From nobody Tue Apr 5 07:42:20 2016 Return-Path: X-Original-To: dime@ietf.org Delivered-To: dime@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 662B912D0BA; Tue, 5 Apr 2016 07:42:17 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.18.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160405144217.25883.98527.idtracker@ietfa.amsl.com> Date: Tue, 05 Apr 2016 07:42:17 -0700 Archived-At: Cc: dime@ietf.org Subject: [Dime] I-D Action: draft-ietf-dime-drmp-05.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.17 List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Apr 2016 14:42:17 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Diameter Maintenance and Extensions of the IETF. Title : Diameter Routing Message Priority Author : Steve Donovan Filename : draft-ietf-dime-drmp-05.txt Pages : 15 Date : 2016-04-05 Abstract: When making routing and resource allocation decisions, Diameter nodes currently have no generic mechanism to determine the relative priority of Diameter messages. This document addresses this by defining a mechanism to allow Diameter endpoints to indicate the relative priority of Diameter transactions. With this information Diameter nodes can factor that priority into routing, resource allocation and overload abatement decisions. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dime-drmp/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-dime-drmp-05 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-dime-drmp-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Apr 5 07:51:50 2016 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2FDEA12D149 for ; Tue, 5 Apr 2016 07:51:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.289 X-Spam-Level: * X-Spam-Status: No, score=1.289 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MANY_SPAN_IN_TEXT=2.399, SPF_NEUTRAL=0.779, T_HTML_ATTACH=0.01] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XT7FnSyuEeUx for ; Tue, 5 Apr 2016 07:51:44 -0700 (PDT) Received: from biz131.inmotionhosting.com (biz131.inmotionhosting.com [66.117.3.2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E245812D110 for ; Tue, 5 Apr 2016 07:44:01 -0700 (PDT) Received: from dhcp-92c9.meeting.ietf.org ([31.133.146.201]:63685) by biz131.inmotionhosting.com with esmtpsa (TLSv1.2:DHE-RSA-AES256-SHA:256) (Exim 4.86_1) (envelope-from ) id 1anSCx-002gUN-MN for dime@ietf.org; Tue, 05 Apr 2016 07:44:01 -0700 To: "dime@ietf.org" From: Steve Donovan Message-ID: <5703CF2A.7000502@usdonovans.com> Date: Tue, 5 Apr 2016 11:43:54 -0300 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.7.1 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="------------020606000700040102040707" X-OutGoing-Spam-Status: No, score=1.4 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - biz131.inmotionhosting.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - usdonovans.com X-Get-Message-Sender-Via: biz131.inmotionhosting.com: authenticated_id: srdonovan@usdonovans.com X-Authenticated-Sender: biz131.inmotionhosting.com: srdonovan@usdonovans.com Archived-At: Subject: [Dime] New version of DRMP X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Apr 2016 14:51:47 -0000 This is a multi-part message in MIME format. --------------020606000700040102040707 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit All, I've uploaded a new version of the DRMP draft. This version contains changes resulting from the IANA and gen art reviews. I've also attached a diff file showing changes made in the -05 version. Regards, Steve --------------020606000700040102040707 Content-Type: text/html; charset=UTF-8; name="Diff_ draft-ietf-dime-drmp-04.txt - draft-ietf-dime-drmp-05.txt.html" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename*0="Diff_ draft-ietf-dime-drmp-04.txt - draft-ietf-dime-drmp-05."; filename*1="txt.html" CjwhRE9DVFlQRSBodG1sIFBVQkxJQyAiLS8vVzNDLy9EVEQgWEhUTUwgMS4wIFRyYW5zaXRp b25hbC8vRU4iICJodHRwOi8vd3d3LnczLm9yZy9UUi94aHRtbDEvRFREL3hodG1sMS10cmFu c2l0aW9uYWwuZHRkIj4gCjwhLS0gR2VuZXJhdGVkIGJ5IHJmY2RpZmYgMS40NTogcmZjZGlm ZiAgLS0+IAo8IS0tIDwhRE9DVFlQRSBodG1sIFBVQkxJQyAiLS8vVzNDLy9EVEQgSFRNTCA0 LjAxIFRyYW5zaXRpb25hbCIgPiAtLT4KPCEtLSBTeXN0ZW06IExpbnV4IHppbmZhbmRlbCAz LjIuMC00LWFtZDY0ICMxIFNNUCBEZWJpYW4gMy4yLjY4LTErZGViN3UyIHg4Nl82NCBHTlUv TGludXggLS0+IAo8IS0tIFVzaW5nIGF3azogL3Vzci9iaW4vZ2F3azogR05VIEF3ayA0LjAu MSAtLT4gCjwhLS0gVXNpbmcgZGlmZjogL3Vzci9iaW4vZGlmZjogZGlmZiAoR05VIGRpZmZ1 dGlscykgMy4yIC0tPiAKPCEtLSBVc2luZyB3ZGlmZjogL3Vzci9iaW4vd2RpZmY6IHdkaWZm IChHTlUgd2RpZmYpIDEuMS4yIC0tPiAKPGh0bWwgeG1sbnM9Imh0dHA6Ly93d3cudzMub3Jn LzE5OTkveGh0bWwiPiAKPGhlYWQ+IAogIDxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlw ZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PVVURi04IiAvPiAKICA8bWV0YSBodHRw LWVxdWl2PSJDb250ZW50LVN0eWxlLVR5cGUiIGNvbnRlbnQ9InRleHQvY3NzIiAvPiAKICA8 dGl0bGU+RGlmZjogZHJhZnQtaWV0Zi1kaW1lLWRybXAtMDQudHh0IC0gZHJhZnQtaWV0Zi1k aW1lLWRybXAtMDUudHh0PC90aXRsZT4gCiAgPHN0eWxlIHR5cGU9InRleHQvY3NzIj4gCiAg ICBib2R5ICAgIHsgbWFyZ2luOiAwLjRleDsgbWFyZ2luLXJpZ2h0OiBhdXRvOyB9IAogICAg dHIgICAgICB7IH0gCiAgICB0ZCAgICAgIHsgd2hpdGUtc3BhY2U6IHByZTsgZm9udC1mYW1p bHk6IG1vbm9zcGFjZTsgdmVydGljYWwtYWxpZ246IHRvcDsgZm9udC1zaXplOiAwLjg2ZW07 fSAKICAgIHRoICAgICAgeyBmb250LXNpemU6IDAuODZlbTsgfSAKICAgIC5zbWFsbCAgeyBm b250LXNpemU6IDAuNmVtOyBmb250LXN0eWxlOiBpdGFsaWM7IGZvbnQtZmFtaWx5OiBWZXJk YW5hLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IH0gCiAgICAubGVmdCAgIHsgYmFja2dyb3Vu ZC1jb2xvcjogI0VFRTsgfSAKICAgIC5yaWdodCAgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRkZG OyB9IAogICAgLmRpZmYgICB7IGJhY2tncm91bmQtY29sb3I6ICNDQ0Y7IH0gCiAgICAubGJs b2NrIHsgYmFja2dyb3VuZC1jb2xvcjogI0JGQjsgfSAKICAgIC5yYmxvY2sgeyBiYWNrZ3Jv dW5kLWNvbG9yOiAjRkY4OyB9IAogICAgLmluc2VydCB7IGJhY2tncm91bmQtY29sb3I6ICM4 RkY7IH0gCiAgICAuZGVsZXRlIHsgYmFja2dyb3VuZC1jb2xvcjogI0FDRjsgfSAKICAgIC52 b2lkICAgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRkZCOyB9IAogICAgLmNvbnQgICB7IGJhY2tn cm91bmQtY29sb3I6ICNFRUU7IH0gCiAgICAubGluZWJyIHsgYmFja2dyb3VuZC1jb2xvcjog I0FBQTsgfSAKICAgIC5saW5lbm8geyBjb2xvcjogcmVkOyBiYWNrZ3JvdW5kLWNvbG9yOiAj RkZGOyBmb250LXNpemU6IDAuN2VtOyB0ZXh0LWFsaWduOiByaWdodDsgcGFkZGluZzogMCAy cHg7IH0gCiAgICAuZWxpcHNpc3sgYmFja2dyb3VuZC1jb2xvcjogI0FBQTsgfSAKICAgIC5s ZWZ0IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogI0RERDsgfSAKICAgIC5yaWdodCAuY29u dCB7IGJhY2tncm91bmQtY29sb3I6ICNFRUU7IH0gCiAgICAubGJsb2NrIC5jb250IHsgYmFj a2dyb3VuZC1jb2xvcjogIzlEOTsgfSAKICAgIC5yYmxvY2sgLmNvbnQgeyBiYWNrZ3JvdW5k LWNvbG9yOiAjREQ2OyB9IAogICAgLmluc2VydCAuY29udCB7IGJhY2tncm91bmQtY29sb3I6 ICMwREQ7IH0gCiAgICAuZGVsZXRlIC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogIzhBRDsg fSAKICAgIC5zdGF0cywgLnN0YXRzIHRkLCAuc3RhdHMgdGggeyBiYWNrZ3JvdW5kLWNvbG9y OiAjRUVFOyBwYWRkaW5nOiAycHggMDsgfSAKICAgIHNwYW4uaGlkZSB7IGRpc3BsYXk6IG5v bmU7IGNvbG9yOiAjYWFhO30gICAgYTpob3ZlciBzcGFuIHsgZGlzcGxheTogaW5saW5lOyB9 ICAgIHRyLmNoYW5nZSB7IGJhY2tncm91bmQtY29sb3I6IGdyYXk7IH0gCiAgICB0ci5jaGFu Z2UgYSB7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgY29sb3I6IGJsYWNrIH0gCiAgPC9zdHls ZT4gCiAgICAgPHNjcmlwdD4KdmFyIGNodW5rX2luZGV4ID0gMDsKdmFyIG9sZF9jaHVuayA9 IG51bGw7CgpmdW5jdGlvbiBmb3JtYXRfY2h1bmsoaW5kZXgpIHsKICAgIHZhciBwcmVmaXgg PSAiZGlmZiI7CiAgICB2YXIgc3RyID0gaW5kZXgudG9TdHJpbmcoKTsKICAgIGZvciAoeD0w OyB4PCg0LXN0ci5sZW5ndGgpOyArK3gpIHsKICAgICAgICBwcmVmaXgrPScwJzsKICAgIH0K ICAgIHJldHVybiBwcmVmaXggKyBzdHI7Cn0KCmZ1bmN0aW9uIGZpbmRfY2h1bmsobil7CiAg ICByZXR1cm4gZG9jdW1lbnQucXVlcnlTZWxlY3RvcigndHJbaWQkPSInICsgbiArICciXScp Owp9CgpmdW5jdGlvbiBjaGFuZ2VfY2h1bmsob2Zmc2V0KSB7CiAgICB2YXIgaW5kZXggPSBj aHVua19pbmRleCArIG9mZnNldDsKICAgIHZhciBuZXdfc3RyOwogICAgdmFyIG5ld19jaHVu azsKCiAgICBuZXdfc3RyID0gZm9ybWF0X2NodW5rKGluZGV4KTsKICAgIG5ld19jaHVuayA9 IGZpbmRfY2h1bmsobmV3X3N0cik7CiAgICBpZiAoIW5ld19jaHVuaykgewogICAgICAgIHJl dHVybjsKICAgIH0KICAgIGlmIChvbGRfY2h1bmspIHsKICAgICAgICBvbGRfY2h1bmsuc3R5 bGUub3V0bGluZSA9ICIiOwogICAgfQogICAgb2xkX2NodW5rID0gbmV3X2NodW5rOwogICAg b2xkX2NodW5rLnN0eWxlLm91dGxpbmUgPSAiMXB4IHNvbGlkIHJlZCI7CiAgICB3aW5kb3cu bG9jYXRpb24uaGFzaCA9ICIjIiArIG5ld19zdHI7CiAgICB3aW5kb3cuc2Nyb2xsQnkoMCwt MTAwKTsKICAgIGNodW5rX2luZGV4ID0gaW5kZXg7Cn0KCmRvY3VtZW50Lm9ua2V5ZG93biA9 IGZ1bmN0aW9uKGUpIHsKICAgIHN3aXRjaCAoZS5rZXlDb2RlKSB7CiAgICBjYXNlIDc4Ogog ICAgICAgIGNoYW5nZV9jaHVuaygxKTsKICAgICAgICBicmVhazsKICAgIGNhc2UgODA6CiAg ICAgICAgY2hhbmdlX2NodW5rKC0xKTsKICAgICAgICBicmVhazsKICAgIH0KfTsKICAgPC9z Y3JpcHQ+IAo8L2hlYWQ+IAo8Ym9keSA+IAogIDx0YWJsZSBib3JkZXI9IjAiIGNlbGxwYWRk aW5nPSIwIiBjZWxsc3BhY2luZz0iMCI+IAogIDx0ciBpZD0icGFydC0xIiBiZ2NvbG9yPSJv cmFuZ2UiPjx0aD48L3RoPjx0aD48YSBocmVmPSIvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYt ZGltZS1kcm1wLTA0LnR4dCIgc3R5bGU9ImNvbG9yOiMwMDg7IHRleHQtZGVjb3JhdGlvbjpu b25lOyI+Jmx0OzwvYT4mbmJzcDs8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0 bWwvZHJhZnQtaWV0Zi1kaW1lLWRybXAtMDQudHh0IiBzdHlsZT0iY29sb3I6IzAwOCI+ZHJh ZnQtaWV0Zi1kaW1lLWRybXAtMDQudHh0PC9hPiZuYnNwOzwvdGg+PHRoPiA8L3RoPjx0aD4m bmJzcDs8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1k aW1lLWRybXAtMDUudHh0IiBzdHlsZT0iY29sb3I6IzAwOCI+ZHJhZnQtaWV0Zi1kaW1lLWRy bXAtMDUudHh0PC9hPiZuYnNwOzxhIGhyZWY9Ii9yZmNkaWZmP3VybDE9ZHJhZnQtaWV0Zi1k aW1lLWRybXAtMDUudHh0IiBzdHlsZT0iY29sb3I6IzAwODsgdGV4dC1kZWNvcmF0aW9uOm5v bmU7Ij4mZ3Q7PC9hPjwvdGg+PHRoPjwvdGg+PC90cj4gCiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+RGlhbWV0ZXIgTWFp bnRlbmFuY2UgYW5kIEV4dGVuc2lvbnMgKERJTUUpICAgICAgICAgICAgICAgICAgICBTLiBE b25vdmFuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+RGlhbWV0ZXIgTWFpbnRl bmFuY2UgYW5kIEV4dGVuc2lvbnMgKERJTUUpICAgICAgICAgICAgICAgICAgICBTLiBEb25v dmFuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5JbnRlcm5ldC1EcmFmdCAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBPcmFjbGU8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5JbnRlcm5ldC1EcmFmdCAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBPcmFjbGU8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDEi Pjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+SW50ZW5kZWQgc3RhdHVzOiBTdGFuZGFyZHMgVHJhY2sgICAgICAg ICAgICAgICAgICAgICAgICAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPk1hcmNoIDEwLDwvc3Bh bj4gMjAxNjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj5JbnRlbmRlZCBzdGF0 dXM6IFN0YW5kYXJkcyBUcmFjayAgICAgICAgICAgICAgICAgICAgICAgICAgIDxzcGFuIGNs YXNzPSJpbnNlcnQiPkFwcmlsIDUsPC9zcGFuPiAyMDE2PC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPkV4cGlyZXM6IDxzcGFuIGNsYXNzPSJkZWxldGUiPlNlcHRlbWJlciAx MSw8L3NwYW4+IDIwMTY8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+RXhwaXJl czogPHNwYW4gY2xhc3M9Imluc2VydCI+T2N0b2JlciA3LDwvc3Bhbj4gMjAxNjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAg RGlhbWV0ZXIgUm91dGluZyBNZXNzYWdlIFByaW9yaXR5PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgIERpYW1ldGVyIFJvdXRpbmcgTWVzc2Fn ZSBQcmlvcml0eTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy IGlkPSJkaWZmMDAwMiI+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAgZHJh ZnQtaWV0Zi1kaW1lLWRybXAtMDxzcGFuIGNsYXNzPSJkZWxldGUiPjQ8L3NwYW4+LnR4dDwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAg ZHJhZnQtaWV0Zi1kaW1lLWRybXAtMDxzcGFuIGNsYXNzPSJpbnNlcnQiPjU8L3NwYW4+LnR4 dDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5BYnN0cmFjdDwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPkFic3RyYWN0PC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFdoZW4gbWFraW5nIHJvdXRpbmcgYW5k IHJlc291cmNlIGFsbG9jYXRpb24gZGVjaXNpb25zLCBEaWFtZXRlciBub2RlczwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFdoZW4gbWFraW5nIHJvdXRpbmcgYW5kIHJl c291cmNlIGFsbG9jYXRpb24gZGVjaXNpb25zLCBEaWFtZXRlciBub2RlczwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgY3VycmVudGx5IGhhdmUgbm8gZ2VuZXJpYyBtZWNo YW5pc20gdG8gZGV0ZXJtaW5lIHRoZSByZWxhdGl2ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIGN1cnJlbnRseSBoYXZlIG5vIGdlbmVyaWMgbWVjaGFuaXNtIHRvIGRl dGVybWluZSB0aGUgcmVsYXRpdmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IHByaW9yaXR5IG9mIERpYW1ldGVyIG1lc3NhZ2VzLiAgVGhpcyBkb2N1bWVudCBhZGRyZXNz ZXMgdGhpcyBieTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHByaW9yaXR5 IG9mIERpYW1ldGVyIG1lc3NhZ2VzLiAgVGhpcyBkb2N1bWVudCBhZGRyZXNzZXMgdGhpcyBi eTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZGVmaW5pbmcgYSBtZWNoYW5p c20gdG8gYWxsb3cgRGlhbWV0ZXIgZW5kcG9pbnRzIHRvIGluZGljYXRlIHRoZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGRlZmluaW5nIGEgbWVjaGFuaXNtIHRvIGFs bG93IERpYW1ldGVyIGVuZHBvaW50cyB0byBpbmRpY2F0ZSB0aGU8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIHJlbGF0aXZlIHByaW9yaXR5IG9mIERpYW1ldGVyIHRyYW5z YWN0aW9ucy4gIFdpdGggdGhpcyBpbmZvcm1hdGlvbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIHJlbGF0aXZlIHByaW9yaXR5IG9mIERpYW1ldGVyIHRyYW5zYWN0aW9u cy4gIFdpdGggdGhpcyBpbmZvcm1hdGlvbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgRGlhbWV0ZXIgbm9kZXMgY2FuIGZhY3RvciB0aGF0IHByaW9yaXR5IGludG8gcm91 dGluZywgcmVzb3VyY2U8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBEaWFt ZXRlciBub2RlcyBjYW4gZmFjdG9yIHRoYXQgcHJpb3JpdHkgaW50byByb3V0aW5nLCByZXNv dXJjZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYWxsb2NhdGlvbiBhbmQg b3ZlcmxvYWQgYWJhdGVtZW50IGRlY2lzaW9ucy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBhbGxvY2F0aW9uIGFuZCBvdmVybG9hZCBhYmF0ZW1lbnQgZGVjaXNpb25z LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8 dHIgaWQ9InBhcnQtMiIgY2xhc3M9ImNoYW5nZSIgPjx0ZD48L3RkPjx0aD48c21hbGw+c2tp cHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48YSBocmVmPSIjcGFydC0yIj48ZW0+IHBhZ2Ug MSwgbGluZSAzNjxzcGFuIGNsYXNzPSJoaWRlIj4gJnBhcmE7PC9zcGFuPjwvZW0+PC9hPjwv dGg+PHRoPiA8L3RoPjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48 YSBocmVmPSIjcGFydC0yIj48ZW0+IHBhZ2UgMSwgbGluZSAzNjxzcGFuIGNsYXNzPSJoaWRl Ij4gJnBhcmE7PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW50ZXJuZXQt RHJhZnRzIGFyZSB3b3JraW5nIGRvY3VtZW50cyBvZiB0aGUgSW50ZXJuZXQgRW5naW5lZXJp bmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbnRlcm5ldC1EcmFmdHMg YXJlIHdvcmtpbmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRlcm5ldCBFbmdpbmVlcmluZzwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGFzayBGb3JjZSAoSUVURikuICBOb3Rl IHRoYXQgb3RoZXIgZ3JvdXBzIG1heSBhbHNvIGRpc3RyaWJ1dGU8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBUYXNrIEZvcmNlIChJRVRGKS4gIE5vdGUgdGhhdCBvdGhl ciBncm91cHMgbWF5IGFsc28gZGlzdHJpYnV0ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgd29ya2luZyBkb2N1bWVudHMgYXMgSW50ZXJuZXQtRHJhZnRzLiAgVGhlIGxp c3Qgb2YgY3VycmVudCBJbnRlcm5ldC08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICB3b3JraW5nIGRvY3VtZW50cyBhcyBJbnRlcm5ldC1EcmFmdHMuICBUaGUgbGlzdCBv ZiBjdXJyZW50IEludGVybmV0LTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg RHJhZnRzIGlzIGF0IGh0dHA6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kcmFmdHMvY3VycmVu dC8uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRHJhZnRzIGlzIGF0IGh0 dHA6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kcmFmdHMvY3VycmVudC8uPC90ZD48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEludGVybmV0LURyYWZ0cyBhcmUg ZHJhZnQgZG9jdW1lbnRzIHZhbGlkIGZvciBhIG1heGltdW0gb2Ygc2l4IG1vbnRoczwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEludGVybmV0LURyYWZ0cyBhcmUgZHJh ZnQgZG9jdW1lbnRzIHZhbGlkIGZvciBhIG1heGltdW0gb2Ygc2l4IG1vbnRoczwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYW5kIG1heSBiZSB1cGRhdGVkLCByZXBsYWNl ZCwgb3Igb2Jzb2xldGVkIGJ5IG90aGVyIGRvY3VtZW50cyBhdCBhbnk8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhbmQgbWF5IGJlIHVwZGF0ZWQsIHJlcGxhY2VkLCBv ciBvYnNvbGV0ZWQgYnkgb3RoZXIgZG9jdW1lbnRzIGF0IGFueTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgdGltZS4gIEl0IGlzIGluYXBwcm9wcmlhdGUgdG8gdXNlIElu dGVybmV0LURyYWZ0cyBhcyByZWZlcmVuY2U8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICB0aW1lLiAgSXQgaXMgaW5hcHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJh ZnRzIGFzIHJlZmVyZW5jZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbWF0 ZXJpYWwgb3IgdG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJvZ3Jlc3Mu IjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG1hdGVyaWFsIG9yIHRvIGNp dGUgdGhlbSBvdGhlciB0aGFuIGFzICJ3b3JrIGluIHByb2dyZXNzLiI8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAw MyI+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj4gICBUaGlzIEludGVybmV0LURyYWZ0IHdpbGwgZXhwaXJlIG9u IDxzcGFuIGNsYXNzPSJkZWxldGUiPlNlcHRlbWJlciAxMTwvc3Bhbj4sIDIwMTYuPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIFRoaXMgSW50ZXJuZXQtRHJhZnQgd2ls bCBleHBpcmUgb24gPHNwYW4gY2xhc3M9Imluc2VydCI+T2N0b2JlciA3PC9zcGFuPiwgMjAx Ni48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+Q29weXJpZ2h0 IE5vdGljZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPkNvcHlyaWdodCBOb3Rp Y2U8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQ29weXJp Z2h0IChjKSAyMDE2IElFVEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25zIGlkZW50aWZpZWQgYXMg dGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQ29weXJpZ2h0IChjKSAy MDE2IElFVEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25zIGlkZW50aWZpZWQgYXMgdGhlPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBkb2N1bWVudCBhdXRob3JzLiAgQWxsIHJp Z2h0cyByZXNlcnZlZC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBkb2N1 bWVudCBhdXRob3JzLiAgQWxsIHJpZ2h0cyByZXNlcnZlZC48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhpcyBkb2N1bWVudCBpcyBzdWJqZWN0IHRv IEJDUCA3OCBhbmQgdGhlIElFVEYgVHJ1c3QncyBMZWdhbDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIFRoaXMgZG9jdW1lbnQgaXMgc3ViamVjdCB0byBCQ1AgNzggYW5k IHRoZSBJRVRGIFRydXN0J3MgTGVnYWw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIFByb3Zpc2lvbnMgUmVsYXRpbmcgdG8gSUVURiBEb2N1bWVudHM8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBQcm92aXNpb25zIFJlbGF0aW5nIHRvIElFVEYgRG9j dW1lbnRzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAoaHR0cDovL3RydXN0 ZWUuaWV0Zi5vcmcvbGljZW5zZS1pbmZvKSBpbiBlZmZlY3Qgb24gdGhlIGRhdGUgb2Y8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAoaHR0cDovL3RydXN0ZWUuaWV0Zi5v cmcvbGljZW5zZS1pbmZvKSBpbiBlZmZlY3Qgb24gdGhlIGRhdGUgb2Y8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHB1YmxpY2F0aW9uIG9mIHRoaXMgZG9jdW1lbnQuICBQ bGVhc2UgcmV2aWV3IHRoZXNlIGRvY3VtZW50czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIHB1YmxpY2F0aW9uIG9mIHRoaXMgZG9jdW1lbnQuICBQbGVhc2UgcmV2aWV3 IHRoZXNlIGRvY3VtZW50czwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHIgaWQ9InBhcnQtMyIgY2xhc3M9ImNoYW5nZSIgPjx0ZD48L3Rk Pjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48YSBocmVmPSIjcGFy dC0zIj48ZW0+IHBhZ2UgMiwgbGluZSAzMjxzcGFuIGNsYXNzPSJoaWRlIj4gJnBhcmE7PC9z cGFuPjwvZW0+PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hh bmdlIGF0PC9zbWFsbD48YSBocmVmPSIjcGFydC0zIj48ZW0+IHBhZ2UgMiwgbGluZSAzMjxz cGFuIGNsYXNzPSJoaWRlIj4gJnBhcmE7PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgICA5LjEuICBEUk1QIEFWUCAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gIDExPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICA5LjEuICBEUk1QIEFWUCAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gIDExPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAg IDkuMi4gIEF0dHJpYnV0ZSBWYWx1ZSBQYWlyIGZsYWcgcnVsZXMgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAgMTI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgIDku Mi4gIEF0dHJpYnV0ZSBWYWx1ZSBQYWlyIGZsYWcgcnVsZXMgLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAgMTI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDEwLiBJQU5B IENvbnNpZGVyYXRpb25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuICAxMjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIDEwLiBJQU5BIENv bnNpZGVyYXRpb25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu ICAxMjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAxMC4xLiAgQVZQIGNv ZGVzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDEy PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAxMC4xLiAgQVZQIGNvZGVz ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDEyPC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgIDEwLjIuICBOZXcgcmVnaXN0cmll cyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTI8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgIDEwLjIuICBOZXcgcmVnaXN0cmllcyAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTI8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDExLiBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxMjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIDExLiBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxMjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgICAxMS4xLiAgUG90ZW50aWFsIFRocmVhdCBNb2RlcyAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDEzPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgICAxMS4xLiAgUG90ZW50aWFsIFRocmVhdCBNb2RlcyAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDEzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICAgIDExLjIuICBEZW5pYWwgb2YgU2VydmljZSBBdHRhY2tzICAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICAgIDExLjIuICBEZW5pYWwgb2YgU2VydmljZSBBdHRhY2tzICAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAgMTQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgICAgMTEuMy4gIEVuZC10byBFbmQtU2VjdXJpdHkgSXNzdWVzIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICAxNDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg ICAgMTEuMy4gIEVuZC10byBFbmQtU2VjdXJpdHkgSXNzdWVzIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuICAxNDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgMTIu IENvbnRyaWJ1dG9ycyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gIDE0PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgMTIuIENv bnRyaWJ1dG9ycyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gIDE0PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIg aWQ9ImRpZmYwMDA0Ij48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDEzLiBSZWZlcmVuY2VzICAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA8c3BhbiBjbGFz cz0iZGVsZXRlIj4xNDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ ICAgMTMuIFJlZmVyZW5jZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gIDxzcGFuIGNsYXNzPSJpbnNlcnQiPjE1PC9zcGFuPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgIDEzLjEuICBOb3JtYXRpdmUgUmVmZXJl bmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgPHNwYW4gY2xhc3M9 ImRlbGV0ZSI+MTQ8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg ICAgMTMuMS4gIE5vcm1hdGl2ZSBSZWZlcmVuY2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij4xNTwvc3Bhbj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgMTMuMi4gIEluZm9ybWF0aXZlIFJlZmVyZW5j ZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxNTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgMTMuMi4gIEluZm9ybWF0aXZlIFJlZmVyZW5jZXMg LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxNTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgQXV0aG9yJ3MgQWRkcmVzcyAgLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE1PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgQXV0aG9yJ3MgQWRkcmVzcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE1PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjEuICBJbnRyb2R1Y3Rpb248L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4xLiAgSW50cm9kdWN0aW9uPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDUiPjx0ZD48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+ICAgVGhlIDxzcGFuIGNsYXNzPSJkZWxldGUiPkRPSUM8L3NwYW4+IHNvbHV0aW9u IFtSRkM3NjgzXSBmb3IgRGlhbWV0ZXIgb3ZlcmxvYWQgY29udHJvbCBpbnRyb2R1Y2VzPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIFRoZSA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij5EaWFtZXRlciBPdmVybG9hZCBJbmRpY2F0aW9uIENvbnZleWFuY2UgKERPSUMpPC9z cGFuPiBzb2x1dGlvbiBbUkZDNzY4M108L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+ICAgc2NlbmFyaW9zIHdoZXJlIERpYW1ldGVyIHJvdXRpbmcgZGVjaXNpb25zIG1hZGUg YnkgRGlhbWV0ZXIgbm9kZXMgY2FuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PiAgIGZvciBEaWFtZXRlciBvdmVybG9hZCBjb250cm9sIGludHJvZHVjZXMgc2NlbmFyaW9z IHdoZXJlIERpYW1ldGVyPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGJl IGluZmx1ZW5jZWQgYnkgdGhlIG92ZXJsb2FkIHN0YXRlIG9mIG90aGVyIERpYW1ldGVyIG5v ZGVzLiAgVGhpczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICByb3V0aW5n IGRlY2lzaW9ucyBtYWRlIGJ5IERpYW1ldGVyIG5vZGVzIGNhbiBiZSBpbmZsdWVuY2VkIGJ5 IHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBpbmNsdWRlcyB0aGUg c2NlbmFyaW9zIHdoZXJlIERpYW1ldGVyIGVuZHBvaW50cyBhbmQgRGlhbWV0ZXIgYWdlbnRz PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIG92ZXJsb2FkIHN0YXRlIG9m IG90aGVyIERpYW1ldGVyIG5vZGVzLiAgVGhpcyBpbmNsdWRlcyB0aGUgc2NlbmFyaW9zPC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGNhbiB0aHJvdHRsZSByZXF1ZXN0 cyBhcyBhIHJlc3VsdCBvZiB0aGUgdGFyZ2V0IGZvciB0aGUgcmVxdWVzdCBiZWluZzwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB3aGVyZSBEaWFtZXRlciBlbmRwb2lu dHMgYW5kIERpYW1ldGVyIGFnZW50cyBjYW4gdGhyb3R0bGUgcmVxdWVzdHMgYXM8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgb3ZlcmxvYWRlZC48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+ICAgYSByZXN1bHQgb2YgdGhlIHRhcmdldCBmb3IgdGhl IHJlcXVlc3QgYmVpbmcgb3ZlcmxvYWRlZC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgV2l0aCBjdXJyZW50bHkgYXZhaWxhYmxlIG1lY2hhbmlzbXMg dGhlc2UgRGlhbWV0ZXIgbm9kZXMgZG8gbm90IGhhdmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICBXaXRoIGN1cnJlbnRseSBhdmFpbGFibGUgbWVjaGFuaXNtcyB0aGVz ZSBEaWFtZXRlciBub2RlcyBkbyBub3QgaGF2ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgYSBtZWNoYW5pc20gdG8gZGlmZmVyZW50aWF0ZSByZXF1ZXN0IG1lc3NhZ2Ug cHJpb3JpdGllcyB3aGVuIG1ha2luZzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIGEgbWVjaGFuaXNtIHRvIGRpZmZlcmVudGlhdGUgcmVxdWVzdCBtZXNzYWdlIHByaW9y aXRpZXMgd2hlbiBtYWtpbmc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRo ZXNlIHRocm90dGxpbmcgZGVjaXNpb25zLiAgQXMgc3VjaCwgYWxsIHJlcXVlc3RzIGFyZSB0 cmVhdGVkIHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRoZXNlIHRo cm90dGxpbmcgZGVjaXNpb25zLiAgQXMgc3VjaCwgYWxsIHJlcXVlc3RzIGFyZSB0cmVhdGVk IHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgc2FtZSwgbWVhbmluZyB0 aGF0IGFsbCByZXF1ZXN0cyBoYXZlIHRoZSBzYW1lIHByb2JhYmlsaXR5IG9mIGJlaW5nPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgc2FtZSwgbWVhbmluZyB0aGF0IGFs bCByZXF1ZXN0cyBoYXZlIHRoZSBzYW1lIHByb2JhYmlsaXR5IG9mIGJlaW5nPC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aHJvdHRsZWQuPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgdGhyb3R0bGVkLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGVyZSBhcmUgc2NlbmFyaW9zIHdoZXJlIHRyZWF0aW5n IGFsbCByZXF1ZXN0cyB0aGUgc2FtZSBjYW4gY2F1c2U8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICBUaGVyZSBhcmUgc2NlbmFyaW9zIHdoZXJlIHRyZWF0aW5nIGFsbCBy ZXF1ZXN0cyB0aGUgc2FtZSBjYW4gY2F1c2U8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDYiPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgaXNzdWVz LiAgRm9yIDxzcGFuIGNsYXNzPSJkZWxldGUiPmluc3RhbmNlPC9zcGFuPiBpdCBtaWdodCBi ZSBjb25zaWRlcmVkIGltcG9ydGFudCB0byByZWR1Y2UgdGhlPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPiAgIGlzc3Vlcy4gIEZvciA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5p bnN0YW5jZSw8L3NwYW4+IGl0IG1pZ2h0IGJlIGNvbnNpZGVyZWQgaW1wb3J0YW50IHRvIHJl ZHVjZSB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgcHJvYmFiaWxp dHkgb2YgdHJhbnNhY3Rpb25zIGludm9sdmluZyBmaXJzdCByZXNwb25kZXJzIGR1cmluZyBh PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHByb2JhYmlsaXR5IG9mIHRy YW5zYWN0aW9ucyBpbnZvbHZpbmcgZmlyc3QgcmVzcG9uZGVycyA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij5iZWluZzwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAg cGVyaW9kIG9mIGhlYXZ5IHNpZ25hbGluZyByZXN1bHRpbmcgZnJvbSBhIG5hdHVyYWwgPHNw YW4gY2xhc3M9ImRlbGV0ZSI+ZGlzYXN0ZXIgYmVpbmc8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHRocm90dGxlZDwv c3Bhbj4gZHVyaW5nIDxzcGFuIGNsYXNzPSJpbnNlcnQiPm92ZXJsb2FkIHNjZW5hcmlvcyBj YXVzZWQsIGZvciBleGFtcGxlLCBieTwvc3Bhbj4gYSBwZXJpb2Q8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgdGhyb3R0bGVkIGR1 cmluZyBvdmVybG9hZCBzY2VuYXJpb3MuPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj4gICBvZiBoZWF2eSBzaWduYWxpbmcgcmVzdWx0aW5nIGZyb20gYSBuYXR1 cmFsIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmRpc2FzdGVyLjwvc3Bhbj48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhpcyBkb2N1bWVudCBkZWZpbmVz IGEgbWVjaGFuaXNtIHRoYXQgYWxsb3dzIERpYW1ldGVyIG5vZGVzIHRvPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhpcyBkb2N1bWVudCBkZWZpbmVzIGEgbWVjaGFu aXNtIHRoYXQgYWxsb3dzIERpYW1ldGVyIG5vZGVzIHRvPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBpbmRpY2F0ZSB0aGUgcmVsYXRpdmUgcHJpb3JpdHkgb2YgRGlhbWV0 ZXIgdHJhbnNhY3Rpb25zLiAgV2l0aCB0aGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgaW5kaWNhdGUgdGhlIHJlbGF0aXZlIHByaW9yaXR5IG9mIERpYW1ldGVyIHRy YW5zYWN0aW9ucy4gIFdpdGggdGhpczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgaW5mb3JtYXRpb24gb3RoZXIgRGlhbWV0ZXIgbm9kZXMgY2FuIGZhY3RvciB0aGUgcmVs YXRpdmUgcHJpb3JpdHkgb2Y8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBp bmZvcm1hdGlvbiBvdGhlciBEaWFtZXRlciBub2RlcyBjYW4gZmFjdG9yIHRoZSByZWxhdGl2 ZSBwcmlvcml0eSBvZjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgcmVxdWVz dHMgaW50byByb3V0aW5nIGFuZCB0aHJvdHRsaW5nIGRlY2lzaW9ucy48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICByZXF1ZXN0cyBpbnRvIHJvdXRpbmcgYW5kIHRocm90 dGxpbmcgZGVjaXNpb25zLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4yLiAgVGVybWlub2xvZ3kgYW5kIEFiYnJldmlhdGlvbnM8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4yLiAgVGVybWlub2xvZ3kgYW5kIEFiYnJldmlhdGlvbnM8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgRGl2ZXJzaW9uPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRGl2ZXJzaW9uPC90ZD48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy IGlkPSJwYXJ0LTQiIGNsYXNzPSJjaGFuZ2UiID48dGQ+PC90ZD48dGg+PHNtYWxsPnNraXBw aW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iI3BhcnQtNCI+PGVtPiBwYWdlIDMs IGxpbmUgNDY8c3BhbiBjbGFzcz0iaGlkZSI+ICZwYXJhOzwvc3Bhbj48L2VtPjwvYT48L3Ro Pjx0aD4gPC90aD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEg aHJlZj0iI3BhcnQtNCI+PGVtPiBwYWdlIDMsIGxpbmUgNDY8c3BhbiBjbGFzcz0iaGlkZSI+ ICZwYXJhOzwvc3Bhbj48L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIG5vZGUuICBB YmF0ZW1lbnQgYWN0aW9ucyBpbmNsdWRlIGRpdmVyc2lvbiBhbmQgdGhyb3R0bGluZy48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBub2RlLiAgQWJhdGVtZW50IGFj dGlvbnMgaW5jbHVkZSBkaXZlcnNpb24gYW5kIHRocm90dGxpbmcuPC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFByaW9yaXR5PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgUHJpb3JpdHk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgVGhlIHJlbGF0aXZlIGltcG9ydGFuY2Ugb2YgYSBE aWFtZXRlciBtZXNzYWdlLiAgQSBsb3dlciBwcmlvcml0eTwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgICAgIFRoZSByZWxhdGl2ZSBpbXBvcnRhbmNlIG9mIGEgRGlhbWV0 ZXIgbWVzc2FnZS4gIEEgbG93ZXIgcHJpb3JpdHk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgICAgIHZhbHVlIGltcGxpZXMgYSBoaWdoZXIgcmVsYXRpdmUgaW1wb3J0YW5j ZSBvZiB0aGUgbWVzc2FnZS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAg ICB2YWx1ZSBpbXBsaWVzIGEgaGlnaGVyIHJlbGF0aXZlIGltcG9ydGFuY2Ugb2YgdGhlIG1l c3NhZ2UuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRo cm90dGxpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaHJvdHRsaW5n PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIEFzIGRl ZmluZWQgaW4gW1JGQzc2ODNdLiAgQW4gYWJhdGVtZW50IHRyZWF0bWVudCB0aGF0IGxpbWl0 cyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBBcyBkZWZpbmVk IGluIFtSRkM3NjgzXS4gIEFuIGFiYXRlbWVudCB0cmVhdG1lbnQgdGhhdCBsaW1pdHMgdGhl PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRpZmYw MDA3Ij48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgIG51bWJlciBvZiByZXF1ZXN0cyBzZW50IGJ5IHRo ZSBEPHNwYW4gY2xhc3M9ImRlbGV0ZSI+SU88L3NwYW4+QyByZWFjdGluZyBub2RlLiAgVGhy b3R0bGluZyBjYW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgbnVt YmVyIG9mIHJlcXVlc3RzIHNlbnQgYnkgdGhlIEQ8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5PSTwv c3Bhbj5DIHJlYWN0aW5nIG5vZGUuICBUaHJvdHRsaW5nIGNhbjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgICAgaW5jbHVkZSBhIERpYW1ldGVyIENsaWVudCBjaG9vc2lu ZyB0byBub3Qgc2VuZCByZXF1ZXN0cywgb3IgYTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgICAgIGluY2x1ZGUgYSBEaWFtZXRlciBDbGllbnQgY2hvb3NpbmcgdG8gbm90 IHNlbmQgcmVxdWVzdHMsIG9yIGE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg ICAgIERpYW1ldGVyIEFnZW50IG9yIFNlcnZlciByZWplY3RpbmcgcmVxdWVzdHMgd2l0aCBh cHByb3ByaWF0ZSBlcnJvcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAg IERpYW1ldGVyIEFnZW50IG9yIFNlcnZlciByZWplY3RpbmcgcmVxdWVzdHMgd2l0aCBhcHBy b3ByaWF0ZSBlcnJvcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgcmVz cG9uc2VzLiAgSW4gYm90aCBjYXNlcyB0aGUgcmVzdWx0IG9mIHRoZSB0aHJvdHRsaW5nIGlz IGE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICByZXNwb25zZXMuICBJ biBib3RoIGNhc2VzIHRoZSByZXN1bHQgb2YgdGhlIHRocm90dGxpbmcgaXMgYTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgcGVybWFuZW50IHJlamVjdGlvbiBvZiB0 aGUgdHJhbnNhY3Rpb24uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAg cGVybWFuZW50IHJlamVjdGlvbiBvZiB0aGUgdHJhbnNhY3Rpb24uPC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjMuICBDb252ZW50aW9ucyBVc2VkIGluIFRo aXMgRG9jdW1lbnQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4zLiAgQ29udmVu dGlvbnMgVXNlZCBpbiBUaGlzIERvY3VtZW50PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIFRoZSBrZXkgd29yZHMgIk1VU1QiLCAiTVVTVCBOT1QiLCAi UkVRVUlSRUQiLCAiU0hBTEwiLCAiU0hBTEwgTk9UIiw8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICBUaGUga2V5IHdvcmRzICJNVVNUIiwgIk1VU1QgTk9UIiwgIlJFUVVJ UkVEIiwgIlNIQUxMIiwgIlNIQUxMIE5PVCIsPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICAiU0hPVUxEIiwgIlNIT1VMRCBOT1QiLCAiUkVDT01NRU5ERUQiLCAiTUFZIiwg YW5kICJPUFRJT05BTCIgaW4gdGhpczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICJTSE9VTEQiLCAiU0hPVUxEIE5PVCIsICJSRUNPTU1FTkRFRCIsICJNQVkiLCBhbmQg Ik9QVElPTkFMIiBpbiB0aGlzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBk b2N1bWVudCBhcmUgdG8gYmUgaW50ZXJwcmV0ZWQgYXMgZGVzY3JpYmVkIGluIFJGQyAyMTE5 IFtSRkMyMTE5XS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBkb2N1bWVu dCBhcmUgdG8gYmUgaW50ZXJwcmV0ZWQgYXMgZGVzY3JpYmVkIGluIFJGQyAyMTE5IFtSRkMy MTE5XS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyIGlkPSJwYXJ0LTUiIGNsYXNzPSJjaGFuZ2UiID48dGQ+PC90ZD48dGg+PHNtYWxs PnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iI3BhcnQtNSI+PGVtPiBw YWdlIDQsIGxpbmUgNTI8c3BhbiBjbGFzcz0iaGlkZSI+ICZwYXJhOzwvc3Bhbj48L2VtPjwv YT48L3RoPjx0aD4gPC90aD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21h bGw+PGEgaHJlZj0iI3BhcnQtNSI+PGVtPiBwYWdlIDQsIGxpbmUgNTI8c3BhbiBjbGFzcz0i aGlkZSI+ICZwYXJhOzwvc3Bhbj48L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgSXQgaXMgYWxzbyBlbnZpc2lvbmVkIHRoYXQgRFJNUCBwcmlvcml0eSBpbmZvcm1h dGlvbiBjb3VsZCBiZSB1c2VkIGJ5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgSXQgaXMgYWxzbyBlbnZpc2lvbmVkIHRoYXQgRFJNUCBwcmlvcml0eSBpbmZvcm1hdGlv biBjb3VsZCBiZSB1c2VkIGJ5PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBE aWFtZXRlciBlbmRwb2ludHMgdG8gbWFrZSByZXNvdXJjZSBhbGxvY2F0aW9uIGRlY2lzaW9u cy4gIEZvcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIERpYW1ldGVyIGVu ZHBvaW50cyB0byBtYWtlIHJlc291cmNlIGFsbG9jYXRpb24gZGVjaXNpb25zLiAgRm9yPC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpbnN0YW5jZSwgYSBEaWFtZXRlciBT ZXJ2ZXIgbWlnaHQgY2hvb3NlIHRvIHVzZSB0aGUgcHJpb3JpdHk8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBpbnN0YW5jZSwgYSBEaWFtZXRlciBTZXJ2ZXIgbWlnaHQg Y2hvb3NlIHRvIHVzZSB0aGUgcHJpb3JpdHk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIGluZm9ybWF0aW9uIHRvIHRyZWF0IGhpZ2hlciBwcmlvcml0eSByZXF1ZXN0cyBh aGVhZCBvZiBsb3dlciBwcmlvcml0eTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIGluZm9ybWF0aW9uIHRvIHRyZWF0IGhpZ2hlciBwcmlvcml0eSByZXF1ZXN0cyBhaGVh ZCBvZiBsb3dlciBwcmlvcml0eTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg cmVxdWVzdHMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcmVxdWVzdHMu PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIE5vdGU6 IFRoZXJlIGFyZSBhIG51bWJlciBvZiBhcHBsaWNhdGlvbiBzcGVjaWZpYyBkZWZpbml0aW9u czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIE5vdGU6IFRoZXJlIGFy ZSBhIG51bWJlciBvZiBhcHBsaWNhdGlvbiBzcGVjaWZpYyBkZWZpbml0aW9uczwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgaW5kaWNhdGluZyB2YXJpb3VzIHZpZXdz IG9mIGFwcGxpY2F0aW9uIGxldmVsIHByaW9yaXR5IGZvcjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgICAgIGluZGljYXRpbmcgdmFyaW91cyB2aWV3cyBvZiBhcHBsaWNh dGlvbiBsZXZlbCBwcmlvcml0eSBmb3I8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgICAgIGRpZmZlcmVudCByZXF1ZXN0cy4gIFVzaW5nIHRoZXNlIGFwcGxpY2F0aW9uIHNw ZWNpZmljIHByaW9yaXR5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAg ZGlmZmVyZW50IHJlcXVlc3RzLiAgVXNpbmcgdGhlc2UgYXBwbGljYXRpb24gc3BlY2lmaWMg cHJpb3JpdHk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBp ZD0iZGlmZjAwMDgiPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+ QVZQczwvc3Bhbj4gYXMgaW5wdXQgdG8gdGhyb3R0bGluZyBhbmQgb3RoZXIgRGlhbWV0ZXIg cm91dGluZyBkZWNpc2lvbnM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAg ICAgPHNwYW4gY2xhc3M9Imluc2VydCI+QXR0cmlidXRlIFZhbHVlIFBhaXJzIChBVlBzKTwv c3Bhbj4gYXMgaW5wdXQgdG8gdGhyb3R0bGluZyBhbmQgb3RoZXI8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+ICAgICAgd291bGQgcmVxdWlyZSBEaWFtZXRlciBhZ2VudHMg dG8gdW5kZXJzdGFuZCBhbGwgYXBwbGljYXRpb25zIGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj4gICAgICBEaWFtZXRlciByb3V0aW5nIGRlY2lzaW9ucyB3b3VsZCBy ZXF1aXJlIERpYW1ldGVyIGFnZW50cyB0bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj4gICAgICBkbyBhcHBsaWNhdGlvbiBzcGVjaWZpYyBwYXJzaW5nIG9mIGFsbCBtZXNz YWdlcyBpbiBvcmRlciB0bzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAg ICB1bmRlcnN0YW5kIGFsbCBhcHBsaWNhdGlvbnMgYW5kIGRvIGFwcGxpY2F0aW9uIHNwZWNp ZmljIHBhcnNpbmcgb2Y8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAg ZGV0ZXJtaW5lIHRoZSBwcmlvcml0eSBvZiBpbmRpdmlkdWFsIG1lc3NhZ2VzLiAgVGhpcyBp cyBjb25zaWRlcmVkPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgIGFs bCBtZXNzYWdlcyBpbiBvcmRlciB0byBkZXRlcm1pbmUgdGhlIHByaW9yaXR5IG9mIGluZGl2 aWR1YWw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgYW4gdW5hY2Nl cHRhYmxlIGxldmVsIG9mIGNvbXBsZXhpdHkgdG8gcHV0IG9uIGVsZW1lbnRzIHdob3NlPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgIG1lc3NhZ2VzLiAgVGhpcyBp cyBjb25zaWRlcmVkIGFuIHVuYWNjZXB0YWJsZSBsZXZlbCBvZiBjb21wbGV4aXR5PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgIHByaW1hcnkgcmVzcG9uc2liaWxp dHkgaXMgdG8gcm91dGUgRGlhbWV0ZXIgbWVzc2FnZXMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPiAgICAgIHRvIHB1dCBvbiBlbGVtZW50cyB3aG9zZSBwcmltYXJ5IHJl c3BvbnNpYmlsaXR5IGlzIHRvIHJvdXRlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICBEaWFtZXRlciBt ZXNzYWdlcy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+NS4g IFVzZSBDYXNlczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjUuICBVc2UgQ2Fz ZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhpcyBz ZWN0aW9uIGRpc2N1c3NlcyB2YXJpb3VzIHNjZW5hcmlvcyB3aGVyZSBEaWFtZXRlciB0cmFu c2FjdGlvbnM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGlzIHNlY3Rp b24gZGlzY3Vzc2VzIHZhcmlvdXMgc2NlbmFyaW9zIHdoZXJlIERpYW1ldGVyIHRyYW5zYWN0 aW9uczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgY2FuIGJlbmVmaXQgZnJv bSB0aGUgdXNlIG9mIHByaW9yaXR5IGluZm9ybWF0aW9uLjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIGNhbiBiZW5lZml0IGZyb20gdGhlIHVzZSBvZiBwcmlvcml0eSBp bmZvcm1hdGlvbi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ NS4xLiAgRmlyc3QgUmVzcG9uZGVyIFJlbGF0ZWQgU2lnbmFsaW5nPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+NS4xLiAgRmlyc3QgUmVzcG9uZGVyIFJlbGF0ZWQgU2lnbmFs aW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIE5hdHVy YWwgZGlzYXN0ZXJzIGNhbiByZXN1bHQgaW4gYSBjb25zaWRlcmFibGUgaW5jcmVhc2UgaW4g dXNhZ2Ugb2Y8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBOYXR1cmFsIGRp c2FzdGVycyBjYW4gcmVzdWx0IGluIGEgY29uc2lkZXJhYmxlIGluY3JlYXNlIGluIHVzYWdl IG9mPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBuZXR3b3JrIHJlc291cmNl cy4gIFRoaXMgY2FuIGJlIG1hZGUgd29yc2UgaWYgdGhlIGRpc2FzdGVyIHJlc3VsdHMgaW48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBuZXR3b3JrIHJlc291cmNlcy4g IFRoaXMgY2FuIGJlIG1hZGUgd29yc2UgaWYgdGhlIGRpc2FzdGVyIHJlc3VsdHMgaW48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlk PSJwYXJ0LTYiIGNsYXNzPSJjaGFuZ2UiID48dGQ+PC90ZD48dGg+PHNtYWxsPnNraXBwaW5n IHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iI3BhcnQtNiI+PGVtPiBwYWdlIDYsIGxp bmUgMTI8c3BhbiBjbGFzcz0iaGlkZSI+ICZwYXJhOzwvc3Bhbj48L2VtPjwvYT48L3RoPjx0 aD4gPC90aD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJl Zj0iI3BhcnQtNiI+PGVtPiBwYWdlIDYsIGxpbmUgMTI8c3BhbiBjbGFzcz0iaGlkZSI+ICZw YXJhOzwvc3Bhbj48L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGVtZXJnZW5jeSBjYWxs cywgdGhpcyBzaWduYWxpbmcgc2hvdWxkIGFsc28gYmUgZ2l2ZW4gcHJlZmVyZW50aWFsPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZW1lcmdlbmN5IGNhbGxzLCB0aGlz IHNpZ25hbGluZyBzaG91bGQgYWxzbyBiZSBnaXZlbiBwcmVmZXJlbnRpYWw8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRyZWF0bWVudCB3aGVuIHBvc3NpYmxlLjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRyZWF0bWVudCB3aGVuIHBvc3NpYmxl LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij41LjMuICBEaWZm ZXJlbnRpYXRlZCBTZXJ2aWNlczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjUu My4gIERpZmZlcmVudGlhdGVkIFNlcnZpY2VzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIE9wZXJhdG9ycyBtYXkgZGVzaXJlIHRvIGRpZmZlcmVudGlh dGUgbmV0d29yay1iYXNlZCBzZXJ2aWNlcyBieTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIE9wZXJhdG9ycyBtYXkgZGVzaXJlIHRvIGRpZmZlcmVudGlhdGUgbmV0d29y ay1iYXNlZCBzZXJ2aWNlcyBieTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg cHJvdmlkaW5nIGEgc2VydmljZSBsZXZlbCBhZ3JlZW1lbnQgdGhhdCBpbmNsdWRlcyBwcmVm ZXJlbnRpYWw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBwcm92aWRpbmcg YSBzZXJ2aWNlIGxldmVsIGFncmVlbWVudCB0aGF0IGluY2x1ZGVzIHByZWZlcmVudGlhbDwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgRGlhbWV0ZXIgcm91dGluZyBiZWhh dmlvci4gIFRoaXMgbWlnaHQsIGZvciBleGFtcGxlLCBiZSBtb2RlbGVkIGFzPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRGlhbWV0ZXIgcm91dGluZyBiZWhhdmlvci4g IFRoaXMgbWlnaHQsIGZvciBleGFtcGxlLCBiZSBtb2RlbGVkIGFzPC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICBQbGF0aW51bSwgR29sZCBhbmQgU2lsdmVyIGxldmVscyBv ZiBzZXJ2aWNlLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFBsYXRpbnVt LCBHb2xkIGFuZCBTaWx2ZXIgbGV2ZWxzIG9mIHNlcnZpY2UuPC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMDkiPjx0 ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+ICAgSW4gdGhpcyBzY2VuYXJpbyBhbiBvcGVyYXRvciBtaWdodCBvZmZl ciBhIFBsYXRpbnVtIFNMQSB0aDxzcGFuIGNsYXNzPSJkZWxldGUiPmU8L3NwYW4+IGluY2x1 ZGVzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIEluIHRoaXMgc2NlbmFy aW8gYW4gb3BlcmF0b3IgbWlnaHQgb2ZmZXIgYSBQbGF0aW51bSBTTEEgdGg8c3BhbiBjbGFz cz0iaW5zZXJ0Ij5hdDwvc3Bhbj4gaW5jbHVkZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIGVuc3VyaW5nIHRoYXQgYWxsIHNpZ25hbGluZyBmb3IgYSBjdXN0b21lciB3 aG8gcHVyY2hhc2VzIHRoZSBQbGF0aW51bTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIGVuc3VyaW5nIHRoYXQgYWxsIHNpZ25hbGluZyBmb3IgYSBjdXN0b21lciB3aG8g cHVyY2hhc2VzIHRoZSBQbGF0aW51bTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgc2VydmljZSBiZWluZyBtYXJrZWQgYXMgaGF2aW5nIGEgaGlnaGVyIHByaW9yaXR5IHRo YW4gc2lnbmFsaW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgc2Vydmlj ZSBiZWluZyBtYXJrZWQgYXMgaGF2aW5nIGEgaGlnaGVyIHByaW9yaXR5IHRoYW4gc2lnbmFs aW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhc3NvY2lhdGVkIHdpdGgg R29sZCBhbmQgU2lsdmVyIGN1c3RvbWVycy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICBhc3NvY2lhdGVkIHdpdGggR29sZCBhbmQgU2lsdmVyIGN1c3RvbWVycy48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+NS40LiAgQXBwbGljYXRp b24gU3BlY2lmaWMgUHJpb3JpdGllczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjUuNC4gIEFwcGxpY2F0aW9uIFNwZWNpZmljIFByaW9yaXRpZXM8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhlcmUgYXJlIHNjZW5hcmlvcyB3aXRo aW4gRGlhbWV0ZXIgYXBwbGljYXRpb25zIHdoZXJlIGl0IG1pZ2h0IGJlPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhlcmUgYXJlIHNjZW5hcmlvcyB3aXRoaW4gRGlh bWV0ZXIgYXBwbGljYXRpb25zIHdoZXJlIGl0IG1pZ2h0IGJlPC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBhcHByb3ByaWF0ZSB0byBnaXZlIGEgc3Vic2V0IG9mIHRoZSB0 cmFuc2FjdGlvbnMgZm9yIHRoZSBhcHBsaWNhdGlvbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIGFwcHJvcHJpYXRlIHRvIGdpdmUgYSBzdWJzZXQgb2YgdGhlIHRyYW5z YWN0aW9ucyBmb3IgdGhlIGFwcGxpY2F0aW9uPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBhIGhpZ2hlciBwcmlvcml0eSB0aGFuIG90aGVyIHRyYW5zYWN0aW9ucyBmb3Ig dGhhdCBhcHBsaWNhdGlvbi48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBh IGhpZ2hlciBwcmlvcml0eSB0aGFuIG90aGVyIHRyYW5zYWN0aW9ucyBmb3IgdGhhdCBhcHBs aWNhdGlvbi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHIgaWQ9InBhcnQtNyIgY2xhc3M9ImNoYW5nZSIgPjx0ZD48 L3RkPjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48YSBocmVmPSIj cGFydC03Ij48ZW0+IHBhZ2UgNiwgbGluZSA0ODxzcGFuIGNsYXNzPSJoaWRlIj4gJnBhcmE7 PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48c21hbGw+c2tpcHBpbmcgdG8g Y2hhbmdlIGF0PC9zbWFsbD48YSBocmVmPSIjcGFydC03Ij48ZW0+IHBhZ2UgNiwgbGluZSA0 ODxzcGFuIGNsYXNzPSJoaWRlIj4gJnBhcmE7PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGVyZSBhcmUgYWxzbyBzY2VuYXJpb3Mgd2hlcmUgdGhl IHByaW9yaXR5IG9mIHJlcXVlc3RzIGZvcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIFRoZXJlIGFyZSBhbHNvIHNjZW5hcmlvcyB3aGVyZSB0aGUgcHJpb3JpdHkgb2Yg cmVxdWVzdHMgZm9yPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpbmRpdmlk dWFsIGNvbW1hbmQgY29kZXMgd2l0aGluIGFuIGFwcGxpY2F0aW9uIGRlcGVuZHMgb24gdGhl IGNvbnRleHQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBpbmRpdmlkdWFs IGNvbW1hbmQgY29kZXMgd2l0aGluIGFuIGFwcGxpY2F0aW9uIGRlcGVuZHMgb24gdGhlIGNv bnRleHQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRoYXQgZXhpc3RzIHdo ZW4gdGhlIHJlcXVlc3QgaXMgc2VudC4gIFRoZXJlIGlzbid0IGFsd2F5cyBpbmZvcm1hdGlv bjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRoYXQgZXhpc3RzIHdoZW4g dGhlIHJlcXVlc3QgaXMgc2VudC4gIFRoZXJlIGlzbid0IGFsd2F5cyBpbmZvcm1hdGlvbjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgaW4gdGhlIG1lc3NhZ2UgZnJvbSB3 aGljaCB0aGlzIGNvbnRleHQgY2FuIGJlIGRldGVybWluZWQgYnkgRGlhbWV0ZXI8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBpbiB0aGUgbWVzc2FnZSBmcm9tIHdoaWNo IHRoaXMgY29udGV4dCBjYW4gYmUgZGV0ZXJtaW5lZCBieSBEaWFtZXRlcjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbm9kZXMgb3RoZXIgdGhhbiB0aGUgbm9kZSB0aGF0 IG9yaWdpbmF0ZXMgdGhlIHJlcXVlc3QuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgbm9kZXMgb3RoZXIgdGhhbiB0aGUgbm9kZSB0aGF0IG9yaWdpbmF0ZXMgdGhlIHJl cXVlc3QuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRo aXMgaXMgc2ltaWxhciB0byB0aGUgc2NlbmFyaW8gd2hlcmUgYSBzZXJpZXMgb2YgcmVxdWVz dHMgYXJlIG5lZWRlZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoaXMg aXMgc2ltaWxhciB0byB0aGUgc2NlbmFyaW8gd2hlcmUgYSBzZXJpZXMgb2YgcmVxdWVzdHMg YXJlIG5lZWRlZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdG8gYWNjZXNz IGEgbmV0d29yayBzZXJ2aWNlLiAgSXQgaXMgZGlmZmVyZW50IGluIHRoYXQgdGhlIHNlcmll cyBvZjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRvIGFjY2VzcyBhIG5l dHdvcmsgc2VydmljZS4gIEl0IGlzIGRpZmZlcmVudCBpbiB0aGF0IHRoZSBzZXJpZXMgb2Y8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHJlcXVlc3RzIGludm9sdmUgZGlm ZmVyZW50IGFwcGxpY2F0aW9uIGNvbW1hbmQgY29kZXMuICBJbiB0aGlzPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgcmVxdWVzdHMgaW52b2x2ZSBkaWZmZXJlbnQgYXBw bGljYXRpb24gY29tbWFuZCBjb2Rlcy4gIEluIHRoaXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMTAiPjx0ZD48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAg c2NlbmFyaW8gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+aXQgaXM8L3NwYW4+IHJlcXVlc3RzIHdp dGggdGhlIHNhbWUgY29tbWFuZCBjb2RlIDxzcGFuIGNsYXNzPSJkZWxldGUiPnRoYXQ8L3Nw YW4+IGhhdmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgc2NlbmFyaW8g cmVxdWVzdHMgd2l0aCB0aGUgc2FtZSBjb21tYW5kIGNvZGUgaGF2ZSBkaWZmZXJlbnQgaW1w bGllZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBkaWZmZXJlbnQgaW1w bGllZCBwcmlvcml0aWVzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBw cmlvcml0aWVzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHIgaWQ9ImRpZmYwMDExIj48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgIE9uZSBleGFt cGxlIG9mIHRoaXMgaXMgaW4gdGhlIDNHUFAgYXBwbGljYXRpb24gW1M2YV0gd2hlcmUgPHNw YW4gY2xhc3M9ImRlbGV0ZSI+YSBVTFI8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPiAgICAgIE9uZSBleGFtcGxlIG9mIHRoaXMgaXMgaW4gdGhlIDNHUFAgYXBw bGljYXRpb24gW1M2YV0gd2hlcmUgPHNwYW4gY2xhc3M9Imluc2VydCI+YW48L3NwYW4+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgIHJlcXVlc3QgcmVzdWx0aW5n IGZyb20gYW4gTU1FIChNb2JpbGl0eSBNYW5hZ2VtZW50IEVudGl0eSk8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgICAgVXBkYXRl IExvY2F0aW9uIFJlcXVlc3QgKFVMUik8L3NwYW4+IHJlcXVlc3QgcmVzdWx0aW5nIGZyb20g YW4gTU1FPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgIHJlc3RvcmF0 aW9uIHByb2NlZHVyZSBtaWdodCBiZSBnaXZlbiBhIGhpZ2hlciBwcmlvcml0eSB0aGFuIGEg VUxSPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgIChNb2JpbGl0eSBN YW5hZ2VtZW50IEVudGl0eSkgcmVzdG9yYXRpb24gcHJvY2VkdXJlIG1pZ2h0IGJlIGdpdmVu PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgIChVcGRhdGUgTG9jYXRp b24gUmVxdWVzdCkgcmVzdWx0aW5nIGZyb20gYW4gaW5pdGlhbCBhdHRhY2guPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgIGEgaGlnaGVyIHByaW9yaXR5IHRoYW4g YSBVTFIgKFVwZGF0ZSBMb2NhdGlvbiBSZXF1ZXN0KSByZXN1bHRpbmc8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PiAgICAgIGZyb20gYW4gaW5pdGlhbCBhdHRhY2guPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjYuICBUaGVvcnkgb2YgT3BlcmF0aW9uPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+Ni4gIFRoZW9yeSBvZiBPcGVyYXRpb248L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhpcyBzZWN0aW9uIG91dGxp bmVzIHRoZSBlbnZpc2lvbmVkIHVzYWdlIG9mIERSTVAuPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgVGhpcyBzZWN0aW9uIG91dGxpbmVzIHRoZSBlbnZpc2lvbmVkIHVz YWdlIG9mIERSTVAuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIFRoZSBleHBlY3RlZCBiZWhhdmlvciBkZXBlbmRzIG9uIHRoZSByb2xlIChyZXF1ZXN0 IHNlbmRlciwgYWdlbnQgb3I8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBU aGUgZXhwZWN0ZWQgYmVoYXZpb3IgZGVwZW5kcyBvbiB0aGUgcm9sZSAocmVxdWVzdCBzZW5k ZXIsIGFnZW50IG9yPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICByZXF1ZXN0 IGhhbmRsZXIpIG9mIHRoZSBEaWFtZXRlciBub2RlIGhhbmRsaW5nIHRoZSByZXF1ZXN0Ljwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHJlcXVlc3QgaGFuZGxlcikgb2Yg dGhlIERpYW1ldGVyIG5vZGUgaGFuZGxpbmcgdGhlIHJlcXVlc3QuPC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoZSBmb2xsb3dpbmcgYmVoYXZpb3Ig aXMgZXhwZWN0ZWQgZHVyaW5nIHRoZSBmbG93IG9mIGEgRGlhbWV0ZXI8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGUgZm9sbG93aW5nIGJlaGF2aW9yIGlzIGV4cGVj dGVkIGR1cmluZyB0aGUgZmxvdyBvZiBhIERpYW1ldGVyPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICB0cmFuc2FjdGlvbi48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICB0cmFuc2FjdGlvbi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJwYXJ0LTgiIGNsYXNzPSJjaGFuZ2UiID48dGQ+ PC90ZD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0i I3BhcnQtOCI+PGVtPiBwYWdlIDgsIGxpbmUgMzQ8c3BhbiBjbGFzcz0iaGlkZSI+ICZwYXJh Ozwvc3Bhbj48L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PHNtYWxsPnNraXBwaW5nIHRv IGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iI3BhcnQtOCI+PGVtPiBwYWdlIDgsIGxpbmUg MzQ8c3BhbiBjbGFzcz0iaGlkZSI+ICZwYXJhOzwvc3Bhbj48L2VtPjwvYT48L3RoPjx0ZD48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgICAgICBhbnN3ZXJzIGZvciBoaWdoZXIgcHJpb3JpdHkgdHJhbnNhY3Rpb25z IGFyZSBnaXZlbiBwcmVmZXJlbnRpYWw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICAgICAgYW5zd2VycyBmb3IgaGlnaGVyIHByaW9yaXR5IHRyYW5zYWN0aW9ucyBhcmUg Z2l2ZW4gcHJlZmVyZW50aWFsPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAg ICAgdHJlYXRtZW50IHRvIGxvd2VyIHByaW9yaXR5IHRyYW5zYWN0aW9ucy4gIFdoZW4gZm9y d2FyZGluZyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgdHJl YXRtZW50IHRvIGxvd2VyIHByaW9yaXR5IHRyYW5zYWN0aW9ucy4gIFdoZW4gZm9yd2FyZGlu ZyB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICBhbnN3ZXIgbWVz c2FnZXMsIGFnZW50cyBnZW5lcmFsbHkgZG8gbm90IG1vZGlmeSB0aGUgcHJpb3JpdHk8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgYW5zd2VyIG1lc3NhZ2VzLCBh Z2VudHMgZ2VuZXJhbGx5IGRvIG5vdCBtb2RpZnkgdGhlIHByaW9yaXR5PC90ZD48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgaW5mb3JtYXRpb24gcHJlc2VudCBpbiB0aGUg cmVjZWl2ZWQgYW5zd2VyIG1lc3NhZ2VzIG5vciBpbmNsdWRlPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgICAgIGluZm9ybWF0aW9uIHByZXNlbnQgaW4gdGhlIHJlY2Vp dmVkIGFuc3dlciBtZXNzYWdlcyBub3IgaW5jbHVkZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgICAgIHRoZSBwcmlvcml0eSBpbmZvcm1hdGlvbiB3aGVuIGFic2VudCBp biB0aGUgcmVjZWl2ZWQgYW5zd2VyPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgICAgIHRoZSBwcmlvcml0eSBpbmZvcm1hdGlvbiB3aGVuIGFic2VudCBpbiB0aGUgcmVj ZWl2ZWQgYW5zd2VyPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgbWVz c2FnZXMuICBIb3dldmVyLCBpbiBzb21lIHNjZW5hcmlvcywgYWdlbnRzIGNhbiBtb2RpZnkg dGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIG1lc3NhZ2VzLiAg SG93ZXZlciwgaW4gc29tZSBzY2VuYXJpb3MsIGFnZW50cyBjYW4gbW9kaWZ5IHRoZTwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIHByaW9yaXR5IGluZm9ybWF0aW9u LCBmb3IgZXhhbXBsZSwgZWRnZSBhZ2VudHMgbW9kaWZ5aW5nIHRoZTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBwcmlvcml0eSBpbmZvcm1hdGlvbiwgZm9yIGV4 YW1wbGUsIGVkZ2UgYWdlbnRzIG1vZGlmeWluZyB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgICAgICBwcmlvcml0eSB2YWx1ZXMgc2V0IGJ5IGFuIGFkamFjZW50IG9w ZXJhdG9yLiAgVGhlcmUgbWlnaHQgYmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICAgICAgcHJpb3JpdHkgdmFsdWVzIHNldCBieSBhbiBhZGphY2VudCBvcGVyYXRvci4g IFRoZXJlIG1pZ2h0IGJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAg b3RoZXIgc2NlbmFyaW9zIHdoZXJlIGEgRGlhbWV0ZXIgZW5kcG9pbnQgZG9lcyBub3Qgc3Vw cG9ydCB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgb3RoZXIg c2NlbmFyaW9zIHdoZXJlIGEgRGlhbWV0ZXIgZW5kcG9pbnQgZG9lcyBub3Qgc3VwcG9ydCB0 aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICBEUk1QIG1lY2hhbmlz bSBhbmQgYWdlbnRzIGluc2VydCB0aGUgcHJpb3JpdHkgaW5mb3JtYXRpb24gZm9yPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgIERSTVAgbWVjaGFuaXNtIGFuZCBh Z2VudHMgaW5zZXJ0IHRoZSBwcmlvcml0eSBpbmZvcm1hdGlvbiBmb3I8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMTIiPjx0ZD48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+ICAgICAgIHRoYXQgbm9uPHNwYW4gY2xhc3M9ImRlbGV0ZSI+IDwvc3Bhbj5zdXBw b3J0aW5nIGVuZHBvaW50LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAg ICAgdGhhdCBub248c3BhbiBjbGFzcz0iaW5zZXJ0Ij4tPC9zcGFuPnN1cHBvcnRpbmcgZW5k cG9pbnQuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIDYu ICBBbnN3ZXIgaGFuZGxlciAtIFRoZSBhbnN3ZXIgaGFuZGxlciB1c2VzIHRoZSBzYW1lIG1l dGhvZCBhcyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICA2LiAgQW5z d2VyIGhhbmRsZXIgLSBUaGUgYW5zd2VyIGhhbmRsZXIgdXNlcyB0aGUgc2FtZSBtZXRob2Qg YXMgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgYWdlbnQgdG8g ZGV0ZXJtaW5lIHRoZSBwcmlvcml0eSBvZiB0aGUgYW5zd2VyIG1lc3NhZ2UuICBCeTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBhZ2VudCB0byBkZXRlcm1pbmUg dGhlIHByaW9yaXR5IG9mIHRoZSBhbnN3ZXIgbWVzc2FnZS4gIEJ5PC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgZGVmYXVsdCB0aGUgaGFuZGxlciBvZiB0aGUgYW5z d2VyIG1lc3NhZ2UgdXNlcyB0aGUgcHJpb3JpdHkgc2F2ZWQ8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICAgICAgZGVmYXVsdCB0aGUgaGFuZGxlciBvZiB0aGUgYW5zd2Vy IG1lc3NhZ2UgdXNlcyB0aGUgcHJpb3JpdHkgc2F2ZWQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgICAgICBpbiB0aGUgdHJhbnNhY3Rpb24ncyBzdGF0ZS4gIFByaW9yaXR5 IGluZm9ybWF0aW9uIGluIHRoZSBhbnN3ZXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICAgICAgaW4gdGhlIHRyYW5zYWN0aW9uJ3Mgc3RhdGUuICBQcmlvcml0eSBpbmZv cm1hdGlvbiBpbiB0aGUgYW5zd2VyPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICAgICAgbWVzc2FnZSBpcyB1c2VkIHdoZW4gcHJlc2VudC4gIFRoZSBwcmlvcml0eSBpcyB1 c2VkIHdoZW48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgbWVzc2Fn ZSBpcyB1c2VkIHdoZW4gcHJlc2VudC4gIFRoZSBwcmlvcml0eSBpcyB1c2VkIHdoZW48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICBhbGxvY2F0aW5nIHJlc291cmNl cyBmb3IgcHJvY2Vzc2luZyB0aGF0IG9jY3VycyBhZnRlciB0aGUgcmVjZWlwdDwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICBhbGxvY2F0aW5nIHJlc291cmNlcyBm b3IgcHJvY2Vzc2luZyB0aGF0IG9jY3VycyBhZnRlciB0aGUgcmVjZWlwdDwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgIG9mIHRoZSBhbnN3ZXIgbWVzc2FnZS48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgb2YgdGhlIGFuc3dlciBtZXNz YWdlLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij43LiAgRXh0 ZW5zaWJpbGl0eTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjcuICBFeHRlbnNp YmlsaXR5PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0ciBpZD0icGFydC05IiBjbGFzcz0iY2hhbmdlIiA+PHRkPjwvdGQ+PHRoPjxzbWFs bD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9IiNwYXJ0LTkiPjxlbT4g cGFnZSA5LCBsaW5lIDI5PHNwYW4gY2xhc3M9ImhpZGUiPiAmcGFyYTs8L3NwYW4+PC9lbT48 L2E+PC90aD48dGg+IDwvdGg+PHRoPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3Nt YWxsPjxhIGhyZWY9IiNwYXJ0LTkiPjxlbT4gcGFnZSA5LCBsaW5lIDI5PHNwYW4gY2xhc3M9 ImhpZGUiPiAmcGFyYTs8L3NwYW4+PC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB1bmRl cnN0YW5kIGFwcGxpY2F0aW9uIHNwZWNpZmljIEFWUHMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgdW5kZXJzdGFuZCBhcHBsaWNhdGlvbiBzcGVjaWZpYyBBVlBzLjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBXaGVuIGF2YWls YWJsZSwgRGlhbWV0ZXIgbm9kZXMgU0hPVUxEIHVzZSByb3V0aW5nIHByaW9yaXR5PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgV2hlbiBhdmFpbGFibGUsIERpYW1ldGVy IG5vZGVzIFNIT1VMRCB1c2Ugcm91dGluZyBwcmlvcml0eTwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgaW5mb3JtYXRpb24gaW5jbHVkZWQgaW4gdGhlIERSTVAgQVZQIHdo ZW4gbWFraW5nIERpYW1ldGVyIG92ZXJsb2FkPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgaW5mb3JtYXRpb24gaW5jbHVkZWQgaW4gdGhlIERSTVAgQVZQIHdoZW4gbWFr aW5nIERpYW1ldGVyIG92ZXJsb2FkPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICB0aHJvdHRsaW5nIGRlY2lzaW9ucy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICB0aHJvdHRsaW5nIGRlY2lzaW9ucy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgRGlhbWV0ZXIgYWdlbnRzIE1BWSB1c2Ugcm91dGluZyBwcmlv cml0eSBpbmZvcm1hdGlvbiBpbmNsdWRlZCBpbiB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICBEaWFtZXRlciBhZ2VudHMgTUFZIHVzZSByb3V0aW5nIHByaW9yaXR5 IGluZm9ybWF0aW9uIGluY2x1ZGVkIGluIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgRFJNUCBBVlAgd2hlbiByZWxheWluZyByZXF1ZXN0IGFuZCBhbnN3ZXIgbWVz c2FnZXMuICBUaGlzIGluY2x1ZGVzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgRFJNUCBBVlAgd2hlbiByZWxheWluZyByZXF1ZXN0IGFuZCBhbnN3ZXIgbWVzc2FnZXMu ICBUaGlzIGluY2x1ZGVzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB0aGUg c2VsZWN0aW9uIG9mIHJvdXRlcyBhbmQgdGhlIG9yZGVyaW5nIG9mIG1lc3NhZ2VzIHJlbGF5 ZWQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhlIHNlbGVjdGlvbiBv ZiByb3V0ZXMgYW5kIHRoZSBvcmRlcmluZyBvZiBtZXNzYWdlcyByZWxheWVkLjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRp ZmYwMDEzIj48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgIFRoZSBwcmlvcml0eSBpbmZvcm1hdGlvbiBp bmNsdWRlZCBpbiB0aGUgRFJNUCBBVlAgaW4gcmVxdWVzdDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj4gICAgICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5Ob3RlOiA8L3NwYW4+ VGhlIHByaW9yaXR5IGluZm9ybWF0aW9uIGluY2x1ZGVkIGluIHRoZSBEUk1QIEFWUCBpbiBy ZXF1ZXN0PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICBtZXNzYWdlcyBh cHBsaWVzIHRvIGJvdGggdGhlIHJlcXVlc3QgbWVzc2FnZSBhbmQsIGJ5IGRlZmF1bHQsPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgbWVzc2FnZXMgYXBwbGllcyB0 byBib3RoIHRoZSByZXF1ZXN0IG1lc3NhZ2UgYW5kLCBieSBkZWZhdWx0LDwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgYW5zd2VyIG1lc3NhZ2UgYXNzb2NpYXRlZCB3 aXRoIHRoZSB0cmFuc2FjdGlvbi48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICBhbnN3ZXIgbWVzc2FnZSBhc3NvY2lhdGVkIHdpdGggdGhlIHRyYW5zYWN0aW9uLjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBXaGlsZSBkb25l IG9ubHkgaW4gZXhjZXB0aW9uYWwgY2lyY3Vtc3RhbmNlcywgRGlhbWV0ZXIgYWdlbnRzIE1B WTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFdoaWxlIGRvbmUgb25seSBp biBleGNlcHRpb25hbCBjaXJjdW1zdGFuY2VzLCBEaWFtZXRlciBhZ2VudHMgTUFZPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBtb2RpZnkgcHJpb3JpdHkgaW5mb3JtYXRp b24gd2hlbiByZWxheWluZyByZXF1ZXN0IGFuZCBhbnN3ZXI8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBtb2RpZnkgcHJpb3JpdHkgaW5mb3JtYXRpb24gd2hlbiByZWxh eWluZyByZXF1ZXN0IGFuZCBhbnN3ZXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgIG1lc3NhZ2VzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG1lc3Nh Z2VzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHIgaWQ9ImRpZmYwMDE0Ij48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgIFRoZXJlIG1pZ2h0IGJl IHNjZW5hcmlvcyB3aGVyZSBhIERpYW1ldGVyIGFnZW50IGRvZXMgbW9kaWZ5PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPk5v dGU6IDwvc3Bhbj5UaGVyZSBtaWdodCBiZSBzY2VuYXJpb3Mgd2hlcmUgYSBEaWFtZXRlciBh Z2VudCBkb2VzIG1vZGlmeTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAg cHJpb3JpdHkgaW5mb3JtYXRpb24uICBGb3IgaW5zdGFuY2UsIGFuIGVkZ2UgYWdlbnQgbWln aHQgbmVlZCB0bzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIHByaW9y aXR5IGluZm9ybWF0aW9uLiAgRm9yIGluc3RhbmNlLCBhbiBlZGdlIGFnZW50IG1pZ2h0IG5l ZWQgdG88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIG1vZGlmeSB0aGUg cHJpb3JpdHkgdmFsdWVzIHNldCBieSBhbiBhZGphY2VudCBvcGVyYXRvci48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBtb2RpZnkgdGhlIHByaW9yaXR5IHZhbHVl cyBzZXQgYnkgYW4gYWRqYWNlbnQgb3BlcmF0b3IuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFdoaWxlIGRvbmUgb25seSBpbiBleGNlcHRpb25hbCBj aXJjdW1zdGFuY2VzLCBEaWFtZXRlciBhZ2VudHMgTUFZIGFkZDwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIFdoaWxlIGRvbmUgb25seSBpbiBleGNlcHRpb25hbCBjaXJj dW1zdGFuY2VzLCBEaWFtZXRlciBhZ2VudHMgTUFZIGFkZDwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+ICAgcHJpb3JpdHkgaW5mb3JtYXRpb24gd2hlbiByZWxheWluZyByZXF1 ZXN0IGFuZCBhbnN3ZXIgbWVzc2FnZXMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgcHJpb3JpdHkgaW5mb3JtYXRpb24gd2hlbiByZWxheWluZyByZXF1ZXN0IGFuZCBh bnN3ZXIgbWVzc2FnZXMuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0ciBpZD0iZGlmZjAwMTUiPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgVGhl cmUgbWlnaHQgYmUgc2NlbmFyaW9zIHdoZXJlIGEgRGlhbWV0ZXIgZW5kcG9pbnQgZG9lcyBu b3Q8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgPHNwYW4gY2xhc3M9 Imluc2VydCI+Tm90ZTogPC9zcGFuPlRoZXJlIG1pZ2h0IGJlIHNjZW5hcmlvcyB3aGVyZSBh IERpYW1ldGVyIGVuZHBvaW50IGRvZXMgbm90PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICAgICBzdXBwb3J0IHRoZSBEUk1QIG1lY2hhbmlzbSBhbmQgYWdlbnRzIGluc2Vy dCBwcmlvcml0eSBpbmZvcm1hdGlvbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgIHN1cHBvcnQgdGhlIERSTVAgbWVjaGFuaXNtIGFuZCBhZ2VudHMgaW5zZXJ0IHBy aW9yaXR5IGluZm9ybWF0aW9uPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgog ICAgICA8dHIgaWQ9ImRpZmYwMDE2Ij48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgICAgIGZvciB0aGF0IG5v bjxzcGFuIGNsYXNzPSJkZWxldGUiPiA8L3NwYW4+c3VwcG9ydGluZyBlbmRwb2ludC48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgICAgZm9yIHRoYXQgbm9uPHNwYW4g Y2xhc3M9Imluc2VydCI+LTwvc3Bhbj5zdXBwb3J0aW5nIGVuZHBvaW50LjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBEaWFtZXRlciBlbmRwb2ludHMg TUFZIHVzZSByb3V0aW5nIHByaW9yaXR5IGluZm9ybWF0aW9uIGluY2x1ZGVkIGluPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRGlhbWV0ZXIgZW5kcG9pbnRzIE1BWSB1 c2Ugcm91dGluZyBwcmlvcml0eSBpbmZvcm1hdGlvbiBpbmNsdWRlZCBpbjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhlIERSTVAgQVZQIHdoZW4gbWFraW5nIHJlc291 cmNlIGFsbG9jYXRpb24gZGVjaXNpb25zIGZvciB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICB0aGUgRFJNUCBBVlAgd2hlbiBtYWtpbmcgcmVzb3VyY2UgYWxsb2Nh dGlvbiBkZWNpc2lvbnMgZm9yIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgdHJhbnNhY3Rpb24gYXNzb2NpYXRlZCB3aXRoIHRoZSByZXF1ZXN0IG1lc3NhZ2UgdGhh dCBjb250YWlucyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0cmFu c2FjdGlvbiBhc3NvY2lhdGVkIHdpdGggdGhlIHJlcXVlc3QgbWVzc2FnZSB0aGF0IGNvbnRh aW5zIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgRFJNUCBpbmZvcm1h dGlvbi48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBEUk1QIGluZm9ybWF0 aW9uLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBEaWFt ZXRlciBlbmRwb2ludHMgTUFZIHVzZSByb3V0aW5nIHByaW9yaXR5IGluZm9ybWF0aW9uIGlu Y2x1ZGVkIGluPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRGlhbWV0ZXIg ZW5kcG9pbnRzIE1BWSB1c2Ugcm91dGluZyBwcmlvcml0eSBpbmZvcm1hdGlvbiBpbmNsdWRl ZCBpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhlIERSTVAgQVZQIHdo ZW4gbWFraW5nIHJlc291cmNlIGFsbG9jYXRpb24gZGVjaXNpb25zIGZvciB0aGU8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aGUgRFJNUCBBVlAgd2hlbiBtYWtpbmcg cmVzb3VyY2UgYWxsb2NhdGlvbiBkZWNpc2lvbnMgZm9yIHRoZTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgdHJhbnNhY3Rpb24gYXNzb2NpYXRlZCB3aXRoIHRoZSBhbnN3 ZXIgbWVzc2FnZXMgdXNpbmcgdGhlIERSTVA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICB0cmFuc2FjdGlvbiBhc3NvY2lhdGVkIHdpdGggdGhlIGFuc3dlciBtZXNzYWdl cyB1c2luZyB0aGUgRFJNUDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgaW5m b3JtYXRpb24gYXNzb2NpYXRlZCB3aXRoIHRoZSB0cmFuc2FjdGlvbi48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBpbmZvcm1hdGlvbiBhc3NvY2lhdGVkIHdpdGggdGhl IHRyYW5zYWN0aW9uLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHIgaWQ9InBhcnQtMTAiIGNsYXNzPSJjaGFuZ2UiID48dGQ+PC90ZD48 dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJlZj0iI3BhcnQt MTAiPjxlbT4gcGFnZSAxMSwgbGluZSAyMDxzcGFuIGNsYXNzPSJoaWRlIj4gJnBhcmE7PC9z cGFuPjwvZW0+PC9hPjwvdGg+PHRoPiA8L3RoPjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hh bmdlIGF0PC9zbWFsbD48YSBocmVmPSIjcGFydC0xMCI+PGVtPiBwYWdlIDExLCBsaW5lIDIw PHNwYW4gY2xhc3M9ImhpZGUiPiAmcGFyYTs8L3NwYW4+PC9lbT48L2E+PC90aD48dGQ+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij45LiAgQXR0cmlidXRlIFZhbHVlIFBhaXJzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+OS4gIEF0dHJpYnV0ZSBWYWx1ZSBQYWlyczwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGlzIHNlY3Rpb24gZGVzY3JpYmVzIHRoZSBl bmNvZGluZyBhbmQgc2VtYW50aWNzIG9mIHRoZSBEaWFtZXRlcjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIFRoaXMgc2VjdGlvbiBkZXNjcmliZXMgdGhlIGVuY29kaW5n IGFuZCBzZW1hbnRpY3Mgb2YgdGhlIERpYW1ldGVyPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij4gICBPdmVybG9hZCBJbmRpY2F0aW9uIEF0dHJpYnV0ZSBWYWx1ZSBQYWlycyAo QVZQcykgZGVmaW5lZCBpbiB0aGlzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgT3ZlcmxvYWQgSW5kaWNhdGlvbiBBdHRyaWJ1dGUgVmFsdWUgUGFpcnMgKEFWUHMpIGRl ZmluZWQgaW4gdGhpczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZG9jdW1l bnQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZG9jdW1lbnQuPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjkuMS4gIERSTVAgQVZQPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+OS4xLiAgRFJNUCBBVlA8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhlIERSTVAgKEFWUCBjb2Rl IFRCRDEpIGlzIG9mIHR5cGUgRW51bWVyYXRlZC4gIFRoZSB2YWx1ZSBvZiB0aGUgQVZQPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhlIERSTVAgKEFWUCBjb2RlIFRC RDEpIGlzIG9mIHR5cGUgRW51bWVyYXRlZC4gIFRoZSB2YWx1ZSBvZiB0aGUgQVZQPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpbmRpY2F0ZXMgdGhlIHJvdXRpbmcgbWVz c2FnZSBwcmlvcml0eSBmb3IgdGhlIHRyYW5zYWN0aW9uLiAgVGhlPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgaW5kaWNhdGVzIHRoZSByb3V0aW5nIG1lc3NhZ2UgcHJp b3JpdHkgZm9yIHRoZSB0cmFuc2FjdGlvbi4gIFRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAxNyI+PHRkPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBm b2xsb3dpbmcgdmFsdWVzIGFyZSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5pbml0aWFsbHkgPC9z cGFuPmRlZmluZWQ6PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGZvbGxv d2luZyB2YWx1ZXMgYXJlIGRlZmluZWQ6PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIFBSSU9SSVRZXzE1IDE1ICBQUklPUklUWV8xNSBpcyB0aGUgbG93 ZXN0IHByaW9yaXR5LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFBSSU9S SVRZXzE1IDE1ICBQUklPUklUWV8xNSBpcyB0aGUgbG93ZXN0IHByaW9yaXR5LjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBQUklPUklUWV8xNCAxNCAg UFJJT1JJVFlfMTQgaXMgYSBoaWdoZXIgcHJpb3JpdHkgdGhhbiBQUklPUklUWV8xNSBhbmQ8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBQUklPUklUWV8xNCAxNCAgUFJJ T1JJVFlfMTQgaXMgYSBoaWdoZXIgcHJpb3JpdHkgdGhhbiBQUklPUklUWV8xNSBhbmQ8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIGEgbG93ZXIgcHJpb3JpdHkgdGhh biBQUklPUklUWV8xMy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBh IGxvd2VyIHByaW9yaXR5IHRoYW4gUFJJT1JJVFlfMTMuPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFBSSU9SSVRZXzEzIDEzICBQUklPUklUWV8xMyBp cyBhIGhpZ2hlciBwcmlvcml0eSB0aGFuIFBSSU9SSVRZXzE0IGFuZDwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIFBSSU9SSVRZXzEzIDEzICBQUklPUklUWV8xMyBpcyBh IGhpZ2hlciBwcmlvcml0eSB0aGFuIFBSSU9SSVRZXzE0IGFuZDwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgICAgYSBsb3dlciBwcmlvcml0eSB0aGFuIFBSSU9SSVRZXzEy LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIGEgbG93ZXIgcHJpb3Jp dHkgdGhhbiBQUklPUklUWV8xMi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+ICAgUFJJT1JJVFlfMTIgMTIgIFBSSU9SSVRZXzEyIGlzIGEgaGlnaGVyIHBy aW9yaXR5IHRoYW4gUFJJT1JJVFlfMTMgYW5kPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgUFJJT1JJVFlfMTIgMTIgIFBSSU9SSVRZXzEyIGlzIGEgaGlnaGVyIHByaW9y aXR5IHRoYW4gUFJJT1JJVFlfMTMgYW5kPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBpZD0icGFydC0xMSIgY2xhc3M9ImNoYW5nZSIg Pjx0ZD48L3RkPjx0aD48c21hbGw+c2tpcHBpbmcgdG8gY2hhbmdlIGF0PC9zbWFsbD48YSBo cmVmPSIjcGFydC0xMSI+PGVtPiBwYWdlIDEyLCBsaW5lIDQ2PHNwYW4gY2xhc3M9ImhpZGUi PiAmcGFyYTs8L3NwYW4+PC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxzbWFsbD5za2lw cGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9IiNwYXJ0LTExIj48ZW0+IHBhZ2Ug MTIsIGxpbmUgNDY8c3BhbiBjbGFzcz0iaGlkZSI+ICZwYXJhOzwvc3Bhbj48L2VtPjwvYT48 L3RoPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIEFWUCBjb2RlcyBhcmUgYWxsb2NhdGVkIGZyb20gdGhlICdB dXRoZW50aWNhdGlvbiwgQXV0aG9yaXphdGlvbiwgYW5kPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgQVZQIGNvZGVzIGFyZSBhbGxvY2F0ZWQgZnJvbSB0aGUgJ0F1dGhl bnRpY2F0aW9uLCBBdXRob3JpemF0aW9uLCBhbmQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIEFjY291bnRpbmcgKEFBQSkgUGFyYW1ldGVycycgQVZQIENvZGVzIHJlZ2lz dHJ5LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEFjY291bnRpbmcgKEFB QSkgUGFyYW1ldGVycycgQVZQIENvZGVzIHJlZ2lzdHJ5LjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4xMC4yLiAgTmV3IHJlZ2lzdHJpZXM8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4xMC4yLiAgTmV3IHJlZ2lzdHJpZXM8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhlcmUgYXJlIG5vIG5ldyBJ QU5BIHJlZ2lzdHJpZXMgaW50cm9kdWNlZCBieSB0aGlzIGRvY3VtZW50LjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoZXJlIGFyZSBubyBuZXcgSUFOQSByZWdpc3Ry aWVzIGludHJvZHVjZWQgYnkgdGhpcyBkb2N1bWVudC48L3RkPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+MTEuICBTZWN1cml0eSBDb25zaWRlcmF0aW9uczwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjExLiAgU2VjdXJpdHkgQ29uc2lkZXJhdGlv bnM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgRFJNUCBn aXZlcyBEaWFtZXRlciBub2RlcyB0aGUgYWJpbGl0eSB0byBpbmZsdWVuY2Ugd2hpY2ggcmVx dWVzdHMgYXJlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRFJNUCBnaXZl cyBEaWFtZXRlciBub2RlcyB0aGUgYWJpbGl0eSB0byBpbmZsdWVuY2Ugd2hpY2ggcmVxdWVz dHMgYXJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9 ImRpZmYwMDE4Ij48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPmFyZSA8 L3NwYW4+dGhyb3R0bGVkIGR1cmluZyBvdmVybG9hZCBzY2VuYXJpb3MuICBJbXByb3BlciB1 c2Ugb2YgdGhlIERSTVA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgdGhy b3R0bGVkIGR1cmluZyBvdmVybG9hZCBzY2VuYXJpb3MuICBJbXByb3BlciB1c2Ugb2YgdGhl IERSTVA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG1lY2hhbmlzbSBjb3Vs ZCByZXN1bHQgaW4gdGhlIG1hbGljaW91cyBEaWFtZXRlciBub2RlIGdhaW5pbmc8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBtZWNoYW5pc20gY291bGQgcmVzdWx0IGlu IHRoZSBtYWxpY2lvdXMgRGlhbWV0ZXIgbm9kZSBnYWluaW5nPC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsZWZ0Ij4gICBwcmVmZXJlbnRpYWwgdHJlYXRtZW50LCBieSByZWR1Y2luZyB0 aGUgcHJvYmFiaWxpdHkgb2YgaXRzIHJlcXVlc3RzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+ICAgcHJlZmVyZW50aWFsIHRyZWF0bWVudCwgYnkgcmVkdWNpbmcgdGhlIHBy b2JhYmlsaXR5IG9mIGl0cyByZXF1ZXN0czwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgYmVpbmcgdGhyb3R0bGVkLCBvdmVyIG90aGVyIERpYW1ldGVyIG5vZGVzLiAgVGhp cyB3b3VsZCBiZSBhY2hpZXZlZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IGJlaW5nIHRocm90dGxlZCwgb3ZlciBvdGhlciBEaWFtZXRlciBub2Rlcy4gIFRoaXMgd291 bGQgYmUgYWNoaWV2ZWQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGJ5IHRo ZSBtYWxpY2lvdXMgbm9kZSBpbnNlcnRpbmcgYXJ0aWZpY2lhbGx5IGhpZ2ggcHJpb3JpdHkg dmFsdWVzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGJ5IHRoZSBtYWxp Y2lvdXMgbm9kZSBpbnNlcnRpbmcgYXJ0aWZpY2lhbGx5IGhpZ2ggcHJpb3JpdHkgdmFsdWVz LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBEaWFtZXRl ciBkb2VzIG5vdCBpbmNsdWRlIGZlYXR1cmVzIHRvIHByb3ZpZGUgZW5kLXRvLWVuZDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIERpYW1ldGVyIGRvZXMgbm90IGluY2x1 ZGUgZmVhdHVyZXMgdG8gcHJvdmlkZSBlbmQtdG8tZW5kPC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBhdXRoZW50aWNhdGlvbiwgaW50ZWdyaXR5IHByb3RlY3Rpb24sIG9y IGNvbmZpZGVudGlhbGl0eS4gIFRoaXMgb3BlbnM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBhdXRoZW50aWNhdGlvbiwgaW50ZWdyaXR5IHByb3RlY3Rpb24sIG9yIGNv bmZpZGVudGlhbGl0eS4gIFRoaXMgb3BlbnM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIHRoZSBwb3NzaWJpbGl0eSB0aGF0IG1hbGljaW91cyBvciBjb21wcm9taXNlZCBh Z2VudHMgaW4gdGhlIHBhdGggb2YgYTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIHRoZSBwb3NzaWJpbGl0eSB0aGF0IG1hbGljaW91cyBvciBjb21wcm9taXNlZCBhZ2Vu dHMgaW4gdGhlIHBhdGggb2YgYTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg cmVxdWVzdCBjb3VsZCBtb2RpZnkgdGhlIERSTVAgQVZQIHRvIHJlZmxlY3QgYSBwcmlvcml0 eSBkaWZmZXJlbnQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICByZXF1ZXN0 IGNvdWxkIG1vZGlmeSB0aGUgRFJNUCBBVlAgdG8gcmVmbGVjdCBhIHByaW9yaXR5IGRpZmZl cmVudDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGhhbiB0aGF0IGFzc2Vy dGVkIGJ5IHRoZSBzZW5kZXIgb2YgdGhlIHJlcXVlc3QuPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgdGhhbiB0aGF0IGFzc2VydGVkIGJ5IHRoZSBzZW5kZXIgb2YgdGhl IHJlcXVlc3QuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjEx LjEuICBQb3RlbnRpYWwgVGhyZWF0IE1vZGVzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+MTEuMS4gIFBvdGVudGlhbCBUaHJlYXQgTW9kZXM8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhlIERpYW1ldGVyIHByb3RvY29sIGludm9s dmVzIHRyYW5zYWN0aW9ucyBpbiB0aGUgZm9ybSBvZiByZXF1ZXN0czwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRoZSBEaWFtZXRlciBwcm90b2NvbCBpbnZvbHZlcyB0 cmFuc2FjdGlvbnMgaW4gdGhlIGZvcm0gb2YgcmVxdWVzdHM8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIGFuZCBhbnN3ZXJzIGV4Y2hhbmdlZCBiZXR3ZWVuIGNsaWVudHMg YW5kIHNlcnZlcnMuICBUaGVzZSBjbGllbnRzIGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIGFuZCBhbnN3ZXJzIGV4Y2hhbmdlZCBiZXR3ZWVuIGNsaWVudHMgYW5k IHNlcnZlcnMuICBUaGVzZSBjbGllbnRzIGFuZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgc2VydmVycyBtYXkgYmUgcGVlcnMsIHRoYXQgaXMsIHRoZXkgbWF5IHNoYXJl IGEgZGlyZWN0IHRyYW5zcG9ydDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAg IHNlcnZlcnMgbWF5IGJlIHBlZXJzLCB0aGF0IGlzLCB0aGV5IG1heSBzaGFyZSBhIGRpcmVj dCB0cmFuc3BvcnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 ciBpZD0iZGlmZjAwMTkiPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgKGUuZy4sIDxzcGFuIGNsYXNzPSJk ZWxldGUiPlRDUDwvc3Bhbj4gb3IgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+U0NUUCk8L3NwYW4+ IGNvbm5lY3Rpb24sIG9yIHRoZSBtZXNzYWdlcyBtYXkgdHJhdmVyc2Ugb25lIG9yPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIChlLmcuLCA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij5UcmFuc21pc3Npb24gQ29udHJvbCBQcm90b2NvbCAoVENQKTwvc3Bhbj4gb3IgPHNw YW4gY2xhc3M9Imluc2VydCI+U3RyZWFtIENvbnRyb2w8L3NwYW4+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPiAgIG1vcmUgaW50ZXJtZWRpYXJpZXMsIGtub3duIGFzIERp YW1ldGVyIEFnZW50cy4gIERpYW1ldGVyIG5vZGVzIHVzZTwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBUcmFuc21pc3Npb24gUHJv dG9jb2wgKFNDVFApKTwvc3Bhbj4gY29ubmVjdGlvbiwgb3IgdGhlIG1lc3NhZ2VzIG1heTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA8c3BhbiBjbGFzcz0iZGVsZXRl Ij5UTFMsIERUTFMsPC9zcGFuPiBvciBJUHNlYyB0byBhdXRoZW50aWNhdGUgcGVlcnMsIGFu ZCB0byBwcm92aWRlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHRyYXZl cnNlIG9uZSBvciBtb3JlIGludGVybWVkaWFyaWVzLCBrbm93biBhcyBEaWFtZXRlciBBZ2Vu dHMuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj4gICBEaWFtZXRlciBub2RlcyB1c2UgPHNwYW4gY2xhc3M9Imlu c2VydCI+VHJhbnNwb3J0IExheWVyIFNlY3VyaXR5IChUTFMpLCBEYXRhZ3JhbSBUcmFuc3Bv cnQ8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBMYXllciBT ZWN1cml0eSAoRFRMUyksPC9zcGFuPiBvciBJUHNlYyB0byBhdXRoZW50aWNhdGUgcGVlcnMs IGFuZCB0byBwcm92aWRlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBjb25m aWRlbnRpYWxpdHkgYW5kIGludGVncml0eSBwcm90ZWN0aW9uIG9mIHRyYWZmaWMgYmV0d2Vl biBwZWVycy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBjb25maWRlbnRp YWxpdHkgYW5kIGludGVncml0eSBwcm90ZWN0aW9uIG9mIHRyYWZmaWMgYmV0d2VlbiBwZWVy cy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIE5vZGVzIGNhbiBtYWtlIGF1 dGhvcml6YXRpb24gZGVjaXNpb25zIGJhc2VkIG9uIHRoZSBwZWVyIGlkZW50aXRpZXM8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBOb2RlcyBjYW4gbWFrZSBhdXRob3Jp emF0aW9uIGRlY2lzaW9ucyBiYXNlZCBvbiB0aGUgcGVlciBpZGVudGl0aWVzPC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhdXRoZW50aWNhdGVkIGF0IHRoZSB0cmFuc3Bv cnQgbGF5ZXIuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYXV0aGVudGlj YXRlZCBhdCB0aGUgdHJhbnNwb3J0IGxheWVyLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICBXaGVuIGFnZW50cyBhcmUgaW52b2x2ZWQsIHRoaXMgcHJl c2VudHMgYW4gZWZmZWN0aXZlbHkgdHJhbnNpdGl2ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIFdoZW4gYWdlbnRzIGFyZSBpbnZvbHZlZCwgdGhpcyBwcmVzZW50cyBh biBlZmZlY3RpdmVseSB0cmFuc2l0aXZlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICB0cnVzdCBtb2RlbC4gIFRoYXQgaXMsIGEgRGlhbWV0ZXIgY2xpZW50IG9yIHNlcnZl ciBjYW4gYXV0aG9yaXplIGFuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg dHJ1c3QgbW9kZWwuICBUaGF0IGlzLCBhIERpYW1ldGVyIGNsaWVudCBvciBzZXJ2ZXIgY2Fu IGF1dGhvcml6ZSBhbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYWdlbnQg Zm9yIGNlcnRhaW4gYWN0aW9ucywgYnV0IGl0IG11c3QgdHJ1c3QgdGhhdCBhZ2VudCB0byBt YWtlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYWdlbnQgZm9yIGNlcnRh aW4gYWN0aW9ucywgYnV0IGl0IG11c3QgdHJ1c3QgdGhhdCBhZ2VudCB0byBtYWtlPC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBhcHByb3ByaWF0ZSBhdXRob3JpemF0aW9u IGRlY2lzaW9ucyBhYm91dCBpdHMgcGVlcnMsIGFuZCBzbyBvbi48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBhcHByb3ByaWF0ZSBhdXRob3JpemF0aW9uIGRlY2lzaW9u cyBhYm91dCBpdHMgcGVlcnMsIGFuZCBzbyBvbi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIFNpbmNlIGNvbmZpZGVudGlhbGl0eSBhbmQgaW50ZWdyaXR5IHByb3RlY3Rp b24gb2NjdXJzIGF0IHRoZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFNp bmNlIGNvbmZpZGVudGlhbGl0eSBhbmQgaW50ZWdyaXR5IHByb3RlY3Rpb24gb2NjdXJzIGF0 IHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdHJhbnNwb3J0IGxheWVy LCBhZ2VudHMgY2FuIHJlYWQsIGFuZCBwZXJoYXBzIG1vZGlmeSwgYW55IHBhcnQgb2YgYTwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRyYW5zcG9ydCBsYXllciwgYWdl bnRzIGNhbiByZWFkLCBhbmQgcGVyaGFwcyBtb2RpZnksIGFueSBwYXJ0IG9mIGE8L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJw YXJ0LTEyIiBjbGFzcz0iY2hhbmdlIiA+PHRkPjwvdGQ+PHRoPjxzbWFsbD5za2lwcGluZyB0 byBjaGFuZ2UgYXQ8L3NtYWxsPjxhIGhyZWY9IiNwYXJ0LTEyIj48ZW0+IHBhZ2UgMTQsIGxp bmUgMTA8c3BhbiBjbGFzcz0iaGlkZSI+ICZwYXJhOzwvc3Bhbj48L2VtPjwvYT48L3RoPjx0 aD4gPC90aD48dGg+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGEgaHJl Zj0iI3BhcnQtMTIiPjxlbT4gcGFnZSAxNCwgbGluZSAxMjxzcGFuIGNsYXNzPSJoaWRlIj4g JnBhcmE7PC9zcGFuPjwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgaGF2ZSBhIHBvdGVu dGlhbGx5IGdyZWF0ZXIgaW1wYWN0IGluIHRoaXMgc2NlbmFyaW8gYXMgdGhlIHByaW9yaXR5 PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaGF2ZSBhIHBvdGVudGlhbGx5 IGdyZWF0ZXIgaW1wYWN0IGluIHRoaXMgc2NlbmFyaW8gYXMgdGhlIHByaW9yaXR5PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBpbmRpY2F0aW9uIGltcGFjdHMgdGhlIGhh bmRsaW5nIG9mIGFsbCByZXF1ZXN0cyBhdCBhbGwgdGltZXMsPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgaW5kaWNhdGlvbiBpbXBhY3RzIHRoZSBoYW5kbGluZyBvZiBh bGwgcmVxdWVzdHMgYXQgYWxsIHRpbWVzLDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgaW5kZXBlbmRlbnQgb2YgdGhlIG92ZXJsb2FkIHN0YXR1cyBvZiBEaWFtZXRlciBu b2RlcyBpbiB0aGUgRGlhbWV0ZXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICBpbmRlcGVuZGVudCBvZiB0aGUgb3ZlcmxvYWQgc3RhdHVzIG9mIERpYW1ldGVyIG5vZGVz IGluIHRoZSBEaWFtZXRlcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgbmV0 d29yay48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBuZXR3b3JrLjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4xMS4yLiAgRGVuaWFsIG9m IFNlcnZpY2UgQXR0YWNrczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjExLjIu ICBEZW5pYWwgb2YgU2VydmljZSBBdHRhY2tzPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgIFRoZSBEUk1QIG1lY2hhbmlzbSBkb2VzIG5vdCBvcGVuIGRp cmVjdCBkZW5pYWwgb2Ygc2VydmljZSBhdHRhY2s8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJpZ2h0Ij4gICBUaGUgRFJNUCBtZWNoYW5pc20gZG9lcyBub3Qgb3BlbiBkaXJlY3QgZGVu aWFsIG9mIHNlcnZpY2UgYXR0YWNrPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICB2ZWN0b3JzLiAgUmF0aGVyLCBpdCBpbnRyb2R1Y2VzIGEgbWVjaGFuaXNtIHdoZXJlIGEg bm9kZSBjYW4gZ2FpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHZlY3Rv cnMuICBSYXRoZXIsIGl0IGludHJvZHVjZXMgYSBtZWNoYW5pc20gd2hlcmUgYSBub2RlIGNh biBnYWluPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICB1bndhcnJhbnRlZCBw cmVmZXJlbnRpYWwgdHJlYXRtZW50LiAgSXQgYWxzbyBpbnRyb2R1Y2VzIGEgbWVjaGFuaXNt PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdW53YXJyYW50ZWQgcHJlZmVy ZW50aWFsIHRyZWF0bWVudC4gIEl0IGFsc28gaW50cm9kdWNlcyBhIG1lY2hhbmlzbTwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyIGlkPSJkaWZmMDAyMCI+ PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICB3aGVyZSBhIG5vZGUgY2FuIGdldCBkZWdyYTxzcGFuIGNsYXNz PSJkZWxldGUiPnQ8L3NwYW4+ZWQgc2VydmljZSBpbiB0aGUgc2NlbmFyaW8gd2hlcmUgYSBy b2d1ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB3aGVyZSBhIG5vZGUg Y2FuIGdldCBkZWdyYTxzcGFuIGNsYXNzPSJpbnNlcnQiPmQ8L3NwYW4+ZWQgc2VydmljZSBp biB0aGUgc2NlbmFyaW8gd2hlcmUgYSByb2d1ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgYWdlbnQgY2hhbmdlcyB0aGUgcHJpb3JpdHkgdmFsdWUgaW5jbHVkZWQgaW4g bWVzc2FnZXMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYWdlbnQgY2hh bmdlcyB0aGUgcHJpb3JpdHkgdmFsdWUgaW5jbHVkZWQgaW4gbWVzc2FnZXMuPC90ZD48dGQg Y2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjExLjMuICBFbmQtdG8gRW5kLVNl Y3VyaXR5IElzc3VlczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjExLjMuICBF bmQtdG8gRW5kLVNlY3VyaXR5IElzc3VlczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgaWQ9ImRpZmYwMDIxIj48dGQ+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgIFRoZSBsYWNrIG9mIGVuZC10by1lbmQgaW50ZWdyaXR5IGZlYXR1cmVzIG1ha2VzIGl0 IGRpZmZpY3VsdCB0bzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBUaGUg bGFjayBvZiBlbmQtdG8tZW5kIGludGVncml0eSBmZWF0dXJlcyA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij5pbiBEaWFtZXRlciBbUkZDNjczM108L3NwYW4+IG1ha2VzPC90ZD48dGQgY2xhc3M9 ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsYmxvY2siPiAgIGVzdGFibGlzaCB0cnVzdCBpbiBEUk1QIEFWUHMgcmVj ZWl2ZWQgZnJvbSA8c3BhbiBjbGFzcz0iZGVsZXRlIj5ub24tYWRqYWNlbnQ8L3NwYW4+IG5v ZGVzLiAgQW55PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGl0IGRpZmZp Y3VsdCB0byBlc3RhYmxpc2ggdHJ1c3QgaW4gRFJNUCBBVlBzIHJlY2VpdmVkIGZyb20gPHNw YW4gY2xhc3M9Imluc2VydCI+bm9uLTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgYWdlbnRzIGluIHRoZSBtZXNzYWdlIHBhdGggbWF5IGluc2VydCBvciBt b2RpZnkgRFJNUCBBVlBzLiAgTm9kZXM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9j ayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgYWRqYWNlbnQ8L3NwYW4+IG5vZGVzLiAgQW55 IGFnZW50cyBpbiB0aGUgbWVzc2FnZSBwYXRoIG1heSBpbnNlcnQgb3IgbW9kaWZ5PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIG11c3QgdHJ1c3QgdGhhdCB0aGVpciBh ZGphY2VudCBwZWVycyBwZXJmb3JtIHByb3BlciBjaGVja3Mgb248L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+ICAgRFJNUCBBVlBzLiAgTm9kZXMgbXVzdCB0cnVzdCB0aGF0 IHRoZWlyIGFkamFjZW50IHBlZXJzIHBlcmZvcm0gcHJvcGVyPC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRk IGNsYXNzPSJsYmxvY2siPiAgIG92ZXJsb2FkIHJlcG9ydHMgZnJvbSB0aGVpciBwZWVycywg YW5kIHNvIG9uLCBjcmVhdGluZyBhIDxzcGFuIGNsYXNzPSJkZWxldGUiPnRyYW5zaXRpdmUt PC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBjaGVja3Mgb24g b3ZlcmxvYWQgcmVwb3J0cyBmcm9tIHRoZWlyIHBlZXJzLCBhbmQgc28gb24sIGNyZWF0aW5n IGE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0 ZSI+ICAgdHJ1c3Q8L3NwYW4+IHJlcXVpcmVtZW50IGV4dGVuZGluZyBmb3IgcG90ZW50aWFs bHkgbG9uZyBjaGFpbnMgb2Ygbm9kZXMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnRyYW5zaXRpdmUtdHJ1c3Q8L3NwYW4+IHJl cXVpcmVtZW50IGV4dGVuZGluZyBmb3IgcG90ZW50aWFsbHkgbG9uZyBjaGFpbnMgb2Y8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgTmV0d29yayBvcGVyYXRvcnMgbXVz dCBkZXRlcm1pbmUgaWYgdGhpcyB0cmFuc2l0aXZlIHRydXN0IHJlcXVpcmVtZW50PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIG5vZGVzLiAgTmV0d29yayBvcGVyYXRv cnMgbXVzdCBkZXRlcm1pbmUgaWYgdGhpcyB0cmFuc2l0aXZlIHRydXN0PC90ZD48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGlzIGFjY2VwdGFibGUgZm9yIHRoZWlyIGRlcGxv eW1lbnRzLiAgTm9kZXMgc3VwcG9ydGluZyBEUk1QIE1VU1QgZ2l2ZTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICByZXF1aXJlbWVudCBpcyBhY2NlcHRhYmxlIGZvciB0 aGVpciBkZXBsb3ltZW50cy4gIE5vZGVzIHN1cHBvcnRpbmc8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+ICAgb3BlcmF0b3JzIHRoZSBhYmlsaXR5IHRvIHNlbGVjdCB3aGlj aCBwZWVycyBhcmUgdHJ1c3RlZCB0byBkZWxpdmVyPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPiAgIERSTVAgTVVTVCBnaXZlIG9wZXJhdG9ycyB0aGUgYWJpbGl0eSB0byBz ZWxlY3Qgd2hpY2ggcGVlcnMgYXJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgIERSTVAgQVZQcywgYW5kIHdoZXRoZXIgdGhleSBhcmUgdHJ1c3RlZCB0byBmb3J3YXJk IHRoZSBEUk1QIEFWUHMgZnJvbTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICB0cnVzdGVkIHRvIGRlbGl2ZXIgRFJNUCBBVlBzLCBhbmQgd2hldGhlciB0aGV5IGFyZSB0 cnVzdGVkIHRvIGZvcndhcmQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAg bm9uLWFkamFjZW50IG5vZGVzLiAgRGlhbWV0ZXIgbm9kZXMgTVVTVCBzdHJpcCBEUk1QIEFW UHMgZnJvbTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICB0aGUgRFJNUCBB VlBzIGZyb20gbm9uLWFkamFjZW50IG5vZGVzLiAgRGlhbWV0ZXIgbm9kZXMgTVVTVCBzdHJp cDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBtZXNzYWdlcyByZWNlaXZl ZCBmcm9tIHBlZXJzIHRoYXQgYXJlIG5vdCB0cnVzdGVkIGZvciBEUk1QIHB1cnBvc2VzLjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBEUk1QIEFWUHMgZnJvbSBtZXNz YWdlcyByZWNlaXZlZCBmcm9tIHBlZXJzIHRoYXQgYXJlIG5vdCB0cnVzdGVkIGZvcjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgRFJNUCBwdXJwb3Nlcy48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgSXQgaXMgZXhwZWN0ZWQgdGhhdCB3b3JrIG9uIGVuZC10by1l bmQgRGlhbWV0ZXIgc2VjdXJpdHkgbWlnaHQgbWFrZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIEl0IGlzIGV4cGVjdGVkIHRoYXQgd29yayBvbiBlbmQtdG8tZW5kIERp YW1ldGVyIHNlY3VyaXR5IG1pZ2h0IG1ha2U8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk PjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIGl0IGVhc2llciB0byBlc3RhYmxpc2ggdHJ1c3QgaW4gbm9uLWFkamFjZW50IG5v ZGVzIGZvciBEUk1QIHB1cnBvc2VzLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgIGl0IGVhc2llciB0byBlc3RhYmxpc2ggdHJ1c3QgaW4gbm9uLWFkamFjZW50IG5vZGVz IGZvciBEUk1QIHB1cnBvc2VzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg UmVhZGVycyBzaG91bGQgYmUgcmVtaW5kZWQsIGhvd2V2ZXIsIHRoYXQgdGhlIERSTVAgbWVj aGFuaXNtIGFsbG93czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFJlYWRl cnMgc2hvdWxkIGJlIHJlbWluZGVkLCBob3dldmVyLCB0aGF0IHRoZSBEUk1QIG1lY2hhbmlz bSBhbGxvd3M8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIERpYW1ldGVyIGFn ZW50cyB0byBtb2RpZnkgQVZQcyBpbiBleGlzdGluZyBtZXNzYWdlcyB0aGF0IGFyZTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIERpYW1ldGVyIGFnZW50cyB0byBtb2Rp ZnkgQVZQcyBpbiBleGlzdGluZyBtZXNzYWdlcyB0aGF0IGFyZTwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgb3JpZ2luYXRlZCBieSBvdGhlciBub2Rlcy4gIElmIGVuZC10 by1lbmQgc2VjdXJpdHkgaXMgZW5hYmxlZCwgdGhlcmU8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICBvcmlnaW5hdGVkIGJ5IG90aGVyIG5vZGVzLiAgSWYgZW5kLXRvLWVu ZCBzZWN1cml0eSBpcyBlbmFibGVkLCB0aGVyZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+ICAgaXMgYSByaXNrIHRoYXQgc3VjaCBtb2RpZmljYXRpb24gY291bGQgdmlvbGF0 ZSBpbnRlZ3JpdHkgcHJvdGVjdGlvbi48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBpcyBhIHJpc2sgdGhhdCBzdWNoIG1vZGlmaWNhdGlvbiBjb3VsZCB2aW9sYXRlIGlu dGVncml0eSBwcm90ZWN0aW9uLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg VGhlIGRldGFpbHMgb2YgdXNpbmcgYW55IGZ1dHVyZSBEaWFtZXRlciBlbmQtdG8tZW5kIHNl Y3VyaXR5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhlIGRldGFpbHMg b2YgdXNpbmcgYW55IGZ1dHVyZSBEaWFtZXRlciBlbmQtdG8tZW5kIHNlY3VyaXR5PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBtZWNoYW5pc20gd2l0aCBEUk1QIHdpbGwg cmVxdWlyZSBjYXJlZnVsIGNvbnNpZGVyYXRpb24sIGFuZCBhcmU8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBtZWNoYW5pc20gd2l0aCBEUk1QIHdpbGwgcmVxdWlyZSBj YXJlZnVsIGNvbnNpZGVyYXRpb24sIGFuZCBhcmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIGJleW9uZCB0aGUgc2NvcGUgb2YgdGhpcyBkb2N1bWVudC48L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBiZXlvbmQgdGhlIHNjb3BlIG9mIHRoaXMgZG9j dW1lbnQuPC90ZD48dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgoKICAgICA8dHI+PHRk PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZD48L3RkPjwvdHI+CiAgICAgPHRyIGlkPSJlbmQiIGJnY29sb3I9ImdyYXki Pjx0aCBjb2xzcGFuPSI1IiBhbGlnbj0iY2VudGVyIj4mbmJzcDtFbmQgb2YgY2hhbmdlcy4g MjEgY2hhbmdlIGJsb2Nrcy4mbmJzcDs8L3RoPjwvdHI+CiAgICAgPHRyIGNsYXNzPSJzdGF0 cyI+PHRkPjwvdGQ+PHRoPjxpPjUzIGxpbmVzIGNoYW5nZWQgb3IgZGVsZXRlZDwvaT48L3Ro Pjx0aD48aT4gPC9pPjwvdGg+PHRoPjxpPjU4IGxpbmVzIGNoYW5nZWQgb3IgYWRkZWQ8L2k+ PC90aD48dGQ+PC90ZD48L3RyPgogICAgIDx0cj48dGQgY29sc3Bhbj0iNSIgYWxpZ249ImNl bnRlciIgY2xhc3M9InNtYWxsIj48YnIvPlRoaXMgaHRtbCBkaWZmIHdhcyBwcm9kdWNlZCBi eSByZmNkaWZmIDEuNDUuIFRoZSBsYXRlc3QgdmVyc2lvbiBpcyBhdmFpbGFibGUgZnJvbSA8 YSBocmVmPSJodHRwOi8vd3d3LnRvb2xzLmlldGYub3JnL3Rvb2xzL3JmY2RpZmYvIiA+aHR0 cDovL3Rvb2xzLmlldGYub3JnL3Rvb2xzL3JmY2RpZmYvPC9hPiA8L3RkPjwvdHI+CiAgIDwv dGFibGU+CiAgIDwvYm9keT4KICAgPC9odG1sPgo= --------------020606000700040102040707-- From nobody Thu Apr 7 06:19:57 2016 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D11112D90F for ; Thu, 7 Apr 2016 06:19:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.12 X-Spam-Level: X-Spam-Status: No, score=-1.12 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_NEUTRAL=0.779] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wmbCrNE2cOz5 for ; Thu, 7 Apr 2016 06:19:53 -0700 (PDT) Received: from biz131.inmotionhosting.com (biz131.inmotionhosting.com [66.117.3.2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1CBC12D1B9 for ; Thu, 7 Apr 2016 06:19:50 -0700 (PDT) Received: from [64.31.33.3] (port=60890 helo=Steves-MacBook-Air.local) by biz131.inmotionhosting.com with esmtpsa (TLSv1.2:DHE-RSA-AES256-SHA:256) (Exim 4.86_1) (envelope-from ) id 1ao9qd-0017yL-Oz for dime@ietf.org; Thu, 07 Apr 2016 06:19:50 -0700 From: Steve Donovan To: "dime@ietf.org" Message-ID: <57065E70.3030908@usdonovans.com> Date: Thu, 7 Apr 2016 10:19:44 -0300 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.7.1 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="------------040309090706090201030605" X-OutGoing-Spam-Status: No, score=-1.0 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - biz131.inmotionhosting.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - usdonovans.com X-Get-Message-Sender-Via: biz131.inmotionhosting.com: authenticated_id: srdonovan@usdonovans.com X-Authenticated-Sender: biz131.inmotionhosting.com: srdonovan@usdonovans.com Archived-At: Subject: [Dime] Questions on draft-ietf-dime-group-signaling-06.txt X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Apr 2016 13:19:54 -0000 This is a multi-part message in MIME format. --------------040309090706090201030605 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit All, I have the following questions and comments on the Diameter group signaling draft. Regards, Steve ----- General comment - Use of RFC 2119 is not consistent. There are a number of places where lower case must is used, for instance. It would be better to either make those upper case, if that is appropriate, or use a different word. In section 4.2.* For the case: If the Diameter server receives a command request from a Diameter client and the command comprises at least one Session-Group-Info AVP having the SESSION_GROUP_ALLOCATION_ACTION flag set in the Session- Group-Control-Vector AVP set, the server can accept or reject the request for group assignment. Reasons for rejection may be e.g. lack of resources for managing additional groups. When rejected, the session must not be assigned to any session group but be treated as single session. Should we say the the client SHOULD retry the request without the session-group AVPs? For the case: If the Diameter server accepts the client's request for a group assignment, the server must assign the new session to each of the one or multiple identified session groups when present in the Session- Group-Info AVP. In case one or multiple identified session groups are not already stored by the server, the server must store the new identified group(s) to its local list of known session groups. When sending the response to the client, e.g. a service-specific auth response as per NASREQ AA-Answer [RFC4005], the server must include all Session-Group-Info AVPs as received in the client's request. What if one of a set of session group addition commands fails at the server? Is it all or nothing, meaning that if the server can't add the session to all requested session groups then it must reject the request? Also, should the first must in the paragraph be MUST? For the case: If the Diameter client receives a response to its previously issued request from the server and the response comprises at least one Session-Group-Info AVP having the SESSION_GROUP_ALLOCATION_ACTION flag of the associated Session-Group-Control-Vector AVP set, the client MUST add the new session to all session groups as identified in the one or multiple Session-Group-Info AVPs. What if the a session group addition fails at the client? Should the client terminate the session at that point for force the session-group state in sync? For this case: A Diameter client, which sent a request for session initiation to a Diameter server and appended a single or multiple Session-Group-Id AVPs but cannot find any Session-Group-Info AVP in the associated response from the Diameter server proceeds as if the request was processed for a single session. Does the client continue to include Session-Group AVPs or should the client explicitly remove the session from the session group? In section 4.4.1 The use of the Group-Response-Action AVP is not clear. Why would a node put a session in a group and then request it to be treated separately? It would help to have some motivational text for why this is needed. In section 4.4.3 For the case: When a Diameter node receives a request to process a command for one or more session groups and the result of processing the command succeeds for some sessions identified in one or multiple session groups, but fails for one or more sessions, the Result-Code AVP in the response message SHOULD indicate DIAMETER_LIMITED_SUCCESS as per Section 7.1.2 of [RFC6733]. In case of limited success, the sessions, for which the processing of the group command failed, MUST be identified using a Failed-AVP AVP as per Session 7.5 of [RFC6733]. What happens to the groups that were successfully set up? Should the client fall back to single session in this case as well? For section 5 I'm not convinced that the signaling, as defined is complete enough to ensure that a proxy can be guaranteed to have accurate session-group state. For the same reason, it also feels like clients and servers can end up with different views of session-group state. --------------040309090706090201030605 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit All,

I have the following questions and comments on the Diameter group signaling draft.

Regards,

Steve

-----

General comment - Use of RFC 2119 is not consistent.  There are a number of places where lower case must is used, for instance.  It would be better to either make those upper case, if that is appropriate, or use a different word.

In section 4.2.*

For the case:

   If the Diameter server receives a command request from a Diameter
   client and the command comprises at least one Session-Group-Info AVP
   having the SESSION_GROUP_ALLOCATION_ACTION flag set in the Session-
   Group-Control-Vector AVP set, the server can accept or reject the
   request for group assignment.  Reasons for rejection may be e.g. lack
   of resources for managing additional groups.  When rejected, the
   session must not be assigned to any session group but be treated as
   single session.

Should we say the the client SHOULD retry the request without the session-group AVPs?

For the case:

   If the Diameter server accepts the client's request for a group
   assignment, the server must assign the new session to each of the one
   or multiple identified session groups when present in the Session-
   Group-Info AVP.  In case one or multiple identified session groups
   are not already stored by the server, the server must store the new
   identified group(s) to its local list of known session groups.  When
   sending the response to the client, e.g. a service-specific auth
   response as per NASREQ AA-Answer [RFC4005], the server must include
   all Session-Group-Info AVPs as received in the client's request.
What if one of a set of session group addition commands fails at the server?  Is it all or nothing, meaning that if the server can't add the session to all requested session groups then it must reject the request?  Also, should the first must in the paragraph be MUST?

For the case:

   If the Diameter client receives a response to its previously issued
   request from the server and the response comprises at least one
   Session-Group-Info AVP having the SESSION_GROUP_ALLOCATION_ACTION
   flag of the associated Session-Group-Control-Vector AVP set, the
   client MUST add the new session to all session groups as identified
   in the one or multiple Session-Group-Info AVPs.
What if the a session group addition fails at the client?  Should the client terminate the session at that point for force the session-group state in sync? 

For this case:

   A Diameter client, which sent a request for session initiation to a
   Diameter server and appended a single or multiple Session-Group-Id
   AVPs but cannot find any Session-Group-Info AVP in the associated
   response from the Diameter server proceeds as if the request was
   processed for a single session.

Does the client continue to include Session-Group AVPs or should the client explicitly remove the session from the session group?

In section 4.4.1

The use of the Group-Response-Action AVP is not clear.  Why would a node put a session in a group and then request it to be treated separately? 

It would help to have some motivational text for why this is needed.

In section 4.4.3

For the case:

   When a Diameter node receives a request to process a command for one
   or more session groups and the result of processing the command
   succeeds for some sessions identified in one or multiple session
   groups, but fails for one or more sessions, the Result-Code AVP in
   the response message SHOULD indicate DIAMETER_LIMITED_SUCCESS as per
   Section 7.1.2 of [RFC6733].  In case of limited success, the
   sessions, for which the processing of the group command failed, MUST
   be identified using a Failed-AVP AVP as per Session 7.5 of [RFC6733].

What happens to the groups that were successfully set up?  Should the client fall back to single session in this case as well?

For section 5

I'm not convinced that the signaling, as defined is complete enough to ensure that a proxy can be guaranteed to have accurate session-group state.  For the same reason, it also feels like clients and servers can end up with different views of session-group state.


--------------040309090706090201030605-- From nobody Thu Apr 7 08:23:43 2016 Return-Path: X-Original-To: dime@ietf.org Delivered-To: dime@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 852E312D50A for ; Thu, 7 Apr 2016 08:23:41 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit To: X-Test-IDTracker: no X-IETF-IDTracker: 6.19.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160407152341.19768.13298.idtracker@ietfa.amsl.com> Date: Thu, 07 Apr 2016 08:23:41 -0700 From: IETF Secretariat Archived-At: Subject: [Dime] Milestones changed for dime WG X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.17 List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Apr 2016 15:23:41 -0000 Changed milestone "Submit 'problem statement and requirements for Diameter end-to-end security framework' to the IESG for consideration as an Informational RFC", set due date to July 2016 from December 2012. URL: https://datatracker.ietf.org/wg/dime/charter/ From nobody Thu Apr 7 08:32:53 2016 Return-Path: X-Original-To: dime@ietf.org Delivered-To: dime@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B390E12D550 for ; Thu, 7 Apr 2016 08:32:41 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit To: X-Test-IDTracker: no X-IETF-IDTracker: 6.19.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160407153241.19704.48346.idtracker@ietfa.amsl.com> Date: Thu, 07 Apr 2016 08:32:41 -0700 From: IETF Secretariat Archived-At: Subject: [Dime] Milestones changed for dime WG X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.17 List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Apr 2016 15:32:41 -0000 Changed milestone "Submit 'problem statement and requirements for Diameter end-to-end security framework' to the IESG for consideration as an Informational RFC", set state to active from review, accepting new milestone. Changed milestone "Submit I-D 'Diameter Routing Message Priority' to the IESG for considerations as a Proposed Standard", set state to active from review, accepting new milestone. URL: https://datatracker.ietf.org/wg/dime/charter/ From nobody Thu Apr 7 12:28:08 2016 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C902F12D1F0 for ; Thu, 7 Apr 2016 12:28:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Zd7Oo3BOEHhU for ; Thu, 7 Apr 2016 12:28:06 -0700 (PDT) Received: from mx0b-00191d01.pphosted.com (mx0b-00191d01.pphosted.com [67.231.157.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6AF6212D149 for ; Thu, 7 Apr 2016 12:28:06 -0700 (PDT) Received: from pps.filterd (m0049458.ppops.net [127.0.0.1]) by m0049458.ppops.net-00191d01. (8.15.0.59/8.15.0.59) with SMTP id u37GSpH0022302; Thu, 7 Apr 2016 12:30:44 -0400 Received: from alpi155.enaf.aldc.att.com (sbcsmtp7.sbc.com [144.160.229.24]) by m0049458.ppops.net-00191d01. with ESMTP id 225u3e8483-1 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 07 Apr 2016 12:30:44 -0400 Received: from enaf.aldc.att.com (localhost [127.0.0.1]) by alpi155.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id u37GUhNh004097; Thu, 7 Apr 2016 12:30:44 -0400 Received: from mlpi408.sfdc.sbc.com (mlpi408.sfdc.sbc.com [130.9.128.240]) by alpi155.enaf.aldc.att.com (8.14.5/8.14.5) with ESMTP id u37GUVY5003653 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 7 Apr 2016 12:30:38 -0400 Received: from MISOUT7MSGHUBAD.ITServices.sbc.com (MISOUT7MSGHUBAD.itservices.sbc.com [130.9.129.148]) by mlpi408.sfdc.sbc.com (RSA Interceptor); Thu, 7 Apr 2016 16:30:19 GMT Received: from MISOUT7MSGUSRDB.ITServices.sbc.com ([169.254.2.15]) by MISOUT7MSGHUBAD.ITServices.sbc.com ([130.9.129.148]) with mapi id 14.03.0248.002; Thu, 7 Apr 2016 12:30:19 -0400 From: "DOLLY, MARTIN C" To: Steve Donovan , "dime@ietf.org" Thread-Topic: [Dime] New version of draft-ietf-dime-rate-control Thread-Index: AQHRgSm19vGSP74Jb0+1e9C2+B+FAp9+0sFg Date: Thu, 7 Apr 2016 16:30:18 +0000 Message-ID: References: <56EC1CAD.6050007@usdonovans.com> In-Reply-To: <56EC1CAD.6050007@usdonovans.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [135.70.230.198] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-RSA-Inspected: yes X-RSA-Classifications: public X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2016-04-07_11:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_policy_notspam policy=outbound_policy score=0 spamscore=0 suspectscore=0 malwarescore=0 phishscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1601100000 definitions=main-1604070235 Archived-At: Subject: Re: [Dime] New version of draft-ietf-dime-rate-control X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Apr 2016 19:28:07 -0000 SSBzdXBwb3J0IHRoaXMgd29yayBtb3ZpbmcgZm9yd2FyZA0KVW5mb3J0dW5hdGVseSBJIGNhbm5v dCBhdHRlbmQgRnJpZGF5J3MgbWVldGluZw0KDQotLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0K RnJvbTogRGlNRSBbbWFpbHRvOmRpbWUtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIFN0 ZXZlIERvbm92YW4NClNlbnQ6IEZyaWRheSwgTWFyY2ggMTgsIDIwMTYgMTE6MjAgQU0NClRvOiBk aW1lQGlldGYub3JnDQpTdWJqZWN0OiBbRGltZV0gTmV3IHZlcnNpb24gb2YgZHJhZnQtaWV0Zi1k aW1lLXJhdGUtY29udHJvbA0KDQpBbGwsDQoNCkkgaGF2ZSBwb3N0ZWQgYSB2ZXJzaW9uIC0wMyBv ZiBkcmFmdC1pZXRmLWRpbWUtcmF0ZS1jb250cm9sLg0KDQpUaGlzIHZlcnNpb24gYWRkcmVzc2Vk IGFsbCBvZiB0aGUgb3V0c3RhbmRpbmcgZWRpdG9yJ3Mgbm90ZXMgYW5kIHVwZGF0ZWQgdGhlIHJl ZmVyZW5jZSB0byB0aGUgRE9JQyBSRkMuICBJdCBhbHNvIGluY2x1ZGVzIGEgbnVtYmVyIG9mIGVk aXRvcmlhbCB1cGRhdGVzLg0KDQpJJ3ZlIGF0dGFjaGVkIGEgZGlmZiBmaWxlIHNob3dpbmcgdGhl IGNoYW5nZXMgc2luY2UgLTAyLg0KDQpSZWdhcmRzLA0KDQpTdGV2ZQ0K From nobody Thu Apr 7 13:13:33 2016 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 08AA812D66F for ; Thu, 7 Apr 2016 13:13:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E_j1Dm41au1e for ; Thu, 7 Apr 2016 13:13:28 -0700 (PDT) Received: from Spam2.csgov.com (relayibm.csgov.com [209.135.214.62]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BDD6912D658 for ; Thu, 7 Apr 2016 13:13:28 -0700 (PDT) X-ASG-Debug-ID: 1460060007-0a652e138c3d1bd0001-ygad4l Received: from csgsmtp01.csgov.com ([192.168.16.27]) by Spam2.csgov.com with ESMTP id NGs1xFqBW9XFyH17; Thu, 07 Apr 2016 16:13:27 -0400 (EDT) X-Barracuda-Envelope-From: Janet.Gunn@csra.com X-ASG-Whitelist: Client In-Reply-To: References: <56EC1CAD.6050007@usdonovans.com> X-Disclaimed: 7954 To: "DOLLY, MARTIN C" MIME-Version: 1.0 X-KeepSent: 5C8E0086:6167894F-85257F8E:006EDC5E; type=4; name=$KeepSent X-ASG-Orig-Subj: Re: [Dime] New version of draft-ietf-dime-rate-control X-Mailer: Lotus Notes Release 8.5.2FP4 SHF97 March 26, 2012 From: Janet P Gunn Message-ID: Date: Thu, 7 Apr 2016 16:13:31 -0400 X-MIMETrack: Serialize by Router on CSGSMTP01/SRV/CSGov(Release 8.5.3FP6|November 21, 2013) at 04/07/2016 04:12:32 PM, Serialize complete at 04/07/2016 04:12:32 PM Content-Type: multipart/alternative; boundary="=_alternative 006F181A85257F8E_=" X-Barracuda-Connect: UNKNOWN[192.168.16.27] X-Barracuda-Start-Time: 1460060007 X-Barracuda-URL: https://192.168.16.52:443/cgi-mod/mark.cgi X-Virus-Scanned: by bsmtpd at csgov.com X-Barracuda-BRTS-Status: 1 Archived-At: Cc: DiME , "dime@ietf.org" Subject: Re: [Dime] New version of draft-ietf-dime-rate-control X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Apr 2016 20:13:31 -0000 This is a multipart message in MIME format. --=_alternative 006F181A85257F8E_= Content-Type: text/plain; charset="US-ASCII" I intend to participate remotely (if technology cooperates). Janet This electronic message transmission contains information from CSRA that may be attorney-client privileged, proprietary or confidential. The information in this message is intended only for use by the individual(s) to whom it is addressed. If you believe you have received this message in error, please contact me immediately and be aware that any use, disclosure, copying or distribution of the contents of this message is strictly prohibited. NOTE: Regardless of content, this email shall not operate to bind CSRA to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of email for such purpose. From: "DOLLY, MARTIN C" To: Steve Donovan , "dime@ietf.org" Date: 04/07/2016 03:28 PM Subject: Re: [Dime] New version of draft-ietf-dime-rate-control Sent by: "DiME" I support this work moving forward Unfortunately I cannot attend Friday's meeting -----Original Message----- From: DiME [mailto:dime-bounces@ietf.org] On Behalf Of Steve Donovan Sent: Friday, March 18, 2016 11:20 AM To: dime@ietf.org Subject: [Dime] New version of draft-ietf-dime-rate-control All, I have posted a version -03 of draft-ietf-dime-rate-control. This version addressed all of the outstanding editor's notes and updated the reference to the DOIC RFC. It also includes a number of editorial updates. I've attached a diff file showing the changes since -02. Regards, Steve _______________________________________________ DiME mailing list DiME@ietf.org https://www.ietf.org/mailman/listinfo/dime --=_alternative 006F181A85257F8E_= Content-Type: text/html; charset="US-ASCII" I intend to participate remotely (if technology cooperates).

Janet

This electronic message transmission contains information from CSRA that may be attorney-client privileged, proprietary or confidential. The information in this message is intended only for use by the individual(s) to whom it is addressed. If you believe you have received this message in error, please contact me immediately and be aware that any use, disclosure, copying or distribution of the contents of this message is strictly prohibited. NOTE: Regardless of content, this email shall not operate to bind CSRA to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of email for such purpose.



From:        "DOLLY, MARTIN C" <md3135@att.com>
To:        Steve Donovan <srdonovan@usdonovans.com>, "dime@ietf.org" <dime@ietf.org>
Date:        04/07/2016 03:28 PM
Subject:        Re: [Dime] New version of draft-ietf-dime-rate-control
Sent by:        "DiME" <dime-bounces@ietf.org>



I support this work moving forward
Unfortunately I cannot attend Friday's meeting

-----Original Message-----
From: DiME [mailto:dime-bounces@ietf.org] On Behalf Of Steve Donovan
Sent: Friday, March 18, 2016 11:20 AM
To: dime@ietf.org
Subject: [Dime] New version of draft-ietf-dime-rate-control

All,

I have posted a version -03 of draft-ietf-dime-rate-control.

This version addressed all of the outstanding editor's notes and updated the reference to the DOIC RFC.  It also includes a number of editorial updates.

I've attached a diff file showing the changes since -02.

Regards,

Steve
_______________________________________________
DiME mailing list
DiME@ietf.org
https://www.ietf.org/mailman/listinfo/dime

--=_alternative 006F181A85257F8E_=-- From nobody Thu Apr 7 15:59:21 2016 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3BBAA12D763; Thu, 7 Apr 2016 15:59:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.619 X-Spam-Level: X-Spam-Status: No, score=-2.619 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SYpRaAVnuMpt; Thu, 7 Apr 2016 15:59:15 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias91.francetelecom.com [193.251.215.91]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A81812D50B; Thu, 7 Apr 2016 15:59:15 -0700 (PDT) Received: from omfedm08.si.francetelecom.fr (unknown [xx.xx.xx.4]) by omfedm13.si.francetelecom.fr (ESMTP service) with ESMTP id 73E3A324651; Fri, 8 Apr 2016 00:59:13 +0200 (CEST) Received: from Exchangemail-eme3.itn.ftgroup (unknown [10.114.50.58]) by omfedm08.si.francetelecom.fr (ESMTP service) with ESMTP id 576AE238056; Fri, 8 Apr 2016 00:59:13 +0200 (CEST) Received: from OPEXCNORM4D.corporate.adroot.infra.ftgroup ([fe80::604f:15da:866b:fd8b]) by OPEXCNORM72.corporate.adroot.infra.ftgroup ([fe80::b14e:a56e:a38:474d%21]) with mapi id 14.03.0279.002; Fri, 8 Apr 2016 00:59:13 +0200 From: To: "radext@ietf.org" , "dime@ietf.org" Thread-Topic: Remote participation Thread-Index: AdGRIRkE9GJLEAjCT0C3CeEnDaDzQg== Date: Thu, 7 Apr 2016 22:59:12 +0000 Message-ID: <25612_1460069953_5706E641_25612_496_1_6B7134B31289DC4FAF731D844122B36E01E32715@OPEXCNORM4D.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.5] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-PMX-Version: 6.2.1.2478543, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2016.3.14.165416 Archived-At: Subject: [Dime] Remote participation X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Apr 2016 22:59:17 -0000 To remotely attend to IETF sessions via Meetecho, you have to register: https://www.ietf.org/meeting/remote-registration.html There is no fee to be a remote participant. regards, Lionel ___________________________________________________________________________= ______________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confiden= tielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu= ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el= ectroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou = falsifie. Merci. This message and its attachments may contain confidential or privileged inf= ormation that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and dele= te this message and its attachments. As emails may be altered, Orange is not liable for messages that have been = modified, changed or falsified. Thank you. From nobody Fri Apr 8 10:42:18 2016 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CAAFC12D97A for ; Fri, 8 Apr 2016 10:42:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lxA6DjtBfNlU for ; Fri, 8 Apr 2016 10:42:12 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 355E812D13C for ; Fri, 8 Apr 2016 10:42:12 -0700 (PDT) Received: from dhcp-8915.meeting.ietf.org ([IPv6:2001:67c:370:136:4cd0:87b4:b89c:801a]) (authenticated bits=0) by nostrum.com (8.15.2/8.14.9) with ESMTPSA id u38Hg7Uh039172 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Fri, 8 Apr 2016 12:42:09 -0500 (CDT) (envelope-from mahoney@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host [IPv6:2001:67c:370:136:4cd0:87b4:b89c:801a] claimed to be dhcp-8915.meeting.ietf.org To: "dime@ietf.org" From: "A. Jean Mahoney" Message-ID: <5707ED6E.9050806@nostrum.com> Date: Fri, 8 Apr 2016 14:42:06 -0300 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:38.0) Gecko/20100101 Thunderbird/38.7.2 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: [Dime] Notes from IETF95 dime meeting X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Apr 2016 17:42:16 -0000 Below. Pieces I missed are marked with ellipses (...) Jean ----------------------------------------------------------------- IETF-95 DIME 1000-1200 FRIDAY, April 8, 2016, Morning Session I (120 min) meeting room: Quebracho A Chairs: Jouni Korhonen Lionel Morand 10:00 - 10:10, Preliminaries (5 minutes) ------------------------------------------ Audio/Video & Remote Presentation Debugging Presenter: Jouni Slides: https://www.ietf.org/proceedings/95/slides/slides-95-dime-4.pdf Note Takers - Jean Mahoney Jabber scribe - Jean Mahoney Jabber log - http://www.ietf.org/jabber/logs/dime/2016-04-08.html slide 1: Title slide 2: Note Well slide 3: Agenda 1/2 slide 4: Agenda 2/2 10:10 - 10:20, WG Document Status (10 minutes) ------------------------------------------ Presenter: Jouni Slides: https://www.ietf.org/proceedings/95/slides/slides-95-dime-4.pdf slide 5: WG Status Update (1/2) * draft-ietf-dime-e2e-sec-req-04 --> in IESG * draft-ietf-dime-drmp-04 --> in IESG slide 6: WG Status Update (2/2) * draft-ietf-dime-group-signaling-06 --> In WG --> WGLC? Received comments from Steve Donovan, which will be covered in the meeting. * draft-ietf-dime-load-02 --> In WG --> WGLC? * draft-ietf-dime-doic-rate-control-03 --> In WG --> WGLC? * draft-ietf-dime-agent-overload-04 --> In WG --> WGLC? * draft-ietf-dime-ovli-10 --> RFC7683 slide 7: Milestones Dime working group draft discussions (0 minutes) ------------------------------------------- Presenter: Steve Donovan Slides: https://www.ietf.org/proceedings/95/slides/slides-95-dime-3.pdf slide 8: Next steps Jouni - How far along is the agent-overload draft? Steve - it's ready for WGLC. Jouni - Then leave the draft as-is. All drafts can go to WGLC about the same time. Lionel - What's the issue with SourceID? Steve - The agent-overload draft defines the payload for it. The node that inserts the OL report or the node that advertises support. It's just a DiameterID. In the case of load - it's the node that inserted load report. Lionel - Is it a different type of id depending on the what you're sending? Steve - It's meant to be generic. I'll make sure it's clean. slide 14: Next Steps Lionel - maybe we should not send everything to WGLC at the same time, but send them in rapid succession. Start with the dime-load draft? Steve - That has dependencies on the agent-overload draft. Jouni - start with the document with most dependencies. Steve - agent-overload, then dime-load. Lionel - We don't have a dependence yet in 3GPP. Next step will be to rely on the AVP in the Release 14 timeframe, so we'll need something soon. Need to review agent-overload and dime-load. Steve - What about getting an early assignment for the AVP number? Lionel - I'll ask, but I don't think it's necessary. We have time. ACTIONs: Review/WGLC agent-overload first since more drafts are dependent on it. Then move on to dime-load review/WGLC, then the rest of the overload-related drafts. --------------------------------------- Group signaling feedback Presenter: Marco Liebsch Draft: https://datatracker.ietf.org/doc/draft-ietf-dime-group-signaling/ Slides: None posted Slide: Title Thanks for Steve's comments Slide: RFC2119 consistency Steve - Capitalization issues - 2119 usage. Marco - we need to determine if the statements are mandatory or not. Slide: Server rejection of group assignment Steve - It's not clear. Are you talking about general Diameter requests or requests for group allocation? Could be read either way. Marco - Even if server rejects group assignment, the server could handle the Diameter session. It's for assignment of the group. Need to make it clear in the text. Lionel - It's in the sentence above. Steve - There's a few other places where it needs to be clearer. Slide: Server partial success of session group assignment Marco - Didn't think about this case. What would cause one to fail but another to succeed? Resource allocation? Steve - that's the fundamental question. Resources, policies. Server can insert a session into a group based on policy. Multiple groups request in one request. Resources is fundamental. Marco - From the signaling point of view. The client asks for assignment to 3 groups, of which, 2 allocations are set and the 3rd is cleared (not successful). How does the client react? Or does it reject all sessions? Steve - the last sentence implies all or nothing. Marco - that should be fine. For all 3 group. Lionel - The Session-Group-Info AVP will be there for all 3 groups. For the failed one, the flag is cleared. Steve - Add words to the effect that each AVP will present the status of each request. The words "as received" implies that it's one-to-one and can't be changed. Lionel - It's up to the client what to do - whether it wants to go on with a partial assignment or close the session. Steve - makes sense. Once a session assignment request fails, the session request must not be in group. This is a corner case - have to clarify that Lionel - client needs to manage each individual request for group assignment. And need to say what do to when not successful? Steve - yes. Slide: Client failure at server's session group assignment Steve - Agree that it should be rare. There's a policy concern. The client would not have requested it in first place. It has resources when it makes the request. What if the state saved in client is different than what's saved in the server? Is it bad to have inconsistent state? and if so, how do you sync state? Lionel - Especially if you have multiple groups. One spec group and... and if it was not maintained in the client, it would fail for at least one session. Clarify this. Marco - should the client terminate the session if it can't handle the group assignment? Lionel - "should" would be enough, but should clarify it. Avoid corner cases. There's not a concept of an optional assignment. The client should be able to comply to a request from the server or renegotiate the session. Slide: "Hard" server rejection of server Lionel - I don't see the problem for this one. For this request the server can't do group assignment. The session will be a single session. Marco - the server includes the Session-Group-Info AVP with the flag cleared. Lionel - if it's a legacy server, it doesn't send back anything at all. Steve - this is a protocol error. It's not constructing protocol error. RFC doesn't have to handle this case. Lionel - This server doesn't support it at all. Once the server has been updated to support the feature, but doesn't want to use it with these clients is another case. Marco - Should be known from other session using capabilities vector. Lionel - if you are a client, proxy, so on. Have e2e negotiation. I'll check that it's consistent in text. Slide: Use of Group-Response-Action AVP Steve - a fundamental question - and it's not clear - You have a group in a server with 1000 sessions. Which session does the server chose to send the update request to? The first one isn't an anchor or something? Marco - No Steve - Add text to clarify Lionel - any sessionID can be used can effect the session. Steve - Why all groups that this sessionID is part of. Why all groups? that's pretty complex. Lionel - we like to complexify everything. Multiple groups with similar ... Creating a request to put session in multiple groups. Charging characteristics with few differences. One characteristic is shared by all groups. Steve - but you can have a group of all groups. It's complex - you have to search... it's doable. It's seems strange when you can create another group. If you are defining a metagroup - Lionel - Can discuss on ML whether to keep the ALL_GROUPS. Marco - it's meant to be all groups in the request. You can indicate one or multiple groups in the request. If the session is in multiple groups - for instance Change QoS in these groups. Steve - need to define impacted groups. Lionel - Move on, move to ML. Slide: Next Marco - do we use tracker? Steve - look at state consistency question closely. Things can get out sync it seems. Individual draft discussions (15 minutes) ------------------------------------------- 10:20 - 10:35 End to end security solution, Jouni (15min) Draft: https://tools.ietf.org/html/draft-korhonen-dime-e2e-security-03 Slides: https://www.ietf.org/proceedings/95/slides/slides-95-dime-0.pdf slide 7: Protecting AVPs Jouni - JSON is kinda ok. Is CBOR/COSE more appropriate? Steve - we have some Diameter AVPs with an encoding. We would translate into JSON or CBOR and then encrypt? Jouni - just two new AVPs. slide 8: Signed-Data AVP Lionel - what about multiple instances of the same AVP? Jouni - you can have that. They have different signatures. Lionel - you sign each AVP? Jouni - yes slide 9: Encrypted-Data AVP Steve - it's not addressed in this draft, that it cannot be used with applications since encrypted AVPs. Jouni - The middlebox has to look at them. Steve - you could allow the encryption of routing headers if hop-by-hop. Jouni - but we're looking for e2e. Lionel - What about encrypting only AVP content? Jouni - Why reveal anything about the AVP? You can always encrypt content of the AVP unless there's structured content defined. Lionel - Username cannot be encrypted. Domain info. Jouni - You'll need a new app. You don't need username for routing in 3GPP. Lionel - if you can encrypt the contents-- Jouni - unless you have strict format of the AVP. NAI. Will fail at some middle box. It needs to be rehashed. slide 11: Anyway.. Jouni - pull up the presentation at IETF 85 for good examples. Jouni - does 3GPP want this? Lionel - likely, yes. No 3GPP requirements yet since the main interfaces have been internal. But they are asking more questions about security and integration. There are security questions around Charging Info. No TR yet. It's a MUST from my point of view. We just need people to work on it. People with more knowledge of security would be helpful. Jouni - There's just one guy who has the experience with both security and Diameter - Hannes. Lionel - maybe we ask for Hannes' support. Jouni - Please review the document. Lionel - we can use this doc as a starting point for WG discussions. Other discussions topics (20 minutes) ------------------------------------------- 10:35 - 10:55 Protocol errors, 'E' bit and answer command CCF grammar, Lionel (20min) Draft: N/A slide 9: Basic assumption Lionel - Must be compliant with 7.2 when it's a protocol error. Jouni - what's the real-life problem? Lionel - Redirection is a good example. EAP request in Answer has redirect indication. Vendors say you're not compliant. They just-- Jouni - that's just bad implementation. slide 10: Proposed way forward Jouni, as individual - it's not broken specification wise. There's bad implementations. We had an earlier situations where we had to clarify the base. I wouldn't update existing RFCs. If there is an issue, then a BCP or informational doc on how to write your spec would work. I wouldn't fix existing specifications. Jean - What about updating the Application Guide? Jouni - there are some corner cases in the App Guide. . Jouni as chair - I need to get the sense that this really is an issue. Anyone seen this in the field? Lionel - This is from 3GPP. Jouni - they can send it to the mailing list. Lionel - Yes slide 11: Your view? Lionel - could see what to put in the revision. Highlight what's missing/unclear. Lionel - It is difficult for new people to get involved in this group. It's not clear for new people. Wrap-up and Next (10 minutes) -------------------- 11:00 - 11:10 Next Steps: WG Chairs & ADs (10 minutes) WG Goals/Milestones status, next steps Slides: https://www.ietf.org/proceedings/95/slides/slides-95-dime-4.pdf slide 8: Next Step/Charter Jouni - not looking for new work just for the sake of extending diameter. Just security and the e-bit clarification. Lionel - what about topology hiding? any willingness to work on this issue? Steve - it's not an IETF problem. Is anyone asking for it? Lionel - not anymore. But it was brought up during overload discussions. Steve - GSMA has topology-hiding requirements. Lionel - I can check. Jouni - Actions before next IETF: ACTIONS: Progress all the overload/load docs. Lionel will assign reviewers for the documents. Lionel - e-bit handling Jouni - to initiate discussion on e2e sec and get secdir people. Jouni - WG to use the issue tracker for WGLC comments. slide 9: AOB? No further business From nobody Sat Apr 9 05:54:04 2016 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E01012D674 for ; Sat, 9 Apr 2016 05:54:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.619 X-Spam-Level: X-Spam-Status: No, score=-2.619 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tXhkv-k7OAF1 for ; Sat, 9 Apr 2016 05:53:59 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias92.francetelecom.com [193.251.215.92]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D02E612D66A for ; Sat, 9 Apr 2016 05:53:58 -0700 (PDT) Received: from omfedm05.si.francetelecom.fr (unknown [xx.xx.xx.1]) by omfedm09.si.francetelecom.fr (ESMTP service) with ESMTP id 059F62DC2F9; Sat, 9 Apr 2016 14:53:57 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [10.114.31.72]) by omfedm05.si.francetelecom.fr (ESMTP service) with ESMTP id D93F735C045; Sat, 9 Apr 2016 14:53:56 +0200 (CEST) Received: from OPEXCLILM43.corporate.adroot.infra.ftgroup ([fe80::ec23:902:c31f:731c]) by OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541%19]) with mapi id 14.03.0279.002; Sat, 9 Apr 2016 14:53:56 +0200 From: To: "A. Jean Mahoney" , "dime@ietf.org" Thread-Topic: [Dime] Notes from IETF95 dime meeting Thread-Index: AQHRkb4BRan7mGZ5/EO4s7NH/63MEJ+BmjIw Date: Sat, 9 Apr 2016 12:53:56 +0000 Message-ID: <15001_1460206436_5708FB64_15001_8761_1_6B7134B31289DC4FAF731D844122B36E01E39686@OPEXCLILM43.corporate.adroot.infra.ftgroup> References: <5707ED6E.9050806@nostrum.com> In-Reply-To: <5707ED6E.9050806@nostrum.com> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.5] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-PMX-Version: 6.2.1.2478543, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2016.4.9.102416 Archived-At: Subject: Re: [Dime] Notes from IETF95 dime meeting X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 Apr 2016 12:54:02 -0000 thx a lot! Lionel > -----Message d'origine----- > De=A0: DiME [mailto:dime-bounces@ietf.org] De la part de A. Jean Mahoney > Envoy=E9=A0: vendredi 8 avril 2016 19:42 > =C0=A0: dime@ietf.org > Objet=A0: [Dime] Notes from IETF95 dime meeting >=20 > Below. Pieces I missed are marked with ellipses (...) >=20 > Jean >=20 > ----------------------------------------------------------------- > IETF-95 DIME >=20 > 1000-1200 FRIDAY, April 8, 2016, Morning Session I (120 min) meeting roo= m: > Quebracho A >=20 > Chairs: > Jouni Korhonen Lionel Morand > >=20 >=20 > 10:00 - 10:10, Preliminaries (5 minutes) > ------------------------------------------ > Audio/Video & Remote Presentation Debugging >=20 > Presenter: Jouni > Slides: https://www.ietf.org/proceedings/95/slides/slides-95-dime-4.pdf >=20 > Note Takers - Jean Mahoney > Jabber scribe - Jean Mahoney > Jabber log - http://www.ietf.org/jabber/logs/dime/2016-04-08.html >=20 >=20 > slide 1: Title >=20 > slide 2: Note Well >=20 > slide 3: Agenda 1/2 >=20 > slide 4: Agenda 2/2 >=20 >=20 > 10:10 - 10:20, WG Document Status (10 minutes) > ------------------------------------------ >=20 > Presenter: Jouni > Slides: https://www.ietf.org/proceedings/95/slides/slides-95-dime-4.pdf >=20 >=20 > slide 5: WG Status Update (1/2) >=20 > * draft-ietf-dime-e2e-sec-req-04 --> in IESG > * draft-ietf-dime-drmp-04 --> in IESG >=20 > slide 6: WG Status Update (2/2) >=20 > * draft-ietf-dime-group-signaling-06 --> In WG --> WGLC? >=20 > Received comments from Steve Donovan, which will be covered in the > meeting. >=20 > * draft-ietf-dime-load-02 --> In WG --> WGLC? > * draft-ietf-dime-doic-rate-control-03 --> In WG --> WGLC? >=20 > * draft-ietf-dime-agent-overload-04 --> In WG --> WGLC? > * draft-ietf-dime-ovli-10 --> RFC7683 >=20 > slide 7: Milestones >=20 >=20 > Dime working group draft discussions (0 minutes) > ------------------------------------------- >=20 > Presenter: Steve Donovan > Slides: https://www.ietf.org/proceedings/95/slides/slides-95-dime-3.pdf >=20 >=20 > slide 8: Next steps >=20 > Jouni - How far along is the agent-overload draft? >=20 > Steve - it's ready for WGLC. >=20 > Jouni - Then leave the draft as-is. All drafts can go to WGLC about the s= ame > time. >=20 > Lionel - What's the issue with SourceID? >=20 > Steve - The agent-overload draft defines the payload for it. The node that > inserts the OL report or the node that advertises support. It's just a > DiameterID. In the case of load - it's the node that inserted load report. >=20 > Lionel - Is it a different type of id depending on the what you're sendin= g? >=20 > Steve - It's meant to be generic. I'll make sure it's clean. >=20 >=20 > slide 14: Next Steps >=20 > Lionel - maybe we should not send everything to WGLC at the same time, > but send them in rapid succession. Start with the dime-load draft? >=20 > Steve - That has dependencies on the agent-overload draft. >=20 > Jouni - start with the document with most dependencies. >=20 > Steve - agent-overload, then dime-load. >=20 > Lionel - We don't have a dependence yet in 3GPP. Next step will be to rel= y on > the AVP in the Release 14 timeframe, so we'll need something soon. Need to > review agent-overload and dime-load. >=20 > Steve - What about getting an early assignment for the AVP number? >=20 > Lionel - I'll ask, but I don't think it's necessary. We have time. >=20 >=20 > ACTIONs: Review/WGLC agent-overload first since more drafts are > dependent on it. Then move on to dime-load review/WGLC, then the rest of > the overload-related drafts. >=20 >=20 > --------------------------------------- > Group signaling feedback >=20 > Presenter: Marco Liebsch > Draft: https://datatracker.ietf.org/doc/draft-ietf-dime-group-signaling/ > Slides: None posted >=20 > Slide: Title >=20 > Thanks for Steve's comments >=20 > Slide: RFC2119 consistency >=20 > Steve - Capitalization issues - 2119 usage. >=20 > Marco - we need to determine if the statements are mandatory or not. >=20 >=20 > Slide: Server rejection of group assignment >=20 > Steve - It's not clear. Are you talking about general Diameter requests or > requests for group allocation? Could be read either way. >=20 > Marco - Even if server rejects group assignment, the server could handle = the > Diameter session. It's for assignment of the group. Need to make it clear= in > the text. >=20 > Lionel - It's in the sentence above. >=20 > Steve - There's a few other places where it needs to be clearer. >=20 >=20 > Slide: Server partial success of session group assignment >=20 > Marco - Didn't think about this case. What would cause one to fail but > another to succeed? Resource allocation? >=20 > Steve - that's the fundamental question. Resources, policies. Server can > insert a session into a group based on policy. Multiple groups request in= one > request. Resources is fundamental. >=20 > Marco - From the signaling point of view. The client asks for assignment = to 3 > groups, of which, 2 allocations are set and the 3rd is cleared (not succe= ssful). > How does the client react? Or does it reject all sessions? >=20 > Steve - the last sentence implies all or nothing. >=20 > Marco - that should be fine. For all 3 group. >=20 > Lionel - The Session-Group-Info AVP will be there for all 3 groups. For t= he > failed one, the flag is cleared. >=20 > Steve - Add words to the effect that each AVP will present the status of = each > request. The words "as received" implies that it's one-to-one and can't be > changed. >=20 > Lionel - It's up to the client what to do - whether it wants to go on wit= h a > partial assignment or close the session. >=20 > Steve - makes sense. Once a session assignment request fails, the session > request must not be in group. This is a corner case - have to clarify that >=20 > Lionel - client needs to manage each individual request for group assignm= ent. > And need to say what do to when not successful? >=20 > Steve - yes. >=20 >=20 > Slide: Client failure at server's session group assignment >=20 > Steve - Agree that it should be rare. There's a policy concern. The client > would not have requested it in first place. It has resources when it make= s the > request. What if the state saved in client is different than what's saved= in the > server? Is it bad to have inconsistent state? > and if so, how do you sync state? >=20 > Lionel - Especially if you have multiple groups. One spec group and... > and if it was not maintained in the client, it would fail for at least on= e session. > Clarify this. >=20 > Marco - should the client terminate the session if it can't handle the gr= oup > assignment? >=20 > Lionel - "should" would be enough, but should clarify it. Avoid corner ca= ses. > There's not a concept of an optional assignment. The client should be abl= e to > comply to a request from the server or renegotiate the session. >=20 >=20 > Slide: "Hard" server rejection of server >=20 > Lionel - I don't see the problem for this one. For this request the serve= r can't > do group assignment. The session will be a single session. >=20 > Marco - the server includes the Session-Group-Info AVP with the flag > cleared. >=20 > Lionel - if it's a legacy server, it doesn't send back anything at all. >=20 > Steve - this is a protocol error. It's not constructing protocol error. > RFC doesn't have to handle this case. >=20 > Lionel - This server doesn't support it at all. Once the server has been > updated to support the feature, but doesn't want to use it with these cli= ents > is another case. >=20 > Marco - Should be known from other session using capabilities vector. >=20 > Lionel - if you are a client, proxy, so on. Have e2e negotiation. I'll ch= eck that > it's consistent in text. >=20 >=20 > Slide: Use of Group-Response-Action AVP >=20 > Steve - a fundamental question - and it's not clear - You have a group > in a server with 1000 sessions. Which session does the server chose to > send the update request to? The first one isn't an anchor or something? >=20 > Marco - No >=20 > Steve - Add text to clarify >=20 > Lionel - any sessionID can be used can effect the session. >=20 > Steve - Why all groups that this sessionID is part of. Why all groups? > that's pretty complex. >=20 > Lionel - we like to complexify everything. Multiple groups with similar > ... Creating a request to put session in multiple groups. Charging > characteristics with few differences. One characteristic is shared by > all groups. >=20 > Steve - but you can have a group of all groups. It's complex - you have > to search... it's doable. It's seems strange when you can create another > group. If you are defining a metagroup - >=20 > Lionel - Can discuss on ML whether to keep the ALL_GROUPS. >=20 > Marco - it's meant to be all groups in the request. You can indicate one > or multiple groups in the request. If the session is in multiple groups > - for instance Change QoS in these groups. >=20 > Steve - need to define impacted groups. >=20 > Lionel - Move on, move to ML. >=20 >=20 >=20 > Slide: Next >=20 > Marco - do we use tracker? >=20 > Steve - look at state consistency question closely. Things can get out > sync it seems. >=20 >=20 > Individual draft discussions (15 minutes) > ------------------------------------------- > 10:20 - 10:35 End to end security solution, Jouni (15min) > Draft: https://tools.ietf.org/html/draft-korhonen-dime-e2e-security-03 > Slides: https://www.ietf.org/proceedings/95/slides/slides-95-dime-0.pdf >=20 >=20 > slide 7: Protecting AVPs >=20 > Jouni - JSON is kinda ok. Is CBOR/COSE more appropriate? >=20 > Steve - we have some Diameter AVPs with an encoding. We would translate > into JSON or CBOR and then encrypt? >=20 > Jouni - just two new AVPs. >=20 >=20 > slide 8: Signed-Data AVP >=20 > Lionel - what about multiple instances of the same AVP? >=20 > Jouni - you can have that. They have different signatures. >=20 > Lionel - you sign each AVP? >=20 > Jouni - yes >=20 >=20 > slide 9: Encrypted-Data AVP >=20 > Steve - it's not addressed in this draft, that it cannot be used with > applications since encrypted AVPs. >=20 > Jouni - The middlebox has to look at them. >=20 > Steve - you could allow the encryption of routing headers if hop-by-hop. >=20 > Jouni - but we're looking for e2e. >=20 > Lionel - What about encrypting only AVP content? >=20 > Jouni - Why reveal anything about the AVP? You can always encrypt > content of the AVP unless there's structured content defined. >=20 > Lionel - Username cannot be encrypted. Domain info. >=20 > Jouni - You'll need a new app. You don't need username for routing in 3GP= P. >=20 > Lionel - if you can encrypt the contents-- >=20 > Jouni - unless you have strict format of the AVP. NAI. Will fail at some > middle box. It needs to be rehashed. >=20 >=20 > slide 11: Anyway.. >=20 > Jouni - pull up the presentation at IETF 85 for good examples. >=20 > Jouni - does 3GPP want this? >=20 > Lionel - likely, yes. No 3GPP requirements yet since the main interfaces > have been internal. But they are asking more questions about security > and integration. There are security questions around Charging Info. No > TR yet. It's a MUST from my point of view. We just need people to work > on it. People with more knowledge of security would be helpful. >=20 > Jouni - There's just one guy who has the experience with both security > and Diameter - Hannes. >=20 > Lionel - maybe we ask for Hannes' support. >=20 > Jouni - Please review the document. >=20 > Lionel - we can use this doc as a starting point for WG discussions. >=20 >=20 >=20 > Other discussions topics (20 minutes) > ------------------------------------------- >=20 > 10:35 - 10:55 Protocol errors, 'E' bit and answer command CCF grammar, > Lionel (20min) > Draft: N/A >=20 > slide 9: Basic assumption >=20 > Lionel - Must be compliant with 7.2 when it's a protocol error. >=20 > Jouni - what's the real-life problem? >=20 > Lionel - Redirection is a good example. EAP request in Answer has > redirect indication. Vendors say you're not compliant. They just-- >=20 > Jouni - that's just bad implementation. >=20 >=20 > slide 10: Proposed way forward >=20 > Jouni, as individual - it's not broken specification wise. There's bad > implementations. We had an earlier situations where we had to clarify > the base. I wouldn't update existing RFCs. If there is an issue, then a > BCP or informational doc on how to write your spec would work. I > wouldn't fix existing specifications. >=20 > Jean - What about updating the Application Guide? >=20 > Jouni - there are some corner cases in the App Guide. . >=20 > Jouni as chair - I need to get the sense that this really is an issue. > Anyone seen this in the field? >=20 > Lionel - This is from 3GPP. >=20 > Jouni - they can send it to the mailing list. >=20 > Lionel - Yes >=20 >=20 > slide 11: Your view? >=20 > Lionel - could see what to put in the revision. Highlight what's > missing/unclear. >=20 > Lionel - It is difficult for new people to get involved in this group. > It's not clear for new people. >=20 >=20 > Wrap-up and Next (10 minutes) > -------------------- > 11:00 - 11:10 Next Steps: WG Chairs & ADs (10 minutes) > WG Goals/Milestones status, next steps >=20 > Slides: https://www.ietf.org/proceedings/95/slides/slides-95-dime-4.pdf >=20 > slide 8: Next Step/Charter >=20 > Jouni - not looking for new work just for the sake of extending > diameter. Just security and the e-bit clarification. >=20 > Lionel - what about topology hiding? any willingness to work on this issu= e? >=20 > Steve - it's not an IETF problem. Is anyone asking for it? >=20 > Lionel - not anymore. But it was brought up during overload discussions. >=20 > Steve - GSMA has topology-hiding requirements. >=20 > Lionel - I can check. >=20 > Jouni - Actions before next IETF: >=20 > ACTIONS: > Progress all the overload/load docs. Lionel will assign reviewers for > the documents. > Lionel - e-bit handling > Jouni - to initiate discussion on e2e sec and get secdir people. > Jouni - WG to use the issue tracker for WGLC comments. >=20 > slide 9: AOB? >=20 > No further business >=20 >=20 > _______________________________________________ > DiME mailing list > DiME@ietf.org > https://www.ietf.org/mailman/listinfo/dime ___________________________________________________________________________= ______________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confiden= tielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu= ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el= ectroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou = falsifie. Merci. This message and its attachments may contain confidential or privileged inf= ormation that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and dele= te this message and its attachments. As emails may be altered, Orange is not liable for messages that have been = modified, changed or falsified. Thank you. From nobody Fri Apr 22 06:29:10 2016 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A924912E463 for ; Fri, 22 Apr 2016 06:29:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.619 X-Spam-Level: X-Spam-Status: No, score=-2.619 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KkTjaSTiDRlr for ; Fri, 22 Apr 2016 06:29:07 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias91.francetelecom.com [193.251.215.91]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B927212D698 for ; Fri, 22 Apr 2016 06:29:06 -0700 (PDT) Received: from omfedm08.si.francetelecom.fr (unknown [xx.xx.xx.4]) by omfedm12.si.francetelecom.fr (ESMTP service) with ESMTP id EB08118C454 for ; Fri, 22 Apr 2016 15:29:04 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [10.114.31.61]) by omfedm08.si.francetelecom.fr (ESMTP service) with ESMTP id D19AA238056 for ; Fri, 22 Apr 2016 15:29:04 +0200 (CEST) Received: from OPEXCLILM43.corporate.adroot.infra.ftgroup ([fe80::ec23:902:c31f:731c]) by OPEXCLILM7E.corporate.adroot.infra.ftgroup ([fe80::b91c:ea2c:ac8a:7462%19]) with mapi id 14.03.0279.002; Fri, 22 Apr 2016 15:29:04 +0200 From: To: "dime@ietf.org" Thread-Topic: Use of SourceID AVP in Agent Overload and Load control drafts Thread-Index: AdGcl068okSqgAUnQBa17vO+IzGcqw== Date: Fri, 22 Apr 2016 13:29:04 +0000 Message-ID: <20257_1461331744_571A2720_20257_12979_1_6B7134B31289DC4FAF731D844122B36E01E43A7C@OPEXCLILM43.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.5] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-PMX-Version: 6.2.1.2478543, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2016.4.22.122416 Archived-At: Subject: [Dime] Use of SourceID AVP in Agent Overload and Load control drafts X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Apr 2016 13:29:09 -0000 Hi, At the last IETF meeting, we have discussed the interdependence between the= load control and the Agent Overload draft regarding the use of the SourceI= D AVP. First of all, there is some inconsistency in the agent overload draft. The = AVP is sometimes named OC-SourceID AVP and sometimes OC-SourcedID. This nee= ds to be fixed. Now, if we look at the definition of the OC-SourceID in the agent overload = draft , we find: 6.3. OC-SourceID The [OC-]SourceID AVP (AVP code TBD2) is of type DiameterIdentity and is inserted by the DOIC node that either indicates support for this feature (in the OC-Supported-Features AVP) or that generates an OC- OLR AVP with a report type of peer. It contains the Diameter Identity of the inserting node. This is used by other DOIC nodes to determine if the a peer indicated support this feature or inserted the peer report. This definition is interesting and should be kept from my point of view. I = think that having an AVP identifying the source of DOIC node is a good poin= t and this should remain. I would be then in favor to define two separate AVPs, one identifying a OC = source, another identifying a Load source. I propose to keep "OC-SourceID" for the first one and "Load-SourceID" for t= he second one. Additional advantage: if this approach is agreed, there is no need to link = both drafts anymore. Does it sound acceptable? I will initiate issues aligned with this proposal. According to the conclus= ion of this discussion, they can be accepted or rejected later. Regards, Lionel ___________________________________________________________________________= ______________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confiden= tielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu= ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el= ectroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou = falsifie. Merci. This message and its attachments may contain confidential or privileged inf= ormation that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and dele= te this message and its attachments. As emails may be altered, Orange is not liable for messages that have been = modified, changed or falsified. Thank you. From nobody Fri Apr 22 06:29:55 2016 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB31512DFA6 for ; Fri, 22 Apr 2016 06:29:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.896 X-Spam-Level: X-Spam-Status: No, score=-7.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.996] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JN6sBq7FfQJA for ; Fri, 22 Apr 2016 06:29:52 -0700 (PDT) Received: from zinfandel.tools.ietf.org (zinfandel.tools.ietf.org [IPv6:2001:1890:123a::1:2a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 771DD12DCB3 for ; Fri, 22 Apr 2016 06:29:52 -0700 (PDT) Received: from localhost ([::1]:35306 helo=zinfandel.tools.ietf.org) by zinfandel.tools.ietf.org with esmtp (Exim 4.82_1-5b7a7c0-XX) (envelope-from ) id 1atb9a-00014h-KC; Fri, 22 Apr 2016 06:29:50 -0700 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "dime issue tracker" X-Trac-Version: 0.12.5 Precedence: bulk Auto-Submitted: auto-generated X-Mailer: Trac 0.12.5, by Edgewall Software To: lionel.morand@orange.com X-Trac-Project: dime Date: Fri, 22 Apr 2016 13:29:50 -0000 X-URL: https://tools.ietf.org/wg/dime/ X-Trac-Ticket-URL: https://trac.tools.ietf.org/wg/dime/trac/ticket/93 Message-ID: <067.e3000246c722ebed2d215b28c1d162b1@trac.tools.ietf.org> X-Trac-Ticket-ID: 93 X-SA-Exim-Connect-IP: ::1 X-SA-Exim-Rcpt-To: lionel.morand@orange.com, dime@ietf.org X-SA-Exim-Mail-From: trac+dime@trac.tools.ietf.org X-SA-Exim-Scanned: No (on zinfandel.tools.ietf.org); SAEximRunCond expanded to false Archived-At: Cc: dime@ietf.org Subject: [Dime] [dime] #93 (agent-overload): Use of "OC-SourceID" AVP X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.17 Reply-To: dime@ietf.org List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Apr 2016 13:29:54 -0000 #93: Use of "OC-SourceID" AVP There is some inconsistency in the agent overload draft. The AVP identifying the source of the DOIC info is sometimes named "OC-SourceID AVP" and sometimes "SourcedID AVP". This needs to be fixed. In Section 5.1.2. Reporting Node Behavior OLD: When relaying an answer message, a reporting node that supports the OC_PEER_REPORT feature MUST strip any SourceID AVP from the OC- Supported-Features AVP. NEW: When relaying an answer message, a reporting node that supports the OC_PEER_REPORT feature MUST strip any OC-SourceID AVP from the OC- Supported-Features AVP. In section 5.2.3. Reacting Node Maintenance of Peer Report OCS OLD: If the DiameterID in the SourceID contained in the OLR matches the DiameterIdentity of the peer from which the request was received then the report was received from a Diameter peer. NEW: If the DiameterID in the OC-SourceID contained in the OLR matches the DiameterIdentity of the peer from which the request was received then the report was received from a Diameter peer. OLD: The OLR is for an existing overload condition if the reacting node has an OCS that matches the received OLR. For a peer report-type this means the DiameterIdentity received in the SourceID AVP matches the DiameterIdentity of an existing peer report OLR. NEW: The OLR is for an existing overload condition if the reacting node has an OCS that matches the received OLR. For a peer report-type this means the DiameterIdentity received in the OC-SourceID AVP matches the DiameterIdentity of an existing peer report OLR. OLD: For a peer report this means it creates an OCS entry with an DiameterID from the SourceID AVP in the received OC-OLR AVP. NEW: For a peer report this means it creates an OCS entry with an DiameterID from the OC-SourceID AVP in the received OC-OLR AVP. In section 6.3. OC-SourceID OLD: The SourceID AVP (AVP code TBD2) is of type DiameterIdentity and is inserted by the DOIC node that either indicates support for this feature (in the OC-Supported-Features AVP) or that generates an OC- OLR AVP with a report type of peer. It contains the Diameter Identity of the inserting node. This is used by other DOIC nodes to determine if the a peer indicated support this feature or inserted the peer report. NEW: The OC-SourceID AVP (AVP code TBD2) is of type DiameterIdentity and is inserted by the DOIC node that either indicates support for this feature (in the OC-Supported-Features AVP) or that generates an OC- OLR AVP with a report type of peer. It contains the Diameter Identity of the inserting node. This is used by other DOIC nodes to determine if the a peer indicated support this feature or inserted the peer report. -- --------------------------------------+-------------------- Reporter: lionel.morand@orange.com | Owner: Lionel Type: defect | Status: new Priority: major | Milestone: Component: agent-overload | Version: 2.0 Severity: Active WG Document | Keywords: --------------------------------------+-------------------- Ticket URL: dime From nobody Fri Apr 22 06:50:37 2016 Return-Path: X-Original-To: dime@ietfa.amsl.com Delivered-To: dime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F068712EC73 for ; Fri, 22 Apr 2016 06:50:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.896 X-Spam-Level: X-Spam-Status: No, score=-7.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.996] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Me6ABk0SW9y8 for ; Fri, 22 Apr 2016 06:50:32 -0700 (PDT) Received: from zinfandel.tools.ietf.org (zinfandel.tools.ietf.org [IPv6:2001:1890:123a::1:2a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D5D8412DEF7 for ; Fri, 22 Apr 2016 06:50:32 -0700 (PDT) Received: from localhost ([::1]:36995 helo=zinfandel.tools.ietf.org) by zinfandel.tools.ietf.org with esmtp (Exim 4.82_1-5b7a7c0-XX) (envelope-from ) id 1atbTc-0001lm-P5; Fri, 22 Apr 2016 06:50:32 -0700 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "dime issue tracker" X-Trac-Version: 0.12.5 Precedence: bulk Auto-Submitted: auto-generated X-Mailer: Trac 0.12.5, by Edgewall Software To: lionel.morand@orange.com X-Trac-Project: dime Date: Fri, 22 Apr 2016 13:50:32 -0000 X-URL: https://tools.ietf.org/wg/dime/ X-Trac-Ticket-URL: https://trac.tools.ietf.org/wg/dime/trac/ticket/94 Message-ID: <067.cf35e8053350c5f5cc33d655b01c7ba9@trac.tools.ietf.org> X-Trac-Ticket-ID: 94 X-SA-Exim-Connect-IP: ::1 X-SA-Exim-Rcpt-To: lionel.morand@orange.com, dime@ietf.org X-SA-Exim-Mail-From: trac+dime@trac.tools.ietf.org X-SA-Exim-Scanned: No (on zinfandel.tools.ietf.org); SAEximRunCond expanded to false Archived-At: Cc: dime@ietf.org Subject: [Dime] [dime] #94 (load): Definition of the SourceID AVP X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.17 Reply-To: dime@ietf.org List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Apr 2016 13:50:35 -0000 #94: Definition of the SourceID AVP The SourceID AVP is defined in the Agent Overload draft and reused in this draft. The SourceID AVP used in this draft should identify the source of a load report and not a DOIC node as introduced in the Agent overload draft. Both AVPs are meant to be distinct. As a consequence, it is proposed to create a new AVP specific for identifying a source of load info, the Load-SourceID AVP. The following modifications are required: In section 6.1.1. Endpoint Reporting Node Behavior OLD: The Diameter endpoint MUST include it's own DiameterIdentity in the Source-ID AVP included in the Load AVP. NEW: The Diameter endpoint MUST include it's own DiameterIdentity in the Load-SourceID AVP included in the Load AVP. In section 6.1.2. Agent Reporting Node Behavior OLD: The Diameter agent MUST include it's own DiameterIdentity in the Source-ID AVP included in the Load AVP. NEW: The Diameter agent MUST include it's own DiameterIdentity in the Load-SourceID AVP included in the Load AVP. OLD: If the Diameter node receives a Load report of type PEER then the Diameter node MUST determine if the Load report was inserted into the answer message by the peer from which the message was received. This is achieved by comparing the DiameterIdentity associated with the connection from which the message was received with the DiameterIdentity included in the Source-ID AVP in the Load report. NEW: If the Diameter node receives a Load report of type PEER then the Diameter node MUST determine if the Load report was inserted into the answer message by the peer from which the message was received. This is achieved by comparing the DiameterIdentity associated with the connection from which the message was received with the DiameterIdentity included in the Load-SourceID AVP in the Load report. In section 7.1. Load AVP OLD: The Load AVP (AVP code TBD1) is of type Grouped and is used to convey load information between Diameter nodes. Load ::= < AVP Header: TBD1 > [ Load-Type ] [ Load-Value ] [ SourceID ] * [ AVP ] NEW: The Load AVP (AVP code TBD1) is of type Grouped and is used to convey load information between Diameter nodes. Load ::= < AVP Header: TBD1 > [ Load-Type ] [ Load-Value ] [ Load-SourceID ] * [ AVP ] OLD: 7.4. SourceID AVP The SourceID AVP is defined in [I-D.ietf-dime-agent-overload]. It is used to identify the Diameter node that sent the Load report. NEW: 7.4. Load-SourceID AVP The Load-SourceID AVP is (AVP code TBD4) is of type DiameterIdentity. It contains the Diameter Identity of the node sending the Load report. In section 7.5. Attribute Value Pair flag rules +---------+ |AVP flag | |rules | +----+----+ AVP Section | |MUST| Attribute Name Code Defined Value Type |MUST| NOT| +--------------------------------------------------------+----+----+ |Load TBD1 x.1 Grouped | | V | +--------------------------------------------------------+----+----+ |Load-Type TBD2 x.2 Enumerated | | V | +--------------------------------------------------------+----+----+ |Load-Value TBD3 x.3 Unsigned64 | | V | +------------------------------------------------------ -+----+----+ |SourceID TBD4 x.4 DiameterIdentity | | V | +--------------------------------------------------------+----+----+ NEW: +---------+ |AVP flag | |rules | +----+----+ AVP Section | |MUST| Attribute Name Code Defined Value Type |MUST| NOT| +--------------------------------------------------------+----+----+ |Load TBD1 7.1 Grouped | | V | +--------------------------------------------------------+----+----+ |Load-Type TBD2 7.2 Enumerated | | V | +--------------------------------------------------------+----+----+ |Load-Value TBD3 7.3 Unsigned64 | | V | +------------------------------------------------------ -+----+----+ |Load-SourceID TBD4 7.4 DiameterIdentity | | V | +--------------------------------------------------------+----+----+ -- --------------------------------------+-------------------- Reporter: lionel.morand@orange.com | Owner: Lionel Type: defect | Status: new Priority: major | Milestone: Component: load | Version: 2.0 Severity: Active WG Document | Keywords: --------------------------------------+-------------------- Ticket URL: dime From nobody Thu Apr 28 07:08:51 2016 Return-Path: X-Original-To: dime@ietf.org Delivered-To: dime@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D840412D195; Thu, 28 Apr 2016 07:08:48 -0700 (PDT) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.19.0 Auto-Submitted: auto-generated Precedence: bulk Sender: Message-ID: <20160428140848.27837.40252.idtracker@ietfa.amsl.com> Date: Thu, 28 Apr 2016 07:08:48 -0700 Archived-At: Cc: draft-ietf-dime-e2e-sec-req@ietf.org, dime@ietf.org, dime-chairs@ietf.org Subject: [Dime] Last Call: (Diameter AVP Level Security End-to-End Security: Scenarios and Requirements) to Informational RFC X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.17 Reply-To: ietf@ietf.org List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Apr 2016 14:08:49 -0000 The IESG has received a request from the Diameter Maintenance and Extensions WG (dime) to consider the following document: - 'Diameter AVP Level Security End-to-End Security: Scenarios and Requirements' as Informational RFC The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2016-05-12. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Abstract This specification discusses requirements for providing Diameter security at the level of individual Attribute-Value Pairs. The file can be obtained via https://datatracker.ietf.org/doc/draft-ietf-dime-e2e-sec-req/ IESG discussion can be tracked via https://datatracker.ietf.org/doc/draft-ietf-dime-e2e-sec-req/ballot/ No IPR declarations have been submitted directly on this I-D. From nobody Thu Apr 28 08:04:22 2016 Return-Path: X-Original-To: dime@ietf.org Delivered-To: dime@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 2355212D80D; Thu, 28 Apr 2016 08:04:20 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Alexey Melnikov" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.19.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160428150420.27801.59309.idtracker@ietfa.amsl.com> Date: Thu, 28 Apr 2016 08:04:20 -0700 Archived-At: Cc: draft-ietf-dime-drmp@ietf.org, dime-chairs@ietf.org, dime@ietf.org Subject: [Dime] Alexey Melnikov's No Objection on draft-ietf-dime-drmp-05: (with COMMENT) X-BeenThere: dime@ietf.org X-Mailman-Version: 2.1.17 List-Id: Diameter Maintanence and Extentions Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Apr 2016 15:04:20 -0000 Alexey Melnikov has entered the following ballot position for draft-ietf-dime-drmp-05: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-dime-drmp/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- In Section 6: excuse my ignorance, but how can priority information be conveyed to non-supporting endpoints (in 2 places)? And what is the point,as they don't support the extension? In 9.1: it would be better to just have a table, instead of copying and modifying lots of text. It would be good to have a short sentence saying how this extension affects non upgraded agents.