTGSJnu6NK/DCmIXKVjZc/RRcfRwmXz5lJOBdRAQuXrkll74BL2nR S4/HxRvXle7/SsXMFPdPneDU+Uto1bcP+vtUl1zU9doPRa8D+3GH8VRCfFvmZ39wX2mybJZ2bqzy H9Uh/i7NKB/f/QLKEwUIYzayMrXRsuNELJvSHvNHtMPEn/bh5tORqFVaLGA6D393DBo8EiZaRL9l EKeRISU7BbtzaVvWxotHTb/OaNF/BEKDXyMx6j02sJr2yFgN3Ni1GFYkWlJMJEtcUG4xvkS0hNj3 SKHiYsFgUdF0GBQrtHgtUWGcPlwROqtLhhIFg1OJidOemu6PC2mN2HkKr/atQcU2PVGljCl/JURt OnQVjM/J1ZbHI5UMKnw8uWDpIApQSPGgUl20/ATcCuGr6H0xRtG/Qvq40arGLKYcHkThIRH8rac0 t0xmXkWw7lpJPbGEzDpRMn/hmhOKk3QQUHESh43k+ZJoJ5t/wdZHDee3LeEhlqWQDqI8jGu1ZnDX WoxlqxfAqUIZZIVdxbIFgfCqVhV2Zros30GXlYLxiVT3DK5fEm+ZaVmRSJSwSmRsK+aRmZ3Ow40H KV1bH8U+M45AR09Poo2qVvDvC/qp0U2TDhO3rzCYCr1WVpIUoyf4m09Qys6ICp5yxVYkXuiQD9TJ aZqch6jLJ5R5XdJEBJ0L15wsGJ3xVYxx0PyAv0VMVzYvDp1YeX3AMGu85v6JjgrFuhWLEatmgC3L pkuCVBH9ROC9Mv1XxFTosO/Y6EgpAUObwUmCorHR73lxUGNwPvkql/BSYgf5S8g3Mff8Nf6S7+Qp hBkcjKAHg/LovlNjbTxjXF0/C6uPBeHo8VNoVNkViUG34UMrspokCwS+kagIkIHgsBignK3Uc+z7 94jh3wSMiqrnIvRAxn6f01dY/YTrXYNJD2IdpMYtQ1Eu23NsViXMEXTwIh6GxKGcE93EUS9x79Zj FKMrQuyuHFpHla2PWpbyrNeC86c+e1fHxXWLsPp4MI4e+5x+Yr0EZlhB+UNa6UKsn9L+uXag5dSA pW5CIiMgQpd1cpMWbO2Lo4p+soRiLoKN/6n730Xs//gE+euvboidy6Yx6apw8kNDyAzypw7p4Gwt 89aIWEMRyqLHyueK5ZMGPBzMGG+rLZe+lQ2YXMW9LGiueP/LzmO5/YtQBCEsuG9iYmMkMSHkl7hw RjB2Vd1WS0qEEl4jVftDjWdo1It7+HnzTliXbYRO7WpRRCg+d/Inewr3q0IrTwJ7JiTwEULfhCE5 7QrjARpi5JSFOHDYC90GDMOedUvxVavGyF75K45cuYtxjK5XT47Eob3bcehcIKau+AmuOW8xsVdf NJ+2QoptMtBIwN1T23AlgYHBnJ9vW19M29Qf/cfOwZRBXZATF4JJfb5BjLUnWtVyZexHMp49fsrA 2yyEvg1j4d67uHP3Hl0WanApXYqHewZMS1TGoC7e+PGHHshKUMe6U7140LFKPA+p6i0bIUvR+Jat giYLb75+fl8q5Poi4CLuexGLR0MfTs72f2TtKVoGcShEhwYh9NVDue8zTlxp/1OWrYGFKTdHdiIW juoO00x/1PE0wpJJI/Eg2hZzfGrSa5qIJw8D5c7f1c0FalmJuPPgAQ+SbNLnHZ7hNa4F3CNUQRZK eZZj/96K5690fYQ7TLlyIlynRtYlULuqC2Ys2YYZq/Yi8ew0zP31DOZvnAk9jSwkJCXi0X1548tk HExpGBswbk5XH2nv7mPLloPo3bw0ju7ZibPXX2LKspVwzApFePg7pL94gpiUKkgPf4W3YWFIeXgN 75MqkZ9EBpTyjVKw719FdGoVtGnUECu3T8blez0woENzJL0Pwt4d63H+UTqLeS6EvbYGb1gKBkCN I5O368cPHzL2LBHhb98i9f4l3Lurx3f0WSrHGdmJ7/Hw3hse1ywmHfkOOUH3cJv8nU3+LuPpjtjw J+jetz/30kb0Z1kMzfi3OLlpHeJzgVBF14rmN2nxcpQVNdjkue/oNsrWNIRfO8Zz9Z+C72aVx+Cu LZEQ9hi9e4+CFd3RdT2dWN09ji6CIASGhCPkhTou8SZrTMli51ASFuZ6CjPuhJKUHBeBF2HhCL0f idcsaKuek47A1/cRGV8HaXGky9V7MGBMnRr3SUZyMp4wKHvVrPG4EBSOOgwOjyxrS9cCL0xJ0RjZ 0xdZC/wZx5PCsICRiLQsizZ1SnNurxU+96lTBsmxEXj0LFQufd3cXRHOoPYw8lbag2vkr8oSf4VT 3qU+uMJxVkItKq4uq7aiQe1q8GvVCHdOH8e1J88xtJ2mpMjFvH2sdH3yI8ILyp+x6VWpHPHCIcq2 yKFfhLslzMwMCsQfX2L9VPU/Y81adPPrgtXdR2HQBE+M6tGGSTMBmDBiLOI82+Pc1oWICHnyj93/ y2gEyIlQsD9FNigXv3WDhlixrWDyQyg3b4JeIvjRHbyLjUcAM9jK67ixaLcJnJ1seH7qwKehIvmU gRUbl+Hrdp2xqsdoOfT1w5WdC9ChfWds7DdZwf53QFjwK7x6IK9/7k19I4aeNELvscswyrM0evvU xVHGqa3ffxMNu1RC5PtEpDOmuAfl1xQF8ktkzOtqq2Gl/wzMWr2bFFuBMs+eomoxWdjG/1crnPIk QRUkYMH4QTh/+xkZ4Rl+XOmGFdP6Yt3qFWjqOxij567EodXT8MvKSEyaNQV718yRMr3UWaunWfu+ sGVQlBoLFtpZmtM3Ohl7Vs6SYqgMrJwxa84QBgJmonyr3ti5Pg4TZ/nD+9eVQorCxK4Sftu1AuUd TRD/NhDjv+mMW5HJvIESlA9P0fLCr4y5qMBq8NtR3FSbQbHq6DxoCBZubIpiPsPRpJIzNV6RxpkF z0Y98MuK95j846fj6wcnS0NcXDMPQxZuohVLD69+mYHzO+fCxL429h9cB0cTCm4lJ7OIKbq0czWG L9os/33tDCX9kz4mOpJZWsPAFC1b1+OhOBVLgyJgSFPnll3zGDDtgMS3TxTO/+C5XTCLfcZDtTPe sOK9cDOm5QSjbeuzLLhsh60Hj6BGk16cf5Sc+ateHz0CUyoHu2bcEl13zZo0xooDd1HTuy6SUhvA 4ngig6s9SDs1KaC+f5ev5Y5vC8dXtbg2LEtUwrTR32Da9IHYslAbOcRDatS8B/lHC1vnLMatpxFQ C5mLCx3rI3TPCrqTooDgJTjZuTU6VHGSrI+KmoDEKPD3u7RBx29GYWVkNGZOG4R1c8xoSUuBjpET 2n7bH0a0zCizToqYpQQx/86y+aeL7K9ns3Fhlz/MyrXBmd+XI/7ZRXTpPBLJrE4vsitzgjag1dlt 5O+KvIDshIG+ISzJp/Mnj6Zi8QMDaFNZpLci5jCmR51FWzOoGMmfX3dmteoohRMQmFnNeo/Ghvgk zFr0HXau9meyZAxsvRpi1/JFLIitg8jnt/Bt+68RFJsk3SK7tWvNy6Y+vvf/DUPalyfciPxkCg3u jUen9mLz+QAkJuZg1c8HYe1Enly3Beced4aDgzk2LliKTkemw+foFca5NGJWrAbj/Gqjfq2KWDdx KIqZ7UeP2prQNzWHT4PK2DRrBILevYNz2TrYvX4RyjoYMqMvS+HzCkwoeHb5GGuFjfqcvmaVcOLC VuzZsAq3XydCnbGJF3r4kL9WyvjrlT8ONGuMb5pXwu9HzmLR4lV4GfYG9ToNgO3lXVQqZbFpmnoG StdHFa5lYfjzRNe2aDZgJFoduyaXfk7Gu9GvvVeB+ONLrJ+q/o1oxizbdRB+iY7GlNlTcGQT+Y8Z yG5VGmPud/1gzOSAxWuW/GP3v6Eurzy6itdfFI6u22M4VkYVRH7Q40CL6b6f5mLOpv1I0dfCpjnD sGOxJopV8sPeLcx0Z0iEsu8Ly1AtxlP+EhPzOX3HfgtNKt5Neo3CBl5kPt///nAy1cKyeXMU9q9N mdV1wGSEvX6PmTPHYsdyU5jZ2KNRrWq4f3of1u70xYBmZsr3BwWoOCfcvSrCzPQUHDyIdWdEufX/ pzfJ9nWhtDaOPotxQBNX78FYKWOEmDI6RlL6csl6X+NWYAOk032SzXTGjn3HoXGbrngbGceYJ7q/ LK1hZW4s4SRlaDhjy+UbzNjURlJcDMOXslnFnRXaTQ2QnMxUfJr9/L4ZC+/WXREeFYscZvTYORSH qSEZk6ZJLdb9+enwaamqtshEE+MQgcxqajowM9KSKTfZqbAqUwcXbt+BnqUDrS4yf6swwKdxgTv1 G4cmvvLH14C37Et+AyUXgLCkCL+tmoYuzA1pUVBh0hBYM97fjMGlDoPkv89xZjE2QlH/osq6Vrpw 4+iiF2Oe/DwMEUnrhJaJBUz1taVUeE0TJfPXZ7SZXlkqkRcY1yGjj4h0EJg4anRXmDKGI4WxQcrm r2p9VIGgijX2ajMAFyr6ohiro+f0GovzzYaiuJWeVCzXyKG80vEJt5Oauh6GzvwJbftPkoLjTS0s YG1hKinL3UbNQvsh06V1NzYxQ+awGfAZOEWKPzFihXRlipPEAWJzFvj7JsQ70sC34xagddchTJNP kdyJloTAMKdikYezolBxo/D8aP4ivob8JfEY45v01dKgx4zEUxcuS0qYFH8j9p3E3+RB4ZnR8cLV a3fpvtBAPM3hYifaO5eAqYEm64qlSanqCufHtVEVtJyerY3eY+ai1dcDEBUrUvM14ViyJAwJUCrK cRjZy9YvkyZ54bIT6yUskkZmZqSN4pIQmVx7l3qdGVPVSiqvo8WYLg11X/QaPI3raIoG2y5jUqoa LBgkvuPIebwICWNatT5KuZRgwma8ZMk1sbSDOi3Dmjr6mMJ4D0/jLITTgmVkaQMDHXWufTb0qVwq ei7qN9qVb0b6Vv+cvuq6MGOsY7cRs9BuEPmLdBfjyhxGZY4HgsRf/Leggb1bZVoZ18mWOSkMDTzm wLKGKXdaDkwdK6lcH2VyuLD8qaPvjJ3HLsihXxwVcDMJDwuK+F8JfxR+/fLXf3KaGrpxTzfr0AeR MdxfDONwItyKjgZL09A11Gv0bHQcOuMfuv95PjlUVLr+6jwjCyY/RHY5KP8o7wZMpDufEcaMgRSZ rsL1b8D9Kf53BnOKlX0/JUNDIX2TeQHI4vjk7n8miQn6K+tfVPrI0bHGhOXb0G1kEGMYM2Fl58Cx Qdq/OjQK6HOcV1TIL5GU1an3GNTjhVnX2IyXUhGy8f+rPRVOeZIOHmZKmVr+EbMgFk+4AERgn5G1 rUChlISpUHIMiQ9TxspBOqxEHEJe0JcalRI7JwfpY2o2VjJhT6VBvCMdzFJ9G0IRmNnAlcJS/E4E gkvPRSOGk7m1veSf/bgxaJU35zyHiTgkinuUYwwCb/hcxD9a7vcVjU/HwAQOxgz6/bDxnQx+QyXG IMeqY2DM980Uv6+ofxGcy7TOTSvm4Oi1YAQO7YbjpZzRZuB3aGmr8WcdKVXzZzC2lb29HAebqMDO oEwV81e5Psokv0w7YViJPsqUIa4XhbGavgXKuDHFXoCciuc8jJWPT7AA8WioHNs7O0vzkPgnN+bM kFYHE8mXzqgVzkebCpRxblC8+Hd+0K0L9X2CfyanZsHcjgq/gwxMUeyDfAc1Kpq/qCYvgukJomlv z/3xWcvlb15G7KiUCmLa2FqLDSFVaU8W8VK56P7K5qdy+XLnZ2pTjHOU/TqL+ztZBCHmrp+lHP6S KrErvVxQmdfUha2IbBfflLCr1GFMhVesm66uJWULaUAFWV3XEO7uBA4lbYX1VJ1xMPYORsimFWzZ rO9xLpjp7N07wsXRDoPHToa1JNg5/8xErFDwPE9+aCihr4gpM+De/ZCftD/5dw73X0zwPQwbMg5x 2Zp4de8WQlId8B0zi0W2rcApUrU+qteg4PyfSfppyKGfnXDXco0kHC4l+0vx2Aq3fvnvn+cHZaEJ ceLMbWX7SwDA5kE8GFABNP4H739V6y8K/xZUfojzV08oE2YfxxiKUk/i4i2JX1XflwBfFdBXJBUo 2v+psv2vqv9sxnSl0EDgWKKEFOWRTX1AvGlrR5gZISM4BzvC8CiTX+JhBq1Pto7UH3jxz5ubqn3z dz4vtPIkHVgkwGdNEnIfpoiLg5ouBHkXUf5WgFEqb2LDMNhc7kVW9kxlE1lZCovfKh5fNhcrXUXQ r7K+8/e+nP4F4/IA1TA0w7ejRyM9MZ43aTIbBYewHP3ZVMz/s7WQN9rCro+K1aNwTqWCIW1mgQ79 YU2jfI1PCAEepHL4RKqj+GH3/LYS5AaFAy3U93MP9QKV3lQxf8EDoqafkoGTLqr5X9H8VO4badFk Sovcls/1k8t1n81NWNVkvxSKR16ThOyHm18UFRVxWlx7PQt7jOT+SI6P5b6Q8XHe/hCCVtlz2dSU 01eq1fchg33CX2pqvOkzDKFsKTe8Znp36Yq16AbsThBNS14WZByRn/VRtQ6F4U959PvUXVgQ/vic dvlfv7/Uv5L99U/f/xKNVO3PQsgPcVFTKe9UfT+fz+XxaH76F7wlvAwfiekP/qGSPnn7VKWeoGoX fbnnX0R5+nLDKfrSRxQQDE2Ta/eBk9D9I65LR1KacLsV0auIAv+7FBCHEtNEMXDiko+IIJWlySt7 our5FyCfuJlrM3RgvP/iP7/2F8oDfYEhFH2iiAJFFPgPU6BIefoPEVxkpsjSsWXlKoTpOT9NxCeJ mApZI2gh42BEGrga4QH+Sito/3+lj//m34qUffVcXKG/sn7/zTT5R8xNcjl/XiD5j3uFquf5mIQo QyLcDTm0dMnftbmujRTVuGL56O7/8ScMQCZ8SQ7dLAK+4O9qeXtJWCPy41L/u8bxv/JdmewXoQ75 P3f+V2hTmHl+QeWJFZMZ8K2ZG2simc5VAKwVZuD/tncFFopwfaiL6vOEVBCBdB81HsyihpBA7VUU JqJO90DQswcM0jeFk4Ml3Vj5U8BEPyr7LwRBNRkgLRQLyXyeG8QnguuFspgXA1eIz6t4VWBwif4/ /BndmByLoppqf3ksnJsGkxaEsFcn5DHBBegW+stfKXrhX0oBcdhr8ADKYH3GfAG7/SvnSbhLZkE/ v3sbWuYOsLc2/nL75xN6iDg86T/uKSEf8tOEAqCtrSm5r/N578zPZ/9rfqOMPjJ6a1CGCdDa/5op /79P5AspTwIsj5W53wYR7yWUaTOGcCVcvBnTCWVBmf/L/iUqRerp2Ljwe/x+9imz3bTg03UEenWq R0Xpz5gOEcQeTGwiUwbZ67Ea6adqkRA0mpmx+L5nTbxy6o0z25cwY1A5uJ6Mu/LXf0E5UVjGYt9H SkjfRqYWnKvokqjQKYlITEhkLIgRASOVp8MXtG/Ze1l4/y6CmReaUmCjCFDWYuaVrZ018a1Y87Cw 7k0Bx5EWjyXjR+H0iygG/+qj68Cp6Ni0DBH18yf4Cze/orf/vygglCY11qibN2I4rr/XwrT5iyXo A1Wo6f9f4y1MvwKsUo3AuwO9mQbeaQ62LhvHBOXPLXqF6UPEGWixbM9Ps4gWf/0V6rftgeG9/Ri3 pipej9cVwsqEhcbA2s6GVRH+l88TeSugiD60JDKTbcuqGfj16F10HzyrSG4VioE/fvmLKE8CCfns tmUYMH46YtRYJTohDpbOlfDTtk2o7mrF4423Bt7YRdqugPOXNWbDULHKUxKEcqAnQCv+aCJbhs/z aVz59H1R2CNVZHPxfTVmm+npCIRmWUkPNSKqCmRT0UQavbJU7Q/fzRuaGFLeLERGlUgLFd/LYKxF BjPChCIpmgikF9lSosSCp1cd5Ji5YO3Sxbh4LRB9vm4oAYCKJhCjU2Me4dsW7THpwAU0cLWkMkJF QGQlSASgxUqglOuYonXH/ogyq8liwH8e3Nq5/YvAVoEbJDkH+Z6oeC1eV9W/GENB6C9uOxqZ8Zg1 xAc/n3yODuMWY+X3PZGTFIkRHZtj75UXBEebjznj+0gZEjpMpf2DhowJEdlQoikfv2IGkG6ucW+Y 1dQSx55Fcl11Wd2ef6OQrlS3NUt6zCIcgq6U0iroIkPplrUc9i/QuwVH6nK9hM4ngow1RTEtNoH/ JVK4Bc/mMBvLq0ETGLmHY7n/AlwJjESXFsz8kggnSiMIV6qsCWgCkR2nTQVYNFFXT7hAFIl7UVxV 9wO6SGMTn5WN8o+MUsXjl/UrEOy1iYH0Yfsw9uevPhcWAVFkO68JWutwf4pZZYtYI+EKkOaXxvmR wxTSN3/j+2jgH/wjv/T5dH5/jL8w6yM2j7YBynh5YvGIH/F++gJaP7i2H/JHLnuqWh9F8xN//3CO 6bQ8a7KPvNypPKgLVd//8LlYH0qMXNiIDOn7gjMkWccyNPq5aP4yeSXBpRNGhSjdptbw6zcUul4V PrIIfZHxifJLlMHcbajRsAWOHxqNswR0HE7QZCYUK81aFiWJol9fRMu2s7H/3H64WuvScp8lWZfz zgchH3Vz0celnSP2t9i/+Tw/PqWvbL2ES1gW5KyQv/Kxfrxx/bHHP11fEUStrUOsw1wG+avyQ7ym mD4CVkcDZT09MXfhSlx/Hke5pcXziXLwk5g8VfyljH//V58VWnnSZBpu8LUD6NB1GGoPm40F3/Og jHqFwV93RPsO/XD94u/IfvMATwjs6ODgiNDAWyzbEoFa3q1Rt7ILzbBMOxalNLRycO30IZw4cxnp epYsGNwCNSsytZ2HkXLvlFAsdFijLoPvH8b5a3cAAwvUr++NKuVLSdlZSbEhOMP6elq6xgTYq4b0 0Fs4cuw0Mo2LoVW75rAh6IQ837u4eabEBOHC3ZeMBdDGkwe3kWLgjPoetji25xBK1G6Jto0rszbe GUTEAy7u5VmfS51FRM8ggwKrlIsHnOwtpLJ71Zv5oSa5LPD6ecT8UVtOxnYZBD6MJQhcPP+LJlha nLUG6ZIjq9AuIpwoeN6/fISAx6/hXMUPtYlxIoBGxcHP+u14eO003iVqwNXTg+i7TxDCwTi7uMHL k/TltzOy1JX2r87NXRD6SwG72iboNXAElu3qho0r12PK8J7Ifngem47dgqZtTfTs0orGoUypvM65 65dxI+AhMnXN0KqNH7xcrKVahcrHT5wRBQwg0u/VDGwxd/0ORA/oBosG4zC9W3W8uHcB/foPwAwb d6yfT3wtWsU0Wfn+9IHdOH35LvQNHNG8fRtUdHdEamIcbpy5gAQ1fXiUcUEQUauj4tNR0q0cPF35 nMpxNssPeft1R2PS+saZw5SFMlEnQWqkJ+P8BYFxRMsXJbVn1a+Q/Oo+UbPfU8HNhn0xT5Qqbv6H O/NDQSNiaWKJXn33eZgEdvfw1k0YF6sIdzt1/H74PGo17QLvGq5SeQMtBeMXyrsQfMkxYfht/0E8 eBEJ9/LlYZiTAvca3iwPw8sM31f83ETi/Zh3Ibhx5QICHjyHjpkDfNr5wdXGEOkCY4vfF/L2PtG9 X7+Ng3NJN+hkRuM1K9sXc/WCS0kbKtFJcumrenwmcmkjKRX5oU9NVwm2Qu74bY2QmpxQ4PUR66mm pYfWfp2wZu56ZKbE4dblx3gbm4YSroI/7CU4CnXKQGXro+z8FjImPuQpTj18BV0jM1SqUQ1vb57H kbNXYOzojrbNG8HYUJ9WZ/n0FfFemlQuNFks/fqFi3gbk4pSLNKqkx2NF68i4FTMHakRL1hnTwse BBk0Vo/HsVMBxNQz4O/Kw86aEBfk49eP7+DxyzCpUHPxYi5SRqzE44UcXwqrP6jzcqhNdPzbl68g JCoR5atVh1/9Wtgblb/jR2RIx0XHIZq4QFHEMbPWphLI4RkYEOSMW1FT1OtMjcfpkydw7XYg9Imn Ub9BM1Rwk62PUv1JYKdRWdXKSsDJA0dx8eZDOJYqx3cdkZSjhyoV3KWLsaL9IcoJKVu/dq2aIPvt M5x68PLz9XXyQBvvmnhy4TyL5P51+ZEnS5TRh8WFULmBL2p+tZaW8jDs274Bd0Pi0aJNR8pfK54P LEkkzV++fFRJv/9VzUko1IWbO11CLK+xdTPRt0s2xuo538NGjweqnRXWbVkJt8p+2HPuCdzjz6Hv mCksLUEwuWJEe2YZh1nTlmLDyVPoVJOAdyw+OHPUN5i3+RzqNPSGevwh+M+fhXE/rsHYvr7ULhSb dYVlSD0lSirrsnDvNdRntfOcmGeYPH4yxvy4GFOGdUEy4d9XzP8RV6/fg1uNOoi8dxtJRpl4G5yK BItzGNe2Aq0gnyeZi0MpKfwhpg4bgpvPI4gx5ILgULreCOZna22O6FXrYX7+Ip7tX4Mx8/djzKpT mOBnj83LF+LwmSvoMmYlFk+nMsENLOoM6esIUDOy8x9pcgJ2PocuvalY9ss+PIiJxpju7Qn+qMc0 bR0MYxHdr33dJctR2N3LWLhsM54FPkB1Vmv/ZfFUqIlbKg/0M7tXYPrSIzAkVkZGYqJkBYiKicdQ 0njmqF48xFnfT27/knRkCFbB6S8wbqwJemZbxhM5qW9w4kogcq6choObJys+usPWxpp1p9KxfuEE zNtwEFVr10fsi4fw99+M308dQsPS+qrHz5xDEWv00TVS0JDKSSYVA3uWoLEws0SJ0pVQ3MVV+q/h zysRyOrrhJKkJTQEw3uwxMiFN0Q1r4n4pwcwf/ESzFyzBQNalMaeVXOx+MAVOFhYIyGVxUaJWhyT YISpS1ZjRO8WEsirAIPTyUkkoGrmH7dEYXnLzkgk34/BjtP3ye8NsfvoPoTx8Os3aCxC04yx5ufj KCOsr2mfA7qJG33kk5sYNmAsnkckUBFxRuiT8azpZghrMx2s/ukAzt6+AHfjOBaj7vDZ+Ges3owB 7aohOfI5urRug0jN0qhc1hqLpqzFvadhWH70ITyKWSH+3TPFz50tpDksnjAA6w4+Rp16VD4fbcbi jdtx8uAelObhmpOdjLljemH68hMyhZ7FejPpztKzL4mFS3fDxTqL4/Mr2PiczP7A6/lUFuWLPgHn UM5eHdPljP/U4f0orpdU4PWRxkMFShwgKSnxGOTTFGm08OmTP96GZ2O6/wpaTlogI5r81fNz/hLr 07/dV7wcKZZfAvQ04vEtzJuzBDfuPsdXdWrhQcANGFF5CUnRgMX5O/BxjcXwrnLou2ozBvpVR2LY cwzu0wm/XnwBG3PW1ovPZPHmJEp3XixmbcCzA7T+7ruKNbzQtC/+HksXzGBpo6cY7b8f0/vVlC4n 9y8fx6JNu/H8wX10HL4G/tO7S7AuhR3fAL9qyIwJxYi+VECPPIShPq1qNDXpU+Gs6ttHeUCHiHOi 0rV42kBs3huAmOhg9PRrzXqmwi5ngklrNqG5lwOS3z1H344dsO92FBo3ro3YZz9jwnfTMWvFGgzq 6q2U/uJikBVHjLAeHbH22H14VayA+Dcr8YoXg/K+QxgesRQGVDgV7Q93exM8V7J+1lfuwz38Ntd3 0WfrG5qmDeODB3FkwThsPnbnL8sPIbtV0qcCsZRY3FszMw6rJvbCOdfyNCa8wuyl23Dm3EFUKWZO fgktMP8WTn/4d79dOOWJB1g263I9fR3IshttYUYg7BRh5uSBZlOiHGqV0MGjmy8xfNpgtDm6H/vu 6eDooS1wyIlAJ++mOLL/HL6u44oru3/C5BWHMX/nSYwisJw6S75MG9kLk4YMQuMm9VHJ2VBhDRsR RHjwJ3/8+Os1LP3tKIZ0qMVK3AlYNn0oRowezMO6Flp7NcWO30qjS90yOHTtIeH8t6Nb67IMvn4J C6dSdM/Ij10RQIB2Xm0wadBRdJl/D6euHMbSUW1wIKoYLm2ZiW71K+LYjSjM+34+ft11HAnEdNE2 ccSG33djQNdOjPnJBfFUyCPEt2LX9Xx6wra4O74jyF7f6TNRycGEriZ1FCvlIAGMZtNF59GiG462 6sTD3Acv4xNlXxRAner66Dt2AY7s3YsHWnbYtXsT3Oz08cvyqRg1bjAtbbXQrV5JCZVbXhNB/le3 +ReY/uLWmhwfDdOS9dHJNQ171syFVsIzDB/UGWt/eyiZzrNZNqBz/zHwqO0HU0tLgMLqm87dceji EzT0qK98/JVroWv9EkhI5GEgAh9zJyHhX4mCrVRAstiHFpG4962ZiJjrJSkM3mLH2deYsHgGdFkU bevq6Vh+8Cl+PX0OHRuURWZiFMZ0aY6hrL3Y7Nl5fD9/Pvbtrgw151rYtfFH2BmmYcX0b/EDy5tU qxWAWqXM5OKoCIuHjpEdy4psQSBLhtiXa4oylgZwbdkStuaTULfnTHTvWE6G4CynieQAcdMf3uog Zt/NxuUjazHGtxYinNtj24x2aODVAA/DovDst3lyxz9s4Ei08L4IjbBnOHrjKbYc24GuTSog7Nkt TPtxGUpYG0rWyaiQQIXPhasyh6VU+o2ahtrtYgg2a4WE4Dvo0G0YLjx+C08Hd9zasx6TF5+ksrkX PXzK4fnVXejSZSS8O45CZx8PbJvTt8DjU+YyV02f+rj18i3KO7vJHf/5h6Hw8HYv8PrkLZnQ05NY nsKoSjvs+/lHOBilY9X0Adyv/Sn37iFk5yyF829a/xSKGfGKowANWcQ9lm7SBTsZI9rQvSpu3nuN VVuOUmY5MH40GKU8LPHb0iHyvz9oFNo0O4nfZ43F1ovvsXbXCfhWLYnru9aj28Af0Pa7efi6ay1E 15iB3482l9z4hkS73r3nd3Tr1Ja1D2VyT2BRNWWJjmYdu6GPbxMkEqsqrxVufCPh2+wsTiyfhKX7 QrD69+PwrVYCTy7+hq9ZqD1DFIBW1rjHWV8BbbqPQTH3cxg87mdMnz4bDmbavE5pwpWldTS4v39e NBW/Xo/Gr8dPoGNdd6QnRGDGiPYYM2wwLwM3UNZWX2Gcmg7rk2yYNwNrDwdj5a6z6NOmCuJ56era pjWeshi5aNkaBgr3h4etgdL1c3AygIVHJ+wsVVru+jqXKYtmG37GPcq5vyo/hPxXTh9Z7TfWxaCF KRsVGw/Coa1zoPEuADXqNOTlNRDV+9XBjjXy5aOQL6r499+t/hRu9IVTnqS+KVnEoSaqoX84FuFq YdkTEXskEMDVWEG6WUsfuPOmCRijTJ2qiMtFQH184zHf1cCprUtx6eeFNJVrIyzoOWNR0vAiPIa1 zcgEEibpp41vsZDo8SvXUMy7K/pRcRJuIDVNI/RnhfuF/ntw9m4QfFjHTo9lFrJZSmbApHW8JTeQ MgErVrGSgP9UBYDq6tBtYWUHK1sTlLN2RLiRA83dNrArVpJlImiJYOFX8X1ZFAizv3QMYGBihMR8 xDUKmVqCVhtHcyqcjF2qUrM+apcwlSaaKQoX5wo44brTYayCtjBRf+L209Ri5XsTK4xk+ZZaXq4S YOTIibNw6OcdOHMyAN0aluao5CtPmqy+XXD6i6VXR1I0i/DGJKFNu/aYUa817Cp0wli6NJa8OkA8 KoIbEtxz45wZWHnwMhxKuUArNQaROSJ2RMZ+ysZ/6dJjlE88jvZD51FRFE5MWROKi035tji83R96 jFJXYxp5RlwSXt87hgNnHqLL0A34vldz/jAF1wLfMDAgC9tWTMZW/yxawrQQ9DoOBulxiIiOhx19 UubWdhi/ZgEqutlKnDZ55grs2lIDp689Rz236gpBUkXshalDOUyf2BftRq3CXSrtUYfW4GG2MzYO 7QkNKr7KwsqFOqhHBdbW0pguX1NYFXODoZ0rrDie4k5GdFun4m6gSMKQP/7wqBh4lSiPds2rY2iH OpjqwLIw5pYoX6EKbA256hyfZfFyCp/nSOv3ivFhDOI9H4iSriWQGvee7ljGwOQebndOXIV7k24Y /a23ZImx8RmMTu2PIyZHFmN17UlYgcenKlVdGX1KOBqy3ANd67GvFYyf6Qy04BRmfWS8lg09UytM XDUL5UtaSzvpu8lzsWmj4I9HSHwZroS/ElDChNUJlFaSEHFzdJ0YWmIiS8x0b1xBujRVtrIhd6Tg 6mMF9M1IYCHpcNwIvI9O/Ufi2+ZfSbKsxYBx6EpXdAqTKIREEuWCRFydBJXCNdU1NGYShwFd/3/K U3XGPOnRoi7iZ2SQKh+2go8vIjwcZy9dRqu+fdDfp7rkoq3Xfih6HdiPO7nxRHIE+x9/Elb3UuWq wFg3nufBYdRs0AjFzWRyQ6BMZ9OqcunmDXh36yUpTmK/aBrZYPjYKVi0sw1r3r1FRQdX+TKetFBL T8L5KzfQuGcfDGzPfc4Lszn3y8a9h3DreQJ01LOREK2Yv2QDVUwfEWcmjkJF6yue6xiXLbD8UEof AUotsroFODQVwCat28OOtUCh74G61bxYR1NwchauK5WP+eFfZSv43/uscMoTNV9R4NeDVpPdh68g nMYBJwNRhw0IeXgXl+gWa+JVXPq3iKvRpA4sa6LmDuUzs6JkvJfOw98dgwaPhIkWIQ5yWBfLkCUb KJydXG0lV4nCRsXMgqUaREyNqBZhSv+taAmx75FCxcgiN3hbBPxRMsDSwUrWJaWKCM5TFVAoxIiG FIgrO7iFkqghud0o1nX1oa3H+fJvAnpAhwqU+J1gyKS3YdC01pECNcVvdRhULD6gJSrAMwZA/F2X AlMEDIoSMklJSUhiYHFCyp/uQ03SLEvAGpAeQnESTShOQhhKlmvOLY1uQCHcc4g8Hh4SwT96St/O ZOZMBOsSldQTS6y4f5mYLDj9BSl0KHCJnA/nit7w/2EwjGp3gbVlqASlYEAX1JNzazFj7TmsP3YU HRtVgFpCKNq05EFMhVA0ZeMvTcXI3MkFLVu1Jh0EvpWME4Raru/sxcwbzo4BQ5maevAb649pXV0w 0rcmNh3ZhKfhXVHalkHOFCImbl9hMBVqrawkjlVT4i8RMeZqy/qKUaFUUkW2YwxQzlZawdj37xHD vwnIBenAYYFPda6rJnlBJAhwJfg3bSnoXBS+bdxtCKqx+PM0Il3HBPyGTsOXwd1KZJuqyljiKLim eQeWiKEQCqk42XSNKJT1eZgx8UDR+F3sjGhpS0Cnjv0wYJg1Xge/ZtxcKNatWIxYNQNsXT6dvJGt 8PlOPr+03h+rjwfj6LFTaFTZFYlBt+FTrwUvBTKesyphjqCDF/EwJA7lnOgWinqJe7ceo1hrXxl3 K6GvqvFtWTadiq+yuBTF9NEmfUzMjHF1/SysPhaEo8c/HT8DcVlsr7DrI7DVsnlQh4RHkz8Y38U5 ixqCCeQPEXydROuRovUpJdZHRXUCIV+0qNzoUEY5W1tINFXn+gtXux4tIwr5l3zsaUcrdZYGot8z 6JJNBhWTgvexodB3kgViCwU6nXwlYqNEDBNLFCAi5A1s+G9JjtFTIEumYPwLn4sElj/kE93VhRqf vZEUpB4TGyONRXxfyMcI0k/dlmcC/6kqZzWDcjGJVqC0rEgkSiUqZHJDyFJxRuhw7LHRkdJ3tCkL hIiIjX5PuSqywEWmr0xmfNbEA8ogA54fIZEREKHhOrlB57b2xVFFX9Sp1MDpdYsU7A/BXwzMFzGJ ctdPxtfavFxzsHLWV/Y8hZ6PgssPkaikgD6cS2Y2ywOJZADy2EdkEHHG0tmohL8o8fLDvwqo+1// 58IpTyRPGoORu/b5BstXtUSHYZOwaeIAxhy9Rt9uA2FZoQm6NPJEbPhLvAl5hriUeyzsy9ifrLd4 8yZU9u/3SajOgzRrxQ4cuXIX45h9oZ4ciUN7t7NifCAmL1kJCwcDqTK8HO6ncUsDvm19MWNzf/Qf OwdTBnVBTlwIJnFMMdaeaF3LFe/DgvHq+X2pEOGLgIu470VLGF0VTs720BKVTBU1ntTpDBINfPYW 8WEBePgyVNqgd18G4U1UAicfjaCHZ1n8uB/jlIyxe/NadKhmgsdHtmD7kSto5dge796zcKpuBh7f fsjA4yyEUqmKT7mLO3fvUaipwaV0KSof4naoT+tNJLZs2YLSvZvjwqG9tKBcwzdTl8LbzQh3bj7g wZ3N99/hGV7jWsA9QhVkojiDQw3F5s1OxMJR3WGa6Y86nkZYMmkkHkTbYo5PTd7OEvHkYaDc/t3L epD+jZC18tcC0J8psmlJCHz6CnHB13Dr4QsM/XE5D+skHN9zg0Vpk/D4fhBMkuJJN2av8ZYX/Pg6 U2dn49jlQNg2eISIqDIwpRBUNP7ZzSrB2csRS1fSiiSnpSQl4Blp8fZNONJuMHC+RXFMXfwTDpav gr7DJmPjkjFo08gbK7dPxOV7PTCgQ3MkvQ/C3h3rcf5ROpb8tBTmIu4hKRoje/oia4E/PKxS6DYe iUjLsmhTp4wUVP4o8BVjwxJ503+L1PuXcO+uHpU5fbi4OvGgofHcpDimTByKZt9MgWaxKljXu61k BVXWhJKUHBfB4PJwhN6PxGsWtFWnJTXw9X1ExtdBamw87jKGrGn9Bli4aYLc8S9bR3pHPEH3vv0x dcVG9O/SE5p0W57ctI5uGcaKcQAxbx8rfC7GJ9w5osBURnIynjAofNWs8bgQFI46DJ5/52mDWlTM XFZtRYPa1eDXqhHunD5Oa9NzDG0nuxr4NGxI+k4u0PgKQ580utIeX70HgxRm0FI8yBt/hDvr4xlq FWh9xNjUiO0U/OQJot6/w9g+HaDBbFkP43RMHzkU0fbl0LJOWYRH18OCjfL5y3/VQtjz8MxScIIL I8+boJcIfnQH77jeAcxAK6/jxguBCZydbMhZOkrom4FVG5agefPa6PXDVAx2NoJfA08c3rII24/f xdCvtKUDU8+IleyNYrBx/XpUt+qKI1v8cYRuXgffEMSmVIIG6wPeusfLHuOLwiPfISfoHm5TPmVT PpUuUwpRwS8p5wo4vo3L0KxZI/QYvQyjPEujt09dHN2xDOv330TDLpUQ/i4WViYE5lSBWafLi2ra u/uUjwfRu3lpHN2zk3FbLzFz9U/o0qELmn47Cd/NKo/BXVsiIewxerOYu5V7I9TxYOiDQuVVVhC8 c9uOWM1i5YMmeGJUjzZMugnAhBFjEefph6s7F8hKqyjYH5F0q6YlReH1A/n0EYm0ytZXgv8jjxVE fny4dxTRZ8qylXDMCkV4+Dukv3iCmJQqSA9/hbeExUl5eBXRqVUoHxXvX1X8+1+vISmZYKGVJ1Fn zb5yM/z+20/oSaiCejU3UIqlwqpkHezcthqOrCy/a90anLvzmoy6HfvOdIPju504F/CMx+kr/Hyw Bb6jyfSXFZGY/OMU7F0zR8okExatZu37wpbvKzPti2BMr9a9sXN9HCbO8of3ryuFFIWJXSX8tmsF yjuZYvfCORhOq0Baqh5e/TID53fOhYl9bew/uI7j48GpYOMKjf3t/TOYt/0cdKiAzFv1C3wtHRF8 ayP2n30CZ3sb/LT9J9wf0Q9DRn5HHI2xaOZ9BHYOzviqVhWc278M+xo2Rs+mBhj/TWfcikyWipxm 4ylaXviVuEgVWI1+O0pQuOpbl8D3jF2YMGsa6tN1Kcqy1G7UFMUIVpf45jEPxc54k5whuRnTcoLR tvVZmt/tsPXwcXzFMCINVqdu2boeD82pWMrMRsNi5bBl1zw0r+CAxLdPlPS/A+Ub9yL93/9l+ouA 3thXtzBl/s9QT4jFkBHTcPLYdmQ/O44hjLfQYAbkhMmLcfDnsTTZH8OIrq1hoqsBO5rh2zaogcNr J6CEvRUm9a6iZPx2Cq03wpWZlfwOE4b2RsAzupqeM/bExQnTh/hiLQ+tDoOmYvZKZ6yZMRqrIqMw Y9ogrJtjRitCCmOVnND22/5Sde7sxGzos7iwT4PK2DRrBILevYNz2TrYvX4RyjGu4t3Ty+jf+WuJ /ukC++bZbFzY5Q+zcm1w4tdFMOcFLp0QFbWb+cBJYzqajh6H0haqrU4atOw8OrUXm88HIDExh7E5 B2HtxDVdtwXnHndmdqo5kwmWYMCd7cz2isJUOeM3pEUsWdcAlpaGmD+Z85z1A3LoCrB0rIg5jNlS o1VSU0/xc5HuXf/b4Wh1/DrjPBoRY0yDcXK1Ub9WRayjMuhkzPi9DpXx+5GzWLR4FV6GvUG9TgNg e3kXUkTFdQqXej2GYyWzRGcWYHzqxOJShNuXL/osWIpOR6bD5+gVhePv376CVFT6r66PZKVhYPyy WdORRBdaDTcbjOvbBRp0BZo5fYXfdqyEi6kuStHquPJdlNz5GzFLV7F1mxZhGvf2/TQXczbtRwpj AzfNGYYdizVRrJIf9m6ZBy1a3esqoa82Lx7dhs1BUqYW5q2cgZ2rDeH1VWVmiXlKxZWF8qRl4oCh 4ydiGGFDvI9vYOKLB7OvyuLA6kloScWrUtZVKiDDkMwwC5GdmxO0Aa3ObqN8qoQTl7bhwLp5mLV+ X4HGp0Xt4Ov+kxH8kvSZORY7llORs7FHo1rVcP/0PsZFNsfkwT7cV4prm2bTUmZZohKtut9g2vSB 2LKQNOVls1Hz7jAkvzbpNRIbYhIwa9F3nL8/MqgM2no1xK7lixifxgLkSjwXQjGqzfX7JS4OU2ZP wZFNfD81EW5VGmPu2G+ZRZqJet8O4/64Jpe/3Kz2IO32ekxds1sOfeYzQD5b6foaachQ1gsiP/LO dcX06QFbuum2zllM92UE1ELm4kLH+gjdswK3nkUBwUtwsksbdPxmFFZGyt+/yvn3f1l1KnS2nYx4 qbz5Ve3QF1catMLLIPrnibdTysUdxvo0mfOw8f5mDAI6D+cv6WoxYZBfxnAE+A6S3tU3MqbZMg2d +n2PJr7d8DYyjjFPdK9ZWsPKnC4VFThM4pup6dnw+2YsvFt3pWUrFjnqWlRgisPUUFPCihL9X+rA lHUe9iK9Xfjd1TR0YW7IG6GSG49QDK1K18bpK7dyzdnahERQh3efYawkbYKchjswcFoGjE20YOTb F1erN0VkHA8uWwcYEnpBWLoMWfE7i9fLnw6flgS4CHIWbsssWtLU1HR4I6RpVVjVaIXoPGo6GpGO 8aSnvrkFHKzMGZuVTqXPk0rWBVrZZO8LYEoR6KtGs72ZpRHjvoQ9TBe9GPPk52GISFpHtEwsYKqv LWUKaZo4KemfNCKQZKd+40j/rn+J/qJatpFDeRw+d5X0JC3FeLSZTVjGG6cvXpdolsOrlxnBM1f8 ehwjaLnLUdOCo0sp6DE1NpwHrq6RFa0jwuWgePyKtqgIpNegArn891OMSaIVhOuqY2AirXmdLsNx vz4xZGiSF4aVPuMWoFXXIYQhEKZ4LVhaMzaIirkQWjlULjTpQp7CeBNP4yyE0wJkZGkDAx1ahkg/ Mcc/6C9cBexH4iG6PYyYLSnclqL9sn0tsr0aY3JfP4lvVbVMDsylXmfGbLSSyidoMeZEQ90XvQZP I0+ZosG2y5iUqgYzfQP04sHXvMvgz8afyrlqMQj46rW7hFDQkNxJwkZr71wCpgZUrHgomTpWUvg8 iXEnRrblsPPYBbwICWNauT73LjNgk+PJv3E8QJkNRxrYu1WG/6p1siklhaGBxxxY1jCVeDEtWxvf kr6t5dBX1fhE/39mn35MsfzSx4JB7juOnJczfrH/LCScN13S96+uj0CUz9IxxtQthzGBricrC3O8 exMmyRtrOydatEhf0kZNXUfJ/JVBrQjZBXQbNQM+AybSXaYp4SsJZHzhGjYgwKH43+IipZC+7D9d 0wKDJq7hHp5GLxYVZQsjTBrcHVF0zQjbYBKVonZ9J6JWs+6I4wXAxrEYAyhSEM2MXBMzU+4/b5y6 cFlS8kR2nQhElsknXZgx3vPr4dPRsu+EAo8vQ9sKE5ZvQ7eRQYxRy4QVs3OJDiPJR7FfM1QUexWQ EcJCNHTmT2jbf5KU/GJqYUFrv6m0z5IztdF7zFy0+noAomJphaSMdCxZkjKYOE3J3PxKi4AKxUWD CugMNOvQB5ExlA86enAiHIwOFZtkXhCU7Q9jM3Pk1JyCJr3HyaGPwJpStr4Cx0+4FmWhLn+VP/N2 i1L68LLebdQstB8yXTp3jE3MkMm5+gycIsVCGfEcS03TKCD/qpJw/93PC215kpFHVn9NjyBrXpZ2 0r8FGGVyqszVpkuriKGxLLNCAEcKbCADY5nJX6r2TSElkMgNic9RxspBwssRAcH5xpiQ6lfRHWhm A1fRv9hsFEIydHP6sQ2M4WAsAtU/aCJTjRtZFYaaGuOO7GxtpRezqbCIGVkbG0vzUGMcE3mP38mQ sgyNrZyIEP7n72zt7KXfifguc2v7T0qISF+U4p2kMXA8IuvF3NEJNCRJpUDEwSNuJWpU+qzs7eWn 9WalYtPiOTh6LRiBQ7vheClntBn4HVraEtsnL96GcWFK+8+lX0HoL+hjbWcnG5uoHi5uebTY2fFv sj9xjlSyMqislnYvI/FGpijdQ+wkW3sHwihw/ItUjP/jlft4GSn6TS3+pK1YdyH4RSyYJddNrFmm 4AUGR5rbOcPKgce94C/+TcAPqGUmYuWs73EumOnK3TvCxdEOg8dOhrXmnwCVPFHk05/fySH+zqYl M3H+1gvs2roDOQ5lceN0IFo2KSEYQcnIJerw07qwtWV8n9gLEraOOoyNTSWrga4uXU6mMh6RO/5c DBsNXjbsHInXQ0aysSUDivQA8l1yLgipsudCccmkpVhD1xDu7gT+5JyEdVOdSqedvYHEvxwlYoLv YRizQeMYhPzq3i2EpDoQnLQuXbQEIhT7Vx598zE+RYqTjHD5o4+w5qrLGz/RwMX6bloysYDrIxuF mQUVfIHpRV6yc3KWeP1P+ZJb107J/JUxgVBY9CibjMw+zjyT7RtZNJBAzldGX2K98Lk6LKytsXvb Ghw/dQ1HDhxEhsELNG1cHa1qO0sXVEtH8v8ffGbA9SVaOtePVw7Ycy9+3rifyXu6HJ9hYcbH/Z/C 7GHHEtwTAmFEZBCzM1vKiLz9qmKjSJdecfm0d5bRXzof/ohZldHH1KYY97jsSyJTOlkEwSpVnHK5 jN9Kpqw1sXaGua1MPgiA2WQqyeJ9pftDxGBxvyqij9L1FaC8jLQquPz4k2rK6GNIq7qJFGvG85fj 1aYCZZybdCT+LS6hSvlL1eL8jz7/QsqTjHrSofg5XJJ0UH2cKc8Axs/80DKFS4oHLFDLPZTl9i+v v3x2IkyqH5RREW/9MXb6qv88HmWHzoftw6NT0EZVE+n3cm9h0oEm531ubDquoEFwvW8ZqJzOrLZU ElBYzIRl6oOtJa2N8lZA+ssbm1CiPhmvhPj8UR0r/oZCS+BUqR6/spHL1v2z9um65SoFH7KHiDkS yOd6VL5Gkn7J8bGkm4wOH9FPGf15c9QQ9e5osek9bBStgEIpV0XrD1bmM1qJW7/sefaH35Ez/ryv CL6R4jIUNFXPxWvSJebDzSusLrnfU2Pwshbd6GVLueE109hLV6yFLl93R2U3xntQ4ZdaIcandHXz SR+54xeHk7CmFGJ9xNjEAZPXhAIltymZv6p9/7l8lPOGqu9LBz5doExNz6Cy68vYNzVxSSCSdN76 CMDgP9uH8/h8v344gi8xPqEMiuSYD5uqq8WnVBDf+HgOH/wilz6qaK1kk0jyW9Hxo2x/CBBgBUgw UncK6ScUu0LKjw/no4g+Us3RjwgvZ7yq+KvAhP3vffGLKk//vWT6h85MMDxN+t0HTkL3jzZHOiEC hFvvHzruvGH9P49fQkhnYO7AiUs+ItSHZU2UUjBv/EOmfUx/KoRJyXQf/OMXIH/8ISwf2qZOGO+/ +M8XPinvkL8v/Yd/9T+yPrnaEWN7gI49BvO/D5WKDCZufAjM+x9eg6LuFFPgf4o///sY4b9OeRJp xWqiLtkHdbn++5btzxmJmBN56fDKzm1hcRGp8UJ5EDEVf3cTSoQotSFBEgg79getIOP/ouOVXJaf wwnkV+9UPP4/vyCjt3A10M33yfy/xFz+7u8LX4vkOkpRlVT+JWbzZb+Rn/X5qz2KQHLhxhM3fVU4 VX/124X5vdjz8mVB/rlZpK/n5NZjLMxYPn03j2bCFVvYfVBY+hf8fQb4f2H6/B38+SXXrehbiinw X6U8ibTfoGcPiaNkCicHS5Xpr/+rjCEEv/g/dVFeRGGu01+kDr+pzewxgQr9qT4mDnfZAS/DwypI E+8LNHnhDvwb9A+VQypM/0J5VGPcmYZ6Bt2BKruS+wNl/X+J7xdsVP+etwqzfp8pAtJ6yvCRhEtG VRMYc5/hToqX8mIE+S2RxPCpiiO+LZJJRBC3DB8ptwmLhYhFK9hWUjBczoeJJ8/v3oaWuQPsmeX7 xS5WnJ/AQhLKpiizxCiiAu8DMXgZv+ef/oVdP9n7fyN9VDGQ0ucM3SDvCP6SxdfKmEL2N1nso7Kk qEJ1/T/+8n+N8iQEmWZmLL7vWROvnHqzJtES4iCpKAr5P7f4vDkRK2rb6tnYdvAa3Ou2w1TWvtOi 86+wcjiHmzSY2CGm1rZMd2csUS5ttQlgd/CXFVj76wn49BiF3h3rUcHKf0xQnuDKzEhBWGgMg9Nt CKyX35v0l1pgETRakP5Jb2b8bFk1A78evUsoi1no2LQMraKqD9yPR66o/y/1/S9Fp3/qdwq6fp/M Ryg5Oan4aRbR2K+/Qv22PTC8tx9PLWX8nIPoyLfEGhLxLSynkRszJQFT6uuz6C8D/ZmK/+5dhCjI IJUbEokG4nf6hgzsNdRhBmWMFMso0NJFYq6ugRHLhzITl7GN6Yxx+hJNgD2qEVh3oHclWHaag63L xiFbwHIUtvHSo5EWjyXjR+H0iyhmhOqj68CpBdsHBaL/BxMoxPt/G30KS19efqOjIskXmlIGogDy FbyVkkgQV8Yn6hiawJAZk19W0S70oP8rPlBo5UmkAevp5CGHy2giDs684y0vY04IBR2BGJbbcuha S8nNBtJmWq6oXC0yL0QxXvGucG8I8D5hFtdR8lzmBskhUKwm081N0bpjf0SZ1WQWV+4BxceaRKHU pnAQqNQfVEdjhlzqH4e8uJnqEPFb3O+kojIikC9Xm5dKpCjD0vyABiJYWI3ZZmI+ouVBLQiG1hOg Ln9SQEqpz2Pqz5/LfphHv0+fi7I3qcwWE+9/uAbK+tdh/2J+VWo3wOVj+3GURY0njuoDbTVRePfj 9RF9C/wQgX6rKnRHIBKnxjzCty3aY9KBC2jgasnDgoJeZNVQ2pcp54mIuf64cuMF8aoaylDZSeMP 6a+MP0TJiOjXF9Gy7WzsP7cfrta6UuaTwChSJRQEFpUoTfFh+5M//8yoE9YBbQlJXtakAPdc129+ +hd8K0Np/rgnEYRa1tMTcxeuxPXncejSQoupyfzdX4gZUty/gN3QyNf3Px2f2H8CHT0/SvOHNEwX xaiJ4p9nBxEo/eKyq+r7Hz7PphLBHSvtL2FBEd8XlJf2CiEBBGq3aBlUDkRtLtFUff/T9RPvSLFr RFfXZlasKv5R9X2pPBLlHEt5o0bDFjh+aDTOEtByOEF9WedWLh3FnlVLfo9JPVpgT0AIke2JGE9I DGFFEnMzZXmh83tXARF34NuUOG5JLOCdmixZVXSI3dWu/zQsndQbc2cOYeHwE0SA0aMcI88SGqIt sXlmjh0Icz0qhrTmKpw/6afyqiFkpEChZqqwX7+h0PWq8IdFTULI5v7Tktz8Av0+D+JfZKj9qTTK 53+RhUkZrqkDrwZNYOQejuX+C3AlMJL7gJmdovF7ulwfwU9K118F/QU8wYf771P+Lsj6/bGTvwB9 PhEMn/1TmfxR9K7grywC4g738caxZwn4nliG4wiwnBT1Gp2aN8OVpzEYvXA7JvSpLyWhyJdvpD9d kYL+QmHXFAXYhfwToS9MQlElX1XN67/5eaGUJ+E7TokJwoW7L+kL1saTB7eRYuCM+h62OLbnEErU boE2jatJ6eJJMe9w7vpl3Ah4iExdM7Rq4wcvF2sJhfnhNSJDJ2rA1dOD6K5PEBIRD2cXN3h5uhDB OhEP+DxSwXOpdhBF7/uXjxDw+DWcq/ihNjE6BNCm2PjqtIIEP7mH5yHvCDroiNDAW7hJwLBa3q1R t7KLLCtMUmw08fjedbx8HQFLYuRY6Gbyf7+FDWuNubFAr1AC5DWJBrEhOHPjEbFZjAkwWA3pobdw 5NhpZBoXQ6u2zQj0aUDGzca104dw4sxlpOtZomnzFqhZ0U0qEaNGXCodzUxcPrEP5y8FwMixFCqV L43kJHVUrVpOKs2iQ5fPtdOHcf7aHcDAAvXre6NK+VJS9kmSyv71+X1WTr91Ga9C36NkhWro2q4B 7h6M/eNgSk2OwdGD+3HtQTBKunvCwiAbTh41Ub4UUY4VzD2PHhkE1ouNjkY8/4smdlOctQbpmkNk Yz2icgNlKnujfu3qCE9Jxgkix1++H4KGLXxR04tFmUl/IZAV8YcomyKqu8cRcyiauDBRxDGy1uYh ywPLwIDlfZScDCLOKjb4Ge4+D5PACB/eugnjYhXhbqeO3w+fR62mXeBd01VKe455F4IbVy4g4MFz 6Jg5wKedH1xtDHmzpxBR0b+AAtDKSsDJA0dx8eZDOJYqhwpujkjK0UNlL09Ubsi5frWWcw3Dvu0b cDckHi3adCT/W/1Ru1CZkFHWP0OBUbmBku9T+dWgsqNFXK3TB3bj9OW70DdwRPP2bVDR3VElHIjg 7/iQpzj18BUxucxQqUY1vL15HkfOXoGxozvaNm9E64g+rb5Jcr8vYnBEWRBNFuu+fuEi3sakohRR 8XWyo/HiVQScirkjNeIForO14OFVEcasYH/sVADHbMDflWcNSQPi9vBgVzJ+cXAnx4Tht/0H8eBF JNzLl4dhTgrca3ijFKve52/9FNEnmdhXulL1+tuXryAkKhHlq1WHX/1a2BulXHyK9HEWLsNE/zUI 7fU1st06YuHE3lKJp4cn16LX8ue8QGWwjmEZgkXuRUZCOAb38EGpdtMxvlcL6BtbSJalXt8OwYkj x1F33Gr0qm6PEwd+xcypIxASloLdP41l6Q0qKYrmz/ItAgpGWRMy8vXjO3j8MkwqVF28mItk5RJN lE95du8GZXIiHJ1sWej9Ep6+S0LjFu2YbWkv7V8N0kcR/1ep4E53vTa8/bqjMd11N84c5u9zN61w vdFqd/PkJcSpaStdf2X0F/tPUyF/FHz98mhWOPqoTh8X8k+Z/FG0doK/tInh129oP/zW4wes/GkH hvZugcCLe3Ds5lPYVO5IJfUr6RIbE/nmc/lma0Rw0mSuyQUkqOnDo4wLglhVICo+HSXdysHT1VE6 n/4DYbH/Sh2rUMqTEFpJ4Q8xddgQ3HweQQwOFwSHPqXgM4SttTmiV63Fb+cC0KK8LZZPmYB5Gw6i au36iH3xEP7+m1nV+RAaltbHmd0rMH3pERg62iIjMVECgowigNvQ6cswZ1QnnOPzafKeT1uKmXQ7 iQ0edvcyFi7bjGeBD1C940j8sngq1Hioi5o+D6+ewpAJM1l6gGB/xZyQGhKOWXx3w8lT6FSzuIQh snbOGIycvoKmdCP6ipmqTvwhNR17TJ+/Bp5uxZiKKt80L248yeGBWDH/R1y9fg9uNeog8t5tJBll 4i1r+yVaXsS41iUxY2gPzNt8DnUaekM9/hD858/CuB/X4Lt+bVnaLxozBnXFjPWnUbxiRajHhbKi +lsYle6IR1e3wiD1PSZ8+zUW7r2G+k2asPzNM0wePxljflyMKcO6IDlCRf8+JTBrRA/MWn2CoKRU OHggmumzJmBVP1ngOG/Hw1lF/EaiFmpXKY+TC7bjxv1nGLHsFKq4OyCToJ3yG28tBIncuHAqb8b7 8CAmGmO6tyd4nR7T7HUwbOJKfO3LG6agpUY6tq7+HtfOu0IrMQZzf1yJjafOwu8rYj1Rw1q+UD5/ NCith4Xj+2Pz3gDERAejp19r1isU9yQTTFqzCc1ZayxNQSCRsGhEPrmJYQPG4nlEAoq5OiP0yXho s96etZkOVv90AGcDzqGcvTqmTxiAdQcfswp7dbx4tBmLN27HyUP7WKolGwv5TGH/FXiAxBIjqkdH rD12H14VKyD+zUq8evMe5X2H4AxLUeSwhI1mZhxWTeyFc67lqey+wuyl23Dm3EFUJoJ5nnXlMxqL OC8e2ounDVTSP7FyWBxV0ferFDNn7btQDO/ZCZsuvEHDRjUR//QA5i9eghmrN6N/u68Ij6HY7STi bSIe38K8OUtw4+5zfFWnFh4E3IARD9eQFPLQ+TvwcY3F8K5+n39/1WYM9KuOxLDnGNynE369+AI2 5pxvfCaLt7IQpqYt5s7agGcH5mPOvqtYc+wW2hd/j6ULZrD0xlOM9t+P6f1qISVa8fgHtKuG5Mjn 6NK6DSI1S6NyWWssmrIW956GYfmxx/Bw1sMyFm1Wtn7p3G9y6cPxD/CrhsyYUIzo2wlrjjwkYjSt bjQ16fPArurbR6VVRwD2FvOsQCXQChrFyqN0CWPMmrAJrVgkt2mNNMmSJIBJK1T0opUqHFYE9Sxe tjHKUQEUVjlhVXJkAXI7ayOCl5aFW9mS/K8KyhNR3nv4QgSM74uq5jHo0rL15/M/+hAeLMQu4RUp aUJG3r98HIs27cbzB/fRcfga+E/vTqWTAKwc3/XTu/DDjMWITNGEM3HoQiMoP+dtxtGzh1CTqOvp yvh/+1LoIVXCVNPJSZTQvvPuO1LcEi1wvy+fA/9jNxWsf22kvg/BiH7y6S88+NmslTm8hxz+/gLr J8hWGPrUEFZ4ZYGOwsqolobF8uTPwT1wtdJTfnkVOIQsM1bGozTSIi/j5qM3uHTyDNw8SsDawwm2 NkbQouyR9/1Th/ehtGEG9qyai8UHrsDBwhoJqQmMv8tATIIRpi5ZjRFUxnJ4gZXqu35ohhIWSCrl H0Pi/Ct1oAIPulDKkwAis/Nqg0mDjqLL/Hs4deUwlo5qgwNRxXBpy0x0q1+RVcdfo2V5J3TuPwYe tf1gakkIyLggfNO5Ow5dfIKGHvXRd+wCHNm7Fw+07LBr9ya42enjl+VTMeq7QShftQ4GT2QtJj6/ /+nzcYNp6amFbvVKwqNFNxxt1YmL7YOX8Yl/ECSNN2+fXgNp8TmCffd0cPTQFjjkRKCTd1Mc2X8O X9dxxavbBzB26hIMmbUWw7u3RPiTq/j66x4o2bQTenduysNFse9fYPFYsobSjt9Ko0vdMjh07SEW r9mObq3LMnj9JWxdyuDSb0swecVhzN95EqMILKiemcDaab0wachgtPRpioRjqzFl/XEqNwcw9Jtm Um2+8V19sDYwkS4uTRxZ548ff72Gpb8dxZAOtcjMCVg2fShGjB5MZbQWWns1Vdi/PS14xzfMwsSl JzH3p93o6VMJYU8uEaenJ5GHJaMbzbyhPMhvou+WU+y3IWKpAC+YNgdlSlpIgJOKm0DnZXkOn56w ZXHo7wii2Hf6TFRyYLFSguIVo8VOCA7ub8nC6FK5OQ4f2gxHRKBV9TqsX3gOfjV70oqkpoA/Askf NdCm+xgUcz+HweN+xvTps+Fgps0oLU24OhsrqHkoG7EIXhc36eGtDmL23WxcPrIWY3xrIcK5PbbN aIcGXvVx6+VblHd2Q79R01C7XQzBRK2QEHwHHboNw8VHYfBsUEJJ/0TLJ/22sSzG2sPBWLnrLPq0 qYL40Mcs5dAaT1nMVNZE2YtsVGw8CIe2zoHGuwDUqNOQl4cnqE7lQICIym0iRoYRaUrnT8sEcfMV fD+Q36+DHWumY/nBp/j19Dl0bFAWmYlRGNOlOYYNHMm6eadQzIhoWwqsEyI+rXSTLthZxh0N3avi 5r3XWLXlKHnOgQp+MEqxttdvS4fI//6gUWjT7CR+Z9mhrRffY+2uE/CtWhLXd61Ht4E/oC1L+Hzd tRaia8zA70ebS256Q6Kl797zO7p1asvafDLQ0N1Kxt/C+yI0wp7hKGu1bTm2A12bVEDYs1uY9uMy lLDSJ/9qqlw/hd8fNBK+zc7ixPJJWLovBKt/Pw7faiXw5OJv+Lr7MGSIAs4qG5MkOC8NrSwc+nUO Qm+uwJkzsfAbdZXlf1pR8Rdo9aK+IC2wtNIJK1EGrQGieK4A8RWuGeGKF4kWwsqcQ1d6GveWV0tf uPywHIFhcXBNUTB/a4Jg5sNsILC6mnYdjGYdu6GPbxMkMlYmj29TM9XRrf9YnDpyAAHqDXBk+3yo Rz1GC17i9p0PRF0Pe2xSyf+K2JsuRcZ1jVk0G4cqKVr/HPyybKJC+mvzDN+uiD++yPqxhGmh6GOj XHmiQpKlqS9X/lx4/BYetvS+KJHBQodJfB+J0nVboFTGG6xgibKUoHQM6tAAO+/HSnIhW8dA7vfP PwyDh7c7xsyZi327q0LNuRZ2bfwRdoZpWDH9W/zA8k7VagWgZkkzqXC9cLHmKb4iU1sYOQSG2v9q K5TylEc0Xbq89KzsYGVrgnLWjgg3cuBNyQZ2vDHlpDE6h5aNjXNmYOXBy3Ao5QKt1BhE5jAOKbc6 tqYW441MrDCS5UVqeblK+V8jJ87CoZ934Oyp2+hes67C52dOBqBbw9JSJpdwb2lrsyJ4Lnpq3vhE 6RCos1ZeSx+48yZGSFiUqVMVcbkIvq9uXYCWa0v8MOobmKjlcOxtMLpTGxyKEdkh8uMZPmQYEUml p8saaVpGGDBpHYZ3a0CFIAsVq1hJ5SsOXnvE/6+BU1uX4hLr1qkxviYs6DmtXGkIfheJBxevwKVx b4zu3wqaApDPogR+3LgPzQNew0wzDUcvXUUx767oR8VJKCFqmkboP3wcFvrvwdm7QfCp5Kyk/zTM PH0J7q16YlTf5owFy4aNDQPFe+3F/Ntpki/c0Lo4fNs1w8Ih7bFiqj2czc1RupwXvG15+KgQvuLM LVHGE47mGrBhTEaVmvVRu4SpTHmhoE+X0OME0Kg2GjZtQ1eYEf+ti7L1qyOBQdhiM2YmRCngD7Ex NVGKtfCMdePpmz+Mmg0aobiZjG0lUFUV6Wtiu+sxC9DW0hg2LHliRTesoZ0rXSV2KOFoyHIRwu36 GvNmMwiYh0FJ1xJIjWOdPL6jKdLRuW4K+xcZT+mJOH/lBhqzPuPA9tWJsJ4O8+LlsHHvIdx6zlsc 1TwB0ZDGshlNWreHHWtNQd8Ddat50WSuOnBcuKSVzl9kL1IAy/++oH0Wrge+4fU5C9tWTMZW/yze pLUQ9DoOBulxiIhOQAkTcwF2r6QJ/qbrz9ASE1nCpnvjChLdK7PeGwsw4epjlmSS9/2MBBZSDseN wPvo1H8kvm3+lXQQtBgwDl3pKkhhkKtQP0SmmYhLE1ZQUaZI19AYRgykZgizyvGHR8XAq0R5tGte HUM71MFUB5bdMbdE+QpVIIDbs1g43EUh/3Cvseq8Qvpw/BHh4Th76TJa9e3D+ozVJeWmXvuh6HVg P+6wqkD+muB/NVrtOmFsD08khzDOiTGZcck5UoaqypgkBZ0I7hThCWbkN/nzV8s3lII6Y5706DEQ 8XXSOnzQpJIt+lZo1aorZQMD3E3dULmSJ6cgVi9FBf8TwfzDINhP58JnWpSH8tdf9v0zFy7Jpz9j rsQv/v71E+Eff50+FH8qm4hXTYqWL3+0VAWb8utCf48NfYmYOG2068xCyG3646sOE+Fun4aX+58i lajsScnKvk8AXO4/c8rD8WsWoKIbqzLwu5NnrsCuLTUYkhMGs8c70JZWzgx6LPI4Q4Q62DBm7/C2 hTDW+c9A3qgk5n/4B4VWngQxJZNerqgT/nwNadF5bLEStj6h619c3ooZa89h/bGj6NioAtRoZm3T 0ltwpDRdCf+HSkN4SAT/5SkFj2Yy8yOCdYVcWPg0hwI3W8HzkrTMiANSNzfIVChOghkkzw4D4URQ NUdIhUqLx3BeQK9YbBEISRcWm5G1A5Ke78P1+2FoXJ5lCjKjcOXBTWQ5+4gEGZVNCBcR8EfJA0sH UQBBxtTCX6zLQ4ehkFT+3DFo8EiYaNElyGB0I0NKdgp2N97cAql8JoZEI4kGCPPcoGNj1n+qUsVI igcyZ6mMpJhIHjaUW4xfES0h9j1SaFmx4BxFk99/KmO5mMrKNPl4Fr4U9g393JTnkHDWQNNwIq04 XcZd1PTrjBb9RyA0+DUSo95jw7rlGBmrhvPblkBLLUtp4KAoHyJuJkkZWUggIF9e0yTNs9Q5aK6z NuuupXwAUyCw0QX9xTI9PreF/HGe/HFEDn+I4FrGzNGKk5YViUQJ7VnGN2KdReC4cv2OkAzkibwD IYM/FskBPHXovlNjbS9jXF0/C6uPBeHo8VNoVNkViUG34VOvBevi6dDdqE6FSEH/IjOKlg0Drk9I ZAQLLTDERRCUzda+OKroM/iXio0GeUOY/j8KzmYcj44UOK/66FQ2/0we/qKAtfzvC97g/KnQmbh9 hcFUuLWykhi4rCnxH5+glJ2RkqrzspUU+1uLyo0O5+FsbSH9TVxWUunWEfyl8Pvsx5MxN5msOxj9 XtQv5MpJF5sUvI8Nhb6T7GIi1jCd6yJio6RivDx1IkLewEaqGah8/C5i/PEJ6NSxHwYMs8Zr8m80 LanrVixGrJoBtiybLil6ivhHaI1Kx29vJAWxx8TGSGOVQQZkIYKxd+q2lCn8p3IVmNcmERDNfezI WKJaDdvi94sNER14GHVnnKIlZzms9AUMB5WoLD1+nxl9THARMkvQXLjttChXxN+1+XdRDom1tXHt 4O94laaHssUsGRcar3T+alnKs46lzD9J7jA+jvMTCSBCBgvZJawuIjRBg2MRv5MatzRXK7emoxb5 X1cp//+ZjMOAZMFLvGSJ+QmZnc4UQ5EopGz9xQ1WPv1liQV/7/oJWV5A+nDdVe1vbSYhnFrvj9XH g3H0mHz5IyO6/CakhxYLy6vxklaxcUdMGfwQVTv2genbNVwmTRiyMPLleYso3/h9OfJNjE8oQiK2 NDgsBihnK8nk2PfvEcO/qYvSXo4uaNmqNS8iAnJGNg6RVKXv7EX+F5c3ZSP8731WOOWJlExPiUPg s7eIDwvAQxZ+FYLk7ssgvIlKoL0zGsGPzyFSL55/F8CVSfz3daZuz8axy4GwbfAIEVFlYErlQys7 EQtHdYdppj/qeBphyaSReBDNmIjWNQjaRueFgudzfGoiIzkWDx694MbMRujbd3iG17gWcI9QBZko 4eYuxaS8CXmGuJR7LEbLGnhZb/HmTaj07zeRifCs2x6Ny62Eb8Na6OzXivFTp3Hy6mP4DmEasoom DuXo0CCEvnooFbp8EXAR973IzBr6cKIvmkNC9ZaNkLXyVxy5chfjmJ2jnhxJl9V2HDoXiBmr1qNN l/b4YXVPdCFS+BzSIC06CPMmDseV6Ep4cH0L2rX3xYzN/dF/7BxMGdRFcutN6vMNYqw90bqWK96H BePV8/ty+xdFLts1bool33yHnqM88X0vxjYd3o5pGw7A3rsL3kbEwDItHJN69UWzaSswoV9XGGgk 4O6pbbiSINQt1Ye72EhajNtIoYK3ZcsWlGbGx4VDe3HgzDX0YdxaPYcshL4Jp2viFSJjGUeR/pb/ DmEB5PuIjKb1iG7ITG5+efwRHukCcxbf1KUinvbuPr9/EL2bl8bRPTsZF/MSkxYvR1lRg02OaVsI 7eS4CLwIC0fo/Ui8ZsFf9Zx0BL5mv/F1kBaXiMdX78GAMV1qXKeM5GQ8uXEJq2aNx4WgcNRh8GSE uyXMzAwU9j9jzVp08+uC1d1HYdAET4zq0YZJDwGYMGIs4jzb49zWhVQEniA8/B3SXzxBTEoVpIe/ wlvCOqQ8vIb3SZVIb5HdopzRFM1/yrKVcMwKVfD9q4hOrYI2jRpi5fbJuHyvBwZ0YDbO+yDs3bEe 5x+ls9jvQthT+GYpSKsRRog3QS8R/OgO3sXGI4AZZuV13BgPaAJnJyYTsC6aT0NF38/Aqg1L0Lx5 bfT6YSoGOxvBr4EnDm9ZhO3H72LoV9qS3NUzMmWB7BhsXL8e1a264sgWuunphnNoQx5RMf5lVPJz Ip6ge9/+mLpiI7M5e0KTGUgnN62j20+myIupKaLfjNVr0c67EekzSQ59OP6Ny9CsWSP0GL0MozxL o7dPXRxlHNv6/TfRsEslhL+LhZUJgSUVLKAaSzi9vn8Pb99FQ+v5Y9y590Cy/D28eQPBryJ5cDG5 nHLx7oOHSE94Q75MRPDze7h7RxsGppbEq7NBSNAzvIlJwPNnDxBoEYfjB3jZmLoIzb5ZhoolzPHm 9hWl81fKWUKGJ77Hw3tveNSyWHfkO+QE3cPtu/eYJKMGN3dXhDPpIoy8m/bgGvm3ssS/4aJA8oPL iEqsiC7tyf89Rsvn/y0LoMVz4M7Dh0weSaQl8i1S71/Cvbt65Dl9uLoVV7z+vkGIT6sk0b/nGPn0 j4hOJH83woptf8/6CW2h4PS5indxXrTMKLYACuuhcFeTGArlj4khvRry9qcYW1IMAoPeIOh2PB48 S8HU5UuQxTN5z7oMpCa8ZxJAJKtN8FQWBablyLfIsrZMJmKRr6RojOzpi6wF/ozzTGFYyUhEWpZF y2rF4VDMC0urtpLLRqK+oCrZpeoM/bc+L5TyJG68b++fwbzt56DDrLh5q36Br6Ujgm9txP6zT+Bs b4Offl6Jfl32YFCbIxjRtTVMeG2yoxm9bYMaOLx2AkrYW2FS7yrQYPHglq3rUehNxdKgCBgWK4ct u+ahGYPN02jWVPS8RQUHvAu8TKH5Nd6wYrhIDU/LCUbb1mdp/rfHrlMnEcIYi3N3XtMKsh37znSD 47udOBfwjOrcK2w52Bzf9W6Ejb8fxqoFS3HjVSg86nZnMeBTeJ+c9BHsgrxF1uKN8dLO1RjONNG0 VD28+mUGzu+cCxP72th/cB0ctTPg2agHflnxHpN/nIK9a+ZIpnZ11gpr1r4vLUdqcKjbDbt+JkbV pNlofngDrWypMCtZFQtmjoSBZgbKt+yNnevjMJH+bO9fV4pTHiZ2lfDbrhUo72SK3QvnKOxfl/3X 6jYAK0NeMUB9Bs5tWwYDc1t4e9eipe00lqzdhR8HNISdpTk2zZuMPStncaOlwcDKGbPmDKEFjzRV AewoAu71rUvge8a2TJg1DfXpmhRlY2o3aoZSdNOdWDsH5wMCWcbpDbZfaIdSgTL6Z6uFYMeRLujn MwB9Wx6Tyx/Fbc1YIb4NLEtUwrTR32Da9IHYspCHLpW1Rs27MytQRyFqtwbX5tGpvdh8PgCJiTlY 9fNBWDvZYeu6LTj3uDOzL82xkWve6ch0+By9wjilRsSo0mAcXW3Ur1UR6yYOhZPxbvRr76WwfyPm 25ftOgi/MNNwyuwpOLLJnzEriXCr0hhzv+sHYwZfLl6zBLeY4akWMhcXOtZH6J4VuPUsCghegpOd W6NDFSYxKCGygIyQP/8esKUbcOucxYq/36UNOjKtfWVkNGZOG4R1c8zobkmBjpET2n7bH0bMklWc jsxgVl7u9/00F3M27UeKvhY2zRmGHYs1UaySH/ZumQctxuXU7TEcK5llKe/72hTM3YbNQVKmFuYx NmbnakN4fVUZVSp4SjXjhPKkZeKAoeMnYtjY+fA+voGJJx7MTiyLA2smolnTqmivZPyGtEwnM63f kgHU8yePpuL7A0MFUlkEtyLmMGZDnYkeGVSsFfGPETFFPHsMw8p37+WOX4uWsq/7T0bwyyjMnDkW O5ZT0bOxR6Na1XD/9D5myTXH5ME+dMF+7sKTQRXEYvao/rhFNymC16Dl2fUyZyTX1KFCe8ndnhz+ FP07dUYoLe3paTp4vWESzv6sAb/+0+E/qQc2rV2Kp5HqeDFlILbRLKBmYge/8UsxZWR/aIj6kHrK 569s+woZHhZ4gTGQo5BMK1A64ztzgjag1dltLFZcCScubMWeDatw+3Ui1Bm7eYHZgKF7Vsr495U/ 9jdvgm8Y//ULsag+4/+xfSm/iHMVHIj+nWXyOV1gRz2bjQu7/GFWrg1O/OoPGzNH+eu/ehKaN6mG HoOnIeQV10cO/Vdub4lpg7nuXL8Zcvi7MOsn5H1h6XOgmTd6E9stVSgwcpqAwWnw7XC0On5difyp wPc/9wEKi3bwrX2Yv+U8LXNZGDmescO/L8SrE79g7OwtUGeJrhnM9Fw3fjR8jsmXb8XM9qNHbU3o s3iwT4PK2DRrBILevYNz2TqMyVuEsk4MbZBTgeHfqvB8yXEXSnkSBWitStfG6Su3cs299F1T2Hj3 GcZK4SbIabgDA6dlsCq5JWrsOIqhtEzlqGnB0aUU9JhaGk6Bq2vEiuUQJn1d9GLMk5+HISJ5O9Ey sYCpvjZdUxkUMMK9puA5N6ORY3nsO32BIHN0kUg4USySSVeAGt0GZubaKNVzJAI6DJGMjfomDPLN GI4A30ESHfWNjKWSBkb2ZTBhMRUTqSWiY92fkGXRSIY/pYTiAgvD+5sxuNRhEC1fDN2lMBNxEWoa ujA35I2egjuLt8tO/cahiW9XvI2MY8wT3XuW1rAyN5awTVLp6mpLAdSwWQdawmJY0V4Hdo7FGedD ywnHlkq3h983Y+HduitpFguRwWPnUBymhpoSVpTy/unWUtfFwMkr4cPA63i66Mxs7GBpoCnRX5tK nKa+Jn65fINZktpIiotBBsdvZc8K7KYGSE6msFPleyfd0znHzqOmo1GHvrQopUPf3AIOBPITSQU2 345CQA9Bf64i+UK7xnDc7iLoTzgDY2PkcH1XMZh4lBz+0KFSLRUDVdPD0Jk/oW3/ScRfYgV1AsJZ W4hnhC1QcPXJ5Hsu9Trj0s1WUnkULcZ0aKj7oheFsTHjnxpsu4xJqWqsRm9FJe48XoSESZlPpVxK ICs5npa8OBiZmkl4J1BX3H9ymhoVhBlo1qEPImOY4UlrnxPhMnQ0sqUso16jZ6Pj0Bmcbzb7NUMm f+szcIpkEjGiW1uZ4iRoJvB1shT1zxi4bqNmof2Q6Qq+b0LBq4Fvxy1A665DmIbM8dG1aGnN2CAT HRWpyLwVc+rdRnG8AybSnaMp4f8IFGPhejEgAKj430JRVvh98m+6pgUGTVzDPTCNnmoe9BZGVIi7 I4quS+EISuKh3a7vRNRq1p1xQBmwcSxGB3sKoplxa0Kro/Lx05LJIPOr1+7StUT3NN1pwtNuT7gR U/J4EuOShOtbIf3E/stUQh+OP0PbChOWb0O3kUGMkcuEFV3qBvRyCUuzjgGzBz8peJsnLoQsyNE1 wfQtRzApFyQzLwFDcmURJNNAnbxt44m9p88jnesskyECDJOyirwvEl6GTlmDfj8wdk5gp1HbNKBs tCL8iYRjxcPX1LGSyvkrEmFChtuVb4ZTF6pLSrQU38RYBTFONcoNMyp33UbMQrtB5C/+XeybzGG8 bAyYLONf/juVQcmK+D+Z9Dey/0A+i++LotNCRtIta6RNvDHGgyldf8pSRfTXJv1Tuf/6kL9byePv QqyfoNmXoY9ix664GBnZlsPOYxeUyB/5wVNZTOYQa3f26m3KNVlclhYzm10adMf5676Sq1coWGbm VgTplff9WJhY2kE9KZguc31MYTyjp3EWwmmhN7K0gYGO7PzJj/fhSyol/5ZvFUp5EpMUPng7W1tp vgLPSQguax6IAipejT5fnpWMWaH1ghuxtHsZ6cAU1b8zif1ha880dS72pkVzcPRaMAKHdsPxUs5o M/A7tLTVIMAaBSPTgjetUPA8TyOmwmRlby/HwUTBTuXr/9o78/CoqjOMv5kh+0rINtkwgIGojahU WkBFBFlEDYssARRUZC0YAWMlbNbwIIKKNAjU2ioB1xQUWZ4W5EGKiGhbn1qsgNYiCJUlQCCZTLa+ 350ZyDKZSU0KA/nO8/BHuDPnnvs75577zbnfeV8f3mDBYfb39dIuimOc/1vk65n1QJHHg5g2eSr2 cxv18W8+x97vSrFiJgcgl93d5jSIiGdwGBLCJBG9WuFEI7tljLcxhn+aFSGRFnSITjAehvKe2SmA KUzkeGDLGKRGkaU8LNmuYklykqtyfD+oZSyu5mA3jnMile9I8XR+mYxLrEwUb30VLBIMisAkq46L sxgTsuRVWJKY6yUieLFMcjdk/R31ewqcLjwpjPyISG5l5n5Kw4rByv6T5eYATrAhjiR+ua4qvvKJ c+zSsLuVc3WAE2Sd8WGJN67TeOCIaBuTH+OTk41+NvgxcHYv4sZgukUAr5P5ZTIRGto1JoQxYJFV j4CAKIRHiKO8FaaAEKSlUVaBFcrqpYl5TBZ5Hei0POD56j+/CAZaER6TjMg4u5igPNicW8SDGYCF OXLN5Lx+DKDCHDzk74b4o8mDuL7zh/BXY7i7+sWXzlqBSAsD4gR7+6TfL4y/+qcr4RvIsR3asubO MunfMseGC8P3zl39XP0ptpoYpMagYM0K/HHrbmxa/z7Kgr9G714/Q/9uyRRjLeVqEdt3vp+CyZ+7 xYSPh/pF58eSyERmtjU2Lsa4Z4z7h5GfU9TRHT/J9XHbfo7PEv44SExJMW7HShF/5VniLJSJcI7P ehH68Mcj80hcvP0+z5DzV5SL+ctpzyIBSkQ1exb5XvWx35Drr7+HJWDyRzzn4rpF7o1yzpU1x6tf rb/lXnQ3/nkC1/Oz056Gg8xt/3vk///svybg43aSEvV7K/PiPMw/LjtQ8ikD+Py1z2/O8WRmDprF Yv8/6ZtyW4nL+uMTQlFZUoiluU9g+0HKrYwagnaJFkyaMRsxXDG0P188p224G1tX8rFGB0/ysDGE JqsVm8OCgO+fzq/aiOiatYYPFG9MWXKWJEWK7z08bRrfLZ8xbAgk2nfqRxhbIrmdtb7j9lEjD7z6 tWqqJCHV2Sb7Y7TG3z7cYSeDMC29PWzfnsTVqR2xKHMkunZqx1dxnq1EJGisWb+rIcM2yu6wendg OILKH3G8IecXjsYKTo1+uvBH7WM/ZtDLOVz9CpeHgLHp7nypy8tQ9K49Pmot+cnk8L+207juGmND flXbGyIyE85iD+KqwZdfx7UguD2/I+hy1X0SiNa8/No8Gka7vvM3qH437fN09rr95+Ibnuo3Akpu uWfUTtUYZDA3SZLpRcnYeQ/X7NvanW8Pal3xtY9tz/fpj+0/Y4qRHZO17p+G2hTKdbstHuavOv1b e1w28Prra0Pde6TmJ+0BYvXb18X4ddf/Hq6vIf3vkb+H8efx+246qEn4eLjJGjL/uKrCVduMcV7r eeiqfkP4mXNTYKt4ZPH5W3zmlPFDWp5TzVm/ydN86Dze+OCpoWdy3fPGkv8oJkqPqvFstTHJTV67 cdXKw/HGnN75XRmAsho14ZcLqlVntw/RogSUQFMQoJwCI58h90/iv+q3WRlfrXF1uKErnE3RFK1D CSgBrjnwuce3ABNyltSgYbwOboitTzNneGmDJ8KX/CT7e9WaxTmXejreZP1nvBprAiPMJmuQVqQE riwCck+7vtf11cCV1dN6NZcNgXqee3pHeu7BJgmeJMmxtrCasdTswVPJc/Mu4ic4s4vWiqhSN9et lxeRtp5KCSgBJaAElMBlS6DRwZOsDBWe+MG+zCd2EnyP6sv8oVgmkfsx2btEcoYugyX5Kua7HKT2 TkRMHLerm5qr7tdlO5C14UpACSgBJaAELhaBRgVPst3WTNPBBY8NxOo/fc0giTYt1I2RrSipN3XH goXzkZ4ixoiy7dVMNWK7Iqy9MKeIO5ScGxEMFVcel+VCeRdbSRVu2WpZLknErFeUfMv4LraMO66C HKrashNKdoPIlzzVb+bqmD+3Wlcvsk20hFuBfbk7wVq4Fw/3G4RZ63fgdjFzlCRJ2VXjfjvXxeon PY8SUAJKQAkoASXgJQQaFTxJkFNuCsaTz/wOR0+PR0lUTzw3NxOHD/wFvxg3AVm/isHGVyik16IC ftz6uPuDDTTo/Qi2wCj07tsPXW5oT40j+ptxq6x/Cxv+9skOHDxShKR2qWjpX459+//Frelt6OZw FEfpM9cuLZ3+ZCaaVG5DGYOhtu2uQVI87SIoIe/v67r+UhFloz1IaXEhNr//HnZ/cRBt0q6luGIl kq7pgvS2NG6kMNwpihye4b+T1D46HWNmUEYNotBAh+mMl/SWNkMJKAEloASUgBK45AQaFTwZreeq UHRSe0RHUd2nTQe0SWlr/BvW4zW8tO8I5QjoO1dVhKezxmDhq9txS4+eMJ3ZgOefzaXi9QrMGDcQ 5qLDyJk4Bove+gjRsa1oV0A1Xj/acVT64emFL1CR9h0qpq7F9Je2YubgeLz668XYuG0Xhk9fhiVP PUA5eqob09TXVf2PjxuAqjM/YGoGbUnO+qJbp3RsWfQ69vx9P7KWfoBOaYlY9cIsLF31Lr4oPInp owZRfDGQ29j9MSVnGTIzaO9iuLtrUQJKQAkoASWgBJSA02G1USSoTEc7DzNXljavewlTTuykLPxp vP3Wh7grZyl9fYCP81didt5GPPv2Fjw2+FaYyovonTMasyZPwj339sY/3pyP+Ws+wXMvF2DkvZ2w f1cBMkePx40DsjF6xAD4HL8eb72xCUXc6+wXnohX/lCA8SOG4mwRxQ3Z9p0F9dU/kStcvdAe32Pb 9k8xNn8rnhzRgy7U+7Bo3gJ0aEMFbAqY3HbPA4i7Kg2PT87G2Keexo0JNDOlKF7rtgmGqagWJaAE lIASUAJKQAk4CTR+5cm+/MSccDF2LaQH0RdY9/5W9ByWjaWP308RzErs3bOXnzBj6+oXsZO+Zz6U jD/87wMICLLhm0OHsO3Pn6Fb5iPIeqiPoSbd5e5xmJG5FVuKKZDJfCYTbRfEA8pkhEo+lJIPpkVB KM46EtH/uedL1/UHluLAkeO48foUZAzsg8WTByFvbjySIyOR+pOO6BkXZNggpHS4FomRZsTScqJT l+7olhJhXFU5c6KMnCqjVLEd/gig95kUazM2RNTbRwkoASWgBJRAcybQBMGTRDd+TK72w11DcrB0 ziA8++hA5Kx8F5/uy0LX1FgGNjZqcaVh4qQshPtSvZTJ4KEhIh/fgq7d8djMV3tHT5yA6F/7O2wr vj9eiIqg1saut0rDC4k2KAygxF5DFMLPHTmMFjFc1jJit3rqrzIjOTWOquVn0GXwMPQb9ygOHfwW Z4+fwCt0Y8865YMP1yxBAG1Uzp07R4+tChRRsM9ZWtB6psIkXnW0LWHeVMmRA1i5+jWYY6/DyKED 4WeqqteUtjkPKr12JaAElIASUAJXMoFGB08+VeX47qu9OPT9YRSX7sKh//RA1pzFWL+xI0aOn4K1 L7+Im/v3QuWyN7Fp1+fIfngoTMXHsGHd69iwfR9yV/wG92UMxIrR2Rg+KQmPZt6Jnet+i/lvbMGA yT83/Kp8g8IQ3TIMBa/ys53D8eWmfLy+aRf6Jw7CicJSdL6rJyryXNX/FebmrcTVVUeQM3os+s7L w8xHRiDYXITPt67BriKxTRCxBRqd0hC2pPAY8vPzkTqmL3ZsWIf123ZjzNwl6HMdvam4WrZ5yfOY uniFMR6iOhzAfT9NZmCm+VBX8g2i16YElIASUAJKoDaBxgVPhlRBERY9OREf/nU/Q5D9mL+sPfLm jcXLy/PQO2MSpj2zDBuWz8OqZccwK3cO1q1YABMDLpN/CPoMGkvXbjPSR07Ba2etmLNwOQa/sxzt 0juj303pMIuxLoOnKt9wjJ86HQ9OyUafnptgSUjGzV07Yft7S/HO7T0wbviDWJV3HLPn160/jklX Pmf9YImKxO8XzsbaZblGjlZwdDJyF0xGoImmxcxrCopJwRO5MzAzdx6689Wi2MJ0u6M3X/ExeZyN EL+g+BuuR0JEBHwSucsvKpQO52IPqkUJKAEloASUgBJoTgQaFzwxeKjwDUXO8rWYYZNAohJ+/qGG flOb2zLx2Ve3w2b2Y6xSiiFjs9Hr3hE4cuw0c578ERUVg+jIMBp6lqC43IRRk2aj/7AJ3J1nQmx0 KxTkTEDBMR8GN7R0KC5D10Hj8HHXvjh22oqouASEUJrg+MlTEMf6EiaSD30kG3dmuKrfijJzMvI/ 2gMzFcTPnS5EGQOh6Hg6uEcEs25KGTB3Ss477LGncMd9Y3GmxIagyFZIiI6kmanD56eiFB2HPoTP bu1Pm/lQRIQFGvpVWpSAElACSkAJKIHmRaBxwRNZycpQeETUeXsWcWAXlXEbnZlDqdaNygpjZaeY JrshkRZ0iE4w8oQq+f8l1HiSnCbJYZLjLVtFY8fa1ZhNHadPN72Hb8uDsKrv3Rh6dyfqQZUiLDqJ CuBSJcUr+a04SzxNocuMutzV70NNKEtSgtFYn9how4RU7GPkO+fVzxkIljIIi0xMAkUXjJUmK4NA WXVy+vyII3yrBNbD89n0dV3zulP0apWAElACSkAJOAg0OniSeiSAqVMYdJTZJKfIWfg3A6oyFx+1 f4LHy22GdEA5VcQ7DxiOW3yqYGagYo+wpD5JKb9QaooIuKmfbbFx9ctTEdHPMnefa2A9ns6jx5WA ElACSkAJKIHLl0CTBE9NdfkiC3Dr4PvRnf8ulEqcK7Yaq0ValIASUAJKQAkoASVwqQl4VfAkAZLY tdQuGjhd6mGi51cCSkAJKAEloAScBLwqeNJuUQJKQAkoASWgBJSAtxPQ4Mnbe0jbpwSUgBJQAkpA CXgVAQ2evKo7tDFKQAkoASWgBJSAtxPQ4Mnbe0jbpwSUgBJQAkpACXgVAQ2evKo7tDFKQAkoASWg BJSAtxPQ4Mnbe0jbpwSUgBJQAkpACXgVAQ2evKo7tDFKQAkoASWgBJSAtxPQ4Mnbe0jbpwSUgBJQ AkpACXgVAQ2evKo7tDFKQAkoASWgBJSAtxPQ4Mnbe0jbpwSUgBJQAkpACXgVAQ2evKo7tDFKQAko ASWgBJSAtxPQ4Mnbe0jbpwSUgBJQAkpACXgVgf8C6uOKgXlfrvYAAAAASUVORK5CYII= --_004_787AE7BB302AE849A7480A190F8B93300A0541A6OPEXCLILMA3corp_-- From nobody Mon Oct 16 01:42:44 2017 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 662E2134495 for ; Mon, 16 Oct 2017 01:42:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.499 X-Spam-Level: X-Spam-Status: No, score=-1.499 tagged_above=-999 required=5 tests=[BAYES_50=0.8, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HMuwPsJxmaAE for ; Mon, 16 Oct 2017 01:42:39 -0700 (PDT) Received: from roura.ac.upc.es (roura.ac.upc.edu [147.83.33.10]) by ietfa.amsl.com (Postfix) with ESMTP id D60A1134493 for ; Mon, 16 Oct 2017 01:42:38 -0700 (PDT) Received: from correu-2.ac.upc.es (correu-2.ac.upc.es [147.83.30.92]) by roura.ac.upc.es (8.13.8/8.13.8) with ESMTP id v9G8gba1002182 for ; Mon, 16 Oct 2017 10:42:37 +0200 Received: from [147.83.35.39] (sirius.ac.upc.es [147.83.35.39]) by correu-2.ac.upc.es (Postfix) with ESMTPSA id D2EAC596 for ; Mon, 16 Oct 2017 10:42:31 +0200 (CEST) To: lisp@ietf.org References: <684da2cc-b1f7-d97c-e532-15f5b1fca15d@bartschnet.de> From: =?UTF-8?Q?Albert_L=c3=b3pez?= Message-ID: Date: Mon, 16 Oct 2017 10:45:19 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 In-Reply-To: <684da2cc-b1f7-d97c-e532-15f5b1fca15d@bartschnet.de> Content-Type: multipart/alternative; boundary="------------538740B30D50D993E41B74C7" Content-Language: en-US Archived-At: Subject: Re: [lisp] Current state of anycast IP-addresses in the LISP Beta Network? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Oct 2017 08:42:42 -0000 This is a multi-part message in MIME format. --------------538740B30D50D993E41B74C7 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Dear Renne, LISP Beta Network is not using anycast addresses for MS/MR or PxTRs. On the other hand, not all the nodes of Beta Network have IPv6 connectivity. You can find the current status of these nodes here . Best regards Albert El 12/10/17 a les 15:33, Rene 'Renne' Bartsch, B.Sc. Informatics ha escrit: > Hi, > > does the LISP Beta Network currently use anycast IP-adresses (MS/MR, > PxTRs)? > > > Are the MS/MR, PxTRs reachable via IPv6 (e.g. IPv6-in-IPv6) via LISP? > > > Regards, > > Renne > > > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp --------------538740B30D50D993E41B74C7 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit
Dear Renne,

LISP Beta Network is not using anycast addresses for MS/MR or PxTRs.

On the other hand, not all the nodes of Beta Network have IPv6 connectivity. You can find the current status of these nodes here.

Best regards

Albert

El 12/10/17 a les 15:33, Rene 'Renne' Bartsch, B.Sc. Informatics ha escrit:
Hi,

does the LISP Beta Network currently use anycast IP-adresses (MS/MR, PxTRs)?


Are the MS/MR, PxTRs reachable via IPv6 (e.g. IPv6-in-IPv6) via LISP?


Regards,

Renne


_______________________________________________
lisp mailing list
lisp@ietf.org
https://www.ietf.org/mailman/listinfo/lisp 



  


--------------538740B30D50D993E41B74C7--


From nobody Mon Oct 16 02:32:04 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 023EC1344A4 for ; Mon, 16 Oct 2017 02:32:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DAc2_cZjIkeT for ; Mon, 16 Oct 2017 02:32:00 -0700 (PDT)
Received: from mail-qt0-x22d.google.com (mail-qt0-x22d.google.com [IPv6:2607:f8b0:400d:c0d::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 999AC132944 for ; Mon, 16 Oct 2017 02:32:00 -0700 (PDT)
Received: by mail-qt0-x22d.google.com with SMTP id z19so30244533qtg.11 for ; Mon, 16 Oct 2017 02:32:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=VCqTysooONz+inDXkIod8AdZ8uGt4/fFybMl0R3AJAk=; b=gMJ+ODVZda0C9IGBWkgtjDbcSx6veUrCCRJQ+yYwk3IX4YyXDMeG3krwuYlifM883X +lUOq/xJaRwXzTxaYilNFXvJMeNJZD6kO7HAP172rkp0R8jOfw5ujKoAAeU1hnGW+7gY lUDUXyFX1/LJuXGi5usEr110pHyrUCFy2hKObZ/+egvfDkKccSy99R7a0AArvR22dE3V kgWoDFzVtwsUKklg8fS5KG8tUQ4dK2+1tLJMoZfFRSYD8Dog3yYhMgGT/epDwMso9+6U +uRD4RhNI6BOTPDqW82DuGCeSIXmJzUsP/6zUxJG95an2o0syuNc1ledqlAKXwsMfGd/ 9b8g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=VCqTysooONz+inDXkIod8AdZ8uGt4/fFybMl0R3AJAk=; b=n2ahfO6Uuvj16ScIDyWqytTaOjylrkVDbKX8qUjIIb+DQ7W5AAZII/M8QbgMb3mcOX 8ccGl14DDJjFJKndG2T00jIBIL23b2m8ieEI2r8nzECJm/0q6oAX2ERN4iM1ZgEprsaH feFnfPweFvB/Z16FWhL1vZoUbB7u664joyX9pnWxvas3M7FWST6FVSNevYuig9QQef9E 9zDPsljBPV2iYuwCUqhx6zlkLAbHw8dt53hhi8OBH6dKZocC3ZLdFeS1zE7IIJLl0fcC 3eQBlPEE7ZbzoDTGQaGEm1RRN+JntNW1+ZgI9WI91PRttgliINiGFZoSK8ShHCwEPGlJ Ox2w==
X-Gm-Message-State: AMCzsaW4LvulsNYgQK/Js3xMNedw/isYOCn0cgXMBLE70gzYG+PWbD7J iR8e7QLzkGkHXzMrjFkPXFwQIo/ZsDkbCxhvngs=
X-Google-Smtp-Source: ABhQp+TTq3Hx//6NOCCv0h6Fqj+u/K3wGNnrYkVfZ3A3AMF6edCW8pXdQzLmu3qGFcbxD2aCBSFhLbAixUf6TQMTWGQ=
X-Received: by 10.37.201.193 with SMTP id z184mr5721223ybf.468.1508146319694;  Mon, 16 Oct 2017 02:31:59 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.37.57.10 with HTTP; Mon, 16 Oct 2017 02:31:59 -0700 (PDT)
In-Reply-To: 
References: <684da2cc-b1f7-d97c-e532-15f5b1fca15d@bartschnet.de> 
From: Albert Cabellos 
Date: Mon, 16 Oct 2017 11:31:59 +0200
Message-ID: 
To: =?UTF-8?Q?Albert_L=C3=B3pez?= 
Cc: "lisp@ietf.org" 
Content-Type: multipart/alternative; boundary="94eb2c056e2aa7a049055ba6ad42"
Archived-At: 
Subject: Re: [lisp] Current state of anycast IP-addresses in the LISP Beta Network?
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Mon, 16 Oct 2017 09:32:04 -0000

--94eb2c056e2aa7a049055ba6ad42
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Renne

Complementing what Albert L=C3=B3pez said, anycast at EID level for PxTRs i=
s up
and running.

Best regards

Albert

On Mon, Oct 16, 2017 at 10:45 AM, Albert L=C3=B3pez  wro=
te:

> Dear Renne,
>
> LISP Beta Network is not using anycast addresses for MS/MR or PxTRs.
>
> On the other hand, not all the nodes of Beta Network have IPv6
> connectivity. You can find the current status of these nodes here
> .
>
> Best regards
>
> Albert
>
> El 12/10/17 a les 15:33, Rene 'Renne' Bartsch, B.Sc. Informatics ha escri=
t:
>
> Hi,
>
> does the LISP Beta Network currently use anycast IP-adresses (MS/MR,
> PxTRs)?
>
>
> Are the MS/MR, PxTRs reachable via IPv6 (e.g. IPv6-in-IPv6) via LISP?
>
>
> Regards,
>
> Renne
>
>
> _______________________________________________
> lisp mailing list
> lisp@ietf.org
> https://www.ietf.org/mailman/listinfo/lisp
>
>
>
> _______________________________________________
> lisp mailing list
> lisp@ietf.org
> https://www.ietf.org/mailman/listinfo/lisp
>
>

--94eb2c056e2aa7a049055ba6ad42
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable


Hi Renne

Complementing what Albert L=C3=
=B3pez said, anycast at EID level for PxTRs is up and running.
Best regards

Albert

On Mon, Oct 16, 2017 at=
 10:45 AM, Albert L=C3=B3pez <alopez@ac.upc.edu> wrote:
<=
blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px=
 #ccc solid;padding-left:1ex">
 =20
   =20
 =20
  

    
Dear Renne,

      

      LISP Beta Network is not using anycast addresses for MS/MR or
      PxTRs.

      

      On the other hand, not all the nodes of Beta Network have IPv6
      connectivity. You can find the current status of these nodes here.=


      

      Best regards

      

      Albert

      

      El 12/10/17 a les 15:33, Rene 'Renne' Bartsch, B.Sc. Informat=
ics
      ha escrit:

    

    
Hi,
      

      

      does the LISP Beta Network currently use anycast IP-adresses
      (MS/MR, PxTRs)?
      

      

      

      Are the MS/MR, PxTRs reachable via IPv6 (e.g. IPv6-in-IPv6) via
      LISP?
      

      

      

      Regards,
      

      

      Renne
      

      

      

      _______________________________________________
      

      lisp mailing list
      

      lisp@ietf.org
      

      https://www.ietf.org=
/mailman/listinfo/lisp
      

    

    


    

    

  



_______________________________________________

lisp mailing list

lisp@ietf.org

https://www.ietf.org/mailman/listinfo/lisp





--94eb2c056e2aa7a049055ba6ad42--


From nobody Mon Oct 16 06:08:20 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9C301132320 for ; Mon, 16 Oct 2017 06:08:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gfMlj4qggdJX for ; Mon, 16 Oct 2017 06:08:17 -0700 (PDT)
Received: from mail-qt0-x235.google.com (mail-qt0-x235.google.com [IPv6:2607:f8b0:400d:c0d::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3B9F71201F8 for ; Mon, 16 Oct 2017 06:08:17 -0700 (PDT)
Received: by mail-qt0-x235.google.com with SMTP id q4so31445621qtq.8 for ; Mon, 16 Oct 2017 06:08:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=6YEizYlNzY3JYDFDf3mB5YV7USfwmAW39CiRMoyyFzI=; b=JfqanfE5BAtERHXeSVKm3g/63M3AGb1f8CSMawK5h9XcFfqBza6YDpJyAepBxdEmnj U/VFj4DyK2ytFGHCN/9oyyuJvYPoVFnkJtGmkUPjAuUQ1OUnWhukWrpuKP2BDUjZtSXD olVnN/jdTNF8DJyNhaejc1JXMEzd3us3E21VziDCg7ZhyW8IJvB8dLqYGHg1cLMiEanZ mJL1DxOTV7syZDiW5W2DIx/o/0XiqAsDUiYS2lYNBXxhaSgwzeA0Lk9UkXdJ4NBG0WX0 hkxOkSPSnVMD8BgHKN8oBvvzDVUPPtwR7tpOvj7QwUnlxJN/pHwKA7qVAKFG9ZTcrk5y rfvQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=6YEizYlNzY3JYDFDf3mB5YV7USfwmAW39CiRMoyyFzI=; b=N6nCiTOgGRMhrEwPh4aCwGM9KEksPm0F70UeAknaSeGM7mBBeEQkbjMAEiB+XCfjYD KAepFADShevL7KxLc2XXBeY6nffoUsMd1S719fnCtt2VleErgy4t0h9afJMh9YOnmHtK fJB46VxeF7GnSzDHVS+/6xKurpFKrKFEsCkdKGvDo1gsU4UD/11eUJVVJc0a5SPtwVJw z/fdCDtJA6hCEkt4b+Qxe2fdKV3TG2ZWdANIan1SJIaI0D06Mlp05yibPK6HpT/X1MJW z0D3p6tIY9PvYNGOD02KTkH9G50tCASfhVm6oSzpjS6I5s6FfI9cJtfzC8WBzFHrhgil tqmg==
X-Gm-Message-State: AMCzsaUOJt1Ul8s3V3vtfDrUBamVWKFx323liM0SQCgYPouSA3djO2Vf 88iwrVCQEz9w2HVYWYrBDCI=
X-Google-Smtp-Source: ABhQp+TnknFItCT01oXqoOGXxkRXd3FDfgLDYCVNCpAMlsXgnGeSUFZLgu411siZTG2sFx8/aYSrlQ==
X-Received: by 10.200.24.92 with SMTP id n28mr3304570qtk.331.1508159296329; Mon, 16 Oct 2017 06:08:16 -0700 (PDT)
Received: from [10.5.50.22] (cpe-68-174-97-76.nyc.res.rr.com. [68.174.97.76]) by smtp.gmail.com with ESMTPSA id 2sm4808266qto.28.2017.10.16.06.08.15 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 16 Oct 2017 06:08:15 -0700 (PDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Dino Farinacci 
In-Reply-To: <787AE7BB302AE849A7480A190F8B93300A0541A6@OPEXCLILMA3.corporate.adroot.infra.ftgroup>
Date: Mon, 16 Oct 2017 06:08:14 -0700
Cc: "lisp@ietf.org list" 
Content-Transfer-Encoding: quoted-printable
Message-Id: <1BADE12F-F090-4255-B835-D9467E1135D5@gmail.com>
References: <37C27B2F-AD76-4B5F-AFE6-E56D02180DD4@gmail.com> <787AE7BB302AE849A7480A190F8B93300A051871@OPEXCLILMA3.corporate.adroot.infra.ftgroup>  <787AE7BB302AE849A7480A190F8B93300A0541A6@OPEXCLILMA3.corporate.adroot.infra.ftgroup>
To: mohamed.boucadair@orange.com
X-Mailer: Apple Mail (2.3273)
Archived-At: 
Subject: Re: [lisp] Comments to draft-boucadair-lisp-multiple-records-00
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Mon, 16 Oct 2017 13:08:18 -0000

>  RFC6830 or your Internet Draft?
> [Med] I=E2=80=99m referring to RFC6830 which says the following :
> =20
>    Record Count:  This is the number of records in this Map-Request
>       message.  A record is comprised of the portion of the packet =
that
>       is labeled 'Rec' above and occurs the number of times equal to
>       Record Count.  For this version of the protocol, a receiver MUST
>       accept and process Map-Requests that contain one or more =
records,
>       but a sender MUST only send Map-Requests containing one record.
>       ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>       Support for requesting multiple EIDs in a single Map-Request^
>       ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>       message will be specified in a future version of the protocol.^
>       ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> =20
> Yes, I do think it is time to specify that behavior in the bis =
document.
>=20
> Section 3 of draft-boucadair-lisp-multiple-records is an example of =
what can be considered in the bis document.

IMO the description is not sufficient to tell an implementation what to =
code. It is under specified. I=E2=80=99d love to consider removing the =
above but it needs specific/detailed text describing why and when =
multiple records are used in Map-Requests.

> I=E2=80=99ll have a look at it. But what part of section 3? All the =
packet format descriptions are already in RFC6830.
> [Med] The format needs to be updated for replies.

Not true. Map-Replies have multiple EID records. And I use them every =
day.  ;-)

> It is documented no where that a Map-Resolvers caching mappings. And =
if you are proposing that you need a lot more text to describe how =
mappings are kept up to date in the Map-Resolver. This is a major =
architectural change and really not sure you know the implications of =
it.
> [Med] That single sentence is hiding the case where a single request =
from an xTR may be forked into multiple ones because target EIDs are not =
managed by the same servers. What is important in the text you quoted is =
that the xTR should be prepared to receive multiple replies for a single =
request. Two cases are to be considered:
> -    Multiple records for the same EID that cannot be included in a =
single resply
> -    Multiple replies; each for a given EID

And how does the ITR know to wait for multiple replies? How does it know =
when all of them come in? This is more protocol machinery that needs to =
be spec=E2=80=99ed out. And I have not seen any of it in your bulk spec.

Dino


From nobody Mon Oct 16 11:44:14 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F070313454F for ; Mon, 16 Oct 2017 11:44:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.297
X-Spam-Level: 
X-Spam-Status: No, score=-1.297 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_COMMENT_SAVED_URL=1.391, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_HTML_ATTACH=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qIWHeK1nDm0o for ; Mon, 16 Oct 2017 11:44:05 -0700 (PDT)
Received: from mail-qk0-x22b.google.com (mail-qk0-x22b.google.com [IPv6:2607:f8b0:400d:c09::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 29C9413454A for ; Mon, 16 Oct 2017 11:44:05 -0700 (PDT)
Received: by mail-qk0-x22b.google.com with SMTP id b15so14079109qkg.9 for ; Mon, 16 Oct 2017 11:44:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=nmP+qfp1v1v2rEoqE3a1msHXG610QifnuJuazMIEj3o=; b=d4ncVi6SWS3ljApikcI9jx5aloy+vhd7pWgEKHXgb/CQqRARxVvElRfD2Fo1Q45PGU og+1pVDfVglYUiTACGs6s7M5nifRMPS5LU8k6ro1i0eRAbgf4pwQpoLOb7AVG9jBQx9N WlZjF5o4r8AkZj6sQ7fTjZ2r7Un1tewIFz71a/OzYK/ib/TCMZMcfmxv9evJ3wdiZ0dk Cs0wciqTz1V9X5JC1DkpunvlDyHJ53d8IZ66hX3wMExqli3kIqJqFmTLqgsgBhkRafIb QljcOp5pOgyqDBj7o+lhSjdjr8qunMdrRrThnL76oQS9Cee9lS215kHSehsL3dDuqWBN zFUA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=nmP+qfp1v1v2rEoqE3a1msHXG610QifnuJuazMIEj3o=; b=LgziSPNtXFTgHrGQZ+D3ARef9BSKn+smYMcDmZYtLBPRZT0gCC9FFL/xFEqCjo+k2Y Ryh99MTU/bI1zk2hfqRZo+aNy8Einb2yiKkv9/Lip/EcX0tfua2C+vAXMtlb8fjLlviN bzoLwgn7SVn0fj1mlK+cqRHSNNKv2uWhv6EcoSdN2T39uuHRz2WTCXShiS4jvpdzqvsW FOZKwnPHJTvMyAZkyJafDNWCDkE6MVHG+rRAVRhHQ5uSUoki6+VLMZCh1Ar/mOffdtz+ 4HCiP7Yi5cczwr5Fot5R3LH3rbYpepL0kpo3avEt9REJuL1Zzzc7CWlV8sxxmTvb595h MJFw==
X-Gm-Message-State: AMCzsaW2WDPG7aZhMalGo3l5AAlbFc1F3MJlHr9V3UXGHE9OtL6PJhP1 bAPjgGlQDrAYcbeL07Pimeg=
X-Google-Smtp-Source: AOwi7QCkJ+rNb+hIR4unGw7oZcjIfZCSfU19DNJ5pxPth3QqPtcwRdRSY94XTB+mQRJUGrtFdB+Zhw==
X-Received: by 10.55.209.155 with SMTP id o27mr15834818qkl.145.1508179443951;  Mon, 16 Oct 2017 11:44:03 -0700 (PDT)
Received: from [192.168.1.60] (cpe-69-201-165-207.nyc.res.rr.com. [69.201.165.207]) by smtp.gmail.com with ESMTPSA id o70sm4983841qki.35.2017.10.16.11.44.02 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 16 Oct 2017 11:44:02 -0700 (PDT)
From: Dino Farinacci 
Message-Id: <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com>
Content-Type: multipart/mixed; boundary="Apple-Mail=_ECB34273-7DAA-4861-B156-1AF3B4C47C1D"
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
Date: Mon, 16 Oct 2017 11:44:01 -0700
In-Reply-To: 
Cc: "lisp@ietf.org list" , Dino Farinacci 
To: Alberto Rodriguez-Natal 
References: 
X-Mailer: Apple Mail (2.3273)
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Mon, 16 Oct 2017 18:44:13 -0000

--Apple-Mail=_ECB34273-7DAA-4861-B156-1AF3B4C47C1D
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

I actually had time earlier in this week to respond. See the =
rfcdiff.html diff file attached. I have responded with 3 different types =
of responses:

(1) Made the change, working group please ack. Is in diff file.

(2) Did not make the change, requesting working group to discuss. Not in =
diff file.

(3) Solely my opinion that the change should not go in. Not in diff =
file.

> On Oct 14, 2017, at 12:08 PM, Alberto Rodriguez-Natal =
 wrote:
>=20
> EIDs MUST NOT be used as LISP RLOCs.
>=20
> [AR] I think this sentence should be reworded, especially when it is
> latter followed by sentences like: "In theory, the bit string that
> represents an EID for one device can represent an RLOC for a different
> device.=E2=80=9D

Response (1).

I have removed the sentence.

> The router then prepends an "outer" IP header with one of its globally
> routable RLOCs in the source address field.
>=20
> [AR] There are several references to RLOCs being =E2=80=9Cglobal=E2=80=9D=
 through the
> document, probably coming from the original Internet use-case. I would
> suggest removing mentions to =E2=80=9Cglobally routable=E2=80=9D and =
replace them with
> something along the lines of =E2=80=9Croutable in the RLOC space=E2=80=9D=
 or =E2=80=9Croutable
> in the transit/underlay network=E2=80=9D, etc.

Response (2).

Working group, what do you think the correct wording should be. I =
suggest:

o =E2=80=9Croutable=E2=80=9D
o =E2=80=9Croutable in the underlay=E2=80=9D
o =E2=80=9Croutable in the RLOC space"

> The EID-to-RLOC map-cache is a short-lived, on-demand table in an ITR =
that store
>=20
> [AR] We probably should remove the note on the map-cache being
> =E2=80=9Cshort-lived=E2=80=9D since that may not be the case in some =
deployments.

Response (3).

But it is in other deployments if you don=E2=80=99t want to use any of =
the update mapping techniques, like map-versioning, SMRs, pubsub, and =
Map-Notify messaging.

> The same database mapping entries MUST be configured on all ETRs for a
> given site.  In a steady state, the EID-Prefixes for the site and the
> Locator-Set for each EID-Prefix MUST be the same on all ETRs.
>=20
> [AR] Is this still the case when overlapping prefixes and/or
> merge-semantics are in place?

Response (3).

Well, yes. Let me answer with an example. Say there are two xTRs A and B =
and they are connecting the LISP site for 10.0.0.0/8. Say 10.1.0.0/16 =
moves out to another LISP site, a LISP site that is multihomed with xTRs =
A=E2=80=99 and B=E2=80=99. Both A=E2=80=99 and B=E2=80=99 need to be =
configured (i.e. in this case discover) that the /16 moved into their =
site.

> Address Family Identifier (AFI):  AFI is a term used to describe an
> address encoding in a packet.  An address family currently pertains to
> an IPv4 or IPv6 address.
>=20
> [AR] Although in some points the document mentions LCAF or other
> address types for EID/RLOC, in most of the cases it assumes only
> IPv4/v6. I think we should update the document to be more flexible and
> relax those IP-only mentions (specially for EID cases).

Response (1).

I changed to =E2=80=9CAn address family that pertains to the data-plane, =
can be an IPv4, IPv6, or MAC address."

> Data-Probe:  A Data-Probe is a LISP-encapsulated data packet where the
> inner-header destination address equals the outer-header destination
> address used to trigger a Map-Reply by a decapsulating ETR.
>=20
> [AR] Is anyone using data-probes? I=E2=80=99d like to suggest removing =
this text.

(3) response.

Early on in the LISP design, service providers thought this was useful. =
We have carefully doctored the text to make it security safe, but it =
does avoid packet loss when setting up a first-time round-trip packet =
exchange. The initiator=E2=80=99s packet causes the mapping database =
lookup, but the return packet does not need a lookup.=20

There might be specialized applications that may make use of it.=20

> The ETR(s) at the destination LISP site are the first to send
> Map-Replies to the source site initiating the connection.
>=20
> [AR] We may want to clarify here that this is the common case, but may
> not be always (e.g. proxy-reply)

Response (1).

I changed to "The ETR(s) at the destination LISP site may be the first =
to send Map-Replies to the source site initiating the connection".

> In order to avoid excessive packet overhead as well as possible
> encapsulation loops, this document mandates that a maximum of two LISP
> headers can be prepended to a packet.
>=20
> [AR] It seems that a maximum of two headers is an arbitrary value.
> Therefore, I suggest we replace "mandates" with "recommends=E2=80=9D.

Response (1).=20

Changed to recommend.

> When multiple organizations inside of a LISP site are using private
> addresses [RFC1918] as EID-Prefixes, their address spaces MUST remain
> segregated due to possible address duplication.  An Instance ID in the
> address encoding can aid in making the entire AFI-based address
> unique.
>=20
> [AR] This text is used to introduce the concept of Instance-IDs. I
> don't think we should mention private addresses here. Instance ID may
> be used even when not private addresses are in place or for purposes
> other than possible address duplication. If anything, the private
> addresses duplication should be an example only.

Response (1).

Making a reference to private addresses is actually very important. =
There are a lot of container and VMs within cloud provider deployments =
that use it. It is probably the most popular use-case of LISP.

I made a reference to the VPN spec which is now a WG draft.

> An ITR SHOULD only set the E-bit in an encapsulated data packet when
> it knows the ETR is
> enabled for echo-noncing.  This is conveyed by the E-bit in the
> Map-Reply message.
>=20
> [AR] There should be probably a mention to merge-semantics and/or
> proxy-reply here.

Response (3).

Why? Merge semantics only apply to Map-Registers. Not the Map-Reply an =
ETR sends to an ITR. That is when it conveys it can support =
echo-noncing.

> Since the LISP architecture uses a caching scheme to retrieve and
> store EID-to-RLOC mappings, the only way an ITR can get a more
> up-to-date mapping is to re-request the mapping.
>=20
> [AR] We could relax this constrain and/or reference PubSub here.

Response (2).=20

Want the WG to decide if this individual submission should be =
referenced. I think the pubsub design is simple and can work but we have =
little implementation experience with it thusfar.

> When adding a new Locator record in lexicographic order to the end of
> a Locator-Set, it is easy to update mappings.  We assume that new
> mappings will maintain the same Locator ordering as the old mapping
> but will just have new Locators appended to the end of the list.  So,
> some ITRs can have a new mapping while other ITRs have only an old
> mapping that is used until they time out.  When an ITR has only an old
> mapping but detects bits set in the Locator-Status-Bits that
> correspond to Locators beyond the list it has cached, it simply
> ignores them.
>=20
> [AR] Probably we could complement this paragraph with something like
> "It is RECOMMENDED to notify the ITRs that they should update their
> Map-Caches, e.g. via an SMR.=E2=80=9D

Response (3).

We say this in other sections about updating mappings. In this =
paragraph, there is a primary focus on locator-status-bits.

> When a Locator record is removed from a Locator-Set, ITRs that have
> the mapping cached will not use the removed Locator because the xTRs
> will set the Locator-Status-Bit to 0.
>=20
> [AR] Since LSB are not mandatory and not used in many deployments we
> should recommend notifying the affected ITRs via SMRs or PubSub.

Response (3).=20

The WG should discuss this. If you want to keep the locator-set in tact =
in the ITR, using LSBs is a faster way to convey to not use a subset of =
the set.

> As a result, an ETR will solicit Map-Requests (called an SMR message)
> from those sites to which it has been sending encapsulated data for
> the last minute.  In particular, an ETR will send an SMR to an ITR to
> which it has recently sent encapsulated data.
>=20
> [AR] We should mention that this only works when the ETR is also an =
ITR.

Response (1).

Added text to support your suggestion.

> It is important to note that a locator address in any LISP control
> message MUST be a globally routable address and therefore SHOULD NOT
> contain [RFC1918] addresses.
>=20
> [AR] The Internet use-case is less relevant today, therefore I=E2=80=99d=

> suggest removing the sentence regarding RFC1918.

Response (1).

I think we should add that there ARE allowed if run in a local =
environment.

> Minor/Editorial:
>=20
> Expand the RTR acronym on its first appearance.

Response (1)=20

I moved it up right before the first RTR reference.

Thanks,
Dino


--Apple-Mail=_ECB34273-7DAA-4861-B156-1AF3B4C47C1D
Content-Disposition: attachment;
	filename=rfcdiff.html
Content-Type: text/html;
	x-unix-mode=0644;
	name="rfcdiff.html"
Content-Transfer-Encoding: quoted-printable



=20
  =20
  =20
  Diff: draft-ietf-lisp-rfc6830bis-05.txt - =
draft-ietf-lisp-rfc6830bis-06.txt=20
  =20
     =20
=20
=20
  =20
  =20
      =

      =

      =

      
< draft-ietf-lisp-rfc6830bis-05.txt  =
 draft-ietf-lisp-rfc6830bis-06.txt >
 =


      
Network Working =
Group                                       D. Farinacci =
Network Working Group                           =
            D. Farinacci

      
Internet-Draft    =
                                             V. Fuller Internet-Draft                                           =
      V. Fuller

      
Intended status: =
Standards Track                                D. Meyer =
Intended status: Standards Track                =
                D. Meyer

      

      
Expires: March 2, 2018                                    =
      D. Lewis Expires: April 19, 2018                                   =
      D. Lewis

      
                  =
                                         Cisco Systems                                                          =
  Cisco Systems

      
                  =
                                     A. Cabellos (Ed.)                                                        =
A. Cabellos (Ed.)

      
                  =
                                     UPC/BarcelonaTech                                                        =
UPC/BarcelonaTech

      

      
                =
                                         August =
29, 2017                       =
                                  October =
16, 2017

      
 =


      
               =
The Locator/ID Separation Protocol (LISP)                The Locator/ID Separation Protocol =
(LISP)

      

      
                =
     draft-ietf-lisp-rfc6830bis-05 =
                     =
draft-ietf-lisp-rfc6830bis-06

      
 =


      
Abstract =
Abstract

      
 =


      
   This document =
describes the data-plane protocol for the Locator/ID    This document describes the data-plane protocol for =
the Locator/ID

      
   Separation =
Protocol (LISP).  LISP defines two namespaces, End-point =
   Separation Protocol (LISP).  LISP defines =
two namespaces, End-point

      
   Identifiers =
(EIDs) that identify end-hosts and Routing Locators    Identifiers (EIDs) that identify end-hosts and =
Routing Locators

      
   (RLOCs) that =
identify network attachment points.  With this, LISP    (RLOCs) that identify network attachment points.  =
With this, LISP

      
   effectively =
separates control from data, and allows routers to create =
   effectively separates control from data, and =
allows routers to create

      
   overlay =
networks.  LISP-capable routers exchange encapsulated packets =
   overlay networks.  LISP-capable routers =
exchange encapsulated packets

      
   according to =
EID-to-RLOC mappings stored in a local map-cache.  The    according to EID-to-RLOC mappings stored in a local =
map-cache.  The

      
 =


      
skipping to =
change at =
page 1, line 39 =C2=B6 =
skipping to change at page 1, line 39 =C2=B6

      
   among other =
features.    among other =
features.

      
 =


      
Status of This =
Memo Status of This Memo

      
 =


      
   This =
Internet-Draft is submitted in full conformance with the =
   This Internet-Draft is submitted in full =
conformance with the

      
   provisions of =
BCP 78 and BCP 79.    provisions of =
BCP 78 and BCP 79.

      
 =


      
   =
Internet-Drafts are working documents of the Internet =
Engineering    Internet-Drafts are =
working documents of the Internet Engineering

      
   Task Force =
(IETF).  Note that other groups may also distribute    Task Force (IETF).  Note that other groups may also =
distribute

      
   working =
documents as Internet-Drafts.  The list of current Internet- =
   working documents as Internet-Drafts.  The =
list of current Internet-

      

      
   Drafts is at =
http://datatracker.ietf.org/drafts/current/.    Drafts is at https://datatracker.ietf.org/drafts/current/.

      
 =


      
   =
Internet-Drafts are draft documents valid for a maximum of six =
months    Internet-Drafts are draft =
documents valid for a maximum of six months

      
   and may be =
updated, replaced, or obsoleted by other documents at any =
   and may be updated, replaced, or obsoleted =
by other documents at any

      
   time.  It is =
inappropriate to use Internet-Drafts as reference    time.  It is inappropriate to use Internet-Drafts as =
reference

      
   material or to =
cite them other than as "work in progress."    material or to cite them other than as "work in =
progress."

      
 =


      

      
   This =
Internet-Draft will expire on March 2, =
2018.    This Internet-Draft will =
expire on April 19, 2018.

      
 =


      
Copyright =
Notice Copyright Notice

      
 =


      
   Copyright (c) =
2017 IETF Trust and the persons identified as the    Copyright (c) 2017 IETF Trust and the persons =
identified as the

      
   document =
authors.  All rights reserved.    =
document authors.  All rights reserved.

      
 =


      
   This document =
is subject to BCP 78 and the IETF Trust's Legal    This document is subject to BCP 78 and the IETF =
Trust's Legal

      
   Provisions =
Relating to IETF Documents    =
Provisions Relating to IETF Documents

      

      
   =
(http://trustee.ietf.org/license-info) in effect on the date of =
   (https://trustee.ietf.org/license-info) in effect on =
the date of

      
   publication of =
this document.  Please review these documents    publication of this document.  Please review these =
documents

      
   carefully, as =
they describe your rights and restrictions with respect =
   carefully, as they describe your rights and =
restrictions with respect

      
   to this =
document.  Code Components extracted from this document must =
   to this document.  Code Components extracted =
from this document must

      
   include =
Simplified BSD License text as described in Section 4.e of =
   include Simplified BSD License text as =
described in Section 4.e of

      
   the Trust =
Legal Provisions and are provided without warranty as    the Trust Legal Provisions and are provided without =
warranty as

      
   described in =
the Simplified BSD License.    =
described in the Simplified BSD License.

      
 =


      
Table of =
Contents Table of Contents

      
 =


      
   1.  =
Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   =
3    1.  Introduction  . . . . . . . . =
. . . . . . . . . . . . . . . .   3

      
 =


      
skipping to =
change at =
page 2, line 46 =C2=B6 =
skipping to change at page 2, line 46 =C2=B6

      
   9.  Routing =
Locator Selection . . . . . . . . . . . . . . . . . .  23 =
   9.  Routing Locator Selection . . . . . . . =
. . . . . . . . . . .  23

      
   10. Routing =
Locator Reachability  . . . . . . . . . . . . . . . .  24 =
   10. Routing Locator Reachability  . . . . . =
. . . . . . . . . . .  24

      
     10.1.  Echo =
Nonce Algorithm . . . . . . . . . . . . . . . . . .  27 =
     10.1.  Echo Nonce Algorithm . . . . . . . =
. . . . . . . . . . .  27

      
     10.2.  =
RLOC-Probing Algorithm . . . . . . . . . . . . . . . . .  28 =
     10.2.  RLOC-Probing Algorithm . . . . . . =
. . . . . . . . . . .  28

      
   11. EID =
Reachability within a LISP Site . . . . . . . . . . . . .  29 =
   11. EID Reachability within a LISP Site . . =
. . . . . . . . . . .  29

      
   12. Routing =
Locator Hashing . . . . . . . . . . . . . . . . . . .  30 =
   12. Routing Locator Hashing . . . . . . . . =
. . . . . . . . . . .  30

      
   13. Changing =
the Contents of EID-to-RLOC Mappings . . . . . . . .  31 =
   13. Changing the Contents of EID-to-RLOC =
Mappings . . . . . . . .  31

      
     13.1.  Clock =
Sweep  . . . . . . . . . . . . . . . . . . . . . .  32      13.1.  Clock Sweep  . . . . . . . . . . . . . . . . =
. . . . . .  32

      
     13.2.  =
Solicit-Map-Request (SMR)  . . . . . . . . . . . . . . .  32 =
     13.2.  Solicit-Map-Request (SMR)  . . . . =
. . . . . . . . . . .  32

      
     13.3.  =
Database Map-Versioning  . . . . . . . . . . . . . . . .  34 =
     13.3.  Database Map-Versioning  . . . . . =
. . . . . . . . . . .  34

      

      
   14. =
Multicast Considerations  . . . . . . . . . . . . . . . . . .  34    14. =
Multicast Considerations  . . . . . . . . . . . . . . . . . .  35

      
   15. Router =
Performance Considerations . . . . . . . . . . . . . .  35 =
   15. Router Performance Considerations . . . =
. . . . . . . . . . .  35

      
   16. Mobility =
Considerations . . . . . . . . . . . . . . . . . . .  36 =
   16. Mobility Considerations . . . . . . . . =
. . . . . . . . . . .  36

      
     16.1.  Slow =
Mobility  . . . . . . . . . . . . . . . . . . . . .  36 =
     16.1.  Slow Mobility  . . . . . . . . . . =
. . . . . . . . . . .  36

      
     16.2.  Fast =
Mobility  . . . . . . . . . . . . . . . . . . . . .  36 =
     16.2.  Fast Mobility  . . . . . . . . . . =
. . . . . . . . . . .  36

      
     16.3.  LISP =
Mobile Node Mobility  . . . . . . . . . . . . . . .  37 =
     16.3.  LISP Mobile Node Mobility  . . . . =
. . . . . . . . . . .  37

      
   17. LISP xTR =
Placement and Encapsulation Methods  . . . . . . . .  38 =
   17. LISP xTR Placement and Encapsulation =
Methods  . . . . . . . .  38

      
     17.1.  =
First-Hop/Last-Hop xTRs  . . . . . . . . . . . . . . . .  39 =
     17.1.  First-Hop/Last-Hop xTRs  . . . . . =
. . . . . . . . . . .  39

      
     17.2.  =
Border/Edge xTRs . . . . . . . . . . . . . . . . . . . .  39 =
     17.2.  Border/Edge xTRs . . . . . . . . . =
. . . . . . . . . . .  39

      
     17.3.  ISP =
Provider Edge (PE) xTRs  . . . . . . . . . . . . . .  40 =
     17.3.  ISP Provider Edge (PE) xTRs  . . . =
. . . . . . . . . . .  40

      
     17.4.  LISP =
Functionality with Conventional NATs  . . . . . . .  40 =
     17.4.  LISP Functionality with =
Conventional NATs  . . . . . . .  40

      
 =


      
skipping to =
change at =
page 3, line 22 =C2=B6 =
skipping to change at page 3, line 22 =C2=B6

      
     18.3.  =
Traceroute Using Mixed Locators  . . . . . . . . . . . .  43 =
     18.3.  Traceroute Using Mixed Locators  . =
. . . . . . . . . . .  43

      
   19. Security =
Considerations . . . . . . . . . . . . . . . . . . .  43 =
   19. Security Considerations . . . . . . . . =
. . . . . . . . . . .  43

      
   20. Network =
Management Considerations . . . . . . . . . . . . . .  44 =
   20. Network Management Considerations . . . =
. . . . . . . . . . .  44

      
   21. IANA =
Considerations . . . . . . . . . . . . . . . . . . . . .  44 =
   21. IANA Considerations . . . . . . . . . . =
. . . . . . . . . . .  44

      
     21.1.  LISP =
UDP Port Numbers  . . . . . . . . . . . . . . . . .  44 =
     21.1.  LISP UDP Port Numbers  . . . . . . =
. . . . . . . . . . .  44

      
   22. References =
 . . . . . . . . . . . . . . . . . . . . . . . . .  44    22. References  . . . . . . . . . . . . . . . . . . . =
. . . . . .  44

      
     22.1.  =
Normative References . . . . . . . . . . . . . . . . . .  44 =
     22.1.  Normative References . . . . . . . =
. . . . . . . . . . .  44

      
     22.2.  =
Informative References . . . . . . . . . . . . . . . . .  47 =
     22.2.  Informative References . . . . . . =
. . . . . . . . . . .  47

      
   Appendix A.  =
Acknowledgments  . . . . . . . . . . . . . . . . . .  51 =
   Appendix A.  Acknowledgments  . . . . . . . =
. . . . . . . . . . .  51

      
   Appendix B.  =
Document Change Log  . . . . . . . . . . . . . . . .  51 =
   Appendix B.  Document Change Log  . . . . . =
. . . . . . . . . . .  51

      

      
     B.1.  =
Changes to draft-ietf-lisp-rfc6830bis-04  =
. . . . . . . .  52      B.1.  =
Changes to draft-ietf-lisp-rfc6830bis-06  =
. . . . . . . .  52

      
     B.2.  =
Changes to draft-ietf-lisp-rfc6830bis-03  =
. . . . . . . .  52      B.2.  =
Changes to draft-ietf-lisp-rfc6830bis-05  =
. . . . . . . .  52

      
     B.3.  =
Changes to draft-ietf-lisp-rfc6830bis-02  =
. . . . . . . .  52      B.3.  =
Changes to draft-ietf-lisp-rfc6830bis-04  =
. . . . . . . .  52

      
     B.4.  =
Changes to draft-ietf-lisp-rfc6830bis-01  =
. . . . . . . .  52      B.4.  =
Changes to draft-ietf-lisp-rfc6830bis-03  =
. . . . . . . .  52

      
     B.5.  =
Changes to draft-ietf-lisp-rfc6830bis-00  . . . . . . . .  52      B.5.  =
Changes to draft-ietf-lisp-rfc6830bis-02  . . . . =
. . . .  53

      
   Authors' =
Addresses  . . . . . . . . . . . . . . . . . . . . . . .  52      B.6.  Changes to draft-ietf-lisp-rfc6830bis-01  . =
. . . . . . .  53

      
 =
     B.7.  Changes =
to draft-ietf-lisp-rfc6830bis-00  . . . . . . . .  53

      
 =
   Authors' Addresses  . . . . . . . . . . . . =
. . . . . . . . . . .  53

      
 =


      
1.  =
Introduction 1.  Introduction

      
 =


      
   This document =
describes the Locator/Identifier Separation Protocol    This document describes the Locator/Identifier =
Separation Protocol

      
   (LISP).  LISP =
is an encapsulation protocol built around the    (LISP).  LISP is an encapsulation protocol built =
around the

      
   fundamental =
idea of separating the topological location of a network =
   fundamental idea of separating the =
topological location of a network

      
   attachment =
point from the node's identity [CHIAPPA].  As a result    attachment point from the node's identity [CHIAPPA].  =
As a result

      
   LISP creates =
two namespaces: Endpoint Identifiers (EIDs), that are    LISP creates two namespaces: Endpoint Identifiers =
(EIDs), that are

      
   used to =
identify end-hosts (e.g., nodes or Virtual Machines) and =
   used to identify end-hosts (e.g., nodes or =
Virtual Machines) and

      
   routable =
Routing Locators (RLOCs), used to identify network    routable Routing Locators (RLOCs), used to identify =
network

      
 =


      
skipping to =
change at =
page 5, line 19 =C2=B6 =
skipping to change at page 5, line 19 =C2=B6

      
      the first =
(most inner) LISP header of a packet.  The host obtains =
      the first (most inner) LISP header of a =
packet.  The host obtains

      
      a =
destination EID the same way it obtains a destination address =
      a destination EID the same way it obtains =
a destination address

      
      today, for =
example, through a Domain Name System (DNS) [RFC1034]       today, for example, through a Domain Name System =
(DNS) [RFC1034]

      
      lookup or =
Session Initiation Protocol (SIP) [RFC3261] exchange.       lookup or Session Initiation Protocol (SIP) =
[RFC3261] exchange.

      
      The source =
EID is obtained via existing mechanisms used to set a       The source EID is obtained via existing mechanisms =
used to set a

      
      host's =
"local" IP address.  An EID used on the public Internet =
      host's "local" IP address.  An EID used =
on the public Internet

      
      must have =
the same properties as any other IP address used in that =
      must have the same properties as any =
other IP address used in that

      
      manner; =
this means, among other things, that it must be globally =
      manner; this means, among other things, =
that it must be globally

      
      unique.  An =
EID is allocated to a host from an EID-Prefix block       unique.  An EID is allocated to a host from an =
EID-Prefix block

      
      associated =
with the site where the host is located.  An EID can be =
      associated with the site where the host =
is located.  An EID can be

      

      
      used by a =
host to refer to other hosts.  EIDs MUST NOT be =
used as       used by a host =
to refer to other hosts.  Note that EID blocks MAY

      
      LISP RLOCs.  Note that EID blocks MAY be =
assigned in a       be assigned in a =
hierarchical manner, independent of the network

      
      =
hierarchical manner, independent of the network topology, to =
      topology, to facilitate scaling of the =
mapping database.  In

      
      =
facilitate scaling of the mapping database.  In addition, an =
EID       addition, an EID block =
assigned to a site may have site-local
      block =
assigned to a site may have site-local structure       structure (subnetting) for routing within the =
site; this structure

      
      =
(subnetting) for routing within the site; this structure is not =
      is not visible to the global routing =
system.  In theory, the bit

      
      visible =
to the global routing system.  In theory, the bit string =
      string that represents an EID for one =
device can represent an RLOC

      
      that =
represents an EID for one device can represent an RLOC for a =
      for a different device.  As the =
architecture is realized, if a

      
      different =
device.  As the architecture is realized, if a given bit =
      given bit string is both an RLOC and an =
EID, it must refer to the

      
      string is =
both an RLOC and an EID, it must refer to the same       same entity in both cases.  When used in =
discussions with other

      
      entity in =
both cases.  When used in discussions with other 

      
      Locator/ID =
separation proposals, a LISP EID will be called an       Locator/ID separation proposals, a LISP EID will =
be called an

      
      "LEID".  =
Throughout this document, any references to "EID" refer =
      "LEID".  Throughout this document, any =
references to "EID" refer

      
      to an =
LEID.       to an LEID.

      
 =


      
   EID-Prefix:   =
An EID-Prefix is a power-of-two block of EIDs that are    EID-Prefix:   An EID-Prefix is a power-of-two block =
of EIDs that are

      
      allocated =
to a site by an address allocation authority.  EID-       allocated to a site by an address allocation =
authority.  EID-

      
      Prefixes =
are associated with a set of RLOC addresses that make up =
      Prefixes are associated with a set of =
RLOC addresses that make up

      
      a "database =
mapping".  EID-Prefix allocations can be broken up       a "database mapping".  EID-Prefix allocations can =
be broken up

      
      into =
smaller blocks when an RLOC set is to be associated with the =
      into smaller blocks when an RLOC set is =
to be associated with the

      
      larger =
EID-Prefix block.  A globally routed address block (whether =
      larger EID-Prefix block.  A globally =
routed address block (whether

      
 =


      
skipping to =
change at =
page 7, line 9 =C2=B6 =
skipping to change at page 7, line 7 =C2=B6

      
      network =
that strips an outer LISP header for Traffic Engineering =
      network that strips an outer LISP header =
for Traffic Engineering

      
      =
purposes.       purposes.

      
 =


      
   xTR:   An xTR =
is a reference to an ITR or ETR when direction of data    xTR:   An xTR is a reference to an ITR or ETR when =
direction of data

      
      flow is not =
part of the context description.  "xTR" refers to the       flow is not part of the context description.  =
"xTR" refers to the

      
      router that =
is the tunnel endpoint and is used synonymously with       router that is the tunnel endpoint and is used =
synonymously with

      
      the term =
"Tunnel Router".  For example, "An xTR can be located at =
      the term "Tunnel Router".  For example, =
"An xTR can be located at

      
      the =
Customer Edge (CE) router" indicates both ITR and ETR       the Customer Edge (CE) router" indicates both ITR =
and ETR

      
      =
functionality at the CE router.       =
functionality at the CE router.

      
 =


      

      
 =
   Re-encapsulating =
Tunneling in RTRs:   Re-encapsulating Tunneling

      
 =
      occurs when an =
RTR (Re-encapsulating Tunnel Router) acts like an

      
 =
      ETR to remove a =
LISP header, then acts as an ITR to prepend a new

      
 =
      LISP header.  =
Doing this allows a packet to be re-routed by the

      
 =
      RTR without =
adding the overhead of additional tunnel headers.  Any

      
 =
      references to =
tunnels in this specification refer to dynamic

      
 =
      encapsulating =
tunnels; they are never statically configured.  When

      
 =
      using multiple =
mapping database systems, care must be taken to not

      
 =
      create =
re-encapsulation loops through misconfiguration.

      
 =
                                               =
                          

      
   LISP Router:   =
A LISP router is a router that performs the functions    LISP Router:   A LISP router is a router that =
performs the functions

      
      of any or =
all of the following: ITR, ETR, RTR, Proxy-ITR (PITR),       of any or all of the following: ITR, ETR, RTR, =
Proxy-ITR (PITR),

      
      or =
Proxy-ETR (PETR).       or Proxy-ETR =
(PETR).

      
 =


      
   EID-to-RLOC =
Map-Cache:   The EID-to-RLOC map-cache is a short-lived, =
   EID-to-RLOC Map-Cache:   The EID-to-RLOC =
map-cache is a short-lived,

      
      on-demand =
table in an ITR that stores, tracks, and is responsible =
      on-demand table in an ITR that stores, =
tracks, and is responsible

      
      for timing =
out and otherwise validating EID-to-RLOC mappings.       for timing out and otherwise validating =
EID-to-RLOC mappings.

      
      This cache =
is distinct from the full "database" of EID-to-RLOC       This cache is distinct from the full "database" of =
EID-to-RLOC

      
      mappings; =
it is dynamic, local to the ITR(s), and relatively       mappings; it is dynamic, local to the ITR(s), and =
relatively

      
      small, =
while the database is distributed, relatively static, and =
      small, while the database is distributed, =
relatively static, and

      
 =


      
skipping to =
change at =
page 7, line 45 =C2=B6 =
skipping to change at page 8, line 5 =C2=B6

      
 =


      
   Recursive =
Tunneling:   Recursive Tunneling occurs when a packet has =
   Recursive Tunneling:   Recursive Tunneling =
occurs when a packet has

      
      more than =
one LISP IP header.  Additional layers of tunneling MAY =
      more than one LISP IP header.  Additional =
layers of tunneling MAY

      
      be employed =
to implement Traffic Engineering or other re-routing       be employed to implement Traffic Engineering or =
other re-routing

      
      as needed.  =
When this is done, an additional "outer" LISP header       as needed.  When this is done, an additional =
"outer" LISP header

      
      is added, =
and the original RLOCs are preserved in the "inner"       is added, and the original RLOCs are preserved in =
the "inner"

      
      header.  =
Any references to tunnels in this specification refer to =
      header.  Any references to tunnels in =
this specification refer to

      
      dynamic =
encapsulating tunnels; they are never statically       dynamic encapsulating tunnels; they are never =
statically

      
      =
configured.       configured.

      
 =


      

      
   Re-encapsulating Tunneling in RTRs:   Re-encapsulating =
Tunneling 

      
      occurs when an RTR (Re-encapsulating Tunnel =
Router) acts like an 

      
      ETR to remove a LISP header, then acts as an ITR =
to prepend a new 

      
      LISP header.  Doing this allows a packet to be =
re-routed by the 

      
      RTR without adding the overhead of additional =
tunnel headers.  Any 

      
      references to tunnels in this specification refer =
to dynamic 

      
      encapsulating tunnels; they are never statically =
configured.  When 

      
      using multiple mapping database systems, care =
must be taken to not 

      
      create re-encapsulation loops through =
misconfiguration. 

      
                =
                                                          =


      
   LISP Header:   =
LISP header is a term used in this document to refer    LISP Header:   LISP header is a term used in this =
document to refer

      
      to the =
outer IPv4 or IPv6 header, a UDP header, and a LISP-       to the outer IPv4 or IPv6 header, a UDP header, =
and a LISP-

      
      specific =
8-octet header that follow the UDP header and that an ITR =
      specific 8-octet header that follow the =
UDP header and that an ITR

      
      prepends or =
an ETR strips.       prepends or an =
ETR strips.

      
 =


      
   Address Family =
Identifier (AFI):   AFI is a term used to describe an    Address Family Identifier (AFI):   AFI is a term used =
to describe an

      

      
      address =
encoding in a packet.  An address family currently     =
  address encoding in a packet.  An address family that pertains to

      
      pertains =
to an IPv4 or IPv6 address.  See [AFN] and [RFC3232] =
for       the =
data-plane, can be an IPv4, IPv6, =
or MAC address.  See [AFN]

      
      details.  =
An AFI value of 0 used in this specification indicates       and [RFC3232] for details.  An AFI value of 0 =
used in this

      
      an =
unspecified encoded address where the length of the address is =
      specification indicates an unspecified =
encoded address where the

      
      0 octets =
following the 16-bit AFI value of 0.  =
     length of the address is 0 octets following the 16-bit AFI =
value

      
 =
      of 0.

      
 =


      
   Negative =
Mapping Entry:   A negative mapping entry, also known as a =
   Negative Mapping Entry:   A negative mapping =
entry, also known as a

      
      negative =
cache entry, is an EID-to-RLOC entry where an EID-Prefix =
      negative cache entry, is an EID-to-RLOC =
entry where an EID-Prefix

      
      is =
advertised or stored with no RLOCs.  That is, the Locator-Set =
      is advertised or stored with no RLOCs.  =
That is, the Locator-Set

      
      for the =
EID-to-RLOC entry is empty or has an encoded Locator count =
      for the EID-to-RLOC entry is empty or has =
an encoded Locator count

      
      of 0.  This =
type of entry could be used to describe a prefix from       of 0.  This type of entry could be used to =
describe a prefix from

      
      a non-LISP =
site, which is explicitly not in the mapping database.       a non-LISP site, which is explicitly not in the =
mapping database.

      
      There are a =
set of well-defined actions that are encoded in a       There are a set of well-defined actions that are =
encoded in a

      
      Negative =
Map-Reply.       Negative =
Map-Reply.

      
 =


      
 =


      
skipping to =
change at =
page 9, line 24 =C2=B6 =
skipping to change at page 9, line 21 =C2=B6

      
      in the edge =
network are the demarcation points to separate the       in the edge network are the demarcation points to =
separate the

      
      edge =
network from the core network.       =
edge network from the core network.

      
 =


      
   Client-side:  =
Client-side is a term used in this document to indicate =
   Client-side:  Client-side is a term used in =
this document to indicate

      
      a =
connection initiation attempt by an EID.  The ITR(s) at the =
LISP       a connection initiation =
attempt by an EID.  The ITR(s) at the LISP

      
      site are =
the first to get involved in obtaining database Map-Cache =
      site are the first to get involved in =
obtaining database Map-Cache

      
      entries by =
sending Map-Request messages.       =
entries by sending Map-Request messages.

      
 =


      
   Server-side:  =
Server-side is a term used in this document to indicate =
   Server-side:  Server-side is a term used in =
this document to indicate

      
      that a =
connection initiation attempt is being accepted for a       that a connection initiation attempt is being =
accepted for a

      

      
      =
destination EID.  The ETR(s) at the destination LISP site are the       =
destination EID.  The ETR(s) at the destination LISP site may be

      
      first to =
send Map-Replies to the source site initiating the       the first to send Map-Replies to the source site =
initiating the

      
      connection. =
 The ETR(s) at this destination site can obtain       connection.  The ETR(s) at this destination site =
can obtain

      
      mappings by =
gleaning information from Map-Requests, Data-Probes,       mappings by gleaning information from =
Map-Requests, Data-Probes,

      
      or =
encapsulated packets.       or =
encapsulated packets.

      
 =


      
   =
Locator-Status-Bits (LSBs):  Locator-Status-Bits are present in =
the    Locator-Status-Bits (LSBs):  =
Locator-Status-Bits are present in the
      LISP =
header.  They are used by ITRs to inform ETRs about the up/ =
      LISP header.  They are used by ITRs to =
inform ETRs about the up/

      
      down status =
of all ETRs at the local site.  These bits are used as       down status of all ETRs at the local site.  These =
bits are used as

      
      a hint to =
convey up/down router status and not path reachability       a hint to convey up/down router status and not =
path reachability

      
      status.  =
The LSBs can be verified by use of one of the Locator       status.  The LSBs can be verified by use of one of =
the Locator

      
      =
reachability algorithms described in Section 10.       reachability algorithms described in Section =
10.

      
 =


      
skipping to =
change at =
page 11, line 30 =C2=B6 =
skipping to change at page 11, line =
30 =C2=B6

      
   when =
re-routing of the path for a packet is desired.  A potential =
   when re-routing of the path for a packet is =
desired.  A potential

      
   use-case for =
this would be an ISP router that needs to perform    use-case for this would be an ISP router that needs =
to perform

      
   Traffic =
Engineering for packets flowing through its network.  In such =
   Traffic Engineering for packets flowing =
through its network.  In such

      
   a situation, =
termed "Recursive Tunneling", an ISP transit acts as an =
   a situation, termed "Recursive Tunneling", =
an ISP transit acts as an

      
   additional =
ITR, and the RLOC it uses for the new prepended header    additional ITR, and the RLOC it uses for the new =
prepended header

      
   would be =
either a TE-ETR within the ISP (along an intra-ISP traffic =
   would be either a TE-ETR within the ISP =
(along an intra-ISP traffic

      
   engineered =
path) or a TE-ETR within another ISP (an inter-ISP traffic =
   engineered path) or a TE-ETR within another =
ISP (an inter-ISP traffic

      
   engineered =
path, where an agreement to build such a path exists).    engineered path, where an agreement to build such a =
path exists).

      
 =


      
   In order to =
avoid excessive packet overhead as well as possible    In order to avoid excessive packet overhead as well =
as possible

      

      
   =
encapsulation loops, this document mandates =
that a maximum of two    =
encapsulation loops, this document recommends that a maximum of two

      
   LISP headers =
can be prepended to a packet.  For initial LISP    LISP headers can be prepended to a packet.  For =
initial LISP

      
   deployments, =
it is assumed that two headers is sufficient, where the =
   deployments, it is assumed that two headers =
is sufficient, where the

      
   first =
prepended header is used at a site for Location/Identity =
   first prepended header is used at a site for =
Location/Identity

      
   separation and =
the second prepended header is used inside a service    separation and the second prepended header is used =
inside a service

      
   provider for =
Traffic Engineering purposes.    =
provider for Traffic Engineering purposes.

      
 =


      
   Tunnel Routers =
can be placed fairly flexibly in a multi-AS topology.    Tunnel Routers can be placed fairly flexibly in a =
multi-AS topology.

      
   For example, =
the ITR for a particular end-to-end packet exchange    For example, the ITR for a particular end-to-end =
packet exchange

      
   might be the =
first-hop or default router within a site for the source =
   might be the first-hop or default router =
within a site for the source

      
   host.  =
Similarly, the ETR might be the last-hop router directly =
   host.  Similarly, the ETR might be the =
last-hop router directly

      
 =


      
skipping =
to change at page 23, line =
10 =C2=B6 =
skipping to change at page 23, line =
10 =C2=B6

      
   that prepends =
a LISP header will copy a 24-bit value used by the LISP =
   that prepends a LISP header will copy a =
24-bit value used by the LISP

      
   router to =
uniquely identify the address space.  The value is copied =
   router to uniquely identify the address =
space.  The value is copied

      
   to the =
'Instance ID' field of the LISP header, and the I-bit is set =
   to the 'Instance ID' field of the LISP =
header, and the I-bit is set

      
   to 1. =
   to 1.

      
 =


      
   When an ETR =
decapsulates a packet, the Instance ID from the LISP    When an ETR decapsulates a packet, the Instance ID =
from the LISP

      
   header is used =
as a table identifier to locate the forwarding table    header is used as a table identifier to locate the =
forwarding table

      
   to use for the =
inner destination EID lookup.    to =
use for the inner destination EID lookup.

      
 =


      
   For example, =
an 802.1Q VLAN tag or VPN identifier could be used as a =
   For example, an 802.1Q VLAN tag or VPN =
identifier could be used as a

      

      
   24-bit =
Instance ID.    24-bit Instance ID.  =
See [I-D.ietf-lisp-vpn] for LISP VPN =
use-case

      
 =
   =
details.

      
 =


      
   The Instance =
ID that is stored in the mapping database when LISP-DDT =
   The Instance ID that is stored in the =
mapping database when LISP-DDT

      
   =
[I-D.ietf-lisp-ddt] is used is 32 bits in length.  That means =
the    [I-D.ietf-lisp-ddt] is used is =
32 bits in length.  That means the

      
   control-plane =
can store more instances than a given data-plane can    control-plane can store more instances than a given =
data-plane can

      
   use.  Multiple =
data-planes can use the same 32-bit space as long as    use.  Multiple data-planes can use the same 32-bit =
space as long as

      
   the low-order =
24 bits don't overlap among xTRs.    =
the low-order 24 bits don't overlap among xTRs.

      
 =


      
9.  Routing =
Locator Selection 9.  Routing Locator =
Selection

      
 =


      
   Both the =
client-side and server-side may need control over the    Both the client-side and server-side may need control =
over the

      
 =


      
skipping =
to change at page 32, line =
46 =C2=B6 =
skipping to change at page 32, line =
46 =C2=B6

      
   where mappings =
change, to control the rate they receive requests for    where mappings change, to control the rate they =
receive requests for

      
   Map-Reply =
messages.  SMRs are also used to tell remote ITRs to update =
   Map-Reply messages.  SMRs are also used to =
tell remote ITRs to update

      
   the mappings =
they have cached.    the mappings they =
have cached.

      
 =


      
   Since the ETRs =
don't keep track of remote ITRs that have cached their    Since the ETRs don't keep track of remote ITRs that =
have cached their

      
   mappings, they =
do not know which ITRs need to have their mappings    mappings, they do not know which ITRs need to have =
their mappings

      
   updated.  As a =
result, an ETR will solicit Map-Requests (called an    updated.  As a result, an ETR will solicit =
Map-Requests (called an

      
   SMR message) =
from those sites to which it has been sending    SMR message) from those sites to which it has been =
sending

      
   encapsulated =
data for the last minute.  In particular, an ETR will    encapsulated data for the last minute.  In =
particular, an ETR will

      
   send an SMR to =
an ITR to which it has recently sent encapsulated    send an SMR to an ITR to which it has recently sent =
encapsulated

      

      
   =
data.    data.  This can only occur when both ITR and ETR functionality =
reside

      
 =
   in the same =
router.

      
 =


      
   An SMR message =
is simply a bit set in a Map-Request message.  An ITR    An SMR message is simply a bit set in a Map-Request =
message.  An ITR

      
   or PITR will =
send a Map-Request when they receive an SMR message.    or PITR will send a Map-Request when they receive an =
SMR message.

      
   Both the SMR =
sender and the Map-Request responder MUST rate-limit    Both the SMR sender and the Map-Request responder =
MUST rate-limit

      
   these =
messages.  Rate-limiting can be implemented as a global rate- =
   these messages.  Rate-limiting can be =
implemented as a global rate-

      
   limiter or one =
rate-limiter per SMR destination.    =
limiter or one rate-limiter per SMR destination.

      
 =


      
   The following =
procedure shows how an SMR exchange occurs when a site    The following procedure shows how an SMR exchange =
occurs when a site

      
   is doing =
Locator-Set compaction for an EID-to-RLOC mapping:    is doing Locator-Set compaction for an EID-to-RLOC =
mapping:

      
 =


      
 =


      
skipping =
to change at page 36, line =
43 =C2=B6 =
skipping to change at page 36, line =
47 =C2=B6

      
   decoupling the =
address space used by a site from the address spaces    decoupling the address space used by a site from the =
address spaces

      
   used by its =
ISPs [RFC4984].    used by its ISPs =
[RFC4984].

      
 =


      
16.2.  Fast =
Mobility 16.2.  Fast Mobility

      
 =


      
   Fast endpoint =
mobility occurs when an endpoint moves relatively    Fast endpoint mobility occurs when an endpoint moves =
relatively

      
   rapidly, =
changing its IP-layer network attachment point.  Maintenance =
   rapidly, changing its IP-layer network =
attachment point.  Maintenance

      
   of session =
continuity is a goal.  This is where the Mobile IPv4    of session continuity is a goal.  This is where the =
Mobile IPv4

      
   [RFC5944] and =
Mobile IPv6 [RFC6275] [RFC4866] mechanisms are used and =
   [RFC5944] and Mobile IPv6 [RFC6275] =
[RFC4866] mechanisms are used and

      
   primarily =
where interactions with LISP need to be explored, such as =
   primarily where interactions with LISP need =
to be explored, such as

      

      
   the =
mechanisms in [I-D.portoles-lisp-eid-mobility] when the EID =
moves    the mechanisms in [I-D.ietf-lisp-eid-mobility] when the EID moves =
but

      
   but the RLOC =
is in the network infrastructure.    =
the RLOC is in the network infrastructure.

      
 =


      
   In LISP, one =
possibility is to "glean" information.  When a packet    In LISP, one possibility is to "glean" information.  =
When a packet

      
   arrives, the =
ETR could examine the EID-to-RLOC mapping and use that    arrives, the ETR could examine the EID-to-RLOC =
mapping and use that

      
   mapping for =
all outgoing traffic to that EID.  It can do this after =
   mapping for all outgoing traffic to that =
EID.  It can do this after

      
   performing a =
route-returnability check, to ensure that the new    performing a route-returnability check, to ensure =
that the new

      
   network =
location does have an internal route to that endpoint.    network location does have an internal route to that =
endpoint.

      
   However, this =
does not cover the case where an ITR (the node assigned =
   However, this does not cover the case where =
an ITR (the node assigned

      
   the RLOC) at =
the mobile-node location has been compromised.    the RLOC) at the mobile-node location has been =
compromised.

      
 =


      
   Mobile IP =
packet exchange is designed for an environment in which all =
   Mobile IP packet exchange is designed for an =
environment in which all

      
 =


      
skipping =
to change at page 37, line =
31 =C2=B6 =
skipping to change at page 37, line =
36 =C2=B6

      
   for any =
endpoint will return a binding for the entire mobile prefix. =
   for any endpoint will return a binding for =
the entire mobile prefix.

      
 =


      
   If mobile =
networks become a more common occurrence, it may be useful =
   If mobile networks become a more common =
occurrence, it may be useful

      
   to revisit the =
design of the mapping service and allow for dynamic    to revisit the design of the mapping service and =
allow for dynamic

      
   updates of the =
database.    updates of the =
database.

      
 =


      
   The issue of =
interactions between mobility and LISP needs to be    The issue of interactions between mobility and LISP =
needs to be

      
   explored =
further.  Specific improvements to the entire system will =
   explored further.  Specific improvements to =
the entire system will

      
   depend on the =
details of mapping mechanisms.  Mapping mechanisms    depend on the details of mapping mechanisms.  Mapping =
mechanisms

      
   should be =
evaluated on how well they support session continuity for =
   should be evaluated on how well they support =
session continuity for

      

      
   mobile =
nodes.  See [I-D.farinacci-lisp-predictive-rlocs] for =
more    mobile nodes.  See [I-D.ietf-lisp-predictive-rlocs] for more =
recent

      
   recent =
mechanisms which can provide near-zero packet loss during =
   mechanisms which can provide near-zero =
packet loss during handoffs.

      
   =
handoffs. 

      
 =


      
16.3.  LISP =
Mobile Node Mobility 16.3.  LISP =
Mobile Node Mobility

      
 =


      
   A mobile =
device can use the LISP infrastructure to achieve mobility =
   A mobile device can use the LISP =
infrastructure to achieve mobility

      
   by =
implementing the LISP encapsulation and decapsulation functions =
   by implementing the LISP encapsulation and =
decapsulation functions

      
   and acting as =
a simple ITR/ETR.  By doing this, such a "LISP mobile    and acting as a simple ITR/ETR.  By doing this, such =
a "LISP mobile

      
   node" can use =
topologically independent EID IP addresses that are not =
   node" can use topologically independent EID =
IP addresses that are not

      
   advertised =
into and do not impose a cost on the global routing    advertised into and do not impose a cost on the =
global routing

      
   system.  These =
EIDs are maintained at the edges of the mapping system    system.  These EIDs are maintained at the edges of =
the mapping system

      
   in LISP =
Map-Servers and Map-Resolvers) and are provided on demand to =
   in LISP Map-Servers and Map-Resolvers) and =
are provided on demand to

      
 =


      
skipping =
to change at page 40, line =
46 =C2=B6 =
skipping to change at page 40, line =
46 =C2=B6

      
   and provider =
want control, then Recursive or Re-Encapsulating Tunnels =
   and provider want control, then Recursive or =
Re-Encapsulating Tunnels

      
   are =
used.    are used.

      
 =


      
17.4.  LISP =
Functionality with Conventional NATs 17.4.  LISP Functionality with Conventional NATs

      
 =


      
   LISP routers =
can be deployed behind Network Address Translator (NAT) =
   LISP routers can be deployed behind Network =
Address Translator (NAT)

      
   devices to =
provide the same set of packet services hosts have today =
   devices to provide the same set of packet =
services hosts have today

      
   when they are =
addressed out of private address space. =
   when they are addressed out of private address space.

      
 =


      
   It is =
important to note that a locator address in any LISP control =
   It is important to note that a locator =
address in any LISP control

      

      
   message MUST =
be a globally routable address and =
therefore SHOULD NOT    message MUST be a routable address and therefore =
[RFC1918] addresses

      
   contain [RFC1918] addresses.  If a LISP xTR is configured =
with    SHOULD =
only be presence when running in a local environment.  When =
a

      
   private RLOC =
addresses, they MUST be used only in the =
outer IP header    LISP xTR is =
configured with private RLOC addresses and =
resides behind

      
   so the NAT =
device can translate properly.  Otherwise, EID addresses =
   a NAT device and =
desires to communicate on the Internet, the private

      
   MUST be =
translated before encapsulation is performed when LISP VPNs =
   addresses =
MUST be used only in the outer IP header so the NAT device

      
   are not in =
use.  Both NAT translation and LISP encapsulation    can translate properly.  Otherwise, EID addresses =
MUST be translated

      
   functions =
could be co-located in the same =
device.    before encapsulation is =
performed when LISP VPNs are not in use.

      
 =
   Both NAT translation and LISP encapsulation =
functions could be co-

      
 =
   located in =
the same device.

      
 =


      
17.5.  Packets =
Egressing a LISP Site 17.5.  Packets =
Egressing a LISP Site

      
 =


      
   When a LISP =
site is using two ITRs for redundancy, the failure of one =
   When a LISP site is using two ITRs for =
redundancy, the failure of one

      
   ITR will =
likely shift outbound traffic to the second.  This second =
   ITR will likely shift outbound traffic to =
the second.  This second

      
   ITR's cache =
may not be populated with the same EID-to-RLOC mapping    ITR's cache may not be populated with the same =
EID-to-RLOC mapping

      
   entries as the =
first.  If this second ITR does not have these    entries as the first.  If this second ITR does not =
have these

      
   mappings, =
traffic will be dropped while the mappings are retrieved =
   mappings, traffic will be dropped while the =
mappings are retrieved

      
   from the =
mapping system.  The retrieval of these messages may    from the mapping system.  The retrieval of these =
messages may

      
   increase the =
load of requests being sent into the mapping system.    increase the load of requests being sent into the =
mapping system.

      
 =


      
skipping =
to change at page 45, line =
14 =C2=B6 =
skipping to change at page 45, line =
14 =C2=B6

      
 =


      
   =
[I-D.ietf-lisp-introduction]    =
[I-D.ietf-lisp-introduction]

      
              =
Cabellos-Aparicio, A. and D. Saucez, "An Architectural               Cabellos-Aparicio, A. and D. Saucez, "An =
Architectural

      
              =
Introduction to the Locator/ID Separation Protocol               Introduction to the Locator/ID Separation =
Protocol

      
              =
(LISP)", draft-ietf-lisp-introduction-13 (work in               (LISP)", draft-ietf-lisp-introduction-13 =
(work in

      
              =
progress), April 2015.               =
progress), April 2015.

      
 =


      
   =
[I-D.ietf-lisp-rfc6833bis]    =
[I-D.ietf-lisp-rfc6833bis]

      
              =
Fuller, V., Farinacci, D., and A. Cabellos-Aparicio,               Fuller, V., Farinacci, D., and A. =
Cabellos-Aparicio,

      
              =
"Locator/ID Separation Protocol (LISP) Control-Plane",               "Locator/ID Separation Protocol (LISP) =
Control-Plane",

      

      
              =
draft-ietf-lisp-rfc6833bis-05 (work in progress), =
May               =
draft-ietf-lisp-rfc6833bis-06 (work in progress), =
October

      
              =
2017.               2017.

      
 =


      
   =
[I-D.ietf-lisp-sec]    =
[I-D.ietf-lisp-sec]

      
              =
Maino, F., Ermagan, V., Cabellos-Aparicio, A., and D.               Maino, F., Ermagan, V., Cabellos-Aparicio, =
A., and D.

      

      
              =
Saucez, "LISP-Security (LISP-SEC)", draft-ietf-lisp-sec-12               Saucez, "LISP-Security (LISP-SEC)", draft-ietf-lisp-sec-13

      
              =
(work in progress), November =
2016.               (work in =
progress), September 2017.

      
 =


      
   [RFC0768]  =
Postel, J., "User Datagram Protocol", STD 6, RFC 768,    [RFC0768]  Postel, J., "User Datagram Protocol", STD =
6, RFC 768,

      

      
              =
DOI 10.17487/RFC0768, August 1980, <https://www.rfc-               DOI 10.17487/RFC0768, August =
1980,

      
              =
editor.org/info/rfc768>.    =
           <https://www.rfc-editor.org/info/rfc768>.

      
 =


      
   [RFC0791]  =
Postel, J., "Internet Protocol", STD 5, RFC 791,    [RFC0791]  Postel, J., "Internet Protocol", STD 5, =
RFC 791,

      

      
              =
DOI 10.17487/RFC0791, September 1981, <https://www.rfc-               DOI 10.17487/RFC0791, September =
1981,

      
              =
editor.org/info/rfc791>.    =
           <https://www.rfc-editor.org/info/rfc791>.

      
 =


      
   [RFC1918]  =
Rekhter, Y., Moskowitz, B., Karrenberg, D., de Groot, G., =
   [RFC1918]  Rekhter, Y., Moskowitz, B., =
Karrenberg, D., de Groot, G.,

      
              and =
E. Lear, "Address Allocation for Private Internets",               and E. Lear, "Address Allocation for =
Private Internets",

      
              BCP =
5, RFC 1918, DOI 10.17487/RFC1918, February 1996,               BCP 5, RFC 1918, DOI 10.17487/RFC1918, =
February 1996,

      
              =
<https://www.rfc-editor.org/info/rfc1918>.               =
<https://www.rfc-editor.org/info/rfc1918>.

      
 =


      
   [RFC2119]  =
Bradner, S., "Key words for use in RFCs to Indicate    [RFC2119]  Bradner, S., "Key words for use in RFCs to =
Indicate

      
              =
Requirement Levels", BCP 14, RFC 2119,  =
             Requirement Levels", BCP 14, RFC 2119,

      

      
              =
DOI 10.17487/RFC2119, March 1997, <https://www.rfc-               DOI 10.17487/RFC2119, March 1997,

      
              =
editor.org/info/rfc2119>.   =
            <https://www.rfc-editor.org/info/rfc2119>.

      
 =


      
   [RFC2404]  =
Madson, C. and R. Glenn, "The Use of HMAC-SHA-1-96 within =
   [RFC2404]  Madson, C. and R. Glenn, "The Use =
of HMAC-SHA-1-96 within

      
              ESP =
and AH", RFC 2404, DOI 10.17487/RFC2404, November               ESP and AH", RFC 2404, DOI =
10.17487/RFC2404, November

      
              =
1998, <https://www.rfc-editor.org/info/rfc2404>.               1998, =
<https://www.rfc-editor.org/info/rfc2404>.

      
 =


      
   [RFC3168]  =
Ramakrishnan, K., Floyd, S., and D. Black, "The Addition =
   [RFC3168]  Ramakrishnan, K., Floyd, S., and =
D. Black, "The Addition

      
              of =
Explicit Congestion Notification (ECN) to IP",               of Explicit Congestion Notification (ECN) =
to IP",

      
              RFC =
3168, DOI 10.17487/RFC3168, September 2001,               RFC 3168, DOI 10.17487/RFC3168, September =
2001,

      
              =
<https://www.rfc-editor.org/info/rfc3168>.               =
<https://www.rfc-editor.org/info/rfc3168>.

      
 =


      
   [RFC3232]  =
Reynolds, J., Ed., "Assigned Numbers: RFC 1700 is Replaced =
   [RFC3232]  Reynolds, J., Ed., "Assigned =
Numbers: RFC 1700 is Replaced

      
              by =
an On-line Database", RFC 3232, DOI 10.17487/RFC3232,               by an On-line Database", RFC 3232, DOI =
10.17487/RFC3232,

      
              =
January 2002, <https://www.rfc-editor.org/info/rfc3232>. =
              January 2002, =
<https://www.rfc-editor.org/info/rfc3232>.

      
 =


      
   [RFC4086]  =
Eastlake 3rd, D., Schiller, J., and S. Crocker,    [RFC4086]  Eastlake 3rd, D., Schiller, J., and S. =
Crocker,

      
              =
"Randomness Requirements for Security", BCP 106, RFC 4086, =
              "Randomness Requirements for =
Security", BCP 106, RFC 4086,

      

      
              =
DOI 10.17487/RFC4086, June 2005, <https://www.rfc-               DOI 10.17487/RFC4086, June 2005,

      
              =
editor.org/info/rfc4086>.   =
            <https://www.rfc-editor.org/info/rfc4086>.

      
 =


      
   [RFC4632]  =
Fuller, V. and T. Li, "Classless Inter-domain Routing    [RFC4632]  Fuller, V. and T. Li, "Classless =
Inter-domain Routing

      
              =
(CIDR): The Internet Address Assignment and Aggregation =
              (CIDR): The Internet Address =
Assignment and Aggregation

      
              =
Plan", BCP 122, RFC 4632, DOI 10.17487/RFC4632, August               Plan", BCP 122, RFC 4632, DOI =
10.17487/RFC4632, August

      
              =
2006, <https://www.rfc-editor.org/info/rfc4632>.               2006, =
<https://www.rfc-editor.org/info/rfc4632>.

      
 =


      
   [RFC4868]  =
Kelly, S. and S. Frankel, "Using HMAC-SHA-256, HMAC-SHA- =
   [RFC4868]  Kelly, S. and S. Frankel, "Using =
HMAC-SHA-256, HMAC-SHA-

      
              =
384, and HMAC-SHA-512 with IPsec", RFC 4868,               384, and HMAC-SHA-512 with IPsec", RFC =
4868,

      

      
              =
DOI 10.17487/RFC4868, May 2007, <https://www.rfc-               DOI 10.17487/RFC4868, May 2007,

      
              =
editor.org/info/rfc4868>.   =
            <https://www.rfc-editor.org/info/rfc4868>.

      
 =


      
   [RFC5226]  =
Narten, T. and H. Alvestrand, "Guidelines for Writing an =
   [RFC5226]  Narten, T. and H. Alvestrand, =
"Guidelines for Writing an

      
              =
IANA Considerations Section in RFCs", RFC 5226,               IANA Considerations Section in RFCs", RFC =
5226,

      

      
              =
DOI 10.17487/RFC5226, May 2008, <https://www.rfc-               DOI 10.17487/RFC5226, May 2008,

      
              =
editor.org/info/rfc5226>.   =
            <https://www.rfc-editor.org/info/rfc5226>.

      
 =


      
   [RFC5496]  =
Wijnands, IJ., Boers, A., and E. Rosen, "The Reverse Path =
   [RFC5496]  Wijnands, IJ., Boers, A., and E. =
Rosen, "The Reverse Path

      
              =
Forwarding (RPF) Vector TLV", RFC 5496, =
              Forwarding (RPF) Vector TLV", RFC 5496,

      

      
              =
DOI 10.17487/RFC5496, March 2009, <https://www.rfc-               DOI 10.17487/RFC5496, March 2009,

      
              =
editor.org/info/rfc5496>.   =
            <https://www.rfc-editor.org/info/rfc5496>.

      
 =


      
   [RFC5944]  =
Perkins, C., Ed., "IP Mobility Support for IPv4, Revised", =
   [RFC5944]  Perkins, C., Ed., "IP Mobility =
Support for IPv4, Revised",

      
              RFC =
5944, DOI 10.17487/RFC5944, November 2010,               RFC 5944, DOI 10.17487/RFC5944, November =
2010,

      
              =
<https://www.rfc-editor.org/info/rfc5944>.               =
<https://www.rfc-editor.org/info/rfc5944>.

      
 =


      
   [RFC6115]  Li, =
T., Ed., "Recommendation for a Routing Architecture",    [RFC6115]  Li, T., Ed., "Recommendation for a Routing =
Architecture",

      
              RFC =
6115, DOI 10.17487/RFC6115, February 2011,               RFC 6115, DOI 10.17487/RFC6115, February =
2011,

      
              =
<https://www.rfc-editor.org/info/rfc6115>.               =
<https://www.rfc-editor.org/info/rfc6115>.

      
 =


      
   [RFC6275]  =
Perkins, C., Ed., Johnson, D., and J. Arkko, "Mobility    [RFC6275]  Perkins, C., Ed., Johnson, D., and J. =
Arkko, "Mobility

      
              =
Support in IPv6", RFC 6275, DOI 10.17487/RFC6275, July               Support in IPv6", RFC 6275, DOI =
10.17487/RFC6275, July

      
              =
2011, <https://www.rfc-editor.org/info/rfc6275>.               2011, =
<https://www.rfc-editor.org/info/rfc6275>.

      
 =


      
   [RFC6834]  =
Iannone, L., Saucez, D., and O. Bonaventure, "Locator/ID =
   [RFC6834]  Iannone, L., Saucez, D., and O. =
Bonaventure, "Locator/ID

      
              =
Separation Protocol (LISP) Map-Versioning", RFC 6834,               Separation Protocol (LISP) =
Map-Versioning", RFC 6834,

      

      
              =
DOI 10.17487/RFC6834, January 2013, <https://www.rfc-               DOI 10.17487/RFC6834, January =
2013,

      
              =
editor.org/info/rfc6834>.   =
            <https://www.rfc-editor.org/info/rfc6834>.

      
 =


      
   [RFC6836]  =
Fuller, V., Farinacci, D., Meyer, D., and D. Lewis,    [RFC6836]  Fuller, V., Farinacci, D., Meyer, D., and =
D. Lewis,

      
              =
"Locator/ID Separation Protocol Alternative Logical               "Locator/ID Separation Protocol =
Alternative Logical

      
              =
Topology (LISP+ALT)", RFC 6836, DOI 10.17487/RFC6836,               Topology (LISP+ALT)", RFC 6836, DOI =
10.17487/RFC6836,

      
              =
January 2013, <https://www.rfc-editor.org/info/rfc6836>. =
              January 2013, =
<https://www.rfc-editor.org/info/rfc6836>.

      
 =


      
   [RFC7052]  =
Schudel, G., Jain, A., and V. Moreno, "Locator/ID    [RFC7052]  Schudel, G., Jain, A., and V. Moreno, =
"Locator/ID

      
              =
Separation Protocol (LISP) MIB", RFC 7052,               Separation Protocol (LISP) MIB", RFC =
7052,

      

      
              =
DOI 10.17487/RFC7052, October 2013, <https://www.rfc-               DOI 10.17487/RFC7052, October =
2013,

      
              =
editor.org/info/rfc7052>.   =
            <https://www.rfc-editor.org/info/rfc7052>.

      
 =


      
   [RFC7214]  =
Andersson, L. and C. Pignataro, "Moving Generic Associated =
   [RFC7214]  Andersson, L. and C. Pignataro, =
"Moving Generic Associated

      
              =
Channel (G-ACh) IANA Registries to a New Registry",               Channel (G-ACh) IANA Registries to a New =
Registry",

      
              RFC =
7214, DOI 10.17487/RFC7214, May 2014,  =
             RFC 7214, DOI 10.17487/RFC7214, May 2014,

      
              =
<https://www.rfc-editor.org/info/rfc7214>.               =
<https://www.rfc-editor.org/info/rfc7214>.

      
 =


      
   [RFC7215]  =
Jakab, L., Cabellos-Aparicio, A., Coras, F., Domingo-    [RFC7215]  Jakab, L., Cabellos-Aparicio, A., Coras, =
F., Domingo-

      
              =
Pascual, J., and D. Lewis, "Locator/Identifier Separation =
              Pascual, J., and D. Lewis, =
"Locator/Identifier Separation

      
              =
Protocol (LISP) Network Element Deployment               Protocol (LISP) Network Element =
Deployment

      
              =
Considerations", RFC 7215, DOI 10.17487/RFC7215, April               Considerations", RFC 7215, DOI =
10.17487/RFC7215, April

      
              =
2014, <https://www.rfc-editor.org/info/rfc7215>.               2014, =
<https://www.rfc-editor.org/info/rfc7215>.

      
 =


      
   [RFC7833]  =
Howlett, J., Hartman, S., and A. Perez-Mendez, Ed., "A    [RFC7833]  Howlett, J., Hartman, S., and A. =
Perez-Mendez, Ed., "A

      
              =
RADIUS Attribute, Binding, Profiles, Name Identifier               RADIUS Attribute, Binding, Profiles, Name =
Identifier

      
              =
Format, and Confirmation Methods for the Security               Format, and Confirmation Methods for the =
Security

      
              =
Assertion Markup Language (SAML)", RFC 7833,               Assertion Markup Language (SAML)", RFC =
7833,

      

      
              =
DOI 10.17487/RFC7833, May 2016, <https://www.rfc-               DOI 10.17487/RFC7833, May 2016,

      
              =
editor.org/info/rfc7833>.   =
            <https://www.rfc-editor.org/info/rfc7833>.

      
 =


      
   [RFC7835]  =
Saucez, D., Iannone, L., and O. Bonaventure, "Locator/ID =
   [RFC7835]  Saucez, D., Iannone, L., and O. =
Bonaventure, "Locator/ID

      
              =
Separation Protocol (LISP) Threat Analysis", RFC 7835,               Separation Protocol (LISP) Threat =
Analysis", RFC 7835,

      

      
              =
DOI 10.17487/RFC7835, April 2016, <https://www.rfc-               DOI 10.17487/RFC7835, April 2016,

      
              =
editor.org/info/rfc7835>.   =
            <https://www.rfc-editor.org/info/rfc7835>.

      
 =


      
   [RFC8061]  =
Farinacci, D. and B. Weis, "Locator/ID Separation Protocol =
   [RFC8061]  Farinacci, D. and B. Weis, =
"Locator/ID Separation Protocol

      
              =
(LISP) Data-Plane Confidentiality", RFC 8061,               (LISP) Data-Plane Confidentiality", RFC =
8061,

      

      
              =
DOI 10.17487/RFC8061, February 2017, <https://www.rfc-               DOI 10.17487/RFC8061, February =
2017,

      
              =
editor.org/info/rfc8061>.   =
            <https://www.rfc-editor.org/info/rfc8061>.

      
 =


      
   [RFC8200]  =
Deering, S. and R. Hinden, "Internet Protocol, Version 6 =
   [RFC8200]  Deering, S. and R. Hinden, =
"Internet Protocol, Version 6

      
              =
(IPv6) Specification", STD 86, RFC 8200,               (IPv6) Specification", STD 86, RFC =
8200,

      

      
              =
DOI 10.17487/RFC8200, July 2017, <https://www.rfc-               DOI 10.17487/RFC8200, July 2017,

      
              =
editor.org/info/rfc8200>.   =
            <https://www.rfc-editor.org/info/rfc8200>.

      
 =


      
22.2.  =
Informative References 22.2.  =
Informative References

      
 =


      
   [AFN]      =
IANA, "Address Family Numbers", August 2016,    [AFN]      IANA, "Address Family Numbers", August =
2016,

      
              =
<http://www.iana.org/assignments/address-family-numbers>. =
              =
<http://www.iana.org/assignments/address-family-numbers>.

      
 =


      
   [CHIAPPA]  =
Chiappa, J., "Endpoints and Endpoint names: A Proposed", =
   [CHIAPPA]  Chiappa, J., "Endpoints and =
Endpoint names: A Proposed",

      
              =
1999,               1999,

      
              =
<http://mercury.lcs.mit.edu/~jnc/tech/endpoints.txt>. =
              =
<http://mercury.lcs.mit.edu/~jnc/tech/endpoints.txt>.

      
 =


      

      
   [I-D.farinacci-lisp-predictive-rlocs] =
   [I-D.ietf-lisp-eid-mobility]

      
              Farinacci, D. and P. Pillay-Esnault, "LISP Predictive               Portoles-Comeras, =
M., Ashtaputre, V., Moreno, V., Maino,

      
              RLOCs", =
draft-farinacci-lisp-predictive-rlocs-02 (work in =
              =
F., and D. Farinacci, "LISP L2/L3 EID Mobility Using a

      
              =
progress), May 2017.               Unified Control Plane", =
draft-ietf-lisp-eid-mobility-00
 =
              (work in progress), May =
2017.

      
 =


      
   =
[I-D.ietf-lisp-mn]    =
[I-D.ietf-lisp-mn]

      
              =
Farinacci, D., Lewis, D., Meyer, D., and C. White, "LISP =
              Farinacci, D., Lewis, D., Meyer, =
D., and C. White, "LISP

      
              =
Mobile Node", draft-ietf-lisp-mn-00 (work in progress), =
              Mobile Node", =
draft-ietf-lisp-mn-00 (work in progress),

      
              =
April 2017.               April =
2017.

      
 =


      

      
 =
   [I-D.ietf-lisp-predictive-rlocs]

      
 =
              =
Farinacci, D. and P. Pillay-Esnault, "LISP Predictive

      
 =
              RLOCs", =
draft-ietf-lisp-predictive-rlocs-00 (work in

      
 =
              =
progress), June 2017.

      
 =
                                               =
                          

      
   =
[I-D.ietf-lisp-signal-free-multicast]  =
  [I-D.ietf-lisp-signal-free-multicast]

      
              =
Moreno, V. and D. Farinacci, "Signal-Free LISP Multicast", =
              Moreno, V. and D. Farinacci, =
"Signal-Free LISP Multicast",

      
              =
draft-ietf-lisp-signal-free-multicast-06 (work in               draft-ietf-lisp-signal-free-multicast-06 =
(work in

      
              =
progress), August 2017.               =
progress), August 2017.

      
 =


      

      
 =
   [I-D.ietf-lisp-vpn]

      
 =
              Moreno, =
V. and D. Farinacci, "LISP Virtual Private

      
 =
              Networks =
(VPNs)", draft-ietf-lisp-vpn-00 (work in

      
 =
              =
progress), May 2017.

      
 =
                                               =
                          

      
   =
[I-D.meyer-loc-id-implications]    =
[I-D.meyer-loc-id-implications]

      
              =
Meyer, D. and D. Lewis, "Architectural Implications of               Meyer, D. and D. Lewis, "Architectural =
Implications of

      
              =
Locator/ID Separation", draft-meyer-loc-id-implications-01 =
              Locator/ID Separation", =
draft-meyer-loc-id-implications-01

      
              =
(work in progress), January 2009.      =
         (work in progress), January 2009.

      
 =


      

      
   [I-D.portoles-lisp-eid-mobility] =


      
              Portoles-Comeras, M., Ashtaputre, V., =
Moreno, V., Maino, 

      
              F., and D. Farinacci, "LISP L2/L3 EID =
Mobility Using a 

      
              Unified Control Plane", =
draft-portoles-lisp-eid- 

      
              mobility-02 (work in progress), April =
2017. 

      
                =
                                                          =


      
   [LISA96]   =
Lear, E., Tharp, D., Katinsky, J., and J. Coffin,    [LISA96]   Lear, E., Tharp, D., Katinsky, J., and J. =
Coffin,

      
              =
"Renumbering: Threat or Menace?", Usenix Tenth System               "Renumbering: Threat or Menace?", Usenix =
Tenth System

      
              =
Administration Conference (LISA 96), October 1996.               Administration Conference (LISA 96), =
October 1996.

      
 =


      
   =
[OPENLISP]    [OPENLISP]

      
              =
Iannone, L., Saucez, D., and O. Bonaventure, "OpenLISP               Iannone, L., Saucez, D., and O. =
Bonaventure, "OpenLISP

      
              =
Implementation Report", Work in Progress, July 2008.               Implementation Report", Work in Progress, =
July 2008.

      
 =


      
   [RFC1034]  =
Mockapetris, P., "Domain names - concepts and facilities", =
   [RFC1034]  Mockapetris, P., "Domain names - =
concepts and facilities",

      
              STD =
13, RFC 1034, DOI 10.17487/RFC1034, November 1987,               STD 13, RFC 1034, DOI 10.17487/RFC1034, =
November 1987,

      
              =
<https://www.rfc-editor.org/info/rfc1034>.               =
<https://www.rfc-editor.org/info/rfc1034>.

      
 =


      
   [RFC2784]  =
Farinacci, D., Li, T., Hanks, S., Meyer, D., and P.    [RFC2784]  Farinacci, D., Li, T., Hanks, S., Meyer, =
D., and P.

      
              =
Traina, "Generic Routing Encapsulation (GRE)", RFC 2784, =
              Traina, "Generic Routing =
Encapsulation (GRE)", RFC 2784,

      

      
              =
DOI 10.17487/RFC2784, March 2000, <https://www.rfc-               DOI 10.17487/RFC2784, March 2000,

      
              =
editor.org/info/rfc2784>.   =
            <https://www.rfc-editor.org/info/rfc2784>.

      
 =


      
   [RFC3056]  =
Carpenter, B. and K. Moore, "Connection of IPv6 Domains =
   [RFC3056]  Carpenter, B. and K. Moore, =
"Connection of IPv6 Domains

      
              via =
IPv4 Clouds", RFC 3056, DOI 10.17487/RFC3056, February               via IPv4 Clouds", RFC 3056, DOI =
10.17487/RFC3056, February

      
              =
2001, <https://www.rfc-editor.org/info/rfc3056>.               2001, =
<https://www.rfc-editor.org/info/rfc3056>.

      
 =


      
   [RFC3261]  =
Rosenberg, J., Schulzrinne, H., Camarillo, G., Johnston, =
   [RFC3261]  Rosenberg, J., Schulzrinne, H., =
Camarillo, G., Johnston,

      
              A., =
Peterson, J., Sparks, R., Handley, M., and E.               A., Peterson, J., Sparks, R., Handley, M., =
and E.

      
              =
Schooler, "SIP: Session Initiation Protocol", RFC 3261, =
              Schooler, "SIP: Session =
Initiation Protocol", RFC 3261,

      

      
              =
DOI 10.17487/RFC3261, June 2002, <https://www.rfc-               DOI 10.17487/RFC3261, June 2002,

      
              =
editor.org/info/rfc3261>.   =
            <https://www.rfc-editor.org/info/rfc3261>.

      
 =


      
   [RFC4107]  =
Bellovin, S. and R. Housley, "Guidelines for Cryptographic =
   [RFC4107]  Bellovin, S. and R. Housley, =
"Guidelines for Cryptographic

      
              Key =
Management", BCP 107, RFC 4107, DOI 10.17487/RFC4107,               Key Management", BCP 107, RFC 4107, DOI =
10.17487/RFC4107,

      
              =
June 2005, <https://www.rfc-editor.org/info/rfc4107>. =
              June 2005, =
<https://www.rfc-editor.org/info/rfc4107>.

      
 =


      
   [RFC4192]  =
Baker, F., Lear, E., and R. Droms, "Procedures for    [RFC4192]  Baker, F., Lear, E., and R. Droms, =
"Procedures for

      
              =
Renumbering an IPv6 Network without a Flag Day", RFC 4192, =
              Renumbering an IPv6 Network =
without a Flag Day", RFC 4192,

      

      
              =
DOI 10.17487/RFC4192, September 2005, <https://www.rfc-               DOI 10.17487/RFC4192, September =
2005,

      
              =
editor.org/info/rfc4192>.   =
            <https://www.rfc-editor.org/info/rfc4192>.

      
 =


      
   [RFC4866]  =
Arkko, J., Vogt, C., and W. Haddad, "Enhanced Route    [RFC4866]  Arkko, J., Vogt, C., and W. Haddad, =
"Enhanced Route

      
              =
Optimization for Mobile IPv6", RFC 4866,               Optimization for Mobile IPv6", RFC =
4866,

      

      
              =
DOI 10.17487/RFC4866, May 2007, <https://www.rfc-               DOI 10.17487/RFC4866, May 2007,

      
              =
editor.org/info/rfc4866>.   =
            <https://www.rfc-editor.org/info/rfc4866>.

      
 =


      
   [RFC4984]  =
Meyer, D., Ed., Zhang, L., Ed., and K. Fall, Ed., "Report =
   [RFC4984]  Meyer, D., Ed., Zhang, L., Ed., =
and K. Fall, Ed., "Report

      
              =
from the IAB Workshop on Routing and Addressing",               from the IAB Workshop on Routing and =
Addressing",

      
              RFC =
4984, DOI 10.17487/RFC4984, September 2007,               RFC 4984, DOI 10.17487/RFC4984, September =
2007,

      
              =
<https://www.rfc-editor.org/info/rfc4984>.               =
<https://www.rfc-editor.org/info/rfc4984>.

      
 =


      
   [RFC6480]  =
Lepinski, M. and S. Kent, "An Infrastructure to Support =
   [RFC6480]  Lepinski, M. and S. Kent, "An =
Infrastructure to Support

      
              =
Secure Internet Routing", RFC 6480, DOI 10.17487/RFC6480, =
              Secure Internet Routing", RFC =
6480, DOI 10.17487/RFC6480,

      
              =
February 2012, <https://www.rfc-editor.org/info/rfc6480>. =
              February 2012, =
<https://www.rfc-editor.org/info/rfc6480>.

      
 =


      
   [RFC6518]  =
Lebovitz, G. and M. Bhatia, "Keying and Authentication for =
   [RFC6518]  Lebovitz, G. and M. Bhatia, =
"Keying and Authentication for

      
              =
Routing Protocols (KARP) Design Guidelines", RFC 6518,               Routing Protocols (KARP) Design =
Guidelines", RFC 6518,

      

      
              =
DOI 10.17487/RFC6518, February 2012, <https://www.rfc-               DOI 10.17487/RFC6518, February =
2012,

      
              =
editor.org/info/rfc6518>.   =
            <https://www.rfc-editor.org/info/rfc6518>.

      
 =


      
   [RFC6831]  =
Farinacci, D., Meyer, D., Zwiebel, J., and S. Venaas, "The =
   [RFC6831]  Farinacci, D., Meyer, D., =
Zwiebel, J., and S. Venaas, "The

      
              =
Locator/ID Separation Protocol (LISP) for Multicast               Locator/ID Separation Protocol (LISP) for =
Multicast

      
              =
Environments", RFC 6831, DOI 10.17487/RFC6831, January               Environments", RFC 6831, DOI =
10.17487/RFC6831, January

      
              =
2013, <https://www.rfc-editor.org/info/rfc6831>.               2013, =
<https://www.rfc-editor.org/info/rfc6831>.

      
 =


      
   [RFC6832]  =
Lewis, D., Meyer, D., Farinacci, D., and V. Fuller,    [RFC6832]  Lewis, D., Meyer, D., Farinacci, D., and =
V. Fuller,

      
              =
"Interworking between Locator/ID Separation Protocol               "Interworking between Locator/ID =
Separation Protocol

      
              =
(LISP) and Non-LISP Sites", RFC 6832,  =
             (LISP) and Non-LISP Sites", RFC 6832,

      

      
              =
DOI 10.17487/RFC6832, January 2013, <https://www.rfc-               DOI 10.17487/RFC6832, January =
2013,

      
              =
editor.org/info/rfc6832>.   =
            <https://www.rfc-editor.org/info/rfc6832>.

      
 =


      
   [RFC6835]  =
Farinacci, D. and D. Meyer, "The Locator/ID Separation    [RFC6835]  Farinacci, D. and D. Meyer, "The =
Locator/ID Separation

      
              =
Protocol Internet Groper (LIG)", RFC 6835,               Protocol Internet Groper (LIG)", RFC =
6835,

      

      
              =
DOI 10.17487/RFC6835, January 2013, <https://www.rfc-               DOI 10.17487/RFC6835, January =
2013,

      
              =
editor.org/info/rfc6835>.   =
            <https://www.rfc-editor.org/info/rfc6835>.

      
 =


      
   [RFC6837]  =
Lear, E., "NERD: A Not-so-novel Endpoint ID (EID) to    [RFC6837]  Lear, E., "NERD: A Not-so-novel Endpoint =
ID (EID) to

      
              =
Routing Locator (RLOC) Database", RFC 6837,               Routing Locator (RLOC) Database", RFC =
6837,

      

      
              =
DOI 10.17487/RFC6837, January 2013, <https://www.rfc-               DOI 10.17487/RFC6837, January =
2013,

      
              =
editor.org/info/rfc6837>.   =
            <https://www.rfc-editor.org/info/rfc6837>.

      
 =


      
   [RFC6935]  =
Eubanks, M., Chimento, P., and M. Westerlund, "IPv6 and =
   [RFC6935]  Eubanks, M., Chimento, P., and M. =
Westerlund, "IPv6 and

      
              UDP =
Checksums for Tunneled Packets", RFC 6935,               UDP Checksums for Tunneled Packets", RFC =
6935,

      

      
              =
DOI 10.17487/RFC6935, April 2013, <https://www.rfc-               DOI 10.17487/RFC6935, April 2013,

      
              =
editor.org/info/rfc6935>.   =
            <https://www.rfc-editor.org/info/rfc6935>.

      
 =


      
   [RFC6936]  =
Fairhurst, G. and M. Westerlund, "Applicability Statement =
   [RFC6936]  Fairhurst, G. and M. Westerlund, =
"Applicability Statement

      
              for =
the Use of IPv6 UDP Datagrams with Zero Checksums",               for the Use of IPv6 UDP Datagrams with =
Zero Checksums",

      
              RFC =
6936, DOI 10.17487/RFC6936, April 2013, =
              RFC 6936, DOI 10.17487/RFC6936, April 2013,

      
              =
<https://www.rfc-editor.org/info/rfc6936>.               =
<https://www.rfc-editor.org/info/rfc6936>.

      
 =


      
   [RFC8060]  =
Farinacci, D., Meyer, D., and J. Snijders, "LISP Canonical =
   [RFC8060]  Farinacci, D., Meyer, D., and J. =
Snijders, "LISP Canonical

      
              =
Address Format (LCAF)", RFC 8060, DOI 10.17487/RFC8060, =
              Address Format (LCAF)", RFC 8060, =
DOI 10.17487/RFC8060,

      
              =
February 2017, <https://www.rfc-editor.org/info/rfc8060>. =
              February 2017, =
<https://www.rfc-editor.org/info/rfc8060>.

      
 =


      
 =


      
skipping =
to change at page 52, line =
5 =C2=B6 =
skipping to change at page 52, line =
5 =C2=B6

      
   The LISP =
working group would like to give a special thanks to Jari =
   The LISP working group would like to give a =
special thanks to Jari

      
   Arkko, the =
Internet Area AD at the time that the set of LISP    Arkko, the Internet Area AD at the time that the set =
of LISP

      
   documents were =
being prepared for IESG last call, and for his    documents were being prepared for IESG last call, and =
for his

      
   meticulous =
reviews and detailed commentaries on the 7 working group =
   meticulous reviews and detailed commentaries =
on the 7 working group

      
   last call =
documents progressing toward standards-track RFCs.    last call documents progressing toward =
standards-track RFCs.

      
 =


      
Appendix B.  =
Document Change Log Appendix B.  =
Document Change Log

      
 =


      
   [RFC Editor: =
Please delete this section on publication as RFC.]    [RFC Editor: Please delete this section on =
publication as RFC.]

      
 =


      

      
B.1.  Changes =
to draft-ietf-lisp-rfc6830bis-04 B.1. =
 Changes to draft-ietf-lisp-rfc6830bis-06

      
 =


      
 =
   o  Posted October =
2017.

      
 =


      
 =
   o  Put RTR =
definition before it is used.

      
 =


      
 =
   o  Rename references =
that are now working group drafts.

      
 =


      
 =
   o  Remove "EIDs MUST =
NOT be used as used by a host to refer to other

      
 =
      hosts.  Note that =
EID blocks MAY LISP RLOCs".

      
 =


      
 =
   o  Indicate what =
address-family can appear in data packets.

      
 =


      
 =
   o  ETRs may, rather =
than will, be the ones to send Map-Replies.

      
 =


      
 =
   o  Recommend, rather =
than mandate, max encapsulation headers to 2.

      
 =


      
 =
   o  Reference VPN =
draft when introducing Instance-ID.

      
 =


      
 =
   o  Indicate that =
SMRs can be sent when ITR/ETR are in the same node.

      
 =


      
 =
   o  Clarify when =
private addreses can be used.

      
 =


      
 =
B.2.  Changes to =
draft-ietf-lisp-rfc6830bis-05

      
 =


      
 =
   o  Posted August =
2017.

      
 =


      
 =
   o  Make it clear =
that a Reencapsulating Tunnel Router is an RTR.

      
 =


      
 =
B.3.  Changes to =
draft-ietf-lisp-rfc6830bis-04

      
 =


      
   o  Posted July =
2017.    o  Posted July 2017.

      
 =


      
   o  Changed =
reference of IPv6 RFC2460 to RFC8200.  =
  o  Changed reference of IPv6 RFC2460 to RFC8200.

      
 =


      
   o  Indicate =
that the applicability statement for UDP zero checksums =
   o  Indicate that the applicability statement =
for UDP zero checksums

      
      over IPv6 =
adheres to RFC6936.       over IPv6 =
adheres to RFC6936.

      
 =


      

      
B.2.  Changes to =
draft-ietf-lisp-rfc6830bis-03 B.4.  Changes to =
draft-ietf-lisp-rfc6830bis-03

      
 =


      
   o  Posted May =
2017.    o  Posted May 2017.

      
 =


      
   o  Move the =
control-plane related codepoints in the IANA    o  Move the control-plane related codepoints in the =
IANA

      
      =
Considerations section to RFC6833bis.  =
     Considerations section to RFC6833bis.

      
 =


      

      
B.3.  Changes to =
draft-ietf-lisp-rfc6830bis-02 B.5.  Changes to =
draft-ietf-lisp-rfc6830bis-02

      
 =


      
   o  Posted =
April 2017.    o  Posted April =
2017.

      
 =


      
   o  Reflect =
some editorial comments from Damien Sausez.    o  Reflect some editorial comments from Damien =
Sausez.

      
 =


      

      
B.4.  Changes to =
draft-ietf-lisp-rfc6830bis-01 B.6.  Changes to =
draft-ietf-lisp-rfc6830bis-01

      
 =


      
   o  Posted =
March 2017.    o  Posted March =
2017.

      
 =


      
   o  Include =
references to new RFCs published.    o =
 Include references to new RFCs published.

      
 =


      
   o  Change =
references from RFC6833 to RFC6833bis.  =
  o  Change references from RFC6833 to RFC6833bis.

      
 =


      
   o  Clarified =
LCAF text in the IANA section.    o  =
Clarified LCAF text in the IANA section.

      
 =


      
   o  Remove =
references to "experimental".    o  =
Remove references to "experimental".

      
 =


      

      
B.5.  Changes to =
draft-ietf-lisp-rfc6830bis-00 B.7.  Changes to =
draft-ietf-lisp-rfc6830bis-00

      
 =


      
   o  Posted =
December 2016.    o  Posted December =
2016.

      
 =


      
   o  Created =
working group document from draft-farinacci-lisp    o  Created working group document from =
draft-farinacci-lisp

      
      -rfc6830-00 =
individual submission.  No other changes made.       -rfc6830-00 individual submission.  No other =
changes made.

      
 =


      
Authors' =
Addresses Authors' Addresses

      

      
 =
                        =
                                                 

      
   Dino =
Farinacci    Dino Farinacci

      
   Cisco =
Systems    Cisco Systems

      
   Tasman =
Drive    Tasman Drive

      
   San Jose, CA  =
95134    San Jose, CA  95134

      
   USA =
   USA

      
 =


      
   EMail: =
farinacci@gmail.com    EMail: =
farinacci@gmail.com

      
 =


      
   Vince =
Fuller    Vince Fuller

      
   Cisco =
Systems    Cisco Systems


     
 

     
 End of changes. 53 change blocks. 

     
118 lines changed or =
deleted 158 lines changed or =
added

     

This =
html diff was produced by rfcdiff 1.45. The latest version is available =
from http://tools.ietf.org/to=
ols/rfcdiff/ 

   

  =20
  =20
=

--Apple-Mail=_ECB34273-7DAA-4861-B156-1AF3B4C47C1D
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
	charset=us-ascii





--Apple-Mail=_ECB34273-7DAA-4861-B156-1AF3B4C47C1D--


From nobody Tue Oct 17 15:13:31 2017
Return-Path: 
X-Original-To: lisp@ietf.org
Delivered-To: lisp@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 051B513304B; Tue, 17 Oct 2017 15:13:30 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: IETF Secretariat 
To: 
Cc: lisp@ietf.org, ipr-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.63.2
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <150827841001.22443.5900543095456650799@ietfa.amsl.com>
Date: Tue, 17 Oct 2017 15:13:30 -0700
Archived-At: 
Subject: [lisp] IPR Disclosure Huawei Technologies Co., Ltd's Statement about IPR related to draft-ietf-lisp-predictive-rlocs
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Tue, 17 Oct 2017 22:13:30 -0000

Dear Dino Farinacci, Padma Pillay-Esnault:


An IPR disclosure that pertains to your Internet-Draft entitled "LISP
Predictive RLOCs" (draft-ietf-lisp-predictive-rlocs) was submitted to
the IETF Secretariat on  and has been posted on the "IETF Page of
Intellectual Property Rights Disclosures"
(https://datatracker.ietf.org/ipr/3087/). The title of the IPR disclosure is
"Huawei Technologies Co.,Ltd's Statement about IPR related to
draft-ietf-lisp-predictive-rlocs"


Thank you

IETF Secretariat


From nobody Wed Oct 18 01:09:38 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D0E9D132199 for ; Wed, 18 Oct 2017 01:09:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.618
X-Spam-Level: 
X-Spam-Status: No, score=-1.618 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4LubrntoIDG2 for ; Wed, 18 Oct 2017 01:09:36 -0700 (PDT)
Received: from relais-inet.orange.com (mta240.mail.business.static.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 702281321AC for ; Wed, 18 Oct 2017 01:09:36 -0700 (PDT)
Received: from opfedar03.francetelecom.fr (unknown [xx.xx.xx.5]) by opfedar25.francetelecom.fr (ESMTP service) with ESMTP id 885671203A1; Wed, 18 Oct 2017 10:09:34 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.75]) by opfedar03.francetelecom.fr (ESMTP service) with ESMTP id 68E9318007C; Wed, 18 Oct 2017 10:09:34 +0200 (CEST)
Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILMA4.corporate.adroot.infra.ftgroup ([fe80::65de:2f08:41e6:ebbe%18]) with mapi id 14.03.0361.001; Wed, 18 Oct 2017 10:09:34 +0200
From: 
To: Dino Farinacci 
CC: "lisp@ietf.org list" 
Thread-Topic: [lisp] Comments to draft-boucadair-lisp-multiple-records-00
Thread-Index: AQHTRn/VAaVMgnwcr02pbNtf8rBb8KLpPUAw
Date: Wed, 18 Oct 2017 08:09:33 +0000
Message-ID: <787AE7BB302AE849A7480A190F8B93300A056537@OPEXCLILMA3.corporate.adroot.infra.ftgroup>
References: <37C27B2F-AD76-4B5F-AFE6-E56D02180DD4@gmail.com> <787AE7BB302AE849A7480A190F8B93300A051871@OPEXCLILMA3.corporate.adroot.infra.ftgroup>  <787AE7BB302AE849A7480A190F8B93300A0541A6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <1BADE12F-F090-4255-B835-D9467E1135D5@gmail.com>
In-Reply-To: <1BADE12F-F090-4255-B835-D9467E1135D5@gmail.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.6]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: 
Subject: Re: [lisp] Comments to draft-boucadair-lisp-multiple-records-00
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Wed, 18 Oct 2017 08:09:38 -0000

SGkgRGlubywNCg0KUGxlYXNlIHNlZSBpbmxpbmUuIA0KDQpDaGVlcnMsDQpNZWQNCg0KPiAtLS0t
LU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gRGXCoDogRGlubyBGYXJpbmFjY2kgW21haWx0bzpm
YXJpbmFjY2lAZ21haWwuY29tXQ0KPiBFbnZvecOpwqA6IGx1bmRpIDE2IG9jdG9icmUgMjAxNyAx
NTowOA0KPiDDgMKgOiBCT1VDQURBSVIgTW9oYW1lZCBJTVQvT0xODQo+IENjwqA6IGxpc3BAaWV0
Zi5vcmcgbGlzdA0KPiBPYmpldMKgOiBSZTogW2xpc3BdIENvbW1lbnRzIHRvIGRyYWZ0LWJvdWNh
ZGFpci1saXNwLW11bHRpcGxlLXJlY29yZHMtMDANCj4gDQo+ID4gIFJGQzY4MzAgb3IgeW91ciBJ
bnRlcm5ldCBEcmFmdD8NCj4gPiBbTWVkXSBJ4oCZbSByZWZlcnJpbmcgdG8gUkZDNjgzMCB3aGlj
aCBzYXlzIHRoZSBmb2xsb3dpbmcgOg0KPiA+DQo+ID4gICAgUmVjb3JkIENvdW50OiAgVGhpcyBp
cyB0aGUgbnVtYmVyIG9mIHJlY29yZHMgaW4gdGhpcyBNYXAtUmVxdWVzdA0KPiA+ICAgICAgIG1l
c3NhZ2UuICBBIHJlY29yZCBpcyBjb21wcmlzZWQgb2YgdGhlIHBvcnRpb24gb2YgdGhlIHBhY2tl
dCB0aGF0DQo+ID4gICAgICAgaXMgbGFiZWxlZCAnUmVjJyBhYm92ZSBhbmQgb2NjdXJzIHRoZSBu
dW1iZXIgb2YgdGltZXMgZXF1YWwgdG8NCj4gPiAgICAgICBSZWNvcmQgQ291bnQuICBGb3IgdGhp
cyB2ZXJzaW9uIG9mIHRoZSBwcm90b2NvbCwgYSByZWNlaXZlciBNVVNUDQo+ID4gICAgICAgYWNj
ZXB0IGFuZCBwcm9jZXNzIE1hcC1SZXF1ZXN0cyB0aGF0IGNvbnRhaW4gb25lIG9yIG1vcmUgcmVj
b3JkcywNCj4gPiAgICAgICBidXQgYSBzZW5kZXIgTVVTVCBvbmx5IHNlbmQgTWFwLVJlcXVlc3Rz
IGNvbnRhaW5pbmcgb25lIHJlY29yZC4NCj4gPiAgICAgICBeXl5eXl5eXl5eXl5eXl5eXl5eXl5e
Xl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXg0KPiA+ICAgICAgIFN1cHBv
cnQgZm9yIHJlcXVlc3RpbmcgbXVsdGlwbGUgRUlEcyBpbiBhIHNpbmdsZSBNYXAtUmVxdWVzdF4N
Cj4gPiAgICAgICBeXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5e
Xl5eXl5eXl5eXl5eXl4NCj4gPiAgICAgICBtZXNzYWdlIHdpbGwgYmUgc3BlY2lmaWVkIGluIGEg
ZnV0dXJlIHZlcnNpb24gb2YgdGhlIHByb3RvY29sLl4NCj4gPiAgICAgICBeXl5eXl5eXl5eXl5e
Xl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eDQo+ID4NCj4gPiBZ
ZXMsIEkgZG8gdGhpbmsgaXQgaXMgdGltZSB0byBzcGVjaWZ5IHRoYXQgYmVoYXZpb3IgaW4gdGhl
IGJpcyBkb2N1bWVudC4NCj4gPg0KPiA+IFNlY3Rpb24gMyBvZiBkcmFmdC1ib3VjYWRhaXItbGlz
cC1tdWx0aXBsZS1yZWNvcmRzIGlzIGFuIGV4YW1wbGUgb2Ygd2hhdA0KPiBjYW4gYmUgY29uc2lk
ZXJlZCBpbiB0aGUgYmlzIGRvY3VtZW50Lg0KPiANCj4gSU1PIHRoZSBkZXNjcmlwdGlvbiBpcyBu
b3Qgc3VmZmljaWVudCB0byB0ZWxsIGFuIGltcGxlbWVudGF0aW9uIHdoYXQgdG8NCj4gY29kZS4g
SXQgaXMgdW5kZXIgc3BlY2lmaWVkLiBJ4oCZZCBsb3ZlIHRvIGNvbnNpZGVyIHJlbW92aW5nIHRo
ZSBhYm92ZSBidXQNCj4gaXQgbmVlZHMgc3BlY2lmaWMvZGV0YWlsZWQgdGV4dCBkZXNjcmliaW5n
IHdoeSBhbmQgd2hlbiBtdWx0aXBsZSByZWNvcmRzDQo+IGFyZSB1c2VkIGluIE1hcC1SZXF1ZXN0
cy4NCg0KW01lZF0gQXMgSSBzYWlkIGVhcmxpZXIsIHRoYXQgdGV4dCBpcyBvbmx5IGFuIGV4YW1w
bGUgb2YgYSBzdGFydGluZyBwb2ludC4gV2UgY2FuIGFsc28gc3RhcnQgZnJvbSB3aGF0IHlvdXIg
aW1wbGVtZW50YXRpb24gaXMgYWxyZWFkeSBkb2luZy4NCg0KPiANCj4gPiBJ4oCZbGwgaGF2ZSBh
IGxvb2sgYXQgaXQuIEJ1dCB3aGF0IHBhcnQgb2Ygc2VjdGlvbiAzPyBBbGwgdGhlIHBhY2tldA0K
PiBmb3JtYXQgZGVzY3JpcHRpb25zIGFyZSBhbHJlYWR5IGluIFJGQzY4MzAuDQo+ID4gW01lZF0g
VGhlIGZvcm1hdCBuZWVkcyB0byBiZSB1cGRhdGVkIGZvciByZXBsaWVzLg0KPiANCj4gTm90IHRy
dWUuIE1hcC1SZXBsaWVzIGhhdmUgbXVsdGlwbGUgRUlEIHJlY29yZHMuIEFuZCBJIHVzZSB0aGVt
IGV2ZXJ5IGRheS4NCj4gOy0pDQo+IA0KPiA+IEl0IGlzIGRvY3VtZW50ZWQgbm8gd2hlcmUgdGhh
dCBhIE1hcC1SZXNvbHZlcnMgY2FjaGluZyBtYXBwaW5ncy4gQW5kIGlmDQo+IHlvdSBhcmUgcHJv
cG9zaW5nIHRoYXQgeW91IG5lZWQgYSBsb3QgbW9yZSB0ZXh0IHRvIGRlc2NyaWJlIGhvdyBtYXBw
aW5ncw0KPiBhcmUga2VwdCB1cCB0byBkYXRlIGluIHRoZSBNYXAtUmVzb2x2ZXIuIFRoaXMgaXMg
YSBtYWpvciBhcmNoaXRlY3R1cmFsDQo+IGNoYW5nZSBhbmQgcmVhbGx5IG5vdCBzdXJlIHlvdSBr
bm93IHRoZSBpbXBsaWNhdGlvbnMgb2YgaXQuDQo+ID4gW01lZF0gVGhhdCBzaW5nbGUgc2VudGVu
Y2UgaXMgaGlkaW5nIHRoZSBjYXNlIHdoZXJlIGEgc2luZ2xlIHJlcXVlc3QNCj4gZnJvbSBhbiB4
VFIgbWF5IGJlIGZvcmtlZCBpbnRvIG11bHRpcGxlIG9uZXMgYmVjYXVzZSB0YXJnZXQgRUlEcyBh
cmUgbm90DQo+IG1hbmFnZWQgYnkgdGhlIHNhbWUgc2VydmVycy4gV2hhdCBpcyBpbXBvcnRhbnQg
aW4gdGhlIHRleHQgeW91IHF1b3RlZCBpcw0KPiB0aGF0IHRoZSB4VFIgc2hvdWxkIGJlIHByZXBh
cmVkIHRvIHJlY2VpdmUgbXVsdGlwbGUgcmVwbGllcyBmb3IgYSBzaW5nbGUNCj4gcmVxdWVzdC4g
VHdvIGNhc2VzIGFyZSB0byBiZSBjb25zaWRlcmVkOg0KPiA+IC0gICAgTXVsdGlwbGUgcmVjb3Jk
cyBmb3IgdGhlIHNhbWUgRUlEIHRoYXQgY2Fubm90IGJlIGluY2x1ZGVkIGluIGENCj4gc2luZ2xl
IHJlc3BseQ0KPiA+IC0gICAgTXVsdGlwbGUgcmVwbGllczsgZWFjaCBmb3IgYSBnaXZlbiBFSUQN
Cj4gDQo+IEFuZCBob3cgZG9lcyB0aGUgSVRSIGtub3cgdG8gd2FpdCBmb3IgbXVsdGlwbGUgcmVw
bGllcz8NCg0KW01lZF0gVGhpcyB0aGUgcm9sZSBvZiBNLWJpdCBpbiB0aGUgcmVzcG9uc2UuIFRo
YXQgYml0IGlzIGFuIGluZGljYXRpb24gdG8gd2FpdCBmb3IgbW9yZSByZXBsaWVzIGFzc29jaWF0
ZWQgd2l0aCBhIHNpbmdsZSByZXF1ZXN0LiBkcmFmdC1ib3VjYWRhaXItbGlzcC1tdWx0aXBsZS1y
ZWNvcmRzIHN0YXRlcyB0aGUgZm9sbG93aW5nOg0KDQogICBJbiBvcmRlciB0byBpbmZvcm0gYW4g
SVRSIHRoYXQgc3Vic2VxdWVudCBNYXAtUmVwbHkgbWVzc2FnZXMgd2lsbA0KICAgZm9sbG93IChv
ciBub3QpICwgYSBkZWRpY2F0ZWQgZmxhZyBiaXQgaXMgZGVmaW5lZCBmb3IgdGhpcyBwdXJwb3Nl
Og0KICAgaXQgaXMgY2FsbGVkIHRoZSBNLWJpdCAobW9yZS1tYXAtcmVwbHkgYml0KS4NCg0KIEhv
dyBkb2VzIGl0IGtub3cNCj4gd2hlbiBhbGwgb2YgdGhlbSBjb21lIGluPyBUaGlzIGlzIG1vcmUg
cHJvdG9jb2wgbWFjaGluZXJ5IHRoYXQgbmVlZHMgdG8gYmUNCj4gc3BlY+KAmWVkIG91dC4gQW5k
IEkgaGF2ZSBub3Qgc2VlbiBhbnkgb2YgaXQgaW4geW91ciBidWxrIHNwZWMuDQoNCltNZWRdIFB1
dHRpbmcgYXNpZGUgdGhlIHVzZSBvZiBUQ1AsIHRoZSBidWxrIHNwZWNpZmljYXRpb24gZGVmaW5l
cyBhIGRlZGljYXRlZCBiaXQgZm9yIHRoaXM6IA0KDQogICBvICBTZXQgdGhlIE0tYml0IGZvciBh
bGwgTWFwLUJ1bGstUmVwbHkgbWVzc2FnZXMsIGV4Y2VwdCBmb3IgdGhlIGxhc3QNCiAgICAgIG9u
ZS4gDQoNCj4gDQo+IERpbm8NCg0K


From nobody Wed Oct 18 10:11:51 2017
Return-Path: 
X-Original-To: lisp@ietf.org
Delivered-To: lisp@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 5095E13423A; Wed, 18 Oct 2017 10:11:43 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: IETF Secretariat 
To: 
Cc: lisp@ietf.org, ipr-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.63.2
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <150834670332.12490.11343440850933787169@ietfa.amsl.com>
Date: Wed, 18 Oct 2017 10:11:43 -0700
Archived-At: 
Subject: [lisp] IPR Disclosure Huawei Technologies Co., Ltd's Statement about IPR related to draft-ietf-lisp-eid-anonymity
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Wed, 18 Oct 2017 17:11:43 -0000

Dear Dino Farinacci, Padma Pillay-Esnault, Wassim Haddad:


An IPR disclosure that pertains to your Internet-Draft entitled "LISP
EID Anonymity" (draft-ietf-lisp-eid-anonymity) was submitted to the IETF
Secretariat on  and has been posted on the "IETF Page of Intellectual
Property Rights Disclosures" (https://datatracker.ietf.org/ipr/3088/). The
title of the IPR disclosure is "Huawei Technologies Co.,Ltd's Statement
about IPR related to draft-ietf-lisp-eid-anonymity"


Thank you

IETF Secretariat


From nobody Wed Oct 18 17:01:58 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 885FD13302A for ; Wed, 18 Oct 2017 17:01:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level: 
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PT-lyycNzlnN for ; Wed, 18 Oct 2017 17:01:54 -0700 (PDT)
Received: from mail-it0-x236.google.com (mail-it0-x236.google.com [IPv6:2607:f8b0:4001:c0b::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 27E2D12426E for ; Wed, 18 Oct 2017 17:01:54 -0700 (PDT)
Received: by mail-it0-x236.google.com with SMTP id j140so7946178itj.1 for ; Wed, 18 Oct 2017 17:01:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=CPHCM68m02bCCv79xzWP4b8za1qI1uSWqKJSZNK8AIc=; b=lYXSaNaakUR00JMJVNxMr4v3WWN0dgHaulWexbtnDSaQtNLdmAiln2bFv1nO3WXkRI xoRmwr5K/dy/tHE0c9/7xVdxXhfVHhXfK8hxB5Dj9o3VyXD9GWQtBsMMOJB7wdNnOjYP wJU9YgU9F8pEm3K4U3RJ4rENynZ2inWGV4sVnCbT4wFU5F8bhvS7RngaJVk8sMH5BhMv 7j/osWaaKgQQeY4ZyiQOCbx4rASxIT++qWZdhRj39uivuicxR72X9Aqi1e1x3n7xrcou cVYe2lM1I4KNL1pA6Nnh+8usOZCeoh9rT25NaJB8HXUwlBPYUJaggsIeqUStsN7Ye6Cz 7Cww==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=CPHCM68m02bCCv79xzWP4b8za1qI1uSWqKJSZNK8AIc=; b=t/pPwHo9SF/YZ3ePG5Ru2PwY2oOvEgk5ULS+cGQqc2DqzjLX/Fgbt88nY5JbHm3UmE bS1iw0HRbr80ZMrFEFIQELVQOHFU5raZ/84GBLekvR+ymWxB8wWhkeF/4VLWSBKLhqi/ 1sfa4E55ZKaQZ/hMgeu6jKs+xQSLS5cuIF+rPCcEe0iNtVuhq2Lz+SU3CZ0byfjO//ol uBlPwP+c53rouEqjibfS8Wn1MCeBRirpgJxcVobX28PsU6/vsjwNlmNJm0T76Vh71oRT 4yAa3YJiy2dszSeKMefdzT2epBYFiGVQwvmLWDeNEpbCQ3XGBrDGZ0m5FCXA0u2hOped 2u+A==
X-Gm-Message-State: AMCzsaXnKblRFL1IdEj6UIq3kEFV+9vOQOijqbM+yuzFZ35RtXnnTY+x n0Tpy/Gmnvc0B8qDZJBjcgzfJsVN8s19UumuCPo=
X-Google-Smtp-Source: ABhQp+SsmYCs+cTLoBV3ZiMdNh86cXahxpkUrxeMBc8dvCeP9fjn/ZF+IctxQUxRmgt/0LqacmG26bWHZwKxn8bxcNI=
X-Received: by 10.36.31.8 with SMTP id d8mr184949itd.80.1508371313126; Wed, 18 Oct 2017 17:01:53 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.107.165.207 with HTTP; Wed, 18 Oct 2017 17:01:32 -0700 (PDT)
In-Reply-To: <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com>
References:  <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com>
From: Alberto Rodriguez-Natal 
Date: Wed, 18 Oct 2017 17:01:32 -0700
Message-ID: 
To: Dino Farinacci 
Cc: "lisp@ietf.org list" 
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 19 Oct 2017 00:01:56 -0000

Hi Dino,

Thanks for your responses. See below for some comments (starting with
[AR2]). On those responses I have not commented, I agree with your
resolution or with your request for WG discussion.

Thanks,
Alberto

On Mon, Oct 16, 2017 at 11:44 AM, Dino Farinacci  wrot=
e:
> I actually had time earlier in this week to respond. See the rfcdiff.html=
 diff file attached. I have responded with 3 different types of responses:
>
> (1) Made the change, working group please ack. Is in diff file.
>
> (2) Did not make the change, requesting working group to discuss. Not in =
diff file.
>
> (3) Solely my opinion that the change should not go in. Not in diff file.
>
>> On Oct 14, 2017, at 12:08 PM, Alberto Rodriguez-Natal  wrote:
>>
>> EIDs MUST NOT be used as LISP RLOCs.
>>
>> [AR] I think this sentence should be reworded, especially when it is
>> latter followed by sentences like: "In theory, the bit string that
>> represents an EID for one device can represent an RLOC for a different
>> device.=E2=80=9D
>
> Response (1).
>
> I have removed the sentence.
>
>> The router then prepends an "outer" IP header with one of its globally
>> routable RLOCs in the source address field.
>>
>> [AR] There are several references to RLOCs being =E2=80=9Cglobal=E2=80=
=9D through the
>> document, probably coming from the original Internet use-case. I would
>> suggest removing mentions to =E2=80=9Cglobally routable=E2=80=9D and rep=
lace them with
>> something along the lines of =E2=80=9Croutable in the RLOC space=E2=80=
=9D or =E2=80=9Croutable
>> in the transit/underlay network=E2=80=9D, etc.
>
> Response (2).
>
> Working group, what do you think the correct wording should be. I suggest=
:
>
> o =E2=80=9Croutable=E2=80=9D
> o =E2=80=9Croutable in the underlay=E2=80=9D
> o =E2=80=9Croutable in the RLOC space"

[AR2] My personal preference is "routable in the underlay", but any of
the three works for me.
>
>> The EID-to-RLOC map-cache is a short-lived, on-demand table in an ITR th=
at store
>>
>> [AR] We probably should remove the note on the map-cache being
>> =E2=80=9Cshort-lived=E2=80=9D since that may not be the case in some dep=
loyments.
>
> Response (3).
>
> But it is in other deployments if you don=E2=80=99t want to use any of th=
e update mapping techniques, like map-versioning, SMRs, pubsub, and Map-Not=
ify messaging.

[AR2] I would suggest that at least we rephrase the sentence to say
something like: "The EID-to-RLOC map-cache is a (generally
short-lived) on-demand table in an ITR that stores..."
>
>> The same database mapping entries MUST be configured on all ETRs for a
>> given site.  In a steady state, the EID-Prefixes for the site and the
>> Locator-Set for each EID-Prefix MUST be the same on all ETRs.
>>
>> [AR] Is this still the case when overlapping prefixes and/or
>> merge-semantics are in place?
>
> Response (3).
>
> Well, yes. Let me answer with an example. Say there are two xTRs A and B =
and they are connecting the LISP site for 10.0.0.0/8. Say 10.1.0.0/16 moves=
 out to another LISP site, a LISP site that is multihomed with xTRs A=E2=80=
=99 and B=E2=80=99. Both A=E2=80=99 and B=E2=80=99 need to be configured (i=
.e. in this case discover) that the /16 moved into their site.

[AR2] My question was more with regard to the Locator-Set. Let's say
that two different ETRs serving the same site are registering only
their own RLOCs and are leveraging on the merge-semantics capability
of the Map-Server to build a unified mapping. These two ETRs are in a
steady state but their Locator-Set is different for the same
EID-Prefix.
>
>> Address Family Identifier (AFI):  AFI is a term used to describe an
>> address encoding in a packet.  An address family currently pertains to
>> an IPv4 or IPv6 address.
>>
>> [AR] Although in some points the document mentions LCAF or other
>> address types for EID/RLOC, in most of the cases it assumes only
>> IPv4/v6. I think we should update the document to be more flexible and
>> relax those IP-only mentions (specially for EID cases).
>
> Response (1).
>
> I changed to =E2=80=9CAn address family that pertains to the data-plane, =
can be an IPv4, IPv6, or MAC address."
>
>> Data-Probe:  A Data-Probe is a LISP-encapsulated data packet where the
>> inner-header destination address equals the outer-header destination
>> address used to trigger a Map-Reply by a decapsulating ETR.
>>
>> [AR] Is anyone using data-probes? I=E2=80=99d like to suggest removing t=
his text.
>
> (3) response.
>
> Early on in the LISP design, service providers thought this was useful. W=
e have carefully doctored the text to make it security safe, but it does av=
oid packet loss when setting up a first-time round-trip packet exchange. Th=
e initiator=E2=80=99s packet causes the mapping database lookup, but the re=
turn packet does not need a lookup.
>
> There might be specialized applications that may make use of it.
>
>> The ETR(s) at the destination LISP site are the first to send
>> Map-Replies to the source site initiating the connection.
>>
>> [AR] We may want to clarify here that this is the common case, but may
>> not be always (e.g. proxy-reply)
>
> Response (1).
>
> I changed to "The ETR(s) at the destination LISP site may be the first to=
 send Map-Replies to the source site initiating the connection".
>
>> In order to avoid excessive packet overhead as well as possible
>> encapsulation loops, this document mandates that a maximum of two LISP
>> headers can be prepended to a packet.
>>
>> [AR] It seems that a maximum of two headers is an arbitrary value.
>> Therefore, I suggest we replace "mandates" with "recommends=E2=80=9D.
>
> Response (1).
>
> Changed to recommend.
>
>> When multiple organizations inside of a LISP site are using private
>> addresses [RFC1918] as EID-Prefixes, their address spaces MUST remain
>> segregated due to possible address duplication.  An Instance ID in the
>> address encoding can aid in making the entire AFI-based address
>> unique.
>>
>> [AR] This text is used to introduce the concept of Instance-IDs. I
>> don't think we should mention private addresses here. Instance ID may
>> be used even when not private addresses are in place or for purposes
>> other than possible address duplication. If anything, the private
>> addresses duplication should be an example only.
>
> Response (1).
>
> Making a reference to private addresses is actually very important. There=
 are a lot of container and VMs within cloud provider deployments that use =
it. It is probably the most popular use-case of LISP.

[AR2] My intention was to state that we should not tie Instance-IDs to
the address duplication problem of private addresses. Indeed,
preventing address duplication is one of the major use-cases for
Instance-IDs but they are applicable beyond that particular use-case.
>
> I made a reference to the VPN spec which is now a WG draft.
>
>> An ITR SHOULD only set the E-bit in an encapsulated data packet when
>> it knows the ETR is
>> enabled for echo-noncing.  This is conveyed by the E-bit in the
>> Map-Reply message.
>>
>> [AR] There should be probably a mention to merge-semantics and/or
>> proxy-reply here.
>
> Response (3).
>
> Why? Merge semantics only apply to Map-Registers. Not the Map-Reply an ET=
R sends to an ITR. That is when it conveys it can support echo-noncing.

[AR2] My point was that merge-semantics and proxy-reply may affect the
E-bit process. For instance, if the MS is merging different
Map-Registers, (some with the E-bit set, some without), which value
for the E-bit should the MS return in a Map-Reply?
>
>> Since the LISP architecture uses a caching scheme to retrieve and
>> store EID-to-RLOC mappings, the only way an ITR can get a more
>> up-to-date mapping is to re-request the mapping.
>>
>> [AR] We could relax this constrain and/or reference PubSub here.
>
> Response (2).
>
> Want the WG to decide if this individual submission should be referenced.=
 I think the pubsub design is simple and can work but we have little implem=
entation experience with it thusfar.
>
>> When adding a new Locator record in lexicographic order to the end of
>> a Locator-Set, it is easy to update mappings.  We assume that new
>> mappings will maintain the same Locator ordering as the old mapping
>> but will just have new Locators appended to the end of the list.  So,
>> some ITRs can have a new mapping while other ITRs have only an old
>> mapping that is used until they time out.  When an ITR has only an old
>> mapping but detects bits set in the Locator-Status-Bits that
>> correspond to Locators beyond the list it has cached, it simply
>> ignores them.
>>
>> [AR] Probably we could complement this paragraph with something like
>> "It is RECOMMENDED to notify the ITRs that they should update their
>> Map-Caches, e.g. via an SMR.=E2=80=9D
>
> Response (3).
>
> We say this in other sections about updating mappings. In this paragraph,=
 there is a primary focus on locator-status-bits.
>
>> When a Locator record is removed from a Locator-Set, ITRs that have
>> the mapping cached will not use the removed Locator because the xTRs
>> will set the Locator-Status-Bit to 0.
>>
>> [AR] Since LSB are not mandatory and not used in many deployments we
>> should recommend notifying the affected ITRs via SMRs or PubSub.
>
> Response (3).
>
> The WG should discuss this. If you want to keep the locator-set in tact i=
n the ITR, using LSBs is a faster way to convey to not use a subset of the =
set.
>
>> As a result, an ETR will solicit Map-Requests (called an SMR message)
>> from those sites to which it has been sending encapsulated data for
>> the last minute.  In particular, an ETR will send an SMR to an ITR to
>> which it has recently sent encapsulated data.
>>
>> [AR] We should mention that this only works when the ETR is also an ITR.
>
> Response (1).
>
> Added text to support your suggestion.
>
>> It is important to note that a locator address in any LISP control
>> message MUST be a globally routable address and therefore SHOULD NOT
>> contain [RFC1918] addresses.
>>
>> [AR] The Internet use-case is less relevant today, therefore I=E2=80=99d
>> suggest removing the sentence regarding RFC1918.
>
> Response (1).
>
> I think we should add that there ARE allowed if run in a local environmen=
t.
>
>> Minor/Editorial:
>>
>> Expand the RTR acronym on its first appearance.
>
> Response (1)
>
> I moved it up right before the first RTR reference.
>
> Thanks,
> Dino
>


From nobody Thu Oct 19 03:07:18 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4173A1348FE for ; Thu, 19 Oct 2017 03:07:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gigix-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0k_ECFRUkk39 for ; Thu, 19 Oct 2017 03:07:16 -0700 (PDT)
Received: from mail-wr0-x22a.google.com (mail-wr0-x22a.google.com [IPv6:2a00:1450:400c:c0c::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CB3981331DD for ; Thu, 19 Oct 2017 03:07:15 -0700 (PDT)
Received: by mail-wr0-x22a.google.com with SMTP id j14so7723910wre.8 for ; Thu, 19 Oct 2017 03:07:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gigix-net.20150623.gappssmtp.com; s=20150623; h=from:mime-version:subject:message-id:date:to; bh=PpV8piaN6KpBI3AaMjnnTG7DVOwUzFfWpO+9Y8a/TJk=; b=GwxHaJasjUpuE4b/9dfrsxNE7YkZjV74UufUb/x1wmH2ht3m9HtebtoUzYfkAbgn2j e3Qh8puptuBQAQQY12voIwwhW3xKmPBDTZhvLgOfq+A9G+mF1RvbpwlnNKSKH/AoSqwE cs0coHMTR+XimvntZ3AKsKH6jE60SGmsJs4KZ7UTHRBznqQ2sjncLt0exIasfI//Bhbh KiCiMoftEDW8Rr646ob72pg6C01K9qSwRM1Sy/5lTBdBC0+0+ijdr4Jb7b5OF0gto22a sYf18rPzOwEeQf1swxe11ujtpVZAVpXUMC/Q7inKG07TqlGvLAYWL9RMX+1YV86zN/oI IIZg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:mime-version:subject:message-id:date:to; bh=PpV8piaN6KpBI3AaMjnnTG7DVOwUzFfWpO+9Y8a/TJk=; b=K4/Sztg+kNUzafmft4BngzmHFpMSMlm9FpC9BfDOLLSc0A8hW0AcDilM46YfQmbQb0 LgOZwwbtQUDoRWDqW05EvaftYy/pncwF/LNjsSJFfN5rhxg9ofXc/pwl2dyF0izmhQ6M R8K5c4PAfTb+9YmD+zAcFauypzhYM8mn9BcHly7GOwsDB6cm3j1d8WwVgFIClrVyYOj9 3BUtO6+HXTLZTA7Dkhf4KGEskd0iMCnBMHXYtca9eI7zA0EAJvCtc1cTeUe5VNYpohUC wvNP89t3z29+sb8/ZeT68Ro5qS/FL+//ciGmV9AXdE1Rk1PAK46d927PI8A2pweKviE4 PQtQ==
X-Gm-Message-State: AMCzsaVsvyfTvqcO1y7MqUPiCJzGDuMCrAdrfYAH1d2lID6cXhPzVPXj TMRjXF+q7qP7H2AIY3KMsPos12XY62Y=
X-Google-Smtp-Source: ABhQp+S3bLXLXN+WPqRN6XbeQKB5XxV0u5np3l6wFaG4Y6QDzyxlEWIPWL7bd+YkaIsKyPUZ0jfMvw==
X-Received: by 10.223.184.36 with SMTP id h33mr1131878wrf.38.1508407633848; Thu, 19 Oct 2017 03:07:13 -0700 (PDT)
Received: from ?IPv6:2001:660:330f:a4:dcc1:1393:6562:e1dc? ([2001:660:330f:a4:dcc1:1393:6562:e1dc]) by smtp.gmail.com with ESMTPSA id i76sm12523124wmd.2.2017.10.19.03.07.12 for  (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 19 Oct 2017 03:07:12 -0700 (PDT)
From: Luigi Iannone 
Content-Type: multipart/alternative; boundary="Apple-Mail=_10E9D2C7-10E7-4413-A5AF-1793FC6B4958"
Mime-Version: 1.0 (Mac OS X Mail 11.0 \(3445.1.7\))
Message-Id: <64FD7FFE-3A88-4198-8E78-9326494E003B@gigix.net>
Date: Thu, 19 Oct 2017 12:07:09 +0200
To: LISP mailing list list 
X-Mailer: Apple Mail (2.3445.1.7)
Archived-At: 
Subject: [lisp] Call for Agenda Item @ 100th IETF
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 19 Oct 2017 10:07:17 -0000

--Apple-Mail=_10E9D2C7-10E7-4413-A5AF-1793FC6B4958
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi All,

We have a time slot during the next IETF in Singapore so it is time to =
fix the agenda for our WG.
The LISP WG  is scheduled to meet on Friday, November 17th, 2017, from =
9:30 to 11:30 (2 hours)=20

Please send your requests for agenda items (Presenter=E2=80=99s name, =
ppt title, slot duration)=20
to lisp-chairs@tools.ietf.org  by =
Monday 30th October, 2017.

Thanks

Joel & Luigi


--Apple-Mail=_10E9D2C7-10E7-4413-A5AF-1793FC6B4958
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8


Hi All,

We have =
a time slot during the next IETF in Singapore so it is time to fix =
the agenda for our WG.
The LISP WG  is scheduled =
to meet on Friday, November 17th, 2017, from 9:30 to 11:30 (2 =
hours) 

Please send your =
requests for agenda items (Presenter=E2=80=99s name, ppt title, slot =
duration) 
to lisp-chairs@tools.ietf.org by Monday 30th October, =
2017.

Thanks

Joel & Luigi

=

--Apple-Mail=_10E9D2C7-10E7-4413-A5AF-1793FC6B4958--


From nobody Thu Oct 19 05:10:11 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C60A133226 for ; Thu, 19 Oct 2017 05:10:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gigix-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Aj_zv_LFH6Hv for ; Thu, 19 Oct 2017 05:10:06 -0700 (PDT)
Received: from mail-wm0-x233.google.com (mail-wm0-x233.google.com [IPv6:2a00:1450:400c:c09::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 70F3C124B18 for ; Thu, 19 Oct 2017 05:10:02 -0700 (PDT)
Received: by mail-wm0-x233.google.com with SMTP id q132so15947728wmd.2 for ; Thu, 19 Oct 2017 05:10:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gigix-net.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=9KNRflEl7Y5S0q40y0SLmRws6fCVxNyncgPZpBtXMdY=; b=OWz5n/6Wfh1Wus9xq4bOynQ1yhy7iwZ7lm1IiVdoZXT+xgQACWnqW1hLua7pahA5MH Si8PFyGO3WnVf4PxpWQNUCRdY0wrVdtH9K6KCgNvnQjwFNXH7xlUk1AetzzwC2v/Ow5B ojdqHlizbnMicziPipVP7kE8KyKR0Uw04MNKr8XoiRNdLO9vRYro8WXJ5hq6lC3zWTf1 c6c8M7UwAe0lY9PZXshlvH7WO8qyL5nx7ugY1RJjG0Gxjvei5TFeTxlNz9hcPGxL+elH czaYTjKnVfSTW2EJ2FF4IppS8z8GzxpOm8uYIDRvd1F8WLJXj6YhV5aGv8ddu7ihEU6Q VSEw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=9KNRflEl7Y5S0q40y0SLmRws6fCVxNyncgPZpBtXMdY=; b=YZ0uHzoGZdJfedH3AllE/PcwdCxWnStJgW9O32qPOe/tnmfuFoflTDgq2aUcHXlNVV o4OAW99hOhrdxX2+urPrlnO4kPAKsBYoeLRhuuyUOfnMK731MMdoljMVU3Hc6CcF2URv 3LpdQ1gjIQmm44bKHuVFmsLb8Dgc2rpa0FB/8JZMrvJNuYbRr5f0CqLw96y/mC/fXtsu OcrQtGwI0sVI/CP2V6hK5BG2jp2blx8mVnh7ea4Dbm1vpMEEgzWoB10YVOSg+SGaLzB2 CjQR8jYHBZ7ID8Q8CtjdToUjlrA+gKj6aRMoD0zO/2bhZzARGe+urxqW1BbC1gcCY9FE RiwQ==
X-Gm-Message-State: AMCzsaWIFjVT8NqAv5B1rTwfP0vtxvdh3JCKdONkr4B45fBwdOrzT+LN ATlxs6jkPDkX5RHSb7P6O3cNzc5sD0o=
X-Google-Smtp-Source: ABhQp+TOLmEo8dJN+6DexyOv1yJCKCSifbk/RimX9eqwWEpz7E81qcKrJGdP+swWvt8A8KqZCoDQDQ==
X-Received: by 10.28.113.212 with SMTP id d81mr1621258wmi.152.1508415000513; Thu, 19 Oct 2017 05:10:00 -0700 (PDT)
Received: from ?IPv6:2001:660:330f:a4:f115:5e35:6b7e:c196? ([2001:660:330f:a4:f115:5e35:6b7e:c196]) by smtp.gmail.com with ESMTPSA id m64sm1299881wmb.10.2017.10.19.05.09.59 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 19 Oct 2017 05:09:59 -0700 (PDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 11.0 \(3445.1.7\))
From: Luigi Iannone 
In-Reply-To: 
Date: Thu, 19 Oct 2017 14:10:37 +0200
Cc: Dino Farinacci , "lisp@ietf.org list" 
Content-Transfer-Encoding: quoted-printable
Message-Id: <60376D83-3DBD-4490-BEE8-F82F155A0FBC@gigix.net>
References:  <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com> 
To: Alberto Rodriguez-Natal 
X-Mailer: Apple Mail (2.3445.1.7)
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 19 Oct 2017 12:10:08 -0000

Just stating my personal opinion here=E2=80=A6


> On 19 Oct 2017, at 02:01, Alberto Rodriguez-Natal =
 wrote:
>=20

[snip]

>>> The router then prepends an "outer" IP header with one of its =
globally
>>> routable RLOCs in the source address field.
>>>=20
>>> [AR] There are several references to RLOCs being =E2=80=9Cglobal=E2=80=
=9D through the
>>> document, probably coming from the original Internet use-case. I =
would
>>> suggest removing mentions to =E2=80=9Cglobally routable=E2=80=9D and =
replace them with
>>> something along the lines of =E2=80=9Croutable in the RLOC space=E2=80=
=9D or =E2=80=9Croutable
>>> in the transit/underlay network=E2=80=9D, etc.
>>=20
>> Response (2).
>>=20
>> Working group, what do you think the correct wording should be. I =
suggest:
>>=20
>> o =E2=80=9Croutable=E2=80=9D
>> o =E2=80=9Croutable in the underlay=E2=80=9D
>> o =E2=80=9Croutable in the RLOC space"
>=20
> [AR2] My personal preference is "routable in the underlay", but any of
> the three works for me.

I would prefer =E2=80=9Croutable in the RLOC space=E2=80=9D since this =
is what is needed.=20

>>=20
>>> The EID-to-RLOC map-cache is a short-lived, on-demand table in an =
ITR that store
>>>=20
>>> [AR] We probably should remove the note on the map-cache being
>>> =E2=80=9Cshort-lived=E2=80=9D since that may not be the case in some =
deployments.
>>=20
>> Response (3).
>>=20
>> But it is in other deployments if you don=E2=80=99t want to use any =
of the update mapping techniques, like map-versioning, SMRs, pubsub, and =
Map-Notify messaging.
>=20
> [AR2] I would suggest that at least we rephrase the sentence to say
> something like: "The EID-to-RLOC map-cache is a (generally
> short-lived) on-demand table in an ITR that stores=E2=80=A6"

I agree with AR, we do not need to state how long the mappings are kept =
in a cache, this is a management/implementation issue.
=20


>>=20
>>> The same database mapping entries MUST be configured on all ETRs for =
a
>>> given site.  In a steady state, the EID-Prefixes for the site and =
the
>>> Locator-Set for each EID-Prefix MUST be the same on all ETRs.
>>>=20
>>> [AR] Is this still the case when overlapping prefixes and/or
>>> merge-semantics are in place?
>>=20
>> Response (3).
>>=20
>> Well, yes. Let me answer with an example. Say there are two xTRs A =
and B and they are connecting the LISP site for 10.0.0.0/8. Say =
10.1.0.0/16 moves out to another LISP site, a LISP site that is =
multihomed with xTRs A=E2=80=99 and B=E2=80=99. Both A=E2=80=99 and B=E2=80=
=99 need to be configured (i.e. in this case discover) that the /16 =
moved into their site.
>=20
> [AR2] My question was more with regard to the Locator-Set. Let's say
> that two different ETRs serving the same site are registering only
> their own RLOCs and are leveraging on the merge-semantics capability
> of the Map-Server to build a unified mapping. These two ETRs are in a
> steady state but their Locator-Set is different for the same
> EID-Prefix.
>>=20
>>> Address Family Identifier (AFI):  AFI is a term used to describe an
>>> address encoding in a packet.  An address family currently pertains =
to
>>> an IPv4 or IPv6 address.
>>>=20
>>> [AR] Although in some points the document mentions LCAF or other
>>> address types for EID/RLOC, in most of the cases it assumes only
>>> IPv4/v6. I think we should update the document to be more flexible =
and
>>> relax those IP-only mentions (specially for EID cases).
>>=20
>> Response (1).
>>=20
>> I changed to =E2=80=9CAn address family that pertains to the =
data-plane, can be an IPv4, IPv6, or MAC address.=E2=80=9D

Why you do not simply state =E2=80=9CAn address family that pertains to =
the data-plane.=E2=80=9D and that=E2=80=99s it.


>>=20
>>> Data-Probe:  A Data-Probe is a LISP-encapsulated data packet where =
the
>>> inner-header destination address equals the outer-header destination
>>> address used to trigger a Map-Reply by a decapsulating ETR.
>>>=20
>>> [AR] Is anyone using data-probes? I=E2=80=99d like to suggest =
removing this text.
>>=20
>> (3) response.
>>=20
>> Early on in the LISP design, service providers thought this was =
useful. We have carefully doctored the text to make it security safe, =
but it does avoid packet loss when setting up a first-time round-trip =
packet exchange. The initiator=E2=80=99s packet causes the mapping =
database lookup, but the return packet does not need a lookup.
>>=20
>> There might be specialized applications that may make use of it.
>>=20
>>> The ETR(s) at the destination LISP site are the first to send
>>> Map-Replies to the source site initiating the connection.
>>>=20
>>> [AR] We may want to clarify here that this is the common case, but =
may
>>> not be always (e.g. proxy-reply)
>>=20
>> Response (1).
>>=20
>> I changed to "The ETR(s) at the destination LISP site may be the =
first to send Map-Replies to the source site initiating the connection".
>>=20
>>> In order to avoid excessive packet overhead as well as possible
>>> encapsulation loops, this document mandates that a maximum of two =
LISP
>>> headers can be prepended to a packet.
>>>=20
>>> [AR] It seems that a maximum of two headers is an arbitrary value.
>>> Therefore, I suggest we replace "mandates" with "recommends=E2=80=9D.
>>=20
>> Response (1).
>>=20
>> Changed to recommend.
>>=20
>>> When multiple organizations inside of a LISP site are using private
>>> addresses [RFC1918] as EID-Prefixes, their address spaces MUST =
remain
>>> segregated due to possible address duplication.  An Instance ID in =
the
>>> address encoding can aid in making the entire AFI-based address
>>> unique.
>>>=20
>>> [AR] This text is used to introduce the concept of Instance-IDs. I
>>> don't think we should mention private addresses here. Instance ID =
may
>>> be used even when not private addresses are in place or for purposes
>>> other than possible address duplication. If anything, the private
>>> addresses duplication should be an example only.
>>=20
>> Response (1).
>>=20
>> Making a reference to private addresses is actually very important. =
There are a lot of container and VMs within cloud provider deployments =
that use it. It is probably the most popular use-case of LISP.
>=20
> [AR2] My intention was to state that we should not tie Instance-IDs to
> the address duplication problem of private addresses. Indeed,
> preventing address duplication is one of the major use-cases for
> Instance-IDs but they are applicable beyond that particular use-case.

I agree with AR. private addressing is a use case not the reason. Text =
should be more generic.=20


>>=20
>> I made a reference to the VPN spec which is now a WG draft.
>>=20
>>> An ITR SHOULD only set the E-bit in an encapsulated data packet when
>>> it knows the ETR is
>>> enabled for echo-noncing.  This is conveyed by the E-bit in the
>>> Map-Reply message.
>>>=20
>>> [AR] There should be probably a mention to merge-semantics and/or
>>> proxy-reply here.
>>=20
>> Response (3).
>>=20
>> Why? Merge semantics only apply to Map-Registers. Not the Map-Reply =
an ETR sends to an ITR. That is when it conveys it can support =
echo-noncing.
>=20
> [AR2] My point was that merge-semantics and proxy-reply may affect the
> E-bit process. For instance, if the MS is merging different
> Map-Registers, (some with the E-bit set, some without), which value
> for the E-bit should the MS return in a Map-Reply?
>>=20
>>> Since the LISP architecture uses a caching scheme to retrieve and
>>> store EID-to-RLOC mappings, the only way an ITR can get a more
>>> up-to-date mapping is to re-request the mapping.

wouldn=E2=80=99t be simpler to change the sentence in =E2=80=9C=E2=80=A6.t=
he only way an ITR can get a more
recent mapping is to update the mapping by any means available in the =
control plane.=E2=80=9D

This should be generic enough to cover the pub/sub case.

>>>=20
>>> [AR] We could relax this constrain and/or reference PubSub here.
>>=20
>> Response (2).
>>=20
>> Want the WG to decide if this individual submission should be =
referenced. I think the pubsub design is simple and can work but we have =
little implementation experience with it thusfar.
>>=20
>>> When adding a new Locator record in lexicographic order to the end =
of
>>> a Locator-Set, it is easy to update mappings.  We assume that new
>>> mappings will maintain the same Locator ordering as the old mapping
>>> but will just have new Locators appended to the end of the list.  =
So,
>>> some ITRs can have a new mapping while other ITRs have only an old
>>> mapping that is used until they time out.  When an ITR has only an =
old
>>> mapping but detects bits set in the Locator-Status-Bits that
>>> correspond to Locators beyond the list it has cached, it simply
>>> ignores them.
>>>=20
>>> [AR] Probably we could complement this paragraph with something like
>>> "It is RECOMMENDED to notify the ITRs that they should update their
>>> Map-Caches, e.g. via an SMR.=E2=80=9D
>>=20
>> Response (3).
>>=20
>> We say this in other sections about updating mappings. In this =
paragraph, there is a primary focus on locator-status-bits.

It should harm to repeat it.=20

>>=20
>>> When a Locator record is removed from a Locator-Set, ITRs that have
>>> the mapping cached will not use the removed Locator because the xTRs
>>> will set the Locator-Status-Bit to 0.
>>>=20
>>> [AR] Since LSB are not mandatory and not used in many deployments we
>>> should recommend notifying the affected ITRs via SMRs or PubSub.
>>=20
>> Response (3).
>>=20
>> The WG should discuss this. If you want to keep the locator-set in =
tact in the ITR, using LSBs is a faster way to convey to not use a =
subset of the set.
>>=20
>>> As a result, an ETR will solicit Map-Requests (called an SMR =
message)
>>> from those sites to which it has been sending encapsulated data for
>>> the last minute.  In particular, an ETR will send an SMR to an ITR =
to
>>> which it has recently sent encapsulated data.
>>>=20
>>> [AR] We should mention that this only works when the ETR is also an =
ITR.
>>=20
>> Response (1).
>>=20
>> Added text to support your suggestion.
>>=20
>>> It is important to note that a locator address in any LISP control
>>> message MUST be a globally routable address and therefore SHOULD NOT
>>> contain [RFC1918] addresses.
>>>=20
>>> [AR] The Internet use-case is less relevant today, therefore I=E2=80=99=
d
>>> suggest removing the sentence regarding RFC1918.
>>=20
>> Response (1).
>>=20
>> I think we should add that there ARE allowed if run in a local =
environment.
>>=20

I agree with AR. Sentence should be removed. It is consistent with the =
very first comment about RLOCs being routable in the RLOC space.
If your RLOC space is the Internet then you cannot use RFC1918 =
addresses.

Ciao

L.




>>> Minor/Editorial:
>>>=20
>>> Expand the RTR acronym on its first appearance.
>>=20
>> Response (1)
>>=20
>> I moved it up right before the first RTR reference.
>>=20
>> Thanks,
>> Dino
>>=20
>=20
> _______________________________________________
> lisp mailing list
> lisp@ietf.org
> https://www.ietf.org/mailman/listinfo/lisp


From nobody Thu Oct 19 05:58:47 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F265E132125 for ; Thu, 19 Oct 2017 05:58:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level: 
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QisHglAz48wX for ; Thu, 19 Oct 2017 05:58:43 -0700 (PDT)
Received: from mail-qk0-x233.google.com (mail-qk0-x233.google.com [IPv6:2607:f8b0:400d:c09::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 79535132944 for ; Thu, 19 Oct 2017 05:58:43 -0700 (PDT)
Received: by mail-qk0-x233.google.com with SMTP id r64so10206277qkc.1 for ; Thu, 19 Oct 2017 05:58:43 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=eF1+EdL6xapPT/tX1zWc5pmW4ii2vdfOJRkcMP8wH9c=; b=H1ed0VS7iOaaG3xlmgOBYW4+dIykDK2XDDAEcjCYINUvjtrP43LJbmjQXs9ChjBJm8 suLzc8qQibcNDiAu5xkB7ppFxyNxPcNRDD2i6Oo/M41OUbwMALGcaAPsjnGscg/a/VSL YxyjXjust1h0j+XQ2gZFdtv76cdtejAisc29I/hAdbJEPjRTsOXAMHFEzMbV2DSUvtaJ /J4v4VrLoT3q/f0cr2igZ24rBCcPEUrTqgcPgidqwE9t2WlgB8osMobIaVB42miJkJJj EhjiV+idnUvvJQSiBcP6AtI6214QaaO2hJa7Oq8AZo1aFT1SKfZBcWDILZDDVUpucJqw FcZA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=eF1+EdL6xapPT/tX1zWc5pmW4ii2vdfOJRkcMP8wH9c=; b=JyBdc3PNbsWokJUQNmdJgHfQ25XdKLWgbduaClbgwpKOIjebKEzivVfH7Xmdzr/3oP G1UBbgYzVwiDyYbn5VObuRI1fKlh7EqtTfCUmYqQVKbJSz+qoGodOoL7WeXjgmOPawb4 MZzhnU3kVuWHI/GrYOfgqllqjP8K6w6OhBNjElYJtrM6lQN34Zz9sD3JQadsY/bGX2Fs 29J6Whl3PQPj2bEevTE44nlT2CBX4bmc5cV/eM8ll/A/XZCi2PqYd9YxFkKJEZRJ96Ss F2yf3OxxDFsZQ6T9GAAHK3C0dr/+H9rPASFyp9f8L6DLPgyRWRAzsCJpX+F/0yqZnqk0 aAxw==
X-Gm-Message-State: AMCzsaX1VDIFFwky3HJPFw//F1ZnhNRwlX5iAoQuEn/gSFN2MaH/OyPb fEg0UM7nz43toPahCdGJQco=
X-Google-Smtp-Source: ABhQp+Qcrzhcm4uR0ck2rXsuVKaVZ/JOfuUaRbS/CEhz4focXrkVn6S+y9eEAvsVsn/Pau/JD5Gj3w==
X-Received: by 10.233.223.2 with SMTP id t2mr1681903qkf.331.1508417922407; Thu, 19 Oct 2017 05:58:42 -0700 (PDT)
Received: from [10.5.50.20] (cpe-68-174-97-76.nyc.res.rr.com. [68.174.97.76]) by smtp.gmail.com with ESMTPSA id j40sm9391525qtj.52.2017.10.19.05.58.40 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 19 Oct 2017 05:58:41 -0700 (PDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Dino Farinacci 
In-Reply-To: <60376D83-3DBD-4490-BEE8-F82F155A0FBC@gigix.net>
Date: Thu, 19 Oct 2017 05:58:40 -0700
Cc: Alberto Rodriguez-Natal , "lisp@ietf.org list" 
Content-Transfer-Encoding: quoted-printable
Message-Id: <6533F15E-8DFD-44BD-BE11-6058DA7D7E25@gmail.com>
References:  <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com>  <60376D83-3DBD-4490-BEE8-F82F155A0FBC@gigix.net>
To: Luigi Iannone 
X-Mailer: Apple Mail (2.3273)
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 19 Oct 2017 12:58:46 -0000

Thanks Luigi and Alberto for your subsequent comments.=20

> On Oct 19, 2017, at 5:10 AM, Luigi Iannone  wrote:
>=20
>=20
> Just stating my personal opinion here=E2=80=A6

I encourage others to provide their opinion as well. I will wait until =
this weekend to send another update.=20

We need more comments! So please write to the list!

Dino

>=20
>=20
>> On 19 Oct 2017, at 02:01, Alberto Rodriguez-Natal =
 wrote:
>>=20
>=20
> [snip]
>=20
>>>> The router then prepends an "outer" IP header with one of its =
globally
>>>> routable RLOCs in the source address field.
>>>>=20
>>>> [AR] There are several references to RLOCs being =E2=80=9Cglobal=E2=80=
=9D through the
>>>> document, probably coming from the original Internet use-case. I =
would
>>>> suggest removing mentions to =E2=80=9Cglobally routable=E2=80=9D =
and replace them with
>>>> something along the lines of =E2=80=9Croutable in the RLOC space=E2=80=
=9D or =E2=80=9Croutable
>>>> in the transit/underlay network=E2=80=9D, etc.
>>>=20
>>> Response (2).
>>>=20
>>> Working group, what do you think the correct wording should be. I =
suggest:
>>>=20
>>> o =E2=80=9Croutable=E2=80=9D
>>> o =E2=80=9Croutable in the underlay=E2=80=9D
>>> o =E2=80=9Croutable in the RLOC space"
>>=20
>> [AR2] My personal preference is "routable in the underlay", but any =
of
>> the three works for me.
>=20
> I would prefer =E2=80=9Croutable in the RLOC space=E2=80=9D since this =
is what is needed.=20
>=20
>>>=20
>>>> The EID-to-RLOC map-cache is a short-lived, on-demand table in an =
ITR that store
>>>>=20
>>>> [AR] We probably should remove the note on the map-cache being
>>>> =E2=80=9Cshort-lived=E2=80=9D since that may not be the case in =
some deployments.
>>>=20
>>> Response (3).
>>>=20
>>> But it is in other deployments if you don=E2=80=99t want to use any =
of the update mapping techniques, like map-versioning, SMRs, pubsub, and =
Map-Notify messaging.
>>=20
>> [AR2] I would suggest that at least we rephrase the sentence to say
>> something like: "The EID-to-RLOC map-cache is a (generally
>> short-lived) on-demand table in an ITR that stores=E2=80=A6"
>=20
> I agree with AR, we do not need to state how long the mappings are =
kept in a cache, this is a management/implementation issue.
>=20
>=20
>=20
>>>=20
>>>> The same database mapping entries MUST be configured on all ETRs =
for a
>>>> given site.  In a steady state, the EID-Prefixes for the site and =
the
>>>> Locator-Set for each EID-Prefix MUST be the same on all ETRs.
>>>>=20
>>>> [AR] Is this still the case when overlapping prefixes and/or
>>>> merge-semantics are in place?
>>>=20
>>> Response (3).
>>>=20
>>> Well, yes. Let me answer with an example. Say there are two xTRs A =
and B and they are connecting the LISP site for 10.0.0.0/8. Say =
10.1.0.0/16 moves out to another LISP site, a LISP site that is =
multihomed with xTRs A=E2=80=99 and B=E2=80=99. Both A=E2=80=99 and B=E2=80=
=99 need to be configured (i.e. in this case discover) that the /16 =
moved into their site.
>>=20
>> [AR2] My question was more with regard to the Locator-Set. Let's say
>> that two different ETRs serving the same site are registering only
>> their own RLOCs and are leveraging on the merge-semantics capability
>> of the Map-Server to build a unified mapping. These two ETRs are in a
>> steady state but their Locator-Set is different for the same
>> EID-Prefix.
>>>=20
>>>> Address Family Identifier (AFI):  AFI is a term used to describe an
>>>> address encoding in a packet.  An address family currently pertains =
to
>>>> an IPv4 or IPv6 address.
>>>>=20
>>>> [AR] Although in some points the document mentions LCAF or other
>>>> address types for EID/RLOC, in most of the cases it assumes only
>>>> IPv4/v6. I think we should update the document to be more flexible =
and
>>>> relax those IP-only mentions (specially for EID cases).
>>>=20
>>> Response (1).
>>>=20
>>> I changed to =E2=80=9CAn address family that pertains to the =
data-plane, can be an IPv4, IPv6, or MAC address.=E2=80=9D
>=20
> Why you do not simply state =E2=80=9CAn address family that pertains =
to the data-plane.=E2=80=9D and that=E2=80=99s it.
>=20
>=20
>>>=20
>>>> Data-Probe:  A Data-Probe is a LISP-encapsulated data packet where =
the
>>>> inner-header destination address equals the outer-header =
destination
>>>> address used to trigger a Map-Reply by a decapsulating ETR.
>>>>=20
>>>> [AR] Is anyone using data-probes? I=E2=80=99d like to suggest =
removing this text.
>>>=20
>>> (3) response.
>>>=20
>>> Early on in the LISP design, service providers thought this was =
useful. We have carefully doctored the text to make it security safe, =
but it does avoid packet loss when setting up a first-time round-trip =
packet exchange. The initiator=E2=80=99s packet causes the mapping =
database lookup, but the return packet does not need a lookup.
>>>=20
>>> There might be specialized applications that may make use of it.
>>>=20
>>>> The ETR(s) at the destination LISP site are the first to send
>>>> Map-Replies to the source site initiating the connection.
>>>>=20
>>>> [AR] We may want to clarify here that this is the common case, but =
may
>>>> not be always (e.g. proxy-reply)
>>>=20
>>> Response (1).
>>>=20
>>> I changed to "The ETR(s) at the destination LISP site may be the =
first to send Map-Replies to the source site initiating the connection".
>>>=20
>>>> In order to avoid excessive packet overhead as well as possible
>>>> encapsulation loops, this document mandates that a maximum of two =
LISP
>>>> headers can be prepended to a packet.
>>>>=20
>>>> [AR] It seems that a maximum of two headers is an arbitrary value.
>>>> Therefore, I suggest we replace "mandates" with "recommends=E2=80=9D.=

>>>=20
>>> Response (1).
>>>=20
>>> Changed to recommend.
>>>=20
>>>> When multiple organizations inside of a LISP site are using private
>>>> addresses [RFC1918] as EID-Prefixes, their address spaces MUST =
remain
>>>> segregated due to possible address duplication.  An Instance ID in =
the
>>>> address encoding can aid in making the entire AFI-based address
>>>> unique.
>>>>=20
>>>> [AR] This text is used to introduce the concept of Instance-IDs. I
>>>> don't think we should mention private addresses here. Instance ID =
may
>>>> be used even when not private addresses are in place or for =
purposes
>>>> other than possible address duplication. If anything, the private
>>>> addresses duplication should be an example only.
>>>=20
>>> Response (1).
>>>=20
>>> Making a reference to private addresses is actually very important. =
There are a lot of container and VMs within cloud provider deployments =
that use it. It is probably the most popular use-case of LISP.
>>=20
>> [AR2] My intention was to state that we should not tie Instance-IDs =
to
>> the address duplication problem of private addresses. Indeed,
>> preventing address duplication is one of the major use-cases for
>> Instance-IDs but they are applicable beyond that particular use-case.
>=20
> I agree with AR. private addressing is a use case not the reason. Text =
should be more generic.=20
>=20
>=20
>>>=20
>>> I made a reference to the VPN spec which is now a WG draft.
>>>=20
>>>> An ITR SHOULD only set the E-bit in an encapsulated data packet =
when
>>>> it knows the ETR is
>>>> enabled for echo-noncing.  This is conveyed by the E-bit in the
>>>> Map-Reply message.
>>>>=20
>>>> [AR] There should be probably a mention to merge-semantics and/or
>>>> proxy-reply here.
>>>=20
>>> Response (3).
>>>=20
>>> Why? Merge semantics only apply to Map-Registers. Not the Map-Reply =
an ETR sends to an ITR. That is when it conveys it can support =
echo-noncing.
>>=20
>> [AR2] My point was that merge-semantics and proxy-reply may affect =
the
>> E-bit process. For instance, if the MS is merging different
>> Map-Registers, (some with the E-bit set, some without), which value
>> for the E-bit should the MS return in a Map-Reply?
>>>=20
>>>> Since the LISP architecture uses a caching scheme to retrieve and
>>>> store EID-to-RLOC mappings, the only way an ITR can get a more
>>>> up-to-date mapping is to re-request the mapping.
>=20
> wouldn=E2=80=99t be simpler to change the sentence in =E2=80=9C=E2=80=A6=
.the only way an ITR can get a more
> recent mapping is to update the mapping by any means available in the =
control plane.=E2=80=9D
>=20
> This should be generic enough to cover the pub/sub case.
>=20
>>>>=20
>>>> [AR] We could relax this constrain and/or reference PubSub here.
>>>=20
>>> Response (2).
>>>=20
>>> Want the WG to decide if this individual submission should be =
referenced. I think the pubsub design is simple and can work but we have =
little implementation experience with it thusfar.
>>>=20
>>>> When adding a new Locator record in lexicographic order to the end =
of
>>>> a Locator-Set, it is easy to update mappings.  We assume that new
>>>> mappings will maintain the same Locator ordering as the old mapping
>>>> but will just have new Locators appended to the end of the list.  =
So,
>>>> some ITRs can have a new mapping while other ITRs have only an old
>>>> mapping that is used until they time out.  When an ITR has only an =
old
>>>> mapping but detects bits set in the Locator-Status-Bits that
>>>> correspond to Locators beyond the list it has cached, it simply
>>>> ignores them.
>>>>=20
>>>> [AR] Probably we could complement this paragraph with something =
like
>>>> "It is RECOMMENDED to notify the ITRs that they should update their
>>>> Map-Caches, e.g. via an SMR.=E2=80=9D
>>>=20
>>> Response (3).
>>>=20
>>> We say this in other sections about updating mappings. In this =
paragraph, there is a primary focus on locator-status-bits.
>=20
> It should harm to repeat it.=20
>=20
>>>=20
>>>> When a Locator record is removed from a Locator-Set, ITRs that have
>>>> the mapping cached will not use the removed Locator because the =
xTRs
>>>> will set the Locator-Status-Bit to 0.
>>>>=20
>>>> [AR] Since LSB are not mandatory and not used in many deployments =
we
>>>> should recommend notifying the affected ITRs via SMRs or PubSub.
>>>=20
>>> Response (3).
>>>=20
>>> The WG should discuss this. If you want to keep the locator-set in =
tact in the ITR, using LSBs is a faster way to convey to not use a =
subset of the set.
>>>=20
>>>> As a result, an ETR will solicit Map-Requests (called an SMR =
message)
>>>> from those sites to which it has been sending encapsulated data for
>>>> the last minute.  In particular, an ETR will send an SMR to an ITR =
to
>>>> which it has recently sent encapsulated data.
>>>>=20
>>>> [AR] We should mention that this only works when the ETR is also an =
ITR.
>>>=20
>>> Response (1).
>>>=20
>>> Added text to support your suggestion.
>>>=20
>>>> It is important to note that a locator address in any LISP control
>>>> message MUST be a globally routable address and therefore SHOULD =
NOT
>>>> contain [RFC1918] addresses.
>>>>=20
>>>> [AR] The Internet use-case is less relevant today, therefore I=E2=80=99=
d
>>>> suggest removing the sentence regarding RFC1918.
>>>=20
>>> Response (1).
>>>=20
>>> I think we should add that there ARE allowed if run in a local =
environment.
>>>=20
>=20
> I agree with AR. Sentence should be removed. It is consistent with the =
very first comment about RLOCs being routable in the RLOC space.
> If your RLOC space is the Internet then you cannot use RFC1918 =
addresses.
>=20
> Ciao
>=20
> L.
>=20
>=20
>=20
>=20
>>>> Minor/Editorial:
>>>>=20
>>>> Expand the RTR acronym on its first appearance.
>>>=20
>>> Response (1)
>>>=20
>>> I moved it up right before the first RTR reference.
>>>=20
>>> Thanks,
>>> Dino
>>>=20
>>=20
>> _______________________________________________
>> lisp mailing list
>> lisp@ietf.org
>> https://www.ietf.org/mailman/listinfo/lisp
>=20


From nobody Thu Oct 19 06:20:57 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B6BA113420C for ; Thu, 19 Oct 2017 06:20:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level: 
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HtCAnEhRufGc for ; Thu, 19 Oct 2017 06:20:44 -0700 (PDT)
Received: from mail-qk0-x22c.google.com (mail-qk0-x22c.google.com [IPv6:2607:f8b0:400d:c09::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6B3C1321A0 for ; Thu, 19 Oct 2017 06:20:44 -0700 (PDT)
Received: by mail-qk0-x22c.google.com with SMTP id w134so10302250qkb.0 for ; Thu, 19 Oct 2017 06:20:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=GV/LUYOruEkytBGqi63IG+a+RBMSeuG/0wJxBDVPDF4=; b=uL5Zj4rHfYb7OfAf/y2axXbOhdlnGz692MHcOKn5RYbLG35UZp4qilk1q/clFAakSX wOn6TdTINdFrM71XClqWSE9j1MXq4UiXXHDIywAaditXiUxhsuya6XqbXo9l3Rc9oFK7 /nzT/VEjvUJdw0FVamle/sIe++OwiJbpWYJbUVnpVJi3KfrKTxhK+ytvCq8ZJEudevca ghCnlO4psr+2BlB8q5hDBrt4GFdAvvgySP8L4zZZU1k2TxKCWmNg/YikWrYJiTQirQfw XQ4VNgZ5DYTpy/ytYdRKPQP3/RghekYEMa7OmQ2nSGStXDxocXH4gFv77FfSOQk5WKkm GHLw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=GV/LUYOruEkytBGqi63IG+a+RBMSeuG/0wJxBDVPDF4=; b=ZszCEyebyiBYCq8zb0xleMbYDqWhWJgBwfi+n8Y0CqTDjVmkZd8HFH8fzw+/IDCyE9 TbXcuIGwC1sp+anY5lGOSSgYYcW17eN2w0NKOAPiV/qAETMPjPJ1QK7hqzWe0HON048q V0lM9Okc/WnL4bFKnqWSeRiR9XCW+i/2Aj4RG5o3rXUjpjZa/2uqYkgF/aIpqobZrUYk 4wPR5gm0aCcSpP3LedHHYgySaLldjorVxwRD89TqG1cbfh4URjFtgL1LQ38sskaZauHn hRpUj9jG6b6z0ErRg92tYUZDBeDW36tYLC8IDF+qCYVhCI/DaqgQLH8MCwOvxwkaFIzv lztg==
X-Gm-Message-State: AMCzsaXsxaAcWWl91+Vzt+iYemW/rVMnZrZ7WUTVJJGNZ9y5XtCW0Pp9 3FNSUmeej0ALInFzwGa9EcQ=
X-Google-Smtp-Source: ABhQp+Q5nLFyd7+rZX3+tNipEM+9RMZnvBvQSs3EjJJmmXu1TfzkA3G17DUPJl1FohfkIFJQbqxU7Q==
X-Received: by 10.55.50.71 with SMTP id y68mr1966645qky.136.1508419243610; Thu, 19 Oct 2017 06:20:43 -0700 (PDT)
Received: from [10.5.50.20] (cpe-68-174-97-76.nyc.res.rr.com. [68.174.97.76]) by smtp.gmail.com with ESMTPSA id t49sm9712423qta.54.2017.10.19.06.20.42 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 19 Oct 2017 06:20:42 -0700 (PDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Dino Farinacci 
In-Reply-To: <787AE7BB302AE849A7480A190F8B93300A056537@OPEXCLILMA3.corporate.adroot.infra.ftgroup>
Date: Thu, 19 Oct 2017 06:20:41 -0700
Cc: "lisp@ietf.org list" 
Content-Transfer-Encoding: quoted-printable
Message-Id: <558E587E-1A98-4CF3-8E53-A9CCD422716E@gmail.com>
References: <37C27B2F-AD76-4B5F-AFE6-E56D02180DD4@gmail.com> <787AE7BB302AE849A7480A190F8B93300A051871@OPEXCLILMA3.corporate.adroot.infra.ftgroup>  <787AE7BB302AE849A7480A190F8B93300A0541A6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <1BADE12F-F090-4255-B835-D9467E1135D5@gmail.com> <787AE7BB302AE849A7480A190F8B93300A056537@OPEXCLILMA3.corporate.adroot.infra.ftgroup>
To: mohamed.boucadair@orange.com
X-Mailer: Apple Mail (2.3273)
Archived-At: 
Subject: Re: [lisp] Comments to draft-boucadair-lisp-multiple-records-00
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 19 Oct 2017 13:20:47 -0000

What if we provided you with a more efficient feature. That is:

(1) The ITR sends a Map-Request for 0.0.0.0/0.
(2) But rather than the mapping system return a RLOC-set for 0.0.0.0/0 =
(which may or may not be registered), it returns all more specifics?
(3) The ITR would request a lookup-type of =E2=80=9Creturn *all* more =
specifics=E2=80=9D versus an longest or exact match lookup.

Here is my justification. And I made this comment to you a couple of =
years ago. If an ITR is going to provide a list of EIDs to lookup when =
it restarts, one has to ask how does it know which EIDs to request. If =
it has a list, that means there was some implementation capability to =
write a checkpoint or stateful file of entries. So when an ITR restarts, =
it has that list.=20

Well, if it builds this checkpoint file, it could also store the =
RLOC-set, so it would have all the mappings, maybe out of date, but it =
could query the mapping system when the demand sees the need.

I have an implementation of this and when I brought this up a couple of =
years ago, I offered you to try it out.

But if one doesn=E2=80=99t want to go the checkpoint file route or have =
a protocol mechanism, the =E2=80=9Clookup-type=E2=80=9D functionality =
would be useful. Albert, Vina, and I have talked about creating a new =
LCAF type that is essentially =E2=80=9CLookup-Type LCAF=E2=80=9D which =
requests =E2=80=9Call-more-specific=E2=80=9D, =E2=80=9Cmore-specific=E2=80=
=9D, =E2=80=9Cexact-match=E2=80=9D lookup types.

Comments?

Dino

> On Oct 18, 2017, at 1:09 AM, mohamed.boucadair@orange.com wrote:
>=20
> Hi Dino,
>=20
> Please see inline.=20
>=20
> Cheers,
> Med
>=20
>> -----Message d'origine-----
>> De : Dino Farinacci [mailto:farinacci@gmail.com]
>> Envoy=C3=A9 : lundi 16 octobre 2017 15:08
>> =C3=80 : BOUCADAIR Mohamed IMT/OLN
>> Cc : lisp@ietf.org list
>> Objet : Re: [lisp] Comments to =
draft-boucadair-lisp-multiple-records-00
>>=20
>>> RFC6830 or your Internet Draft?
>>> [Med] I=E2=80=99m referring to RFC6830 which says the following :
>>>=20
>>>   Record Count:  This is the number of records in this Map-Request
>>>      message.  A record is comprised of the portion of the packet =
that
>>>      is labeled 'Rec' above and occurs the number of times equal to
>>>      Record Count.  For this version of the protocol, a receiver =
MUST
>>>      accept and process Map-Requests that contain one or more =
records,
>>>      but a sender MUST only send Map-Requests containing one record.
>>>      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>>>      Support for requesting multiple EIDs in a single Map-Request^
>>>      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>>>      message will be specified in a future version of the protocol.^
>>>      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>>>=20
>>> Yes, I do think it is time to specify that behavior in the bis =
document.
>>>=20
>>> Section 3 of draft-boucadair-lisp-multiple-records is an example of =
what
>> can be considered in the bis document.
>>=20
>> IMO the description is not sufficient to tell an implementation what =
to
>> code. It is under specified. I=E2=80=99d love to consider removing =
the above but
>> it needs specific/detailed text describing why and when multiple =
records
>> are used in Map-Requests.
>=20
> [Med] As I said earlier, that text is only an example of a starting =
point. We can also start from what your implementation is already doing.
>=20
>>=20
>>> I=E2=80=99ll have a look at it. But what part of section 3? All the =
packet
>> format descriptions are already in RFC6830.
>>> [Med] The format needs to be updated for replies.
>>=20
>> Not true. Map-Replies have multiple EID records. And I use them every =
day.
>> ;-)
>>=20
>>> It is documented no where that a Map-Resolvers caching mappings. And =
if
>> you are proposing that you need a lot more text to describe how =
mappings
>> are kept up to date in the Map-Resolver. This is a major =
architectural
>> change and really not sure you know the implications of it.
>>> [Med] That single sentence is hiding the case where a single request
>> from an xTR may be forked into multiple ones because target EIDs are =
not
>> managed by the same servers. What is important in the text you quoted =
is
>> that the xTR should be prepared to receive multiple replies for a =
single
>> request. Two cases are to be considered:
>>> -    Multiple records for the same EID that cannot be included in a
>> single resply
>>> -    Multiple replies; each for a given EID
>>=20
>> And how does the ITR know to wait for multiple replies?
>=20
> [Med] This the role of M-bit in the response. That bit is an =
indication to wait for more replies associated with a single request. =
draft-boucadair-lisp-multiple-records states the following:
>=20
>   In order to inform an ITR that subsequent Map-Reply messages will
>   follow (or not) , a dedicated flag bit is defined for this purpose:
>   it is called the M-bit (more-map-reply bit).
>=20
> How does it know
>> when all of them come in? This is more protocol machinery that needs =
to be
>> spec=E2=80=99ed out. And I have not seen any of it in your bulk spec.
>=20
> [Med] Putting aside the use of TCP, the bulk specification defines a =
dedicated bit for this:=20
>=20
>   o  Set the M-bit for all Map-Bulk-Reply messages, except for the =
last
>      one.=20
>=20
>>=20
>> Dino
>=20


From nobody Thu Oct 19 13:15:08 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4A7CB133038 for ; Thu, 19 Oct 2017 13:15:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.521
X-Spam-Level: 
X-Spam-Status: No, score=-14.521 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Pqns1slJ9ihM for ; Thu, 19 Oct 2017 13:15:05 -0700 (PDT)
Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B09FA129A89 for ; Thu, 19 Oct 2017 13:15:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1914; q=dns/txt; s=iport; t=1508444105; x=1509653705; h=from:to:subject:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=yG2au9Wz1oE8nUB4FErWQC+IWD30jRItaWjbWB9AhdQ=; b=mxmKwGbf+br2zXYg9mOh/kNLu6JyRS+AtyTR0oqNF2HnzIB8ABuc22sC GAiU2gFPynHfXxvJbMpg6V3T+FkgSWfudtXT+zK18u9ePHAoxysOJfCsZ xgCz/EZxjTxWfAkmvQBE4+ZwdRn65KIMYPsHz3+7niE14T/7OoEcrf1Oa c=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AkAQAqB+lZ/4gNJK1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg19kbicHg3OKH48/gVSWWYIUCiWFFgIahHE/GAECAQEBAQEBAWs?= =?us-ascii?q?dC4UeBiMRQxICAQgaAggeAgICMBUGAQYDAgQTiiAQq0KCJ4shAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBHYEPgiCCB4M7KwuCeIMyhGcvgjIFkUuQCAKHX40OghRdhRm?= =?us-ascii?q?LD5VHAhEZAYE4AR84gVt6FR9XAYI2CYRWdgGJfIERAQEB?=
X-IronPort-AV: E=Sophos;i="5.43,403,1503360000"; d="scan'208";a="19375482"
Received: from alln-core-3.cisco.com ([173.36.13.136]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 19 Oct 2017 20:15:05 +0000
Received: from XCH-RCD-002.cisco.com (xch-rcd-002.cisco.com [173.37.102.12]) by alln-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id v9JKF4s3004922 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Thu, 19 Oct 2017 20:15:04 GMT
Received: from xch-aln-005.cisco.com (173.36.7.15) by XCH-RCD-002.cisco.com (173.37.102.12) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Thu, 19 Oct 2017 15:15:04 -0500
Received: from xch-aln-005.cisco.com ([173.36.7.15]) by XCH-ALN-005.cisco.com ([173.36.7.15]) with mapi id 15.00.1320.000; Thu, 19 Oct 2017 15:15:04 -0500
From: "Alberto Rodriguez Natal (natal)" 
To: "lisp@ietf.org" 
Thread-Topic: New Version Notification for draft-rodrigueznatal-lisp-pubsub-01.txt
Thread-Index: AQHTSRYhZ7Ovdd06lUewN3PQl/PUfaLrejaA
Date: Thu, 19 Oct 2017 20:15:04 +0000
Message-ID: <478C8EB0-227F-4671-A66F-1092FC415B1C@cisco.com>
References: <150844374746.18813.7728772185470332216.idtracker@ietfa.amsl.com>
In-Reply-To: <150844374746.18813.7728772185470332216.idtracker@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.157.120.61]
Content-Type: text/plain; charset="utf-8"
Content-ID: <530AD59BC0CB374A8CE8DF5DDABBABE4@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: 
Subject: [lisp] FW: New Version Notification for draft-rodrigueznatal-lisp-pubsub-01.txt
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 19 Oct 2017 20:15:07 -0000
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From nobody Fri Oct 20 17:28:33 2017
Return-Path: 
X-Original-To: lisp@ietf.org
Delivered-To: lisp@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id EB99A13450F; Fri, 20 Oct 2017 17:24:22 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: "\"IETF Secretariat\"" 
To: , 
Cc: lisp@ietf.org, db3546@att.com
X-Test-IDTracker: no
X-IETF-IDTracker: 6.63.2
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <150854546295.20809.889160857467326004.idtracker@ietfa.amsl.com>
Date: Fri, 20 Oct 2017 17:24:22 -0700
Archived-At: 
Subject: [lisp] lisp - Requested session has been scheduled for IETF 100
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Sat, 21 Oct 2017 00:24:23 -0000

Dear Luigi Iannone,

The session(s) that you have requested have been scheduled.
Below is the scheduled session information followed by
the original request. 

lisp Session 1 (2:00:00)
    Friday, Morning Session I 0930-1130
    Room Name: Olivia size: 150
    ---------------------------------------------
    


Request Information:


---------------------------------------------------------
Working Group Name: Locator/ID Separation Protocol
Area Name: Routing Area
Session Requester: Luigi Iannone

Number of Sessions: 1
Length of Session(s):  2 Hours
Number of Attendees: 50
Conflicts to Avoid: 
 First Priority: rtgwg nvo3 i2rs sidr grow sfc nfvrg pim intarea ospf ideas
 Second Priority: mboned icnrg irtfopen idr spring bier maprg
 Third Priority: l2tpext bess


People who must be present:
  Joel M. Halpern
  Wassim Haddad
  Deborah Brungard
  Luigi Iannone
  Padma Pillay-Esnault

Resources Requested:

Special Requests:
  
---------------------------------------------------------


From nobody Mon Oct 23 10:18:54 2017
Return-Path: 
X-Original-To: lisp@ietf.org
Delivered-To: lisp@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id BDC72139428; Mon, 23 Oct 2017 10:18:51 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: 
Cc: lisp@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.63.2
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <150877913175.24840.11427941649690546487@ietfa.amsl.com>
Date: Mon, 23 Oct 2017 10:18:51 -0700
Archived-At: 
Subject: [lisp] I-D Action: draft-ietf-lisp-mn-01.txt
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Mon, 23 Oct 2017 17:18:51 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Locator/ID Separation Protocol WG of the IETF.

        Title           : LISP Mobile Node
        Authors         : Dino Farinacci
                          Darrel Lewis
                          David Meyer
                          Chris White
	Filename        : draft-ietf-lisp-mn-01.txt
	Pages           : 22
	Date            : 2017-10-23

Abstract:
   This document describes how a lightweight version of LISP's ITR/ETR
   functionality can be used to provide seamless mobility to a mobile
   node.  The LISP Mobile Node design described in this document uses
   standard LISP functionality to provide scalable mobility for LISP
   mobile nodes.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-lisp-mn/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-lisp-mn-01
https://datatracker.ietf.org/doc/html/draft-ietf-lisp-mn-01

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-lisp-mn-01


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From nobody Mon Oct 23 10:25:08 2017
Return-Path: 
X-Original-To: lisp@ietf.org
Delivered-To: lisp@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 6C8C413836A; Mon, 23 Oct 2017 10:25:05 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: 
Cc: lisp@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.63.2
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <150877950536.24848.12493937885587401970@ietfa.amsl.com>
Date: Mon, 23 Oct 2017 10:25:05 -0700
Archived-At: 
Subject: [lisp] I-D Action: draft-farinacci-lisp-geo-04.txt
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Mon, 23 Oct 2017 17:25:05 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Locator/ID Separation Protocol WG of the IETF.

        Title           : LISP Geo-Coordinate Use-Cases
        Author          : Dino Farinacci
	Filename        : draft-farinacci-lisp-geo-04.txt
	Pages           : 10
	Date            : 2017-10-23

Abstract:
   This draft describes how Geo-Coordinates can be used in the LISP
   Architecture and Protocols.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-farinacci-lisp-geo/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-farinacci-lisp-geo-04
https://datatracker.ietf.org/doc/html/draft-farinacci-lisp-geo-04

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-farinacci-lisp-geo-04


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From nobody Mon Oct 23 10:47:31 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 79BF51397F9 for ; Mon, 23 Oct 2017 10:47:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X36KdbvT9l9I for ; Mon, 23 Oct 2017 10:47:28 -0700 (PDT)
Received: from mail-pg0-x22c.google.com (mail-pg0-x22c.google.com [IPv6:2607:f8b0:400e:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B60A8137C4A for ; Mon, 23 Oct 2017 10:47:28 -0700 (PDT)
Received: by mail-pg0-x22c.google.com with SMTP id a192so12326294pge.9 for ; Mon, 23 Oct 2017 10:47:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=zSIRrs9fNpIYFODg5QVs4qsz3UUJbhdkX8MRrHqnZyI=; b=tN7n76bqp4eFLOgYhF0AGMF58OUxWJMZHzwG1NWeqTbDDp6Z+JYZ95WrE1h5gRKwd3 PfT/PZdrUMPr2VYwpHrLHWNwKw0kGGx0JiontZ/nmbq/BWpBJKO9b853Jvre2kSIi2H2 8Fgbr4U9UOJKDHGyJbPofsyef9qIta5nj9Fp6yaFtNvoMy1vdgYzek/oKKBbPTG9k2PR auQxe0PYsioNKOj1V0T9h25Y5ZJ76puZbN+bnjo5MbWYE+eafxCzbDYF+1rcIvv1igUh XiMWn30eIsxko/dOzpvCARjRO2wYhIJLqc3mCnxo/VLArgaGd3BSwv8q5y+u0SiHWZxE MnaA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=zSIRrs9fNpIYFODg5QVs4qsz3UUJbhdkX8MRrHqnZyI=; b=Zla65ZPfY7GyJMqFh6rHAKZTUy8JfYranfb69BWMsCAjbQlBShaxaZQdd1DGIK++KS H+qnIl2mniQOsVVb+UJ44WqZKYCB6cMXmWg0yDgCRl1hs+Z04Vq+13ONAwTrXuQA1GJM awcuDWq9Bcl+EetnKrblTYpb+ixB0v5/5iGfakRz/oPk9y9KmC52Yk8vU8aJMAF9EdWb EfR0xrhRu9dFm7A9okEEnRKrj64vCO6NrG67FkDItiFKydr1Q6uIk7/F1rvHOGli2PI4 8QitJ7QgfTPFb1fDZTXOj7RZwxM9CrPNjgVoGAHCTrnvIG18C2iXJpSUBxH3Onkn0yn5 EhMQ==
X-Gm-Message-State: AMCzsaUgcLDdhjyNoIWMe5O6UUnbAmuQfblhQbf0iaqb+KEVeDdoHi4d d5HQ668L1ZTBMy2cBtZO3kQ=
X-Google-Smtp-Source: ABhQp+Tib6aujjNZfXgR9MrrmeMQBxydVfiQWvih8+cm8HlgI8wKx4mUeXWgcoBxRoJq/oP8UPJ3MA==
X-Received: by 10.84.245.15 with SMTP id i15mr11136152pll.437.1508780848253; Mon, 23 Oct 2017 10:47:28 -0700 (PDT)
Received: from dino-macbook.wp.comcast.net (173-8-188-29-SFBA.hfc.comcastbusiness.net. [173.8.188.29]) by smtp.gmail.com with ESMTPSA id o128sm13716576pfg.118.2017.10.23.10.47.27 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 23 Oct 2017 10:47:27 -0700 (PDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Dino Farinacci 
In-Reply-To: 
Date: Mon, 23 Oct 2017 10:47:26 -0700
Cc: "lisp@ietf.org list" 
Content-Transfer-Encoding: quoted-printable
Message-Id: <1AAAC5C3-27FA-47A9-819F-42B2357E3A08@gmail.com>
References:  <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com> 
To: Alberto Rodriguez-Natal 
X-Mailer: Apple Mail (2.3273)
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Mon, 23 Oct 2017 17:47:30 -0000

> Hi Dino,
>=20
> Thanks for your responses. See below for some comments (starting with
> [AR2]). On those responses I have not commented, I agree with your
> resolution or with your request for WG discussion.

See my responses. I=E2=80=99ll post an update to the response email I =
send to Luigi.

>> Working group, what do you think the correct wording should be. I =
suggest:
>>=20
>> o =E2=80=9Croutable=E2=80=9D
>> o =E2=80=9Croutable in the underlay=E2=80=9D
>> o =E2=80=9Croutable in the RLOC space"
>=20
> [AR2] My personal preference is "routable in the underlay", but any of
> the three works for me.

I will use =E2=80=9Croutable in the RLOC space=E2=80=9D, per Luigi=E2=80=99=
s comment.

>>=20
>>> The EID-to-RLOC map-cache is a short-lived, on-demand table in an =
ITR that store
>>>=20
>>> [AR] We probably should remove the note on the map-cache being
>>> =E2=80=9Cshort-lived=E2=80=9D since that may not be the case in some =
deployments.
>>=20
>> Response (3).
>>=20
>> But it is in other deployments if you don=E2=80=99t want to use any =
of the update mapping techniques, like map-versioning, SMRs, pubsub, and =
Map-Notify messaging.
>=20
> [AR2] I would suggest that at least we rephrase the sentence to say
> something like: "The EID-to-RLOC map-cache is a (generally
> short-lived) on-demand table in an ITR that stores=E2=80=A6"

Changed.

>>=20
>>> The same database mapping entries MUST be configured on all ETRs for =
a
>>> given site.  In a steady state, the EID-Prefixes for the site and =
the
>>> Locator-Set for each EID-Prefix MUST be the same on all ETRs.
>>>=20
>>> [AR] Is this still the case when overlapping prefixes and/or
>>> merge-semantics are in place?
>>=20
>> Response (3).
>>=20
>> Well, yes. Let me answer with an example. Say there are two xTRs A =
and B and they are connecting the LISP site for 10.0.0.0/8. Say =
10.1.0.0/16 moves out to another LISP site, a LISP site that is =
multihomed with xTRs A=E2=80=99 and B=E2=80=99. Both A=E2=80=99 and B=E2=80=
=99 need to be configured (i.e. in this case discover) that the /16 =
moved into their site.
>=20
> [AR2] My question was more with regard to the Locator-Set. Let's say
> that two different ETRs serving the same site are registering only
> their own RLOCs and are leveraging on the merge-semantics capability

There was a decision back when RFC6830 was published to not support =
this. And that we would address it in the NAT-traversal document where =
the use-case required this behavior.

>>> When multiple organizations inside of a LISP site are using private
>>> addresses [RFC1918] as EID-Prefixes, their address spaces MUST =
remain
>>> segregated due to possible address duplication.  An Instance ID in =
the
>>> address encoding can aid in making the entire AFI-based address
>>> unique.
>>>=20
>>> [AR] This text is used to introduce the concept of Instance-IDs. I
>>> don't think we should mention private addresses here. Instance ID =
may
>>> be used even when not private addresses are in place or for purposes
>>> other than possible address duplication. If anything, the private
>>> addresses duplication should be an example only.
>>=20
>> Response (1).
>>=20
>> Making a reference to private addresses is actually very important. =
There are a lot of container and VMs within cloud provider deployments =
that use it. It is probably the most popular use-case of LISP.
>=20
> [AR2] My intention was to state that we should not tie Instance-IDs to
> the address duplication problem of private addresses. Indeed,
> preventing address duplication is one of the major use-cases for
> Instance-IDs but they are applicable beyond that particular use-case.

I don=E2=80=99t follow your point, the fact you use EIDs within an IID =
means the EIDs are private to that IID. Regardless if they are RFC1918 =
addresses or registry allocated addresses.

>>=20
>> I made a reference to the VPN spec which is now a WG draft.
>>=20
>>> An ITR SHOULD only set the E-bit in an encapsulated data packet when
>>> it knows the ETR is
>>> enabled for echo-noncing.  This is conveyed by the E-bit in the
>>> Map-Reply message.
>>>=20
>>> [AR] There should be probably a mention to merge-semantics and/or
>>> proxy-reply here.
>>=20
>> Response (3).
>>=20
>> Why? Merge semantics only apply to Map-Registers. Not the Map-Reply =
an ETR sends to an ITR. That is when it conveys it can support =
echo-noncing.
>=20
> [AR2] My point was that merge-semantics and proxy-reply may affect the
> E-bit process. For instance, if the MS is merging different
> Map-Registers, (some with the E-bit set, some without), which value
> for the E-bit should the MS return in a Map-Reply?

It doesn=E2=80=99t because the Map-Server maintains the original =
individual Map-Registers as well. And RLOC-probing causes the E-bit to =
be specified in the Map-Reply by the ETR.

Dino


From nobody Mon Oct 23 10:55:57 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7B0EE139950 for ; Mon, 23 Oct 2017 10:55:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.598
X-Spam-Level: 
X-Spam-Status: No, score=-0.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_COMMENT_SAVED_URL=1.391, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_HTML_ATTACH=0.01] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 58qvVv-IcDXl for ; Mon, 23 Oct 2017 10:55:48 -0700 (PDT)
Received: from mail-pg0-x232.google.com (mail-pg0-x232.google.com [IPv6:2607:f8b0:400e:c05::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 927181398CF for ; Mon, 23 Oct 2017 10:55:48 -0700 (PDT)
Received: by mail-pg0-x232.google.com with SMTP id r25so12352812pgn.4 for ; Mon, 23 Oct 2017 10:55:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=jno8UTBNxffKrcc7Mqv7QPbzGOp2xtEDAXCfjddVXtg=; b=NItoCbdzXoVCrMzpZtx91UIBY48FUlsgK63PBOks7URfT9Ll85g+nI/b8rmU4pc4rb fvVMi7/m65U3/ql+zlYD5mZhvw31s9XXC1kDdhfwNKD3r3OZ2xsiE8EpROknTDsEkH8G ZZsnSyjqVP34KwzYpcnYenWIgle33Wd6kvZlBjIOCDkHoA/PsJk9Sw1o38wSnLVJAvG9 B14VoF1f/JeFjY3757BZM858YBct5/1sPGsH7z9l+n7z5m7E5IpsAL8RToo5/mqBzCFf UhpNDxhIxLYSpPfHQ/pRwgfp4YuFDkBpiYDm8oD9x8OWgbc2t509rW5/QUCa7V9rEmRi PTtg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=jno8UTBNxffKrcc7Mqv7QPbzGOp2xtEDAXCfjddVXtg=; b=SJDlna3t4RId5PLeY3rn/sIldvNWS4t7IVoumxsaMscbbZhu1EJtsaRvUGxL+OwAYY YIfnBbHEs4CwmsoDC34J/BY3d4Zx4DDMqozlhDNb1XKzvjNagVYv3I2mBGM934BCJVYy 6JNeenq+jaEvtfhFlOdTq0LHXZfh8ai7OmYXND5aLOW2WhKNsGc24XD22n7vSRKzI4Nf 0AYFB04yysSbC+SSuHlC19GtiPUG4LLW7SRLgnsZ41VH3kMQGcX6e97Yi+psMTkAaaU2 yLD89q5ufSfm8aEHv8zQ0Hl8rN83rNqt6vANs9n7169jxLuZv/n5sFFhU7fpd8rjHfbp zdGQ==
X-Gm-Message-State: AMCzsaU+bAMqwGwFkH3+XqzupcpZuz573iEno+Ty8/VqfWNYVpQOIZ4/ Oe4dSiLUhDLAI/bACkKrGqXDCGmv
X-Google-Smtp-Source: ABhQp+TMcrlqQZaJuh6/VCZSebicWBooZDGM4XhUS+9OdDMvHKSfPWp5Tag0Crs15IZTFbM4ZPaDTw==
X-Received: by 10.99.116.25 with SMTP id p25mr12422309pgc.327.1508781348063; Mon, 23 Oct 2017 10:55:48 -0700 (PDT)
Received: from dino-macbook.wp.comcast.net (173-8-188-29-SFBA.hfc.comcastbusiness.net. [173.8.188.29]) by smtp.gmail.com with ESMTPSA id f1sm14873954pfe.150.2017.10.23.10.55.44 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 23 Oct 2017 10:55:45 -0700 (PDT)
From: Dino Farinacci 
Message-Id: <1781FA8C-B6E7-481A-AE4D-7F654AE87573@gmail.com>
Content-Type: multipart/mixed; boundary="Apple-Mail=_5646FEA0-2FAC-48A8-82F9-2DAFB47A4961"
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
Date: Mon, 23 Oct 2017 10:55:44 -0700
In-Reply-To: <60376D83-3DBD-4490-BEE8-F82F155A0FBC@gigix.net>
Cc: Alberto Rodriguez-Natal , "lisp@ietf.org list" 
To: Luigi Iannone 
References:  <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com>  <60376D83-3DBD-4490-BEE8-F82F155A0FBC@gigix.net>
X-Mailer: Apple Mail (2.3273)
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Mon, 23 Oct 2017 17:55:55 -0000

--Apple-Mail=_5646FEA0-2FAC-48A8-82F9-2DAFB47A4961
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

> Just stating my personal opinion here=E2=80=A6

No prob. Thanks for that. See udpate rfcdiff.html file attached. I will =
send another email with the open items, so others can comment.

>>> Working group, what do you think the correct wording should be. I =
suggest:
>>>=20
>>> o =E2=80=9Croutable=E2=80=9D
>>> o =E2=80=9Croutable in the underlay=E2=80=9D
>>> o =E2=80=9Croutable in the RLOC space"
>>=20
>> [AR2] My personal preference is "routable in the underlay", but any =
of
>> the three works for me.
>=20
> I would prefer =E2=80=9Croutable in the RLOC space=E2=80=9D since this =
is what is needed.=20

Done.

>=20
>>>=20
>>>> The EID-to-RLOC map-cache is a short-lived, on-demand table in an =
ITR that store
>>>>=20
>>>> [AR] We probably should remove the note on the map-cache being
>>>> =E2=80=9Cshort-lived=E2=80=9D since that may not be the case in =
some deployments.
>>>=20
>>> Response (3).
>>>=20
>>> But it is in other deployments if you don=E2=80=99t want to use any =
of the update mapping techniques, like map-versioning, SMRs, pubsub, and =
Map-Notify messaging.
>>=20
>> [AR2] I would suggest that at least we rephrase the sentence to say
>> something like: "The EID-to-RLOC map-cache is a (generally
>> short-lived) on-demand table in an ITR that stores=E2=80=A6"
>=20
> I agree with AR, we do not need to state how long the mappings are =
kept in a cache, this is a management/implementation issue.

Done.

>>=20
>> [AR2] My question was more with regard to the Locator-Set. Let's say
>> that two different ETRs serving the same site are registering only
>> their own RLOCs and are leveraging on the merge-semantics capability
>> of the Map-Server to build a unified mapping. These two ETRs are in a
>> steady state but their Locator-Set is different for the same
>> EID-Prefix.
>>>=20
>>>> Address Family Identifier (AFI):  AFI is a term used to describe an
>>>> address encoding in a packet.  An address family currently pertains =
to
>>>> an IPv4 or IPv6 address.
>>>>=20
>>>> [AR] Although in some points the document mentions LCAF or other
>>>> address types for EID/RLOC, in most of the cases it assumes only
>>>> IPv4/v6. I think we should update the document to be more flexible =
and
>>>> relax those IP-only mentions (specially for EID cases).
>>>=20
>>> Response (1).
>>>=20
>>> I changed to =E2=80=9CAn address family that pertains to the =
data-plane, can be an IPv4, IPv6, or MAC address.=E2=80=9D
>=20
> Why you do not simply state =E2=80=9CAn address family that pertains =
to the data-plane.=E2=80=9D and that=E2=80=99s it.

Sure, changed.

>>> Response (1).
>>>=20
>>> Making a reference to private addresses is actually very important. =
There are a lot of container and VMs within cloud provider deployments =
that use it. It is probably the most popular use-case of LISP.
>>=20
>> [AR2] My intention was to state that we should not tie Instance-IDs =
to
>> the address duplication problem of private addresses. Indeed,
>> preventing address duplication is one of the major use-cases for
>> Instance-IDs but they are applicable beyond that particular use-case.
>=20
> I agree with AR. private addressing is a use case not the reason. Text =
should be more generic.=20

Then can one of you two suggest text to insert here?

>=20
>=20
>>>=20
>>> I made a reference to the VPN spec which is now a WG draft.
>>>=20
>>>> An ITR SHOULD only set the E-bit in an encapsulated data packet =
when
>>>> it knows the ETR is
>>>> enabled for echo-noncing.  This is conveyed by the E-bit in the
>>>> Map-Reply message.
>>>>=20
>>>> [AR] There should be probably a mention to merge-semantics and/or
>>>> proxy-reply here.
>>>=20
>>> Response (3).
>>>=20
>>> Why? Merge semantics only apply to Map-Registers. Not the Map-Reply =
an ETR sends to an ITR. That is when it conveys it can support =
echo-noncing.
>>=20
>> [AR2] My point was that merge-semantics and proxy-reply may affect =
the
>> E-bit process. For instance, if the MS is merging different
>> Map-Registers, (some with the E-bit set, some without), which value
>> for the E-bit should the MS return in a Map-Reply?
>>>=20
>>>> Since the LISP architecture uses a caching scheme to retrieve and
>>>> store EID-to-RLOC mappings, the only way an ITR can get a more
>>>> up-to-date mapping is to re-request the mapping.
>=20
> wouldn=E2=80=99t be simpler to change the sentence in =E2=80=9C=E2=80=A6=
.the only way an ITR can get a more
> recent mapping is to update the mapping by any means available in the =
control plane.=E2=80=9D
>=20
> This should be generic enough to cover the pub/sub case.

That is not what the comment is about. The comment is related to how an =
ETR tells an ITR that it is echo-nonce capable. And if multiple ETRs =
register the same EID-prefix with each of their RLOCs, a proxy Map-Reply =
has a single E-bit. So the Map-Server cannot set the bit if one can =
support echo-noncing and the other cannot.

>>> Response (1).
>>>=20
>>> Added text to support your suggestion.
>>>=20
>>>> It is important to note that a locator address in any LISP control
>>>> message MUST be a globally routable address and therefore SHOULD =
NOT
>>>> contain [RFC1918] addresses.
>>>>=20
>>>> [AR] The Internet use-case is less relevant today, therefore I=E2=80=99=
d
>>>> suggest removing the sentence regarding RFC1918.
>>>=20
>>> Response (1).
>>>=20
>>> I think we should add that there ARE allowed if run in a local =
environment.
>>>=20
>=20
> I agree with AR. Sentence should be removed. It is consistent with the =
very first comment about RLOCs being routable in the RLOC space.
> If your RLOC space is the Internet then you cannot use RFC1918 =
addresses.

Check the current text to see if the change suffices.

Thanks,
Dino


--Apple-Mail=_5646FEA0-2FAC-48A8-82F9-2DAFB47A4961
Content-Disposition: attachment;
	filename=rfcdiff.html
Content-Type: text/html;
	x-unix-mode=0644;
	name="rfcdiff.html"
Content-Transfer-Encoding: quoted-printable



=20
  =20
  =20
  Diff: draft-ietf-lisp-rfc6830bis-05.txt - =
draft-ietf-lisp-rfc6830bis-06.txt=20
  =20
     =20
=20
=20
  =20
  =20
      =

      =

      =

      =

      
< draft-ietf-lisp-rfc6830bis-05.txt  =
 draft-ietf-lisp-rfc6830bis-06.txt >
 =


      
Network Working =
Group                                       D. Farinacci =
Network Working Group                           =
            D. Farinacci

      
Internet-Draft    =
                                             V. Fuller Internet-Draft                                           =
      V. Fuller

      
Intended status: =
Standards Track                                D. Meyer =
Intended status: Standards Track                =
                D. Meyer

      

      
Expires: March 2, 2018                                    =
      D. Lewis Expires: April 26, 2018                                   =
      D. Lewis

      
                  =
                                         Cisco Systems                                                          =
  Cisco Systems

      
                  =
                                     A. Cabellos (Ed.)                                                        =
A. Cabellos (Ed.)

      
                  =
                                     UPC/BarcelonaTech                                                        =
UPC/BarcelonaTech

      

      
                =
                                         August =
29, 2017                       =
                                  October =
23, 2017

      
 =


      
               =
The Locator/ID Separation Protocol (LISP)                The Locator/ID Separation Protocol =
(LISP)

      

      
                =
     draft-ietf-lisp-rfc6830bis-05 =
                     =
draft-ietf-lisp-rfc6830bis-06

      
 =


      
Abstract =
Abstract

      
 =


      
   This document =
describes the data-plane protocol for the Locator/ID    This document describes the data-plane protocol for =
the Locator/ID

      
   Separation =
Protocol (LISP).  LISP defines two namespaces, End-point =
   Separation Protocol (LISP).  LISP defines =
two namespaces, End-point

      
   Identifiers =
(EIDs) that identify end-hosts and Routing Locators    Identifiers (EIDs) that identify end-hosts and =
Routing Locators

      
   (RLOCs) that =
identify network attachment points.  With this, LISP    (RLOCs) that identify network attachment points.  =
With this, LISP

      
   effectively =
separates control from data, and allows routers to create =
   effectively separates control from data, and =
allows routers to create

      
   overlay =
networks.  LISP-capable routers exchange encapsulated packets =
   overlay networks.  LISP-capable routers =
exchange encapsulated packets

      
   according to =
EID-to-RLOC mappings stored in a local map-cache.  The    according to EID-to-RLOC mappings stored in a local =
map-cache.  The

      
 =


      
skipping to =
change at =
page 1, line 39 =C2=B6 =
skipping to change at page 1, line 39 =C2=B6

      
   among other =
features.    among other =
features.

      
 =


      
Status of This =
Memo Status of This Memo

      
 =


      
   This =
Internet-Draft is submitted in full conformance with the =
   This Internet-Draft is submitted in full =
conformance with the

      
   provisions of =
BCP 78 and BCP 79.    provisions of =
BCP 78 and BCP 79.

      
 =


      
   =
Internet-Drafts are working documents of the Internet =
Engineering    Internet-Drafts are =
working documents of the Internet Engineering

      
   Task Force =
(IETF).  Note that other groups may also distribute    Task Force (IETF).  Note that other groups may also =
distribute

      
   working =
documents as Internet-Drafts.  The list of current Internet- =
   working documents as Internet-Drafts.  The =
list of current Internet-

      

      
   Drafts is at =
http://datatracker.ietf.org/drafts/current/.    Drafts is at https://datatracker.ietf.org/drafts/current/.

      
 =


      
   =
Internet-Drafts are draft documents valid for a maximum of six =
months    Internet-Drafts are draft =
documents valid for a maximum of six months

      
   and may be =
updated, replaced, or obsoleted by other documents at any =
   and may be updated, replaced, or obsoleted =
by other documents at any

      
   time.  It is =
inappropriate to use Internet-Drafts as reference    time.  It is inappropriate to use Internet-Drafts as =
reference

      
   material or to =
cite them other than as "work in progress."    material or to cite them other than as "work in =
progress."

      
 =


      

      
   This =
Internet-Draft will expire on March 2, =
2018.    This Internet-Draft will =
expire on April 26, 2018.

      
 =


      
Copyright =
Notice Copyright Notice

      
 =


      
   Copyright (c) =
2017 IETF Trust and the persons identified as the    Copyright (c) 2017 IETF Trust and the persons =
identified as the

      
   document =
authors.  All rights reserved.    =
document authors.  All rights reserved.

      
 =


      
   This document =
is subject to BCP 78 and the IETF Trust's Legal    This document is subject to BCP 78 and the IETF =
Trust's Legal

      
   Provisions =
Relating to IETF Documents    =
Provisions Relating to IETF Documents

      

      
   =
(http://trustee.ietf.org/license-info) in effect on the date of =
   (https://trustee.ietf.org/license-info) in effect on =
the date of

      
   publication of =
this document.  Please review these documents    publication of this document.  Please review these =
documents

      
   carefully, as =
they describe your rights and restrictions with respect =
   carefully, as they describe your rights and =
restrictions with respect

      
   to this =
document.  Code Components extracted from this document must =
   to this document.  Code Components extracted =
from this document must

      
   include =
Simplified BSD License text as described in Section 4.e of =
   include Simplified BSD License text as =
described in Section 4.e of

      
   the Trust =
Legal Provisions and are provided without warranty as    the Trust Legal Provisions and are provided without =
warranty as

      
   described in =
the Simplified BSD License.    =
described in the Simplified BSD License.

      
 =


      
Table of =
Contents Table of Contents

      
 =


      
   1.  =
Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   =
3    1.  Introduction  . . . . . . . . =
. . . . . . . . . . . . . . . .   3

      
 =


      
skipping to =
change at =
page 2, line 46 =C2=B6 =
skipping to change at page 2, line 46 =C2=B6

      
   9.  Routing =
Locator Selection . . . . . . . . . . . . . . . . . .  23 =
   9.  Routing Locator Selection . . . . . . . =
. . . . . . . . . . .  23

      
   10. Routing =
Locator Reachability  . . . . . . . . . . . . . . . .  24 =
   10. Routing Locator Reachability  . . . . . =
. . . . . . . . . . .  24

      
     10.1.  Echo =
Nonce Algorithm . . . . . . . . . . . . . . . . . .  27 =
     10.1.  Echo Nonce Algorithm . . . . . . . =
. . . . . . . . . . .  27

      
     10.2.  =
RLOC-Probing Algorithm . . . . . . . . . . . . . . . . .  28 =
     10.2.  RLOC-Probing Algorithm . . . . . . =
. . . . . . . . . . .  28

      
   11. EID =
Reachability within a LISP Site . . . . . . . . . . . . .  29 =
   11. EID Reachability within a LISP Site . . =
. . . . . . . . . . .  29

      
   12. Routing =
Locator Hashing . . . . . . . . . . . . . . . . . . .  30 =
   12. Routing Locator Hashing . . . . . . . . =
. . . . . . . . . . .  30

      
   13. Changing =
the Contents of EID-to-RLOC Mappings . . . . . . . .  31 =
   13. Changing the Contents of EID-to-RLOC =
Mappings . . . . . . . .  31

      
     13.1.  Clock =
Sweep  . . . . . . . . . . . . . . . . . . . . . .  32      13.1.  Clock Sweep  . . . . . . . . . . . . . . . . =
. . . . . .  32

      
     13.2.  =
Solicit-Map-Request (SMR)  . . . . . . . . . . . . . . .  32 =
     13.2.  Solicit-Map-Request (SMR)  . . . . =
. . . . . . . . . . .  32

      
     13.3.  =
Database Map-Versioning  . . . . . . . . . . . . . . . .  34 =
     13.3.  Database Map-Versioning  . . . . . =
. . . . . . . . . . .  34

      

      
   14. =
Multicast Considerations  . . . . . . . . . . . . . . . . . .  34    14. =
Multicast Considerations  . . . . . . . . . . . . . . . . . .  35

      
   15. Router =
Performance Considerations . . . . . . . . . . . . . .  35 =
   15. Router Performance Considerations . . . =
. . . . . . . . . . .  35

      
   16. Mobility =
Considerations . . . . . . . . . . . . . . . . . . .  36 =
   16. Mobility Considerations . . . . . . . . =
. . . . . . . . . . .  36

      
     16.1.  Slow =
Mobility  . . . . . . . . . . . . . . . . . . . . .  36 =
     16.1.  Slow Mobility  . . . . . . . . . . =
. . . . . . . . . . .  36

      
     16.2.  Fast =
Mobility  . . . . . . . . . . . . . . . . . . . . .  36 =
     16.2.  Fast Mobility  . . . . . . . . . . =
. . . . . . . . . . .  36

      
     16.3.  LISP =
Mobile Node Mobility  . . . . . . . . . . . . . . .  37 =
     16.3.  LISP Mobile Node Mobility  . . . . =
. . . . . . . . . . .  37

      
   17. LISP xTR =
Placement and Encapsulation Methods  . . . . . . . .  38 =
   17. LISP xTR Placement and Encapsulation =
Methods  . . . . . . . .  38

      
     17.1.  =
First-Hop/Last-Hop xTRs  . . . . . . . . . . . . . . . .  39 =
     17.1.  First-Hop/Last-Hop xTRs  . . . . . =
. . . . . . . . . . .  39

      
     17.2.  =
Border/Edge xTRs . . . . . . . . . . . . . . . . . . . .  39 =
     17.2.  Border/Edge xTRs . . . . . . . . . =
. . . . . . . . . . .  39

      
     17.3.  ISP =
Provider Edge (PE) xTRs  . . . . . . . . . . . . . .  40 =
     17.3.  ISP Provider Edge (PE) xTRs  . . . =
. . . . . . . . . . .  40

      
     17.4.  LISP =
Functionality with Conventional NATs  . . . . . . .  40 =
     17.4.  LISP Functionality with =
Conventional NATs  . . . . . . .  40

      
 =


      
skipping to =
change at =
page 3, line 22 =C2=B6 =
skipping to change at page 3, line 22 =C2=B6

      
     18.3.  =
Traceroute Using Mixed Locators  . . . . . . . . . . . .  43 =
     18.3.  Traceroute Using Mixed Locators  . =
. . . . . . . . . . .  43

      
   19. Security =
Considerations . . . . . . . . . . . . . . . . . . .  43 =
   19. Security Considerations . . . . . . . . =
. . . . . . . . . . .  43

      
   20. Network =
Management Considerations . . . . . . . . . . . . . .  44 =
   20. Network Management Considerations . . . =
. . . . . . . . . . .  44

      
   21. IANA =
Considerations . . . . . . . . . . . . . . . . . . . . .  44 =
   21. IANA Considerations . . . . . . . . . . =
. . . . . . . . . . .  44

      
     21.1.  LISP =
UDP Port Numbers  . . . . . . . . . . . . . . . . .  44 =
     21.1.  LISP UDP Port Numbers  . . . . . . =
. . . . . . . . . . .  44

      
   22. References =
 . . . . . . . . . . . . . . . . . . . . . . . . .  44    22. References  . . . . . . . . . . . . . . . . . . . =
. . . . . .  44

      
     22.1.  =
Normative References . . . . . . . . . . . . . . . . . .  44 =
     22.1.  Normative References . . . . . . . =
. . . . . . . . . . .  44

      
     22.2.  =
Informative References . . . . . . . . . . . . . . . . .  47 =
     22.2.  Informative References . . . . . . =
. . . . . . . . . . .  47

      
   Appendix A.  =
Acknowledgments  . . . . . . . . . . . . . . . . . .  51 =
   Appendix A.  Acknowledgments  . . . . . . . =
. . . . . . . . . . .  51

      
   Appendix B.  =
Document Change Log  . . . . . . . . . . . . . . . .  51 =
   Appendix B.  Document Change Log  . . . . . =
. . . . . . . . . . .  51

      

      
     B.1.  =
Changes to draft-ietf-lisp-rfc6830bis-04  =
. . . . . . . .  52      B.1.  =
Changes to draft-ietf-lisp-rfc6830bis-06  =
. . . . . . . .  52

      
     B.2.  =
Changes to draft-ietf-lisp-rfc6830bis-03  =
. . . . . . . .  52      B.2.  =
Changes to draft-ietf-lisp-rfc6830bis-05  =
. . . . . . . .  52

      
     B.3.  =
Changes to draft-ietf-lisp-rfc6830bis-02  =
. . . . . . . .  52      B.3.  =
Changes to draft-ietf-lisp-rfc6830bis-04  =
. . . . . . . .  52

      
     B.4.  =
Changes to draft-ietf-lisp-rfc6830bis-01  =
. . . . . . . .  52      B.4.  =
Changes to draft-ietf-lisp-rfc6830bis-03  =
. . . . . . . .  52

      
     B.5.  =
Changes to draft-ietf-lisp-rfc6830bis-00  . . . . . . . .  52      B.5.  =
Changes to draft-ietf-lisp-rfc6830bis-02  . . . . =
. . . .  53

      
   Authors' =
Addresses  . . . . . . . . . . . . . . . . . . . . . . .  52      B.6.  Changes to draft-ietf-lisp-rfc6830bis-01  . =
. . . . . . .  53

      
 =
     B.7.  Changes =
to draft-ietf-lisp-rfc6830bis-00  . . . . . . . .  53

      
 =
   Authors' Addresses  . . . . . . . . . . . . =
. . . . . . . . . . .  53

      
 =


      
1.  =
Introduction 1.  Introduction

      
 =


      
   This document =
describes the Locator/Identifier Separation Protocol    This document describes the Locator/Identifier =
Separation Protocol

      
   (LISP).  LISP =
is an encapsulation protocol built around the    (LISP).  LISP is an encapsulation protocol built =
around the

      
   fundamental =
idea of separating the topological location of a network =
   fundamental idea of separating the =
topological location of a network

      
   attachment =
point from the node's identity [CHIAPPA].  As a result    attachment point from the node's identity [CHIAPPA].  =
As a result

      
   LISP creates =
two namespaces: Endpoint Identifiers (EIDs), that are    LISP creates two namespaces: Endpoint Identifiers =
(EIDs), that are

      
   used to =
identify end-hosts (e.g., nodes or Virtual Machines) and =
   used to identify end-hosts (e.g., nodes or =
Virtual Machines) and

      
   routable =
Routing Locators (RLOCs), used to identify network    routable Routing Locators (RLOCs), used to identify =
network

      
 =


      
skipping to =
change at =
page 5, line 19 =C2=B6 =
skipping to change at page 5, line 19 =C2=B6

      
      the first =
(most inner) LISP header of a packet.  The host obtains =
      the first (most inner) LISP header of a =
packet.  The host obtains

      
      a =
destination EID the same way it obtains a destination address =
      a destination EID the same way it obtains =
a destination address

      
      today, for =
example, through a Domain Name System (DNS) [RFC1034]       today, for example, through a Domain Name System =
(DNS) [RFC1034]

      
      lookup or =
Session Initiation Protocol (SIP) [RFC3261] exchange.       lookup or Session Initiation Protocol (SIP) =
[RFC3261] exchange.

      
      The source =
EID is obtained via existing mechanisms used to set a       The source EID is obtained via existing mechanisms =
used to set a

      
      host's =
"local" IP address.  An EID used on the public Internet =
      host's "local" IP address.  An EID used =
on the public Internet

      
      must have =
the same properties as any other IP address used in that =
      must have the same properties as any =
other IP address used in that

      
      manner; =
this means, among other things, that it must be globally =
      manner; this means, among other things, =
that it must be globally

      
      unique.  An =
EID is allocated to a host from an EID-Prefix block       unique.  An EID is allocated to a host from an =
EID-Prefix block

      
      associated =
with the site where the host is located.  An EID can be =
      associated with the site where the host =
is located.  An EID can be

      

      
      used by a =
host to refer to other hosts.  EIDs MUST NOT be =
used as       used by a host =
to refer to other hosts.  Note that EID blocks MAY

      
      LISP RLOCs.  Note that EID blocks MAY be =
assigned in a       be assigned in a =
hierarchical manner, independent of the network

      
      =
hierarchical manner, independent of the network topology, to =
      topology, to facilitate scaling of the =
mapping database.  In

      
      =
facilitate scaling of the mapping database.  In addition, an =
EID       addition, an EID block =
assigned to a site may have site-local
      block =
assigned to a site may have site-local structure       structure (subnetting) for routing within the =
site; this structure

      
      =
(subnetting) for routing within the site; this structure is not =
      is not visible to the global routing =
system.  In theory, the bit

      
      visible =
to the global routing system.  In theory, the bit string =
      string that represents an EID for one =
device can represent an RLOC

      
      that =
represents an EID for one device can represent an RLOC for a =
      for a different device.  As the =
architecture is realized, if a

      
      different =
device.  As the architecture is realized, if a given bit =
      given bit string is both an RLOC and an =
EID, it must refer to the

      
      string is =
both an RLOC and an EID, it must refer to the same       same entity in both cases.  When used in =
discussions with other

      
      entity in =
both cases.  When used in discussions with other 

      
      Locator/ID =
separation proposals, a LISP EID will be called an       Locator/ID separation proposals, a LISP EID will =
be called an

      
      "LEID".  =
Throughout this document, any references to "EID" refer =
      "LEID".  Throughout this document, any =
references to "EID" refer

      
      to an =
LEID.       to an LEID.

      
 =


      
   EID-Prefix:   =
An EID-Prefix is a power-of-two block of EIDs that are    EID-Prefix:   An EID-Prefix is a power-of-two block =
of EIDs that are

      
      allocated =
to a site by an address allocation authority.  EID-       allocated to a site by an address allocation =
authority.  EID-

      
      Prefixes =
are associated with a set of RLOC addresses that make up =
      Prefixes are associated with a set of =
RLOC addresses that make up

      
      a "database =
mapping".  EID-Prefix allocations can be broken up       a "database mapping".  EID-Prefix allocations can =
be broken up

      
      into =
smaller blocks when an RLOC set is to be associated with the =
      into smaller blocks when an RLOC set is =
to be associated with the

      
      larger =
EID-Prefix block.  A globally routed address block (whether =
      larger EID-Prefix block.  A globally =
routed address block (whether

      
 =


      
skipping to =
change at =
page 6, line 17 =C2=B6 =
skipping to change at page 6, line 14 =C2=B6

      
      supplies an =
EID value for the destination address field of the IP       supplies an EID value for the destination address =
field of the IP

      
      header when =
communicating globally (i.e., outside of its routing       header when communicating globally (i.e., outside =
of its routing

      
      domain).  =
An end-system can be a host computer, a switch or router =
      domain).  An end-system can be a host =
computer, a switch or router

      
      device, or =
any network appliance.       device, =
or any network appliance.

      
 =


      
   Ingress Tunnel =
Router (ITR):   An ITR is a router that resides in a    Ingress Tunnel Router (ITR):   An ITR is a router =
that resides in a

      
      LISP site.  =
Packets sent by sources inside of the LISP site to       LISP site.  Packets sent by sources inside of the =
LISP site to

      
      =
destinations outside of the site are candidates for =
encapsulation       destinations =
outside of the site are candidates for encapsulation

      
      by the ITR. =
 The ITR treats the IP destination address as an EID       by the ITR.  The ITR treats the IP destination =
address as an EID

      
      and =
performs an EID-to-RLOC mapping lookup.  The router then =
      and performs an EID-to-RLOC mapping =
lookup.  The router then

      

      
      prepends =
an "outer" IP header with one of its globally routable       prepends an "outer" IP header with one of its =
routable RLOCs (in

      
      RLOCs in =
the source address field and the result of the mapping       the RLOC space) in =
the source address field and the result of the

      
      lookup in =
the destination address field.  Note that this       mapping lookup in the destination address field.  =
Note that this

      
      destination =
RLOC MAY be an intermediate, proxy device that has       destination RLOC MAY be an intermediate, proxy =
device that has

      
      better =
knowledge of the EID-to-RLOC mapping closer to the       better knowledge of the EID-to-RLOC mapping closer =
to the

      
      destination =
EID.  In general, an ITR receives IP packets from site       destination EID.  In general, an ITR receives IP =
packets from site

      
      end-systems =
on one side and sends LISP-encapsulated IP packets       end-systems on one side and sends =
LISP-encapsulated IP packets

      
      toward the =
Internet on the other side.       =
toward the Internet on the other side.
 =


      
      =
Specifically, when a service provider prepends a LISP header =
for       Specifically, when a service =
provider prepends a LISP header for

      
      Traffic =
Engineering purposes, the router that does this is also =
      Traffic Engineering purposes, the router =
that does this is also

      
      regarded as =
an ITR.  The outer RLOC the ISP ITR uses can be based       regarded as an ITR.  The outer RLOC the ISP ITR =
uses can be based

      
      on the =
outer destination address (the originating ITR's supplied =
      on the outer destination address (the =
originating ITR's supplied

      
 =


      
skipping to =
change at =
page 7, line 9 =C2=B6 =
skipping to change at page 7, line 7 =C2=B6

      
      network =
that strips an outer LISP header for Traffic Engineering =
      network that strips an outer LISP header =
for Traffic Engineering

      
      =
purposes.       purposes.

      
 =


      
   xTR:   An xTR =
is a reference to an ITR or ETR when direction of data    xTR:   An xTR is a reference to an ITR or ETR when =
direction of data

      
      flow is not =
part of the context description.  "xTR" refers to the       flow is not part of the context description.  =
"xTR" refers to the

      
      router that =
is the tunnel endpoint and is used synonymously with       router that is the tunnel endpoint and is used =
synonymously with

      
      the term =
"Tunnel Router".  For example, "An xTR can be located at =
      the term "Tunnel Router".  For example, =
"An xTR can be located at

      
      the =
Customer Edge (CE) router" indicates both ITR and ETR       the Customer Edge (CE) router" indicates both ITR =
and ETR

      
      =
functionality at the CE router.       =
functionality at the CE router.

      
 =


      

      
 =
   Re-encapsulating =
Tunneling in RTRs:   Re-encapsulating Tunneling

      
 =
      occurs when an =
RTR (Re-encapsulating Tunnel Router) acts like an

      
 =
      ETR to remove a =
LISP header, then acts as an ITR to prepend a new

      
 =
      LISP header.  =
Doing this allows a packet to be re-routed by the

      
 =
      RTR without =
adding the overhead of additional tunnel headers.  Any

      
 =
      references to =
tunnels in this specification refer to dynamic

      
 =
      encapsulating =
tunnels; they are never statically configured.  When

      
 =
      using multiple =
mapping database systems, care must be taken to not

      
 =
      create =
re-encapsulation loops through misconfiguration.

      
 =
                                               =
                          

      
   LISP Router:   =
A LISP router is a router that performs the functions    LISP Router:   A LISP router is a router that =
performs the functions

      
      of any or =
all of the following: ITR, ETR, RTR, Proxy-ITR (PITR),       of any or all of the following: ITR, ETR, RTR, =
Proxy-ITR (PITR),

      
      or =
Proxy-ETR (PETR).       or Proxy-ETR =
(PETR).

      
 =


      

      
   EID-to-RLOC =
Map-Cache:   The EID-to-RLOC map-cache is a =
short-lived,    EID-to-RLOC =
Map-Cache:   The EID-to-RLOC map-cache is generally

      
      on-demand =
table in an ITR that stores, tracks, and is responsible =
      short-lived, on-demand table in an ITR =
that stores, tracks, and is

      
      for =
timing out and otherwise validating EID-to-RLOC mappings. =
      responsible for timing out and otherwise =
validating EID-to-RLOC

      
      This =
cache is distinct from the full "database" of EID-to-RLOC   =
    mappings.  This cache is distinct from the full "database" of EID-

      
      mappings; =
it is dynamic, local to the ITR(s), and relatively       to-RLOC mappings; =
it is dynamic, local to the ITR(s), and

      
      small, =
while the database is distributed, relatively static, and =
      relatively small, while the database is =
distributed, relatively

      
      much more =
global in scope.       static, and =
much more global in scope.

      
 =


      
   EID-to-RLOC =
Database:   The EID-to-RLOC Database is a global    EID-to-RLOC Database:   The EID-to-RLOC Database is a =
global

      
      distributed =
database that contains all known EID-Prefix-to-RLOC       distributed database that contains all known =
EID-Prefix-to-RLOC

      
      mappings.  =
Each potential ETR typically contains a small piece of       mappings.  Each potential ETR typically contains a =
small piece of

      
      the =
database: the EID-to-RLOC mappings for the EID-Prefixes =
      the database: the EID-to-RLOC mappings =
for the EID-Prefixes

      
      "behind" =
the router.  These map to one of the router's own       "behind" the router.  These map to one of the =
router's own

      
      globally =
visible IP addresses.  The same database mapping entries =
      globally visible IP addresses.  The same =
database mapping entries

      
      MUST be =
configured on all ETRs for a given site.  In a steady       MUST be configured on all ETRs for a given site.  =
In a steady

      
      state, the =
EID-Prefixes for the site and the Locator-Set for each       state, the EID-Prefixes for the site and the =
Locator-Set for each

      
      EID-Prefix =
MUST be the same on all ETRs.  Procedures to enforce       EID-Prefix MUST be the same on all ETRs.  =
Procedures to enforce

      
 =


      
skipping to =
change at =
page 7, line 45 =C2=B6 =
skipping to change at page 8, line 5 =C2=B6

      
 =


      
   Recursive =
Tunneling:   Recursive Tunneling occurs when a packet has =
   Recursive Tunneling:   Recursive Tunneling =
occurs when a packet has

      
      more than =
one LISP IP header.  Additional layers of tunneling MAY =
      more than one LISP IP header.  Additional =
layers of tunneling MAY

      
      be employed =
to implement Traffic Engineering or other re-routing       be employed to implement Traffic Engineering or =
other re-routing

      
      as needed.  =
When this is done, an additional "outer" LISP header       as needed.  When this is done, an additional =
"outer" LISP header

      
      is added, =
and the original RLOCs are preserved in the "inner"       is added, and the original RLOCs are preserved in =
the "inner"

      
      header.  =
Any references to tunnels in this specification refer to =
      header.  Any references to tunnels in =
this specification refer to

      
      dynamic =
encapsulating tunnels; they are never statically       dynamic encapsulating tunnels; they are never =
statically

      
      =
configured.       configured.

      
 =


      

      
   Re-encapsulating Tunneling in RTRs:   Re-encapsulating =
Tunneling 

      
      occurs when an RTR (Re-encapsulating Tunnel =
Router) acts like an 

      
      ETR to remove a LISP header, then acts as an ITR =
to prepend a new 

      
      LISP header.  Doing this allows a packet to be =
re-routed by the 

      
      RTR without adding the overhead of additional =
tunnel headers.  Any 

      
      references to tunnels in this specification refer =
to dynamic 

      
      encapsulating tunnels; they are never statically =
configured.  When 

      
      using multiple mapping database systems, care =
must be taken to not 

      
      create re-encapsulation loops through =
misconfiguration. 

      
                =
                                                          =


      
   LISP Header:   =
LISP header is a term used in this document to refer    LISP Header:   LISP header is a term used in this =
document to refer

      
      to the =
outer IPv4 or IPv6 header, a UDP header, and a LISP-       to the outer IPv4 or IPv6 header, a UDP header, =
and a LISP-

      
      specific =
8-octet header that follow the UDP header and that an ITR =
      specific 8-octet header that follow the =
UDP header and that an ITR

      
      prepends or =
an ETR strips.       prepends or an =
ETR strips.

      
 =


      
   Address Family =
Identifier (AFI):   AFI is a term used to describe an    Address Family Identifier (AFI):   AFI is a term used =
to describe an

      

      
      address =
encoding in a packet.  An address family currently     =
  address encoding in a packet.  An address family that pertains to

      
      pertains =
to an IPv4 or IPv6 address.  See [AFN] and =
[RFC3232] for       the data-plane.  See [AFN] and [RFC3232] for =
details.  An AFI

      
      details.  =
An AFI value of 0 used in this specification indicates       value of 0 used in this specification indicates =
an unspecified

      
      an =
unspecified encoded address where the length of the address is =
      encoded address where the length of the =
address is 0 octets

      
      0 octets =
following the 16-bit AFI value of 0.  =
     following the 16-bit AFI value of 0.

      
 =


      
   Negative =
Mapping Entry:   A negative mapping entry, also known as a =
   Negative Mapping Entry:   A negative mapping =
entry, also known as a

      
      negative =
cache entry, is an EID-to-RLOC entry where an EID-Prefix =
      negative cache entry, is an EID-to-RLOC =
entry where an EID-Prefix

      
      is =
advertised or stored with no RLOCs.  That is, the Locator-Set =
      is advertised or stored with no RLOCs.  =
That is, the Locator-Set

      
      for the =
EID-to-RLOC entry is empty or has an encoded Locator count =
      for the EID-to-RLOC entry is empty or has =
an encoded Locator count

      
      of 0.  This =
type of entry could be used to describe a prefix from       of 0.  This type of entry could be used to =
describe a prefix from

      
      a non-LISP =
site, which is explicitly not in the mapping database.       a non-LISP site, which is explicitly not in the =
mapping database.

      
      There are a =
set of well-defined actions that are encoded in a       There are a set of well-defined actions that are =
encoded in a

      
      Negative =
Map-Reply.       Negative =
Map-Reply.

      
 =


      
 =


      
skipping to =
change at =
page 9, line 24 =C2=B6 =
skipping to change at page 9, line 20 =C2=B6

      
      in the edge =
network are the demarcation points to separate the       in the edge network are the demarcation points to =
separate the

      
      edge =
network from the core network.       =
edge network from the core network.

      
 =


      
   Client-side:  =
Client-side is a term used in this document to indicate =
   Client-side:  Client-side is a term used in =
this document to indicate

      
      a =
connection initiation attempt by an EID.  The ITR(s) at the =
LISP       a connection initiation =
attempt by an EID.  The ITR(s) at the LISP

      
      site are =
the first to get involved in obtaining database Map-Cache =
      site are the first to get involved in =
obtaining database Map-Cache

      
      entries by =
sending Map-Request messages.       =
entries by sending Map-Request messages.

      
 =


      
   Server-side:  =
Server-side is a term used in this document to indicate =
   Server-side:  Server-side is a term used in =
this document to indicate

      
      that a =
connection initiation attempt is being accepted for a       that a connection initiation attempt is being =
accepted for a

      

      
      =
destination EID.  The ETR(s) at the destination LISP site are the       =
destination EID.  The ETR(s) at the destination LISP site may be

      
      first to =
send Map-Replies to the source site initiating the       the first to send Map-Replies to the source site =
initiating the

      
      connection. =
 The ETR(s) at this destination site can obtain       connection.  The ETR(s) at this destination site =
can obtain

      
      mappings by =
gleaning information from Map-Requests, Data-Probes,       mappings by gleaning information from =
Map-Requests, Data-Probes,

      
      or =
encapsulated packets.       or =
encapsulated packets.

      
 =


      
   =
Locator-Status-Bits (LSBs):  Locator-Status-Bits are present in =
the    Locator-Status-Bits (LSBs):  =
Locator-Status-Bits are present in the
      LISP =
header.  They are used by ITRs to inform ETRs about the up/ =
      LISP header.  They are used by ITRs to =
inform ETRs about the up/

      
      down status =
of all ETRs at the local site.  These bits are used as       down status of all ETRs at the local site.  These =
bits are used as

      
      a hint to =
convey up/down router status and not path reachability       a hint to convey up/down router status and not =
path reachability

      
      status.  =
The LSBs can be verified by use of one of the Locator       status.  The LSBs can be verified by use of one of =
the Locator

      
      =
reachability algorithms described in Section 10.       reachability algorithms described in Section =
10.

      
 =


      
skipping =
to change at page 11, line =
30 =C2=B6 =
skipping to change at page 11, line =
27 =C2=B6

      
   when =
re-routing of the path for a packet is desired.  A potential =
   when re-routing of the path for a packet is =
desired.  A potential

      
   use-case for =
this would be an ISP router that needs to perform    use-case for this would be an ISP router that needs =
to perform

      
   Traffic =
Engineering for packets flowing through its network.  In such =
   Traffic Engineering for packets flowing =
through its network.  In such

      
   a situation, =
termed "Recursive Tunneling", an ISP transit acts as an =
   a situation, termed "Recursive Tunneling", =
an ISP transit acts as an

      
   additional =
ITR, and the RLOC it uses for the new prepended header    additional ITR, and the RLOC it uses for the new =
prepended header

      
   would be =
either a TE-ETR within the ISP (along an intra-ISP traffic =
   would be either a TE-ETR within the ISP =
(along an intra-ISP traffic

      
   engineered =
path) or a TE-ETR within another ISP (an inter-ISP traffic =
   engineered path) or a TE-ETR within another =
ISP (an inter-ISP traffic

      
   engineered =
path, where an agreement to build such a path exists).    engineered path, where an agreement to build such a =
path exists).

      
 =


      
   In order to =
avoid excessive packet overhead as well as possible    In order to avoid excessive packet overhead as well =
as possible

      

      
   =
encapsulation loops, this document mandates =
that a maximum of two    =
encapsulation loops, this document recommends that a maximum of two

      
   LISP headers =
can be prepended to a packet.  For initial LISP    LISP headers can be prepended to a packet.  For =
initial LISP

      
   deployments, =
it is assumed that two headers is sufficient, where the =
   deployments, it is assumed that two headers =
is sufficient, where the

      
   first =
prepended header is used at a site for Location/Identity =
   first prepended header is used at a site for =
Location/Identity

      
   separation and =
the second prepended header is used inside a service    separation and the second prepended header is used =
inside a service

      
   provider for =
Traffic Engineering purposes.    =
provider for Traffic Engineering purposes.

      
 =


      
   Tunnel Routers =
can be placed fairly flexibly in a multi-AS topology.    Tunnel Routers can be placed fairly flexibly in a =
multi-AS topology.

      
   For example, =
the ITR for a particular end-to-end packet exchange    For example, the ITR for a particular end-to-end =
packet exchange

      
   might be the =
first-hop or default router within a site for the source =
   might be the first-hop or default router =
within a site for the source

      
   host.  =
Similarly, the ETR might be the last-hop router directly =
   host.  Similarly, the ETR might be the =
last-hop router directly

      
 =


      
skipping =
to change at page 23, line =
10 =C2=B6 =
skipping to change at page 23, line =
10 =C2=B6

      
   that prepends =
a LISP header will copy a 24-bit value used by the LISP =
   that prepends a LISP header will copy a =
24-bit value used by the LISP

      
   router to =
uniquely identify the address space.  The value is copied =
   router to uniquely identify the address =
space.  The value is copied

      
   to the =
'Instance ID' field of the LISP header, and the I-bit is set =
   to the 'Instance ID' field of the LISP =
header, and the I-bit is set

      
   to 1. =
   to 1.

      
 =


      
   When an ETR =
decapsulates a packet, the Instance ID from the LISP    When an ETR decapsulates a packet, the Instance ID =
from the LISP

      
   header is used =
as a table identifier to locate the forwarding table    header is used as a table identifier to locate the =
forwarding table

      
   to use for the =
inner destination EID lookup.    to =
use for the inner destination EID lookup.

      
 =


      
   For example, =
an 802.1Q VLAN tag or VPN identifier could be used as a =
   For example, an 802.1Q VLAN tag or VPN =
identifier could be used as a

      

      
   24-bit =
Instance ID.    24-bit Instance ID.  =
See [I-D.ietf-lisp-vpn] for LISP VPN =
use-case

      
 =
   =
details.

      
 =


      
   The Instance =
ID that is stored in the mapping database when LISP-DDT =
   The Instance ID that is stored in the =
mapping database when LISP-DDT

      
   =
[I-D.ietf-lisp-ddt] is used is 32 bits in length.  That means =
the    [I-D.ietf-lisp-ddt] is used is =
32 bits in length.  That means the

      
   control-plane =
can store more instances than a given data-plane can    control-plane can store more instances than a given =
data-plane can

      
   use.  Multiple =
data-planes can use the same 32-bit space as long as    use.  Multiple data-planes can use the same 32-bit =
space as long as

      
   the low-order =
24 bits don't overlap among xTRs.    =
the low-order 24 bits don't overlap among xTRs.

      
 =


      
9.  Routing =
Locator Selection 9.  Routing Locator =
Selection

      
 =


      
   Both the =
client-side and server-side may need control over the    Both the client-side and server-side may need control =
over the

      
 =


      
skipping =
to change at page 32, line =
46 =C2=B6 =
skipping to change at page 32, line =
46 =C2=B6

      
   where mappings =
change, to control the rate they receive requests for    where mappings change, to control the rate they =
receive requests for

      
   Map-Reply =
messages.  SMRs are also used to tell remote ITRs to update =
   Map-Reply messages.  SMRs are also used to =
tell remote ITRs to update

      
   the mappings =
they have cached.    the mappings they =
have cached.

      
 =


      
   Since the ETRs =
don't keep track of remote ITRs that have cached their    Since the ETRs don't keep track of remote ITRs that =
have cached their

      
   mappings, they =
do not know which ITRs need to have their mappings    mappings, they do not know which ITRs need to have =
their mappings

      
   updated.  As a =
result, an ETR will solicit Map-Requests (called an    updated.  As a result, an ETR will solicit =
Map-Requests (called an

      
   SMR message) =
from those sites to which it has been sending    SMR message) from those sites to which it has been =
sending

      
   encapsulated =
data for the last minute.  In particular, an ETR will    encapsulated data for the last minute.  In =
particular, an ETR will

      
   send an SMR to =
an ITR to which it has recently sent encapsulated    send an SMR to an ITR to which it has recently sent =
encapsulated

      

      
   =
data.    data.  This can only occur when both ITR and ETR functionality =
reside

      
 =
   in the same =
router.

      
 =


      
   An SMR message =
is simply a bit set in a Map-Request message.  An ITR    An SMR message is simply a bit set in a Map-Request =
message.  An ITR

      
   or PITR will =
send a Map-Request when they receive an SMR message.    or PITR will send a Map-Request when they receive an =
SMR message.

      
   Both the SMR =
sender and the Map-Request responder MUST rate-limit    Both the SMR sender and the Map-Request responder =
MUST rate-limit

      
   these =
messages.  Rate-limiting can be implemented as a global rate- =
   these messages.  Rate-limiting can be =
implemented as a global rate-

      
   limiter or one =
rate-limiter per SMR destination.    =
limiter or one rate-limiter per SMR destination.

      
 =


      
   The following =
procedure shows how an SMR exchange occurs when a site    The following procedure shows how an SMR exchange =
occurs when a site

      
   is doing =
Locator-Set compaction for an EID-to-RLOC mapping:    is doing Locator-Set compaction for an EID-to-RLOC =
mapping:

      
 =


      
 =


      
skipping =
to change at page 36, line =
43 =C2=B6 =
skipping to change at page 36, line =
47 =C2=B6

      
   decoupling the =
address space used by a site from the address spaces    decoupling the address space used by a site from the =
address spaces

      
   used by its =
ISPs [RFC4984].    used by its ISPs =
[RFC4984].

      
 =


      
16.2.  Fast =
Mobility 16.2.  Fast Mobility

      
 =


      
   Fast endpoint =
mobility occurs when an endpoint moves relatively    Fast endpoint mobility occurs when an endpoint moves =
relatively

      
   rapidly, =
changing its IP-layer network attachment point.  Maintenance =
   rapidly, changing its IP-layer network =
attachment point.  Maintenance

      
   of session =
continuity is a goal.  This is where the Mobile IPv4    of session continuity is a goal.  This is where the =
Mobile IPv4

      
   [RFC5944] and =
Mobile IPv6 [RFC6275] [RFC4866] mechanisms are used and =
   [RFC5944] and Mobile IPv6 [RFC6275] =
[RFC4866] mechanisms are used and

      
   primarily =
where interactions with LISP need to be explored, such as =
   primarily where interactions with LISP need =
to be explored, such as

      

      
   the =
mechanisms in [I-D.portoles-lisp-eid-mobility] when the EID =
moves    the mechanisms in [I-D.ietf-lisp-eid-mobility] when the EID moves =
but

      
   but the RLOC =
is in the network infrastructure.    =
the RLOC is in the network infrastructure.

      
 =


      
   In LISP, one =
possibility is to "glean" information.  When a packet    In LISP, one possibility is to "glean" information.  =
When a packet

      
   arrives, the =
ETR could examine the EID-to-RLOC mapping and use that    arrives, the ETR could examine the EID-to-RLOC =
mapping and use that

      
   mapping for =
all outgoing traffic to that EID.  It can do this after =
   mapping for all outgoing traffic to that =
EID.  It can do this after

      
   performing a =
route-returnability check, to ensure that the new    performing a route-returnability check, to ensure =
that the new

      
   network =
location does have an internal route to that endpoint.    network location does have an internal route to that =
endpoint.

      
   However, this =
does not cover the case where an ITR (the node assigned =
   However, this does not cover the case where =
an ITR (the node assigned

      
   the RLOC) at =
the mobile-node location has been compromised.    the RLOC) at the mobile-node location has been =
compromised.

      
 =


      
   Mobile IP =
packet exchange is designed for an environment in which all =
   Mobile IP packet exchange is designed for an =
environment in which all

      
 =


      
skipping =
to change at page 37, line =
31 =C2=B6 =
skipping to change at page 37, line =
36 =C2=B6

      
   for any =
endpoint will return a binding for the entire mobile prefix. =
   for any endpoint will return a binding for =
the entire mobile prefix.

      
 =


      
   If mobile =
networks become a more common occurrence, it may be useful =
   If mobile networks become a more common =
occurrence, it may be useful

      
   to revisit the =
design of the mapping service and allow for dynamic    to revisit the design of the mapping service and =
allow for dynamic

      
   updates of the =
database.    updates of the =
database.

      
 =


      
   The issue of =
interactions between mobility and LISP needs to be    The issue of interactions between mobility and LISP =
needs to be

      
   explored =
further.  Specific improvements to the entire system will =
   explored further.  Specific improvements to =
the entire system will

      
   depend on the =
details of mapping mechanisms.  Mapping mechanisms    depend on the details of mapping mechanisms.  Mapping =
mechanisms

      
   should be =
evaluated on how well they support session continuity for =
   should be evaluated on how well they support =
session continuity for

      

      
   mobile =
nodes.  See [I-D.farinacci-lisp-predictive-rlocs] for =
more    mobile nodes.  See [I-D.ietf-lisp-predictive-rlocs] for more =
recent

      
   recent =
mechanisms which can provide near-zero packet loss during =
   mechanisms which can provide near-zero =
packet loss during handoffs.

      
   =
handoffs. 

      
 =


      
16.3.  LISP =
Mobile Node Mobility 16.3.  LISP =
Mobile Node Mobility

      
 =


      
   A mobile =
device can use the LISP infrastructure to achieve mobility =
   A mobile device can use the LISP =
infrastructure to achieve mobility

      
   by =
implementing the LISP encapsulation and decapsulation functions =
   by implementing the LISP encapsulation and =
decapsulation functions

      
   and acting as =
a simple ITR/ETR.  By doing this, such a "LISP mobile    and acting as a simple ITR/ETR.  By doing this, such =
a "LISP mobile

      
   node" can use =
topologically independent EID IP addresses that are not =
   node" can use topologically independent EID =
IP addresses that are not

      
   advertised =
into and do not impose a cost on the global routing    advertised into and do not impose a cost on the =
global routing

      
   system.  These =
EIDs are maintained at the edges of the mapping system    system.  These EIDs are maintained at the edges of =
the mapping system

      
   in LISP =
Map-Servers and Map-Resolvers) and are provided on demand to =
   in LISP Map-Servers and Map-Resolvers) and =
are provided on demand to

      
 =


      
skipping =
to change at page 40, line =
46 =C2=B6 =
skipping to change at page 40, line =
46 =C2=B6

      
   and provider =
want control, then Recursive or Re-Encapsulating Tunnels =
   and provider want control, then Recursive or =
Re-Encapsulating Tunnels

      
   are =
used.    are used.

      
 =


      
17.4.  LISP =
Functionality with Conventional NATs 17.4.  LISP Functionality with Conventional NATs

      
 =


      
   LISP routers =
can be deployed behind Network Address Translator (NAT) =
   LISP routers can be deployed behind Network =
Address Translator (NAT)

      
   devices to =
provide the same set of packet services hosts have today =
   devices to provide the same set of packet =
services hosts have today

      
   when they are =
addressed out of private address space. =
   when they are addressed out of private address space.

      
 =


      
   It is =
important to note that a locator address in any LISP control =
   It is important to note that a locator =
address in any LISP control

      

      
   message MUST =
be a globally routable address and =
therefore SHOULD NOT    message MUST be a routable address and therefore =
[RFC1918] addresses

      
   contain [RFC1918] addresses.  If a LISP xTR is configured =
with    SHOULD =
only be presence when running in a local environment.  When =
a

      
   private RLOC =
addresses, they MUST be used only in the =
outer IP header    LISP xTR is =
configured with private RLOC addresses and =
resides behind

      
   so the NAT =
device can translate properly.  Otherwise, EID addresses =
   a NAT device and =
desires to communicate on the Internet, the private

      
   MUST be =
translated before encapsulation is performed when LISP VPNs =
   addresses =
MUST be used only in the outer IP header so the NAT device

      
   are not in =
use.  Both NAT translation and LISP encapsulation    can translate properly.  Otherwise, EID addresses =
MUST be translated

      
   functions =
could be co-located in the same =
device.    before encapsulation is =
performed when LISP VPNs are not in use.

      
 =
   Both NAT translation and LISP encapsulation =
functions could be co-

      
 =
   located in =
the same device.

      
 =


      
17.5.  Packets =
Egressing a LISP Site 17.5.  Packets =
Egressing a LISP Site

      
 =


      
   When a LISP =
site is using two ITRs for redundancy, the failure of one =
   When a LISP site is using two ITRs for =
redundancy, the failure of one

      
   ITR will =
likely shift outbound traffic to the second.  This second =
   ITR will likely shift outbound traffic to =
the second.  This second

      
   ITR's cache =
may not be populated with the same EID-to-RLOC mapping    ITR's cache may not be populated with the same =
EID-to-RLOC mapping

      
   entries as the =
first.  If this second ITR does not have these    entries as the first.  If this second ITR does not =
have these

      
   mappings, =
traffic will be dropped while the mappings are retrieved =
   mappings, traffic will be dropped while the =
mappings are retrieved

      
   from the =
mapping system.  The retrieval of these messages may    from the mapping system.  The retrieval of these =
messages may

      
   increase the =
load of requests being sent into the mapping system.    increase the load of requests being sent into the =
mapping system.

      
 =


      
skipping =
to change at page 45, line =
14 =C2=B6 =
skipping to change at page 45, line =
14 =C2=B6

      
 =


      
   =
[I-D.ietf-lisp-introduction]    =
[I-D.ietf-lisp-introduction]

      
              =
Cabellos-Aparicio, A. and D. Saucez, "An Architectural               Cabellos-Aparicio, A. and D. Saucez, "An =
Architectural

      
              =
Introduction to the Locator/ID Separation Protocol               Introduction to the Locator/ID Separation =
Protocol

      
              =
(LISP)", draft-ietf-lisp-introduction-13 (work in               (LISP)", draft-ietf-lisp-introduction-13 =
(work in

      
              =
progress), April 2015.               =
progress), April 2015.

      
 =


      
   =
[I-D.ietf-lisp-rfc6833bis]    =
[I-D.ietf-lisp-rfc6833bis]

      
              =
Fuller, V., Farinacci, D., and A. Cabellos-Aparicio,               Fuller, V., Farinacci, D., and A. =
Cabellos-Aparicio,

      
              =
"Locator/ID Separation Protocol (LISP) Control-Plane",               "Locator/ID Separation Protocol (LISP) =
Control-Plane",

      

      
              =
draft-ietf-lisp-rfc6833bis-05 (work in progress), =
May               =
draft-ietf-lisp-rfc6833bis-06 (work in progress), =
October

      
              =
2017.               2017.

      
 =


      
   =
[I-D.ietf-lisp-sec]    =
[I-D.ietf-lisp-sec]

      
              =
Maino, F., Ermagan, V., Cabellos-Aparicio, A., and D.               Maino, F., Ermagan, V., Cabellos-Aparicio, =
A., and D.

      

      
              =
Saucez, "LISP-Security (LISP-SEC)", draft-ietf-lisp-sec-12               Saucez, "LISP-Security (LISP-SEC)", draft-ietf-lisp-sec-13

      
              =
(work in progress), November =
2016.               (work in =
progress), September 2017.

      
 =


      
   [RFC0768]  =
Postel, J., "User Datagram Protocol", STD 6, RFC 768,    [RFC0768]  Postel, J., "User Datagram Protocol", STD =
6, RFC 768,

      

      
              =
DOI 10.17487/RFC0768, August 1980, <https://www.rfc-               DOI 10.17487/RFC0768, August =
1980,

      
              =
editor.org/info/rfc768>.    =
           <https://www.rfc-editor.org/info/rfc768>.

      
 =


      
   [RFC0791]  =
Postel, J., "Internet Protocol", STD 5, RFC 791,    [RFC0791]  Postel, J., "Internet Protocol", STD 5, =
RFC 791,

      

      
              =
DOI 10.17487/RFC0791, September 1981, <https://www.rfc-               DOI 10.17487/RFC0791, September =
1981,

      
              =
editor.org/info/rfc791>.    =
           <https://www.rfc-editor.org/info/rfc791>.

      
 =


      
   [RFC1918]  =
Rekhter, Y., Moskowitz, B., Karrenberg, D., de Groot, G., =
   [RFC1918]  Rekhter, Y., Moskowitz, B., =
Karrenberg, D., de Groot, G.,

      
              and =
E. Lear, "Address Allocation for Private Internets",               and E. Lear, "Address Allocation for =
Private Internets",

      
              BCP =
5, RFC 1918, DOI 10.17487/RFC1918, February 1996,               BCP 5, RFC 1918, DOI 10.17487/RFC1918, =
February 1996,

      
              =
<https://www.rfc-editor.org/info/rfc1918>.               =
<https://www.rfc-editor.org/info/rfc1918>.

      
 =


      
   [RFC2119]  =
Bradner, S., "Key words for use in RFCs to Indicate    [RFC2119]  Bradner, S., "Key words for use in RFCs to =
Indicate

      
              =
Requirement Levels", BCP 14, RFC 2119,  =
             Requirement Levels", BCP 14, RFC 2119,

      

      
              =
DOI 10.17487/RFC2119, March 1997, <https://www.rfc-               DOI 10.17487/RFC2119, March 1997,

      
              =
editor.org/info/rfc2119>.   =
            <https://www.rfc-editor.org/info/rfc2119>.

      
 =


      
   [RFC2404]  =
Madson, C. and R. Glenn, "The Use of HMAC-SHA-1-96 within =
   [RFC2404]  Madson, C. and R. Glenn, "The Use =
of HMAC-SHA-1-96 within

      
              ESP =
and AH", RFC 2404, DOI 10.17487/RFC2404, November               ESP and AH", RFC 2404, DOI =
10.17487/RFC2404, November

      
              =
1998, <https://www.rfc-editor.org/info/rfc2404>.               1998, =
<https://www.rfc-editor.org/info/rfc2404>.

      
 =


      
   [RFC3168]  =
Ramakrishnan, K., Floyd, S., and D. Black, "The Addition =
   [RFC3168]  Ramakrishnan, K., Floyd, S., and =
D. Black, "The Addition

      
              of =
Explicit Congestion Notification (ECN) to IP",               of Explicit Congestion Notification (ECN) =
to IP",

      
              RFC =
3168, DOI 10.17487/RFC3168, September 2001,               RFC 3168, DOI 10.17487/RFC3168, September =
2001,

      
              =
<https://www.rfc-editor.org/info/rfc3168>.               =
<https://www.rfc-editor.org/info/rfc3168>.

      
 =


      
   [RFC3232]  =
Reynolds, J., Ed., "Assigned Numbers: RFC 1700 is Replaced =
   [RFC3232]  Reynolds, J., Ed., "Assigned =
Numbers: RFC 1700 is Replaced

      
              by =
an On-line Database", RFC 3232, DOI 10.17487/RFC3232,               by an On-line Database", RFC 3232, DOI =
10.17487/RFC3232,

      
              =
January 2002, <https://www.rfc-editor.org/info/rfc3232>. =
              January 2002, =
<https://www.rfc-editor.org/info/rfc3232>.

      
 =


      
   [RFC4086]  =
Eastlake 3rd, D., Schiller, J., and S. Crocker,    [RFC4086]  Eastlake 3rd, D., Schiller, J., and S. =
Crocker,

      
              =
"Randomness Requirements for Security", BCP 106, RFC 4086, =
              "Randomness Requirements for =
Security", BCP 106, RFC 4086,

      

      
              =
DOI 10.17487/RFC4086, June 2005, <https://www.rfc-               DOI 10.17487/RFC4086, June 2005,

      
              =
editor.org/info/rfc4086>.   =
            <https://www.rfc-editor.org/info/rfc4086>.

      
 =


      
   [RFC4632]  =
Fuller, V. and T. Li, "Classless Inter-domain Routing    [RFC4632]  Fuller, V. and T. Li, "Classless =
Inter-domain Routing

      
              =
(CIDR): The Internet Address Assignment and Aggregation =
              (CIDR): The Internet Address =
Assignment and Aggregation

      
              =
Plan", BCP 122, RFC 4632, DOI 10.17487/RFC4632, August               Plan", BCP 122, RFC 4632, DOI =
10.17487/RFC4632, August

      
              =
2006, <https://www.rfc-editor.org/info/rfc4632>.               2006, =
<https://www.rfc-editor.org/info/rfc4632>.

      
 =


      
   [RFC4868]  =
Kelly, S. and S. Frankel, "Using HMAC-SHA-256, HMAC-SHA- =
   [RFC4868]  Kelly, S. and S. Frankel, "Using =
HMAC-SHA-256, HMAC-SHA-

      
              =
384, and HMAC-SHA-512 with IPsec", RFC 4868,               384, and HMAC-SHA-512 with IPsec", RFC =
4868,

      

      
              =
DOI 10.17487/RFC4868, May 2007, <https://www.rfc-               DOI 10.17487/RFC4868, May 2007,

      
              =
editor.org/info/rfc4868>.   =
            <https://www.rfc-editor.org/info/rfc4868>.

      
 =


      
   [RFC5226]  =
Narten, T. and H. Alvestrand, "Guidelines for Writing an =
   [RFC5226]  Narten, T. and H. Alvestrand, =
"Guidelines for Writing an

      
              =
IANA Considerations Section in RFCs", RFC 5226,               IANA Considerations Section in RFCs", RFC =
5226,

      

      
              =
DOI 10.17487/RFC5226, May 2008, <https://www.rfc-               DOI 10.17487/RFC5226, May 2008,

      
              =
editor.org/info/rfc5226>.   =
            <https://www.rfc-editor.org/info/rfc5226>.

      
 =


      
   [RFC5496]  =
Wijnands, IJ., Boers, A., and E. Rosen, "The Reverse Path =
   [RFC5496]  Wijnands, IJ., Boers, A., and E. =
Rosen, "The Reverse Path

      
              =
Forwarding (RPF) Vector TLV", RFC 5496, =
              Forwarding (RPF) Vector TLV", RFC 5496,

      

      
              =
DOI 10.17487/RFC5496, March 2009, <https://www.rfc-               DOI 10.17487/RFC5496, March 2009,

      
              =
editor.org/info/rfc5496>.   =
            <https://www.rfc-editor.org/info/rfc5496>.

      
 =


      
   [RFC5944]  =
Perkins, C., Ed., "IP Mobility Support for IPv4, Revised", =
   [RFC5944]  Perkins, C., Ed., "IP Mobility =
Support for IPv4, Revised",

      
              RFC =
5944, DOI 10.17487/RFC5944, November 2010,               RFC 5944, DOI 10.17487/RFC5944, November =
2010,

      
              =
<https://www.rfc-editor.org/info/rfc5944>.               =
<https://www.rfc-editor.org/info/rfc5944>.

      
 =


      
   [RFC6115]  Li, =
T., Ed., "Recommendation for a Routing Architecture",    [RFC6115]  Li, T., Ed., "Recommendation for a Routing =
Architecture",

      
              RFC =
6115, DOI 10.17487/RFC6115, February 2011,               RFC 6115, DOI 10.17487/RFC6115, February =
2011,

      
              =
<https://www.rfc-editor.org/info/rfc6115>.               =
<https://www.rfc-editor.org/info/rfc6115>.

      
 =


      
   [RFC6275]  =
Perkins, C., Ed., Johnson, D., and J. Arkko, "Mobility    [RFC6275]  Perkins, C., Ed., Johnson, D., and J. =
Arkko, "Mobility

      
              =
Support in IPv6", RFC 6275, DOI 10.17487/RFC6275, July               Support in IPv6", RFC 6275, DOI =
10.17487/RFC6275, July

      
              =
2011, <https://www.rfc-editor.org/info/rfc6275>.               2011, =
<https://www.rfc-editor.org/info/rfc6275>.

      
 =


      
   [RFC6834]  =
Iannone, L., Saucez, D., and O. Bonaventure, "Locator/ID =
   [RFC6834]  Iannone, L., Saucez, D., and O. =
Bonaventure, "Locator/ID

      
              =
Separation Protocol (LISP) Map-Versioning", RFC 6834,               Separation Protocol (LISP) =
Map-Versioning", RFC 6834,

      

      
              =
DOI 10.17487/RFC6834, January 2013, <https://www.rfc-               DOI 10.17487/RFC6834, January =
2013,

      
              =
editor.org/info/rfc6834>.   =
            <https://www.rfc-editor.org/info/rfc6834>.

      
 =


      
   [RFC6836]  =
Fuller, V., Farinacci, D., Meyer, D., and D. Lewis,    [RFC6836]  Fuller, V., Farinacci, D., Meyer, D., and =
D. Lewis,

      
              =
"Locator/ID Separation Protocol Alternative Logical               "Locator/ID Separation Protocol =
Alternative Logical

      
              =
Topology (LISP+ALT)", RFC 6836, DOI 10.17487/RFC6836,               Topology (LISP+ALT)", RFC 6836, DOI =
10.17487/RFC6836,

      
              =
January 2013, <https://www.rfc-editor.org/info/rfc6836>. =
              January 2013, =
<https://www.rfc-editor.org/info/rfc6836>.

      
 =


      
   [RFC7052]  =
Schudel, G., Jain, A., and V. Moreno, "Locator/ID    [RFC7052]  Schudel, G., Jain, A., and V. Moreno, =
"Locator/ID

      
              =
Separation Protocol (LISP) MIB", RFC 7052,               Separation Protocol (LISP) MIB", RFC =
7052,

      

      
              =
DOI 10.17487/RFC7052, October 2013, <https://www.rfc-               DOI 10.17487/RFC7052, October =
2013,

      
              =
editor.org/info/rfc7052>.   =
            <https://www.rfc-editor.org/info/rfc7052>.

      
 =


      
   [RFC7214]  =
Andersson, L. and C. Pignataro, "Moving Generic Associated =
   [RFC7214]  Andersson, L. and C. Pignataro, =
"Moving Generic Associated

      
              =
Channel (G-ACh) IANA Registries to a New Registry",               Channel (G-ACh) IANA Registries to a New =
Registry",

      
              RFC =
7214, DOI 10.17487/RFC7214, May 2014,  =
             RFC 7214, DOI 10.17487/RFC7214, May 2014,

      
              =
<https://www.rfc-editor.org/info/rfc7214>.               =
<https://www.rfc-editor.org/info/rfc7214>.

      
 =


      
   [RFC7215]  =
Jakab, L., Cabellos-Aparicio, A., Coras, F., Domingo-    [RFC7215]  Jakab, L., Cabellos-Aparicio, A., Coras, =
F., Domingo-

      
              =
Pascual, J., and D. Lewis, "Locator/Identifier Separation =
              Pascual, J., and D. Lewis, =
"Locator/Identifier Separation

      
              =
Protocol (LISP) Network Element Deployment               Protocol (LISP) Network Element =
Deployment

      
              =
Considerations", RFC 7215, DOI 10.17487/RFC7215, April               Considerations", RFC 7215, DOI =
10.17487/RFC7215, April

      
              =
2014, <https://www.rfc-editor.org/info/rfc7215>.               2014, =
<https://www.rfc-editor.org/info/rfc7215>.

      
 =


      
   [RFC7833]  =
Howlett, J., Hartman, S., and A. Perez-Mendez, Ed., "A    [RFC7833]  Howlett, J., Hartman, S., and A. =
Perez-Mendez, Ed., "A

      
              =
RADIUS Attribute, Binding, Profiles, Name Identifier               RADIUS Attribute, Binding, Profiles, Name =
Identifier

      
              =
Format, and Confirmation Methods for the Security               Format, and Confirmation Methods for the =
Security

      
              =
Assertion Markup Language (SAML)", RFC 7833,               Assertion Markup Language (SAML)", RFC =
7833,

      

      
              =
DOI 10.17487/RFC7833, May 2016, <https://www.rfc-               DOI 10.17487/RFC7833, May 2016,

      
              =
editor.org/info/rfc7833>.   =
            <https://www.rfc-editor.org/info/rfc7833>.

      
 =


      
   [RFC7835]  =
Saucez, D., Iannone, L., and O. Bonaventure, "Locator/ID =
   [RFC7835]  Saucez, D., Iannone, L., and O. =
Bonaventure, "Locator/ID

      
              =
Separation Protocol (LISP) Threat Analysis", RFC 7835,               Separation Protocol (LISP) Threat =
Analysis", RFC 7835,

      

      
              =
DOI 10.17487/RFC7835, April 2016, <https://www.rfc-               DOI 10.17487/RFC7835, April 2016,

      
              =
editor.org/info/rfc7835>.   =
            <https://www.rfc-editor.org/info/rfc7835>.

      
 =


      
   [RFC8061]  =
Farinacci, D. and B. Weis, "Locator/ID Separation Protocol =
   [RFC8061]  Farinacci, D. and B. Weis, =
"Locator/ID Separation Protocol

      
              =
(LISP) Data-Plane Confidentiality", RFC 8061,               (LISP) Data-Plane Confidentiality", RFC =
8061,

      

      
              =
DOI 10.17487/RFC8061, February 2017, <https://www.rfc-               DOI 10.17487/RFC8061, February =
2017,

      
              =
editor.org/info/rfc8061>.   =
            <https://www.rfc-editor.org/info/rfc8061>.

      
 =


      
   [RFC8200]  =
Deering, S. and R. Hinden, "Internet Protocol, Version 6 =
   [RFC8200]  Deering, S. and R. Hinden, =
"Internet Protocol, Version 6

      
              =
(IPv6) Specification", STD 86, RFC 8200,               (IPv6) Specification", STD 86, RFC =
8200,

      

      
              =
DOI 10.17487/RFC8200, July 2017, <https://www.rfc-               DOI 10.17487/RFC8200, July 2017,

      
              =
editor.org/info/rfc8200>.   =
            <https://www.rfc-editor.org/info/rfc8200>.

      
 =


      
22.2.  =
Informative References 22.2.  =
Informative References

      
 =


      
   [AFN]      =
IANA, "Address Family Numbers", August 2016,    [AFN]      IANA, "Address Family Numbers", August =
2016,

      
              =
<http://www.iana.org/assignments/address-family-numbers>. =
              =
<http://www.iana.org/assignments/address-family-numbers>.

      
 =


      
   [CHIAPPA]  =
Chiappa, J., "Endpoints and Endpoint names: A Proposed", =
   [CHIAPPA]  Chiappa, J., "Endpoints and =
Endpoint names: A Proposed",

      
              =
1999,               1999,

      
              =
<http://mercury.lcs.mit.edu/~jnc/tech/endpoints.txt>. =
              =
<http://mercury.lcs.mit.edu/~jnc/tech/endpoints.txt>.

      
 =


      

      
   [I-D.farinacci-lisp-predictive-rlocs] =
   [I-D.ietf-lisp-eid-mobility]

      
              Farinacci, D. and P. Pillay-Esnault, "LISP Predictive               Portoles-Comeras, =
M., Ashtaputre, V., Moreno, V., Maino,

      
              RLOCs", =
draft-farinacci-lisp-predictive-rlocs-02 (work in =
              =
F., and D. Farinacci, "LISP L2/L3 EID Mobility Using a

      
              =
progress), May 2017.               Unified Control Plane", =
draft-ietf-lisp-eid-mobility-00
 =
              (work in progress), May =
2017.

      
 =


      
   =
[I-D.ietf-lisp-mn]    =
[I-D.ietf-lisp-mn]

      
              =
Farinacci, D., Lewis, D., Meyer, D., and C. White, "LISP =
              Farinacci, D., Lewis, D., Meyer, =
D., and C. White, "LISP

      
              =
Mobile Node", draft-ietf-lisp-mn-00 (work in progress), =
              Mobile Node", =
draft-ietf-lisp-mn-00 (work in progress),

      
              =
April 2017.               April =
2017.

      
 =


      

      
 =
   [I-D.ietf-lisp-predictive-rlocs]

      
 =
              =
Farinacci, D. and P. Pillay-Esnault, "LISP Predictive

      
 =
              RLOCs", =
draft-ietf-lisp-predictive-rlocs-00 (work in

      
 =
              =
progress), June 2017.

      
 =
                                               =
                          

      
   =
[I-D.ietf-lisp-signal-free-multicast]  =
  [I-D.ietf-lisp-signal-free-multicast]

      
              =
Moreno, V. and D. Farinacci, "Signal-Free LISP Multicast", =
              Moreno, V. and D. Farinacci, =
"Signal-Free LISP Multicast",

      
              =
draft-ietf-lisp-signal-free-multicast-06 (work in               draft-ietf-lisp-signal-free-multicast-06 =
(work in

      
              =
progress), August 2017.               =
progress), August 2017.

      
 =


      

      
 =
   [I-D.ietf-lisp-vpn]

      
 =
              Moreno, =
V. and D. Farinacci, "LISP Virtual Private

      
 =
              Networks =
(VPNs)", draft-ietf-lisp-vpn-00 (work in

      
 =
              =
progress), May 2017.

      
 =
                                               =
                          

      
   =
[I-D.meyer-loc-id-implications]    =
[I-D.meyer-loc-id-implications]

      
              =
Meyer, D. and D. Lewis, "Architectural Implications of               Meyer, D. and D. Lewis, "Architectural =
Implications of

      
              =
Locator/ID Separation", draft-meyer-loc-id-implications-01 =
              Locator/ID Separation", =
draft-meyer-loc-id-implications-01

      
              =
(work in progress), January 2009.      =
         (work in progress), January 2009.

      
 =


      

      
   [I-D.portoles-lisp-eid-mobility] =


      
              Portoles-Comeras, M., Ashtaputre, V., =
Moreno, V., Maino, 

      
              F., and D. Farinacci, "LISP L2/L3 EID =
Mobility Using a 

      
              Unified Control Plane", =
draft-portoles-lisp-eid- 

      
              mobility-02 (work in progress), April =
2017. 

      
                =
                                                          =


      
   [LISA96]   =
Lear, E., Tharp, D., Katinsky, J., and J. Coffin,    [LISA96]   Lear, E., Tharp, D., Katinsky, J., and J. =
Coffin,

      
              =
"Renumbering: Threat or Menace?", Usenix Tenth System               "Renumbering: Threat or Menace?", Usenix =
Tenth System

      
              =
Administration Conference (LISA 96), October 1996.               Administration Conference (LISA 96), =
October 1996.

      
 =


      
   =
[OPENLISP]    [OPENLISP]

      
              =
Iannone, L., Saucez, D., and O. Bonaventure, "OpenLISP               Iannone, L., Saucez, D., and O. =
Bonaventure, "OpenLISP

      
              =
Implementation Report", Work in Progress, July 2008.               Implementation Report", Work in Progress, =
July 2008.

      
 =


      
   [RFC1034]  =
Mockapetris, P., "Domain names - concepts and facilities", =
   [RFC1034]  Mockapetris, P., "Domain names - =
concepts and facilities",

      
              STD =
13, RFC 1034, DOI 10.17487/RFC1034, November 1987,               STD 13, RFC 1034, DOI 10.17487/RFC1034, =
November 1987,

      
              =
<https://www.rfc-editor.org/info/rfc1034>.               =
<https://www.rfc-editor.org/info/rfc1034>.

      
 =


      
   [RFC2784]  =
Farinacci, D., Li, T., Hanks, S., Meyer, D., and P.    [RFC2784]  Farinacci, D., Li, T., Hanks, S., Meyer, =
D., and P.

      
              =
Traina, "Generic Routing Encapsulation (GRE)", RFC 2784, =
              Traina, "Generic Routing =
Encapsulation (GRE)", RFC 2784,

      

      
              =
DOI 10.17487/RFC2784, March 2000, <https://www.rfc-               DOI 10.17487/RFC2784, March 2000,

      
              =
editor.org/info/rfc2784>.   =
            <https://www.rfc-editor.org/info/rfc2784>.

      
 =


      
   [RFC3056]  =
Carpenter, B. and K. Moore, "Connection of IPv6 Domains =
   [RFC3056]  Carpenter, B. and K. Moore, =
"Connection of IPv6 Domains

      
              via =
IPv4 Clouds", RFC 3056, DOI 10.17487/RFC3056, February               via IPv4 Clouds", RFC 3056, DOI =
10.17487/RFC3056, February

      
              =
2001, <https://www.rfc-editor.org/info/rfc3056>.               2001, =
<https://www.rfc-editor.org/info/rfc3056>.

      
 =


      
   [RFC3261]  =
Rosenberg, J., Schulzrinne, H., Camarillo, G., Johnston, =
   [RFC3261]  Rosenberg, J., Schulzrinne, H., =
Camarillo, G., Johnston,

      
              A., =
Peterson, J., Sparks, R., Handley, M., and E.               A., Peterson, J., Sparks, R., Handley, M., =
and E.

      
              =
Schooler, "SIP: Session Initiation Protocol", RFC 3261, =
              Schooler, "SIP: Session =
Initiation Protocol", RFC 3261,

      

      
              =
DOI 10.17487/RFC3261, June 2002, <https://www.rfc-               DOI 10.17487/RFC3261, June 2002,

      
              =
editor.org/info/rfc3261>.   =
            <https://www.rfc-editor.org/info/rfc3261>.

      
 =


      
   [RFC4107]  =
Bellovin, S. and R. Housley, "Guidelines for Cryptographic =
   [RFC4107]  Bellovin, S. and R. Housley, =
"Guidelines for Cryptographic

      
              Key =
Management", BCP 107, RFC 4107, DOI 10.17487/RFC4107,               Key Management", BCP 107, RFC 4107, DOI =
10.17487/RFC4107,

      
              =
June 2005, <https://www.rfc-editor.org/info/rfc4107>. =
              June 2005, =
<https://www.rfc-editor.org/info/rfc4107>.

      
 =


      
   [RFC4192]  =
Baker, F., Lear, E., and R. Droms, "Procedures for    [RFC4192]  Baker, F., Lear, E., and R. Droms, =
"Procedures for

      
              =
Renumbering an IPv6 Network without a Flag Day", RFC 4192, =
              Renumbering an IPv6 Network =
without a Flag Day", RFC 4192,

      

      
              =
DOI 10.17487/RFC4192, September 2005, <https://www.rfc-               DOI 10.17487/RFC4192, September =
2005,

      
              =
editor.org/info/rfc4192>.   =
            <https://www.rfc-editor.org/info/rfc4192>.

      
 =


      
   [RFC4866]  =
Arkko, J., Vogt, C., and W. Haddad, "Enhanced Route    [RFC4866]  Arkko, J., Vogt, C., and W. Haddad, =
"Enhanced Route

      
              =
Optimization for Mobile IPv6", RFC 4866,               Optimization for Mobile IPv6", RFC =
4866,

      

      
              =
DOI 10.17487/RFC4866, May 2007, <https://www.rfc-               DOI 10.17487/RFC4866, May 2007,

      
              =
editor.org/info/rfc4866>.   =
            <https://www.rfc-editor.org/info/rfc4866>.

      
 =


      
   [RFC4984]  =
Meyer, D., Ed., Zhang, L., Ed., and K. Fall, Ed., "Report =
   [RFC4984]  Meyer, D., Ed., Zhang, L., Ed., =
and K. Fall, Ed., "Report

      
              =
from the IAB Workshop on Routing and Addressing",               from the IAB Workshop on Routing and =
Addressing",

      
              RFC =
4984, DOI 10.17487/RFC4984, September 2007,               RFC 4984, DOI 10.17487/RFC4984, September =
2007,

      
              =
<https://www.rfc-editor.org/info/rfc4984>.               =
<https://www.rfc-editor.org/info/rfc4984>.

      
 =


      
   [RFC6480]  =
Lepinski, M. and S. Kent, "An Infrastructure to Support =
   [RFC6480]  Lepinski, M. and S. Kent, "An =
Infrastructure to Support

      
              =
Secure Internet Routing", RFC 6480, DOI 10.17487/RFC6480, =
              Secure Internet Routing", RFC =
6480, DOI 10.17487/RFC6480,

      
              =
February 2012, <https://www.rfc-editor.org/info/rfc6480>. =
              February 2012, =
<https://www.rfc-editor.org/info/rfc6480>.

      
 =


      
   [RFC6518]  =
Lebovitz, G. and M. Bhatia, "Keying and Authentication for =
   [RFC6518]  Lebovitz, G. and M. Bhatia, =
"Keying and Authentication for

      
              =
Routing Protocols (KARP) Design Guidelines", RFC 6518,               Routing Protocols (KARP) Design =
Guidelines", RFC 6518,

      

      
              =
DOI 10.17487/RFC6518, February 2012, <https://www.rfc-               DOI 10.17487/RFC6518, February =
2012,

      
              =
editor.org/info/rfc6518>.   =
            <https://www.rfc-editor.org/info/rfc6518>.

      
 =


      
   [RFC6831]  =
Farinacci, D., Meyer, D., Zwiebel, J., and S. Venaas, "The =
   [RFC6831]  Farinacci, D., Meyer, D., =
Zwiebel, J., and S. Venaas, "The

      
              =
Locator/ID Separation Protocol (LISP) for Multicast               Locator/ID Separation Protocol (LISP) for =
Multicast

      
              =
Environments", RFC 6831, DOI 10.17487/RFC6831, January               Environments", RFC 6831, DOI =
10.17487/RFC6831, January

      
              =
2013, <https://www.rfc-editor.org/info/rfc6831>.               2013, =
<https://www.rfc-editor.org/info/rfc6831>.

      
 =


      
   [RFC6832]  =
Lewis, D., Meyer, D., Farinacci, D., and V. Fuller,    [RFC6832]  Lewis, D., Meyer, D., Farinacci, D., and =
V. Fuller,

      
              =
"Interworking between Locator/ID Separation Protocol               "Interworking between Locator/ID =
Separation Protocol

      
              =
(LISP) and Non-LISP Sites", RFC 6832,  =
             (LISP) and Non-LISP Sites", RFC 6832,

      

      
              =
DOI 10.17487/RFC6832, January 2013, <https://www.rfc-               DOI 10.17487/RFC6832, January =
2013,

      
              =
editor.org/info/rfc6832>.   =
            <https://www.rfc-editor.org/info/rfc6832>.

      
 =


      
   [RFC6835]  =
Farinacci, D. and D. Meyer, "The Locator/ID Separation    [RFC6835]  Farinacci, D. and D. Meyer, "The =
Locator/ID Separation

      
              =
Protocol Internet Groper (LIG)", RFC 6835,               Protocol Internet Groper (LIG)", RFC =
6835,

      

      
              =
DOI 10.17487/RFC6835, January 2013, <https://www.rfc-               DOI 10.17487/RFC6835, January =
2013,

      
              =
editor.org/info/rfc6835>.   =
            <https://www.rfc-editor.org/info/rfc6835>.

      
 =


      
   [RFC6837]  =
Lear, E., "NERD: A Not-so-novel Endpoint ID (EID) to    [RFC6837]  Lear, E., "NERD: A Not-so-novel Endpoint =
ID (EID) to

      
              =
Routing Locator (RLOC) Database", RFC 6837,               Routing Locator (RLOC) Database", RFC =
6837,

      

      
              =
DOI 10.17487/RFC6837, January 2013, <https://www.rfc-               DOI 10.17487/RFC6837, January =
2013,

      
              =
editor.org/info/rfc6837>.   =
            <https://www.rfc-editor.org/info/rfc6837>.

      
 =


      
   [RFC6935]  =
Eubanks, M., Chimento, P., and M. Westerlund, "IPv6 and =
   [RFC6935]  Eubanks, M., Chimento, P., and M. =
Westerlund, "IPv6 and

      
              UDP =
Checksums for Tunneled Packets", RFC 6935,               UDP Checksums for Tunneled Packets", RFC =
6935,

      

      
              =
DOI 10.17487/RFC6935, April 2013, <https://www.rfc-               DOI 10.17487/RFC6935, April 2013,

      
              =
editor.org/info/rfc6935>.   =
            <https://www.rfc-editor.org/info/rfc6935>.

      
 =


      
   [RFC6936]  =
Fairhurst, G. and M. Westerlund, "Applicability Statement =
   [RFC6936]  Fairhurst, G. and M. Westerlund, =
"Applicability Statement

      
              for =
the Use of IPv6 UDP Datagrams with Zero Checksums",               for the Use of IPv6 UDP Datagrams with =
Zero Checksums",

      
              RFC =
6936, DOI 10.17487/RFC6936, April 2013, =
              RFC 6936, DOI 10.17487/RFC6936, April 2013,

      
              =
<https://www.rfc-editor.org/info/rfc6936>.               =
<https://www.rfc-editor.org/info/rfc6936>.

      
 =


      
   [RFC8060]  =
Farinacci, D., Meyer, D., and J. Snijders, "LISP Canonical =
   [RFC8060]  Farinacci, D., Meyer, D., and J. =
Snijders, "LISP Canonical

      
              =
Address Format (LCAF)", RFC 8060, DOI 10.17487/RFC8060, =
              Address Format (LCAF)", RFC 8060, =
DOI 10.17487/RFC8060,

      
              =
February 2017, <https://www.rfc-editor.org/info/rfc8060>. =
              February 2017, =
<https://www.rfc-editor.org/info/rfc8060>.

      
 =


      
 =


      
skipping =
to change at page 52, line =
5 =C2=B6 =
skipping to change at page 52, line =
5 =C2=B6

      
   The LISP =
working group would like to give a special thanks to Jari =
   The LISP working group would like to give a =
special thanks to Jari

      
   Arkko, the =
Internet Area AD at the time that the set of LISP    Arkko, the Internet Area AD at the time that the set =
of LISP

      
   documents were =
being prepared for IESG last call, and for his    documents were being prepared for IESG last call, and =
for his

      
   meticulous =
reviews and detailed commentaries on the 7 working group =
   meticulous reviews and detailed commentaries =
on the 7 working group

      
   last call =
documents progressing toward standards-track RFCs.    last call documents progressing toward =
standards-track RFCs.

      
 =


      
Appendix B.  =
Document Change Log Appendix B.  =
Document Change Log

      
 =


      
   [RFC Editor: =
Please delete this section on publication as RFC.]    [RFC Editor: Please delete this section on =
publication as RFC.]

      
 =


      

      
B.1.  Changes =
to draft-ietf-lisp-rfc6830bis-04 B.1. =
 Changes to draft-ietf-lisp-rfc6830bis-06

      
 =


      
 =
   o  Posted October =
2017.

      
 =


      
 =
   o  Put RTR =
definition before it is used.

      
 =


      
 =
   o  Rename references =
that are now working group drafts.

      
 =


      
 =
   o  Remove "EIDs MUST =
NOT be used as used by a host to refer to other

      
 =
      hosts.  Note that =
EID blocks MAY LISP RLOCs".

      
 =


      
 =
   o  Indicate what =
address-family can appear in data packets.

      
 =


      
 =
   o  ETRs may, rather =
than will, be the ones to send Map-Replies.

      
 =


      
 =
   o  Recommend, rather =
than mandate, max encapsulation headers to 2.

      
 =


      
 =
   o  Reference VPN =
draft when introducing Instance-ID.

      
 =


      
 =
   o  Indicate that =
SMRs can be sent when ITR/ETR are in the same node.

      
 =


      
 =
   o  Clarify when =
private addreses can be used.

      
 =


      
 =
B.2.  Changes to =
draft-ietf-lisp-rfc6830bis-05

      
 =


      
 =
   o  Posted August =
2017.

      
 =


      
 =
   o  Make it clear =
that a Reencapsulating Tunnel Router is an RTR.

      
 =


      
 =
B.3.  Changes to =
draft-ietf-lisp-rfc6830bis-04

      
 =


      
   o  Posted July =
2017.    o  Posted July 2017.

      
 =


      
   o  Changed =
reference of IPv6 RFC2460 to RFC8200.  =
  o  Changed reference of IPv6 RFC2460 to RFC8200.

      
 =


      
   o  Indicate =
that the applicability statement for UDP zero checksums =
   o  Indicate that the applicability statement =
for UDP zero checksums

      
      over IPv6 =
adheres to RFC6936.       over IPv6 =
adheres to RFC6936.

      
 =


      

      
B.2.  Changes to =
draft-ietf-lisp-rfc6830bis-03 B.4.  Changes to =
draft-ietf-lisp-rfc6830bis-03

      
 =


      
   o  Posted May =
2017.    o  Posted May 2017.

      
 =


      
   o  Move the =
control-plane related codepoints in the IANA    o  Move the control-plane related codepoints in the =
IANA

      
      =
Considerations section to RFC6833bis.  =
     Considerations section to RFC6833bis.

      
 =


      

      
B.3.  Changes to =
draft-ietf-lisp-rfc6830bis-02 B.5.  Changes to =
draft-ietf-lisp-rfc6830bis-02

      
 =


      
   o  Posted =
April 2017.    o  Posted April =
2017.

      
 =


      
   o  Reflect =
some editorial comments from Damien Sausez.    o  Reflect some editorial comments from Damien =
Sausez.

      
 =


      

      
B.4.  Changes to =
draft-ietf-lisp-rfc6830bis-01 B.6.  Changes to =
draft-ietf-lisp-rfc6830bis-01

      
 =


      
   o  Posted =
March 2017.    o  Posted March =
2017.

      
 =


      
   o  Include =
references to new RFCs published.    o =
 Include references to new RFCs published.

      
 =


      
   o  Change =
references from RFC6833 to RFC6833bis.  =
  o  Change references from RFC6833 to RFC6833bis.

      
 =


      
   o  Clarified =
LCAF text in the IANA section.    o  =
Clarified LCAF text in the IANA section.

      
 =


      
   o  Remove =
references to "experimental".    o  =
Remove references to "experimental".

      
 =


      

      
B.5.  Changes to =
draft-ietf-lisp-rfc6830bis-00 B.7.  Changes to =
draft-ietf-lisp-rfc6830bis-00

      
 =


      
   o  Posted =
December 2016.    o  Posted December =
2016.

      
 =


      
   o  Created =
working group document from draft-farinacci-lisp    o  Created working group document from =
draft-farinacci-lisp

      
      -rfc6830-00 =
individual submission.  No other changes made.       -rfc6830-00 individual submission.  No other =
changes made.

      
 =


      
Authors' =
Addresses Authors' Addresses

      

      
 =
                        =
                                                 

      
   Dino =
Farinacci    Dino Farinacci

      
   Cisco =
Systems    Cisco Systems

      
   Tasman =
Drive    Tasman Drive

      
   San Jose, CA  =
95134    San Jose, CA  95134

      
   USA =
   USA

      
 =


      
   EMail: =
farinacci@gmail.com    EMail: =
farinacci@gmail.com

      
 =


      
   Vince =
Fuller    Vince Fuller

      
   Cisco =
Systems    Cisco Systems


     
 

     
 End of changes. 55 change blocks. 

     
128 lines changed or =
deleted 167 lines changed or =
added

     

This =
html diff was produced by rfcdiff 1.46. The latest version is available =
from http://tools.ietf.org/to=
ols/rfcdiff/ 

   

  =20
  =20
=

--Apple-Mail=_5646FEA0-2FAC-48A8-82F9-2DAFB47A4961
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
	charset=us-ascii





--Apple-Mail=_5646FEA0-2FAC-48A8-82F9-2DAFB47A4961--


From nobody Tue Oct 24 10:16:12 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C49DE13942C for ; Tue, 24 Oct 2017 10:16:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level: 
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jX_Oa9VPgfHZ for ; Tue, 24 Oct 2017 10:16:09 -0700 (PDT)
Received: from mail-it0-x230.google.com (mail-it0-x230.google.com [IPv6:2607:f8b0:4001:c0b::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2203F138103 for ; Tue, 24 Oct 2017 10:16:09 -0700 (PDT)
Received: by mail-it0-x230.google.com with SMTP id j140so10948003itj.1 for ; Tue, 24 Oct 2017 10:16:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=83GnvkYaPZsBYELqF6m3bJ1V2epkQYuMOVvZKGNVdH8=; b=UiieCfKxxZAl+BBcDujP9b6fFAibYSPlKbQsKMO4id5eWTcY407hI61EGoEPVP15Um TV52razXYjvUZ79HG9+jGeoYR6XFcw9Sj0wUbNIBcOYKuzCwtTJv2D4RWby9P+9NRZVv WgBFVnx3SaLMxbbXNVsCtAaXbsvBNNVPrRv5u3cpj8/czB32rKPX502top25GMzfvxxZ RqoCsQhVqnuMGV2dzdxznm38N7hls08SKXokCQov7FI526ZQ4jXRB+hX8yWriGmhqUiA wjEp9AWGJJtJDYLC6dEdMk8q1Za4QGkAk41DAjg7s6i0ErEktlbZxaRHC5g6tnOMthiF 2LNA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=83GnvkYaPZsBYELqF6m3bJ1V2epkQYuMOVvZKGNVdH8=; b=VAG60Fips7nHRuJEK8HJYz+4+KsqifnH7Wgl08K6y5E7xyGA/PNGP2teA1knoFZy6A u7R0e0tG0Kt+35EMWYQD2ISf/RNiKS1vepEdrXDNQawaUdrmb5wlFeEq7qR/NuFuw9cy DjawIwTLvIUjdVwTLBd698Y9I2smODTaqf48uq1+nJXR7wJN/32XPxtRHq3a4sguFrxh BafOVwQs4fTOF56PklQkz37fUYc+CKAK9TqdqZMNCUdfov7E653EU/+RgppYX7Zb2KIF 0t6kQcHHZ63rdZ0k2YjCKN3uGrfgFG8E52tRfs2YK5ZooelNOIZvqQLIM6UDOMvAhzJy 3aHg==
X-Gm-Message-State: AMCzsaXBsE6wSOaZ2x0F16OZmfzGjf9pKPa0Zh8VrXDjTsYNevugf931 m2q0GuQ/GV3Sr3Z6meiLgMAGO5qUOrOt6JuVGDo=
X-Google-Smtp-Source: ABhQp+Rj/EtuhphTtJ4SP9DsZVKPAjn6an1kTVpN/qZTHyqmGf+pcz5O8fyHXK9UO93jWo71qWWWEN9YOIwY868CPmY=
X-Received: by 10.36.6.1 with SMTP id 1mr14370383itv.91.1508865367957; Tue, 24 Oct 2017 10:16:07 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.107.190.131 with HTTP; Tue, 24 Oct 2017 10:15:47 -0700 (PDT)
In-Reply-To: <1AAAC5C3-27FA-47A9-819F-42B2357E3A08@gmail.com>
References:  <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com>  <1AAAC5C3-27FA-47A9-819F-42B2357E3A08@gmail.com>
From: Alberto Rodriguez-Natal 
Date: Tue, 24 Oct 2017 10:15:47 -0700
Message-ID: 
To: Dino Farinacci 
Cc: "lisp@ietf.org list" 
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Tue, 24 Oct 2017 17:16:11 -0000

Thanks for making the changes Dino. See some extra responses below.


>>>> The same database mapping entries MUST be configured on all ETRs for a
>>>> given site.  In a steady state, the EID-Prefixes for the site and the
>>>> Locator-Set for each EID-Prefix MUST be the same on all ETRs.
>>>>
>>>> [AR] Is this still the case when overlapping prefixes and/or
>>>> merge-semantics are in place?
>>>
>>> Response (3).
>>>
>>> Well, yes. Let me answer with an example. Say there are two xTRs A and =
B and they are connecting the LISP site for 10.0.0.0/8. Say 10.1.0.0/16 mov=
es out to another LISP site, a LISP site that is multihomed with xTRs A=E2=
=80=99 and B=E2=80=99. Both A=E2=80=99 and B=E2=80=99 need to be configured=
 (i.e. in this case discover) that the /16 moved into their site.
>>
>> [AR2] My question was more with regard to the Locator-Set. Let's say
>> that two different ETRs serving the same site are registering only
>> their own RLOCs and are leveraging on the merge-semantics capability
>
> There was a decision back when RFC6830 was published to not support this.=
 And that we would address it in the NAT-traversal document where the use-c=
ase required this behavior.

[AR3] But this is used today independently of NAT-traversal. It is not
uncommon to configure the ETRs with just the interfaces, not the
addresses, that should be used for RLOC connectivity. These interfaces
will then get dynamically assigned RLOC addresses (e.g. via DHCP) that
the ETRs will register to the Map-Server. The deployment is leveraging
on the merge capability of the Map-Server rather than on configuring
all the RLOC addresses in all the ETRs (since the addresses are
unknown at the time of configuration).

>>>> When multiple organizations inside of a LISP site are using private
>>>> addresses [RFC1918] as EID-Prefixes, their address spaces MUST remain
>>>> segregated due to possible address duplication.  An Instance ID in the
>>>> address encoding can aid in making the entire AFI-based address
>>>> unique.
>>>>
>>>> [AR] This text is used to introduce the concept of Instance-IDs. I
>>>> don't think we should mention private addresses here. Instance ID may
>>>> be used even when not private addresses are in place or for purposes
>>>> other than possible address duplication. If anything, the private
>>>> addresses duplication should be an example only.
>>>
>>> Response (1).
>>>
>>> Making a reference to private addresses is actually very important. The=
re are a lot of container and VMs within cloud provider deployments that us=
e it. It is probably the most popular use-case of LISP.
>>
>> [AR2] My intention was to state that we should not tie Instance-IDs to
>> the address duplication problem of private addresses. Indeed,
>> preventing address duplication is one of the major use-cases for
>> Instance-IDs but they are applicable beyond that particular use-case.
>
> I don=E2=80=99t follow your point, the fact you use EIDs within an IID me=
ans the EIDs are private to that IID. Regardless if they are RFC1918 addres=
ses or registry allocated addresses.

[AR3] I would suggest the following text as a replacement for the
current paragraph. Feel free to edit as you see fit.

"There are several cases where segregation is needed at the EID level.
For instance, this is the case for deployments containing overlapping
addresses, traffic isolation policies or multi-tenant virtualization.
For these and others scenarios where segregation is needed, Instance
IDs can be used."

>>>> An ITR SHOULD only set the E-bit in an encapsulated data packet when
>>>> it knows the ETR is
>>>> enabled for echo-noncing.  This is conveyed by the E-bit in the
>>>> Map-Reply message.
>>>>
>>>> [AR] There should be probably a mention to merge-semantics and/or
>>>> proxy-reply here.
>>>
>>> Response (3).
>>>
>>> Why? Merge semantics only apply to Map-Registers. Not the Map-Reply an =
ETR sends to an ITR. That is when it conveys it can support echo-noncing.
>>
>> [AR2] My point was that merge-semantics and proxy-reply may affect the
>> E-bit process. For instance, if the MS is merging different
>> Map-Registers, (some with the E-bit set, some without), which value
>> for the E-bit should the MS return in a Map-Reply?
>
> It doesn=E2=80=99t because the Map-Server maintains the original individu=
al Map-Registers as well. And RLOC-probing causes the E-bit to be specified=
 in the Map-Reply by the ETR.

[AR3] How about we also include this sentence then?

"An ITR can always verify if an ETR supports echo-noncing via sending
an RLOC-probe to trigger a Map-Reply."

Alberto


From nobody Tue Oct 24 10:16:44 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 562BA13955E; Tue, 24 Oct 2017 10:16:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.521
X-Spam-Level: 
X-Spam-Status: No, score=-14.521 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A1ieShkQjZBY; Tue, 24 Oct 2017 10:16:42 -0700 (PDT)
Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 01FC913954E; Tue, 24 Oct 2017 10:16:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2692; q=dns/txt; s=iport; t=1508865402; x=1510075002; h=from:subject:to:cc:references:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=+LV4/1v9fQxWHVlEe9RoD0erksF+JaruzAUoDXFJ56E=; b=Qg+7bKAhKChZ9zAfve/cVUZ/DvO2qoc2hwrMvtuEg3Y0dFp5Xt9FC+in PjrivPySWWb25U70Am0iIxoUb2uaQ4iJImkMSWLuM0yqM6gXeFnfC3Qhw 7bLYBeOnFqcuTiy2/Y8B/gHE/jblDbmS05T3mHdmpBEtfNREw49zDDF/I o=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CiAAAEde9Z/4ENJK1bGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1+BUoQhih+PSYFUJnuVP4IRCoU7AoRhPxgBAgEBAQEBAQFrKIU?= =?us-ascii?q?dAQEBAQIBIw8BBUEFCwsYAgImAgJXBgEMCAEBihQIqB6CJ4shAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBIIEPgh+BKl2BUIFpKQuCQTWIGYJhBZJjjwqUdYIVhXqDXSSHFZV?= =?us-ascii?q?/gTkfOIFbNCEIHRWDLoJbHIIHIIwnAQEB?=
X-IronPort-AV: E=Sophos;i="5.43,428,1503360000"; d="scan'208";a="21555998"
Received: from alln-core-9.cisco.com ([173.36.13.129]) by alln-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 24 Oct 2017 17:16:41 +0000
Received: from [10.155.69.231] (dhcp-10-155-69-231.cisco.com [10.155.69.231]) by alln-core-9.cisco.com (8.14.5/8.14.5) with ESMTP id v9OHGb1k006413; Tue, 24 Oct 2017 17:16:40 GMT
From: Fabio Maino 
To: Takeshi Takahashi , secdir@ietf.org
Cc: draft-ietf-lisp-sec.all@ietf.org, ietf@ietf.org, lisp@ietf.org
References: <150764751351.13466.15119625109787574982@ietfa.amsl.com>
Message-ID: <77a18485-6759-5d24-de52-27f76a7d3837@cisco.com>
Date: Tue, 24 Oct 2017 10:16:38 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.3.0
MIME-Version: 1.0
In-Reply-To: <150764751351.13466.15119625109787574982@ietfa.amsl.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Content-Language: en-US
Archived-At: 
Subject: Re: [lisp] Secdir last call review of draft-ietf-lisp-sec-13
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Tue, 24 Oct 2017 17:16:43 -0000

Hi Takeshi,
thanks for taking the time to review the document.

Please see below for comments. Unless you have objections we plan to 
publish an updated rev by monday.

On 10/10/17 7:58 AM, Takeshi Takahashi wrote:
> Reviewer: Takeshi Takahashi
> Review result: Ready
>
> I have reviewed this document as part of the security directorate's ongoing
> effort to review all IETF documents being processed by the IESG. These comments
> were written primarily for the benefit of the security area directors. Document
> editors and WG chairs should treat these comments just like any other last call
> comments.
>
> I would say this document is ready with nits, but the nits are very minor.
>
> [comments that require chages to the current draft]
> 1. I guess the authors mix up "reply" and "replay" in Section 6.6. "Reply
> attacks" could be "Replay attacks".

fixed, thanks!

> [comments that does not necessarily require changes to the current draft]
> 2. The security aspect of LISP is addressed not only in this draft but also in
> RFC6830 and in RFC7835. If I understood correctly, LISP-SEC addressed a part of
> the threats mentioned in RFC7835. Then, it would be nice if the authors could
> clarify what types of further threats that are not mentioned in LISP-SEC still
> exist by referring to RFC6830 and RFC7835.

Section 3 of LISP-SEC provides the cross references with the threat 
model of RFC 7835. LISP-SEC focuses particularly on the threads 
described in section  3.7 and 3.8 of RFC 7835 that describes attacks 
that "target EID-to-RLOC mappings, including manipulations of 
Map-Request and Map-Reply messages, and malicious ETR EID prefix 
overclaiming."

We should change the first sentence of section 3 to read:
"LISP-SEC addresses the control plane threats, described in *Section 3.7 
and 3.8 of* [RFC7835], that target EID-to-RLOC mappings, including 
manipulations of Map-Request and Map-Reply messages, and malicious ETR 
EID prefix overclaiming."


> 3. DOS/DDoS was mentioned in the introduction section, but it was not discussed
> in the later sections. It would be nice if the authors could address DoS/DDoS
> issues as well.
>
>

Good point. We should add a Section 6.7 that reads:

"6.7 Denial of Service and Distributed Denial of Service Attacks

LISP-SEC mitigates the risks of  Denial of Service and Distributed 
Denial of Service attacks by protecting the integrity and authenticating 
the origin of the Map-Request/Map-Reply messages, and by preventing 
malicious ETRs from overclaiming EID prefixes that could re-direct 
traffic directed to a potentially large number of hosts."


Thanks,

Fabio




From nobody Tue Oct 24 16:59:48 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 29CB713A344 for ; Tue, 24 Oct 2017 16:59:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.597
X-Spam-Level: 
X-Spam-Status: No, score=-0.597 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_COMMENT_SAVED_URL=1.391, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_HTML_ATTACH=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 73j135sadgjf for ; Tue, 24 Oct 2017 16:59:40 -0700 (PDT)
Received: from mail-pg0-x229.google.com (mail-pg0-x229.google.com [IPv6:2607:f8b0:400e:c05::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 83C8A13A214 for ; Tue, 24 Oct 2017 16:59:40 -0700 (PDT)
Received: by mail-pg0-x229.google.com with SMTP id y5so8012965pgq.7 for ; Tue, 24 Oct 2017 16:59:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=f9a7VSR+c71jm5fnUn/2p10ng4ZCWPiFrPvgRrlS3zU=; b=qRiwDCgQ7xTqKqAFJ+uYVgIaONiqKF93zhaCPHEcfMzMU+eXKCP55t1vNB9iZmnEXK eoHXwEHsQ9pt/XHWcr/SS8B/lCtkoSEdZVULOfyKw80sCKje/G3atkVRhUiP2EoavoOh hUGUXBiP7CpRH3DuC7oTtuacb9tebuFTPMjiOHnstYV0xm8ekjxaxN6qHUJChu2ajr6j OMHgrPHnrHX7pP8f74NFs2vK/Anu/Wj/lTghdatp+/fYUAyGr+B7Hs67IqLZ5p2EP9q/ X7RcCfoyifCop707HZ0vQCjcV2hqtOHBtQK584KgV6zNcumhd8VFfHV9EDF4+K+KWuip S5UA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=f9a7VSR+c71jm5fnUn/2p10ng4ZCWPiFrPvgRrlS3zU=; b=ZTUWfpI3YcU4JmiwK6NbBS/7kR3wJgITCFnyRbuOT7Tcbo60mERlmYMWtAD8iHsH8K YnrYsg7pVZSpfPRYGS2GL2p06Vi7fCPPgERVm6RcdJ9Qir25n/kQ6rUs276j9OlcvC/W 8NMjvLpddcSscAQKJOk9DqA5b5krC1aO34fimw44MbwZI2s/3QKn82RmViJxuMPuUjyC irTSXU+63xqEu4Mvks4YUnkoeIjdX9l8CvX3rlodyFi/orqOZxH9kQd6w1JaxOtTdqq5 jw4VqDlcsUjplfgWElGB5mU90QR7zmnqsAxV9gF2gvEktf4pV9VlPpwbUvCggu1yj6Mt W2XQ==
X-Gm-Message-State: AMCzsaXeo5OeeSuP4HwQWhcu2Ep3ytfYZI3QxRA/pdGM+OPI6Tj0Ll8D cqvQtrSYhKNUveFb6g+/tFIXkUe7
X-Google-Smtp-Source: ABhQp+TpD+qO+9wzkgglJ/gYUoBaG/6k04opQdInModXrJHci0apruCcNcvZ+d9+h4cM0a1IjoTmdQ==
X-Received: by 10.84.248.133 with SMTP id q5mr274849pll.102.1508889579717; Tue, 24 Oct 2017 16:59:39 -0700 (PDT)
Received: from [172.17.55.174] ([63.204.222.2]) by smtp.gmail.com with ESMTPSA id g207sm2204477pfb.101.2017.10.24.16.59.37 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 24 Oct 2017 16:59:38 -0700 (PDT)
From: Dino Farinacci 
Message-Id: <3E61C832-97B2-4776-B375-9A473D600A61@gmail.com>
Content-Type: multipart/mixed; boundary="Apple-Mail=_1B55D487-E21C-4A36-830F-3D3BAD410404"
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
Date: Tue, 24 Oct 2017 16:59:35 -0700
In-Reply-To: 
Cc: "lisp@ietf.org list" 
To: Alberto Rodriguez-Natal 
References:  <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com>  <1AAAC5C3-27FA-47A9-819F-42B2357E3A08@gmail.com> 
X-Mailer: Apple Mail (2.3273)
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Tue, 24 Oct 2017 23:59:46 -0000

--Apple-Mail=_1B55D487-E21C-4A36-830F-3D3BAD410404
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

New rfcdiff.html file enclosed.

>>>>> The same database mapping entries MUST be configured on all ETRs =
for a
>>>>> given site.  In a steady state, the EID-Prefixes for the site and =
the
>>>>> Locator-Set for each EID-Prefix MUST be the same on all ETRs.
>>>>>=20
>>>>> [AR] Is this still the case when overlapping prefixes and/or
>>>>> merge-semantics are in place?
>>>>=20
>>>> Response (3).
>>>>=20
>>>> Well, yes. Let me answer with an example. Say there are two xTRs A =
and B and they are connecting the LISP site for 10.0.0.0/8. Say =
10.1.0.0/16 moves out to another LISP site, a LISP site that is =
multihomed with xTRs A=E2=80=99 and B=E2=80=99. Both A=E2=80=99 and B=E2=80=
=99 need to be configured (i.e. in this case discover) that the /16 =
moved into their site.
>>>=20
>>> [AR2] My question was more with regard to the Locator-Set. Let's say
>>> that two different ETRs serving the same site are registering only
>>> their own RLOCs and are leveraging on the merge-semantics capability
>>=20
>> There was a decision back when RFC6830 was published to not support =
this. And that we would address it in the NAT-traversal document where =
the use-case required this behavior.
>=20
> [AR3] But this is used today independently of NAT-traversal. It is not
> uncommon to configure the ETRs with just the interfaces, not the
> addresses, that should be used for RLOC connectivity. These interfaces
> will then get dynamically assigned RLOC addresses (e.g. via DHCP) that
> the ETRs will register to the Map-Server. The deployment is leveraging
> on the merge capability of the Map-Server rather than on configuring
> all the RLOC addresses in all the ETRs (since the addresses are
> unknown at the time of configuration).

So are you suggesting to just remove the paragraph?

>=20
>>>>> When multiple organizations inside of a LISP site are using =
private
>>>>> addresses [RFC1918] as EID-Prefixes, their address spaces MUST =
remain
>>>>> segregated due to possible address duplication.  An Instance ID in =
the
>>>>> address encoding can aid in making the entire AFI-based address
>>>>> unique.
>>>>>=20
>>>>> [AR] This text is used to introduce the concept of Instance-IDs. I
>>>>> don't think we should mention private addresses here. Instance ID =
may
>>>>> be used even when not private addresses are in place or for =
purposes
>>>>> other than possible address duplication. If anything, the private
>>>>> addresses duplication should be an example only.
>>>>=20
>>>> Response (1).
>>>>=20
>>>> Making a reference to private addresses is actually very important. =
There are a lot of container and VMs within cloud provider deployments =
that use it. It is probably the most popular use-case of LISP.
>>>=20
>>> [AR2] My intention was to state that we should not tie Instance-IDs =
to
>>> the address duplication problem of private addresses. Indeed,
>>> preventing address duplication is one of the major use-cases for
>>> Instance-IDs but they are applicable beyond that particular =
use-case.
>>=20
>> I don=E2=80=99t follow your point, the fact you use EIDs within an =
IID means the EIDs are private to that IID. Regardless if they are =
RFC1918 addresses or registry allocated addresses.
>=20
> [AR3] I would suggest the following text as a replacement for the
> current paragraph. Feel free to edit as you see fit.
>=20
> "There are several cases where segregation is needed at the EID level.
> For instance, this is the case for deployments containing overlapping
> addresses, traffic isolation policies or multi-tenant virtualization.
> For these and others scenarios where segregation is needed, Instance
> IDs can be used.=E2=80=9D

I would like to hear if the working group agrees to add this text. If by =
then end of the week I hear no objections or changes, I will include it.

>=20
>>>>> An ITR SHOULD only set the E-bit in an encapsulated data packet =
when
>>>>> it knows the ETR is
>>>>> enabled for echo-noncing.  This is conveyed by the E-bit in the
>>>>> Map-Reply message.
>>>>>=20
>>>>> [AR] There should be probably a mention to merge-semantics and/or
>>>>> proxy-reply here.
>>>>=20
>>>> Response (3).
>>>>=20
>>>> Why? Merge semantics only apply to Map-Registers. Not the Map-Reply =
an ETR sends to an ITR. That is when it conveys it can support =
echo-noncing.
>>>=20
>>> [AR2] My point was that merge-semantics and proxy-reply may affect =
the
>>> E-bit process. For instance, if the MS is merging different
>>> Map-Registers, (some with the E-bit set, some without), which value
>>> for the E-bit should the MS return in a Map-Reply?
>>=20
>> It doesn=E2=80=99t because the Map-Server maintains the original =
individual Map-Registers as well. And RLOC-probing causes the E-bit to =
be specified in the Map-Reply by the ETR.
>=20
> [AR3] How about we also include this sentence then?
>=20
> "An ITR can always verify if an ETR supports echo-noncing via sending
> an RLOC-probe to trigger a Map-Reply.=E2=80=9D

How about changing the sentence to:

"This is conveyed by the E-bit in the RLOC-probe Map-Reply message.=E2=80=9D=


The ITR cannot have an option, it must send a RLOC-probe because if a =
Map-Reply has no E-bit, it would never use echo-noncing.

Dino


--Apple-Mail=_1B55D487-E21C-4A36-830F-3D3BAD410404
Content-Disposition: attachment;
	filename=rfcdiff.html
Content-Type: text/html;
	x-unix-mode=0644;
	name="rfcdiff.html"
Content-Transfer-Encoding: quoted-printable



=20
  =20
  =20
  Diff: draft-ietf-lisp-rfc6830bis-05.txt - =
draft-ietf-lisp-rfc6830bis-06.txt=20
  =20
     =20
=20
=20
  =20
  =20
      =

      =

      =

      =

      
< draft-ietf-lisp-rfc6830bis-05.txt  =
 draft-ietf-lisp-rfc6830bis-06.txt >
 =


      
Network Working =
Group                                       D. Farinacci =
Network Working Group                           =
            D. Farinacci

      
Internet-Draft    =
                                             V. Fuller Internet-Draft                                           =
      V. Fuller

      
Intended status: =
Standards Track                                D. Meyer =
Intended status: Standards Track                =
                D. Meyer

      

      
Expires: March 2, 2018                                    =
      D. Lewis Expires: April 27, 2018                                   =
      D. Lewis

      
                  =
                                         Cisco Systems                                                          =
  Cisco Systems

      
                  =
                                     A. Cabellos (Ed.)                                                        =
A. Cabellos (Ed.)

      
                  =
                                     UPC/BarcelonaTech                                                        =
UPC/BarcelonaTech

      

      
                =
                                         August =
29, 2017                       =
                                  October =
24, 2017

      
 =


      
               =
The Locator/ID Separation Protocol (LISP)                The Locator/ID Separation Protocol =
(LISP)

      

      
                =
     draft-ietf-lisp-rfc6830bis-05 =
                     =
draft-ietf-lisp-rfc6830bis-06

      
 =


      
Abstract =
Abstract

      
 =


      
   This document =
describes the data-plane protocol for the Locator/ID    This document describes the data-plane protocol for =
the Locator/ID

      
   Separation =
Protocol (LISP).  LISP defines two namespaces, End-point =
   Separation Protocol (LISP).  LISP defines =
two namespaces, End-point

      
   Identifiers =
(EIDs) that identify end-hosts and Routing Locators    Identifiers (EIDs) that identify end-hosts and =
Routing Locators

      
   (RLOCs) that =
identify network attachment points.  With this, LISP    (RLOCs) that identify network attachment points.  =
With this, LISP

      
   effectively =
separates control from data, and allows routers to create =
   effectively separates control from data, and =
allows routers to create

      
   overlay =
networks.  LISP-capable routers exchange encapsulated packets =
   overlay networks.  LISP-capable routers =
exchange encapsulated packets

      
   according to =
EID-to-RLOC mappings stored in a local map-cache.  The    according to EID-to-RLOC mappings stored in a local =
map-cache.  The

      
 =


      
skipping to =
change at =
page 1, line 39 =C2=B6 =
skipping to change at page 1, line 39 =C2=B6

      
   among other =
features.    among other =
features.

      
 =


      
Status of This =
Memo Status of This Memo

      
 =


      
   This =
Internet-Draft is submitted in full conformance with the =
   This Internet-Draft is submitted in full =
conformance with the

      
   provisions of =
BCP 78 and BCP 79.    provisions of =
BCP 78 and BCP 79.

      
 =


      
   =
Internet-Drafts are working documents of the Internet =
Engineering    Internet-Drafts are =
working documents of the Internet Engineering

      
   Task Force =
(IETF).  Note that other groups may also distribute    Task Force (IETF).  Note that other groups may also =
distribute

      
   working =
documents as Internet-Drafts.  The list of current Internet- =
   working documents as Internet-Drafts.  The =
list of current Internet-

      

      
   Drafts is at =
http://datatracker.ietf.org/drafts/current/.    Drafts is at https://datatracker.ietf.org/drafts/current/.

      
 =


      
   =
Internet-Drafts are draft documents valid for a maximum of six =
months    Internet-Drafts are draft =
documents valid for a maximum of six months

      
   and may be =
updated, replaced, or obsoleted by other documents at any =
   and may be updated, replaced, or obsoleted =
by other documents at any

      
   time.  It is =
inappropriate to use Internet-Drafts as reference    time.  It is inappropriate to use Internet-Drafts as =
reference

      
   material or to =
cite them other than as "work in progress."    material or to cite them other than as "work in =
progress."

      
 =


      

      
   This =
Internet-Draft will expire on March 2, =
2018.    This Internet-Draft will =
expire on April 27, 2018.

      
 =


      
Copyright =
Notice Copyright Notice

      
 =


      
   Copyright (c) =
2017 IETF Trust and the persons identified as the    Copyright (c) 2017 IETF Trust and the persons =
identified as the

      
   document =
authors.  All rights reserved.    =
document authors.  All rights reserved.

      
 =


      
   This document =
is subject to BCP 78 and the IETF Trust's Legal    This document is subject to BCP 78 and the IETF =
Trust's Legal

      
   Provisions =
Relating to IETF Documents    =
Provisions Relating to IETF Documents

      

      
   =
(http://trustee.ietf.org/license-info) in effect on the date of =
   (https://trustee.ietf.org/license-info) in effect on =
the date of

      
   publication of =
this document.  Please review these documents    publication of this document.  Please review these =
documents

      
   carefully, as =
they describe your rights and restrictions with respect =
   carefully, as they describe your rights and =
restrictions with respect

      
   to this =
document.  Code Components extracted from this document must =
   to this document.  Code Components extracted =
from this document must

      
   include =
Simplified BSD License text as described in Section 4.e of =
   include Simplified BSD License text as =
described in Section 4.e of

      
   the Trust =
Legal Provisions and are provided without warranty as    the Trust Legal Provisions and are provided without =
warranty as

      
   described in =
the Simplified BSD License.    =
described in the Simplified BSD License.

      
 =


      
Table of =
Contents Table of Contents

      
 =


      
   1.  =
Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   =
3    1.  Introduction  . . . . . . . . =
. . . . . . . . . . . . . . . .   3

      
 =


      
skipping to =
change at =
page 2, line 46 =C2=B6 =
skipping to change at page 2, line 46 =C2=B6

      
   9.  Routing =
Locator Selection . . . . . . . . . . . . . . . . . .  23 =
   9.  Routing Locator Selection . . . . . . . =
. . . . . . . . . . .  23

      
   10. Routing =
Locator Reachability  . . . . . . . . . . . . . . . .  24 =
   10. Routing Locator Reachability  . . . . . =
. . . . . . . . . . .  24

      
     10.1.  Echo =
Nonce Algorithm . . . . . . . . . . . . . . . . . .  27 =
     10.1.  Echo Nonce Algorithm . . . . . . . =
. . . . . . . . . . .  27

      
     10.2.  =
RLOC-Probing Algorithm . . . . . . . . . . . . . . . . .  28 =
     10.2.  RLOC-Probing Algorithm . . . . . . =
. . . . . . . . . . .  28

      
   11. EID =
Reachability within a LISP Site . . . . . . . . . . . . .  29 =
   11. EID Reachability within a LISP Site . . =
. . . . . . . . . . .  29

      
   12. Routing =
Locator Hashing . . . . . . . . . . . . . . . . . . .  30 =
   12. Routing Locator Hashing . . . . . . . . =
. . . . . . . . . . .  30

      
   13. Changing =
the Contents of EID-to-RLOC Mappings . . . . . . . .  31 =
   13. Changing the Contents of EID-to-RLOC =
Mappings . . . . . . . .  31

      
     13.1.  Clock =
Sweep  . . . . . . . . . . . . . . . . . . . . . .  32      13.1.  Clock Sweep  . . . . . . . . . . . . . . . . =
. . . . . .  32

      
     13.2.  =
Solicit-Map-Request (SMR)  . . . . . . . . . . . . . . .  32 =
     13.2.  Solicit-Map-Request (SMR)  . . . . =
. . . . . . . . . . .  32

      
     13.3.  =
Database Map-Versioning  . . . . . . . . . . . . . . . .  34 =
     13.3.  Database Map-Versioning  . . . . . =
. . . . . . . . . . .  34

      

      
   14. =
Multicast Considerations  . . . . . . . . . . . . . . . . . .  34    14. =
Multicast Considerations  . . . . . . . . . . . . . . . . . .  35

      
   15. Router =
Performance Considerations . . . . . . . . . . . . . .  35 =
   15. Router Performance Considerations . . . =
. . . . . . . . . . .  35

      
   16. Mobility =
Considerations . . . . . . . . . . . . . . . . . . .  36 =
   16. Mobility Considerations . . . . . . . . =
. . . . . . . . . . .  36

      
     16.1.  Slow =
Mobility  . . . . . . . . . . . . . . . . . . . . .  36 =
     16.1.  Slow Mobility  . . . . . . . . . . =
. . . . . . . . . . .  36

      
     16.2.  Fast =
Mobility  . . . . . . . . . . . . . . . . . . . . .  36 =
     16.2.  Fast Mobility  . . . . . . . . . . =
. . . . . . . . . . .  36

      
     16.3.  LISP =
Mobile Node Mobility  . . . . . . . . . . . . . . .  37 =
     16.3.  LISP Mobile Node Mobility  . . . . =
. . . . . . . . . . .  37

      
   17. LISP xTR =
Placement and Encapsulation Methods  . . . . . . . .  38 =
   17. LISP xTR Placement and Encapsulation =
Methods  . . . . . . . .  38

      
     17.1.  =
First-Hop/Last-Hop xTRs  . . . . . . . . . . . . . . . .  39 =
     17.1.  First-Hop/Last-Hop xTRs  . . . . . =
. . . . . . . . . . .  39

      
     17.2.  =
Border/Edge xTRs . . . . . . . . . . . . . . . . . . . .  39 =
     17.2.  Border/Edge xTRs . . . . . . . . . =
. . . . . . . . . . .  39

      
     17.3.  ISP =
Provider Edge (PE) xTRs  . . . . . . . . . . . . . .  40 =
     17.3.  ISP Provider Edge (PE) xTRs  . . . =
. . . . . . . . . . .  40

      
     17.4.  LISP =
Functionality with Conventional NATs  . . . . . . .  40 =
     17.4.  LISP Functionality with =
Conventional NATs  . . . . . . .  40

      
 =


      
skipping to =
change at =
page 3, line 22 =C2=B6 =
skipping to change at page 3, line 22 =C2=B6

      
     18.3.  =
Traceroute Using Mixed Locators  . . . . . . . . . . . .  43 =
     18.3.  Traceroute Using Mixed Locators  . =
. . . . . . . . . . .  43

      
   19. Security =
Considerations . . . . . . . . . . . . . . . . . . .  43 =
   19. Security Considerations . . . . . . . . =
. . . . . . . . . . .  43

      
   20. Network =
Management Considerations . . . . . . . . . . . . . .  44 =
   20. Network Management Considerations . . . =
. . . . . . . . . . .  44

      
   21. IANA =
Considerations . . . . . . . . . . . . . . . . . . . . .  44 =
   21. IANA Considerations . . . . . . . . . . =
. . . . . . . . . . .  44

      
     21.1.  LISP =
UDP Port Numbers  . . . . . . . . . . . . . . . . .  44 =
     21.1.  LISP UDP Port Numbers  . . . . . . =
. . . . . . . . . . .  44

      
   22. References =
 . . . . . . . . . . . . . . . . . . . . . . . . .  44    22. References  . . . . . . . . . . . . . . . . . . . =
. . . . . .  44

      
     22.1.  =
Normative References . . . . . . . . . . . . . . . . . .  44 =
     22.1.  Normative References . . . . . . . =
. . . . . . . . . . .  44

      
     22.2.  =
Informative References . . . . . . . . . . . . . . . . .  47 =
     22.2.  Informative References . . . . . . =
. . . . . . . . . . .  47

      
   Appendix A.  =
Acknowledgments  . . . . . . . . . . . . . . . . . .  51 =
   Appendix A.  Acknowledgments  . . . . . . . =
. . . . . . . . . . .  51

      
   Appendix B.  =
Document Change Log  . . . . . . . . . . . . . . . .  51 =
   Appendix B.  Document Change Log  . . . . . =
. . . . . . . . . . .  51

      

      
     B.1.  =
Changes to draft-ietf-lisp-rfc6830bis-04  =
. . . . . . . .  52      B.1.  =
Changes to draft-ietf-lisp-rfc6830bis-06  =
. . . . . . . .  52

      
     B.2.  =
Changes to draft-ietf-lisp-rfc6830bis-03  =
. . . . . . . .  52      B.2.  =
Changes to draft-ietf-lisp-rfc6830bis-05  =
. . . . . . . .  52

      
     B.3.  =
Changes to draft-ietf-lisp-rfc6830bis-02  =
. . . . . . . .  52      B.3.  =
Changes to draft-ietf-lisp-rfc6830bis-04  =
. . . . . . . .  52

      
     B.4.  =
Changes to draft-ietf-lisp-rfc6830bis-01  =
. . . . . . . .  52      B.4.  =
Changes to draft-ietf-lisp-rfc6830bis-03  =
. . . . . . . .  52

      
     B.5.  =
Changes to draft-ietf-lisp-rfc6830bis-00  . . . . . . . .  52      B.5.  =
Changes to draft-ietf-lisp-rfc6830bis-02  . . . . =
. . . .  53

      
   Authors' =
Addresses  . . . . . . . . . . . . . . . . . . . . . . .  52      B.6.  Changes to draft-ietf-lisp-rfc6830bis-01  . =
. . . . . . .  53

      
 =
     B.7.  Changes =
to draft-ietf-lisp-rfc6830bis-00  . . . . . . . .  53

      
 =
   Authors' Addresses  . . . . . . . . . . . . =
. . . . . . . . . . .  53

      
 =


      
1.  =
Introduction 1.  Introduction

      
 =


      
   This document =
describes the Locator/Identifier Separation Protocol    This document describes the Locator/Identifier =
Separation Protocol

      
   (LISP).  LISP =
is an encapsulation protocol built around the    (LISP).  LISP is an encapsulation protocol built =
around the

      
   fundamental =
idea of separating the topological location of a network =
   fundamental idea of separating the =
topological location of a network

      
   attachment =
point from the node's identity [CHIAPPA].  As a result    attachment point from the node's identity [CHIAPPA].  =
As a result

      
   LISP creates =
two namespaces: Endpoint Identifiers (EIDs), that are    LISP creates two namespaces: Endpoint Identifiers =
(EIDs), that are

      
   used to =
identify end-hosts (e.g., nodes or Virtual Machines) and =
   used to identify end-hosts (e.g., nodes or =
Virtual Machines) and

      
   routable =
Routing Locators (RLOCs), used to identify network    routable Routing Locators (RLOCs), used to identify =
network

      
 =


      
skipping to =
change at =
page 5, line 19 =C2=B6 =
skipping to change at page 5, line 19 =C2=B6

      
      the first =
(most inner) LISP header of a packet.  The host obtains =
      the first (most inner) LISP header of a =
packet.  The host obtains

      
      a =
destination EID the same way it obtains a destination address =
      a destination EID the same way it obtains =
a destination address

      
      today, for =
example, through a Domain Name System (DNS) [RFC1034]       today, for example, through a Domain Name System =
(DNS) [RFC1034]

      
      lookup or =
Session Initiation Protocol (SIP) [RFC3261] exchange.       lookup or Session Initiation Protocol (SIP) =
[RFC3261] exchange.

      
      The source =
EID is obtained via existing mechanisms used to set a       The source EID is obtained via existing mechanisms =
used to set a

      
      host's =
"local" IP address.  An EID used on the public Internet =
      host's "local" IP address.  An EID used =
on the public Internet

      
      must have =
the same properties as any other IP address used in that =
      must have the same properties as any =
other IP address used in that

      
      manner; =
this means, among other things, that it must be globally =
      manner; this means, among other things, =
that it must be globally

      
      unique.  An =
EID is allocated to a host from an EID-Prefix block       unique.  An EID is allocated to a host from an =
EID-Prefix block

      
      associated =
with the site where the host is located.  An EID can be =
      associated with the site where the host =
is located.  An EID can be

      

      
      used by a =
host to refer to other hosts.  EIDs MUST NOT be =
used as       used by a host =
to refer to other hosts.  Note that EID blocks MAY

      
      LISP RLOCs.  Note that EID blocks MAY be =
assigned in a       be assigned in a =
hierarchical manner, independent of the network

      
      =
hierarchical manner, independent of the network topology, to =
      topology, to facilitate scaling of the =
mapping database.  In

      
      =
facilitate scaling of the mapping database.  In addition, an =
EID       addition, an EID block =
assigned to a site may have site-local
      block =
assigned to a site may have site-local structure       structure (subnetting) for routing within the =
site; this structure

      
      =
(subnetting) for routing within the site; this structure is not =
      is not visible to the global routing =
system.  In theory, the bit

      
      visible =
to the global routing system.  In theory, the bit string =
      string that represents an EID for one =
device can represent an RLOC

      
      that =
represents an EID for one device can represent an RLOC for a =
      for a different device.  As the =
architecture is realized, if a

      
      different =
device.  As the architecture is realized, if a given bit =
      given bit string is both an RLOC and an =
EID, it must refer to the

      
      string is =
both an RLOC and an EID, it must refer to the same       same entity in both cases.  When used in =
discussions with other

      
      entity in =
both cases.  When used in discussions with other 

      
      Locator/ID =
separation proposals, a LISP EID will be called an       Locator/ID separation proposals, a LISP EID will =
be called an

      
      "LEID".  =
Throughout this document, any references to "EID" refer =
      "LEID".  Throughout this document, any =
references to "EID" refer

      
      to an =
LEID.       to an LEID.

      
 =


      
   EID-Prefix:   =
An EID-Prefix is a power-of-two block of EIDs that are    EID-Prefix:   An EID-Prefix is a power-of-two block =
of EIDs that are

      
      allocated =
to a site by an address allocation authority.  EID-       allocated to a site by an address allocation =
authority.  EID-

      
      Prefixes =
are associated with a set of RLOC addresses that make up =
      Prefixes are associated with a set of =
RLOC addresses that make up

      
      a "database =
mapping".  EID-Prefix allocations can be broken up       a "database mapping".  EID-Prefix allocations can =
be broken up

      
      into =
smaller blocks when an RLOC set is to be associated with the =
      into smaller blocks when an RLOC set is =
to be associated with the

      
      larger =
EID-Prefix block.  A globally routed address block (whether =
      larger EID-Prefix block.  A globally =
routed address block (whether

      
 =


      
skipping to =
change at =
page 6, line 17 =C2=B6 =
skipping to change at page 6, line 14 =C2=B6

      
      supplies an =
EID value for the destination address field of the IP       supplies an EID value for the destination address =
field of the IP

      
      header when =
communicating globally (i.e., outside of its routing       header when communicating globally (i.e., outside =
of its routing

      
      domain).  =
An end-system can be a host computer, a switch or router =
      domain).  An end-system can be a host =
computer, a switch or router

      
      device, or =
any network appliance.       device, =
or any network appliance.

      
 =


      
   Ingress Tunnel =
Router (ITR):   An ITR is a router that resides in a    Ingress Tunnel Router (ITR):   An ITR is a router =
that resides in a

      
      LISP site.  =
Packets sent by sources inside of the LISP site to       LISP site.  Packets sent by sources inside of the =
LISP site to

      
      =
destinations outside of the site are candidates for =
encapsulation       destinations =
outside of the site are candidates for encapsulation

      
      by the ITR. =
 The ITR treats the IP destination address as an EID       by the ITR.  The ITR treats the IP destination =
address as an EID

      
      and =
performs an EID-to-RLOC mapping lookup.  The router then =
      and performs an EID-to-RLOC mapping =
lookup.  The router then

      

      
      prepends =
an "outer" IP header with one of its globally routable       prepends an "outer" IP header with one of its =
routable RLOCs (in

      
      RLOCs in =
the source address field and the result of the mapping       the RLOC space) in =
the source address field and the result of the

      
      lookup in =
the destination address field.  Note that this       mapping lookup in the destination address field.  =
Note that this

      
      destination =
RLOC MAY be an intermediate, proxy device that has       destination RLOC MAY be an intermediate, proxy =
device that has

      
      better =
knowledge of the EID-to-RLOC mapping closer to the       better knowledge of the EID-to-RLOC mapping closer =
to the

      
      destination =
EID.  In general, an ITR receives IP packets from site       destination EID.  In general, an ITR receives IP =
packets from site

      
      end-systems =
on one side and sends LISP-encapsulated IP packets       end-systems on one side and sends =
LISP-encapsulated IP packets

      
      toward the =
Internet on the other side.       =
toward the Internet on the other side.
 =


      
      =
Specifically, when a service provider prepends a LISP header =
for       Specifically, when a service =
provider prepends a LISP header for

      
      Traffic =
Engineering purposes, the router that does this is also =
      Traffic Engineering purposes, the router =
that does this is also

      
      regarded as =
an ITR.  The outer RLOC the ISP ITR uses can be based       regarded as an ITR.  The outer RLOC the ISP ITR =
uses can be based

      
      on the =
outer destination address (the originating ITR's supplied =
      on the outer destination address (the =
originating ITR's supplied

      
 =


      
skipping to =
change at =
page 7, line 9 =C2=B6 =
skipping to change at page 7, line 7 =C2=B6

      
      network =
that strips an outer LISP header for Traffic Engineering =
      network that strips an outer LISP header =
for Traffic Engineering

      
      =
purposes.       purposes.

      
 =


      
   xTR:   An xTR =
is a reference to an ITR or ETR when direction of data    xTR:   An xTR is a reference to an ITR or ETR when =
direction of data

      
      flow is not =
part of the context description.  "xTR" refers to the       flow is not part of the context description.  =
"xTR" refers to the

      
      router that =
is the tunnel endpoint and is used synonymously with       router that is the tunnel endpoint and is used =
synonymously with

      
      the term =
"Tunnel Router".  For example, "An xTR can be located at =
      the term "Tunnel Router".  For example, =
"An xTR can be located at

      
      the =
Customer Edge (CE) router" indicates both ITR and ETR       the Customer Edge (CE) router" indicates both ITR =
and ETR

      
      =
functionality at the CE router.       =
functionality at the CE router.

      
 =


      

      
 =
   Re-encapsulating =
Tunneling in RTRs:   Re-encapsulating Tunneling

      
 =
      occurs when an =
RTR (Re-encapsulating Tunnel Router) acts like an

      
 =
      ETR to remove a =
LISP header, then acts as an ITR to prepend a new

      
 =
      LISP header.  =
Doing this allows a packet to be re-routed by the

      
 =
      RTR without =
adding the overhead of additional tunnel headers.  Any

      
 =
      references to =
tunnels in this specification refer to dynamic

      
 =
      encapsulating =
tunnels; they are never statically configured.  When

      
 =
      using multiple =
mapping database systems, care must be taken to not

      
 =
      create =
re-encapsulation loops through misconfiguration.

      
 =
                                               =
                          

      
   LISP Router:   =
A LISP router is a router that performs the functions    LISP Router:   A LISP router is a router that =
performs the functions

      
      of any or =
all of the following: ITR, ETR, RTR, Proxy-ITR (PITR),       of any or all of the following: ITR, ETR, RTR, =
Proxy-ITR (PITR),

      
      or =
Proxy-ETR (PETR).       or Proxy-ETR =
(PETR).

      
 =


      

      
   EID-to-RLOC =
Map-Cache:   The EID-to-RLOC map-cache is a =
short-lived,    EID-to-RLOC =
Map-Cache:   The EID-to-RLOC map-cache is generally

      
      on-demand =
table in an ITR that stores, tracks, and is responsible =
      short-lived, on-demand table in an ITR =
that stores, tracks, and is

      
      for =
timing out and otherwise validating EID-to-RLOC mappings. =
      responsible for timing out and otherwise =
validating EID-to-RLOC

      
      This =
cache is distinct from the full "database" of EID-to-RLOC   =
    mappings.  This cache is distinct from the full "database" of EID-

      
      mappings; =
it is dynamic, local to the ITR(s), and relatively       to-RLOC mappings; =
it is dynamic, local to the ITR(s), and

      
      small, =
while the database is distributed, relatively static, and =
      relatively small, while the database is =
distributed, relatively

      
      much more =
global in scope.       static, and =
much more global in scope.

      
 =


      
   EID-to-RLOC =
Database:   The EID-to-RLOC Database is a global    EID-to-RLOC Database:   The EID-to-RLOC Database is a =
global

      
      distributed =
database that contains all known EID-Prefix-to-RLOC       distributed database that contains all known =
EID-Prefix-to-RLOC

      
      mappings.  =
Each potential ETR typically contains a small piece of       mappings.  Each potential ETR typically contains a =
small piece of

      
      the =
database: the EID-to-RLOC mappings for the EID-Prefixes =
      the database: the EID-to-RLOC mappings =
for the EID-Prefixes

      
      "behind" =
the router.  These map to one of the router's own       "behind" the router.  These map to one of the =
router's own

      
      globally =
visible IP addresses.  The same database mapping entries =
      globally visible IP addresses.  The same =
database mapping entries

      
      MUST be =
configured on all ETRs for a given site.  In a steady       MUST be configured on all ETRs for a given site.  =
In a steady

      
      state, the =
EID-Prefixes for the site and the Locator-Set for each       state, the EID-Prefixes for the site and the =
Locator-Set for each

      
      EID-Prefix =
MUST be the same on all ETRs.  Procedures to enforce       EID-Prefix MUST be the same on all ETRs.  =
Procedures to enforce

      
 =


      
skipping to =
change at =
page 7, line 45 =C2=B6 =
skipping to change at page 8, line 5 =C2=B6

      
 =


      
   Recursive =
Tunneling:   Recursive Tunneling occurs when a packet has =
   Recursive Tunneling:   Recursive Tunneling =
occurs when a packet has

      
      more than =
one LISP IP header.  Additional layers of tunneling MAY =
      more than one LISP IP header.  Additional =
layers of tunneling MAY

      
      be employed =
to implement Traffic Engineering or other re-routing       be employed to implement Traffic Engineering or =
other re-routing

      
      as needed.  =
When this is done, an additional "outer" LISP header       as needed.  When this is done, an additional =
"outer" LISP header

      
      is added, =
and the original RLOCs are preserved in the "inner"       is added, and the original RLOCs are preserved in =
the "inner"

      
      header.  =
Any references to tunnels in this specification refer to =
      header.  Any references to tunnels in =
this specification refer to

      
      dynamic =
encapsulating tunnels; they are never statically       dynamic encapsulating tunnels; they are never =
statically

      
      =
configured.       configured.

      
 =


      

      
   Re-encapsulating Tunneling in RTRs:   Re-encapsulating =
Tunneling 

      
      occurs when an RTR (Re-encapsulating Tunnel =
Router) acts like an 

      
      ETR to remove a LISP header, then acts as an ITR =
to prepend a new 

      
      LISP header.  Doing this allows a packet to be =
re-routed by the 

      
      RTR without adding the overhead of additional =
tunnel headers.  Any 

      
      references to tunnels in this specification refer =
to dynamic 

      
      encapsulating tunnels; they are never statically =
configured.  When 

      
      using multiple mapping database systems, care =
must be taken to not 

      
      create re-encapsulation loops through =
misconfiguration. 

      
                =
                                                          =


      
   LISP Header:   =
LISP header is a term used in this document to refer    LISP Header:   LISP header is a term used in this =
document to refer

      
      to the =
outer IPv4 or IPv6 header, a UDP header, and a LISP-       to the outer IPv4 or IPv6 header, a UDP header, =
and a LISP-

      
      specific =
8-octet header that follow the UDP header and that an ITR =
      specific 8-octet header that follow the =
UDP header and that an ITR

      
      prepends or =
an ETR strips.       prepends or an =
ETR strips.

      
 =


      
   Address Family =
Identifier (AFI):   AFI is a term used to describe an    Address Family Identifier (AFI):   AFI is a term used =
to describe an

      

      
      address =
encoding in a packet.  An address family currently     =
  address encoding in a packet.  An address family that pertains to

      
      pertains =
to an IPv4 or IPv6 address.  See [AFN] and =
[RFC3232] for       the data-plane.  See [AFN] and [RFC3232] for =
details.  An AFI

      
      details.  =
An AFI value of 0 used in this specification indicates       value of 0 used in this specification indicates =
an unspecified

      
      an =
unspecified encoded address where the length of the address is =
      encoded address where the length of the =
address is 0 octets

      
      0 octets =
following the 16-bit AFI value of 0.  =
     following the 16-bit AFI value of 0.

      
 =


      
   Negative =
Mapping Entry:   A negative mapping entry, also known as a =
   Negative Mapping Entry:   A negative mapping =
entry, also known as a

      
      negative =
cache entry, is an EID-to-RLOC entry where an EID-Prefix =
      negative cache entry, is an EID-to-RLOC =
entry where an EID-Prefix

      
      is =
advertised or stored with no RLOCs.  That is, the Locator-Set =
      is advertised or stored with no RLOCs.  =
That is, the Locator-Set

      
      for the =
EID-to-RLOC entry is empty or has an encoded Locator count =
      for the EID-to-RLOC entry is empty or has =
an encoded Locator count

      
      of 0.  This =
type of entry could be used to describe a prefix from       of 0.  This type of entry could be used to =
describe a prefix from

      
      a non-LISP =
site, which is explicitly not in the mapping database.       a non-LISP site, which is explicitly not in the =
mapping database.

      
      There are a =
set of well-defined actions that are encoded in a       There are a set of well-defined actions that are =
encoded in a

      
      Negative =
Map-Reply.       Negative =
Map-Reply.

      
 =


      
 =


      
skipping to =
change at =
page 9, line 24 =C2=B6 =
skipping to change at page 9, line 20 =C2=B6

      
      in the edge =
network are the demarcation points to separate the       in the edge network are the demarcation points to =
separate the

      
      edge =
network from the core network.       =
edge network from the core network.

      
 =


      
   Client-side:  =
Client-side is a term used in this document to indicate =
   Client-side:  Client-side is a term used in =
this document to indicate

      
      a =
connection initiation attempt by an EID.  The ITR(s) at the =
LISP       a connection initiation =
attempt by an EID.  The ITR(s) at the LISP

      
      site are =
the first to get involved in obtaining database Map-Cache =
      site are the first to get involved in =
obtaining database Map-Cache

      
      entries by =
sending Map-Request messages.       =
entries by sending Map-Request messages.

      
 =


      
   Server-side:  =
Server-side is a term used in this document to indicate =
   Server-side:  Server-side is a term used in =
this document to indicate

      
      that a =
connection initiation attempt is being accepted for a       that a connection initiation attempt is being =
accepted for a

      

      
      =
destination EID.  The ETR(s) at the destination LISP site are the       =
destination EID.  The ETR(s) at the destination LISP site may be

      
      first to =
send Map-Replies to the source site initiating the       the first to send Map-Replies to the source site =
initiating the

      
      connection. =
 The ETR(s) at this destination site can obtain       connection.  The ETR(s) at this destination site =
can obtain

      
      mappings by =
gleaning information from Map-Requests, Data-Probes,       mappings by gleaning information from =
Map-Requests, Data-Probes,

      
      or =
encapsulated packets.       or =
encapsulated packets.

      
 =


      
   =
Locator-Status-Bits (LSBs):  Locator-Status-Bits are present in =
the    Locator-Status-Bits (LSBs):  =
Locator-Status-Bits are present in the
      LISP =
header.  They are used by ITRs to inform ETRs about the up/ =
      LISP header.  They are used by ITRs to =
inform ETRs about the up/

      
      down status =
of all ETRs at the local site.  These bits are used as       down status of all ETRs at the local site.  These =
bits are used as

      
      a hint to =
convey up/down router status and not path reachability       a hint to convey up/down router status and not =
path reachability

      
      status.  =
The LSBs can be verified by use of one of the Locator       status.  The LSBs can be verified by use of one of =
the Locator

      
      =
reachability algorithms described in Section 10.       reachability algorithms described in Section =
10.

      
 =


      
skipping =
to change at page 11, line =
30 =C2=B6 =
skipping to change at page 11, line =
27 =C2=B6

      
   when =
re-routing of the path for a packet is desired.  A potential =
   when re-routing of the path for a packet is =
desired.  A potential

      
   use-case for =
this would be an ISP router that needs to perform    use-case for this would be an ISP router that needs =
to perform

      
   Traffic =
Engineering for packets flowing through its network.  In such =
   Traffic Engineering for packets flowing =
through its network.  In such

      
   a situation, =
termed "Recursive Tunneling", an ISP transit acts as an =
   a situation, termed "Recursive Tunneling", =
an ISP transit acts as an

      
   additional =
ITR, and the RLOC it uses for the new prepended header    additional ITR, and the RLOC it uses for the new =
prepended header

      
   would be =
either a TE-ETR within the ISP (along an intra-ISP traffic =
   would be either a TE-ETR within the ISP =
(along an intra-ISP traffic

      
   engineered =
path) or a TE-ETR within another ISP (an inter-ISP traffic =
   engineered path) or a TE-ETR within another =
ISP (an inter-ISP traffic

      
   engineered =
path, where an agreement to build such a path exists).    engineered path, where an agreement to build such a =
path exists).

      
 =


      
   In order to =
avoid excessive packet overhead as well as possible    In order to avoid excessive packet overhead as well =
as possible

      

      
   =
encapsulation loops, this document mandates =
that a maximum of two    =
encapsulation loops, this document recommends that a maximum of two

      
   LISP headers =
can be prepended to a packet.  For initial LISP    LISP headers can be prepended to a packet.  For =
initial LISP

      
   deployments, =
it is assumed that two headers is sufficient, where the =
   deployments, it is assumed that two headers =
is sufficient, where the

      
   first =
prepended header is used at a site for Location/Identity =
   first prepended header is used at a site for =
Location/Identity

      
   separation and =
the second prepended header is used inside a service    separation and the second prepended header is used =
inside a service

      
   provider for =
Traffic Engineering purposes.    =
provider for Traffic Engineering purposes.

      
 =


      
   Tunnel Routers =
can be placed fairly flexibly in a multi-AS topology.    Tunnel Routers can be placed fairly flexibly in a =
multi-AS topology.

      
   For example, =
the ITR for a particular end-to-end packet exchange    For example, the ITR for a particular end-to-end =
packet exchange

      
   might be the =
first-hop or default router within a site for the source =
   might be the first-hop or default router =
within a site for the source

      
   host.  =
Similarly, the ETR might be the last-hop router directly =
   host.  Similarly, the ETR might be the =
last-hop router directly

      
 =


      
skipping =
to change at page 23, line =
10 =C2=B6 =
skipping to change at page 23, line =
10 =C2=B6

      
   that prepends =
a LISP header will copy a 24-bit value used by the LISP =
   that prepends a LISP header will copy a =
24-bit value used by the LISP

      
   router to =
uniquely identify the address space.  The value is copied =
   router to uniquely identify the address =
space.  The value is copied

      
   to the =
'Instance ID' field of the LISP header, and the I-bit is set =
   to the 'Instance ID' field of the LISP =
header, and the I-bit is set

      
   to 1. =
   to 1.

      
 =


      
   When an ETR =
decapsulates a packet, the Instance ID from the LISP    When an ETR decapsulates a packet, the Instance ID =
from the LISP

      
   header is used =
as a table identifier to locate the forwarding table    header is used as a table identifier to locate the =
forwarding table

      
   to use for the =
inner destination EID lookup.    to =
use for the inner destination EID lookup.

      
 =


      
   For example, =
an 802.1Q VLAN tag or VPN identifier could be used as a =
   For example, an 802.1Q VLAN tag or VPN =
identifier could be used as a

      

      
   24-bit =
Instance ID.    24-bit Instance ID.  =
See [I-D.ietf-lisp-vpn] for LISP VPN =
use-case

      
 =
   =
details.

      
 =


      
   The Instance =
ID that is stored in the mapping database when LISP-DDT =
   The Instance ID that is stored in the =
mapping database when LISP-DDT

      
   =
[I-D.ietf-lisp-ddt] is used is 32 bits in length.  That means =
the    [I-D.ietf-lisp-ddt] is used is =
32 bits in length.  That means the

      
   control-plane =
can store more instances than a given data-plane can    control-plane can store more instances than a given =
data-plane can

      
   use.  Multiple =
data-planes can use the same 32-bit space as long as    use.  Multiple data-planes can use the same 32-bit =
space as long as

      
   the low-order =
24 bits don't overlap among xTRs.    =
the low-order 24 bits don't overlap among xTRs.

      
 =


      
9.  Routing =
Locator Selection 9.  Routing Locator =
Selection

      
 =


      
   Both the =
client-side and server-side may need control over the    Both the client-side and server-side may need control =
over the

      
 =


      
skipping =
to change at page 28, line =
27 =C2=B6 =
skipping to change at page 28, line =
27 =C2=B6

      
   reachability =
problem, as traffic may be unidirectional.  That is, the =
   reachability problem, as traffic may be =
unidirectional.  That is, the

      
   ETR receiving =
traffic at a site may not be the same device as an ITR    ETR receiving traffic at a site may not be the same =
device as an ITR

      
   that transmits =
traffic from that site, or the site-to-site traffic is    that transmits traffic from that site, or the =
site-to-site traffic is

      
   unidirectional =
so there is no ITR returning traffic.  =
  unidirectional so there is no ITR returning traffic.

      
 =


      
   The echo-nonce =
algorithm is bilateral.  That is, if one side sets the    The echo-nonce algorithm is bilateral.  That is, if =
one side sets the

      
   E-bit and the =
other side is not enabled for echo-noncing, then the    E-bit and the other side is not enabled for =
echo-noncing, then the

      
   echoing of the =
nonce does not occur and the requesting side may    echoing of the nonce does not occur and the =
requesting side may

      
   erroneously =
consider the Locator unreachable.  An ITR SHOULD only set =
   erroneously consider the Locator =
unreachable.  An ITR SHOULD only set

      
   the E-bit in =
an encapsulated data packet when it knows the ETR is    the E-bit in an encapsulated data packet when it =
knows the ETR is

      

      
   enabled for =
echo-noncing.  This is conveyed by the E-bit in the Map-    =
enabled for echo-noncing.  This is conveyed by the E-bit in the RLOC-

      
   Reply message.    probe Map-Reply =
message.

      
 =


      
   Note that =
other Locator reachability mechanisms are being researched =
   Note that other Locator reachability =
mechanisms are being researched

      
   and can be =
used to compliment or even override the echo nonce    and can be used to compliment or even override the =
echo nonce

      
   algorithm.  =
See the next section for an example of control-plane    algorithm.  See the next section for an example of =
control-plane

      
   =
probing.    probing.

      
 =


      
10.2.  =
RLOC-Probing Algorithm 10.2.  =
RLOC-Probing Algorithm

      
 =


      
   RLOC-Probing =
is a method that an ITR or PITR can use to determine the =
   RLOC-Probing is a method that an ITR or PITR =
can use to determine the

      
   reachability =
status of one or more Locators that it has cached in a    reachability status of one or more Locators that it =
has cached in a

      
 =


      
skipping =
to change at page 32, line =
46 =C2=B6 =
skipping to change at page 32, line =
46 =C2=B6

      
   where mappings =
change, to control the rate they receive requests for    where mappings change, to control the rate they =
receive requests for

      
   Map-Reply =
messages.  SMRs are also used to tell remote ITRs to update =
   Map-Reply messages.  SMRs are also used to =
tell remote ITRs to update

      
   the mappings =
they have cached.    the mappings they =
have cached.

      
 =


      
   Since the ETRs =
don't keep track of remote ITRs that have cached their    Since the ETRs don't keep track of remote ITRs that =
have cached their

      
   mappings, they =
do not know which ITRs need to have their mappings    mappings, they do not know which ITRs need to have =
their mappings

      
   updated.  As a =
result, an ETR will solicit Map-Requests (called an    updated.  As a result, an ETR will solicit =
Map-Requests (called an

      
   SMR message) =
from those sites to which it has been sending    SMR message) from those sites to which it has been =
sending

      
   encapsulated =
data for the last minute.  In particular, an ETR will    encapsulated data for the last minute.  In =
particular, an ETR will

      
   send an SMR to =
an ITR to which it has recently sent encapsulated    send an SMR to an ITR to which it has recently sent =
encapsulated

      

      
   =
data.    data.  This can only occur when both ITR and ETR functionality =
reside

      
 =
   in the same =
router.

      
 =


      
   An SMR message =
is simply a bit set in a Map-Request message.  An ITR    An SMR message is simply a bit set in a Map-Request =
message.  An ITR

      
   or PITR will =
send a Map-Request when they receive an SMR message.    or PITR will send a Map-Request when they receive an =
SMR message.

      
   Both the SMR =
sender and the Map-Request responder MUST rate-limit    Both the SMR sender and the Map-Request responder =
MUST rate-limit

      
   these =
messages.  Rate-limiting can be implemented as a global rate- =
   these messages.  Rate-limiting can be =
implemented as a global rate-

      
   limiter or one =
rate-limiter per SMR destination.    =
limiter or one rate-limiter per SMR destination.

      
 =


      
   The following =
procedure shows how an SMR exchange occurs when a site    The following procedure shows how an SMR exchange =
occurs when a site

      
   is doing =
Locator-Set compaction for an EID-to-RLOC mapping:    is doing Locator-Set compaction for an EID-to-RLOC =
mapping:

      
 =


      
 =


      
skipping =
to change at page 36, line =
43 =C2=B6 =
skipping to change at page 36, line =
47 =C2=B6

      
   decoupling the =
address space used by a site from the address spaces    decoupling the address space used by a site from the =
address spaces

      
   used by its =
ISPs [RFC4984].    used by its ISPs =
[RFC4984].

      
 =


      
16.2.  Fast =
Mobility 16.2.  Fast Mobility

      
 =


      
   Fast endpoint =
mobility occurs when an endpoint moves relatively    Fast endpoint mobility occurs when an endpoint moves =
relatively

      
   rapidly, =
changing its IP-layer network attachment point.  Maintenance =
   rapidly, changing its IP-layer network =
attachment point.  Maintenance

      
   of session =
continuity is a goal.  This is where the Mobile IPv4    of session continuity is a goal.  This is where the =
Mobile IPv4

      
   [RFC5944] and =
Mobile IPv6 [RFC6275] [RFC4866] mechanisms are used and =
   [RFC5944] and Mobile IPv6 [RFC6275] =
[RFC4866] mechanisms are used and

      
   primarily =
where interactions with LISP need to be explored, such as =
   primarily where interactions with LISP need =
to be explored, such as

      

      
   the =
mechanisms in [I-D.portoles-lisp-eid-mobility] when the EID =
moves    the mechanisms in [I-D.ietf-lisp-eid-mobility] when the EID moves =
but

      
   but the RLOC =
is in the network infrastructure.    =
the RLOC is in the network infrastructure.

      
 =


      
   In LISP, one =
possibility is to "glean" information.  When a packet    In LISP, one possibility is to "glean" information.  =
When a packet

      
   arrives, the =
ETR could examine the EID-to-RLOC mapping and use that    arrives, the ETR could examine the EID-to-RLOC =
mapping and use that

      
   mapping for =
all outgoing traffic to that EID.  It can do this after =
   mapping for all outgoing traffic to that =
EID.  It can do this after

      
   performing a =
route-returnability check, to ensure that the new    performing a route-returnability check, to ensure =
that the new

      
   network =
location does have an internal route to that endpoint.    network location does have an internal route to that =
endpoint.

      
   However, this =
does not cover the case where an ITR (the node assigned =
   However, this does not cover the case where =
an ITR (the node assigned

      
   the RLOC) at =
the mobile-node location has been compromised.    the RLOC) at the mobile-node location has been =
compromised.

      
 =


      
   Mobile IP =
packet exchange is designed for an environment in which all =
   Mobile IP packet exchange is designed for an =
environment in which all

      
 =


      
skipping =
to change at page 37, line =
31 =C2=B6 =
skipping to change at page 37, line =
36 =C2=B6

      
   for any =
endpoint will return a binding for the entire mobile prefix. =
   for any endpoint will return a binding for =
the entire mobile prefix.

      
 =


      
   If mobile =
networks become a more common occurrence, it may be useful =
   If mobile networks become a more common =
occurrence, it may be useful

      
   to revisit the =
design of the mapping service and allow for dynamic    to revisit the design of the mapping service and =
allow for dynamic

      
   updates of the =
database.    updates of the =
database.

      
 =


      
   The issue of =
interactions between mobility and LISP needs to be    The issue of interactions between mobility and LISP =
needs to be

      
   explored =
further.  Specific improvements to the entire system will =
   explored further.  Specific improvements to =
the entire system will

      
   depend on the =
details of mapping mechanisms.  Mapping mechanisms    depend on the details of mapping mechanisms.  Mapping =
mechanisms

      
   should be =
evaluated on how well they support session continuity for =
   should be evaluated on how well they support =
session continuity for

      

      
   mobile =
nodes.  See [I-D.farinacci-lisp-predictive-rlocs] for =
more    mobile nodes.  See [I-D.ietf-lisp-predictive-rlocs] for more =
recent

      
   recent =
mechanisms which can provide near-zero packet loss during =
   mechanisms which can provide near-zero =
packet loss during handoffs.

      
   =
handoffs. 

      
 =


      
16.3.  LISP =
Mobile Node Mobility 16.3.  LISP =
Mobile Node Mobility

      
 =


      
   A mobile =
device can use the LISP infrastructure to achieve mobility =
   A mobile device can use the LISP =
infrastructure to achieve mobility

      
   by =
implementing the LISP encapsulation and decapsulation functions =
   by implementing the LISP encapsulation and =
decapsulation functions

      
   and acting as =
a simple ITR/ETR.  By doing this, such a "LISP mobile    and acting as a simple ITR/ETR.  By doing this, such =
a "LISP mobile

      
   node" can use =
topologically independent EID IP addresses that are not =
   node" can use topologically independent EID =
IP addresses that are not

      
   advertised =
into and do not impose a cost on the global routing    advertised into and do not impose a cost on the =
global routing

      
   system.  These =
EIDs are maintained at the edges of the mapping system    system.  These EIDs are maintained at the edges of =
the mapping system

      
   in LISP =
Map-Servers and Map-Resolvers) and are provided on demand to =
   in LISP Map-Servers and Map-Resolvers) and =
are provided on demand to

      
 =


      
skipping =
to change at page 40, line =
46 =C2=B6 =
skipping to change at page 40, line =
46 =C2=B6

      
   and provider =
want control, then Recursive or Re-Encapsulating Tunnels =
   and provider want control, then Recursive or =
Re-Encapsulating Tunnels

      
   are =
used.    are used.

      
 =


      
17.4.  LISP =
Functionality with Conventional NATs 17.4.  LISP Functionality with Conventional NATs

      
 =


      
   LISP routers =
can be deployed behind Network Address Translator (NAT) =
   LISP routers can be deployed behind Network =
Address Translator (NAT)

      
   devices to =
provide the same set of packet services hosts have today =
   devices to provide the same set of packet =
services hosts have today

      
   when they are =
addressed out of private address space. =
   when they are addressed out of private address space.

      
 =


      
   It is =
important to note that a locator address in any LISP control =
   It is important to note that a locator =
address in any LISP control

      

      
   message MUST =
be a globally routable address and =
therefore SHOULD NOT    message MUST be a routable address and therefore =
[RFC1918] addresses

      
   contain [RFC1918] addresses.  If a LISP xTR is configured =
with    SHOULD =
only be presence when running in a local environment.  When =
a

      
   private RLOC =
addresses, they MUST be used only in the =
outer IP header    LISP xTR is =
configured with private RLOC addresses and =
resides behind

      
   so the NAT =
device can translate properly.  Otherwise, EID addresses =
   a NAT device and =
desires to communicate on the Internet, the private

      
   MUST be =
translated before encapsulation is performed when LISP VPNs =
   addresses =
MUST be used only in the outer IP header so the NAT device

      
   are not in =
use.  Both NAT translation and LISP encapsulation    can translate properly.  Otherwise, EID addresses =
MUST be translated

      
   functions =
could be co-located in the same =
device.    before encapsulation is =
performed when LISP VPNs are not in use.

      
 =
   Both NAT translation and LISP encapsulation =
functions could be co-

      
 =
   located in =
the same device.

      
 =


      
17.5.  Packets =
Egressing a LISP Site 17.5.  Packets =
Egressing a LISP Site

      
 =


      
   When a LISP =
site is using two ITRs for redundancy, the failure of one =
   When a LISP site is using two ITRs for =
redundancy, the failure of one

      
   ITR will =
likely shift outbound traffic to the second.  This second =
   ITR will likely shift outbound traffic to =
the second.  This second

      
   ITR's cache =
may not be populated with the same EID-to-RLOC mapping    ITR's cache may not be populated with the same =
EID-to-RLOC mapping

      
   entries as the =
first.  If this second ITR does not have these    entries as the first.  If this second ITR does not =
have these

      
   mappings, =
traffic will be dropped while the mappings are retrieved =
   mappings, traffic will be dropped while the =
mappings are retrieved

      
   from the =
mapping system.  The retrieval of these messages may    from the mapping system.  The retrieval of these =
messages may

      
   increase the =
load of requests being sent into the mapping system.    increase the load of requests being sent into the =
mapping system.

      
 =


      
skipping =
to change at page 45, line =
14 =C2=B6 =
skipping to change at page 45, line =
14 =C2=B6

      
 =


      
   =
[I-D.ietf-lisp-introduction]    =
[I-D.ietf-lisp-introduction]

      
              =
Cabellos-Aparicio, A. and D. Saucez, "An Architectural               Cabellos-Aparicio, A. and D. Saucez, "An =
Architectural

      
              =
Introduction to the Locator/ID Separation Protocol               Introduction to the Locator/ID Separation =
Protocol

      
              =
(LISP)", draft-ietf-lisp-introduction-13 (work in               (LISP)", draft-ietf-lisp-introduction-13 =
(work in

      
              =
progress), April 2015.               =
progress), April 2015.

      
 =


      
   =
[I-D.ietf-lisp-rfc6833bis]    =
[I-D.ietf-lisp-rfc6833bis]

      
              =
Fuller, V., Farinacci, D., and A. Cabellos-Aparicio,               Fuller, V., Farinacci, D., and A. =
Cabellos-Aparicio,

      
              =
"Locator/ID Separation Protocol (LISP) Control-Plane",               "Locator/ID Separation Protocol (LISP) =
Control-Plane",

      

      
              =
draft-ietf-lisp-rfc6833bis-05 (work in progress), =
May               =
draft-ietf-lisp-rfc6833bis-06 (work in progress), =
October

      
              =
2017.               2017.

      
 =


      
   =
[I-D.ietf-lisp-sec]    =
[I-D.ietf-lisp-sec]

      
              =
Maino, F., Ermagan, V., Cabellos-Aparicio, A., and D.               Maino, F., Ermagan, V., Cabellos-Aparicio, =
A., and D.

      

      
              =
Saucez, "LISP-Security (LISP-SEC)", draft-ietf-lisp-sec-12               Saucez, "LISP-Security (LISP-SEC)", draft-ietf-lisp-sec-13

      
              =
(work in progress), November =
2016.               (work in =
progress), September 2017.

      
 =


      
   [RFC0768]  =
Postel, J., "User Datagram Protocol", STD 6, RFC 768,    [RFC0768]  Postel, J., "User Datagram Protocol", STD =
6, RFC 768,

      

      
              =
DOI 10.17487/RFC0768, August 1980, <https://www.rfc-               DOI 10.17487/RFC0768, August =
1980,

      
              =
editor.org/info/rfc768>.    =
           <https://www.rfc-editor.org/info/rfc768>.

      
 =


      
   [RFC0791]  =
Postel, J., "Internet Protocol", STD 5, RFC 791,    [RFC0791]  Postel, J., "Internet Protocol", STD 5, =
RFC 791,

      

      
              =
DOI 10.17487/RFC0791, September 1981, <https://www.rfc-               DOI 10.17487/RFC0791, September =
1981,

      
              =
editor.org/info/rfc791>.    =
           <https://www.rfc-editor.org/info/rfc791>.

      
 =


      
   [RFC1918]  =
Rekhter, Y., Moskowitz, B., Karrenberg, D., de Groot, G., =
   [RFC1918]  Rekhter, Y., Moskowitz, B., =
Karrenberg, D., de Groot, G.,

      
              and =
E. Lear, "Address Allocation for Private Internets",               and E. Lear, "Address Allocation for =
Private Internets",

      
              BCP =
5, RFC 1918, DOI 10.17487/RFC1918, February 1996,               BCP 5, RFC 1918, DOI 10.17487/RFC1918, =
February 1996,

      
              =
<https://www.rfc-editor.org/info/rfc1918>.               =
<https://www.rfc-editor.org/info/rfc1918>.

      
 =


      
   [RFC2119]  =
Bradner, S., "Key words for use in RFCs to Indicate    [RFC2119]  Bradner, S., "Key words for use in RFCs to =
Indicate

      
              =
Requirement Levels", BCP 14, RFC 2119,  =
             Requirement Levels", BCP 14, RFC 2119,

      

      
              =
DOI 10.17487/RFC2119, March 1997, <https://www.rfc-               DOI 10.17487/RFC2119, March 1997,

      
              =
editor.org/info/rfc2119>.   =
            <https://www.rfc-editor.org/info/rfc2119>.

      
 =


      
   [RFC2404]  =
Madson, C. and R. Glenn, "The Use of HMAC-SHA-1-96 within =
   [RFC2404]  Madson, C. and R. Glenn, "The Use =
of HMAC-SHA-1-96 within

      
              ESP =
and AH", RFC 2404, DOI 10.17487/RFC2404, November               ESP and AH", RFC 2404, DOI =
10.17487/RFC2404, November

      
              =
1998, <https://www.rfc-editor.org/info/rfc2404>.               1998, =
<https://www.rfc-editor.org/info/rfc2404>.

      
 =


      
   [RFC3168]  =
Ramakrishnan, K., Floyd, S., and D. Black, "The Addition =
   [RFC3168]  Ramakrishnan, K., Floyd, S., and =
D. Black, "The Addition

      
              of =
Explicit Congestion Notification (ECN) to IP",               of Explicit Congestion Notification (ECN) =
to IP",

      
              RFC =
3168, DOI 10.17487/RFC3168, September 2001,               RFC 3168, DOI 10.17487/RFC3168, September =
2001,

      
              =
<https://www.rfc-editor.org/info/rfc3168>.               =
<https://www.rfc-editor.org/info/rfc3168>.

      
 =


      
   [RFC3232]  =
Reynolds, J., Ed., "Assigned Numbers: RFC 1700 is Replaced =
   [RFC3232]  Reynolds, J., Ed., "Assigned =
Numbers: RFC 1700 is Replaced

      
              by =
an On-line Database", RFC 3232, DOI 10.17487/RFC3232,               by an On-line Database", RFC 3232, DOI =
10.17487/RFC3232,

      
              =
January 2002, <https://www.rfc-editor.org/info/rfc3232>. =
              January 2002, =
<https://www.rfc-editor.org/info/rfc3232>.

      
 =


      
   [RFC4086]  =
Eastlake 3rd, D., Schiller, J., and S. Crocker,    [RFC4086]  Eastlake 3rd, D., Schiller, J., and S. =
Crocker,

      
              =
"Randomness Requirements for Security", BCP 106, RFC 4086, =
              "Randomness Requirements for =
Security", BCP 106, RFC 4086,

      

      
              =
DOI 10.17487/RFC4086, June 2005, <https://www.rfc-               DOI 10.17487/RFC4086, June 2005,

      
              =
editor.org/info/rfc4086>.   =
            <https://www.rfc-editor.org/info/rfc4086>.

      
 =


      
   [RFC4632]  =
Fuller, V. and T. Li, "Classless Inter-domain Routing    [RFC4632]  Fuller, V. and T. Li, "Classless =
Inter-domain Routing

      
              =
(CIDR): The Internet Address Assignment and Aggregation =
              (CIDR): The Internet Address =
Assignment and Aggregation

      
              =
Plan", BCP 122, RFC 4632, DOI 10.17487/RFC4632, August               Plan", BCP 122, RFC 4632, DOI =
10.17487/RFC4632, August

      
              =
2006, <https://www.rfc-editor.org/info/rfc4632>.               2006, =
<https://www.rfc-editor.org/info/rfc4632>.

      
 =


      
   [RFC4868]  =
Kelly, S. and S. Frankel, "Using HMAC-SHA-256, HMAC-SHA- =
   [RFC4868]  Kelly, S. and S. Frankel, "Using =
HMAC-SHA-256, HMAC-SHA-

      
              =
384, and HMAC-SHA-512 with IPsec", RFC 4868,               384, and HMAC-SHA-512 with IPsec", RFC =
4868,

      

      
              =
DOI 10.17487/RFC4868, May 2007, <https://www.rfc-               DOI 10.17487/RFC4868, May 2007,

      
              =
editor.org/info/rfc4868>.   =
            <https://www.rfc-editor.org/info/rfc4868>.

      
 =


      
   [RFC5226]  =
Narten, T. and H. Alvestrand, "Guidelines for Writing an =
   [RFC5226]  Narten, T. and H. Alvestrand, =
"Guidelines for Writing an

      
              =
IANA Considerations Section in RFCs", RFC 5226,               IANA Considerations Section in RFCs", RFC =
5226,

      

      
              =
DOI 10.17487/RFC5226, May 2008, <https://www.rfc-               DOI 10.17487/RFC5226, May 2008,

      
              =
editor.org/info/rfc5226>.   =
            <https://www.rfc-editor.org/info/rfc5226>.

      
 =


      
   [RFC5496]  =
Wijnands, IJ., Boers, A., and E. Rosen, "The Reverse Path =
   [RFC5496]  Wijnands, IJ., Boers, A., and E. =
Rosen, "The Reverse Path

      
              =
Forwarding (RPF) Vector TLV", RFC 5496, =
              Forwarding (RPF) Vector TLV", RFC 5496,

      

      
              =
DOI 10.17487/RFC5496, March 2009, <https://www.rfc-               DOI 10.17487/RFC5496, March 2009,

      
              =
editor.org/info/rfc5496>.   =
            <https://www.rfc-editor.org/info/rfc5496>.

      
 =


      
   [RFC5944]  =
Perkins, C., Ed., "IP Mobility Support for IPv4, Revised", =
   [RFC5944]  Perkins, C., Ed., "IP Mobility =
Support for IPv4, Revised",

      
              RFC =
5944, DOI 10.17487/RFC5944, November 2010,               RFC 5944, DOI 10.17487/RFC5944, November =
2010,

      
              =
<https://www.rfc-editor.org/info/rfc5944>.               =
<https://www.rfc-editor.org/info/rfc5944>.

      
 =


      
   [RFC6115]  Li, =
T., Ed., "Recommendation for a Routing Architecture",    [RFC6115]  Li, T., Ed., "Recommendation for a Routing =
Architecture",

      
              RFC =
6115, DOI 10.17487/RFC6115, February 2011,               RFC 6115, DOI 10.17487/RFC6115, February =
2011,

      
              =
<https://www.rfc-editor.org/info/rfc6115>.               =
<https://www.rfc-editor.org/info/rfc6115>.

      
 =


      
   [RFC6275]  =
Perkins, C., Ed., Johnson, D., and J. Arkko, "Mobility    [RFC6275]  Perkins, C., Ed., Johnson, D., and J. =
Arkko, "Mobility

      
              =
Support in IPv6", RFC 6275, DOI 10.17487/RFC6275, July               Support in IPv6", RFC 6275, DOI =
10.17487/RFC6275, July

      
              =
2011, <https://www.rfc-editor.org/info/rfc6275>.               2011, =
<https://www.rfc-editor.org/info/rfc6275>.

      
 =


      
   [RFC6834]  =
Iannone, L., Saucez, D., and O. Bonaventure, "Locator/ID =
   [RFC6834]  Iannone, L., Saucez, D., and O. =
Bonaventure, "Locator/ID

      
              =
Separation Protocol (LISP) Map-Versioning", RFC 6834,               Separation Protocol (LISP) =
Map-Versioning", RFC 6834,

      

      
              =
DOI 10.17487/RFC6834, January 2013, <https://www.rfc-               DOI 10.17487/RFC6834, January =
2013,

      
              =
editor.org/info/rfc6834>.   =
            <https://www.rfc-editor.org/info/rfc6834>.

      
 =


      
   [RFC6836]  =
Fuller, V., Farinacci, D., Meyer, D., and D. Lewis,    [RFC6836]  Fuller, V., Farinacci, D., Meyer, D., and =
D. Lewis,

      
              =
"Locator/ID Separation Protocol Alternative Logical               "Locator/ID Separation Protocol =
Alternative Logical

      
              =
Topology (LISP+ALT)", RFC 6836, DOI 10.17487/RFC6836,               Topology (LISP+ALT)", RFC 6836, DOI =
10.17487/RFC6836,

      
              =
January 2013, <https://www.rfc-editor.org/info/rfc6836>. =
              January 2013, =
<https://www.rfc-editor.org/info/rfc6836>.

      
 =


      
   [RFC7052]  =
Schudel, G., Jain, A., and V. Moreno, "Locator/ID    [RFC7052]  Schudel, G., Jain, A., and V. Moreno, =
"Locator/ID

      
              =
Separation Protocol (LISP) MIB", RFC 7052,               Separation Protocol (LISP) MIB", RFC =
7052,

      

      
              =
DOI 10.17487/RFC7052, October 2013, <https://www.rfc-               DOI 10.17487/RFC7052, October =
2013,

      
              =
editor.org/info/rfc7052>.   =
            <https://www.rfc-editor.org/info/rfc7052>.

      
 =


      
   [RFC7214]  =
Andersson, L. and C. Pignataro, "Moving Generic Associated =
   [RFC7214]  Andersson, L. and C. Pignataro, =
"Moving Generic Associated

      
              =
Channel (G-ACh) IANA Registries to a New Registry",               Channel (G-ACh) IANA Registries to a New =
Registry",

      
              RFC =
7214, DOI 10.17487/RFC7214, May 2014,  =
             RFC 7214, DOI 10.17487/RFC7214, May 2014,

      
              =
<https://www.rfc-editor.org/info/rfc7214>.               =
<https://www.rfc-editor.org/info/rfc7214>.

      
 =


      
   [RFC7215]  =
Jakab, L., Cabellos-Aparicio, A., Coras, F., Domingo-    [RFC7215]  Jakab, L., Cabellos-Aparicio, A., Coras, =
F., Domingo-

      
              =
Pascual, J., and D. Lewis, "Locator/Identifier Separation =
              Pascual, J., and D. Lewis, =
"Locator/Identifier Separation

      
              =
Protocol (LISP) Network Element Deployment               Protocol (LISP) Network Element =
Deployment

      
              =
Considerations", RFC 7215, DOI 10.17487/RFC7215, April               Considerations", RFC 7215, DOI =
10.17487/RFC7215, April

      
              =
2014, <https://www.rfc-editor.org/info/rfc7215>.               2014, =
<https://www.rfc-editor.org/info/rfc7215>.

      
 =


      
   [RFC7833]  =
Howlett, J., Hartman, S., and A. Perez-Mendez, Ed., "A    [RFC7833]  Howlett, J., Hartman, S., and A. =
Perez-Mendez, Ed., "A

      
              =
RADIUS Attribute, Binding, Profiles, Name Identifier               RADIUS Attribute, Binding, Profiles, Name =
Identifier

      
              =
Format, and Confirmation Methods for the Security               Format, and Confirmation Methods for the =
Security

      
              =
Assertion Markup Language (SAML)", RFC 7833,               Assertion Markup Language (SAML)", RFC =
7833,

      

      
              =
DOI 10.17487/RFC7833, May 2016, <https://www.rfc-               DOI 10.17487/RFC7833, May 2016,

      
              =
editor.org/info/rfc7833>.   =
            <https://www.rfc-editor.org/info/rfc7833>.

      
 =


      
   [RFC7835]  =
Saucez, D., Iannone, L., and O. Bonaventure, "Locator/ID =
   [RFC7835]  Saucez, D., Iannone, L., and O. =
Bonaventure, "Locator/ID

      
              =
Separation Protocol (LISP) Threat Analysis", RFC 7835,               Separation Protocol (LISP) Threat =
Analysis", RFC 7835,

      

      
              =
DOI 10.17487/RFC7835, April 2016, <https://www.rfc-               DOI 10.17487/RFC7835, April 2016,

      
              =
editor.org/info/rfc7835>.   =
            <https://www.rfc-editor.org/info/rfc7835>.

      
 =


      
   [RFC8061]  =
Farinacci, D. and B. Weis, "Locator/ID Separation Protocol =
   [RFC8061]  Farinacci, D. and B. Weis, =
"Locator/ID Separation Protocol

      
              =
(LISP) Data-Plane Confidentiality", RFC 8061,               (LISP) Data-Plane Confidentiality", RFC =
8061,

      

      
              =
DOI 10.17487/RFC8061, February 2017, <https://www.rfc-               DOI 10.17487/RFC8061, February =
2017,

      
              =
editor.org/info/rfc8061>.   =
            <https://www.rfc-editor.org/info/rfc8061>.

      
 =


      
   [RFC8200]  =
Deering, S. and R. Hinden, "Internet Protocol, Version 6 =
   [RFC8200]  Deering, S. and R. Hinden, =
"Internet Protocol, Version 6

      
              =
(IPv6) Specification", STD 86, RFC 8200,               (IPv6) Specification", STD 86, RFC =
8200,

      

      
              =
DOI 10.17487/RFC8200, July 2017, <https://www.rfc-               DOI 10.17487/RFC8200, July 2017,

      
              =
editor.org/info/rfc8200>.   =
            <https://www.rfc-editor.org/info/rfc8200>.

      
 =


      
22.2.  =
Informative References 22.2.  =
Informative References

      
 =


      
   [AFN]      =
IANA, "Address Family Numbers", August 2016,    [AFN]      IANA, "Address Family Numbers", August =
2016,

      
              =
<http://www.iana.org/assignments/address-family-numbers>. =
              =
<http://www.iana.org/assignments/address-family-numbers>.

      
 =


      
   [CHIAPPA]  =
Chiappa, J., "Endpoints and Endpoint names: A Proposed", =
   [CHIAPPA]  Chiappa, J., "Endpoints and =
Endpoint names: A Proposed",

      
              =
1999,               1999,

      
              =
<http://mercury.lcs.mit.edu/~jnc/tech/endpoints.txt>. =
              =
<http://mercury.lcs.mit.edu/~jnc/tech/endpoints.txt>.

      
 =


      

      
   [I-D.farinacci-lisp-predictive-rlocs] =
   [I-D.ietf-lisp-eid-mobility]

      
              Farinacci, D. and P. Pillay-Esnault, "LISP Predictive               Portoles-Comeras, =
M., Ashtaputre, V., Moreno, V., Maino,

      
              RLOCs", =
draft-farinacci-lisp-predictive-rlocs-02 (work in =
              =
F., and D. Farinacci, "LISP L2/L3 EID Mobility Using a

      
              =
progress), May 2017.               Unified Control Plane", =
draft-ietf-lisp-eid-mobility-00
 =
              (work in progress), May =
2017.

      
 =


      
   =
[I-D.ietf-lisp-mn]    =
[I-D.ietf-lisp-mn]

      
              =
Farinacci, D., Lewis, D., Meyer, D., and C. White, "LISP =
              Farinacci, D., Lewis, D., Meyer, =
D., and C. White, "LISP

      

      
              =
Mobile Node", draft-ietf-lisp-mn-00 (work =
in progress),               Mobile =
Node", draft-ietf-lisp-mn-01 (work in =
progress),

      
              =
April 2017.               October =
2017.

      
 =


      
 =
   =
[I-D.ietf-lisp-predictive-rlocs]

      
 =
              =
Farinacci, D. and P. Pillay-Esnault, "LISP Predictive

      
 =
              RLOCs", =
draft-ietf-lisp-predictive-rlocs-00 (work in

      
 =
              =
progress), June 2017.

      
 =


      
   =
[I-D.ietf-lisp-signal-free-multicast]  =
  [I-D.ietf-lisp-signal-free-multicast]

      
              =
Moreno, V. and D. Farinacci, "Signal-Free LISP Multicast", =
              Moreno, V. and D. Farinacci, =
"Signal-Free LISP Multicast",

      
              =
draft-ietf-lisp-signal-free-multicast-06 (work in               draft-ietf-lisp-signal-free-multicast-06 =
(work in

      
              =
progress), August 2017.               =
progress), August 2017.

      
 =


      

      
 =
   [I-D.ietf-lisp-vpn]

      
 =
              Moreno, =
V. and D. Farinacci, "LISP Virtual Private

      
 =
              Networks =
(VPNs)", draft-ietf-lisp-vpn-00 (work in

      
 =
              =
progress), May 2017.

      
 =
                                               =
                          

      
   =
[I-D.meyer-loc-id-implications]    =
[I-D.meyer-loc-id-implications]

      
              =
Meyer, D. and D. Lewis, "Architectural Implications of               Meyer, D. and D. Lewis, "Architectural =
Implications of

      
              =
Locator/ID Separation", draft-meyer-loc-id-implications-01 =
              Locator/ID Separation", =
draft-meyer-loc-id-implications-01

      
              =
(work in progress), January 2009.      =
         (work in progress), January 2009.

      
 =


      

      
   [I-D.portoles-lisp-eid-mobility] =


      
              Portoles-Comeras, M., Ashtaputre, V., =
Moreno, V., Maino, 

      
              F., and D. Farinacci, "LISP L2/L3 EID =
Mobility Using a 

      
              Unified Control Plane", =
draft-portoles-lisp-eid- 

      
              mobility-02 (work in progress), April =
2017. 

      
                =
                                                          =


      
   [LISA96]   =
Lear, E., Tharp, D., Katinsky, J., and J. Coffin,    [LISA96]   Lear, E., Tharp, D., Katinsky, J., and J. =
Coffin,

      
              =
"Renumbering: Threat or Menace?", Usenix Tenth System               "Renumbering: Threat or Menace?", Usenix =
Tenth System

      
              =
Administration Conference (LISA 96), October 1996.               Administration Conference (LISA 96), =
October 1996.

      
 =


      
   =
[OPENLISP]    [OPENLISP]

      
              =
Iannone, L., Saucez, D., and O. Bonaventure, "OpenLISP               Iannone, L., Saucez, D., and O. =
Bonaventure, "OpenLISP

      
              =
Implementation Report", Work in Progress, July 2008.               Implementation Report", Work in Progress, =
July 2008.

      
 =


      
   [RFC1034]  =
Mockapetris, P., "Domain names - concepts and facilities", =
   [RFC1034]  Mockapetris, P., "Domain names - =
concepts and facilities",

      
              STD =
13, RFC 1034, DOI 10.17487/RFC1034, November 1987,               STD 13, RFC 1034, DOI 10.17487/RFC1034, =
November 1987,

      
              =
<https://www.rfc-editor.org/info/rfc1034>.               =
<https://www.rfc-editor.org/info/rfc1034>.

      
 =


      
   [RFC2784]  =
Farinacci, D., Li, T., Hanks, S., Meyer, D., and P.    [RFC2784]  Farinacci, D., Li, T., Hanks, S., Meyer, =
D., and P.

      
              =
Traina, "Generic Routing Encapsulation (GRE)", RFC 2784, =
              Traina, "Generic Routing =
Encapsulation (GRE)", RFC 2784,

      

      
              =
DOI 10.17487/RFC2784, March 2000, <https://www.rfc-               DOI 10.17487/RFC2784, March 2000,

      
              =
editor.org/info/rfc2784>.   =
            <https://www.rfc-editor.org/info/rfc2784>.

      
 =


      
   [RFC3056]  =
Carpenter, B. and K. Moore, "Connection of IPv6 Domains =
   [RFC3056]  Carpenter, B. and K. Moore, =
"Connection of IPv6 Domains

      
              via =
IPv4 Clouds", RFC 3056, DOI 10.17487/RFC3056, February               via IPv4 Clouds", RFC 3056, DOI =
10.17487/RFC3056, February

      
              =
2001, <https://www.rfc-editor.org/info/rfc3056>.               2001, =
<https://www.rfc-editor.org/info/rfc3056>.

      
 =


      
   [RFC3261]  =
Rosenberg, J., Schulzrinne, H., Camarillo, G., Johnston, =
   [RFC3261]  Rosenberg, J., Schulzrinne, H., =
Camarillo, G., Johnston,

      
              A., =
Peterson, J., Sparks, R., Handley, M., and E.               A., Peterson, J., Sparks, R., Handley, M., =
and E.

      
              =
Schooler, "SIP: Session Initiation Protocol", RFC 3261, =
              Schooler, "SIP: Session =
Initiation Protocol", RFC 3261,

      

      
              =
DOI 10.17487/RFC3261, June 2002, <https://www.rfc-               DOI 10.17487/RFC3261, June 2002,

      
              =
editor.org/info/rfc3261>.   =
            <https://www.rfc-editor.org/info/rfc3261>.

      
 =


      
   [RFC4107]  =
Bellovin, S. and R. Housley, "Guidelines for Cryptographic =
   [RFC4107]  Bellovin, S. and R. Housley, =
"Guidelines for Cryptographic

      
              Key =
Management", BCP 107, RFC 4107, DOI 10.17487/RFC4107,               Key Management", BCP 107, RFC 4107, DOI =
10.17487/RFC4107,

      
              =
June 2005, <https://www.rfc-editor.org/info/rfc4107>. =
              June 2005, =
<https://www.rfc-editor.org/info/rfc4107>.

      
 =


      
   [RFC4192]  =
Baker, F., Lear, E., and R. Droms, "Procedures for    [RFC4192]  Baker, F., Lear, E., and R. Droms, =
"Procedures for

      
              =
Renumbering an IPv6 Network without a Flag Day", RFC 4192, =
              Renumbering an IPv6 Network =
without a Flag Day", RFC 4192,

      

      
              =
DOI 10.17487/RFC4192, September 2005, <https://www.rfc-               DOI 10.17487/RFC4192, September =
2005,

      
              =
editor.org/info/rfc4192>.   =
            <https://www.rfc-editor.org/info/rfc4192>.

      
 =


      
   [RFC4866]  =
Arkko, J., Vogt, C., and W. Haddad, "Enhanced Route    [RFC4866]  Arkko, J., Vogt, C., and W. Haddad, =
"Enhanced Route

      
              =
Optimization for Mobile IPv6", RFC 4866,               Optimization for Mobile IPv6", RFC =
4866,

      

      
              =
DOI 10.17487/RFC4866, May 2007, <https://www.rfc-               DOI 10.17487/RFC4866, May 2007,

      
              =
editor.org/info/rfc4866>.   =
            <https://www.rfc-editor.org/info/rfc4866>.

      
 =


      
   [RFC4984]  =
Meyer, D., Ed., Zhang, L., Ed., and K. Fall, Ed., "Report =
   [RFC4984]  Meyer, D., Ed., Zhang, L., Ed., =
and K. Fall, Ed., "Report

      
              =
from the IAB Workshop on Routing and Addressing",               from the IAB Workshop on Routing and =
Addressing",

      
              RFC =
4984, DOI 10.17487/RFC4984, September 2007,               RFC 4984, DOI 10.17487/RFC4984, September =
2007,

      
              =
<https://www.rfc-editor.org/info/rfc4984>.               =
<https://www.rfc-editor.org/info/rfc4984>.

      
 =


      
   [RFC6480]  =
Lepinski, M. and S. Kent, "An Infrastructure to Support =
   [RFC6480]  Lepinski, M. and S. Kent, "An =
Infrastructure to Support

      
              =
Secure Internet Routing", RFC 6480, DOI 10.17487/RFC6480, =
              Secure Internet Routing", RFC =
6480, DOI 10.17487/RFC6480,

      
              =
February 2012, <https://www.rfc-editor.org/info/rfc6480>. =
              February 2012, =
<https://www.rfc-editor.org/info/rfc6480>.

      
 =


      
   [RFC6518]  =
Lebovitz, G. and M. Bhatia, "Keying and Authentication for =
   [RFC6518]  Lebovitz, G. and M. Bhatia, =
"Keying and Authentication for

      
              =
Routing Protocols (KARP) Design Guidelines", RFC 6518,               Routing Protocols (KARP) Design =
Guidelines", RFC 6518,

      

      
              =
DOI 10.17487/RFC6518, February 2012, <https://www.rfc-               DOI 10.17487/RFC6518, February =
2012,

      
              =
editor.org/info/rfc6518>.   =
            <https://www.rfc-editor.org/info/rfc6518>.

      
 =


      
   [RFC6831]  =
Farinacci, D., Meyer, D., Zwiebel, J., and S. Venaas, "The =
   [RFC6831]  Farinacci, D., Meyer, D., =
Zwiebel, J., and S. Venaas, "The

      
              =
Locator/ID Separation Protocol (LISP) for Multicast               Locator/ID Separation Protocol (LISP) for =
Multicast

      
              =
Environments", RFC 6831, DOI 10.17487/RFC6831, January               Environments", RFC 6831, DOI =
10.17487/RFC6831, January

      
              =
2013, <https://www.rfc-editor.org/info/rfc6831>.               2013, =
<https://www.rfc-editor.org/info/rfc6831>.

      
 =


      
   [RFC6832]  =
Lewis, D., Meyer, D., Farinacci, D., and V. Fuller,    [RFC6832]  Lewis, D., Meyer, D., Farinacci, D., and =
V. Fuller,

      
              =
"Interworking between Locator/ID Separation Protocol               "Interworking between Locator/ID =
Separation Protocol

      
              =
(LISP) and Non-LISP Sites", RFC 6832,  =
             (LISP) and Non-LISP Sites", RFC 6832,

      

      
              =
DOI 10.17487/RFC6832, January 2013, <https://www.rfc-               DOI 10.17487/RFC6832, January =
2013,

      
              =
editor.org/info/rfc6832>.   =
            <https://www.rfc-editor.org/info/rfc6832>.

      
 =


      
   [RFC6835]  =
Farinacci, D. and D. Meyer, "The Locator/ID Separation    [RFC6835]  Farinacci, D. and D. Meyer, "The =
Locator/ID Separation

      
              =
Protocol Internet Groper (LIG)", RFC 6835,               Protocol Internet Groper (LIG)", RFC =
6835,

      

      
              =
DOI 10.17487/RFC6835, January 2013, <https://www.rfc-               DOI 10.17487/RFC6835, January =
2013,

      
              =
editor.org/info/rfc6835>.   =
            <https://www.rfc-editor.org/info/rfc6835>.

      
 =


      
   [RFC6837]  =
Lear, E., "NERD: A Not-so-novel Endpoint ID (EID) to    [RFC6837]  Lear, E., "NERD: A Not-so-novel Endpoint =
ID (EID) to

      
              =
Routing Locator (RLOC) Database", RFC 6837,               Routing Locator (RLOC) Database", RFC =
6837,

      

      
              =
DOI 10.17487/RFC6837, January 2013, <https://www.rfc-               DOI 10.17487/RFC6837, January =
2013,

      
              =
editor.org/info/rfc6837>.   =
            <https://www.rfc-editor.org/info/rfc6837>.

      
 =


      
   [RFC6935]  =
Eubanks, M., Chimento, P., and M. Westerlund, "IPv6 and =
   [RFC6935]  Eubanks, M., Chimento, P., and M. =
Westerlund, "IPv6 and

      
              UDP =
Checksums for Tunneled Packets", RFC 6935,               UDP Checksums for Tunneled Packets", RFC =
6935,

      

      
              =
DOI 10.17487/RFC6935, April 2013, <https://www.rfc-               DOI 10.17487/RFC6935, April 2013,

      
              =
editor.org/info/rfc6935>.   =
            <https://www.rfc-editor.org/info/rfc6935>.

      
 =


      
   [RFC6936]  =
Fairhurst, G. and M. Westerlund, "Applicability Statement =
   [RFC6936]  Fairhurst, G. and M. Westerlund, =
"Applicability Statement

      
              for =
the Use of IPv6 UDP Datagrams with Zero Checksums",               for the Use of IPv6 UDP Datagrams with =
Zero Checksums",

      
              RFC =
6936, DOI 10.17487/RFC6936, April 2013, =
              RFC 6936, DOI 10.17487/RFC6936, April 2013,

      
              =
<https://www.rfc-editor.org/info/rfc6936>.               =
<https://www.rfc-editor.org/info/rfc6936>.

      
 =


      
   [RFC8060]  =
Farinacci, D., Meyer, D., and J. Snijders, "LISP Canonical =
   [RFC8060]  Farinacci, D., Meyer, D., and J. =
Snijders, "LISP Canonical

      
              =
Address Format (LCAF)", RFC 8060, DOI 10.17487/RFC8060, =
              Address Format (LCAF)", RFC 8060, =
DOI 10.17487/RFC8060,

      
              =
February 2017, <https://www.rfc-editor.org/info/rfc8060>. =
              February 2017, =
<https://www.rfc-editor.org/info/rfc8060>.

      
 =


      
 =


      
skipping =
to change at page 52, line =
5 =C2=B6 =
skipping to change at page 52, line =
5 =C2=B6

      
   The LISP =
working group would like to give a special thanks to Jari =
   The LISP working group would like to give a =
special thanks to Jari

      
   Arkko, the =
Internet Area AD at the time that the set of LISP    Arkko, the Internet Area AD at the time that the set =
of LISP

      
   documents were =
being prepared for IESG last call, and for his    documents were being prepared for IESG last call, and =
for his

      
   meticulous =
reviews and detailed commentaries on the 7 working group =
   meticulous reviews and detailed commentaries =
on the 7 working group

      
   last call =
documents progressing toward standards-track RFCs.    last call documents progressing toward =
standards-track RFCs.

      
 =


      
Appendix B.  =
Document Change Log Appendix B.  =
Document Change Log

      
 =


      
   [RFC Editor: =
Please delete this section on publication as RFC.]    [RFC Editor: Please delete this section on =
publication as RFC.]

      
 =


      

      
B.1.  Changes =
to draft-ietf-lisp-rfc6830bis-04 B.1. =
 Changes to draft-ietf-lisp-rfc6830bis-06

      
 =


      
 =
   o  Posted October =
2017.

      
 =


      
 =
   o  Put RTR =
definition before it is used.

      
 =


      
 =
   o  Rename references =
that are now working group drafts.

      
 =


      
 =
   o  Remove "EIDs MUST =
NOT be used as used by a host to refer to other

      
 =
      hosts.  Note that =
EID blocks MAY LISP RLOCs".

      
 =


      
 =
   o  Indicate what =
address-family can appear in data packets.

      
 =


      
 =
   o  ETRs may, rather =
than will, be the ones to send Map-Replies.

      
 =


      
 =
   o  Recommend, rather =
than mandate, max encapsulation headers to 2.

      
 =


      
 =
   o  Reference VPN =
draft when introducing Instance-ID.

      
 =


      
 =
   o  Indicate that =
SMRs can be sent when ITR/ETR are in the same node.

      
 =


      
 =
   o  Clarify when =
private addreses can be used.

      
 =


      
 =
B.2.  Changes to =
draft-ietf-lisp-rfc6830bis-05

      
 =


      
 =
   o  Posted August =
2017.

      
 =


      
 =
   o  Make it clear =
that a Reencapsulating Tunnel Router is an RTR.

      
 =


      
 =
B.3.  Changes to =
draft-ietf-lisp-rfc6830bis-04

      
 =


      
   o  Posted July =
2017.    o  Posted July 2017.

      
 =


      
   o  Changed =
reference of IPv6 RFC2460 to RFC8200.  =
  o  Changed reference of IPv6 RFC2460 to RFC8200.

      
 =


      
   o  Indicate =
that the applicability statement for UDP zero checksums =
   o  Indicate that the applicability statement =
for UDP zero checksums

      
      over IPv6 =
adheres to RFC6936.       over IPv6 =
adheres to RFC6936.

      
 =


      

      
B.2.  Changes to =
draft-ietf-lisp-rfc6830bis-03 B.4.  Changes to =
draft-ietf-lisp-rfc6830bis-03

      
 =


      
   o  Posted May =
2017.    o  Posted May 2017.

      
 =


      
   o  Move the =
control-plane related codepoints in the IANA    o  Move the control-plane related codepoints in the =
IANA

      
      =
Considerations section to RFC6833bis.  =
     Considerations section to RFC6833bis.

      
 =


      

      
B.3.  Changes to =
draft-ietf-lisp-rfc6830bis-02 B.5.  Changes to =
draft-ietf-lisp-rfc6830bis-02

      
 =


      
   o  Posted =
April 2017.    o  Posted April =
2017.

      
 =


      
   o  Reflect =
some editorial comments from Damien Sausez.    o  Reflect some editorial comments from Damien =
Sausez.

      
 =


      

      
B.4.  Changes to =
draft-ietf-lisp-rfc6830bis-01 B.6.  Changes to =
draft-ietf-lisp-rfc6830bis-01

      
 =


      
   o  Posted =
March 2017.    o  Posted March =
2017.

      
 =


      
   o  Include =
references to new RFCs published.    o =
 Include references to new RFCs published.

      
 =


      
   o  Change =
references from RFC6833 to RFC6833bis.  =
  o  Change references from RFC6833 to RFC6833bis.

      
 =


      
   o  Clarified =
LCAF text in the IANA section.    o  =
Clarified LCAF text in the IANA section.

      
 =


      
   o  Remove =
references to "experimental".    o  =
Remove references to "experimental".

      
 =


      

      
B.5.  Changes to =
draft-ietf-lisp-rfc6830bis-00 B.7.  Changes to =
draft-ietf-lisp-rfc6830bis-00

      
 =


      
   o  Posted =
December 2016.    o  Posted December =
2016.

      
 =


      
   o  Created =
working group document from draft-farinacci-lisp    o  Created working group document from =
draft-farinacci-lisp

      
      -rfc6830-00 =
individual submission.  No other changes made.       -rfc6830-00 individual submission.  No other =
changes made.

      
 =


      
Authors' =
Addresses Authors' Addresses

      

      
 =
                        =
                                                 

      
   Dino =
Farinacci    Dino Farinacci

      
   Cisco =
Systems    Cisco Systems

      
   Tasman =
Drive    Tasman Drive

      
   San Jose, CA  =
95134    San Jose, CA  95134

      
   USA =
   USA

      
 =


      
   EMail: =
farinacci@gmail.com    EMail: =
farinacci@gmail.com

      
 =


      
   Vince =
Fuller    Vince Fuller

      
   Cisco =
Systems    Cisco Systems


     
 

     
 End of changes. 56 change blocks. 

     
132 lines changed or =
deleted 171 lines changed or =
added

     

This =
html diff was produced by rfcdiff 1.46. The latest version is available =
from http://tools.ietf.org/to=
ols/rfcdiff/ 

   

  =20
  =20
=

--Apple-Mail=_1B55D487-E21C-4A36-830F-3D3BAD410404
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
	charset=us-ascii







--Apple-Mail=_1B55D487-E21C-4A36-830F-3D3BAD410404--


From nobody Tue Oct 24 20:01:31 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D0BC713ACA2 for ; Tue, 24 Oct 2017 20:01:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level: 
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 30EiNjDgxoNp for ; Tue, 24 Oct 2017 20:01:28 -0700 (PDT)
Received: from mail-io0-x22b.google.com (mail-io0-x22b.google.com [IPv6:2607:f8b0:4001:c06::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E1BA21397F9 for ; Tue, 24 Oct 2017 20:01:27 -0700 (PDT)
Received: by mail-io0-x22b.google.com with SMTP id n137so26126453iod.6 for ; Tue, 24 Oct 2017 20:01:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=0bTMbTIlews5K3wxi/ylFENgJFO0QyF3bbdX8sm2HYI=; b=QBReFRLY/HGAyMlaee2VvPxjzSycdo6dGLiPMkvy70D//GdcOx2zNhvx63kSipbSfH XHMREemKsdDSXliO11YCH70aOajx/nmz0Ik9jQ4ErSNv9E9HPI87gTdtModAqb0vjGU6 Pf1ITul4h2u16nYgcDfczB172DMsE8cXVfViKKuF4XjVvwJPNlvYy2jvl7WUwR2OB9qV +NGscMggjjvBiqQcR5lYswbI/j5XZ+KFjMq1l45VqcCR8xddYZ/KNNSA81FRoGxMbt+L yYQOxyG1VCWzqwNjwN07qeYMjxBoZR3HRbqZDqI/PEFe7lffUSQZgTCAN0K54bPyzpsV n19g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=0bTMbTIlews5K3wxi/ylFENgJFO0QyF3bbdX8sm2HYI=; b=ZSvDq90LNo+SerhgUEHe7Ye1ivrE1t5wWie4ARzIbX4lE91w0rdPBDVcQPTggy8dvd tOzHUervQdN7YoksbkYSetitOSgfz1dZmQhQqZw0EihCEJN9I3da3YRgu6HO7QomKawi 1N76uVLQRrE/XIyRcR/SZDBHADxnMIzcYDNf8YTBWZqrdM3ulAnFPg7T5uAAW9YCBGU3 82yLGSjeEY/2tjKmdLTA5d+GpfoQbG/KX++WfdlSP5PtADh4p6fmtfjV3/Mp2BHYusBA wtObvqs5MJQc+xRwgoqwSkMkHhYid96nL2T7ZehFRALm71gcvi9XEylwN6lGlNfT7zlH yvQA==
X-Gm-Message-State: AMCzsaUtymKG5N+bekAzUT3oMbrZUSzox9N2W7U7zwct1Vovdd+LtbzA uyNJrtA3sJUItkCmBwFaveTRu43wQZusIIwKxrw=
X-Google-Smtp-Source: ABhQp+QTBIZVcYmD6hjLnAWS41cMf1IYQMfABlDhnB5qN0Vysnly6t1Ucsn3zeCuC2QpsnU5ry7QUU0MfiqR9MWkQ9U=
X-Received: by 10.107.31.143 with SMTP id f137mr15093535iof.86.1508900486957;  Tue, 24 Oct 2017 20:01:26 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.107.190.131 with HTTP; Tue, 24 Oct 2017 20:01:06 -0700 (PDT)
In-Reply-To: <3E61C832-97B2-4776-B375-9A473D600A61@gmail.com>
References:  <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com>  <1AAAC5C3-27FA-47A9-819F-42B2357E3A08@gmail.com>  <3E61C832-97B2-4776-B375-9A473D600A61@gmail.com>
From: Alberto Rodriguez-Natal 
Date: Tue, 24 Oct 2017 20:01:06 -0700
Message-ID: 
To: Dino Farinacci 
Cc: "lisp@ietf.org list" 
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Wed, 25 Oct 2017 03:01:30 -0000

Thanks Dino. Inline.

On Tue, Oct 24, 2017 at 4:59 PM, Dino Farinacci  wrote=
:
> New rfcdiff.html file enclosed.
>
>>>>>> The same database mapping entries MUST be configured on all ETRs for=
 a
>>>>>> given site.  In a steady state, the EID-Prefixes for the site and th=
e
>>>>>> Locator-Set for each EID-Prefix MUST be the same on all ETRs.
>>>>>>
>>>>>> [AR] Is this still the case when overlapping prefixes and/or
>>>>>> merge-semantics are in place?
>>>>>
>>>>> Response (3).
>>>>>
>>>>> Well, yes. Let me answer with an example. Say there are two xTRs A an=
d B and they are connecting the LISP site for 10.0.0.0/8. Say 10.1.0.0/16 m=
oves out to another LISP site, a LISP site that is multihomed with xTRs A=
=E2=80=99 and B=E2=80=99. Both A=E2=80=99 and B=E2=80=99 need to be configu=
red (i.e. in this case discover) that the /16 moved into their site.
>>>>
>>>> [AR2] My question was more with regard to the Locator-Set. Let's say
>>>> that two different ETRs serving the same site are registering only
>>>> their own RLOCs and are leveraging on the merge-semantics capability
>>>
>>> There was a decision back when RFC6830 was published to not support thi=
s. And that we would address it in the NAT-traversal document where the use=
-case required this behavior.
>>
>> [AR3] But this is used today independently of NAT-traversal. It is not
>> uncommon to configure the ETRs with just the interfaces, not the
>> addresses, that should be used for RLOC connectivity. These interfaces
>> will then get dynamically assigned RLOC addresses (e.g. via DHCP) that
>> the ETRs will register to the Map-Server. The deployment is leveraging
>> on the merge capability of the Map-Server rather than on configuring
>> all the RLOC addresses in all the ETRs (since the addresses are
>> unknown at the time of configuration).
>
> So are you suggesting to just remove the paragraph?
>
[AR4] Removing the conflicting text works. Alternatively, we can
update it to reflect actual LISP usage.

>>
>>>>>> When multiple organizations inside of a LISP site are using private
>>>>>> addresses [RFC1918] as EID-Prefixes, their address spaces MUST remai=
n
>>>>>> segregated due to possible address duplication.  An Instance ID in t=
he
>>>>>> address encoding can aid in making the entire AFI-based address
>>>>>> unique.
>>>>>>
>>>>>> [AR] This text is used to introduce the concept of Instance-IDs. I
>>>>>> don't think we should mention private addresses here. Instance ID ma=
y
>>>>>> be used even when not private addresses are in place or for purposes
>>>>>> other than possible address duplication. If anything, the private
>>>>>> addresses duplication should be an example only.
>>>>>
>>>>> Response (1).
>>>>>
>>>>> Making a reference to private addresses is actually very important. T=
here are a lot of container and VMs within cloud provider deployments that =
use it. It is probably the most popular use-case of LISP.
>>>>
>>>> [AR2] My intention was to state that we should not tie Instance-IDs to
>>>> the address duplication problem of private addresses. Indeed,
>>>> preventing address duplication is one of the major use-cases for
>>>> Instance-IDs but they are applicable beyond that particular use-case.
>>>
>>> I don=E2=80=99t follow your point, the fact you use EIDs within an IID =
means the EIDs are private to that IID. Regardless if they are RFC1918 addr=
esses or registry allocated addresses.
>>
>> [AR3] I would suggest the following text as a replacement for the
>> current paragraph. Feel free to edit as you see fit.
>>
>> "There are several cases where segregation is needed at the EID level.
>> For instance, this is the case for deployments containing overlapping
>> addresses, traffic isolation policies or multi-tenant virtualization.
>> For these and others scenarios where segregation is needed, Instance
>> IDs can be used.=E2=80=9D
>
> I would like to hear if the working group agrees to add this text. If by =
then end of the week I hear no objections or changes, I will include it.
>
[AR4] Sounds good.

>>
>>>>>> An ITR SHOULD only set the E-bit in an encapsulated data packet when
>>>>>> it knows the ETR is
>>>>>> enabled for echo-noncing.  This is conveyed by the E-bit in the
>>>>>> Map-Reply message.
>>>>>>
>>>>>> [AR] There should be probably a mention to merge-semantics and/or
>>>>>> proxy-reply here.
>>>>>
>>>>> Response (3).
>>>>>
>>>>> Why? Merge semantics only apply to Map-Registers. Not the Map-Reply a=
n ETR sends to an ITR. That is when it conveys it can support echo-noncing.
>>>>
>>>> [AR2] My point was that merge-semantics and proxy-reply may affect the
>>>> E-bit process. For instance, if the MS is merging different
>>>> Map-Registers, (some with the E-bit set, some without), which value
>>>> for the E-bit should the MS return in a Map-Reply?
>>>
>>> It doesn=E2=80=99t because the Map-Server maintains the original indivi=
dual Map-Registers as well. And RLOC-probing causes the E-bit to be specifi=
ed in the Map-Reply by the ETR.
>>
>> [AR3] How about we also include this sentence then?
>>
>> "An ITR can always verify if an ETR supports echo-noncing via sending
>> an RLOC-probe to trigger a Map-Reply.=E2=80=9D
>
> How about changing the sentence to:
>
> "This is conveyed by the E-bit in the RLOC-probe Map-Reply message.=E2=80=
=9D
>
[AR4] The new wording looks good, thanks.

Alberto

> The ITR cannot have an option, it must send a RLOC-probe because if a Map=
-Reply has no E-bit, it would never use echo-noncing.
>
> Dino
>
>
>
>
>
>
>
>


From nobody Tue Oct 24 22:55:02 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 80C1F13B0F4 for ; Tue, 24 Oct 2017 22:55:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KP9sBZnDQWps for ; Tue, 24 Oct 2017 22:54:58 -0700 (PDT)
Received: from mail.core-networks.de (mail.core-networks.de [IPv6:2001:1bc0:d::4:9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2901113B11B for ; Tue, 24 Oct 2017 22:54:57 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mail.core-networks.de id 1e7EeS-00065H-P6 with ESMTPSA (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) for lisp@ietf.org; Wed, 25 Oct 2017 07:54:54 +0200
To: lisp@ietf.org
References:  <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com>  <60376D83-3DBD-4490-BEE8-F82F155A0FBC@gigix.net> <1781FA8C-B6E7-481A-AE4D-7F654AE87573@gmail.com>
From: "Rene 'Renne' Bartsch, B.Sc. Informatics" 
Message-ID: 
Date: Wed, 25 Oct 2017 07:54:52 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0
MIME-Version: 1.0
In-Reply-To: <1781FA8C-B6E7-481A-AE4D-7F654AE87573@gmail.com>
Content-Type: multipart/alternative; boundary="------------08467BACB0DDC9E41A0EEEC5"
Content-Language: de-DE
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Wed, 25 Oct 2017 05:55:01 -0000

This is a multi-part message in MIME format.
--------------08467BACB0DDC9E41A0EEEC5
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit

I'm not that happy with

"As the architecture is realized, if a given bit string is both an RLOC 
and an EID, it must refer to the same entity in both cases".


In a MESH-architecture the EID of a mobile-node can be the RLOC of a 
neighbour mobile-node.



Regards,

Renne



Am 23.10.2017 um 19:55 schrieb Dino Farinacci:
>> Just stating my personal opinion here…
> No prob. Thanks for that. See udpate rfcdiff.html file attached. I will send another email with the open items, so others can comment.
>
>>>> Working group, what do you think the correct wording should be. I suggest:
>>>>
>>>> o “routable”
>>>> o “routable in the underlay”
>>>> o “routable in the RLOC space"
>>> [AR2] My personal preference is "routable in the underlay", but any of
>>> the three works for me.
>> I would prefer “routable in the RLOC space” since this is what is needed.
> Done.
>
>>>>> The EID-to-RLOC map-cache is a short-lived, on-demand table in an ITR that store
>>>>>
>>>>> [AR] We probably should remove the note on the map-cache being
>>>>> “short-lived” since that may not be the case in some deployments.
>>>> Response (3).
>>>>
>>>> But it is in other deployments if you don’t want to use any of the update mapping techniques, like map-versioning, SMRs, pubsub, and Map-Notify messaging.
>>> [AR2] I would suggest that at least we rephrase the sentence to say
>>> something like: "The EID-to-RLOC map-cache is a (generally
>>> short-lived) on-demand table in an ITR that stores…"
>> I agree with AR, we do not need to state how long the mappings are kept in a cache, this is a management/implementation issue.
> Done.
>
>>> [AR2] My question was more with regard to the Locator-Set. Let's say
>>> that two different ETRs serving the same site are registering only
>>> their own RLOCs and are leveraging on the merge-semantics capability
>>> of the Map-Server to build a unified mapping. These two ETRs are in a
>>> steady state but their Locator-Set is different for the same
>>> EID-Prefix.
>>>>> Address Family Identifier (AFI):  AFI is a term used to describe an
>>>>> address encoding in a packet.  An address family currently pertains to
>>>>> an IPv4 or IPv6 address.
>>>>>
>>>>> [AR] Although in some points the document mentions LCAF or other
>>>>> address types for EID/RLOC, in most of the cases it assumes only
>>>>> IPv4/v6. I think we should update the document to be more flexible and
>>>>> relax those IP-only mentions (specially for EID cases).
>>>> Response (1).
>>>>
>>>> I changed to “An address family that pertains to the data-plane, can be an IPv4, IPv6, or MAC address.”
>> Why you do not simply state “An address family that pertains to the data-plane.” and that’s it.
> Sure, changed.
>
>>>> Response (1).
>>>>
>>>> Making a reference to private addresses is actually very important. There are a lot of container and VMs within cloud provider deployments that use it. It is probably the most popular use-case of LISP.
>>> [AR2] My intention was to state that we should not tie Instance-IDs to
>>> the address duplication problem of private addresses. Indeed,
>>> preventing address duplication is one of the major use-cases for
>>> Instance-IDs but they are applicable beyond that particular use-case.
>> I agree with AR. private addressing is a use case not the reason. Text should be more generic.
> Then can one of you two suggest text to insert here?
>
>>
>>>> I made a reference to the VPN spec which is now a WG draft.
>>>>
>>>>> An ITR SHOULD only set the E-bit in an encapsulated data packet when
>>>>> it knows the ETR is
>>>>> enabled for echo-noncing.  This is conveyed by the E-bit in the
>>>>> Map-Reply message.
>>>>>
>>>>> [AR] There should be probably a mention to merge-semantics and/or
>>>>> proxy-reply here.
>>>> Response (3).
>>>>
>>>> Why? Merge semantics only apply to Map-Registers. Not the Map-Reply an ETR sends to an ITR. That is when it conveys it can support echo-noncing.
>>> [AR2] My point was that merge-semantics and proxy-reply may affect the
>>> E-bit process. For instance, if the MS is merging different
>>> Map-Registers, (some with the E-bit set, some without), which value
>>> for the E-bit should the MS return in a Map-Reply?
>>>>> Since the LISP architecture uses a caching scheme to retrieve and
>>>>> store EID-to-RLOC mappings, the only way an ITR can get a more
>>>>> up-to-date mapping is to re-request the mapping.
>> wouldn’t be simpler to change the sentence in “….the only way an ITR can get a more
>> recent mapping is to update the mapping by any means available in the control plane.”
>>
>> This should be generic enough to cover the pub/sub case.
> That is not what the comment is about. The comment is related to how an ETR tells an ITR that it is echo-nonce capable. And if multiple ETRs register the same EID-prefix with each of their RLOCs, a proxy Map-Reply has a single E-bit. So the Map-Server cannot set the bit if one can support echo-noncing and the other cannot.
>
>>>> Response (1).
>>>>
>>>> Added text to support your suggestion.
>>>>
>>>>> It is important to note that a locator address in any LISP control
>>>>> message MUST be a globally routable address and therefore SHOULD NOT
>>>>> contain [RFC1918] addresses.
>>>>>
>>>>> [AR] The Internet use-case is less relevant today, therefore I’d
>>>>> suggest removing the sentence regarding RFC1918.
>>>> Response (1).
>>>>
>>>> I think we should add that there ARE allowed if run in a local environment.
>>>>
>> I agree with AR. Sentence should be removed. It is consistent with the very first comment about RLOCs being routable in the RLOC space.
>> If your RLOC space is the Internet then you cannot use RFC1918 addresses.
> Check the current text to see if the change suffices.
>
> Thanks,
> Dino
>
>
>
>
>
>
>
> _______________________________________________
> lisp mailing list
> lisp@ietf.org
> https://www.ietf.org/mailman/listinfo/lisp


--------------08467BACB0DDC9E41A0EEEC5
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit


  
    
  
  
    
I'm not that happy with

    
"As the architecture is realized, if a given bit string is both
      an RLOC and an EID, it must refer to the same entity in both
      cases".

    


    

    
In a MESH-architecture the EID of a mobile-node can be the RLOC
      of a neighbour mobile-node.

    

    

    

    Regards,

    

    Renne

    

    

    

    
Am 23.10.2017 um 19:55 schrieb Dino
      Farinacci:

    

    

      

        
Just stating my personal opinion here…


      

      
No prob. Thanks for that. See udpate rfcdiff.html file attached. I will send another email with the open items, so others can comment.



      

        

          

            
Working group, what do you think the correct wording should be. I suggest:

o “routable”
o “routable in the underlay”
o “routable in the RLOC space"


          

          
[AR2] My personal preference is "routable in the underlay", but any of
the three works for me.


        

        
I would prefer “routable in the RLOC space” since this is what is needed. 


      

      
Done.



      

        

        

          

            

            

              
The EID-to-RLOC map-cache is a short-lived, on-demand table in an ITR that store

[AR] We probably should remove the note on the map-cache being
“short-lived” since that may not be the case in some deployments.


            

            
Response (3).

But it is in other deployments if you don’t want to use any of the update mapping techniques, like map-versioning, SMRs, pubsub, and Map-Notify messaging.


          

          
[AR2] I would suggest that at least we rephrase the sentence to say
something like: "The EID-to-RLOC map-cache is a (generally
short-lived) on-demand table in an ITR that stores…"


        

        
I agree with AR, we do not need to state how long the mappings are kept in a cache, this is a management/implementation issue.


      

      
Done.



      

        

          
[AR2] My question was more with regard to the Locator-Set. Let's say
that two different ETRs serving the same site are registering only
their own RLOCs and are leveraging on the merge-semantics capability
of the Map-Server to build a unified mapping. These two ETRs are in a
steady state but their Locator-Set is different for the same
EID-Prefix.


          

            

            

              
Address Family Identifier (AFI):  AFI is a term used to describe an
address encoding in a packet.  An address family currently pertains to
an IPv4 or IPv6 address.

[AR] Although in some points the document mentions LCAF or other
address types for EID/RLOC, in most of the cases it assumes only
IPv4/v6. I think we should update the document to be more flexible and
relax those IP-only mentions (specially for EID cases).


            

            
Response (1).

I changed to “An address family that pertains to the data-plane, can be an IPv4, IPv6, or MAC address.”


          

        

        
Why you do not simply state “An address family that pertains to the data-plane.” and that’s it.


      

      
Sure, changed.



      

        

          

            
Response (1).

Making a reference to private addresses is actually very important. There are a lot of container and VMs within cloud provider deployments that use it. It is probably the most popular use-case of LISP.


          

          
[AR2] My intention was to state that we should not tie Instance-IDs to
the address duplication problem of private addresses. Indeed,
preventing address duplication is one of the major use-cases for
Instance-IDs but they are applicable beyond that particular use-case.


        

        
I agree with AR. private addressing is a use case not the reason. Text should be more generic. 


      

      
Then can one of you two suggest text to insert here?



      

        



        

          

            
I made a reference to the VPN spec which is now a WG draft.



            

              
An ITR SHOULD only set the E-bit in an encapsulated data packet when
it knows the ETR is
enabled for echo-noncing.  This is conveyed by the E-bit in the
Map-Reply message.

[AR] There should be probably a mention to merge-semantics and/or
proxy-reply here.


            

            
Response (3).

Why? Merge semantics only apply to Map-Registers. Not the Map-Reply an ETR sends to an ITR. That is when it conveys it can support echo-noncing.


          

          
[AR2] My point was that merge-semantics and proxy-reply may affect the
E-bit process. For instance, if the MS is merging different
Map-Registers, (some with the E-bit set, some without), which value
for the E-bit should the MS return in a Map-Reply?


          

            

            

              
Since the LISP architecture uses a caching scheme to retrieve and
store EID-to-RLOC mappings, the only way an ITR can get a more
up-to-date mapping is to re-request the mapping.


            

          

        

        
wouldn’t be simpler to change the sentence in “….the only way an ITR can get a more
recent mapping is to update the mapping by any means available in the control plane.”

This should be generic enough to cover the pub/sub case.


      

      
That is not what the comment is about. The comment is related to how an ETR tells an ITR that it is echo-nonce capable. And if multiple ETRs register the same EID-prefix with each of their RLOCs, a proxy Map-Reply has a single E-bit. So the Map-Server cannot set the bit if one can support echo-noncing and the other cannot.



      

        

          

            
Response (1).

Added text to support your suggestion.



            

              
It is important to note that a locator address in any LISP control
message MUST be a globally routable address and therefore SHOULD NOT
contain [RFC1918] addresses.

[AR] The Internet use-case is less relevant today, therefore I’d
suggest removing the sentence regarding RFC1918.


            

            
Response (1).

I think we should add that there ARE allowed if run in a local environment.



          

        

        
I agree with AR. Sentence should be removed. It is consistent with the very first comment about RLOCs being routable in the RLOC space.
If your RLOC space is the Internet then you cannot use RFC1918 addresses.


      

      
Check the current text to see if the change suffices.

Thanks,
Dino



      

      

      

      




      

      

      

      
_______________________________________________
lisp mailing list
lisp@ietf.org
https://www.ietf.org/mailman/listinfo/lisp


    

    

  


--------------08467BACB0DDC9E41A0EEEC5--


From nobody Wed Oct 25 00:41:14 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9099113A5A3 for ; Wed, 25 Oct 2017 00:41:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TLeXwhaLJ_E9 for ; Wed, 25 Oct 2017 00:41:10 -0700 (PDT)
Received: from mail.core-networks.de (mail.core-networks.de [IPv6:2001:1bc0:d::4:9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E5C89139950 for ; Wed, 25 Oct 2017 00:41:09 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mail.core-networks.de id 1e7GJG-0001iN-QY with ESMTPSA (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) for lisp@ietf.org; Wed, 25 Oct 2017 09:41:08 +0200
To: IETF 
From: "Rene 'Renne' Bartsch, B.Sc. Informatics" 
Message-ID: 
Date: Wed, 25 Oct 2017 09:41:06 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Content-Language: de-DE
Archived-At: 
Subject: [lisp] Comments on draft-ietf-lisp-eid-anonymity-00
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Wed, 25 Oct 2017 07:41:12 -0000

Hi,

'draft-ietf-lisp-eid-anonymity-00' does not mention any authentication 
of the LISP-nodes/xTRs with the map-servers.
That way a Man-In-The-Middle-Attack can be run by sending bogus 
map-requests with the MITM-attacker's RLOCs.

I suggest to allow only CGA-addresses.

Benefits:

1. Privacy:         Dynamic eEIDs by re-keying
2. Reachability: Static      eEIDs by static key-pairs allow direct 
connections without third-party services relaying (e.g. Facebook ;-) )
3. Security:

    1. Signed map-requests
    2. eEID-based authentication/authorization with static keypairs
    facilitates administration
        (e.g. road-warrior authentication/authorization can be done with
    a firewall by eEID filtering
        without any upper-layer authentication/authorization like
    usernames/passwords involved)

Privacy/security considerations:

    1. Don't use dynamic and static eEIDs on the same RLOC!
    2. Always use payload encryption to avoid deanonymisation by
    Deep-Packet-Inspection


Regards,

Renne


From nobody Wed Oct 25 08:13:55 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2922513F3F4; Wed, 25 Oct 2017 08:13:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.701
X-Spam-Level: 
X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=joelhalpern.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ue3zxxavTtdF; Wed, 25 Oct 2017 08:13:47 -0700 (PDT)
Received: from maila2.tigertech.net (maila2.tigertech.net [208.80.4.152]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A939F13F3D0; Wed, 25 Oct 2017 08:13:47 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by maila2.tigertech.net (Postfix) with ESMTP id 87E9D460160; Wed, 25 Oct 2017 08:13:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=joelhalpern.com; s=1.tigertech; t=1508944427; bh=MRs/LV3BcnotPN+9F219xsr+m6bkbw0jA3rNzmHjDl4=; h=Subject:To:Cc:References:From:Date:In-Reply-To:From; b=AM0YuCsAXPdjqIE51gW+R+bPEAHqoP7asqoPIlbmae9Up0QqoVW0ZVDz9ZJ8mWwN2 4cBPuPZWibdYmZyPWTxBQV+Io67BdpuzCr9poIzV2nplaW0FW4FaQ8ovS/S0eA568/ ZUuFixyNzG8MgujQQJjoF8XVfxDDcCrOTACvtsqQ=
X-Virus-Scanned: Debian amavisd-new at maila2.tigertech.net
Received: from Joels-MacBook-Pro.local (unknown [97.65.134.196]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by maila2.tigertech.net (Postfix) with ESMTPSA id A147F2407FB; Wed, 25 Oct 2017 08:13:46 -0700 (PDT)
To: Sharon , Padma Pillay-Esnault 
Cc: ideas@ietf.org, NVO3 , LISP mailing list list , routing-discussion@ietf.org
References:  
From: "Joel M. Halpern" 
Message-ID: 
Date: Wed, 25 Oct 2017 11:13:45 -0400
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.4.0
MIME-Version: 1.0
In-Reply-To: 
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: 
Subject: Re: [lisp] IDEAS @IETF98 Minutes
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Wed, 25 Oct 2017 15:13:54 -0000

Regarding the second of your two points, I am not following you:

On 10/11/17 8:00 PM, Sharon wrote:
> Discussed these 2 ID networking items with Albert and others, perhaps 
> this is a good thread:
> 
...
> 
> 2. Lisp-Lambda -
> A serverless (or virtual-appliance-less) alternative to service function 
> chaining which is hard to scale and dev-ops. Its done by mapping flows 
> at the ITR, ETR, or STR (segment) to queues, and using the mapping to 
> invoke the (cached) function on the flow queue packets rather then hair 
> pining the packets in and out of function virtual appliances. Saves 
> nic-ram-nic-ram... costly lifting.
> 

I am not asking why or how one can use LISP to direct traffic.  I 
understand that.
Rather, the description of service function chaining is veyr confusing.
1) One of the points of SFC is to direct packets to virtual service 
functions.  We are not mandating virtual service functions, but rather 
enabling their use when operators want to use them.  A technique that 
avoids such direction would seem to prevent such usage, defeating the point.
2) NSH (and more generally SFC) can be used to direct traffic on paths 
that do not happen to touch any service functions.  If the service 
function path goes through a sequence of service function forwarders, 
but does not actually visit any service functions, nothing is violated.

So while I have no problem with using LISP for chaining (either using 
LISP mapping to drive NSH SFPs or using LISP multi-hope technology for 
the data plane) I find the explanation you provided avoce confusing.

Yours,
Joel


From nobody Wed Oct 25 14:51:35 2017
Return-Path: 
X-Original-To: lisp@ietf.org
Delivered-To: lisp@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 381B9139561; Wed, 25 Oct 2017 14:51:33 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: 
Cc: lisp@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.63.2
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <150896829319.4858.12748759887214309620@ietfa.amsl.com>
Date: Wed, 25 Oct 2017 14:51:33 -0700
Archived-At: 
Subject: [lisp] I-D Action: draft-ietf-lisp-sec-14.txt
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Wed, 25 Oct 2017 21:51:33 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Locator/ID Separation Protocol WG of the IETF.

        Title           : LISP-Security (LISP-SEC)
        Authors         : Fabio Maino
                          Vina Ermagan
                          Albert Cabellos
                          Damien Saucez
	Filename        : draft-ietf-lisp-sec-14.txt
	Pages           : 23
	Date            : 2017-10-25

Abstract:
   This memo specifies LISP-SEC, a set of security mechanisms that
   provides origin authentication, integrity and anti-replay protection
   to LISP's EID-to-RLOC mapping data conveyed via mapping lookup
   process.  LISP-SEC also enables verification of authorization on EID-
   prefix claims in Map-Reply messages.



The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-lisp-sec/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-lisp-sec-14
https://datatracker.ietf.org/doc/html/draft-ietf-lisp-sec-14

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-lisp-sec-14


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From nobody Thu Oct 26 02:18:52 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EC5CB13F4F8 for ; Thu, 26 Oct 2017 02:18:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gigix-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YVWcEXmHmlHc for ; Thu, 26 Oct 2017 02:18:49 -0700 (PDT)
Received: from mail-wm0-x230.google.com (mail-wm0-x230.google.com [IPv6:2a00:1450:400c:c09::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6E7A713F4F7 for ; Thu, 26 Oct 2017 02:18:49 -0700 (PDT)
Received: by mail-wm0-x230.google.com with SMTP id s66so1502471wmf.5 for ; Thu, 26 Oct 2017 02:18:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gigix-net.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=w6C8EIOqzNDLQ4ao0miOcYMjk9bf1xGESQoiPCFa96I=; b=CcPXfoaQmzegQglUNNf6+wH3XVmVcjTdIyrKqv8Hbhq5uFG2ZuIocsiBkC4JGRzNb+ SzRStPuGO/cCoWuSOwmOnVfVWHwByADZq84UaRu13IJ53Iq9r4hIFXFXTiCRThygYuZI PjETFDMH10KS9zkzX/tD7fmiSymagmF/xFAHxrVr3SC1HhzY9hzzRh5Fi8dAlyMKG8qy 9kfJYa68HZvjivZhjYWOo3L/B3eZZUH+/VriB3mtCNRnFIKGtpHqKv1Id7cb6bE5AhtT fubv1LctRTggxFIjYyhj0Ssth0aGWPD7LACSz+uWRzBsQ8RC4rxL6SqGewUzGmtZe9cn rccg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=w6C8EIOqzNDLQ4ao0miOcYMjk9bf1xGESQoiPCFa96I=; b=LSxPnPyxoH8RvrvBOoKNt9uOOdx76UTNo14sQ/CQidKZE01G40aBFoJHhgu3iLZnBm ZnN94URDTN4TkHvU3UNgrKY4AFRDawCEKawEvaBMRRAR8mQxXQw66BDnlKr0NJmoRqmS xU05P7+O6WD3D52SPdsWYa3Q1QQFluB7VR5Cuy3gTjPKO9BOsNxq+bvc/l+Z0A6ZUTPF SPX/BATDhsvXpbhBrjqO7xioGZDP9ZgOY3LAXMnyHK+l0G9XueJLUWZALy1/ZZWJsDSr JiSaKpUa4oI/EN5zo+N6DZktC+156DYUNEc80DBHNFK3UMOoVxaAzkiWZJuFyAKx9lEX W2mQ==
X-Gm-Message-State: AMCzsaX62KuIBoiVAgnNSTlXxWS3fEXRMNUn5fAvtNlHcNwZ+aeo23X2 0bbKoTje02DtKrLJyTokbPRrpA==
X-Google-Smtp-Source: ABhQp+RrkYA7/af0HCiIGeoxYLcOpaByumjeDxiy21HhVO/Ek0JkFH4ds+ixTmkEhZ3zCF1mbNfUug==
X-Received: by 10.80.134.111 with SMTP id 44mr13477519edt.69.1509009527935; Thu, 26 Oct 2017 02:18:47 -0700 (PDT)
Received: from ?IPv6:2001:660:330f:a4:e0d5:e0a4:d13a:5c78? ([2001:660:330f:a4:e0d5:e0a4:d13a:5c78]) by smtp.gmail.com with ESMTPSA id j59sm2665855edd.78.2017.10.26.02.18.46 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 26 Oct 2017 02:18:46 -0700 (PDT)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 11.0 \(3445.1.7\))
From: Luigi Iannone 
In-Reply-To: 
Date: Thu, 26 Oct 2017 11:18:37 +0200
Cc: Dino Farinacci , "lisp@ietf.org list" 
Content-Transfer-Encoding: quoted-printable
Message-Id: <09B6F8AE-3CCE-4FC9-9100-16EE8D7DA616@gigix.net>
References:  <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com>  <1AAAC5C3-27FA-47A9-819F-42B2357E3A08@gmail.com>  <3E61C832-97B2-4776-B375-9A473D600A61@gmail.com> 
To: Alberto Rodriguez-Natal 
X-Mailer: Apple Mail (2.3445.1.7)
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 26 Oct 2017 09:18:51 -0000

Personal opinion here...

> On 25 Oct 2017, at 05:01, Alberto Rodriguez-Natal =
 wrote:
>>=20
> [AR4] Removing the conflicting text works. Alternatively, we can
> update it to reflect actual LISP usage.
>=20

Since LISP usage may evolve I would prefer removing the conflicting =
text, rather than adding text that may be stale at some point in the =
future.

ciao

L.


From nobody Thu Oct 26 02:19:54 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B145A13F4F5 for ; Thu, 26 Oct 2017 02:19:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gigix-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L7zCxLnb6eDS for ; Thu, 26 Oct 2017 02:19:49 -0700 (PDT)
Received: from mail-wm0-x229.google.com (mail-wm0-x229.google.com [IPv6:2a00:1450:400c:c09::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8120C13A5A3 for ; Thu, 26 Oct 2017 02:19:49 -0700 (PDT)
Received: by mail-wm0-x229.google.com with SMTP id s66so1508355wmf.5 for ; Thu, 26 Oct 2017 02:19:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gigix-net.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=0B9ZOcj80mJ/EvsWne7SG4l8vAKmXR+XJoAJ8QFYgTg=; b=vkIco9fZQiFaEVjXV89XTVtMLEa9XyT21orIrRXsUpM1lsG8oVwMgTlTeLhH01+5NV hDOdttLkdJ4oerR/Zvzm/gBYVJT/xn9vIB61SdfVznxvpwzTCJK7VEjlWEhXUk9YGm/4 ijUkTPzH7DAksZeUXbZe5x5mPw1yvRYA9tiFrqoGAoHv2GZIilhf1iGNnMUDwWyWevdL DiMH4HIAtXNMiqxa47kYRUQHXwuiAl0Vt0floueygLa65knjadOdTuQnMtw7L/WzzBSM o85bs6ewuBwLkpC4FI6bd+9nvCBS2os1bL5gNHHLgH5LddpL6pEw/cf/zN/hcxD20mFs hQwQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=0B9ZOcj80mJ/EvsWne7SG4l8vAKmXR+XJoAJ8QFYgTg=; b=LsDRYNz8P8yKL8YMR2rI/0gG4s1uUfedy3URImAw3tvUdFlhCG/rb3F+G1SXQoYjwV 2U7TzrTylv0VPEu/hTZQ701q4VD7UeJX3xpwIJ9GrFU7Zm09gLrr8R8KgNfT30bLj+sJ MW+MJfq5FxNOk9J7xRRkYHmRwuAJRGAwr5bh78lLn3WLV1gP9PoKrboy8DtGIxEcv2bt 6/72cTOHnMerjJ8cmsy4obDaac+DhnmbqNE6ed1S05rCAHv0W6eYETz8Hhv8WWc0TJPp gq9Ywcfc2IMFN1Ept88h4W8HRTDn8TaDAWsZZA0GiEeSgbrfS1nAYP+sSAUr/5lV93Jo TUHA==
X-Gm-Message-State: AMCzsaVJh7tU0GBWrdzvSyTozZZ7+0/c65kiXbNdES2vPrDe6jvnLg9F 4T8fVw7fER2Ileq8t0iClUgFUePY0co=
X-Google-Smtp-Source: ABhQp+Rein+6FCi41aD8Ds1hn8ahVILJZ2C6VoeiBJWc/ziUDdjNrWFL5U9B4Sqm88B2fso7JHu6Iw==
X-Received: by 10.80.214.19 with SMTP id x19mr26954984edi.233.1509009587808; Thu, 26 Oct 2017 02:19:47 -0700 (PDT)
Received: from ?IPv6:2001:660:330f:a4:e0d5:e0a4:d13a:5c78? ([2001:660:330f:a4:e0d5:e0a4:d13a:5c78]) by smtp.gmail.com with ESMTPSA id j59sm2665855edd.78.2017.10.26.02.19.46 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 26 Oct 2017 02:19:46 -0700 (PDT)
From: Luigi Iannone 
Message-Id: 
Content-Type: multipart/alternative; boundary="Apple-Mail=_C01A8B6F-FAA9-42B3-83F7-BD7314E10674"
Mime-Version: 1.0 (Mac OS X Mail 11.0 \(3445.1.7\))
Date: Thu, 26 Oct 2017 11:19:38 +0200
In-Reply-To: 
Cc: lisp@ietf.org
To: "Rene 'Renne' Bartsch, B.Sc. Informatics" 
References:  <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com>  <60376D83-3DBD-4490-BEE8-F82F155A0FBC@gigix.net> <1781FA8C-B6E7-481A-AE4D-7F654AE87573@gmail.com> 
X-Mailer: Apple Mail (2.3445.1.7)
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 26 Oct 2017 09:19:53 -0000

--Apple-Mail=_C01A8B6F-FAA9-42B3-83F7-BD7314E10674
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8



> On 25 Oct 2017, at 07:54, Rene 'Renne' Bartsch, B.Sc. Informatics =
 wrote:
>=20
> I'm not that happy with
>=20
> "As the architecture is realized, if a given bit string is both an =
RLOC and an EID, it must refer to the same entity in both cases".
>=20
>=20
> In a MESH-architecture the EID of a mobile-node can be the RLOC of a =
neighbour mobile-node.
>=20
Hi Rene,

can you detail more the example you are providing?

Thanks

L.




>=20
>=20
> Regards,
>=20
> Renne
>=20
>=20
>=20
> Am 23.10.2017 um 19:55 schrieb Dino Farinacci:
>>> Just stating my personal opinion here=E2=80=A6
>> No prob. Thanks for that. See udpate rfcdiff.html file attached. I =
will send another email with the open items, so others can comment.
>>=20
>>>>> Working group, what do you think the correct wording should be. I =
suggest:
>>>>>=20
>>>>> o =E2=80=9Croutable=E2=80=9D
>>>>> o =E2=80=9Croutable in the underlay=E2=80=9D
>>>>> o =E2=80=9Croutable in the RLOC space"
>>>> [AR2] My personal preference is "routable in the underlay", but any =
of
>>>> the three works for me.
>>> I would prefer =E2=80=9Croutable in the RLOC space=E2=80=9D since =
this is what is needed.=20
>> Done.
>>=20
>>>>>> The EID-to-RLOC map-cache is a short-lived, on-demand table in an =
ITR that store
>>>>>>=20
>>>>>> [AR] We probably should remove the note on the map-cache being
>>>>>> =E2=80=9Cshort-lived=E2=80=9D since that may not be the case in =
some deployments.
>>>>> Response (3).
>>>>>=20
>>>>> But it is in other deployments if you don=E2=80=99t want to use =
any of the update mapping techniques, like map-versioning, SMRs, pubsub, =
and Map-Notify messaging.
>>>> [AR2] I would suggest that at least we rephrase the sentence to say
>>>> something like: "The EID-to-RLOC map-cache is a (generally
>>>> short-lived) on-demand table in an ITR that stores=E2=80=A6"
>>> I agree with AR, we do not need to state how long the mappings are =
kept in a cache, this is a management/implementation issue.
>> Done.
>>=20
>>>> [AR2] My question was more with regard to the Locator-Set. Let's =
say
>>>> that two different ETRs serving the same site are registering only
>>>> their own RLOCs and are leveraging on the merge-semantics =
capability
>>>> of the Map-Server to build a unified mapping. These two ETRs are in =
a
>>>> steady state but their Locator-Set is different for the same
>>>> EID-Prefix.
>>>>>> Address Family Identifier (AFI):  AFI is a term used to describe =
an
>>>>>> address encoding in a packet.  An address family currently =
pertains to
>>>>>> an IPv4 or IPv6 address.
>>>>>>=20
>>>>>> [AR] Although in some points the document mentions LCAF or other
>>>>>> address types for EID/RLOC, in most of the cases it assumes only
>>>>>> IPv4/v6. I think we should update the document to be more =
flexible and
>>>>>> relax those IP-only mentions (specially for EID cases).
>>>>> Response (1).
>>>>>=20
>>>>> I changed to =E2=80=9CAn address family that pertains to the =
data-plane, can be an IPv4, IPv6, or MAC address.=E2=80=9D
>>> Why you do not simply state =E2=80=9CAn address family that pertains =
to the data-plane.=E2=80=9D and that=E2=80=99s it.
>> Sure, changed.
>>=20
>>>>> Response (1).
>>>>>=20
>>>>> Making a reference to private addresses is actually very =
important. There are a lot of container and VMs within cloud provider =
deployments that use it. It is probably the most popular use-case of =
LISP.
>>>> [AR2] My intention was to state that we should not tie Instance-IDs =
to
>>>> the address duplication problem of private addresses. Indeed,
>>>> preventing address duplication is one of the major use-cases for
>>>> Instance-IDs but they are applicable beyond that particular =
use-case.
>>> I agree with AR. private addressing is a use case not the reason. =
Text should be more generic.=20
>> Then can one of you two suggest text to insert here?
>>=20
>>>=20
>>>>> I made a reference to the VPN spec which is now a WG draft.
>>>>>=20
>>>>>> An ITR SHOULD only set the E-bit in an encapsulated data packet =
when
>>>>>> it knows the ETR is
>>>>>> enabled for echo-noncing.  This is conveyed by the E-bit in the
>>>>>> Map-Reply message.
>>>>>>=20
>>>>>> [AR] There should be probably a mention to merge-semantics and/or
>>>>>> proxy-reply here.
>>>>> Response (3).
>>>>>=20
>>>>> Why? Merge semantics only apply to Map-Registers. Not the =
Map-Reply an ETR sends to an ITR. That is when it conveys it can support =
echo-noncing.
>>>> [AR2] My point was that merge-semantics and proxy-reply may affect =
the
>>>> E-bit process. For instance, if the MS is merging different
>>>> Map-Registers, (some with the E-bit set, some without), which value
>>>> for the E-bit should the MS return in a Map-Reply?
>>>>>> Since the LISP architecture uses a caching scheme to retrieve and
>>>>>> store EID-to-RLOC mappings, the only way an ITR can get a more
>>>>>> up-to-date mapping is to re-request the mapping.
>>> wouldn=E2=80=99t be simpler to change the sentence in =E2=80=9C=E2=80=A6=
.the only way an ITR can get a more
>>> recent mapping is to update the mapping by any means available in =
the control plane.=E2=80=9D
>>>=20
>>> This should be generic enough to cover the pub/sub case.
>> That is not what the comment is about. The comment is related to how =
an ETR tells an ITR that it is echo-nonce capable. And if multiple ETRs =
register the same EID-prefix with each of their RLOCs, a proxy Map-Reply =
has a single E-bit. So the Map-Server cannot set the bit if one can =
support echo-noncing and the other cannot.
>>=20
>>>>> Response (1).
>>>>>=20
>>>>> Added text to support your suggestion.
>>>>>=20
>>>>>> It is important to note that a locator address in any LISP =
control
>>>>>> message MUST be a globally routable address and therefore SHOULD =
NOT
>>>>>> contain [RFC1918] addresses.
>>>>>>=20
>>>>>> [AR] The Internet use-case is less relevant today, therefore =
I=E2=80=99d
>>>>>> suggest removing the sentence regarding RFC1918.
>>>>> Response (1).
>>>>>=20
>>>>> I think we should add that there ARE allowed if run in a local =
environment.
>>>>>=20
>>> I agree with AR. Sentence should be removed. It is consistent with =
the very first comment about RLOCs being routable in the RLOC space.
>>> If your RLOC space is the Internet then you cannot use RFC1918 =
addresses.
>> Check the current text to see if the change suffices.
>>=20
>> Thanks,
>> Dino
>>=20
>>=20
>>=20
>>=20
>>=20
>>=20
>>=20
>> _______________________________________________
>> lisp mailing list
>> lisp@ietf.org 
>> https://www.ietf.org/mailman/listinfo/lisp =

>=20
> _______________________________________________
> lisp mailing list
> lisp@ietf.org
> https://www.ietf.org/mailman/listinfo/lisp


--Apple-Mail=_C01A8B6F-FAA9-42B3-83F7-BD7314E10674
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8



On 25 Oct 2017, at 07:54, Rene 'Renne' Bartsch, B.Sc. =
Informatics <ietf@bartschnet.de> wrote:


 =20
    
 =20
  
I'm =
not that happy with
"As the architecture is realized, =
if a given bit string is both
      an RLOC and an EID, it must refer to the same entity in both
      cases".


    
In a MESH-architecture the EID of a mobile-node =
can be the RLOC
      of a neighbour mobile-node.
Hi Rene,

can you detail more the example you are =
providing?

Thanks

L.





    

    

    

    Regards,

    

    Renne

    

    

    

    
Am 23.10.2017 um 19:55 schrieb Dino
      Farinacci:

    

    

      

        
Just stating my personal opinion =
here=E2=80=A6


      

      
No prob. Thanks for that. See udpate =
rfcdiff.html file attached. I will send another email with the open =
items, so others can comment.



      

        

          

            
Working group, what do you think =
the correct wording should be. I suggest:

o =E2=80=9Croutable=E2=80=9D
o =E2=80=9Croutable in the underlay=E2=80=9D
o =E2=80=9Croutable in the RLOC space"


          

          
[AR2] My personal preference is =
"routable in the underlay", but any of
the three works for me.


        

        
I would prefer =E2=80=9Croutable in =
the RLOC space=E2=80=9D since this is what is needed.=20


      

      
Done.



      

        

        

          

            

            

              
The EID-to-RLOC map-cache is a =
short-lived, on-demand table in an ITR that store

[AR] We probably should remove the note on the map-cache being
=E2=80=9Cshort-lived=E2=80=9D since that may not be the case in some =
deployments.


            

            
Response (3).

But it is in other deployments if you don=E2=80=99t want to use any of =
the update mapping techniques, like map-versioning, SMRs, pubsub, and =
Map-Notify messaging.


          

          
[AR2] I would suggest that at least =
we rephrase the sentence to say
something like: "The EID-to-RLOC map-cache is a (generally
short-lived) on-demand table in an ITR that stores=E2=80=A6"


        

        
I agree with AR, we do not need to =
state how long the mappings are kept in a cache, this is a =
management/implementation issue.


      

      
Done.



      

        

          
[AR2] My question was more with =
regard to the Locator-Set. Let's say
that two different ETRs serving the same site are registering only
their own RLOCs and are leveraging on the merge-semantics capability
of the Map-Server to build a unified mapping. These two ETRs are in a
steady state but their Locator-Set is different for the same
EID-Prefix.


          

            

            

              
Address Family Identifier (AFI): =
 AFI is a term used to describe an
address encoding in a packet.  An address family currently pertains to
an IPv4 or IPv6 address.

[AR] Although in some points the document mentions LCAF or other
address types for EID/RLOC, in most of the cases it assumes only
IPv4/v6. I think we should update the document to be more flexible and
relax those IP-only mentions (specially for EID cases).


            

            
Response (1).

I changed to =E2=80=9CAn address family that pertains to the data-plane, =
can be an IPv4, IPv6, or MAC address.=E2=80=9D


          

        

        
Why you do not simply state =E2=80=9CAn =
address family that pertains to the data-plane.=E2=80=9D and that=E2=80=99=
s it.


      

      
Sure, changed.



      

        

          

            
Response (1).

Making a reference to private addresses is actually very important. =
There are a lot of container and VMs within cloud provider deployments =
that use it. It is probably the most popular use-case of LISP.


          

          
[AR2] My intention was to state that =
we should not tie Instance-IDs to
the address duplication problem of private addresses. Indeed,
preventing address duplication is one of the major use-cases for
Instance-IDs but they are applicable beyond that particular use-case.


        

        
I agree with AR. private addressing is =
a use case not the reason. Text should be more generic.=20


      

      
Then can one of you two suggest text to =
insert here?



      

        

        

          

            
I made a reference to the VPN spec =
which is now a WG draft.



            

              
An ITR SHOULD only set the E-bit =
in an encapsulated data packet when
it knows the ETR is
enabled for echo-noncing.  This is conveyed by the E-bit in the
Map-Reply message.

[AR] There should be probably a mention to merge-semantics and/or
proxy-reply here.


            

            
Response (3).

Why? Merge semantics only apply to Map-Registers. Not the Map-Reply an =
ETR sends to an ITR. That is when it conveys it can support =
echo-noncing.


          

          
[AR2] My point was that =
merge-semantics and proxy-reply may affect the
E-bit process. For instance, if the MS is merging different
Map-Registers, (some with the E-bit set, some without), which value
for the E-bit should the MS return in a Map-Reply?


          

            

            

              
Since the LISP architecture uses =
a caching scheme to retrieve and
store EID-to-RLOC mappings, the only way an ITR can get a more
up-to-date mapping is to re-request the mapping.


            

          

        

        
wouldn=E2=80=99t be simpler to change =
the sentence in =E2=80=9C=E2=80=A6.the only way an ITR can get a more
recent mapping is to update the mapping by any means available in the =
control plane.=E2=80=9D

This should be generic enough to cover the pub/sub case.


      

      
That is not what the comment is about. =
The comment is related to how an ETR tells an ITR that it is echo-nonce =
capable. And if multiple ETRs register the same EID-prefix with each of =
their RLOCs, a proxy Map-Reply has a single E-bit. So the Map-Server =
cannot set the bit if one can support echo-noncing and the other cannot.



      

        

          

            
Response (1).

Added text to support your suggestion.



            

              
It is important to note that a =
locator address in any LISP control
message MUST be a globally routable address and therefore SHOULD NOT
contain [RFC1918] addresses.

[AR] The Internet use-case is less relevant today, therefore I=E2=80=99d
suggest removing the sentence regarding RFC1918.


            

            
Response (1).

I think we should add that there ARE allowed if run in a local =
environment.



          

        

        
I agree with AR. Sentence should be =
removed. It is consistent with the very first comment about RLOCs being =
routable in the RLOC space.
If your RLOC space is the Internet then you cannot use RFC1918 =
addresses.


      

      
Check the current text to see if the =
change suffices.

Thanks,
Dino



      

      

      

      



      

      

      

      
_______________________________________________
lisp mailing list
lisp@ietf.org
https://www.ietf.org/m=
ailman/listinfo/lisp


    

    

  


_______________________________________________
lisp =
mailing list
lisp@ietf.org
https://www.ietf.org/mailman/listinfo/lisp

=

--Apple-Mail=_C01A8B6F-FAA9-42B3-83F7-BD7314E10674--


From nobody Thu Oct 26 02:29:11 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88C7313F4F5 for ; Thu, 26 Oct 2017 02:29:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gigix-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q6F9tyQWJV0n for ; Thu, 26 Oct 2017 02:29:08 -0700 (PDT)
Received: from mail-wr0-x229.google.com (mail-wr0-x229.google.com [IPv6:2a00:1450:400c:c0c::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0D7A913A5A3 for ; Thu, 26 Oct 2017 02:29:08 -0700 (PDT)
Received: by mail-wr0-x229.google.com with SMTP id o44so2496615wrf.11 for ; Thu, 26 Oct 2017 02:29:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gigix-net.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=NyttNySzYUYZQoYluvN1SOZB/IFnxwSPDk7QCFHKm6o=; b=ABoP6YJofmHidJ/o83+OMzhiDNBkM4OErIZVP1fjjGHGsHbJaCG6xSIuaEGMY7G1bY yQ4BcBwaOJl5Q02HqEzFCHM8HO6iWECPY47/q80SwAxB9n1Xa7jpu365KztiAccHgoiC 3WlS4R3G76nXfrIoIdo+rLBTgFJgIbbIylmYAMFBT4cCU+GKChhIr7eC7nC927Dav6bg Mq6abYWkFX87mgp9ptLMRy0lB6d55VCKp7xGCASZswQydVrKtjQhqzXm9KxRjFKGRRyC wuSE6RhY+YrIVdG8XtYQ8Qbg9Lwz7mOVrA9/fsS8nU+6C//IAARh9wJeOmP+VfQHHZxH mQ1w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=NyttNySzYUYZQoYluvN1SOZB/IFnxwSPDk7QCFHKm6o=; b=WgAdVLK4oAmM8e9GNB8lEfdlB3jycYdTYFBS5PZPB1CpNy6/WTIbnlFyKnF7LigE8s qse2Cw/2DV9U0noEG3QD1lqb6Oj/rf82UynMAdRquixjv5cAVEhB2YI2mJa3TnjmAwv8 1L0CRYKNwOQR0gCNAhpjk6C6gnL7lr5qWZU2v//H2hgzp5TY4UbKHVrl1d25UfdTIl22 v/IXxj9iJjrdaLc+Zba6yWwZ4Eu6dAd/NawBkBQJcms65SszN7BRCeQPZZa8c4+LoelR z0sIT2fWWkZ/zzoUxc4R/DxeRnskMdoqlGOITjCmxyNYIQdbYIt1QfaoYhZNyw2Qz+26 AhHQ==
X-Gm-Message-State: AMCzsaV2QIUESucM43u7JLjRjwiCc6deeruX0Wbcqx4vzp4G0bSAJI28 haKEhVPT1TseMZhKGi1zgZ51ug==
X-Google-Smtp-Source: ABhQp+RCS4N9Cjs0wQWeOaPzzIc2Wyv/8UuRtYLIWRNIwjkcbFumGgLmbba4po+K6kVJfQfCCXB43g==
X-Received: by 10.223.132.163 with SMTP id 32mr4326070wrg.218.1509010146478; Thu, 26 Oct 2017 02:29:06 -0700 (PDT)
Received: from ?IPv6:2001:660:330f:a4:e0d5:e0a4:d13a:5c78? ([2001:660:330f:a4:e0d5:e0a4:d13a:5c78]) by smtp.gmail.com with ESMTPSA id v23sm974095wmh.8.2017.10.26.02.29.05 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 26 Oct 2017 02:29:05 -0700 (PDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 11.0 \(3445.1.7\))
From: Luigi Iannone 
In-Reply-To: 
Date: Thu, 26 Oct 2017 11:28:56 +0200
Cc: mohamed.boucadair@orange.com, "lisp@ietf.org list" 
Content-Transfer-Encoding: quoted-printable
Message-Id: <3B2CB613-4AEF-4607-B5CE-DB12ABBFD5E6@gigix.net>
References: <37C27B2F-AD76-4B5F-AFE6-E56D02180DD4@gmail.com> <787AE7BB302AE849A7480A190F8B93300A051871@OPEXCLILMA3.corporate.adroot.infra.ftgroup> 
To: Dino Farinacci 
X-Mailer: Apple Mail (2.3445.1.7)
Archived-At: 
Subject: Re: [lisp] Comments to draft-boucadair-lisp-multiple-records-00
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 26 Oct 2017 09:29:09 -0000

Hi,


> On 10 Oct 2017, at 19:22, Dino Farinacci  wrote:
>=20

[snip]

> As you can see there is a lot of text that would need to be written. =
Which I think is too late for RFC6833bis.

Why late? Dino, as you mentioned in your previous mail if we want to =
provide specification for this use than now is the time.

Otherwise we have to state that the current specification does not =
provide anything about multiple records and hence they shouldn=E2=80=99t =
be used.

Up to the WG to decide whether or not is the time to do it.

Ciao

L.




From nobody Thu Oct 26 09:47:38 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F8D113F3AC for ; Thu, 26 Oct 2017 09:47:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tXqBvs0d1DZi for ; Thu, 26 Oct 2017 09:47:35 -0700 (PDT)
Received: from mail-pg0-x234.google.com (mail-pg0-x234.google.com [IPv6:2607:f8b0:400e:c05::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0901B13AD2D for ; Thu, 26 Oct 2017 09:47:35 -0700 (PDT)
Received: by mail-pg0-x234.google.com with SMTP id j3so3154996pga.1 for ; Thu, 26 Oct 2017 09:47:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=AtCF14r6WgFxXzTLqFd6siEy23d93EJiROkx/naCcAk=; b=mhrv0ROmMTTcMwstHp3d9MhK4uLZnJPdptMcpJNEW6fV6rZTH/cYHi25+ibFRM/s18 /lkc4CH4MMWeYZtFeSlMUoPNuaRJR5+Q/sUR4KiJIc/LdQIq5xxnUcDqIWaqi8ymRMyd b8UkVoX8wgIQl1B2jUoZNRsjnr55O/qXOruHEjPooALAO3MFndZhypbgLce841HiG87E 18c4k88F/gapFBUUJlXRBffO+/JXTcojdI7UYW/dvfm1jQqOU+F1JU8hVTxqd6De8P9j CQDL4pFhmmNRLQKs5OHMKbORT3GelzssZHvUoatw/l9tNGzCe2Pi7hKmA45cH+H7kdqD TRpg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=AtCF14r6WgFxXzTLqFd6siEy23d93EJiROkx/naCcAk=; b=GMTBm+9ncz77sE098Xm4DY9XiM9PP6b79E02wWBXzx5s4bkKoerU1ANY23fMIVKezb o4XT5TzuYTfoQp/T6Fm425Zmk58T7NxWLQyvcYyIXZYKPEXgROC45d8ovfqX7Kan7y3M h+Xg7nbVfFYhtVKkdnRdn5W+nHNpEuKxlKmH8RJrHVWWgClQ6eXMyU14Mxf6Mrsy9BNA 9rootQ+voOQXW6TO+i2YOg4ykHjMem7cvmDoE7npLY/LbmPeo0ca7H6kfiXDdottpKso e1Cp9a0jxrbs3oaSXycqRt1wV6lpDfy342gSHUQKydvSjlWZiBHSgmWayhUK4nXHXNPo XZLg==
X-Gm-Message-State: AMCzsaWSeg9ZRcqld8YhvC7GuuKW0eDSNUem5hwCiTg0aq9CeUWo+T6L SAwRLNwkLoelbtt2MwsC3gk=
X-Google-Smtp-Source: ABhQp+RDacg5e29PKdvYF/j3NC8ivfEiB2qxCJgY6bydJHGuwhiN3VH335Pt9WZ4V5Qw+/6CRz4HZg==
X-Received: by 10.84.140.131 with SMTP id 3mr4756953plt.367.1509036454636; Thu, 26 Oct 2017 09:47:34 -0700 (PDT)
Received: from [10.197.31.157] (173-11-119-245-SFBA.hfc.comcastbusiness.net. [173.11.119.245]) by smtp.gmail.com with ESMTPSA id a78sm10835299pfl.122.2017.10.26.09.47.33 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 26 Oct 2017 09:47:33 -0700 (PDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Dino Farinacci 
In-Reply-To: <3B2CB613-4AEF-4607-B5CE-DB12ABBFD5E6@gigix.net>
Date: Thu, 26 Oct 2017 09:47:34 -0700
Cc: mohamed.boucadair@orange.com, "lisp@ietf.org list" 
Content-Transfer-Encoding: quoted-printable
Message-Id: <4F9E40DF-3396-4BB8-90BB-74F035B7B96F@gmail.com>
References: <37C27B2F-AD76-4B5F-AFE6-E56D02180DD4@gmail.com> <787AE7BB302AE849A7480A190F8B93300A051871@OPEXCLILMA3.corporate.adroot.infra.ftgroup>  <3B2CB613-4AEF-4607-B5CE-DB12ABBFD5E6@gigix.net>
To: Luigi Iannone 
X-Mailer: Apple Mail (2.3273)
Archived-At: 
Subject: Re: [lisp] Comments to draft-boucadair-lisp-multiple-records-00
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Thu, 26 Oct 2017 16:47:36 -0000

>> As you can see there is a lot of text that would need to be written. =
Which I think is too late for RFC6833bis.
>=20
> Why late? Dino, as you mentioned in your previous mail if we want to =
provide specification for this use than now is the time.

My point is, we may not be able to justify a real use-case for =
Map-Requesting multiple EID-records. But to ask for all records that are =
more specific then a a prefix you request makes sense to solve the =
use-case, I think Med wants to solve. That is reloading your map-cache =
on an ITR when it restarts.

I made a suggestion but haven=E2=80=99t received any feedback on it yet.

> Otherwise we have to state that the current specification does not =
provide anything about multiple records and hence they shouldn=E2=80=99t =
be used.

The specification does specify that you can put multiple EIDs in a =
Map-Request, it just doesn=E2=80=99t say why you should. And we need to =
have a well defined use-case before we can write any meaningful text.

> Up to the WG to decide whether or not is the time to do it.

Dino=


From nobody Thu Oct 26 20:58:06 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F9D213F63C for ; Thu, 26 Oct 2017 20:58:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.595
X-Spam-Level: 
X-Spam-Status: No, score=-0.595 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_IMAGE_ONLY_28=1.404, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2xA2l2QFRGwA for ; Thu, 26 Oct 2017 20:58:03 -0700 (PDT)
Received: from mail-pf0-x229.google.com (mail-pf0-x229.google.com [IPv6:2607:f8b0:400e:c00::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DF87F1391C3 for ; Thu, 26 Oct 2017 20:58:02 -0700 (PDT)
Received: by mail-pf0-x229.google.com with SMTP id 17so4015411pfn.12 for ; Thu, 26 Oct 2017 20:58:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=v72zL2P0Lo7wgu9XAo7PS/mv2eEezubTMlY2UuzLp5g=; b=VOtSL9gu9hedKLpji+EPOfO7LV+CZPqvbFTFmsTkPnBXpIKy7wt2seIIgRFV70qfxd Znm9CwuUbg3+3pX1HlC+2f6UzKO+LUu3DUKzgV5ziG9O5rBl1q1eYYsrIIX7ZQW1oHGp 5w9zCBF2rkcgZOyaX6KZ3Hs4J0Q1LRAN6M9/Sjf/n+RrRX9VvYbn8jt1JTuiJh06/RQS pcdjtZJzuRC8u/jm4Pm0Ix5cg4qzSWrMbloiO7XV/Pv9mhoyMF+Lhd2Ez8aBDT2tWI0V gUGZFtMpby+MKShISjhci8nUt47/SBah7DbyWhy4VtEy2d3045P8uEqj1J/i70unYvp2 sTCQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=v72zL2P0Lo7wgu9XAo7PS/mv2eEezubTMlY2UuzLp5g=; b=cWbVEj7rxtmCZhXJVD+sv3ZPayd1U3d39HUnjo5o9Td50m3iJ1OVXvpDEwJ4YGLg5K 8WMslj1DHWZFeI+nA3FZquOReT4NDTYtjIvusGLcuTaff4UUhotoWmQiy+EWqWcHNKhX zld45uw0m+1AhYYQInfMMyTO3T07YehhrAITbFuc2o79JIZ3xbtOBZyLuExT4uILRGOq dzjs8aJNT0jwbvYLiEi3sZWkufEwwTI7JuFKfyc9DcBZyzpUt4ie066iEgQ+oxyUiANk zdpm3X2fgdJqTc767jYVCBmevcmaWwhBqe6Jul+eMx1tNnY91P4J2pGo6N5Gj1SdAREm iOAQ==
X-Gm-Message-State: AMCzsaVz134Fy3AfZOCn+kqp4khogByG3YPZoo+b/MrRDuCqJNHuF7WE lgFYgl2ygX9yA2PgjzDabX5ZBK1l
X-Google-Smtp-Source: ABhQp+SjaTXkNCoN9e5YcpZ9DOr1yWK/LOio1nCy2I+3H54B7JuefhTRXmZyi0GfGrcQAnaALOx3Aw==
X-Received: by 10.99.101.68 with SMTP id z65mr6801489pgb.205.1509076681774; Thu, 26 Oct 2017 20:58:01 -0700 (PDT)
Received: from dino-macbook.wp.comcast.net (173-8-188-29-SFBA.hfc.comcastbusiness.net. [173.8.188.29]) by smtp.gmail.com with ESMTPSA id w69sm11876868pfd.22.2017.10.26.20.58.00 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 26 Oct 2017 20:58:00 -0700 (PDT)
From: Dino Farinacci 
Message-Id: <016663BE-F706-4AC6-9566-4D972009FD2E@gmail.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_BD731DB4-E099-49E1-AF54-4A756224FDE7"
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
Date: Thu, 26 Oct 2017 20:57:59 -0700
In-Reply-To: 
Cc: IETF 
To: "Rene 'Renne' Bartsch, B.Sc. Informatics" 
References: 
X-Mailer: Apple Mail (2.3273)
Archived-At: 
Subject: Re: [lisp] Comments on draft-ietf-lisp-eid-anonymity-00
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Fri, 27 Oct 2017 03:58:05 -0000

--Apple-Mail=_BD731DB4-E099-49E1-AF54-4A756224FDE7
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

> Hi,

Thanks for the comments Rene!

> 'draft-ietf-lisp-eid-anonymity-00' does not mention any authentication =
of the LISP-nodes/xTRs with the map-servers.
> That way a Man-In-The-Middle-Attack can be run by sending bogus =
map-requests with the MITM-attacker's RLOCs.

Well we do have the regular shared-key authentication documented in =
draft-ietf-lisp-rfc6831bis. But we can also put a reference in for =
draft-farinacci-lisp-ecdsa-auth if you are looking for stronger ways to =
authenticate.

> I suggest to allow only CGA-addresses.

There is a reference in this section:




> Benefits:
>=20
> 1. Privacy:         Dynamic eEIDs by re-keying
> 2. Reachability: Static      eEIDs by static key-pairs allow direct =
connections without third-party services relaying (e.g. Facebook ;-) )

Yes, understand.

> 3. Security:
>=20
>   1. Signed map-requests
>   2. eEID-based authentication/authorization with static keypairs
>   facilitates administration
>       (e.g. road-warrior authentication/authorization can be done with
>   a firewall by eEID filtering
>       without any upper-layer authentication/authorization like
>   usernames/passwords involved)
>=20
> Privacy/security considerations:
>=20
>   1. Don't use dynamic and static eEIDs on the same RLOC!
>   2. Always use payload encryption to avoid deanonymisation by
>   Deep-Packet-Inspection

Right, this is all in draft-farinacci-lisp-ecdsa-auth. Have you looked =
at it?

Dino



--Apple-Mail=_BD731DB4-E099-49E1-AF54-4A756224FDE7
Content-Type: multipart/related;
	type="text/html";
	boundary="Apple-Mail=_A2E899A4-A594-488D-A77A-458C18A04984"


--Apple-Mail=_A2E899A4-A594-488D-A77A-458C18A04984
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=us-ascii


Hi,

Thanks for the comments Rene!

'draft-ietf-lisp-eid-anonymity-00' does not mention any =
authentication of the LISP-nodes/xTRs with the map-servers.
That way a Man-In-The-Middle-Attack can be run by sending =
bogus map-requests with the MITM-attacker's RLOCs.

Well we do =
have the regular shared-key authentication documented in =
draft-ietf-lisp-rfc6831bis. But we can also put a reference in for =
draft-farinacci-lisp-ecdsa-auth if you are looking for stronger ways to =
authenticate.

I suggest to allow only CGA-addresses.

There is a =
reference in this section:



Benefits:

1. Privacy:         =
Dynamic eEIDs by re-keying
2. Reachability: Static   =
   eEIDs by static key-pairs allow direct connections without =
third-party services relaying (e.g. Facebook ;-) )

Yes, =
understand.

3. Security:

  1. Signed =
map-requests
  2. eEID-based =
authentication/authorization with static keypairs
  =
facilitates administration
      (e.g. =
road-warrior authentication/authorization can be done with
  a firewall by eEID filtering
  =
    without any upper-layer authentication/authorization =
like
  usernames/passwords involved)

Privacy/security considerations:

  1. Don't use dynamic and static eEIDs on the same =
RLOC!
  2. Always use payload encryption to avoid =
deanonymisation by
  Deep-Packet-Inspection

Right, this =
is all in draft-farinacci-lisp-ecdsa-auth. Have you looked at =
it?

Dino


=

--Apple-Mail=_A2E899A4-A594-488D-A77A-458C18A04984
Content-Transfer-Encoding: base64
Content-Disposition: inline;
	filename=PastedGraphic-7.png
Content-Type: image/png;
	name="PastedGraphic-7.png"
Content-Id: 
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=
--Apple-Mail=_A2E899A4-A594-488D-A77A-458C18A04984--

--Apple-Mail=_BD731DB4-E099-49E1-AF54-4A756224FDE7--


From nobody Thu Oct 26 21:31:03 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2ACC613AC0E for ; Thu, 26 Oct 2017 21:31:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Tj5JyZnsvukk for ; Thu, 26 Oct 2017 21:31:01 -0700 (PDT)
Received: from mail-pf0-x236.google.com (mail-pf0-x236.google.com [IPv6:2607:f8b0:400e:c00::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ED6F513AAC7 for ; Thu, 26 Oct 2017 21:31:00 -0700 (PDT)
Received: by mail-pf0-x236.google.com with SMTP id t188so4076564pfd.10 for ; Thu, 26 Oct 2017 21:31:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=WqI9o+VZejINqfWX4yQxi/nAVD3jkH6MtxJKYgYJ23o=; b=CA7BcyMy+MHfDzijQHQiOOj8FYw91O3sEVxDu7CazbYTZXWZP6ttmxDBfKSON+norb piVBP7hQuNnO3Pw9arCCAo5T59Gan3VpMOQbZP3jcpt/RTjaLwj33gZ2MnZvK9WPEJkY 6xDci7EGyiXJwxV4XsapQIeMsQWKI7yffz2hyUSywDxKDz0t/SE0Y5GeA7sV7KM9UhPp DtXo4qhZCJSjxNpU9/AR7VsJ9cFh3jPfEoQ7bjgSArMngnACv2+Mj9KTejG+7AYehX4b 0EtiIyeZG4tQPcDTAwKZMsbmBkTrqEIdChJhFDCWT+4PX5B3haLAw1CtBc+UETboqEX5 /zcg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=WqI9o+VZejINqfWX4yQxi/nAVD3jkH6MtxJKYgYJ23o=; b=UxBkCl2tnIREpTyBGMndGxGmsI4ZAivwLiCgsTH73q1ao5afCIAGVP4neF6I44bTMS +6PsBQ5aDQ9zX/QrzAPdF6t0AfbAVrQyRpqOZIx/AdEMjKgyYcJ3cR6wjx9nvZbffPnN LwykPsMcmFYCSCG8OUzFlqXs+wM9/QhCUvur+qtkyGcOciOdluvnIPujshyMj3RYGvgx nPbVVXyq/FCKMnyVLy5rH8nvIUinJ6zi2ZB8gSzfdBfKbOHY3VigYdgmhHiqmUIyQsLh UxpmpH2duW/NI9769rtL8C4gZRIIJBBKbo0ADS6T3uu99TRyMggOoubBgy4blpisOZXG oWPg==
X-Gm-Message-State: AMCzsaXbMSwajSM8clG9fueruxWDDUqGAGwyrALOqbN9YR3lJzqgQoHG WPRvMwl52H+NNzoSedZ6BHM=
X-Google-Smtp-Source: ABhQp+QcZTZCMsmaOBeZ85w5UUvDFyo29INitaSQw7NnSbTgjebuhL0NgE97pvtBms2+uCP6xgrsnQ==
X-Received: by 10.99.115.7 with SMTP id o7mr2840478pgc.410.1509078660576; Thu, 26 Oct 2017 21:31:00 -0700 (PDT)
Received: from dino-macbook.wp.comcast.net (173-8-188-29-SFBA.hfc.comcastbusiness.net. [173.8.188.29]) by smtp.gmail.com with ESMTPSA id f85sm13881384pfj.5.2017.10.26.21.30.59 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 26 Oct 2017 21:30:59 -0700 (PDT)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Dino Farinacci 
In-Reply-To: 
Date: Thu, 26 Oct 2017 21:30:58 -0700
Cc: lisp@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <3D0619BC-8E92-438D-BAA8-1CCEE41D2C66@gmail.com>
References:  <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com>  <60376D83-3DBD-4490-BEE8-F82F155A0FBC@gigix.net> <1781FA8C-B6E7-481A-AE4D-7F654AE87573@gmail.com> 
To: "Rene 'Renne' Bartsch, B.Sc. Informatics" 
X-Mailer: Apple Mail (2.3273)
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Fri, 27 Oct 2017 04:31:02 -0000

> I'm not that happy with
>=20
> "As the architecture is realized, if a given bit string is both an =
RLOC and an EID, it must refer to the same entity in both cases".
>=20
> In a MESH-architecture the EID of a mobile-node can be the RLOC of a =
neighbour mobile-node.

I too would like to understand your comment.

What the sentence is trying to achieve is that in some cases an EID and =
RLOC may be the same value for a given end-node. Like when when an EID =
is behind a NAT and the xTR is on the public side of the NAT, where the =
local private EID will be translated to a global EID and to reach the =
xTR the RLOC is also the same translated address.

Dino=


From nobody Fri Oct 27 01:30:31 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 32BA413F606 for ; Fri, 27 Oct 2017 01:30:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gigix-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uuxPBSIjdBhu for ; Fri, 27 Oct 2017 01:30:27 -0700 (PDT)
Received: from mail-wm0-x22e.google.com (mail-wm0-x22e.google.com [IPv6:2a00:1450:400c:c09::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5AABA13F486 for ; Fri, 27 Oct 2017 01:30:27 -0700 (PDT)
Received: by mail-wm0-x22e.google.com with SMTP id r196so2122282wmf.2 for ; Fri, 27 Oct 2017 01:30:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gigix-net.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=RPGYoRmk5KeQ84e1fzOmKEqPqNdeQeLA+lLpmeiS8T8=; b=kKpLsihsAGI0TBUP87PaEgGd6AlDArNYn3fzOiBHiILisYIf/roJFEJpeTZlV0rNuI 4p7fj8H9zoKmCyFPT8jG1092Al8RkaICkF80Z14GcZLmCI10SRRe0mi4sivj0sOhOsyZ yZB14kaoGp0tj41mxGmAbT1fvvKB+cJ5UsiY4jp4ezcd2XSjLSuwaJ+liQqEA3XOgrBu UE2FhU6F5hJxf6e9G1LX0HSzJA2lMKJAmlBJznxF0fbvLMwUhsL28x1oRw9ST7q1YPzZ SFt31t/LWmv3wOFdD+xuBBGGWUoMGWfbB3OLdD3edVLzMYaIPNgYJk7OHKkLBikiHYRE MmVA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=RPGYoRmk5KeQ84e1fzOmKEqPqNdeQeLA+lLpmeiS8T8=; b=bw1QQhItou6E7WrlHgGQykZYQPOQASY73KKRcBv35eazZZYkj4m+ECV3XomulUjio9 P3F3JxbCY1LSPDOyLDkh7QSBtkCrZLxZhk58iNlWjWo5qMbjhHaGZRoCrJQ3s5zKhCvq 3gaEtKCLzX+W9gmyw8p8KVP55yi/iYaDz59fWpAvk2D7NpSQ/4gMlmvx1muP7hASOjkd CfYQqjmFS4t0e0u8IfAQ8+7Xo3/lm7VGHzAfGrwKK6j733pDmd1Du/L6vdSQjx7KT5XC 16yjPHSLLSahp7/9U3c9WTCWbsxC0B4wPOIV1uJRTC1daGaa4uKO3TMpAFdSOsjym/MQ S3gw==
X-Gm-Message-State: AMCzsaV9PsyaVLCsY6VDiE8qIqLGTpmkZC68xuzhDg6qgffSnfK4OrOC owVepnc4Qoqfx1OkDtp7VCchlA==
X-Google-Smtp-Source: ABhQp+SXmCPcaTe+NI1vtX413hwwGTawFf8X30ftEznSKwOWTW+m7XCCqbfPAWNqkwtfc3JZtoRufg==
X-Received: by 10.80.188.18 with SMTP id j18mr31312245edh.189.1509093025748; Fri, 27 Oct 2017 01:30:25 -0700 (PDT)
Received: from 2a01cb040489200051f35ca6369fd217.ipv6.abo.wanadoo.fr (2a01cb040489200051f35ca6369fd217.ipv6.abo.wanadoo.fr. [2a01:cb04:489:2000:51f3:5ca6:369f:d217]) by smtp.gmail.com with ESMTPSA id t11sm4650023edh.63.2017.10.27.01.30.24 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 27 Oct 2017 01:30:24 -0700 (PDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 11.0 \(3445.1.7\))
From: Luigi Iannone 
In-Reply-To: <4F9E40DF-3396-4BB8-90BB-74F035B7B96F@gmail.com>
Date: Fri, 27 Oct 2017 10:30:23 +0200
Cc: mohamed.boucadair@orange.com, "lisp@ietf.org list" 
Content-Transfer-Encoding: quoted-printable
Message-Id: <29F77155-522E-4975-ACC4-16C6B51E6251@gigix.net>
References: <37C27B2F-AD76-4B5F-AFE6-E56D02180DD4@gmail.com> <787AE7BB302AE849A7480A190F8B93300A051871@OPEXCLILMA3.corporate.adroot.infra.ftgroup>  <3B2CB613-4AEF-4607-B5CE-DB12ABBFD5E6@gigix.net> <4F9E40DF-3396-4BB8-90BB-74F035B7B96F@gmail.com>
To: Dino Farinacci 
X-Mailer: Apple Mail (2.3445.1.7)
Archived-At: 
Subject: Re: [lisp] Comments to draft-boucadair-lisp-multiple-records-00
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Fri, 27 Oct 2017 08:30:29 -0000

> On 26 Oct 2017, at 18:47, Dino Farinacci  wrote:
>=20
>>> As you can see there is a lot of text that would need to be written. =
Which I think is too late for RFC6833bis.
>>=20
>> Why late? Dino, as you mentioned in your previous mail if we want to =
provide specification for this use than now is the time.
>=20
> My point is, we may not be able to justify a real use-case for =
Map-Requesting multiple EID-records. But to ask for all records that are =
more specific then a a prefix you request makes sense to solve the =
use-case, I think Med wants to solve. That is reloading your map-cache =
on an ITR when it restarts.
>=20
> I made a suggestion but haven=E2=80=99t received any feedback on it =
yet.
>=20
>> Otherwise we have to state that the current specification does not =
provide anything about multiple records and hence they shouldn=E2=80=99t =
be used.
>=20
> The specification does specify that you can put multiple EIDs in a =
Map-Request, it just doesn=E2=80=99t say why you should.

Does it clear state what the ETR has to do when it receives a =
Map-Request with multiple EIDs?

L.


> And we need to have a well defined use-case before we can write any =
meaningful text.
>=20
>> Up to the WG to decide whether or not is the time to do it.
>=20
> Dino


From nobody Fri Oct 27 06:55:05 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8659013F4CE for ; Fri, 27 Oct 2017 06:55:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.619
X-Spam-Level: 
X-Spam-Status: No, score=-1.619 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HzYG7mqXZGXX for ; Fri, 27 Oct 2017 06:55:02 -0700 (PDT)
Received: from orange.com (mta240.mail.business.static.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EC85D13F516 for ; Fri, 27 Oct 2017 06:55:01 -0700 (PDT)
Received: from opfedar04.francetelecom.fr (unknown [xx.xx.xx.6]) by opfedar20.francetelecom.fr (ESMTP service) with ESMTP id 58658120A10; Fri, 27 Oct 2017 15:55:00 +0200 (CEST)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.43]) by opfedar04.francetelecom.fr (ESMTP service) with ESMTP id 3C81A40075; Fri, 27 Oct 2017 15:55:00 +0200 (CEST)
Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILM5F.corporate.adroot.infra.ftgroup ([fe80::e172:f13e:8be6:71cc%18]) with mapi id 14.03.0361.001; Fri, 27 Oct 2017 15:55:00 +0200
From: 
To: Dino Farinacci 
CC: "lisp@ietf.org list" 
Thread-Topic: [lisp] Comments to draft-boucadair-lisp-multiple-records-00
Thread-Index: AQHTSN0TiTCEU1SRfEO5uJKfsaZohaL3wjPg
Date: Fri, 27 Oct 2017 13:54:59 +0000
Message-ID: <787AE7BB302AE849A7480A190F8B93300A05F572@OPEXCLILMA3.corporate.adroot.infra.ftgroup>
References: <37C27B2F-AD76-4B5F-AFE6-E56D02180DD4@gmail.com> <787AE7BB302AE849A7480A190F8B93300A051871@OPEXCLILMA3.corporate.adroot.infra.ftgroup>  <787AE7BB302AE849A7480A190F8B93300A0541A6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <1BADE12F-F090-4255-B835-D9467E1135D5@gmail.com> <787AE7BB302AE849A7480A190F8B93300A056537@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <558E587E-1A98-4CF3-8E53-A9CCD422716E@gmail.com>
In-Reply-To: <558E587E-1A98-4CF3-8E53-A9CCD422716E@gmail.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.168.234.6]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: 
Subject: Re: [lisp] Comments to draft-boucadair-lisp-multiple-records-00
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Fri, 27 Oct 2017 13:55:03 -0000

SGkgRGlubywgDQoNClBsZWFzZSBzZWUgaW5saW5lLiANCg0KQ2hlZXJzLA0KTWVkDQoNCj4gLS0t
LS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+IERlwqA6IERpbm8gRmFyaW5hY2NpIFttYWlsdG86
ZmFyaW5hY2NpQGdtYWlsLmNvbV0NCj4gRW52b3nDqcKgOiBqZXVkaSAxOSBvY3RvYnJlIDIwMTcg
MTU6MjENCj4gw4DCoDogQk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTg0KPiBDY8KgOiBsaXNwQGll
dGYub3JnIGxpc3QNCj4gT2JqZXTCoDogUmU6IFtsaXNwXSBDb21tZW50cyB0byBkcmFmdC1ib3Vj
YWRhaXItbGlzcC1tdWx0aXBsZS1yZWNvcmRzLTAwDQo+IA0KPiBXaGF0IGlmIHdlIHByb3ZpZGVk
IHlvdSB3aXRoIGEgbW9yZSBlZmZpY2llbnQgZmVhdHVyZS4gVGhhdCBpczoNCj4gDQo+ICgxKSBU
aGUgSVRSIHNlbmRzIGEgTWFwLVJlcXVlc3QgZm9yIDAuMC4wLjAvMC4NCj4gKDIpIEJ1dCByYXRo
ZXIgdGhhbiB0aGUgbWFwcGluZyBzeXN0ZW0gcmV0dXJuIGEgUkxPQy1zZXQgZm9yIDAuMC4wLjAv
MA0KPiAod2hpY2ggbWF5IG9yIG1heSBub3QgYmUgcmVnaXN0ZXJlZCksIGl0IHJldHVybnMgYWxs
IG1vcmUgc3BlY2lmaWNzPw0KPiAoMykgVGhlIElUUiB3b3VsZCByZXF1ZXN0IGEgbG9va3VwLXR5
cGUgb2Yg4oCccmV0dXJuICphbGwqIG1vcmUgc3BlY2lmaWNz4oCdDQo+IHZlcnN1cyBhbiBsb25n
ZXN0IG9yIGV4YWN0IG1hdGNoIGxvb2t1cC4NCj4gDQoNCltNZWRdIEkgbGlrZSB0aGlzIG9uZSwg
YnV0IEknZCBsaWtlIGFsc28gdG8gbGV0IHRoZSBJVFIgZW5jbG9zZXMgc3BlY2lmaWMgRUlEcyBp
biB0aGUgc2FtZSByZXF1ZXN0LiANCg0KPiBIZXJlIGlzIG15IGp1c3RpZmljYXRpb24uIEFuZCBJ
IG1hZGUgdGhpcyBjb21tZW50IHRvIHlvdSBhIGNvdXBsZSBvZiB5ZWFycw0KPiBhZ28uIElmIGFu
IElUUiBpcyBnb2luZyB0byBwcm92aWRlIGEgbGlzdCBvZiBFSURzIHRvIGxvb2t1cCB3aGVuIGl0
DQo+IHJlc3RhcnRzLCBvbmUgaGFzIHRvIGFzayBob3cgZG9lcyBpdCBrbm93IHdoaWNoIEVJRHMg
dG8gcmVxdWVzdC4gSWYgaXQgaGFzDQo+IGEgbGlzdCwgdGhhdCBtZWFucyB0aGVyZSB3YXMgc29t
ZSBpbXBsZW1lbnRhdGlvbiBjYXBhYmlsaXR5IHRvIHdyaXRlIGENCj4gY2hlY2twb2ludCBvciBz
dGF0ZWZ1bCBmaWxlIG9mIGVudHJpZXMuIFNvIHdoZW4gYW4gSVRSIHJlc3RhcnRzLCBpdCBoYXMN
Cj4gdGhhdCBsaXN0Lg0KDQpbTWVkXSBXaGF0IHdlIGhhdmUgaW52ZXN0aWdhdGVkIGlzIHRvIGNv
bmZpZ3VyZSB0aGUgSVRSIHVwb24gcmVib290IHdpdGggcG9wdWxhciBwcmVmaXhlcyAod2l0aG91
dCBldmVuIHJlcXVpcmluZyBwZXJzaXN0ZW50IHN0b3JhZ2Ugb2YgdGhlIEVJRHMgbGlzdCkuIFdl
IGhhZCBkZXNpZ25lZCBhIFlBTkcgbW9kdWxlIHdoaWNoIGlzIG1lYW50IHRvIHBvcHVsYXRlIGEg
cG9saWN5IHRhYmxlIG9uIHRoZSBJVFIgc28gdGhhdCBwb3B1bGFyIEVJRHMgY2FuIGJlIHJldHJp
ZXZlZCBpbW1lZGlhdGVseSBhZnRlciBzdGF0ZSBsb3NzL3JlYm9vdC4gVGhlIHB1cnBvc2Ugd2Fz
IHRvIGF2b2lkIHRoZSBmaXJzdCBwYWNrZXQgbG9zcyBpc3N1ZS4gQW4gZXhjZXJwdCBvZiB0aGUg
dHJlZSBtb2RlbCBpcyBwcm92aWRlZCBiZWxvdy4gIA0KDQo9PT09PT09PT09PT09PT09PT09PQ0K
bW9kdWxlOiBpZXRmLW1zLXBvbGljeS10YWJsZQ0KICAgKy0tcncgbXMtcHQtY29uZmlnDQogICB8
ICArLS1ydyBkZXNjcmlwdGlvbj8gICAgICBzdHJpbmcNCiAgIHwgICstLXJ3IHJmYzY3MjQtZW5h
YmxlPyAgIGJvb2xlYW4NCiAgIHwgICstLXJ3IG1zLXB0LWxpc3QNCiAgIHwgICAgICstLXJ3IG1z
LXB0LWVudHJ5KiBbaWRdDQogICB8ICAgICAgICArLS1ydyBpZCAgICAgICAgICAgICAgdWludDMy
DQogICB8ICAgICAgICArLS1ydyBOYW1lPyAgICAgICAgICAgc3RyaW5nDQogICB8ICAgICAgICAr
LS1ydyBEZXNjcmlwdGlvbj8gICAgc3RyaW5nDQogICB8ICAgICAgICArLS1ydyBlaWQgICAgICAg
ICAgICAgZWlkLWlkDQogICB8ICAgICAgICArLS1ydyBtYXAtcmVzb2x2ZXIgICAgaW5ldDppcC1h
ZGRyZXNzDQogICB8ICAgICAgICArLS1ydyBwcmlvcml0eT8gICAgICAgdWludDMyDQogICB8ICAg
ICAgICArLS1ydyBzdGF0dXM/ICAgICAgICAgZW51bWVyYXRpb24NCiAgIHwgICAgICAgICstLXJ3
IHZhbGlkaXR5LWRhdGU/ICAgeWFuZzpkYXRlLWFuZC10aW1lDQo9PT09PT0gDQoNCj4gDQo+IFdl
bGwsIGlmIGl0IGJ1aWxkcyB0aGlzIGNoZWNrcG9pbnQgZmlsZSwgaXQgY291bGQgYWxzbyBzdG9y
ZSB0aGUgUkxPQy1zZXQsDQo+IHNvIGl0IHdvdWxkIGhhdmUgYWxsIHRoZSBtYXBwaW5ncywgbWF5
YmUgb3V0IG9mIGRhdGUsIGJ1dCBpdCBjb3VsZCBxdWVyeQ0KPiB0aGUgbWFwcGluZyBzeXN0ZW0g
d2hlbiB0aGUgZGVtYW5kIHNlZXMgdGhlIG5lZWQuDQoNCltNZWRdIEFjdHVhbGx5LCB3ZSB3YW50
ZWQgdG8gYXZvaWQgd2FpdGluZyBmb3IgYSBwYWNrZXQgdG8gc2hvdyB1cCBmb3IgY3JlYXRpbmcg
bWFwcGluZ3MgZm9yIHBvcHVsYXIgRUlEcyBpbiBhIExJU1AgZG9tYWluLiANCg0KPiANCj4gSSBo
YXZlIGFuIGltcGxlbWVudGF0aW9uIG9mIHRoaXMgYW5kIHdoZW4gSSBicm91Z2h0IHRoaXMgdXAg
YSBjb3VwbGUgb2YNCj4geWVhcnMgYWdvLCBJIG9mZmVyZWQgeW91IHRvIHRyeSBpdCBvdXQuDQo+
IA0KPiBCdXQgaWYgb25lIGRvZXNu4oCZdCB3YW50IHRvIGdvIHRoZSBjaGVja3BvaW50IGZpbGUg
cm91dGUgb3IgaGF2ZSBhIHByb3RvY29sDQo+IG1lY2hhbmlzbSwgdGhlIOKAnGxvb2t1cC10eXBl
4oCdIGZ1bmN0aW9uYWxpdHkgd291bGQgYmUgdXNlZnVsLiBBbGJlcnQsIFZpbmEsDQo+IGFuZCBJ
IGhhdmUgdGFsa2VkIGFib3V0IGNyZWF0aW5nIGEgbmV3IExDQUYgdHlwZSB0aGF0IGlzIGVzc2Vu
dGlhbGx5DQo+IOKAnExvb2t1cC1UeXBlIExDQUbigJ0gd2hpY2ggcmVxdWVzdHMg4oCcYWxsLW1v
cmUtc3BlY2lmaWPigJ0sIOKAnG1vcmUtc3BlY2lmaWPigJ0sDQo+IOKAnGV4YWN0LW1hdGNo4oCd
IGxvb2t1cCB0eXBlcy4NCj4gDQo+IENvbW1lbnRzPw0KPiANCj4gRGlubw0KPiANCj4gPiBPbiBP
Y3QgMTgsIDIwMTcsIGF0IDE6MDkgQU0sIG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20gd3Jv
dGU6DQo+ID4NCj4gPiBIaSBEaW5vLA0KPiA+DQo+ID4gUGxlYXNlIHNlZSBpbmxpbmUuDQo+ID4N
Cj4gPiBDaGVlcnMsDQo+ID4gTWVkDQo+ID4NCj4gPj4gLS0tLS1NZXNzYWdlIGQnb3JpZ2luZS0t
LS0tDQo+ID4+IERlIDogRGlubyBGYXJpbmFjY2kgW21haWx0bzpmYXJpbmFjY2lAZ21haWwuY29t
XQ0KPiA+PiBFbnZvecOpIDogbHVuZGkgMTYgb2N0b2JyZSAyMDE3IDE1OjA4DQo+ID4+IMOAIDog
Qk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTg0KPiA+PiBDYyA6IGxpc3BAaWV0Zi5vcmcgbGlzdA0K
PiA+PiBPYmpldCA6IFJlOiBbbGlzcF0gQ29tbWVudHMgdG8gZHJhZnQtYm91Y2FkYWlyLWxpc3At
bXVsdGlwbGUtcmVjb3Jkcy0wMA0KPiA+Pg0KPiA+Pj4gUkZDNjgzMCBvciB5b3VyIEludGVybmV0
IERyYWZ0Pw0KPiA+Pj4gW01lZF0gSeKAmW0gcmVmZXJyaW5nIHRvIFJGQzY4MzAgd2hpY2ggc2F5
cyB0aGUgZm9sbG93aW5nIDoNCj4gPj4+DQo+ID4+PiAgIFJlY29yZCBDb3VudDogIFRoaXMgaXMg
dGhlIG51bWJlciBvZiByZWNvcmRzIGluIHRoaXMgTWFwLVJlcXVlc3QNCj4gPj4+ICAgICAgbWVz
c2FnZS4gIEEgcmVjb3JkIGlzIGNvbXByaXNlZCBvZiB0aGUgcG9ydGlvbiBvZiB0aGUgcGFja2V0
IHRoYXQNCj4gPj4+ICAgICAgaXMgbGFiZWxlZCAnUmVjJyBhYm92ZSBhbmQgb2NjdXJzIHRoZSBu
dW1iZXIgb2YgdGltZXMgZXF1YWwgdG8NCj4gPj4+ICAgICAgUmVjb3JkIENvdW50LiAgRm9yIHRo
aXMgdmVyc2lvbiBvZiB0aGUgcHJvdG9jb2wsIGEgcmVjZWl2ZXIgTVVTVA0KPiA+Pj4gICAgICBh
Y2NlcHQgYW5kIHByb2Nlc3MgTWFwLVJlcXVlc3RzIHRoYXQgY29udGFpbiBvbmUgb3IgbW9yZSBy
ZWNvcmRzLA0KPiA+Pj4gICAgICBidXQgYSBzZW5kZXIgTVVTVCBvbmx5IHNlbmQgTWFwLVJlcXVl
c3RzIGNvbnRhaW5pbmcgb25lIHJlY29yZC4NCj4gPj4+ICAgICAgXl5eXl5eXl5eXl5eXl5eXl5e
Xl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl4NCj4gPj4+ICAgICAg
U3VwcG9ydCBmb3IgcmVxdWVzdGluZyBtdWx0aXBsZSBFSURzIGluIGEgc2luZ2xlIE1hcC1SZXF1
ZXN0Xg0KPiA+Pj4gICAgICBeXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5e
Xl5eXl5eXl5eXl5eXl5eXl5eXl4NCj4gPj4+ICAgICAgbWVzc2FnZSB3aWxsIGJlIHNwZWNpZmll
ZCBpbiBhIGZ1dHVyZSB2ZXJzaW9uIG9mIHRoZSBwcm90b2NvbC5eDQo+ID4+PiAgICAgIF5eXl5e
Xl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl4NCj4g
Pj4+DQo+ID4+PiBZZXMsIEkgZG8gdGhpbmsgaXQgaXMgdGltZSB0byBzcGVjaWZ5IHRoYXQgYmVo
YXZpb3IgaW4gdGhlIGJpcw0KPiBkb2N1bWVudC4NCj4gPj4+DQo+ID4+PiBTZWN0aW9uIDMgb2Yg
ZHJhZnQtYm91Y2FkYWlyLWxpc3AtbXVsdGlwbGUtcmVjb3JkcyBpcyBhbiBleGFtcGxlIG9mDQo+
IHdoYXQNCj4gPj4gY2FuIGJlIGNvbnNpZGVyZWQgaW4gdGhlIGJpcyBkb2N1bWVudC4NCj4gPj4N
Cj4gPj4gSU1PIHRoZSBkZXNjcmlwdGlvbiBpcyBub3Qgc3VmZmljaWVudCB0byB0ZWxsIGFuIGlt
cGxlbWVudGF0aW9uIHdoYXQgdG8NCj4gPj4gY29kZS4gSXQgaXMgdW5kZXIgc3BlY2lmaWVkLiBJ
4oCZZCBsb3ZlIHRvIGNvbnNpZGVyIHJlbW92aW5nIHRoZSBhYm92ZQ0KPiBidXQNCj4gPj4gaXQg
bmVlZHMgc3BlY2lmaWMvZGV0YWlsZWQgdGV4dCBkZXNjcmliaW5nIHdoeSBhbmQgd2hlbiBtdWx0
aXBsZQ0KPiByZWNvcmRzDQo+ID4+IGFyZSB1c2VkIGluIE1hcC1SZXF1ZXN0cy4NCj4gPg0KPiA+
IFtNZWRdIEFzIEkgc2FpZCBlYXJsaWVyLCB0aGF0IHRleHQgaXMgb25seSBhbiBleGFtcGxlIG9m
IGEgc3RhcnRpbmcNCj4gcG9pbnQuIFdlIGNhbiBhbHNvIHN0YXJ0IGZyb20gd2hhdCB5b3VyIGlt
cGxlbWVudGF0aW9uIGlzIGFscmVhZHkgZG9pbmcuDQo+ID4NCj4gPj4NCj4gPj4+IEnigJlsbCBo
YXZlIGEgbG9vayBhdCBpdC4gQnV0IHdoYXQgcGFydCBvZiBzZWN0aW9uIDM/IEFsbCB0aGUgcGFj
a2V0DQo+ID4+IGZvcm1hdCBkZXNjcmlwdGlvbnMgYXJlIGFscmVhZHkgaW4gUkZDNjgzMC4NCj4g
Pj4+IFtNZWRdIFRoZSBmb3JtYXQgbmVlZHMgdG8gYmUgdXBkYXRlZCBmb3IgcmVwbGllcy4NCj4g
Pj4NCj4gPj4gTm90IHRydWUuIE1hcC1SZXBsaWVzIGhhdmUgbXVsdGlwbGUgRUlEIHJlY29yZHMu
IEFuZCBJIHVzZSB0aGVtIGV2ZXJ5DQo+IGRheS4NCj4gPj4gOy0pDQo+ID4+DQo+ID4+PiBJdCBp
cyBkb2N1bWVudGVkIG5vIHdoZXJlIHRoYXQgYSBNYXAtUmVzb2x2ZXJzIGNhY2hpbmcgbWFwcGlu
Z3MuIEFuZA0KPiBpZg0KPiA+PiB5b3UgYXJlIHByb3Bvc2luZyB0aGF0IHlvdSBuZWVkIGEgbG90
IG1vcmUgdGV4dCB0byBkZXNjcmliZSBob3cNCj4gbWFwcGluZ3MNCj4gPj4gYXJlIGtlcHQgdXAg
dG8gZGF0ZSBpbiB0aGUgTWFwLVJlc29sdmVyLiBUaGlzIGlzIGEgbWFqb3IgYXJjaGl0ZWN0dXJh
bA0KPiA+PiBjaGFuZ2UgYW5kIHJlYWxseSBub3Qgc3VyZSB5b3Uga25vdyB0aGUgaW1wbGljYXRp
b25zIG9mIGl0Lg0KPiA+Pj4gW01lZF0gVGhhdCBzaW5nbGUgc2VudGVuY2UgaXMgaGlkaW5nIHRo
ZSBjYXNlIHdoZXJlIGEgc2luZ2xlIHJlcXVlc3QNCj4gPj4gZnJvbSBhbiB4VFIgbWF5IGJlIGZv
cmtlZCBpbnRvIG11bHRpcGxlIG9uZXMgYmVjYXVzZSB0YXJnZXQgRUlEcyBhcmUNCj4gbm90DQo+
ID4+IG1hbmFnZWQgYnkgdGhlIHNhbWUgc2VydmVycy4gV2hhdCBpcyBpbXBvcnRhbnQgaW4gdGhl
IHRleHQgeW91IHF1b3RlZA0KPiBpcw0KPiA+PiB0aGF0IHRoZSB4VFIgc2hvdWxkIGJlIHByZXBh
cmVkIHRvIHJlY2VpdmUgbXVsdGlwbGUgcmVwbGllcyBmb3IgYQ0KPiBzaW5nbGUNCj4gPj4gcmVx
dWVzdC4gVHdvIGNhc2VzIGFyZSB0byBiZSBjb25zaWRlcmVkOg0KPiA+Pj4gLSAgICBNdWx0aXBs
ZSByZWNvcmRzIGZvciB0aGUgc2FtZSBFSUQgdGhhdCBjYW5ub3QgYmUgaW5jbHVkZWQgaW4gYQ0K
PiA+PiBzaW5nbGUgcmVzcGx5DQo+ID4+PiAtICAgIE11bHRpcGxlIHJlcGxpZXM7IGVhY2ggZm9y
IGEgZ2l2ZW4gRUlEDQo+ID4+DQo+ID4+IEFuZCBob3cgZG9lcyB0aGUgSVRSIGtub3cgdG8gd2Fp
dCBmb3IgbXVsdGlwbGUgcmVwbGllcz8NCj4gPg0KPiA+IFtNZWRdIFRoaXMgdGhlIHJvbGUgb2Yg
TS1iaXQgaW4gdGhlIHJlc3BvbnNlLiBUaGF0IGJpdCBpcyBhbiBpbmRpY2F0aW9uDQo+IHRvIHdh
aXQgZm9yIG1vcmUgcmVwbGllcyBhc3NvY2lhdGVkIHdpdGggYSBzaW5nbGUgcmVxdWVzdC4gZHJh
ZnQtDQo+IGJvdWNhZGFpci1saXNwLW11bHRpcGxlLXJlY29yZHMgc3RhdGVzIHRoZSBmb2xsb3dp
bmc6DQo+ID4NCj4gPiAgIEluIG9yZGVyIHRvIGluZm9ybSBhbiBJVFIgdGhhdCBzdWJzZXF1ZW50
IE1hcC1SZXBseSBtZXNzYWdlcyB3aWxsDQo+ID4gICBmb2xsb3cgKG9yIG5vdCkgLCBhIGRlZGlj
YXRlZCBmbGFnIGJpdCBpcyBkZWZpbmVkIGZvciB0aGlzIHB1cnBvc2U6DQo+ID4gICBpdCBpcyBj
YWxsZWQgdGhlIE0tYml0IChtb3JlLW1hcC1yZXBseSBiaXQpLg0KPiA+DQo+ID4gSG93IGRvZXMg
aXQga25vdw0KPiA+PiB3aGVuIGFsbCBvZiB0aGVtIGNvbWUgaW4/IFRoaXMgaXMgbW9yZSBwcm90
b2NvbCBtYWNoaW5lcnkgdGhhdCBuZWVkcyB0bw0KPiBiZQ0KPiA+PiBzcGVj4oCZZWQgb3V0LiBB
bmQgSSBoYXZlIG5vdCBzZWVuIGFueSBvZiBpdCBpbiB5b3VyIGJ1bGsgc3BlYy4NCj4gPg0KPiA+
IFtNZWRdIFB1dHRpbmcgYXNpZGUgdGhlIHVzZSBvZiBUQ1AsIHRoZSBidWxrIHNwZWNpZmljYXRp
b24gZGVmaW5lcyBhDQo+IGRlZGljYXRlZCBiaXQgZm9yIHRoaXM6DQo+ID4NCj4gPiAgIG8gIFNl
dCB0aGUgTS1iaXQgZm9yIGFsbCBNYXAtQnVsay1SZXBseSBtZXNzYWdlcywgZXhjZXB0IGZvciB0
aGUgbGFzdA0KPiA+ICAgICAgb25lLg0KPiA+DQo+ID4+DQo+ID4+IERpbm8NCj4gPg0KDQo=


From nobody Fri Oct 27 10:49:21 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C04A313F5B1 for ; Fri, 27 Oct 2017 10:49:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.209
X-Spam-Level: 
X-Spam-Status: No, score=0.209 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DC_PNG_UNO_LARGO=0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_IMAGE_ONLY_08=1.651, HTML_IMAGE_RATIO_04=0.556, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LHoZ-Nu09GOV for ; Fri, 27 Oct 2017 10:49:18 -0700 (PDT)
Received: from mail-pg0-x22b.google.com (mail-pg0-x22b.google.com [IPv6:2607:f8b0:400e:c05::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A5BEF13F422 for ; Fri, 27 Oct 2017 10:49:18 -0700 (PDT)
Received: by mail-pg0-x22b.google.com with SMTP id g6so5820492pgn.6 for ; Fri, 27 Oct 2017 10:49:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=UbEkhRhrwtpCWL01EISrYR6yRqW6OQHnbZCp3d0YYzk=; b=IUPBpeEQSlXVZSpWVJQP7B6YIlQ4HGh8FL+am0ssm7w+u8KSNZN5mj3amzke+ACz1J VBKk34g/MBeOWMx4qsMOe9EV2iwpqxczvhL3+SYE2vCimKc6h5+2CD3z4XAZJSHaFQz8 EvNSjrp5fdc7zIHbpdCXNnQzfJcdyjifgodwAVdKSymig6MKGsIStBwnfd44bw0P5hK0 c7EdK/zQxq1U0y73trEbdqa+r7GIJXrXMsbFRQq/NrG5/ijG8T/5J4GBd+g/FtMAK1vs 6yC2KC5xMZY4j6Kr7mM3UhMt6WjvYh9Hflt5wib7OLscu5cahDd699x+Aq026M0TyzLC jLOg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=UbEkhRhrwtpCWL01EISrYR6yRqW6OQHnbZCp3d0YYzk=; b=N32JsyA/4w18Q1lmicQ1B99a1BTL24NdiMNje5tPohIkTsO75Y8HtauQ8rvpHywaF/ WogDN59FVfxZj6eeqByWXLrjh2XKVXHDpdkT75bFVhwK/GDB2iPAuZUO0da8wvPfnQ5c bydgFY0DcN3oFqtZkUeyOzBh1oHj26m3KE0cw516o1VEBoik2GGTe9j57xBmXT+OvrlF o8V4qUbGBMq5agRFw8XgNWsdVBehr0CkUbDMnhN4zOUM0IdlNusYXM8/Q6G/wr9/ObLk ERAfGpRcVYq4rsOOBmFULtJZs5IlfzMnUpL18J1wT5IVruiG9yAqGIXP1plLB1Gth6o9 NLZA==
X-Gm-Message-State: AMCzsaVPov71BHk6Rz17lXXNlWRIAm/FYaYNTiN4oSXQWxmhypeG6djR 5YOObc7yFePUR7Du6LEXbpw=
X-Google-Smtp-Source: ABhQp+Ruu77QZ2f9l2pvi6WC4J+jzhtSWbduoTgaqE4KKbl0X+sogvoc+UjhfUAbXMlis72iQggsnQ==
X-Received: by 10.99.44.208 with SMTP id s199mr939696pgs.80.1509126557692; Fri, 27 Oct 2017 10:49:17 -0700 (PDT)
Received: from [10.197.31.157] (173-11-119-245-SFBA.hfc.comcastbusiness.net. [173.11.119.245]) by smtp.gmail.com with ESMTPSA id g16sm17305589pfd.87.2017.10.27.10.49.16 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 27 Oct 2017 10:49:16 -0700 (PDT)
From: Dino Farinacci 
Message-Id: 
Content-Type: multipart/alternative; boundary="Apple-Mail=_A62F81C6-7639-452C-9BA1-9D17AD53D574"
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
Date: Fri, 27 Oct 2017 10:49:15 -0700
In-Reply-To: <29F77155-522E-4975-ACC4-16C6B51E6251@gigix.net>
Cc: mohamed.boucadair@orange.com, "lisp@ietf.org list" 
To: Luigi Iannone 
References: <37C27B2F-AD76-4B5F-AFE6-E56D02180DD4@gmail.com> <787AE7BB302AE849A7480A190F8B93300A051871@OPEXCLILMA3.corporate.adroot.infra.ftgroup>  <3B2CB613-4AEF-4607-B5CE-DB12ABBFD5E6@gigix.net> <4F9E40DF-3396-4BB8-90BB-74F035B7B96F@gmail.com> <29F77155-522E-4975-ACC4-16C6B51E6251@gigix.net>
X-Mailer: Apple Mail (2.3273)
Archived-At: 
Subject: Re: [lisp] Comments to draft-boucadair-lisp-multiple-records-00
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Fri, 27 Oct 2017 17:49:20 -0000

--Apple-Mail=_A62F81C6-7639-452C-9BA1-9D17AD53D574
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

> Does it clear state what the ETR has to do when it receives a =
Map-Request with multiple EIDs?

This is what the Record Count field says in RFC6833bis in "4.2.  =
Map-Request Message Format" section:



Dino


--Apple-Mail=_A62F81C6-7639-452C-9BA1-9D17AD53D574
Content-Type: multipart/related;
	type="text/html";
	boundary="Apple-Mail=_2E6BA38C-E065-4B6F-A0DA-A5BC70B38DAB"


--Apple-Mail=_2E6BA38C-E065-4B6F-A0DA-A5BC70B38DAB
Content-Transfer-Encoding: 7bit
Content-Type: text/html;
	charset=us-ascii


Does it clear state what the ETR has to do when it receives a Map-Request with multiple EIDs?

This is what the Record Count field says in RFC6833bis in "4.2.  Map-Request Message Format" section:


Dino


--Apple-Mail=_2E6BA38C-E065-4B6F-A0DA-A5BC70B38DAB
Content-Transfer-Encoding: base64
Content-Disposition: inline;
	filename=PastedGraphic-8.png
Content-Type: image/png;
	name="PastedGraphic-8.png"
Content-Id: <342CF2F2-333B-4F09-982F-FADDAD922E66>
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--Apple-Mail=_2E6BA38C-E065-4B6F-A0DA-A5BC70B38DAB--

--Apple-Mail=_A62F81C6-7639-452C-9BA1-9D17AD53D574--


From nobody Fri Oct 27 14:23:24 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74C051386A1 for ; Fri, 27 Oct 2017 14:23:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6040Njr3JEFm for ; Fri, 27 Oct 2017 14:23:20 -0700 (PDT)
Received: from mail-pf0-x22f.google.com (mail-pf0-x22f.google.com [IPv6:2607:f8b0:400e:c00::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BE02413B144 for ; Fri, 27 Oct 2017 14:23:20 -0700 (PDT)
Received: by mail-pf0-x22f.google.com with SMTP id t188so5782043pfd.10 for ; Fri, 27 Oct 2017 14:23:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=J9NzseqiFgoy1kxD+zYsWw/RFpnnFD1Kbyfy4ssLA7k=; b=Xp+Sh87DFhGYVuOIvXZzG2WAvd0uTlBw7uZGii5y+RK1D0pSB3Mg/90iOELldFi/P2 T4N5XDbrLEL4G6X9dBtQo7k/0z6nopH2qjbR33mG9xhFfF8YgkVjr9VubawlC0edWOwp ZwOFd/TispqDYg2HY9/Ub4ug4Kw/zPf/4AVeV4dXh3/tS/1W47uFbq3K1MTVZaeTmQm6 8RJvUqxeguXg+m1YpqL2lLmG7Qik/f4ErfS9qyCm/uVX6sO7+T9326hTd2Tfc0ZLebbz HOjeDK9yatOhjO0+s3F2FHL3nMioGo/QNg6XTUt9/GhJ4hJxrrT/RrERuroR0NKI8Nzx 2pHw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=J9NzseqiFgoy1kxD+zYsWw/RFpnnFD1Kbyfy4ssLA7k=; b=khlGW1Ks4/eVELOOD7eMNsYXrdaDtpPFmmK2YZG1QF/gMaVPEP6nhFrqYsJsPKaThs 7JuCdgoEDU+haiivOCbtBCBGoF8Bp99H6ihVMP2Pwiw0BmYY0kiw6SR0ioI6FrXUpc8u PG/nOZFNiqK8gmf4wPMZFU1JVo3kkTKDZ+zqsu9t1oHk5NE6sY9hN5nsvTQi7zfoyp7Z KS8CtCHiCsxIt73FYc0lnW3jS7bDc8bu433l16QOw9dkg0uoJaomEkt+b+G/uWL1hSqn 7HLoZw0/oPlrIrOOFfGRs5QMmddhcsuzK1CFC+Fo0gksW838Bu1dgfK7Qocp5GyDD4dM n2dQ==
X-Gm-Message-State: AMCzsaXXelZZliziP8iJCEiyhe6LwEQyeFyJh6m8xH/A+Vq1q3lSqbmk MO2UD8h9245QRVvq5JQhb0s=
X-Google-Smtp-Source: ABhQp+RihIXZgK68G0Nifr3YG4yV5PtSatcalJL4fZZZcrOUB63WtyHnQmbDS2kHc0Z0p+2fdS1dLw==
X-Received: by 10.98.72.198 with SMTP id q67mr1637228pfi.110.1509139400280; Fri, 27 Oct 2017 14:23:20 -0700 (PDT)
Received: from dino-macbook.lan (c-67-180-23-75.hsd1.ca.comcast.net. [67.180.23.75]) by smtp.gmail.com with ESMTPSA id z7sm12679769pgp.36.2017.10.27.14.23.18 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 27 Oct 2017 14:23:19 -0700 (PDT)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Dino Farinacci 
In-Reply-To: <09B6F8AE-3CCE-4FC9-9100-16EE8D7DA616@gigix.net>
Date: Fri, 27 Oct 2017 14:23:17 -0700
Cc: Alberto Rodriguez-Natal , "lisp@ietf.org list" 
Content-Transfer-Encoding: quoted-printable
Message-Id: <1A6BA673-E9C0-4F70-9493-E715AFE7156A@gmail.com>
References:  <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com>  <1AAAC5C3-27FA-47A9-819F-42B2357E3A08@gmail.com>  <3E61C832-97B2-4776-B375-9A473D600A61@gmail.com>  <09B6F8AE-3CCE-4FC9-9100-16EE8D7DA616@gigix.net>
To: Luigi Iannone 
X-Mailer: Apple Mail (2.3273)
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Fri, 27 Oct 2017 21:23:22 -0000

I removed it. See a separate email with new diff file and still open =
issues.

Dino

> On Oct 26, 2017, at 2:18 AM, Luigi Iannone  wrote:
>=20
> Personal opinion here...
>=20
>> On 25 Oct 2017, at 05:01, Alberto Rodriguez-Natal =
 wrote:
>>>=20
>> [AR4] Removing the conflicting text works. Alternatively, we can
>> update it to reflect actual LISP usage.
>>=20
>=20
> Since LISP usage may evolve I would prefer removing the conflicting =
text, rather than adding text that may be stale at some point in the =
future.
>=20
> ciao
>=20
> L.
>=20


From nobody Fri Oct 27 14:52:19 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5B9E13F5E0 for ; Fri, 27 Oct 2017 14:52:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.598
X-Spam-Level: 
X-Spam-Status: No, score=-0.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_COMMENT_SAVED_URL=1.391, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_HTML_ATTACH=0.01] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Jys_odLlWHv2 for ; Fri, 27 Oct 2017 14:52:08 -0700 (PDT)
Received: from mail-pg0-x22c.google.com (mail-pg0-x22c.google.com [IPv6:2607:f8b0:400e:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CDFB613F5EC for ; Fri, 27 Oct 2017 14:52:01 -0700 (PDT)
Received: by mail-pg0-x22c.google.com with SMTP id g6so6226938pgn.6 for ; Fri, 27 Oct 2017 14:52:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=4VCLq0cd86lwJJXYM3O85zWy/YVyUgVHqh6UUNQ7AYA=; b=M7jO08NqWjeP11dvdHDS9p5SNTEeZzhIshXEnHarh0Uxcy1lR25YV3hnK/tsLlrDOJ oAFhteHBimIgTwkh0Sg8gUvxAwGTnz3rkSdkSynjFI0jtYoB4olqvpznoiMieqalsezU ArKFVfry1lgCfIptjzzt19c0zj9p3Wr1UylIUAfsVMIg4gZoTDRRB8aPp3eKADfjbsPt YjUnU77v/ppq5xjO5EpYkgp2/ZMb6BrmL+8ZJ/U1NKVyNtsOlL7kYVXkmTTBw5GjFusE hR3ky5Da8pjPc6YFmVdnMkhZin3KhuHfriDZhi41MASf95pBGuBqRkj4AIxJKBxqJTMZ vtsQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=4VCLq0cd86lwJJXYM3O85zWy/YVyUgVHqh6UUNQ7AYA=; b=q0eGY3JJZa/i0hpugD1jO1DdYHbxRlWYxPrJcDzmMe4t25SOF6FXq1PAOQpkHCY6Ok CBpAAyBNas39DvatCliE0sDtFoSIH9wZJYLUCtsZyIUx91rU6NUcEMOgUtaM/myZQXEY 2/xZtcc3lYj/IOFuaciJdlF5HKkVtfy2YR30b5V7W5WAIVSUS6n/4ADJDKEUCoaxonKa r3oDxRAH75lICtoaZMKZDnAoy4pw2SJKey7cdjupoUnfOYSLVZx0MyfflwQ8tYbqVcz0 i94RvB8NoaU5ZFRI+QW1D6Mtc/mi/0lpkvlacdVqnIl8Wr9nK/e3UQJCvb3JwtuZqazC /+mg==
X-Gm-Message-State: AMCzsaV6gGn+3nOfwzA6s6BFm/3Y71MMa7rbyPoM9h6vCXGVxENuCBAO DoqLI3nVA/jOHKZ5vlJCxXM=
X-Google-Smtp-Source: ABhQp+TYdEmmlKr0HMYK4TNF04osxQyIsFspbPnDQ3Z+/9p2i3hUBz77XDiRpmxRZZgTBjWxs78tgA==
X-Received: by 10.98.89.6 with SMTP id n6mr1656462pfb.89.1509141121240; Fri, 27 Oct 2017 14:52:01 -0700 (PDT)
Received: from dino-macbook.lan (c-67-180-23-75.hsd1.ca.comcast.net. [67.180.23.75]) by smtp.gmail.com with ESMTPSA id u46sm13819698pgn.80.2017.10.27.14.51.55 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 27 Oct 2017 14:52:00 -0700 (PDT)
From: Dino Farinacci 
Message-Id: 
Content-Type: multipart/mixed; boundary="Apple-Mail=_7E55A47D-9F88-4D47-84E4-B7D201698EFD"
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
Date: Fri, 27 Oct 2017 14:51:54 -0700
In-Reply-To: <09B6F8AE-3CCE-4FC9-9100-16EE8D7DA616@gigix.net>
Cc: Alberto Rodriguez-Natal , "lisp@ietf.org list" 
To: Luigi Iannone 
References:  <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com>  <1AAAC5C3-27FA-47A9-819F-42B2357E3A08@gmail.com>  <3E61C832-97B2-4776-B375-9A473D600A61@gmail.com>  <09B6F8AE-3CCE-4FC9-9100-16EE8D7DA616@gigix.net>
X-Mailer: Apple Mail (2.3273)
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Fri, 27 Oct 2017 21:52:16 -0000

--Apple-Mail=_7E55A47D-9F88-4D47-84E4-B7D201698EFD
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

See rfcdiff.html file enclosed with latest changes proposed for =
draft-ietf-lisp-rfc6830bis-06.txt. Here are the open issues we need =
discussion about, they were the ones marked with Response (3) defined =
notation in a previous email.

> The EID-to-RLOC map-cache is a short-lived, on-demand table in an ITR =
that store
>=20
> [AR] We probably should remove the note on the map-cache being
> =E2=80=9Cshort-lived=E2=80=9D since that may not be the case in some =
deployments.

Response (3).

But it is in other deployments if you don=E2=80=99t want to use any of =
the update mapping techniques, like map-versioning, SMRs, pubsub, and =
Map-Notify messaging.

> The same database mapping entries MUST be configured on all ETRs for a
> given site.  In a steady state, the EID-Prefixes for the site and the
> Locator-Set for each EID-Prefix MUST be the same on all ETRs.
>=20
> [AR] Is this still the case when overlapping prefixes and/or
> merge-semantics are in place?

Response (3).

Well, yes. Let me answer with an example. Say there are two xTRs A and B =
and they are connecting the LISP site for 10.0.0.0/8. Say 10.1.0.0/16 =
moves out to another LISP site, a LISP site that is multihomed with xTRs =
A=E2=80=99 and B=E2=80=99. Both A=E2=80=99 and B=E2=80=99 need to be =
configured (i.e. in this case discover) that the /16 moved into their =
site.

> Data-Probe:  A Data-Probe is a LISP-encapsulated data packet where the
> inner-header destination address equals the outer-header destination
> address used to trigger a Map-Reply by a decapsulating ETR.
>=20
> [AR] Is anyone using data-probes? I=E2=80=99d like to suggest removing =
this text.

(3) response.

Early on in the LISP design, service providers thought this was useful. =
We have carefully doctored the text to make it security safe, but it =
does avoid packet loss when setting up a first-time round-trip packet =
exchange. The initiator=E2=80=99s packet causes the mapping database =
lookup, but the return packet does not need a lookup.=20

There might be specialized applications that may make use of it.=20

> Since the LISP architecture uses a caching scheme to retrieve and
> store EID-to-RLOC mappings, the only way an ITR can get a more
> up-to-date mapping is to re-request the mapping.
>=20
> [AR] We could relax this constrain and/or reference PubSub here.

Response (2).=20

Want the WG to decide if this individual submission should be =
referenced. I think the pubsub design is simple and can work but we have =
little implementation experience with it thusfar.

> When adding a new Locator record in lexicographic order to the end of
> a Locator-Set, it is easy to update mappings.  We assume that new
> mappings will maintain the same Locator ordering as the old mapping
> but will just have new Locators appended to the end of the list.  So,
> some ITRs can have a new mapping while other ITRs have only an old
> mapping that is used until they time out.  When an ITR has only an old
> mapping but detects bits set in the Locator-Status-Bits that
> correspond to Locators beyond the list it has cached, it simply
> ignores them.
>=20
> [AR] Probably we could complement this paragraph with something like
> "It is RECOMMENDED to notify the ITRs that they should update their
> Map-Caches, e.g. via an SMR.=E2=80=9D

Response (3).

We say this in other sections about updating mappings. In this =
paragraph, there is a primary focus on locator-status-bits.

> When a Locator record is removed from a Locator-Set, ITRs that have
> the mapping cached will not use the removed Locator because the xTRs
> will set the Locator-Status-Bit to 0.
>=20
> [AR] Since LSB are not mandatory and not used in many deployments we
> should recommend notifying the affected ITRs via SMRs or PubSub.

Response (3).=20

The WG should discuss this. If you want to keep the locator-set in tact =
in the ITR, using LSBs is a faster way to convey to not use a subset of =
the set.

Thanks,
Dino


--Apple-Mail=_7E55A47D-9F88-4D47-84E4-B7D201698EFD
Content-Disposition: attachment;
	filename=rfc6830bis.html
Content-Type: text/html;
	x-unix-mode=0644;
	name="rfc6830bis.html"
Content-Transfer-Encoding: quoted-printable



=20
  =20
  =20
  Diff: draft-ietf-lisp-rfc6830bis-05.txt - =
draft-ietf-lisp-rfc6830bis-06.txt=20
  =20
     =20
=20
=20
  =20
  =20
      =

      =

      =

      =

      
< draft-ietf-lisp-rfc6830bis-05.txt  =
 draft-ietf-lisp-rfc6830bis-06.txt >
 =


      
Network Working =
Group                                       D. Farinacci =
Network Working Group                           =
            D. Farinacci

      
Internet-Draft    =
                                             V. Fuller Internet-Draft                                           =
      V. Fuller

      
Intended status: =
Standards Track                                D. Meyer =
Intended status: Standards Track                =
                D. Meyer

      

      
Expires: March 2, 2018                                    =
      D. Lewis Expires: April 30, 2018                                   =
      D. Lewis

      
                  =
                                         Cisco Systems                                                          =
  Cisco Systems

      
                  =
                                     A. Cabellos (Ed.)                                                        =
A. Cabellos (Ed.)

      
                  =
                                     UPC/BarcelonaTech                                                        =
UPC/BarcelonaTech

      

      
                =
                                         August =
29, 2017                       =
                                  October =
27, 2017

      
 =


      
               =
The Locator/ID Separation Protocol (LISP)                The Locator/ID Separation Protocol =
(LISP)

      

      
                =
     draft-ietf-lisp-rfc6830bis-05 =
                     =
draft-ietf-lisp-rfc6830bis-06

      
 =


      
Abstract =
Abstract

      
 =


      
   This document =
describes the data-plane protocol for the Locator/ID    This document describes the data-plane protocol for =
the Locator/ID

      
   Separation =
Protocol (LISP).  LISP defines two namespaces, End-point =
   Separation Protocol (LISP).  LISP defines =
two namespaces, End-point

      
   Identifiers =
(EIDs) that identify end-hosts and Routing Locators    Identifiers (EIDs) that identify end-hosts and =
Routing Locators

      
   (RLOCs) that =
identify network attachment points.  With this, LISP    (RLOCs) that identify network attachment points.  =
With this, LISP

      
   effectively =
separates control from data, and allows routers to create =
   effectively separates control from data, and =
allows routers to create

      
   overlay =
networks.  LISP-capable routers exchange encapsulated packets =
   overlay networks.  LISP-capable routers =
exchange encapsulated packets

      
   according to =
EID-to-RLOC mappings stored in a local map-cache.  The    according to EID-to-RLOC mappings stored in a local =
map-cache.  The

      
 =


      
skipping to =
change at =
page 1, line 39 =C2=B6 =
skipping to change at page 1, line 39 =C2=B6

      
   among other =
features.    among other =
features.

      
 =


      
Status of This =
Memo Status of This Memo

      
 =


      
   This =
Internet-Draft is submitted in full conformance with the =
   This Internet-Draft is submitted in full =
conformance with the

      
   provisions of =
BCP 78 and BCP 79.    provisions of =
BCP 78 and BCP 79.

      
 =


      
   =
Internet-Drafts are working documents of the Internet =
Engineering    Internet-Drafts are =
working documents of the Internet Engineering

      
   Task Force =
(IETF).  Note that other groups may also distribute    Task Force (IETF).  Note that other groups may also =
distribute

      
   working =
documents as Internet-Drafts.  The list of current Internet- =
   working documents as Internet-Drafts.  The =
list of current Internet-

      

      
   Drafts is at =
http://datatracker.ietf.org/drafts/current/.    Drafts is at https://datatracker.ietf.org/drafts/current/.

      
 =


      
   =
Internet-Drafts are draft documents valid for a maximum of six =
months    Internet-Drafts are draft =
documents valid for a maximum of six months

      
   and may be =
updated, replaced, or obsoleted by other documents at any =
   and may be updated, replaced, or obsoleted =
by other documents at any

      
   time.  It is =
inappropriate to use Internet-Drafts as reference    time.  It is inappropriate to use Internet-Drafts as =
reference

      
   material or to =
cite them other than as "work in progress."    material or to cite them other than as "work in =
progress."

      
 =


      

      
   This =
Internet-Draft will expire on March 2, =
2018.    This Internet-Draft will =
expire on April 30, 2018.

      
 =


      
Copyright =
Notice Copyright Notice

      
 =


      
   Copyright (c) =
2017 IETF Trust and the persons identified as the    Copyright (c) 2017 IETF Trust and the persons =
identified as the

      
   document =
authors.  All rights reserved.    =
document authors.  All rights reserved.

      
 =


      
   This document =
is subject to BCP 78 and the IETF Trust's Legal    This document is subject to BCP 78 and the IETF =
Trust's Legal

      
   Provisions =
Relating to IETF Documents    =
Provisions Relating to IETF Documents

      

      
   =
(http://trustee.ietf.org/license-info) in effect on the date of =
   (https://trustee.ietf.org/license-info) in effect on =
the date of

      
   publication of =
this document.  Please review these documents    publication of this document.  Please review these =
documents

      
   carefully, as =
they describe your rights and restrictions with respect =
   carefully, as they describe your rights and =
restrictions with respect

      
   to this =
document.  Code Components extracted from this document must =
   to this document.  Code Components extracted =
from this document must

      
   include =
Simplified BSD License text as described in Section 4.e of =
   include Simplified BSD License text as =
described in Section 4.e of

      
   the Trust =
Legal Provisions and are provided without warranty as    the Trust Legal Provisions and are provided without =
warranty as

      
   described in =
the Simplified BSD License.    =
described in the Simplified BSD License.

      
 =


      
Table of =
Contents Table of Contents

      
 =


      
   1.  =
Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   =
3    1.  Introduction  . . . . . . . . =
. . . . . . . . . . . . . . . .   3

      
 =


      
skipping to =
change at =
page 2, line 46 =C2=B6 =
skipping to change at page 2, line 46 =C2=B6

      
   9.  Routing =
Locator Selection . . . . . . . . . . . . . . . . . .  23 =
   9.  Routing Locator Selection . . . . . . . =
. . . . . . . . . . .  23

      
   10. Routing =
Locator Reachability  . . . . . . . . . . . . . . . .  24 =
   10. Routing Locator Reachability  . . . . . =
. . . . . . . . . . .  24

      
     10.1.  Echo =
Nonce Algorithm . . . . . . . . . . . . . . . . . .  27 =
     10.1.  Echo Nonce Algorithm . . . . . . . =
. . . . . . . . . . .  27

      
     10.2.  =
RLOC-Probing Algorithm . . . . . . . . . . . . . . . . .  28 =
     10.2.  RLOC-Probing Algorithm . . . . . . =
. . . . . . . . . . .  28

      
   11. EID =
Reachability within a LISP Site . . . . . . . . . . . . .  29 =
   11. EID Reachability within a LISP Site . . =
. . . . . . . . . . .  29

      
   12. Routing =
Locator Hashing . . . . . . . . . . . . . . . . . . .  30 =
   12. Routing Locator Hashing . . . . . . . . =
. . . . . . . . . . .  30

      
   13. Changing =
the Contents of EID-to-RLOC Mappings . . . . . . . .  31 =
   13. Changing the Contents of EID-to-RLOC =
Mappings . . . . . . . .  31

      
     13.1.  Clock =
Sweep  . . . . . . . . . . . . . . . . . . . . . .  32      13.1.  Clock Sweep  . . . . . . . . . . . . . . . . =
. . . . . .  32

      
     13.2.  =
Solicit-Map-Request (SMR)  . . . . . . . . . . . . . . .  32 =
     13.2.  Solicit-Map-Request (SMR)  . . . . =
. . . . . . . . . . .  32

      
     13.3.  =
Database Map-Versioning  . . . . . . . . . . . . . . . .  34 =
     13.3.  Database Map-Versioning  . . . . . =
. . . . . . . . . . .  34

      

      
   14. =
Multicast Considerations  . . . . . . . . . . . . . . . . . .  34    14. =
Multicast Considerations  . . . . . . . . . . . . . . . . . .  35

      
   15. Router =
Performance Considerations . . . . . . . . . . . . . .  35 =
   15. Router Performance Considerations . . . =
. . . . . . . . . . .  35

      
   16. Mobility =
Considerations . . . . . . . . . . . . . . . . . . .  36 =
   16. Mobility Considerations . . . . . . . . =
. . . . . . . . . . .  36

      
     16.1.  Slow =
Mobility  . . . . . . . . . . . . . . . . . . . . .  36 =
     16.1.  Slow Mobility  . . . . . . . . . . =
. . . . . . . . . . .  36

      
     16.2.  Fast =
Mobility  . . . . . . . . . . . . . . . . . . . . .  36 =
     16.2.  Fast Mobility  . . . . . . . . . . =
. . . . . . . . . . .  36

      
     16.3.  LISP =
Mobile Node Mobility  . . . . . . . . . . . . . . .  37 =
     16.3.  LISP Mobile Node Mobility  . . . . =
. . . . . . . . . . .  37

      
   17. LISP xTR =
Placement and Encapsulation Methods  . . . . . . . .  38 =
   17. LISP xTR Placement and Encapsulation =
Methods  . . . . . . . .  38

      
     17.1.  =
First-Hop/Last-Hop xTRs  . . . . . . . . . . . . . . . .  39 =
     17.1.  First-Hop/Last-Hop xTRs  . . . . . =
. . . . . . . . . . .  39

      
     17.2.  =
Border/Edge xTRs . . . . . . . . . . . . . . . . . . . .  39 =
     17.2.  Border/Edge xTRs . . . . . . . . . =
. . . . . . . . . . .  39

      
     17.3.  ISP =
Provider Edge (PE) xTRs  . . . . . . . . . . . . . .  40 =
     17.3.  ISP Provider Edge (PE) xTRs  . . . =
. . . . . . . . . . .  40

      
     17.4.  LISP =
Functionality with Conventional NATs  . . . . . . .  40 =
     17.4.  LISP Functionality with =
Conventional NATs  . . . . . . .  40

      
 =


      
skipping to =
change at =
page 3, line 22 =C2=B6 =
skipping to change at page 3, line 22 =C2=B6

      
     18.3.  =
Traceroute Using Mixed Locators  . . . . . . . . . . . .  43 =
     18.3.  Traceroute Using Mixed Locators  . =
. . . . . . . . . . .  43

      
   19. Security =
Considerations . . . . . . . . . . . . . . . . . . .  43 =
   19. Security Considerations . . . . . . . . =
. . . . . . . . . . .  43

      
   20. Network =
Management Considerations . . . . . . . . . . . . . .  44 =
   20. Network Management Considerations . . . =
. . . . . . . . . . .  44

      
   21. IANA =
Considerations . . . . . . . . . . . . . . . . . . . . .  44 =
   21. IANA Considerations . . . . . . . . . . =
. . . . . . . . . . .  44

      
     21.1.  LISP =
UDP Port Numbers  . . . . . . . . . . . . . . . . .  44 =
     21.1.  LISP UDP Port Numbers  . . . . . . =
. . . . . . . . . . .  44

      
   22. References =
 . . . . . . . . . . . . . . . . . . . . . . . . .  44    22. References  . . . . . . . . . . . . . . . . . . . =
. . . . . .  44

      
     22.1.  =
Normative References . . . . . . . . . . . . . . . . . .  44 =
     22.1.  Normative References . . . . . . . =
. . . . . . . . . . .  44

      
     22.2.  =
Informative References . . . . . . . . . . . . . . . . .  47 =
     22.2.  Informative References . . . . . . =
. . . . . . . . . . .  47

      
   Appendix A.  =
Acknowledgments  . . . . . . . . . . . . . . . . . .  51 =
   Appendix A.  Acknowledgments  . . . . . . . =
. . . . . . . . . . .  51

      
   Appendix B.  =
Document Change Log  . . . . . . . . . . . . . . . .  51 =
   Appendix B.  Document Change Log  . . . . . =
. . . . . . . . . . .  51

      

      
     B.1.  =
Changes to draft-ietf-lisp-rfc6830bis-04  =
. . . . . . . .  52      B.1.  =
Changes to draft-ietf-lisp-rfc6830bis-06  =
. . . . . . . .  52

      
     B.2.  =
Changes to draft-ietf-lisp-rfc6830bis-03  =
. . . . . . . .  52      B.2.  =
Changes to draft-ietf-lisp-rfc6830bis-05  =
. . . . . . . .  52

      
     B.3.  =
Changes to draft-ietf-lisp-rfc6830bis-02  =
. . . . . . . .  52      B.3.  =
Changes to draft-ietf-lisp-rfc6830bis-04  =
. . . . . . . .  52

      
     B.4.  =
Changes to draft-ietf-lisp-rfc6830bis-01  =
. . . . . . . .  52      B.4.  =
Changes to draft-ietf-lisp-rfc6830bis-03  =
. . . . . . . .  52

      
     B.5.  =
Changes to draft-ietf-lisp-rfc6830bis-00  . . . . . . . .  52      B.5.  =
Changes to draft-ietf-lisp-rfc6830bis-02  . . . . =
. . . .  53

      
   Authors' =
Addresses  . . . . . . . . . . . . . . . . . . . . . . .  52      B.6.  Changes to draft-ietf-lisp-rfc6830bis-01  . =
. . . . . . .  53

      
 =
     B.7.  Changes =
to draft-ietf-lisp-rfc6830bis-00  . . . . . . . .  53

      
 =
   Authors' Addresses  . . . . . . . . . . . . =
. . . . . . . . . . .  53

      
 =


      
1.  =
Introduction 1.  Introduction

      
 =


      
   This document =
describes the Locator/Identifier Separation Protocol    This document describes the Locator/Identifier =
Separation Protocol

      
   (LISP).  LISP =
is an encapsulation protocol built around the    (LISP).  LISP is an encapsulation protocol built =
around the

      
   fundamental =
idea of separating the topological location of a network =
   fundamental idea of separating the =
topological location of a network

      
   attachment =
point from the node's identity [CHIAPPA].  As a result    attachment point from the node's identity [CHIAPPA].  =
As a result

      
   LISP creates =
two namespaces: Endpoint Identifiers (EIDs), that are    LISP creates two namespaces: Endpoint Identifiers =
(EIDs), that are

      
   used to =
identify end-hosts (e.g., nodes or Virtual Machines) and =
   used to identify end-hosts (e.g., nodes or =
Virtual Machines) and

      
   routable =
Routing Locators (RLOCs), used to identify network    routable Routing Locators (RLOCs), used to identify =
network

      
 =


      
skipping to =
change at =
page 5, line 19 =C2=B6 =
skipping to change at page 5, line 19 =C2=B6

      
      the first =
(most inner) LISP header of a packet.  The host obtains =
      the first (most inner) LISP header of a =
packet.  The host obtains

      
      a =
destination EID the same way it obtains a destination address =
      a destination EID the same way it obtains =
a destination address

      
      today, for =
example, through a Domain Name System (DNS) [RFC1034]       today, for example, through a Domain Name System =
(DNS) [RFC1034]

      
      lookup or =
Session Initiation Protocol (SIP) [RFC3261] exchange.       lookup or Session Initiation Protocol (SIP) =
[RFC3261] exchange.

      
      The source =
EID is obtained via existing mechanisms used to set a       The source EID is obtained via existing mechanisms =
used to set a

      
      host's =
"local" IP address.  An EID used on the public Internet =
      host's "local" IP address.  An EID used =
on the public Internet

      
      must have =
the same properties as any other IP address used in that =
      must have the same properties as any =
other IP address used in that

      
      manner; =
this means, among other things, that it must be globally =
      manner; this means, among other things, =
that it must be globally

      
      unique.  An =
EID is allocated to a host from an EID-Prefix block       unique.  An EID is allocated to a host from an =
EID-Prefix block

      
      associated =
with the site where the host is located.  An EID can be =
      associated with the site where the host =
is located.  An EID can be

      

      
      used by a =
host to refer to other hosts.  EIDs MUST NOT be =
used as       used by a host =
to refer to other hosts.  Note that EID blocks MAY

      
      LISP RLOCs.  Note that EID blocks MAY be =
assigned in a       be assigned in a =
hierarchical manner, independent of the network

      
      =
hierarchical manner, independent of the network topology, to =
      topology, to facilitate scaling of the =
mapping database.  In

      
      =
facilitate scaling of the mapping database.  In addition, an =
EID       addition, an EID block =
assigned to a site may have site-local
      block =
assigned to a site may have site-local structure       structure (subnetting) for routing within the =
site; this structure

      
      =
(subnetting) for routing within the site; this structure is not =
      is not visible to the global routing =
system.  In theory, the bit

      
      visible =
to the global routing system.  In theory, the bit string =
      string that represents an EID for one =
device can represent an RLOC

      
      that =
represents an EID for one device can represent an RLOC for a =
      for a different device.  As the =
architecture is realized, if a

      
      different =
device.  As the architecture is realized, if a given bit =
      given bit string is both an RLOC and an =
EID, it must refer to the

      
      string is =
both an RLOC and an EID, it must refer to the same       same entity in both cases.  When used in =
discussions with other

      
      entity in =
both cases.  When used in discussions with other 

      
      Locator/ID =
separation proposals, a LISP EID will be called an       Locator/ID separation proposals, a LISP EID will =
be called an

      
      "LEID".  =
Throughout this document, any references to "EID" refer =
      "LEID".  Throughout this document, any =
references to "EID" refer

      
      to an =
LEID.       to an LEID.

      
 =


      
   EID-Prefix:   =
An EID-Prefix is a power-of-two block of EIDs that are    EID-Prefix:   An EID-Prefix is a power-of-two block =
of EIDs that are

      
      allocated =
to a site by an address allocation authority.  EID-       allocated to a site by an address allocation =
authority.  EID-

      
      Prefixes =
are associated with a set of RLOC addresses that make up =
      Prefixes are associated with a set of =
RLOC addresses that make up

      
      a "database =
mapping".  EID-Prefix allocations can be broken up       a "database mapping".  EID-Prefix allocations can =
be broken up

      
      into =
smaller blocks when an RLOC set is to be associated with the =
      into smaller blocks when an RLOC set is =
to be associated with the

      
      larger =
EID-Prefix block.  A globally routed address block (whether =
      larger EID-Prefix block.  A globally =
routed address block (whether

      
 =


      
skipping to =
change at =
page 6, line 17 =C2=B6 =
skipping to change at page 6, line 14 =C2=B6

      
      supplies an =
EID value for the destination address field of the IP       supplies an EID value for the destination address =
field of the IP

      
      header when =
communicating globally (i.e., outside of its routing       header when communicating globally (i.e., outside =
of its routing

      
      domain).  =
An end-system can be a host computer, a switch or router =
      domain).  An end-system can be a host =
computer, a switch or router

      
      device, or =
any network appliance.       device, =
or any network appliance.

      
 =


      
   Ingress Tunnel =
Router (ITR):   An ITR is a router that resides in a    Ingress Tunnel Router (ITR):   An ITR is a router =
that resides in a

      
      LISP site.  =
Packets sent by sources inside of the LISP site to       LISP site.  Packets sent by sources inside of the =
LISP site to

      
      =
destinations outside of the site are candidates for =
encapsulation       destinations =
outside of the site are candidates for encapsulation

      
      by the ITR. =
 The ITR treats the IP destination address as an EID       by the ITR.  The ITR treats the IP destination =
address as an EID

      
      and =
performs an EID-to-RLOC mapping lookup.  The router then =
      and performs an EID-to-RLOC mapping =
lookup.  The router then

      

      
      prepends =
an "outer" IP header with one of its globally routable       prepends an "outer" IP header with one of its =
routable RLOCs (in

      
      RLOCs in =
the source address field and the result of the mapping       the RLOC space) in =
the source address field and the result of the

      
      lookup in =
the destination address field.  Note that this       mapping lookup in the destination address field.  =
Note that this

      
      destination =
RLOC MAY be an intermediate, proxy device that has       destination RLOC MAY be an intermediate, proxy =
device that has

      
      better =
knowledge of the EID-to-RLOC mapping closer to the       better knowledge of the EID-to-RLOC mapping closer =
to the

      
      destination =
EID.  In general, an ITR receives IP packets from site       destination EID.  In general, an ITR receives IP =
packets from site

      
      end-systems =
on one side and sends LISP-encapsulated IP packets       end-systems on one side and sends =
LISP-encapsulated IP packets

      
      toward the =
Internet on the other side.       =
toward the Internet on the other side.
 =


      
      =
Specifically, when a service provider prepends a LISP header =
for       Specifically, when a service =
provider prepends a LISP header for

      
      Traffic =
Engineering purposes, the router that does this is also =
      Traffic Engineering purposes, the router =
that does this is also

      
      regarded as =
an ITR.  The outer RLOC the ISP ITR uses can be based       regarded as an ITR.  The outer RLOC the ISP ITR =
uses can be based

      
      on the =
outer destination address (the originating ITR's supplied =
      on the outer destination address (the =
originating ITR's supplied

      
 =


      
skipping to =
change at =
page 7, line 9 =C2=B6 =
skipping to change at page 7, line 7 =C2=B6

      
      network =
that strips an outer LISP header for Traffic Engineering =
      network that strips an outer LISP header =
for Traffic Engineering

      
      =
purposes.       purposes.

      
 =


      
   xTR:   An xTR =
is a reference to an ITR or ETR when direction of data    xTR:   An xTR is a reference to an ITR or ETR when =
direction of data

      
      flow is not =
part of the context description.  "xTR" refers to the       flow is not part of the context description.  =
"xTR" refers to the

      
      router that =
is the tunnel endpoint and is used synonymously with       router that is the tunnel endpoint and is used =
synonymously with

      
      the term =
"Tunnel Router".  For example, "An xTR can be located at =
      the term "Tunnel Router".  For example, =
"An xTR can be located at

      
      the =
Customer Edge (CE) router" indicates both ITR and ETR       the Customer Edge (CE) router" indicates both ITR =
and ETR

      
      =
functionality at the CE router.       =
functionality at the CE router.

      
 =


      

      
 =
   Re-encapsulating =
Tunneling in RTRs:   Re-encapsulating Tunneling

      
 =
      occurs when an =
RTR (Re-encapsulating Tunnel Router) acts like an

      
 =
      ETR to remove a =
LISP header, then acts as an ITR to prepend a new

      
 =
      LISP header.  =
Doing this allows a packet to be re-routed by the

      
 =
      RTR without =
adding the overhead of additional tunnel headers.  Any

      
 =
      references to =
tunnels in this specification refer to dynamic

      
 =
      encapsulating =
tunnels; they are never statically configured.  When

      
 =
      using multiple =
mapping database systems, care must be taken to not

      
 =
      create =
re-encapsulation loops through misconfiguration.

      
 =
                                               =
                          

      
   LISP Router:   =
A LISP router is a router that performs the functions    LISP Router:   A LISP router is a router that =
performs the functions

      
      of any or =
all of the following: ITR, ETR, RTR, Proxy-ITR (PITR),       of any or all of the following: ITR, ETR, RTR, =
Proxy-ITR (PITR),

      
      or =
Proxy-ETR (PETR).       or Proxy-ETR =
(PETR).

      
 =


      

      
   EID-to-RLOC =
Map-Cache:   The EID-to-RLOC map-cache is a =
short-lived,    EID-to-RLOC =
Map-Cache:   The EID-to-RLOC map-cache is generally

      
      on-demand =
table in an ITR that stores, tracks, and is responsible =
      short-lived, on-demand table in an ITR =
that stores, tracks, and is

      
      for =
timing out and otherwise validating EID-to-RLOC mappings. =
      responsible for timing out and otherwise =
validating EID-to-RLOC

      
      This =
cache is distinct from the full "database" of EID-to-RLOC   =
    mappings.  This cache is distinct from the full "database" of EID-

      
      mappings; =
it is dynamic, local to the ITR(s), and relatively       to-RLOC mappings; =
it is dynamic, local to the ITR(s), and

      
      small, =
while the database is distributed, relatively static, and =
      relatively small, while the database is =
distributed, relatively

      
      much more =
global in scope.       static, and =
much more global in scope.

      
 =


      
   EID-to-RLOC =
Database:   The EID-to-RLOC Database is a global    EID-to-RLOC Database:   The EID-to-RLOC Database is a =
global

      
      distributed =
database that contains all known EID-Prefix-to-RLOC       distributed database that contains all known =
EID-Prefix-to-RLOC

      
      mappings.  =
Each potential ETR typically contains a small piece of       mappings.  Each potential ETR typically contains a =
small piece of

      
      the =
database: the EID-to-RLOC mappings for the EID-Prefixes =
      the database: the EID-to-RLOC mappings =
for the EID-Prefixes

      
      "behind" =
the router.  These map to one of the router's own       "behind" the router.  These map to one of the =
router's own

      

      
      globally =
visible IP addresses.  The same database mapping =
entries       globally visible =
IP addresses.  Note that there MAY be transient

      
      MUST be configured on all ETRs for a given site.  =
In a steady       conditions =
when the EID-Prefix for the site and Locator-Set for

      
      state, the EID-Prefixes for the site and the =
Locator-Set for each       =
each EID-Prefix may not be the same on all ETRs.  This has no

      
      EID-Prefix MUST be the same on all ETRs.  =
Procedures to enforce       =
negative implications, since a partial set of Locators can be

      
      and/or verify this are outside the scope of this =
document.  Note       =
used.

      
      that =
there MAY be transient conditions when the EID-Prefix for the =


      
      site and =
Locator-Set for each EID-Prefix may not be the same on 

      
      all ETRs. =
 This has no negative implications, since a partial set =


      
      of =
Locators can be used. 

      
 =


      
   Recursive =
Tunneling:   Recursive Tunneling occurs when a packet has =
   Recursive Tunneling:   Recursive Tunneling =
occurs when a packet has

      
      more than =
one LISP IP header.  Additional layers of tunneling MAY =
      more than one LISP IP header.  Additional =
layers of tunneling MAY

      
      be employed =
to implement Traffic Engineering or other re-routing       be employed to implement Traffic Engineering or =
other re-routing

      
      as needed.  =
When this is done, an additional "outer" LISP header       as needed.  When this is done, an additional =
"outer" LISP header

      
      is added, =
and the original RLOCs are preserved in the "inner"       is added, and the original RLOCs are preserved in =
the "inner"

      
      header.  =
Any references to tunnels in this specification refer to =
      header.  Any references to tunnels in =
this specification refer to

      
      dynamic =
encapsulating tunnels; they are never statically       dynamic encapsulating tunnels; they are never =
statically

      
      =
configured.       configured.

      
 =


      

      
   Re-encapsulating Tunneling in RTRs:   Re-encapsulating =
Tunneling 

      
      occurs when an RTR (Re-encapsulating Tunnel =
Router) acts like an 

      
      ETR to remove a LISP header, then acts as an ITR =
to prepend a new 

      
      LISP header.  Doing this allows a packet to be =
re-routed by the 

      
      RTR without adding the overhead of additional =
tunnel headers.  Any 

      
      references to tunnels in this specification refer =
to dynamic 

      
      encapsulating tunnels; they are never statically =
configured.  When 

      
      using multiple mapping database systems, care =
must be taken to not 

      
      create re-encapsulation loops through =
misconfiguration. 

      
                =
                                                          =


      
   LISP Header:   =
LISP header is a term used in this document to refer    LISP Header:   LISP header is a term used in this =
document to refer

      
      to the =
outer IPv4 or IPv6 header, a UDP header, and a LISP-       to the outer IPv4 or IPv6 header, a UDP header, =
and a LISP-

      
      specific =
8-octet header that follow the UDP header and that an ITR =
      specific 8-octet header that follow the =
UDP header and that an ITR

      
      prepends or =
an ETR strips.       prepends or an =
ETR strips.

      
 =


      
   Address Family =
Identifier (AFI):   AFI is a term used to describe an    Address Family Identifier (AFI):   AFI is a term used =
to describe an

      

      
      address =
encoding in a packet.  An address family currently     =
  address encoding in a packet.  An address family that pertains to

      
      pertains =
to an IPv4 or IPv6 address.  See [AFN] and =
[RFC3232] for       the data-plane.  See [AFN] and [RFC3232] for =
details.  An AFI

      
      details.  =
An AFI value of 0 used in this specification indicates       value of 0 used in this specification indicates =
an unspecified

      
      an =
unspecified encoded address where the length of the address is =
      encoded address where the length of the =
address is 0 octets

      
      0 octets =
following the 16-bit AFI value of 0.  =
     following the 16-bit AFI value of 0.

      
 =


      
   Negative =
Mapping Entry:   A negative mapping entry, also known as a =
   Negative Mapping Entry:   A negative mapping =
entry, also known as a

      
      negative =
cache entry, is an EID-to-RLOC entry where an EID-Prefix =
      negative cache entry, is an EID-to-RLOC =
entry where an EID-Prefix

      
      is =
advertised or stored with no RLOCs.  That is, the Locator-Set =
      is advertised or stored with no RLOCs.  =
That is, the Locator-Set

      
      for the =
EID-to-RLOC entry is empty or has an encoded Locator count =
      for the EID-to-RLOC entry is empty or has =
an encoded Locator count

      
      of 0.  This =
type of entry could be used to describe a prefix from       of 0.  This type of entry could be used to =
describe a prefix from

      
      a non-LISP =
site, which is explicitly not in the mapping database.       a non-LISP site, which is explicitly not in the =
mapping database.

      
      There are a =
set of well-defined actions that are encoded in a       There are a set of well-defined actions that are =
encoded in a

      
      Negative =
Map-Reply.       Negative =
Map-Reply.

      
 =


      
 =


      
skipping to =
change at =
page 9, line 24 =C2=B6 =
skipping to change at page 9, line 19 =C2=B6

      
      in the edge =
network are the demarcation points to separate the       in the edge network are the demarcation points to =
separate the

      
      edge =
network from the core network.       =
edge network from the core network.

      
 =


      
   Client-side:  =
Client-side is a term used in this document to indicate =
   Client-side:  Client-side is a term used in =
this document to indicate

      
      a =
connection initiation attempt by an EID.  The ITR(s) at the =
LISP       a connection initiation =
attempt by an EID.  The ITR(s) at the LISP

      
      site are =
the first to get involved in obtaining database Map-Cache =
      site are the first to get involved in =
obtaining database Map-Cache

      
      entries by =
sending Map-Request messages.       =
entries by sending Map-Request messages.

      
 =


      
   Server-side:  =
Server-side is a term used in this document to indicate =
   Server-side:  Server-side is a term used in =
this document to indicate

      
      that a =
connection initiation attempt is being accepted for a       that a connection initiation attempt is being =
accepted for a

      

      
      =
destination EID.  The ETR(s) at the destination LISP site are the       =
destination EID.  The ETR(s) at the destination LISP site may be

      
      first to =
send Map-Replies to the source site initiating the       the first to send Map-Replies to the source site =
initiating the

      
      connection. =
 The ETR(s) at this destination site can obtain       connection.  The ETR(s) at this destination site =
can obtain

      
      mappings by =
gleaning information from Map-Requests, Data-Probes,       mappings by gleaning information from =
Map-Requests, Data-Probes,

      
      or =
encapsulated packets.       or =
encapsulated packets.

      
 =


      
   =
Locator-Status-Bits (LSBs):  Locator-Status-Bits are present in =
the    Locator-Status-Bits (LSBs):  =
Locator-Status-Bits are present in the
      LISP =
header.  They are used by ITRs to inform ETRs about the up/ =
      LISP header.  They are used by ITRs to =
inform ETRs about the up/

      
      down status =
of all ETRs at the local site.  These bits are used as       down status of all ETRs at the local site.  These =
bits are used as

      
      a hint to =
convey up/down router status and not path reachability       a hint to convey up/down router status and not =
path reachability

      
      status.  =
The LSBs can be verified by use of one of the Locator       status.  The LSBs can be verified by use of one of =
the Locator

      
      =
reachability algorithms described in Section 10.       reachability algorithms described in Section =
10.

      
 =


      
skipping to =
change at =
page 11, line 30 =C2=B6 =
skipping to change at page 11, line =
27 =C2=B6

      
   when =
re-routing of the path for a packet is desired.  A potential =
   when re-routing of the path for a packet is =
desired.  A potential

      
   use-case for =
this would be an ISP router that needs to perform    use-case for this would be an ISP router that needs =
to perform

      
   Traffic =
Engineering for packets flowing through its network.  In such =
   Traffic Engineering for packets flowing =
through its network.  In such

      
   a situation, =
termed "Recursive Tunneling", an ISP transit acts as an =
   a situation, termed "Recursive Tunneling", =
an ISP transit acts as an

      
   additional =
ITR, and the RLOC it uses for the new prepended header    additional ITR, and the RLOC it uses for the new =
prepended header

      
   would be =
either a TE-ETR within the ISP (along an intra-ISP traffic =
   would be either a TE-ETR within the ISP =
(along an intra-ISP traffic

      
   engineered =
path) or a TE-ETR within another ISP (an inter-ISP traffic =
   engineered path) or a TE-ETR within another =
ISP (an inter-ISP traffic

      
   engineered =
path, where an agreement to build such a path exists).    engineered path, where an agreement to build such a =
path exists).

      
 =


      
   In order to =
avoid excessive packet overhead as well as possible    In order to avoid excessive packet overhead as well =
as possible

      

      
   =
encapsulation loops, this document mandates =
that a maximum of two    =
encapsulation loops, this document recommends that a maximum of two

      
   LISP headers =
can be prepended to a packet.  For initial LISP    LISP headers can be prepended to a packet.  For =
initial LISP

      
   deployments, =
it is assumed that two headers is sufficient, where the =
   deployments, it is assumed that two headers =
is sufficient, where the

      
   first =
prepended header is used at a site for Location/Identity =
   first prepended header is used at a site for =
Location/Identity

      
   separation and =
the second prepended header is used inside a service    separation and the second prepended header is used =
inside a service

      
   provider for =
Traffic Engineering purposes.    =
provider for Traffic Engineering purposes.

      
 =


      
   Tunnel Routers =
can be placed fairly flexibly in a multi-AS topology.    Tunnel Routers can be placed fairly flexibly in a =
multi-AS topology.

      
   For example, =
the ITR for a particular end-to-end packet exchange    For example, the ITR for a particular end-to-end =
packet exchange

      
   might be the =
first-hop or default router within a site for the source =
   might be the first-hop or default router =
within a site for the source

      
   host.  =
Similarly, the ETR might be the last-hop router directly =
   host.  Similarly, the ETR might be the =
last-hop router directly

      
 =


      
skipping =
to change at page 23, line =
10 =C2=B6 =
skipping to change at page 23, line =
10 =C2=B6

      
   that prepends =
a LISP header will copy a 24-bit value used by the LISP =
   that prepends a LISP header will copy a =
24-bit value used by the LISP

      
   router to =
uniquely identify the address space.  The value is copied =
   router to uniquely identify the address =
space.  The value is copied

      
   to the =
'Instance ID' field of the LISP header, and the I-bit is set =
   to the 'Instance ID' field of the LISP =
header, and the I-bit is set

      
   to 1. =
   to 1.

      
 =


      
   When an ETR =
decapsulates a packet, the Instance ID from the LISP    When an ETR decapsulates a packet, the Instance ID =
from the LISP

      
   header is used =
as a table identifier to locate the forwarding table    header is used as a table identifier to locate the =
forwarding table

      
   to use for the =
inner destination EID lookup.    to =
use for the inner destination EID lookup.

      
 =


      
   For example, =
an 802.1Q VLAN tag or VPN identifier could be used as a =
   For example, an 802.1Q VLAN tag or VPN =
identifier could be used as a

      

      
   24-bit =
Instance ID.    24-bit Instance ID.  =
See [I-D.ietf-lisp-vpn] for LISP VPN =
use-case

      
 =
   =
details.

      
 =


      
   The Instance =
ID that is stored in the mapping database when LISP-DDT =
   The Instance ID that is stored in the =
mapping database when LISP-DDT

      
   =
[I-D.ietf-lisp-ddt] is used is 32 bits in length.  That means =
the    [I-D.ietf-lisp-ddt] is used is =
32 bits in length.  That means the

      
   control-plane =
can store more instances than a given data-plane can    control-plane can store more instances than a given =
data-plane can

      
   use.  Multiple =
data-planes can use the same 32-bit space as long as    use.  Multiple data-planes can use the same 32-bit =
space as long as

      
   the low-order =
24 bits don't overlap among xTRs.    =
the low-order 24 bits don't overlap among xTRs.

      
 =


      
9.  Routing =
Locator Selection 9.  Routing Locator =
Selection

      
 =


      
   Both the =
client-side and server-side may need control over the    Both the client-side and server-side may need control =
over the

      
 =


      
skipping =
to change at page 28, line =
27 =C2=B6 =
skipping to change at page 28, line =
27 =C2=B6

      
   reachability =
problem, as traffic may be unidirectional.  That is, the =
   reachability problem, as traffic may be =
unidirectional.  That is, the

      
   ETR receiving =
traffic at a site may not be the same device as an ITR    ETR receiving traffic at a site may not be the same =
device as an ITR

      
   that transmits =
traffic from that site, or the site-to-site traffic is    that transmits traffic from that site, or the =
site-to-site traffic is

      
   unidirectional =
so there is no ITR returning traffic.  =
  unidirectional so there is no ITR returning traffic.

      
 =


      
   The echo-nonce =
algorithm is bilateral.  That is, if one side sets the    The echo-nonce algorithm is bilateral.  That is, if =
one side sets the

      
   E-bit and the =
other side is not enabled for echo-noncing, then the    E-bit and the other side is not enabled for =
echo-noncing, then the

      
   echoing of the =
nonce does not occur and the requesting side may    echoing of the nonce does not occur and the =
requesting side may

      
   erroneously =
consider the Locator unreachable.  An ITR SHOULD only set =
   erroneously consider the Locator =
unreachable.  An ITR SHOULD only set

      
   the E-bit in =
an encapsulated data packet when it knows the ETR is    the E-bit in an encapsulated data packet when it =
knows the ETR is

      

      
   enabled for =
echo-noncing.  This is conveyed by the E-bit in the Map-    =
enabled for echo-noncing.  This is conveyed by the E-bit in the RLOC-

      
   Reply message.    probe Map-Reply =
message.

      
 =


      
   Note that =
other Locator reachability mechanisms are being researched =
   Note that other Locator reachability =
mechanisms are being researched

      
   and can be =
used to compliment or even override the echo nonce    and can be used to compliment or even override the =
echo nonce

      
   algorithm.  =
See the next section for an example of control-plane    algorithm.  See the next section for an example of =
control-plane

      
   =
probing.    probing.

      
 =


      
10.2.  =
RLOC-Probing Algorithm 10.2.  =
RLOC-Probing Algorithm

      
 =


      
   RLOC-Probing =
is a method that an ITR or PITR can use to determine the =
   RLOC-Probing is a method that an ITR or PITR =
can use to determine the

      
   reachability =
status of one or more Locators that it has cached in a    reachability status of one or more Locators that it =
has cached in a

      
 =


      
skipping =
to change at page 32, line =
46 =C2=B6 =
skipping to change at page 32, line =
46 =C2=B6

      
   where mappings =
change, to control the rate they receive requests for    where mappings change, to control the rate they =
receive requests for

      
   Map-Reply =
messages.  SMRs are also used to tell remote ITRs to update =
   Map-Reply messages.  SMRs are also used to =
tell remote ITRs to update

      
   the mappings =
they have cached.    the mappings they =
have cached.

      
 =


      
   Since the ETRs =
don't keep track of remote ITRs that have cached their    Since the ETRs don't keep track of remote ITRs that =
have cached their

      
   mappings, they =
do not know which ITRs need to have their mappings    mappings, they do not know which ITRs need to have =
their mappings

      
   updated.  As a =
result, an ETR will solicit Map-Requests (called an    updated.  As a result, an ETR will solicit =
Map-Requests (called an

      
   SMR message) =
from those sites to which it has been sending    SMR message) from those sites to which it has been =
sending

      
   encapsulated =
data for the last minute.  In particular, an ETR will    encapsulated data for the last minute.  In =
particular, an ETR will

      
   send an SMR to =
an ITR to which it has recently sent encapsulated    send an SMR to an ITR to which it has recently sent =
encapsulated

      

      
   =
data.    data.  This can only occur when both ITR and ETR functionality =
reside

      
 =
   in the same =
router.

      
 =


      
   An SMR message =
is simply a bit set in a Map-Request message.  An ITR    An SMR message is simply a bit set in a Map-Request =
message.  An ITR

      
   or PITR will =
send a Map-Request when they receive an SMR message.    or PITR will send a Map-Request when they receive an =
SMR message.

      
   Both the SMR =
sender and the Map-Request responder MUST rate-limit    Both the SMR sender and the Map-Request responder =
MUST rate-limit

      
   these =
messages.  Rate-limiting can be implemented as a global rate- =
   these messages.  Rate-limiting can be =
implemented as a global rate-

      
   limiter or one =
rate-limiter per SMR destination.    =
limiter or one rate-limiter per SMR destination.

      
 =


      
   The following =
procedure shows how an SMR exchange occurs when a site    The following procedure shows how an SMR exchange =
occurs when a site

      
   is doing =
Locator-Set compaction for an EID-to-RLOC mapping:    is doing Locator-Set compaction for an EID-to-RLOC =
mapping:

      
 =


      
 =


      
skipping =
to change at page 36, line =
43 =C2=B6 =
skipping to change at page 36, line =
47 =C2=B6

      
   decoupling the =
address space used by a site from the address spaces    decoupling the address space used by a site from the =
address spaces

      
   used by its =
ISPs [RFC4984].    used by its ISPs =
[RFC4984].

      
 =


      
16.2.  Fast =
Mobility 16.2.  Fast Mobility

      
 =


      
   Fast endpoint =
mobility occurs when an endpoint moves relatively    Fast endpoint mobility occurs when an endpoint moves =
relatively

      
   rapidly, =
changing its IP-layer network attachment point.  Maintenance =
   rapidly, changing its IP-layer network =
attachment point.  Maintenance

      
   of session =
continuity is a goal.  This is where the Mobile IPv4    of session continuity is a goal.  This is where the =
Mobile IPv4

      
   [RFC5944] and =
Mobile IPv6 [RFC6275] [RFC4866] mechanisms are used and =
   [RFC5944] and Mobile IPv6 [RFC6275] =
[RFC4866] mechanisms are used and

      
   primarily =
where interactions with LISP need to be explored, such as =
   primarily where interactions with LISP need =
to be explored, such as

      

      
   the =
mechanisms in [I-D.portoles-lisp-eid-mobility] when the EID =
moves    the mechanisms in [I-D.ietf-lisp-eid-mobility] when the EID moves =
but

      
   but the RLOC =
is in the network infrastructure.    =
the RLOC is in the network infrastructure.

      
 =


      
   In LISP, one =
possibility is to "glean" information.  When a packet    In LISP, one possibility is to "glean" information.  =
When a packet

      
   arrives, the =
ETR could examine the EID-to-RLOC mapping and use that    arrives, the ETR could examine the EID-to-RLOC =
mapping and use that

      
   mapping for =
all outgoing traffic to that EID.  It can do this after =
   mapping for all outgoing traffic to that =
EID.  It can do this after

      
   performing a =
route-returnability check, to ensure that the new    performing a route-returnability check, to ensure =
that the new

      
   network =
location does have an internal route to that endpoint.    network location does have an internal route to that =
endpoint.

      
   However, this =
does not cover the case where an ITR (the node assigned =
   However, this does not cover the case where =
an ITR (the node assigned

      
   the RLOC) at =
the mobile-node location has been compromised.    the RLOC) at the mobile-node location has been =
compromised.

      
 =


      
   Mobile IP =
packet exchange is designed for an environment in which all =
   Mobile IP packet exchange is designed for an =
environment in which all

      
 =


      
skipping =
to change at page 37, line =
31 =C2=B6 =
skipping to change at page 37, line =
36 =C2=B6

      
   for any =
endpoint will return a binding for the entire mobile prefix. =
   for any endpoint will return a binding for =
the entire mobile prefix.

      
 =


      
   If mobile =
networks become a more common occurrence, it may be useful =
   If mobile networks become a more common =
occurrence, it may be useful

      
   to revisit the =
design of the mapping service and allow for dynamic    to revisit the design of the mapping service and =
allow for dynamic

      
   updates of the =
database.    updates of the =
database.

      
 =


      
   The issue of =
interactions between mobility and LISP needs to be    The issue of interactions between mobility and LISP =
needs to be

      
   explored =
further.  Specific improvements to the entire system will =
   explored further.  Specific improvements to =
the entire system will

      
   depend on the =
details of mapping mechanisms.  Mapping mechanisms    depend on the details of mapping mechanisms.  Mapping =
mechanisms

      
   should be =
evaluated on how well they support session continuity for =
   should be evaluated on how well they support =
session continuity for

      

      
   mobile =
nodes.  See [I-D.farinacci-lisp-predictive-rlocs] for =
more    mobile nodes.  See [I-D.ietf-lisp-predictive-rlocs] for more =
recent

      
   recent =
mechanisms which can provide near-zero packet loss during =
   mechanisms which can provide near-zero =
packet loss during handoffs.

      
   =
handoffs. 

      
 =


      
16.3.  LISP =
Mobile Node Mobility 16.3.  LISP =
Mobile Node Mobility

      
 =


      
   A mobile =
device can use the LISP infrastructure to achieve mobility =
   A mobile device can use the LISP =
infrastructure to achieve mobility

      
   by =
implementing the LISP encapsulation and decapsulation functions =
   by implementing the LISP encapsulation and =
decapsulation functions

      
   and acting as =
a simple ITR/ETR.  By doing this, such a "LISP mobile    and acting as a simple ITR/ETR.  By doing this, such =
a "LISP mobile

      
   node" can use =
topologically independent EID IP addresses that are not =
   node" can use topologically independent EID =
IP addresses that are not

      
   advertised =
into and do not impose a cost on the global routing    advertised into and do not impose a cost on the =
global routing

      
   system.  These =
EIDs are maintained at the edges of the mapping system    system.  These EIDs are maintained at the edges of =
the mapping system

      
   in LISP =
Map-Servers and Map-Resolvers) and are provided on demand to =
   in LISP Map-Servers and Map-Resolvers) and =
are provided on demand to

      
 =


      
skipping =
to change at page 40, line =
46 =C2=B6 =
skipping to change at page 40, line =
46 =C2=B6

      
   and provider =
want control, then Recursive or Re-Encapsulating Tunnels =
   and provider want control, then Recursive or =
Re-Encapsulating Tunnels

      
   are =
used.    are used.

      
 =


      
17.4.  LISP =
Functionality with Conventional NATs 17.4.  LISP Functionality with Conventional NATs

      
 =


      
   LISP routers =
can be deployed behind Network Address Translator (NAT) =
   LISP routers can be deployed behind Network =
Address Translator (NAT)

      
   devices to =
provide the same set of packet services hosts have today =
   devices to provide the same set of packet =
services hosts have today

      
   when they are =
addressed out of private address space. =
   when they are addressed out of private address space.

      
 =


      
   It is =
important to note that a locator address in any LISP control =
   It is important to note that a locator =
address in any LISP control

      

      
   message MUST =
be a globally routable address and =
therefore SHOULD NOT    message MUST be a routable address and therefore =
[RFC1918] addresses

      
   contain [RFC1918] addresses.  If a LISP xTR is configured =
with    SHOULD =
only be presence when running in a local environment.  When =
a

      
   private RLOC =
addresses, they MUST be used only in the =
outer IP header    LISP xTR is =
configured with private RLOC addresses and =
resides behind

      
   so the NAT =
device can translate properly.  Otherwise, EID addresses =
   a NAT device and =
desires to communicate on the Internet, the private

      
   MUST be =
translated before encapsulation is performed when LISP VPNs =
   addresses =
MUST be used only in the outer IP header so the NAT device

      
   are not in =
use.  Both NAT translation and LISP encapsulation    can translate properly.  Otherwise, EID addresses =
MUST be translated

      
   functions =
could be co-located in the same =
device.    before encapsulation is =
performed when LISP VPNs are not in use.

      
 =
   Both NAT translation and LISP encapsulation =
functions could be co-

      
 =
   located in =
the same device.

      
 =


      
17.5.  Packets =
Egressing a LISP Site 17.5.  Packets =
Egressing a LISP Site

      
 =


      
   When a LISP =
site is using two ITRs for redundancy, the failure of one =
   When a LISP site is using two ITRs for =
redundancy, the failure of one

      
   ITR will =
likely shift outbound traffic to the second.  This second =
   ITR will likely shift outbound traffic to =
the second.  This second

      
   ITR's cache =
may not be populated with the same EID-to-RLOC mapping    ITR's cache may not be populated with the same =
EID-to-RLOC mapping

      
   entries as the =
first.  If this second ITR does not have these    entries as the first.  If this second ITR does not =
have these

      
   mappings, =
traffic will be dropped while the mappings are retrieved =
   mappings, traffic will be dropped while the =
mappings are retrieved

      
   from the =
mapping system.  The retrieval of these messages may    from the mapping system.  The retrieval of these =
messages may

      
   increase the =
load of requests being sent into the mapping system.    increase the load of requests being sent into the =
mapping system.

      
 =


      
skipping =
to change at page 45, line =
14 =C2=B6 =
skipping to change at page 45, line =
14 =C2=B6

      
 =


      
   =
[I-D.ietf-lisp-introduction]    =
[I-D.ietf-lisp-introduction]

      
              =
Cabellos-Aparicio, A. and D. Saucez, "An Architectural               Cabellos-Aparicio, A. and D. Saucez, "An =
Architectural

      
              =
Introduction to the Locator/ID Separation Protocol               Introduction to the Locator/ID Separation =
Protocol

      
              =
(LISP)", draft-ietf-lisp-introduction-13 (work in               (LISP)", draft-ietf-lisp-introduction-13 =
(work in

      
              =
progress), April 2015.               =
progress), April 2015.

      
 =


      
   =
[I-D.ietf-lisp-rfc6833bis]    =
[I-D.ietf-lisp-rfc6833bis]

      
              =
Fuller, V., Farinacci, D., and A. Cabellos-Aparicio,               Fuller, V., Farinacci, D., and A. =
Cabellos-Aparicio,

      
              =
"Locator/ID Separation Protocol (LISP) Control-Plane",               "Locator/ID Separation Protocol (LISP) =
Control-Plane",

      

      
              =
draft-ietf-lisp-rfc6833bis-05 (work in progress), =
May               =
draft-ietf-lisp-rfc6833bis-06 (work in progress), =
October

      
              =
2017.               2017.

      
 =


      
   =
[I-D.ietf-lisp-sec]    =
[I-D.ietf-lisp-sec]

      
              =
Maino, F., Ermagan, V., Cabellos-Aparicio, A., and D.               Maino, F., Ermagan, V., Cabellos-Aparicio, =
A., and D.

      

      
              =
Saucez, "LISP-Security (LISP-SEC)", draft-ietf-lisp-sec-12               Saucez, "LISP-Security (LISP-SEC)", draft-ietf-lisp-sec-14

      
              =
(work in progress), November =
2016.               (work in =
progress), October 2017.

      
 =


      
   [RFC0768]  =
Postel, J., "User Datagram Protocol", STD 6, RFC 768,    [RFC0768]  Postel, J., "User Datagram Protocol", STD =
6, RFC 768,

      

      
              =
DOI 10.17487/RFC0768, August 1980, <https://www.rfc-               DOI 10.17487/RFC0768, August =
1980,

      
              =
editor.org/info/rfc768>.    =
           <https://www.rfc-editor.org/info/rfc768>.

      
 =


      
   [RFC0791]  =
Postel, J., "Internet Protocol", STD 5, RFC 791,    [RFC0791]  Postel, J., "Internet Protocol", STD 5, =
RFC 791,

      

      
              =
DOI 10.17487/RFC0791, September 1981, <https://www.rfc-               DOI 10.17487/RFC0791, September =
1981,

      
              =
editor.org/info/rfc791>.    =
           <https://www.rfc-editor.org/info/rfc791>.

      
 =


      
   [RFC1918]  =
Rekhter, Y., Moskowitz, B., Karrenberg, D., de Groot, G., =
   [RFC1918]  Rekhter, Y., Moskowitz, B., =
Karrenberg, D., de Groot, G.,

      
              and =
E. Lear, "Address Allocation for Private Internets",               and E. Lear, "Address Allocation for =
Private Internets",

      
              BCP =
5, RFC 1918, DOI 10.17487/RFC1918, February 1996,               BCP 5, RFC 1918, DOI 10.17487/RFC1918, =
February 1996,

      
              =
<https://www.rfc-editor.org/info/rfc1918>.               =
<https://www.rfc-editor.org/info/rfc1918>.

      
 =


      
   [RFC2119]  =
Bradner, S., "Key words for use in RFCs to Indicate    [RFC2119]  Bradner, S., "Key words for use in RFCs to =
Indicate

      
              =
Requirement Levels", BCP 14, RFC 2119,  =
             Requirement Levels", BCP 14, RFC 2119,

      

      
              =
DOI 10.17487/RFC2119, March 1997, <https://www.rfc-               DOI 10.17487/RFC2119, March 1997,

      
              =
editor.org/info/rfc2119>.   =
            <https://www.rfc-editor.org/info/rfc2119>.

      
 =


      
   [RFC2404]  =
Madson, C. and R. Glenn, "The Use of HMAC-SHA-1-96 within =
   [RFC2404]  Madson, C. and R. Glenn, "The Use =
of HMAC-SHA-1-96 within

      
              ESP =
and AH", RFC 2404, DOI 10.17487/RFC2404, November               ESP and AH", RFC 2404, DOI =
10.17487/RFC2404, November

      
              =
1998, <https://www.rfc-editor.org/info/rfc2404>.               1998, =
<https://www.rfc-editor.org/info/rfc2404>.

      
 =


      
   [RFC3168]  =
Ramakrishnan, K., Floyd, S., and D. Black, "The Addition =
   [RFC3168]  Ramakrishnan, K., Floyd, S., and =
D. Black, "The Addition

      
              of =
Explicit Congestion Notification (ECN) to IP",               of Explicit Congestion Notification (ECN) =
to IP",

      
              RFC =
3168, DOI 10.17487/RFC3168, September 2001,               RFC 3168, DOI 10.17487/RFC3168, September =
2001,

      
              =
<https://www.rfc-editor.org/info/rfc3168>.               =
<https://www.rfc-editor.org/info/rfc3168>.

      
 =


      
   [RFC3232]  =
Reynolds, J., Ed., "Assigned Numbers: RFC 1700 is Replaced =
   [RFC3232]  Reynolds, J., Ed., "Assigned =
Numbers: RFC 1700 is Replaced

      
              by =
an On-line Database", RFC 3232, DOI 10.17487/RFC3232,               by an On-line Database", RFC 3232, DOI =
10.17487/RFC3232,

      
              =
January 2002, <https://www.rfc-editor.org/info/rfc3232>. =
              January 2002, =
<https://www.rfc-editor.org/info/rfc3232>.

      
 =


      
   [RFC4086]  =
Eastlake 3rd, D., Schiller, J., and S. Crocker,    [RFC4086]  Eastlake 3rd, D., Schiller, J., and S. =
Crocker,

      
              =
"Randomness Requirements for Security", BCP 106, RFC 4086, =
              "Randomness Requirements for =
Security", BCP 106, RFC 4086,

      

      
              =
DOI 10.17487/RFC4086, June 2005, <https://www.rfc-               DOI 10.17487/RFC4086, June 2005,

      
              =
editor.org/info/rfc4086>.   =
            <https://www.rfc-editor.org/info/rfc4086>.

      
 =


      
   [RFC4632]  =
Fuller, V. and T. Li, "Classless Inter-domain Routing    [RFC4632]  Fuller, V. and T. Li, "Classless =
Inter-domain Routing

      
              =
(CIDR): The Internet Address Assignment and Aggregation =
              (CIDR): The Internet Address =
Assignment and Aggregation

      
              =
Plan", BCP 122, RFC 4632, DOI 10.17487/RFC4632, August               Plan", BCP 122, RFC 4632, DOI =
10.17487/RFC4632, August

      
              =
2006, <https://www.rfc-editor.org/info/rfc4632>.               2006, =
<https://www.rfc-editor.org/info/rfc4632>.

      
 =


      
   [RFC4868]  =
Kelly, S. and S. Frankel, "Using HMAC-SHA-256, HMAC-SHA- =
   [RFC4868]  Kelly, S. and S. Frankel, "Using =
HMAC-SHA-256, HMAC-SHA-

      
              =
384, and HMAC-SHA-512 with IPsec", RFC 4868,               384, and HMAC-SHA-512 with IPsec", RFC =
4868,

      

      
              =
DOI 10.17487/RFC4868, May 2007, <https://www.rfc-               DOI 10.17487/RFC4868, May 2007,

      
              =
editor.org/info/rfc4868>.   =
            <https://www.rfc-editor.org/info/rfc4868>.

      
 =


      
   [RFC5226]  =
Narten, T. and H. Alvestrand, "Guidelines for Writing an =
   [RFC5226]  Narten, T. and H. Alvestrand, =
"Guidelines for Writing an

      
              =
IANA Considerations Section in RFCs", RFC 5226,               IANA Considerations Section in RFCs", RFC =
5226,

      

      
              =
DOI 10.17487/RFC5226, May 2008, <https://www.rfc-               DOI 10.17487/RFC5226, May 2008,

      
              =
editor.org/info/rfc5226>.   =
            <https://www.rfc-editor.org/info/rfc5226>.

      
 =


      
   [RFC5496]  =
Wijnands, IJ., Boers, A., and E. Rosen, "The Reverse Path =
   [RFC5496]  Wijnands, IJ., Boers, A., and E. =
Rosen, "The Reverse Path

      
              =
Forwarding (RPF) Vector TLV", RFC 5496, =
              Forwarding (RPF) Vector TLV", RFC 5496,

      

      
              =
DOI 10.17487/RFC5496, March 2009, <https://www.rfc-               DOI 10.17487/RFC5496, March 2009,

      
              =
editor.org/info/rfc5496>.   =
            <https://www.rfc-editor.org/info/rfc5496>.

      
 =


      
   [RFC5944]  =
Perkins, C., Ed., "IP Mobility Support for IPv4, Revised", =
   [RFC5944]  Perkins, C., Ed., "IP Mobility =
Support for IPv4, Revised",

      
              RFC =
5944, DOI 10.17487/RFC5944, November 2010,               RFC 5944, DOI 10.17487/RFC5944, November =
2010,

      
              =
<https://www.rfc-editor.org/info/rfc5944>.               =
<https://www.rfc-editor.org/info/rfc5944>.

      
 =


      
   [RFC6115]  Li, =
T., Ed., "Recommendation for a Routing Architecture",    [RFC6115]  Li, T., Ed., "Recommendation for a Routing =
Architecture",

      
              RFC =
6115, DOI 10.17487/RFC6115, February 2011,               RFC 6115, DOI 10.17487/RFC6115, February =
2011,

      
              =
<https://www.rfc-editor.org/info/rfc6115>.               =
<https://www.rfc-editor.org/info/rfc6115>.

      
 =


      
   [RFC6275]  =
Perkins, C., Ed., Johnson, D., and J. Arkko, "Mobility    [RFC6275]  Perkins, C., Ed., Johnson, D., and J. =
Arkko, "Mobility

      
              =
Support in IPv6", RFC 6275, DOI 10.17487/RFC6275, July               Support in IPv6", RFC 6275, DOI =
10.17487/RFC6275, July

      
              =
2011, <https://www.rfc-editor.org/info/rfc6275>.               2011, =
<https://www.rfc-editor.org/info/rfc6275>.

      
 =


      
   [RFC6834]  =
Iannone, L., Saucez, D., and O. Bonaventure, "Locator/ID =
   [RFC6834]  Iannone, L., Saucez, D., and O. =
Bonaventure, "Locator/ID

      
              =
Separation Protocol (LISP) Map-Versioning", RFC 6834,               Separation Protocol (LISP) =
Map-Versioning", RFC 6834,

      

      
              =
DOI 10.17487/RFC6834, January 2013, <https://www.rfc-               DOI 10.17487/RFC6834, January =
2013,

      
              =
editor.org/info/rfc6834>.   =
            <https://www.rfc-editor.org/info/rfc6834>.

      
 =


      
   [RFC6836]  =
Fuller, V., Farinacci, D., Meyer, D., and D. Lewis,    [RFC6836]  Fuller, V., Farinacci, D., Meyer, D., and =
D. Lewis,

      
              =
"Locator/ID Separation Protocol Alternative Logical               "Locator/ID Separation Protocol =
Alternative Logical

      
              =
Topology (LISP+ALT)", RFC 6836, DOI 10.17487/RFC6836,               Topology (LISP+ALT)", RFC 6836, DOI =
10.17487/RFC6836,

      
              =
January 2013, <https://www.rfc-editor.org/info/rfc6836>. =
              January 2013, =
<https://www.rfc-editor.org/info/rfc6836>.

      
 =


      
   [RFC7052]  =
Schudel, G., Jain, A., and V. Moreno, "Locator/ID    [RFC7052]  Schudel, G., Jain, A., and V. Moreno, =
"Locator/ID

      
              =
Separation Protocol (LISP) MIB", RFC 7052,               Separation Protocol (LISP) MIB", RFC =
7052,

      

      
              =
DOI 10.17487/RFC7052, October 2013, <https://www.rfc-               DOI 10.17487/RFC7052, October =
2013,

      
              =
editor.org/info/rfc7052>.   =
            <https://www.rfc-editor.org/info/rfc7052>.

      
 =


      
   [RFC7214]  =
Andersson, L. and C. Pignataro, "Moving Generic Associated =
   [RFC7214]  Andersson, L. and C. Pignataro, =
"Moving Generic Associated

      
              =
Channel (G-ACh) IANA Registries to a New Registry",               Channel (G-ACh) IANA Registries to a New =
Registry",

      
              RFC =
7214, DOI 10.17487/RFC7214, May 2014,  =
             RFC 7214, DOI 10.17487/RFC7214, May 2014,

      
              =
<https://www.rfc-editor.org/info/rfc7214>.               =
<https://www.rfc-editor.org/info/rfc7214>.

      
 =


      
   [RFC7215]  =
Jakab, L., Cabellos-Aparicio, A., Coras, F., Domingo-    [RFC7215]  Jakab, L., Cabellos-Aparicio, A., Coras, =
F., Domingo-

      
              =
Pascual, J., and D. Lewis, "Locator/Identifier Separation =
              Pascual, J., and D. Lewis, =
"Locator/Identifier Separation

      
              =
Protocol (LISP) Network Element Deployment               Protocol (LISP) Network Element =
Deployment

      
              =
Considerations", RFC 7215, DOI 10.17487/RFC7215, April               Considerations", RFC 7215, DOI =
10.17487/RFC7215, April

      
              =
2014, <https://www.rfc-editor.org/info/rfc7215>.               2014, =
<https://www.rfc-editor.org/info/rfc7215>.

      
 =


      
   [RFC7833]  =
Howlett, J., Hartman, S., and A. Perez-Mendez, Ed., "A    [RFC7833]  Howlett, J., Hartman, S., and A. =
Perez-Mendez, Ed., "A

      
              =
RADIUS Attribute, Binding, Profiles, Name Identifier               RADIUS Attribute, Binding, Profiles, Name =
Identifier

      
              =
Format, and Confirmation Methods for the Security               Format, and Confirmation Methods for the =
Security

      
              =
Assertion Markup Language (SAML)", RFC 7833,               Assertion Markup Language (SAML)", RFC =
7833,

      

      
              =
DOI 10.17487/RFC7833, May 2016, <https://www.rfc-               DOI 10.17487/RFC7833, May 2016,

      
              =
editor.org/info/rfc7833>.   =
            <https://www.rfc-editor.org/info/rfc7833>.

      
 =


      
   [RFC7835]  =
Saucez, D., Iannone, L., and O. Bonaventure, "Locator/ID =
   [RFC7835]  Saucez, D., Iannone, L., and O. =
Bonaventure, "Locator/ID

      
              =
Separation Protocol (LISP) Threat Analysis", RFC 7835,               Separation Protocol (LISP) Threat =
Analysis", RFC 7835,

      

      
              =
DOI 10.17487/RFC7835, April 2016, <https://www.rfc-               DOI 10.17487/RFC7835, April 2016,

      
              =
editor.org/info/rfc7835>.   =
            <https://www.rfc-editor.org/info/rfc7835>.

      
 =


      
   [RFC8061]  =
Farinacci, D. and B. Weis, "Locator/ID Separation Protocol =
   [RFC8061]  Farinacci, D. and B. Weis, =
"Locator/ID Separation Protocol

      
              =
(LISP) Data-Plane Confidentiality", RFC 8061,               (LISP) Data-Plane Confidentiality", RFC =
8061,

      

      
              =
DOI 10.17487/RFC8061, February 2017, <https://www.rfc-               DOI 10.17487/RFC8061, February =
2017,

      
              =
editor.org/info/rfc8061>.   =
            <https://www.rfc-editor.org/info/rfc8061>.

      
 =


      
   [RFC8200]  =
Deering, S. and R. Hinden, "Internet Protocol, Version 6 =
   [RFC8200]  Deering, S. and R. Hinden, =
"Internet Protocol, Version 6

      
              =
(IPv6) Specification", STD 86, RFC 8200,               (IPv6) Specification", STD 86, RFC =
8200,

      

      
              =
DOI 10.17487/RFC8200, July 2017, <https://www.rfc-               DOI 10.17487/RFC8200, July 2017,

      
              =
editor.org/info/rfc8200>.   =
            <https://www.rfc-editor.org/info/rfc8200>.

      
 =


      
22.2.  =
Informative References 22.2.  =
Informative References

      
 =


      
   [AFN]      =
IANA, "Address Family Numbers", August 2016,    [AFN]      IANA, "Address Family Numbers", August =
2016,

      
              =
<http://www.iana.org/assignments/address-family-numbers>. =
              =
<http://www.iana.org/assignments/address-family-numbers>.

      
 =


      
   [CHIAPPA]  =
Chiappa, J., "Endpoints and Endpoint names: A Proposed", =
   [CHIAPPA]  Chiappa, J., "Endpoints and =
Endpoint names: A Proposed",

      
              =
1999,               1999,

      
              =
<http://mercury.lcs.mit.edu/~jnc/tech/endpoints.txt>. =
              =
<http://mercury.lcs.mit.edu/~jnc/tech/endpoints.txt>.

      
 =


      

      
   [I-D.farinacci-lisp-predictive-rlocs] =
   [I-D.ietf-lisp-eid-mobility]

      
              Farinacci, D. and P. Pillay-Esnault, "LISP Predictive               Portoles-Comeras, =
M., Ashtaputre, V., Moreno, V., Maino,

      
              RLOCs", =
draft-farinacci-lisp-predictive-rlocs-02 (work in =
              =
F., and D. Farinacci, "LISP L2/L3 EID Mobility Using a

      
              =
progress), May 2017.               Unified Control Plane", =
draft-ietf-lisp-eid-mobility-00
 =
              (work in progress), May =
2017.

      
 =


      
   =
[I-D.ietf-lisp-mn]    =
[I-D.ietf-lisp-mn]

      
              =
Farinacci, D., Lewis, D., Meyer, D., and C. White, "LISP =
              Farinacci, D., Lewis, D., Meyer, =
D., and C. White, "LISP

      

      
              =
Mobile Node", draft-ietf-lisp-mn-00 (work =
in progress),               Mobile =
Node", draft-ietf-lisp-mn-01 (work in =
progress),

      
              =
April 2017.               October =
2017.

      
 =


      
 =
   =
[I-D.ietf-lisp-predictive-rlocs]

      
 =
              =
Farinacci, D. and P. Pillay-Esnault, "LISP Predictive

      
 =
              RLOCs", =
draft-ietf-lisp-predictive-rlocs-00 (work in

      
 =
              =
progress), June 2017.

      
 =


      
   =
[I-D.ietf-lisp-signal-free-multicast]  =
  [I-D.ietf-lisp-signal-free-multicast]

      
              =
Moreno, V. and D. Farinacci, "Signal-Free LISP Multicast", =
              Moreno, V. and D. Farinacci, =
"Signal-Free LISP Multicast",

      
              =
draft-ietf-lisp-signal-free-multicast-06 (work in               draft-ietf-lisp-signal-free-multicast-06 =
(work in

      
              =
progress), August 2017.               =
progress), August 2017.

      
 =


      

      
 =
   [I-D.ietf-lisp-vpn]

      
 =
              Moreno, =
V. and D. Farinacci, "LISP Virtual Private

      
 =
              Networks =
(VPNs)", draft-ietf-lisp-vpn-00 (work in

      
 =
              =
progress), May 2017.

      
 =
                                               =
                          

      
   =
[I-D.meyer-loc-id-implications]    =
[I-D.meyer-loc-id-implications]

      
              =
Meyer, D. and D. Lewis, "Architectural Implications of               Meyer, D. and D. Lewis, "Architectural =
Implications of

      
              =
Locator/ID Separation", draft-meyer-loc-id-implications-01 =
              Locator/ID Separation", =
draft-meyer-loc-id-implications-01

      
              =
(work in progress), January 2009.      =
         (work in progress), January 2009.

      
 =


      

      
   [I-D.portoles-lisp-eid-mobility] =


      
              Portoles-Comeras, M., Ashtaputre, V., =
Moreno, V., Maino, 

      
              F., and D. Farinacci, "LISP L2/L3 EID =
Mobility Using a 

      
              Unified Control Plane", =
draft-portoles-lisp-eid- 

      
              mobility-02 (work in progress), April =
2017. 

      
                =
                                                          =


      
   [LISA96]   =
Lear, E., Tharp, D., Katinsky, J., and J. Coffin,    [LISA96]   Lear, E., Tharp, D., Katinsky, J., and J. =
Coffin,

      
              =
"Renumbering: Threat or Menace?", Usenix Tenth System               "Renumbering: Threat or Menace?", Usenix =
Tenth System

      
              =
Administration Conference (LISA 96), October 1996.               Administration Conference (LISA 96), =
October 1996.

      
 =


      
   =
[OPENLISP]    [OPENLISP]

      
              =
Iannone, L., Saucez, D., and O. Bonaventure, "OpenLISP               Iannone, L., Saucez, D., and O. =
Bonaventure, "OpenLISP

      
              =
Implementation Report", Work in Progress, July 2008.               Implementation Report", Work in Progress, =
July 2008.

      
 =


      
   [RFC1034]  =
Mockapetris, P., "Domain names - concepts and facilities", =
   [RFC1034]  Mockapetris, P., "Domain names - =
concepts and facilities",

      
              STD =
13, RFC 1034, DOI 10.17487/RFC1034, November 1987,               STD 13, RFC 1034, DOI 10.17487/RFC1034, =
November 1987,

      
              =
<https://www.rfc-editor.org/info/rfc1034>.               =
<https://www.rfc-editor.org/info/rfc1034>.

      
 =


      
   [RFC2784]  =
Farinacci, D., Li, T., Hanks, S., Meyer, D., and P.    [RFC2784]  Farinacci, D., Li, T., Hanks, S., Meyer, =
D., and P.

      
              =
Traina, "Generic Routing Encapsulation (GRE)", RFC 2784, =
              Traina, "Generic Routing =
Encapsulation (GRE)", RFC 2784,

      

      
              =
DOI 10.17487/RFC2784, March 2000, <https://www.rfc-               DOI 10.17487/RFC2784, March 2000,

      
              =
editor.org/info/rfc2784>.   =
            <https://www.rfc-editor.org/info/rfc2784>.

      
 =


      
   [RFC3056]  =
Carpenter, B. and K. Moore, "Connection of IPv6 Domains =
   [RFC3056]  Carpenter, B. and K. Moore, =
"Connection of IPv6 Domains

      
              via =
IPv4 Clouds", RFC 3056, DOI 10.17487/RFC3056, February               via IPv4 Clouds", RFC 3056, DOI =
10.17487/RFC3056, February

      
              =
2001, <https://www.rfc-editor.org/info/rfc3056>.               2001, =
<https://www.rfc-editor.org/info/rfc3056>.

      
 =


      
   [RFC3261]  =
Rosenberg, J., Schulzrinne, H., Camarillo, G., Johnston, =
   [RFC3261]  Rosenberg, J., Schulzrinne, H., =
Camarillo, G., Johnston,

      
              A., =
Peterson, J., Sparks, R., Handley, M., and E.               A., Peterson, J., Sparks, R., Handley, M., =
and E.

      
              =
Schooler, "SIP: Session Initiation Protocol", RFC 3261, =
              Schooler, "SIP: Session =
Initiation Protocol", RFC 3261,

      

      
              =
DOI 10.17487/RFC3261, June 2002, <https://www.rfc-               DOI 10.17487/RFC3261, June 2002,

      
              =
editor.org/info/rfc3261>.   =
            <https://www.rfc-editor.org/info/rfc3261>.

      
 =


      
   [RFC4107]  =
Bellovin, S. and R. Housley, "Guidelines for Cryptographic =
   [RFC4107]  Bellovin, S. and R. Housley, =
"Guidelines for Cryptographic

      
              Key =
Management", BCP 107, RFC 4107, DOI 10.17487/RFC4107,               Key Management", BCP 107, RFC 4107, DOI =
10.17487/RFC4107,

      
              =
June 2005, <https://www.rfc-editor.org/info/rfc4107>. =
              June 2005, =
<https://www.rfc-editor.org/info/rfc4107>.

      
 =


      
   [RFC4192]  =
Baker, F., Lear, E., and R. Droms, "Procedures for    [RFC4192]  Baker, F., Lear, E., and R. Droms, =
"Procedures for

      
              =
Renumbering an IPv6 Network without a Flag Day", RFC 4192, =
              Renumbering an IPv6 Network =
without a Flag Day", RFC 4192,

      

      
              =
DOI 10.17487/RFC4192, September 2005, <https://www.rfc-               DOI 10.17487/RFC4192, September =
2005,

      
              =
editor.org/info/rfc4192>.   =
            <https://www.rfc-editor.org/info/rfc4192>.

      
 =


      
   [RFC4866]  =
Arkko, J., Vogt, C., and W. Haddad, "Enhanced Route    [RFC4866]  Arkko, J., Vogt, C., and W. Haddad, =
"Enhanced Route

      
              =
Optimization for Mobile IPv6", RFC 4866,               Optimization for Mobile IPv6", RFC =
4866,

      

      
              =
DOI 10.17487/RFC4866, May 2007, <https://www.rfc-               DOI 10.17487/RFC4866, May 2007,

      
              =
editor.org/info/rfc4866>.   =
            <https://www.rfc-editor.org/info/rfc4866>.

      
 =


      
   [RFC4984]  =
Meyer, D., Ed., Zhang, L., Ed., and K. Fall, Ed., "Report =
   [RFC4984]  Meyer, D., Ed., Zhang, L., Ed., =
and K. Fall, Ed., "Report

      
              =
from the IAB Workshop on Routing and Addressing",               from the IAB Workshop on Routing and =
Addressing",

      
              RFC =
4984, DOI 10.17487/RFC4984, September 2007,               RFC 4984, DOI 10.17487/RFC4984, September =
2007,

      
              =
<https://www.rfc-editor.org/info/rfc4984>.               =
<https://www.rfc-editor.org/info/rfc4984>.

      
 =


      
   [RFC6480]  =
Lepinski, M. and S. Kent, "An Infrastructure to Support =
   [RFC6480]  Lepinski, M. and S. Kent, "An =
Infrastructure to Support

      
              =
Secure Internet Routing", RFC 6480, DOI 10.17487/RFC6480, =
              Secure Internet Routing", RFC =
6480, DOI 10.17487/RFC6480,

      
              =
February 2012, <https://www.rfc-editor.org/info/rfc6480>. =
              February 2012, =
<https://www.rfc-editor.org/info/rfc6480>.

      
 =


      
   [RFC6518]  =
Lebovitz, G. and M. Bhatia, "Keying and Authentication for =
   [RFC6518]  Lebovitz, G. and M. Bhatia, =
"Keying and Authentication for

      
              =
Routing Protocols (KARP) Design Guidelines", RFC 6518,               Routing Protocols (KARP) Design =
Guidelines", RFC 6518,

      

      
              =
DOI 10.17487/RFC6518, February 2012, <https://www.rfc-               DOI 10.17487/RFC6518, February =
2012,

      
              =
editor.org/info/rfc6518>.   =
            <https://www.rfc-editor.org/info/rfc6518>.

      
 =


      
   [RFC6831]  =
Farinacci, D., Meyer, D., Zwiebel, J., and S. Venaas, "The =
   [RFC6831]  Farinacci, D., Meyer, D., =
Zwiebel, J., and S. Venaas, "The

      
              =
Locator/ID Separation Protocol (LISP) for Multicast               Locator/ID Separation Protocol (LISP) for =
Multicast

      
              =
Environments", RFC 6831, DOI 10.17487/RFC6831, January               Environments", RFC 6831, DOI =
10.17487/RFC6831, January

      
              =
2013, <https://www.rfc-editor.org/info/rfc6831>.               2013, =
<https://www.rfc-editor.org/info/rfc6831>.

      
 =


      
   [RFC6832]  =
Lewis, D., Meyer, D., Farinacci, D., and V. Fuller,    [RFC6832]  Lewis, D., Meyer, D., Farinacci, D., and =
V. Fuller,

      
              =
"Interworking between Locator/ID Separation Protocol               "Interworking between Locator/ID =
Separation Protocol

      
              =
(LISP) and Non-LISP Sites", RFC 6832,  =
             (LISP) and Non-LISP Sites", RFC 6832,

      

      
              =
DOI 10.17487/RFC6832, January 2013, <https://www.rfc-               DOI 10.17487/RFC6832, January =
2013,

      
              =
editor.org/info/rfc6832>.   =
            <https://www.rfc-editor.org/info/rfc6832>.

      
 =


      
   [RFC6835]  =
Farinacci, D. and D. Meyer, "The Locator/ID Separation    [RFC6835]  Farinacci, D. and D. Meyer, "The =
Locator/ID Separation

      
              =
Protocol Internet Groper (LIG)", RFC 6835,               Protocol Internet Groper (LIG)", RFC =
6835,

      

      
              =
DOI 10.17487/RFC6835, January 2013, <https://www.rfc-               DOI 10.17487/RFC6835, January =
2013,

      
              =
editor.org/info/rfc6835>.   =
            <https://www.rfc-editor.org/info/rfc6835>.

      
 =


      
   [RFC6837]  =
Lear, E., "NERD: A Not-so-novel Endpoint ID (EID) to    [RFC6837]  Lear, E., "NERD: A Not-so-novel Endpoint =
ID (EID) to

      
              =
Routing Locator (RLOC) Database", RFC 6837,               Routing Locator (RLOC) Database", RFC =
6837,

      

      
              =
DOI 10.17487/RFC6837, January 2013, <https://www.rfc-               DOI 10.17487/RFC6837, January =
2013,

      
              =
editor.org/info/rfc6837>.   =
            <https://www.rfc-editor.org/info/rfc6837>.

      
 =


      
   [RFC6935]  =
Eubanks, M., Chimento, P., and M. Westerlund, "IPv6 and =
   [RFC6935]  Eubanks, M., Chimento, P., and M. =
Westerlund, "IPv6 and

      
              UDP =
Checksums for Tunneled Packets", RFC 6935,               UDP Checksums for Tunneled Packets", RFC =
6935,

      

      
              =
DOI 10.17487/RFC6935, April 2013, <https://www.rfc-               DOI 10.17487/RFC6935, April 2013,

      
              =
editor.org/info/rfc6935>.   =
            <https://www.rfc-editor.org/info/rfc6935>.

      
 =


      
   [RFC6936]  =
Fairhurst, G. and M. Westerlund, "Applicability Statement =
   [RFC6936]  Fairhurst, G. and M. Westerlund, =
"Applicability Statement

      
              for =
the Use of IPv6 UDP Datagrams with Zero Checksums",               for the Use of IPv6 UDP Datagrams with =
Zero Checksums",

      
              RFC =
6936, DOI 10.17487/RFC6936, April 2013, =
              RFC 6936, DOI 10.17487/RFC6936, April 2013,

      
              =
<https://www.rfc-editor.org/info/rfc6936>.               =
<https://www.rfc-editor.org/info/rfc6936>.

      
 =


      
   [RFC8060]  =
Farinacci, D., Meyer, D., and J. Snijders, "LISP Canonical =
   [RFC8060]  Farinacci, D., Meyer, D., and J. =
Snijders, "LISP Canonical

      
              =
Address Format (LCAF)", RFC 8060, DOI 10.17487/RFC8060, =
              Address Format (LCAF)", RFC 8060, =
DOI 10.17487/RFC8060,

      
              =
February 2017, <https://www.rfc-editor.org/info/rfc8060>. =
              February 2017, =
<https://www.rfc-editor.org/info/rfc8060>.

      
 =


      
 =


      
skipping =
to change at page 52, line =
5 =C2=B6 =
skipping to change at page 52, line =
5 =C2=B6

      
   The LISP =
working group would like to give a special thanks to Jari =
   The LISP working group would like to give a =
special thanks to Jari

      
   Arkko, the =
Internet Area AD at the time that the set of LISP    Arkko, the Internet Area AD at the time that the set =
of LISP

      
   documents were =
being prepared for IESG last call, and for his    documents were being prepared for IESG last call, and =
for his

      
   meticulous =
reviews and detailed commentaries on the 7 working group =
   meticulous reviews and detailed commentaries =
on the 7 working group

      
   last call =
documents progressing toward standards-track RFCs.    last call documents progressing toward =
standards-track RFCs.

      
 =


      
Appendix B.  =
Document Change Log Appendix B.  =
Document Change Log

      
 =


      
   [RFC Editor: =
Please delete this section on publication as RFC.]    [RFC Editor: Please delete this section on =
publication as RFC.]

      
 =


      

      
B.1.  Changes =
to draft-ietf-lisp-rfc6830bis-04 B.1. =
 Changes to draft-ietf-lisp-rfc6830bis-06

      
 =


      
 =
   o  Posted October =
2017.

      
 =


      
 =
   o  Put RTR =
definition before it is used.

      
 =


      
 =
   o  Rename references =
that are now working group drafts.

      
 =


      
 =
   o  Remove "EIDs MUST =
NOT be used as used by a host to refer to other

      
 =
      hosts.  Note that =
EID blocks MAY LISP RLOCs".

      
 =


      
 =
   o  Indicate what =
address-family can appear in data packets.

      
 =


      
 =
   o  ETRs may, rather =
than will, be the ones to send Map-Replies.

      
 =


      
 =
   o  Recommend, rather =
than mandate, max encapsulation headers to 2.

      
 =


      
 =
   o  Reference VPN =
draft when introducing Instance-ID.

      
 =


      
 =
   o  Indicate that =
SMRs can be sent when ITR/ETR are in the same node.

      
 =


      
 =
   o  Clarify when =
private addreses can be used.

      
 =


      
 =
B.2.  Changes to =
draft-ietf-lisp-rfc6830bis-05

      
 =


      
 =
   o  Posted August =
2017.

      
 =


      
 =
   o  Make it clear =
that a Reencapsulating Tunnel Router is an RTR.

      
 =


      
 =
B.3.  Changes to =
draft-ietf-lisp-rfc6830bis-04

      
 =


      
   o  Posted July =
2017.    o  Posted July 2017.

      
 =


      
   o  Changed =
reference of IPv6 RFC2460 to RFC8200.  =
  o  Changed reference of IPv6 RFC2460 to RFC8200.

      
 =


      
   o  Indicate =
that the applicability statement for UDP zero checksums =
   o  Indicate that the applicability statement =
for UDP zero checksums

      
      over IPv6 =
adheres to RFC6936.       over IPv6 =
adheres to RFC6936.

      
 =


      

      
B.2.  Changes to =
draft-ietf-lisp-rfc6830bis-03 B.4.  Changes to =
draft-ietf-lisp-rfc6830bis-03

      
 =


      
   o  Posted May =
2017.    o  Posted May 2017.

      
 =


      
   o  Move the =
control-plane related codepoints in the IANA    o  Move the control-plane related codepoints in the =
IANA

      
      =
Considerations section to RFC6833bis.  =
     Considerations section to RFC6833bis.

      
 =


      

      
B.3.  Changes to =
draft-ietf-lisp-rfc6830bis-02 B.5.  Changes to =
draft-ietf-lisp-rfc6830bis-02

      
 =


      
   o  Posted =
April 2017.    o  Posted April =
2017.

      
 =


      
   o  Reflect =
some editorial comments from Damien Sausez.    o  Reflect some editorial comments from Damien =
Sausez.

      
 =


      

      
B.4.  Changes to =
draft-ietf-lisp-rfc6830bis-01 B.6.  Changes to =
draft-ietf-lisp-rfc6830bis-01

      
 =


      
   o  Posted =
March 2017.    o  Posted March =
2017.

      
 =


      
   o  Include =
references to new RFCs published.    o =
 Include references to new RFCs published.

      
 =


      
   o  Change =
references from RFC6833 to RFC6833bis.  =
  o  Change references from RFC6833 to RFC6833bis.

      
 =


      
   o  Clarified =
LCAF text in the IANA section.    o  =
Clarified LCAF text in the IANA section.

      
 =


      
   o  Remove =
references to "experimental".    o  =
Remove references to "experimental".

      
 =


      

      
B.5.  Changes to =
draft-ietf-lisp-rfc6830bis-00 B.7.  Changes to =
draft-ietf-lisp-rfc6830bis-00

      
 =


      
   o  Posted =
December 2016.    o  Posted December =
2016.

      
 =


      
   o  Created =
working group document from draft-farinacci-lisp    o  Created working group document from =
draft-farinacci-lisp

      
      -rfc6830-00 =
individual submission.  No other changes made.       -rfc6830-00 individual submission.  No other =
changes made.

      
 =


      
Authors' =
Addresses Authors' Addresses

      

      
 =
                        =
                                                 

      
   Dino =
Farinacci    Dino Farinacci

      
   Cisco =
Systems    Cisco Systems

      
   Tasman =
Drive    Tasman Drive

      
   San Jose, CA  =
95134    San Jose, CA  95134

      
   USA =
   USA

      
 =


      
   EMail: =
farinacci@gmail.com    EMail: =
farinacci@gmail.com

      
 =


      
   Vince =
Fuller    Vince Fuller

      
   Cisco =
Systems    Cisco Systems


     
 

     
 End of changes. 57 change blocks. 

     
141 lines changed or =
deleted 176 lines changed or =
added

     

This =
html diff was produced by rfcdiff 1.46. The latest version is available =
from http://tools.ietf.org/to=
ols/rfcdiff/ 

   

  =20
  =20
=

--Apple-Mail=_7E55A47D-9F88-4D47-84E4-B7D201698EFD
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
	charset=us-ascii







--Apple-Mail=_7E55A47D-9F88-4D47-84E4-B7D201698EFD--


From nobody Fri Oct 27 15:47:03 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 934E813F5FF for ; Fri, 27 Oct 2017 15:47:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wZLjwQRhhXzn for ; Fri, 27 Oct 2017 15:46:59 -0700 (PDT)
Received: from mail-io0-x22f.google.com (mail-io0-x22f.google.com [IPv6:2607:f8b0:4001:c06::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E20E013F555 for ; Fri, 27 Oct 2017 15:46:58 -0700 (PDT)
Received: by mail-io0-x22f.google.com with SMTP id 134so15811045ioo.0 for ; Fri, 27 Oct 2017 15:46:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=RM4j2vUsbmK8FB2iCNW92aHvNWXxtYcjMwnzf7llxTQ=; b=IXgUx7P2nkROPsUi7hn738ZNGFOur2wWH7lPgbPHGywtBTqNYoVYdhAqP1S/yXKnDW +jqADfoAmpnB/hbA6d3oAWGE8zrtiMBb1FAPLhGXkdCqnV85wZ2O0llUSnxIMKou2eTE C4Z2sejcWDs7XqSqaAjCX99zI+fF/mOL/m9Vc83FdrXtVcgzAggKXg+/0dUm7yV2hzSr IhThxaCUkfYvVtMgNPHjjyy59I7nG3G7aTeGEYD1HnEjAJwREeuXYCJC35KQwGfYkTOX FPxchNvVvgdQLA5ZLsSMXt86kPX0AgK1DTrE1+jqWb8zXOR5mBG653jFucTQmmnBi6Be 20qw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=RM4j2vUsbmK8FB2iCNW92aHvNWXxtYcjMwnzf7llxTQ=; b=NdJosuXJD+LX/oo6UujRUeG3jDen2Mme1gmPmtDZ5fuepFqT63vEbSCSludxeRb6qO CYeJ7bAAZQXtZatBjhik3pQCS1RmAVo4GQVCMXODvrFYdDRmZRxmLPvFqfA1Sp/9dEEa RwdcCeZqHNPwCBl+9nOmFQs9WV1qN3eE6p2HiqFBSIOXi5mfm4dBhg8wvuXl/8wd8fzC EszPTTCITgyuSHV+kdVTDupbhwBqsjkfIsvFWoJpcSCyUTpK7TBBuu6/ZLtxsusaRnfb lBFjTfo0KxSG0FaVElTKTvLfZyin61Dcw+hJQN1gE6Yta5XhC1dwiCBlhM8Zk05J7+iZ ++ag==
X-Gm-Message-State: AMCzsaWeZjt2hAkKYdYk0RcAcG9zGLuxdakmWsolV1fS+h9L7JFGaPYM ePSXQI2MZQHItdqUXKhTssuItFlV7jlxkT8X7jA=
X-Google-Smtp-Source: ABhQp+TbF1Az7S5pnoyXP7HGPbZlmdt80ahXdUSbx8DK7RelTJ9M9bguMP6M9+Qj6iRxQu3pqcsKrY8vjR63sfBVhd4=
X-Received: by 10.36.154.71 with SMTP id l68mr2536968ite.57.1509144418160; Fri, 27 Oct 2017 15:46:58 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.107.190.131 with HTTP; Fri, 27 Oct 2017 15:46:37 -0700 (PDT)
In-Reply-To: 
References:  <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com>  <1AAAC5C3-27FA-47A9-819F-42B2357E3A08@gmail.com>  <3E61C832-97B2-4776-B375-9A473D600A61@gmail.com>  <09B6F8AE-3CCE-4FC9-9100-16EE8D7DA616@gigix.net> 
From: Alberto Rodriguez-Natal 
Date: Fri, 27 Oct 2017 15:46:37 -0700
Message-ID: 
To: Dino Farinacci 
Cc: Luigi Iannone , "lisp@ietf.org list" 
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Fri, 27 Oct 2017 22:47:00 -0000

After double checking with the diff and with Dino, it seems that the
first two points have been addressed already. Please find the rest
below and feel free to comment.

Alberto


>> Data-Probe:  A Data-Probe is a LISP-encapsulated data packet where the
>> inner-header destination address equals the outer-header destination
>> address used to trigger a Map-Reply by a decapsulating ETR.
>>
>> [AR] Is anyone using data-probes? I=E2=80=99d like to suggest removing t=
his text.
>
> (3) response.
>
> Early on in the LISP design, service providers thought this was useful. W=
e have carefully doctored the text to make it security safe, but it does av=
oid packet loss when setting up a first-time round-trip packet exchange. Th=
e initiator=E2=80=99s packet causes the mapping database lookup, but the re=
turn packet does not need a lookup.
>
> There might be specialized applications that may make use of it.
>
>> Since the LISP architecture uses a caching scheme to retrieve and
>> store EID-to-RLOC mappings, the only way an ITR can get a more
>> up-to-date mapping is to re-request the mapping.
>>
>> [AR] We could relax this constrain and/or reference PubSub here.
>
> Response (2).
>
> Want the WG to decide if this individual submission should be referenced.=
 I think the pubsub design is simple and can work but we have little implem=
entation experience with it thusfar.
>
>> When adding a new Locator record in lexicographic order to the end of
>> a Locator-Set, it is easy to update mappings.  We assume that new
>> mappings will maintain the same Locator ordering as the old mapping
>> but will just have new Locators appended to the end of the list.  So,
>> some ITRs can have a new mapping while other ITRs have only an old
>> mapping that is used until they time out.  When an ITR has only an old
>> mapping but detects bits set in the Locator-Status-Bits that
>> correspond to Locators beyond the list it has cached, it simply
>> ignores them.
>>
>> [AR] Probably we could complement this paragraph with something like
>> "It is RECOMMENDED to notify the ITRs that they should update their
>> Map-Caches, e.g. via an SMR.=E2=80=9D
>
> Response (3).
>
> We say this in other sections about updating mappings. In this paragraph,=
 there is a primary focus on locator-status-bits.
>
>> When a Locator record is removed from a Locator-Set, ITRs that have
>> the mapping cached will not use the removed Locator because the xTRs
>> will set the Locator-Status-Bit to 0.
>>
>> [AR] Since LSB are not mandatory and not used in many deployments we
>> should recommend notifying the affected ITRs via SMRs or PubSub.
>
> Response (3).
>
> The WG should discuss this. If you want to keep the locator-set in tact i=
n the ITR, using LSBs is a faster way to convey to not use a subset of the =
set.


From nobody Fri Oct 27 17:15:58 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A9EC139078 for ; Fri, 27 Oct 2017 17:15:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ky4W2kgFEB1I for ; Fri, 27 Oct 2017 17:15:55 -0700 (PDT)
Received: from mail-pf0-x234.google.com (mail-pf0-x234.google.com [IPv6:2607:f8b0:400e:c00::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DC81513A296 for ; Fri, 27 Oct 2017 17:15:54 -0700 (PDT)
Received: by mail-pf0-x234.google.com with SMTP id b85so6003040pfj.13 for ; Fri, 27 Oct 2017 17:15:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=/12q14x3qXmYbUbpTuUfoHpaK6N7vElUSKsOUcaT7+M=; b=AyALTMWHwtGpGicFyHg4/X2B5GG9edw8b8HhinwgKr+pKe38l1AoWlXfu/3GxH9QrO jqIw9DXyqomDiGsG6Wab9JZXkQo4JNIEuIhlG1I4rf3hZzMou4dL4HS+wzK9QokNCKvJ Ra4yVUf1uz1BOT13wQxPh6+GZztmfbcTJZBJMCc3TZj0awv/Jwf7NltDnbJIhCS/PXMy AYmmfwGIyOi/jmy3C2mSawgQVLPZJp2lYozhAg4WP4mfMy14HAtX3N9ef2vFtaonjSC1 GEOyVvf6+YAVChQtP/OkMaP7ukgEpM+GHd9PJeDwNCEd2Nq5Qul0vX7Pv2RmuMNOotVY pYZQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=/12q14x3qXmYbUbpTuUfoHpaK6N7vElUSKsOUcaT7+M=; b=oCpvC/tf2UcohSiVMkTTbBNRL/wJe1aAt3sYtdj6IgtoGbc9ToDeQBOqWaFxRJwiKr 7nYJipBLdXFjp6co8IxdqzMA+yoYa6EbTW8sMQLEBjnZ8oX5+vXhF7wJFK96/H1V61fH QdVHysaVojHAgeoNESJemQjdHjJnkc+fflV1OcZlHUMH/kR+hxhpWD8xH4H2ATNHJQwV 8V2dmHUb3RcE9DBFIYUQsTSS5ZjKbLqRYpyAtAzgzE3u9ep9qrUZCW9xA04Lu1M/LpBQ VusR8JWQ/1eyLXXitJTnYmj8Z1tl5+qg+C1eYhjxC7SnFWjpsDH1Uyrfu6GQJOt1OGKy 9mqg==
X-Gm-Message-State: AMCzsaX6r6++mTFKhdWuNj2+gpTZRl5ZQLJvKZgpV8AaqPM9gmANuTiH xvqmWmT6817is5EsN2CKLfw=
X-Google-Smtp-Source: ABhQp+QdyutNCtP18UjreiL1qXI43pbN0YePtK6z1QDe7iI/o2qt1nxFxhfWKfJal54A2qHYbCrJbg==
X-Received: by 10.98.157.156 with SMTP id a28mr1980306pfk.74.1509149754244; Fri, 27 Oct 2017 17:15:54 -0700 (PDT)
Received: from [10.197.31.157] (72-172-185-194.bayarea.net. [72.172.185.194]) by smtp.gmail.com with ESMTPSA id q16sm14554345pgq.79.2017.10.27.17.15.53 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 27 Oct 2017 17:15:53 -0700 (PDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Dino Farinacci 
In-Reply-To: <787AE7BB302AE849A7480A190F8B93300A05F572@OPEXCLILMA3.corporate.adroot.infra.ftgroup>
Date: Fri, 27 Oct 2017 17:15:52 -0700
Cc: "lisp@ietf.org list" 
Content-Transfer-Encoding: quoted-printable
Message-Id: 
References: <37C27B2F-AD76-4B5F-AFE6-E56D02180DD4@gmail.com> <787AE7BB302AE849A7480A190F8B93300A051871@OPEXCLILMA3.corporate.adroot.infra.ftgroup>  <787AE7BB302AE849A7480A190F8B93300A0541A6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <1BADE12F-F090-4255-B835-D9467E1135D5@gmail.com> <787AE7BB302AE849A7480A190F8B93300A056537@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <558E587E-1A98-4CF3-8E53-A9CCD422716E@gmail.com> <787AE7BB302AE849A7480A190F8B93300A05F572@OPEXCLILMA3.corporate.adroot.infra.ftgroup>
To: mohamed.boucadair@orange.com
X-Mailer: Apple Mail (2.3273)
Archived-At: 
Subject: Re: [lisp] Comments to draft-boucadair-lisp-multiple-records-00
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Sat, 28 Oct 2017 00:15:57 -0000

> -----Message d'origine-----
>> De : Dino Farinacci [mailto:farinacci@gmail.com]
>> Envoy=C3=A9 : jeudi 19 octobre 2017 15:21
>> =C3=80 : BOUCADAIR Mohamed IMT/OLN
>> Cc : lisp@ietf.org list
>> Objet : Re: [lisp] Comments to =
draft-boucadair-lisp-multiple-records-00
>>=20
>> What if we provided you with a more efficient feature. That is:
>>=20
>> (1) The ITR sends a Map-Request for 0.0.0.0/0.
>> (2) But rather than the mapping system return a RLOC-set for =
0.0.0.0/0
>> (which may or may not be registered), it returns all more specifics?
>> (3) The ITR would request a lookup-type of =E2=80=9Creturn *all* more =
specifics=E2=80=9D
>> versus an longest or exact match lookup.
>>=20
>=20
> [Med] I like this one, but I'd like also to let the ITR encloses =
specific EIDs in the same request.=20

Yes, that would be supported based on the existing text. This mechanism =
would have the lookup type per EID-record. So you could put 2 EIDs in a =
Map-Request where one would be a =E2=80=9Creturn all more specifics=E2=80=9D=
 and the other =E2=80=9Cexact match=E2=80=9D.

>> Here is my justification. And I made this comment to you a couple of =
years
>> ago. If an ITR is going to provide a list of EIDs to lookup when it
>> restarts, one has to ask how does it know which EIDs to request. If =
it has
>> a list, that means there was some implementation capability to write =
a
>> checkpoint or stateful file of entries. So when an ITR restarts, it =
has
>> that list.
>=20
> [Med] What we have investigated is to configure the ITR upon reboot =
with popular prefixes (without even requiring persistent storage of the =
EIDs list). We had designed a YANG module which is meant to populate a =
policy table on the=20

So there is a feature in LISP where you can put =E2=80=9Csend-map-request=E2=
=80=9D action entries in the map-cache. And when the ITR boots you can =
go ask for them.

> ITR so that popular EIDs can be retrieved immediately after state =
loss/reboot. The purpose was to avoid the first packet loss issue. An =
excerpt of the tree model is provided below. =20

Like I said before, if the ITR implementation would cache in a =
checkpoint file the entries that have been used, you have your list when =
you reboot. That is another mechanism.

> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
> module: ietf-ms-policy-table
>   +--rw ms-pt-config
>   |  +--rw description?      string
>   |  +--rw rfc6724-enable?   boolean
>   |  +--rw ms-pt-list
>   |     +--rw ms-pt-entry* [id]
>   |        +--rw id              uint32
>   |        +--rw Name?           string
>   |        +--rw Description?    string
>   |        +--rw eid             eid-id
>   |        +--rw map-resolver    inet:ip-address
>   |        +--rw priority?       uint32
>   |        +--rw status?         enumeration
>   |        +--rw validity-date?   yang:date-and-time
> =3D=3D=3D=3D=3D=3D=20
>=20
>>=20
>> Well, if it builds this checkpoint file, it could also store the =
RLOC-set,
>> so it would have all the mappings, maybe out of date, but it could =
query
>> the mapping system when the demand sees the need.
>=20
> [Med] Actually, we wanted to avoid waiting for a packet to show up for =
creating mappings for popular EIDs in a LISP domain.=20

Right, it is a =E2=80=9Crequest to push=E2=80=9D.

Dino




From nobody Sat Oct 28 09:15:20 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A04113FAF7 for ; Sat, 28 Oct 2017 09:15:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.88
X-Spam-Level: 
X-Spam-Status: No, score=-0.88 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MISSING_HEADERS=1.021, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KTz__T6mMEKC for ; Sat, 28 Oct 2017 09:15:16 -0700 (PDT)
Received: from mail.core-networks.de (mail.core-networks.de [IPv6:2001:1bc0:d::4:9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 623D313F64D for ; Sat, 28 Oct 2017 09:15:16 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mail.core-networks.de id 1e8TlQ-0004KP-9Z with ESMTPSA (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) for lisp@ietf.org; Sat, 28 Oct 2017 18:15:14 +0200
Cc: lisp@ietf.org
References:  <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com>  <60376D83-3DBD-4490-BEE8-F82F155A0FBC@gigix.net> <1781FA8C-B6E7-481A-AE4D-7F654AE87573@gmail.com>  <3D0619BC-8E92-438D-BAA8-1CCEE41D2C66@gmail.com>
From: "Rene 'Renne' Bartsch, B.Sc. Informatics" 
Message-ID: <56e2860b-c7aa-231b-c4e1-79cff2b45f6b@bartschnet.de>
Date: Sat, 28 Oct 2017 18:15:11 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0
MIME-Version: 1.0
In-Reply-To: <3D0619BC-8E92-438D-BAA8-1CCEE41D2C66@gmail.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Content-Language: de-DE
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Sat, 28 Oct 2017 16:15:18 -0000

Am 27.10.2017 um 06:30 schrieb Dino Farinacci:
>> I'm not that happy with
>>
>> "As the architecture is realized, if a given bit string is both an RLOC and an EID, it must refer to the same entity in both cases".
>>
>> In a MESH-architecture the EID of a mobile-node can be the RLOC of a neighbour mobile-node.
> I too would like to understand your comment.
>
> What the sentence is trying to achieve is that in some cases an EID and RLOC may be the same value for a given end-node. Like when when an EID is behind a NAT and the xTR is on the public side of the NAT, where the local private EID will be translated to a global EID and to reach the xTR the RLOC is also the same translated address.
>
> Dino

Sorry, I missed the context and thought it is generally valid.

The basic idea for a MESH-network is a LISP-node which acts as a xTR for 
itself and a RTR for the neighbour-nodes. In that case the string is a 
LEID for the MESH-node and a RLOC for the neighbour MESH-nodes. As the 
phrasing does not apply in this case, I'm happy with the removed "EIDs 
MUST NOT be used as LISP RLOCs". ;-)


Renne


From nobody Mon Oct 30 03:42:22 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2AD3A13AB2B for ; Mon, 30 Oct 2017 03:42:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gigix-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9wX0xCaKzu9a for ; Mon, 30 Oct 2017 03:42:19 -0700 (PDT)
Received: from mail-wm0-x233.google.com (mail-wm0-x233.google.com [IPv6:2a00:1450:400c:c09::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2257213F506 for ; Mon, 30 Oct 2017 03:42:19 -0700 (PDT)
Received: by mail-wm0-x233.google.com with SMTP id r196so15447175wmf.2 for ; Mon, 30 Oct 2017 03:42:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gigix-net.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=H0Rks9kCCNxGjrBv6i0uI+Xy/XI+3Xu7DzSvTt6Bo6Q=; b=pbaj6Y1fL8Yg++ene/EBeoFLFDhUWMN+KM2dbrWN9LhBoVgm72KfV6iRn+V0cRWxje PxUNjLrV0NHoo0xUNogUDfazZglI58WX1yp+T3LKLvv7/Xb6QnwfKRuHbsngzjn2C7zj iT3AqcabneFO+4o3WEFqVN3de/2cqzxnDj9dN3iFtrpukxoDPj2Vej/DUcylh5x3+WkV Z6sjaAtSUJBVsNKvnFa+SDPAzky1NjaOAmDSw3TjsCir3AvhuElGccnOZyQkaqsJoCcb MbFTYsqQhPQ+IjVhW1KYbAYhSvbXfMOhMHEMkL9UIyI0uooMIl29sRRFKQau4B3xbI4e LUwg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=H0Rks9kCCNxGjrBv6i0uI+Xy/XI+3Xu7DzSvTt6Bo6Q=; b=rmDEhORl/6fAQtGMex3iCh2R4qaY0T3TLUAurKClIUmT0ciziXaMlujDimTGrn2PLZ Ccp6FcvaIk3Bw7wGGdpda/NcERU/ircjAyqn2FrXNnyYCeAnRPyvD3cIgNtHvXZpSpV0 hCA9+sUUD0d8LwBZE+yFR4FAXZ4R0+b5MYF5Wvl4SVyp5Lg/dWiyRHj7PFIYVjxIxXKl COD3zYGHYlYJNVi/Ac6m61I29CS9SSS/j6NtkecbkOg5mTRP6CcaTTGvWqnZoy4oDino OI7N8txYwex1t3xopslX0OzRvQVAInuvXPdh3W0SaYpoovrAUCja0ih6SEwzyiayiIr4 /8yQ==
X-Gm-Message-State: AMCzsaWGiz2ogXLlgoo2PWLFksEk2kjW1sJLVDCaXZwn7A6EvlnZMz3O 4bTEGElHOWz9G/gd2TKGLIlE1aAUtMU=
X-Google-Smtp-Source: ABhQp+TAnbZ8vnl446eLm3dMJwGKeRRlClxW+8gN+gXhMeWCHEy6JOs9mtgXOCYif/soURPfdKu+gg==
X-Received: by 10.28.111.206 with SMTP id c75mr3520593wmi.123.1509360137162; Mon, 30 Oct 2017 03:42:17 -0700 (PDT)
Received: from ?IPv6:2001:660:330f:a4:7882:da63:1806:8f02? ([2001:660:330f:a4:7882:da63:1806:8f02]) by smtp.gmail.com with ESMTPSA id g28sm9122627wrg.56.2017.10.30.03.42.15 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 30 Oct 2017 03:42:15 -0700 (PDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 11.0 \(3445.1.7\))
From: Luigi Iannone 
In-Reply-To: 
Date: Mon, 30 Oct 2017 11:42:33 +0100
Cc: Dino Farinacci , "lisp@ietf.org list" 
Content-Transfer-Encoding: quoted-printable
Message-Id: <1159F643-9979-448C-AF37-2A6F979A7459@gigix.net>
References:  <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com>  <1AAAC5C3-27FA-47A9-819F-42B2357E3A08@gmail.com>  <3E61C832-97B2-4776-B375-9A473D600A61@gmail.com>  <09B6F8AE-3CCE-4FC9-9100-16EE8D7DA616@gigix.net>  
To: Alberto Rodriguez-Natal 
X-Mailer: Apple Mail (2.3445.1.7)
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Mon, 30 Oct 2017 10:42:21 -0000

Personal opinions inline=E2=80=A6


> On 28 Oct 2017, at 00:46, Alberto Rodriguez-Natal =
 wrote:
>=20
> After double checking with the diff and with Dino, it seems that the
> first two points have been addressed already. Please find the rest
> below and feel free to comment.
>=20
> Alberto
>=20
>=20
>>> Data-Probe:  A Data-Probe is a LISP-encapsulated data packet where =
the
>>> inner-header destination address equals the outer-header destination
>>> address used to trigger a Map-Reply by a decapsulating ETR.
>>>=20
>>> [AR] Is anyone using data-probes? I=E2=80=99d like to suggest =
removing this text.
>>=20
>> (3) response.
>>=20
>> Early on in the LISP design, service providers thought this was =
useful. We have carefully doctored the text to make it security safe, =
but it does avoid packet loss when setting up a first-time round-trip =
packet exchange. The initiator=E2=80=99s packet causes the mapping =
database lookup, but the return packet does not need a lookup.
>>=20
>> There might be specialized applications that may make use of it.

I=E2=80=99ve never been fan of data-probes, yet since they are in the =
experimental RFCs and since there might be implementations I would say =
that there is no harm in keeping the text.


>>=20
>>> Since the LISP architecture uses a caching scheme to retrieve and
>>> store EID-to-RLOC mappings, the only way an ITR can get a more
>>> up-to-date mapping is to re-request the mapping.
>>>=20
>>> [AR] We could relax this constrain and/or reference PubSub here.
>>=20
>> Response (2).
>>=20
>> Want the WG to decide if this individual submission should be =
referenced.

I would say no, better avoid it.

I think that the point is making AR is that an ITR does not always need =
to =E2=80=9Cre-request=E2=80=9D a mapping. PubSub is an example, NERD is =
another.
So may we can rephrase as:

	Since the LISP architecture uses a caching scheme to store =
EID-to-RLOC mappings,=20
	which raises the question of how to keep stored mappings =
up-to-date.

This sentence is well complemented by what is already in the document:
=09
	However, the ITRs do not  know when the mappings change, and the =
ETRs do not keep
	track of which ITRs requested its mappings.=20


As a side note, the sentence right after reads:

	For scalability reasons, __we want__
   	to maintain this approach but need to provide a way for ETRs to
   	change their mappings and inform the sites that are currently
   	communicating with the ETR site using such mappings.

Now in an RFC the =E2=80=9Cwe want=E2=80=9D is kind of fuzzy=E2=80=A6 is =
it the WG? The IETF? The authors?
Please rephrase.


>> I think the pubsub design is simple and can work but we have little =
implementation experience with it thusfar.
>>=20
>>> When adding a new Locator record in lexicographic order to the end =
of
>>> a Locator-Set, it is easy to update mappings.  We assume that new
>>> mappings will maintain the same Locator ordering as the old mapping
>>> but will just have new Locators appended to the end of the list.  =
So,
>>> some ITRs can have a new mapping while other ITRs have only an old
>>> mapping that is used until they time out.  When an ITR has only an =
old
>>> mapping but detects bits set in the Locator-Status-Bits that
>>> correspond to Locators beyond the list it has cached, it simply
>>> ignores them.
>>>=20
>>> [AR] Probably we could complement this paragraph with something like
>>> "It is RECOMMENDED to notify the ITRs that they should update their
>>> Map-Caches, e.g. via an SMR.=E2=80=9D
>>=20
>> Response (3).
>>=20
>> We say this in other sections about updating mappings. In this =
paragraph, there is a primary focus on locator-status-bits.
>>=20
>>> When a Locator record is removed from a Locator-Set, ITRs that have
>>> the mapping cached will not use the removed Locator because the xTRs
>>> will set the Locator-Status-Bit to 0.
>>>=20
>>> [AR] Since LSB are not mandatory and not used in many deployments we
>>> should recommend notifying the affected ITRs via SMRs or PubSub.
>>=20
>> Response (3).
>>=20
>> The WG should discuss this. If you want to keep the locator-set in =
tact in the ITR, using LSBs is a faster way to convey to not use a =
subset of the set.

I think the two comments above boil down to the same point: If there is =
a change in the LSB that suggests a change in the locator set should the =
ITR update the mapping? Since LSB can be used __only__ in trusted =
environments where there is a strict control I tend to say that it is =
not necessary...

In a public deployment there is no reason to use them since you cannot =
trust them. In this case, a box noticing __any__ change in the LSB would =
anyway double check with a map-request.

L.
=20






From nobody Mon Oct 30 03:44:47 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A98641394F2 for ; Mon, 30 Oct 2017 03:44:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gigix-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tZZS6AizLLY4 for ; Mon, 30 Oct 2017 03:44:42 -0700 (PDT)
Received: from mail-wr0-x232.google.com (mail-wr0-x232.google.com [IPv6:2a00:1450:400c:c0c::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3EAD713AB2B for ; Mon, 30 Oct 2017 03:44:42 -0700 (PDT)
Received: by mail-wr0-x232.google.com with SMTP id p96so12009917wrb.7 for ; Mon, 30 Oct 2017 03:44:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gigix-net.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=FJ12Oo8zPrHKtLxPAwxkNyi3JJFeMcMjH4lO2kc02U0=; b=WC3ookLGypN1PL0QFnLrVsRobWXbSdiD3C6wn3sxDTHGEP5nLTpetwnmK2qO3lYe+L NKHmB+OgdHwUEOc1Wsmw7wbZPP16l5SmKmhVtcvlWk5nhyzNG2Lz2VzFYtSsNWsY2dKe uuLnfmDRF16fT4umDx8c4L2tzHcC94IxIZRi6/JU2v4Y4BBopSdTe8fMP19gXy3nxsx5 hmryFBwDWazoYsED2Gmhqztyaq8UqX+am/nOe9OvyJN5xN/GTyuy7XiJNlGWDMTESF4h O29zg7kx7qF7lA41lzNPRWhX2SOZuJBYc4t6v5imUU4k80L7ooVOA0ZKU/iOjB2k56Dd xlDA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=FJ12Oo8zPrHKtLxPAwxkNyi3JJFeMcMjH4lO2kc02U0=; b=iEz03XEZCGGJVmBcOIWurq2GkawxH7l6wq+hSwwZAg0sduD1WDB/Abp/lDT/c/qGkw +fwEmRpoZqSiIVECVz558ZtI2zg1rqHm3cCZw1OPiZ9ceL0J2DkkLiTqD8G52wNnMm8A qY6260c8XhjOUbEHH0SLIkPwLWYP9z4aQOnUa3RUskCaFWC1GMh30XK3/gPX1TeH2aa1 CR1ATRxLKR6+xPZUhjpVe1vpxgTbyWKtz6hG2sGD9T96bVgw0+zbeikGngflG7PflZFd qRHby0nY7FMNxA3VziVqj8J23XKsj/lTO0KfOA67L7vaFu81iVBsGwE7n0Zas5J/sT37 w9Eg==
X-Gm-Message-State: AMCzsaWuH19ipy58K1l2ZofpxCQfUJ0X1sN+S3E2d9Zvek3oB/nIw9gt frFIY4qXs7TvoWomFWrr4pOHLCVUpLI=
X-Google-Smtp-Source: ABhQp+TgatBikXtmPO6qfyrbM5AoMzkSbs5wWaQ035Z/GGhaYrbFMQLu3wv1V1Ks2etwZRvHDRYc+g==
X-Received: by 10.223.199.138 with SMTP id l10mr6755810wrg.121.1509360280512;  Mon, 30 Oct 2017 03:44:40 -0700 (PDT)
Received: from ?IPv6:2001:660:330f:a4:7882:da63:1806:8f02? ([2001:660:330f:a4:7882:da63:1806:8f02]) by smtp.gmail.com with ESMTPSA id 138sm5799776wmf.21.2017.10.30.03.44.39 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 30 Oct 2017 03:44:39 -0700 (PDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 11.0 \(3445.1.7\))
From: Luigi Iannone 
In-Reply-To: <56e2860b-c7aa-231b-c4e1-79cff2b45f6b@bartschnet.de>
Date: Mon, 30 Oct 2017 11:44:56 +0100
Cc: lisp@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <85006FCB-5DF7-4F3D-AEAB-27A9510EE597@gigix.net>
References:  <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com>  <60376D83-3DBD-4490-BEE8-F82F155A0FBC@gigix.net> <1781FA8C-B6E7-481A-AE4D-7F654AE87573@gmail.com>  <3D0619BC-8E92-438D-BAA8-1CCEE41D2C66@gmail.com> <56e2860b-c7aa-231b-c4e1-79cff2b45f6b@bartschnet.de>
To: "Rene 'Renne' Bartsch, B.Sc. Informatics" 
X-Mailer: Apple Mail (2.3445.1.7)
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Mon, 30 Oct 2017 10:44:45 -0000

> On 28 Oct 2017, at 18:15, Rene 'Renne' Bartsch, B.Sc. Informatics =
 wrote:
>=20
>=20
>=20
> Am 27.10.2017 um 06:30 schrieb Dino Farinacci:
>>> I'm not that happy with
>>>=20
>>> "As the architecture is realized, if a given bit string is both an =
RLOC and an EID, it must refer to the same entity in both cases".
>>>=20
>>> In a MESH-architecture the EID of a mobile-node can be the RLOC of a =
neighbour mobile-node.
>> I too would like to understand your comment.
>>=20
>> What the sentence is trying to achieve is that in some cases an EID =
and RLOC may be the same value for a given end-node. Like when when an =
EID is behind a NAT and the xTR is on the public side of the NAT, where =
the local private EID will be translated to a global EID and to reach =
the xTR the RLOC is also the same translated address.
>>=20
>> Dino
>=20
> Sorry, I missed the context and thought it is generally valid.
>=20
> The basic idea for a MESH-network is a LISP-node which acts as a xTR =
for itself and a RTR for the neighbour-nodes. In that case the string is =
a LEID for the MESH-node and a RLOC for the neighbour MESH-nodes. As the =
phrasing does not apply in this case, I'm happy with the removed "EIDs =
MUST NOT be used as LISP RLOCs". ;-)

I think I=E2=80=99ve got it now.

In my personal opinion I agree with you. EID and RLOCs are relative to =
the deployment model and such a strong requirement is not really =
useful/needed.

Luigi

>=20
>=20
> Renne
>=20
> _______________________________________________
> lisp mailing list
> lisp@ietf.org
> https://www.ietf.org/mailman/listinfo/lisp


From nobody Mon Oct 30 09:41:00 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 96F337BCC for ; Mon, 30 Oct 2017 09:40:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j9e1-CXbPf51 for ; Mon, 30 Oct 2017 09:40:56 -0700 (PDT)
Received: from mail-pf0-x22c.google.com (mail-pf0-x22c.google.com [IPv6:2607:f8b0:400e:c00::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1542795F for ; Mon, 30 Oct 2017 09:32:21 -0700 (PDT)
Received: by mail-pf0-x22c.google.com with SMTP id 17so11415128pfn.12 for ; Mon, 30 Oct 2017 09:32:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=fca1OxAtVqNIgmawli+JYjUoypz1R3aG7fGmel+KpVs=; b=jv8AMZMO6gGITyIBh+ual0yfQ2ueyHySiAccy5gIduNc6t/rLIHrJeR63YXh5wRzt+ C6dA87kQX8lOHXpNTzKHTJRAfkWemNMmPVInuA+bfX+CPWSB2NgyseMHijgRSNcopVzy 45yZ1RU0UknfxupiMXWDo/jRhEx6NiLXUxeo3l5YKHuybsvn8pMwt8NAqyqE31wQQuZy HZ+Dqmz9Xwh1cYNunpJw9S/OpfhhZIwoVWFjxQuo7JqGGKsqwEKPqZlgeeaNVca60idN GKe7py0UdYzj8vU75EN9VNFzlr47zBdz2hlmWZNUQxMzQ21yyOO15ScUY3JDkVEDnv30 Z1DQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=fca1OxAtVqNIgmawli+JYjUoypz1R3aG7fGmel+KpVs=; b=tZ6Fl4gLKo2MitzkJL8H9P/0Rz9Qt+cgvd0wVyhvFZrQ8kKGA5fNkJutXw3ZSG4H5l EQsNLN/DZxLSwS8R0VI48fHB4j1ORHPErFpjjExKq9A0tS7SrFcufybtfcIb9a/7Ruti 9jSJXoyMTu2JCQB/YFI94EdysQo17tuMZLtjrrIKDWoIpIBVWWvh2kIMHct9iM9wz7mZ r7DqrYaxiCDdcN7qEg967EcDAigfFXymkQCl6FZ3IzsMQzQrg4Q1aDHCGOtncFZezPPA uPDccTYLUvygpvLD8rIuWhDKWr3ZdSLc94VR/iO0oyPt2akSDdgC0IDfPyJaTMr0/hih KrVw==
X-Gm-Message-State: AMCzsaXZnRYgPAv0OEF2FnHiomm7h+5E4ecmb42kTYshcx2d0HSEZAcB AfeUhYDGHwJ32kXdx4C4fvKpSxT/
X-Google-Smtp-Source: ABhQp+Qt7qxmwTRvFiza4x1s1ImFG9qRr1yyVJTGyymtC7xZAxjPLoOjLMeC3EtNShHE2GHyRTR7tw==
X-Received: by 10.101.93.77 with SMTP id e13mr8307375pgt.431.1509381141326; Mon, 30 Oct 2017 09:32:21 -0700 (PDT)
Received: from ?IPv6:2603:3024:151c:55f0:e871:1057:1f38:54e9? ([2603:3024:151c:55f0:e871:1057:1f38:54e9]) by smtp.gmail.com with ESMTPSA id o10sm23917228pgq.69.2017.10.30.09.32.19 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 30 Oct 2017 09:32:20 -0700 (PDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 11.0 \(3445.1.7\))
From: Dino Farinacci 
In-Reply-To: <85006FCB-5DF7-4F3D-AEAB-27A9510EE597@gigix.net>
Date: Mon, 30 Oct 2017 09:32:19 -0700
Cc: "Rene 'Renne' Bartsch, B.Sc. Informatics" , lisp@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <622A99A3-CA22-49D7-8B10-59561C485F0A@gmail.com>
References:  <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com>  <60376D83-3DBD-4490-BEE8-F82F155A0FBC@gigix.net> <1781FA8C-B6E7-481A-AE4D-7F654AE87573@gmail.com>  <3D0619BC-8E92-438D-BAA8-1CCEE41D2C66@gmail.com> <56e2860b-c7aa-231b-c4e1-79cff2b45f6b@bartschnet.de> <85006FCB-5DF7-4F3D-AEAB-27A9510EE597@gigix.net>
To: Luigi Iannone 
X-Mailer: Apple Mail (2.3445.1.7)
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Mon, 30 Oct 2017 16:40:58 -0000

The sentence has been removed. I am going to submit -06 today and we can =
still discuss the remaining issue and make a -07 update when needed.

Dino

> On Oct 30, 2017, at 3:44 AM, Luigi Iannone  wrote:
>=20
>=20
>=20
>> On 28 Oct 2017, at 18:15, Rene 'Renne' Bartsch, B.Sc. Informatics =
 wrote:
>>=20
>>=20
>>=20
>> Am 27.10.2017 um 06:30 schrieb Dino Farinacci:
>>>> I'm not that happy with
>>>>=20
>>>> "As the architecture is realized, if a given bit string is both an =
RLOC and an EID, it must refer to the same entity in both cases".
>>>>=20
>>>> In a MESH-architecture the EID of a mobile-node can be the RLOC of =
a neighbour mobile-node.
>>> I too would like to understand your comment.
>>>=20
>>> What the sentence is trying to achieve is that in some cases an EID =
and RLOC may be the same value for a given end-node. Like when when an =
EID is behind a NAT and the xTR is on the public side of the NAT, where =
the local private EID will be translated to a global EID and to reach =
the xTR the RLOC is also the same translated address.
>>>=20
>>> Dino
>>=20
>> Sorry, I missed the context and thought it is generally valid.
>>=20
>> The basic idea for a MESH-network is a LISP-node which acts as a xTR =
for itself and a RTR for the neighbour-nodes. In that case the string is =
a LEID for the MESH-node and a RLOC for the neighbour MESH-nodes. As the =
phrasing does not apply in this case, I'm happy with the removed "EIDs =
MUST NOT be used as LISP RLOCs". ;-)
>=20
> I think I=E2=80=99ve got it now.
>=20
> In my personal opinion I agree with you. EID and RLOCs are relative to =
the deployment model and such a strong requirement is not really =
useful/needed.
>=20
> Luigi
>=20
>>=20
>>=20
>> Renne
>>=20
>> _______________________________________________
>> lisp mailing list
>> lisp@ietf.org
>> https://www.ietf.org/mailman/listinfo/lisp
>=20
> _______________________________________________
> lisp mailing list
> lisp@ietf.org
> https://www.ietf.org/mailman/listinfo/lisp


From nobody Mon Oct 30 09:47:32 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E8FF27DBA for ; Mon, 30 Oct 2017 09:47:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.597
X-Spam-Level: 
X-Spam-Status: No, score=-0.597 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_COMMENT_SAVED_URL=1.391, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_HTML_ATTACH=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W0hNKOIco9D1 for ; Mon, 30 Oct 2017 09:47:25 -0700 (PDT)
Received: from mail-pg0-x22b.google.com (mail-pg0-x22b.google.com [IPv6:2607:f8b0:400e:c05::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7B8C87BF8 for ; Mon, 30 Oct 2017 09:41:39 -0700 (PDT)
Received: by mail-pg0-x22b.google.com with SMTP id m18so12087103pgd.13 for ; Mon, 30 Oct 2017 09:41:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=L1YG9Cn3GNjnr+l9l3sVdId003vG9Sv1aaO1AyG2uU4=; b=iq+CU4G8FuSCTVsIEGaN2MOJ7+2G2c0PVa971HmkcKm++jmr0zbAUVM9NVp/gCsK1O mVnZxJyqZOcTamp2TKyFuxGD0fuY0Q9I1LLkoEwnzf4eXOsXz6QNRe2ZJsBRcJOSHn7h 5JueXEHp+fG9OH5madRPODxDBFHdJKZLNizUQBYQm1p5lrE00XXAwFkVi0QrMXyi+Fkb 8pfdhuEYP4sKDau4Fv8pePObuGOdQa4kqkhsl+2gaXXvzvoUdoo/GpLjrrf3DPERR7VN m4ybznZhZ21XnL8TU3iQkhnf8AvGSw8yDgQVfsSnR4vc0se1J1h/31L3n2jtxGAeQYl9 6NGQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=L1YG9Cn3GNjnr+l9l3sVdId003vG9Sv1aaO1AyG2uU4=; b=iBtA8u7gEHgbM2cGcoUwM+9jK1EQKfnR3AB9MERFQDZDUVWzZzrVLikbGBnuXc2WDT 91GEeewN5ATIg5AGRzLeZBzMwrdJnWKiH3VOCc+KvDnqxfU07PwYPVaoBjhWnO76tfVT Nt3wvyVtjUGVQD47miQqC7uiZ+eEisXIOaIIuDpX20SSriInxMRWfUaVU3Luf8JGkgko tfyHLx5fUriYbJ9Pm1V0lALzXEHKGr/QnFX59UwOvBQKFzO5zbhGQjQonEVb0hmt5IoT SqS2U0G7WHk9Jskc+cHc8qMNS9SAcBU7aHb7cpXfQ6zv7pCqFvI25avLJv9isJralZ93 vpDw==
X-Gm-Message-State: AMCzsaWxfnJ6FKSXopI9tvNNV7hZangdPSflad1dclgOZjqfWxlfbmhC pULUAi23LePuyvd68p3s8LM=
X-Google-Smtp-Source: ABhQp+TyDP1ztI9Exy8ntoKoVXq1qz8akZmJWk16SXHyjVp5xuqDDs0kKi6d23YnufDHr7VhAfYMvw==
X-Received: by 10.99.171.6 with SMTP id p6mr8531031pgf.30.1509381698983; Mon, 30 Oct 2017 09:41:38 -0700 (PDT)
Received: from ?IPv6:2603:3024:151c:55f0:e871:1057:1f38:54e9? ([2603:3024:151c:55f0:e871:1057:1f38:54e9]) by smtp.gmail.com with ESMTPSA id f7sm22396865pgq.5.2017.10.30.09.41.37 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 30 Oct 2017 09:41:37 -0700 (PDT)
From: Dino Farinacci 
Message-Id: 
Content-Type: multipart/mixed; boundary="Apple-Mail=_CE10E3DE-4AD2-4A2C-9E0B-ED4664F79D24"
Mime-Version: 1.0 (Mac OS X Mail 11.0 \(3445.1.7\))
Date: Mon, 30 Oct 2017 09:41:36 -0700
In-Reply-To: <1159F643-9979-448C-AF37-2A6F979A7459@gigix.net>
Cc: Alberto Rodriguez-Natal , "lisp@ietf.org list" 
To: Luigi Iannone 
References:  <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com>  <1AAAC5C3-27FA-47A9-819F-42B2357E3A08@gmail.com>  <3E61C832-97B2-4776-B375-9A473D600A61@gmail.com>  <09B6F8AE-3CCE-4FC9-9100-16EE8D7DA616@gigix.net>   <1159F643-9979-448C-AF37-2A6F979A7459@gigix.net>
X-Mailer: Apple Mail (2.3445.1.7)
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Mon, 30 Oct 2017 16:47:30 -0000

--Apple-Mail=_CE10E3DE-4AD2-4A2C-9E0B-ED4664F79D24
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

> I=E2=80=99ve never been fan of data-probes, yet since they are in the =
experimental RFCs and since there might be implementations I would say =
that there is no harm in keeping the text.

Ack.

>> store EID-to-RLOC mappings, the only way an ITR can get a more
>>>> up-to-date mapping is to re-request the mapping.
>>>>=20
>>>> [AR] We could relax this constrain and/or reference PubSub here.
>>>=20
>>> Response (2).
>>>=20
>>> Want the WG to decide if this individual submission should be =
referenced.
>=20
> I would say no, better avoid it.

Ack.

> As a side note, the sentence right after reads:
>=20
> 	For scalability reasons, __we want__
>   	to maintain this approach but need to provide a way for ETRs to
>   	change their mappings and inform the sites that are currently
>   	communicating with the ETR site using such mappings.
>=20
> Now in an RFC the =E2=80=9Cwe want=E2=80=9D is kind of fuzzy=E2=80=A6 =
is it the WG? The IETF? The authors?
> Please rephrase.

Fixed. See new diff file.

>>> When a Locator record is removed from a Locator-Set, ITRs that have
>>>> the mapping cached will not use the removed Locator because the =
xTRs
>>>> will set the Locator-Status-Bit to 0.
>>>>=20
>>>> [AR] Since LSB are not mandatory and not used in many deployments =
we
>>>> should recommend notifying the affected ITRs via SMRs or PubSub.
>>>=20
>>> Response (3).
>>>=20
>>> The WG should discuss this. If you want to keep the locator-set in =
tact in the ITR, using LSBs is a faster way to convey to not use a =
subset of the set.
>=20
> I think the two comments above boil down to the same point: If there =
is a change in the LSB that suggests a change in the locator set should =
the ITR update the mapping? Since LSB can be used __only__ in trusted =
environments where there is a strict control I tend to say that it is =
not necessary...
>=20
> In a public deployment there is no reason to use them since you cannot =
trust them. In this case, a box noticing __any__ change in the LSB would =
anyway double check with a map-request.

I presume this to mean that there is no new text needed?

Dino


--Apple-Mail=_CE10E3DE-4AD2-4A2C-9E0B-ED4664F79D24
Content-Disposition: attachment;
	filename=rfc6830bis-diff.html
Content-Type: text/html;
	x-unix-mode=0644;
	name="rfc6830bis-diff.html"
Content-Transfer-Encoding: quoted-printable



=20
  =20
  =20
  Diff: draft-ietf-lisp-rfc6830bis-05.txt - =
draft-ietf-lisp-rfc6830bis-06.txt=20
  =20
     =20
=20
=20
  =20
  =20
      =

      =

      =

      =

      
< draft-ietf-lisp-rfc6830bis-05.txt  =
 draft-ietf-lisp-rfc6830bis-06.txt >
 =


      
Network Working =
Group                                       D. Farinacci =
Network Working Group                           =
            D. Farinacci

      
Internet-Draft    =
                                             V. Fuller Internet-Draft                                           =
      V. Fuller

      
Intended status: =
Standards Track                                D. Meyer =
Intended status: Standards Track                =
                D. Meyer

      

      
Expires: =
March 2, 2018                              =
            D. Lewis Expires: May 3, 2018                                        =
    D. Lewis

      
                  =
                                         Cisco Systems                                                          =
  Cisco Systems

      
                  =
                                     A. Cabellos (Ed.)                                                        =
A. Cabellos (Ed.)

      
                  =
                                     UPC/BarcelonaTech                                                        =
UPC/BarcelonaTech

      

      
                =
                                         August =
29, 2017                       =
                                  October =
30, 2017

      
 =


      
               =
The Locator/ID Separation Protocol (LISP)                The Locator/ID Separation Protocol =
(LISP)

      

      
                =
     draft-ietf-lisp-rfc6830bis-05 =
                     =
draft-ietf-lisp-rfc6830bis-06

      
 =


      
Abstract =
Abstract

      
 =


      
   This document =
describes the data-plane protocol for the Locator/ID    This document describes the data-plane protocol for =
the Locator/ID

      
   Separation =
Protocol (LISP).  LISP defines two namespaces, End-point =
   Separation Protocol (LISP).  LISP defines =
two namespaces, End-point

      
   Identifiers =
(EIDs) that identify end-hosts and Routing Locators    Identifiers (EIDs) that identify end-hosts and =
Routing Locators

      
   (RLOCs) that =
identify network attachment points.  With this, LISP    (RLOCs) that identify network attachment points.  =
With this, LISP

      
   effectively =
separates control from data, and allows routers to create =
   effectively separates control from data, and =
allows routers to create

      
   overlay =
networks.  LISP-capable routers exchange encapsulated packets =
   overlay networks.  LISP-capable routers =
exchange encapsulated packets

      
   according to =
EID-to-RLOC mappings stored in a local map-cache.  The    according to EID-to-RLOC mappings stored in a local =
map-cache.  The

      
 =


      
skipping to =
change at =
page 1, line 39 =C2=B6 =
skipping to change at page 1, line 39 =C2=B6

      
   among other =
features.    among other =
features.

      
 =


      
Status of This =
Memo Status of This Memo

      
 =


      
   This =
Internet-Draft is submitted in full conformance with the =
   This Internet-Draft is submitted in full =
conformance with the

      
   provisions of =
BCP 78 and BCP 79.    provisions of =
BCP 78 and BCP 79.

      
 =


      
   =
Internet-Drafts are working documents of the Internet =
Engineering    Internet-Drafts are =
working documents of the Internet Engineering

      
   Task Force =
(IETF).  Note that other groups may also distribute    Task Force (IETF).  Note that other groups may also =
distribute

      
   working =
documents as Internet-Drafts.  The list of current Internet- =
   working documents as Internet-Drafts.  The =
list of current Internet-

      

      
   Drafts is at =
http://datatracker.ietf.org/drafts/current/.    Drafts is at https://datatracker.ietf.org/drafts/current/.

      
 =


      
   =
Internet-Drafts are draft documents valid for a maximum of six =
months    Internet-Drafts are draft =
documents valid for a maximum of six months

      
   and may be =
updated, replaced, or obsoleted by other documents at any =
   and may be updated, replaced, or obsoleted =
by other documents at any

      
   time.  It is =
inappropriate to use Internet-Drafts as reference    time.  It is inappropriate to use Internet-Drafts as =
reference

      
   material or to =
cite them other than as "work in progress."    material or to cite them other than as "work in =
progress."

      
 =


      

      
   This =
Internet-Draft will expire on March 2, =
2018.    This Internet-Draft will =
expire on May 3, 2018.

      
 =


      
Copyright =
Notice Copyright Notice

      
 =


      
   Copyright (c) =
2017 IETF Trust and the persons identified as the    Copyright (c) 2017 IETF Trust and the persons =
identified as the

      
   document =
authors.  All rights reserved.    =
document authors.  All rights reserved.

      
 =


      
   This document =
is subject to BCP 78 and the IETF Trust's Legal    This document is subject to BCP 78 and the IETF =
Trust's Legal

      
   Provisions =
Relating to IETF Documents    =
Provisions Relating to IETF Documents

      

      
   =
(http://trustee.ietf.org/license-info) in effect on the date of =
   (https://trustee.ietf.org/license-info) in effect on =
the date of

      
   publication of =
this document.  Please review these documents    publication of this document.  Please review these =
documents

      
   carefully, as =
they describe your rights and restrictions with respect =
   carefully, as they describe your rights and =
restrictions with respect

      
   to this =
document.  Code Components extracted from this document must =
   to this document.  Code Components extracted =
from this document must

      
   include =
Simplified BSD License text as described in Section 4.e of =
   include Simplified BSD License text as =
described in Section 4.e of

      
   the Trust =
Legal Provisions and are provided without warranty as    the Trust Legal Provisions and are provided without =
warranty as

      
   described in =
the Simplified BSD License.    =
described in the Simplified BSD License.

      
 =


      
Table of =
Contents Table of Contents

      
 =


      
   1.  =
Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   =
3    1.  Introduction  . . . . . . . . =
. . . . . . . . . . . . . . . .   3

      
 =


      
skipping to =
change at =
page 2, line 46 =C2=B6 =
skipping to change at page 2, line 46 =C2=B6

      
   9.  Routing =
Locator Selection . . . . . . . . . . . . . . . . . .  23 =
   9.  Routing Locator Selection . . . . . . . =
. . . . . . . . . . .  23

      
   10. Routing =
Locator Reachability  . . . . . . . . . . . . . . . .  24 =
   10. Routing Locator Reachability  . . . . . =
. . . . . . . . . . .  24

      
     10.1.  Echo =
Nonce Algorithm . . . . . . . . . . . . . . . . . .  27 =
     10.1.  Echo Nonce Algorithm . . . . . . . =
. . . . . . . . . . .  27

      
     10.2.  =
RLOC-Probing Algorithm . . . . . . . . . . . . . . . . .  28 =
     10.2.  RLOC-Probing Algorithm . . . . . . =
. . . . . . . . . . .  28

      
   11. EID =
Reachability within a LISP Site . . . . . . . . . . . . .  29 =
   11. EID Reachability within a LISP Site . . =
. . . . . . . . . . .  29

      
   12. Routing =
Locator Hashing . . . . . . . . . . . . . . . . . . .  30 =
   12. Routing Locator Hashing . . . . . . . . =
. . . . . . . . . . .  30

      
   13. Changing =
the Contents of EID-to-RLOC Mappings . . . . . . . .  31 =
   13. Changing the Contents of EID-to-RLOC =
Mappings . . . . . . . .  31

      
     13.1.  Clock =
Sweep  . . . . . . . . . . . . . . . . . . . . . .  32      13.1.  Clock Sweep  . . . . . . . . . . . . . . . . =
. . . . . .  32

      
     13.2.  =
Solicit-Map-Request (SMR)  . . . . . . . . . . . . . . .  32 =
     13.2.  Solicit-Map-Request (SMR)  . . . . =
. . . . . . . . . . .  32

      
     13.3.  =
Database Map-Versioning  . . . . . . . . . . . . . . . .  34 =
     13.3.  Database Map-Versioning  . . . . . =
. . . . . . . . . . .  34

      

      
   14. =
Multicast Considerations  . . . . . . . . . . . . . . . . . .  34    14. =
Multicast Considerations  . . . . . . . . . . . . . . . . . .  35

      
   15. Router =
Performance Considerations . . . . . . . . . . . . . .  35 =
   15. Router Performance Considerations . . . =
. . . . . . . . . . .  35

      
   16. Mobility =
Considerations . . . . . . . . . . . . . . . . . . .  36 =
   16. Mobility Considerations . . . . . . . . =
. . . . . . . . . . .  36

      
     16.1.  Slow =
Mobility  . . . . . . . . . . . . . . . . . . . . .  36 =
     16.1.  Slow Mobility  . . . . . . . . . . =
. . . . . . . . . . .  36

      
     16.2.  Fast =
Mobility  . . . . . . . . . . . . . . . . . . . . .  36 =
     16.2.  Fast Mobility  . . . . . . . . . . =
. . . . . . . . . . .  36

      
     16.3.  LISP =
Mobile Node Mobility  . . . . . . . . . . . . . . .  37 =
     16.3.  LISP Mobile Node Mobility  . . . . =
. . . . . . . . . . .  37

      
   17. LISP xTR =
Placement and Encapsulation Methods  . . . . . . . .  38 =
   17. LISP xTR Placement and Encapsulation =
Methods  . . . . . . . .  38

      
     17.1.  =
First-Hop/Last-Hop xTRs  . . . . . . . . . . . . . . . .  39 =
     17.1.  First-Hop/Last-Hop xTRs  . . . . . =
. . . . . . . . . . .  39

      
     17.2.  =
Border/Edge xTRs . . . . . . . . . . . . . . . . . . . .  39 =
     17.2.  Border/Edge xTRs . . . . . . . . . =
. . . . . . . . . . .  39

      
     17.3.  ISP =
Provider Edge (PE) xTRs  . . . . . . . . . . . . . .  40 =
     17.3.  ISP Provider Edge (PE) xTRs  . . . =
. . . . . . . . . . .  40

      
     17.4.  LISP =
Functionality with Conventional NATs  . . . . . . .  40 =
     17.4.  LISP Functionality with =
Conventional NATs  . . . . . . .  40

      
 =


      
skipping to =
change at =
page 3, line 22 =C2=B6 =
skipping to change at page 3, line 22 =C2=B6

      
     18.3.  =
Traceroute Using Mixed Locators  . . . . . . . . . . . .  43 =
     18.3.  Traceroute Using Mixed Locators  . =
. . . . . . . . . . .  43

      
   19. Security =
Considerations . . . . . . . . . . . . . . . . . . .  43 =
   19. Security Considerations . . . . . . . . =
. . . . . . . . . . .  43

      
   20. Network =
Management Considerations . . . . . . . . . . . . . .  44 =
   20. Network Management Considerations . . . =
. . . . . . . . . . .  44

      
   21. IANA =
Considerations . . . . . . . . . . . . . . . . . . . . .  44 =
   21. IANA Considerations . . . . . . . . . . =
. . . . . . . . . . .  44

      
     21.1.  LISP =
UDP Port Numbers  . . . . . . . . . . . . . . . . .  44 =
     21.1.  LISP UDP Port Numbers  . . . . . . =
. . . . . . . . . . .  44

      
   22. References =
 . . . . . . . . . . . . . . . . . . . . . . . . .  44    22. References  . . . . . . . . . . . . . . . . . . . =
. . . . . .  44

      
     22.1.  =
Normative References . . . . . . . . . . . . . . . . . .  44 =
     22.1.  Normative References . . . . . . . =
. . . . . . . . . . .  44

      
     22.2.  =
Informative References . . . . . . . . . . . . . . . . .  47 =
     22.2.  Informative References . . . . . . =
. . . . . . . . . . .  47

      
   Appendix A.  =
Acknowledgments  . . . . . . . . . . . . . . . . . .  51 =
   Appendix A.  Acknowledgments  . . . . . . . =
. . . . . . . . . . .  51

      
   Appendix B.  =
Document Change Log  . . . . . . . . . . . . . . . .  51 =
   Appendix B.  Document Change Log  . . . . . =
. . . . . . . . . . .  51

      

      
     B.1.  =
Changes to draft-ietf-lisp-rfc6830bis-04  =
. . . . . . . .  52      B.1.  =
Changes to draft-ietf-lisp-rfc6830bis-06  =
. . . . . . . .  52

      
     B.2.  =
Changes to draft-ietf-lisp-rfc6830bis-03  =
. . . . . . . .  52      B.2.  =
Changes to draft-ietf-lisp-rfc6830bis-05  =
. . . . . . . .  52

      
     B.3.  =
Changes to draft-ietf-lisp-rfc6830bis-02  =
. . . . . . . .  52      B.3.  =
Changes to draft-ietf-lisp-rfc6830bis-04  =
. . . . . . . .  52

      
     B.4.  =
Changes to draft-ietf-lisp-rfc6830bis-01  =
. . . . . . . .  52      B.4.  =
Changes to draft-ietf-lisp-rfc6830bis-03  =
. . . . . . . .  52

      
     B.5.  =
Changes to draft-ietf-lisp-rfc6830bis-00  . . . . . . . .  52      B.5.  =
Changes to draft-ietf-lisp-rfc6830bis-02  . . . . =
. . . .  53

      
   Authors' =
Addresses  . . . . . . . . . . . . . . . . . . . . . . .  52      B.6.  Changes to draft-ietf-lisp-rfc6830bis-01  . =
. . . . . . .  53

      
 =
     B.7.  Changes =
to draft-ietf-lisp-rfc6830bis-00  . . . . . . . .  53

      
 =
   Authors' Addresses  . . . . . . . . . . . . =
. . . . . . . . . . .  53

      
 =


      
1.  =
Introduction 1.  Introduction

      
 =


      
   This document =
describes the Locator/Identifier Separation Protocol    This document describes the Locator/Identifier =
Separation Protocol

      
   (LISP).  LISP =
is an encapsulation protocol built around the    (LISP).  LISP is an encapsulation protocol built =
around the

      
   fundamental =
idea of separating the topological location of a network =
   fundamental idea of separating the =
topological location of a network

      
   attachment =
point from the node's identity [CHIAPPA].  As a result    attachment point from the node's identity [CHIAPPA].  =
As a result

      
   LISP creates =
two namespaces: Endpoint Identifiers (EIDs), that are    LISP creates two namespaces: Endpoint Identifiers =
(EIDs), that are

      
   used to =
identify end-hosts (e.g., nodes or Virtual Machines) and =
   used to identify end-hosts (e.g., nodes or =
Virtual Machines) and

      
   routable =
Routing Locators (RLOCs), used to identify network    routable Routing Locators (RLOCs), used to identify =
network

      
 =


      
skipping to =
change at =
page 5, line 19 =C2=B6 =
skipping to change at page 5, line 19 =C2=B6

      
      the first =
(most inner) LISP header of a packet.  The host obtains =
      the first (most inner) LISP header of a =
packet.  The host obtains

      
      a =
destination EID the same way it obtains a destination address =
      a destination EID the same way it obtains =
a destination address

      
      today, for =
example, through a Domain Name System (DNS) [RFC1034]       today, for example, through a Domain Name System =
(DNS) [RFC1034]

      
      lookup or =
Session Initiation Protocol (SIP) [RFC3261] exchange.       lookup or Session Initiation Protocol (SIP) =
[RFC3261] exchange.

      
      The source =
EID is obtained via existing mechanisms used to set a       The source EID is obtained via existing mechanisms =
used to set a

      
      host's =
"local" IP address.  An EID used on the public Internet =
      host's "local" IP address.  An EID used =
on the public Internet

      
      must have =
the same properties as any other IP address used in that =
      must have the same properties as any =
other IP address used in that

      
      manner; =
this means, among other things, that it must be globally =
      manner; this means, among other things, =
that it must be globally

      
      unique.  An =
EID is allocated to a host from an EID-Prefix block       unique.  An EID is allocated to a host from an =
EID-Prefix block

      
      associated =
with the site where the host is located.  An EID can be =
      associated with the site where the host =
is located.  An EID can be

      

      
      used by a =
host to refer to other hosts.  EIDs MUST NOT be =
used as       used by a host =
to refer to other hosts.  Note that EID blocks MAY

      
      LISP RLOCs.  Note that EID blocks MAY be =
assigned in a       be assigned in a =
hierarchical manner, independent of the network

      
      =
hierarchical manner, independent of the network topology, to =
      topology, to facilitate scaling of the =
mapping database.  In

      
      =
facilitate scaling of the mapping database.  In addition, an =
EID       addition, an EID block =
assigned to a site may have site-local
      block =
assigned to a site may have site-local structure       structure (subnetting) for routing within the =
site; this structure

      
      =
(subnetting) for routing within the site; this structure is not =
      is not visible to the global routing =
system.  In theory, the bit

      
      visible =
to the global routing system.  In theory, the bit string =
      string that represents an EID for one =
device can represent an RLOC

      
      that =
represents an EID for one device can represent an RLOC for a =
      for a different device.  As the =
architecture is realized, if a

      
      different =
device.  As the architecture is realized, if a given bit =
      given bit string is both an RLOC and an =
EID, it must refer to the

      
      string is =
both an RLOC and an EID, it must refer to the same       same entity in both cases.  When used in =
discussions with other

      
      entity in =
both cases.  When used in discussions with other 

      
      Locator/ID =
separation proposals, a LISP EID will be called an       Locator/ID separation proposals, a LISP EID will =
be called an

      
      "LEID".  =
Throughout this document, any references to "EID" refer =
      "LEID".  Throughout this document, any =
references to "EID" refer

      
      to an =
LEID.       to an LEID.

      
 =


      
   EID-Prefix:   =
An EID-Prefix is a power-of-two block of EIDs that are    EID-Prefix:   An EID-Prefix is a power-of-two block =
of EIDs that are

      
      allocated =
to a site by an address allocation authority.  EID-       allocated to a site by an address allocation =
authority.  EID-

      
      Prefixes =
are associated with a set of RLOC addresses that make up =
      Prefixes are associated with a set of =
RLOC addresses that make up

      
      a "database =
mapping".  EID-Prefix allocations can be broken up       a "database mapping".  EID-Prefix allocations can =
be broken up

      
      into =
smaller blocks when an RLOC set is to be associated with the =
      into smaller blocks when an RLOC set is =
to be associated with the

      
      larger =
EID-Prefix block.  A globally routed address block (whether =
      larger EID-Prefix block.  A globally =
routed address block (whether

      
 =


      
skipping to =
change at =
page 6, line 17 =C2=B6 =
skipping to change at page 6, line 14 =C2=B6

      
      supplies an =
EID value for the destination address field of the IP       supplies an EID value for the destination address =
field of the IP

      
      header when =
communicating globally (i.e., outside of its routing       header when communicating globally (i.e., outside =
of its routing

      
      domain).  =
An end-system can be a host computer, a switch or router =
      domain).  An end-system can be a host =
computer, a switch or router

      
      device, or =
any network appliance.       device, =
or any network appliance.

      
 =


      
   Ingress Tunnel =
Router (ITR):   An ITR is a router that resides in a    Ingress Tunnel Router (ITR):   An ITR is a router =
that resides in a

      
      LISP site.  =
Packets sent by sources inside of the LISP site to       LISP site.  Packets sent by sources inside of the =
LISP site to

      
      =
destinations outside of the site are candidates for =
encapsulation       destinations =
outside of the site are candidates for encapsulation

      
      by the ITR. =
 The ITR treats the IP destination address as an EID       by the ITR.  The ITR treats the IP destination =
address as an EID

      
      and =
performs an EID-to-RLOC mapping lookup.  The router then =
      and performs an EID-to-RLOC mapping =
lookup.  The router then

      

      
      prepends =
an "outer" IP header with one of its globally routable       prepends an "outer" IP header with one of its =
routable RLOCs (in

      
      RLOCs in =
the source address field and the result of the mapping       the RLOC space) in =
the source address field and the result of the

      
      lookup in =
the destination address field.  Note that this       mapping lookup in the destination address field.  =
Note that this

      
      destination =
RLOC MAY be an intermediate, proxy device that has       destination RLOC MAY be an intermediate, proxy =
device that has

      
      better =
knowledge of the EID-to-RLOC mapping closer to the       better knowledge of the EID-to-RLOC mapping closer =
to the

      
      destination =
EID.  In general, an ITR receives IP packets from site       destination EID.  In general, an ITR receives IP =
packets from site

      
      end-systems =
on one side and sends LISP-encapsulated IP packets       end-systems on one side and sends =
LISP-encapsulated IP packets

      
      toward the =
Internet on the other side.       =
toward the Internet on the other side.
 =


      
      =
Specifically, when a service provider prepends a LISP header =
for       Specifically, when a service =
provider prepends a LISP header for

      
      Traffic =
Engineering purposes, the router that does this is also =
      Traffic Engineering purposes, the router =
that does this is also

      
      regarded as =
an ITR.  The outer RLOC the ISP ITR uses can be based       regarded as an ITR.  The outer RLOC the ISP ITR =
uses can be based

      
      on the =
outer destination address (the originating ITR's supplied =
      on the outer destination address (the =
originating ITR's supplied

      
 =


      
skipping to =
change at =
page 7, line 9 =C2=B6 =
skipping to change at page 7, line 7 =C2=B6

      
      network =
that strips an outer LISP header for Traffic Engineering =
      network that strips an outer LISP header =
for Traffic Engineering

      
      =
purposes.       purposes.

      
 =


      
   xTR:   An xTR =
is a reference to an ITR or ETR when direction of data    xTR:   An xTR is a reference to an ITR or ETR when =
direction of data

      
      flow is not =
part of the context description.  "xTR" refers to the       flow is not part of the context description.  =
"xTR" refers to the

      
      router that =
is the tunnel endpoint and is used synonymously with       router that is the tunnel endpoint and is used =
synonymously with

      
      the term =
"Tunnel Router".  For example, "An xTR can be located at =
      the term "Tunnel Router".  For example, =
"An xTR can be located at

      
      the =
Customer Edge (CE) router" indicates both ITR and ETR       the Customer Edge (CE) router" indicates both ITR =
and ETR

      
      =
functionality at the CE router.       =
functionality at the CE router.

      
 =


      

      
 =
   Re-encapsulating =
Tunneling in RTRs:   Re-encapsulating Tunneling

      
 =
      occurs when an =
RTR (Re-encapsulating Tunnel Router) acts like an

      
 =
      ETR to remove a =
LISP header, then acts as an ITR to prepend a new

      
 =
      LISP header.  =
Doing this allows a packet to be re-routed by the

      
 =
      RTR without =
adding the overhead of additional tunnel headers.  Any

      
 =
      references to =
tunnels in this specification refer to dynamic

      
 =
      encapsulating =
tunnels; they are never statically configured.  When

      
 =
      using multiple =
mapping database systems, care must be taken to not

      
 =
      create =
re-encapsulation loops through misconfiguration.

      
 =
                                               =
                          

      
   LISP Router:   =
A LISP router is a router that performs the functions    LISP Router:   A LISP router is a router that =
performs the functions

      
      of any or =
all of the following: ITR, ETR, RTR, Proxy-ITR (PITR),       of any or all of the following: ITR, ETR, RTR, =
Proxy-ITR (PITR),

      
      or =
Proxy-ETR (PETR).       or Proxy-ETR =
(PETR).

      
 =


      

      
   EID-to-RLOC =
Map-Cache:   The EID-to-RLOC map-cache is a =
short-lived,    EID-to-RLOC =
Map-Cache:   The EID-to-RLOC map-cache is generally

      
      on-demand =
table in an ITR that stores, tracks, and is responsible =
      short-lived, on-demand table in an ITR =
that stores, tracks, and is

      
      for =
timing out and otherwise validating EID-to-RLOC mappings. =
      responsible for timing out and otherwise =
validating EID-to-RLOC

      
      This =
cache is distinct from the full "database" of EID-to-RLOC   =
    mappings.  This cache is distinct from the full "database" of EID-

      
      mappings; =
it is dynamic, local to the ITR(s), and relatively       to-RLOC mappings; =
it is dynamic, local to the ITR(s), and

      
      small, =
while the database is distributed, relatively static, and =
      relatively small, while the database is =
distributed, relatively

      
      much more =
global in scope.       static, and =
much more global in scope.

      
 =


      
   EID-to-RLOC =
Database:   The EID-to-RLOC Database is a global    EID-to-RLOC Database:   The EID-to-RLOC Database is a =
global

      
      distributed =
database that contains all known EID-Prefix-to-RLOC       distributed database that contains all known =
EID-Prefix-to-RLOC

      
      mappings.  =
Each potential ETR typically contains a small piece of       mappings.  Each potential ETR typically contains a =
small piece of

      
      the =
database: the EID-to-RLOC mappings for the EID-Prefixes =
      the database: the EID-to-RLOC mappings =
for the EID-Prefixes

      
      "behind" =
the router.  These map to one of the router's own       "behind" the router.  These map to one of the =
router's own

      

      
      globally =
visible IP addresses.  The same database mapping =
entries       globally visible =
IP addresses.  Note that there MAY be transient

      
      MUST be configured on all ETRs for a given site.  =
In a steady       conditions =
when the EID-Prefix for the site and Locator-Set for

      
      state, the EID-Prefixes for the site and the =
Locator-Set for each       =
each EID-Prefix may not be the same on all ETRs.  This has no

      
      EID-Prefix MUST be the same on all ETRs.  =
Procedures to enforce       =
negative implications, since a partial set of Locators can be

      
      and/or verify this are outside the scope of this =
document.  Note       =
used.

      
      that =
there MAY be transient conditions when the EID-Prefix for the =


      
      site and =
Locator-Set for each EID-Prefix may not be the same on 

      
      all ETRs. =
 This has no negative implications, since a partial set =


      
      of =
Locators can be used. 

      
 =


      
   Recursive =
Tunneling:   Recursive Tunneling occurs when a packet has =
   Recursive Tunneling:   Recursive Tunneling =
occurs when a packet has

      
      more than =
one LISP IP header.  Additional layers of tunneling MAY =
      more than one LISP IP header.  Additional =
layers of tunneling MAY

      
      be employed =
to implement Traffic Engineering or other re-routing       be employed to implement Traffic Engineering or =
other re-routing

      
      as needed.  =
When this is done, an additional "outer" LISP header       as needed.  When this is done, an additional =
"outer" LISP header

      
      is added, =
and the original RLOCs are preserved in the "inner"       is added, and the original RLOCs are preserved in =
the "inner"

      
      header.  =
Any references to tunnels in this specification refer to =
      header.  Any references to tunnels in =
this specification refer to

      
      dynamic =
encapsulating tunnels; they are never statically       dynamic encapsulating tunnels; they are never =
statically

      
      =
configured.       configured.

      
 =


      

      
   Re-encapsulating Tunneling in RTRs:   Re-encapsulating =
Tunneling 

      
      occurs when an RTR (Re-encapsulating Tunnel =
Router) acts like an 

      
      ETR to remove a LISP header, then acts as an ITR =
to prepend a new 

      
      LISP header.  Doing this allows a packet to be =
re-routed by the 

      
      RTR without adding the overhead of additional =
tunnel headers.  Any 

      
      references to tunnels in this specification refer =
to dynamic 

      
      encapsulating tunnels; they are never statically =
configured.  When 

      
      using multiple mapping database systems, care =
must be taken to not 

      
      create re-encapsulation loops through =
misconfiguration. 

      
                =
                                                          =


      
   LISP Header:   =
LISP header is a term used in this document to refer    LISP Header:   LISP header is a term used in this =
document to refer

      
      to the =
outer IPv4 or IPv6 header, a UDP header, and a LISP-       to the outer IPv4 or IPv6 header, a UDP header, =
and a LISP-

      
      specific =
8-octet header that follow the UDP header and that an ITR =
      specific 8-octet header that follow the =
UDP header and that an ITR

      
      prepends or =
an ETR strips.       prepends or an =
ETR strips.

      
 =


      
   Address Family =
Identifier (AFI):   AFI is a term used to describe an    Address Family Identifier (AFI):   AFI is a term used =
to describe an

      

      
      address =
encoding in a packet.  An address family currently     =
  address encoding in a packet.  An address family that pertains to

      
      pertains =
to an IPv4 or IPv6 address.  See [AFN] and =
[RFC3232] for       the data-plane.  See [AFN] and [RFC3232] for =
details.  An AFI

      
      details.  =
An AFI value of 0 used in this specification indicates       value of 0 used in this specification indicates =
an unspecified

      
      an =
unspecified encoded address where the length of the address is =
      encoded address where the length of the =
address is 0 octets

      
      0 octets =
following the 16-bit AFI value of 0.  =
     following the 16-bit AFI value of 0.

      
 =


      
   Negative =
Mapping Entry:   A negative mapping entry, also known as a =
   Negative Mapping Entry:   A negative mapping =
entry, also known as a

      
      negative =
cache entry, is an EID-to-RLOC entry where an EID-Prefix =
      negative cache entry, is an EID-to-RLOC =
entry where an EID-Prefix

      
      is =
advertised or stored with no RLOCs.  That is, the Locator-Set =
      is advertised or stored with no RLOCs.  =
That is, the Locator-Set

      
      for the =
EID-to-RLOC entry is empty or has an encoded Locator count =
      for the EID-to-RLOC entry is empty or has =
an encoded Locator count

      
      of 0.  This =
type of entry could be used to describe a prefix from       of 0.  This type of entry could be used to =
describe a prefix from

      
      a non-LISP =
site, which is explicitly not in the mapping database.       a non-LISP site, which is explicitly not in the =
mapping database.

      
      There are a =
set of well-defined actions that are encoded in a       There are a set of well-defined actions that are =
encoded in a

      
      Negative =
Map-Reply.       Negative =
Map-Reply.

      
 =


      
 =


      
skipping to =
change at =
page 9, line 24 =C2=B6 =
skipping to change at page 9, line 19 =C2=B6

      
      in the edge =
network are the demarcation points to separate the       in the edge network are the demarcation points to =
separate the

      
      edge =
network from the core network.       =
edge network from the core network.

      
 =


      
   Client-side:  =
Client-side is a term used in this document to indicate =
   Client-side:  Client-side is a term used in =
this document to indicate

      
      a =
connection initiation attempt by an EID.  The ITR(s) at the =
LISP       a connection initiation =
attempt by an EID.  The ITR(s) at the LISP

      
      site are =
the first to get involved in obtaining database Map-Cache =
      site are the first to get involved in =
obtaining database Map-Cache

      
      entries by =
sending Map-Request messages.       =
entries by sending Map-Request messages.

      
 =


      
   Server-side:  =
Server-side is a term used in this document to indicate =
   Server-side:  Server-side is a term used in =
this document to indicate

      
      that a =
connection initiation attempt is being accepted for a       that a connection initiation attempt is being =
accepted for a

      

      
      =
destination EID.  The ETR(s) at the destination LISP site are the       =
destination EID.  The ETR(s) at the destination LISP site may be

      
      first to =
send Map-Replies to the source site initiating the       the first to send Map-Replies to the source site =
initiating the

      
      connection. =
 The ETR(s) at this destination site can obtain       connection.  The ETR(s) at this destination site =
can obtain

      
      mappings by =
gleaning information from Map-Requests, Data-Probes,       mappings by gleaning information from =
Map-Requests, Data-Probes,

      
      or =
encapsulated packets.       or =
encapsulated packets.

      
 =


      
   =
Locator-Status-Bits (LSBs):  Locator-Status-Bits are present in =
the    Locator-Status-Bits (LSBs):  =
Locator-Status-Bits are present in the
      LISP =
header.  They are used by ITRs to inform ETRs about the up/ =
      LISP header.  They are used by ITRs to =
inform ETRs about the up/

      
      down status =
of all ETRs at the local site.  These bits are used as       down status of all ETRs at the local site.  These =
bits are used as

      
      a hint to =
convey up/down router status and not path reachability       a hint to convey up/down router status and not =
path reachability

      
      status.  =
The LSBs can be verified by use of one of the Locator       status.  The LSBs can be verified by use of one of =
the Locator

      
      =
reachability algorithms described in Section 10.       reachability algorithms described in Section =
10.

      
 =


      
skipping to =
change at =
page 11, line 30 =C2=B6 =
skipping to change at page 11, line =
27 =C2=B6

      
   when =
re-routing of the path for a packet is desired.  A potential =
   when re-routing of the path for a packet is =
desired.  A potential

      
   use-case for =
this would be an ISP router that needs to perform    use-case for this would be an ISP router that needs =
to perform

      
   Traffic =
Engineering for packets flowing through its network.  In such =
   Traffic Engineering for packets flowing =
through its network.  In such

      
   a situation, =
termed "Recursive Tunneling", an ISP transit acts as an =
   a situation, termed "Recursive Tunneling", =
an ISP transit acts as an

      
   additional =
ITR, and the RLOC it uses for the new prepended header    additional ITR, and the RLOC it uses for the new =
prepended header

      
   would be =
either a TE-ETR within the ISP (along an intra-ISP traffic =
   would be either a TE-ETR within the ISP =
(along an intra-ISP traffic

      
   engineered =
path) or a TE-ETR within another ISP (an inter-ISP traffic =
   engineered path) or a TE-ETR within another =
ISP (an inter-ISP traffic

      
   engineered =
path, where an agreement to build such a path exists).    engineered path, where an agreement to build such a =
path exists).

      
 =


      
   In order to =
avoid excessive packet overhead as well as possible    In order to avoid excessive packet overhead as well =
as possible

      

      
   =
encapsulation loops, this document mandates =
that a maximum of two    =
encapsulation loops, this document recommends that a maximum of two

      
   LISP headers =
can be prepended to a packet.  For initial LISP    LISP headers can be prepended to a packet.  For =
initial LISP

      
   deployments, =
it is assumed that two headers is sufficient, where the =
   deployments, it is assumed that two headers =
is sufficient, where the

      
   first =
prepended header is used at a site for Location/Identity =
   first prepended header is used at a site for =
Location/Identity

      
   separation and =
the second prepended header is used inside a service    separation and the second prepended header is used =
inside a service

      
   provider for =
Traffic Engineering purposes.    =
provider for Traffic Engineering purposes.

      
 =


      
   Tunnel Routers =
can be placed fairly flexibly in a multi-AS topology.    Tunnel Routers can be placed fairly flexibly in a =
multi-AS topology.

      
   For example, =
the ITR for a particular end-to-end packet exchange    For example, the ITR for a particular end-to-end =
packet exchange

      
   might be the =
first-hop or default router within a site for the source =
   might be the first-hop or default router =
within a site for the source

      
   host.  =
Similarly, the ETR might be the last-hop router directly =
   host.  Similarly, the ETR might be the =
last-hop router directly

      
 =


      
skipping =
to change at page 23, line =
10 =C2=B6 =
skipping to change at page 23, line =
10 =C2=B6

      
   that prepends =
a LISP header will copy a 24-bit value used by the LISP =
   that prepends a LISP header will copy a =
24-bit value used by the LISP

      
   router to =
uniquely identify the address space.  The value is copied =
   router to uniquely identify the address =
space.  The value is copied

      
   to the =
'Instance ID' field of the LISP header, and the I-bit is set =
   to the 'Instance ID' field of the LISP =
header, and the I-bit is set

      
   to 1. =
   to 1.

      
 =


      
   When an ETR =
decapsulates a packet, the Instance ID from the LISP    When an ETR decapsulates a packet, the Instance ID =
from the LISP

      
   header is used =
as a table identifier to locate the forwarding table    header is used as a table identifier to locate the =
forwarding table

      
   to use for the =
inner destination EID lookup.    to =
use for the inner destination EID lookup.

      
 =


      
   For example, =
an 802.1Q VLAN tag or VPN identifier could be used as a =
   For example, an 802.1Q VLAN tag or VPN =
identifier could be used as a

      

      
   24-bit =
Instance ID.    24-bit Instance ID.  =
See [I-D.ietf-lisp-vpn] for LISP VPN =
use-case

      
 =
   =
details.

      
 =


      
   The Instance =
ID that is stored in the mapping database when LISP-DDT =
   The Instance ID that is stored in the =
mapping database when LISP-DDT

      
   =
[I-D.ietf-lisp-ddt] is used is 32 bits in length.  That means =
the    [I-D.ietf-lisp-ddt] is used is =
32 bits in length.  That means the

      
   control-plane =
can store more instances than a given data-plane can    control-plane can store more instances than a given =
data-plane can

      
   use.  Multiple =
data-planes can use the same 32-bit space as long as    use.  Multiple data-planes can use the same 32-bit =
space as long as

      
   the low-order =
24 bits don't overlap among xTRs.    =
the low-order 24 bits don't overlap among xTRs.

      
 =


      
9.  Routing =
Locator Selection 9.  Routing Locator =
Selection

      
 =


      
   Both the =
client-side and server-side may need control over the    Both the client-side and server-side may need control =
over the

      
 =


      
skipping =
to change at page 28, line =
27 =C2=B6 =
skipping to change at page 28, line =
27 =C2=B6

      
   reachability =
problem, as traffic may be unidirectional.  That is, the =
   reachability problem, as traffic may be =
unidirectional.  That is, the

      
   ETR receiving =
traffic at a site may not be the same device as an ITR    ETR receiving traffic at a site may not be the same =
device as an ITR

      
   that transmits =
traffic from that site, or the site-to-site traffic is    that transmits traffic from that site, or the =
site-to-site traffic is

      
   unidirectional =
so there is no ITR returning traffic.  =
  unidirectional so there is no ITR returning traffic.

      
 =


      
   The echo-nonce =
algorithm is bilateral.  That is, if one side sets the    The echo-nonce algorithm is bilateral.  That is, if =
one side sets the

      
   E-bit and the =
other side is not enabled for echo-noncing, then the    E-bit and the other side is not enabled for =
echo-noncing, then the

      
   echoing of the =
nonce does not occur and the requesting side may    echoing of the nonce does not occur and the =
requesting side may

      
   erroneously =
consider the Locator unreachable.  An ITR SHOULD only set =
   erroneously consider the Locator =
unreachable.  An ITR SHOULD only set

      
   the E-bit in =
an encapsulated data packet when it knows the ETR is    the E-bit in an encapsulated data packet when it =
knows the ETR is

      

      
   enabled for =
echo-noncing.  This is conveyed by the E-bit in the Map-    =
enabled for echo-noncing.  This is conveyed by the E-bit in the RLOC-

      
   Reply message.    probe Map-Reply =
message.

      
 =


      
   Note that =
other Locator reachability mechanisms are being researched =
   Note that other Locator reachability =
mechanisms are being researched

      
   and can be =
used to compliment or even override the echo nonce    and can be used to compliment or even override the =
echo nonce

      
   algorithm.  =
See the next section for an example of control-plane    algorithm.  See the next section for an example of =
control-plane

      
   =
probing.    probing.

      
 =


      
10.2.  =
RLOC-Probing Algorithm 10.2.  =
RLOC-Probing Algorithm

      
 =


      
   RLOC-Probing =
is a method that an ITR or PITR can use to determine the =
   RLOC-Probing is a method that an ITR or PITR =
can use to determine the

      
   reachability =
status of one or more Locators that it has cached in a    reachability status of one or more Locators that it =
has cached in a

      
 =


      
skipping =
to change at page 31, line =
11 =C2=B6 =
skipping to change at page 31, line =
11 =C2=B6

      
   source and =
destination ports when the protocol number in the packet =
   source and destination ports when the =
protocol number in the packet

      
   is TCP or UDP. =
 For this reason, UDP encoding is used for LISP    is TCP or UDP.  For this reason, UDP encoding is used =
for LISP

      
   =
encapsulation.    =
encapsulation.

      
 =


      
13.  Changing the =
Contents of EID-to-RLOC Mappings 13.  =
Changing the Contents of EID-to-RLOC Mappings

      
 =


      
   Since the LISP =
architecture uses a caching scheme to retrieve and    Since the LISP architecture uses a caching scheme to =
retrieve and

      
   store =
EID-to-RLOC mappings, the only way an ITR can get a more up-to- =
   store EID-to-RLOC mappings, the only way an =
ITR can get a more up-to-

      
   date mapping =
is to re-request the mapping.  However, the ITRs do not =
   date mapping is to re-request the mapping.  =
However, the ITRs do not

      
   know when the =
mappings change, and the ETRs do not keep track of    know when the mappings change, and the ETRs do not =
keep track of

      

      
   which ITRs =
requested its mappings.  For scalability reasons, we want    =
which ITRs requested its mappings.  For scalability reasons, it is

      
   to maintain =
this approach but need to provide a way for ETRs to    desirable to maintain =
this approach but need to provide a way for

      
   change their =
mappings and inform the sites that are currently    ETRs to change their mappings and inform the sites =
that are currently

      
   communicating =
with the ETR site using such mappings.  =
  communicating with the ETR site using such mappings.

      
 =


      
   When adding a =
new Locator record in lexicographic order to the end of =
   When adding a new Locator record in =
lexicographic order to the end of

      
   a Locator-Set, =
it is easy to update mappings.  We assume that new    a Locator-Set, it is easy to update mappings.  We =
assume that new

      
   mappings will =
maintain the same Locator ordering as the old mapping    mappings will maintain the same Locator ordering as =
the old mapping

      
   but will just =
have new Locators appended to the end of the list.  So, =
   but will just have new Locators appended to =
the end of the list.  So,

      
   some ITRs can =
have a new mapping while other ITRs have only an old    some ITRs can have a new mapping while other ITRs =
have only an old

      
   mapping that =
is used until they time out.  When an ITR has only an    mapping that is used until they time out.  When an =
ITR has only an

      
   old mapping =
but detects bits set in the Locator-Status-Bits that    old mapping but detects bits set in the =
Locator-Status-Bits that

      
   correspond to =
Locators beyond the list it has cached, it simply    correspond to Locators beyond the list it has cached, =
it simply

      
 =


      
skipping =
to change at page 32, line =
46 =C2=B6 =
skipping to change at page 32, line =
46 =C2=B6

      
   where mappings =
change, to control the rate they receive requests for    where mappings change, to control the rate they =
receive requests for

      
   Map-Reply =
messages.  SMRs are also used to tell remote ITRs to update =
   Map-Reply messages.  SMRs are also used to =
tell remote ITRs to update

      
   the mappings =
they have cached.    the mappings they =
have cached.

      
 =


      
   Since the ETRs =
don't keep track of remote ITRs that have cached their    Since the ETRs don't keep track of remote ITRs that =
have cached their

      
   mappings, they =
do not know which ITRs need to have their mappings    mappings, they do not know which ITRs need to have =
their mappings

      
   updated.  As a =
result, an ETR will solicit Map-Requests (called an    updated.  As a result, an ETR will solicit =
Map-Requests (called an

      
   SMR message) =
from those sites to which it has been sending    SMR message) from those sites to which it has been =
sending

      
   encapsulated =
data for the last minute.  In particular, an ETR will    encapsulated data for the last minute.  In =
particular, an ETR will

      
   send an SMR to =
an ITR to which it has recently sent encapsulated    send an SMR to an ITR to which it has recently sent =
encapsulated

      

      
   =
data.    data.  This can only occur when both ITR and ETR functionality =
reside

      
 =
   in the same =
router.

      
 =


      
   An SMR message =
is simply a bit set in a Map-Request message.  An ITR    An SMR message is simply a bit set in a Map-Request =
message.  An ITR

      
   or PITR will =
send a Map-Request when they receive an SMR message.    or PITR will send a Map-Request when they receive an =
SMR message.

      
   Both the SMR =
sender and the Map-Request responder MUST rate-limit    Both the SMR sender and the Map-Request responder =
MUST rate-limit

      
   these =
messages.  Rate-limiting can be implemented as a global rate- =
   these messages.  Rate-limiting can be =
implemented as a global rate-

      
   limiter or one =
rate-limiter per SMR destination.    =
limiter or one rate-limiter per SMR destination.

      
 =


      
   The following =
procedure shows how an SMR exchange occurs when a site    The following procedure shows how an SMR exchange =
occurs when a site

      
   is doing =
Locator-Set compaction for an EID-to-RLOC mapping:    is doing Locator-Set compaction for an EID-to-RLOC =
mapping:

      
 =


      
 =


      
skipping =
to change at page 36, line =
43 =C2=B6 =
skipping to change at page 36, line =
47 =C2=B6

      
   decoupling the =
address space used by a site from the address spaces    decoupling the address space used by a site from the =
address spaces

      
   used by its =
ISPs [RFC4984].    used by its ISPs =
[RFC4984].

      
 =


      
16.2.  Fast =
Mobility 16.2.  Fast Mobility

      
 =


      
   Fast endpoint =
mobility occurs when an endpoint moves relatively    Fast endpoint mobility occurs when an endpoint moves =
relatively

      
   rapidly, =
changing its IP-layer network attachment point.  Maintenance =
   rapidly, changing its IP-layer network =
attachment point.  Maintenance

      
   of session =
continuity is a goal.  This is where the Mobile IPv4    of session continuity is a goal.  This is where the =
Mobile IPv4

      
   [RFC5944] and =
Mobile IPv6 [RFC6275] [RFC4866] mechanisms are used and =
   [RFC5944] and Mobile IPv6 [RFC6275] =
[RFC4866] mechanisms are used and

      
   primarily =
where interactions with LISP need to be explored, such as =
   primarily where interactions with LISP need =
to be explored, such as

      

      
   the =
mechanisms in [I-D.portoles-lisp-eid-mobility] when the EID =
moves    the mechanisms in [I-D.ietf-lisp-eid-mobility] when the EID moves =
but

      
   but the RLOC =
is in the network infrastructure.    =
the RLOC is in the network infrastructure.

      
 =


      
   In LISP, one =
possibility is to "glean" information.  When a packet    In LISP, one possibility is to "glean" information.  =
When a packet

      
   arrives, the =
ETR could examine the EID-to-RLOC mapping and use that    arrives, the ETR could examine the EID-to-RLOC =
mapping and use that

      
   mapping for =
all outgoing traffic to that EID.  It can do this after =
   mapping for all outgoing traffic to that =
EID.  It can do this after

      
   performing a =
route-returnability check, to ensure that the new    performing a route-returnability check, to ensure =
that the new

      
   network =
location does have an internal route to that endpoint.    network location does have an internal route to that =
endpoint.

      
   However, this =
does not cover the case where an ITR (the node assigned =
   However, this does not cover the case where =
an ITR (the node assigned

      
   the RLOC) at =
the mobile-node location has been compromised.    the RLOC) at the mobile-node location has been =
compromised.

      
 =


      
   Mobile IP =
packet exchange is designed for an environment in which all =
   Mobile IP packet exchange is designed for an =
environment in which all

      
 =


      
skipping =
to change at page 37, line =
31 =C2=B6 =
skipping to change at page 37, line =
36 =C2=B6

      
   for any =
endpoint will return a binding for the entire mobile prefix. =
   for any endpoint will return a binding for =
the entire mobile prefix.

      
 =


      
   If mobile =
networks become a more common occurrence, it may be useful =
   If mobile networks become a more common =
occurrence, it may be useful

      
   to revisit the =
design of the mapping service and allow for dynamic    to revisit the design of the mapping service and =
allow for dynamic

      
   updates of the =
database.    updates of the =
database.

      
 =


      
   The issue of =
interactions between mobility and LISP needs to be    The issue of interactions between mobility and LISP =
needs to be

      
   explored =
further.  Specific improvements to the entire system will =
   explored further.  Specific improvements to =
the entire system will

      
   depend on the =
details of mapping mechanisms.  Mapping mechanisms    depend on the details of mapping mechanisms.  Mapping =
mechanisms

      
   should be =
evaluated on how well they support session continuity for =
   should be evaluated on how well they support =
session continuity for

      

      
   mobile =
nodes.  See [I-D.farinacci-lisp-predictive-rlocs] for =
more    mobile nodes.  See [I-D.ietf-lisp-predictive-rlocs] for more =
recent

      
   recent =
mechanisms which can provide near-zero packet loss during =
   mechanisms which can provide near-zero =
packet loss during handoffs.

      
   =
handoffs. 

      
 =


      
16.3.  LISP =
Mobile Node Mobility 16.3.  LISP =
Mobile Node Mobility

      
 =


      
   A mobile =
device can use the LISP infrastructure to achieve mobility =
   A mobile device can use the LISP =
infrastructure to achieve mobility

      
   by =
implementing the LISP encapsulation and decapsulation functions =
   by implementing the LISP encapsulation and =
decapsulation functions

      
   and acting as =
a simple ITR/ETR.  By doing this, such a "LISP mobile    and acting as a simple ITR/ETR.  By doing this, such =
a "LISP mobile

      
   node" can use =
topologically independent EID IP addresses that are not =
   node" can use topologically independent EID =
IP addresses that are not

      
   advertised =
into and do not impose a cost on the global routing    advertised into and do not impose a cost on the =
global routing

      
   system.  These =
EIDs are maintained at the edges of the mapping system    system.  These EIDs are maintained at the edges of =
the mapping system

      
   in LISP =
Map-Servers and Map-Resolvers) and are provided on demand to =
   in LISP Map-Servers and Map-Resolvers) and =
are provided on demand to

      
 =


      
skipping =
to change at page 40, line =
46 =C2=B6 =
skipping to change at page 40, line =
46 =C2=B6

      
   and provider =
want control, then Recursive or Re-Encapsulating Tunnels =
   and provider want control, then Recursive or =
Re-Encapsulating Tunnels

      
   are =
used.    are used.

      
 =


      
17.4.  LISP =
Functionality with Conventional NATs 17.4.  LISP Functionality with Conventional NATs

      
 =


      
   LISP routers =
can be deployed behind Network Address Translator (NAT) =
   LISP routers can be deployed behind Network =
Address Translator (NAT)

      
   devices to =
provide the same set of packet services hosts have today =
   devices to provide the same set of packet =
services hosts have today

      
   when they are =
addressed out of private address space. =
   when they are addressed out of private address space.

      
 =


      
   It is =
important to note that a locator address in any LISP control =
   It is important to note that a locator =
address in any LISP control

      

      
   message MUST =
be a globally routable address and =
therefore SHOULD NOT    message MUST be a routable address and therefore =
[RFC1918] addresses

      
   contain [RFC1918] addresses.  If a LISP xTR is configured =
with    SHOULD =
only be presence when running in a local environment.  When =
a

      
   private RLOC =
addresses, they MUST be used only in the =
outer IP header    LISP xTR is =
configured with private RLOC addresses and =
resides behind

      
   so the NAT =
device can translate properly.  Otherwise, EID addresses =
   a NAT device and =
desires to communicate on the Internet, the private

      
   MUST be =
translated before encapsulation is performed when LISP VPNs =
   addresses =
MUST be used only in the outer IP header so the NAT device

      
   are not in =
use.  Both NAT translation and LISP encapsulation    can translate properly.  Otherwise, EID addresses =
MUST be translated

      
   functions =
could be co-located in the same =
device.    before encapsulation is =
performed when LISP VPNs are not in use.

      
 =
   Both NAT translation and LISP encapsulation =
functions could be co-

      
 =
   located in =
the same device.

      
 =


      
17.5.  Packets =
Egressing a LISP Site 17.5.  Packets =
Egressing a LISP Site

      
 =


      
   When a LISP =
site is using two ITRs for redundancy, the failure of one =
   When a LISP site is using two ITRs for =
redundancy, the failure of one

      
   ITR will =
likely shift outbound traffic to the second.  This second =
   ITR will likely shift outbound traffic to =
the second.  This second

      
   ITR's cache =
may not be populated with the same EID-to-RLOC mapping    ITR's cache may not be populated with the same =
EID-to-RLOC mapping

      
   entries as the =
first.  If this second ITR does not have these    entries as the first.  If this second ITR does not =
have these

      
   mappings, =
traffic will be dropped while the mappings are retrieved =
   mappings, traffic will be dropped while the =
mappings are retrieved

      
   from the =
mapping system.  The retrieval of these messages may    from the mapping system.  The retrieval of these =
messages may

      
   increase the =
load of requests being sent into the mapping system.    increase the load of requests being sent into the =
mapping system.

      
 =


      
skipping =
to change at page 45, line =
14 =C2=B6 =
skipping to change at page 45, line =
14 =C2=B6

      
 =


      
   =
[I-D.ietf-lisp-introduction]    =
[I-D.ietf-lisp-introduction]

      
              =
Cabellos-Aparicio, A. and D. Saucez, "An Architectural               Cabellos-Aparicio, A. and D. Saucez, "An =
Architectural

      
              =
Introduction to the Locator/ID Separation Protocol               Introduction to the Locator/ID Separation =
Protocol

      
              =
(LISP)", draft-ietf-lisp-introduction-13 (work in               (LISP)", draft-ietf-lisp-introduction-13 =
(work in

      
              =
progress), April 2015.               =
progress), April 2015.

      
 =


      
   =
[I-D.ietf-lisp-rfc6833bis]    =
[I-D.ietf-lisp-rfc6833bis]

      
              =
Fuller, V., Farinacci, D., and A. Cabellos-Aparicio,               Fuller, V., Farinacci, D., and A. =
Cabellos-Aparicio,

      
              =
"Locator/ID Separation Protocol (LISP) Control-Plane",               "Locator/ID Separation Protocol (LISP) =
Control-Plane",

      

      
              =
draft-ietf-lisp-rfc6833bis-05 (work in progress), =
May               =
draft-ietf-lisp-rfc6833bis-06 (work in progress), =
October

      
              =
2017.               2017.

      
 =


      
   =
[I-D.ietf-lisp-sec]    =
[I-D.ietf-lisp-sec]

      
              =
Maino, F., Ermagan, V., Cabellos-Aparicio, A., and D.               Maino, F., Ermagan, V., Cabellos-Aparicio, =
A., and D.

      

      
              =
Saucez, "LISP-Security (LISP-SEC)", draft-ietf-lisp-sec-12               Saucez, "LISP-Security (LISP-SEC)", draft-ietf-lisp-sec-14

      
              =
(work in progress), November =
2016.               (work in =
progress), October 2017.

      
 =


      
   [RFC0768]  =
Postel, J., "User Datagram Protocol", STD 6, RFC 768,    [RFC0768]  Postel, J., "User Datagram Protocol", STD =
6, RFC 768,

      

      
              =
DOI 10.17487/RFC0768, August 1980, <https://www.rfc-               DOI 10.17487/RFC0768, August =
1980,

      
              =
editor.org/info/rfc768>.    =
           <https://www.rfc-editor.org/info/rfc768>.

      
 =


      
   [RFC0791]  =
Postel, J., "Internet Protocol", STD 5, RFC 791,    [RFC0791]  Postel, J., "Internet Protocol", STD 5, =
RFC 791,

      

      
              =
DOI 10.17487/RFC0791, September 1981, <https://www.rfc-               DOI 10.17487/RFC0791, September =
1981,

      
              =
editor.org/info/rfc791>.    =
           <https://www.rfc-editor.org/info/rfc791>.

      
 =


      
   [RFC1918]  =
Rekhter, Y., Moskowitz, B., Karrenberg, D., de Groot, G., =
   [RFC1918]  Rekhter, Y., Moskowitz, B., =
Karrenberg, D., de Groot, G.,

      
              and =
E. Lear, "Address Allocation for Private Internets",               and E. Lear, "Address Allocation for =
Private Internets",

      
              BCP =
5, RFC 1918, DOI 10.17487/RFC1918, February 1996,               BCP 5, RFC 1918, DOI 10.17487/RFC1918, =
February 1996,

      
              =
<https://www.rfc-editor.org/info/rfc1918>.               =
<https://www.rfc-editor.org/info/rfc1918>.

      
 =


      
   [RFC2119]  =
Bradner, S., "Key words for use in RFCs to Indicate    [RFC2119]  Bradner, S., "Key words for use in RFCs to =
Indicate

      
              =
Requirement Levels", BCP 14, RFC 2119,  =
             Requirement Levels", BCP 14, RFC 2119,

      

      
              =
DOI 10.17487/RFC2119, March 1997, <https://www.rfc-               DOI 10.17487/RFC2119, March 1997,

      
              =
editor.org/info/rfc2119>.   =
            <https://www.rfc-editor.org/info/rfc2119>.

      
 =


      
   [RFC2404]  =
Madson, C. and R. Glenn, "The Use of HMAC-SHA-1-96 within =
   [RFC2404]  Madson, C. and R. Glenn, "The Use =
of HMAC-SHA-1-96 within

      
              ESP =
and AH", RFC 2404, DOI 10.17487/RFC2404, November               ESP and AH", RFC 2404, DOI =
10.17487/RFC2404, November

      
              =
1998, <https://www.rfc-editor.org/info/rfc2404>.               1998, =
<https://www.rfc-editor.org/info/rfc2404>.

      
 =


      
   [RFC3168]  =
Ramakrishnan, K., Floyd, S., and D. Black, "The Addition =
   [RFC3168]  Ramakrishnan, K., Floyd, S., and =
D. Black, "The Addition

      
              of =
Explicit Congestion Notification (ECN) to IP",               of Explicit Congestion Notification (ECN) =
to IP",

      
              RFC =
3168, DOI 10.17487/RFC3168, September 2001,               RFC 3168, DOI 10.17487/RFC3168, September =
2001,

      
              =
<https://www.rfc-editor.org/info/rfc3168>.               =
<https://www.rfc-editor.org/info/rfc3168>.

      
 =


      
   [RFC3232]  =
Reynolds, J., Ed., "Assigned Numbers: RFC 1700 is Replaced =
   [RFC3232]  Reynolds, J., Ed., "Assigned =
Numbers: RFC 1700 is Replaced

      
              by =
an On-line Database", RFC 3232, DOI 10.17487/RFC3232,               by an On-line Database", RFC 3232, DOI =
10.17487/RFC3232,

      
              =
January 2002, <https://www.rfc-editor.org/info/rfc3232>. =
              January 2002, =
<https://www.rfc-editor.org/info/rfc3232>.

      
 =


      
   [RFC4086]  =
Eastlake 3rd, D., Schiller, J., and S. Crocker,    [RFC4086]  Eastlake 3rd, D., Schiller, J., and S. =
Crocker,

      
              =
"Randomness Requirements for Security", BCP 106, RFC 4086, =
              "Randomness Requirements for =
Security", BCP 106, RFC 4086,

      

      
              =
DOI 10.17487/RFC4086, June 2005, <https://www.rfc-               DOI 10.17487/RFC4086, June 2005,

      
              =
editor.org/info/rfc4086>.   =
            <https://www.rfc-editor.org/info/rfc4086>.

      
 =


      
   [RFC4632]  =
Fuller, V. and T. Li, "Classless Inter-domain Routing    [RFC4632]  Fuller, V. and T. Li, "Classless =
Inter-domain Routing

      
              =
(CIDR): The Internet Address Assignment and Aggregation =
              (CIDR): The Internet Address =
Assignment and Aggregation

      
              =
Plan", BCP 122, RFC 4632, DOI 10.17487/RFC4632, August               Plan", BCP 122, RFC 4632, DOI =
10.17487/RFC4632, August

      
              =
2006, <https://www.rfc-editor.org/info/rfc4632>.               2006, =
<https://www.rfc-editor.org/info/rfc4632>.

      
 =


      
   [RFC4868]  =
Kelly, S. and S. Frankel, "Using HMAC-SHA-256, HMAC-SHA- =
   [RFC4868]  Kelly, S. and S. Frankel, "Using =
HMAC-SHA-256, HMAC-SHA-

      
              =
384, and HMAC-SHA-512 with IPsec", RFC 4868,               384, and HMAC-SHA-512 with IPsec", RFC =
4868,

      

      
              =
DOI 10.17487/RFC4868, May 2007, <https://www.rfc-               DOI 10.17487/RFC4868, May 2007,

      
              =
editor.org/info/rfc4868>.   =
            <https://www.rfc-editor.org/info/rfc4868>.

      
 =


      
   [RFC5226]  =
Narten, T. and H. Alvestrand, "Guidelines for Writing an =
   [RFC5226]  Narten, T. and H. Alvestrand, =
"Guidelines for Writing an

      
              =
IANA Considerations Section in RFCs", RFC 5226,               IANA Considerations Section in RFCs", RFC =
5226,

      

      
              =
DOI 10.17487/RFC5226, May 2008, <https://www.rfc-               DOI 10.17487/RFC5226, May 2008,

      
              =
editor.org/info/rfc5226>.   =
            <https://www.rfc-editor.org/info/rfc5226>.

      
 =


      
   [RFC5496]  =
Wijnands, IJ., Boers, A., and E. Rosen, "The Reverse Path =
   [RFC5496]  Wijnands, IJ., Boers, A., and E. =
Rosen, "The Reverse Path

      
              =
Forwarding (RPF) Vector TLV", RFC 5496, =
              Forwarding (RPF) Vector TLV", RFC 5496,

      

      
              =
DOI 10.17487/RFC5496, March 2009, <https://www.rfc-               DOI 10.17487/RFC5496, March 2009,

      
              =
editor.org/info/rfc5496>.   =
            <https://www.rfc-editor.org/info/rfc5496>.

      
 =


      
   [RFC5944]  =
Perkins, C., Ed., "IP Mobility Support for IPv4, Revised", =
   [RFC5944]  Perkins, C., Ed., "IP Mobility =
Support for IPv4, Revised",

      
              RFC =
5944, DOI 10.17487/RFC5944, November 2010,               RFC 5944, DOI 10.17487/RFC5944, November =
2010,

      
              =
<https://www.rfc-editor.org/info/rfc5944>.               =
<https://www.rfc-editor.org/info/rfc5944>.

      
 =


      
   [RFC6115]  Li, =
T., Ed., "Recommendation for a Routing Architecture",    [RFC6115]  Li, T., Ed., "Recommendation for a Routing =
Architecture",

      
              RFC =
6115, DOI 10.17487/RFC6115, February 2011,               RFC 6115, DOI 10.17487/RFC6115, February =
2011,

      
              =
<https://www.rfc-editor.org/info/rfc6115>.               =
<https://www.rfc-editor.org/info/rfc6115>.

      
 =


      
   [RFC6275]  =
Perkins, C., Ed., Johnson, D., and J. Arkko, "Mobility    [RFC6275]  Perkins, C., Ed., Johnson, D., and J. =
Arkko, "Mobility

      
              =
Support in IPv6", RFC 6275, DOI 10.17487/RFC6275, July               Support in IPv6", RFC 6275, DOI =
10.17487/RFC6275, July

      
              =
2011, <https://www.rfc-editor.org/info/rfc6275>.               2011, =
<https://www.rfc-editor.org/info/rfc6275>.

      
 =


      
   [RFC6834]  =
Iannone, L., Saucez, D., and O. Bonaventure, "Locator/ID =
   [RFC6834]  Iannone, L., Saucez, D., and O. =
Bonaventure, "Locator/ID

      
              =
Separation Protocol (LISP) Map-Versioning", RFC 6834,               Separation Protocol (LISP) =
Map-Versioning", RFC 6834,

      

      
              =
DOI 10.17487/RFC6834, January 2013, <https://www.rfc-               DOI 10.17487/RFC6834, January =
2013,

      
              =
editor.org/info/rfc6834>.   =
            <https://www.rfc-editor.org/info/rfc6834>.

      
 =


      
   [RFC6836]  =
Fuller, V., Farinacci, D., Meyer, D., and D. Lewis,    [RFC6836]  Fuller, V., Farinacci, D., Meyer, D., and =
D. Lewis,

      
              =
"Locator/ID Separation Protocol Alternative Logical               "Locator/ID Separation Protocol =
Alternative Logical

      
              =
Topology (LISP+ALT)", RFC 6836, DOI 10.17487/RFC6836,               Topology (LISP+ALT)", RFC 6836, DOI =
10.17487/RFC6836,

      
              =
January 2013, <https://www.rfc-editor.org/info/rfc6836>. =
              January 2013, =
<https://www.rfc-editor.org/info/rfc6836>.

      
 =


      
   [RFC7052]  =
Schudel, G., Jain, A., and V. Moreno, "Locator/ID    [RFC7052]  Schudel, G., Jain, A., and V. Moreno, =
"Locator/ID

      
              =
Separation Protocol (LISP) MIB", RFC 7052,               Separation Protocol (LISP) MIB", RFC =
7052,

      

      
              =
DOI 10.17487/RFC7052, October 2013, <https://www.rfc-               DOI 10.17487/RFC7052, October =
2013,

      
              =
editor.org/info/rfc7052>.   =
            <https://www.rfc-editor.org/info/rfc7052>.

      
 =


      
   [RFC7214]  =
Andersson, L. and C. Pignataro, "Moving Generic Associated =
   [RFC7214]  Andersson, L. and C. Pignataro, =
"Moving Generic Associated

      
              =
Channel (G-ACh) IANA Registries to a New Registry",               Channel (G-ACh) IANA Registries to a New =
Registry",

      
              RFC =
7214, DOI 10.17487/RFC7214, May 2014,  =
             RFC 7214, DOI 10.17487/RFC7214, May 2014,

      
              =
<https://www.rfc-editor.org/info/rfc7214>.               =
<https://www.rfc-editor.org/info/rfc7214>.

      
 =


      
   [RFC7215]  =
Jakab, L., Cabellos-Aparicio, A., Coras, F., Domingo-    [RFC7215]  Jakab, L., Cabellos-Aparicio, A., Coras, =
F., Domingo-

      
              =
Pascual, J., and D. Lewis, "Locator/Identifier Separation =
              Pascual, J., and D. Lewis, =
"Locator/Identifier Separation

      
              =
Protocol (LISP) Network Element Deployment               Protocol (LISP) Network Element =
Deployment

      
              =
Considerations", RFC 7215, DOI 10.17487/RFC7215, April               Considerations", RFC 7215, DOI =
10.17487/RFC7215, April

      
              =
2014, <https://www.rfc-editor.org/info/rfc7215>.               2014, =
<https://www.rfc-editor.org/info/rfc7215>.

      
 =


      
   [RFC7833]  =
Howlett, J., Hartman, S., and A. Perez-Mendez, Ed., "A    [RFC7833]  Howlett, J., Hartman, S., and A. =
Perez-Mendez, Ed., "A

      
              =
RADIUS Attribute, Binding, Profiles, Name Identifier               RADIUS Attribute, Binding, Profiles, Name =
Identifier

      
              =
Format, and Confirmation Methods for the Security               Format, and Confirmation Methods for the =
Security

      
              =
Assertion Markup Language (SAML)", RFC 7833,               Assertion Markup Language (SAML)", RFC =
7833,

      

      
              =
DOI 10.17487/RFC7833, May 2016, <https://www.rfc-               DOI 10.17487/RFC7833, May 2016,

      
              =
editor.org/info/rfc7833>.   =
            <https://www.rfc-editor.org/info/rfc7833>.

      
 =


      
   [RFC7835]  =
Saucez, D., Iannone, L., and O. Bonaventure, "Locator/ID =
   [RFC7835]  Saucez, D., Iannone, L., and O. =
Bonaventure, "Locator/ID

      
              =
Separation Protocol (LISP) Threat Analysis", RFC 7835,               Separation Protocol (LISP) Threat =
Analysis", RFC 7835,

      

      
              =
DOI 10.17487/RFC7835, April 2016, <https://www.rfc-               DOI 10.17487/RFC7835, April 2016,

      
              =
editor.org/info/rfc7835>.   =
            <https://www.rfc-editor.org/info/rfc7835>.

      
 =


      
   [RFC8061]  =
Farinacci, D. and B. Weis, "Locator/ID Separation Protocol =
   [RFC8061]  Farinacci, D. and B. Weis, =
"Locator/ID Separation Protocol

      
              =
(LISP) Data-Plane Confidentiality", RFC 8061,               (LISP) Data-Plane Confidentiality", RFC =
8061,

      

      
              =
DOI 10.17487/RFC8061, February 2017, <https://www.rfc-               DOI 10.17487/RFC8061, February =
2017,

      
              =
editor.org/info/rfc8061>.   =
            <https://www.rfc-editor.org/info/rfc8061>.

      
 =


      
   [RFC8200]  =
Deering, S. and R. Hinden, "Internet Protocol, Version 6 =
   [RFC8200]  Deering, S. and R. Hinden, =
"Internet Protocol, Version 6

      
              =
(IPv6) Specification", STD 86, RFC 8200,               (IPv6) Specification", STD 86, RFC =
8200,

      

      
              =
DOI 10.17487/RFC8200, July 2017, <https://www.rfc-               DOI 10.17487/RFC8200, July 2017,

      
              =
editor.org/info/rfc8200>.   =
            <https://www.rfc-editor.org/info/rfc8200>.

      
 =


      
22.2.  =
Informative References 22.2.  =
Informative References

      
 =


      
   [AFN]      =
IANA, "Address Family Numbers", August 2016,    [AFN]      IANA, "Address Family Numbers", August =
2016,

      
              =
<http://www.iana.org/assignments/address-family-numbers>. =
              =
<http://www.iana.org/assignments/address-family-numbers>.

      
 =


      
   [CHIAPPA]  =
Chiappa, J., "Endpoints and Endpoint names: A Proposed", =
   [CHIAPPA]  Chiappa, J., "Endpoints and =
Endpoint names: A Proposed",

      
              =
1999,               1999,

      
              =
<http://mercury.lcs.mit.edu/~jnc/tech/endpoints.txt>. =
              =
<http://mercury.lcs.mit.edu/~jnc/tech/endpoints.txt>.

      
 =


      

      
   [I-D.farinacci-lisp-predictive-rlocs] =
   [I-D.ietf-lisp-eid-mobility]

      
              Farinacci, D. and P. Pillay-Esnault, "LISP Predictive               Portoles-Comeras, =
M., Ashtaputre, V., Moreno, V., Maino,

      
              RLOCs", =
draft-farinacci-lisp-predictive-rlocs-02 (work in =
              =
F., and D. Farinacci, "LISP L2/L3 EID Mobility Using a

      
              =
progress), May 2017.               Unified Control Plane", =
draft-ietf-lisp-eid-mobility-00
 =
              (work in progress), May =
2017.

      
 =


      
   =
[I-D.ietf-lisp-mn]    =
[I-D.ietf-lisp-mn]

      
              =
Farinacci, D., Lewis, D., Meyer, D., and C. White, "LISP =
              Farinacci, D., Lewis, D., Meyer, =
D., and C. White, "LISP

      

      
              =
Mobile Node", draft-ietf-lisp-mn-00 (work =
in progress),               Mobile =
Node", draft-ietf-lisp-mn-01 (work in =
progress),

      
              =
April 2017.               October =
2017.

      
 =


      
 =
   =
[I-D.ietf-lisp-predictive-rlocs]

      
 =
              =
Farinacci, D. and P. Pillay-Esnault, "LISP Predictive

      
 =
              RLOCs", =
draft-ietf-lisp-predictive-rlocs-00 (work in

      
 =
              =
progress), June 2017.

      
 =


      
   =
[I-D.ietf-lisp-signal-free-multicast]  =
  [I-D.ietf-lisp-signal-free-multicast]

      
              =
Moreno, V. and D. Farinacci, "Signal-Free LISP Multicast", =
              Moreno, V. and D. Farinacci, =
"Signal-Free LISP Multicast",

      
              =
draft-ietf-lisp-signal-free-multicast-06 (work in               draft-ietf-lisp-signal-free-multicast-06 =
(work in

      
              =
progress), August 2017.               =
progress), August 2017.

      
 =


      

      
 =
   [I-D.ietf-lisp-vpn]

      
 =
              Moreno, =
V. and D. Farinacci, "LISP Virtual Private

      
 =
              Networks =
(VPNs)", draft-ietf-lisp-vpn-00 (work in

      
 =
              =
progress), May 2017.

      
 =
                                               =
                          

      
   =
[I-D.meyer-loc-id-implications]    =
[I-D.meyer-loc-id-implications]

      
              =
Meyer, D. and D. Lewis, "Architectural Implications of               Meyer, D. and D. Lewis, "Architectural =
Implications of

      
              =
Locator/ID Separation", draft-meyer-loc-id-implications-01 =
              Locator/ID Separation", =
draft-meyer-loc-id-implications-01

      
              =
(work in progress), January 2009.      =
         (work in progress), January 2009.

      
 =


      

      
   [I-D.portoles-lisp-eid-mobility] =


      
              Portoles-Comeras, M., Ashtaputre, V., =
Moreno, V., Maino, 

      
              F., and D. Farinacci, "LISP L2/L3 EID =
Mobility Using a 

      
              Unified Control Plane", =
draft-portoles-lisp-eid- 

      
              mobility-02 (work in progress), April =
2017. 

      
                =
                                                          =


      
   [LISA96]   =
Lear, E., Tharp, D., Katinsky, J., and J. Coffin,    [LISA96]   Lear, E., Tharp, D., Katinsky, J., and J. =
Coffin,

      
              =
"Renumbering: Threat or Menace?", Usenix Tenth System               "Renumbering: Threat or Menace?", Usenix =
Tenth System

      
              =
Administration Conference (LISA 96), October 1996.               Administration Conference (LISA 96), =
October 1996.

      
 =


      
   =
[OPENLISP]    [OPENLISP]

      
              =
Iannone, L., Saucez, D., and O. Bonaventure, "OpenLISP               Iannone, L., Saucez, D., and O. =
Bonaventure, "OpenLISP

      
              =
Implementation Report", Work in Progress, July 2008.               Implementation Report", Work in Progress, =
July 2008.

      
 =


      
   [RFC1034]  =
Mockapetris, P., "Domain names - concepts and facilities", =
   [RFC1034]  Mockapetris, P., "Domain names - =
concepts and facilities",

      
              STD =
13, RFC 1034, DOI 10.17487/RFC1034, November 1987,               STD 13, RFC 1034, DOI 10.17487/RFC1034, =
November 1987,

      
              =
<https://www.rfc-editor.org/info/rfc1034>.               =
<https://www.rfc-editor.org/info/rfc1034>.

      
 =


      
   [RFC2784]  =
Farinacci, D., Li, T., Hanks, S., Meyer, D., and P.    [RFC2784]  Farinacci, D., Li, T., Hanks, S., Meyer, =
D., and P.

      
              =
Traina, "Generic Routing Encapsulation (GRE)", RFC 2784, =
              Traina, "Generic Routing =
Encapsulation (GRE)", RFC 2784,

      

      
              =
DOI 10.17487/RFC2784, March 2000, <https://www.rfc-               DOI 10.17487/RFC2784, March 2000,

      
              =
editor.org/info/rfc2784>.   =
            <https://www.rfc-editor.org/info/rfc2784>.

      
 =


      
   [RFC3056]  =
Carpenter, B. and K. Moore, "Connection of IPv6 Domains =
   [RFC3056]  Carpenter, B. and K. Moore, =
"Connection of IPv6 Domains

      
              via =
IPv4 Clouds", RFC 3056, DOI 10.17487/RFC3056, February               via IPv4 Clouds", RFC 3056, DOI =
10.17487/RFC3056, February

      
              =
2001, <https://www.rfc-editor.org/info/rfc3056>.               2001, =
<https://www.rfc-editor.org/info/rfc3056>.

      
 =


      
   [RFC3261]  =
Rosenberg, J., Schulzrinne, H., Camarillo, G., Johnston, =
   [RFC3261]  Rosenberg, J., Schulzrinne, H., =
Camarillo, G., Johnston,

      
              A., =
Peterson, J., Sparks, R., Handley, M., and E.               A., Peterson, J., Sparks, R., Handley, M., =
and E.

      
              =
Schooler, "SIP: Session Initiation Protocol", RFC 3261, =
              Schooler, "SIP: Session =
Initiation Protocol", RFC 3261,

      

      
              =
DOI 10.17487/RFC3261, June 2002, <https://www.rfc-               DOI 10.17487/RFC3261, June 2002,

      
              =
editor.org/info/rfc3261>.   =
            <https://www.rfc-editor.org/info/rfc3261>.

      
 =


      
   [RFC4107]  =
Bellovin, S. and R. Housley, "Guidelines for Cryptographic =
   [RFC4107]  Bellovin, S. and R. Housley, =
"Guidelines for Cryptographic

      
              Key =
Management", BCP 107, RFC 4107, DOI 10.17487/RFC4107,               Key Management", BCP 107, RFC 4107, DOI =
10.17487/RFC4107,

      
              =
June 2005, <https://www.rfc-editor.org/info/rfc4107>. =
              June 2005, =
<https://www.rfc-editor.org/info/rfc4107>.

      
 =


      
   [RFC4192]  =
Baker, F., Lear, E., and R. Droms, "Procedures for    [RFC4192]  Baker, F., Lear, E., and R. Droms, =
"Procedures for

      
              =
Renumbering an IPv6 Network without a Flag Day", RFC 4192, =
              Renumbering an IPv6 Network =
without a Flag Day", RFC 4192,

      

      
              =
DOI 10.17487/RFC4192, September 2005, <https://www.rfc-               DOI 10.17487/RFC4192, September =
2005,

      
              =
editor.org/info/rfc4192>.   =
            <https://www.rfc-editor.org/info/rfc4192>.

      
 =


      
   [RFC4866]  =
Arkko, J., Vogt, C., and W. Haddad, "Enhanced Route    [RFC4866]  Arkko, J., Vogt, C., and W. Haddad, =
"Enhanced Route

      
              =
Optimization for Mobile IPv6", RFC 4866,               Optimization for Mobile IPv6", RFC =
4866,

      

      
              =
DOI 10.17487/RFC4866, May 2007, <https://www.rfc-               DOI 10.17487/RFC4866, May 2007,

      
              =
editor.org/info/rfc4866>.   =
            <https://www.rfc-editor.org/info/rfc4866>.

      
 =


      
   [RFC4984]  =
Meyer, D., Ed., Zhang, L., Ed., and K. Fall, Ed., "Report =
   [RFC4984]  Meyer, D., Ed., Zhang, L., Ed., =
and K. Fall, Ed., "Report

      
              =
from the IAB Workshop on Routing and Addressing",               from the IAB Workshop on Routing and =
Addressing",

      
              RFC =
4984, DOI 10.17487/RFC4984, September 2007,               RFC 4984, DOI 10.17487/RFC4984, September =
2007,

      
              =
<https://www.rfc-editor.org/info/rfc4984>.               =
<https://www.rfc-editor.org/info/rfc4984>.

      
 =


      
   [RFC6480]  =
Lepinski, M. and S. Kent, "An Infrastructure to Support =
   [RFC6480]  Lepinski, M. and S. Kent, "An =
Infrastructure to Support

      
              =
Secure Internet Routing", RFC 6480, DOI 10.17487/RFC6480, =
              Secure Internet Routing", RFC =
6480, DOI 10.17487/RFC6480,

      
              =
February 2012, <https://www.rfc-editor.org/info/rfc6480>. =
              February 2012, =
<https://www.rfc-editor.org/info/rfc6480>.

      
 =


      
   [RFC6518]  =
Lebovitz, G. and M. Bhatia, "Keying and Authentication for =
   [RFC6518]  Lebovitz, G. and M. Bhatia, =
"Keying and Authentication for

      
              =
Routing Protocols (KARP) Design Guidelines", RFC 6518,               Routing Protocols (KARP) Design =
Guidelines", RFC 6518,

      

      
              =
DOI 10.17487/RFC6518, February 2012, <https://www.rfc-               DOI 10.17487/RFC6518, February =
2012,

      
              =
editor.org/info/rfc6518>.   =
            <https://www.rfc-editor.org/info/rfc6518>.

      
 =


      
   [RFC6831]  =
Farinacci, D., Meyer, D., Zwiebel, J., and S. Venaas, "The =
   [RFC6831]  Farinacci, D., Meyer, D., =
Zwiebel, J., and S. Venaas, "The

      
              =
Locator/ID Separation Protocol (LISP) for Multicast               Locator/ID Separation Protocol (LISP) for =
Multicast

      
              =
Environments", RFC 6831, DOI 10.17487/RFC6831, January               Environments", RFC 6831, DOI =
10.17487/RFC6831, January

      
              =
2013, <https://www.rfc-editor.org/info/rfc6831>.               2013, =
<https://www.rfc-editor.org/info/rfc6831>.

      
 =


      
   [RFC6832]  =
Lewis, D., Meyer, D., Farinacci, D., and V. Fuller,    [RFC6832]  Lewis, D., Meyer, D., Farinacci, D., and =
V. Fuller,

      
              =
"Interworking between Locator/ID Separation Protocol               "Interworking between Locator/ID =
Separation Protocol

      
              =
(LISP) and Non-LISP Sites", RFC 6832,  =
             (LISP) and Non-LISP Sites", RFC 6832,

      

      
              =
DOI 10.17487/RFC6832, January 2013, <https://www.rfc-               DOI 10.17487/RFC6832, January =
2013,

      
              =
editor.org/info/rfc6832>.   =
            <https://www.rfc-editor.org/info/rfc6832>.

      
 =


      
   [RFC6835]  =
Farinacci, D. and D. Meyer, "The Locator/ID Separation    [RFC6835]  Farinacci, D. and D. Meyer, "The =
Locator/ID Separation

      
              =
Protocol Internet Groper (LIG)", RFC 6835,               Protocol Internet Groper (LIG)", RFC =
6835,

      

      
              =
DOI 10.17487/RFC6835, January 2013, <https://www.rfc-               DOI 10.17487/RFC6835, January =
2013,

      
              =
editor.org/info/rfc6835>.   =
            <https://www.rfc-editor.org/info/rfc6835>.

      
 =


      
   [RFC6837]  =
Lear, E., "NERD: A Not-so-novel Endpoint ID (EID) to    [RFC6837]  Lear, E., "NERD: A Not-so-novel Endpoint =
ID (EID) to

      
              =
Routing Locator (RLOC) Database", RFC 6837,               Routing Locator (RLOC) Database", RFC =
6837,

      

      
              =
DOI 10.17487/RFC6837, January 2013, <https://www.rfc-               DOI 10.17487/RFC6837, January =
2013,

      
              =
editor.org/info/rfc6837>.   =
            <https://www.rfc-editor.org/info/rfc6837>.

      
 =


      
   [RFC6935]  =
Eubanks, M., Chimento, P., and M. Westerlund, "IPv6 and =
   [RFC6935]  Eubanks, M., Chimento, P., and M. =
Westerlund, "IPv6 and

      
              UDP =
Checksums for Tunneled Packets", RFC 6935,               UDP Checksums for Tunneled Packets", RFC =
6935,

      

      
              =
DOI 10.17487/RFC6935, April 2013, <https://www.rfc-               DOI 10.17487/RFC6935, April 2013,

      
              =
editor.org/info/rfc6935>.   =
            <https://www.rfc-editor.org/info/rfc6935>.

      
 =


      
   [RFC6936]  =
Fairhurst, G. and M. Westerlund, "Applicability Statement =
   [RFC6936]  Fairhurst, G. and M. Westerlund, =
"Applicability Statement

      
              for =
the Use of IPv6 UDP Datagrams with Zero Checksums",               for the Use of IPv6 UDP Datagrams with =
Zero Checksums",

      
              RFC =
6936, DOI 10.17487/RFC6936, April 2013, =
              RFC 6936, DOI 10.17487/RFC6936, April 2013,

      
              =
<https://www.rfc-editor.org/info/rfc6936>.               =
<https://www.rfc-editor.org/info/rfc6936>.

      
 =


      
   [RFC8060]  =
Farinacci, D., Meyer, D., and J. Snijders, "LISP Canonical =
   [RFC8060]  Farinacci, D., Meyer, D., and J. =
Snijders, "LISP Canonical

      
              =
Address Format (LCAF)", RFC 8060, DOI 10.17487/RFC8060, =
              Address Format (LCAF)", RFC 8060, =
DOI 10.17487/RFC8060,

      
              =
February 2017, <https://www.rfc-editor.org/info/rfc8060>. =
              February 2017, =
<https://www.rfc-editor.org/info/rfc8060>.

      
 =


      
 =


      
skipping =
to change at page 52, line =
5 =C2=B6 =
skipping to change at page 52, line =
5 =C2=B6

      
   The LISP =
working group would like to give a special thanks to Jari =
   The LISP working group would like to give a =
special thanks to Jari

      
   Arkko, the =
Internet Area AD at the time that the set of LISP    Arkko, the Internet Area AD at the time that the set =
of LISP

      
   documents were =
being prepared for IESG last call, and for his    documents were being prepared for IESG last call, and =
for his

      
   meticulous =
reviews and detailed commentaries on the 7 working group =
   meticulous reviews and detailed commentaries =
on the 7 working group

      
   last call =
documents progressing toward standards-track RFCs.    last call documents progressing toward =
standards-track RFCs.

      
 =


      
Appendix B.  =
Document Change Log Appendix B.  =
Document Change Log

      
 =


      
   [RFC Editor: =
Please delete this section on publication as RFC.]    [RFC Editor: Please delete this section on =
publication as RFC.]

      
 =


      

      
B.1.  Changes =
to draft-ietf-lisp-rfc6830bis-04 B.1. =
 Changes to draft-ietf-lisp-rfc6830bis-06

      
 =


      
 =
   o  Posted October =
2017.

      
 =


      
 =
   o  Put RTR =
definition before it is used.

      
 =


      
 =
   o  Rename references =
that are now working group drafts.

      
 =


      
 =
   o  Remove "EIDs MUST =
NOT be used as used by a host to refer to other

      
 =
      hosts.  Note that =
EID blocks MAY LISP RLOCs".

      
 =


      
 =
   o  Indicate what =
address-family can appear in data packets.

      
 =


      
 =
   o  ETRs may, rather =
than will, be the ones to send Map-Replies.

      
 =


      
 =
   o  Recommend, rather =
than mandate, max encapsulation headers to 2.

      
 =


      
 =
   o  Reference VPN =
draft when introducing Instance-ID.

      
 =


      
 =
   o  Indicate that =
SMRs can be sent when ITR/ETR are in the same node.

      
 =


      
 =
   o  Clarify when =
private addreses can be used.

      
 =


      
 =
B.2.  Changes to =
draft-ietf-lisp-rfc6830bis-05

      
 =


      
 =
   o  Posted August =
2017.

      
 =


      
 =
   o  Make it clear =
that a Reencapsulating Tunnel Router is an RTR.

      
 =


      
 =
B.3.  Changes to =
draft-ietf-lisp-rfc6830bis-04

      
 =


      
   o  Posted July =
2017.    o  Posted July 2017.

      
 =


      
   o  Changed =
reference of IPv6 RFC2460 to RFC8200.  =
  o  Changed reference of IPv6 RFC2460 to RFC8200.

      
 =


      
   o  Indicate =
that the applicability statement for UDP zero checksums =
   o  Indicate that the applicability statement =
for UDP zero checksums

      
      over IPv6 =
adheres to RFC6936.       over IPv6 =
adheres to RFC6936.

      
 =


      

      
B.2.  Changes to =
draft-ietf-lisp-rfc6830bis-03 B.4.  Changes to =
draft-ietf-lisp-rfc6830bis-03

      
 =


      
   o  Posted May =
2017.    o  Posted May 2017.

      
 =


      
   o  Move the =
control-plane related codepoints in the IANA    o  Move the control-plane related codepoints in the =
IANA

      
      =
Considerations section to RFC6833bis.  =
     Considerations section to RFC6833bis.

      
 =


      

      
B.3.  Changes to =
draft-ietf-lisp-rfc6830bis-02 B.5.  Changes to =
draft-ietf-lisp-rfc6830bis-02

      
 =


      
   o  Posted =
April 2017.    o  Posted April =
2017.

      
 =


      
   o  Reflect =
some editorial comments from Damien Sausez.    o  Reflect some editorial comments from Damien =
Sausez.

      
 =


      

      
B.4.  Changes to =
draft-ietf-lisp-rfc6830bis-01 B.6.  Changes to =
draft-ietf-lisp-rfc6830bis-01

      
 =


      
   o  Posted =
March 2017.    o  Posted March =
2017.

      
 =


      
   o  Include =
references to new RFCs published.    o =
 Include references to new RFCs published.

      
 =


      
   o  Change =
references from RFC6833 to RFC6833bis.  =
  o  Change references from RFC6833 to RFC6833bis.

      
 =


      
   o  Clarified =
LCAF text in the IANA section.    o  =
Clarified LCAF text in the IANA section.

      
 =


      
   o  Remove =
references to "experimental".    o  =
Remove references to "experimental".

      
 =


      

      
B.5.  Changes to =
draft-ietf-lisp-rfc6830bis-00 B.7.  Changes to =
draft-ietf-lisp-rfc6830bis-00

      
 =


      
   o  Posted =
December 2016.    o  Posted December =
2016.

      
 =


      
   o  Created =
working group document from draft-farinacci-lisp    o  Created working group document from =
draft-farinacci-lisp

      
      -rfc6830-00 =
individual submission.  No other changes made.       -rfc6830-00 individual submission.  No other =
changes made.

      
 =


      
Authors' =
Addresses Authors' Addresses

      

      
 =
                        =
                                                 

      
   Dino =
Farinacci    Dino Farinacci

      
   Cisco =
Systems    Cisco Systems

      
   Tasman =
Drive    Tasman Drive

      
   San Jose, CA  =
95134    San Jose, CA  95134

      
   USA =
   USA

      
 =


      
   EMail: =
farinacci@gmail.com    EMail: =
farinacci@gmail.com

      
 =


      
   Vince =
Fuller    Vince Fuller

      
   Cisco =
Systems    Cisco Systems


     
 

     
 End of changes. 58 change blocks. 

     
144 lines changed or =
deleted 179 lines changed or =
added

     

This =
html diff was produced by rfcdiff 1.46. The latest version is available =
from http://tools.ietf.org/to=
ols/rfcdiff/ 

   

  =20
  =20
=

--Apple-Mail=_CE10E3DE-4AD2-4A2C-9E0B-ED4664F79D24
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
	charset=us-ascii




--Apple-Mail=_CE10E3DE-4AD2-4A2C-9E0B-ED4664F79D24--


From nobody Mon Oct 30 09:49:50 2017
Return-Path: 
X-Original-To: lisp@ietf.org
Delivered-To: lisp@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 5156813FA6E; Mon, 30 Oct 2017 09:49:43 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: 
Cc: lisp@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.63.2
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <150938218329.7752.17865798795727001805@ietfa.amsl.com>
Date: Mon, 30 Oct 2017 09:49:43 -0700
Archived-At: 
Subject: [lisp] I-D Action: draft-ietf-lisp-eid-anonymity-01.txt
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Mon, 30 Oct 2017 16:49:43 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Locator/ID Separation Protocol WG of the IETF.

        Title           : LISP EID Anonymity
        Authors         : Dino Farinacci
                          Padma Pillay-Esnault
                          Wassim Haddad
	Filename        : draft-ietf-lisp-eid-anonymity-01.txt
	Pages           : 9
	Date            : 2017-10-30

Abstract:
   This specification will describe how ephemeral LISP EIDs can be used
   to create source anonymity.  The idea makes use of frequently
   changing EIDs much like how a credit-card system uses a different
   credit-card numbers for each transaction.



The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-lisp-eid-anonymity/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-lisp-eid-anonymity-01
https://datatracker.ietf.org/doc/html/draft-ietf-lisp-eid-anonymity-01

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-lisp-eid-anonymity-01


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From nobody Mon Oct 30 09:51:55 2017
Return-Path: 
X-Original-To: lisp@ietf.org
Delivered-To: lisp@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 06B1E7D5E; Mon, 30 Oct 2017 09:51:47 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: 
Cc: lisp@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.63.2
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <150938230699.7698.5579865127041286326@ietfa.amsl.com>
Date: Mon, 30 Oct 2017 09:51:47 -0700
Archived-At: 
Subject: [lisp] I-D Action: draft-ietf-lisp-rfc6830bis-06.txt
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Mon, 30 Oct 2017 16:51:47 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Locator/ID Separation Protocol WG of the IETF.

        Title           : The Locator/ID Separation Protocol (LISP)
        Authors         : Dino Farinacci
                          Vince Fuller
                          Dave Meyer
                          Darrel Lewis
                          Albert Cabellos
	Filename        : draft-ietf-lisp-rfc6830bis-06.txt
	Pages           : 54
	Date            : 2017-10-30

Abstract:
   This document describes the data-plane protocol for the Locator/ID
   Separation Protocol (LISP).  LISP defines two namespaces, End-point
   Identifiers (EIDs) that identify end-hosts and Routing Locators
   (RLOCs) that identify network attachment points.  With this, LISP
   effectively separates control from data, and allows routers to create
   overlay networks.  LISP-capable routers exchange encapsulated packets
   according to EID-to-RLOC mappings stored in a local map-cache.  The
   map-cache is populated by the LISP Control-Plane protocol
   [I-D.ietf-lisp-rfc6833bis].

   LISP requires no change to either host protocol stacks or to underlay
   routers and offers Traffic Engineering, multihoming and mobility,
   among other features.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-lisp-rfc6830bis/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-lisp-rfc6830bis-06
https://datatracker.ietf.org/doc/html/draft-ietf-lisp-rfc6830bis-06

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-lisp-rfc6830bis-06


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From nobody Mon Oct 30 12:04:12 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C1F513836B for ; Mon, 30 Oct 2017 12:04:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 01NzsubaRGEq for ; Mon, 30 Oct 2017 12:04:09 -0700 (PDT)
Received: from mail-pg0-x22c.google.com (mail-pg0-x22c.google.com [IPv6:2607:f8b0:400e:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 627E113F402 for ; Mon, 30 Oct 2017 12:04:08 -0700 (PDT)
Received: by mail-pg0-x22c.google.com with SMTP id s2so12426537pge.10 for ; Mon, 30 Oct 2017 12:04:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=YU00uMyVKS3xOgZmzH98Tifw1hc6bmEw226dGvdIeYw=; b=WLovgKwK2MArNTBR7JsDFMtnEm6zBV8Y782XQBd9j/HJO/9hpuPuMhgT2tLr0CGgwY kXUO1yt8+vCbHsvkp1OTuM8zM6iq0PjRvKbhVp2oV/E8evExwMbi9szoDH3WtCmLpxdM Ay1hgwsiKD6W1LcucHsX0DPy5EqZKJPIub2sPcnNREMJ/UlhP6Ty/l/k9YdXc060dRha kcnLOF6uEKRtOr6t+Wt0kAvUf4P0MH94bAZ+I6YdBE9CQxvuHVf/K8xZy0UizI/UVXoI xgmH6V3faZYGhS66+2B9OZSY6R9kOhWx3h9q+TDJ7BQnThXcQcFvEfj3HPdUbfp1UC81 /skg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=YU00uMyVKS3xOgZmzH98Tifw1hc6bmEw226dGvdIeYw=; b=rhkfOo8XjL4dYt+xHslpJBm91MOqzsHeV6mdHjgNRYbp30ouUo5+tVd6KqlPf2iM55 JgK2xlnmX1NzQVgQKKgj5ruAm2tVsc/yQ+FCg4Uz9yELEgTgxaEqrN2VJG7PK1E0ARRn lhCMXzZSV9IZvZ/sTt57odrrLDAXuTg2K8HMColsN3pq0oP0eoEiX0dR6MMiwJKkd8uQ gKtZ02GxJ8UQVaH+vE5vBw/zcRQ4Ri4zMscOAHTSdHY5Emm0OiyMlCBRdBTxDnK3U67s q3wo1jIHG8g0qSgoRURKSgqGJu+juHz43u+6nuhD+nZ5e++h24S+3mYaq9RfQJQrt8t7 nYRA==
X-Gm-Message-State: AMCzsaXh0Vsf6d1NH35OtRB4PZWeDrkbIi8hVE87Djs5ZHKnUdqxmMjf BGCU2B57CHCRiDcyA2hwTfFDuQf7
X-Google-Smtp-Source: ABhQp+RosT4Jg3iZgBuSzDAoTj01QSnWVAdG55g2rt4J2U8hZEC1r73hVuOgtEQak45ANDesWJcQBA==
X-Received: by 10.99.45.67 with SMTP id t64mr8461037pgt.108.1509390247436; Mon, 30 Oct 2017 12:04:07 -0700 (PDT)
Received: from ?IPv6:2603:3024:151c:55f0:e871:1057:1f38:54e9? ([2603:3024:151c:55f0:e871:1057:1f38:54e9]) by smtp.gmail.com with ESMTPSA id z2sm5376286pgo.54.2017.10.30.12.04.06 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 30 Oct 2017 12:04:06 -0700 (PDT)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 11.0 \(3445.1.7\))
From: Dino Farinacci 
In-Reply-To: 
Date: Mon, 30 Oct 2017 12:04:05 -0700
Cc: Luigi Iannone , Alberto Rodriguez-Natal 
Content-Transfer-Encoding: quoted-printable
Message-Id: 
References:  <897096DF-C3CF-4D0C-8E04-ACEE85747C55@gmail.com>  <1AAAC5C3-27FA-47A9-819F-42B2357E3A08@gmail.com>  <3E61C832-97B2-4776-B375-9A473D600A61@gmail.com> 
To: IETF 
X-Mailer: Apple Mail (2.3445.1.7)
Archived-At: 
Subject: Re: [lisp] Review of RFC6830bis
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Mon, 30 Oct 2017 19:04:10 -0000

LISP WG, is there any objections to adding this text:

There are several cases where segregation is needed at the EID level.
For instance, this is the case for deployments containing overlapping
addresses, traffic isolation policies or multi-tenant virtualization.
For these and other scenarios where segregation is needed, Instance
IDs are used.

as replacement to this text:

When multiple organizations inside of a LISP site are using private
addresses [RFC1918] as EID-Prefixes, their address spaces MUST remain
segregated due to possible address duplication.  An Instance ID in the
address encoding can aid in making the entire AFI-based address
unique.

Thanks,
Dino


> On Oct 30, 2017, at 10:35 AM, Alberto Rodriguez-Natal =
 wrote:
>=20
> Dino,
>=20
> I believe the following agreed edit was not included in -06. Not a big
> deal, but maybe we should make a note to include it in -07.
>=20
> Alberto
>=20
>>>>>>> When multiple organizations inside of a LISP site are using =
private
>>>>>>> addresses [RFC1918] as EID-Prefixes, their address spaces MUST =
remain
>>>>>>> segregated due to possible address duplication.  An Instance ID =
in the
>>>>>>> address encoding can aid in making the entire AFI-based address
>>>>>>> unique.
>>>>>>>=20
>>>>>>> [AR] This text is used to introduce the concept of Instance-IDs. =
I
>>>>>>> don't think we should mention private addresses here. Instance =
ID may
>>>>>>> be used even when not private addresses are in place or for =
purposes
>>>>>>> other than possible address duplication. If anything, the =
private
>>>>>>> addresses duplication should be an example only.
>>>>>>=20
>>>>>> Response (1).
>>>>>>=20
>>>>>> Making a reference to private addresses is actually very =
important. There are a lot of container and VMs within cloud provider =
deployments that use it. It is probably the most popular use-case of =
LISP.
>>>>>=20
>>>>> [AR2] My intention was to state that we should not tie =
Instance-IDs to
>>>>> the address duplication problem of private addresses. Indeed,
>>>>> preventing address duplication is one of the major use-cases for
>>>>> Instance-IDs but they are applicable beyond that particular =
use-case.
>>>>=20
>>>> I don=E2=80=99t follow your point, the fact you use EIDs within an =
IID means the EIDs are private to that IID. Regardless if they are =
RFC1918 addresses or registry allocated addresses.
>>>=20
>>> [AR3] I would suggest the following text as a replacement for the
>>> current paragraph. Feel free to edit as you see fit.
>>>=20
>>> "There are several cases where segregation is needed at the EID =
level.
>>> For instance, this is the case for deployments containing =
overlapping
>>> addresses, traffic isolation policies or multi-tenant =
virtualization.
>>> For these and others scenarios where segregation is needed, Instance
>>> IDs can be used.=E2=80=9D
>>=20
>> I would like to hear if the working group agrees to add this text. If =
by then end of the week I hear no objections or changes, I will include =
it.


From nobody Mon Oct 30 12:09:07 2017
Return-Path: 
X-Original-To: lisp@ietf.org
Delivered-To: lisp@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 74E6913F5BA; Mon, 30 Oct 2017 12:09:05 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: 
Cc: lisp@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.63.2
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <150939054546.7819.2724502490944185591@ietfa.amsl.com>
Date: Mon, 30 Oct 2017 12:09:05 -0700
Archived-At: 
Subject: [lisp] I-D Action: draft-ietf-lisp-te-01.txt
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Mon, 30 Oct 2017 19:09:05 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Locator/ID Separation Protocol WG of the IETF.

        Title           : LISP Traffic Engineering Use-Cases
        Authors         : Dino Farinacci
                          Michael Kowal
                          Parantap Lahiri
	Filename        : draft-ietf-lisp-te-01.txt
	Pages           : 17
	Date            : 2017-10-30

Abstract:
   This document describes how LISP reencapsulating tunnels can be used
   for Traffic Engineering purposes.  The mechanisms described in this
   document require no LISP protocol changes but do introduce a new
   locator (RLOC) encoding.  The Traffic Engineering features provided
   by these LISP mechanisms can span intra-domain, inter-domain, or
   combination of both.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-lisp-te/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-lisp-te-01
https://datatracker.ietf.org/doc/html/draft-ietf-lisp-te-01

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-lisp-te-01


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From nobody Tue Oct 31 06:24:05 2017
Return-Path: 
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E18113ACE5 for ; Tue, 31 Oct 2017 06:24:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gigix-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9BVWDSELxh2i for ; Tue, 31 Oct 2017 06:24:02 -0700 (PDT)
Received: from mail-wm0-x22d.google.com (mail-wm0-x22d.google.com [IPv6:2a00:1450:400c:c09::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C247913F42B for ; Tue, 31 Oct 2017 06:24:01 -0700 (PDT)
Received: by mail-wm0-x22d.google.com with SMTP id s66so22398018wmf.5 for ; Tue, 31 Oct 2017 06:24:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gigix-net.20150623.gappssmtp.com; s=20150623; h=from:content-transfer-encoding:mime-version:subject:message-id:date :cc:to; bh=FCBuWMdl2QlGqVCSjtvLcVHZPmCfY0Ya/vr6zjcttco=; b=oHMzPgwFv/rsmbBi4VmRqCcBLK3icc6OJfDYhfAbgnn1xl+BiBsmSAWVlUSzy35JNv cwDqputTGT4k1yx4c20gVI+ZGEaEn0fMsd2wAmIkmLdJ5MqNZjJD3zgk+8/EajYvXlxx n8tV+w+Hf+3jiqOM+3e2qhYgrd93PdlL44ZW+UBipMZ0huT+gfR07K3xSyIINo/5TtTx u+rH000bko08HbVNk4fiIsK4/pzU+wVgK+NtL/UEw/w+dYyRjcgKkAzxiWvB7eGgHNVN tMPtQCxRm8ky9jQKweCHU4mQ1Asa/GGDLEv0y9FT92IJPwgk8EJC3HNittdPFgq4vhnp S5cA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:content-transfer-encoding:mime-version :subject:message-id:date:cc:to; bh=FCBuWMdl2QlGqVCSjtvLcVHZPmCfY0Ya/vr6zjcttco=; b=jSpXfe8OiUPzuB1a20KWlpCBUTVvLX44gpurIGRRwEjEHM98g5/chDVkWqjL53Vn9/ fYyIL81sAMo5aia8bviEZyc1xNDHtqGC63A+LfVTMNLFm0AeJ7+M/Nz2wDpj5n80f3n/ 1SpnKl07VasBkZSpQn46qUlyIygVuCwycKV8W7x80nuHFV/tbhUJYXuQWvuE4PMdfmWn dRRRuP35aBX2MDwHJDXVmAayLt0Wyw9M+aUXDp+b/EIA6kb1BF5aax4B6Vu2oUMLfUJY K1BmhJyjwZjUhDfRdj5UY10RYsAGvDQXPGEh2uz8c7ejwlIC1McWbSnqcsx8ONvZZpFz iusQ==
X-Gm-Message-State: AMCzsaVLfFng3klFo2r6iDveGFbZMVcl6j7rTdePeCPR8JR9f2YarCOh H1C/Ehy4OdfYTHGMIHQwjYYxFGUoiN4=
X-Google-Smtp-Source: ABhQp+R6XyWrA4nmaQ0E5bVYDE47feqR/Y6/oyfxfb/A+GWdr3DK7c39acbB4+AO5Ln8ztUHBSuUGQ==
X-Received: by 10.80.139.232 with SMTP id n37mr2899245edn.291.1509456239658; Tue, 31 Oct 2017 06:23:59 -0700 (PDT)
Received: from ?IPv6:2001:660:330f:a4:9c08:2b7d:947c:b2eb? ([2001:660:330f:a4:9c08:2b7d:947c:b2eb]) by smtp.gmail.com with ESMTPSA id c7sm1246495edc.26.2017.10.31.06.23.58 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 31 Oct 2017 06:23:58 -0700 (PDT)
From: Luigi Iannone 
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 11.0 \(3445.1.7\))
Message-Id: <19B94AC7-74AE-4A81-BE52-7EC0C45AB250@gigix.net>
Date: Tue, 31 Oct 2017 14:23:57 +0100
Cc: lisp-chairs@ietf.org
To: "lisp@ietf.org list" 
X-Mailer: Apple Mail (2.3445.1.7)
Archived-At: 
Subject: [lisp] 100th IETF LISP WG Preliminary Agenda Available
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol 
List-Unsubscribe: , 
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: , 
X-List-Received-Date: Tue, 31 Oct 2017 13:24:04 -0000

Hi All,

The preliminary agenda for our next meeting is now online: =
https://datatracker.ietf.org/doc/agenda-100-lisp/
(also copied hereafter)

We have a pretty packed schedule, thank you all for the interest.
Unfortunately this means that we had to adjust a bit the requested slots =
so to give time to all the people presenters.

Please have a look and send an email, if you spot any error, mistake, or =
missing item.

Ciao

L.

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

CHAIR(s):  Joel Halpern ( jmh AT joelhalpern.com )
                Luigi Iannone ( ggx AT gigix.net )

SECRETARY: Wassim Haddad ( wassim.haddad AT ericsson.com )
           	   Padma Pillay-Esnault ( padma.ietf AT gmail.com )


AGENDA

Session 1/1 (120 Minutes)
=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-

Friday, November 17, 2017
9:30 - 11:30, Morning Session I, 120 Minutes
Room: Olivia

- Administration
    Halpern/Iannone
    - Blue Sheets
    - Agenda Bashing
    - Status reports for WG drafts
	5 Minutes 	(Cumulative Time: 5 Minutes)



o WG Items

- Update on LISP 6830bis & 6833bis
  draft-ietf-lisp-6830bis
  draft-ietf-lisp-6833bis
  (To be extended if needed)
	15 Minutes	(Cumulative Time: 20 Minutes)
  Dino Farinacci & Albert Cabellos

- LISP-Security - draft-ietf-lisp-sec-14.txt
  5 minutes (Cumulative Time: 25 Minutes)
  Fabio Maino

- LISP YANG Model - draft-ietf-lisp-yang-05
  5 minutes (Cumulative Time: 30 Minutes)
  Reshad Rahman


o Non WG Items

- LISP Map Server Reliable Transport -        =
draft-kouvelas-lisp-map-server-reliable-transport-04.txt
  10 minutes (Cumulative Time: 40 Minutes)
  Reshad Rahman

- Ground-based LISP for the Aeronautical Telecommunications Network
  15 minutes (Cumulative Time: 55 Minutes)
  Reshad Rahmen

- LISP Control-Plane ECDSA Authentication and Authorization - =
draft-farinacci-lisp-ecdsa-auth-00.txt
  10 minutes (Cumulative Time: 65 Minutes)
  Dino Farinacci

- LISP for the Mobile Network - =
draft-farinacci-lisp-mobile-network-00.txt
  10 minutes (Cumulative Time: 75 Minutes)
  Dino Farinacci

- Publish/Subscribe Functionality for LISP -                 =
draft-rodrigueznatal-lisp-pubsub-01.txt
  15 minutes (Cumulative Time: 90 Minutes)
  Fabio Maino

- LISP Traffic Engineering
  15 minutes (Cumulative Time: 105 Minutes)
  Yan Filyurin

- LISP on Android & iOS
  10 minutes (Cumulative Time: 115 Minutes)
  Albert Cabellos

- VXLAN GPE - draft-brockners-ioam-vxlan-gpe-00.txt
  5 minutes (Cumulative Time:120 Minutes)
  Franck Brockners

- Overflow Time/ Discussion
  0 Minutes (Cumulative Time: 120 Minutes)