From nobody Fri Jul 1 01:55:24 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 531A312D0A1 for ; Fri, 1 Jul 2016 01:55:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.647 X-Spam-Level: X-Spam-Status: No, score=-5.647 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.426, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f2wfBJ4BgkKc for ; Fri, 1 Jul 2016 01:55:21 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8473712B009 for ; Fri, 1 Jul 2016 01:55:20 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml705-cah.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CMZ31773; Fri, 01 Jul 2016 08:55:17 +0000 (GMT) Received: from SZXEMA418-HUB.china.huawei.com (10.82.72.36) by lhreml705-cah.china.huawei.com (10.201.5.168) with Microsoft SMTP Server (TLS) id 14.3.235.1; Fri, 1 Jul 2016 09:55:16 +0100 Received: from SZXEMA502-MBS.china.huawei.com ([169.254.4.245]) by SZXEMA418-HUB.china.huawei.com ([10.82.72.36]) with mapi id 14.03.0235.001; Fri, 1 Jul 2016 16:55:10 +0800 From: "Xialiang (Frank)" To: "dots@ietf.org" Thread-Topic: New Version Notification for draft-nishizuka-dots-inter-domain-mechanism-01.txt Thread-Index: AQHR03Prd8q2oL5bzkWMUF+E7bR4VaADRGgw Date: Fri, 1 Jul 2016 08:55:10 +0000 Message-ID: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.135.43.91] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020203.57762FF6.0036, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=169.254.4.245, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: a81ea014765ec83246fad6715cd1bf43 Archived-At: Subject: [Dots] Fwd: New Version Notification for draft-nishizuka-dots-inter-domain-mechanism-01.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Jul 2016 08:55:23 -0000 SGkgYWxsLA0KV2Ugc3VibWl0IGEgbmV3IHZlcnNpb24gZm9yIHRoZSBpbnRlci1kb21haW4tbWVj aGFuaXNtIGRyYWZ0LCB0aGUgbWFpbiB1cGRhdGVzIGluY2x1ZGU6DQoxLiBBZGQgY29udGVudHMg dG8gZXhwbGFpbiB0aGUgcHJvdG9jb2wgYW5kIHNpZ25hbGluZyBtZXNzYWdlcyBzcGVjaWZpY2F0 aW9uIGFwcGxpZXMgYm90aCBpbnRyYS1kb21haW4gYW5kIGludGVyLWRvbWFpbiBzaXR1YXRpb25z Ow0KMi4gUmVzdHJ1Y3R1cmluZyB0aGUgY29udGVudHMgb2YgQ29vcGVyYXRpdmUgRERvUyBQcm90 ZWN0aW9uIFJlcXVpcmVtZW50cw0KMy4gUmVkZXNpZ24gRE9UUyBzaWduYWxpbmcgbWVzc2FnZXMg YW5kIHRoZWlyIGRldGFpbGVkIGF0dHJpYnV0ZXMsIGFzIHdlbGwgYXMgdGhlIHByb3RvY29sIG9w ZXJhdGlvbnM7DQo0LiBBIGxvdCBvZiBlZGl0b3JpYWwgdGV4dCBjaGFuZ2VzOw0KNS4gTmV3IGNv LWF1dGhvcnMgZnJvbSBDb21jYXN0IGFuZCBDaGFydGVyLg0KDQpZb3VyIGNvbW1lbnRzIGFyZSB3 ZWxjb21lIQ0KDQpCLlIuDQpGcmFuaw0KDQotLS0tLemCruS7tuWOn+S7ti0tLS0tDQrlj5Hku7bk uro6IGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZyBbbWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRm Lm9yZ10gDQrlj5HpgIHml7bpl7Q6IDIwMTblubQ35pyIMeaXpSAxNjozOA0K5pS25Lu25Lq6OiBE YWNoZW5nIFpoYW5nOyBYaWFsaWFuZyAoRnJhbmspOyBMdXl1YW4gRmFuZzsgS2FuYW1lIE5pc2hp enVrYTsgWGlhamlud2VpOyBSaWNoIENvbXB0b247IENocmlzdG9waGVyIEdyYXk7IGNocmlzdG9w aGVyX2dyYXkzQGNhYmxlLmNvbWNhc3QuY29tDQrkuLvpopg6IE5ldyBWZXJzaW9uIE5vdGlmaWNh dGlvbiBmb3IgZHJhZnQtbmlzaGl6dWthLWRvdHMtaW50ZXItZG9tYWluLW1lY2hhbmlzbS0wMS50 eHQNCg0KDQpBIG5ldyB2ZXJzaW9uIG9mIEktRCwgZHJhZnQtbmlzaGl6dWthLWRvdHMtaW50ZXIt ZG9tYWluLW1lY2hhbmlzbS0wMS50eHQNCmhhcyBiZWVuIHN1Y2Nlc3NmdWxseSBzdWJtaXR0ZWQg YnkgTGlhbmcgWGlhIGFuZCBwb3N0ZWQgdG8gdGhlIElFVEYgcmVwb3NpdG9yeS4NCg0KTmFtZToJ CWRyYWZ0LW5pc2hpenVrYS1kb3RzLWludGVyLWRvbWFpbi1tZWNoYW5pc20NClJldmlzaW9uOgkw MQ0KVGl0bGU6CQlJbnRlci1kb21haW4gY29vcGVyYXRpdmUgRERvUyBwcm90ZWN0aW9uIG1lY2hh bmlzbQ0KRG9jdW1lbnQgZGF0ZToJMjAxNi0wNy0wMQ0KR3JvdXA6CQlJbmRpdmlkdWFsIFN1Ym1p c3Npb24NClBhZ2VzOgkJMjgNClVSTDogICAgICAgICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9p bnRlcm5ldC1kcmFmdHMvZHJhZnQtbmlzaGl6dWthLWRvdHMtaW50ZXItZG9tYWluLW1lY2hhbmlz bS0wMS50eHQNClN0YXR1czogICAgICAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2Rv Yy9kcmFmdC1uaXNoaXp1a2EtZG90cy1pbnRlci1kb21haW4tbWVjaGFuaXNtLw0KSHRtbGl6ZWQ6 ICAgICAgIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1uaXNoaXp1a2EtZG90cy1p bnRlci1kb21haW4tbWVjaGFuaXNtLTAxDQpEaWZmOiAgICAgICAgICAgaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LW5pc2hpenVrYS1kb3RzLWludGVyLWRvbWFpbi1tZWNo YW5pc20tMDENCg0KQWJzdHJhY3Q6DQogICBBcyBERG9TIGF0dGFja3MgZXZvbHZlIHJhcGlkbHkg aW4gdGhlIGFzcGVjdCBvZiB2b2x1bWUgYW5kDQogICBzb3BoaXN0aWNhdGlvbiwgY29vcGVyYXRp b24gYW1vbmcgb3BlcmF0b3JzIGJlY29tZXMgdmVyeSBuZWNlc3NhcnkNCiAgIGJlY2F1c2UgaXQg d2lsbCBnaXZlIHVzIHF1aWNrZXIgYW5kIG1vcmUgc29waGlzdGljYXRlZCBwcm90ZWN0aW9uIHRv DQogICBjb3BlIHdpdGggdGhlbS4gIFRoaXMgZG9jdW1lbnQgZGVzY3JpYmVzIHBvc3NpYmxlIG1l Y2hhbmlzbXMgd2hpY2gNCiAgIGltcGxlbWVudCB0aGUgY29vcGVyYXRpdmUgaW50ZXItZG9tYWlu IEREb1MgcHJvdGVjdGlvbiBieSBET1RTDQogICBwcm90b2NvbC4gIFRoZSBkZXNjcmliZWQgZGF0 YSBtb2RlbHMgYXJlIGludGVuZGVkIHRvIGNvdmVyIGludHJhLQ0KICAgZG9tYWluIGFuZCBpbnRl ci1kb21haW4gc29sdXRpb25zLg0KDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgDQoNCg0KUGxl YXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51dGVzIGZyb20gdGhlIHRp bWUgb2Ygc3VibWlzc2lvbiB1bnRpbCB0aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUg YXZhaWxhYmxlIGF0IHRvb2xzLmlldGYub3JnLg0KDQpUaGUgSUVURiBTZWNyZXRhcmlhdA0KDQo= From nobody Tue Jul 5 12:58:38 2016 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B5E0F12D586; Tue, 5 Jul 2016 12:58:32 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.25.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160705195832.22298.55692.idtracker@ietfa.amsl.com> Date: Tue, 05 Jul 2016 12:58:32 -0700 Archived-At: Cc: dots@ietf.org Subject: [Dots] I-D Action: draft-ietf-dots-architecture-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Jul 2016 19:58:33 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the DDoS Open Threat Signaling of the IETF. Title : Distributed-Denial-of-Service Open Threat Signaling (DOTS) Architecture Authors : Andrew Mortensen Flemming Andreasen Tirumaleswar Reddy Christopher Gray Rich Compton Nik Teague Filename : draft-ietf-dots-architecture-00.txt Pages : 27 Date : 2016-07-05 Abstract: This document describes an architecture for establishing and maintaining Distributed Denial of Service (DDoS) Open Threat Signaling (DOTS) within and between domains. The document does not specify protocols or protocol extensions, instead focusing on defining architectural relationships, components and concepts used in a DOTS deployment. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dots-architecture/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-dots-architecture-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Jul 6 00:46:51 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5BDE812D6B3 for ; Wed, 6 Jul 2016 00:46:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -15.947 X-Spam-Level: X-Spam-Status: No, score=-15.947 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.426, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QR-2N5H3kMdG for ; Wed, 6 Jul 2016 00:46:48 -0700 (PDT) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 23D1A12D732 for ; Wed, 6 Jul 2016 00:46:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2698; q=dns/txt; s=iport; t=1467791206; x=1469000806; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=SAGKMcGPuItPfKoFTgS5btJ7IDn9yanjo1YrsCutoZA=; b=gopEIieCf5C7HzR1lSW0VsvI52Lk3koEfvsFqreijTrLgd7BI652Rt9c mqH+mzn3RLg7jzpH5+DqsVpWcyFc3zetLV0tCeApeVzE9LEL8RtVrMC2q zDArZkhnfQMuP4V9l5953DsTfWFHBgkcmGJQsjy58HSiJdNTLbj83liST Q=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AoAgB8tnxX/4ENJK1dgz5WfAa5QYF3I?= =?us-ascii?q?oV2AhyBFDgUAQEBAQEBAWUcC4RMAQEFIxFDDgQCAQgRBAEBAwIjAwICAjAUAQY?= =?us-ascii?q?BAQUDAgQTCIgoDqtbj34BAQEBAQEBAQEBAQEBAQEBAQEBAQEcgQGFJoRNhB0Ng?= =?us-ascii?q?xeCWgWOBIsPAYYIiDeBcU6ECIhqkAkBHjaDcG4Bhy5EfwEBAQ?= X-IronPort-AV: E=Sophos;i="5.28,318,1464652800"; d="scan'208";a="120884896" Received: from alln-core-9.cisco.com ([173.36.13.129]) by rcdn-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 06 Jul 2016 07:46:45 +0000 Received: from XCH-ALN-017.cisco.com (xch-aln-017.cisco.com [173.36.7.27]) by alln-core-9.cisco.com (8.14.5/8.14.5) with ESMTP id u667kj6F003746 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for ; Wed, 6 Jul 2016 07:46:45 GMT Received: from xch-rcd-017.cisco.com (173.37.102.27) by XCH-ALN-017.cisco.com (173.36.7.27) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 6 Jul 2016 02:46:44 -0500 Received: from xch-rcd-017.cisco.com ([173.37.102.27]) by XCH-RCD-017.cisco.com ([173.37.102.27]) with mapi id 15.00.1210.000; Wed, 6 Jul 2016 02:46:44 -0500 From: "Tirumaleswar Reddy (tireddy)" To: "dots@ietf.org" Thread-Topic: New Version Notification for draft-reddy-dots-transport-05.txt Thread-Index: AQHR11jVVEDsCwAAOkiBthaVHADSf6ALBdQQ Date: Wed, 6 Jul 2016 07:46:44 +0000 Message-ID: <50de5af611944788898536433cc1dfbd@XCH-RCD-017.cisco.com> References: <20160706073427.7900.59549.idtracker@ietfa.amsl.com> In-Reply-To: <20160706073427.7900.59549.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.65.72.137] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: [Dots] FW: New Version Notification for draft-reddy-dots-transport-05.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2016 07:46:50 -0000 QWRkZWQgbmV3IHNlY3Rpb24gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LXJlZGR5 LWRvdHMtdHJhbnNwb3J0LTA1I3NlY3Rpb24tOCB0byBkaXNjdXNzIGFib3V0IG11dHVhbCBhdXRo ZW50aWNhdGlvbiBvZiBET1RTIEFnZW50cyAmIGF1dGhvcml6YXRpb24gb2YgRE9UUyBjbGllbnRz LiBDb21tZW50cyBhbmQgc3VnZ2VzdGlvbnMgYXJlIHdlbGNvbWUuDQoNCkNoZWVycywNCi1UaXJ1 DQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBpbnRlcm5ldC1kcmFmdHNAaWV0 Zi5vcmcgW21haWx0bzppbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmddIA0KU2VudDogV2VkbmVzZGF5 LCBKdWx5IDA2LCAyMDE2IDE6MDQgUE0NClRvOiBQcmFzaGFudGggUGF0aWwgKHByYXNwYXRpKTsg RGFuIFdpbmcgKGR3aW5nKTsgTWlrZSBHZWxsZXIgKG1nZWxsZXIpOyBSb2JlcnQgTW9za293aXR6 OyBNb2hhbWVkIEJvdWNhZGFpcjsgVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KQ0KU3ViamVj dDogTmV3IFZlcnNpb24gTm90aWZpY2F0aW9uIGZvciBkcmFmdC1yZWRkeS1kb3RzLXRyYW5zcG9y dC0wNS50eHQNCg0KDQpBIG5ldyB2ZXJzaW9uIG9mIEktRCwgZHJhZnQtcmVkZHktZG90cy10cmFu c3BvcnQtMDUudHh0DQpoYXMgYmVlbiBzdWNjZXNzZnVsbHkgc3VibWl0dGVkIGJ5IFRpcnVtYWxl c3dhciBSZWRkeSBhbmQgcG9zdGVkIHRvIHRoZQ0KSUVURiByZXBvc2l0b3J5Lg0KDQpOYW1lOgkJ ZHJhZnQtcmVkZHktZG90cy10cmFuc3BvcnQNClJldmlzaW9uOgkwNQ0KVGl0bGU6CQlDby1vcGVy YXRpdmUgRERvUyBNaXRpZ2F0aW9uDQpEb2N1bWVudCBkYXRlOgkyMDE2LTA3LTA2DQpHcm91cDoJ CUluZGl2aWR1YWwgU3VibWlzc2lvbg0KUGFnZXM6CQkyNg0KVVJMOiAgICAgICAgICAgIGh0dHBz Oi8vd3d3LmlldGYub3JnL2ludGVybmV0LWRyYWZ0cy9kcmFmdC1yZWRkeS1kb3RzLXRyYW5zcG9y dC0wNS50eHQNClN0YXR1czogICAgICAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2Rv Yy9kcmFmdC1yZWRkeS1kb3RzLXRyYW5zcG9ydC8NCkh0bWxpemVkOiAgICAgICBodHRwczovL3Rv b2xzLmlldGYub3JnL2h0bWwvZHJhZnQtcmVkZHktZG90cy10cmFuc3BvcnQtMDUNCkRpZmY6ICAg ICAgICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtcmVkZHktZG90 cy10cmFuc3BvcnQtMDUNCg0KQWJzdHJhY3Q6DQogICBUaGlzIGRvY3VtZW50IHNwZWNpZmllcyBh IG1lY2hhbmlzbSB0aGF0IGEgRE9UUyBjbGllbnQgY2FuIHVzZSB0bw0KICAgc2lnbmFsIHRoYXQg YSBuZXR3b3JrIGlzIHVuZGVyIGEgRGlzdHJpYnV0ZWQgRGVuaWFsLW9mLVNlcnZpY2UgKEREb1Mp DQogICBhdHRhY2sgdG8gYW4gdXBzdHJlYW0gRE9UUyBzZXJ2ZXIgc28gdGhhdCBhcHByb3ByaWF0 ZSBtaXRpZ2F0aW9uDQogICBhY3Rpb25zIGFyZSB1bmRlcnRha2VuIChpbmNsdWRpbmcsIGJsYWNr aG9sZSwgZHJvcCwgcmF0ZS1saW1pdCwgb3INCiAgIGFkZCB0byB3YXRjaCBsaXN0KSBvbiB0aGUg c3VzcGVjdCB0cmFmZmljLiAgVGhlIGRvY3VtZW50IHNwZWNpZmllcw0KICAgYm90aCBET1RTIHNp Z25hbCBhbmQgZGF0YSBjaGFubmVscy4gIEhhcHB5IEV5ZWJhbGxzIGNvbnNpZGVyYXRpb25zDQog ICBmb3IgdGhlIERPVFMgc2lnbmFsIGNoYW5uZWwgYXJlIGFsc28gZWxhYm9yYXRlZC4NCg0KICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIA0KDQoNClBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2Ug YSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9mIHN1Ym1pc3Npb24NCnVudGlsIHRo ZSBodG1saXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBhdmFpbGFibGUgYXQgdG9vbHMuaWV0Zi5v cmcuDQoNClRoZSBJRVRGIFNlY3JldGFyaWF0DQoNCg== From nobody Wed Jul 6 07:29:31 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AED5D12D7DA for ; Wed, 6 Jul 2016 07:29:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.326 X-Spam-Level: X-Spam-Status: No, score=-8.326 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CN__xVJGewPa for ; Wed, 6 Jul 2016 07:29:25 -0700 (PDT) Received: from mail3-relais-sop.national.inria.fr (mail3-relais-sop.national.inria.fr [192.134.164.104]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3E9DC12D795 for ; Wed, 6 Jul 2016 07:27:01 -0700 (PDT) X-IronPort-AV: E=Sophos;i="5.28,319,1464645600"; d="scan'208";a="184060751" Received: from unknown (HELO [128.93.85.21]) ([128.93.85.21]) by mail3-relais-sop.national.inria.fr with ESMTP/TLS/DHE-RSA-AES128-SHA; 06 Jul 2016 16:26:36 +0200 Message-ID: <577D151C.5090104@inria.fr> Date: Wed, 06 Jul 2016 16:26:36 +0200 From: =?windows-1252?Q?J=E9r=F4me_Fran=E7ois?= User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: dots@ietf.org References: <20160706073427.7900.59549.idtracker@ietfa.amsl.com> <50de5af611944788898536433cc1dfbd@XCH-RCD-017.cisco.com> In-Reply-To: <50de5af611944788898536433cc1dfbd@XCH-RCD-017.cisco.com> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [Dots] FW: New Version Notification for draft-reddy-dots-transport-05.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2016 14:29:30 -0000 Thanks Tiru, You introduce an AAA server in the DOTS gateway domain but it is not clear for me whether this is also the case at the DOTS server side. I would say yes, especially needed if there is no gateway. BTW, would it be better to locate the AAA server and communication outside example.com domain, to have the lower overhead close to where the attack occurs? J=E9r=F4me Le 06/07/2016 09:46, Tirumaleswar Reddy (tireddy) a =E9crit : > Added new section https://tools.ietf.org/html/draft-reddy-dots-transpor= t-05#section-8 to discuss about mutual authentication of DOTS Agents & au= thorization of DOTS clients. Comments and suggestions are welcome. > > Cheers, > -Tiru > > -----Original Message----- > From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org]=20 > Sent: Wednesday, July 06, 2016 1:04 PM > To: Prashanth Patil (praspati); Dan Wing (dwing); Mike Geller (mgeller)= ; Robert Moskowitz; Mohamed Boucadair; Tirumaleswar Reddy (tireddy) > Subject: New Version Notification for draft-reddy-dots-transport-05.txt= > > > A new version of I-D, draft-reddy-dots-transport-05.txt > has been successfully submitted by Tirumaleswar Reddy and posted to the= > IETF repository. > > Name: draft-reddy-dots-transport > Revision: 05 > Title: Co-operative DDoS Mitigation > Document date: 2016-07-06 > Group: Individual Submission > Pages: 26 > URL: https://www.ietf.org/internet-drafts/draft-reddy-dots-t= ransport-05.txt > Status: https://datatracker.ietf.org/doc/draft-reddy-dots-trans= port/ > Htmlized: https://tools.ietf.org/html/draft-reddy-dots-transport-= 05 > Diff: https://www.ietf.org/rfcdiff?url2=3Ddraft-reddy-dots-tr= ansport-05 > > Abstract: > This document specifies a mechanism that a DOTS client can use to > signal that a network is under a Distributed Denial-of-Service (DDoS= ) > attack to an upstream DOTS server so that appropriate mitigation > actions are undertaken (including, blackhole, drop, rate-limit, or > add to watch list) on the suspect traffic. The document specifies > both DOTS signal and data channels. Happy Eyeballs considerations > for the DOTS signal channel are also elaborated. > > = =20 > > > Please note that it may take a couple of minutes from the time of submi= ssion > until the htmlized version and diff are available at tools.ietf.org. > > The IETF Secretariat > > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Jul 7 07:06:05 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4818C12D7CE; Thu, 7 Jul 2016 07:05:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.399 X-Spam-Level: X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.198, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MXRUg2_B9PFt; Thu, 7 Jul 2016 07:05:56 -0700 (PDT) Received: from mail-wm0-x242.google.com (mail-wm0-x242.google.com [IPv6:2a00:1450:400c:c09::242]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A44FF12D7C6; Thu, 7 Jul 2016 07:04:41 -0700 (PDT) Received: by mail-wm0-x242.google.com with SMTP id n127so3196618wme.0; Thu, 07 Jul 2016 07:04:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=8UGptCKQdELALt+Q9e3MGxNCqSXYmFZIaTwFxwG5v+U=; b=anWv2cZOj+dH6rXbXOirtVro+AyqMrEZPNRVfdRT8HPgpFlDf/fHaaulrUcwSK0WT7 wM1JBs4qP0Z0cx/Jr/DOYY8U33dN5E55Z/zhr+QjeWgIHuMQL65DFQJzYBOgE1A9m6gR Ed5at3BRG2Wg4/fVSz5v4M4niVAKXhgeQaKCS0743PtcIWwWOF5ypf0Eq7AZTgVDmhsf hhmJZBLuF80yVCUbjuGhRKYEet6xLEmaQ3iaW21JiwNdX2MaLKF7ogp+4zSUq+I0qK1a QimNzz2fXYiQ2FpdKyjPYdzZqrGJGynOpX630ckJ3S8fvYL3S/rq6EDyvH7NU3asSgjh VD2w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=8UGptCKQdELALt+Q9e3MGxNCqSXYmFZIaTwFxwG5v+U=; b=YWMcq0QD091J3/c5cHbBRpDhe98YcJOamX+hmD7S2ssCKXcMuCGebuRR/+9kDcPP5+ immZrpAeht+5/rV774YRQZB4s7t3yT4UAKXJVO+n8XVMjsNfF4ohQSZgOsE0AFWdYpWC Qt6cttRlp2AH7DF+XExvxzelt+oDej57bvKpn0K3mZ+ZReYeK9cSbF+4MX3PtyS3Y2Cm wDjYb5XYWJqEIs/gTUI+Pdp4ijqrIr6TpgKtuBDDpW7jTDWuEm7lpwKCrM+EB59ir708 cioTwFmt+KHZ/n44fSCyKdQ+DZLg+4b8DDIztRN29c9kgNKW8HVc7Holod+LBdobiMiN uVgg== X-Gm-Message-State: ALyK8tJGMaDcCLArcA8teucf6DeWXHsSPDjyLnInDGmPo5KSXleB4iR8gHPJLsHemTTarpxixz29ZW6Z0/54Bw== X-Received: by 10.194.23.7 with SMTP id i7mr360926wjf.57.1467900280065; Thu, 07 Jul 2016 07:04:40 -0700 (PDT) MIME-Version: 1.0 Sender: mglt.ietf@gmail.com Received: by 10.194.34.99 with HTTP; Thu, 7 Jul 2016 07:04:39 -0700 (PDT) In-Reply-To: <2DD56D786E600F45AC6BDE7DA4E8A8C117F2703F@eusaamb107.ericsson.se> References: <20160628153949.24167.29375.idtracker@ietfa.amsl.com> <2DD56D786E600F45AC6BDE7DA4E8A8C117F2703F@eusaamb107.ericsson.se> From: Daniel Migault Date: Thu, 7 Jul 2016 10:04:39 -0400 X-Google-Sender-Auth: U6sLyqy_pjMbq24IuB51kqMAm9k Message-ID: To: "i2nsf@ietf.org" , "dots@ietf.org" Content-Type: multipart/alternative; boundary=047d7b450a9ac2587905370c2a81 Archived-At: Cc: Alireza Ranjbar , "mglt.ietf@gmail.com" Subject: Re: [Dots] New Version Notification for draft-mglt-i2nsf-ssf-collaboration-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Jul 2016 14:05:59 -0000 --047d7b450a9ac2587905370c2a81 Content-Type: text/plain; charset=UTF-8 Hi, This mail is an attempt to clarify: 1) the different parties involved into the agreement 2) key information exchanged. The negotiation protocol has been designed to be context independent, which means it could be re-used in various scenrios where some agreement is needed between different parties. However, its design has been motivated for the deployment of network security functions. Currently most of the protocol uses HTTP/JSON. What we would like to understand is whether the design fits I2NSF architecture, and how to make this work more inline with I2NSF. We also have additional questions we would like to get feed backs on. 1) Different parties involved in the negotiation In our specific context, the collaboration agreement between independent domains involves - 1) allocation of computing resources - such as the instantiation of a NSF, which is typically implemented in a VM or a container - 2) network management - such as steering the output flows of the SFs through different paths depending on the SF evaluation. In our case, the collaboration is agreed between the security orchestrators of each domain. With I2NSF terminology, it seems to me that collaboration is likely to occur between the "Network Operator Management Security Controllers of the two respective domains. That said, it is a design choice to centralize the management of the Security on each domain, and we also consider collaboration between NSF or between NSF and the Security Controller. In our case, the DOTS seems a better interface between NSF and the Security Controller. 2) Key information exchanged As mentioned earlier, the collaboration protocol has been designed to remain flexible as the key information to be agreed on may vary in different situations. This is the reason the protocol has been designed to set a collaboration, and any key information associated to the collaboration could be negotiated on top of it. In our specific case, the main information the two domains agree on are: - The type of Network Security Service: The service could be a firewall, a anti-tcp-syn service , a drop service..... The main difficulty on defining the service is to adopt an consistent designation of the service. We would appreciate discussion and opinion regarding this topic. - The resource engaged into the collaboration. Again, there is also a large panel on how to describe resource. One way would consist in adopting a high level description such as proposed by AWS, finer description could also include the cgroup terminology... Again any feed back on how you think this type of resource should be described would be appreciated. - Network Configuration: For this type of resource, we designated it as "Alternate Path" the path where packets that have not been treated are steered. BR, Daniel On Tue, Jun 28, 2016 at 11:42 AM, Daniel Migault wrote: > Hi, > > Please find our draft for elaborating a collaboration between security > services locate in different administrative domains. > > Feed backs /Comments are welcome! > BR, > Daniel > > -----Original Message----- > From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] > Sent: Tuesday, June 28, 2016 6:40 PM > To: Daniel Migault; Alireza Ranjbar > Subject: New Version Notification for > draft-mglt-i2nsf-ssf-collaboration-00.txt > > > A new version of I-D, draft-mglt-i2nsf-ssf-collaboration-00.txt > has been successfully submitted by Daniel Migault and posted to the IETF > repository. > > Name: draft-mglt-i2nsf-ssf-collaboration > Revision: 00 > Title: Collaboration Agreement for Security Service Function > Document date: 2016-06-28 > Group: Individual Submission > Pages: 13 > URL: > https://www.ietf.org/internet-drafts/draft-mglt-i2nsf-ssf-collaboration-00.txt > Status: > https://datatracker.ietf.org/doc/draft-mglt-i2nsf-ssf-collaboration/ > Htmlized: > https://tools.ietf.org/html/draft-mglt-i2nsf-ssf-collaboration-00 > > > Abstract: > This document specifies a collaboration agreement protocol. The > collaboration agreement makes possible individual security services > functions (SSF) to collaborate with each other. The collaboration is > mostly intended for SSF located in different administrative domains, > in which case the collaboration cannot be performed by a shared > orchestrator. > > The collaboration between SSF in different domains assumes the > traffic is steered through the two domains. > > > > > Please note that it may take a couple of minutes from the time of > submission until the htmlized version and diff are available at > tools.ietf.org. > > The IETF Secretariat > > --047d7b450a9ac2587905370c2a81 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi,

This mail is an attempt to clarify:
=C2=A0=C2=A0=C2= =A0 1) the different parties involved into the agreement
=C2=A0=C2=A0=C2= =A0 2) key information exchanged.

The negotiation protocol ha= s been designed to be context independent, which means it could be re-used = in various scenri= os where some agreement is needed between different parties. However= , its design has been motivated for the deployment of network security func= tions.

Currently most of the protocol uses HTTP/JSON. What we would like to understand is whet= her the design fits I2NSF architecture, and how to make this work more inline with I2NSF. We = also have additional questions we would like to get feed backs on.=C2=A0
<= div>
1) Different parties involved in the negotiation

=
In our specific context, the collaboration agreement between independ= ent domains involves
=C2=A0 - 1) allocation of computing resources - su= ch as the instantiation of a NSF, which is typically implemented in a VM or a contai= ner
=C2=A0 - 2) network management - such as steering the output flows o= f the SFs= through different paths depending on the SF evaluation. In our case, the c= ollaboration is agreed between the security orchestrators of each domain. With I2NSF= terminology, it seems to me that collaboration is likely to occur between = the "Network Operator Management Security Controllers of the two respe= ctive domains.

That said, it is a design choice to centralize = the management of the Security on each domain, and we also consider collabo= ration between NSF or between NSF and the Security Controller. In our case,= the DOTS seems a better interface between NSF and the Security Controller.=

2) Key information exchanged

As mentioned earli= er, the collaboration protocol has been designed to remain flexible as the = key information to be agreed on may vary in different situations. This is t= he reason the protocol has been designed to set a collaboration, and any ke= y information associated to the collaboration could be negotiated on top of= it.
In our specific case, the main information the two domains a= gree on are:
=C2=A0=C2=A0=C2=A0 - The type of Network Security Ser= vice: The service could be a firewall, a anti-tcp-syn service , a drop service..... = The main difficulty on defining the service is to adopt an consistent desig= nation of the service. We would appreciate discussion and opinion regarding= this topic.
=C2=A0=C2=A0 - The resource engaged into the collabor= ation. Again, there is also a large panel on how to describe resource. One = way would consist in adopting a high level description such as proposed by = AWS, fine= r description could also include the cgroup terminology... Again any feed back on ho= w you think this type of resource should be described would be appreciated.=
=C2=A0=C2=A0 - Network Configuration: For this type of resource, = we designated it as "Alternate Path" the path where packets that = have not been treated are steered.

BR,
Daniel =C2=A0= =C2=A0
=C2=A0=C2=A0
<= div>
=C2=A0

=

On Tue, Jun 28, 2016 at 11:42 AM, Daniel Migault <daniel.migault@ericsson.com> wrote= :
Hi,

Please find our draft for elaborating a collaboration between security serv= ices locate in different administrative domains.

Feed backs /Comments are welcome!
BR,
Daniel

-----Original Message-----
From: internet-drafts@ietf.org<= /a> [mailto:internet-drafts@iet= f.org]
Sent: Tuesday, June 28, 2016 6:40 PM
To: Daniel Migault; Alireza Ranjbar
Subject: New Version Notification for draft-mglt-i2nsf-ssf-collaboration-00= .txt


A new version of I-D, draft-mglt-i2nsf-ssf-collaboration-00.txt
has been successfully submitted by Daniel Migault and posted to the IETF re= pository.

Name:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0draft-mglt-i2nsf-ssf-collabor= ation
Revision:=C2=A0 =C2=A0 =C2=A0 =C2=A000
Title:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Collaboration Agreement for Securi= ty Service Function
Document date:=C2=A0 2016-06-28
Group:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Individual Submission
Pages:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 13
URL:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 https://www.ietf.org/internet-drafts/draft-mglt-i2n= sf-ssf-collaboration-00.txt
Status:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0https://datatracker.ietf.org/doc/draft-mglt-i2nsf-ssf-collaboratio= n/
Htmlized:=C2=A0 =C2=A0 =C2=A0 =C2=A0https://tools.ietf.org/html/draft-mglt-i2nsf-ssf-collaboration-00


Abstract:
=C2=A0 =C2=A0This document specifies a collaboration agreement protocol.=C2= =A0 The
=C2=A0 =C2=A0collaboration agreement makes possible individual security ser= vices
=C2=A0 =C2=A0functions (SSF) to collaborate with each other.=C2=A0 The coll= aboration is
=C2=A0 =C2=A0mostly intended for SSF located in different administrative do= mains,
=C2=A0 =C2=A0in which case the collaboration cannot be performed by a share= d
=C2=A0 =C2=A0orchestrator.

=C2=A0 =C2=A0The collaboration between SSF in different domains assumes the=
=C2=A0 =C2=A0traffic is steered through the two domains.




Please note that it may take a couple of minutes from the time of submissio= n until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat


--047d7b450a9ac2587905370c2a81-- From nobody Thu Jul 7 07:23:00 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6EBF612B02E; Thu, 7 Jul 2016 07:22:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.4 X-Spam-Level: X-Spam-Status: No, score=-2.4 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.198, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rRDq_p4jl3ah; Thu, 7 Jul 2016 07:22:46 -0700 (PDT) Received: from mail-wm0-x236.google.com (mail-wm0-x236.google.com [IPv6:2a00:1450:400c:c09::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 379DE12D56C; Thu, 7 Jul 2016 07:22:45 -0700 (PDT) Received: by mail-wm0-x236.google.com with SMTP id n127so18462069wme.1; Thu, 07 Jul 2016 07:22:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=YbR1XXTVG19DQWkkCJ5kPAUwsEonAQdLTEHnlPhBFfE=; b=LqMosAHQPQMh9Ua4GCSfZsB9M3HkuFZOGe0x9zP52myqhpF/y85kZAcO2i22Hd3h/O lfTKqi4EhIQkDxvl0dc+9blFXh1yG1ZoHNjksQ5Dow7Wa3Z0cnFuZ5KatkkCj9gbP3a2 FBcdpQQ/RB9FC4irQwXotvLpWXGZDMsFsBwIYI1mKYhwlDGadhOzcA5qB4nbQK2ZpFkC TH9vgxgF5Y9NrgFnqsJ2UXlhiTmJhD5i+8M8DjVSW6SDfGMzEYlI8wle0VM6LOwOYd31 rgOq+w6z24UYSes3wNUHnIQhBEGe/TPc74rDo9Fsb1dAvBY/VcuKkoutNW0kBgakf4EF bIbg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=YbR1XXTVG19DQWkkCJ5kPAUwsEonAQdLTEHnlPhBFfE=; b=mqFUouIOXWvnLBE9DFxdVEmqi4hczavPMfBkIesRPElXX68aT/4WZ3kWTnfXbUkDzi /82rZoSnG2dBZJi+TNP74/8FgSaQJ68UX1zVI2bmEX7+3jhV5KaTWFthcRL6Zi3oOwNE v8drtBohQszEXTTsldUfEIY2udVO4xaRwgTqKvasgymZnUmZFST4oD8yR+QPW5W9ybtm BMRjAgAznGZba3BAQeaSf6hZKLCLRvj79gMrm2F3fQJJa+gUkxAu8UQK1RNvFVq7bTN6 dHmwJOmlN3xKBZhgqUF+9I4CEllhRlg1TpTRV6f1X9R7w25ne1pW2wlvw+JRnDhC6HO3 yXkw== X-Gm-Message-State: ALyK8tLhWHtwYXWsorunPnlRxlgQj7u3JjezesABLMFyEXE2WhhjNxJ2bgO7kc6p7J3RgoOLkkmmOp6w6uc2Tw== X-Received: by 10.28.26.67 with SMTP id a64mr25732109wma.70.1467901363661; Thu, 07 Jul 2016 07:22:43 -0700 (PDT) MIME-Version: 1.0 Sender: mglt.ietf@gmail.com Received: by 10.194.34.99 with HTTP; Thu, 7 Jul 2016 07:22:43 -0700 (PDT) In-Reply-To: <787AE7BB302AE849A7480A190F8B933008DBB3F9@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <20160628153949.24167.29375.idtracker@ietfa.amsl.com> <2DD56D786E600F45AC6BDE7DA4E8A8C117F2703F@eusaamb107.ericsson.se> <787AE7BB302AE849A7480A190F8B933008DBB3F9@OPEXCLILMA3.corporate.adroot.infra.ftgroup> From: Daniel Migault Date: Thu, 7 Jul 2016 10:22:43 -0400 X-Google-Sender-Auth: GJT9bTYtP10J4-toxnOADBO3RKY Message-ID: To: mohamed.boucadair@orange.com Content-Type: multipart/alternative; boundary=001a114cdf2858b18505370c6b13 Archived-At: Cc: "i2nsf@ietf.org" , "dots@ietf.org" , Alireza Ranjbar Subject: Re: [Dots] New Version Notification for draft-mglt-i2nsf-ssf-collaboration-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Jul 2016 14:22:53 -0000 --001a114cdf2858b18505370c6b13 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi Med, Thank you for the feed backs. Please see inline my responses. I would be happy discuss more in depth these questions in Berlin! BR, Daniel On Wed, Jun 29, 2016 at 8:19 AM, wrote: > Hi Daniel, all, > > Thank you for sharing this draft. > > I have some high-level questions about this proposal: > * In which deployment case you think that a service function will take th= e > responsibility to contact another service function located in another > domain to ask for collaboration? Wouldn't that be the responsibility of t= he > respective administrative entities managing those domains? > MGLT: In our case, the collaboration is established between between the administrative entity of each domain. Once the provider and the initiator have agreed on setting a collaboration defined by the resources to be engaged, as well as the service, I would say the collaboration is set. in some cases, the security service instantiated may require additional configurations. For example, when a firewall is being instantiated by the provider, the initiator may then need to configure the firewall. Such configuration in our view is not pat of the collaboration. Instead what would be part of the collaboration is the ability for the firewall to be configured by X using protocol Y. X could be a SF or the orchestrator of the domain. > * Based on which criteria an SSF may decide that it needs collaboration > with another SSF? Wouldn't that be driven by service requirements and > objectives (that are not visible to a monolithic SSF)? > MGLT: In our case, the criteria is when a DDoS attack is being detected, and the attack can be better mitigated in another domain. This means that the orchestrator takes the decision given the various inputs it receives from the SSFs. But the collaboration could also be requested by a single SSF. > * Given that service functions deployed in a given domain are unlikely to > be disclosed outside that domain, how SSF discovery is achieved? > MGLT: That is a good question. Currently we assume that the you know the next upper/ lower provider you woudl like to set the collaboration with. We have not yet designed an appropriated SSF discovery protocol. One reason also for it is that we need to think of a common language for service designation. > * Would collaboration be tied to the 'initiator' and 'provider' instances > which are involved in a CA? Is that optimal given that multiple instances > of the same SSF may be deployed in a given domain for various reasons > (load-balancing, resiliency, etc.)? > > MGLT: In our case, collaboration is mostly set between the orchestrators of the different domain. We also had scenario with a single domain where one SSF dynamically ask duplication of its SSF instances, and when multiple SSF are duplicated, we had one collaboration per duplicated instance. > Thank you. > > Cheers, > Med > > > -----Message d'origine----- > > De : Dots [mailto:dots-bounces@ietf.org] De la part de Daniel Migault > > Envoy=C3=A9 : mardi 28 juin 2016 17:43 > > =C3=80 : i2nsf@ietf.org; dots@ietf.org > > Cc : Alireza Ranjbar; mglt.ietf@gmail.com > > Objet : Re: [Dots] New Version Notification for draft-mglt-i2nsf-ssf- > > collaboration-00.txt > > > > Hi, > > > > Please find our draft for elaborating a collaboration between security > > services locate in different administrative domains. > > > > Feed backs /Comments are welcome! > > BR, > > Daniel > > > > -----Original Message----- > > From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] > > Sent: Tuesday, June 28, 2016 6:40 PM > > To: Daniel Migault; Alireza Ranjbar > > Subject: New Version Notification for draft-mglt-i2nsf-ssf-collaboratio= n- > > 00.txt > > > > > > A new version of I-D, draft-mglt-i2nsf-ssf-collaboration-00.txt > > has been successfully submitted by Daniel Migault and posted to the IET= F > > repository. > > > > Name: draft-mglt-i2nsf-ssf-collaboration > > Revision: 00 > > Title: Collaboration Agreement for Security Service > Function > > Document date: 2016-06-28 > > Group: Individual Submission > > Pages: 13 > > URL: > https://www.ietf.org/internet-drafts/draft-mglt-i2nsf-ssf- > > collaboration-00.txt > > Status: https://datatracker.ietf.org/doc/draft-mglt-i2nsf-ssf- > > collaboration/ > > Htmlized: https://tools.ietf.org/html/draft-mglt-i2nsf-ssf- > > collaboration-00 > > > > > > Abstract: > > This document specifies a collaboration agreement protocol. The > > collaboration agreement makes possible individual security services > > functions (SSF) to collaborate with each other. The collaboration i= s > > mostly intended for SSF located in different administrative domains, > > in which case the collaboration cannot be performed by a shared > > orchestrator. > > > > The collaboration between SSF in different domains assumes the > > traffic is steered through the two domains. > > > > > > > > > > Please note that it may take a couple of minutes from the time of > > submission until the htmlized version and diff are available at > > tools.ietf.org. > > > > The IETF Secretariat > > > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots > --001a114cdf2858b18505370c6b13 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Med,

Thank you for the feed bac= ks. Please see inline my responses. I would be happy discuss more in depth = these questions in Berlin!

BR,
Daniel
<= /div>



On Wed, Jun 29, 2016 at 8:19 AM, &= lt;mohame= d.boucadair@orange.com> wrote:
Hi Daniel, all,

Thank you for sharing this draft.

I have some high-level questions about this proposal:
* In which deployment case you think that a service function will take the = responsibility to contact another service function located in another domai= n to ask for collaboration? Wouldn't that be the responsibility of the = respective administrative entities managing those domains?
=

MGLT: In our case, the collaboration is established bet= ween between the administrative entity of each domain. Once the provider an= d the initiator have agreed on setting a collaboration defined by the resou= rces to be engaged, as well as the service, I would say the collaboration i= s set. in some cases, the security service instantiated may require additio= nal configurations. For example, when a firewall is being instantiated by t= he provider, the initiator may then need to configure the firewall. Such co= nfiguration in our view is not pat of the collaboration. Instead what would= be part of the collaboration is the ability for the firewall to be configu= red by X using protocol Y. X could be a SF or the orchestrator of the domai= n.
=C2=A0
* Based on which criteria an SSF may decide that it needs collaboration wit= h another SSF? Wouldn't that be driven by service requirements and obje= ctives (that are not visible to a monolithic SSF)?
MGLT: In our case, the criteria is when a DDoS attack is being detected, a= nd the attack can be better mitigated in another domain. This means that th= e orchestrator takes the decision given the various inputs it receives from= the SSFs. But the collaboration could also be requested by a single SSF.
=C2=A0
* Given that service functions deployed in a given domain are unlikely to b= e disclosed outside that domain, how SSF discovery is achieved?

MGLT: That is a good question. Currently we assume= that the you know the next upper/ lower provider you woudl like to set the= collaboration with. We have not yet designed an appropriated SSF discovery= protocol. One reason also for it is that we need to think of a common lang= uage for service designation. =C2=A0
=C2=A0
* Would collaboration be tied to the 'initiator' and 'provider&= #39; instances which are involved in a CA? Is that optimal given that multi= ple instances of the same SSF may be deployed in a given domain for various= reasons (load-balancing, resiliency, etc.)?

MGLT: In our case, collaboration is mostly set betwee= n the orchestrators of the different domain. We also had scenario with a si= ngle domain where one SSF dynamically ask duplication of its SSF instances,= and when multiple SSF are duplicated, we had one collaboration per duplica= ted instance.

=C2=A0 =C2=A0
=C2=A0
Thank you.

Cheers,
Med

> -----Message d'origine-----
> De=C2=A0: Dots [mailto:dots-b= ounces@ietf.org] De la part de Daniel Migault
> Envoy=C3=A9=C2=A0: mardi 28 juin 2016 17:43
> =C3=80=C2=A0: i2nsf@ietf.org; dots@ietf.org
> Cc=C2=A0: Alireza Ranjbar; mglt= .ietf@gmail.com
> Objet=C2=A0: Re: [Dots] New Version Notification for draft-mglt-i2nsf-= ssf-
> collaboration-00.txt
>
> Hi,
>
> Please find our draft for elaborating a collaboration between security=
> services locate in different administrative domains.
>
> Feed backs /Comments are welcome!
> BR,
> Daniel
>
> -----Original Message-----
> From: internet-drafts@ietf= .org [mailto:internet-draft= s@ietf.org]
> Sent: Tuesday, June 28, 2016 6:40 PM
> To: Daniel Migault; Alireza Ranjbar
> Subject: New Version Notification for draft-mglt-i2nsf-ssf-collaborati= on-
> 00.txt
>
>
> A new version of I-D, draft-mglt-i2nsf-ssf-collaboration-00.txt
> has been successfully submitted by Daniel Migault and posted to the IE= TF
> repository.
>
> Name:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0draft-mglt-i2nsf-ssf-collaborat= ion
> Revision:=C2=A0 =C2=A0 =C2=A000
> Title:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Collabor= ation Agreement for Security Service Function
> Document date:=C2=A0 =C2=A0 =C2=A0 =C2=A0 2016-06-28
> Group:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Individu= al Submission
> Pages:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 13
> URL:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 https://www.ietf.org/internet-drafts/draft-mglt-i2nsf-ssf-
> collaboration-00.txt
> Status:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= https://datatracker.ietf.org/doc/draft-mglt-i2nsf-ssf-
> collaboration/
> Htmlized:=C2=A0 =C2=A0 =C2=A0 =C2=A0https://to= ols.ietf.org/html/draft-mglt-i2nsf-ssf-
> collaboration-00
>
>
> Abstract:
>=C2=A0 =C2=A0 This document specifies a collaboration agreement protoco= l.=C2=A0 The
>=C2=A0 =C2=A0 collaboration agreement makes possible individual securit= y services
>=C2=A0 =C2=A0 functions (SSF) to collaborate with each other.=C2=A0 The= collaboration is
>=C2=A0 =C2=A0 mostly intended for SSF located in different administrati= ve domains,
>=C2=A0 =C2=A0 in which case the collaboration cannot be performed by a = shared
>=C2=A0 =C2=A0 orchestrator.
>
>=C2=A0 =C2=A0 The collaboration between SSF in different domains assume= s the
>=C2=A0 =C2=A0 traffic is steered through the two domains.
>
>
>
>
> Please note that it may take a couple of minutes from the time of
> submission until the htmlized version and diff are available at
> tools.ietf.org.
>
> The IETF Secretariat
>
> _______________________________________________
> Dots mailing list
> Dots@ietf.org
> https://www.ietf.org/mailman/listinfo/dots

--001a114cdf2858b18505370c6b13-- From nobody Thu Jul 7 08:17:22 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E18FB12B069; Thu, 7 Jul 2016 08:17:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.646 X-Spam-Level: X-Spam-Status: No, score=-5.646 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.426, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aTTlwszEktSS; Thu, 7 Jul 2016 08:17:13 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C96EE127058; Thu, 7 Jul 2016 08:17:12 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml701-cah.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CSE77360; Thu, 07 Jul 2016 15:17:10 +0000 (GMT) Received: from DFWEML703-CAH.china.huawei.com (10.193.5.177) by lhreml701-cah.china.huawei.com (10.201.5.93) with Microsoft SMTP Server (TLS) id 14.3.235.1; Thu, 7 Jul 2016 16:17:09 +0100 Received: from DFWEML501-MBB.china.huawei.com ([10.193.5.179]) by DFWEML703-CAH.china.huawei.com ([10.193.5.177]) with mapi id 14.03.0235.001; Thu, 7 Jul 2016 08:17:02 -0700 From: Linda Dunbar To: Daniel Migault , "mohamed.boucadair@orange.com" Thread-Topic: Categoried under "Client Facing Interface"? (was RE: [I2nsf] New Version Notification for draft-mglt-i2nsf-ssf-collaboration-00.txt Thread-Index: AQHR0VNTnRdOE/mv/keeensY3+/vGp//BBOQgAFQIvCADTSJgP//l6Fw Date: Thu, 7 Jul 2016 15:17:02 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657EDD208@dfweml501-mbb> References: <20160628153949.24167.29375.idtracker@ietfa.amsl.com> <2DD56D786E600F45AC6BDE7DA4E8A8C117F2703F@eusaamb107.ericsson.se> <787AE7BB302AE849A7480A190F8B933008DBB3F9@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.150] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657EDD208dfweml501mbb_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020202.577E7277.0090, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=0.0.0.0, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: 341e33edd619ce48d2e9aa87e1916d0b Archived-At: Cc: "i2nsf@ietf.org" , "dots@ietf.org" , Alireza Ranjbar Subject: [Dots] Categoried under "Client Facing Interface"? (was RE: [I2nsf] New Version Notification for draft-mglt-i2nsf-ssf-collaboration-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Jul 2016 15:17:17 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657EDD208dfweml501mbb_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RGFuaWVsLA0KDQpCYXNlZCBvbiB5b3VyIGRlc2NyaXB0aW9uLCB5b3VyIHByb3Bvc2VkIGNvbGxh Ym9yYXRpb24gaW5mb3JtYXRpb24gZXhjaGFuZ2UgaXMgYmV0d2VlbiB0d28gZG9tYWlu4oCZcyBv cmNoZXN0cmF0aW9uIHN5c3RlbXMsICBpLmUuIHRoZSDigJxB4oCdIGludGVyZmFjZSBpbiB0aGUg STJOU0YgZnJhbWV3b3JrLCBDb3JyZWN0Pw0KICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rDQogICAgICAgICAgICAgIHwg ICAgICBJMk5TRiBDbGllbnQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCiAg ICAgICAgICAgICAgfCBFLmcuIE92ZXJsYXkgTmV0d29yayBNZ250LCBFbnRlcnByaXNlIG5ldHdv cmsgTWdudCAgfA0KICAgICAgICAgICAgICB8ICBhbm90aGVyIG5ldHdvcmsgZG9tYWlu4oCZcyBt Z250LCBldGMuICAgICAgICAgICAgICAgIHwNCiAgICAgICAgICAgICAgKy0tLS0tLS0tLS0rLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tKw0KICAgICAgICAgICAgICAg ICAgICAgICAgIHwNCiAgICAgICAgICAgICAgICAgICAgICAgICB8ICBDbGllbnQgRmFjaW5nIElu dGVyZmFjZSAoQSkNCiAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICAgICAgICAgICAgICAg ICAgKy0tLS0tKy0tLS0tLS0tLS0tLS0tLSsNCiAgICAgICAgICAgICAgICAgICB8TmV0d29yayBP cGVyYXRvciBtZ210fCAgICAgICAgICAgICAgICstLS0tLS0tLS0tLS0tKw0KICAgICAgICAgICAg ICAgICAgIHwgU2VjdXJpdHkgQ29udHJvbGxlciB8IDwgLS0tLS0tLS0tID4gfCBEZXZlbG9wZXLi gJlzIHwNCiAgICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tKy0tLS0tKyAgUmVnaXN0 cmF0aW9uIHwgTWdudCBTeXN0ZW0gfA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICB8ICAgICAgICAgSW50ZXJmYWNlICAgKy0tLS0tLS0tLS0tLS0rDQogICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIHwNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg fCBOU0YgRmFjaW5nIEludGVyZmFjZSAoQikNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgfA0KICAgICAgICstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0rDQogICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIHwNCiAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgfA0KICAgKy0tLSstLSsgICAgICAgICArLS0tLS0tKyAgICAg ICAgICAgICArLS0tLS0tKyAgICAgICArLS0rLS0tKw0KICAgKyBOU0YtMSsgLS0tLS0tLSArIE5T Ri1uKyAgICAgICAgICAgICArTlNGLTEgKyAtLS0tLSArTlNGLW0gKyAgLiAuIC4NCiAgICstLS0t LS0rICAgICAgICAgKy0tLS0tLSsgICAgICAgICAgICAgKy0tLS0tLSsgICAgICAgKy0tLS0tLSsN Cg0KICAgRGV2ZWxvcGVyIEEgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBEZXZlbG9w ZXIgQg0KRmlndXJlIDE6IEkyTlNGIFJlZmVyZW5jZSBNb2RlbA0KDQoNCklzIGl0IG5lY2Vzc2Fy eSBmb3IgdGhlICJEb3duIiBuZXR3b3JrIHRvIHByb3ZpZGUgdGhlIGxpc3Qgb2YgU0ZzIHRvICJV cHBlciIgbmV0d29yaz8gb3IgaXQgaXMgdXAgdG8gdGhlIOKAnGRvd27igJ0gbmV0d29yayB0byB1 c2UgaXRzIG93biBTRnMgYmFzZWQgb24gdGhlIHBvbGljaWVzIGZyb20g4oCcVXBwZXLigJ0gbmV0 d29yaz8NCg0KVGhhbmtzLCBMaW5kYQ0KDQoNCkZyb206IEkybnNmIFttYWlsdG86aTJuc2YtYm91 bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIERhbmllbCBNaWdhdWx0DQpTZW50OiBUaHVyc2Rh eSwgSnVseSAwNywgMjAxNiA5OjIzIEFNDQpUbzogbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNv bQ0KQ2M6IGkybnNmQGlldGYub3JnOyBkb3RzQGlldGYub3JnOyBBbGlyZXphIFJhbmpiYXINClN1 YmplY3Q6IFJlOiBbSTJuc2ZdIE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQtbWds dC1pMm5zZi1zc2YtY29sbGFib3JhdGlvbi0wMC50eHQNCg0KSGkgTWVkLA0KVGhhbmsgeW91IGZv ciB0aGUgZmVlZCBiYWNrcy4gUGxlYXNlIHNlZSBpbmxpbmUgbXkgcmVzcG9uc2VzLiBJIHdvdWxk IGJlIGhhcHB5IGRpc2N1c3MgbW9yZSBpbiBkZXB0aCB0aGVzZSBxdWVzdGlvbnMgaW4gQmVybGlu IQ0KQlIsDQpEYW5pZWwNCg0KDQoNCk9uIFdlZCwgSnVuIDI5LCAyMDE2IGF0IDg6MTkgQU0sIDxt b2hhbWVkLmJvdWNhZGFpckBvcmFuZ2UuY29tPG1haWx0bzptb2hhbWVkLmJvdWNhZGFpckBvcmFu Z2UuY29tPj4gd3JvdGU6DQpIaSBEYW5pZWwsIGFsbCwNCg0KVGhhbmsgeW91IGZvciBzaGFyaW5n IHRoaXMgZHJhZnQuDQoNCkkgaGF2ZSBzb21lIGhpZ2gtbGV2ZWwgcXVlc3Rpb25zIGFib3V0IHRo aXMgcHJvcG9zYWw6DQoqIEluIHdoaWNoIGRlcGxveW1lbnQgY2FzZSB5b3UgdGhpbmsgdGhhdCBh IHNlcnZpY2UgZnVuY3Rpb24gd2lsbCB0YWtlIHRoZSByZXNwb25zaWJpbGl0eSB0byBjb250YWN0 IGFub3RoZXIgc2VydmljZSBmdW5jdGlvbiBsb2NhdGVkIGluIGFub3RoZXIgZG9tYWluIHRvIGFz ayBmb3IgY29sbGFib3JhdGlvbj8gV291bGRuJ3QgdGhhdCBiZSB0aGUgcmVzcG9uc2liaWxpdHkg b2YgdGhlIHJlc3BlY3RpdmUgYWRtaW5pc3RyYXRpdmUgZW50aXRpZXMgbWFuYWdpbmcgdGhvc2Ug ZG9tYWlucz8NCg0KTUdMVDogSW4gb3VyIGNhc2UsIHRoZSBjb2xsYWJvcmF0aW9uIGlzIGVzdGFi bGlzaGVkIGJldHdlZW4gYmV0d2VlbiB0aGUgYWRtaW5pc3RyYXRpdmUgZW50aXR5IG9mIGVhY2gg ZG9tYWluLiBPbmNlIHRoZSBwcm92aWRlciBhbmQgdGhlIGluaXRpYXRvciBoYXZlIGFncmVlZCBv biBzZXR0aW5nIGEgY29sbGFib3JhdGlvbiBkZWZpbmVkIGJ5IHRoZSByZXNvdXJjZXMgdG8gYmUg ZW5nYWdlZCwgYXMgd2VsbCBhcyB0aGUgc2VydmljZSwgSSB3b3VsZCBzYXkgdGhlIGNvbGxhYm9y YXRpb24gaXMgc2V0LiBpbiBzb21lIGNhc2VzLCB0aGUgc2VjdXJpdHkgc2VydmljZSBpbnN0YW50 aWF0ZWQgbWF5IHJlcXVpcmUgYWRkaXRpb25hbCBjb25maWd1cmF0aW9ucy4gRm9yIGV4YW1wbGUs IHdoZW4gYSBmaXJld2FsbCBpcyBiZWluZyBpbnN0YW50aWF0ZWQgYnkgdGhlIHByb3ZpZGVyLCB0 aGUgaW5pdGlhdG9yIG1heSB0aGVuIG5lZWQgdG8gY29uZmlndXJlIHRoZSBmaXJld2FsbC4gU3Vj aCBjb25maWd1cmF0aW9uIGluIG91ciB2aWV3IGlzIG5vdCBwYXQgb2YgdGhlIGNvbGxhYm9yYXRp b24uIEluc3RlYWQgd2hhdCB3b3VsZCBiZSBwYXJ0IG9mIHRoZSBjb2xsYWJvcmF0aW9uIGlzIHRo ZSBhYmlsaXR5IGZvciB0aGUgZmlyZXdhbGwgdG8gYmUgY29uZmlndXJlZCBieSBYIHVzaW5nIHBy b3RvY29sIFkuIFggY291bGQgYmUgYSBTRiBvciB0aGUgb3JjaGVzdHJhdG9yIG9mIHRoZSBkb21h aW4uDQoNCiogQmFzZWQgb24gd2hpY2ggY3JpdGVyaWEgYW4gU1NGIG1heSBkZWNpZGUgdGhhdCBp dCBuZWVkcyBjb2xsYWJvcmF0aW9uIHdpdGggYW5vdGhlciBTU0Y/IFdvdWxkbid0IHRoYXQgYmUg ZHJpdmVuIGJ5IHNlcnZpY2UgcmVxdWlyZW1lbnRzIGFuZCBvYmplY3RpdmVzICh0aGF0IGFyZSBu b3QgdmlzaWJsZSB0byBhIG1vbm9saXRoaWMgU1NGKT8NCg0KTUdMVDogSW4gb3VyIGNhc2UsIHRo ZSBjcml0ZXJpYSBpcyB3aGVuIGEgRERvUyBhdHRhY2sgaXMgYmVpbmcgZGV0ZWN0ZWQsIGFuZCB0 aGUgYXR0YWNrIGNhbiBiZSBiZXR0ZXIgbWl0aWdhdGVkIGluIGFub3RoZXIgZG9tYWluLiBUaGlz IG1lYW5zIHRoYXQgdGhlIG9yY2hlc3RyYXRvciB0YWtlcyB0aGUgZGVjaXNpb24gZ2l2ZW4gdGhl IHZhcmlvdXMgaW5wdXRzIGl0IHJlY2VpdmVzIGZyb20gdGhlIFNTRnMuIEJ1dCB0aGUgY29sbGFi b3JhdGlvbiBjb3VsZCBhbHNvIGJlIHJlcXVlc3RlZCBieSBhIHNpbmdsZSBTU0YuDQoNCiogR2l2 ZW4gdGhhdCBzZXJ2aWNlIGZ1bmN0aW9ucyBkZXBsb3llZCBpbiBhIGdpdmVuIGRvbWFpbiBhcmUg dW5saWtlbHkgdG8gYmUgZGlzY2xvc2VkIG91dHNpZGUgdGhhdCBkb21haW4sIGhvdyBTU0YgZGlz Y292ZXJ5IGlzIGFjaGlldmVkPw0KDQpNR0xUOiBUaGF0IGlzIGEgZ29vZCBxdWVzdGlvbi4gQ3Vy cmVudGx5IHdlIGFzc3VtZSB0aGF0IHRoZSB5b3Uga25vdyB0aGUgbmV4dCB1cHBlci8gbG93ZXIg cHJvdmlkZXIgeW91IHdvdWRsIGxpa2UgdG8gc2V0IHRoZSBjb2xsYWJvcmF0aW9uIHdpdGguIFdl IGhhdmUgbm90IHlldCBkZXNpZ25lZCBhbiBhcHByb3ByaWF0ZWQgU1NGIGRpc2NvdmVyeSBwcm90 b2NvbC4gT25lIHJlYXNvbiBhbHNvIGZvciBpdCBpcyB0aGF0IHdlIG5lZWQgdG8gdGhpbmsgb2Yg YSBjb21tb24gbGFuZ3VhZ2UgZm9yIHNlcnZpY2UgZGVzaWduYXRpb24uDQoNCiogV291bGQgY29s bGFib3JhdGlvbiBiZSB0aWVkIHRvIHRoZSAnaW5pdGlhdG9yJyBhbmQgJ3Byb3ZpZGVyJyBpbnN0 YW5jZXMgd2hpY2ggYXJlIGludm9sdmVkIGluIGEgQ0E/IElzIHRoYXQgb3B0aW1hbCBnaXZlbiB0 aGF0IG11bHRpcGxlIGluc3RhbmNlcyBvZiB0aGUgc2FtZSBTU0YgbWF5IGJlIGRlcGxveWVkIGlu IGEgZ2l2ZW4gZG9tYWluIGZvciB2YXJpb3VzIHJlYXNvbnMgKGxvYWQtYmFsYW5jaW5nLCByZXNp bGllbmN5LCBldGMuKT8NCk1HTFQ6IEluIG91ciBjYXNlLCBjb2xsYWJvcmF0aW9uIGlzIG1vc3Rs eSBzZXQgYmV0d2VlbiB0aGUgb3JjaGVzdHJhdG9ycyBvZiB0aGUgZGlmZmVyZW50IGRvbWFpbi4g V2UgYWxzbyBoYWQgc2NlbmFyaW8gd2l0aCBhIHNpbmdsZSBkb21haW4gd2hlcmUgb25lIFNTRiBk eW5hbWljYWxseSBhc2sgZHVwbGljYXRpb24gb2YgaXRzIFNTRiBpbnN0YW5jZXMsIGFuZCB3aGVu IG11bHRpcGxlIFNTRiBhcmUgZHVwbGljYXRlZCwgd2UgaGFkIG9uZSBjb2xsYWJvcmF0aW9uIHBl ciBkdXBsaWNhdGVkIGluc3RhbmNlLg0KDQoNCg0KVGhhbmsgeW91Lg0KDQpDaGVlcnMsDQpNZWQN Cg0KPiAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS0NCj4gRGUgOiBEb3RzIFttYWlsdG86ZG90 cy1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmc+XSBEZSBsYSBw YXJ0IGRlIERhbmllbCBNaWdhdWx0DQo+IEVudm95w6kgOiBtYXJkaSAyOCBqdWluIDIwMTYgMTc6 NDMNCj4gw4AgOiBpMm5zZkBpZXRmLm9yZzxtYWlsdG86aTJuc2ZAaWV0Zi5vcmc+OyBkb3RzQGll dGYub3JnPG1haWx0bzpkb3RzQGlldGYub3JnPg0KPiBDYyA6IEFsaXJlemEgUmFuamJhcjsgbWds dC5pZXRmQGdtYWlsLmNvbTxtYWlsdG86bWdsdC5pZXRmQGdtYWlsLmNvbT4NCj4gT2JqZXQgOiBS ZTogW0RvdHNdIE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQtbWdsdC1pMm5zZi1z c2YtDQo+IGNvbGxhYm9yYXRpb24tMDAudHh0DQo+DQo+IEhpLA0KPg0KPiBQbGVhc2UgZmluZCBv dXIgZHJhZnQgZm9yIGVsYWJvcmF0aW5nIGEgY29sbGFib3JhdGlvbiBiZXR3ZWVuIHNlY3VyaXR5 DQo+IHNlcnZpY2VzIGxvY2F0ZSBpbiBkaWZmZXJlbnQgYWRtaW5pc3RyYXRpdmUgZG9tYWlucy4N Cj4NCj4gRmVlZCBiYWNrcyAvQ29tbWVudHMgYXJlIHdlbGNvbWUhDQo+IEJSLA0KPiBEYW5pZWwN Cj4NCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogaW50ZXJuZXQtZHJhZnRz QGlldGYub3JnPG1haWx0bzppbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc+IFttYWlsdG86aW50ZXJu ZXQtZHJhZnRzQGlldGYub3JnPG1haWx0bzppbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc+XQ0KPiBT ZW50OiBUdWVzZGF5LCBKdW5lIDI4LCAyMDE2IDY6NDAgUE0NCj4gVG86IERhbmllbCBNaWdhdWx0 OyBBbGlyZXphIFJhbmpiYXINCj4gU3ViamVjdDogTmV3IFZlcnNpb24gTm90aWZpY2F0aW9uIGZv ciBkcmFmdC1tZ2x0LWkybnNmLXNzZi1jb2xsYWJvcmF0aW9uLQ0KPiAwMC50eHQNCj4NCj4NCj4g QSBuZXcgdmVyc2lvbiBvZiBJLUQsIGRyYWZ0LW1nbHQtaTJuc2Ytc3NmLWNvbGxhYm9yYXRpb24t MDAudHh0DQo+IGhhcyBiZWVuIHN1Y2Nlc3NmdWxseSBzdWJtaXR0ZWQgYnkgRGFuaWVsIE1pZ2F1 bHQgYW5kIHBvc3RlZCB0byB0aGUgSUVURg0KPiByZXBvc2l0b3J5Lg0KPg0KPiBOYW1lOiAgICAg ICAgIGRyYWZ0LW1nbHQtaTJuc2Ytc3NmLWNvbGxhYm9yYXRpb24NCj4gUmV2aXNpb246ICAgICAw MA0KPiBUaXRsZTogICAgICAgICAgICAgICAgQ29sbGFib3JhdGlvbiBBZ3JlZW1lbnQgZm9yIFNl Y3VyaXR5IFNlcnZpY2UgRnVuY3Rpb24NCj4gRG9jdW1lbnQgZGF0ZTogICAgICAgIDIwMTYtMDYt MjgNCj4gR3JvdXA6ICAgICAgICAgICAgICAgIEluZGl2aWR1YWwgU3VibWlzc2lvbg0KPiBQYWdl czogICAgICAgICAgICAgICAgMTMNCj4gVVJMOiAgICAgICAgICAgIGh0dHBzOi8vd3d3LmlldGYu b3JnL2ludGVybmV0LWRyYWZ0cy9kcmFmdC1tZ2x0LWkybnNmLXNzZi0NCj4gY29sbGFib3JhdGlv bi0wMC50eHQNCj4gU3RhdHVzOiAgICAgICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZG9jL2RyYWZ0LW1nbHQtaTJuc2Ytc3NmLQ0KPiBjb2xsYWJvcmF0aW9uLw0KPiBIdG1saXplZDog ICAgICAgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LW1nbHQtaTJuc2Ytc3NmLQ0K PiBjb2xsYWJvcmF0aW9uLTAwDQo+DQo+DQo+IEFic3RyYWN0Og0KPiAgICBUaGlzIGRvY3VtZW50 IHNwZWNpZmllcyBhIGNvbGxhYm9yYXRpb24gYWdyZWVtZW50IHByb3RvY29sLiAgVGhlDQo+ICAg IGNvbGxhYm9yYXRpb24gYWdyZWVtZW50IG1ha2VzIHBvc3NpYmxlIGluZGl2aWR1YWwgc2VjdXJp dHkgc2VydmljZXMNCj4gICAgZnVuY3Rpb25zIChTU0YpIHRvIGNvbGxhYm9yYXRlIHdpdGggZWFj aCBvdGhlci4gIFRoZSBjb2xsYWJvcmF0aW9uIGlzDQo+ICAgIG1vc3RseSBpbnRlbmRlZCBmb3Ig U1NGIGxvY2F0ZWQgaW4gZGlmZmVyZW50IGFkbWluaXN0cmF0aXZlIGRvbWFpbnMsDQo+ICAgIGlu IHdoaWNoIGNhc2UgdGhlIGNvbGxhYm9yYXRpb24gY2Fubm90IGJlIHBlcmZvcm1lZCBieSBhIHNo YXJlZA0KPiAgICBvcmNoZXN0cmF0b3IuDQo+DQo+ICAgIFRoZSBjb2xsYWJvcmF0aW9uIGJldHdl ZW4gU1NGIGluIGRpZmZlcmVudCBkb21haW5zIGFzc3VtZXMgdGhlDQo+ICAgIHRyYWZmaWMgaXMg c3RlZXJlZCB0aHJvdWdoIHRoZSB0d28gZG9tYWlucy4NCj4NCj4NCj4NCj4NCj4gUGxlYXNlIG5v dGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51dGVzIGZyb20gdGhlIHRpbWUgb2YN Cj4gc3VibWlzc2lvbiB1bnRpbCB0aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZh aWxhYmxlIGF0DQo+IHRvb2xzLmlldGYub3JnPGh0dHA6Ly90b29scy5pZXRmLm9yZz4uDQo+DQo+ IFRoZSBJRVRGIFNlY3JldGFyaWF0DQo+DQo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fDQo+IERvdHMgbWFpbGluZyBsaXN0DQo+IERvdHNAaWV0Zi5vcmc8 bWFpbHRvOkRvdHNAaWV0Zi5vcmc+DQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vZG90cw0KDQo= --_000_4A95BA014132FF49AE685FAB4B9F17F657EDD208dfweml501mbb_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 QmF0YW5nOw0KCXBhbm9zZS0xOjIgMyA2IDAgMCAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseTpTaW1TdW47DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQpAZm9u dC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMg NSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9z ZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6VGFo b21hOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDMgNSA0IDQgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9u dC1mYW1pbHk6IlxAQmF0YW5nIjsNCglwYW5vc2UtMToyIDMgNiAwIDAgMSAxIDEgMSAxO30NCkBm b250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlxAU2ltU3VuIjsNCglwYW5vc2UtMToyIDEgNiAwIDMg MSAxIDEgMSAxO30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNv Tm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAw MXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIs InNlcmlmIjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNp dGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsN Cgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFuLkVtYWls U3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToi Q2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1zb0NocERlZmF1bHQN Cgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3Np emU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYu V29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBn dGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIx MDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpz aGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIg Lz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxh bmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRT ZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+RGFuaWVsLA0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0Qi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5CYXNlZCBvbiB5b3VyIGRlc2Ny aXB0aW9uLCB5b3VyIHByb3Bvc2VkIGNvbGxhYm9yYXRpb24gaW5mb3JtYXRpb24gZXhjaGFuZ2Ug aXMgYmV0d2VlbiB0d28gZG9tYWlu4oCZcyBvcmNoZXN0cmF0aW9uIHN5c3RlbXMsICZuYnNwO2ku ZS4gdGhlIOKAnEHigJ0gaW50ZXJmYWNlIGluIHRoZSBJMk5TRg0KIGZyYW1ld29yaywgQ29ycmVj dD8gPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InBh Z2UtYnJlYWstYWZ0ZXI6YXZvaWQ7dGV4dC1hdXRvc3BhY2U6bm9uZSI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyYjNDM7LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0mIzQzOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJwYWdlLWJyZWFrLWFmdGVyOmF2b2lkO3RleHQtYXV0b3Nw YWNlOm5vbmUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyBJMk5TRiBDbGllbnQmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgfDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJwYWdlLWJyZWFrLWFmdGVyOmF2b2lkO3RleHQtYXV0b3NwYWNlOm5vbmUiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4m bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBFLmcuIE92ZXJsYXkgTmV0d29yayBNZ250LCBFbnRlcnBy aXNlIG5ldHdvcmsgTWdudCZuYnNwOyB8PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9InBhZ2UtYnJlYWstYWZ0ZXI6YXZvaWQ7dGV4dC1hdXRvc3BhY2U6 bm9uZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbmJzcDt8Jm5ic3A7IGFub3RoZXIgbmV0 d29yayBkb21haW7igJlzIG1nbnQsIGV0Yy4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgfDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJw YWdlLWJyZWFrLWFmdGVyOmF2b2lkO3RleHQtYXV0b3NwYWNlOm5vbmUiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgJiM0MzstLS0tLS0tLS0tJiM0MzstLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0mIzQzOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJwYWdlLWJyZWFrLWFmdGVyOmF2b2lkO3RleHQtYXV0b3Nw YWNlOm5vbmUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfDxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJwYWdlLWJyZWFr LWFmdGVyOmF2b2lkO3RleHQtYXV0b3NwYWNlOm5vbmUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyBDbGllbnQgRmFjaW5nIEludGVyZmFjZSAoQSk8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0icGFnZS1icmVh ay1hZnRlcjphdm9pZDt0ZXh0LWF1dG9zcGFjZTpub25lIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IHw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0icGFnZS1icmVhay1hZnRlcjphdm9pZDt0ZXh0LWF1dG9zcGFjZTpub25l Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7ICYjNDM7LS0tLS0mIzQzOy0tLS0tLS0tLS0tLS0tLSYjNDM7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0icGFnZS1icmVhay1hZnRlcjphdm9pZDt0ZXh0LWF1dG9z cGFjZTpub25lIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7fE5ldHdvcmsgT3BlcmF0b3IgbWdtdHwmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgJiM0MzstLS0tLS0tLS0tLS0tJiM0Mzs8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0icGFnZS1icmVhay1hZnRlcjphdm9pZDt0 ZXh0LWF1dG9zcGFjZTpub25lIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgU2VjdXJpdHkgQ29udHJvbGxlciB8ICZsdDsgLS0t LS0tLS0tICZndDsgfCBEZXZlbG9wZXLigJlzIHw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0icGFnZS1icmVhay1hZnRlcjphdm9pZDt0ZXh0LWF1dG9z cGFjZTpub25lIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tLS0tLS0tLS0tLS0tJiM0MzstLS0tLSYjNDM7Jm5ic3A7 IFJlZ2lzdHJhdGlvbiB8IE1nbnQgU3lzdGVtIHw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0icGFnZS1icmVhay1hZnRlcjphdm9pZDt0ZXh0LWF1dG9z cGFjZTpub25lIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO3wm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgSW50ZXJmYWNl Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tLS0tLS0tLS0tLSYjNDM7PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InBhZ2UtYnJlYWstYWZ0ZXI6YXZvaWQ7dGV4 dC1hdXRvc3BhY2U6bm9uZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0icGFnZS1icmVhay1hZnRlcjphdm9pZDt0ZXh0LWF1dG9zcGFjZTpub25lIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7fCBOU0YgRmFjaW5nIElu dGVyZmFjZSAoQik8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0icGFnZS1icmVhay1hZnRlcjphdm9pZDt0ZXh0LWF1dG9zcGFjZTpub25lIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHw8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0icGFnZS1icmVhay1hZnRlcjphdm9pZDt0 ZXh0LWF1dG9zcGFjZTpub25lIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7ICYjNDM7LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tJiM0MzstLS0tLS0tLS0t LS0tLS0tLS0tLS0tLSYjNDM7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9InBhZ2UtYnJlYWstYWZ0ZXI6YXZvaWQ7dGV4dC1hdXRvc3BhY2U6bm9uZSI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IHw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0icGFnZS1icmVhay1hZnRlcjphdm9pZDt0ZXh0LWF1dG9zcGFjZTpub25lIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfDxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJwYWdlLWJy ZWFrLWFmdGVyOmF2b2lkO3RleHQtYXV0b3NwYWNlOm5vbmUiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJz cDsgJiM0MzstLS0mIzQzOy0tJiM0MzsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgJiM0MzstLS0tLS0mIzQzOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmIzQzOy0tLS0t LSYjNDM7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0mIzQzOy0t LSYjNDM7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 InBhZ2UtYnJlYWstYWZ0ZXI6YXZvaWQ7dGV4dC1hdXRvc3BhY2U6bm9uZSI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZu YnNwOyZuYnNwOyAmIzQzOyBOU0YtMSYjNDM7IC0tLS0tLS0gJiM0MzsgTlNGLW4mIzQzOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyAmIzQzO05TRi0xICYjNDM7IC0tLS0tICYjNDM7TlNGLW0gJiM0MzsmbmJzcDsg LiAuIC4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJwYWdlLWJyZWFrLWFmdGVyOmF2b2lkO3RleHQtYXV0b3NwYWNlOm5vbmUiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4m bmJzcDsmbmJzcDsmbmJzcDsmIzQzOy0tLS0tLSYjNDM7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tLS0tJiM0MzsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg JiM0MzstLS0tLS0mIzQzOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmIzQz Oy0tLS0tLSYjNDM7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9InBhZ2UtYnJlYWstYWZ0ZXI6YXZvaWQ7dGV4dC1hdXRvc3BhY2U6bm9uZSI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJwYWdlLWJyZWFrLWFmdGVyOmF2b2lkO3RleHQtYXV0b3NwYWNlOm5vbmUiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 Ij4mbmJzcDsmbmJzcDsgRGV2ZWxvcGVyIEEmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgRGV2ZWxvcGVy IEI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBhbGlnbj0iY2Vu dGVyIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87dGV4dC1hbGlnbjpjZW50ZXIiPg0K PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPkZpZ3VyZSAxOiBJMk5TRiBSZWZlcmVuY2UgTW9kZWw8L3NwYW4+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPklzIGl0IG5l Y2Vzc2FyeSBmb3IgdGhlICZxdW90O0Rvd24mcXVvdDsgbmV0d29yayB0byBwcm92aWRlIHRoZSBs aXN0IG9mIFNGcyB0byAmcXVvdDtVcHBlciZxdW90OyBuZXR3b3JrPyBvciBpdCBpcyB1cCB0byB0 aGUg4oCcZG93buKAnSBuZXR3b3JrIHRvIHVzZSBpdHMgb3duIFNGcyBiYXNlZCBvbiB0aGUgcG9s aWNpZXMNCiBmcm9tIOKAnFVwcGVy4oCdIG5ldHdvcms/IDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjoj MUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+VGhhbmtzLCBMaW5k YTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9y ZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGlu IDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDsiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IEkybnNm IFttYWlsdG86aTJuc2YtYm91bmNlc0BpZXRmLm9yZ10NCjxiPk9uIEJlaGFsZiBPZiA8L2I+RGFu aWVsIE1pZ2F1bHQ8YnI+DQo8Yj5TZW50OjwvYj4gVGh1cnNkYXksIEp1bHkgMDcsIDIwMTYgOToy MyBBTTxicj4NCjxiPlRvOjwvYj4gbW9oYW1lZC5ib3VjYWRhaXJAb3JhbmdlLmNvbTxicj4NCjxi PkNjOjwvYj4gaTJuc2ZAaWV0Zi5vcmc7IGRvdHNAaWV0Zi5vcmc7IEFsaXJlemEgUmFuamJhcjxi cj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0kybnNmXSBOZXcgVmVyc2lvbiBOb3RpZmljYXRpb24g Zm9yIGRyYWZ0LW1nbHQtaTJuc2Ytc3NmLWNvbGxhYm9yYXRpb24tMDAudHh0PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tYm90dG9tOjEyLjBwdCI+SGkgTWVkLCA8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5UaGFuayB5b3Ug Zm9yIHRoZSBmZWVkIGJhY2tzLiBQbGVhc2Ugc2VlIGlubGluZSBteSByZXNwb25zZXMuIEkgd291 bGQgYmUgaGFwcHkgZGlzY3VzcyBtb3JlIGluIGRlcHRoIHRoZXNlIHF1ZXN0aW9ucyBpbiBCZXJs aW4hPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5C UiwgPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5E YW5pZWw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5PbiBXZWQsIEp1biAyOSwgMjAxNiBhdCA4OjE5IEFNLCAmbHQ7PGEgaHJlZj0ibWFpbHRv Om1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20iIHRhcmdldD0iX2JsYW5rIj5tb2hhbWVkLmJv dWNhZGFpckBvcmFuZ2UuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5IaSBEYW5pZWwsIGFsbCw8YnI+DQo8YnI+DQpUaGFuayB5b3UgZm9yIHNo YXJpbmcgdGhpcyBkcmFmdC48YnI+DQo8YnI+DQpJIGhhdmUgc29tZSBoaWdoLWxldmVsIHF1ZXN0 aW9ucyBhYm91dCB0aGlzIHByb3Bvc2FsOjxicj4NCiogSW4gd2hpY2ggZGVwbG95bWVudCBjYXNl IHlvdSB0aGluayB0aGF0IGEgc2VydmljZSBmdW5jdGlvbiB3aWxsIHRha2UgdGhlIHJlc3BvbnNp YmlsaXR5IHRvIGNvbnRhY3QgYW5vdGhlciBzZXJ2aWNlIGZ1bmN0aW9uIGxvY2F0ZWQgaW4gYW5v dGhlciBkb21haW4gdG8gYXNrIGZvciBjb2xsYWJvcmF0aW9uPyBXb3VsZG4ndCB0aGF0IGJlIHRo ZSByZXNwb25zaWJpbGl0eSBvZiB0aGUgcmVzcGVjdGl2ZSBhZG1pbmlzdHJhdGl2ZSBlbnRpdGll cyBtYW5hZ2luZw0KIHRob3NlIGRvbWFpbnM/PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5NR0xUOiBJbiBvdXIgY2FzZSwgdGhlIGNvbGxhYm9yYXRpb24gaXMg ZXN0YWJsaXNoZWQgYmV0d2VlbiBiZXR3ZWVuIHRoZSBhZG1pbmlzdHJhdGl2ZSBlbnRpdHkgb2Yg ZWFjaCBkb21haW4uIE9uY2UgdGhlIHByb3ZpZGVyIGFuZCB0aGUgaW5pdGlhdG9yIGhhdmUgYWdy ZWVkIG9uIHNldHRpbmcgYSBjb2xsYWJvcmF0aW9uIGRlZmluZWQgYnkgdGhlIHJlc291cmNlcyB0 byBiZSBlbmdhZ2VkLCBhcyB3ZWxsIGFzDQogdGhlIHNlcnZpY2UsIEkgd291bGQgc2F5IHRoZSBj b2xsYWJvcmF0aW9uIGlzIHNldC4gaW4gc29tZSBjYXNlcywgdGhlIHNlY3VyaXR5IHNlcnZpY2Ug aW5zdGFudGlhdGVkIG1heSByZXF1aXJlIGFkZGl0aW9uYWwgY29uZmlndXJhdGlvbnMuIEZvciBl eGFtcGxlLCB3aGVuIGEgZmlyZXdhbGwgaXMgYmVpbmcgaW5zdGFudGlhdGVkIGJ5IHRoZSBwcm92 aWRlciwgdGhlIGluaXRpYXRvciBtYXkgdGhlbiBuZWVkIHRvIGNvbmZpZ3VyZSB0aGUgZmlyZXdh bGwuDQogU3VjaCBjb25maWd1cmF0aW9uIGluIG91ciB2aWV3IGlzIG5vdCBwYXQgb2YgdGhlIGNv bGxhYm9yYXRpb24uIEluc3RlYWQgd2hhdCB3b3VsZCBiZSBwYXJ0IG9mIHRoZSBjb2xsYWJvcmF0 aW9uIGlzIHRoZSBhYmlsaXR5IGZvciB0aGUgZmlyZXdhbGwgdG8gYmUgY29uZmlndXJlZCBieSBY IHVzaW5nIHByb3RvY29sIFkuIFggY291bGQgYmUgYSBTRiBvciB0aGUgb3JjaGVzdHJhdG9yIG9m IHRoZSBkb21haW4uDQo8YnI+DQombmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2Nr cXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7 cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6 MGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiogQmFzZWQgb24gd2hpY2ggY3JpdGVyaWEgYW4g U1NGIG1heSBkZWNpZGUgdGhhdCBpdCBuZWVkcyBjb2xsYWJvcmF0aW9uIHdpdGggYW5vdGhlciBT U0Y/IFdvdWxkbid0IHRoYXQgYmUgZHJpdmVuIGJ5IHNlcnZpY2UgcmVxdWlyZW1lbnRzIGFuZCBv YmplY3RpdmVzICh0aGF0IGFyZSBub3QgdmlzaWJsZSB0byBhIG1vbm9saXRoaWMgU1NGKT88bzpw PjwvbzpwPjwvcD4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 YnI+DQpNR0xUOiBJbiBvdXIgY2FzZSwgdGhlIGNyaXRlcmlhIGlzIHdoZW4gYSBERG9TIGF0dGFj ayBpcyBiZWluZyBkZXRlY3RlZCwgYW5kIHRoZSBhdHRhY2sgY2FuIGJlIGJldHRlciBtaXRpZ2F0 ZWQgaW4gYW5vdGhlciBkb21haW4uIFRoaXMgbWVhbnMgdGhhdCB0aGUgb3JjaGVzdHJhdG9yIHRh a2VzIHRoZSBkZWNpc2lvbiBnaXZlbiB0aGUgdmFyaW91cyBpbnB1dHMgaXQgcmVjZWl2ZXMgZnJv bSB0aGUgU1NGcy4gQnV0IHRoZSBjb2xsYWJvcmF0aW9uDQogY291bGQgYWxzbyBiZSByZXF1ZXN0 ZWQgYnkgYSBzaW5nbGUgU1NGLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3Rl IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRp bmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4qIEdpdmVuIHRoYXQgc2VydmljZSBmdW5jdGlvbnMgZGVw bG95ZWQgaW4gYSBnaXZlbiBkb21haW4gYXJlIHVubGlrZWx5IHRvIGJlIGRpc2Nsb3NlZCBvdXRz aWRlIHRoYXQgZG9tYWluLCBob3cgU1NGIGRpc2NvdmVyeSBpcyBhY2hpZXZlZD88bzpwPjwvbzpw PjwvcD4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk1HTFQ6 IFRoYXQgaXMgYSBnb29kIHF1ZXN0aW9uLiBDdXJyZW50bHkgd2UgYXNzdW1lIHRoYXQgdGhlIHlv dSBrbm93IHRoZSBuZXh0IHVwcGVyLyBsb3dlciBwcm92aWRlciB5b3Ugd291ZGwgbGlrZSB0byBz ZXQgdGhlIGNvbGxhYm9yYXRpb24gd2l0aC4gV2UgaGF2ZSBub3QgeWV0IGRlc2lnbmVkIGFuIGFw cHJvcHJpYXRlZCBTU0YgZGlzY292ZXJ5IHByb3RvY29sLiBPbmUgcmVhc29uIGFsc28gZm9yIGl0 IGlzDQogdGhhdCB3ZSBuZWVkIHRvIHRoaW5rIG9mIGEgY29tbW9uIGxhbmd1YWdlIGZvciBzZXJ2 aWNlIGRlc2lnbmF0aW9uLiAmbmJzcDsgPGJyPg0KJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0ND Q0NDIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFy Z2luLXJpZ2h0OjBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRv bToxMi4wcHQiPiogV291bGQgY29sbGFib3JhdGlvbiBiZSB0aWVkIHRvIHRoZSAnaW5pdGlhdG9y JyBhbmQgJ3Byb3ZpZGVyJyBpbnN0YW5jZXMgd2hpY2ggYXJlIGludm9sdmVkIGluIGEgQ0E/IElz IHRoYXQgb3B0aW1hbCBnaXZlbiB0aGF0IG11bHRpcGxlIGluc3RhbmNlcyBvZiB0aGUgc2FtZSBT U0YgbWF5IGJlIGRlcGxveWVkIGluIGEgZ2l2ZW4gZG9tYWluIGZvciB2YXJpb3VzDQogcmVhc29u cyAobG9hZC1iYWxhbmNpbmcsIHJlc2lsaWVuY3ksIGV0Yy4pPzxvOnA+PC9vOnA+PC9wPg0KPC9i bG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk1HTFQ6IEluIG91ciBjYXNl LCBjb2xsYWJvcmF0aW9uIGlzIG1vc3RseSBzZXQgYmV0d2VlbiB0aGUgb3JjaGVzdHJhdG9ycyBv ZiB0aGUgZGlmZmVyZW50IGRvbWFpbi4gV2UgYWxzbyBoYWQgc2NlbmFyaW8gd2l0aCBhIHNpbmds ZSBkb21haW4gd2hlcmUgb25lIFNTRiBkeW5hbWljYWxseSBhc2sgZHVwbGljYXRpb24gb2YgaXRz IFNTRiBpbnN0YW5jZXMsIGFuZCB3aGVuIG11bHRpcGxlIFNTRiBhcmUgZHVwbGljYXRlZCwNCiB3 ZSBoYWQgb25lIGNvbGxhYm9yYXRpb24gcGVyIGR1cGxpY2F0ZWQgaW5zdGFuY2UuPGJyPg0KPGJy Pg0KJm5ic3A7ICZuYnNwOyA8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBz dHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5n OjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhbmsgeW91Ljxicj4NCjxicj4NCkNoZWVycyw8YnI+DQpN ZWQ8YnI+DQo8YnI+DQomZ3Q7IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLTxicj4NCiZndDsg RGUmbmJzcDs6IERvdHMgW21haWx0bzo8YSBocmVmPSJtYWlsdG86ZG90cy1ib3VuY2VzQGlldGYu b3JnIj5kb3RzLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XSBEZSBsYSBwYXJ0IGRlIERhbmllbCBNaWdh dWx0PGJyPg0KJmd0OyBFbnZvecOpJm5ic3A7OiBtYXJkaSAyOCBqdWluIDIwMTYgMTc6NDM8YnI+ DQomZ3Q7IMOAJm5ic3A7OiA8YSBocmVmPSJtYWlsdG86aTJuc2ZAaWV0Zi5vcmciPmkybnNmQGll dGYub3JnPC9hPjsgPGEgaHJlZj0ibWFpbHRvOmRvdHNAaWV0Zi5vcmciPg0KZG90c0BpZXRmLm9y ZzwvYT48YnI+DQomZ3Q7IENjJm5ic3A7OiBBbGlyZXphIFJhbmpiYXI7IDxhIGhyZWY9Im1haWx0 bzptZ2x0LmlldGZAZ21haWwuY29tIj5tZ2x0LmlldGZAZ21haWwuY29tPC9hPjxicj4NCiZndDsg T2JqZXQmbmJzcDs6IFJlOiBbRG90c10gTmV3IFZlcnNpb24gTm90aWZpY2F0aW9uIGZvciBkcmFm dC1tZ2x0LWkybnNmLXNzZi08YnI+DQomZ3Q7IGNvbGxhYm9yYXRpb24tMDAudHh0PG86cD48L286 cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZndDs8YnI+DQomZ3Q7 IEhpLDxicj4NCiZndDs8YnI+DQomZ3Q7IFBsZWFzZSBmaW5kIG91ciBkcmFmdCBmb3IgZWxhYm9y YXRpbmcgYSBjb2xsYWJvcmF0aW9uIGJldHdlZW4gc2VjdXJpdHk8YnI+DQomZ3Q7IHNlcnZpY2Vz IGxvY2F0ZSBpbiBkaWZmZXJlbnQgYWRtaW5pc3RyYXRpdmUgZG9tYWlucy48YnI+DQomZ3Q7PGJy Pg0KJmd0OyBGZWVkIGJhY2tzIC9Db21tZW50cyBhcmUgd2VsY29tZSE8YnI+DQomZ3Q7IEJSLDxi cj4NCiZndDsgRGFuaWVsPGJyPg0KJmd0Ozxicj4NCiZndDsgLS0tLS1PcmlnaW5hbCBNZXNzYWdl LS0tLS08YnI+DQomZ3Q7IEZyb206IDxhIGhyZWY9Im1haWx0bzppbnRlcm5ldC1kcmFmdHNAaWV0 Zi5vcmciPmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZzwvYT4gW21haWx0bzo8YSBocmVmPSJtYWls dG86aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnIj5pbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc8L2E+ XTxicj4NCiZndDsgU2VudDogVHVlc2RheSwgSnVuZSAyOCwgMjAxNiA2OjQwIFBNPGJyPg0KJmd0 OyBUbzogRGFuaWVsIE1pZ2F1bHQ7IEFsaXJlemEgUmFuamJhcjxicj4NCiZndDsgU3ViamVjdDog TmV3IFZlcnNpb24gTm90aWZpY2F0aW9uIGZvciBkcmFmdC1tZ2x0LWkybnNmLXNzZi1jb2xsYWJv cmF0aW9uLTxicj4NCiZndDsgMDAudHh0PGJyPg0KJmd0Ozxicj4NCiZndDs8YnI+DQomZ3Q7IEEg bmV3IHZlcnNpb24gb2YgSS1ELCBkcmFmdC1tZ2x0LWkybnNmLXNzZi1jb2xsYWJvcmF0aW9uLTAw LnR4dDxicj4NCiZndDsgaGFzIGJlZW4gc3VjY2Vzc2Z1bGx5IHN1Ym1pdHRlZCBieSBEYW5pZWwg TWlnYXVsdCBhbmQgcG9zdGVkIHRvIHRoZSBJRVRGPGJyPg0KJmd0OyByZXBvc2l0b3J5Ljxicj4N CiZndDs8YnI+DQomZ3Q7IE5hbWU6Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO2Ry YWZ0LW1nbHQtaTJuc2Ytc3NmLWNvbGxhYm9yYXRpb248YnI+DQomZ3Q7IFJldmlzaW9uOiZuYnNw OyAmbmJzcDsgJm5ic3A7MDA8YnI+DQomZ3Q7IFRpdGxlOiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgQ29sbGFib3JhdGlvbiBBZ3JlZW1lbnQg Zm9yIFNlY3VyaXR5IFNlcnZpY2UgRnVuY3Rpb248YnI+DQomZ3Q7IERvY3VtZW50IGRhdGU6Jm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IDIwMTYtMDYtMjg8YnI+DQomZ3Q7IEdyb3VwOiZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgSW5kaXZp ZHVhbCBTdWJtaXNzaW9uPGJyPg0KJmd0OyBQYWdlczombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IDEzPGJyPg0KJmd0OyBVUkw6Jm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvaW50ZXJuZXQtZHJhZnRzL2RyYWZ0LW1nbHQtaTJuc2Ytc3NmLSIgdGFyZ2V0PSJfYmxh bmsiPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzL2RyYWZ0LW1nbHQtaTJu c2Ytc3NmLTwvYT48YnI+DQomZ3Q7IGNvbGxhYm9yYXRpb24tMDAudHh0PGJyPg0KJmd0OyBTdGF0 dXM6Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vZGF0 YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LW1nbHQtaTJuc2Ytc3NmLSIgdGFyZ2V0PSJfYmxh bmsiPmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LW1nbHQtaTJuc2Ytc3Nm LTwvYT48YnI+DQomZ3Q7IGNvbGxhYm9yYXRpb24vPGJyPg0KJmd0OyBIdG1saXplZDombmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDs8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwv ZHJhZnQtbWdsdC1pMm5zZi1zc2YtIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly90b29scy5pZXRm Lm9yZy9odG1sL2RyYWZ0LW1nbHQtaTJuc2Ytc3NmLTwvYT48YnI+DQomZ3Q7IGNvbGxhYm9yYXRp b24tMDA8YnI+DQomZ3Q7PGJyPg0KJmd0Ozxicj4NCiZndDsgQWJzdHJhY3Q6PGJyPg0KJmd0OyZu YnNwOyAmbmJzcDsgVGhpcyBkb2N1bWVudCBzcGVjaWZpZXMgYSBjb2xsYWJvcmF0aW9uIGFncmVl bWVudCBwcm90b2NvbC4mbmJzcDsgVGhlPGJyPg0KJmd0OyZuYnNwOyAmbmJzcDsgY29sbGFib3Jh dGlvbiBhZ3JlZW1lbnQgbWFrZXMgcG9zc2libGUgaW5kaXZpZHVhbCBzZWN1cml0eSBzZXJ2aWNl czxicj4NCiZndDsmbmJzcDsgJm5ic3A7IGZ1bmN0aW9ucyAoU1NGKSB0byBjb2xsYWJvcmF0ZSB3 aXRoIGVhY2ggb3RoZXIuJm5ic3A7IFRoZSBjb2xsYWJvcmF0aW9uIGlzPGJyPg0KJmd0OyZuYnNw OyAmbmJzcDsgbW9zdGx5IGludGVuZGVkIGZvciBTU0YgbG9jYXRlZCBpbiBkaWZmZXJlbnQgYWRt aW5pc3RyYXRpdmUgZG9tYWlucyw8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyBpbiB3aGljaCBjYXNl IHRoZSBjb2xsYWJvcmF0aW9uIGNhbm5vdCBiZSBwZXJmb3JtZWQgYnkgYSBzaGFyZWQ8YnI+DQom Z3Q7Jm5ic3A7ICZuYnNwOyBvcmNoZXN0cmF0b3IuPGJyPg0KJmd0Ozxicj4NCiZndDsmbmJzcDsg Jm5ic3A7IFRoZSBjb2xsYWJvcmF0aW9uIGJldHdlZW4gU1NGIGluIGRpZmZlcmVudCBkb21haW5z IGFzc3VtZXMgdGhlPGJyPg0KJmd0OyZuYnNwOyAmbmJzcDsgdHJhZmZpYyBpcyBzdGVlcmVkIHRo cm91Z2ggdGhlIHR3byBkb21haW5zLjxicj4NCiZndDs8YnI+DQomZ3Q7PGJyPg0KJmd0Ozxicj4N CiZndDs8YnI+DQomZ3Q7IFBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2Yg bWludXRlcyBmcm9tIHRoZSB0aW1lIG9mPGJyPg0KJmd0OyBzdWJtaXNzaW9uIHVudGlsIHRoZSBo dG1saXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBhdmFpbGFibGUgYXQ8YnI+DQomZ3Q7IDxhIGhy ZWY9Imh0dHA6Ly90b29scy5pZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnRvb2xzLmlldGYub3Jn PC9hPi48YnI+DQomZ3Q7PGJyPg0KJmd0OyBUaGUgSUVURiBTZWNyZXRhcmlhdDxicj4NCiZndDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mZ3Q7 IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0KJmd0 OyBEb3RzIG1haWxpbmcgbGlzdDxicj4NCiZndDsgPGEgaHJlZj0ibWFpbHRvOkRvdHNAaWV0Zi5v cmciPkRvdHNAaWV0Zi5vcmc8L2E+PGJyPg0KJmd0OyA8YSBocmVmPSJodHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHMiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL3d3dy5p ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RvdHM8L2E+PG86cD48L286cD48L3A+DQo8L2Jsb2Nr cXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5 Pg0KPC9odG1sPg0K --_000_4A95BA014132FF49AE685FAB4B9F17F657EDD208dfweml501mbb_-- From nobody Thu Jul 7 21:37:04 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F2EFE12D669 for ; Thu, 7 Jul 2016 21:37:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=arbor.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2PHUhb0IYPsz for ; Thu, 7 Jul 2016 21:37:01 -0700 (PDT) Received: from mail-io0-x233.google.com (mail-io0-x233.google.com [IPv6:2607:f8b0:4001:c06::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C60F12D5AE for ; Thu, 7 Jul 2016 21:37:01 -0700 (PDT) Received: by mail-io0-x233.google.com with SMTP id i186so37145530iof.1 for ; Thu, 07 Jul 2016 21:37:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arbor.net; s=m0; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=oAVkcpfYvsgSY/uBgHReyf39c7xXEP7nVz+b5W9O7YY=; b=Zy1qZtYIDQnDDY5+5KKCWZJOh8kVxhCAHS2uBiiENXw6N4vxoBnx/Hljvs6HIQWa6C kAUpnGcUrSpQSomFZ2FWFnKUo1VUeuBa1Ors8M9vYByUdTyov9Q8xjv6Q2qdDOzg2D9+ J5l2RnoUgdxPr7Cf6HaSeHctsT576MfDJYCEM= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=oAVkcpfYvsgSY/uBgHReyf39c7xXEP7nVz+b5W9O7YY=; b=jMcKCPgb/wDB7uR/pROaRl/bO1vlB5u9bPpBnisFccG6432zMNDHJ1zVK6Horu5wvV GR/63BGp1Ig8AGMdlL+JMw2ZRcRFHBbMjI2YO/5y4TrM4E2TeWiTczfOb5UhAokvMmdc 3SEnHFwx+Wto/95rsibEJlG+ivEjMeUoNEU563JJisERiUelH6xfYE7QA8cSe0RpMWyE Hsg9AnDmnPQrjy7g0yQspKMLmyAxYdMbOINHyBTTbw9BQMrZoH5WEiir4/ZvpOBhA0wD c2jK+udsvmN6mEDuW/8KKG2NUK6nhfWf7L28kK0wyu+x+LYwq6MfM5iG95endcl85SIp 2H7g== X-Gm-Message-State: ALyK8tI2m44lTj6msxhQgsTKPOnDQAbYnBS9lDIiWZME5kBpDTpzdWtd6ptx/FJuoNJApxW+ X-Received: by 10.107.34.5 with SMTP id i5mr7315723ioi.8.1467952620345; Thu, 07 Jul 2016 21:37:00 -0700 (PDT) Received: from [10.0.1.6] (c-68-49-167-203.hsd1.mi.comcast.net. [68.49.167.203]) by smtp.gmail.com with ESMTPSA id 19sm2649667ioz.8.2016.07.07.21.36.59 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Thu, 07 Jul 2016 21:36:59 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: Andrew Mortensen In-Reply-To: Date: Fri, 8 Jul 2016 00:36:59 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <4FA3C457-714B-453C-84FC-A96B61C4A3EA@arbor.net> References: To: Flemming Andreasen X-Mailer: Apple Mail (2.3124) Archived-At: Cc: dots Subject: Re: [Dots] DOTS requirements (-01) feedback X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jul 2016 04:37:03 -0000 Thanks, Flemming. Comments inline. > On Jun 29, 2016, at 10:38 AM, Flemming Andreasen = wrote: >=20 > 1. DDoS (in DOTS) is not just about network devices and bandwidth but = about resource constrained devices with network connectivity in general. = We should make that clear throughout, because it affects our overall = scope and data model. What exactly do you have in mind when you talk about resource = constrained devices? =E2=80=9CConstrained=E2=80=9D seems to have a = strong association with IoT within the IETF. > 1a) A specific example shows up in requirement OP-006, where we talk = about addresses and prefixes, while on the other hand it does recognize = that attacked resources may be identified by higher-level naming = schemes, like SIP-URIs, E.164 numbers etc. It's not clear to me all of = this is fully vetted and that we in fact always have an address or = prefix indication - more discussion on this whole area is needed. You=E2=80=99re right: OP-006 is self-contradictory in that it seems to = define scope in terms of addresses and prefixes, while then giving as = examples resource identifiers that are neither. > 1b) Another example is DATA-003 which again is address focused. That = may be enough, but we should discuss further (e.g. allow for = extensibility to enable user-based whitelists) What form do you anticipate user-based whitelists taking? > 2. Need to get rid of relays and replace with DOTS Gateway. More = importantly though, we need to consider what requirements we have on = DOTS Gateways (if any). Relay references have been removed from the upcoming revision. I=E2=80=99v= e replaced them with a stub treatment of gateways to spur discussion of = the gateway requirements. > 3. Inter- and intra-domain shows up, however it's not really clear = what we mean by that. Maybe this is something the architecture draft = should clarify, because the requirements draft does seem to assume some = level of familiarity with the overall architecture. Agreed. > 4. OP-008 talks about conflicting requests to DOTS servers. It's not = clear if this requires DOTS servers to coordinate with each other, and = if so, if that applies across administrative boundaries as well. Related = to that last point, DOTS clients may have relationships with different = provides (each of which will have DOTS servers), and there doesn't seem = to be clarity on the requirements associated with that. This was originally meant to cover the specific case of a DOTS client = requesting e.g. a new mitigation with a scope overlapping with an = existing mitigation. It sounds like a separate requirement should be = added to discuss multi-homed DOTS client relationships with providers. > 5. OP-009: Need to clarify how this caching works and in particular = how it relates to DNS TTL values. I came away from the Buenos Aires meeting with the impression that the = WG had rejected this requirement, and I was prepared to remove it. > 6. DATA-001 talks about "transactional" transport, however it's not = clear what the transaction is actually for. Presumably it's for some = higher-level construct in the "to-be-defined" data model, but it's not = clear here. I'm also not clear on whether we really need that or = standard e2e reliable message delivery wouldn't suffice. Agreed, reliable messaging is adequate. > 7. We need a section with requirements for the overall data model. >=20 > 8. The congestion control section states the transmission rate will be = negligible and hence link congestion is not a concern. I think we need = explicit requirements around that because I'm guessing we will = ultimately need to have some form of congestion control in place. Yes, I=E2=80=99m working on replacing it with something less naive. andrew= From nobody Fri Jul 8 06:51:35 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1E84B12D6A1 for ; Fri, 8 Jul 2016 06:51:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LFhG_Dh7RjnS for ; Fri, 8 Jul 2016 06:51:32 -0700 (PDT) Received: from shetland.sei.cmu.edu (shetland.sei.cmu.edu [192.58.107.44]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B0BD12D5C3 for ; Fri, 8 Jul 2016 06:51:21 -0700 (PDT) Received: from timber.sei.cmu.edu (timber.sei.cmu.edu [10.64.21.23]) by shetland.sei.cmu.edu (8.14.4/8.14.4/1543) with ESMTP id u68DpKpk029461 for ; Fri, 8 Jul 2016 09:51:20 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cert.org; s=jthatj15xw2j; t=1467985880; bh=ahh7tZG9OkvlSTTAHFeZlEXnTHt/QFkpM98ZOBA7p2c=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version:Sender:Reply-To:Cc: In-Reply-To:References; b=bLFRITHfV1yRLY8I7g+2yvtYHozoz2NjkrvcWw4QSm3mK2az2oJ+YDOqrnrLaJf2f u9EhCDp2fd8yZc/ZwGgSXtoPD5lYg2rCl8inSb8tr4cmvUP6PB6Ufs9iiCxF8VqXsg y480e+RA7qK4SHptPUe8CJw0Aj//LFC3OZf+kzDE= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by timber.sei.cmu.edu (8.14.4/8.14.4/1543) with ESMTP id u68DpJu4011513 for ; Fri, 8 Jul 2016 09:51:19 -0400 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.03.0279.002; Fri, 8 Jul 2016 09:51:19 -0400 From: "Roman D. Danyliw" To: "dots@ietf.org" Thread-Topic: Draft DOTS agenda for IETF 96 Thread-Index: AdHZHtmnvM0fVEFZS/6dK8k5cfrImA== Date: Fri, 8 Jul 2016 13:51:18 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0104E11B57@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Dots] Draft DOTS agenda for IETF 96 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jul 2016 13:51:34 -0000 Hello WG! Below is a draft agenda for the upcoming IETF 96 meeting in Berlin. =3D=3D[ draft agenda ]=3D=3D DDoS Open Threat Signaling (DOTS) WG Agenda Tuesday, July 19, 2016 1620-1820 Afternoon Session II Bellevue SEC dots DDoS Open Threat Signaling WG 1. Note well, logistics and introduction (chairs, 5 min) 2. Use Case Discussion (20 min)=20 - draft-ietf-dots-use-cases-02 (Roland Dobbins, 10 min) - Additional use cases discussion (10 min) 3. Requirements Discussion (20 min) - draft-ietf-dots-requirements-02 (Andrew Mortensen, 10 min) - Additional requirements discussion (10 min) 4. Architecture Discussion (20 min) - draft-ietf-dots-architecture-00 (Andrew Mortensen, 10 min) - Additional architecture discussion (10 min) 5. Protocol Drafts (40 min) - draft-reddy-dots-transport-05 (Tiru Reddy, 10 min) - draft-francois-dots-ipv6-signal-option-00 (J=E9r=F4me Fran=E7ois, 10 mi= n) - draft-fu-dots-ipfix-extension-01 (Frank Xia, 10 min) - draft-nishizuka-dots-inter-domain-mechanism-01 (Kaname Nishizuka, 10 mi= n) 6. Related Work (5 min) - draft-mglt-i2nsf-ssf-collaboration-00 (Daniel Migualt, 5 min) 7. Open-Mic (10 min) 8. Closing =3D=3D[ agenda ]=3D=3D As a reminder, there will also be design team meetings that week [1]. The = full list of DOTS-related events the week of IETF 96 is as follows: ** Monday, July 18: 1230 - 1400: Joint Use Case, Requirements and Architect= ure Design Team Meeting ** Tuesday, July 19: 1620-1820: DOT WG meeting ** Wednesday, July 19: 1230 - 1400: Implementers Meeting The exact meeting room for the design team meetings is not yet known but wi= ll be announced late next week. Regards, Roman [1] https://www.ietf.org/mail-archive/web/dots/current/msg00887.html From nobody Fri Jul 8 12:21:46 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E3D912D7E4 for ; Fri, 8 Jul 2016 12:21:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -15.947 X-Spam-Level: X-Spam-Status: No, score=-15.947 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.426, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DJs2VrQETihM for ; Fri, 8 Jul 2016 12:21:33 -0700 (PDT) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C02F127058 for ; Fri, 8 Jul 2016 12:21:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4230; q=dns/txt; s=iport; t=1468005693; x=1469215293; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=igpKnCZd/6+vIHVWjAdTbD+TQYLPnviDunJXoqP3o5A=; b=agLDoDXEZJcr2vJDdrcRnWFvvdOKPtXLQg4ek8S6e3PTMfOs+Asy4ZEf 85rstxraGe1W+pwCL6r2dsCEt2T9eNx/gjnmSCLitMGzkp9Wq3eDz7Akb RwA5tl4I3HD+sm2hP183a+A+SXLfCfSYNvQstG6qzlbUG5UTUFNJmXuT2 k=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0B2BQBg/H9X/4QNJK1TCYM+gQBStwOCD?= =?us-ascii?q?4F7hhgCgSg4FAEBAQEBAQFlJ4RMAQEEASMPAQU6BwULCw4EBgICJgICSQ4GDQY?= =?us-ascii?q?CAQGIJAivCI8lAQEBAQEBAQEBAQEBAQEBAQEggQGFJoF4glWEGoMogloBBIglh?= =?us-ascii?q?xKEDoVPjk+JTYEehEGQDh42ggkcgWggMokyAQEB?= X-IronPort-AV: E=Sophos;i="5.28,331,1464652800"; d="scan'208";a="122043447" Received: from alln-core-10.cisco.com ([173.36.13.132]) by rcdn-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 08 Jul 2016 19:21:32 +0000 Received: from [10.98.149.195] (bxb-fandreas-8812.cisco.com [10.98.149.195]) by alln-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id u68JLVje009861; Fri, 8 Jul 2016 19:21:32 GMT To: Andrew Mortensen References: <4FA3C457-714B-453C-84FC-A96B61C4A3EA@arbor.net> From: Flemming Andreasen Message-ID: <2cf7f1b5-f543-a6f6-d6b6-5dd927d0a591@cisco.com> Date: Fri, 8 Jul 2016 15:21:31 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.1.1 MIME-Version: 1.0 In-Reply-To: <4FA3C457-714B-453C-84FC-A96B61C4A3EA@arbor.net> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Cc: dots Subject: Re: [Dots] DOTS requirements (-01) feedback X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jul 2016 19:21:41 -0000 On 7/8/16 12:36 AM, Andrew Mortensen wrote: > Thanks, Flemming. Comments inline. > >> On Jun 29, 2016, at 10:38 AM, Flemming Andreasen wrote: >> >> 1. DDoS (in DOTS) is not just about network devices and bandwidth but about resource constrained devices with network connectivity in general. We should make that clear throughout, because it affects our overall scope and data model. > What exactly do you have in mind when you talk about resource constrained devices? “Constrained†seems to have a strong association with IoT within the IETF. Good point. I basically meant any device with a finite set of resources (and with the present state of technology, it would seem most devices fall in that category :-) >> 1a) A specific example shows up in requirement OP-006, where we talk about addresses and prefixes, while on the other hand it does recognize that attacked resources may be identified by higher-level naming schemes, like SIP-URIs, E.164 numbers etc. It's not clear to me all of this is fully vetted and that we in fact always have an address or prefix indication - more discussion on this whole area is needed. > You’re right: OP-006 is self-contradictory in that it seems to define scope in terms of addresses and prefixes, while then giving as examples resource identifiers that are neither. > >> 1b) Another example is DATA-003 which again is address focused. That may be enough, but we should discuss further (e.g. allow for extensibility to enable user-based whitelists) > What form do you anticipate user-based whitelists taking? Identity, token, etc. would probably have been better choices of words. Basically, if you have some form of credential (non-address based), you could be white-listed. >> 2. Need to get rid of relays and replace with DOTS Gateway. More importantly though, we need to consider what requirements we have on DOTS Gateways (if any). > Relay references have been removed from the upcoming revision. I’ve replaced them with a stub treatment of gateways to spur discussion of the gateway requirements. > >> 3. Inter- and intra-domain shows up, however it's not really clear what we mean by that. Maybe this is something the architecture draft should clarify, because the requirements draft does seem to assume some level of familiarity with the overall architecture. > Agreed. > >> 4. OP-008 talks about conflicting requests to DOTS servers. It's not clear if this requires DOTS servers to coordinate with each other, and if so, if that applies across administrative boundaries as well. Related to that last point, DOTS clients may have relationships with different provides (each of which will have DOTS servers), and there doesn't seem to be clarity on the requirements associated with that. > This was originally meant to cover the specific case of a DOTS client requesting e.g. a new mitigation with a scope overlapping with an existing mitigation. It sounds like a separate requirement should be added to discuss multi-homed DOTS client relationships with providers. > >> 5. OP-009: Need to clarify how this caching works and in particular how it relates to DNS TTL values. > I came away from the Buenos Aires meeting with the impression that the WG had rejected this requirement, and I was prepared to remove it. Ok - I don't recall, but that works for me too. >> 6. DATA-001 talks about "transactional" transport, however it's not clear what the transaction is actually for. Presumably it's for some higher-level construct in the "to-be-defined" data model, but it's not clear here. I'm also not clear on whether we really need that or standard e2e reliable message delivery wouldn't suffice. > Agreed, reliable messaging is adequate. > >> 7. We need a section with requirements for the overall data model. >> >> 8. The congestion control section states the transmission rate will be negligible and hence link congestion is not a concern. I think we need explicit requirements around that because I'm guessing we will ultimately need to have some form of congestion control in place. > Yes, I’m working on replacing it with something less naive. Sounds good. Thanks -- Flemming > andrew. > From nobody Fri Jul 8 16:34:33 2016 Return-Path: X-Original-To: dots@ietf.org Delivered-To: dots@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C0FF12D8DF; Fri, 8 Jul 2016 16:34:24 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.25.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160708233424.32109.61686.idtracker@ietfa.amsl.com> Date: Fri, 08 Jul 2016 16:34:24 -0700 Archived-At: Cc: dots@ietf.org Subject: [Dots] I-D Action: draft-ietf-dots-requirements-02.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jul 2016 23:34:24 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the DDoS Open Threat Signaling of the IETF. Title : Distributed Denial of Service (DDoS) Open Threat Signaling Requirements Authors : Andrew Mortensen Robert Moskowitz Tirumaleswar Reddy Filename : draft-ietf-dots-requirements-02.txt Pages : 17 Date : 2016-07-08 Abstract: This document defines the requirements for the Distributed Denial of Service (DDoS) Open Threat Signaling (DOTS) protocols coordinating attack response against DDoS attacks. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dots-requirements/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-dots-requirements-02 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-requirements-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Jul 11 06:14:09 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA06012B037; Mon, 11 Jul 2016 06:14:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.205 X-Spam-Level: X-Spam-Status: No, score=-3.205 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.287, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jMn6H8UKDzSQ; Mon, 11 Jul 2016 06:14:01 -0700 (PDT) Received: from relais-inet.orange.com (relais-nor35.orange.com [80.12.70.35]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 15A2F12D0BB; Mon, 11 Jul 2016 06:14:01 -0700 (PDT) Received: from opfednr05.francetelecom.fr (unknown [xx.xx.xx.69]) by opfednr22.francetelecom.fr (ESMTP service) with ESMTP id 4523B2021F; Mon, 11 Jul 2016 15:13:59 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.69]) by opfednr05.francetelecom.fr (ESMTP service) with ESMTP id 08F8A2006E; Mon, 11 Jul 2016 15:13:59 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILMA2.corporate.adroot.infra.ftgroup ([fe80::bc1c:ad2f:eda3:8c3d%18]) with mapi id 14.03.0301.000; Mon, 11 Jul 2016 15:13:58 +0200 From: To: Daniel Migault Thread-Topic: New Version Notification for draft-mglt-i2nsf-ssf-collaboration-00.txt Thread-Index: AQHR2FsH2GspxBbOc0Wm4/WFIKg3xqATNv5g Date: Mon, 11 Jul 2016 13:13:58 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B933008DCEE4C@OPEXCLILMA3.corporate.adroot.infra.ftgroup> References: <20160628153949.24167.29375.idtracker@ietfa.amsl.com> <2DD56D786E600F45AC6BDE7DA4E8A8C117F2703F@eusaamb107.ericsson.se> <787AE7BB302AE849A7480A190F8B933008DBB3F9@OPEXCLILMA3.corporate.adroot.infra.ftgroup> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.1] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B933008DCEE4COPEXCLILMA3corp_" MIME-Version: 1.0 Archived-At: Cc: "i2nsf@ietf.org" , "dots@ietf.org" , Alireza Ranjbar Subject: Re: [Dots] New Version Notification for draft-mglt-i2nsf-ssf-collaboration-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Jul 2016 13:14:04 -0000 --_000_787AE7BB302AE849A7480A190F8B933008DCEE4COPEXCLILMA3corp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgRGFuaWVsLA0KDQpQbGVhc2Ugc2VlIGlubGluZS4NCg0KQ2hlZXJzLA0KTWVkDQoNCg0KRGUg OiBtZ2x0LmlldGZAZ21haWwuY29tIFttYWlsdG86bWdsdC5pZXRmQGdtYWlsLmNvbV0gRGUgbGEg cGFydCBkZSBEYW5pZWwgTWlnYXVsdA0KRW52b3nDqSA6IGpldWRpIDcganVpbGxldCAyMDE2IDE2 OjIzDQrDgCA6IEJPVUNBREFJUiBNb2hhbWVkIElNVC9PTE4NCkNjIDogaTJuc2ZAaWV0Zi5vcmc7 IGRvdHNAaWV0Zi5vcmc7IEFsaXJlemEgUmFuamJhcg0KT2JqZXQgOiBSZTogTmV3IFZlcnNpb24g Tm90aWZpY2F0aW9uIGZvciBkcmFmdC1tZ2x0LWkybnNmLXNzZi1jb2xsYWJvcmF0aW9uLTAwLnR4 dA0KDQpIaSBNZWQsDQpUaGFuayB5b3UgZm9yIHRoZSBmZWVkIGJhY2tzLiBQbGVhc2Ugc2VlIGlu bGluZSBteSByZXNwb25zZXMuIEkgd291bGQgYmUgaGFwcHkgZGlzY3VzcyBtb3JlIGluIGRlcHRo IHRoZXNlIHF1ZXN0aW9ucyBpbiBCZXJsaW4hDQpCUiwNCkRhbmllbA0KDQoNCg0KT24gV2VkLCBK dW4gMjksIDIwMTYgYXQgODoxOSBBTSwgPG1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb208bWFp bHRvOm1vaGFtZWQuYm91Y2FkYWlyQG9yYW5nZS5jb20+PiB3cm90ZToNCkhpIERhbmllbCwgYWxs LA0KDQpUaGFuayB5b3UgZm9yIHNoYXJpbmcgdGhpcyBkcmFmdC4NCg0KSSBoYXZlIHNvbWUgaGln aC1sZXZlbCBxdWVzdGlvbnMgYWJvdXQgdGhpcyBwcm9wb3NhbDoNCiogSW4gd2hpY2ggZGVwbG95 bWVudCBjYXNlIHlvdSB0aGluayB0aGF0IGEgc2VydmljZSBmdW5jdGlvbiB3aWxsIHRha2UgdGhl IHJlc3BvbnNpYmlsaXR5IHRvIGNvbnRhY3QgYW5vdGhlciBzZXJ2aWNlIGZ1bmN0aW9uIGxvY2F0 ZWQgaW4gYW5vdGhlciBkb21haW4gdG8gYXNrIGZvciBjb2xsYWJvcmF0aW9uPyBXb3VsZG4ndCB0 aGF0IGJlIHRoZSByZXNwb25zaWJpbGl0eSBvZiB0aGUgcmVzcGVjdGl2ZSBhZG1pbmlzdHJhdGl2 ZSBlbnRpdGllcyBtYW5hZ2luZyB0aG9zZSBkb21haW5zPw0KDQpNR0xUOiBJbiBvdXIgY2FzZSwg dGhlIGNvbGxhYm9yYXRpb24gaXMgZXN0YWJsaXNoZWQgYmV0d2VlbiBiZXR3ZWVuIHRoZSBhZG1p bmlzdHJhdGl2ZSBlbnRpdHkgb2YgZWFjaCBkb21haW4uDQoNCltNZWRdIE9LLCB0aGFua3MuIEl0 IHdvdWxkIGJlIGhlbHBmdWwgaWYgdGhlIGRyYWZ0IGluZGljYXRlcyB0aGlzIGFzc3VtcHRpb24u IEJUVywgdGhlIGRyYWZ0IHNlZW1zIHRvIGluZGljYXRlIHRoYXQgdGhlIGNvbGxhYm9yYXRpb24g aXMgYmV0d2VlbiBTU0ZzIHRoZW1zZWx2ZXMsIGUuZy4sIOKAnFRoZSBTU0ZzIGluaXRpYXRpbmcg YW5kIGFjY2VwdGluZyB0aGUgY29sbGFib3JhdGlvbiBhcmUgY2FsbGVkLA0KICAgcmVzcGVjdGl2 ZWx5LCAnaW5pdGlhdG9yJyBhbmQgJ3Byb3ZpZGVyJy7igJ0uDQoNCg0KT25jZSB0aGUgcHJvdmlk ZXIgYW5kIHRoZSBpbml0aWF0b3IgaGF2ZSBhZ3JlZWQgb24gc2V0dGluZyBhIGNvbGxhYm9yYXRp b24gZGVmaW5lZCBieSB0aGUgcmVzb3VyY2VzIHRvIGJlIGVuZ2FnZWQsIGFzIHdlbGwgYXMgdGhl IHNlcnZpY2UsIEkgd291bGQgc2F5IHRoZSBjb2xsYWJvcmF0aW9uIGlzIHNldC4gaW4gc29tZSBj YXNlcywgdGhlIHNlY3VyaXR5IHNlcnZpY2UgaW5zdGFudGlhdGVkIG1heSByZXF1aXJlIGFkZGl0 aW9uYWwgY29uZmlndXJhdGlvbnMuIEZvciBleGFtcGxlLCB3aGVuIGEgZmlyZXdhbGwgaXMgYmVp bmcgaW5zdGFudGlhdGVkIGJ5IHRoZSBwcm92aWRlciwgdGhlIGluaXRpYXRvciBtYXkgdGhlbiBu ZWVkIHRvIGNvbmZpZ3VyZSB0aGUgZmlyZXdhbGwuIFN1Y2ggY29uZmlndXJhdGlvbiBpbiBvdXIg dmlldyBpcyBub3QgcGF0IG9mIHRoZSBjb2xsYWJvcmF0aW9uLiBJbnN0ZWFkIHdoYXQgd291bGQg YmUgcGFydCBvZiB0aGUgY29sbGFib3JhdGlvbiBpcyB0aGUgYWJpbGl0eSBmb3IgdGhlIGZpcmV3 YWxsIHRvIGJlIGNvbmZpZ3VyZWQgYnkgWCB1c2luZyBwcm90b2NvbCBZLiBYIGNvdWxkIGJlIGEg U0Ygb3IgdGhlIG9yY2hlc3RyYXRvciBvZiB0aGUgZG9tYWluLg0KDQoqIEJhc2VkIG9uIHdoaWNo IGNyaXRlcmlhIGFuIFNTRiBtYXkgZGVjaWRlIHRoYXQgaXQgbmVlZHMgY29sbGFib3JhdGlvbiB3 aXRoIGFub3RoZXIgU1NGPyBXb3VsZG4ndCB0aGF0IGJlIGRyaXZlbiBieSBzZXJ2aWNlIHJlcXVp cmVtZW50cyBhbmQgb2JqZWN0aXZlcyAodGhhdCBhcmUgbm90IHZpc2libGUgdG8gYSBtb25vbGl0 aGljIFNTRik/DQoNCk1HTFQ6IEluIG91ciBjYXNlLCB0aGUgY3JpdGVyaWEgaXMgd2hlbiBhIERE b1MgYXR0YWNrIGlzIGJlaW5nIGRldGVjdGVkLCBhbmQgdGhlIGF0dGFjayBjYW4gYmUgYmV0dGVy IG1pdGlnYXRlZCBpbiBhbm90aGVyIGRvbWFpbg0KW01lZF0gQXNraW5nIGZvciBjb2xsYWJvcmF0 aW5nIGR1cmluZyBhbiBhdHRhY2sgbWF5IGJlIHRvbyBsYXRlIHRvIGJlIGVmZmljaWVudCAoYmVj YXVzZSB0aGUgcHJvY2VzcyBtYXkgaW52b2x2ZSBhZG1pbmlzdHJhdGl2ZSB2YWxpZGF0aW9uIGlu IGludGVyLWRvbWFpbiBjb250ZXh0cywgcmVzb3VyY2UgZGltZW5zaW9uIGFuZCBwcm92aXNpb25p bmcsIGV0Yy4pLiBJIHdvdWxkIGV4cGVjdCB0aGF0IHNlcnZpY2UgY29sbGFib3JhdGlvbiByZXF1 ZXN0IGlzIHRvIGVzdGFibGlzaGVkIHByaW9yIHRvIGludm9raW5nIHRoZSBzZXJ2aWNlIChkZG9z IG1pdGlnYXRpb24gaW4geW91ciBleGFtcGxlKS4gQlRXLCB3aHkgc2VjdXJpdHkgZnVuY3Rpb25z IGFyZSB0byBiZSBpbnZvbHZlZCBpbiB0aGUgY29sbGFib3JhdGlvbiBwcm9jZXNzPyBXb3VsZG7i gJl0IGJlIGFkZXF1YXRlIGZvciB0aGUgcGVlciBvcmNoZXN0cmF0b3JzIHRvIHRhbGsgd2l0aCBl YWNoIG90aGVyPw0KDQouIFRoaXMgbWVhbnMgdGhhdCB0aGUgb3JjaGVzdHJhdG9yIHRha2VzIHRo ZSBkZWNpc2lvbiBnaXZlbiB0aGUgdmFyaW91cyBpbnB1dHMgaXQgcmVjZWl2ZXMgZnJvbSB0aGUg U1NGcy4gQnV0IHRoZSBjb2xsYWJvcmF0aW9uIGNvdWxkIGFsc28gYmUgcmVxdWVzdGVkIGJ5IGEg c2luZ2xlIFNTRi4NCg0KKiBHaXZlbiB0aGF0IHNlcnZpY2UgZnVuY3Rpb25zIGRlcGxveWVkIGlu IGEgZ2l2ZW4gZG9tYWluIGFyZSB1bmxpa2VseSB0byBiZSBkaXNjbG9zZWQgb3V0c2lkZSB0aGF0 IGRvbWFpbiwgaG93IFNTRiBkaXNjb3ZlcnkgaXMgYWNoaWV2ZWQ/DQoNCk1HTFQ6IFRoYXQgaXMg YSBnb29kIHF1ZXN0aW9uLiBDdXJyZW50bHkgd2UgYXNzdW1lIHRoYXQgdGhlIHlvdSBrbm93IHRo ZSBuZXh0IHVwcGVyLyBsb3dlciBwcm92aWRlciB5b3Ugd291ZGwgbGlrZSB0byBzZXQgdGhlIGNv bGxhYm9yYXRpb24gd2l0aC4gV2UgaGF2ZSBub3QgeWV0IGRlc2lnbmVkIGFuIGFwcHJvcHJpYXRl ZCBTU0YgZGlzY292ZXJ5IHByb3RvY29sLiBPbmUgcmVhc29uIGFsc28gZm9yIGl0IGlzIHRoYXQg d2UgbmVlZCB0byB0aGluayBvZiBhIGNvbW1vbiBsYW5ndWFnZSBmb3Igc2VydmljZSBkZXNpZ25h dGlvbi4NCg0KDQoqIFdvdWxkIGNvbGxhYm9yYXRpb24gYmUgdGllZCB0byB0aGUgJ2luaXRpYXRv cicgYW5kICdwcm92aWRlcicgaW5zdGFuY2VzIHdoaWNoIGFyZSBpbnZvbHZlZCBpbiBhIENBPyBJ cyB0aGF0IG9wdGltYWwgZ2l2ZW4gdGhhdCBtdWx0aXBsZSBpbnN0YW5jZXMgb2YgdGhlIHNhbWUg U1NGIG1heSBiZSBkZXBsb3llZCBpbiBhIGdpdmVuIGRvbWFpbiBmb3IgdmFyaW91cyByZWFzb25z IChsb2FkLWJhbGFuY2luZywgcmVzaWxpZW5jeSwgZXRjLik/DQpNR0xUOiBJbiBvdXIgY2FzZSwg Y29sbGFib3JhdGlvbiBpcyBtb3N0bHkgc2V0IGJldHdlZW4gdGhlIG9yY2hlc3RyYXRvcnMgb2Yg dGhlIGRpZmZlcmVudCBkb21haW4uDQpbTWVkXSBQbGVhc2UgYWRkIHRoaXMgbWVudGlvbiB0byB0 aGUgZHJhZnQuDQpXZSBhbHNvIGhhZCBzY2VuYXJpbyB3aXRoIGEgc2luZ2xlIGRvbWFpbiB3aGVy ZSBvbmUgU1NGIGR5bmFtaWNhbGx5IGFzayBkdXBsaWNhdGlvbiBvZiBpdHMgU1NGIGluc3RhbmNl cywgYW5kIHdoZW4gbXVsdGlwbGUgU1NGIGFyZSBkdXBsaWNhdGVkLCB3ZSBoYWQgb25lIGNvbGxh Ym9yYXRpb24gcGVyIGR1cGxpY2F0ZWQgaW5zdGFuY2UuDQoNCg0KDQpUaGFuayB5b3UuDQoNCkNo ZWVycywNCk1lZA0KDQo+IC0tLS0tTWVzc2FnZSBkJ29yaWdpbmUtLS0tLQ0KPiBEZSA6IERvdHMg W21haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOmRvdHMtYm91bmNlc0BpZXRmLm9y Zz5dIERlIGxhIHBhcnQgZGUgRGFuaWVsIE1pZ2F1bHQNCj4gRW52b3nDqSA6IG1hcmRpIDI4IGp1 aW4gMjAxNiAxNzo0Mw0KPiDDgCA6IGkybnNmQGlldGYub3JnPG1haWx0bzppMm5zZkBpZXRmLm9y Zz47IGRvdHNAaWV0Zi5vcmc8bWFpbHRvOmRvdHNAaWV0Zi5vcmc+DQo+IENjIDogQWxpcmV6YSBS YW5qYmFyOyBtZ2x0LmlldGZAZ21haWwuY29tPG1haWx0bzptZ2x0LmlldGZAZ21haWwuY29tPg0K PiBPYmpldCA6IFJlOiBbRG90c10gTmV3IFZlcnNpb24gTm90aWZpY2F0aW9uIGZvciBkcmFmdC1t Z2x0LWkybnNmLXNzZi0NCj4gY29sbGFib3JhdGlvbi0wMC50eHQNCj4NCj4gSGksDQo+DQo+IFBs ZWFzZSBmaW5kIG91ciBkcmFmdCBmb3IgZWxhYm9yYXRpbmcgYSBjb2xsYWJvcmF0aW9uIGJldHdl ZW4gc2VjdXJpdHkNCj4gc2VydmljZXMgbG9jYXRlIGluIGRpZmZlcmVudCBhZG1pbmlzdHJhdGl2 ZSBkb21haW5zLg0KPg0KPiBGZWVkIGJhY2tzIC9Db21tZW50cyBhcmUgd2VsY29tZSENCj4gQlIs DQo+IERhbmllbA0KPg0KPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBpbnRl cm5ldC1kcmFmdHNAaWV0Zi5vcmc8bWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZz4gW21h aWx0bzppbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc8bWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRm Lm9yZz5dDQo+IFNlbnQ6IFR1ZXNkYXksIEp1bmUgMjgsIDIwMTYgNjo0MCBQTQ0KPiBUbzogRGFu aWVsIE1pZ2F1bHQ7IEFsaXJlemEgUmFuamJhcg0KPiBTdWJqZWN0OiBOZXcgVmVyc2lvbiBOb3Rp ZmljYXRpb24gZm9yIGRyYWZ0LW1nbHQtaTJuc2Ytc3NmLWNvbGxhYm9yYXRpb24tDQo+IDAwLnR4 dA0KPg0KPg0KPiBBIG5ldyB2ZXJzaW9uIG9mIEktRCwgZHJhZnQtbWdsdC1pMm5zZi1zc2YtY29s bGFib3JhdGlvbi0wMC50eHQNCj4gaGFzIGJlZW4gc3VjY2Vzc2Z1bGx5IHN1Ym1pdHRlZCBieSBE YW5pZWwgTWlnYXVsdCBhbmQgcG9zdGVkIHRvIHRoZSBJRVRGDQo+IHJlcG9zaXRvcnkuDQo+DQo+ IE5hbWU6ICAgICAgICAgZHJhZnQtbWdsdC1pMm5zZi1zc2YtY29sbGFib3JhdGlvbg0KPiBSZXZp c2lvbjogICAgIDAwDQo+IFRpdGxlOiAgICAgICAgICAgICAgICBDb2xsYWJvcmF0aW9uIEFncmVl bWVudCBmb3IgU2VjdXJpdHkgU2VydmljZSBGdW5jdGlvbg0KPiBEb2N1bWVudCBkYXRlOiAgICAg ICAgMjAxNi0wNi0yOA0KPiBHcm91cDogICAgICAgICAgICAgICAgSW5kaXZpZHVhbCBTdWJtaXNz aW9uDQo+IFBhZ2VzOiAgICAgICAgICAgICAgICAxMw0KPiBVUkw6ICAgICAgICAgICAgaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzL2RyYWZ0LW1nbHQtaTJuc2Ytc3NmLQ0KPiBj b2xsYWJvcmF0aW9uLTAwLnR4dA0KPiBTdGF0dXM6ICAgICAgICAgaHR0cHM6Ly9kYXRhdHJhY2tl ci5pZXRmLm9yZy9kb2MvZHJhZnQtbWdsdC1pMm5zZi1zc2YtDQo+IGNvbGxhYm9yYXRpb24vDQo+ IEh0bWxpemVkOiAgICAgICBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtbWdsdC1p Mm5zZi1zc2YtDQo+IGNvbGxhYm9yYXRpb24tMDANCj4NCj4NCj4gQWJzdHJhY3Q6DQo+ICAgIFRo aXMgZG9jdW1lbnQgc3BlY2lmaWVzIGEgY29sbGFib3JhdGlvbiBhZ3JlZW1lbnQgcHJvdG9jb2wu ICBUaGUNCj4gICAgY29sbGFib3JhdGlvbiBhZ3JlZW1lbnQgbWFrZXMgcG9zc2libGUgaW5kaXZp ZHVhbCBzZWN1cml0eSBzZXJ2aWNlcw0KPiAgICBmdW5jdGlvbnMgKFNTRikgdG8gY29sbGFib3Jh dGUgd2l0aCBlYWNoIG90aGVyLiAgVGhlIGNvbGxhYm9yYXRpb24gaXMNCj4gICAgbW9zdGx5IGlu dGVuZGVkIGZvciBTU0YgbG9jYXRlZCBpbiBkaWZmZXJlbnQgYWRtaW5pc3RyYXRpdmUgZG9tYWlu cywNCj4gICAgaW4gd2hpY2ggY2FzZSB0aGUgY29sbGFib3JhdGlvbiBjYW5ub3QgYmUgcGVyZm9y bWVkIGJ5IGEgc2hhcmVkDQo+ICAgIG9yY2hlc3RyYXRvci4NCj4NCj4gICAgVGhlIGNvbGxhYm9y YXRpb24gYmV0d2VlbiBTU0YgaW4gZGlmZmVyZW50IGRvbWFpbnMgYXNzdW1lcyB0aGUNCj4gICAg dHJhZmZpYyBpcyBzdGVlcmVkIHRocm91Z2ggdGhlIHR3byBkb21haW5zLg0KPg0KPg0KPg0KPg0K PiBQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtlIGEgY291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0 aGUgdGltZSBvZg0KPiBzdWJtaXNzaW9uIHVudGlsIHRoZSBodG1saXplZCB2ZXJzaW9uIGFuZCBk aWZmIGFyZSBhdmFpbGFibGUgYXQNCj4gdG9vbHMuaWV0Zi5vcmc8aHR0cDovL3Rvb2xzLmlldGYu b3JnPi4NCj4NCj4gVGhlIElFVEYgU2VjcmV0YXJpYXQNCj4NCj4gX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gRG90cyBtYWlsaW5nIGxpc3QNCj4gRG90 c0BpZXRmLm9yZzxtYWlsdG86RG90c0BpZXRmLm9yZz4NCj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9kb3RzDQoNCg== --_000_787AE7BB302AE849A7480A190F8B933008DCEE4COPEXCLILMA3corp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQov KiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1z b05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNp emU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTps aW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6 Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29I eXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxl Ow0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgltc28tc3R5bGUtbGluazoiUHLDqWZvcm1hdMOpIEhUTUwgQ2FyIjsNCgltYXJnaW46 MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTAuMHB0Ow0KCWZvbnQt ZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTcNCgl7bXNvLXN0eWxlLXR5 cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCgljb2xvcjpi bGFjazsNCglmb250LXdlaWdodDpub3JtYWw7DQoJZm9udC1zdHlsZTpub3JtYWw7fQ0Kc3Bhbi5Q cmZvcm1hdEhUTUxDYXINCgl7bXNvLXN0eWxlLW5hbWU6IlByw6lmb3JtYXTDqSBIVE1MIENhciI7 DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJQcsOpZm9ybWF0w6kg SFRNTCI7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCgltc28tZmFyZWFzdC1sYW5ndWFn ZTpGUjt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglm b250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCW1zby1mYXJlYXN0LWxhbmd1YWdl OkVOLVVTO30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCglt YXJnaW46NzAuODVwdCA3MC44NXB0IDcwLjg1cHQgNzAuODVwdDt9DQpkaXYuV29yZFNlY3Rpb24x DQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4 bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94 bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2 OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFw ZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkZSIiBsaW5r PSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPkhpIERh bmllbCwmbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpi bGFjayI+UGxlYXNlIHNlZSBpbmxpbmUuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDs7Y29sb3I6YmxhY2siPkNoZWVycyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPk1lZDxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpz b2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNC4wcHQiPg0KPGRpdj4NCjxkaXYg c3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5n OjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7Ij5EZSZuYnNwOzo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7Ij4gbWdsdC5pZXRmQGdtYWlsLmNvbSBbbWFpbHRvOm1nbHQuaWV0ZkBnbWFpbC5jb21d DQo8Yj5EZSBsYSBwYXJ0IGRlPC9iPiBEYW5pZWwgTWlnYXVsdDxicj4NCjxiPkVudm95w6kmbmJz cDs6PC9iPiBqZXVkaSA3IGp1aWxsZXQgMjAxNiAxNjoyMzxicj4NCjxiPsOAJm5ic3A7OjwvYj4g Qk9VQ0FEQUlSIE1vaGFtZWQgSU1UL09MTjxicj4NCjxiPkNjJm5ic3A7OjwvYj4gaTJuc2ZAaWV0 Zi5vcmc7IGRvdHNAaWV0Zi5vcmc7IEFsaXJlemEgUmFuamJhcjxicj4NCjxiPk9iamV0Jm5ic3A7 OjwvYj4gUmU6IE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQtbWdsdC1pMm5zZi1z c2YtY29sbGFib3JhdGlvbi0wMC50eHQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbTox Mi4wcHQiPkhpIE1lZCwgPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+VGhhbmsgeW91IGZvciB0aGUgZmVlZCBi YWNrcy4gUGxlYXNlIHNlZSBpbmxpbmUgbXkgcmVzcG9uc2VzLiBJIHdvdWxkIGJlIGhhcHB5IGRp c2N1c3MgbW9yZSBpbiBkZXB0aCB0aGVzZSBxdWVzdGlvbnMgaW4gQmVybGluITxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QlIsIDxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RGFuaWVsPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gV2VkLCBK dW4gMjksIDIwMTYgYXQgODoxOSBBTSwgJmx0OzxhIGhyZWY9Im1haWx0bzptb2hhbWVkLmJvdWNh ZGFpckBvcmFuZ2UuY29tIiB0YXJnZXQ9Il9ibGFuayI+bW9oYW1lZC5ib3VjYWRhaXJAb3Jhbmdl LmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ SGkgRGFuaWVsLCBhbGwsPGJyPg0KPGJyPg0KVGhhbmsgeW91IGZvciBzaGFyaW5nIHRoaXMgZHJh ZnQuPGJyPg0KPGJyPg0KSSBoYXZlIHNvbWUgaGlnaC1sZXZlbCBxdWVzdGlvbnMgYWJvdXQgdGhp cyBwcm9wb3NhbDo8YnI+DQoqIEluIHdoaWNoIGRlcGxveW1lbnQgY2FzZSB5b3UgdGhpbmsgdGhh dCBhIHNlcnZpY2UgZnVuY3Rpb24gd2lsbCB0YWtlIHRoZSByZXNwb25zaWJpbGl0eSB0byBjb250 YWN0IGFub3RoZXIgc2VydmljZSBmdW5jdGlvbiBsb2NhdGVkIGluIGFub3RoZXIgZG9tYWluIHRv IGFzayBmb3IgY29sbGFib3JhdGlvbj8gV291bGRuJ3QgdGhhdCBiZSB0aGUgcmVzcG9uc2liaWxp dHkgb2YgdGhlIHJlc3BlY3RpdmUgYWRtaW5pc3RyYXRpdmUgZW50aXRpZXMgbWFuYWdpbmcNCiB0 aG9zZSBkb21haW5zPzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+TUdMVDogSW4gb3VyIGNhc2UsIHRoZSBjb2xsYWJvcmF0aW9uIGlzIGVzdGFibGlzaGVkIGJl dHdlZW4gYmV0d2VlbiB0aGUgYWRtaW5pc3RyYXRpdmUgZW50aXR5IG9mIGVhY2ggZG9tYWluLg0K PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cHJlPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6YmxhY2siPltNZWRdIE9LLCB0aGFua3MuIEl0 IHdvdWxkIGJlIGhlbHBmdWwgaWYgdGhlIGRyYWZ0IGluZGljYXRlcyB0aGlzIGFzc3VtcHRpb24u IEJUVywgdGhlIGRyYWZ0IHNlZW1zIHRvIGluZGljYXRlIHRoYXQgdGhlIGNvbGxhYm9yYXRpb24g aXMgYmV0d2VlbiBTU0ZzIHRoZW1zZWx2ZXMsIGUuZy4sIOKAnDwvc3Bhbj48c3BhbiBsYW5nPSJF Ti1VUyI+VGhlIFNTRnMgaW5pdGlhdGluZyBhbmQgYWNjZXB0aW5nIHRoZSBjb2xsYWJvcmF0aW9u IGFyZSBjYWxsZWQsPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyByZXNwZWN0aXZlbHksICdpbml0 aWF0b3InIGFuZCAncHJvdmlkZXInLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6 YmxhY2siPuKAnS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9y OmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyI+T25jZSB0aGUgcHJvdmlkZXIgYW5kIHRoZSBpbml0aWF0b3Ig aGF2ZSBhZ3JlZWQgb24gc2V0dGluZyBhIGNvbGxhYm9yYXRpb24gZGVmaW5lZCBieSB0aGUgcmVz b3VyY2VzIHRvIGJlIGVuZ2FnZWQsIGFzIHdlbGwgYXMgdGhlIHNlcnZpY2UsIEkgd291bGQgc2F5 IHRoZSBjb2xsYWJvcmF0aW9uIGlzIHNldC4gaW4gc29tZSBjYXNlcywgdGhlIHNlY3VyaXR5IHNl cnZpY2UgaW5zdGFudGlhdGVkDQogbWF5IHJlcXVpcmUgYWRkaXRpb25hbCBjb25maWd1cmF0aW9u cy4gPC9zcGFuPkZvciBleGFtcGxlLCB3aGVuIGEgZmlyZXdhbGwgaXMgYmVpbmcgaW5zdGFudGlh dGVkIGJ5IHRoZSBwcm92aWRlciwgdGhlIGluaXRpYXRvciBtYXkgdGhlbiBuZWVkIHRvIGNvbmZp Z3VyZSB0aGUgZmlyZXdhbGwuIFN1Y2ggY29uZmlndXJhdGlvbiBpbiBvdXIgdmlldyBpcyBub3Qg cGF0IG9mIHRoZSBjb2xsYWJvcmF0aW9uLiBJbnN0ZWFkIHdoYXQgd291bGQgYmUgcGFydA0KIG9m IHRoZSBjb2xsYWJvcmF0aW9uIGlzIHRoZSBhYmlsaXR5IGZvciB0aGUgZmlyZXdhbGwgdG8gYmUg Y29uZmlndXJlZCBieSBYIHVzaW5nIHByb3RvY29sIFkuIFggY291bGQgYmUgYSBTRiBvciB0aGUg b3JjaGVzdHJhdG9yIG9mIHRoZSBkb21haW4uDQo8YnI+DQombmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlk ICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowY20gMGNtIDBjbSA2LjBwdDttYXJnaW4tbGVmdDo0Ljhw dDttYXJnaW4tcmlnaHQ6MGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiogQmFzZWQgb24gd2hp Y2ggY3JpdGVyaWEgYW4gU1NGIG1heSBkZWNpZGUgdGhhdCBpdCBuZWVkcyBjb2xsYWJvcmF0aW9u IHdpdGggYW5vdGhlciBTU0Y/IFdvdWxkbid0IHRoYXQgYmUgZHJpdmVuIGJ5IHNlcnZpY2UgcmVx dWlyZW1lbnRzIGFuZCBvYmplY3RpdmVzICh0aGF0IGFyZSBub3QgdmlzaWJsZSB0byBhIG1vbm9s aXRoaWMgU1NGKT88bzpwPjwvbzpwPjwvcD4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48YnI+DQpNR0xUOiBJbiBvdXIgY2FzZSwgdGhlIGNyaXRlcmlhIGlzIHdo ZW4gYSBERG9TIGF0dGFjayBpcyBiZWluZyBkZXRlY3RlZCwgYW5kIHRoZSBhdHRhY2sgY2FuIGJl IGJldHRlciBtaXRpZ2F0ZWQgaW4gYW5vdGhlciBkb21haW48c3BhbiBzdHlsZT0iY29sb3I6Ymxh Y2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+W01lZF0gQXNraW5nIGZvciBjb2xsYWJvcmF0aW5n IGR1cmluZyBhbiBhdHRhY2sgbWF5IGJlIHRvbyBsYXRlIHRvIGJlIGVmZmljaWVudCAoYmVjYXVz ZSB0aGUgcHJvY2VzcyBtYXkgaW52b2x2ZSBhZG1pbmlzdHJhdGl2ZSB2YWxpZGF0aW9uIGluIGlu dGVyLWRvbWFpbg0KIGNvbnRleHRzLCByZXNvdXJjZSBkaW1lbnNpb24gYW5kIHByb3Zpc2lvbmlu ZywgZXRjLikuIEkgd291bGQgZXhwZWN0IHRoYXQgc2VydmljZSBjb2xsYWJvcmF0aW9uIHJlcXVl c3QgaXMgdG8gZXN0YWJsaXNoZWQgcHJpb3IgdG8gaW52b2tpbmcgdGhlIHNlcnZpY2UgKGRkb3Mg bWl0aWdhdGlvbiBpbiB5b3VyIGV4YW1wbGUpLiBCVFcsIHdoeSBzZWN1cml0eSBmdW5jdGlvbnMg YXJlIHRvIGJlIGludm9sdmVkIGluIHRoZSBjb2xsYWJvcmF0aW9uIHByb2Nlc3M/DQogV291bGRu 4oCZdCBiZSBhZGVxdWF0ZSBmb3IgdGhlIHBlZXIgb3JjaGVzdHJhdG9ycyB0byB0YWxrIHdpdGgg ZWFjaCBvdGhlcj8gPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+LiBUaGlzIG1l YW5zIHRoYXQgdGhlIG9yY2hlc3RyYXRvciB0YWtlcyB0aGUgZGVjaXNpb24gZ2l2ZW4gdGhlIHZh cmlvdXMgaW5wdXRzIGl0IHJlY2VpdmVzIGZyb20gdGhlIFNTRnMuDQo8L3NwYW4+QnV0IHRoZSBj b2xsYWJvcmF0aW9uIGNvdWxkIGFsc28gYmUgcmVxdWVzdGVkIGJ5IGEgc2luZ2xlIFNTRi48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBjbSAwY20gMGNtIDYuMHB0O21h cmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ KiBHaXZlbiB0aGF0IHNlcnZpY2UgZnVuY3Rpb25zIGRlcGxveWVkIGluIGEgZ2l2ZW4gZG9tYWlu IGFyZSB1bmxpa2VseSB0byBiZSBkaXNjbG9zZWQgb3V0c2lkZSB0aGF0IGRvbWFpbiwgaG93IFNT RiBkaXNjb3ZlcnkgaXMgYWNoaWV2ZWQ/PG86cD48L286cD48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5NR0xUOiBUaGF0IGlzIGEgZ29vZCBxdWVzdGlv bi4gQ3VycmVudGx5IHdlIGFzc3VtZSB0aGF0IHRoZSB5b3Uga25vdyB0aGUgbmV4dCB1cHBlci8g bG93ZXIgcHJvdmlkZXIgeW91IHdvdWRsIGxpa2UgdG8gc2V0IHRoZSBjb2xsYWJvcmF0aW9uIHdp dGguIFdlIGhhdmUgbm90IHlldCBkZXNpZ25lZCBhbiBhcHByb3ByaWF0ZWQgU1NGIGRpc2NvdmVy eSBwcm90b2NvbC4gT25lIHJlYXNvbiBhbHNvIGZvciBpdCBpcw0KIHRoYXQgd2UgbmVlZCB0byB0 aGluayBvZiBhIGNvbW1vbiBsYW5ndWFnZSBmb3Igc2VydmljZSBkZXNpZ25hdGlvbi4gPHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6YmxhY2siPg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+Jm5ic3A7IDxicj4NCiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2tx dW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtw YWRkaW5nOjBjbSAwY20gMGNtIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDow Y20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij4q IFdvdWxkIGNvbGxhYm9yYXRpb24gYmUgdGllZCB0byB0aGUgJ2luaXRpYXRvcicgYW5kICdwcm92 aWRlcicgaW5zdGFuY2VzIHdoaWNoIGFyZSBpbnZvbHZlZCBpbiBhIENBPyBJcyB0aGF0IG9wdGlt YWwgZ2l2ZW4gdGhhdCBtdWx0aXBsZSBpbnN0YW5jZXMgb2YgdGhlIHNhbWUgU1NGIG1heSBiZSBk ZXBsb3llZCBpbiBhIGdpdmVuIGRvbWFpbiBmb3IgdmFyaW91cw0KIHJlYXNvbnMgKGxvYWQtYmFs YW5jaW5nLCByZXNpbGllbmN5LCBldGMuKT88bzpwPjwvbzpwPjwvcD4NCjwvYmxvY2txdW90ZT4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5NR0xUOiBJbiBvdXIgY2FzZSwgY29sbGFib3Jh dGlvbiBpcyBtb3N0bHkgc2V0IGJldHdlZW4gdGhlIG9yY2hlc3RyYXRvcnMgb2YgdGhlIGRpZmZl cmVudCBkb21haW4uPHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6Ymxh Y2siPltNZWRdIFBsZWFzZSBhZGQgdGhpcyBtZW50aW9uIHRvIHRoZSBkcmFmdC48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+V2Ug YWxzbyBoYWQgc2NlbmFyaW8gd2l0aCBhIHNpbmdsZSBkb21haW4gd2hlcmUgb25lIFNTRiBkeW5h bWljYWxseSBhc2sgZHVwbGljYXRpb24gb2YgaXRzIFNTRiBpbnN0YW5jZXMsIGFuZCB3aGVuIG11 bHRpcGxlIFNTRiBhcmUgZHVwbGljYXRlZCwgd2UgaGFkIG9uZSBjb2xsYWJvcmF0aW9uIHBlciBk dXBsaWNhdGVkIGluc3RhbmNlLjxicj4NCjxicj4NCiZuYnNwOyAmbmJzcDsgPG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVv dGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFk ZGluZzowY20gMGNtIDBjbSA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGNt Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoYW5rIHlvdS48YnI+DQo8YnI+DQpDaGVlcnMsPGJy Pg0KTWVkPGJyPg0KPGJyPg0KJmd0OyAtLS0tLU1lc3NhZ2UgZCdvcmlnaW5lLS0tLS08YnI+DQom Z3Q7IERlJm5ic3A7OiBEb3RzIFttYWlsdG86PGEgaHJlZj0ibWFpbHRvOmRvdHMtYm91bmNlc0Bp ZXRmLm9yZyI+ZG90cy1ib3VuY2VzQGlldGYub3JnPC9hPl0gRGUgbGEgcGFydCBkZSBEYW5pZWwg TWlnYXVsdDxicj4NCiZndDsgRW52b3nDqSZuYnNwOzogbWFyZGkgMjgganVpbiAyMDE2IDE3OjQz PGJyPg0KJmd0OyDDgCZuYnNwOzogPGEgaHJlZj0ibWFpbHRvOmkybnNmQGlldGYub3JnIj5pMm5z ZkBpZXRmLm9yZzwvYT47IDxhIGhyZWY9Im1haWx0bzpkb3RzQGlldGYub3JnIj4NCmRvdHNAaWV0 Zi5vcmc8L2E+PGJyPg0KJmd0OyBDYyZuYnNwOzogQWxpcmV6YSBSYW5qYmFyOyA8YSBocmVmPSJt YWlsdG86bWdsdC5pZXRmQGdtYWlsLmNvbSI+bWdsdC5pZXRmQGdtYWlsLmNvbTwvYT48YnI+DQom Z3Q7IE9iamV0Jm5ic3A7OiBSZTogW0RvdHNdIE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3Ig ZHJhZnQtbWdsdC1pMm5zZi1zc2YtPGJyPg0KJmd0OyBjb2xsYWJvcmF0aW9uLTAwLnR4dDxvOnA+ PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mZ3Q7PGJyPg0K Jmd0OyBIaSw8YnI+DQomZ3Q7PGJyPg0KJmd0OyBQbGVhc2UgZmluZCBvdXIgZHJhZnQgZm9yIGVs YWJvcmF0aW5nIGEgY29sbGFib3JhdGlvbiBiZXR3ZWVuIHNlY3VyaXR5PGJyPg0KJmd0OyBzZXJ2 aWNlcyBsb2NhdGUgaW4gZGlmZmVyZW50IGFkbWluaXN0cmF0aXZlIGRvbWFpbnMuPGJyPg0KJmd0 Ozxicj4NCiZndDsgRmVlZCBiYWNrcyAvQ29tbWVudHMgYXJlIHdlbGNvbWUhPGJyPg0KJmd0OyBC Uiw8YnI+DQomZ3Q7IERhbmllbDxicj4NCiZndDs8YnI+DQomZ3Q7IC0tLS0tT3JpZ2luYWwgTWVz c2FnZS0tLS0tPGJyPg0KJmd0OyBGcm9tOiA8YSBocmVmPSJtYWlsdG86aW50ZXJuZXQtZHJhZnRz QGlldGYub3JnIj5pbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc8L2E+IFttYWlsdG86PGEgaHJlZj0i bWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZyI+aW50ZXJuZXQtZHJhZnRzQGlldGYub3Jn PC9hPl08YnI+DQomZ3Q7IFNlbnQ6IFR1ZXNkYXksIEp1bmUgMjgsIDIwMTYgNjo0MCBQTTxicj4N CiZndDsgVG86IERhbmllbCBNaWdhdWx0OyBBbGlyZXphIFJhbmpiYXI8YnI+DQomZ3Q7IFN1Ympl Y3Q6IE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQtbWdsdC1pMm5zZi1zc2YtY29s bGFib3JhdGlvbi08YnI+DQomZ3Q7IDAwLnR4dDxicj4NCiZndDs8YnI+DQomZ3Q7PGJyPg0KJmd0 OyBBIG5ldyB2ZXJzaW9uIG9mIEktRCwgZHJhZnQtbWdsdC1pMm5zZi1zc2YtY29sbGFib3JhdGlv bi0wMC50eHQ8YnI+DQomZ3Q7IGhhcyBiZWVuIHN1Y2Nlc3NmdWxseSBzdWJtaXR0ZWQgYnkgRGFu aWVsIE1pZ2F1bHQgYW5kIHBvc3RlZCB0byB0aGUgSUVURjxicj4NCiZndDsgcmVwb3NpdG9yeS48 YnI+DQomZ3Q7PGJyPg0KJmd0OyBOYW1lOiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDtkcmFmdC1tZ2x0LWkybnNmLXNzZi1jb2xsYWJvcmF0aW9uPGJyPg0KJmd0OyBSZXZpc2lvbjom bmJzcDsgJm5ic3A7ICZuYnNwOzAwPGJyPg0KJmd0OyBUaXRsZTombmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IENvbGxhYm9yYXRpb24gQWdyZWVt ZW50IGZvciBTZWN1cml0eSBTZXJ2aWNlIEZ1bmN0aW9uPGJyPg0KJmd0OyBEb2N1bWVudCBkYXRl OiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAyMDE2LTA2LTI4PGJyPg0KJmd0OyBHcm91cDom bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IElu ZGl2aWR1YWwgU3VibWlzc2lvbjxicj4NCiZndDsgUGFnZXM6Jm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAxMzxicj4NCiZndDsgVVJMOiZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IDxhIGhyZWY9Imh0dHBzOi8vd3d3 LmlldGYub3JnL2ludGVybmV0LWRyYWZ0cy9kcmFmdC1tZ2x0LWkybnNmLXNzZi0iIHRhcmdldD0i X2JsYW5rIj4NCmh0dHBzOi8vd3d3LmlldGYub3JnL2ludGVybmV0LWRyYWZ0cy9kcmFmdC1tZ2x0 LWkybnNmLXNzZi08L2E+PGJyPg0KJmd0OyBjb2xsYWJvcmF0aW9uLTAwLnR4dDxicj4NCiZndDsg U3RhdHVzOiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDs8YSBocmVmPSJodHRwczov L2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1tZ2x0LWkybnNmLXNzZi0iIHRhcmdldD0i X2JsYW5rIj5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1tZ2x0LWkybnNm LXNzZi08L2E+PGJyPg0KJmd0OyBjb2xsYWJvcmF0aW9uLzxicj4NCiZndDsgSHRtbGl6ZWQ6Jm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9o dG1sL2RyYWZ0LW1nbHQtaTJuc2Ytc3NmLSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vdG9vbHMu aWV0Zi5vcmcvaHRtbC9kcmFmdC1tZ2x0LWkybnNmLXNzZi08L2E+PGJyPg0KJmd0OyBjb2xsYWJv cmF0aW9uLTAwPGJyPg0KJmd0Ozxicj4NCiZndDs8YnI+DQomZ3Q7IEFic3RyYWN0Ojxicj4NCiZn dDsmbmJzcDsgJm5ic3A7IFRoaXMgZG9jdW1lbnQgc3BlY2lmaWVzIGEgY29sbGFib3JhdGlvbiBh Z3JlZW1lbnQgcHJvdG9jb2wuJm5ic3A7IFRoZTxicj4NCiZndDsmbmJzcDsgJm5ic3A7IGNvbGxh Ym9yYXRpb24gYWdyZWVtZW50IG1ha2VzIHBvc3NpYmxlIGluZGl2aWR1YWwgc2VjdXJpdHkgc2Vy dmljZXM8YnI+DQomZ3Q7Jm5ic3A7ICZuYnNwOyBmdW5jdGlvbnMgKFNTRikgdG8gY29sbGFib3Jh dGUgd2l0aCBlYWNoIG90aGVyLiZuYnNwOyBUaGUgY29sbGFib3JhdGlvbiBpczxicj4NCiZndDsm bmJzcDsgJm5ic3A7IG1vc3RseSBpbnRlbmRlZCBmb3IgU1NGIGxvY2F0ZWQgaW4gZGlmZmVyZW50 IGFkbWluaXN0cmF0aXZlIGRvbWFpbnMsPGJyPg0KJmd0OyZuYnNwOyAmbmJzcDsgaW4gd2hpY2gg Y2FzZSB0aGUgY29sbGFib3JhdGlvbiBjYW5ub3QgYmUgcGVyZm9ybWVkIGJ5IGEgc2hhcmVkPGJy Pg0KJmd0OyZuYnNwOyAmbmJzcDsgb3JjaGVzdHJhdG9yLjxicj4NCiZndDs8YnI+DQomZ3Q7Jm5i c3A7ICZuYnNwOyBUaGUgY29sbGFib3JhdGlvbiBiZXR3ZWVuIFNTRiBpbiBkaWZmZXJlbnQgZG9t YWlucyBhc3N1bWVzIHRoZTxicj4NCiZndDsmbmJzcDsgJm5ic3A7IHRyYWZmaWMgaXMgc3RlZXJl ZCB0aHJvdWdoIHRoZSB0d28gZG9tYWlucy48YnI+DQomZ3Q7PGJyPg0KJmd0Ozxicj4NCiZndDs8 YnI+DQomZ3Q7PGJyPg0KJmd0OyBQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtlIGEgY291cGxl IG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZjxicj4NCiZndDsgc3VibWlzc2lvbiB1bnRpbCB0 aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0PGJyPg0KJmd0OyA8 YSBocmVmPSJodHRwOi8vdG9vbHMuaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj50b29scy5pZXRm Lm9yZzwvYT4uPGJyPg0KJmd0Ozxicj4NCiZndDsgVGhlIElFVEYgU2VjcmV0YXJpYXQ8YnI+DQom Z3Q7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Jmd0OyBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4N CiZndDsgRG90cyBtYWlsaW5nIGxpc3Q8YnI+DQomZ3Q7IDxhIGhyZWY9Im1haWx0bzpEb3RzQGll dGYub3JnIj5Eb3RzQGlldGYub3JnPC9hPjxicj4NCiZndDsgPGEgaHJlZj0iaHR0cHM6Ly93d3cu aWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9kb3RzPC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9i bG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_787AE7BB302AE849A7480A190F8B933008DCEE4COPEXCLILMA3corp_-- From nobody Tue Jul 12 01:58:49 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 22FAA12D754 for ; Tue, 12 Jul 2016 01:58:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.189 X-Spam-Level: X-Spam-Status: No, score=-3.189 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.287, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9xhVFVCfMpuu for ; Tue, 12 Jul 2016 01:58:46 -0700 (PDT) Received: from guri.nttv6.jp (guri.nttv6.jp [IPv6:2402:c800:ff06:a::4]) by ietfa.amsl.com (Postfix) with ESMTP id DD9BD12B016 for ; Tue, 12 Jul 2016 01:58:45 -0700 (PDT) Received: from z.nttv6.jp (z.nttv6.jp [192.168.8.15]) by guri.nttv6.jp (NTTv6MTA) with ESMTP id 242B04E664; Tue, 12 Jul 2016 17:58:45 +0900 (JST) Received: from SR2-nishizuka.local (fujiko.nttv6.jp [IPv6:2402:c800:ff06:136::141]) by z.nttv6.jp (NTTv6MTA) with ESMTP id DA23D3AC80; Tue, 12 Jul 2016 17:58:44 +0900 (JST) To: "Xialiang (Frank)" , "dots@ietf.org" References: From: kaname nishizuka Message-ID: Date: Tue, 12 Jul 2016 17:58:44 +0900 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Cc: "Roman D. Danyliw" , Tobias Gondrom Subject: Re: [Dots] Fwd: New Version Notification for draft-fu-dots-ipfix-extension-01.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jul 2016 08:58:48 -0000 Hi Frank, I think the content of the draft has changed dramatically in this revision. Though I'm not sure that the DOTS WG is the most suitable place to handle the extention of IEs of IPFIX, I added a comment in reply especially from operational view point. best regards, kaname nishizuka On 2016/06/14 18:40, Xialiang (Frank) wrote: > Hi all, > We submit a new version of this draft. > Thanks for the discussion and comments from this WG, we try to clarify the puzzles and explain the real problem we want to solve and the solution in this updated document. > > Overall, we want to cover the following points in this version: > > 1. This document mainly concerns on the attack telemetry information, such as: the new telemetry information we need for attack detection, and how to use them, etc; > > 2. Current IPFIX and PSAMP standards do not support the detection of some connection-based and Zero-Day DDoS attacks well, which normally are the kinds of the low & slow DDoS attack and not easy to be inspected as flood attacks. In our draft, we analyze this point and clearly propose to use the connection sampling method (which is specified by IPFIX/PSAMP) with some extended new IPFIX IEs to fill the gap; [clarifying question] Is the connection sampling method equal to the filtering technique in RFC5475? > 3. We also try to explain that the connection sampling method and the new specified IPFIX IEs are very effective for detection some categories of attack, and are feasible in the aspects of implementation, performance, deployment; The main concern regarding to this proposal is performance impact on the sampling process. How can it select the connection which includes attack vector like slow dos. Description of some technique of selecting malicious connections out of huge number of connections would be needed. > 4. There are already some good solutions applied in today's network for DDoS attack detection and runs well, but some of they are proprietary and not standardized, some of them are still not suitable for some kinds of attack well. Our proposal will not conflict to them and more intend to be the router/switch's functional enhancement, or just another solution choice. Many operators are using coarse-to-fine approach. They are using flow sampling for coarse detection and non-sampling methods like DPI for fine-grained detection. Non-sampling methods could be more suitable than the new specified IPFIX IEs to detect some categories of attacks. Could you describe the technique of connection sampling in detail which will not affect the performance of router/switches. > Any comments from you are warmly welcome! > > B.R. > Frank > > > > -----邮件原件----- > å‘件人: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] > å‘é€æ—¶é—´: 2016å¹´6月14æ—¥ 11:35 > 收件人: limin 00223961; DaCheng Zhang; Futianfu; Dacheng Zhang; Xialiang (Frank) > 主题: New Version Notification for draft-fu-dots-ipfix-extension-01.txt > > > A new version of I-D, draft-fu-dots-ipfix-extension-01.txt > has been successfully submitted by Liang Xia and posted to the IETF repository. > > Name: draft-fu-dots-ipfix-extension > Revision: 01 > Title: IPFIX IE Extensions for DDoS Attack Detection > Document date: 2016-06-14 > Group: Individual Submission > Pages: 21 > URL: https://www.ietf.org/internet-drafts/draft-fu-dots-ipfix-extension-01.txt > Status: https://datatracker.ietf.org/doc/draft-fu-dots-ipfix-extension/ > Htmlized: https://tools.ietf.org/html/draft-fu-dots-ipfix-extension-01 > Diff: https://www.ietf.org/rfcdiff?url2=draft-fu-dots-ipfix-extension-01 > > Abstract: > DDoS Open Threat Signaling (DOTS) Working Group is for developing > the standard signaling mechanisms, together with the DDoS related > telemetry and threat handling requests and data transmitted by them > used in DDoS problem space. Although IP Flow Information Export > (IPFIX), Packet Sampling (PSAMP), and Packet Selection methods are > useful for network security inspection, there are still some gaps > existing to identify some categories of DDoS attacks. To fill in > the gaps, this document describes the connection sampling mechanism > and explains why it is needed for detecting DDoS attacks. It also > defines several new IPFIX Information Elements (IEs). Then, it > presents some examples to show how to use these new IPFIX IEs > together with the existing IPFIX IEs to detect specific DDoS attacks. > > > > > Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. > > The IETF Secretariat > > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Thu Jul 14 20:09:12 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 37AAA12D841 for ; Thu, 14 Jul 2016 20:09:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -15.808 X-Spam-Level: X-Spam-Status: No, score=-15.808 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.287, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1fV9bDi2AmPE for ; Thu, 14 Jul 2016 20:09:09 -0700 (PDT) Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 56E1F12B054 for ; Thu, 14 Jul 2016 20:09:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3948; q=dns/txt; s=iport; t=1468552149; x=1469761749; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=ErEK9fNAiBfw2oL+PknNFs7UjfDBXR/bYUVEai3LRTI=; b=BsLRMbsfOeGnYlDyQhcIf0FPJ5EUaslTBqJLDuhveQFHGg+MCv87hnuz VM1V0yjG4858J7Yyol1jLOvch0+2o8h8vFY2SP4Pq/CZB6lcgQAdSNODI AF6ofeVh3P+I4ep2jdvTRiWmyeuWOnqXz8RF2TDs2s+YYeJBrNpvO1pLq c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0D8AQAzU4hX/5ldJa1SCoM+VnwGuGuBe?= =?us-ascii?q?yKFdwKBMzgUAQEBAQEBAWUnhFwBAQQBAQEKYgkHBwQCAQgRAQMBASgHJwsUAwU?= =?us-ascii?q?BCAIEARIIiCAIDsA/AQEBAQEBAQEBAQEBAQEBAQEBAQEBHIYqhE2EGAUNhXEFj?= =?us-ascii?q?gc5imABhhGIQIFyToQLiG+QGAEeNoNxboYrRH8BAQE?= X-IronPort-AV: E=Sophos;i="5.28,365,1464652800"; d="scan'208";a="296520975" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by alln-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 15 Jul 2016 03:09:08 +0000 Received: from XCH-RCD-018.cisco.com (xch-rcd-018.cisco.com [173.37.102.28]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id u6F398aR018939 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 15 Jul 2016 03:09:08 GMT Received: from xch-rcd-017.cisco.com (173.37.102.27) by XCH-RCD-018.cisco.com (173.37.102.28) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Thu, 14 Jul 2016 22:09:07 -0500 Received: from xch-rcd-017.cisco.com ([173.37.102.27]) by XCH-RCD-017.cisco.com ([173.37.102.27]) with mapi id 15.00.1210.000; Thu, 14 Jul 2016 22:09:07 -0500 From: "Tirumaleswar Reddy (tireddy)" To: =?iso-8859-1?Q?J=E9r=F4me_Fran=E7ois?= , "dots@ietf.org" Thread-Topic: [Dots] FW: New Version Notification for draft-reddy-dots-transport-05.txt Thread-Index: AQHR11jVVEDsCwAAOkiBthaVHADSf6ALBdQQgADEGQCAAHVbIA== Date: Fri, 15 Jul 2016 03:09:07 +0000 Message-ID: References: <20160706073427.7900.59549.idtracker@ietfa.amsl.com> <50de5af611944788898536433cc1dfbd@XCH-RCD-017.cisco.com> <577D151C.5090104@inria.fr> In-Reply-To: <577D151C.5090104@inria.fr> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.65.48.198] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] FW: New Version Notification for draft-reddy-dots-transport-05.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Jul 2016 03:09:11 -0000 > -----Original Message----- > From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of J=E9r=F4me Fran=E7= ois > Sent: Wednesday, July 06, 2016 7:57 PM > To: dots@ietf.org > Subject: Re: [Dots] FW: New Version Notification for draft-reddy-dots- > transport-05.txt >=20 > Thanks Tiru, >=20 > You introduce an AAA server in the DOTS gateway domain but it is not clea= r > for me whether this is also the case at the DOTS server side. AAA server may or may not be required on the DOTS server side, DOTS server = in the access network needs to be provisioned with the certificate of the D= OTS gateway and knows the prefixes assigned to DOTS gateway domain. However= DOTS server in the cloud may need to use RPKI or other mechanisms to ident= ify if the DOTS gateway domain owns the prefixes/addresses advertised in th= e DOTS signal for DDOS attack mitigation. Please see updated draft-ietf-dot= s-architecture-00 on authorization discussion. =20 > I would say yes, especially needed if there is no gateway. Yes.=20 >=20 > BTW, would it be better to locate the AAA server and communication outsid= e > example.com domain, to have the lower overhead close to where the attack > occurs ? Location of the AAA server is outside the scope of the this document becaus= e it is a deployment decision. The figure only illustrates the fact that th= e DOTS gateway reaches out to a AAA server for an authorization verdict -Tiru >=20 > J=E9r=F4me >=20 >=20 >=20 > Le 06/07/2016 09:46, Tirumaleswar Reddy (tireddy) a =E9crit : > > Added new section https://tools.ietf.org/html/draft-reddy-dots-transpor= t- > 05#section-8 to discuss about mutual authentication of DOTS Agents & > authorization of DOTS clients. Comments and suggestions are welcome. > > > > Cheers, > > -Tiru > > > > -----Original Message----- > > From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] > > Sent: Wednesday, July 06, 2016 1:04 PM > > To: Prashanth Patil (praspati); Dan Wing (dwing); Mike Geller > > (mgeller); Robert Moskowitz; Mohamed Boucadair; Tirumaleswar Reddy > > (tireddy) > > Subject: New Version Notification for > > draft-reddy-dots-transport-05.txt > > > > > > A new version of I-D, draft-reddy-dots-transport-05.txt has been > > successfully submitted by Tirumaleswar Reddy and posted to the IETF > > repository. > > > > Name: draft-reddy-dots-transport > > Revision: 05 > > Title: Co-operative DDoS Mitigation > > Document date: 2016-07-06 > > Group: Individual Submission > > Pages: 26 > > URL: https://www.ietf.org/internet-drafts/draft-reddy-dots- > transport-05.txt > > Status: https://datatracker.ietf.org/doc/draft-reddy-dots-trans= port/ > > Htmlized: https://tools.ietf.org/html/draft-reddy-dots-transport-= 05 > > Diff: https://www.ietf.org/rfcdiff?url2=3Ddraft-reddy-dots-tr= ansport-05 > > > > Abstract: > > This document specifies a mechanism that a DOTS client can use to > > signal that a network is under a Distributed Denial-of-Service (DDoS= ) > > attack to an upstream DOTS server so that appropriate mitigation > > actions are undertaken (including, blackhole, drop, rate-limit, or > > add to watch list) on the suspect traffic. The document specifies > > both DOTS signal and data channels. Happy Eyeballs considerations > > for the DOTS signal channel are also elaborated. > > > > > > > > > > Please note that it may take a couple of minutes from the time of > > submission until the htmlized version and diff are available at tools.i= etf.org. > > > > The IETF Secretariat > > > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots >=20 >=20 > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Sun Jul 17 09:44:35 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 26DDD12D1D3 for ; Sun, 17 Jul 2016 09:44:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.389 X-Spam-Level: X-Spam-Status: No, score=-101.389 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MISSING_MIMEOLE=1.899, RP_MATCHES_RCVD=-1.287, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); domainkeys=pass (1024-bit key) header.from=tobias.gondrom@gondrom.org header.d=gondrom.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X3XFfVT2NAwF for ; Sun, 17 Jul 2016 09:44:31 -0700 (PDT) Received: from gondrom.org (www.gondrom.org [5.35.241.16]) (using TLSv1.1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 94A8912D1A9 for ; Sun, 17 Jul 2016 09:44:31 -0700 (PDT) Received: from seraph (dhcp-8d8b.meeting.ietf.org [31.133.141.139]) by gondrom.org (Postfix) with ESMTPSA id 10C30631B2; Sun, 17 Jul 2016 18:44:30 +0200 (CEST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=gondrom.org; b=ZbW+QMWk55Dpx898yDwrcBJ4lc6fkJvb3iqWbnXyoi60kHlt/KIguK1Z4iOCCoSvFat3WVlbhdwcI4Ws63X9756MJU//mESqAjB1wWh7w6UvWdXVyk7P1SMUE/dcf1FbgFJTwKcZwV0sq186uGB4C4LbDR6PhvTT0oWGPrVh+UI=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version:Content-Type:X-Priority:X-MSMail-Priority:X-Mailer:Thread-Index:Content-Language:Importance; From: "Tobias Gondrom" To: Date: Sun, 17 Jul 2016 18:44:21 +0200 Message-ID: <05ba01d1e04a$788949c0$699bdd40$@gondrom.org> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_05BB_01D1E05B.3C135240" X-Priority: 1 (Highest) X-MSMail-Priority: High X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdHgSNCz4hgD6WmGQ3ahgJeeAymu/g== Content-Language: en-us Importance: High Archived-At: Cc: "'Roman D. Danyliw'" Subject: Re: [Dots] Design team meetings during IETF 96 - reminder X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Jul 2016 16:44:33 -0000 This is a multipart message in MIME format. ------=_NextPart_000_05BB_01D1E05B.3C135240 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hello dear DOTS WG team, Just as a small reminder: besides our DOTS WG meeting on Tuesday afternoon 16:20-18:20 in room Bellevue, there will be two design team meetings during this week. These are open for anyone interested, and for the purpose as explained below: (1) Joint Use Case, Requirements and Architecture Design Team Meeting Time: Monday, July 18: 1230-1400 Purpose: discuss the specific UC/requirements/architecture drafts and overlap between the drafts Location: TBA (I shall get the room details on Monday morning and will send them to the mailing-list) (2) Implementers Meeting Time: Wednesday, July 20: 1230-1400 Purpose: existing and future implementers discussing their experiences Location: TBA (I shall get the room details on Monday morning and will send them to the mailing-list) Cheers and see you soon in Berlin, Tobias -----Original Message----- From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Roman D. Danyliw Sent: Tuesday, June 21, 2016 19:58 To: dots@ietf.org Subject: [Dots] Design team meetings during IETF 96 Hello WG! In previous face-to-face meetings, collocated design team meetings have proven useful. During today's virtual interim meeting, there was interest in continuing such sessions in Berlin. To enable participants to better plan their week at IETF 96, the design teams agreed to convene on the following schedule: (1) Joint Use Case, Requirements and Architecture Design Team Meeting Time: Monday, July 18: 1230-1400 Purpose: discuss the specific UC/requirements/architecture drafts and overlap between the drafts Location: TBD (2) Implementers Meeting Time: Wednesday, July 20: 1230-1400 Purpose: existing and future implementers discussing their experiences Location: TBD The locations for both meetings will be announced at a later time. Roman _______________________________________________ Dots mailing list Dots@ietf.org https://www.ietf.org/mailman/listinfo/dots ------=_NextPart_000_05BB_01D1E05B.3C135240 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable RE: [Dots] Design team meetings during IETF 96 - reminder

Hello = dear DOTS WG team,

Just as a small = reminder:

besides our DOTS WG meeting = on Tuesday afternoon 16:20-18:20 in room Bellevue,

there will = be two = design team meetings during this week. =

These are open = for anyone interested, and for the purpose as explained below: =

(1) Joint Use = Case, Requirements and Architecture Design Team = Meeting

Time: Monday, July 18: 1230-1400

Purpose: = discuss the specific UC/requirements/architecture drafts and overlap = between the drafts

Location: = TBA (I shall get the room details on Monday morning and = will send them to the mailing-list)

(2) = Implementers Meeting

Time: Wednesday, July 20: 1230-1400

Purpose: = existing and future implementers discussing their = experiences

Location: = TBA (I shall get the room details on Monday morning and = will send them to the mailing-list)

Cheers and see = you soon in Berlin,

Tobias

-----Original = Message-----
From: Dots [mailto:dots-bounces@ietf.org] = On Behalf Of Roman D. Danyliw
Sent: Tuesday, June 21, 2016 19:58
To: dots@ietf.org
Subject: [Dots] Design team meetings during IETF 96

Hello = WG!

In previous = face-to-face meetings, collocated design team meetings have proven = useful.  During today's virtual interim meeting, there was interest = in continuing such sessions in Berlin.  To enable participants to = better plan their week at IETF 96, the design teams agreed to convene on = the following schedule:

(1) Joint Use = Case, Requirements and Architecture Design Team = Meeting

Time: Monday, = July 18: 1230-1400

Purpose: = discuss the specific UC/requirements/architecture drafts and overlap = between the drafts

Location: = TBD

(2) = Implementers Meeting

Time: = Wednesday, July 20: 1230-1400

Purpose: = existing and future implementers discussing their = experiences

Location: = TBD

The locations = for both meetings will be announced at a later time.

Roman

_______________________________________________

Dots mailing = list

Dots@ietf.org

https://www.ietf.org/mailman/listinfo/dots=

------=_NextPart_000_05BB_01D1E05B.3C135240-- From nobody Mon Jul 18 02:01:50 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A919312D19E for ; Mon, 18 Jul 2016 02:01:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.389 X-Spam-Level: X-Spam-Status: No, score=-101.389 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MISSING_MIMEOLE=1.899, RP_MATCHES_RCVD=-1.287, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); domainkeys=pass (1024-bit key) header.from=tobias.gondrom@gondrom.org header.d=gondrom.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PAdK-Hd6PdtC for ; Mon, 18 Jul 2016 02:01:46 -0700 (PDT) Received: from gondrom.org (www.gondrom.org [5.35.241.16]) (using TLSv1.1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D73FB12D1C2 for ; Mon, 18 Jul 2016 02:01:44 -0700 (PDT) Received: from seraph (dhcp-8d8b.meeting.ietf.org [31.133.141.139]) by gondrom.org (Postfix) with ESMTPSA id E62FB631B2; Mon, 18 Jul 2016 11:01:42 +0200 (CEST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=gondrom.org; b=niqRQpIGjRa/Zw+bkxQolXteEy6xVlgKvReu6hy0s0YqN8dNuDZvQiiaP8bOQ9d6Kz0kl069UXbzpzQD5Boed0nfNx4ta+ASWpShDdYhEWxP2rPGSMKTbTVwFiQFjuW+1saR9DZwkSaVyVYQyDisNpxv2qDlRchxJ7iKXq5SVgs=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version:Content-Type:X-Priority:X-MSMail-Priority:X-Mailer:Thread-Index:Content-Language:Importance; From: "Tobias Gondrom" To: Date: Mon, 18 Jul 2016 11:01:34 +0200 Message-ID: <02c701d1e0d2$fc749db0$f55dd910$@gondrom.org> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_02C8_01D1E0E3.BFFEA630" X-Priority: 1 (Highest) X-MSMail-Priority: High X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdHg0s1AAfkf15+CSWSmtUIP4CdQGQ== Content-Language: en-us Importance: High Archived-At: Cc: "'Roman D. Danyliw'" Subject: Re: [Dots] Design team meetings during IETF 96 - Design team meeting today at 12:30 in room "King" on 2nd floor X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Jul 2016 09:01:49 -0000 This is a multipart message in MIME format. ------=_NextPart_000_02C8_01D1E0E3.BFFEA630 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Dear all, For the design team meeting today (1) Joint Use Case, Requirements and Architecture Design Team Meeting Time: Monday, July 18: 1230-1400 Purpose: discuss the specific UC/requirements/architecture drafts and overlap between the drafts Location: Room "King" (on 2nd floor.) As I said before the attendance is optional, this serves as a discussion venue for the design teams, but is open to anyone interested. Best regards, Tobias & Roman _____________________________________________ From: Tobias Gondrom [mailto:tobias.gondrom@gondrom.org] Sent: Sunday, July 17, 2016 18:44 To: 'dots@ietf.org' Cc: 'Roman D. Danyliw' Subject: RE: [Dots] Design team meetings during IETF 96 - reminder Importance: High Hello dear DOTS WG team, Just as a small reminder: besides our DOTS WG meeting on Tuesday afternoon 16:20-18:20 in room Bellevue, there will be two design team meetings during this week. These are open for anyone interested, and for the purpose as explained below: (1) Joint Use Case, Requirements and Architecture Design Team Meeting Time: Monday, July 18: 1230-1400 Purpose: discuss the specific UC/requirements/architecture drafts and overlap between the drafts Location: TBA (I shall get the room details on Monday morning and will send them to the mailing-list) (2) Implementers Meeting Time: Wednesday, July 20: 1230-1400 Purpose: existing and future implementers discussing their experiences Location: TBA (I shall get the room details on Monday morning and will send them to the mailing-list) Cheers and see you soon in Berlin, Tobias -----Original Message----- From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Roman D. Danyliw Sent: Tuesday, June 21, 2016 19:58 To: dots@ietf.org Subject: [Dots] Design team meetings during IETF 96 Hello WG! In previous face-to-face meetings, collocated design team meetings have proven useful. During today's virtual interim meeting, there was interest in continuing such sessions in Berlin. To enable participants to better plan their week at IETF 96, the design teams agreed to convene on the following schedule: (1) Joint Use Case, Requirements and Architecture Design Team Meeting Time: Monday, July 18: 1230-1400 Purpose: discuss the specific UC/requirements/architecture drafts and overlap between the drafts Location: TBD (2) Implementers Meeting Time: Wednesday, July 20: 1230-1400 Purpose: existing and future implementers discussing their experiences Location: TBD The locations for both meetings will be announced at a later time. Roman _______________________________________________ Dots mailing list Dots@ietf.org https://www.ietf.org/mailman/listinfo/dots ------=_NextPart_000_02C8_01D1E0E3.BFFEA630 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable RE: [Dots] Design team meetings during IETF 96 - Design team = meeting today at 12:30 in room "King" on 2nd floor

Dear all,

For the design = team meeting today

(1) Joint Use Case, Requirements and Architecture = Design Team Meeting

Time: Monday, July 18: 1230-1400

Purpose: = discuss the specific UC/requirements/architecture drafts and overlap = between the drafts

Location: Room “King” (on 2nd floor.)

As I said = before the attendance is optional, this serves as a discussion venue for = the design teams, but is open to anyone interested.

Best regards, = Tobias & Roman

_____________________________________________
From: Tobias Gondrom [mailto:tobias.gondrom@gondrom.= org]
Sent: Sunday, July 17, 2016 18:44
To: 'dots@ietf.org' <dots@ietf.org>
Cc: 'Roman D. Danyliw' <rdd@cert.org>
Subject: RE: [Dots] Design team meetings during IETF 96 - = reminder
Importance: High

Hello dear DOTS WG team,

Just as a small = reminder:

besides our DOTS WG meeting on Tuesday afternoon 16:20-18:20 in = room Bellevue,

there will = be two = design team meetings during this week.

These are open = for anyone interested, and for the purpose as explained below: =

(1) Joint Use = Case, Requirements and Architecture Design Team = Meeting

Time: Monday, July 18: 1230-1400

Purpose: = discuss the specific UC/requirements/architecture drafts and overlap = between the drafts

Location: TBA = (I shall get the room details on Monday morning and will send them to = the mailing-list)

(2) = Implementers Meeting

Time: Wednesday, July 20: 1230-1400

Purpose: = existing and future implementers discussing their = experiences

Location: TBA = (I shall get the room details on Monday morning and will send them to = the mailing-list)

Cheers and see = you soon in Berlin,

Tobias


-----Original = Message-----
From: Dots [mailto:dots-bounces@ietf.org] = On Behalf Of Roman D. Danyliw
Sent: Tuesday, June 21, 2016 19:58
To: dots@ietf.org
Subject: [Dots] Design team meetings during IETF = 96

Hello = WG!

In previous = face-to-face meetings, collocated design team meetings have proven = useful.  During today's virtual interim meeting, there was interest = in continuing such sessions in Berlin.  To enable participants to = better plan their week at IETF 96, the design teams agreed to convene on = the following schedule:

(1) Joint Use = Case, Requirements and Architecture Design Team = Meeting

Time: Monday, = July 18: 1230-1400

Purpose: = discuss the specific UC/requirements/architecture drafts and overlap = between the drafts

Location: = TBD

(2) = Implementers Meeting

Time: = Wednesday, July 20: 1230-1400

Purpose: = existing and future implementers discussing their = experiences

Location: = TBD

The locations = for both meetings will be announced at a later time.

Roman

_______________________________________________

Dots mailing = list

Dots@ietf.org

https://www.ietf.org/mailman/listinfo/dots=

------=_NextPart_000_02C8_01D1E0E3.BFFEA630-- From nobody Mon Jul 18 02:43:51 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B3CB012D820 for ; Mon, 18 Jul 2016 02:43:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.487 X-Spam-Level: X-Spam-Status: No, score=-5.487 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.287, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WxpowtD5PFTS for ; Mon, 18 Jul 2016 02:43:48 -0700 (PDT) Received: from z9m9z.htt-consult.com (z9m9z.htt-consult.com [50.253.254.3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F056112D82B for ; Mon, 18 Jul 2016 02:39:36 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by z9m9z.htt-consult.com (Postfix) with ESMTP id 8A43E6219C; Mon, 18 Jul 2016 05:39:33 -0400 (EDT) X-Virus-Scanned: amavisd-new at htt-consult.com Received: from z9m9z.htt-consult.com ([127.0.0.1]) by localhost (z9m9z.htt-consult.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP id dB+nPUE7wSDB; Mon, 18 Jul 2016 05:39:17 -0400 (EDT) Received: from lx120e.htt-consult.com (dhcp-a0d9.meeting.ietf.org [31.133.160.217]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by z9m9z.htt-consult.com (Postfix) with ESMTPSA id 2CA6E62192; Mon, 18 Jul 2016 05:39:15 -0400 (EDT) To: Tobias Gondrom , dots@ietf.org References: <02c701d1e0d2$fc749db0$f55dd910$@gondrom.org> From: Robert Moskowitz Message-ID: <8613735c-8d3b-00ef-0494-e650c5088bd4@htt-consult.com> Date: Mon, 18 Jul 2016 11:39:11 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.0 MIME-Version: 1.0 In-Reply-To: <02c701d1e0d2$fc749db0$f55dd910$@gondrom.org> Content-Type: multipart/alternative; boundary="------------8A6B94073EE198DD256B1129" Archived-At: Cc: "'Roman D. Danyliw'" Subject: Re: [Dots] Design team meetings during IETF 96 - Design team meeting today at 12:30 in room "King" on 2nd floor X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Jul 2016 09:43:50 -0000 This is a multi-part message in MIME format. --------------8A6B94073EE198DD256B1129 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit Which side of the 2nd floor is the King room? It is not listed on the agenda map. On 07/18/2016 11:01 AM, Tobias Gondrom wrote: > RE: [Dots] Design team meetings during IETF 96 - Design team meeting > today at 12:30 in room "King" on 2nd floor > > Dear all, > > For the design team meeting today > > (1) Joint Use Case, Requirements and Architecture Design Team Meeting > > Time:*Monday, July 18: 1230-1400* > > Purpose: discuss the specific UC/requirements/architecture drafts and > overlap between the drafts > > Location:*Room “King” (on 2**^nd **floor.)* > > As I said before the attendance is optional, this serves as a > discussion venue for the design teams, but is open to anyone interested. > > Best regards, Tobias & Roman > > _____________________________________________ > *From:*Tobias Gondrom [mailto:tobias.gondrom@gondrom.org] > *Sent:*Sunday, July 17, 2016 18:44 > *To:*'dots@ietf.org' > *Cc:*'Roman D. Danyliw' > *Subject:*RE: [Dots] Design team meetings during IETF 96 - reminder > *Importance:*High > > Hello dear DOTS WG team, > > Just as a small reminder: > > besides*our DOTS WG meeting on Tuesday afternoon 16:20-18:20 in room > Bellevue*, > > there will be*two design team meetings*during this week. > > These are open for anyone interested, and for the purpose as explained > below: > > (1) Joint Use Case, Requirements and Architecture Design Team Meeting > > Time:*Monday, July 18: 1230-1400* > > Purpose: discuss the specific UC/requirements/architecture drafts and > overlap between the drafts > > Location: TBA (I shall get the room details on Monday morning and will > send them to the mailing-list) > > (2) Implementers Meeting > > Time:*Wednesday, July 20: 1230-1400* > > Purpose: existing and future implementers discussing their experiences > > Location: TBA (I shall get the room details on Monday morning and will > send them to the mailing-list) > > Cheers and see you soon in Berlin, > > Tobias > > > -----Original Message----- > From: Dots [_mailto:dots-bounces@ietf.org_] On Behalf Of Roman D. Danyliw > Sent: Tuesday, June 21, 2016 19:58 > To:_dots@ietf.org_ > Subject: [Dots] Design team meetings during IETF 96 > > Hello WG! > > In previous face-to-face meetings, collocated design team meetings > have proven useful. During today's virtual interim meeting, there was > interest in continuing such sessions in Berlin. To enable participants > to better plan their week at IETF 96, the design teams agreed to > convene on the following schedule: > > (1) Joint Use Case, Requirements and Architecture Design Team Meeting > > Time: Monday, July 18: 1230-1400 > > Purpose: discuss the specific UC/requirements/architecture drafts and > overlap between the drafts > > Location: TBD > > (2) Implementers Meeting > > Time: Wednesday, July 20: 1230-1400 > > Purpose: existing and future implementers discussing their experiences > > Location: TBD > > The locations for both meetings will be announced at a later time. > > Roman > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots > > > > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots --------------8A6B94073EE198DD256B1129 Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 8bit

Which side of the 2nd floor is the King room?  It is not listed on the agenda map.


On 07/18/2016 11:01 AM, Tobias Gondrom wrote:
RE: [Dots] Design team meetings during IETF 96 - Design team meeting today at 12:30 in room "King" on 2nd floor

Dear all,

For the design team meeting today

(1) Joint Use Case, Requirements and Architecture Design Team Meeting

Time: Monday, July 18: 1230-1400

Purpose: discuss the specific UC/requirements/architecture drafts and overlap between the drafts

Location: Room “King” (on 2nd floor.)

As I said before the attendance is optional, this serves as a discussion venue for the design teams, but is open to anyone interested.

Best regards, Tobias & Roman

_____________________________________________
From: Tobias Gondrom [mailto:tobias.gondrom@gondrom.org]
Sent: Sunday, July 17, 2016 18:44
To: 'dots@ietf.org' <dots@ietf.org>
Cc: 'Roman D. Danyliw' <rdd@cert.org>
Subject: RE: [Dots] Design team meetings during IETF 96 - reminder
Importance: High

Hello dear DOTS WG team,

Just as a small reminder:

besides our DOTS WG meeting on Tuesday afternoon 16:20-18:20 in room Bellevue,

there will be two design team meetings during this week.

These are open for anyone interested, and for the purpose as explained below:

(1) Joint Use Case, Requirements and Architecture Design Team Meeting

Time: Monday, July 18: 1230-1400

Purpose: discuss the specific UC/requirements/architecture drafts and overlap between the drafts

Location: TBA (I shall get the room details on Monday morning and will send them to the mailing-list)

(2) Implementers Meeting

Time: Wednesday, July 20: 1230-1400

Purpose: existing and future implementers discussing their experiences

Location: TBA (I shall get the room details on Monday morning and will send them to the mailing-list)

Cheers and see you soon in Berlin,

Tobias


-----Original Message-----
From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Roman D. Danyliw
Sent: Tuesday, June 21, 2016 19:58
To: dots@ietf.org
Subject: [Dots] Design team meetings during IETF 96

Hello WG!

In previous face-to-face meetings, collocated design team meetings have proven useful.  During today's virtual interim meeting, there was interest in continuing such sessions in Berlin.  To enable participants to better plan their week at IETF 96, the design teams agreed to convene on the following schedule:

(1) Joint Use Case, Requirements and Architecture Design Team Meeting

Time: Monday, July 18: 1230-1400

Purpose: discuss the specific UC/requirements/architecture drafts and overlap between the drafts

Location: TBD

(2) Implementers Meeting

Time: Wednesday, July 20: 1230-1400

Purpose: existing and future implementers discussing their experiences

Location: TBD

The locations for both meetings will be announced at a later time.

Roman

_______________________________________________

Dots mailing list

Dots@ietf.org

https://www.ietf.org/mailman/listinfo/dots



_______________________________________________
Dots mailing list
Dots@ietf.org
https://www.ietf.org/mailman/listinfo/dots

--------------8A6B94073EE198DD256B1129-- From nobody Mon Jul 18 03:01:51 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC0C912D675 for ; Mon, 18 Jul 2016 03:01:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -15.807 X-Spam-Level: X-Spam-Status: No, score=-15.807 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.287, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XXwwFDlX3OX4 for ; Mon, 18 Jul 2016 03:01:47 -0700 (PDT) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 781D612D664 for ; Mon, 18 Jul 2016 03:01:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=17643; q=dns/txt; s=iport; t=1468836107; x=1470045707; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to; bh=V4evV4o8mlP0lbAGsdq25RDOCgY4FxFc0poxwT2EHfQ=; b=aWVmIJDkUOuEbnJ/qiGUx4hugGgwHZ95chtak3qlBgM3qO8h/skS6OIw h9wQYWHC+NxfTeaAH9waddAFCFY1bI4/2rcsDSJ+hPnwLL+ukrl7RO45a oCPyCnSEJiZYAKlbpinQ7xCTIU1wAPOeLefB6X5cDPJgq8V63hSDkEo38 0=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AzAgDBp4xX/51dJa1cgz9WKlK4eYF5I?= =?us-ascii?q?oV4AoExOBQBAQEBAQEBZSeEXAEBBQEBK0ELDAQLDgMBAwEBASMEBycfAwYIBgE?= =?us-ascii?q?MBgIBAYgsDr5wAQEBAQEBAQEBAQEBAQEBAQEBAQEBFwWGKoF4CIFKgQOEdoUlA?= =?us-ascii?q?QSIf4pkhUGOX4lQhWeQHh42ggscF4FRIDKHPgEBAQ?= X-IronPort-AV: E=Sophos;i="5.28,383,1464652800"; d="scan'208,217";a="125242300" Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by rcdn-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 18 Jul 2016 10:01:46 +0000 Received: from [10.24.21.16] ([10.24.21.16]) by rcdn-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id u6IA1iQK023062; Mon, 18 Jul 2016 10:01:44 GMT To: Robert Moskowitz , Tobias Gondrom , dots@ietf.org References: <02c701d1e0d2$fc749db0$f55dd910$@gondrom.org> <8613735c-8d3b-00ef-0494-e650c5088bd4@htt-consult.com> From: Flemming Andreasen Message-ID: <53ee3f63-7860-a91f-2a8c-5352e3fd8aee@cisco.com> Date: Mon, 18 Jul 2016 06:01:43 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.1.1 MIME-Version: 1.0 In-Reply-To: <8613735c-8d3b-00ef-0494-e650c5088bd4@htt-consult.com> Content-Type: multipart/alternative; boundary="------------4A68B90AF99E08CDB30F8567" Archived-At: Cc: "'Roman D. Danyliw'" Subject: Re: [Dots] Design team meetings during IETF 96 - Design team meeting today at 12:30 in room "King" on 2nd floor X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Jul 2016 10:01:50 -0000 This is a multi-part message in MIME format. --------------4A68B90AF99E08CDB30F8567 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit It would seem it is situated between Bishop and Queen (as you might expect upon further reflection :-) On 7/18/16 5:39 AM, Robert Moskowitz wrote: > > Which side of the 2nd floor is the King room? It is not listed on the > agenda map. > > > On 07/18/2016 11:01 AM, Tobias Gondrom wrote: >> RE: [Dots] Design team meetings during IETF 96 - Design team meeting >> today at 12:30 in room "King" on 2nd floor >> >> Dear all, >> >> For the design team meeting today >> >> (1) Joint Use Case, Requirements and Architecture Design Team Meeting >> >> Time:*Monday, July 18: 1230-1400* >> >> Purpose: discuss the specific UC/requirements/architecture drafts and >> overlap between the drafts >> >> Location:*Room “King” (on 2**^nd **floor.)* >> >> As I said before the attendance is optional, this serves as a >> discussion venue for the design teams, but is open to anyone interested. >> >> Best regards, Tobias & Roman >> >> _____________________________________________ >> *From:*Tobias Gondrom [mailto:tobias.gondrom@gondrom.org] >> *Sent:*Sunday, July 17, 2016 18:44 >> *To:*'dots@ietf.org' >> *Cc:*'Roman D. Danyliw' >> *Subject:*RE: [Dots] Design team meetings during IETF 96 - reminder >> *Importance:*High >> >> Hello dear DOTS WG team, >> >> Just as a small reminder: >> >> besides*our DOTS WG meeting on Tuesday afternoon 16:20-18:20 in room >> Bellevue*, >> >> there will be*two design team meetings*during this week. >> >> These are open for anyone interested, and for the purpose as >> explained below: >> >> (1) Joint Use Case, Requirements and Architecture Design Team Meeting >> >> Time:*Monday, July 18: 1230-1400* >> >> Purpose: discuss the specific UC/requirements/architecture drafts and >> overlap between the drafts >> >> Location: TBA (I shall get the room details on Monday morning and >> will send them to the mailing-list) >> >> (2) Implementers Meeting >> >> Time:*Wednesday, July 20: 1230-1400* >> >> Purpose: existing and future implementers discussing their experiences >> >> Location: TBA (I shall get the room details on Monday morning and >> will send them to the mailing-list) >> >> Cheers and see you soon in Berlin, >> >> Tobias >> >> >> -----Original Message----- >> From: Dots >> [_mailto:dots-bounces@ietf.org_] On >> Behalf Of Roman D. Danyliw >> Sent: Tuesday, June 21, 2016 19:58 >> To:_dots@ietf.org_ >> Subject: [Dots] Design team meetings during IETF 96 >> >> Hello WG! >> >> In previous face-to-face meetings, collocated design team meetings >> have proven useful. During today's virtual interim meeting, there >> was interest in continuing such sessions in Berlin. To enable >> participants to better plan their week at IETF 96, the design teams >> agreed to convene on the following schedule: >> >> (1) Joint Use Case, Requirements and Architecture Design Team Meeting >> >> Time: Monday, July 18: 1230-1400 >> >> Purpose: discuss the specific UC/requirements/architecture drafts and >> overlap between the drafts >> >> Location: TBD >> >> (2) Implementers Meeting >> >> Time: Wednesday, July 20: 1230-1400 >> >> Purpose: existing and future implementers discussing their experiences >> >> Location: TBD >> >> The locations for both meetings will be announced at a later time. >> >> Roman >> >> _______________________________________________ >> >> Dots mailing list >> >> Dots@ietf.org >> >> https://www.ietf.org/mailman/listinfo/dots >> >> >> >> _______________________________________________ >> Dots mailing list >> Dots@ietf.org >> https://www.ietf.org/mailman/listinfo/dots > > > > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots --------------4A68B90AF99E08CDB30F8567 Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 8bit It would seem it is situated between Bishop and Queen (as you might expect upon further reflection :-)


On 7/18/16 5:39 AM, Robert Moskowitz wrote:

Which side of the 2nd floor is the King room?  It is not listed on the agenda map.


On 07/18/2016 11:01 AM, Tobias Gondrom wrote:
RE: [Dots] Design team meetings during IETF 96 - Design team meeting today at 12:30 in room "King" on 2nd floor

Dear all,

For the design team meeting today

(1) Joint Use Case, Requirements and Architecture Design Team Meeting

Time: Monday, July 18: 1230-1400

Purpose: discuss the specific UC/requirements/architecture drafts and overlap between the drafts

Location: Room “King” (on 2nd floor.)

As I said before the attendance is optional, this serves as a discussion venue for the design teams, but is open to anyone interested.

Best regards, Tobias & Roman

_____________________________________________
From: Tobias Gondrom [mailto:tobias.gondrom@gondrom.org]
Sent: Sunday, July 17, 2016 18:44
To: 'dots@ietf.org' <dots@ietf.org>
Cc: 'Roman D. Danyliw' <rdd@cert.org>
Subject: RE: [Dots] Design team meetings during IETF 96 - reminder
Importance: High

Hello dear DOTS WG team,

Just as a small reminder:

besides our DOTS WG meeting on Tuesday afternoon 16:20-18:20 in room Bellevue,

there will be two design team meetings during this week.

These are open for anyone interested, and for the purpose as explained below:

(1) Joint Use Case, Requirements and Architecture Design Team Meeting

Time: Monday, July 18: 1230-1400

Purpose: discuss the specific UC/requirements/architecture drafts and overlap between the drafts

Location: TBA (I shall get the room details on Monday morning and will send them to the mailing-list)

(2) Implementers Meeting

Time: Wednesday, July 20: 1230-1400

Purpose: existing and future implementers discussing their experiences

Location: TBA (I shall get the room details on Monday morning and will send them to the mailing-list)

Cheers and see you soon in Berlin,

Tobias


-----Original Message-----
From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Roman D. Danyliw
Sent: Tuesday, June 21, 2016 19:58
To: dots@ietf.org
Subject: [Dots] Design team meetings during IETF 96

Hello WG!

In previous face-to-face meetings, collocated design team meetings have proven useful.  During today's virtual interim meeting, there was interest in continuing such sessions in Berlin.  To enable participants to better plan their week at IETF 96, the design teams agreed to convene on the following schedule:

(1) Joint Use Case, Requirements and Architecture Design Team Meeting

Time: Monday, July 18: 1230-1400

Purpose: discuss the specific UC/requirements/architecture drafts and overlap between the drafts

Location: TBD

(2) Implementers Meeting

Time: Wednesday, July 20: 1230-1400

Purpose: existing and future implementers discussing their experiences

Location: TBD

The locations for both meetings will be announced at a later time.

Roman

_______________________________________________

Dots mailing list

Dots@ietf.org

https://www.ietf.org/mailman/listinfo/dots



_______________________________________________
Dots mailing list
Dots@ietf.org
https://www.ietf.org/mailman/listinfo/dots




_______________________________________________
Dots mailing list
Dots@ietf.org
https://www.ietf.org/mailman/listinfo/dots

--------------4A68B90AF99E08CDB30F8567-- From nobody Mon Jul 18 03:22:09 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E9BD12D77A for ; Mon, 18 Jul 2016 03:22:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.278 X-Spam-Level: X-Spam-Status: No, score=-103.278 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-1.287, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, USER_IN_WHITELIST=-100] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); domainkeys=pass (1024-bit key) header.from=tobias.gondrom@gondrom.org header.d=gondrom.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id In6y0NJanBUa for ; Mon, 18 Jul 2016 03:22:04 -0700 (PDT) Received: from gondrom.org (www.gondrom.org [5.35.241.16]) (using TLSv1.1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 49D1412D7EB for ; Mon, 18 Jul 2016 03:22:03 -0700 (PDT) Received: from seraph (dhcp-b0e7.meeting.ietf.org [31.133.176.231]) by gondrom.org (Postfix) with ESMTPSA id A032A634A5; Mon, 18 Jul 2016 12:22:01 +0200 (CEST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=gondrom.org; b=SvIZnUHtM7QGXLM0OoMcYjOz72CpuPXmtTor9JrPmoVUE0zUkOpEfnejIHOnzKentohgQNSP3Yq7mWSl+l4FRccPVAgt2juSIu8VybtRNETP3ySIQVxBFtDJN0Q7/IOPbKKFSxxNN5jHV+Fs2C2TU+LN/qRfjVEfAxaqcik2EhA=; h=From:To:Cc:References:In-Reply-To:Subject:Date:Message-ID:MIME-Version:Content-Type:X-Mailer:Thread-Index:Content-Language; From: "Tobias Gondrom" To: "'Flemming Andreasen'" , "'Robert Moskowitz'" , References: <02c701d1e0d2$fc749db0$f55dd910$@gondrom.org> <8613735c-8d3b-00ef-0494-e650c5088bd4@htt-consult.com> <53ee3f63-7860-a91f-2a8c-5352e3fd8aee@cisco.com> In-Reply-To: <53ee3f63-7860-a91f-2a8c-5352e3fd8aee@cisco.com> Date: Mon, 18 Jul 2016 12:21:53 +0200 Message-ID: <03ee01d1e0de$34b3dfa0$9e1b9ee0$@gondrom.org> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_03EF_01D1E0EE.F83E8460" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQJ1Ucj+SxejlKcw+n536ST2w5SWOQJ8tiw/AHKv2wCev513UA== Content-Language: en-us Archived-At: Cc: "'Roman D. Danyliw'" Subject: Re: [Dots] Design team meetings during IETF 96 - Design team meeting today at 12:30 in room "King" on 2nd floor X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Jul 2016 10:22:08 -0000 This is a multipart message in MIME format. ------=_NextPart_000_03EF_01D1E0EE.F83E8460 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Yes, just come to the 2nd floor and there is in fact a room map and you will find the King room at the end of the corridor, next to the other chess related rooms. Best regards, Tobias From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Flemming Andreasen Sent: Monday, July 18, 2016 12:02 To: Robert Moskowitz ; Tobias Gondrom ; dots@ietf.org Cc: 'Roman D. Danyliw' Subject: Re: [Dots] Design team meetings during IETF 96 - Design team meeting today at 12:30 in room "King" on 2nd floor It would seem it is situated between Bishop and Queen (as you might expect upon further reflection :-) On 7/18/16 5:39 AM, Robert Moskowitz wrote: Which side of the 2nd floor is the King room? It is not listed on the agenda map. On 07/18/2016 11:01 AM, Tobias Gondrom wrote: Dear all, For the design team meeting today (1) Joint Use Case, Requirements and Architecture Design Team Meeting Time: Monday, July 18: 1230-1400 Purpose: discuss the specific UC/requirements/architecture drafts and overlap between the drafts Location: Room "King" (on 2nd floor.) As I said before the attendance is optional, this serves as a discussion venue for the design teams, but is open to anyone interested. Best regards, Tobias & Roman _____________________________________________ From: Tobias Gondrom [mailto:tobias.gondrom@gondrom.org] Sent: Sunday, July 17, 2016 18:44 To: 'dots@ietf.org ' Cc: 'Roman D. Danyliw' Subject: RE: [Dots] Design team meetings during IETF 96 - reminder Importance: High Hello dear DOTS WG team, Just as a small reminder: besides our DOTS WG meeting on Tuesday afternoon 16:20-18:20 in room Bellevue, there will be two design team meetings during this week. These are open for anyone interested, and for the purpose as explained below: (1) Joint Use Case, Requirements and Architecture Design Team Meeting Time: Monday, July 18: 1230-1400 Purpose: discuss the specific UC/requirements/architecture drafts and overlap between the drafts Location: TBA (I shall get the room details on Monday morning and will send them to the mailing-list) (2) Implementers Meeting Time: Wednesday, July 20: 1230-1400 Purpose: existing and future implementers discussing their experiences Location: TBA (I shall get the room details on Monday morning and will send them to the mailing-list) Cheers and see you soon in Berlin, Tobias -----Original Message----- From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Roman D. Danyliw Sent: Tuesday, June 21, 2016 19:58 To: dots@ietf.org Subject: [Dots] Design team meetings during IETF 96 Hello WG! In previous face-to-face meetings, collocated design team meetings have proven useful. During today's virtual interim meeting, there was interest in continuing such sessions in Berlin. To enable participants to better plan their week at IETF 96, the design teams agreed to convene on the following schedule: (1) Joint Use Case, Requirements and Architecture Design Team Meeting Time: Monday, July 18: 1230-1400 Purpose: discuss the specific UC/requirements/architecture drafts and overlap between the drafts Location: TBD (2) Implementers Meeting Time: Wednesday, July 20: 1230-1400 Purpose: existing and future implementers discussing their experiences Location: TBD The locations for both meetings will be announced at a later time. Roman _______________________________________________ Dots mailing list Dots@ietf.org https://www.ietf.org/mailman/listinfo/dots _______________________________________________ Dots mailing list Dots@ietf.org https://www.ietf.org/mailman/listinfo/dots _______________________________________________ Dots mailing list Dots@ietf.org https://www.ietf.org/mailman/listinfo/dots ------=_NextPart_000_03EF_01D1E0EE.F83E8460 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable RE: [Dots] Design team meetings during IETF 96 = - Design team meeting today at 12:30 in room "King" on 2nd = floor

Yes, just come to the 2nd floor and there is in fact a = room map and you will find the King room at the end of the corridor, = next to the other chess related rooms…

Best regards, Tobias

 

 

From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Flemming = Andreasen
Sent: Monday, July 18, 2016 12:02
To: = Robert Moskowitz <rgm-sec@htt-consult.com>; Tobias Gondrom = <tobias.gondrom@gondrom.org>; dots@ietf.org
Cc: 'Roman = D. Danyliw' <rdd@cert.org>
Subject: Re: [Dots] Design = team meetings during IETF 96 - Design team meeting today at 12:30 in = room "King" on 2nd floor

 

It would seem it is situated between = Bishop and Queen (as you might expect upon further reflection = :-)

On 7/18/16 5:39 AM, = Robert Moskowitz wrote:

Which side of the 2nd = floor is the King room?  It is not listed on the agenda = map.

 

On 07/18/2016 11:01 AM, Tobias Gondrom = wrote:

Dear all, =

For the design team meeting = today

(1) Joint Use Case, = Requirements and Architecture Design Team = Meeting

Time: Monday, July 18: = 1230-1400

Purpose: discuss the specific = UC/requirements/architecture drafts and overlap between the = drafts

Location: = Room = “King” (on 2nd floor.) =

As I said before the = attendance is optional, this serves as a discussion venue for the design = teams, but is open to anyone interested.

Best regards, Tobias & = Roman

______________________________= _______________
From: Tobias Gondrom [mailto:tobias.gondrom@gondrom.= org]
Sent: Sunday, July 17, 2016 18:44
To: 'dots@ietf.org' <dots@ietf.org>
Cc: = 'Roman D. Danyliw' <rdd@cert.org>
Subject: = RE: [Dots] Design team meetings during IETF 96 - = reminder
Importance: High

Hello dear DOTS WG team, =

Just as a small reminder: =

besides = our DOTS WG = meeting on Tuesday afternoon 16:20-18:20 in room = Bellevue, =

there will be = two design team = meetings = during this week.

These are open for anyone = interested, and for the purpose as explained below: =

(1) Joint Use Case, = Requirements and Architecture Design Team = Meeting

Time: Monday, July 18: = 1230-1400

Purpose: discuss the specific = UC/requirements/architecture drafts and overlap between the = drafts

Location: TBA (I shall get = the room details on Monday morning and will send them to the = mailing-list)

(2) Implementers = Meeting

Time: Wednesday, July 20: = 1230-1400

Purpose: existing and future = implementers discussing their experiences

Location: TBA (I shall get = the room details on Monday morning and will send them to the = mailing-list)

Cheers and see you soon in = Berlin,

Tobias

 

-----Original = Message-----
From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of = Roman D. Danyliw
Sent: Tuesday, June 21, 2016 19:58
To: = dots@ietf.org
Subject: [Dots] Design team = meetings during IETF 96

Hello = WG!

In previous face-to-face = meetings, collocated design team meetings have proven useful.  = During today's virtual interim meeting, there was interest in continuing = such sessions in Berlin.  To enable participants to better plan = their week at IETF 96, the design teams agreed to convene on the = following schedule:

(1) Joint Use Case, = Requirements and Architecture Design Team = Meeting

Time: Monday, July 18: = 1230-1400

Purpose: discuss the specific = UC/requirements/architecture drafts and overlap between the = drafts

Location: = TBD

(2) Implementers = Meeting

Time: Wednesday, July 20: = 1230-1400

Purpose: existing and future = implementers discussing their experiences

Location: = TBD

The locations for both = meetings will be announced at a later = time.

Roman

= ______________________________= _________________

Dots mailing = list

Dots@ietf.org<= /o:p>

https://www.ietf.org/mailman/l= istinfo/dots




_______________________=
________________________
Dots mailing =
list
Dots@ietf.org
https://www.ietf.org/=
mailman/listinfo/dots





___________________=
____________________________
Dots mailing =
list
Dots@ietf.org
https://www.ietf.org/=
mailman/listinfo/dots

 

------=_NextPart_000_03EF_01D1E0EE.F83E8460-- From nobody Mon Jul 18 05:16:44 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B19212D996 for ; Mon, 18 Jul 2016 05:16:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.587 X-Spam-Level: X-Spam-Status: No, score=-2.587 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.001, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FKNLiroa5z_L for ; Mon, 18 Jul 2016 05:16:38 -0700 (PDT) Received: from mail-wm0-x230.google.com (mail-wm0-x230.google.com [IPv6:2a00:1450:400c:c09::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4CF3412D97B for ; Mon, 18 Jul 2016 05:15:38 -0700 (PDT) Received: by mail-wm0-x230.google.com with SMTP id f126so100954965wma.1 for ; Mon, 18 Jul 2016 05:15:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=b/vpp+K7TtgQTbkQ9T6uoRQXbOPpEd7ma6+Lq0HOHbA=; b=rDvaad6WLGsGEMbLxZW5r2VepWsE/5idZMm74vCkaa5mRV+/JlnmeArBaldGMEVduI VQH6WQy+K767j2KHDwp/bJOkHXHROzZw3mY54Q7CbOZYYtByCaCwkepBhDNNsoIITDTP 42BgA1/y7jna80nYv4KRvLRjSkTq/ZQKsgH0IbVIBAeDybxeX/Kj82pWHsFKWk3HgS3l gcW7X8142Y4PuGojaCzaclW36P3WsEB/8g/ibscxOYNZ8U2//DEpgcuRA9kAcp8vP3zv SGZR31iee6oewg2nOLu3PPSZSttgibPYiBYRah3/tpi5xnKLN+hiluKcuomywiDV0/aU L5BQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=b/vpp+K7TtgQTbkQ9T6uoRQXbOPpEd7ma6+Lq0HOHbA=; b=Qpd/8maiGtLSNE66Srue64WoocUXkmBGVvppEyKHzFLFn0O+1Ypfrf0irTj4NJ9gNk uC3qLKHOY4nwLbepiNJnc4o0IhsOF7mBfNn4wKOjq7csk/o+xf3mtGhehIxD4ngjDVha lrLeaORuY9da/SPvCsSjanWNwX7VN/u48MgNwNYnUHxqjdQBhploKmXjc0MdLJIUv7/E 66CuMID+bu+Oz5kNdxrgrqEmuolV/tO2opu1nGC6DEeJImujFUalbHO5fQrGYmobNY0z mkhcpwf+N88KoEjUCThJwLpuFd3Y/ryGBJLrgAWWuQ8U+7bMhTiNamB/33UchLfcBoab 5cxw== X-Gm-Message-State: ALyK8tKd8+61hGxcddxq9GvcDstFqAPBfFXsmnJWHNl5SE5HZXXkjk/Dp+9MiI4Jf9yziFsTNZAF2W6ynNUIIg== X-Received: by 10.28.45.138 with SMTP id t132mr4895425wmt.70.1468844136881; Mon, 18 Jul 2016 05:15:36 -0700 (PDT) MIME-Version: 1.0 Sender: mglt.ietf@gmail.com Received: by 10.194.143.101 with HTTP; Mon, 18 Jul 2016 05:15:36 -0700 (PDT) In-Reply-To: <03ee01d1e0de$34b3dfa0$9e1b9ee0$@gondrom.org> References: <02c701d1e0d2$fc749db0$f55dd910$@gondrom.org> <8613735c-8d3b-00ef-0494-e650c5088bd4@htt-consult.com> <53ee3f63-7860-a91f-2a8c-5352e3fd8aee@cisco.com> <03ee01d1e0de$34b3dfa0$9e1b9ee0$@gondrom.org> From: Daniel Migault Date: Mon, 18 Jul 2016 14:15:36 +0200 X-Google-Sender-Auth: 6ieHimPWTie9iF1RI11xj9eK7bA Message-ID: To: Tobias Gondrom Content-Type: multipart/alternative; boundary=001a114241c20265270537e7ed05 Archived-At: Cc: Flemming Andreasen , "Roman D. Danyliw" , dots@ietf.org, Robert Moskowitz Subject: Re: [Dots] Design team meetings during IETF 96 - Design team meeting today at 12:30 in room "King" on 2nd floor X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Jul 2016 12:16:42 -0000 --001a114241c20265270537e7ed05 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable I apology for not being able to make it, we had discussion after the 6lo. On Mon, Jul 18, 2016 at 12:21 PM, Tobias Gondrom wrote: > Yes, just come to the 2nd floor and there is in fact a room map and you > will find the King room at the end of the corridor, next to the other che= ss > related rooms=E2=80=A6 > > Best regards, Tobias > > > > > > *From:* Dots [mailto:dots-bounces@ietf.org] *On Behalf Of *Flemming > Andreasen > *Sent:* Monday, July 18, 2016 12:02 > *To:* Robert Moskowitz ; Tobias Gondrom < > tobias.gondrom@gondrom.org>; dots@ietf.org > *Cc:* 'Roman D. Danyliw' > *Subject:* Re: [Dots] Design team meetings during IETF 96 - Design team > meeting today at 12:30 in room "King" on 2nd floor > > > > It would seem it is situated between Bishop and Queen (as you might expec= t > upon further reflection :-) > > On 7/18/16 5:39 AM, Robert Moskowitz wrote: > > Which side of the 2nd floor is the King room? It is not listed on the > agenda map. > > > > On 07/18/2016 11:01 AM, Tobias Gondrom wrote: > > Dear all, > > For the design team meeting today > > (1) Joint Use Case, Requirements and Architecture Design Team Meeting > > Time: *Monday, July 18: 1230-1400* > > Purpose: discuss the specific UC/requirements/architecture drafts and > overlap between the drafts > > Location: *Room =E2=80=9CKing=E2=80=9D (on 2nd floor.)* > > As I said before the attendance is optional, this serves as a discussion > venue for the design teams, but is open to anyone interested. > > Best regards, Tobias & Roman > > _____________________________________________ > *From:* Tobias Gondrom [mailto:tobias.gondrom@gondrom.org > ] > *Sent:* Sunday, July 17, 2016 18:44 > *To:* 'dots@ietf.org' > *Cc:* 'Roman D. Danyliw' > *Subject:* RE: [Dots] Design team meetings during IETF 96 - reminder > *Importance:* High > > Hello dear DOTS WG team, > > Just as a small reminder: > > besides *our DOTS WG meeting on Tuesday afternoon 16:20-18:20 in room > Bellevue*, > > there will be *two design team meetings* during this week. > > These are open for anyone interested, and for the purpose as explained > below: > > (1) Joint Use Case, Requirements and Architecture Design Team Meeting > > Time: *Monday, July 18: 1230-1400* > > Purpose: discuss the specific UC/requirements/architecture drafts and > overlap between the drafts > > Location: TBA (I shall get the room details on Monday morning and will > send them to the mailing-list) > > (2) Implementers Meeting > > Time: *Wednesday, July 20: 1230-1400* > > Purpose: existing and future implementers discussing their experiences > > Location: TBA (I shall get the room details on Monday morning and will > send them to the mailing-list) > > Cheers and see you soon in Berlin, > > Tobias > > > > -----Original Message----- > From: Dots [*mailto:dots-bounces@ietf.org *] On > Behalf Of Roman D. Danyliw > Sent: Tuesday, June 21, 2016 19:58 > To: *dots@ietf.org * > Subject: [Dots] Design team meetings during IETF 96 > > Hello WG! > > In previous face-to-face meetings, collocated design team meetings have > proven useful. During today's virtual interim meeting, there was interes= t > in continuing such sessions in Berlin. To enable participants to better > plan their week at IETF 96, the design teams agreed to convene on the > following schedule: > > (1) Joint Use Case, Requirements and Architecture Design Team Meeting > > Time: Monday, July 18: 1230-1400 > > Purpose: discuss the specific UC/requirements/architecture drafts and > overlap between the drafts > > Location: TBD > > (2) Implementers Meeting > > Time: Wednesday, July 20: 1230-1400 > > Purpose: existing and future implementers discussing their experiences > > Location: TBD > > The locations for both meetings will be announced at a later time. > > Roman > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots > > > > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots > > > > > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots > > > > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots > > --001a114241c20265270537e7ed05 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
I apology for not being able to make it, we had discussion= after the 6lo.

On Mon, Jul 18, 2016 at 12:21 PM, Tobias Gondrom <tobias= .gondrom@gondrom.org> wrote:

Yes, just come to the 2nd floor and there is in fact a room map and you will find the King room a= t the end of the corridor, next to the other chess related rooms=E2=80=A6

Best regard= s, Tobias

= =C2=A0

=C2=A0=

From: Dots [mailto:dots-bounces@ietf.org] On Behalf= Of Flemming Andreasen
Sent: Monday, July 18, 2016 12:02
<= b>To: Robert Moskowitz <rgm-sec@htt-consult.com>; Tobias Gondrom <tobias.gondrom@go= ndrom.org>; dots@= ietf.org
Cc: 'Roman D. Danyliw' <= rdd@cert.org>
<= /span>Subject: Re: [Dots] Design team meetings during IETF 96 - Desi= gn team meeting today at 12:30 in room "King" on 2nd floor=

=C2=A0

It would seem it is situated between Bishop and Queen (as you might exp= ect upon further reflection :-)

On 7/18/16 5:39 AM, Robert Moskowitz wrote:

Which side = of the 2nd floor is the King room?=C2=A0 It is not listed on the agenda map= .

=C2=A0

On 07/18/2016 11:01 AM, Tobias Gondrom wrote:<= /u>

= Dear all,

For the design team meeting today

(1) Joint Use Case, Requ= irements and Architecture Design Team Meeting

Time: Monday, Jul= y 18: 1230-1400

Purpose: discuss the specific UC/requirement= s/architecture drafts and overlap between the drafts

Location: = Room =E2=80=9CKing=E2=80=9D (on 2nd floor.)

=

As I said bef= ore the attendance is optional, this serves as a discussion venue for the d= esign teams, but is open to anyone interested.

= Best regards, To= bias & Roman

_______= ______________________________________
From: Tobias Gondrom [mailto:tobias.g= ondrom@gondrom.org]
Sent: Sunday, July 17, 2016 18:44
T= o: 'dots@ietf.or= g' <dots@ietf= .org>
Cc: 'Roman D. Danyliw' <rdd@cert.org>
Subject: RE= : [Dots] Design team meetings during IETF 96 - reminder
Importance: High

Hello dear DOTS WG team,

Just as a small rem= inder:

besides our DOTS WG meeting on Tuesday afternoon 16:20-= 18:20 in room Bellevue,

there will be two design team meetings during = this week.

These are open for anyone interested, and for the pu= rpose as explained below:

(1) Joint Use Case, Requirements and = Architecture Design Team Meeting

Time: Monday, July 18: 1230-14= 00

Purpose: discuss the specific UC/requirements/architectur= e drafts and overlap between the drafts

Location: TBA (I shall g= et the room details on Monday morning and will send them to the mailing-lis= t)

(2) Implementers Meeting

Time: Wednesday, July 20= : 1230-1400

Purpose: existing and future implementers discus= sing their experiences

Location: TBA (I shall get the room detai= ls on Monday morning and will send them to the mailing-list)<= u>

Che= ers and see you soon in Berlin,

Tobias

=

=C2=A0

-----Original Message-----
From: Dots = [mailto:= dots-bounces@ietf.org] On Behalf Of Roman D. Danyliw
Sent: Tuesday, June = 21, 2016 19:58
To: dots@ietf.org
Subject: [Dots] Design team meetings during IETF 96

Hello WG!

In previous face-to-face meetings, collocate= d design team meetings have proven useful.=C2=A0 During today's virtual= interim meeting, there was interest in continuing such sessions in Berlin.= =C2=A0 To enable participants to better plan their week at IETF 96, the des= ign teams agreed to convene on the following schedule:=

(1) Joint= Use Case, Requirements and Architecture Design Team Meeting<= u>

Tim= e: Monday, July 18: 1230-1400

Purpose: discuss the specific UC/r= equirements/architecture drafts and overlap between the drafts

L= ocation: TBD

(2) Implementers Meeting

Time: Wednesday= , July 20: 1230-1400

Purpose: existing and future implementers d= iscussing their experiences

Location: TBD

The locatio= ns for both meetings will be announced at a later time.

Roman

_______________________________________________

Dots ma= iling list

Do= ts@ietf.org

https://www.ietf.org/mailman/listinfo/dots<= /a>




<= pre>_______________________________________________Dots mailing list
Dots@ietf.org
https://www.ietf=
.org/mailman/listinfo/dots





_________________________=
______________________
Dots mailing list<=
/u>
Dots@ietf.=
org
https://www.ietf.org/mailman/listinfo/dots

=C2=A0


_________________________________________= ______
Dots mailing list
Dots@ietf.org
https://www.ietf.org/mailman/listinfo/dots


--001a114241c20265270537e7ed05-- From nobody Mon Jul 18 06:04:39 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9D2A712DA2A for ; Mon, 18 Jul 2016 06:04:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5XcktYKMeqop for ; Mon, 18 Jul 2016 06:04:30 -0700 (PDT) Received: from shetland.sei.cmu.edu (shetland.sei.cmu.edu [192.58.107.44]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0CAB312DA28 for ; Mon, 18 Jul 2016 06:03:06 -0700 (PDT) Received: from timber.sei.cmu.edu (timber.sei.cmu.edu [10.64.21.23]) by shetland.sei.cmu.edu (8.14.4/8.14.4/1543) with ESMTP id u6ID36oQ025248 for ; Mon, 18 Jul 2016 09:03:06 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cert.org; s=jthatj15xw2j; t=1468846986; bh=XXm8Zkt1FIB+UI+xu46ktoWnmPxGrrHs17/Vy1RTI+c=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version:Sender:Reply-To:Cc: In-Reply-To:References; b=X8gm0vtJw97h+CkIKKa2XL+EHPKVyvtpVC/iRdFTQguaVEAyyxNC+CQBPNyjGUrFk jWah9whF8GZTaU6R3WJqSO4JszN+/uoM2tWQTBNkaAiiE6F3l0F+jbjpGBaxrzExbJ 9T6rUh53bxcbwCaCC3NvEo1LZof3GrnpB3yEkm/0= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by timber.sei.cmu.edu (8.14.4/8.14.4/1543) with ESMTP id u6ID30N3003547 for ; Mon, 18 Jul 2016 09:03:01 -0400 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.03.0279.002; Mon, 18 Jul 2016 09:03:00 -0400 From: "Roman D. Danyliw" To: "dots@ietf.org" Thread-Topic: Feedback on draft-reddy-dots-transport-05 Thread-Index: AdHg2ONm9kzKOwTrQzS76ljpZPMKMA== Date: Mon, 18 Jul 2016 13:03:00 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0104E1A3A3@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Dots] Feedback on draft-reddy-dots-transport-05 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Jul 2016 13:04:37 -0000 Hello! WG chair hat off ... In reading through draft-reddy-dots-transport-05 I have the following feedb= ack: (1) I'd recommend including language somewhere in the draft describing whic= h set of use cases in the WG UC draft are satisfied. (2) Section 1, I'd recommend citing the reference to NETCONF. (3) Section 3, Solution Overview, enumerated list under paragraph two, I wo= rry some of this text overlaps with the UC and architecture documents. As = it is a subset of what these other documents state, a reader might be confu= sed on how many use cases this protocol solves per my comment #1 above. (4) Section 4, third sentence. I'd recommend s/The DOTS client must know a= DOTS server's domain name/ The DOTS client MUST know a DOTS server's domai= n name/. (5) Section 5.1, second from last paragraph. It's nit. s/JSON [RFC7159] p= ayloads is/JSON [RFC7159] payloads are/ (6) Section 5.2.1, policy-id, In defining this policy-id, is that the same = as a unique request id for each mitigation? (7) policy-id, Policy-id is defined as a "number". Should it be "integer"?= Using a floating point number would seem unintuitive to use here. (8) Section 5.2.1, target-ip, How should multiple IPs be specified? Could = a prefix be used? Figure 6 helps, but IMO it should be formally specified. (9) Section 5.2.1, target-port, How should multiple ports be specified? Fig= ure 6 helps, but IMO it should be formally specified. (10) Section 5.2.1, A reference to an "Empty Acknowledgement" is made. Wha= t is the format of such a message? (11) Figure 9, There is a typo in the policy-data example, s/target-prtooco= l/target-protocol/. (12) Section 7, I recommend citing the relevant drafts collectively referen= ced as "(D)TLS RFCs". (13) Section 7, bullet #2, I recommend s/the DOTS client may want to probe/= the DOTS client MAY probe/. (14) Section 9, IANA Considerations. I recommend creating IANA registries = to maintain the enumerated values of fields like 'status' and 'attack-statu= s'. This would allow future extensibility. Roman From nobody Mon Jul 18 06:04:51 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A5A212DA2A for ; Mon, 18 Jul 2016 06:04:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OuCe2xRBcDcY for ; Mon, 18 Jul 2016 06:04:31 -0700 (PDT) Received: from plainfield.sei.cmu.edu (plainfield.sei.cmu.edu [192.58.107.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0CCF812DA41 for ; Mon, 18 Jul 2016 06:03:06 -0700 (PDT) Received: from timber.sei.cmu.edu (timber.sei.cmu.edu [10.64.21.23]) by plainfield.sei.cmu.edu (8.14.4/8.14.4/1543) with ESMTP id u6ID36xp013048 for ; Mon, 18 Jul 2016 09:03:06 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cert.org; s=jthatj15xw2j; t=1468846986; bh=LGRccOhv8MGSAhkbpN/pYJjsiPQjUyrN+6ONjU/LX2A=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version:Sender:Reply-To:Cc: In-Reply-To:References; b=DvxNxTSlS0YmRlwXN0BP1HUUeUHHV6lRuesC0400+178IbBdSAlDoZD/aL79h/CvL tPBoubVdHB3RSa/kpFTHNi29fzSyqdn5ybSAoIO2G5Tr/lGRLQy7vDGjP9Dcn9JmeL ShlP4tzK4L6mAYkAxgFmEZ2tdJ4UPdF+RG9RZ7Ck= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by timber.sei.cmu.edu (8.14.4/8.14.4/1543) with ESMTP id u6ID31Ib003551 for ; Mon, 18 Jul 2016 09:03:01 -0400 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.03.0279.002; Mon, 18 Jul 2016 09:03:01 -0400 From: "Roman D. Danyliw" To: "dots@ietf.org" Thread-Topic: Feedback on draft-nishizuka-dots-inter-domain-mechanism-01 Thread-Index: AdHg3G2I7+sIKn4uRmu+1UP1dFri1g== Date: Mon, 18 Jul 2016 13:03:01 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0104E1A3AD@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Dots] Feedback on draft-nishizuka-dots-inter-domain-mechanism-01 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Jul 2016 13:04:38 -0000 Hello WG! WG chair hat off ... In reading through draft-nishizuka-dots-inter-domain-mechanism-01 I have th= e following feedback: (1) When an updated use case document is released, I'd recommend removing S= ection 3 and 4 and focus this document on describing only the protocol (2) I recommend including language somewhere in the draft describing which = set of use cases in the WG UC draft are satisfied. Currently Section 3-4 d= escribe candidate use cases, but what about the other uses cases currently = in the WG UC document? (3) Section 5, I recommend citing the references to HTTPS and TLS (4) Section 5, Provisioning stage, "A DOTS client should register itself to= the DOTS server, as well as enable capacity building in advance." In the c= ontext of DOTS, what protocol support is expected to "enable capacity build= ing in advance"? (5) Section 5.1.1, customer_name, How should this name be generated? (6) Section 5.1.1, ip_version, To what traffic does this version number ref= er? (7) Section 5.1.1, BGP_route, countermeasures, tunnel_information, next_hop= , What is the format of this field? (8) Section 5.1.1., SIP_URI and E164_number, I would recommend citing the r= eference. (9) Section 5.1.1, protected_ports, To clarify, is this the subset of ports= possible to enumerate in future mitigation requests? (10) Section 5.1.1, whitelist and blacklist, I would recommend being explic= it on what the DOTS server is supposed to do with this list. (11) Section 5.1.1, How is a registration request rejection signaled?=20 (12) When is the Heartbeat message sent (13) I recommend adding the version field used in the messages in 5.2.1 to = the provisioning messages in 5.1.1. (14) Section 5.2.1, DST_IP is used in the definition of multiple fields but= is not defined. Is this field the same as dst_ip from packet_header? (15) Section 5.2.1, max_bandwidth, What is meant by the "max bandwidth the = DOTS client can undertake"? Could you please clarify the semantics of this= field. (16) Section 5.2.1, packet_header, This field is defined a "IP packet heade= r contents used for a report". What report is this definition referencing? (17) Section 5.2.1, current_throughputs, What does it mean to have multiple= CSV separated values in this field? (18) Section 5.2.1, health, Is there a standardized way to calculate this v= alue? Is it pre-negotiated, out-of-band, between client/server? (19) Section 5.2.1, payload, Should this be in the signal channel or the da= ta channel? (20) Section 5.2.1, hash, Is this hash calculated on the complete payload o= r the truncated value per the offset field? Roman From nobody Tue Jul 19 08:47:13 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A96B12D846 for ; Tue, 19 Jul 2016 08:47:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.618 X-Spam-Level: X-Spam-Status: No, score=-2.618 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dhFchht5u4lW for ; Tue, 19 Jul 2016 08:47:10 -0700 (PDT) Received: from relais-inet.francetelecom.com (relais-ias91.francetelecom.com [193.251.215.91]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6F64212DADC for ; Tue, 19 Jul 2016 08:33:55 -0700 (PDT) Received: from omfedm07.si.francetelecom.fr (unknown [xx.xx.xx.3]) by omfedm09.si.francetelecom.fr (ESMTP service) with ESMTP id 4E8E42DC0C0 for ; Tue, 19 Jul 2016 17:33:53 +0200 (CEST) Received: from Exchangemail-eme2.itn.ftgroup (unknown [10.114.31.69]) by omfedm07.si.francetelecom.fr (ESMTP service) with ESMTP id 18FC94C06F for ; Tue, 19 Jul 2016 17:33:53 +0200 (CEST) Received: from OPEXCLILMA3.corporate.adroot.infra.ftgroup ([fe80::60a9:abc3:86e6:2541]) by OPEXCLILMA2.corporate.adroot.infra.ftgroup ([fe80::bc1c:ad2f:eda3:8c3d%18]) with mapi id 14.03.0301.000; Tue, 19 Jul 2016 17:33:53 +0200 From: To: "dots@ietf.org" Thread-Topic: draft-reddy-dots-transport & use cases Thread-Index: AdHh0vL5vkF6JbSzTtSalD0+5M/kOA== Date: Tue, 19 Jul 2016 15:33:52 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B933008DE91C6@OPEXCLILMA3.corporate.adroot.infra.ftgroup> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.168.234.5] Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B933008DE91C6OPEXCLILMA3corp_" MIME-Version: 1.0 X-PMX-Version: 6.2.1.2478543, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2016.6.17.114517 Archived-At: Subject: [Dots] draft-reddy-dots-transport & use cases X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jul 2016 15:47:12 -0000 --_000_787AE7BB302AE849A7480A190F8B933008DE91C6OPEXCLILMA3corp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Dear all, To the question raised by Roman in the dots meeting, slide 9 of https://www= .ietf.org/proceedings/95/slides/slides-95-dots-9.pdf identifies the use cas= es that are covered by draft-reddy-dots-transport. Cheers, Med --_000_787AE7BB302AE849A7480A190F8B933008DE91C6OPEXCLILMA3corp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Dear all,

 

To the question raised by Roman in the dots= meeting, slide 9 of https://www.ietf.org/proceedings/95/slides/slides-95-dots-9.pdf identi= fies the use cases that are covered by draft-reddy-dots-transport.

 

Cheers,

Med

--_000_787AE7BB302AE849A7480A190F8B933008DE91C6OPEXCLILMA3corp_-- From nobody Wed Jul 20 00:33:59 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2230D12D0DE for ; Wed, 20 Jul 2016 00:33:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.508 X-Spam-Level: X-Spam-Status: No, score=-5.508 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.287, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QdmaWL1YC68V for ; Wed, 20 Jul 2016 00:33:56 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 66CAB12B02A for ; Wed, 20 Jul 2016 00:33:55 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml701-cah.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CSW68669; Wed, 20 Jul 2016 07:33:53 +0000 (GMT) Received: from SZXEMA416-HUB.china.huawei.com (10.82.72.35) by lhreml701-cah.china.huawei.com (10.201.5.93) with Microsoft SMTP Server (TLS) id 14.3.235.1; Wed, 20 Jul 2016 08:33:53 +0100 Received: from SZXEMA502-MBS.china.huawei.com ([169.254.4.6]) by SZXEMA416-HUB.china.huawei.com ([10.82.72.35]) with mapi id 14.03.0235.001; Wed, 20 Jul 2016 15:33:46 +0800 From: "Xialiang (Frank)" To: "Roman D. Danyliw" Thread-Topic: Feedback on draft-nishizuka-dots-inter-domain-mechanism-01 Thread-Index: AdHg3G2I7+sIKn4uRmu+1UP1dFri1gBdVsoQ Date: Wed, 20 Jul 2016 07:33:45 +0000 Message-ID: References: <359EC4B99E040048A7131E0F4E113AFC0104E1A3AD@marathon> In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC0104E1A3AD@marathon> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.200.217.219] Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A090204.578F2962.0008, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=169.254.4.6, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: 65058a813727c959aa284fe15d2a856b Archived-At: Cc: "dots@ietf.org" Subject: Re: [Dots] Feedback on draft-nishizuka-dots-inter-domain-mechanism-01 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jul 2016 07:33:58 -0000 SGkgUm9tYW4sDQpUaGFua3MgZm9yIHRoZSBkZXRhaWxlZCBjb21tZW50cy4gDQpNeSByZXNwb25z ZSBpcyBpbmxpbmU6DQoNCkIuUi4NCkZyYW5rDQoNCi0tLS0t08q8/tStvP4tLS0tLQ0Kt6K8/sjL OiBEb3RzIFttYWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnXSC0+rHtIFJvbWFuIEQuIERhbnls aXcNCreiy83KsbzkOiAyMDE2xOo31MIxOMjVIDIxOjAzDQrK1bz+yMs6IGRvdHNAaWV0Zi5vcmcN Ctb3zOI6IFtEb3RzXSBGZWVkYmFjayBvbiBkcmFmdC1uaXNoaXp1a2EtZG90cy1pbnRlci1kb21h aW4tbWVjaGFuaXNtLTAxDQoNCkhlbGxvIFdHIQ0KDQpXRyBjaGFpciBoYXQgb2ZmIC4uLg0KDQpJ biByZWFkaW5nIHRocm91Z2ggZHJhZnQtbmlzaGl6dWthLWRvdHMtaW50ZXItZG9tYWluLW1lY2hh bmlzbS0wMSBJIGhhdmUgdGhlIGZvbGxvd2luZyBmZWVkYmFjazoNCg0KKDEpIFdoZW4gYW4gdXBk YXRlZCB1c2UgY2FzZSBkb2N1bWVudCBpcyByZWxlYXNlZCwgSSdkIHJlY29tbWVuZCByZW1vdmlu ZyBTZWN0aW9uIDMgYW5kIDQgYW5kIGZvY3VzIHRoaXMgZG9jdW1lbnQgb24gZGVzY3JpYmluZyBv bmx5IHRoZSBwcm90b2NvbA0KW0ZyYW5rXTogZ29vZCBwb2ludCwgdGhhdCdzIHdoYXQgd2UgYXJl IGNvbnNpZGVyaW5nIG5vdy4gVGhleSBzaG91bGQgYmUgaW4gdXNlIGNhc2VzIG9yIGFyY2hpdGVj dHVyZSBkcmFmdHMuDQoNCigyKSBJIHJlY29tbWVuZCBpbmNsdWRpbmcgbGFuZ3VhZ2Ugc29tZXdo ZXJlIGluIHRoZSBkcmFmdCBkZXNjcmliaW5nIHdoaWNoIHNldCBvZiB1c2UgY2FzZXMgaW4gdGhl IFdHIFVDIGRyYWZ0IGFyZSBzYXRpc2ZpZWQuICBDdXJyZW50bHkgU2VjdGlvbiAzLTQgZGVzY3Jp YmUgY2FuZGlkYXRlIHVzZSBjYXNlcywgYnV0IHdoYXQgYWJvdXQgdGhlIG90aGVyIHVzZXMgY2Fz ZXMgY3VycmVudGx5IGluIHRoZSBXRyBVQyBkb2N1bWVudD8NCltGcmFua106IG9rLCB3ZSB3aWxs Lg0KDQooMykgU2VjdGlvbiA1LCBJIHJlY29tbWVuZCBjaXRpbmcgdGhlIHJlZmVyZW5jZXMgdG8g SFRUUFMgYW5kIFRMUw0KW0ZyYW5rXTogd2lsbCBkby4NCg0KKDQpIFNlY3Rpb24gNSwgUHJvdmlz aW9uaW5nIHN0YWdlLCAiQSBET1RTIGNsaWVudCBzaG91bGQgcmVnaXN0ZXIgaXRzZWxmIHRvIHRo ZSBET1RTIHNlcnZlciwgYXMgd2VsbCBhcyBlbmFibGUgY2FwYWNpdHkgYnVpbGRpbmcgaW4gYWR2 YW5jZS4iIEluIHRoZSBjb250ZXh0IG9mIERPVFMsIHdoYXQgcHJvdG9jb2wgc3VwcG9ydCBpcyBl eHBlY3RlZCB0byAiZW5hYmxlIGNhcGFjaXR5IGJ1aWxkaW5nIGluIGFkdmFuY2UiPw0KW0ZyYW5r XTogSW4gc2VjdGlvbiA1LjEuMiwgd2UgaGF2ZSB0aGUgZGV0YWlsczogIlRoZSBjdXN0b21lcnMg KERPVFMgY2xpZW50KSByZWdpc3RlcnMgdG8gdGhlIG9wZXJhdG9yIGNvbnRyb2xsZXIgd2l0aCB0 aGUgY29uZmlndXJhdGlvbiBhbmQgY2FwYWJpbGl0eSBidWlsZGluZyBpbmNsdWRpbmcgcHJvdGVj dGlvbiBtZXRob2RzLCBwcm9jZXNzIGNhcGFjaXR5LCBwcm90ZWN0ZWQgem9uZSwgc2VjdXJpdHkg cHJvZmlsZSwgd2hpdGUvYmxhY2stbGlzdCwgZXRjIi4gRG9lcyBpdCBtYWtlIHNlbnNlPw0KDQoo NSkgU2VjdGlvbiA1LjEuMSwgY3VzdG9tZXJfbmFtZSwgSG93IHNob3VsZCB0aGlzIG5hbWUgYmUg Z2VuZXJhdGVkPw0KW0ZyYW5rXTogaXQncyBnZW5lcmF0ZWQgYnkgRE9UUyBjbGllbnQgaXRzZWxm LCBidXQgdGhlIGN1c3RvbV9pZCBpcyB0aGUgdW5pcXVlIHZhbHVlIGdlbmVyYXRlZCBieSB0aGUg RE9UUyBzZXJ2ZXINCg0KKDYpIFNlY3Rpb24gNS4xLjEsIGlwX3ZlcnNpb24sIFRvIHdoYXQgdHJh ZmZpYyBkb2VzIHRoaXMgdmVyc2lvbiBudW1iZXIgcmVmZXI/DQpbRnJhbmtdOiB0aGUgdmVyc2lv biBvZiB0aGUgRE9UUyBjbGllbnQncyBhbGwgdHJhZmZpYw0KDQooNykgU2VjdGlvbiA1LjEuMSwg QkdQX3JvdXRlLCBjb3VudGVybWVhc3VyZXMsIHR1bm5lbF9pbmZvcm1hdGlvbiwgbmV4dF9ob3As IFdoYXQgaXMgdGhlIGZvcm1hdCBvZiB0aGlzIGZpZWxkPw0KW0ZyYW5rXTogd2Ugd2lsbCBkZXNj cmliZSB0aGVtIHdpdGggZGV0YWlscyBpbiBuZXh0IHZlcnNpb24sIHRoYW5rcyBmb3IgcmVtaW5k cy4NCg0KKDgpIFNlY3Rpb24gNS4xLjEuLCBTSVBfVVJJIGFuZCBFMTY0X251bWJlciwgSSB3b3Vs ZCByZWNvbW1lbmQgY2l0aW5nIHRoZSByZWZlcmVuY2UuDQpbRnJhbmtdOiBvay4NCg0KKDkpIFNl Y3Rpb24gNS4xLjEsIHByb3RlY3RlZF9wb3J0cywgVG8gY2xhcmlmeSwgaXMgdGhpcyB0aGUgc3Vi c2V0IG9mIHBvcnRzIHBvc3NpYmxlIHRvIGVudW1lcmF0ZSBpbiBmdXR1cmUgbWl0aWdhdGlvbiBy ZXF1ZXN0cz8NCltGcmFua106IFllcywgSSB0aGluayBzby4gSSB0ZW5kIHRvIHRoaW5rIHRoZXJl IHNob3VsZCBiZSBzb21lIHJlc3RyaWN0aW9uIGhlcmUsIHdoaWNoIG1lYW5zIGRvdHMgc2VydmVy IG9ubHkgcHJvdGVjdCB0aG9zZSBwb3J0cyB0aGF0IGhhdmUgYmVlbiByZWdpc3RlcmVkLg0KDQoo MTApIFNlY3Rpb24gNS4xLjEsIHdoaXRlbGlzdCBhbmQgYmxhY2tsaXN0LCBJIHdvdWxkIHJlY29t bWVuZCBiZWluZyBleHBsaWNpdCBvbiB3aGF0IHRoZSBET1RTIHNlcnZlciBpcyBzdXBwb3NlZCB0 byBkbyB3aXRoIHRoaXMgbGlzdC4NCltGcmFua106IEluIHJlZ2lzdHJhdGlvbiByZXNwb25zZSBt ZXNzYWdlLCBpdCBjYW4gaW5kaWNhdGUgd2hldGhlciBET1RTIHNlcnZlciBjYW4gc3VwcG9ydCBp dC4gRG8geW91IG1lYW4gbW9yZSBpbmZvcm1hdGlvbiB0aGFuIHRoaXM/DQoNCigxMSkgU2VjdGlv biA1LjEuMSwgSG93IGlzIGEgcmVnaXN0cmF0aW9uIHJlcXVlc3QgcmVqZWN0aW9uIHNpZ25hbGVk PyANCltGcmFua106IHdlIGhhdmUgdGhlIGRldGFpbHMgaW4gdGhlIGxhc3QgYnVsbGV0IG9mIHNl Y3Rpb24gNS4xLjIuIEFyZSB0aGV5IGdvb2QgZW5vdWdoPw0KDQooMTIpIFdoZW4gaXMgdGhlIEhl YXJ0YmVhdCBtZXNzYWdlIHNlbnQNCltGcmFua106IEl0J3MgcGVyaW9kaWNhbGx5IHNlbnQgdG8g dGhlIHBlZXIgRE9UUyBhZ2VudHMgcmlnaHQgYWZ0ZXIgdGhlIERPVFMgcmVnaXN0cmF0aW9uIHBy b2Nlc3MgaXMgZmluaXNoZWQsIGFuZCB0aWxsIHRoZSBET1RTIGNsaWVudCBjYW5jZWxzIGl0cyBy ZWdpc3RyYXRpb24gdG8gdGhlIERPVFMgc2VydmVyLg0KDQooMTMpIEkgcmVjb21tZW5kIGFkZGlu ZyB0aGUgdmVyc2lvbiBmaWVsZCB1c2VkIGluIHRoZSBtZXNzYWdlcyBpbiA1LjIuMSB0byB0aGUg cHJvdmlzaW9uaW5nIG1lc3NhZ2VzIGluIDUuMS4xLg0KW0ZyYW5rXTogcG9pbnQgdGFrZW4uDQoN CigxNCkgU2VjdGlvbiA1LjIuMSwgRFNUX0lQIGlzIHVzZWQgaW4gdGhlIGRlZmluaXRpb24gb2Yg bXVsdGlwbGUgZmllbGRzIGJ1dCBpcyBub3QgZGVmaW5lZC4gIElzIHRoaXMgZmllbGQgdGhlIHNh bWUgYXMgZHN0X2lwIGZyb20gcGFja2V0X2hlYWRlcj8NCltGcmFua106IGl0IHNob3VsZCBiZSB0 aGUgc2FtZS4NCg0KKDE1KSBTZWN0aW9uIDUuMi4xLCBtYXhfYmFuZHdpZHRoLCBXaGF0IGlzIG1l YW50IGJ5IHRoZSAibWF4IGJhbmR3aWR0aCB0aGUgRE9UUyBjbGllbnQgY2FuIHVuZGVydGFrZSI/ ICBDb3VsZCB5b3UgcGxlYXNlIGNsYXJpZnkgdGhlIHNlbWFudGljcyBvZiB0aGlzIGZpZWxkLg0K W0ZyYW5rXTogVGhlIERPVFMgY2xpZW50IHRlbGwgaXRzIG1heGltdW0gYmFuZHdpZHRoIGNhcGFi aWxpdHkgdG8gdGhlIERPVFMgc2VydmVyIGZvciBpdHMgYmV0dGVyIGRlY2lzaW9uLiBEb2VzIGl0 IG1ha2Ugc2Vuc2U/DQoNCigxNikgU2VjdGlvbiA1LjIuMSwgcGFja2V0X2hlYWRlciwgVGhpcyBm aWVsZCBpcyBkZWZpbmVkIGEgIklQIHBhY2tldCBoZWFkZXIgY29udGVudHMgdXNlZCBmb3IgYSBy ZXBvcnQiLiAgV2hhdCByZXBvcnQgaXMgdGhpcyBkZWZpbml0aW9uIHJlZmVyZW5jaW5nPw0KW0Zy YW5rXTogSSB0aGluayBpdCBqdXN0IHNpbXBseSBtZWFucyB0aGUgbWl0aWdhdGlvbiByZXF1ZXN0 IG1lc3NhZ2V+fiBXZSBuZWVkIHNvbWUgaW1wcm92ZW1lbnQgb2YgdGhlIHRleHQuDQoNCigxNykg U2VjdGlvbiA1LjIuMSwgY3VycmVudF90aHJvdWdocHV0cywgV2hhdCBkb2VzIGl0IG1lYW4gdG8g aGF2ZSBtdWx0aXBsZSBDU1Ygc2VwYXJhdGVkIHZhbHVlcyBpbiB0aGlzIGZpZWxkPw0KW0ZyYW5r XTogZ29vZCBxdWVzdGlvbi4gVGhlIHJlYXNvbiB3ZSB1c2UgbXVsdGlwbGUgQ1NWIGlzIHRvIHNl bmQgYSBzZXQgb2YgYXR0YWNrIGluZm9ybWF0aW9uIGluIG9uZSBET1RTIG1pdGlnYXRpb24gcmVx dWVzdCBtZXNzYWdlLCBmb3IgaW5jcmVhc2luZyB0aGUgZWZmaWNpZW5jeS4NCg0KKDE4KSBTZWN0 aW9uIDUuMi4xLCBoZWFsdGgsIElzIHRoZXJlIGEgc3RhbmRhcmRpemVkIHdheSB0byBjYWxjdWxh dGUgdGhpcyB2YWx1ZT8gIElzIGl0IHByZS1uZWdvdGlhdGVkLCBvdXQtb2YtYmFuZCwgYmV0d2Vl biBjbGllbnQvc2VydmVyPw0KW0ZyYW5rXTogeWVzIHdlIG5lZWQgaXQuIFdlIHdpbGwgc3BlY2lm eSBpdCBpbiBuZXh0IHZlcnNpb24uIEFueSBnb29kIHN1Z2dlc3Rpb24/DQoNCigxOSkgU2VjdGlv biA1LjIuMSwgcGF5bG9hZCwgU2hvdWxkIHRoaXMgYmUgaW4gdGhlIHNpZ25hbCBjaGFubmVsIG9y IHRoZSBkYXRhIGNoYW5uZWw/DQpbRnJhbmtdOiB0aGlzIHBheWxvYWQgaXMgdGhlIHNhbXBsZWQg Y29udGVudCBvZiB0aGUgYXR0YWNrIHRyYWZmaWMsIHdoaWNoIGlzIHNlbnQgZHVyaW5nIHRoYXQg YXR0YWNrIHRpbWUuIFNvLCB0aGUgc2lnbmFsaW5nIGNoYW5uZWwgaXMgbW9yZSBzdWl0YWJsZS4N Cg0KKDIwKSBTZWN0aW9uIDUuMi4xLCBoYXNoLCBJcyB0aGlzIGhhc2ggY2FsY3VsYXRlZCBvbiB0 aGUgY29tcGxldGUgcGF5bG9hZCBvciB0aGUgdHJ1bmNhdGVkIHZhbHVlIHBlciB0aGUgb2Zmc2V0 IGZpZWxkPw0KW0ZyYW5rXTogdGhlIHRydW5jYXRlZCBwYXJ0Lg0KDQpSb21hbg0KDQpfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KRG90cyBtYWlsaW5nIGxp c3QNCkRvdHNAaWV0Zi5vcmcNCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8v ZG90cw0K From nobody Wed Jul 20 01:21:17 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6898F12DAE9 for ; Wed, 20 Jul 2016 01:21:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.288 X-Spam-Level: X-Spam-Status: No, score=-103.288 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-1.287, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); domainkeys=pass (1024-bit key) header.from=tobias.gondrom@gondrom.org header.d=gondrom.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lPT-j03DqHfX for ; Wed, 20 Jul 2016 01:21:09 -0700 (PDT) Received: from gondrom.org (www.gondrom.org [5.35.241.16]) (using TLSv1.1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2EB0712B039 for ; Wed, 20 Jul 2016 01:21:09 -0700 (PDT) Received: from seraph (dhcp-a112.meeting.ietf.org [31.133.161.18]) by gondrom.org (Postfix) with ESMTPSA id 2FEF962EB5; Wed, 20 Jul 2016 10:21:07 +0200 (CEST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=gondrom.org; b=r82wJmLJj5Z6BdIkY3ryZdyKx83ncr6gp9NSdpytr1J+FKydUwJtow98O3lNK32JwWxAsB6HgWO1OQ6IYAfr8D59Pd4M2JRNZqipf4PQhqy6+FhwYL+jjwahHl0s47z0muaE9fcdXB19CeM9DMYZXW1+42Ucy4k0jvJNeFWojwU=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version:Content-Type:X-Mailer:Thread-Index:Content-Language; From: "Tobias Gondrom" To: Date: Wed, 20 Jul 2016 10:20:57 +0200 Message-ID: <070301d1e25f$a4a03bb0$ede0b310$@gondrom.org> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0704_01D1E270.682D5170" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdHiX4tbukvUPVthTemVJjryMYI+rA== Content-Language: en-us Archived-At: Cc: "'Roman D. Danyliw'" Subject: Re: [Dots] Implementers meetings during IETF 96 - Implementers team meeting today at 12:30 in room "Koepenik 3" on goundfloor floor X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jul 2016 08:21:16 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0704_01D1E270.682D5170 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Just as a little reminder: Time: Wednesday, July 20: 1230-1400 Purpose: existing and future implementers discussing their experiences Location: Koepenik 3 (ground floor) Best regards and see you, Tobias From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Tobias Gondrom Sent: Monday, July 18, 2016 11:02 To: dots@ietf.org Cc: 'Roman D. Danyliw' Subject: Re: [Dots] Design team meetings during IETF 96 - Design team meeting today at 12:30 in room "King" on 2nd floor Importance: High Dear all, For the design team meeting today (1) Joint Use Case, Requirements and Architecture Design Team Meeting Time: Monday, July 18: 1230-1400 Purpose: discuss the specific UC/requirements/architecture drafts and overlap between the drafts Location: Room "King" (on 2nd floor.) As I said before the attendance is optional, this serves as a discussion venue for the design teams, but is open to anyone interested. Best regards, Tobias & Roman _____________________________________________ From: Tobias Gondrom [mailto:tobias.gondrom@gondrom.org] Sent: Sunday, July 17, 2016 18:44 To: 'dots@ietf.org' > Cc: 'Roman D. Danyliw' > Subject: RE: [Dots] Design team meetings during IETF 96 - reminder Importance: High Hello dear DOTS WG team, Just as a small reminder: besides our DOTS WG meeting on Tuesday afternoon 16:20-18:20 in room Bellevue, there will be two design team meetings during this week. These are open for anyone interested, and for the purpose as explained below: (1) Joint Use Case, Requirements and Architecture Design Team Meeting Time: Monday, July 18: 1230-1400 Purpose: discuss the specific UC/requirements/architecture drafts and overlap between the drafts Location: TBA (I shall get the room details on Monday morning and will send them to the mailing-list) (2) Implementers Meeting Time: Wednesday, July 20: 1230-1400 Purpose: existing and future implementers discussing their experiences Location: TBA (I shall get the room details on Monday morning and will send them to the mailing-list) Cheers and see you soon in Berlin, Tobias -----Original Message----- From: Dots [ mailto:dots-bounces@ietf.org] On Behalf Of Roman D. Danyliw Sent: Tuesday, June 21, 2016 19:58 To: dots@ietf.org Subject: [Dots] Design team meetings during IETF 96 Hello WG! In previous face-to-face meetings, collocated design team meetings have proven useful. During today's virtual interim meeting, there was interest in continuing such sessions in Berlin. To enable participants to better plan their week at IETF 96, the design teams agreed to convene on the following schedule: (1) Joint Use Case, Requirements and Architecture Design Team Meeting Time: Monday, July 18: 1230-1400 Purpose: discuss the specific UC/requirements/architecture drafts and overlap between the drafts Location: TBD (2) Implementers Meeting Time: Wednesday, July 20: 1230-1400 Purpose: existing and future implementers discussing their experiences Location: TBD The locations for both meetings will be announced at a later time. Roman _______________________________________________ Dots mailing list Dots@ietf.org https://www.ietf.org/mailman/listinfo/dots ------=_NextPart_000_0704_01D1E270.682D5170 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable RE: [Dots] Design team meetings during IETF 96 = - Design team meeting today at 12:30 in room "King" on 2nd = floor

Just as a = little reminder:

Time: Wednesday, July 20: = 1230-1400

Purpose: existing and future = implementers discussing their experiences

Location: Koepenik 3 (ground = floor)

Best regards = and see you, Tobias

 

 

 

From:<= /b> = Dots [mailto:dots-bounces@ietf.org] On Behalf Of Tobias = Gondrom
Sent: Monday, July 18, 2016 11:02
To: = dots@ietf.org
Cc: 'Roman D. Danyliw' = <rdd@cert.org>
Subject: Re: [Dots] Design team meetings = during IETF 96 - Design team meeting today at 12:30 in room = "King" on 2nd floor
Importance: = High

 

Dear all, =

For the design team meeting = today

(1) Joint Use Case, = Requirements and Architecture Design Team = Meeting

Time: Monday, July 18: = 1230-1400

Purpose: discuss the specific = UC/requirements/architecture drafts and overlap between the = drafts

Location: = Room = “King” (on 2nd floor.) =

As I said before the = attendance is optional, this serves as a discussion venue for the design = teams, but is open to anyone interested.

Best regards, Tobias & = Roman

______________________________= _______________
From: Tobias Gondrom [mailto:tobias.gondrom@gondrom.= org]
Sent: Sunday, July 17, 2016 18:44
To: = 'dots@ietf.org' <dots@ietf.org>
Cc: 'Roman = D. Danyliw' <rdd@cert.org>
Subject: RE: = [Dots] Design team meetings during IETF 96 - = reminder
Importance: High

Hello dear DOTS WG team, =

Just as a small reminder: =

besides = our DOTS WG = meeting on Tuesday afternoon 16:20-18:20 in room = Bellevue, =

there will be = two design team = meetings = during this week.

These are open for anyone = interested, and for the purpose as explained below: =

(1) Joint Use Case, = Requirements and Architecture Design Team = Meeting

Time: Monday, July 18: = 1230-1400

Purpose: discuss the specific = UC/requirements/architecture drafts and overlap between the = drafts

Location: TBA (I shall get = the room details on Monday morning and will send them to the = mailing-list)

(2) Implementers = Meeting

Time: Wednesday, July 20: = 1230-1400

Purpose: existing and future = implementers discussing their experiences

Location: TBA (I shall get = the room details on Monday morning and will send them to the = mailing-list)

Cheers and see you soon in = Berlin,

Tobias

 

-----Original = Message-----
From: Dots [mailto:dots-boun= ces@ietf.org] On Behalf Of Roman D. = Danyliw
Sent: Tuesday, June 21, 2016 19:58
To: dots@ietf.org
Subject: = [Dots] Design team meetings during IETF 96

Hello = WG!

In previous face-to-face = meetings, collocated design team meetings have proven useful.  = During today's virtual interim meeting, there was interest in continuing = such sessions in Berlin.  To enable participants to better plan = their week at IETF 96, the design teams agreed to convene on the = following schedule:

(1) Joint Use Case, = Requirements and Architecture Design Team = Meeting

Time: Monday, July 18: = 1230-1400

Purpose: discuss the specific = UC/requirements/architecture drafts and overlap between the = drafts

Location: = TBD

(2) Implementers = Meeting

Time: Wednesday, July 20: = 1230-1400

Purpose: existing and future = implementers discussing their experiences

Location: = TBD

The locations for both = meetings will be announced at a later = time.

Roman

= ______________________________= _________________

Dots mailing = list

Dots@ietf.org<= /o:p>

https://www.ietf.org/mailman/l= istinfo/dots

------=_NextPart_000_0704_01D1E270.682D5170-- From nobody Wed Jul 20 10:19:02 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33BDC12D894 for ; Wed, 20 Jul 2016 10:19:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5X0bpXeKRttu for ; Wed, 20 Jul 2016 10:18:58 -0700 (PDT) Received: from plainfield.sei.cmu.edu (plainfield.sei.cmu.edu [192.58.107.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A522712D137 for ; Wed, 20 Jul 2016 10:18:51 -0700 (PDT) Received: from timber.sei.cmu.edu (timber.sei.cmu.edu [10.64.21.23]) by plainfield.sei.cmu.edu (8.14.4/8.14.4/1543) with ESMTP id u6KHIdf6005259; Wed, 20 Jul 2016 13:18:39 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cert.org; s=jthatj15xw2j; t=1469035119; bh=XHf4gI+XTvB+r7G21tB96Ggip5mAAzuE6GpuqjS+2x8=; h=From:To:CC:Subject:Date:Message-ID:References:In-Reply-To: Content-Type:Content-Transfer-Encoding:MIME-Version:Sender: Reply-To; b=BeZ6g/ZlsoR/fy/roXhLJ9vcVK38M1ccLOWocRKVRYd5YmwLIMM2toY8KdQIi17Zq 6dRPAlV93b108DrWRjAUlL0tqp6Z9c8F7/qh6o7W1lg6Z+eKOV5MLjFn+NX1Ch0uNY PUtyS2GPj5fiFx7RF4ZsnL3lqwn4mwjMgasQmdMU= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by timber.sei.cmu.edu (8.14.4/8.14.4/1543) with ESMTP id u6KHIUPq008718; Wed, 20 Jul 2016 13:18:30 -0400 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.03.0279.002; Wed, 20 Jul 2016 13:18:29 -0400 From: "Roman D. Danyliw" To: "Xialiang (Frank)" Thread-Topic: [Dots] Feedback on draft-nishizuka-dots-inter-domain-mechanism-01 Thread-Index: AQHR4lkcRnccxXgH60KeGr8DmiUlf6AhRwWQ Date: Wed, 20 Jul 2016 17:18:29 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0104E1D14B@marathon> References: <359EC4B99E040048A7131E0F4E113AFC0104E1A3AD@marathon> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "dots@ietf.org" Subject: Re: [Dots] Feedback on draft-nishizuka-dots-inter-domain-mechanism-01 X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jul 2016 17:19:01 -0000 SGkgRnJhbmshDQoNClRoYW5rcyBmb3IgdGhlIHJlc3BvbnNlLiAgTXkgY29tbWVudHMgYXJlIGlu bGluZS4gIFdoZXJlIEkgcmVtb3ZlZCBhIGl0ZW0sIHlvdSBhbnN3ZXJlZCBteSBxdWVzdGlvbiAo dGhhbmtzKS4NCg0KPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBEb3RzIFtt YWlsdG86ZG90cy1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgWGlhbGlhbmcgKEZyYW5r KQ0KPiBTZW50OiBXZWRuZXNkYXksIEp1bHkgMjAsIDIwMTYgMzozNCBBTQ0KPiBUbzogUm9tYW4g RC4gRGFueWxpdyA8cmRkQGNlcnQub3JnPg0KPiBDYzogZG90c0BpZXRmLm9yZw0KPiBTdWJqZWN0 OiBSZTogW0RvdHNdIEZlZWRiYWNrIG9uIGRyYWZ0LW5pc2hpenVrYS1kb3RzLWludGVyLWRvbWFp bi0NCj4gbWVjaGFuaXNtLTAxDQo+IA0KPiBIaSBSb21hbiwNCj4gVGhhbmtzIGZvciB0aGUgZGV0 YWlsZWQgY29tbWVudHMuDQo+IE15IHJlc3BvbnNlIGlzIGlubGluZToNCj4gDQo+IEIuUi4NCj4g RnJhbmsNCj4gDQo+IC0tLS0t08q8/tStvP4tLS0tLQ0KPiC3orz+yMs6IERvdHMgW21haWx0bzpk b3RzLWJvdW5jZXNAaWV0Zi5vcmddILT6se0gUm9tYW4gRC4gRGFueWxpdw0KPiC3osvNyrG85Dog MjAxNsTqN9TCMTjI1SAyMTowMw0KPiDK1bz+yMs6IGRvdHNAaWV0Zi5vcmcNCj4g1vfM4jogW0Rv dHNdIEZlZWRiYWNrIG9uIGRyYWZ0LW5pc2hpenVrYS1kb3RzLWludGVyLWRvbWFpbi1tZWNoYW5p c20tMDENCj4gDQo+IEhlbGxvIFdHIQ0KPiANCj4gV0cgY2hhaXIgaGF0IG9mZiAuLi4NCj4gDQo+ IEluIHJlYWRpbmcgdGhyb3VnaCBkcmFmdC1uaXNoaXp1a2EtZG90cy1pbnRlci1kb21haW4tbWVj aGFuaXNtLTAxIEkgaGF2ZQ0KPiB0aGUgZm9sbG93aW5nIGZlZWRiYWNrOg0KDQpbc25pcF0NCg0K PiAoNCkgU2VjdGlvbiA1LCBQcm92aXNpb25pbmcgc3RhZ2UsICJBIERPVFMgY2xpZW50IHNob3Vs ZCByZWdpc3RlciBpdHNlbGYgdG8gdGhlDQo+IERPVFMgc2VydmVyLCBhcyB3ZWxsIGFzIGVuYWJs ZSBjYXBhY2l0eSBidWlsZGluZyBpbiBhZHZhbmNlLiIgSW4gdGhlIGNvbnRleHQNCj4gb2YgRE9U Uywgd2hhdCBwcm90b2NvbCBzdXBwb3J0IGlzIGV4cGVjdGVkIHRvICJlbmFibGUgY2FwYWNpdHkg YnVpbGRpbmcgaW4NCj4gYWR2YW5jZSI/DQo+IFtGcmFua106IEluIHNlY3Rpb24gNS4xLjIsIHdl IGhhdmUgdGhlIGRldGFpbHM6ICJUaGUgY3VzdG9tZXJzIChET1RTIGNsaWVudCkNCj4gcmVnaXN0 ZXJzIHRvIHRoZSBvcGVyYXRvciBjb250cm9sbGVyIHdpdGggdGhlIGNvbmZpZ3VyYXRpb24gYW5k IGNhcGFiaWxpdHkNCj4gYnVpbGRpbmcgaW5jbHVkaW5nIHByb3RlY3Rpb24gbWV0aG9kcywgcHJv Y2VzcyBjYXBhY2l0eSwgcHJvdGVjdGVkIHpvbmUsDQo+IHNlY3VyaXR5IHByb2ZpbGUsIHdoaXRl L2JsYWNrLWxpc3QsIGV0YyIuIERvZXMgaXQgbWFrZSBzZW5zZT8NCg0KSXQgZG9lcyBidXQgdGhl biBJIGhhdmUgYSBuaXQgcmVsYXRlZCB0byB0aGUgdXNlIG9mIHRoZSBwaHJhc2UgImNhcGFjaXR5 IGJ1aWxkaW5nIi4gIEl0IGRvZXNuJ3Qgc2VlbSB0byBmaXQgaGVyZSBmb3IgbWUuDQoNCj4gKDUp IFNlY3Rpb24gNS4xLjEsIGN1c3RvbWVyX25hbWUsIEhvdyBzaG91bGQgdGhpcyBuYW1lIGJlIGdl bmVyYXRlZD8NCj4gW0ZyYW5rXTogaXQncyBnZW5lcmF0ZWQgYnkgRE9UUyBjbGllbnQgaXRzZWxm LCBidXQgdGhlIGN1c3RvbV9pZCBpcyB0aGUgdW5pcXVlDQo+IHZhbHVlIGdlbmVyYXRlZCBieSB0 aGUgRE9UUyBzZXJ2ZXINCg0KSWYgaXQncyBhIGZyZWUgZm9ybSB2YWx1ZSwgSSdkIHJlY29tbWVu ZCBzdGF0aW5nIHRoYXQgZm9yIGNsYXJpZnkgaW4gdGhlIGRyYWZ0Lg0KIA0KPiAoNikgU2VjdGlv biA1LjEuMSwgaXBfdmVyc2lvbiwgVG8gd2hhdCB0cmFmZmljIGRvZXMgdGhpcyB2ZXJzaW9uIG51 bWJlciByZWZlcj8NCj4gW0ZyYW5rXTogdGhlIHZlcnNpb24gb2YgdGhlIERPVFMgY2xpZW50J3Mg YWxsIHRyYWZmaWMNCg0KSSBzdGlsbCBuZWVkIGEgbGl0dGxlIGhlbHAgdW5kZXJzdGFuZGluZy4g IFRoaXMgZmllbGQgdGVsbHMgdGhlIERPVFMgc2VydmVyIHRoYXQgdGhlIERPVFMgY2xpZW50IHRy YWZmaWMgd2lsbCBiZSBJUHY2IG9yIHY0PyAgSWYgc28sIHdoaWNoIHRyYWZmaWM/ICBXaGF0IGhh cHBlbnMgaWYgdGhlcmUgaXMgdjQgYW5kIHY2IHRyYWZmaWM/ICBUaGUgb25lIG5vdGVkIGluIHRo ZSBwcm90ZWN0ZWRfem9uZSwgb24gdGhlIHdoaXRlL2JsYWNrbGlzdD8gIFdoYXQgaGFwcGVucyBp ZiBpcF92ZXJzaW9uID0gInY0IiBhbmQgYSBpcHY2X2FkZHJlc3MgaXMgc2V0IGluIHByb3RlY3Rl ZF96b25lLg0KDQpbc25pcF0NCg0KPiAoOSkgU2VjdGlvbiA1LjEuMSwgcHJvdGVjdGVkX3BvcnRz LCBUbyBjbGFyaWZ5LCBpcyB0aGlzIHRoZSBzdWJzZXQgb2YgcG9ydHMNCj4gcG9zc2libGUgdG8g ZW51bWVyYXRlIGluIGZ1dHVyZSBtaXRpZ2F0aW9uIHJlcXVlc3RzPw0KPiBbRnJhbmtdOiBZZXMs IEkgdGhpbmsgc28uIEkgdGVuZCB0byB0aGluayB0aGVyZSBzaG91bGQgYmUgc29tZSByZXN0cmlj dGlvbiBoZXJlLA0KPiB3aGljaCBtZWFucyBkb3RzIHNlcnZlciBvbmx5IHByb3RlY3QgdGhvc2Ug cG9ydHMgdGhhdCBoYXZlIGJlZW4gcmVnaXN0ZXJlZC4NCg0KSSdkIHJlY29tbWVuZCBleHBsaWNp dGx5IGRvY3VtZW50aW5nIHRoaXMgcmVsYXRpb25zaGlwIGJldHdlZW4gcHJvdGVjdGVkX3BvcnRz IGFuZCBmdXR1cmUgbWl0aWdhdGlvbiByZXF1ZXN0cy4NCg0KPiAoMTApIFNlY3Rpb24gNS4xLjEs IHdoaXRlbGlzdCBhbmQgYmxhY2tsaXN0LCBJIHdvdWxkIHJlY29tbWVuZCBiZWluZyBleHBsaWNp dA0KPiBvbiB3aGF0IHRoZSBET1RTIHNlcnZlciBpcyBzdXBwb3NlZCB0byBkbyB3aXRoIHRoaXMg bGlzdC4NCj4gW0ZyYW5rXTogSW4gcmVnaXN0cmF0aW9uIHJlc3BvbnNlIG1lc3NhZ2UsIGl0IGNh biBpbmRpY2F0ZSB3aGV0aGVyIERPVFMNCj4gc2VydmVyIGNhbiBzdXBwb3J0IGl0LiBEbyB5b3Ug bWVhbiBtb3JlIGluZm9ybWF0aW9uIHRoYW4gdGhpcz8NCg0KQmFzZWQgb24gdGhlIGRlZmluaXRp b24gaW4gdGhlIHRleHQgb2Ygd2hpdGVsaXN0LCBpdCBhcHBlYXJlZCB0aGF0IHRoZSBjbGllbnQg Y291bGQgc2VuZCBhIGNoYXJhY3Rlcml6YXRpb24gb2YgcGFydGljdWxhciB0cmFmZmljLiAgSSB3 YXMgcmVjb21tZW5kaW5nIHRoYXQgdGhlIHRleHQgYmUgZXhwbGljaXQgaXMgc2F5aW5nIHNvbWV0 aGluZyBsaWtlIChub3QgcHJlY2lzZSBsYW5ndWFnZSkgLS0gIlRoZSBET1RTIHNlcnZlciBzaG91 bGQgZW5zdXJlIHRoYXQgdHJhZmZpYyBkZXNjcmliZWQgaW4gdGhlICd3aGl0ZWxpc3QnIGZpZWxk IHNldCBkdXJpbmcgcmVnaXN0cmF0aW9uIHRpbWUgaXMgbm90IGltcGFjdGVkIGluIGZ1dHVyZSBt aXRpZ2F0aW9uIHJlcXVlc3RzIGJ5IHRoZSBET1RTIGNsaWVudC4iICBTb21lIGVxdWl2YWxlbnQg Zm9yIGJsYWNrbGlzdC4gDQoNCj4gKDEyKSBXaGVuIGlzIHRoZSBIZWFydGJlYXQgbWVzc2FnZSBz ZW50DQo+IFtGcmFua106IEl0J3MgcGVyaW9kaWNhbGx5IHNlbnQgdG8gdGhlIHBlZXIgRE9UUyBh Z2VudHMgcmlnaHQgYWZ0ZXIgdGhlIERPVFMNCj4gcmVnaXN0cmF0aW9uIHByb2Nlc3MgaXMgZmlu aXNoZWQsIGFuZCB0aWxsIHRoZSBET1RTIGNsaWVudCBjYW5jZWxzIGl0cyByZWdpc3RyYXRpb24N Cj4gdG8gdGhlIERPVFMgc2VydmVyLg0KDQpVbmRlcnN0b29kLiAgSSBkaWRuJ3Qgc2VlIHRoYXQg aW4gdGhlIHRleHQuICBIb3cgb2Z0ZW4gaXMgcGVyaW9kaWNhbGx5Pw0KDQo+ICgxNCkgU2VjdGlv biA1LjIuMSwgRFNUX0lQIGlzIHVzZWQgaW4gdGhlIGRlZmluaXRpb24gb2YgbXVsdGlwbGUgZmll bGRzIGJ1dCBpcyBub3QNCj4gZGVmaW5lZC4gIElzIHRoaXMgZmllbGQgdGhlIHNhbWUgYXMgZHN0 X2lwIGZyb20gcGFja2V0X2hlYWRlcj8NCj4gW0ZyYW5rXTogaXQgc2hvdWxkIGJlIHRoZSBzYW1l Lg0KDQpJIHJlY29tbWVuZCB1c2luZyBhIGNvbnNpc3RlbnQgY2FzZS4NCg0KPiAoMTcpIFNlY3Rp b24gNS4yLjEsIGN1cnJlbnRfdGhyb3VnaHB1dHMsIFdoYXQgZG9lcyBpdCBtZWFuIHRvIGhhdmUg bXVsdGlwbGUNCj4gQ1NWIHNlcGFyYXRlZCB2YWx1ZXMgaW4gdGhpcyBmaWVsZD8NCj4gW0ZyYW5r XTogZ29vZCBxdWVzdGlvbi4gVGhlIHJlYXNvbiB3ZSB1c2UgbXVsdGlwbGUgQ1NWIGlzIHRvIHNl bmQgYSBzZXQgb2YNCj4gYXR0YWNrIGluZm9ybWF0aW9uIGluIG9uZSBET1RTIG1pdGlnYXRpb24g cmVxdWVzdCBtZXNzYWdlLCBmb3IgaW5jcmVhc2luZw0KPiB0aGUgZWZmaWNpZW5jeS4NCg0KV291 bGQgdGhlcmUgYmUgdGltZXN0YW1wcyB3aXRoIHRoZXNlIHJhdGVzPyAgQXNzdW1pbmcgdGhpcyB3 YXMgYSBsZWdhbCBzeW50YXgsICIzLjUsIDU4LjMsIDQ4LjMiLCBob3cgd291bGQgdGhhdCBiZSBp bnRlcnByZXRlZD8NCg0KW3NuaXBdDQoNCj4gKDIwKSBTZWN0aW9uIDUuMi4xLCBoYXNoLCBJcyB0 aGlzIGhhc2ggY2FsY3VsYXRlZCBvbiB0aGUgY29tcGxldGUgcGF5bG9hZCBvcg0KPiB0aGUgdHJ1 bmNhdGVkIHZhbHVlIHBlciB0aGUgb2Zmc2V0IGZpZWxkPw0KPiBbRnJhbmtdOiB0aGUgdHJ1bmNh dGVkIHBhcnQuDQoNCkkgcmVjb21tZW5kIGV4cGxpY2l0bHkgc3RhdGluZyB0aGUgdGFyZ2V0IG9m IHRoZSBoYXNoIGFzIHlvdSBjbGFyaWZpZWQgaGVyZS4NCg0KUm9tYW4NCg== From nobody Wed Jul 20 22:55:39 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 92E3A12D613 for ; Wed, 20 Jul 2016 22:55:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.508 X-Spam-Level: X-Spam-Status: No, score=-5.508 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.287, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4hGJkczF9LDS for ; Wed, 20 Jul 2016 22:55:34 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 428F012D18D for ; Wed, 20 Jul 2016 22:55:34 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml701-cah.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id COB32570; Thu, 21 Jul 2016 05:55:31 +0000 (GMT) Received: from SZXEMA414-HUB.china.huawei.com (10.82.72.73) by lhreml701-cah.china.huawei.com (10.201.5.93) with Microsoft SMTP Server (TLS) id 14.3.235.1; Thu, 21 Jul 2016 06:55:29 +0100 Received: from SZXEMA502-MBS.china.huawei.com ([169.254.4.6]) by SZXEMA414-HUB.china.huawei.com ([10.82.72.73]) with mapi id 14.03.0235.001; Thu, 21 Jul 2016 13:55:22 +0800 From: "Xialiang (Frank)" To: "Roman D. Danyliw" Thread-Topic: [Dots] Feedback on draft-nishizuka-dots-inter-domain-mechanism-01 Thread-Index: AQHR4qrJRvFSN0sbA0iuWm37HwKQVqAiY0EQ Date: Thu, 21 Jul 2016 05:55:22 +0000 Message-ID: References: <359EC4B99E040048A7131E0F4E113AFC0104E1A3AD@marathon> <359EC4B99E040048A7131E0F4E113AFC0104E1D14B@marathon> In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC0104E1D14B@marathon> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.200.219.85] Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A090202.579063D4.003C, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=169.254.4.6, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: 20b1be146529b262bc55c0b66a3dc493 Archived-At: Cc: "dots@ietf.org" Subject: [Dots] =?gb2312?b?tPC4tDogIEZlZWRiYWNrIG9uCWRyYWZ0LW5pc2hpenVr?= =?gb2312?b?YS1kb3RzLWludGVyLWRvbWFpbi1tZWNoYW5pc20tMDE=?= X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jul 2016 05:55:37 -0000 SGkgUm9tYW4sDQpQb2ludHMgYW5kIHF1ZXN0aW9ucyBhcmUgYWxsIHRha2VuLCBhbmQgd2Ugd2ls bCBhZGRyZXNzIHRoZW0gaW4gbmV4dCB2ZXJzaW9uLg0KVGhhbmtzIGEgbG90IQ0KDQpCLlIuDQpG cmFuaw0KDQotLS0tLdPKvP7Urbz+LS0tLS0NCreivP7IyzogUm9tYW4gRC4gRGFueWxpdyBbbWFp bHRvOnJkZEBjZXJ0Lm9yZ10gDQq3osvNyrG85DogMjAxNsTqN9TCMjHI1SAxOjE4DQrK1bz+yMs6 IFhpYWxpYW5nIChGcmFuaykNCrOty806IGRvdHNAaWV0Zi5vcmcNCtb3zOI6IFJFOiBbRG90c10g RmVlZGJhY2sgb24gZHJhZnQtbmlzaGl6dWthLWRvdHMtaW50ZXItZG9tYWluLW1lY2hhbmlzbS0w MQ0KDQpIaSBGcmFuayENCg0KVGhhbmtzIGZvciB0aGUgcmVzcG9uc2UuICBNeSBjb21tZW50cyBh cmUgaW5saW5lLiAgV2hlcmUgSSByZW1vdmVkIGEgaXRlbSwgeW91IGFuc3dlcmVkIG15IHF1ZXN0 aW9uICh0aGFua3MpLg0KDQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IERv dHMgW21haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBYaWFsaWFuZyAN Cj4gKEZyYW5rKQ0KPiBTZW50OiBXZWRuZXNkYXksIEp1bHkgMjAsIDIwMTYgMzozNCBBTQ0KPiBU bzogUm9tYW4gRC4gRGFueWxpdyA8cmRkQGNlcnQub3JnPg0KPiBDYzogZG90c0BpZXRmLm9yZw0K PiBTdWJqZWN0OiBSZTogW0RvdHNdIEZlZWRiYWNrIG9uIGRyYWZ0LW5pc2hpenVrYS1kb3RzLWlu dGVyLWRvbWFpbi0NCj4gbWVjaGFuaXNtLTAxDQo+IA0KPiBIaSBSb21hbiwNCj4gVGhhbmtzIGZv ciB0aGUgZGV0YWlsZWQgY29tbWVudHMuDQo+IE15IHJlc3BvbnNlIGlzIGlubGluZToNCj4gDQo+ IEIuUi4NCj4gRnJhbmsNCj4gDQo+IC0tLS0t08q8/tStvP4tLS0tLQ0KPiC3orz+yMs6IERvdHMg W21haWx0bzpkb3RzLWJvdW5jZXNAaWV0Zi5vcmddILT6se0gUm9tYW4gRC4gRGFueWxpdw0KPiC3 osvNyrG85DogMjAxNsTqN9TCMTjI1SAyMTowMw0KPiDK1bz+yMs6IGRvdHNAaWV0Zi5vcmcNCj4g 1vfM4jogW0RvdHNdIEZlZWRiYWNrIG9uIGRyYWZ0LW5pc2hpenVrYS1kb3RzLWludGVyLWRvbWFp bi1tZWNoYW5pc20tMDENCj4gDQo+IEhlbGxvIFdHIQ0KPiANCj4gV0cgY2hhaXIgaGF0IG9mZiAu Li4NCj4gDQo+IEluIHJlYWRpbmcgdGhyb3VnaCBkcmFmdC1uaXNoaXp1a2EtZG90cy1pbnRlci1k b21haW4tbWVjaGFuaXNtLTAxIEkgDQo+IGhhdmUgdGhlIGZvbGxvd2luZyBmZWVkYmFjazoNCg0K W3NuaXBdDQoNCj4gKDQpIFNlY3Rpb24gNSwgUHJvdmlzaW9uaW5nIHN0YWdlLCAiQSBET1RTIGNs aWVudCBzaG91bGQgcmVnaXN0ZXIgDQo+IGl0c2VsZiB0byB0aGUgRE9UUyBzZXJ2ZXIsIGFzIHdl bGwgYXMgZW5hYmxlIGNhcGFjaXR5IGJ1aWxkaW5nIGluIA0KPiBhZHZhbmNlLiIgSW4gdGhlIGNv bnRleHQgb2YgRE9UUywgd2hhdCBwcm90b2NvbCBzdXBwb3J0IGlzIGV4cGVjdGVkIHRvIA0KPiAi ZW5hYmxlIGNhcGFjaXR5IGJ1aWxkaW5nIGluIGFkdmFuY2UiPw0KPiBbRnJhbmtdOiBJbiBzZWN0 aW9uIDUuMS4yLCB3ZSBoYXZlIHRoZSBkZXRhaWxzOiAiVGhlIGN1c3RvbWVycyAoRE9UUyANCj4g Y2xpZW50KSByZWdpc3RlcnMgdG8gdGhlIG9wZXJhdG9yIGNvbnRyb2xsZXIgd2l0aCB0aGUgY29u ZmlndXJhdGlvbiANCj4gYW5kIGNhcGFiaWxpdHkgYnVpbGRpbmcgaW5jbHVkaW5nIHByb3RlY3Rp b24gbWV0aG9kcywgcHJvY2VzcyANCj4gY2FwYWNpdHksIHByb3RlY3RlZCB6b25lLCBzZWN1cml0 eSBwcm9maWxlLCB3aGl0ZS9ibGFjay1saXN0LCBldGMiLiBEb2VzIGl0IG1ha2Ugc2Vuc2U/DQoN Ckl0IGRvZXMgYnV0IHRoZW4gSSBoYXZlIGEgbml0IHJlbGF0ZWQgdG8gdGhlIHVzZSBvZiB0aGUg cGhyYXNlICJjYXBhY2l0eSBidWlsZGluZyIuICBJdCBkb2Vzbid0IHNlZW0gdG8gZml0IGhlcmUg Zm9yIG1lLg0KDQo+ICg1KSBTZWN0aW9uIDUuMS4xLCBjdXN0b21lcl9uYW1lLCBIb3cgc2hvdWxk IHRoaXMgbmFtZSBiZSBnZW5lcmF0ZWQ/DQo+IFtGcmFua106IGl0J3MgZ2VuZXJhdGVkIGJ5IERP VFMgY2xpZW50IGl0c2VsZiwgYnV0IHRoZSBjdXN0b21faWQgaXMgDQo+IHRoZSB1bmlxdWUgdmFs dWUgZ2VuZXJhdGVkIGJ5IHRoZSBET1RTIHNlcnZlcg0KDQpJZiBpdCdzIGEgZnJlZSBmb3JtIHZh bHVlLCBJJ2QgcmVjb21tZW5kIHN0YXRpbmcgdGhhdCBmb3IgY2xhcmlmeSBpbiB0aGUgZHJhZnQu DQogDQo+ICg2KSBTZWN0aW9uIDUuMS4xLCBpcF92ZXJzaW9uLCBUbyB3aGF0IHRyYWZmaWMgZG9l cyB0aGlzIHZlcnNpb24gbnVtYmVyIHJlZmVyPw0KPiBbRnJhbmtdOiB0aGUgdmVyc2lvbiBvZiB0 aGUgRE9UUyBjbGllbnQncyBhbGwgdHJhZmZpYw0KDQpJIHN0aWxsIG5lZWQgYSBsaXR0bGUgaGVs cCB1bmRlcnN0YW5kaW5nLiAgVGhpcyBmaWVsZCB0ZWxscyB0aGUgRE9UUyBzZXJ2ZXIgdGhhdCB0 aGUgRE9UUyBjbGllbnQgdHJhZmZpYyB3aWxsIGJlIElQdjYgb3IgdjQ/ICBJZiBzbywgd2hpY2gg dHJhZmZpYz8gIFdoYXQgaGFwcGVucyBpZiB0aGVyZSBpcyB2NCBhbmQgdjYgdHJhZmZpYz8gIFRo ZSBvbmUgbm90ZWQgaW4gdGhlIHByb3RlY3RlZF96b25lLCBvbiB0aGUgd2hpdGUvYmxhY2tsaXN0 PyAgV2hhdCBoYXBwZW5zIGlmIGlwX3ZlcnNpb24gPSAidjQiIGFuZCBhIGlwdjZfYWRkcmVzcyBp cyBzZXQgaW4gcHJvdGVjdGVkX3pvbmUuDQoNCltzbmlwXQ0KDQo+ICg5KSBTZWN0aW9uIDUuMS4x LCBwcm90ZWN0ZWRfcG9ydHMsIFRvIGNsYXJpZnksIGlzIHRoaXMgdGhlIHN1YnNldCBvZiANCj4g cG9ydHMgcG9zc2libGUgdG8gZW51bWVyYXRlIGluIGZ1dHVyZSBtaXRpZ2F0aW9uIHJlcXVlc3Rz Pw0KPiBbRnJhbmtdOiBZZXMsIEkgdGhpbmsgc28uIEkgdGVuZCB0byB0aGluayB0aGVyZSBzaG91 bGQgYmUgc29tZSANCj4gcmVzdHJpY3Rpb24gaGVyZSwgd2hpY2ggbWVhbnMgZG90cyBzZXJ2ZXIg b25seSBwcm90ZWN0IHRob3NlIHBvcnRzIHRoYXQgaGF2ZSBiZWVuIHJlZ2lzdGVyZWQuDQoNCkkn ZCByZWNvbW1lbmQgZXhwbGljaXRseSBkb2N1bWVudGluZyB0aGlzIHJlbGF0aW9uc2hpcCBiZXR3 ZWVuIHByb3RlY3RlZF9wb3J0cyBhbmQgZnV0dXJlIG1pdGlnYXRpb24gcmVxdWVzdHMuDQoNCj4g KDEwKSBTZWN0aW9uIDUuMS4xLCB3aGl0ZWxpc3QgYW5kIGJsYWNrbGlzdCwgSSB3b3VsZCByZWNv bW1lbmQgYmVpbmcgDQo+IGV4cGxpY2l0IG9uIHdoYXQgdGhlIERPVFMgc2VydmVyIGlzIHN1cHBv c2VkIHRvIGRvIHdpdGggdGhpcyBsaXN0Lg0KPiBbRnJhbmtdOiBJbiByZWdpc3RyYXRpb24gcmVz cG9uc2UgbWVzc2FnZSwgaXQgY2FuIGluZGljYXRlIHdoZXRoZXIgDQo+IERPVFMgc2VydmVyIGNh biBzdXBwb3J0IGl0LiBEbyB5b3UgbWVhbiBtb3JlIGluZm9ybWF0aW9uIHRoYW4gdGhpcz8NCg0K QmFzZWQgb24gdGhlIGRlZmluaXRpb24gaW4gdGhlIHRleHQgb2Ygd2hpdGVsaXN0LCBpdCBhcHBl YXJlZCB0aGF0IHRoZSBjbGllbnQgY291bGQgc2VuZCBhIGNoYXJhY3Rlcml6YXRpb24gb2YgcGFy dGljdWxhciB0cmFmZmljLiAgSSB3YXMgcmVjb21tZW5kaW5nIHRoYXQgdGhlIHRleHQgYmUgZXhw bGljaXQgaXMgc2F5aW5nIHNvbWV0aGluZyBsaWtlIChub3QgcHJlY2lzZSBsYW5ndWFnZSkgLS0g IlRoZSBET1RTIHNlcnZlciBzaG91bGQgZW5zdXJlIHRoYXQgdHJhZmZpYyBkZXNjcmliZWQgaW4g dGhlICd3aGl0ZWxpc3QnIGZpZWxkIHNldCBkdXJpbmcgcmVnaXN0cmF0aW9uIHRpbWUgaXMgbm90 IGltcGFjdGVkIGluIGZ1dHVyZSBtaXRpZ2F0aW9uIHJlcXVlc3RzIGJ5IHRoZSBET1RTIGNsaWVu dC4iICBTb21lIGVxdWl2YWxlbnQgZm9yIGJsYWNrbGlzdC4gDQoNCj4gKDEyKSBXaGVuIGlzIHRo ZSBIZWFydGJlYXQgbWVzc2FnZSBzZW50DQo+IFtGcmFua106IEl0J3MgcGVyaW9kaWNhbGx5IHNl bnQgdG8gdGhlIHBlZXIgRE9UUyBhZ2VudHMgcmlnaHQgYWZ0ZXIgDQo+IHRoZSBET1RTIHJlZ2lz dHJhdGlvbiBwcm9jZXNzIGlzIGZpbmlzaGVkLCBhbmQgdGlsbCB0aGUgRE9UUyBjbGllbnQgDQo+ IGNhbmNlbHMgaXRzIHJlZ2lzdHJhdGlvbiB0byB0aGUgRE9UUyBzZXJ2ZXIuDQoNClVuZGVyc3Rv b2QuICBJIGRpZG4ndCBzZWUgdGhhdCBpbiB0aGUgdGV4dC4gIEhvdyBvZnRlbiBpcyBwZXJpb2Rp Y2FsbHk/DQoNCj4gKDE0KSBTZWN0aW9uIDUuMi4xLCBEU1RfSVAgaXMgdXNlZCBpbiB0aGUgZGVm aW5pdGlvbiBvZiBtdWx0aXBsZSANCj4gZmllbGRzIGJ1dCBpcyBub3QgZGVmaW5lZC4gIElzIHRo aXMgZmllbGQgdGhlIHNhbWUgYXMgZHN0X2lwIGZyb20gcGFja2V0X2hlYWRlcj8NCj4gW0ZyYW5r XTogaXQgc2hvdWxkIGJlIHRoZSBzYW1lLg0KDQpJIHJlY29tbWVuZCB1c2luZyBhIGNvbnNpc3Rl bnQgY2FzZS4NCg0KPiAoMTcpIFNlY3Rpb24gNS4yLjEsIGN1cnJlbnRfdGhyb3VnaHB1dHMsIFdo YXQgZG9lcyBpdCBtZWFuIHRvIGhhdmUgDQo+IG11bHRpcGxlIENTViBzZXBhcmF0ZWQgdmFsdWVz IGluIHRoaXMgZmllbGQ/DQo+IFtGcmFua106IGdvb2QgcXVlc3Rpb24uIFRoZSByZWFzb24gd2Ug dXNlIG11bHRpcGxlIENTViBpcyB0byBzZW5kIGEgDQo+IHNldCBvZiBhdHRhY2sgaW5mb3JtYXRp b24gaW4gb25lIERPVFMgbWl0aWdhdGlvbiByZXF1ZXN0IG1lc3NhZ2UsIGZvciANCj4gaW5jcmVh c2luZyB0aGUgZWZmaWNpZW5jeS4NCg0KV291bGQgdGhlcmUgYmUgdGltZXN0YW1wcyB3aXRoIHRo ZXNlIHJhdGVzPyAgQXNzdW1pbmcgdGhpcyB3YXMgYSBsZWdhbCBzeW50YXgsICIzLjUsIDU4LjMs IDQ4LjMiLCBob3cgd291bGQgdGhhdCBiZSBpbnRlcnByZXRlZD8NCg0KW3NuaXBdDQoNCj4gKDIw KSBTZWN0aW9uIDUuMi4xLCBoYXNoLCBJcyB0aGlzIGhhc2ggY2FsY3VsYXRlZCBvbiB0aGUgY29t cGxldGUgDQo+IHBheWxvYWQgb3IgdGhlIHRydW5jYXRlZCB2YWx1ZSBwZXIgdGhlIG9mZnNldCBm aWVsZD8NCj4gW0ZyYW5rXTogdGhlIHRydW5jYXRlZCBwYXJ0Lg0KDQpJIHJlY29tbWVuZCBleHBs aWNpdGx5IHN0YXRpbmcgdGhlIHRhcmdldCBvZiB0aGUgaGFzaCBhcyB5b3UgY2xhcmlmaWVkIGhl cmUuDQoNClJvbWFuDQo= From nobody Thu Jul 21 02:39:21 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 405C412DC0B for ; Thu, 21 Jul 2016 02:39:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C_wzCkVdzjgr for ; Thu, 21 Jul 2016 02:39:10 -0700 (PDT) Received: from shetland.sei.cmu.edu (shetland.sei.cmu.edu [192.58.107.44]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9FE7912D10B for ; Thu, 21 Jul 2016 02:39:10 -0700 (PDT) Received: from timber.sei.cmu.edu (timber.sei.cmu.edu [10.64.21.23]) by shetland.sei.cmu.edu (8.14.4/8.14.4/1543) with ESMTP id u6L9d9vf032305 for ; Thu, 21 Jul 2016 05:39:09 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cert.org; s=jthatj15xw2j; t=1469093949; bh=R9xugZEPrdmSp82DLuWhJk11Z+vIWY+7M8MvuO425GY=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version:Sender:Reply-To:Cc: In-Reply-To:References; b=N+GKFZnppeDLslRdg4+oochtb6R7yuGbLzcTKvh56xcxrUojvK3Ny6DI/zGqjAdLB Pmnv6vm+Z6bln/TfKi8LPfUN4PB/Qxk2Pq/ZAdu0eM8CEjwruJwi64Gmm423xjiGM+ oF3OR6qLW41DNmmDu88/daOS8aQZyvmNSduvgK4w= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by timber.sei.cmu.edu (8.14.4/8.14.4/1543) with ESMTP id u6L9d7GO024866 for ; Thu, 21 Jul 2016 05:39:07 -0400 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.03.0279.002; Thu, 21 Jul 2016 05:39:05 -0400 From: "Roman D. Danyliw" To: "dots@ietf.org" Thread-Topic: Alignment with architecture document Thread-Index: AdHishtQstvji5VhRRW6cZRJEraRiw== Date: Thu, 21 Jul 2016 09:39:04 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0104E1D534@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Dots] Alignment with architecture document X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jul 2016 09:39:12 -0000 Hello WG! Chair hat off ... In an attempt to validate the current thinking on the DOTS architecture, I = reviewed the four individual solutions drafts [2][3][4][5] currently discus= sed by the WG to see whether the messaging they describe aligned with the t= ext in the newly published (thanks Andrew, Flemming, Tiru, Chris and Rich) = WG architecture document [1]. I found: (1) The protocol drafts [2], [3] and [5] express their messaging in archite= cture terms described in [1]. Specifically: ** [2], [3] and [5] delineate that messages are sent by or to a DOTS server= , client or gateway/relay per Section 2.2 of [1] ** [2] defines signal and data channel communications; and [3] and [5] defi= ne signal channel communication per Figure 2 of [1] ** [5] references an older version of [1]; and [2] and [3] do not reference= [1]. (2) The protocol draft [4] does not express messaging in terms of the compo= nents (i.e., DOTS server, client or gateway) or interfaces (i.e., signal an= d data channels) described in [1]. The lack of alignment in [4] is the finding that is most interesting for me= . Does this draft [4] suggest we need new components or interfaces in the = architecture? New use cases? Regards, Roman=20 [1] draft-ietf-dots-architecture-00 [2] draft-reddy-dots-transport-05 [3] draft-francois-dots-ipv6-signal-option-00 [4] draft-fu-dots-ipfix-extension-01 [5] draft-nishizuka-dots-inter-domain-mechanism-01 From nobody Thu Jul 21 08:03:00 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 037C812D739 for ; Thu, 21 Jul 2016 08:02:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=verisign-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pmCcIlSnVUvJ for ; Thu, 21 Jul 2016 08:02:37 -0700 (PDT) Received: from mail-qt0-x261.google.com (mail-qt0-x261.google.com [IPv6:2607:f8b0:400d:c0d::261]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 519EA12D67B for ; Thu, 21 Jul 2016 08:02:36 -0700 (PDT) Received: by mail-qt0-x261.google.com with SMTP id w38so5437463qtb.2 for ; Thu, 21 Jul 2016 08:02:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=verisign-com.20150623.gappssmtp.com; s=20150623; h=from:to:subject:thread-topic:thread-index:date:message-id :accept-language:content-language:user-agent:content-id :content-transfer-encoding:mime-version; bh=N4NrjUl/TezRlBwsCarbbS6wGfJ97eBR6l5k6RVloqM=; b=nvomXmS+R+FScC9m2T5A0ScxiZNJaBDuzE7LXjXvvdBqA5DHH0hjKX2LnLiUT7I6Vb SEDa+IcbqK62m2SZP/vKabKjqc5jO2om+WcPw+6p2mKC1mNYh+SQwUxS1g320mOoGns1 XczIRDjl941ljkpOvO2OAV+CuZ74EH7Mx6r7+wC4bsRnYP2+lTuJ3Xd6qpsYRxNRdkgg U/b8YU829YrjYO1B/qPNCVUCB032gn1gHbCABGcK3RubCy1G+Wl3mVhLNESiX9mucuit wzjTpyuT2HddCZOZI6MeEEDTIw/4JWDqgM/xESM/aT4DYxtH2CYHySVPSAlo7vOO6rs6 svoA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:thread-topic:thread-index:date :message-id:accept-language:content-language:user-agent:content-id :content-transfer-encoding:mime-version; bh=N4NrjUl/TezRlBwsCarbbS6wGfJ97eBR6l5k6RVloqM=; b=N3Wj+pdKqodzTXBpuBitc7Mp8Ux+Vwtvvof/Fw2BAx46vnfXUkywWBKe0bRLtsAUBc Q79B9ObLcx4URnqJkZxm8U59TlGT7SgSkDjCzJXAt2v6IDcSVC6bTCDsnCne2oX4dDeF erktR6jxvSu0pzdfOwV08HR/njuwVVPVdQ24EpDLHNYpe4O/SkmK4Mc5zfrLkf2ELACh eH7h3/cwQ/NFV4Mba53zv+/dYhzG0gMiYggkFYqjZpZMLBaSxV1syf3Ek0Cb09gXE5rD W8Hp3rfAWJd6aO6Gt9S4ubPpUZLNHytMp/2WP5+yi400tUXgMVh0d0N1Wv8gtt3H8/6S XA4A== X-Gm-Message-State: ALyK8tKJeSjtMOVsiGdi60AcaE67BZ9LW3XkX7YQV73DKOGbupGzKZob67MS+dfsNc3XAI+M06vZOUYTDCHS0l6RhTuO+N5p X-Received: by 10.55.155.22 with SMTP id d22mr70782411qke.103.1469113355641; Thu, 21 Jul 2016 08:02:35 -0700 (PDT) Received: from brn1lxmailout02.verisign.com (brn1lxmailout02.verisign.com. [72.13.63.42]) by smtp-relay.gmail.com with ESMTPS id d141sm1321822qkc.1.2016.07.21.08.02.35 (version=TLS1 cipher=AES128-SHA bits=128/128); Thu, 21 Jul 2016 08:02:35 -0700 (PDT) X-Relaying-Domain: verisign.com Received: from brn1wnexcas01.vcorp.ad.vrsn.com (brn1wnexcas01 [10.173.152.205]) by brn1lxmailout02.verisign.com (8.13.8/8.13.8) with ESMTP id u6LF2ZLW023755 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 21 Jul 2016 11:02:35 -0400 Received: from BRN1WNEXMBX01.vcorp.ad.vrsn.com ([::1]) by brn1wnexcas01.vcorp.ad.vrsn.com ([::1]) with mapi id 14.03.0174.001; Thu, 21 Jul 2016 11:02:34 -0400 From: "Teague, Nik" To: "Roman D. Danyliw" , "dots@ietf.org" Thread-Topic: [Dots] Alignment with architecture document Thread-Index: AQHR42Dpstvji5VhRRW6cZRJEraRiw== Date: Thu, 21 Jul 2016 15:02:34 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/0.0.0.160212 x-originating-ip: [10.173.152.4] Content-Type: text/plain; charset="utf-8" Content-ID: <0D45DD8554D9E04F99FE59760B64C015@verisign.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] Alignment with architecture document X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jul 2016 15:02:44 -0000 T24gMjEvMDcvMjAxNiAxMDozOSwgIkRvdHMgb24gYmVoYWxmIG9mIFJvbWFuIEQuIERhbnlsaXci IDxkb3RzLWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIHJkZEBjZXJ0Lm9yZz4gd3JvdGU6 DQoNCg0KPigyKSBUaGUgcHJvdG9jb2wgZHJhZnQgWzRdIGRvZXMgbm90IGV4cHJlc3MgbWVzc2Fn aW5nIGluIHRlcm1zIG9mIHRoZSBjb21wb25lbnRzIChpLmUuLCBET1RTIHNlcnZlciwgY2xpZW50 IG9yIGdhdGV3YXkpIG9yIGludGVyZmFjZXMgKGkuZS4sIHNpZ25hbCBhbmQgZGF0YSBjaGFubmVs cykgZGVzY3JpYmVkIGluIFsxXS4NCj4NCj5UaGUgbGFjayBvZiBhbGlnbm1lbnQgaW4gWzRdIGlz IHRoZSBmaW5kaW5nIHRoYXQgaXMgbW9zdCBpbnRlcmVzdGluZyBmb3IgbWUuICBEb2VzIHRoaXMg ZHJhZnQgWzRdIHN1Z2dlc3Qgd2UgbmVlZCBuZXcgY29tcG9uZW50cyBvciBpbnRlcmZhY2VzIGlu IHRoZSBhcmNoaXRlY3R1cmU/IE5ldyB1c2UgY2FzZXM/DQoNCklNSE8gLSBObw0KDQpJ4oCZbSBz dHJ1Z2dsaW5nIHRvIHNlZSB0aGUgcmVsZXZhbmNlIGhlcmUgLSBBbmQgSeKAmWQgYmUgaGFwcHkg aWYgc29tZW9uZSBjb3VsZCBlbGFib3JhdGUgYW5kIGV4cGxhaW4gd2hhdCBpdCBpcyBJ4oCZbSBt aXNzaW5nLg0KDQpTbGlkZSAyIG9mIDxodHRwczovL3d3dy5pZXRmLm9yZy9wcm9jZWVkaW5ncy85 Ni9zbGlkZXMvc2xpZGVzLTk2LWRvdHMtMi5wZGY+IHNob3dzIHJvdXRlcnMgc2VuZGluZyBmbG93 IChJIHByZXN1bWUsIG1hcmtlZCBpbiByZWQpIHRvIGEgRE9UUyBjbGllbnQgYWxzbyBsYWJlbGVk IOKAmGZsb3cgYW5hbHlzaXPigJkgLSBJIGdldCB0aGF0IC0gd2hhdCBJIGRvbuKAmXQgdW5kZXJz dGFuZCBpcyB0aGUgZnVydGhlciByZWQgbGluZSBiZXR3ZWVuIHRoZSBET1RTIGNsaWVudCBhbmQg c2VydmVyIC0gd2h5IHdvdWxkIHRoZSBmbG93IGFuYWx5c2VyIHRoZW4gZm9yd2FyZCB0aGlzIHRv IHRoZSBjb250cm9sbGVyICh0aGUgRE9UUyBzZXJ2ZXIpPw0KDQpXb3VsZG7igJl0IHRoZSBET1RT IGNsaWVudCBqdXN0IHNwZWFrIERPVFMgdG8gdGhlIERPVFMgc2VydmVyIGZvciB0aG9zZSBwYXJ0 aWN1bGFyIHJlZCBsaW5lcz8NCg0KPg0KPlJlZ2FyZHMsDQo+Um9tYW4gDQo+DQo+WzFdIGRyYWZ0 LWlldGYtZG90cy1hcmNoaXRlY3R1cmUtMDANCj5bMl0gZHJhZnQtcmVkZHktZG90cy10cmFuc3Bv cnQtMDUNCj5bM10gZHJhZnQtZnJhbmNvaXMtZG90cy1pcHY2LXNpZ25hbC1vcHRpb24tMDANCj5b NF0gZHJhZnQtZnUtZG90cy1pcGZpeC1leHRlbnNpb24tMDENCj5bNV0gZHJhZnQtbmlzaGl6dWth LWRvdHMtaW50ZXItZG9tYWluLW1lY2hhbmlzbS0wMQ0K From nobody Thu Jul 21 23:52:18 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7450A12B04B for ; Thu, 21 Jul 2016 23:52:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.189 X-Spam-Level: X-Spam-Status: No, score=-3.189 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.287, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jdiKAYP_YmCJ for ; Thu, 21 Jul 2016 23:52:14 -0700 (PDT) Received: from guri.nttv6.jp (guri.nttv6.jp [IPv6:2402:c800:ff06:a::4]) by ietfa.amsl.com (Postfix) with ESMTP id E05D512B03D for ; Thu, 21 Jul 2016 23:52:13 -0700 (PDT) Received: from z.nttv6.jp (z.nttv6.jp [192.168.8.15]) by guri.nttv6.jp (NTTv6MTA) with ESMTP id 70B774E66D; Fri, 22 Jul 2016 15:52:10 +0900 (JST) Received: from SR2-nishizuka.local (fujiko.nttv6.jp [IPv6:2402:c800:ff06:136::141]) by z.nttv6.jp (NTTv6MTA) with ESMTP id 77FCE3AC80; Fri, 22 Jul 2016 15:52:09 +0900 (JST) To: "Tirumaleswar Reddy (tireddy)" , "dots@ietf.org" References: <20160706073427.7900.59549.idtracker@ietfa.amsl.com> <50de5af611944788898536433cc1dfbd@XCH-RCD-017.cisco.com> From: kaname nishizuka Message-ID: Date: Fri, 22 Jul 2016 08:52:08 +0200 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 In-Reply-To: <50de5af611944788898536433cc1dfbd@XCH-RCD-017.cisco.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [Dots] FW: New Version Notification for draft-reddy-dots-transport-05.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jul 2016 06:52:17 -0000 Hi Tiru, I have a comment on section 6. DOTS Data Channel. * Data channel is for bulk data exchanges * Rough Consensus @ Design Team Meeting: Data channel is for pre-provisioning I think we need 2 types of filtering. 1. filtering which limit the scope of mitigation * example - if an organization have other sites from which only legitimate traffic in coming and is afraid of false positive, the sites should be treated as a exception of mitigation with white-list. - if a service is working only on port 80, traffic destined to other port can be dropped without any consideration. * this type of filtering may be installed in pre-provisioning phase (on data channel) - can be changed even while it is under attack Also there should be a limitation on a request * requests from DOTS clients should be limited - request for blocking, rate-limiting, etc.. can be another attack vector if the request is spoofed. - limitation on possible range of target (=IP addresses/prefixes) should be pre-defined per customer basis. - installed in pre-provisioning phase (on data channel) [note]:this filtering is required without regard to protection methods 2. filtering instruction for mitigation * filtering of traffic is one of protection methods taken by mitigators * DOTS client can request filtering of traffic with desired action (blocking, rate-limiting...) * instructed while it is under attack (on signaling channel) Data model of Filtering Rules described in section 6 (DOTS Data Channel) looks like type 2 of filtering. So I think it looks like for signaling channel. best regards, kaname nishizuka On 2016/07/06 9:46, Tirumaleswar Reddy (tireddy) wrote: > Added new section https://tools.ietf.org/html/draft-reddy-dots-transport-05#section-8 to discuss about mutual authentication of DOTS Agents & authorization of DOTS clients. Comments and suggestions are welcome. > > Cheers, > -Tiru > > -----Original Message----- > From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] > Sent: Wednesday, July 06, 2016 1:04 PM > To: Prashanth Patil (praspati); Dan Wing (dwing); Mike Geller (mgeller); Robert Moskowitz; Mohamed Boucadair; Tirumaleswar Reddy (tireddy) > Subject: New Version Notification for draft-reddy-dots-transport-05.txt > > > A new version of I-D, draft-reddy-dots-transport-05.txt > has been successfully submitted by Tirumaleswar Reddy and posted to the > IETF repository. > > Name: draft-reddy-dots-transport > Revision: 05 > Title: Co-operative DDoS Mitigation > Document date: 2016-07-06 > Group: Individual Submission > Pages: 26 > URL: https://www.ietf.org/internet-drafts/draft-reddy-dots-transport-05.txt > Status: https://datatracker.ietf.org/doc/draft-reddy-dots-transport/ > Htmlized: https://tools.ietf.org/html/draft-reddy-dots-transport-05 > Diff: https://www.ietf.org/rfcdiff?url2=draft-reddy-dots-transport-05 > > Abstract: > This document specifies a mechanism that a DOTS client can use to > signal that a network is under a Distributed Denial-of-Service (DDoS) > attack to an upstream DOTS server so that appropriate mitigation > actions are undertaken (including, blackhole, drop, rate-limit, or > add to watch list) on the suspect traffic. The document specifies > both DOTS signal and data channels. Happy Eyeballs considerations > for the DOTS signal channel are also elaborated. > > > > > Please note that it may take a couple of minutes from the time of submission > until the htmlized version and diff are available at tools.ietf.org. > > The IETF Secretariat > > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots From nobody Fri Jul 22 05:45:28 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B21A12DA40 for ; Fri, 22 Jul 2016 05:45:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=verisign-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mdy0jf_gzSJX for ; Fri, 22 Jul 2016 05:45:25 -0700 (PDT) Received: from mail-qt0-x262.google.com (mail-qt0-x262.google.com [IPv6:2607:f8b0:400d:c0d::262]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5936212DA37 for ; Fri, 22 Jul 2016 05:45:25 -0700 (PDT) Received: by mail-qt0-x262.google.com with SMTP id s39so7266552qtb.0 for ; Fri, 22 Jul 2016 05:45:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=verisign-com.20150623.gappssmtp.com; s=20150623; h=from:to:subject:thread-topic:thread-index:date:message-id :accept-language:content-language:user-agent:content-id :content-transfer-encoding:mime-version; bh=y/5a9xlYBwZSx//QQekk6iJs6BEFYj6WObeSXONpmGY=; b=FcaYWYoxRj0sRUAGraJ6Xk5FrKriFD+81Ss+VQEi5ZWcJgRllxaKv6J4zn2lZjpXH3 5K357WQA24Jpj3F/mcKJYnBlBzFoD5OtUoSlY0x+jQ8kC3g8+eO1nkGKnMrgyExv05eC UFCPKsgJGYu6W/kKf6g8UJ0YEj0Xta8WffVxlTopEXC5lUlCh0MXY/xDLGC0PzsEvic8 +/i28z77OZDzMHyY0VMeqmhnwADCvs0rqOUmZ721ip4GXH0AXQAgIz+tmGuuZy2cb2Tx plpVCqCF2T+/TlKZTzYtVU6sJV9NK9fmUxS0ty5Xv1l3vvdahShtmbF7aoHoYK6vhmFm 7O3Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:thread-topic:thread-index:date :message-id:accept-language:content-language:user-agent:content-id :content-transfer-encoding:mime-version; bh=y/5a9xlYBwZSx//QQekk6iJs6BEFYj6WObeSXONpmGY=; b=dBkiHFZt7KGTybgpR+iQsomWHCV2MN5Xlt1wBUYFQ2Nef/y+CWmDEMOgzT3rI9Lq0a I58pfGlVoNFBQspSyVyJbjlgqKuLYCDP/5l/fBxXM/K/npNmkiy2VNVnu6C8br+2ID83 9icPG/Dg5MG11/PQP0Km191r8flZqbPrt+nSWARMXvz3DaPYqPxKfyZQ6ggFNXupREOQ P8DIbm40UgbSQNtEASmbLRKwydYHK6ULSjwnfFl70Gayb72CRC/S6Brqhf5rdT45pTpL /tSkwT4cc9h/5rS2VknL9dYbcffTTc7FWklzznv/ehb1M4B+0akdrq9U7yC44gZtUrtr reIg== X-Gm-Message-State: AEkooutT168xfLR0i9CL0C9u472kuuPW/BVuyDx6NejwYG3T0zMOv0H2KqfihUenvPSjOK4MIDgchDI3S5D1/v42vE6FZIDn X-Received: by 10.55.88.68 with SMTP id m65mr4261192qkb.205.1469191524435; Fri, 22 Jul 2016 05:45:24 -0700 (PDT) Received: from brn1lxmailout01.verisign.com (brn1lxmailout01.verisign.com. [72.13.63.41]) by smtp-relay.gmail.com with ESMTPS id t64sm1804144qkd.6.2016.07.22.05.45.24 for (version=TLS1 cipher=AES128-SHA bits=128/128); Fri, 22 Jul 2016 05:45:24 -0700 (PDT) X-Relaying-Domain: verisign.com Received: from brn1wnexcas01.vcorp.ad.vrsn.com (brn1wnexcas01 [10.173.152.205]) by brn1lxmailout01.verisign.com (8.13.8/8.13.8) with ESMTP id u6MCjN9Z006797 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Fri, 22 Jul 2016 08:45:23 -0400 Received: from BRN1WNEXMBX01.vcorp.ad.vrsn.com ([::1]) by brn1wnexcas01.vcorp.ad.vrsn.com ([::1]) with mapi id 14.03.0174.001; Fri, 22 Jul 2016 08:45:22 -0400 From: "Teague, Nik" To: "dots@ietf.org" Thread-Topic: Implementors meeting minutes or summary? Thread-Index: AQHR5BboToZRJznDtUWuFvS+8kgIkg== Date: Fri, 22 Jul 2016 12:45:21 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/0.0.0.160212 x-originating-ip: [10.173.152.4] Content-Type: text/plain; charset="utf-8" Content-ID: <8B5CF906B4A7624C8AA92767F6F2F35F@verisign.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: [Dots] Implementors meeting minutes or summary? X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jul 2016 12:45:27 -0000 Q2hhaXJzLA0KDQpJIHdhcyB1bmFibGUgdG8gYXR0ZW5kIHRoZSBXZWRuZXNkYXkgbWVldGluZyAt IGFyZSB0aGVyZSBhbnkgbWludXRlcywgbm90ZXMgb3IgYSBzdW1tYXJ5IGF2YWlsYWJsZSBmb3Ig V0cgcmV2aWV3L2Rpc2N1c3Npb24/DQoNClRoYW5rcywNCg0KLU5paw0K From nobody Thu Jul 28 10:48:23 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91A6012DA9D for ; Thu, 28 Jul 2016 10:48:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UpRmFie09nUn for ; Thu, 28 Jul 2016 10:48:18 -0700 (PDT) Received: from shetland.sei.cmu.edu (shetland.sei.cmu.edu [192.58.107.44]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 675CC12D53A for ; Thu, 28 Jul 2016 10:48:18 -0700 (PDT) Received: from pawpaw.sei.cmu.edu (pawpaw.sei.cmu.edu [10.64.21.22]) by shetland.sei.cmu.edu (8.14.4/8.14.4/1543) with ESMTP id u6SHmH0h010131 for ; Thu, 28 Jul 2016 13:48:17 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cert.org; s=jthatj15xw2j; t=1469728097; bh=7XuT39MHloXdo6n/qM4Ht7pfd9pFuzJxfIfp8rXraYo=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version:Sender:Reply-To:Cc: In-Reply-To:References; b=ZDYz0bAssKRwn6Gl0L03U0MC9Gfs9cMoP00TqeR79/QE5cWpgToMvuMUt9mC1J7+r 81EEqxr+YOIcJY1TbC2m8yk/BYQYW4bm2IwXEPt0vdxZBQU0ZpW3AsWBalxMo3dY5z tune9ENxVQUcMcCEmPVr7cbCOptaf+HEQTXc3XaU= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by pawpaw.sei.cmu.edu (8.14.4/8.14.4/1543) with ESMTP id u6SHmGJV009637 for ; Thu, 28 Jul 2016 13:48:16 -0400 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.03.0279.002; Thu, 28 Jul 2016 13:48:15 -0400 From: "Roman D. Danyliw" To: "dots@ietf.org" Thread-Topic: Virtual Interim Meeting in September 2016 Scheduling Poll Thread-Index: AdHo9sF52TGkJHaFR3ilMCST8ZBM0A== Date: Thu, 28 Jul 2016 17:48:14 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0104E223C4@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Dots] Virtual Interim Meeting in September 2016 Scheduling Poll X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Jul 2016 17:48:22 -0000 Hello WG! Approximately half-way between the recent Berlin meeting and the next in-pe= rson IETF meeting in Seoul, we'll be having a virtual interim meeting. Hel= p suggest the best day during the week of September 26th by completing a Do= odle poll -- http://doodle.com/poll/wnrm3szg5qh9z5vf Your input would be appreciated by Monday, August 8, 2016. Regards, Roman