From vishwas.ietf@gmail.com Mon Feb 4 16:16:01 2013 Return-Path: X-Original-To: ipsec@ietfa.amsl.com Delivered-To: ipsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F3EBE21F8B61 for ; Mon, 4 Feb 2013 16:16:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.56 X-Spam-Level: X-Spam-Status: No, score=-1.56 tagged_above=-999 required=5 tests=[AWL=-0.828, BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_13=0.6, J_CHICKENPOX_14=0.6, RCVD_IN_DNSWL_LOW=-1, SARE_HTML_USL_OBFU=1.666] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y24nAPgm5ybz for ; Mon, 4 Feb 2013 16:15:59 -0800 (PST) Received: from mail-qe0-f47.google.com (mail-qe0-f47.google.com [209.85.128.47]) by ietfa.amsl.com (Postfix) with ESMTP id CD62D21F8B58 for ; Mon, 4 Feb 2013 16:15:58 -0800 (PST) Received: by mail-qe0-f47.google.com with SMTP id 2so3164747qea.34 for ; Mon, 04 Feb 2013 16:15:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:cc:content-type; bh=jvoQBKLSZuaY2o2pEbaReXhi/G5gacj8Y0Q4Pq231Qk=; b=dsJMHCNJ/A0KyTzWOzF/qq5VxT/WuqTLk4vaLvx+8zvzcUiWI0hu+uzq5wL3ukxUTM ngLH93hpui9BqTArdU33w/WGn0Tu9H/gR32DI1+vpt0F4Q0/ZoEypkGODiaYRfMfs5Es C6ecfjc65bJzGwc2zBLcdHbcEsynlRoU60zvVJtRTHwWwkC0XibqBRmmCj6LJ7ew/tZM yDO/Ll5ZZ+EClRLKX093zrCsRyUlTLOG/dWqbrk5Cood+H/j7t8gaPAlSfUIjAZqNeuG INzmG2gfpb6Vh0FifoNnSj9MAOv6CJcvveUijsdCg0SPU33MH5j32NWVLyvgadhKF1fo r4Cg== MIME-Version: 1.0 X-Received: by 10.229.204.212 with SMTP id fn20mr2041644qcb.52.1360023358218; Mon, 04 Feb 2013 16:15:58 -0800 (PST) Received: by 10.229.92.77 with HTTP; Mon, 4 Feb 2013 16:15:58 -0800 (PST) In-Reply-To: References: <50ED7C03.7090303@ieca.com> Date: Mon, 4 Feb 2013 16:15:58 -0800 Message-ID: From: Vishwas Manral To: Sean Turner Content-Type: multipart/mixed; boundary=0050450165d927212304d4ef1da6 Cc: ipsec@ietf.org, draft-ietf-ipsecme-ad-vpn-problem@tools.ietf.org Subject: Re: [IPsec] AD review of draft-ietf-ipsecme-ad-vpn-problem X-BeenThere: ipsec@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion of IPsec protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Feb 2013 00:16:01 -0000 --0050450165d927212304d4ef1da6 Content-Type: multipart/alternative; boundary=0050450165d927211e04d4ef1da4 --0050450165d927211e04d4ef1da4 Content-Type: text/plain; charset=ISO-8859-1 Hi Sean, Here is the interim document with your comments incorporated. I will try to find which of Tero's comments are missed out and will try to fix them soon. Thanks, Vishwas On Tue, Jan 29, 2013 at 11:47 AM, Vishwas Manral wrote: > Hi Sean, > > I realized I missed this email. I will work on this draft this week and > next. > > Thanks, > Vishwas > On Wed, Jan 9, 2013 at 6:17 AM, Sean Turner wrote: > >> These are pretty much just nits. Please address Tero's comments as well. >> >> 1. We charter WGs and I'm going to go with the thought that it will >> succeed ;) >> >> a: r/is chartered to/will >> >> 2. s1.1: Hub definition. >> >> Verb choice: >> >> r/there is no devices/there are no devices >> >> 3. s1.1.: Spoke definition: >> >> Extra the: >> >> r/in the a star/in a star >> >> Need some ses: >> >> r/it encrypt data coming from cleartext device >> /it encrypts data coming from cleartext devices >> >> 4. s2: Use administrative domain in s1 but organization here. Is >> consistency needed? >> >> Not sure what you'd think about this, but what do you think about not >> using lowercase 2119 words in any of the s2 subsections? Reviewers should >> be able to piece together that this is the use case section and not the >> requirements section and therefore there shouldn't be any 2119 language >> here - but they don't always. To be clear, I'm not hard over on this. >> >> r/must use/need >> r/must/need to >> r/should/ought to >> >> 5. s2.1: >> >> Can you remove direct from "direct, point-to-point"? Isn't direct in the >> definition? >> >> Shouldn't "hub and spoke topology" be "star topology"? "hub and spoke >> topology" isn't defined in s1.1. >> >> I think you might need an "a" to match the previous sentence: >> >> r/Such use case/Such a use case ? >> >> r/expose them/expose themselves >> >> 6. s2.2: >> >> An extra the: >> >> r/for the voice and other/for voice and other >> >> Nit picking here but I think this is clearer: >> >> r/endpoints are administrated by separate management domains >> /endpoints are in different administrative domains >> >> Please expand: L3VPNs and GRE. >> >> 7. s4.1: >> >> r/firewall, NAT box/firewalls, NAT boxes >> >> 8. Req 10 + 11: Is the requirement driver under 11 for both 10 and 11? If >> so then it should be "These requirements". If you're going to do this >> couldn't you just group 10-14 as they're the same driver for all 5? Or, is >> the driver under 10 missing? >> >> 9 s5: To match the title: >> >> r/Problem state and requirement/problem statement and requirements >> >> 10. General: Sometimes it's ADVPN and other times it's AD VPN. >> >> 11. Allied and federated environments should be defined in the >> terminology section or at least introduced earlier in the draft. >> >> spt >> ______________________________**_________________ >> IPsec mailing list >> IPsec@ietf.org >> https://www.ietf.org/mailman/**listinfo/ipsec >> > > --0050450165d927211e04d4ef1da4 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
Hi Sean,
=A0
Here is the interim document with you= r comments incorporated.
=A0
I will try to find which = of Tero's comments are missed out and will try to fix them soon.
<= div> =A0
Thanks,
Vishwas
On = Tue, Jan 29, 2013 at 11:47 AM, Vishwas Manral <vishwas.ietf@gmail.com= > wrote:
Hi Sean,
=A0
I realized I missed = this email. I will work on this draft this week and next.
=A0
Thanks,
Vishwas
On Wed, Jan 9, 2013 at 6:17 A= M, Sean Turner <turners@ieca.com> wrote:
These are pretty much just nits. =A0Please address Tero= 9;s comments as well.

1. We charter WGs and I'm going to go with the thought that it will suc= ceed ;)

a: r/is chartered to/will

2. s1.1: Hub definition.

Verb choice:

r/there is no devices/there are no devices

3. s1.1.: Spoke definition:

Extra the:

r/in the a star/in a star

Need some ses:

r/it encrypt data coming from cleartext device
=A0/it encrypts data coming from cleartext devices

4. s2: Use administrative domain in s1 but organization here. =A0Is consist= ency needed?

Not sure what you'd think about this, but what do you think about not u= sing lowercase 2119 words in any of the s2 subsections? =A0Reviewers should= be able to piece together that this is the use case section and not the re= quirements section and therefore there shouldn't be any 2119 language h= ere - but they don't always. =A0To be clear, I'm not hard over on t= his.

r/must use/need
r/must/need to
r/should/ought to

5. s2.1:

Can you remove direct from "direct, point-to-point"? =A0Isn't= direct in the definition?

Shouldn't "hub and spoke topology" be "star topology&quo= t;? =A0"hub and spoke topology" isn't defined in s1.1.

I think you might need an "a" to match the previous sentence:

r/Such use case/Such a use case ?

r/expose them/expose themselves

6. s2.2:

An extra the:

r/for the voice and other/for voice and other

Nit picking here but I think this is clearer:

r/endpoints are administrated by separate management domains
=A0/endpoints are in different administrative domains

Please expand: L3VPNs and GRE.

7. s4.1:

r/firewall, NAT box/firewalls, NAT boxes

8. Req 10 + 11: Is the requirement driver under 11 for both 10 and 11? If s= o then it should be "These requirements". =A0If you're going = to do this couldn't you just group 10-14 as they're the same driver= for all 5? Or, is the driver under 10 missing?

9 s5: To match the title:

r/Problem state and requirement/problem statement and requirements

10. General: Sometimes it's ADVPN and other times it's AD VPN.

11. Allied and federated environments should be defined in the terminology = section or at least introduced earlier in the draft.

spt
_______________________________________________
IPsec mailing list
IPsec@ietf.org
h= ttps://www.ietf.org/mailman/listinfo/ipsec


--0050450165d927211e04d4ef1da4-- --0050450165d927212304d4ef1da6 Content-Type: text/plain; charset=US-ASCII; name="draft-ietf-ipsecme-ad-vpn-problem-04.txt" Content-Disposition: attachment; filename="draft-ietf-ipsecme-ad-vpn-problem-04.txt" Content-Transfer-Encoding: base64 X-Attachment-Id: f_hcsapzjq0 DQoNCklQc2VjTUUgV29ya2luZyBHcm91cCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBTLiBIYW5uYQ0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBKdW5pcGVyDQpJbnRlbmRlZCBzdGF0dXM6IElu Zm9ybWF0aW9uYWwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBWLiBNYW5yYWwNCkV4 cGlyZXM6IEF1Z3VzdCA5LCAyMDEzICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBIUA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBGZWJydWFyeSA1LCAyMDEzDQoNCg0KICAgICAgICAgQXV0byBEaXNjb3Zl cnkgVlBOIFByb2JsZW0gU3RhdGVtZW50IGFuZCBSZXF1aXJlbWVudHMNCiAgICAgICAgICAgICAg ICAgIGRyYWZ0LWlldGYtaXBzZWNtZS1hZC12cG4tcHJvYmxlbS0wNA0KDQpBYnN0cmFjdA0KDQog ICBUaGlzIGRvY3VtZW50IGRlc2NyaWJlcyB0aGUgcHJvYmxlbSBvZiBlbmFibGluZyBhIGxhcmdl IG51bWJlciBvZg0KICAgc3lzdGVtcyB0byBjb21tdW5pY2F0ZSBkaXJlY3RseSB1c2luZyBJUHNl YyB0byBwcm90ZWN0IHRoZSB0cmFmZmljDQogICBiZXR3ZWVuIHRoZW0uICBJdCB0aGVuIGV4cGFu ZHMgb24gdGhlIHJlcXVpcmVtZW50cywgZm9yIHN1Y2ggYQ0KICAgc29sdXRpb24uDQoNCiAgIE1h bnVhbCBjb25maWd1cmF0aW9uIG9mIGFsbCBwb3NzaWJsZSB0dW5uZWxzIGlzIHRvbyBjdW1iZXJz b21lIGluDQogICBtYW55IHN1Y2ggY2FzZXMuICBJbiBvdGhlciBjYXNlcyB0aGUgSVAgYWRkcmVz cyBvZiBlbmRwb2ludHMgY2hhbmdlDQogICBvciB0aGUgZW5kcG9pbnRzIG1heSBiZSBiZWhpbmQg TkFUIGdhdGV3YXlzLCBtYWtpbmcgc3RhdGljDQogICBjb25maWd1cmF0aW9uIGltcG9zc2libGUu ICBUaGUgQXV0byBEaXNjb3ZlcnkgVlBOIHNvbHV0aW9uIHdpbGwNCiAgIGFkZHJlc3MgdGhlc2Ug cmVxdWlyZW1lbnRzLg0KDQpTdGF0dXMgb2YgdGhpcyBNZW1vDQoNCiAgIFRoaXMgSW50ZXJuZXQt RHJhZnQgaXMgc3VibWl0dGVkIGluIGZ1bGwgY29uZm9ybWFuY2Ugd2l0aCB0aGUNCiAgIHByb3Zp c2lvbnMgb2YgQkNQIDc4IGFuZCBCQ1AgNzkuDQoNCiAgIEludGVybmV0LURyYWZ0cyBhcmUgd29y a2luZyBkb2N1bWVudHMgb2YgdGhlIEludGVybmV0IEVuZ2luZWVyaW5nDQogICBUYXNrIEZvcmNl IChJRVRGKS4gIE5vdGUgdGhhdCBvdGhlciBncm91cHMgbWF5IGFsc28gZGlzdHJpYnV0ZQ0KICAg d29ya2luZyBkb2N1bWVudHMgYXMgSW50ZXJuZXQtRHJhZnRzLiAgVGhlIGxpc3Qgb2YgY3VycmVu dCBJbnRlcm5ldC0NCiAgIERyYWZ0cyBpcyBhdCBodHRwOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZHJhZnRzL2N1cnJlbnQvLg0KDQogICBJbnRlcm5ldC1EcmFmdHMgYXJlIGRyYWZ0IGRvY3VtZW50 cyB2YWxpZCBmb3IgYSBtYXhpbXVtIG9mIHNpeCBtb250aHMNCiAgIGFuZCBtYXkgYmUgdXBkYXRl ZCwgcmVwbGFjZWQsIG9yIG9ic29sZXRlZCBieSBvdGhlciBkb2N1bWVudHMgYXQgYW55DQogICB0 aW1lLiAgSXQgaXMgaW5hcHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJlZmVy ZW5jZQ0KICAgbWF0ZXJpYWwgb3IgdG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4g cHJvZ3Jlc3MuIg0KDQogICBUaGlzIEludGVybmV0LURyYWZ0IHdpbGwgZXhwaXJlIG9uIEF1Z3Vz dCA5LCAyMDEzLg0KDQpDb3B5cmlnaHQgTm90aWNlDQoNCiAgIENvcHlyaWdodCAoYykgMjAxMyBJ RVRGIFRydXN0IGFuZCB0aGUgcGVyc29ucyBpZGVudGlmaWVkIGFzIHRoZQ0KICAgZG9jdW1lbnQg YXV0aG9ycy4gIEFsbCByaWdodHMgcmVzZXJ2ZWQuDQoNCiAgIFRoaXMgZG9jdW1lbnQgaXMgc3Vi amVjdCB0byBCQ1AgNzggYW5kIHRoZSBJRVRGIFRydXN0J3MgTGVnYWwNCiAgIFByb3Zpc2lvbnMg UmVsYXRpbmcgdG8gSUVURiBEb2N1bWVudHMNCiAgIChodHRwOi8vdHJ1c3RlZS5pZXRmLm9yZy9s aWNlbnNlLWluZm8pIGluIGVmZmVjdCBvbiB0aGUgZGF0ZSBvZg0KDQoNCg0KSGFubmEgJiBNYW5y YWwgICAgICAgICAgIEV4cGlyZXMgQXVndXN0IDksIDIwMTMgICAgICAgICAgICAgICAgIFtQYWdl IDFdDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgIEF1dG8gRGlzY292ZXJ5IFZQTiAgICAg ICAgICAgICAgRmVicnVhcnkgMjAxMw0KDQoNCiAgIHB1YmxpY2F0aW9uIG9mIHRoaXMgZG9jdW1l bnQuICBQbGVhc2UgcmV2aWV3IHRoZXNlIGRvY3VtZW50cw0KICAgY2FyZWZ1bGx5LCBhcyB0aGV5 IGRlc2NyaWJlIHlvdXIgcmlnaHRzIGFuZCByZXN0cmljdGlvbnMgd2l0aCByZXNwZWN0DQogICB0 byB0aGlzIGRvY3VtZW50LiAgQ29kZSBDb21wb25lbnRzIGV4dHJhY3RlZCBmcm9tIHRoaXMgZG9j dW1lbnQgbXVzdA0KICAgaW5jbHVkZSBTaW1wbGlmaWVkIEJTRCBMaWNlbnNlIHRleHQgYXMgZGVz Y3JpYmVkIGluIFNlY3Rpb24gNC5lIG9mDQogICB0aGUgVHJ1c3QgTGVnYWwgUHJvdmlzaW9ucyBh bmQgYXJlIHByb3ZpZGVkIHdpdGhvdXQgd2FycmFudHkgYXMNCiAgIGRlc2NyaWJlZCBpbiB0aGUg U2ltcGxpZmllZCBCU0QgTGljZW5zZS4NCg0KDQpUYWJsZSBvZiBDb250ZW50cw0KDQogICAxLiAg SW50cm9kdWN0aW9uIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gIDMNCiAgICAgMS4xLiAgVGVybWlub2xvZ3kgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMw0KICAgICAxLjIuICBDb252ZW50aW9ucyBVc2VkIGlu IFRoaXMgRG9jdW1lbnQgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA0DQogICAyLiAgVXNlIENh c2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g IDUNCiAgICAgMi4xLiAgRW5kcG9pbnQtdG8tRW5kcG9pbnQgQURWUE4gVXNlIENhc2UgIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAgNQ0KICAgICAyLjIuICBHYXRld2F5LXRvLUdhdGV3YXkgQURWUE4g VXNlIENhc2UgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA1DQogICAgIDIuMy4gIEVuZHBvaW50 LXRvLUdhdGV3YXkgQURWUE4gVXNlIENhc2UgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDYNCiAg IDMuICBJbmFkZXF1YWN5IG9mIEV4aXN0aW5nIFNvbHV0aW9ucyAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAgNw0KICAgICAzLjEuICBFeGhhdXN0aXZlIENvbmZpZ3VyYXRpb24gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA3DQogICAgIDMuMi4gIFN0YXIgVG9wb2xvZ3kg IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDcNCiAgICAgMy4z LiAgUHJvcHJpZXRhcnkgQXBwcm9hY2hlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAgOA0KICAgNC4gIFJlcXVpcmVtZW50cyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuICA5DQogICAgIDQuMS4gIEdhdGV3YXkgYW5kIEVuZHBvaW50 IFJlcXVpcmVtZW50cyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDkNCiAgIDUuICBTZWN1cml0 eSBDb25zaWRlcmF0aW9ucyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAx Mg0KICAgNi4gIElBTkEgQ29uc2lkZXJhdGlvbnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIDEzDQogICA3LiAgQWNrbm93bGVkZ2VtZW50cyAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTQNCiAgIDguICBOb3JtYXRpdmUgUmVm ZXJlbmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxNQ0KICAg QXV0aG9ycycgQWRkcmVzc2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIDE2DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KSGFubmEgJiBNYW5yYWwgICAgICAgICAgIEV4cGlyZXMgQXVndXN0IDksIDIwMTMgICAgICAg ICAgICAgICAgIFtQYWdlIDJdDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgIEF1dG8gRGlz Y292ZXJ5IFZQTiAgICAgICAgICAgICAgRmVicnVhcnkgMjAxMw0KDQoNCjEuICBJbnRyb2R1Y3Rp b24NCg0KICAgSVBzZWMgW1JGQzQzMDFdIGlzIHVzZWQgaW4gc2V2ZXJhbCBkaWZmZXJlbnQgY2Fz ZXMsIGluY2x1ZGluZyB0dW5uZWwtDQogICBtb2RlIHNpdGUtdG8tc2l0ZSBWUE5zIGFuZCBSZW1v dGUgQWNjZXNzIFZQTnMuICBIb3N0IHRvIGhvc3QNCiAgIGNvbW11bmljYXRpb24gZW1wbG95aW5n IHRyYW5zcG9ydCBtb2RlIGFsc28gZXhpc3RzLCBidXQgaXMgZmFyIGxlc3MNCiAgIGNvbW1vbmx5 IGRlcGxveWVkLg0KDQogICBUaGUgc3ViamVjdCBvZiB0aGlzIGRvY3VtZW50IGlzIHRoZSBwcm9i bGVtIHByZXNlbnRlZCBieSBsYXJnZSBzY2FsZQ0KICAgZGVwbG95bWVudHMgb2YgSVBzZWMgYW5k IHRoZSByZXF1aXJlbWVudHMgb24gYSBzb2x1dGlvbiB0byBhZGRyZXNzDQogICB0aGUgcHJvYmxl bS4gIFRoZXNlIG1heSBiZSBhIGxhcmdlIGNvbGxlY3Rpb24gb2YgVlBOIGdhdGV3YXlzDQogICBj b25uZWN0aW5nIHZhcmlvdXMgc2l0ZXMsIGEgbGFyZ2UgbnVtYmVyIG9mIHJlbW90ZSBlbmRwb2lu dHMNCiAgIGNvbm5lY3RpbmcgdG8gYSBudW1iZXIgb2YgZ2F0ZXdheXMgb3IgdG8gZWFjaCBvdGhl ciwgb3IgYSBtaXggb2YgdGhlDQogICB0d28uICBUaGUgZ2F0ZXdheXMgYW5kIGVuZHBvaW50cyBt YXkgYmVsb25nIHRvIGEgc2luZ2xlDQogICBhZG1pbmlzdHJhdGl2ZSBkb21haW4gb3Igc2V2ZXJh bCBkb21haW5zIHdpdGggYSB0cnVzdCByZWxhdGlvbnNoaXAuDQoNCiAgIFNlY3Rpb24gNC40IG9m IFJGQyA0MzAxIGRlc2NyaWJlcyB0aGUgbWFqb3IgSVBzZWMgZGF0YWJhc2VzIG5lZWRlZA0KICAg Zm9yIElQc2VjIHByb2Nlc3NpbmcuICBJdCByZXF1aXJlcyBhbiBleHRlbnNpdmUgY29uZmlndXJh dGlvbiBmb3INCiAgIGVhY2ggdHVubmVsLCBzbyBtYW51YWxseSBjb25maWd1cmluZyBhIHN5c3Rl bSBvZiBtYW55IGdhdGV3YXlzIGFuZA0KICAgZW5kcG9pbnRzIGJlY29tZXMgaW5mZWFzaWJsZSBh bmQgaW5mbGV4aWJsZS4NCg0KICAgVGhlIGRpZmZpY3VsdHkgaXMgdGhhdCBhbGwgdGhlIGNvbmZp Z3VyYXRpb24gbWVudGlvbmVkIGluIFJGQyA0MzAxIGlzDQogICBub3Qgc3VwZXJmbHVvdXMuICBJ S0UgaW1wbGVtZW50YXRpb25zIG5lZWQgdG8ga25vdyB0aGUgaWRlbnRpdHkgYW5kDQogICBjcmVk ZW50aWFscyBvZiBhbGwgcG9zc2libGUgcGVlciBzeXN0ZW1zLCBhcyB3ZWxsIGFzIHRoZSBhZGRy ZXNzZXMgb2YNCiAgIGhvc3RzIGFuZC9vciBuZXR3b3JrcyBiZWhpbmQgdGhlbS4gIEEgc2ltcGxp ZmllZCBtZWNoYW5pc20gZm9yDQogICBkeW5hbWljYWxseSBlc3RhYmxpc2hpbmcgcG9pbnQtdG8t cG9pbnQgdHVubmVscyBpcyBuZWVkZWQuICBTZWN0aW9uIDINCiAgIGNvbnRhaW5zIHNldmVyYWwg dXNlIGNhc2VzIHRoYXQgbW90aXZhdGUgdGhpcyBlZmZvcnQuDQoNCjEuMS4gIFRlcm1pbm9sb2d5 DQoNCiAgIEVuZHBvaW50IC0gQSBkZXZpY2UgdGhhdCBpbXBsZW1lbnRzIElQc2VjIGZvciBpdHMg b3duIHRyYWZmaWMgYnV0DQogICBkb2VzIG5vdCBhY3QgYXMgYSBnYXRld2F5Lg0KDQogICBHYXRl d2F5IC0gQSBuZXR3b3JrIGRldmljZSB0aGF0IGltcGxlbWVudHMgSVBzZWMgdG8gcHJvdGVjdCB0 cmFmZmljDQogICBmbG93aW5nIHRocm91Z2ggdGhlIGRldmljZS4NCg0KICAgUG9pbnQtdG8tUG9p bnQgLSBDb21tdW5pY2F0aW9uIGJldHdlZW4gdHdvIHBhcnRpZXMgd2l0aG91dCBhY3RpdmUNCiAg IHBhcnRpY2lwYXRpb24gKGUuZy4gZW5jcnlwdGlvbiBvciBkZWNyeXB0aW9uKSBieSBhbnkgb3Ro ZXIgcGFydGllcy4NCg0KICAgSHViIC0gVGhlIGNlbnRyYWwgcG9pbnQgaW4gYSBzdGFyIHRvcG9s b2d5LyBkeW5hbWljIGZ1bGwgbWVzaA0KICAgdG9wb2xvZ3ksIG9yIG9uZSBvZiB0aGUgY2VudHJh bCBwb2ludHMgaW4gdGhlIGZ1bGwgbWVzaCBzdHlsZSBWUE4sDQogICBpLmUuIGdhdGV3YXkgd2hl cmUgbXVsdGlwbGUgb3RoZXIgaHVicyBvciBzcG9rZXMgY29ubmVjdCB0by4gIFRoZQ0KICAgaHVi cyB1c3VhbGx5IGZvcndhcmQgdHJhZmZpYyBjb21pbmcgZnJvbSBlbmNyeXB0ZWQgbGlua3MgdG8g b3RoZXINCiAgIGVuY3J5cHRlZCBsaW5rcywgaS5lLiB0aGVyZSBhcmUgbm8gZGV2aWNlcyBjb25u ZWN0ZWQgdG8gaXQgaW4gY2xlYXIuDQoNCiAgIFNwb2tlIC0gVGhlIGVkZ2UgZGV2aWNlcyBpbiBh IHN0YXIgdG9wb2xvZ3kvIGR5bmFtaWMgZnVsbCBtZXNoDQogICB0b3BvbG9neSwgb3IgZ2F0ZXdh eSB3aGljaCBmb3J3YXJkcyB0cmFmZmljIGZyb20gbXVsdGlwbGUgY2xlYXJ0ZXh0DQogICBkZXZp Y2VzIHRvIG90aGVyIGh1YnMgb3Igc3Bva2VzLCBhbmQgc29tZSBvZiB0aG9zZSBvdGhlciBkZXZp Y2VzIGFyZQ0KICAgY29ubmVjdGVkIHRvIGl0IGluIGNsZWFyIChpLmUuIGl0IGVuY3J5cHRzIGRh dGEgY29taW5nIGZyb20gY2xlYXJ0ZXh0DQoNCg0KDQpIYW5uYSAmIE1hbnJhbCAgICAgICAgICAg RXhwaXJlcyBBdWd1c3QgOSwgMjAxMyAgICAgICAgICAgICAgICAgW1BhZ2UgM10NCg0KSW50ZXJu ZXQtRHJhZnQgICAgICAgICAgICAgQXV0byBEaXNjb3ZlcnkgVlBOICAgICAgICAgICAgICBGZWJy dWFyeSAyMDEzDQoNCg0KICAgZGV2aWNlcyBhbmQgZm9yd2FyZHMgaXQgdG8gdGhlIEFEVlBOKS4N Cg0KICAgU3RhciB0b3BvbG9neSAtIFRoaXMgaXMgdGhlIHRvcG9sb2d5IHdoZXJlIHRoZXJlIGlz IGRpcmVjdA0KICAgY29ubmVjdGl2aXR5IG9ubHkgYmV0d2VlbiB0aGUgaHViIGFuZCBzcG9rZSBh bmQgY29tbXVuaWNhdGlvbiBiZXR3ZWVuDQogICB0aGUgMiBzcG9rZXMgaGFwcGVucyB0aHJvdWdo IHRoZSBodWIuDQoNCiAgIEZ1bGwgTWVzaCB0b3BvbG9neSAtIFRoaXMgaXMgdGhlIHRvcG9sb2d5 IHdoZXJlIHRoZXJlIGlzIGEgZGlyZWN0DQogICBjb25uZWN0aXZpdHkgYmV0d2VlbiBldmVyeSBT cG9rZSB0byBldmVyeSBvdGhlciBTcG9rZSBkaXJlY3RseSwNCiAgIHdpdGhvdXQgdGhlIHRyYWZm aWMgYmV0d2VlbiB0aGUgc3Bva2VzIGhhdmluZyB0byBiZSByZWRpcmVjdGVkDQogICB0aHJvdWdo IGFuIGludGVybWVkaWF0ZSBodWIgZGV2aWNlLg0KDQogICBEeW5hbWljIEZ1bGwgTWVzaCB0b3Bv bG9neSAtIFRoaXMgaXMgdGhlIHRvcG9sb2d5IHdoZXJlIGRpcmVjdA0KICAgY29ubmVjdGlvbnMg ZXhpc3QgaW4gYSBodWIgYW5kIHNwb2tlIG1hbm5lciwgYnV0IGR5bmFtaWMgY29ubmVjdGlvbnMN CiAgIGFyZSBjcmVhdGVkLyByZW1vdmVkIGJldHdlZW4gdGhlIHNwb2tlcyBvbiBhIG5lZWQgYmFz aXMuDQoNCiAgIFNlY3VyaXR5IEFzc29jaWF0aW9uIChTQSkgLSBEZWZpbmVkIGluIFtSRkM0MzAx XS4NCg0KMS4yLiAgQ29udmVudGlvbnMgVXNlZCBpbiBUaGlzIERvY3VtZW50DQoNCiAgIFRoZSBr ZXkgd29yZHMgIk1VU1QiLCAiTVVTVCBOT1QiLCAiUkVRVUlSRUQiLCAiU0hBTEwiLCAiU0hBTEwg Tk9UIiwNCiAgICJTSE9VTEQiLCAiU0hPVUxEIE5PVCIsICJSRUNPTU1FTkRFRCIsICJNQVkiLCBh bmQgIk9QVElPTkFMIiBpbiB0aGlzDQogICBkb2N1bWVudCBhcmUgdG8gYmUgaW50ZXJwcmV0ZWQg YXMgZGVzY3JpYmVkIGluIFtSRkMyMTE5XS4NCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQpIYW5uYSAmIE1hbnJhbCAgICAgICAgICAgRXhw aXJlcyBBdWd1c3QgOSwgMjAxMyAgICAgICAgICAgICAgICAgW1BhZ2UgNF0NCg0KSW50ZXJuZXQt RHJhZnQgICAgICAgICAgICAgQXV0byBEaXNjb3ZlcnkgVlBOICAgICAgICAgICAgICBGZWJydWFy eSAyMDEzDQoNCg0KMi4gIFVzZSBDYXNlcw0KDQogICBUaGlzIHNlY3Rpb24gcHJlc2VudHMgdGhl IGtleSB1c2UgY2FzZXMgZm9yIGxhcmdlLXNjYWxlIHBvaW50LXRvLQ0KICAgcG9pbnQgVlBOLg0K DQogICBJbiBhbGwgb2YgdGhlc2UgdXNlIGNhc2VzLCB0aGUgcGFydGljaXBhbnRzIChlbmRwb2lu dHMgYW5kIGdhdGV3YXlzKQ0KICAgbWF5IGJlIGZyb20gYSBzaW5nbGUgb3JnYW5pemF0aW9uIChh ZG1pbmlzdHJhdGl2ZSBkb21haW4pIG9yIGZyb20NCiAgIG11bHRpcGxlIG9yZ2FuaXphdGlvbnMg d2l0aCBhbiBlc3RhYmxpc2hlZCB0cnVzdCByZWxhdGlvbnNoaXAuICBXaGVuDQogICBtdWx0aXBs ZSBvcmdhbml6YXRpb25zIGFyZSBpbnZvbHZlZCwgcHJvZHVjdHMgZnJvbSBtdWx0aXBsZSB2ZW5k b3JzDQogICBhcmUgZW1wbG95ZWQgc28gb3BlbiBzdGFuZGFyZHMgYXJlIG5lZWRlZCB0byBwcm92 aWRlDQogICBpbnRlcm9wZXJhYmlsaXR5LiAgRXN0YWJsaXNoaW5nIGNvbW11bmljYXRpb25zIGJl dHdlZW4gcGFydGljaXBhbnRzDQogICB3aXRoIG5vIGVzdGFibGlzaGVkIHRydXN0IHJlbGF0aW9u c2hpcCBpcyBvdXQgb2Ygc2NvcGUgZm9yIHRoaXMNCiAgIGVmZm9ydC4NCg0KMi4xLiAgRW5kcG9p bnQtdG8tRW5kcG9pbnQgQURWUE4gVXNlIENhc2UNCg0KICAgVHdvIGVuZHBvaW50cyB3aXNoIHRv IGNvbW11bmljYXRlIHNlY3VyZWx5IHZpYSBhIHBvaW50LXRvLXBvaW50DQogICBTZWN1cml0eSBB c3NvY2lhdGlvbiAoU0EpLg0KDQogICBUaGUgbmVlZCBmb3Igc2VjdXJlIGVuZHBvaW50IHRvIGVu ZHBvaW50IGNvbW11bmljYXRpb25zIGlzIG9mdGVuDQogICBkcml2ZW4gYnkgYSBuZWVkIHRvIGVt cGxveSBoaWdoLWJhbmR3aWR0aCwgbG93IGxhdGVuY3kgbG9jYWwNCiAgIGNvbm5lY3Rpdml0eSBp bnN0ZWFkIG9mIHVzaW5nIHNsb3csIGV4cGVuc2l2ZSBsaW5rcyB0byByZW1vdGUNCiAgIGdhdGV3 YXlzLiAgRm9yIGV4YW1wbGUsIHR3byB1c2VycyBpbiBjbG9zZSBwcm94aW1pdHkgbWF5IHdpc2gg dG8NCiAgIHBsYWNlIGEgZGlyZWN0LCBzZWN1cmUgdmlkZW8gb3Igdm9pY2UgY2FsbCB3aXRob3V0 IG5lZWRpbmcgdG8gc2VuZA0KICAgdGhlIGNhbGwgdGhyb3VnaCByZW1vdGUgZ2F0ZXdheXMsIHdo aWNoIHdvdWxkIGFkZCBsYXRlbmN5IHRvIHRoZQ0KICAgY2FsbCwgY29uc3VtZSBwcmVjaW91cyBy ZW1vdGUgYmFuZHdpZHRoLCBhbmQgaW5jcmVhc2Ugb3ZlcmFsbCBjb3N0cy4NCiAgIFN1Y2ggYSB1 c2UgY2FzZSBhbHNvIGVuYWJsZXMgY29ubmVjdGl2aXR5IHdoZW4gYm90aCBiZWhpbmQgTkFUDQog ICBnYXRld2F5cy4gIFN1Y2ggYSB1c2UgY2FzZSBvdWdodCB0byBhbGxvdyBmb3Igc2VhbWxlc3Mg Y29ubmVjdGl2aXR5DQogICBldmVuIGFzIGVuZHBvaW50cyByb2FtLCBldmVuIGlmIHRoZXkgYXJl IG1vdmluZyBvdXQgZnJvbSBiZWhpbmQgYSBOQVQNCiAgIGdhdGV3YXksIGZyb20gYmVoaW5kIG9u ZSBOQVQgZ2F0ZXdheSB0byBiZWhpbmQgYW5vdGhlciwgb3IgZnJvbSBhDQogICBzdGFuZGFsb25l IHBvc2l0aW9uIHRvIGJlaGluZCBhIE5BVCBnYXRld2F5Lg0KDQogICBJbiBhIHN0YXIgdG9wb2xv Z3kgd2hlbiB0d28gZW5kcG9pbnRzIGNvbW11bmljYXRlLCB0aGV5IG5lZWQgYQ0KICAgbWVjaGFu aXNtIGZvciBhdXRoZW50aWNhdGlvbiwgc3VjaCB0aGF0IHRoZXkgZG8gbm90IGV4cG9zZSB0aGVt c2VsdmVzDQogICB0byBpbXBlcnNvbmF0aW9uIGJ5IHRoZSBvdGhlciBzcG9rZSBlbmRwb2ludC4N Cg0KMi4yLiAgR2F0ZXdheS10by1HYXRld2F5IEFEVlBOIFVzZSBDYXNlDQoNCiAgIEEgdHlwaWNh bCBFbnRlcnByaXNlIHRyYWZmaWMgbW9kZWwgZm9sbG93cyBhIHN0YXIgdG9wb2xvZ3ksIHdpdGgg dGhlDQogICBnYXRld2F5cyBjb25uZWN0aW5nIHRvIGVhY2ggb3RoZXIgdXNpbmcgSVBzZWMgdHVu bmVscy4NCg0KICAgSG93ZXZlciBmb3Igdm9pY2UgYW5kIG90aGVyIHJpY2ggbWVkaWEgdHJhZmZp YyB0aGF0IHJlcXVpcmVzIGEgbG90IG9mDQogICBiYW5kd2lkdGggb3IgaXMgcGVyZm9ybWFuY2Ug c2Vuc2l0aXZlLCB0aGUgdHJhZmZpYyB0cm9tYm9uaW5nIHRvIHRoZQ0KICAgaHViIGNhbiBjcmVh dGUgdHJhZmZpYyBib3R0bGVuZWNrcyBvbiB0aGUgaHViIGFuZCBjYW4gbGVhZCB0byBhbg0KICAg aW5jcmVhc2UgaW4gY29zdC4gIEEgZnVsbHkgbWVzaGVkIHNvbHV0aW9uIHdvdWxkIG1ha2UgYmVz dCB1c2Ugb2YgdGhlDQogICBhdmFpbGFibGUgbmV0d29yayBjYXBhY2l0eSBhbmQgcGVyZm9ybWFu Y2UgYnV0IHRoZSBkZXBsb3ltZW50IG9mIGENCiAgIGZ1bGx5IG1lc2hlZCBzb2x1dGlvbiBpbnZv bHZlcyBjb25zaWRlcmFibGUgY29uZmlndXJhdGlvbiwgZXNwZWNpYWxseQ0KICAgd2hlbiBhIGxh cmdlIG51bWJlciBvZiBub2RlcyBhcmUgaW52b2x2ZWQuICBJdCBpcyBmb3IgdGhpcyBwdXJwb3Nl DQoNCg0KDQpIYW5uYSAmIE1hbnJhbCAgICAgICAgICAgRXhwaXJlcyBBdWd1c3QgOSwgMjAxMyAg ICAgICAgICAgICAgICAgW1BhZ2UgNV0NCg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgQXV0 byBEaXNjb3ZlcnkgVlBOICAgICAgICAgICAgICBGZWJydWFyeSAyMDEzDQoNCg0KICAgc3Bva2Ut dG8tc3Bva2UgdHVubmVscyBhcmUgZHluYW1pY2FsbHkgY3JlYXRlZCBhbmQgdG9ybi1kb3duLiAg Rm9yDQogICB0aGUgcmVhc29ucyBvZiBjb3N0IGFuZCBtYW51YWwgZXJyb3IgcmVkdWN0aW9uLCBp dCBpcyBkZXNpcmVkIHRoYXQNCiAgIHRoZXJlIGJlIG1pbmltYWwgY29uZmlndXJhdGlvbiBvbiBl YWNoIGdhdGV3YXkuDQoNCiAgIFRoZSBzb2x1dGlvbiBvdWdodCB0byB3b3JrIGluIGNhc2VzIHdo ZXJlIHRoZSBlbmRwb2ludHMgYXJlIGluDQogICBkaWZmZXJlbnQgYWRtaW5pc3RyYXRpdmUgZG9t YWlucywgYWxiZWl0LCBvbmVzIHRoYXQgaGF2ZSBhbiBleGlzdGluZw0KICAgdHJ1c3QgcmVsYXRp b25zaGlwIChmb3IgZXhhbXBsZSB0d28gb3JnYW5pc2F0aW9ucyB3aG8gYXJlDQogICBjb2xsYWJv cmF0aW5nIG9uIGEgcHJvamVjdCwgdGhleSBtYXkgd2lzaCB0byBqb2luIHRoZWlyIG5ldHdvcmtz LA0KICAgd2hpbHN0IHJldGFpbmluZyBpbmRlcGVuZGVudCBjb250cm9sIG92ZXIgY29uZmlndXJh dGlvbikuICBJdCBpcw0KICAgaGlnaGx5IGRlc2lyYWJsZSB0aGF0IHRoZSBzb2x1dGlvbiB3b3Jr cyBmb3IgdGhlIHN0YXIsIGZ1bGwgbWVzaCBhcw0KICAgd2VsbCBhcyBkeW5hbWljIGZ1bGwgbWVz aCB0b3BvbG9neS4NCg0KICAgVGhlIHNvbHV0aW9uIG91Z2h0IHRvIGFsc28gYWRkcmVzcyB0aGUg Y2FzZSB3aGVyZSBnYXRld2F5cyB1c2UNCiAgIGR5bmFtaWMgSVAgYWRkcmVzc2VzLg0KDQogICBB ZGRpdGlvbmFsbHksIHRoZSByb3V0aW5nIGltcGxpY2F0aW9ucyBvZiBnYXRld2F5LXRvLWdhdGV3 YXkNCiAgIGNvbW11bmljYXRpb24gbmVlZCB0byBiZSBhZGRyZXNzZWQuICBJbiB0aGUgc2ltcGxl IGNhc2UsIHNlbGVjdG9ycw0KICAgcHJvdmlkZSBzdWZmaWNpZW50IGluZm9ybWF0aW9uIGZvciBh IGdhdGV3YXkgdG8gZm9yd2FyZCB0cmFmZmljDQogICBhcHByb3ByaWF0ZWx5LiAgSW4gb3RoZXIg Y2FzZXMsIGFkZGl0aW9uYWwgdHVubmVsaW5nIChlLmcuLCBHZW5lcmljDQogICBSb3V0aW5nIEVu Y2Fwc3VsYXRpb24gLSBHUkUpIGFuZCByb3V0aW5nIChlLmcuLCBPcGVuIFNob3J0ZXN0IFBhdGgN CiAgIEZpcnN0IC0gT1NQRikgcHJvdG9jb2xzIGFyZSBydW4gb3ZlciBJUHNlYyB0dW5uZWxzLCBh bmQgdGhlDQogICBjb25maWd1cmF0aW9uIGltcGFjdCBvbiB0aG9zZSBwcm90b2NvbHMgbmVlZHMg dG8gYmUgY29uc2lkZXJlZC4NCiAgIFRoZXJlIGlzIGFsc28gdGhlIGNhc2Ugd2hlbiBMYXllci0z IFZpcnR1YWwgUHJpdmF0ZSBOZXR3b3JrcyAoTDNWUE5zKQ0KICAgb3BlcmF0ZSBvdmVyIElQc2Vj IFR1bm5lbHMuDQoNCiAgIFdoZW4gdHdvIGdhdGV3YXlzIGNvbW11bmljYXRlLCB0aGV5IG5lZWQg dG8gdXNlIGEgbWVjaGFuaXNtIGZvcg0KICAgYXV0aGVudGljYXRpb24sIHN1Y2ggdGhhdCB0aGV5 IGRvIG5vdCBleHBvc2UgdGhlbXNlbHZlcyB0byB0aGUgcmlzaw0KICAgb2YgaW1wZXJzb25hdGlv biBieSB0aGUgb3RoZXIgZW50aXRpZXMuDQoNCjIuMy4gIEVuZHBvaW50LXRvLUdhdGV3YXkgQURW UE4gVXNlIENhc2UNCg0KICAgQW4gZW5kcG9pbnQgb3VnaHQgdG8gYmUgYWJsZSB0byB1c2UgdGhl IG1vc3QgZWZmaWNpZW50IGdhdGV3YXkgYXMgaXQNCiAgIHJvYW1zIGluIHRoZSBpbnRlcm5ldC4N Cg0KICAgQSBtb2JpbGUgdXNlciByb2FtaW5nIG9uIHRoZSBJbnRlcm5ldCBtYXkgY29ubmVjdCB0 byBhIGdhdGV3YXksIHdoaWNoDQogICBiZWNhdXNlIG9mIHJvYW1pbmcgaXMgbm8gbG9uZ2VyIHRo ZSBtb3N0IGVmZmljaWVudCBnYXRld2F5IHRvIHVzZQ0KICAgKHJlYXNvbnMgY291bGQgYmUgY29z dC8gZWZmaWNpZW5jeS8gbGF0ZW5jeSBvciBzb21lIG90aGVyIGZhY3RvcikuDQogICBUaGUgbW9i aWxlIHVzZXIgb3VnaHQgdG8gYmUgYWJsZSB0byBkaXNjb3ZlciBhbmQgdGhlbiBjb25uZWN0IHRv IHRoZQ0KICAgY3VycmVudCBtb3N0IGVmZmljaWVudCBnYXRld2F5IHdpdGhvdXQgaGF2aW5nIHRv IHJlaW5pdGlhdGUgdGhlDQogICBjb25uZWN0aW9uLg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCkhh bm5hICYgTWFucmFsICAgICAgICAgICBFeHBpcmVzIEF1Z3VzdCA5LCAyMDEzICAgICAgICAgICAg ICAgICBbUGFnZSA2XQ0KDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICBBdXRvIERpc2NvdmVy eSBWUE4gICAgICAgICAgICAgIEZlYnJ1YXJ5IDIwMTMNCg0KDQozLiAgSW5hZGVxdWFjeSBvZiBF eGlzdGluZyBTb2x1dGlvbnMNCg0KICAgU2V2ZXJhbCBzb2x1dGlvbnMgZXhpc3QgZm9yIHRoZSBw cm9ibGVtcyBkZXNjcmliZWQgYWJvdmUuICBIb3dldmVyLA0KICAgbm9uZSBvZiB0aGVzZSBzb2x1 dGlvbnMgaXMgYWRlcXVhdGUsIGFzIGRlc2NyaWJlZCBoZXJlLg0KDQozLjEuICBFeGhhdXN0aXZl IENvbmZpZ3VyYXRpb24NCg0KICAgT25lIHNpbXBsZSBzb2x1dGlvbiBpcyB0byBjb25maWd1cmUg YWxsIGdhdGV3YXlzIGFuZCBlbmRwb2ludHMgaW4NCiAgIGFkdmFuY2Ugd2l0aCBhbGwgdGhlIGlu Zm9ybWF0aW9uIG5lZWRlZCB0byBkZXRlcm1pbmUgd2hpY2ggZ2F0ZXdheSBvcg0KICAgZW5kcG9p bnQgaXMgb3B0aW1hbCBhbmQgdG8gZXN0YWJsaXNoIGFuIFNBIHdpdGggdGhhdCBnYXRld2F5IG9y DQogICBlbmRwb2ludC4gIEhvd2V2ZXIsIHRoaXMgc29sdXRpb24gZG9lcyBub3Qgc2NhbGUgaW4g YSBsYXJnZSBuZXR3b3JrDQogICB3aXRoIGh1bmRyZWRzIG9mIHRob3VzYW5kcyBvZiBnYXRld2F5 cyBhbmQgZW5kcG9pbnRzLCBlc3BlY2lhbGx5IHdoZW4NCiAgIG11bHRpcGxlIGFkbWluaXN0cmF0 aXZlIGRvbWFpbnMgYXJlIGludm9sdmVkIGFuZCB0aGluZ3MgYXJlIHJhcGlkbHkNCiAgIGNoYW5n aW5nIChlLmcuIG1vYmlsZSBlbmRwb2ludHMpLiAgU3VjaCBhIHNvbHV0aW9uIGlzIGFsc28gbGlt aXRlZCBieQ0KICAgdGhlIHNtYWxsZXN0IGVuZHBvaW50LyBnYXRld2F5LCBhcyB0aGUgc2FtZSBl eGhhdXN0aXZlIGNvbmZpZ3VyYXRpb24NCiAgIGlzIHRvIGJlIGFwcGxpZWQgb24gYWxsIGVuZHBv aW50cy8gZ2F0ZXdheXMuICBBIG1vcmUgZHluYW1pYywgc2VjdXJlDQogICBhbmQgc2NhbGFibGUg c3lzdGVtIGZvciBlc3RhYmxpc2hpbmcgU0FzIGJldHdlZW4gZ2F0ZXdheXMgaXMgbmVlZGVkLg0K DQozLjIuICBTdGFyIFRvcG9sb2d5DQoNCiAgIFRoZSBtb3N0IGNvbW1vbiB3YXkgdG8gYWRkcmVz cyBhIHBhcnQgb2YgdGhpcyB0aGlzIHByb2JsZW0gdG9kYXkgaXMNCiAgIHRvIHVzZSB3aGF0IGhh cyBiZWVuIHRlcm1lZCBhICJzdGFyIHRvcG9sb2d5Ii4gIEluIHRoaXMgY2FzZSBvbmUgb3IgYQ0K ICAgZmV3IGdhdGV3YXlzIGFyZSBkZWZpbmVkIGFzICJodWIgZ2F0ZXdheXMiLCB3aGlsZSB0aGUg cmVzdCBvZiB0aGUNCiAgIHN5c3RlbXMgKHdoZXRoZXIgZW5kcG9pbnRzIG9yIGdhdGV3YXlzKSBh cmUgZGVmaW5lZCBhcyAic3Bva2VzIi4gIFRoZQ0KICAgc3Bva2VzIG5ldmVyIGNvbm5lY3QgdG8g b3RoZXIgc3Bva2VzLiAgVGhleSBvbmx5IG9wZW4gdHVubmVscyB3aXRoDQogICB0aGUgaHViIGdh dGV3YXlzLiAgQWxzbyBmb3IgYSBsYXJnZSBudW1iZXIgb2YgZ2F0ZXdheXMgaW4gb25lDQogICBh ZG1pbmlzdHJhdGl2ZSBkb21haW4sIG9uZSBnYXRld2F5IG1heSBiZSBkZWZpbmVkIGFzIHRoZSBo dWIsIGFuZCB0aGUNCiAgIHJlc3Qgb2YgdGhlIGdhdGV3YXlzIGFuZCByZW1vdGUgYWNjZXNzIGNs aWVudHMgY29ubmVjdCBvbmx5IHRvIHRoYXQNCiAgIGdhdGV3YXkuDQoNCiAgIFRoaXMgc29sdXRp b24gaG93ZXZlciBpcyBjb21wbGljYXRlZCBieSB0aGUgY2FzZSB3aGVuIHRoZSBzcG9rZXMgdXNl DQogICBkeW5hbWljIElQIGFkZHJlc3NlcyBhbmQgRE5TIHdpdGggZHluYW1pYyB1cGRhdGVzIG5l ZWRzIHRvIGJlIHVzZWQuDQogICBJdCBpcyBhbHNvIGRlc2lyZWQgdGhhdCB0aGVyZSBpcyBtaW5p bWFsIHRvIG5vIGNvbmZpZ3VyYXRpb24gb24gdGhlDQogICBodWIgYXMgdGhlIG51bWJlciBvZiBz cG9rZXMgaW5jcmVhc2VzIGFuZCBuZXcgc3Bva2VzIGFyZSBhZGRlZCBhbmQNCiAgIGRlbGV0ZWQg cmFuZG9tbHkuDQoNCiAgIEFub3RoZXIgcHJvYmxlbSB3aXRoIHRoZSBzdGFyIHRvcG9sb2d5IGlz IHRoYXQgaXQgY3JlYXRlcyBhIGhpZ2ggbG9hZA0KICAgb24gdGhlIGh1YiBnYXRld2F5cyBhcyB3 ZWxsIGFzIG9uIHRoZSBjb25uZWN0aW9uIGJldHdlZW4gdGhlIHNwb2tlcw0KICAgYW5kIHRoZSBo dWIuICBUaGlzIGxvYWQgaXMgYm90aCBpbiBwcm9jZXNzaW5nIHBvd2VyIGFuZCBpbiBuZXR3b3Jr DQogICBiYW5kd2lkdGguICBBIHNpbmdsZSBwYWNrZXQgaW4gdGhlIGh1Yi1hbmQtc3Bva2Ugc2Nl bmFyaW8gY2FuIGJlDQogICBlbmNyeXB0ZWQgYW5kIGRlY3J5cHRlZCBtdWx0aXBsZSB0aW1lcy4g IEl0IHdvdWxkIGJlIG11Y2ggcHJlZmVyYWJsZQ0KICAgaWYgdGhlc2UgZ2F0ZXdheXMgYW5kIGNs aWVudHMgY291bGQgaW5pdGlhdGUgdHVubmVscyBiZXR3ZWVuIHRoZW0sDQogICBieXBhc3Npbmcg dGhlIGh1YiBnYXRld2F5cy4gIEFkZGl0aW9uYWxseSwgdGhlIHBhdGggYmFuZHdpZHRoIHRvDQog ICB0aGVzZSBodWIgZ2F0ZXdheXMgbWF5IGJlIGxvd2VyIHRoYW4gdGhhdCBvZiB0aGUgcGF0aCBi ZXR3ZWVuIHRoZQ0KICAgc3Bva2VzLiAgRm9yIGV4YW1wbGUsIHR3byByZW1vdGUgYWNjZXNzIHVz ZXJzIG1heSBiZSBpbiB0aGUgc2FtZQ0KICAgYnVpbGRpbmcgd2l0aCBoaWdoLXNwZWVkIHdpZmkg KGZvciBleGFtcGxlLCBhdCBhbiBJRVRGIG1lZXRpbmcpLg0KICAgQ2hhbm5lbGluZyB0aGVpciBj b252ZXJzYXRpb24gdGhyb3VnaCB0aGUgaHViIGdhdGV3YXlzIG9mIHRoZWlyDQogICByZXNwZWN0 aXZlIGVtcGxveWVycyBzZWVtcyBleHRyZW1lbHkgd2FzdGVmdWwsIGFzIHdlbGwgYXMgaGF2aW5n DQoNCg0KDQpIYW5uYSAmIE1hbnJhbCAgICAgICAgICAgRXhwaXJlcyBBdWd1c3QgOSwgMjAxMyAg ICAgICAgICAgICAgICAgW1BhZ2UgN10NCg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgQXV0 byBEaXNjb3ZlcnkgVlBOICAgICAgICAgICAgICBGZWJydWFyeSAyMDEzDQoNCg0KICAgbG93ZXIg YmFuZHdpZHRoLg0KDQogICBUaGUgY2hhbGxlbmdlIGlzIHRvIGJ1aWxkIGEgbGFyZ2Ugc2NhbGUs IElQc2VjIHByb3RlY3RlZCBuZXR3b3Jrcw0KICAgdGhhdCBjYW4gZHluYW1pY2FsbHkgY2hhbmdl IHdpdGggbWluaW11bSBhZG1pbmlzdHJhdGl2ZSBvdmVyaGVhZC4NCg0KMy4zLiAgUHJvcHJpZXRh cnkgQXBwcm9hY2hlcw0KDQogICBTZXZlcmFsIHZlbmRvcnMgb2ZmZXIgcHJvcHJpZXRhcnkgc29s dXRpb25zIHRvIHRoZXNlIHByb2JsZW1zLg0KICAgSG93ZXZlciwgdGhlc2Ugc29sdXRpb25zIG9m ZmVyIG5vIGludGVyb3BlcmFiaWxpdHkgYmV0d2VlbiBlcXVpcG1lbnQNCiAgIGZyb20gb25lIHZl bmRvciBhbmQgYW5vdGhlci4gIFRoaXMgbWVhbnMgdGhhdCB0aGV5IGFyZSBnZW5lcmFsbHkNCiAg IHJlc3RyaWN0ZWQgdG8gdXNlIHdpdGhpbiBvbmUgb3JnYW5pemF0aW9uLCBhbmQgaXQgaXMgaGFy ZGVyIHRvIG1vdmUNCiAgIG9mZiBzdWNoIHNvbHV0aW9ucyBhcyB0aGUgZmVhdHVyZXMgYXJlIG5v dCBzdGFuZGFyZGl6ZWQuICBCZXNpZGVzDQogICBtdWx0aXBsZSBvcmdhbml6YXRpb25zIGNhbm5v dCBiZSBleHBlY3RlZCB0byBhbGwgY2hvb3NlIHRoZSBzYW1lDQogICBlcXVpcG1lbnQgdmVuZG9y Lg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQpIYW5uYSAmIE1hbnJhbCAgICAgICAgICAgRXhwaXJlcyBBdWd1 c3QgOSwgMjAxMyAgICAgICAgICAgICAgICAgW1BhZ2UgOF0NCg0KSW50ZXJuZXQtRHJhZnQgICAg ICAgICAgICAgQXV0byBEaXNjb3ZlcnkgVlBOICAgICAgICAgICAgICBGZWJydWFyeSAyMDEzDQoN Cg0KNC4gIFJlcXVpcmVtZW50cw0KDQogICBUaGlzIHNlY3Rpb24gZGVmaW5lcyB0aGUgcmVxdWly ZW1lbnRzLCBvbiB3aGljaCB0aGUgc29sdXRpb24gd2lsbCBiZQ0KICAgYmFzZWQuDQoNCjQuMS4g IEdhdGV3YXkgYW5kIEVuZHBvaW50IFJlcXVpcmVtZW50cw0KDQogICAxLiAgRm9yIGFueSBuZXR3 b3JrIHRvcG9sb2d5IChzdGFyLCBmdWxsIG1lc2ggYW5kIGR5bmFtaWMgZnVsbCBtZXNoKQ0KICAg Z2F0ZXdheXMgYW5kIGVuZHBvaW50cyBTSE9VTEQgbWluaW1pemUgY29uZmlndXJhdGlvbiBjaGFu Z2VzIHdoZW4gYQ0KICAgbmV3IGdhdGV3YXkgb3IgZW5kcG9pbnQgaXMgYWRkZWQsIHJlbW92ZWQg b3IgY2hhbmdlZC4gIEFkZGluZyBvcg0KICAgcmVtb3ZpbmcgYSBzcG9rZSBpbiB0aGUgdG9wb2xv Z3kgTVVTVCBOT1QgcmVxdWlyZSBjb25maWd1cmF0aW9uDQogICBjaGFuZ2VzIHRvIHRoZSBodWJz IG90aGVyIHRoYW4gd2hlcmUgdGhlIHNwb2tlIHdhcyBjb25uZWN0ZWQgdG8gYW5kDQogICBTSE9V TEQgTk9UIHJlcXVpcmUgY29uZmlndXJhdGlvbiBjaGFuZ2VzIHRvIHRoZSBodWIgdGhlIHNwb2tl IHdhcw0KICAgY29ubmVjdGVkIHRvLiAgVGhlIGNoYW5nZXMgYWxzbyBNVVNUIE5PVCByZXF1aXJl IGNvbmZpZ3VyYXRpb24NCiAgIGNoYW5nZXMgaW4gb3RoZXIgc3Bva2VzLg0KDQogICBTcGVjaWZp Y2FsbHksIHdoZW4gZXZhbHVhdGluZyBwb3RlbnRpYWwgcHJvcG9zYWxzLCB3ZSB3aWxsIGNvbXBh cmUNCiAgIHRoZW0gYnkgbG9va2luZyBhdCBob3cgbWFueSBlbmRwb2ludHMgb3IgZ2F0ZXdheXMg bXVzdCBiZQ0KICAgcmVjb25maWd1cmVkIHdoZW4gYSBuZXcgZ2F0ZXdheSBvciBlbmRwb2ludCBp cyBhZGRlZCwgcmVtb3ZlZCwgb3INCiAgIGNoYW5nZWQgYW5kIGhvdyBzdWJzdGFudGlhbCB0aGlz IHJlY29uZmlndXJhdGlvbiBpcywgYmVzaWRlcyB0aGUNCiAgIGFtb3VudCBvZiBzdGF0aWMgY29u ZmlndXJhdGlvbiByZXF1aXJlZC4NCg0KICAgVGhpcyByZXF1aXJlbWVudCBpcyBkcml2ZW4gYnkg dXNlIGNhc2VzIDIuMSBhbmQgMi4yIGFuZCBieSB0aGUNCiAgIHNjYWxpbmcgbGltaXRhdGlvbnMg cG9pbnRlZCBvdXQgaW4gc2VjdGlvbiAzLjEuDQoNCiAgIDIuICBHYXRld2F5cyBhbmQgZW5kcG9p bnRzIE1VU1QgYWxsb3cgSVBzZWMgVHVubmVscyB0byBiZSBzZXR1cA0KICAgd2l0aG91dCBhbnkg Y29uZmlndXJhdGlvbiBjaGFuZ2VzLCBldmVuIHdoZW4gcGVlciBhZGRyZXNzZXMgZ2V0DQogICB1 cGRhdGVkIGV2ZXJ5IHRpbWUgdGhlIGRldmljZSBjb21lcyB1cC4gIFRoaXMgaW1wbGllcyB0aGF0 IFNQRA0KICAgZW50cmllcyBvciBvdGhlciBjb25maWd1cmF0aW9uIGJhc2VkIG9uIHBlZXIgSVAg YWRkcmVzcyB3aWxsIG5lZWQgdG8NCiAgIGJlIGF1dG9tYXRpY2FsbHkgdXBkYXRlZCwgYXZvaWRl ZCwgb3IgaGFuZGxlZCBpbiBzb21lIG1hbm5lciB0byBhdm9pZA0KICAgYSBuZWVkIHRvIG1hbnVh bGx5IHVwZGF0ZSBwb2xpY3kgd2hlbmV2ZXIgYW4gYWRkcmVzcyBjaGFuZ2VzLg0KDQogICBUaGlz IHJlcXVpcmVtZW50IGlzIGRyaXZlbiBieSB1c2UgY2FzZXMgMi4xIGFuZCAyLjIgYW5kIGJ5IHRo ZQ0KICAgc2NhbGluZyBsaW1pdGF0aW9ucyBwb2ludGVkIG91dCBpbiBzZWN0aW9uIDMuMS4NCg0K ICAgMy4gIEluIG1hbnkgY2FzZXMgYWRkaXRpb25hbCB0dW5uZWxpbmcgcHJvdG9jb2xzIChlLmcu ICBHUkUpIG9yDQogICBSb3V0aW5nIHByb3RvY29scyAoZS5nLiAgT1NQRikgYXJlIHJ1biBvdmVy IHRoZSBJUHNlYyB0dW5uZWxzLg0KICAgR2F0ZXdheXMgTVVTVCBhbGxvdyBmb3IgdGhlIG9wZXJh dGlvbiBvZiB0dW5uZWxpbmcgYW5kIFJvdXRpbmcNCiAgIHByb3RvY29scyBvcGVyYXRpbmcgb3Zl ciBzcG9rZS10by1zcG9rZSBJUHNlYyBUdW5uZWxzIHdpdGggbWluaW1hbCBvcg0KICAgbm8sIGNv bmZpZ3VyYXRpb24gaW1wYWN0LiAgVGhlIEFEVlBOIHNvbHV0aW9uIFNIT1VMRCBOT1QgaW5jcmVh c2UgdGhlDQogICBhbW91bnQgb2YgaW5mb3JtYXRpb24gcmVxdWlyZWQgdG8gY29uZmlndXJlIHBy b3RvY29scyBydW5uaW5nIG92ZXINCiAgIElQc2VjIHR1bm5lbHMuDQoNCiAgIDQuICBJbiB0aGUg ZnVsbCBtZXNoIGFuZCBkeW5hbWljIGZ1bGwgbWVzaCB0b3BvbG9neSwgU3Bva2VzIE1VU1QNCiAg IGFsbG93IGZvciBkaXJlY3QgY29tbXVuaWNhdGlvbiB3aXRoIG90aGVyIHNwb2tlIGdhdGV3YXlz IGFuZA0KICAgZW5kcG9pbnRzLiAgSW4gdGhlIHN0YXIgdG9wb2xvZ3kgbW9kZSwgZGlyZWN0IGNv bW11bmljYXRpb24gYmV0d2Vlbg0KICAgc3Bva2VzIE1VU1QgYmUgZGlzYWxsb3dlZC4NCg0KDQoN Cg0KSGFubmEgJiBNYW5yYWwgICAgICAgICAgIEV4cGlyZXMgQXVndXN0IDksIDIwMTMgICAgICAg ICAgICAgICAgIFtQYWdlIDldDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgIEF1dG8gRGlz Y292ZXJ5IFZQTiAgICAgICAgICAgICAgRmVicnVhcnkgMjAxMw0KDQoNCiAgIFRoaXMgcmVxdWly ZW1lbnQgaXMgZHJpdmVuIGJ5IHVzZSBjYXNlcyAyLjEgYW5kIDIuMiBhbmQgYnkgdGhlDQogICBs aW1pdGF0aW9ucyBvZiBhIHN0YXIgdG9wb2xvZ3kgcG9pbnRlZCBvdXQgaW4gc2VjdGlvbiAzLjIu DQoNCiAgIDUuICBPbmUgc3Bva2UgTVVTVCBOT1QgYmUgYWJsZSB0byBpbXBlcnNvbmF0ZSBhbm90 aGVyIHNwb2tlLg0KDQogICBUaGlzIHJlcXVpcmVtZW50IGlzIGRyaXZlbiBieSB1c2UgY2FzZSAy LjEuICBTcG9rZXMgYmVjb21lDQogICBjb21wcm9taXNlZCBmYWlybHkgb2Z0ZW4uICBUaGUgY29t cHJvbWlzZSBvZiBvbmUgU3Bva2UgU0hPVUxEIE5PVA0KICAgYWZmZWN0IHRoZSBzZWN1cml0eSBv ZiBvdGhlciBlbmRwb2ludHMuDQoNCiAgIDYuICBHYXRld2F5cyBTSE9VTEQgYWxsb3cgZm9yIHNl YW1sZXNzIGhhbmRvZmYgb2Ygc2Vzc2lvbnMgaW4gY2FzZQ0KICAgZW5kcG9pbnRzIGFyZSByb2Ft aW5nLCBldmVuIGlmIHRoZXkgY3Jvc3MgcG9saWN5IGJvdW5kYXJpZXMuICBUaGlzDQogICB3b3Vs ZCBtZWFuIHRoZSBkYXRhIHRyYWZmaWMgaXMgbWluaW1hbGx5IGFmZmVjdGVkIGV2ZW4gYXMgdGhl IGhhbmRvZmYNCiAgIGhhcHBlbnMuICBFeHRlcm5hbCBmYWN0b3JzIGxpa2UgZmlyZXdhbGwsIE5B VCBib3hlcyB3aWxsIG5vdCBiZQ0KICAgY29uc2lkZXJlZCBwYXJ0IG9mIHRoaXMgc29sdXRpb24u DQoNCiAgIFRoaXMgcmVxdWlyZW1lbnQgaXMgZHJpdmVuIGJ5IHVzZSBjYXNlIDIuMS4gIFRvZGF5 J3MgZW5kcG9pbnRzIGFyZQ0KICAgbW9iaWxlIGFuZCB0cmFuc2l0aW9uIG9mdGVuIGJldHdlZW4g ZGlmZmVyZW50IG5ldHdvcmtzIChmcm9tIDRHIHRvDQogICBXaUZpIGFuZCBhbW9uZyB2YXJpb3Vz IFdpRmkgbmV0d29ya3MpLg0KDQogICA3LiAgR2F0ZXdheXMgU0hPVUxEIGFsbG93IGZvciBlYXN5 IGhhbmRvZmYgb2YgYSBzZXNzaW9uIHRvIGFub3RoZXINCiAgIGdhdGV3YXksIHRvIG9wdGltaXpl IGxhdGVuY3ksIGJhbmR3aWR0aCwgbG9hZCBiYWxhbmNpbmcsDQogICBhdmFpbGFiaWxpdHksIG9y IG90aGVyIGZhY3RvcnMsIGJhc2VkIG9uIHBvbGljeS4NCg0KICAgVGhpcyByZXF1aXJlbWVudCBp cyBkcml2ZW4gYnkgdXNlIGNhc2UgMi4zLg0KDQogICA4LiAgR2F0ZXdheXMgYW5kIGVuZHBvaW50 cyBNVVNUIGhhdmUgdGhlIGNhcGFiaWxpdHkgdG8gcGFydGljaXBhdGUgaW4NCiAgIGFuIEFEVlBO IGV2ZW4gd2hlbiB0aGV5IGFyZSBsb2NhdGVkIGJlaGluZCBOQVQgYm94ZXMuICBIb3dldmVyLCBp bg0KICAgc29tZSBjYXNlcyB0aGV5IG1heSBiZSBkZXBsb3llZCBpbiBzdWNoIGEgd2F5IHRoYXQg dGhleSB3aWxsIG5vdCBiZQ0KICAgZnVsbHkgcmVhY2hhYmxlIGJlaGluZCBhIE5BVCBib3guICBJ dCBpcyBlc3BlY2lhbGx5IGRpZmZpY3VsdCB0bw0KICAgaGFuZGxlIGNhc2VzIHdoZXJlIHRoZSBI dWIgaXMgYmVoaW5kIGEgTkFUIGJveC4gIFdoZXJlIHRoZSB0d28NCiAgIGVuZHBvaW50cyBhcmUg Ym90aCBiZWhpbmQgc2VwYXJhdGUgTkFUcywgY29tbXVuaWNhdGlvbiBiZXR3ZWVuIHRoZXNlDQog ICBzcG9rZXMgU0hPVUxEIGJlIHN1cHBvcnRlZCB1c2luZyB3b3JrYXJvdW5kcyBzdWNoIGFzIHBv cnQgZm9yd2FyZGluZw0KICAgYnkgdGhlIE5BVCBvciBkZXRlY3Rpbmcgd2hlbiB0d28gc3Bva2Vz IGFyZSBiZWhpbmQgdW5jb29wZXJhdGl2ZSBOQVRzDQogICBhbmQgdXNpbmcgYSBodWIgaW4gdGhh dCBjYXNlLg0KDQogICBUaGlzIHJlcXVpcmVtZW50IGlzIGRyaXZlbiBieSB1c2UgY2FzZXMgMi4x IGFuZCAyLjIuICBFbmRwb2ludHMgYXJlDQogICBvZnRlbiBiZWhpbmQgTkFUcyBhbmQgZ2F0ZXdh eXMgc29tZXRpbWVzIGFyZS4gIElQc2VjIFNIT1VMRCBjb250aW51ZQ0KICAgdG8gd29yayBzZWFt bGVzc2x5IHJlZ2FyZGxlc3MsIHVzaW5nIEFEVlBOIHRlY2huaXF1ZXMgd2hlbmV2ZXINCiAgIHBv c3NpYmxlIGFuZCBwcm92aWRpbmcgZ3JhY2VmdWwgZmFsbGJhY2sgdG8gaHViIGFuZCBzcG9rZSB0 ZWNobmlxdWVzDQogICBhcyBuZWVkZWQuDQoNCiAgIDkuICBDaGFuZ2VzIHN1Y2ggYXMgZXN0YWJs aXNoaW5nIGEgbmV3IElQc2VjIFNBIFNIT1VMRCBiZSByZXBvcnRhYmxlDQogICBhbmQgbWFuYWdl YWJsZS4gIEhvd2V2ZXIsIGNyZWF0aW5nIGEgTUlCIG9yIG90aGVyIG1hbmFnZW1lbnQNCiAgIHRl Y2huaXF1ZSBpcyBub3Qgd2l0aGluIHNjb3BlIGZvciB0aGlzIGVmZm9ydC4NCg0KICAgVGhpcyBy ZXF1aXJlbWVudCBpcyBkcml2ZW4gYnkgbWFuYWdlYWJpbGl0eSBjb25jZXJucyBmb3IgYWxsIHRo ZSB1c2UNCiAgIGNhc2VzLCBlc3BlY2lhbGx5IHVzZSBjYXNlIDIuMi4gIEFzIElQc2VjIG5ldHdv cmtzIGJlY29tZSBtb3JlDQogICBkeW5hbWljLCBtYW5hZ2VtZW50IHRvb2xzIGJlY29tZSBtb3Jl IGVzc2VudGlhbC4NCg0KDQoNCkhhbm5hICYgTWFucmFsICAgICAgICAgICBFeHBpcmVzIEF1Z3Vz dCA5LCAyMDEzICAgICAgICAgICAgICAgIFtQYWdlIDEwXQ0KDQpJbnRlcm5ldC1EcmFmdCAgICAg ICAgICAgICBBdXRvIERpc2NvdmVyeSBWUE4gICAgICAgICAgICAgIEZlYnJ1YXJ5IDIwMTMNCg0K DQogICAxMC4gIFRvIHN1cHBvcnQgYWxsaWVkIGFuZCBmZWRlcmF0ZWQgZW52aXJvbm1lbnRzLCBl bmRwb2ludHMgYW5kDQogICBnYXRld2F5cyBmcm9tIGRpZmZlcmVudCBvcmdhbml6YXRpb25zIFNI T1VMRCBiZSBhYmxlIHRvIGNvbm5lY3QgdG8NCiAgIGVhY2ggb3RoZXIuDQoNCiAgIFRoaXMgcmVx dWlyZW1lbnQgaXMgZHJpdmVuIGJ5IGRlbWFuZCBmb3IgYWxsIHRoZSB1c2UgY2FzZXMgaW4NCiAg IGZlZGVyYXRlZCBhbmQgYWxsaWVkIGVudmlyb25tZW50cy4NCg0KICAgMTEuICBUaGUgYWRtaW5p c3RyYXRvciBvZiB0aGUgQURWUE4gU0hPVUxEIGFsbG93IGZvciB0aGUNCiAgIGNvbmZpZ3VyYXRp b24gb2YgYSBTdGFyLCBGdWxsIG1lc2ggb3IgYSBwYXJ0aWFsIGZ1bGwgbWVzaCB0b3BvbG9neSwN CiAgIGJhc2VkIG9uIHdoaWNoIHR1bm5lbHMgYXJlIGFsbG93ZWQgdG8gYmUgc2V0dXAuDQoNCiAg IFRoaXMgcmVxdWlyZW1lbnQgaXMgZHJpdmVuIGJ5IGRlbWFuZCBmb3IgYWxsIHRoZSB1c2UgY2Fz ZXMgaW4NCiAgIGZlZGVyYXRlZCBhbmQgYWxsaWVkIGVudmlyb25tZW50cy4NCg0KICAgMTIuICBU aGUgQURWUE4gc29sdXRpb24gU0hPVUxEIGJlIGFibGUgdG8gc2NhbGUgZm9yIG11bHRpY2FzdA0K ICAgdHJhZmZpYy4NCg0KICAgVGhpcyByZXF1aXJlbWVudCBpcyBkcml2ZW4gYnkgdGhlIHVzZSBj YXNlIDIuMiwgd2hlcmUgdGhlIGFtb3VudCBvZg0KICAgcmljaCBtZWRpYSBtdWx0aWNhc3QgdHJh ZmZpYyBpcyBpbmNyZWFzaW5nLg0KDQogICAxMy4gIFRoZSBBRFZQTiBzb2x1dGlvbiBTSE9VTEQg YWxsb3cgZm9yIGVhc3kgbW9uaXRvcmluZywgbG9nZ2luZyBhbmQNCiAgIHJlcG9ydGluZyBvZiB0 aGUgZHluYW1pYyBjaGFuZ2VzLCB0byBoZWxwIGZvciB0cm91YmxlIHNob290aW5nIHN1Y2gNCiAg IGVudmlyb25tZW50cy4NCg0KICAgVGhpcyByZXF1aXJlbWVudCBpcyBkcml2ZW4gYnkgZGVtYW5k IGZvciBhbGwgdGhlIHVzZSBjYXNlcyBpbg0KICAgZmVkZXJhdGVkIGFuZCBhbGxpZWQgZW52aXJv bm1lbnRzLg0KDQogICAxNC4gIFRoZXJlIGlzIGFsc28gdGhlIGNhc2Ugd2hlbiBMM1ZQTnMgb3Bl cmF0ZSBvdmVyIElQc2VjIFR1bm5lbHMsDQogICBmb3IgZXhhbXBsZSBQcm92aWRlciBFZGdlIChQ RSkgYmFzZWQgVlBOJ3MuICBBbiBBRFZQTiBNVVNUIHN1cHBvcnQNCiAgIEwzVlBOIGFzIGFuIGFw cGxpY2F0aW9uIHByb3RlY3RlZCBieSB0aGUgSVBzZWMgVHVubmVscy4NCg0KICAgVGhpcyByZXF1 aXJlbWVudCBpcyBkcml2ZW4gYnkgZGVtYW5kIGZvciBhbGwgdGhlIHVzZSBjYXNlcyBpbg0KICAg ZmVkZXJhdGVkIGFuZCBhbGxpZWQgZW52aXJvbm1lbnRzLg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KSGFubmEgJiBNYW5yYWwgICAgICAgICAgIEV4cGlyZXMgQXVndXN0IDks IDIwMTMgICAgICAgICAgICAgICAgW1BhZ2UgMTFdDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAg ICAgIEF1dG8gRGlzY292ZXJ5IFZQTiAgICAgICAgICAgICAgRmVicnVhcnkgMjAxMw0KDQoNCjUu ICBTZWN1cml0eSBDb25zaWRlcmF0aW9ucw0KDQogICBUaGlzIGlzIGEgUHJvYmxlbSBzdGF0ZW1l bnQgYW5kIHJlcXVpcmVtZW50IGRvY3VtZW50IGZvciB0aGUgQURWUE4NCiAgIHNvbHV0aW9uLCBh bmQgaW4gaXRzZWxmIGRvZXMgbm90IGludHJvZHVjZSBhbnkgbmV3IHNlY3VyaXR5IGNvbmNlcm5z Lg0KICAgVGhlIHNvbHV0aW9uIHRvIHRoZSBwcm9ibGVtcyBwcmVzZW50ZWQgaW4gdGhpcyBkcmFm dCBtYXkgaW52b2x2ZQ0KICAgZHluYW1pYyB1cGRhdGVzIHRvIGRhdGFiYXNlcyBkZWZpbmVkIGJ5 IFJGQyA0MzAxLCBzdWNoIGFzIHRoZQ0KICAgU2VjdXJpdHkgUG9saWN5IERhdGFiYXNlIChTUEQp IG9yIHRoZSBQZWVyIEF1dGhvcml6YXRpb24gRGF0YWJhc2UNCiAgIChQQUQpLg0KDQogICBSRkMg NDMwMSBpcyBzaWxlbnQgYWJvdXQgdGhlIHdheSB0aGVzZSBkYXRhYmFzZXMgYXJlIHBvcHVsYXRl ZCwgYW5kDQogICBpdCBpcyBpbXBsaWVkIHRoYXQgdGhlc2UgZGF0YWJhc2VzIGFyZSBzdGF0aWMg YW5kIHByZS1jb25maWd1cmVkIGJ5IGENCiAgIGh1bWFuLiAgQWxsb3dpbmcgZHluYW1pYyB1cGRh dGVzIHRvIHRoZXNlIGRhdGFiYXNlcyBtdXN0IGJlIHRob3VnaHQNCiAgIG91dCBjYXJlZnVsbHks IGJlY2F1c2UgaXQgYWxsb3dzIHRoZSBwcm90b2NvbCB0byBhbHRlciB0aGUgc2VjdXJpdHkNCiAg IHBvbGljeSB0aGF0IHRoZSBJUHNlYyBlbmRwb2ludHMgaW1wbGVtZW50Lg0KDQogICBPbmUgb2J2 aW91cyBhdHRhY2sgdG8gd2F0Y2ggb3V0IGZvciBpcyBzdGVhbGluZyB0cmFmZmljIHRvIGENCiAg IHBhcnRpY3VsYXIgc2l0ZS4gIFRoZSBJUCBhZGRyZXNzIGZvciB3d3cuZXhhbXBsZS5jb20gaXMg MTkyLjAuMi4xMC4NCiAgIElmIHdlIGFkZCBhbiBlbnRyeSB0byBhbiBJUHNlYyBlbmRwb2ludCdz IFNQRCB0aGF0IHNheXMgdGhhdCB0cmFmZmljDQogICB0byAxOTIuMC4yLjEwIGlzIHByb3RlY3Rl ZCB0aHJvdWdoIHBlZXIgR3ctTWFsbG9yeSwgdGhlbiB0aGlzIGFsbG93cw0KICAgR3ctTWFsbG9y eSB0byBlaXRoZXIgcHJldGVuZCB0byBiZSB3d3cuZXhhbXBsZS5jb20gb3IgdG8gcHJveHkgYW5k DQogICByZWFkIGFsbCB0cmFmZmljIHRvIHRoYXQgc2l0ZS4gIFVwZGF0ZXMgdG8gdGhpcyBkYXRh YmFzZSByZXF1aXJlcyBhDQogICBjbGVhciB0cnVzdCBtb2RlbC4NCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQpIYW5uYSAmIE1hbnJhbCAg ICAgICAgICAgRXhwaXJlcyBBdWd1c3QgOSwgMjAxMyAgICAgICAgICAgICAgICBbUGFnZSAxMl0N Cg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgQXV0byBEaXNjb3ZlcnkgVlBOICAgICAgICAg ICAgICBGZWJydWFyeSAyMDEzDQoNCg0KNi4gIElBTkEgQ29uc2lkZXJhdGlvbnMNCg0KICAgTm8g YWN0aW9ucyBhcmUgcmVxdWlyZWQgZnJvbSBJQU5BIGZvciB0aGlzIGluZm9ybWF0aW9uYWwgZG9j dW1lbnQuDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQpIYW5uYSAmIE1h bnJhbCAgICAgICAgICAgRXhwaXJlcyBBdWd1c3QgOSwgMjAxMyAgICAgICAgICAgICAgICBbUGFn ZSAxM10NCg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgQXV0byBEaXNjb3ZlcnkgVlBOICAg ICAgICAgICAgICBGZWJydWFyeSAyMDEzDQoNCg0KNy4gIEFja25vd2xlZGdlbWVudHMNCg0KICAg TWFueSBwZW9wbGUgaGF2ZSBjb250cmlidXRlZCB0byB0aGUgZGV2ZWxvcG1lbnQgb2YgdGhpcyBw cm9ibGVtDQogICBzdGF0ZW1lbnQgYW5kIG1hbnkgbW9yZSB3aWxsIHByb2JhYmx5IGRvIHNvIGJl Zm9yZSB3ZSBhcmUgZG9uZSB3aXRoDQogICBpdC4gIFdoaWxlIHdlIGNhbm5vdCB0aGFuayBhbGwg Y29udHJpYnV0b3JzLCBzb21lIGhhdmUgcGxheWVkIGFuDQogICBlc3BlY2lhbGx5IHByb21pbmVu dCByb2xlLiAgWW9hdiBOaXIsIFlhcm9uIFNoZWZmZXIsIEpvcmdlIENvcm9uZWwNCiAgIE1lbmRv emEsIENocmlzIFVsbGlvdHQsIGFuZCBKb2huIFZlaXphZGVzIHdyb3RlIHRoZSBkb2N1bWVudCB1 cG9uDQogICB3aGljaCB0aGlzIGRyYWZ0IHdhcyBiYXNlZC4gIEdlb2ZmcmV5IEh1YW5nLCBTdXJl c2ggTWVsYW0sIFByYXZlZW4NCiAgIFNhdGh5YW5hcmF5YW4sIEFuZHJlYXMgU3RlZmZlbiwgQnJp YW4gV2VpcywgYW5kIExvdSBCZXJnZXIgcHJvdmlkZWQNCiAgIGVzc2VudGlhbCBpbnB1dC4NCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQpIYW5uYSAmIE1hbnJhbCAgICAgICAgICAgRXhwaXJlcyBB dWd1c3QgOSwgMjAxMyAgICAgICAgICAgICAgICBbUGFnZSAxNF0NCg0KSW50ZXJuZXQtRHJhZnQg ICAgICAgICAgICAgQXV0byBEaXNjb3ZlcnkgVlBOICAgICAgICAgICAgICBGZWJydWFyeSAyMDEz DQoNCg0KOC4gIE5vcm1hdGl2ZSBSZWZlcmVuY2VzDQoNCiAgIFtSRkMyMTE5XSAgQnJhZG5lciwg Uy4sICJLZXkgd29yZHMgZm9yIHVzZSBpbiBSRkNzIHRvIEluZGljYXRlDQogICAgICAgICAgICAg IFJlcXVpcmVtZW50IExldmVscyIsIEJDUCAxNCwgUkZDIDIxMTksIE1hcmNoIDE5OTcuDQoNCiAg IFtSRkM0MzAxXSAgS2VudCwgUy4gYW5kIEsuIFNlbywgIlNlY3VyaXR5IEFyY2hpdGVjdHVyZSBm b3IgdGhlDQogICAgICAgICAgICAgIEludGVybmV0IFByb3RvY29sIiwgUkZDIDQzMDEsIERlY2Vt YmVyIDIwMDUuDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KSGFubmEgJiBNYW5yYWwg ICAgICAgICAgIEV4cGlyZXMgQXVndXN0IDksIDIwMTMgICAgICAgICAgICAgICAgW1BhZ2UgMTVd DQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgIEF1dG8gRGlzY292ZXJ5IFZQTiAgICAgICAg ICAgICAgRmVicnVhcnkgMjAxMw0KDQoNCkF1dGhvcnMnIEFkZHJlc3Nlcw0KDQogICBTdGV2ZSBI YW5uYQ0KICAgSnVuaXBlciBOZXR3b3JrcywgSW5jLg0KICAgMTE5NCBOLiBNYXRoaWxkYSBBdmUu DQogICBTdW5ueXZhbGUsIENBICA5NDA4OQ0KICAgVVNBDQoNCiAgIEVtYWlsOiBzaGFubmFAanVu aXBlci5uZXQNCg0KDQogICBWaXNod2FzIE1hbnJhbA0KICAgSGV3bGV0dC1QYWNrYXJkIENvLg0K ICAgMTkxMTEgUHJ1bmVyaWRnZSBBdmUuDQogICBDdXBlcnRpbm8sIENBICA5NTExMw0KICAgVVNB DQoNCiAgIEVtYWlsOiB2aXNod2FzLm1hbnJhbEBocC5jb20NCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCkhhbm5hICYgTWFu cmFsICAgICAgICAgICBFeHBpcmVzIEF1Z3VzdCA5LCAyMDEzICAgICAgICAgICAgICAgIFtQYWdl IDE2XQ0K --0050450165d927212304d4ef1da6-- From yamaya@fnsc.co.jp Tue Feb 19 04:50:34 2013 Return-Path: X-Original-To: ipsec@ietfa.amsl.com Delivered-To: ipsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3BB1521F8B84 for ; Tue, 19 Feb 2013 04:50:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.09 X-Spam-Level: X-Spam-Status: No, score=-0.09 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T0Zw8Zpbspdn for ; Tue, 19 Feb 2013 04:50:33 -0800 (PST) Received: from fnsc.co.jp (fnsc.co.jp [114.179.9.192]) by ietfa.amsl.com (Postfix) with ESMTP id 8EDDD21F8B83 for ; Tue, 19 Feb 2013 04:50:33 -0800 (PST) Received: from ([158.202.233.182]) by ms.fnsc.co.jp with ESMTP id 4D8TFN1.1314067; Tue, 19 Feb 2013 21:50:27 +0900 Message-ID: <51237514.2020000@fnsc.co.jp> Date: Tue, 19 Feb 2013 21:50:28 +0900 From: yamaya User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:17.0) Gecko/20130107 Thunderbird/17.0.2 MIME-Version: 1.0 To: ipsec@ietf.org References: <20130218132010.30161.5583.idtracker@ietfa.amsl.com> In-Reply-To: <20130218132010.30161.5583.idtracker@ietfa.amsl.com> X-Forwarded-Message-Id: <20130218132010.30161.5583.idtracker@ietfa.amsl.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Subject: [IPsec] Fwd: New Version Notification for draft-yamaya-ipsecme-mpsa-00.txt X-BeenThere: ipsec@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion of IPsec protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Feb 2013 12:50:34 -0000 Hi all, I have posted a new draft. It describes a simple solution to build a large VPN network by dynamically established IPsec multi-point SA. Comments would be appreciated. Best Regards, Arifumi Yamaya -------- Original Message -------- Subject: New Version Notification for draft-yamaya-ipsecme-mpsa-00.txt Date: Mon, 18 Feb 2013 05:20:10 -0800 From: internet-drafts@ietf.org To: yamaya@fnsc.co.jp CC: ueki@fnsc.co.jp, murai@fnsc.co.jp A new version of I-D, draft-yamaya-ipsecme-mpsa-00.txt has been successfully submitted by Arifumi Yamaya and posted to the IETF repository. Filename: draft-yamaya-ipsecme-mpsa Revision: 00 Title: simple VPN solution using Multi-point Security Association Creation date: 2013-02-18 Group: Individual Submission Number of pages: 10 URL: http://www.ietf.org/internet-drafts/draft-yamaya-ipsecme-mpsa-00.txt Status: http://datatracker.ietf.org/doc/draft-yamaya-ipsecme-mpsa Htmlized: http://tools.ietf.org/html/draft-yamaya-ipsecme-mpsa-00 Abstract: This document describes the over-lay network solution by utilizing dynamically established IPsec multi-point Security Association (SA) without individual connection. Multi-point SA technology provides the simplified mechanism of the Auto Discovery and Configuration function. This is applicable for any IPsec tunnels such as IPv4 over IPv4, IPv4 over IPv6, IPv6 over IPv4 and IPv6 over IPv6. The IETF Secretariat From vishwas.ietf@gmail.com Wed Feb 20 16:08:39 2013 Return-Path: X-Original-To: ipsec@ietfa.amsl.com Delivered-To: ipsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C9B5721F8C8D for ; Wed, 20 Feb 2013 16:08:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.774 X-Spam-Level: X-Spam-Status: No, score=-2.774 tagged_above=-999 required=5 tests=[AWL=0.624, BAYES_00=-2.599, GB_I_LETTER=-2, HTML_MESSAGE=0.001, J_BACKHAIR_35=1, J_CHICKENPOX_13=0.6, J_CHICKENPOX_14=0.6, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AQGu3RB68kKU for ; Wed, 20 Feb 2013 16:08:36 -0800 (PST) Received: from mail-qe0-f51.google.com (mail-qe0-f51.google.com [209.85.128.51]) by ietfa.amsl.com (Postfix) with ESMTP id 7B52421F8C8C for ; Wed, 20 Feb 2013 16:08:32 -0800 (PST) Received: by mail-qe0-f51.google.com with SMTP id 6so4046638qea.10 for ; Wed, 20 Feb 2013 16:08:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:cc:content-type; bh=mo9Y9iW/DwwCdjRpBPsp9evT7euh0z24w/mgTDmQxEk=; b=ZvzndPO1ssyCKa4/SePpihJBcBjCIp4p0AMIqtffah/MiO4KwrD5KhkLWSaavIfIu2 r2uddRaAik5sq+IdDnR9t1TBUxFPYJyRPrElpY5xJSTLY73TIfJtANkL+o/hbCtKnebd 89Qz8fzWRTf4yOvgo3ukIhj+/3XbqCMLkmBnIbou+mwddbUUBhKTgVq+B/ZvvmhsPULs gdT1n80UNmaBVzH6pLrSuUMpnhrUiyPK0seczMM0wXmiJK1NsSYUgCQeRchRteU5iNhM oSiqo2P3QoGzlp2RavKIdiuYqCEu7ZyXz/J/3nxd3PcKAZn5CSk/Hn6cF+E2WtCsJz8Z 5IYQ== MIME-Version: 1.0 X-Received: by 10.224.52.68 with SMTP id h4mr10230463qag.17.1361405311811; Wed, 20 Feb 2013 16:08:31 -0800 (PST) Received: by 10.229.92.77 with HTTP; Wed, 20 Feb 2013 16:08:31 -0800 (PST) In-Reply-To: <20692.12491.489818.760016@fireball.kivinen.iki.fi> References: <20692.12491.489818.760016@fireball.kivinen.iki.fi> Date: Wed, 20 Feb 2013 16:08:31 -0800 Message-ID: From: Vishwas Manral To: Tero Kivinen Content-Type: multipart/mixed; boundary=20cf3074afa801bc1404d630e0ac Cc: ipsec@ietf.org Subject: Re: [IPsec] My comments to the draft-ietf-ipsecme-ad-vpn-problem-03.txt X-BeenThere: ipsec@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion of IPsec protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Feb 2013 00:08:39 -0000 --20cf3074afa801bc1404d630e0ac Content-Type: multipart/alternative; boundary=20cf3074afa801bc0c04d630e0aa --20cf3074afa801bc0c04d630e0aa Content-Type: text/plain; charset=ISO-8859-1 Hi Tero, I am attaching the draft with your comment incorporated. Regarding points 6 & 7 below I think there is some confusion. A spoke in my view can be both an endpoint and a gateway. So within a ADVPN domain the concept of connections to a spoke gateways from end points are not in the perview at all. Do let me know if that makes sense? If you approve this I will post the draft across. Thanks, Vishwas On Fri, Dec 21, 2012 at 1:50 AM, Tero Kivinen wrote: > I now read the lastest version. The terminology is much clearer now, > and the document is much easier to read. I still see that not all of > my comments in previous versions have been added to the document (some > even from my 2012-03-14 email > http://www.ietf.org/mail-archive/web/ipsec/current/msg07558.html, i.e > the changes to section 3.1, 3.2 and 3.3). > > I am now going through my comments from 2012-09-10 email > http://www.ietf.org/mail-archive/web/ipsec/current/msg07910.html and > see which still apply). > > ---------------------------------------------------------------------- > > Now that we have new terminology, it would be nice to have all terms > defined in the terminology to use capital letter, so it would be clear > that Hub/Gateway/Spoke/Endpoint etc has special meaning... > > ---------------------------------------------------------------------- > > > 4.1. Gateway and Endpoint Requirements > > ... > > 2. Gateways and endpoints MUST allow IPsec Tunnels to be setup > > without any configuration changes, even when peer addresses get > > updated every time the device comes up. This implies that SPD > > entries or other configuration based on peer IP address will need to > > be automatically updated, avoided, or handled in some manner to avoid > > a need to manually update policy whenever an address changes. > > In this I was trying to ask whether this is supposed to for existing > already configured Gateways and endpoints, and as now the 1 has been > changed to include gateway or endpoints addition/removal/changes, it > is quite clear this only covers the normal operational use, i.e. when > the gateways and endpoints are already configured. Perhaps changing it > something like > > 2. Existing member Gateways and endpoints of the ADVPN MUST allow > IPsec Tunnels to be setup with other members of the ADVPN without > any configuration changes, even when peer addresses get updated > every time the device comes up. This implies that SPD entries or > other configuration based on peer IP address will need to be > automatically updated, avoided, or handled in some manner to avoid > a need to manually update policy whenever an address changes. > > to make it clear that we are not talking about the initial > configuration but the actual normal use case of 2 peers which are > already part of the ADVPN. > > BTW, perhaps we should add "ADVPN Peer" to the terminology and say it > is any member (gateway, endpoint, hub or spoke) of the ADVPN and use > "other ADVPN peers" above instead of "other members of the ADVPN". > > Or see if there is any other uses for peer than exactly that, and then > define "Peer" to be same as ADVPN Peer... > > ---------------------------------------------------------------------- > > > 4. In the full mesh and dynamic full mesh topology, Spokes MUST > > allow for direct communication with other spoke gateways and > > endpoints. In the star topology mode, direct communication between > > spokes MUST be disallowed. > > I have question here, why are we defining things for strict star > topology mode, as the 2.2 says star topology is not good, and we need > to have spoke to spoke communications. So 2.2 does NOT justify the > last sentence in this requirement that forbids spoke to spoke > communications for star topology mode. What is the justification for > it? > > If we are not defining things for star topology we should not put any > restrictions to it either. In my March email I pointed out that star > topology is sometimes used for policy reasons, but that addition never > made to the document. Those policy reasons might be one reason why > some setups would still use star topology even with ADVPN, but I would > expect it to be more like half star half mesh setup, where some > traffic goes through star and some traffic bypasses it, so even there > the last sentence does not work out. > > ---------------------------------------------------------------------- > > > 5. One spoke MUST NOT be able to impersonate another spoke. > > Note, that this does not say anything about the Hubs or Endpoints. For > Endpoints I think there should be same requirement, i.e. one Endpoint > MUST NOT be able to impersonate another Endpoint or Gateway. > > Btw, I think it would also be unacceptable for Spoke to impersonate of > being Hub, so the "another Spoke" should be changed to "any other > Gateway". > > Note, also that Spokes and Hubs quite often can impersonate Endpoints, > as Endpoints might use weak form authentication (shared secrets), and > the Spokes have access to them. Also when using temporary credentials > given by Spokes/Hubs etc to the Endpoints for Point-to-Point > communication between two Endpoints the entity who gave those out > might be able to impersonate Endpoints (unless the temporary > credentials is in form of certificate signed by some CA). > > When I pointed this out last time, I got answer that this document is > trying to impose the "typical enterprice connectivity scenario" here, > but I think we should think these requirements, not rely on some > unspoken enterprice connectivity scenario. Especially as it do limit > our options and will affect our threat model. > > So I would like to see expictly whether Hubs should be able to > impersonate other Gateways / Endpoints and same for Endpoints. > > Also last time the comment was that with this "typical enterprice > connectivity scenario" spoke to hub connections are static, but now we > have requirement 7 which says that gateway might handoff sessions to > another gateway. Gateway includes hubs, so hub can handoff spokes to > another hub if he feels like. If this was not intended, then 7 should > be changed so it says "Spokes SHOULD allow for easy handoff of a > session to another Spoke, ...". > > Also as this connectivity scenario is not documented anywhere, so if > it is wanted, we should add text for it, i.e. most likely change the > Hub and Spoke definitions to say that connections between Hubs and > Spokes are mostly static. > > ---------------------------------------------------------------------- > > > 6. Gateways SHOULD allow for seamless handoff of sessions in case > > endpoints are roaming, even if they cross policy boundaries. This > > would mean the data traffic is minimally affected even as the handoff > > happens. External factors like firewall, NAT box will not be > > considered part of this solution. > > > > This requirement is driven by use case 2.1. Today's endpoints are > > mobile and transition often between different networks (from 4G to > > WiFi and among various WiFi networks). > > This is still unclear. Last time I proposed two options, and I was > said that both of them might be correct, but neither one of them are > what is really said above. > > As the 2.1 is Endpoint-to-Endpoint use case, I assume this is supposed > to say that "Spokes SHOULD allow for seamless handoff of sessions to > Point-to-Point communication mode between Endpoints that used to be > connected to Spoke, in case ...". > > I.e. This does not cover the Endpoint moving from one Spoke to > another, but two Endpoints talking through Spokes moving to the > Point-to-Point mode, I think the Endpoint moving from one Spoke to > another Spoke is covered by requirement 7. > > Right? > > ---------------------------------------------------------------------- > > > 7. Gateways SHOULD allow for easy handoff of a session to another > > gateway, to optimize latency, bandwidth, load balancing, > > availability, or other factors, based on policy. > > > > This requirement is driven by use case 2.3. > > And as 2.3 is Endpoint-to-Gateway, I assume this is the case where > Spoke gives one Endpoint to another Spoke..., i.e. "Spokes SHOULD > allow for easy handoff of a Endpoint to another Spoke, ...". > > Am I correct here? > > And if we assume Hub<->Spoke connection is mostly static we do not > allow Hubs to handoff Spokes to another Hubs (if we do want to say > that, then we can use the "Gateways" above). > > These 6 and 7 use term "session" which is not very well defined. There > are multiple possible meanings for it, and I think it would be good > idea to try to define which one of them is meant. > -- > kivinen@iki.fi > _______________________________________________ > IPsec mailing list > IPsec@ietf.org > https://www.ietf.org/mailman/listinfo/ipsec > --20cf3074afa801bc0c04d630e0aa Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
Hi Tero,
=A0
I am attaching the draft with=A0your = comment incorporated.
=A0
Regarding points 6 & 7 b= elow I think there is some confusion. A spoke in my view can be both an end= point and a gateway. So within a ADVPN domain the concept of connections to= a=A0spoke gateways=A0from end points are not in the perview at all. Do let= me know if that makes sense?
=A0
If you approve this I will post the draft across.
<= div>=A0
Thanks,
Vishwas

On Fri, Dec 21, 2012 at 1:50 AM, Tero Kivinen &l= t;kivinen@iki.fi>= ; wrote:
I now read the lastest version. The terminology is much cl= earer now,
and the document is much easier to read. I still see that not all of
my comments in previous versions have been added to the document (some
even from my 2012-03-14 email
http://www.ietf.org/mail-archive/web/ipsec/current/msg0= 7558.html, i.e
the changes to section 3.1, 3.2 and 3.3).

I am now going through my comments from 2012-09-10 email
http://www.ietf.org/mail-archive/web/ipsec/current/msg0= 7910.html and
see which still apply).

----------------------------------------------------------------------

Now that we have new terminology, it would be nice to have all terms
defined in the terminology to use capital letter, so it would be clear
that Hub/Gateway/Spoke/Endpoint etc has special meaning...

----------------------------------------------------------------------

> 4.1. =A0Gateway and Endpoint Requirements
> ...
> =A0 =A02. =A0Gateways and endpoints MUST allow IPsec Tunnels to be set= up
> =A0 =A0without any configuration changes, even when peer addresses get=
> =A0 =A0updated every time the device comes up. =A0This implies that SP= D
> =A0 =A0entries or other configuration based on peer IP address will ne= ed to
> =A0 =A0be automatically updated, avoided, or handled in some manner to= avoid
> =A0 =A0a need to manually update policy whenever an address changes.
In this I was trying to ask whether this is supposed to for existing
already configured Gateways and endpoints, and as now the 1 has been
changed to include gateway or endpoints addition/removal/changes, it
is quite clear this only covers the normal operational use, i.e. when
the gateways and endpoints are already configured. Perhaps changing it
something like

=A0 =A02. Existing member Gateways and endpoints of the ADVPN MUST allow =A0 =A0IPsec Tunnels to be setup with other members of the ADVPN without =A0 =A0any configuration changes, even when peer addresses get updated
=A0 =A0every time the device comes up. This implies that SPD entries or
=A0 =A0other configuration based on peer IP address will need to be
=A0 =A0automatically updated, avoided, or handled in some manner to avoid =A0 =A0a need to manually update policy whenever an address changes.

to make it clear that we are not talking about the initial
configuration but the actual normal use case of 2 peers which are
already part of the ADVPN.

BTW, perhaps we should add "ADVPN Peer" to the terminology and sa= y it
is any member (gateway, endpoint, hub or spoke) of the ADVPN and use
"other ADVPN peers" above instead of "other members of the A= DVPN".

Or see if there is any other uses for peer than exactly that, and then
define "Peer" to be same as ADVPN Peer...

----------------------------------------------------------------------

> =A0 4. =A0In the full mesh and dynamic full mesh topology, Spokes MUST=
> =A0 allow for direct communication with other spoke gateways and
> =A0 endpoints. =A0In the star topology mode, direct communication betw= een
> =A0 spokes MUST be disallowed.

I have question here, why are we defining things for strict star
topology mode, as the 2.2 says star topology is not good, and we need
to have spoke to spoke communications. So 2.2 does NOT justify the
last sentence in this requirement that forbids spoke to spoke
communications for star topology mode. What is the justification for
it?

If we are not defining things for star topology we should not put any
restrictions to it either. In my March email I pointed out that star
topology is sometimes used for policy reasons, but that addition never
made to the document. Those policy reasons might be one reason why
some setups would still use star topology even with ADVPN, but I would
expect it to be more like half star half mesh setup, where some
traffic goes through star and some traffic bypasses it, so even there
the last sentence does not work out.

----------------------------------------------------------------------

> =A0 5. =A0One spoke MUST NOT be able to impersonate another spoke.

Note, that this does not say anything about the Hubs or Endpoints. For
Endpoints I think there should be same requirement, i.e. one Endpoint
MUST NOT be able to impersonate another Endpoint or Gateway.

Btw, I think it would also be unacceptable for Spoke to impersonate of
being Hub, so the "another Spoke" should be changed to "any = other
Gateway".

Note, also that Spokes and Hubs quite often can impersonate Endpoints,
as Endpoints might use weak form authentication (shared secrets), and
the Spokes have access to them. Also when using temporary credentials
given by Spokes/Hubs etc to the Endpoints for Point-to-Point
communication between two Endpoints the entity who gave those out
might be able to impersonate Endpoints (unless the temporary
credentials is in form of certificate signed by some CA).

When I pointed this out last time, I got answer that this document is
trying to impose the "typical enterprice connectivity scenario" h= ere,
but I think we should think these requirements, not rely on some
unspoken enterprice connectivity scenario. Especially as it do limit
our options and will affect our threat model.

So I would like to see expictly whether Hubs should be able to
impersonate other Gateways / Endpoints and same for Endpoints.

Also last time the comment was that with this "typical enterprice
connectivity scenario" spoke to hub connections are static, but now we=
have requirement 7 which says that gateway might handoff sessions to
another gateway. Gateway includes hubs, so hub can handoff spokes to
another hub if he feels like. If this was not intended, then 7 should
be changed so it says "Spokes SHOULD allow for easy handoff of a
session to another Spoke, ...".

Also as this connectivity scenario is not documented anywhere, so if
it is wanted, we should add text for it, i.e. most likely change the
Hub and Spoke definitions to say that connections between Hubs and
Spokes are mostly static.

----------------------------------------------------------------------

> =A0 6. =A0Gateways SHOULD allow for seamless handoff of sessions in ca= se
> =A0 endpoints are roaming, even if they cross policy boundaries. =A0Th= is
> =A0 would mean the data traffic is minimally affected even as the hand= off
> =A0 happens. =A0External factors like firewall, NAT box will not be > =A0 considered part of this solution.
>
> =A0 This requirement is driven by use case 2.1. =A0Today's endpoin= ts are
> =A0 mobile and transition often between different networks (from 4G to=
> =A0 WiFi and among various WiFi networks).

This is still unclear. Last time I proposed two options, and I was
said that both of them might be correct, but neither one of them are
what is really said above.

As the 2.1 is Endpoint-to-Endpoint use case, I assume this is supposed
to say that "Spokes SHOULD allow for seamless handoff of sessions to Point-to-Point communication mode between Endpoints that used to be
connected to Spoke, in case ...".

I.e. This does not cover the Endpoint moving from one Spoke to
another, but two Endpoints talking through Spokes moving to the
Point-to-Point mode, I think the Endpoint moving from one Spoke to
another Spoke is covered by requirement 7.

Right?

----------------------------------------------------------------------

> =A0 7. =A0Gateways SHOULD allow for easy handoff of a session to anoth= er
> =A0 gateway, to optimize latency, bandwidth, load balancing,
> =A0 availability, or other factors, based on policy.
>
> =A0 This requirement is driven by use case 2.3.

And as 2.3 is Endpoint-to-Gateway, I assume this is the case where
Spoke gives one Endpoint to another Spoke..., i.e. "Spokes SHOULD
allow for easy handoff of a Endpoint to another Spoke, ...".

Am I correct here?

And if we assume Hub<->Spoke connection is mostly static we do not allow Hubs to handoff Spokes to another Hubs (if we do want to say
that, then we can use the "Gateways" above).

These 6 and 7 use term "session" which is not very well defined. = There
are multiple possible meanings for it, and I think it would be good
idea to try to define which one of them is meant.
--
kivinen@iki.fi
_______________________________________________
IPsec mailing list
IPsec@ietf.org
h= ttps://www.ietf.org/mailman/listinfo/ipsec

--20cf3074afa801bc0c04d630e0aa-- --20cf3074afa801bc1404d630e0ac Content-Type: text/plain; charset=US-ASCII; name="draft-ietf-ipsecme-ad-vpn-problem-04.txt" Content-Disposition: attachment; filename="draft-ietf-ipsecme-ad-vpn-problem-04.txt" Content-Transfer-Encoding: base64 X-Attachment-Id: f_hdf5gv2z0 DQoNCg0KSVBzZWNNRSBXb3JraW5nIEdyb3VwICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIFMuIEhhbm5hDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEp1bmlwZXINCkludGVuZGVkIHN0YXR1czog SW5mb3JtYXRpb25hbCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFYuIE1hbnJhbA0K RXhwaXJlczogQXVndXN0IDI1LCAyMDEzICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIEhQDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgRmVicnVhcnkgMjEsIDIwMTMNCg0KDQogICAgICAgICBBdXRvIERpc2Nv dmVyeSBWUE4gUHJvYmxlbSBTdGF0ZW1lbnQgYW5kIFJlcXVpcmVtZW50cw0KICAgICAgICAgICAg ICAgICAgZHJhZnQtaWV0Zi1pcHNlY21lLWFkLXZwbi1wcm9ibGVtLTA0DQoNCkFic3RyYWN0DQoN CiAgIFRoaXMgZG9jdW1lbnQgZGVzY3JpYmVzIHRoZSBwcm9ibGVtIG9mIGVuYWJsaW5nIGEgbGFy Z2UgbnVtYmVyIG9mDQogICBzeXN0ZW1zIHRvIGNvbW11bmljYXRlIGRpcmVjdGx5IHVzaW5nIElQ c2VjIHRvIHByb3RlY3QgdGhlIHRyYWZmaWMNCiAgIGJldHdlZW4gdGhlbS4gIEl0IHRoZW4gZXhw YW5kcyBvbiB0aGUgcmVxdWlyZW1lbnRzLCBmb3Igc3VjaCBhDQogICBzb2x1dGlvbi4NCg0KICAg TWFudWFsIGNvbmZpZ3VyYXRpb24gb2YgYWxsIHBvc3NpYmxlIHR1bm5lbHMgaXMgdG9vIGN1bWJl cnNvbWUgaW4NCiAgIG1hbnkgc3VjaCBjYXNlcy4gIEluIG90aGVyIGNhc2VzIHRoZSBJUCBhZGRy ZXNzIG9mIGVuZHBvaW50cyBjaGFuZ2UNCiAgIG9yIHRoZSBlbmRwb2ludHMgbWF5IGJlIGJlaGlu ZCBOQVQgZ2F0ZXdheXMsIG1ha2luZyBzdGF0aWMNCiAgIGNvbmZpZ3VyYXRpb24gaW1wb3NzaWJs ZS4gIFRoZSBBdXRvIERpc2NvdmVyeSBWUE4gc29sdXRpb24gd2lsbA0KICAgYWRkcmVzcyB0aGVz ZSByZXF1aXJlbWVudHMuDQoNClN0YXR1cyBvZiB0aGlzIE1lbW8NCg0KICAgVGhpcyBJbnRlcm5l dC1EcmFmdCBpcyBzdWJtaXR0ZWQgaW4gZnVsbCBjb25mb3JtYW5jZSB3aXRoIHRoZQ0KICAgcHJv dmlzaW9ucyBvZiBCQ1AgNzggYW5kIEJDUCA3OS4NCg0KICAgSW50ZXJuZXQtRHJhZnRzIGFyZSB3 b3JraW5nIGRvY3VtZW50cyBvZiB0aGUgSW50ZXJuZXQgRW5naW5lZXJpbmcNCiAgIFRhc2sgRm9y Y2UgKElFVEYpLiAgTm90ZSB0aGF0IG90aGVyIGdyb3VwcyBtYXkgYWxzbyBkaXN0cmlidXRlDQog ICB3b3JraW5nIGRvY3VtZW50cyBhcyBJbnRlcm5ldC1EcmFmdHMuICBUaGUgbGlzdCBvZiBjdXJy ZW50IEludGVybmV0LQ0KICAgRHJhZnRzIGlzIGF0IGh0dHA6Ly9kYXRhdHJhY2tlci5pZXRmLm9y Zy9kcmFmdHMvY3VycmVudC8uDQoNCiAgIEludGVybmV0LURyYWZ0cyBhcmUgZHJhZnQgZG9jdW1l bnRzIHZhbGlkIGZvciBhIG1heGltdW0gb2Ygc2l4IG1vbnRocw0KICAgYW5kIG1heSBiZSB1cGRh dGVkLCByZXBsYWNlZCwgb3Igb2Jzb2xldGVkIGJ5IG90aGVyIGRvY3VtZW50cyBhdCBhbnkNCiAg IHRpbWUuICBJdCBpcyBpbmFwcHJvcHJpYXRlIHRvIHVzZSBJbnRlcm5ldC1EcmFmdHMgYXMgcmVm ZXJlbmNlDQogICBtYXRlcmlhbCBvciB0byBjaXRlIHRoZW0gb3RoZXIgdGhhbiBhcyAid29yayBp biBwcm9ncmVzcy4iDQoNCiAgIFRoaXMgSW50ZXJuZXQtRHJhZnQgd2lsbCBleHBpcmUgb24gQXVn dXN0IDI1LCAyMDEzLg0KDQpDb3B5cmlnaHQgTm90aWNlDQoNCiAgIENvcHlyaWdodCAoYykgMjAx MyBJRVRGIFRydXN0IGFuZCB0aGUgcGVyc29ucyBpZGVudGlmaWVkIGFzIHRoZQ0KICAgZG9jdW1l bnQgYXV0aG9ycy4gIEFsbCByaWdodHMgcmVzZXJ2ZWQuDQoNCiAgIFRoaXMgZG9jdW1lbnQgaXMg c3ViamVjdCB0byBCQ1AgNzggYW5kIHRoZSBJRVRGIFRydXN0J3MgTGVnYWwNCiAgIFByb3Zpc2lv bnMgUmVsYXRpbmcgdG8gSUVURiBEb2N1bWVudHMNCiAgIChodHRwOi8vdHJ1c3RlZS5pZXRmLm9y Zy9saWNlbnNlLWluZm8pIGluIGVmZmVjdCBvbiB0aGUgZGF0ZSBvZg0KDQoNCg0KSGFubmEgJiBN YW5yYWwgICAgICAgICAgIEV4cGlyZXMgQXVndXN0IDI1LCAyMDEzICAgICAgICAgICAgICAgIFtQ YWdlIDFdDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgIEF1dG8gRGlzY292ZXJ5IFZQTiAg ICAgICAgICAgICAgRmVicnVhcnkgMjAxMw0KDQoNCiAgIHB1YmxpY2F0aW9uIG9mIHRoaXMgZG9j dW1lbnQuICBQbGVhc2UgcmV2aWV3IHRoZXNlIGRvY3VtZW50cw0KICAgY2FyZWZ1bGx5LCBhcyB0 aGV5IGRlc2NyaWJlIHlvdXIgcmlnaHRzIGFuZCByZXN0cmljdGlvbnMgd2l0aCByZXNwZWN0DQog ICB0byB0aGlzIGRvY3VtZW50LiAgQ29kZSBDb21wb25lbnRzIGV4dHJhY3RlZCBmcm9tIHRoaXMg ZG9jdW1lbnQgbXVzdA0KICAgaW5jbHVkZSBTaW1wbGlmaWVkIEJTRCBMaWNlbnNlIHRleHQgYXMg ZGVzY3JpYmVkIGluIFNlY3Rpb24gNC5lIG9mDQogICB0aGUgVHJ1c3QgTGVnYWwgUHJvdmlzaW9u cyBhbmQgYXJlIHByb3ZpZGVkIHdpdGhvdXQgd2FycmFudHkgYXMNCiAgIGRlc2NyaWJlZCBpbiB0 aGUgU2ltcGxpZmllZCBCU0QgTGljZW5zZS4NCg0KDQpUYWJsZSBvZiBDb250ZW50cw0KDQogICAx LiAgSW50cm9kdWN0aW9uIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gIDMNCiAgICAgMS4xLiAgVGVybWlub2xvZ3kgIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMw0KICAgICAxLjIuICBDb252ZW50aW9ucyBVc2Vk IGluIFRoaXMgRG9jdW1lbnQgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA0DQogICAyLiAgVXNl IENhc2VzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gIDUNCiAgICAgMi4xLiAgRW5kcG9pbnQtdG8tRW5kcG9pbnQgQURWUE4gVXNlIENhc2UgIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAgNQ0KICAgICAyLjIuICBHYXRld2F5LXRvLUdhdGV3YXkgQURW UE4gVXNlIENhc2UgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA1DQogICAgIDIuMy4gIEVuZHBv aW50LXRvLUdhdGV3YXkgQURWUE4gVXNlIENhc2UgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDYN CiAgIDMuICBJbmFkZXF1YWN5IG9mIEV4aXN0aW5nIFNvbHV0aW9ucyAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAgNw0KICAgICAzLjEuICBFeGhhdXN0aXZlIENvbmZpZ3VyYXRpb24gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA3DQogICAgIDMuMi4gIFN0YXIgVG9wb2xv Z3kgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDcNCiAgICAg My4zLiAgUHJvcHJpZXRhcnkgQXBwcm9hY2hlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAgOA0KICAgNC4gIFJlcXVpcmVtZW50cyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA5DQogICAgIDQuMS4gIEdhdGV3YXkgYW5kIEVuZHBv aW50IFJlcXVpcmVtZW50cyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDkNCiAgIDUuICBTZWN1 cml0eSBDb25zaWRlcmF0aW9ucyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAxMg0KICAgNi4gIElBTkEgQ29uc2lkZXJhdGlvbnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIDEzDQogICA3LiAgQWNrbm93bGVkZ2VtZW50cyAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTQNCiAgIDguICBOb3JtYXRpdmUg UmVmZXJlbmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxNQ0K ICAgQXV0aG9ycycgQWRkcmVzc2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIDE2DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KSGFubmEgJiBNYW5yYWwgICAgICAgICAgIEV4cGlyZXMgQXVndXN0IDI1LCAyMDEzICAg ICAgICAgICAgICAgIFtQYWdlIDJdDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgIEF1dG8g RGlzY292ZXJ5IFZQTiAgICAgICAgICAgICAgRmVicnVhcnkgMjAxMw0KDQoNCjEuICBJbnRyb2R1 Y3Rpb24NCg0KICAgSVBzZWMgW1JGQzQzMDFdIGlzIHVzZWQgaW4gc2V2ZXJhbCBkaWZmZXJlbnQg Y2FzZXMsIGluY2x1ZGluZyB0dW5uZWwtDQogICBtb2RlIHNpdGUtdG8tc2l0ZSBWUE5zIGFuZCBS ZW1vdGUgQWNjZXNzIFZQTnMuICBIb3N0IHRvIGhvc3QNCiAgIGNvbW11bmljYXRpb24gZW1wbG95 aW5nIHRyYW5zcG9ydCBtb2RlIGFsc28gZXhpc3RzLCBidXQgaXMgZmFyIGxlc3MNCiAgIGNvbW1v bmx5IGRlcGxveWVkLg0KDQogICBUaGUgc3ViamVjdCBvZiB0aGlzIGRvY3VtZW50IGlzIHRoZSBw cm9ibGVtIHByZXNlbnRlZCBieSBsYXJnZSBzY2FsZQ0KICAgZGVwbG95bWVudHMgb2YgSVBzZWMg YW5kIHRoZSByZXF1aXJlbWVudHMgb24gYSBzb2x1dGlvbiB0byBhZGRyZXNzDQogICB0aGUgcHJv YmxlbS4gIFRoZXNlIG1heSBiZSBhIGxhcmdlIGNvbGxlY3Rpb24gb2YgVlBOIGdhdGV3YXlzDQog ICBjb25uZWN0aW5nIHZhcmlvdXMgc2l0ZXMsIGEgbGFyZ2UgbnVtYmVyIG9mIHJlbW90ZSBlbmRw b2ludHMNCiAgIGNvbm5lY3RpbmcgdG8gYSBudW1iZXIgb2YgZ2F0ZXdheXMgb3IgdG8gZWFjaCBv dGhlciwgb3IgYSBtaXggb2YgdGhlDQogICB0d28uICBUaGUgZ2F0ZXdheXMgYW5kIGVuZHBvaW50 cyBtYXkgYmVsb25nIHRvIGEgc2luZ2xlDQogICBhZG1pbmlzdHJhdGl2ZSBkb21haW4gb3Igc2V2 ZXJhbCBkb21haW5zIHdpdGggYSB0cnVzdCByZWxhdGlvbnNoaXAuDQoNCiAgIFNlY3Rpb24gNC40 IG9mIFJGQyA0MzAxIGRlc2NyaWJlcyB0aGUgbWFqb3IgSVBzZWMgZGF0YWJhc2VzIG5lZWRlZA0K ICAgZm9yIElQc2VjIHByb2Nlc3NpbmcuICBJdCByZXF1aXJlcyBhbiBleHRlbnNpdmUgY29uZmln dXJhdGlvbiBmb3INCiAgIGVhY2ggdHVubmVsLCBzbyBtYW51YWxseSBjb25maWd1cmluZyBhIHN5 c3RlbSBvZiBtYW55IGdhdGV3YXlzIGFuZA0KICAgZW5kcG9pbnRzIGJlY29tZXMgaW5mZWFzaWJs ZSBhbmQgaW5mbGV4aWJsZS4NCg0KICAgVGhlIGRpZmZpY3VsdHkgaXMgdGhhdCBhbGwgdGhlIGNv bmZpZ3VyYXRpb24gbWVudGlvbmVkIGluIFJGQyA0MzAxIGlzDQogICBub3Qgc3VwZXJmbHVvdXMu ICBJS0UgaW1wbGVtZW50YXRpb25zIG5lZWQgdG8ga25vdyB0aGUgaWRlbnRpdHkgYW5kDQogICBj cmVkZW50aWFscyBvZiBhbGwgcG9zc2libGUgcGVlciBzeXN0ZW1zLCBhcyB3ZWxsIGFzIHRoZSBh ZGRyZXNzZXMgb2YNCiAgIGhvc3RzIGFuZC9vciBuZXR3b3JrcyBiZWhpbmQgdGhlbS4gIEEgc2lt cGxpZmllZCBtZWNoYW5pc20gZm9yDQogICBkeW5hbWljYWxseSBlc3RhYmxpc2hpbmcgcG9pbnQt dG8tcG9pbnQgdHVubmVscyBpcyBuZWVkZWQuICBTZWN0aW9uIDINCiAgIGNvbnRhaW5zIHNldmVy YWwgdXNlIGNhc2VzIHRoYXQgbW90aXZhdGUgdGhpcyBlZmZvcnQuDQoNCjEuMS4gIFRlcm1pbm9s b2d5DQoNCiAgIEVuZHBvaW50IC0gQSBkZXZpY2UgdGhhdCBpbXBsZW1lbnRzIElQc2VjIGZvciBp dHMgb3duIHRyYWZmaWMgYnV0DQogICBkb2VzIG5vdCBhY3QgYXMgYSBnYXRld2F5Lg0KDQogICBH YXRld2F5IC0gQSBuZXR3b3JrIGRldmljZSB0aGF0IGltcGxlbWVudHMgSVBzZWMgdG8gcHJvdGVj dCB0cmFmZmljDQogICBmbG93aW5nIHRocm91Z2ggdGhlIGRldmljZS4NCg0KICAgUG9pbnQtdG8t UG9pbnQgLSBDb21tdW5pY2F0aW9uIGJldHdlZW4gdHdvIHBhcnRpZXMgd2l0aG91dCBhY3RpdmUN CiAgIHBhcnRpY2lwYXRpb24gKGUuZy4gZW5jcnlwdGlvbiBvciBkZWNyeXB0aW9uKSBieSBhbnkg b3RoZXIgcGFydGllcy4NCg0KICAgSHViIC0gVGhlIGNlbnRyYWwgcG9pbnQgaW4gYSBzdGFyIHRv cG9sb2d5LyBkeW5hbWljIGZ1bGwgbWVzaA0KICAgdG9wb2xvZ3ksIG9yIG9uZSBvZiB0aGUgY2Vu dHJhbCBwb2ludHMgaW4gdGhlIGZ1bGwgbWVzaCBzdHlsZSBWUE4sDQogICBpLmUuIGdhdGV3YXkg d2hlcmUgbXVsdGlwbGUgb3RoZXIgaHVicyBvciBzcG9rZXMgY29ubmVjdCB0by4gIFRoZQ0KICAg aHVicyB1c3VhbGx5IGZvcndhcmQgdHJhZmZpYyBjb21pbmcgZnJvbSBlbmNyeXB0ZWQgbGlua3Mg dG8gb3RoZXINCiAgIGVuY3J5cHRlZCBsaW5rcywgaS5lLiB0aGVyZSBhcmUgbm8gZGV2aWNlcyBj b25uZWN0ZWQgdG8gaXQgaW4gY2xlYXIuDQoNCiAgIFNwb2tlIC0gVGhlIGVkZ2UgZGV2aWNlcyBp biBhIHN0YXIgdG9wb2xvZ3kvIGR5bmFtaWMgZnVsbCBtZXNoDQogICB0b3BvbG9neSwgb3IgZ2F0 ZXdheSB3aGljaCBmb3J3YXJkcyB0cmFmZmljIGZyb20gbXVsdGlwbGUgY2xlYXJ0ZXh0DQogICBk ZXZpY2VzIHRvIG90aGVyIGh1YnMgb3Igc3Bva2VzLCBhbmQgc29tZSBvZiB0aG9zZSBvdGhlciBk ZXZpY2VzIGFyZQ0KICAgY29ubmVjdGVkIHRvIGl0IGluIGNsZWFyIChpLmUuIGl0IGVuY3J5cHRz IGRhdGEgY29taW5nIGZyb20gY2xlYXJ0ZXh0DQoNCg0KDQpIYW5uYSAmIE1hbnJhbCAgICAgICAg ICAgRXhwaXJlcyBBdWd1c3QgMjUsIDIwMTMgICAgICAgICAgICAgICAgW1BhZ2UgM10NCg0KSW50 ZXJuZXQtRHJhZnQgICAgICAgICAgICAgQXV0byBEaXNjb3ZlcnkgVlBOICAgICAgICAgICAgICBG ZWJydWFyeSAyMDEzDQoNCg0KICAgZGV2aWNlcyBhbmQgZm9yd2FyZHMgaXQgdG8gdGhlIEFEVlBO KS4NCg0KICAgQURWUE4gUGVlciAtIGFueSBtZW1iZXIgb2YgYW4gQURWUE4gaW5jbHVkaW5nIGdh dGV3YXlzLCBlbmRwb2ludHMsDQogICBodWIgb3Igc3Bva2UuDQoNCiAgIFN0YXIgdG9wb2xvZ3kg LSBUaGlzIGlzIHRoZSB0b3BvbG9neSB3aGVyZSB0aGVyZSBpcyBkaXJlY3QNCiAgIGNvbm5lY3Rp dml0eSBvbmx5IGJldHdlZW4gdGhlIGh1YiBhbmQgc3Bva2UgYW5kIGNvbW11bmljYXRpb24gYmV0 d2Vlbg0KICAgdGhlIDIgc3Bva2VzIGhhcHBlbnMgdGhyb3VnaCB0aGUgaHViLg0KDQogICBGdWxs IE1lc2ggdG9wb2xvZ3kgLSBUaGlzIGlzIHRoZSB0b3BvbG9neSB3aGVyZSB0aGVyZSBpcyBhIGRp cmVjdA0KICAgY29ubmVjdGl2aXR5IGJldHdlZW4gZXZlcnkgU3Bva2UgdG8gZXZlcnkgb3RoZXIg U3Bva2UgZGlyZWN0bHksDQogICB3aXRob3V0IHRoZSB0cmFmZmljIGJldHdlZW4gdGhlIHNwb2tl cyBoYXZpbmcgdG8gYmUgcmVkaXJlY3RlZA0KICAgdGhyb3VnaCBhbiBpbnRlcm1lZGlhdGUgaHVi IGRldmljZS4NCg0KICAgRHluYW1pYyBGdWxsIE1lc2ggdG9wb2xvZ3kgLSBUaGlzIGlzIHRoZSB0 b3BvbG9neSB3aGVyZSBkaXJlY3QNCiAgIGNvbm5lY3Rpb25zIGV4aXN0IGluIGEgaHViIGFuZCBz cG9rZSBtYW5uZXIsIGJ1dCBkeW5hbWljIGNvbm5lY3Rpb25zDQogICBhcmUgY3JlYXRlZC8gcmVt b3ZlZCBiZXR3ZWVuIHRoZSBzcG9rZXMgb24gYSBuZWVkIGJhc2lzLg0KDQogICBTZWN1cml0eSBB c3NvY2lhdGlvbiAoU0EpIC0gRGVmaW5lZCBpbiBbUkZDNDMwMV0uDQoNCjEuMi4gIENvbnZlbnRp b25zIFVzZWQgaW4gVGhpcyBEb2N1bWVudA0KDQogICBUaGUga2V5IHdvcmRzICJNVVNUIiwgIk1V U1QgTk9UIiwgIlJFUVVJUkVEIiwgIlNIQUxMIiwgIlNIQUxMIE5PVCIsDQogICAiU0hPVUxEIiwg IlNIT1VMRCBOT1QiLCAiUkVDT01NRU5ERUQiLCAiTUFZIiwgYW5kICJPUFRJT05BTCIgaW4gdGhp cw0KICAgZG9jdW1lbnQgYXJlIHRvIGJlIGludGVycHJldGVkIGFzIGRlc2NyaWJlZCBpbiBbUkZD MjExOV0uDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KSGFubmEgJiBNYW5yYWwgICAgICAgICAgIEV4cGlyZXMgQXVndXN0IDI1LCAyMDEzICAgICAg ICAgICAgICAgIFtQYWdlIDRdDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgIEF1dG8gRGlz Y292ZXJ5IFZQTiAgICAgICAgICAgICAgRmVicnVhcnkgMjAxMw0KDQoNCjIuICBVc2UgQ2FzZXMN Cg0KICAgVGhpcyBzZWN0aW9uIHByZXNlbnRzIHRoZSBrZXkgdXNlIGNhc2VzIGZvciBsYXJnZS1z Y2FsZSBwb2ludC10by0NCiAgIHBvaW50IFZQTi4NCg0KICAgSW4gYWxsIG9mIHRoZXNlIHVzZSBj YXNlcywgdGhlIHBhcnRpY2lwYW50cyAoZW5kcG9pbnRzIGFuZCBnYXRld2F5cykNCiAgIG1heSBi ZSBmcm9tIGEgc2luZ2xlIG9yZ2FuaXphdGlvbiAoYWRtaW5pc3RyYXRpdmUgZG9tYWluKSBvciBm cm9tDQogICBtdWx0aXBsZSBvcmdhbml6YXRpb25zIHdpdGggYW4gZXN0YWJsaXNoZWQgdHJ1c3Qg cmVsYXRpb25zaGlwLiAgV2hlbg0KICAgbXVsdGlwbGUgb3JnYW5pemF0aW9ucyBhcmUgaW52b2x2 ZWQsIHByb2R1Y3RzIGZyb20gbXVsdGlwbGUgdmVuZG9ycw0KICAgYXJlIGVtcGxveWVkIHNvIG9w ZW4gc3RhbmRhcmRzIGFyZSBuZWVkZWQgdG8gcHJvdmlkZQ0KICAgaW50ZXJvcGVyYWJpbGl0eS4g IEVzdGFibGlzaGluZyBjb21tdW5pY2F0aW9ucyBiZXR3ZWVuIHBhcnRpY2lwYW50cw0KICAgd2l0 aCBubyBlc3RhYmxpc2hlZCB0cnVzdCByZWxhdGlvbnNoaXAgaXMgb3V0IG9mIHNjb3BlIGZvciB0 aGlzDQogICBlZmZvcnQuDQoNCjIuMS4gIEVuZHBvaW50LXRvLUVuZHBvaW50IEFEVlBOIFVzZSBD YXNlDQoNCiAgIFR3byBlbmRwb2ludHMgd2lzaCB0byBjb21tdW5pY2F0ZSBzZWN1cmVseSB2aWEg YSBwb2ludC10by1wb2ludA0KICAgU2VjdXJpdHkgQXNzb2NpYXRpb24gKFNBKS4NCg0KICAgVGhl IG5lZWQgZm9yIHNlY3VyZSBlbmRwb2ludCB0byBlbmRwb2ludCBjb21tdW5pY2F0aW9ucyBpcyBv ZnRlbg0KICAgZHJpdmVuIGJ5IGEgbmVlZCB0byBlbXBsb3kgaGlnaC1iYW5kd2lkdGgsIGxvdyBs YXRlbmN5IGxvY2FsDQogICBjb25uZWN0aXZpdHkgaW5zdGVhZCBvZiB1c2luZyBzbG93LCBleHBl bnNpdmUgbGlua3MgdG8gcmVtb3RlDQogICBnYXRld2F5cy4gIEZvciBleGFtcGxlLCB0d28gdXNl cnMgaW4gY2xvc2UgcHJveGltaXR5IG1heSB3aXNoIHRvDQogICBwbGFjZSBhIGRpcmVjdCwgc2Vj dXJlIHZpZGVvIG9yIHZvaWNlIGNhbGwgd2l0aG91dCBuZWVkaW5nIHRvIHNlbmQNCiAgIHRoZSBj YWxsIHRocm91Z2ggcmVtb3RlIGdhdGV3YXlzLCB3aGljaCB3b3VsZCBhZGQgbGF0ZW5jeSB0byB0 aGUNCiAgIGNhbGwsIGNvbnN1bWUgcHJlY2lvdXMgcmVtb3RlIGJhbmR3aWR0aCwgYW5kIGluY3Jl YXNlIG92ZXJhbGwgY29zdHMuDQogICBTdWNoIGEgdXNlIGNhc2UgYWxzbyBlbmFibGVzIGNvbm5l Y3Rpdml0eSB3aGVuIGJvdGggYmVoaW5kIE5BVA0KICAgZ2F0ZXdheXMuICBTdWNoIGEgdXNlIGNh c2Ugb3VnaHQgdG8gYWxsb3cgZm9yIHNlYW1sZXNzIGNvbm5lY3Rpdml0eQ0KICAgZXZlbiBhcyBl bmRwb2ludHMgcm9hbSwgZXZlbiBpZiB0aGV5IGFyZSBtb3Zpbmcgb3V0IGZyb20gYmVoaW5kIGEg TkFUDQogICBnYXRld2F5LCBmcm9tIGJlaGluZCBvbmUgTkFUIGdhdGV3YXkgdG8gYmVoaW5kIGFu b3RoZXIsIG9yIGZyb20gYQ0KICAgc3RhbmRhbG9uZSBwb3NpdGlvbiB0byBiZWhpbmQgYSBOQVQg Z2F0ZXdheS4NCg0KICAgSW4gYSBzdGFyIHRvcG9sb2d5IHdoZW4gdHdvIGVuZHBvaW50cyBjb21t dW5pY2F0ZSwgdGhleSBuZWVkIGENCiAgIG1lY2hhbmlzbSBmb3IgYXV0aGVudGljYXRpb24sIHN1 Y2ggdGhhdCB0aGV5IGRvIG5vdCBleHBvc2UgdGhlbXNlbHZlcw0KICAgdG8gaW1wZXJzb25hdGlv biBieSB0aGUgb3RoZXIgc3Bva2UgZW5kcG9pbnQuDQoNCjIuMi4gIEdhdGV3YXktdG8tR2F0ZXdh eSBBRFZQTiBVc2UgQ2FzZQ0KDQogICBBIHR5cGljYWwgRW50ZXJwcmlzZSB0cmFmZmljIG1vZGVs IGZvbGxvd3MgYSBzdGFyIHRvcG9sb2d5LCB3aXRoIHRoZQ0KICAgZ2F0ZXdheXMgY29ubmVjdGlu ZyB0byBlYWNoIG90aGVyIHVzaW5nIElQc2VjIHR1bm5lbHMuDQoNCiAgIEhvd2V2ZXIgZm9yIHZv aWNlIGFuZCBvdGhlciByaWNoIG1lZGlhIHRyYWZmaWMgdGhhdCByZXF1aXJlcyBhIGxvdCBvZg0K ICAgYmFuZHdpZHRoIG9yIGlzIHBlcmZvcm1hbmNlIHNlbnNpdGl2ZSwgdGhlIHRyYWZmaWMgdHJv bWJvbmluZyB0byB0aGUNCiAgIGh1YiBjYW4gY3JlYXRlIHRyYWZmaWMgYm90dGxlbmVja3Mgb24g dGhlIGh1YiBhbmQgY2FuIGxlYWQgdG8gYW4NCiAgIGluY3JlYXNlIGluIGNvc3QuICBBIGZ1bGx5 IG1lc2hlZCBzb2x1dGlvbiB3b3VsZCBtYWtlIGJlc3QgdXNlIG9mIHRoZQ0KICAgYXZhaWxhYmxl IG5ldHdvcmsgY2FwYWNpdHkgYW5kIHBlcmZvcm1hbmNlIGJ1dCB0aGUgZGVwbG95bWVudCBvZiBh DQogICBmdWxseSBtZXNoZWQgc29sdXRpb24gaW52b2x2ZXMgY29uc2lkZXJhYmxlIGNvbmZpZ3Vy YXRpb24sIGVzcGVjaWFsbHkNCiAgIHdoZW4gYSBsYXJnZSBudW1iZXIgb2Ygbm9kZXMgYXJlIGlu dm9sdmVkLiAgSXQgaXMgZm9yIHRoaXMgcHVycG9zZQ0KDQoNCg0KSGFubmEgJiBNYW5yYWwgICAg ICAgICAgIEV4cGlyZXMgQXVndXN0IDI1LCAyMDEzICAgICAgICAgICAgICAgIFtQYWdlIDVdDQoN CkludGVybmV0LURyYWZ0ICAgICAgICAgICAgIEF1dG8gRGlzY292ZXJ5IFZQTiAgICAgICAgICAg ICAgRmVicnVhcnkgMjAxMw0KDQoNCiAgIHNwb2tlLXRvLXNwb2tlIHR1bm5lbHMgYXJlIGR5bmFt aWNhbGx5IGNyZWF0ZWQgYW5kIHRvcm4tZG93bi4gIEZvcg0KICAgdGhlIHJlYXNvbnMgb2YgY29z dCBhbmQgbWFudWFsIGVycm9yIHJlZHVjdGlvbiwgaXQgaXMgZGVzaXJlZCB0aGF0DQogICB0aGVy ZSBiZSBtaW5pbWFsIGNvbmZpZ3VyYXRpb24gb24gZWFjaCBnYXRld2F5Lg0KDQogICBUaGUgc29s dXRpb24gb3VnaHQgdG8gd29yayBpbiBjYXNlcyB3aGVyZSB0aGUgZW5kcG9pbnRzIGFyZSBpbg0K ICAgZGlmZmVyZW50IGFkbWluaXN0cmF0aXZlIGRvbWFpbnMsIGFsYmVpdCwgb25lcyB0aGF0IGhh dmUgYW4gZXhpc3RpbmcNCiAgIHRydXN0IHJlbGF0aW9uc2hpcCAoZm9yIGV4YW1wbGUgdHdvIG9y Z2FuaXNhdGlvbnMgd2hvIGFyZQ0KICAgY29sbGFib3JhdGluZyBvbiBhIHByb2plY3QsIHRoZXkg bWF5IHdpc2ggdG8gam9pbiB0aGVpciBuZXR3b3JrcywNCiAgIHdoaWxzdCByZXRhaW5pbmcgaW5k ZXBlbmRlbnQgY29udHJvbCBvdmVyIGNvbmZpZ3VyYXRpb24pLiAgSXQgaXMNCiAgIGhpZ2hseSBk ZXNpcmFibGUgdGhhdCB0aGUgc29sdXRpb24gd29ya3MgZm9yIHRoZSBzdGFyLCBmdWxsIG1lc2gg YXMNCiAgIHdlbGwgYXMgZHluYW1pYyBmdWxsIG1lc2ggdG9wb2xvZ3kuDQoNCiAgIFRoZSBzb2x1 dGlvbiBvdWdodCB0byBhbHNvIGFkZHJlc3MgdGhlIGNhc2Ugd2hlcmUgZ2F0ZXdheXMgdXNlDQog ICBkeW5hbWljIElQIGFkZHJlc3Nlcy4NCg0KICAgQWRkaXRpb25hbGx5LCB0aGUgcm91dGluZyBp bXBsaWNhdGlvbnMgb2YgZ2F0ZXdheS10by1nYXRld2F5DQogICBjb21tdW5pY2F0aW9uIG5lZWQg dG8gYmUgYWRkcmVzc2VkLiAgSW4gdGhlIHNpbXBsZSBjYXNlLCBzZWxlY3RvcnMNCiAgIHByb3Zp ZGUgc3VmZmljaWVudCBpbmZvcm1hdGlvbiBmb3IgYSBnYXRld2F5IHRvIGZvcndhcmQgdHJhZmZp Yw0KICAgYXBwcm9wcmlhdGVseS4gIEluIG90aGVyIGNhc2VzLCBhZGRpdGlvbmFsIHR1bm5lbGlu ZyAoZS5nLiwgR2VuZXJpYw0KICAgUm91dGluZyBFbmNhcHN1bGF0aW9uIC0gR1JFKSBhbmQgcm91 dGluZyAoZS5nLiwgT3BlbiBTaG9ydGVzdCBQYXRoDQogICBGaXJzdCAtIE9TUEYpIHByb3RvY29s cyBhcmUgcnVuIG92ZXIgSVBzZWMgdHVubmVscywgYW5kIHRoZQ0KICAgY29uZmlndXJhdGlvbiBp bXBhY3Qgb24gdGhvc2UgcHJvdG9jb2xzIG5lZWRzIHRvIGJlIGNvbnNpZGVyZWQuDQogICBUaGVy ZSBpcyBhbHNvIHRoZSBjYXNlIHdoZW4gTGF5ZXItMyBWaXJ0dWFsIFByaXZhdGUgTmV0d29ya3Mg KEwzVlBOcykNCiAgIG9wZXJhdGUgb3ZlciBJUHNlYyBUdW5uZWxzLg0KDQogICBXaGVuIHR3byBn YXRld2F5cyBjb21tdW5pY2F0ZSwgdGhleSBuZWVkIHRvIHVzZSBhIG1lY2hhbmlzbSBmb3INCiAg IGF1dGhlbnRpY2F0aW9uLCBzdWNoIHRoYXQgdGhleSBkbyBub3QgZXhwb3NlIHRoZW1zZWx2ZXMg dG8gdGhlIHJpc2sNCiAgIG9mIGltcGVyc29uYXRpb24gYnkgdGhlIG90aGVyIGVudGl0aWVzLg0K DQoyLjMuICBFbmRwb2ludC10by1HYXRld2F5IEFEVlBOIFVzZSBDYXNlDQoNCiAgIEFuIGVuZHBv aW50IG91Z2h0IHRvIGJlIGFibGUgdG8gdXNlIHRoZSBtb3N0IGVmZmljaWVudCBnYXRld2F5IGFz IGl0DQogICByb2FtcyBpbiB0aGUgaW50ZXJuZXQuDQoNCiAgIEEgbW9iaWxlIHVzZXIgcm9hbWlu ZyBvbiB0aGUgSW50ZXJuZXQgbWF5IGNvbm5lY3QgdG8gYSBnYXRld2F5LCB3aGljaA0KICAgYmVj YXVzZSBvZiByb2FtaW5nIGlzIG5vIGxvbmdlciB0aGUgbW9zdCBlZmZpY2llbnQgZ2F0ZXdheSB0 byB1c2UNCiAgIChyZWFzb25zIGNvdWxkIGJlIGNvc3QvIGVmZmljaWVuY3kvIGxhdGVuY3kgb3Ig c29tZSBvdGhlciBmYWN0b3IpLg0KICAgVGhlIG1vYmlsZSB1c2VyIG91Z2h0IHRvIGJlIGFibGUg dG8gZGlzY292ZXIgYW5kIHRoZW4gY29ubmVjdCB0byB0aGUNCiAgIGN1cnJlbnQgbW9zdCBlZmZp Y2llbnQgZ2F0ZXdheSB3aXRob3V0IGhhdmluZyB0byByZWluaXRpYXRlIHRoZQ0KICAgY29ubmVj dGlvbi4NCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQpIYW5uYSAmIE1hbnJhbCAgICAgICAgICAgRXhw aXJlcyBBdWd1c3QgMjUsIDIwMTMgICAgICAgICAgICAgICAgW1BhZ2UgNl0NCg0KSW50ZXJuZXQt RHJhZnQgICAgICAgICAgICAgQXV0byBEaXNjb3ZlcnkgVlBOICAgICAgICAgICAgICBGZWJydWFy eSAyMDEzDQoNCg0KMy4gIEluYWRlcXVhY3kgb2YgRXhpc3RpbmcgU29sdXRpb25zDQoNCiAgIFNl dmVyYWwgc29sdXRpb25zIGV4aXN0IGZvciB0aGUgcHJvYmxlbXMgZGVzY3JpYmVkIGFib3ZlLiAg SG93ZXZlciwNCiAgIG5vbmUgb2YgdGhlc2Ugc29sdXRpb25zIGlzIGFkZXF1YXRlLCBhcyBkZXNj cmliZWQgaGVyZS4NCg0KMy4xLiAgRXhoYXVzdGl2ZSBDb25maWd1cmF0aW9uDQoNCiAgIE9uZSBz aW1wbGUgc29sdXRpb24gaXMgdG8gY29uZmlndXJlIGFsbCBnYXRld2F5cyBhbmQgZW5kcG9pbnRz IGluDQogICBhZHZhbmNlIHdpdGggYWxsIHRoZSBpbmZvcm1hdGlvbiBuZWVkZWQgdG8gZGV0ZXJt aW5lIHdoaWNoIGdhdGV3YXkgb3INCiAgIGVuZHBvaW50IGlzIG9wdGltYWwgYW5kIHRvIGVzdGFi bGlzaCBhbiBTQSB3aXRoIHRoYXQgZ2F0ZXdheSBvcg0KICAgZW5kcG9pbnQuICBIb3dldmVyLCB0 aGlzIHNvbHV0aW9uIGRvZXMgbm90IHNjYWxlIGluIGEgbGFyZ2UgbmV0d29yaw0KICAgd2l0aCBo dW5kcmVkcyBvZiB0aG91c2FuZHMgb2YgZ2F0ZXdheXMgYW5kIGVuZHBvaW50cywgZXNwZWNpYWxs eSB3aGVuDQogICBtdWx0aXBsZSBhZG1pbmlzdHJhdGl2ZSBkb21haW5zIGFyZSBpbnZvbHZlZCBh bmQgdGhpbmdzIGFyZSByYXBpZGx5DQogICBjaGFuZ2luZyAoZS5nLiBtb2JpbGUgZW5kcG9pbnRz KS4gIFN1Y2ggYSBzb2x1dGlvbiBpcyBhbHNvIGxpbWl0ZWQgYnkNCiAgIHRoZSBzbWFsbGVzdCBl bmRwb2ludC8gZ2F0ZXdheSwgYXMgdGhlIHNhbWUgZXhoYXVzdGl2ZSBjb25maWd1cmF0aW9uDQog ICBpcyB0byBiZSBhcHBsaWVkIG9uIGFsbCBlbmRwb2ludHMvIGdhdGV3YXlzLiAgQSBtb3JlIGR5 bmFtaWMsIHNlY3VyZQ0KICAgYW5kIHNjYWxhYmxlIHN5c3RlbSBmb3IgZXN0YWJsaXNoaW5nIFNB cyBiZXR3ZWVuIGdhdGV3YXlzIGlzIG5lZWRlZC4NCg0KMy4yLiAgU3RhciBUb3BvbG9neQ0KDQog ICBUaGUgbW9zdCBjb21tb24gd2F5IHRvIGFkZHJlc3MgYSBwYXJ0IG9mIHRoaXMgdGhpcyBwcm9i bGVtIHRvZGF5IGlzDQogICB0byB1c2Ugd2hhdCBoYXMgYmVlbiB0ZXJtZWQgYSAic3RhciB0b3Bv bG9neSIuICBJbiB0aGlzIGNhc2Ugb25lIG9yIGENCiAgIGZldyBnYXRld2F5cyBhcmUgZGVmaW5l ZCBhcyAiaHViIGdhdGV3YXlzIiwgd2hpbGUgdGhlIHJlc3Qgb2YgdGhlDQogICBzeXN0ZW1zICh3 aGV0aGVyIGVuZHBvaW50cyBvciBnYXRld2F5cykgYXJlIGRlZmluZWQgYXMgInNwb2tlcyIuICBU aGUNCiAgIHNwb2tlcyBuZXZlciBjb25uZWN0IHRvIG90aGVyIHNwb2tlcy4gIFRoZXkgb25seSBv cGVuIHR1bm5lbHMgd2l0aA0KICAgdGhlIGh1YiBnYXRld2F5cy4gIEFsc28gZm9yIGEgbGFyZ2Ug bnVtYmVyIG9mIGdhdGV3YXlzIGluIG9uZQ0KICAgYWRtaW5pc3RyYXRpdmUgZG9tYWluLCBvbmUg Z2F0ZXdheSBtYXkgYmUgZGVmaW5lZCBhcyB0aGUgaHViLCBhbmQgdGhlDQogICByZXN0IG9mIHRo ZSBnYXRld2F5cyBhbmQgcmVtb3RlIGFjY2VzcyBjbGllbnRzIGNvbm5lY3Qgb25seSB0byB0aGF0 DQogICBnYXRld2F5Lg0KDQogICBUaGlzIHNvbHV0aW9uIGhvd2V2ZXIgaXMgY29tcGxpY2F0ZWQg YnkgdGhlIGNhc2Ugd2hlbiB0aGUgc3Bva2VzIHVzZQ0KICAgZHluYW1pYyBJUCBhZGRyZXNzZXMg YW5kIEROUyB3aXRoIGR5bmFtaWMgdXBkYXRlcyBuZWVkcyB0byBiZSB1c2VkLg0KICAgSXQgaXMg YWxzbyBkZXNpcmVkIHRoYXQgdGhlcmUgaXMgbWluaW1hbCB0byBubyBjb25maWd1cmF0aW9uIG9u IHRoZQ0KICAgaHViIGFzIHRoZSBudW1iZXIgb2Ygc3Bva2VzIGluY3JlYXNlcyBhbmQgbmV3IHNw b2tlcyBhcmUgYWRkZWQgYW5kDQogICBkZWxldGVkIHJhbmRvbWx5Lg0KDQogICBBbm90aGVyIHBy b2JsZW0gd2l0aCB0aGUgc3RhciB0b3BvbG9neSBpcyB0aGF0IGl0IGNyZWF0ZXMgYSBoaWdoIGxv YWQNCiAgIG9uIHRoZSBodWIgZ2F0ZXdheXMgYXMgd2VsbCBhcyBvbiB0aGUgY29ubmVjdGlvbiBi ZXR3ZWVuIHRoZSBzcG9rZXMNCiAgIGFuZCB0aGUgaHViLiAgVGhpcyBsb2FkIGlzIGJvdGggaW4g cHJvY2Vzc2luZyBwb3dlciBhbmQgaW4gbmV0d29yaw0KICAgYmFuZHdpZHRoLiAgQSBzaW5nbGUg cGFja2V0IGluIHRoZSBodWItYW5kLXNwb2tlIHNjZW5hcmlvIGNhbiBiZQ0KICAgZW5jcnlwdGVk IGFuZCBkZWNyeXB0ZWQgbXVsdGlwbGUgdGltZXMuICBJdCB3b3VsZCBiZSBtdWNoIHByZWZlcmFi bGUNCiAgIGlmIHRoZXNlIGdhdGV3YXlzIGFuZCBjbGllbnRzIGNvdWxkIGluaXRpYXRlIHR1bm5l bHMgYmV0d2VlbiB0aGVtLA0KICAgYnlwYXNzaW5nIHRoZSBodWIgZ2F0ZXdheXMuICBBZGRpdGlv bmFsbHksIHRoZSBwYXRoIGJhbmR3aWR0aCB0bw0KICAgdGhlc2UgaHViIGdhdGV3YXlzIG1heSBi ZSBsb3dlciB0aGFuIHRoYXQgb2YgdGhlIHBhdGggYmV0d2VlbiB0aGUNCiAgIHNwb2tlcy4gIEZv ciBleGFtcGxlLCB0d28gcmVtb3RlIGFjY2VzcyB1c2VycyBtYXkgYmUgaW4gdGhlIHNhbWUNCiAg IGJ1aWxkaW5nIHdpdGggaGlnaC1zcGVlZCB3aWZpIChmb3IgZXhhbXBsZSwgYXQgYW4gSUVURiBt ZWV0aW5nKS4NCiAgIENoYW5uZWxpbmcgdGhlaXIgY29udmVyc2F0aW9uIHRocm91Z2ggdGhlIGh1 YiBnYXRld2F5cyBvZiB0aGVpcg0KICAgcmVzcGVjdGl2ZSBlbXBsb3llcnMgc2VlbXMgZXh0cmVt ZWx5IHdhc3RlZnVsLCBhcyB3ZWxsIGFzIGhhdmluZw0KDQoNCg0KSGFubmEgJiBNYW5yYWwgICAg ICAgICAgIEV4cGlyZXMgQXVndXN0IDI1LCAyMDEzICAgICAgICAgICAgICAgIFtQYWdlIDddDQoN CkludGVybmV0LURyYWZ0ICAgICAgICAgICAgIEF1dG8gRGlzY292ZXJ5IFZQTiAgICAgICAgICAg ICAgRmVicnVhcnkgMjAxMw0KDQoNCiAgIGxvd2VyIGJhbmR3aWR0aC4NCg0KICAgVGhlIGNoYWxs ZW5nZSBpcyB0byBidWlsZCBhIGxhcmdlIHNjYWxlLCBJUHNlYyBwcm90ZWN0ZWQgbmV0d29ya3MN CiAgIHRoYXQgY2FuIGR5bmFtaWNhbGx5IGNoYW5nZSB3aXRoIG1pbmltdW0gYWRtaW5pc3RyYXRp dmUgb3ZlcmhlYWQuDQoNCjMuMy4gIFByb3ByaWV0YXJ5IEFwcHJvYWNoZXMNCg0KICAgU2V2ZXJh bCB2ZW5kb3JzIG9mZmVyIHByb3ByaWV0YXJ5IHNvbHV0aW9ucyB0byB0aGVzZSBwcm9ibGVtcy4N CiAgIEhvd2V2ZXIsIHRoZXNlIHNvbHV0aW9ucyBvZmZlciBubyBpbnRlcm9wZXJhYmlsaXR5IGJl dHdlZW4gZXF1aXBtZW50DQogICBmcm9tIG9uZSB2ZW5kb3IgYW5kIGFub3RoZXIuICBUaGlzIG1l YW5zIHRoYXQgdGhleSBhcmUgZ2VuZXJhbGx5DQogICByZXN0cmljdGVkIHRvIHVzZSB3aXRoaW4g b25lIG9yZ2FuaXphdGlvbiwgYW5kIGl0IGlzIGhhcmRlciB0byBtb3ZlDQogICBvZmYgc3VjaCBz b2x1dGlvbnMgYXMgdGhlIGZlYXR1cmVzIGFyZSBub3Qgc3RhbmRhcmRpemVkLiAgQmVzaWRlcw0K ICAgbXVsdGlwbGUgb3JnYW5pemF0aW9ucyBjYW5ub3QgYmUgZXhwZWN0ZWQgdG8gYWxsIGNob29z ZSB0aGUgc2FtZQ0KICAgZXF1aXBtZW50IHZlbmRvci4NCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KSGFubmEg JiBNYW5yYWwgICAgICAgICAgIEV4cGlyZXMgQXVndXN0IDI1LCAyMDEzICAgICAgICAgICAgICAg IFtQYWdlIDhdDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgIEF1dG8gRGlzY292ZXJ5IFZQ TiAgICAgICAgICAgICAgRmVicnVhcnkgMjAxMw0KDQoNCjQuICBSZXF1aXJlbWVudHMNCg0KICAg VGhpcyBzZWN0aW9uIGRlZmluZXMgdGhlIHJlcXVpcmVtZW50cywgb24gd2hpY2ggdGhlIHNvbHV0 aW9uIHdpbGwgYmUNCiAgIGJhc2VkLg0KDQo0LjEuICBHYXRld2F5IGFuZCBFbmRwb2ludCBSZXF1 aXJlbWVudHMNCg0KICAgMS4gIEZvciBhbnkgbmV0d29yayB0b3BvbG9neSAoc3RhciwgZnVsbCBt ZXNoIGFuZCBkeW5hbWljIGZ1bGwgbWVzaCkNCiAgIGdhdGV3YXlzIGFuZCBlbmRwb2ludHMgU0hP VUxEIG1pbmltaXplIGNvbmZpZ3VyYXRpb24gY2hhbmdlcyB3aGVuIGENCiAgIG5ldyBnYXRld2F5 IG9yIGVuZHBvaW50IGlzIGFkZGVkLCByZW1vdmVkIG9yIGNoYW5nZWQuICBBZGRpbmcgb3INCiAg IHJlbW92aW5nIGEgc3Bva2UgaW4gdGhlIHRvcG9sb2d5IE1VU1QgTk9UIHJlcXVpcmUgY29uZmln dXJhdGlvbg0KICAgY2hhbmdlcyB0byB0aGUgaHVicyBvdGhlciB0aGFuIHdoZXJlIHRoZSBzcG9r ZSB3YXMgY29ubmVjdGVkIHRvIGFuZA0KICAgU0hPVUxEIE5PVCByZXF1aXJlIGNvbmZpZ3VyYXRp b24gY2hhbmdlcyB0byB0aGUgaHViIHRoZSBzcG9rZSB3YXMNCiAgIGNvbm5lY3RlZCB0by4gIFRo ZSBjaGFuZ2VzIGFsc28gTVVTVCBOT1QgcmVxdWlyZSBjb25maWd1cmF0aW9uDQogICBjaGFuZ2Vz IGluIG90aGVyIHNwb2tlcy4NCg0KICAgU3BlY2lmaWNhbGx5LCB3aGVuIGV2YWx1YXRpbmcgcG90 ZW50aWFsIHByb3Bvc2Fscywgd2Ugd2lsbCBjb21wYXJlDQogICB0aGVtIGJ5IGxvb2tpbmcgYXQg aG93IG1hbnkgZW5kcG9pbnRzIG9yIGdhdGV3YXlzIG11c3QgYmUNCiAgIHJlY29uZmlndXJlZCB3 aGVuIGEgbmV3IGdhdGV3YXkgb3IgZW5kcG9pbnQgaXMgYWRkZWQsIHJlbW92ZWQsIG9yDQogICBj aGFuZ2VkIGFuZCBob3cgc3Vic3RhbnRpYWwgdGhpcyByZWNvbmZpZ3VyYXRpb24gaXMsIGJlc2lk ZXMgdGhlDQogICBhbW91bnQgb2Ygc3RhdGljIGNvbmZpZ3VyYXRpb24gcmVxdWlyZWQuDQoNCiAg IFRoaXMgcmVxdWlyZW1lbnQgaXMgZHJpdmVuIGJ5IHVzZSBjYXNlcyAyLjEgYW5kIDIuMiBhbmQg YnkgdGhlDQogICBzY2FsaW5nIGxpbWl0YXRpb25zIHBvaW50ZWQgb3V0IGluIHNlY3Rpb24gMy4x Lg0KDQogICAyLiAgQURWUE4gcGVlcnMgTVVTVCBhbGxvdyBJUHNlYyBUdW5uZWxzIHRvIGJlIHNl dHVwIHdpdGggb3RoZXINCiAgIG1lbWJlcnMgb2YgdGhlIEFEVlBOIHdpdGhvdXQgYW55IGNvbmZp Z3VyYXRpb24gY2hhbmdlcywgZXZlbiB3aGVuDQogICBwZWVyIGFkZHJlc3NlcyBnZXQgdXBkYXRl ZCBldmVyeSB0aW1lIHRoZSBkZXZpY2UgY29tZXMgdXAuICBUaGlzDQogICBpbXBsaWVzIHRoYXQg U1BEIGVudHJpZXMgb3Igb3RoZXIgY29uZmlndXJhdGlvbiBiYXNlZCBvbiBwZWVyIElQDQogICBh ZGRyZXNzIHdpbGwgbmVlZCB0byBiZSBhdXRvbWF0aWNhbGx5IHVwZGF0ZWQsIGF2b2lkZWQsIG9y IGhhbmRsZWQgaW4NCiAgIHNvbWUgbWFubmVyIHRvIGF2b2lkIGEgbmVlZCB0byBtYW51YWxseSB1 cGRhdGUgcG9saWN5IHdoZW5ldmVyIGFuDQogICBhZGRyZXNzIGNoYW5nZXMuDQoNCiAgIDMuICBJ biBtYW55IGNhc2VzIGFkZGl0aW9uYWwgdHVubmVsaW5nIHByb3RvY29scyAoZS5nLiAgR1JFKSBv cg0KICAgUm91dGluZyBwcm90b2NvbHMgKGUuZy4gIE9TUEYpIGFyZSBydW4gb3ZlciB0aGUgSVBz ZWMgdHVubmVscy4NCiAgIEdhdGV3YXlzIE1VU1QgYWxsb3cgZm9yIHRoZSBvcGVyYXRpb24gb2Yg dHVubmVsaW5nIGFuZCBSb3V0aW5nDQogICBwcm90b2NvbHMgb3BlcmF0aW5nIG92ZXIgc3Bva2Ut dG8tc3Bva2UgSVBzZWMgVHVubmVscyB3aXRoIG1pbmltYWwgb3INCiAgIG5vLCBjb25maWd1cmF0 aW9uIGltcGFjdC4gIFRoZSBBRFZQTiBzb2x1dGlvbiBTSE9VTEQgTk9UIGluY3JlYXNlIHRoZQ0K ICAgYW1vdW50IG9mIGluZm9ybWF0aW9uIHJlcXVpcmVkIHRvIGNvbmZpZ3VyZSBwcm90b2NvbHMg cnVubmluZyBvdmVyDQogICBJUHNlYyB0dW5uZWxzLg0KDQogICA0LiAgSW4gdGhlIGZ1bGwgbWVz aCBhbmQgZHluYW1pYyBmdWxsIG1lc2ggdG9wb2xvZ3ksIFNwb2tlcyBNVVNUDQogICBhbGxvdyBm b3IgZGlyZWN0IGNvbW11bmljYXRpb24gd2l0aCBvdGhlciBzcG9rZSBnYXRld2F5cyBhbmQNCiAg IGVuZHBvaW50cy4gIEluIHRoZSBzdGFyIHRvcG9sb2d5IG1vZGUsIGRpcmVjdCBjb21tdW5pY2F0 aW9uIGJldHdlZW4NCiAgIHNwb2tlcyBNVVNUIGJlIGRpc2FsbG93ZWQuDQoNCiAgIFRoaXMgcmVx dWlyZW1lbnQgaXMgZHJpdmVuIGJ5IHVzZSBjYXNlcyAyLjEgYW5kIDIuMiBhbmQgYnkgdGhlDQog ICBsaW1pdGF0aW9ucyBvZiBhIHN0YXIgdG9wb2xvZ3kgcG9pbnRlZCBvdXQgaW4gc2VjdGlvbiAz LjIuDQoNCg0KDQpIYW5uYSAmIE1hbnJhbCAgICAgICAgICAgRXhwaXJlcyBBdWd1c3QgMjUsIDIw MTMgICAgICAgICAgICAgICAgW1BhZ2UgOV0NCg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAg QXV0byBEaXNjb3ZlcnkgVlBOICAgICAgICAgICAgICBGZWJydWFyeSAyMDEzDQoNCg0KICAgNS4g IE9uZSBBRFZQTiBwZWVyIE1VU1QgTk9UIGJlIGFibGUgdG8gaW1wZXJzb25hdGUgYW5vdGhlciBB RFZQTg0KICAgcGVlci4NCg0KICAgVGhpcyByZXF1aXJlbWVudCBpcyBkcml2ZW4gYnkgdXNlIGNh c2UgMi4xLiAgQURWUE4gcGVlcnMgKGVzcGVjaWFsbHkNCiAgIHNwb2tlcykgYmVjb21lIGNvbXBy b21pc2VkIGZhaXJseSBvZnRlbi4gIFRoZSBjb21wcm9taXNlIG9mIG9uZSBBRFZQTg0KICAgcGVl ciBTSE9VTEQgTk9UIGFmZmVjdCB0aGUgc2VjdXJpdHkgb2Ygb3RoZXIgcGVlcnMuDQoNCiAgIDYu ICBHYXRld2F5cyBTSE9VTEQgYWxsb3cgZm9yIHNlYW1sZXNzIGhhbmRvZmYgb2Ygc2Vzc2lvbnMg aW4gY2FzZQ0KICAgZW5kcG9pbnRzIGFyZSByb2FtaW5nLCBldmVuIGlmIHRoZXkgY3Jvc3MgcG9s aWN5IGJvdW5kYXJpZXMuICBUaGlzDQogICB3b3VsZCBtZWFuIHRoZSBkYXRhIHRyYWZmaWMgaXMg bWluaW1hbGx5IGFmZmVjdGVkIGV2ZW4gYXMgdGhlIGhhbmRvZmYNCiAgIGhhcHBlbnMuICBFeHRl cm5hbCBmYWN0b3JzIGxpa2UgZmlyZXdhbGwsIE5BVCBib3hlcyB3aWxsIG5vdCBiZQ0KICAgY29u c2lkZXJlZCBwYXJ0IG9mIHRoaXMgc29sdXRpb24uDQoNCiAgIFRoaXMgcmVxdWlyZW1lbnQgaXMg ZHJpdmVuIGJ5IHVzZSBjYXNlIDIuMS4gIFRvZGF5J3MgZW5kcG9pbnRzIGFyZQ0KICAgbW9iaWxl IGFuZCB0cmFuc2l0aW9uIG9mdGVuIGJldHdlZW4gZGlmZmVyZW50IG5ldHdvcmtzIChmcm9tIDRH IHRvDQogICBXaUZpIGFuZCBhbW9uZyB2YXJpb3VzIFdpRmkgbmV0d29ya3MpLg0KDQogICA3LiAg R2F0ZXdheXMgU0hPVUxEIGFsbG93IGZvciBlYXN5IGhhbmRvZmYgb2YgYSBzZXNzaW9uIHRvIGFu b3RoZXINCiAgIGdhdGV3YXksIHRvIG9wdGltaXplIGxhdGVuY3ksIGJhbmR3aWR0aCwgbG9hZCBi YWxhbmNpbmcsDQogICBhdmFpbGFiaWxpdHksIG9yIG90aGVyIGZhY3RvcnMsIGJhc2VkIG9uIHBv bGljeS4NCg0KICAgVGhpcyByZXF1aXJlbWVudCBpcyBkcml2ZW4gYnkgdXNlIGNhc2UgMi4zLg0K DQogICA4LiAgR2F0ZXdheXMgYW5kIGVuZHBvaW50cyBNVVNUIGhhdmUgdGhlIGNhcGFiaWxpdHkg dG8gcGFydGljaXBhdGUgaW4NCiAgIGFuIEFEVlBOIGV2ZW4gd2hlbiB0aGV5IGFyZSBsb2NhdGVk IGJlaGluZCBOQVQgYm94ZXMuICBIb3dldmVyLCBpbg0KICAgc29tZSBjYXNlcyB0aGV5IG1heSBi ZSBkZXBsb3llZCBpbiBzdWNoIGEgd2F5IHRoYXQgdGhleSB3aWxsIG5vdCBiZQ0KICAgZnVsbHkg cmVhY2hhYmxlIGJlaGluZCBhIE5BVCBib3guICBJdCBpcyBlc3BlY2lhbGx5IGRpZmZpY3VsdCB0 bw0KICAgaGFuZGxlIGNhc2VzIHdoZXJlIHRoZSBIdWIgaXMgYmVoaW5kIGEgTkFUIGJveC4gIFdo ZXJlIHRoZSB0d28NCiAgIGVuZHBvaW50cyBhcmUgYm90aCBiZWhpbmQgc2VwYXJhdGUgTkFUcywg Y29tbXVuaWNhdGlvbiBiZXR3ZWVuIHRoZXNlDQogICBzcG9rZXMgU0hPVUxEIGJlIHN1cHBvcnRl ZCB1c2luZyB3b3JrYXJvdW5kcyBzdWNoIGFzIHBvcnQgZm9yd2FyZGluZw0KICAgYnkgdGhlIE5B VCBvciBkZXRlY3Rpbmcgd2hlbiB0d28gc3Bva2VzIGFyZSBiZWhpbmQgdW5jb29wZXJhdGl2ZSBO QVRzDQogICBhbmQgdXNpbmcgYSBodWIgaW4gdGhhdCBjYXNlLg0KDQogICBUaGlzIHJlcXVpcmVt ZW50IGlzIGRyaXZlbiBieSB1c2UgY2FzZXMgMi4xIGFuZCAyLjIuICBFbmRwb2ludHMgYXJlDQog ICBvZnRlbiBiZWhpbmQgTkFUcyBhbmQgZ2F0ZXdheXMgc29tZXRpbWVzIGFyZS4gIElQc2VjIFNI T1VMRCBjb250aW51ZQ0KICAgdG8gd29yayBzZWFtbGVzc2x5IHJlZ2FyZGxlc3MsIHVzaW5nIEFE VlBOIHRlY2huaXF1ZXMgd2hlbmV2ZXINCiAgIHBvc3NpYmxlIGFuZCBwcm92aWRpbmcgZ3JhY2Vm dWwgZmFsbGJhY2sgdG8gaHViIGFuZCBzcG9rZSB0ZWNobmlxdWVzDQogICBhcyBuZWVkZWQuDQoN CiAgIDkuICBDaGFuZ2VzIHN1Y2ggYXMgZXN0YWJsaXNoaW5nIGEgbmV3IElQc2VjIFNBIFNIT1VM RCBiZSByZXBvcnRhYmxlDQogICBhbmQgbWFuYWdlYWJsZS4gIEhvd2V2ZXIsIGNyZWF0aW5nIGEg TUlCIG9yIG90aGVyIG1hbmFnZW1lbnQNCiAgIHRlY2huaXF1ZSBpcyBub3Qgd2l0aGluIHNjb3Bl IGZvciB0aGlzIGVmZm9ydC4NCg0KICAgVGhpcyByZXF1aXJlbWVudCBpcyBkcml2ZW4gYnkgbWFu YWdlYWJpbGl0eSBjb25jZXJucyBmb3IgYWxsIHRoZSB1c2UNCiAgIGNhc2VzLCBlc3BlY2lhbGx5 IHVzZSBjYXNlIDIuMi4gIEFzIElQc2VjIG5ldHdvcmtzIGJlY29tZSBtb3JlDQogICBkeW5hbWlj LCBtYW5hZ2VtZW50IHRvb2xzIGJlY29tZSBtb3JlIGVzc2VudGlhbC4NCg0KICAgMTAuICBUbyBz dXBwb3J0IGFsbGllZCBhbmQgZmVkZXJhdGVkIGVudmlyb25tZW50cywgZW5kcG9pbnRzIGFuZA0K DQoNCg0KSGFubmEgJiBNYW5yYWwgICAgICAgICAgIEV4cGlyZXMgQXVndXN0IDI1LCAyMDEzICAg ICAgICAgICAgICAgW1BhZ2UgMTBdDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgIEF1dG8g RGlzY292ZXJ5IFZQTiAgICAgICAgICAgICAgRmVicnVhcnkgMjAxMw0KDQoNCiAgIGdhdGV3YXlz IGZyb20gZGlmZmVyZW50IG9yZ2FuaXphdGlvbnMgU0hPVUxEIGJlIGFibGUgdG8gY29ubmVjdCB0 bw0KICAgZWFjaCBvdGhlci4NCg0KICAgVGhpcyByZXF1aXJlbWVudCBpcyBkcml2ZW4gYnkgZGVt YW5kIGZvciBhbGwgdGhlIHVzZSBjYXNlcyBpbg0KICAgZmVkZXJhdGVkIGFuZCBhbGxpZWQgZW52 aXJvbm1lbnRzLg0KDQogICAxMS4gIFRoZSBhZG1pbmlzdHJhdG9yIG9mIHRoZSBBRFZQTiBTSE9V TEQgYWxsb3cgZm9yIHRoZQ0KICAgY29uZmlndXJhdGlvbiBvZiBhIFN0YXIsIEZ1bGwgbWVzaCBv ciBhIHBhcnRpYWwgZnVsbCBtZXNoIHRvcG9sb2d5LA0KICAgYmFzZWQgb24gd2hpY2ggdHVubmVs cyBhcmUgYWxsb3dlZCB0byBiZSBzZXR1cC4NCg0KICAgVGhpcyByZXF1aXJlbWVudCBpcyBkcml2 ZW4gYnkgZGVtYW5kIGZvciBhbGwgdGhlIHVzZSBjYXNlcyBpbg0KICAgZmVkZXJhdGVkIGFuZCBh bGxpZWQgZW52aXJvbm1lbnRzLg0KDQogICAxMi4gIFRoZSBBRFZQTiBzb2x1dGlvbiBTSE9VTEQg YmUgYWJsZSB0byBzY2FsZSBmb3IgbXVsdGljYXN0DQogICB0cmFmZmljLg0KDQogICBUaGlzIHJl cXVpcmVtZW50IGlzIGRyaXZlbiBieSB0aGUgdXNlIGNhc2UgMi4yLCB3aGVyZSB0aGUgYW1vdW50 IG9mDQogICByaWNoIG1lZGlhIG11bHRpY2FzdCB0cmFmZmljIGlzIGluY3JlYXNpbmcuDQoNCiAg IDEzLiAgVGhlIEFEVlBOIHNvbHV0aW9uIFNIT1VMRCBhbGxvdyBmb3IgZWFzeSBtb25pdG9yaW5n LCBsb2dnaW5nIGFuZA0KICAgcmVwb3J0aW5nIG9mIHRoZSBkeW5hbWljIGNoYW5nZXMsIHRvIGhl bHAgZm9yIHRyb3VibGUgc2hvb3Rpbmcgc3VjaA0KICAgZW52aXJvbm1lbnRzLg0KDQogICBUaGlz IHJlcXVpcmVtZW50IGlzIGRyaXZlbiBieSBkZW1hbmQgZm9yIGFsbCB0aGUgdXNlIGNhc2VzIGlu DQogICBmZWRlcmF0ZWQgYW5kIGFsbGllZCBlbnZpcm9ubWVudHMuDQoNCiAgIDE0LiAgVGhlcmUg aXMgYWxzbyB0aGUgY2FzZSB3aGVuIEwzVlBOcyBvcGVyYXRlIG92ZXIgSVBzZWMgVHVubmVscywN CiAgIGZvciBleGFtcGxlIFByb3ZpZGVyIEVkZ2UgKFBFKSBiYXNlZCBWUE4ncy4gIEFuIEFEVlBO IE1VU1Qgc3VwcG9ydA0KICAgTDNWUE4gYXMgYW4gYXBwbGljYXRpb24gcHJvdGVjdGVkIGJ5IHRo ZSBJUHNlYyBUdW5uZWxzLg0KDQogICBUaGlzIHJlcXVpcmVtZW50IGlzIGRyaXZlbiBieSBkZW1h bmQgZm9yIGFsbCB0aGUgdXNlIGNhc2VzIGluDQogICBmZWRlcmF0ZWQgYW5kIGFsbGllZCBlbnZp cm9ubWVudHMuDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCkhhbm5hICYg TWFucmFsICAgICAgICAgICBFeHBpcmVzIEF1Z3VzdCAyNSwgMjAxMyAgICAgICAgICAgICAgIFtQ YWdlIDExXQ0KDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICBBdXRvIERpc2NvdmVyeSBWUE4g ICAgICAgICAgICAgIEZlYnJ1YXJ5IDIwMTMNCg0KDQo1LiAgU2VjdXJpdHkgQ29uc2lkZXJhdGlv bnMNCg0KICAgVGhpcyBpcyBhIFByb2JsZW0gc3RhdGVtZW50IGFuZCByZXF1aXJlbWVudCBkb2N1 bWVudCBmb3IgdGhlIEFEVlBODQogICBzb2x1dGlvbiwgYW5kIGluIGl0c2VsZiBkb2VzIG5vdCBp bnRyb2R1Y2UgYW55IG5ldyBzZWN1cml0eSBjb25jZXJucy4NCiAgIFRoZSBzb2x1dGlvbiB0byB0 aGUgcHJvYmxlbXMgcHJlc2VudGVkIGluIHRoaXMgZHJhZnQgbWF5IGludm9sdmUNCiAgIGR5bmFt aWMgdXBkYXRlcyB0byBkYXRhYmFzZXMgZGVmaW5lZCBieSBSRkMgNDMwMSwgc3VjaCBhcyB0aGUN CiAgIFNlY3VyaXR5IFBvbGljeSBEYXRhYmFzZSAoU1BEKSBvciB0aGUgUGVlciBBdXRob3JpemF0 aW9uIERhdGFiYXNlDQogICAoUEFEKS4NCg0KICAgUkZDIDQzMDEgaXMgc2lsZW50IGFib3V0IHRo ZSB3YXkgdGhlc2UgZGF0YWJhc2VzIGFyZSBwb3B1bGF0ZWQsIGFuZA0KICAgaXQgaXMgaW1wbGll ZCB0aGF0IHRoZXNlIGRhdGFiYXNlcyBhcmUgc3RhdGljIGFuZCBwcmUtY29uZmlndXJlZCBieSBh DQogICBodW1hbi4gIEFsbG93aW5nIGR5bmFtaWMgdXBkYXRlcyB0byB0aGVzZSBkYXRhYmFzZXMg bXVzdCBiZSB0aG91Z2h0DQogICBvdXQgY2FyZWZ1bGx5LCBiZWNhdXNlIGl0IGFsbG93cyB0aGUg cHJvdG9jb2wgdG8gYWx0ZXIgdGhlIHNlY3VyaXR5DQogICBwb2xpY3kgdGhhdCB0aGUgSVBzZWMg ZW5kcG9pbnRzIGltcGxlbWVudC4NCg0KICAgT25lIG9idmlvdXMgYXR0YWNrIHRvIHdhdGNoIG91 dCBmb3IgaXMgc3RlYWxpbmcgdHJhZmZpYyB0byBhDQogICBwYXJ0aWN1bGFyIHNpdGUuICBUaGUg SVAgYWRkcmVzcyBmb3Igd3d3LmV4YW1wbGUuY29tIGlzIDE5Mi4wLjIuMTAuDQogICBJZiB3ZSBh ZGQgYW4gZW50cnkgdG8gYW4gSVBzZWMgZW5kcG9pbnQncyBTUEQgdGhhdCBzYXlzIHRoYXQgdHJh ZmZpYw0KICAgdG8gMTkyLjAuMi4xMCBpcyBwcm90ZWN0ZWQgdGhyb3VnaCBwZWVyIEd3LU1hbGxv cnksIHRoZW4gdGhpcyBhbGxvd3MNCiAgIEd3LU1hbGxvcnkgdG8gZWl0aGVyIHByZXRlbmQgdG8g YmUgd3d3LmV4YW1wbGUuY29tIG9yIHRvIHByb3h5IGFuZA0KICAgcmVhZCBhbGwgdHJhZmZpYyB0 byB0aGF0IHNpdGUuICBVcGRhdGVzIHRvIHRoaXMgZGF0YWJhc2UgcmVxdWlyZXMgYQ0KICAgY2xl YXIgdHJ1c3QgbW9kZWwuDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KSGFubmEgJiBNYW5yYWwgICAgICAgICAgIEV4cGlyZXMgQXVndXN0 IDI1LCAyMDEzICAgICAgICAgICAgICAgW1BhZ2UgMTJdDQoNCkludGVybmV0LURyYWZ0ICAgICAg ICAgICAgIEF1dG8gRGlzY292ZXJ5IFZQTiAgICAgICAgICAgICAgRmVicnVhcnkgMjAxMw0KDQoN CjYuICBJQU5BIENvbnNpZGVyYXRpb25zDQoNCiAgIE5vIGFjdGlvbnMgYXJlIHJlcXVpcmVkIGZy b20gSUFOQSBmb3IgdGhpcyBpbmZvcm1hdGlvbmFsIGRvY3VtZW50Lg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KSGFubmEgJiBNYW5yYWwgICAgICAgICAgIEV4cGlyZXMg QXVndXN0IDI1LCAyMDEzICAgICAgICAgICAgICAgW1BhZ2UgMTNdDQoNCkludGVybmV0LURyYWZ0 ICAgICAgICAgICAgIEF1dG8gRGlzY292ZXJ5IFZQTiAgICAgICAgICAgICAgRmVicnVhcnkgMjAx Mw0KDQoNCjcuICBBY2tub3dsZWRnZW1lbnRzDQoNCiAgIE1hbnkgcGVvcGxlIGhhdmUgY29udHJp YnV0ZWQgdG8gdGhlIGRldmVsb3BtZW50IG9mIHRoaXMgcHJvYmxlbQ0KICAgc3RhdGVtZW50IGFu ZCBtYW55IG1vcmUgd2lsbCBwcm9iYWJseSBkbyBzbyBiZWZvcmUgd2UgYXJlIGRvbmUgd2l0aA0K ICAgaXQuICBXaGlsZSB3ZSBjYW5ub3QgdGhhbmsgYWxsIGNvbnRyaWJ1dG9ycywgc29tZSBoYXZl IHBsYXllZCBhbg0KICAgZXNwZWNpYWxseSBwcm9taW5lbnQgcm9sZS4gIFlvYXYgTmlyLCBZYXJv biBTaGVmZmVyLCBKb3JnZSBDb3JvbmVsDQogICBNZW5kb3phLCBDaHJpcyBVbGxpb3R0LCBhbmQg Sm9obiBWZWl6YWRlcyB3cm90ZSB0aGUgZG9jdW1lbnQgdXBvbg0KICAgd2hpY2ggdGhpcyBkcmFm dCB3YXMgYmFzZWQuICBHZW9mZnJleSBIdWFuZywgU3VyZXNoIE1lbGFtLCBQcmF2ZWVuDQogICBT YXRoeWFuYXJheWFuLCBBbmRyZWFzIFN0ZWZmZW4sIEJyaWFuIFdlaXMsIGFuZCBMb3UgQmVyZ2Vy IHByb3ZpZGVkDQogICBlc3NlbnRpYWwgaW5wdXQuDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K SGFubmEgJiBNYW5yYWwgICAgICAgICAgIEV4cGlyZXMgQXVndXN0IDI1LCAyMDEzICAgICAgICAg ICAgICAgW1BhZ2UgMTRdDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgIEF1dG8gRGlzY292 ZXJ5IFZQTiAgICAgICAgICAgICAgRmVicnVhcnkgMjAxMw0KDQoNCjguICBOb3JtYXRpdmUgUmVm ZXJlbmNlcw0KDQogICBbUkZDMjExOV0gIEJyYWRuZXIsIFMuLCAiS2V5IHdvcmRzIGZvciB1c2Ug aW4gUkZDcyB0byBJbmRpY2F0ZQ0KICAgICAgICAgICAgICBSZXF1aXJlbWVudCBMZXZlbHMiLCBC Q1AgMTQsIFJGQyAyMTE5LCBNYXJjaCAxOTk3Lg0KDQogICBbUkZDNDMwMV0gIEtlbnQsIFMuIGFu ZCBLLiBTZW8sICJTZWN1cml0eSBBcmNoaXRlY3R1cmUgZm9yIHRoZQ0KICAgICAgICAgICAgICBJ bnRlcm5ldCBQcm90b2NvbCIsIFJGQyA0MzAxLCBEZWNlbWJlciAyMDA1Lg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCkhhbm5hICYgTWFucmFsICAgICAgICAgICBFeHBpcmVzIEF1Z3Vz dCAyNSwgMjAxMyAgICAgICAgICAgICAgIFtQYWdlIDE1XQ0KDQpJbnRlcm5ldC1EcmFmdCAgICAg ICAgICAgICBBdXRvIERpc2NvdmVyeSBWUE4gICAgICAgICAgICAgIEZlYnJ1YXJ5IDIwMTMNCg0K DQpBdXRob3JzJyBBZGRyZXNzZXMNCg0KICAgU3RldmUgSGFubmENCiAgIEp1bmlwZXIgTmV0d29y a3MsIEluYy4NCiAgIDExOTQgTi4gTWF0aGlsZGEgQXZlLg0KICAgU3Vubnl2YWxlLCBDQSAgOTQw ODkNCiAgIFVTQQ0KDQogICBFbWFpbDogc2hhbm5hQGp1bmlwZXIubmV0DQoNCg0KICAgVmlzaHdh cyBNYW5yYWwNCiAgIEhld2xldHQtUGFja2FyZCBDby4NCiAgIDE5MTExIFBydW5lcmlkZ2UgQXZl Lg0KICAgQ3VwZXJ0aW5vLCBDQSAgOTUxMTMNCiAgIFVTQQ0KDQogICBFbWFpbDogdmlzaHdhcy5t YW5yYWxAaHAuY29tDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQpIYW5uYSAmIE1hbnJhbCAgICAgICAgICAgRXhwaXJlcyBB dWd1c3QgMjUsIDIwMTMgICAgICAgICAgICAgICBbUGFnZSAxNl0NCg== --20cf3074afa801bc1404d630e0ac-- From internet-drafts@ietf.org Thu Feb 21 11:58:11 2013 Return-Path: X-Original-To: ipsec@ietfa.amsl.com Delivered-To: ipsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D8AD221F8EC6; Thu, 21 Feb 2013 11:58:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.552 X-Spam-Level: X-Spam-Status: No, score=-102.552 tagged_above=-999 required=5 tests=[AWL=0.047, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RPVdeiFZIgGm; Thu, 21 Feb 2013 11:58:11 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B70621F8F6C; Thu, 21 Feb 2013 11:58:10 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.40 Message-ID: <20130221195810.725.86821.idtracker@ietfa.amsl.com> Date: Thu, 21 Feb 2013 11:58:10 -0800 Cc: ipsec@ietf.org Subject: [IPsec] I-D Action: draft-ietf-ipsecme-ad-vpn-problem-04.txt X-BeenThere: ipsec@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion of IPsec protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Feb 2013 19:58:12 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the IP Security Maintenance and Extensions Wo= rking Group of the IETF. Title : Auto Discovery VPN Problem Statement and Requirements Author(s) : Steve Hanna Vishwas Manral Filename : draft-ietf-ipsecme-ad-vpn-problem-04.txt Pages : 16 Date : 2013-02-21 Abstract: This document describes the problem of enabling a large number of systems to communicate directly using IPsec to protect the traffic between them. It then expands on the requirements, for such a solution. Manual configuration of all possible tunnels is too cumbersome in many such cases. In other cases the IP address of endpoints change or the endpoints may be behind NAT gateways, making static configuration impossible. The Auto Discovery VPN solution will address these requirements. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ipsecme-ad-vpn-problem There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-ipsecme-ad-vpn-problem-04 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-ipsecme-ad-vpn-problem-04 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/